ofs | hex dump | ascii |
---|
0000 | de 12 04 95 00 00 00 00 4f 14 00 00 1c 00 00 00 94 a2 00 00 23 1b 00 00 0c 45 01 00 00 00 00 00 | ........O...........#....E...... |
0020 | 98 b1 01 00 43 00 00 00 99 b1 01 00 52 00 00 00 dd b1 01 00 42 00 00 00 30 b2 01 00 3b 00 00 00 | ....C.......R.......B...0...;... |
0040 | 73 b2 01 00 42 00 00 00 af b2 01 00 3a 00 00 00 f2 b2 01 00 24 00 00 00 2d b3 01 00 1a 00 00 00 | s...B.......:.......$...-....... |
0060 | 52 b3 01 00 66 00 00 00 6d b3 01 00 6f 00 00 00 d4 b3 01 00 89 00 00 00 44 b4 01 00 5d 01 00 00 | R...f...m...o...........D...]... |
0080 | ce b4 01 00 48 00 00 00 2c b6 01 00 46 00 00 00 75 b6 01 00 31 00 00 00 bc b6 01 00 31 00 00 00 | ....H...,...F...u...1.......1... |
00a0 | ee b6 01 00 3e 00 00 00 20 b7 01 00 23 00 00 00 5f b7 01 00 18 00 00 00 83 b7 01 00 7d 00 00 00 | ....>.......#..._...........}... |
00c0 | 9c b7 01 00 92 00 00 00 1a b8 01 00 23 00 00 00 ad b8 01 00 20 00 00 00 d1 b8 01 00 21 00 00 00 | ............#...............!... |
00e0 | f2 b8 01 00 21 00 00 00 14 b9 01 00 3f 00 00 00 36 b9 01 00 78 00 00 00 76 b9 01 00 7f 00 00 00 | ....!.......?...6...x...v....... |
0100 | ef b9 01 00 15 00 00 00 6f ba 01 00 2d 00 00 00 85 ba 01 00 27 00 00 00 b3 ba 01 00 1d 00 00 00 | ........o...-.......'........... |
0120 | db ba 01 00 5c 00 00 00 f9 ba 01 00 1c 00 00 00 56 bb 01 00 0c 00 00 00 73 bb 01 00 21 00 00 00 | ....\...........V.......s...!... |
0140 | 80 bb 01 00 4e 00 00 00 a2 bb 01 00 e0 00 00 00 f1 bb 01 00 e0 00 00 00 d2 bc 01 00 23 00 00 00 | ....N.......................#... |
0160 | b3 bd 01 00 3e 00 00 00 d7 bd 01 00 0c 00 00 00 16 be 01 00 12 00 00 00 23 be 01 00 11 00 00 00 | ....>...................#....... |
0180 | 36 be 01 00 4d 00 00 00 48 be 01 00 b4 00 00 00 96 be 01 00 6c 00 00 00 4b bf 01 00 6b 00 00 00 | 6...M...H...........l...K...k... |
01a0 | b8 bf 01 00 81 00 00 00 24 c0 01 00 3b 00 00 00 a6 c0 01 00 12 00 00 00 e2 c0 01 00 8b 00 00 00 | ........$...;................... |
01c0 | f5 c0 01 00 8c 00 00 00 81 c1 01 00 30 01 00 00 0e c2 01 00 fb 00 00 00 3f c3 01 00 fc 00 00 00 | ............0...........?....... |
01e0 | 3b c4 01 00 d5 00 00 00 38 c5 01 00 94 00 00 00 0e c6 01 00 2c 01 00 00 a3 c6 01 00 f6 01 00 00 | ;.......8...........,........... |
0200 | d0 c7 01 00 67 00 00 00 c7 c9 01 00 67 00 00 00 2f ca 01 00 da 00 00 00 97 ca 01 00 d9 00 00 00 | ....g.......g.../............... |
0220 | 72 cb 01 00 12 00 00 00 4c cc 01 00 08 00 00 00 5f cc 01 00 b8 00 00 00 68 cc 01 00 14 01 00 00 | r.......L......._.......h....... |
0240 | 21 cd 01 00 18 00 00 00 36 ce 01 00 18 00 00 00 4f ce 01 00 1b 00 00 00 68 ce 01 00 1a 00 00 00 | !.......6.......O.......h....... |
0260 | 84 ce 01 00 15 00 00 00 9f ce 01 00 0d 00 00 00 b5 ce 01 00 14 00 00 00 c3 ce 01 00 0a 00 00 00 | ................................ |
0280 | d8 ce 01 00 0b 00 00 00 e3 ce 01 00 0a 00 00 00 ef ce 01 00 0b 00 00 00 fa ce 01 00 0a 00 00 00 | ................................ |
02a0 | 06 cf 01 00 0a 00 00 00 11 cf 01 00 4d 00 00 00 1c cf 01 00 7e 03 00 00 6a cf 01 00 10 00 00 00 | ............M.......~...j....... |
02c0 | e9 d2 01 00 10 00 00 00 fa d2 01 00 a0 01 00 00 0b d3 01 00 98 01 00 00 ac d4 01 00 99 01 00 00 | ................................ |
02e0 | 45 d6 01 00 10 00 00 00 df d7 01 00 4a 00 00 00 f0 d7 01 00 16 00 00 00 3b d8 01 00 93 00 00 00 | E...........J...........;....... |
0300 | 52 d8 01 00 2f 01 00 00 e6 d8 01 00 2e 01 00 00 16 da 01 00 0b 00 00 00 45 db 01 00 2e 00 00 00 | R.../...................E....... |
0320 | 51 db 01 00 2d 00 00 00 80 db 01 00 26 00 00 00 ae db 01 00 37 00 00 00 d5 db 01 00 33 00 00 00 | Q...-.......&.......7.......3... |
0340 | 0d dc 01 00 29 00 00 00 41 dc 01 00 3b 00 00 00 6b dc 01 00 1e 00 00 00 a7 dc 01 00 3b 00 00 00 | ....)...A...;...k...........;... |
0360 | c6 dc 01 00 2e 00 00 00 02 dd 01 00 4e 00 00 00 31 dd 01 00 11 00 00 00 80 dd 01 00 06 00 00 00 | ............N...1............... |
0380 | 92 dd 01 00 11 00 00 00 99 dd 01 00 06 00 00 00 ab dd 01 00 2d 00 00 00 b2 dd 01 00 25 00 00 00 | ....................-.......%... |
03a0 | e0 dd 01 00 09 00 00 00 06 de 01 00 b9 00 00 00 10 de 01 00 0c 00 00 00 ca de 01 00 0c 00 00 00 | ................................ |
03c0 | d7 de 01 00 0c 00 00 00 e4 de 01 00 13 00 00 00 f1 de 01 00 30 00 00 00 05 df 01 00 31 00 00 00 | ....................0.......1... |
03e0 | 36 df 01 00 07 00 00 00 68 df 01 00 07 00 00 00 70 df 01 00 0d 00 00 00 78 df 01 00 14 00 00 00 | 6.......h.......p.......x....... |
0400 | 86 df 01 00 1d 00 00 00 9b df 01 00 49 00 00 00 b9 df 01 00 19 00 00 00 03 e0 01 00 0a 00 00 00 | ............I................... |
0420 | 1d e0 01 00 24 00 00 00 28 e0 01 00 27 00 00 00 4d e0 01 00 0b 00 00 00 75 e0 01 00 10 00 00 00 | ....$...(...'...M.......u....... |
0440 | 81 e0 01 00 10 00 00 00 92 e0 01 00 70 00 00 00 a3 e0 01 00 57 00 00 00 14 e1 01 00 42 00 00 00 | ............p.......W.......B... |
0460 | 6c e1 01 00 32 00 00 00 af e1 01 00 37 00 00 00 e2 e1 01 00 5a 00 00 00 1a e2 01 00 a3 00 00 00 | l...2.......7.......Z........... |
0480 | 75 e2 01 00 74 00 00 00 19 e3 01 00 35 01 00 00 8e e3 01 00 73 00 00 00 c4 e4 01 00 16 01 00 00 | u...t.......5.......s........... |
04a0 | 38 e5 01 00 7e 00 00 00 4f e6 01 00 49 00 00 00 ce e6 01 00 2f 02 00 00 18 e7 01 00 6f 00 00 00 | 8...~...O...I......./.......o... |
04c0 | 48 e9 01 00 39 01 00 00 b8 e9 01 00 dd 00 00 00 f2 ea 01 00 20 00 00 00 d0 eb 01 00 30 00 00 00 | H...9.......................0... |
04e0 | f1 eb 01 00 14 00 00 00 22 ec 01 00 2c 00 00 00 37 ec 01 00 90 00 00 00 64 ec 01 00 52 00 00 00 | ........"...,...7.......d...R... |
0500 | f5 ec 01 00 58 00 00 00 48 ed 01 00 26 00 00 00 a1 ed 01 00 58 00 00 00 c8 ed 01 00 e4 00 00 00 | ....X...H...&.......X........... |
0520 | 21 ee 01 00 68 00 00 00 06 ef 01 00 5d 00 00 00 6f ef 01 00 6c 00 00 00 cd ef 01 00 5a 00 00 00 | !...h.......]...o...l.......Z... |
0540 | 3a f0 01 00 a4 00 00 00 95 f0 01 00 eb 00 00 00 3a f1 01 00 41 00 00 00 26 f2 01 00 52 00 00 00 | :...............:...A...&...R... |
0560 | 68 f2 01 00 6d 00 00 00 bb f2 01 00 c7 00 00 00 29 f3 01 00 f1 00 00 00 f1 f3 01 00 08 00 00 00 | h...m...........)............... |
0580 | e3 f4 01 00 35 00 00 00 ec f4 01 00 32 00 00 00 22 f5 01 00 4c 00 00 00 55 f5 01 00 30 00 00 00 | ....5.......2..."...L...U...0... |
05a0 | a2 f5 01 00 38 00 00 00 d3 f5 01 00 36 00 00 00 0c f6 01 00 19 00 00 00 43 f6 01 00 3a 00 00 00 | ....8.......6...........C...:... |
05c0 | 5d f6 01 00 37 00 00 00 98 f6 01 00 7b 01 00 00 d0 f6 01 00 14 00 00 00 4c f8 01 00 16 00 00 00 | ]...7.......{...........L....... |
05e0 | 61 f8 01 00 36 00 00 00 78 f8 01 00 47 00 00 00 af f8 01 00 55 00 00 00 f7 f8 01 00 35 00 00 00 | a...6...x...G.......U.......5... |
0600 | 4d f9 01 00 29 00 00 00 83 f9 01 00 23 00 00 00 ad f9 01 00 24 00 00 00 d1 f9 01 00 af 00 00 00 | M...).......#.......$........... |
0620 | f6 f9 01 00 6c 00 00 00 a6 fa 01 00 29 00 00 00 13 fb 01 00 a7 00 00 00 3d fb 01 00 ee 00 00 00 | ....l.......)...........=....... |
0640 | e5 fb 01 00 47 00 00 00 d4 fc 01 00 47 00 00 00 1c fd 01 00 3a 00 00 00 64 fd 01 00 4b 00 00 00 | ....G.......G.......:...d...K... |
0660 | 9f fd 01 00 4d 00 00 00 eb fd 01 00 5a 01 00 00 39 fe 01 00 9f 01 00 00 94 ff 01 00 b5 00 00 00 | ....M.......Z...9............... |
0680 | 34 01 02 00 1d 00 00 00 ea 01 02 00 51 00 00 00 08 02 02 00 31 00 00 00 5a 02 02 00 32 00 00 00 | 4...........Q.......1...Z...2... |
06a0 | 8c 02 02 00 1a 00 00 00 bf 02 02 00 4c 00 00 00 da 02 02 00 80 00 00 00 27 03 02 00 25 00 00 00 | ............L...........'...%... |
06c0 | a8 03 02 00 26 00 00 00 ce 03 02 00 26 00 00 00 f5 03 02 00 40 00 00 00 1c 04 02 00 17 00 00 00 | ....&.......&.......@........... |
06e0 | 5d 04 02 00 09 00 00 00 75 04 02 00 2d 00 00 00 7f 04 02 00 3c 00 00 00 ad 04 02 00 42 00 00 00 | ].......u...-.......<.......B... |
0700 | ea 04 02 00 b1 00 00 00 2d 05 02 00 54 00 00 00 df 05 02 00 2c 00 00 00 34 06 02 00 47 00 00 00 | ........-...T.......,...4...G... |
0720 | 61 06 02 00 bc 00 00 00 a9 06 02 00 bf 00 00 00 66 07 02 00 1e 00 00 00 26 08 02 00 37 00 00 00 | a...............f.......&...7... |
0740 | 45 08 02 00 33 00 00 00 7d 08 02 00 9a 00 00 00 b1 08 02 00 01 00 00 00 4c 09 02 00 2c 00 00 00 | E...3...}...............L...,... |
0760 | 4e 09 02 00 11 00 00 00 7b 09 02 00 06 00 00 00 8d 09 02 00 06 00 00 00 94 09 02 00 06 00 00 00 | N.......{....................... |
0780 | 9b 09 02 00 06 00 00 00 a2 09 02 00 06 00 00 00 a9 09 02 00 06 00 00 00 b0 09 02 00 06 00 00 00 | ................................ |
07a0 | b7 09 02 00 06 00 00 00 be 09 02 00 06 00 00 00 c5 09 02 00 06 00 00 00 cc 09 02 00 0e 00 00 00 | ................................ |
07c0 | d3 09 02 00 01 00 00 00 e2 09 02 00 11 00 00 00 e4 09 02 00 0a 00 00 00 f6 09 02 00 1a 00 00 00 | ................................ |
07e0 | 01 0a 02 00 b7 00 00 00 1c 0a 02 00 02 00 00 00 d4 0a 02 00 0e 00 00 00 d7 0a 02 00 2d 00 00 00 | ............................-... |
0800 | e6 0a 02 00 10 00 00 00 14 0b 02 00 0f 00 00 00 25 0b 02 00 11 00 00 00 35 0b 02 00 13 00 00 00 | ................%.......5....... |
0820 | 47 0b 02 00 06 00 00 00 5b 0b 02 00 06 00 00 00 62 0b 02 00 06 00 00 00 69 0b 02 00 06 00 00 00 | G.......[.......b.......i....... |
0840 | 70 0b 02 00 02 00 00 00 77 0b 02 00 03 00 00 00 7a 0b 02 00 02 00 00 00 7e 0b 02 00 08 00 00 00 | p.......w.......z.......~....... |
0860 | 81 0b 02 00 02 00 00 00 8a 0b 02 00 02 00 00 00 8d 0b 02 00 02 00 00 00 90 0b 02 00 02 00 00 00 | ................................ |
0880 | 93 0b 02 00 02 00 00 00 96 0b 02 00 32 00 00 00 99 0b 02 00 02 00 00 00 cc 0b 02 00 02 00 00 00 | ............2................... |
08a0 | cf 0b 02 00 35 00 00 00 d2 0b 02 00 17 00 00 00 08 0c 02 00 01 00 00 00 20 0c 02 00 1a 00 00 00 | ....5........................... |
08c0 | 22 0c 02 00 80 00 00 00 3d 0c 02 00 02 00 00 00 be 0c 02 00 02 00 00 00 c1 0c 02 00 02 00 00 00 | ".......=....................... |
08e0 | c4 0c 02 00 02 00 00 00 c7 0c 02 00 11 00 00 00 ca 0c 02 00 11 00 00 00 dc 0c 02 00 03 00 00 00 | ................................ |
0900 | ee 0c 02 00 02 00 00 00 f2 0c 02 00 02 00 00 00 f5 0c 02 00 63 00 00 00 f8 0c 02 00 0f 00 00 00 | ....................c........... |
0920 | 5c 0d 02 00 01 00 00 00 6c 0d 02 00 20 00 00 00 6e 0d 02 00 02 00 00 00 8f 0d 02 00 02 00 00 00 | \.......l.......n............... |
0940 | 92 0d 02 00 02 00 00 00 95 0d 02 00 02 00 00 00 98 0d 02 00 01 00 00 00 9b 0d 02 00 1a 00 00 00 | ................................ |
0960 | 9d 0d 02 00 a2 00 00 00 b8 0d 02 00 e6 00 00 00 5b 0e 02 00 11 00 00 00 42 0f 02 00 02 00 00 00 | ................[.......B....... |
0980 | 54 0f 02 00 02 00 00 00 57 0f 02 00 02 00 00 00 5a 0f 02 00 01 00 00 00 5d 0f 02 00 11 00 00 00 | T.......W.......Z.......]....... |
09a0 | 5f 0f 02 00 c3 00 00 00 71 0f 02 00 0f 00 00 00 35 10 02 00 11 00 00 00 45 10 02 00 02 00 00 00 | _.......q.......5.......E....... |
09c0 | 57 10 02 00 01 00 00 00 5a 10 02 00 6b 00 00 00 5c 10 02 00 02 00 00 00 c8 10 02 00 3b 00 00 00 | W.......Z...k...\...........;... |
09e0 | cb 10 02 00 02 00 00 00 07 11 02 00 02 00 00 00 0a 11 02 00 0a 00 00 00 0d 11 02 00 6b 02 00 00 | ............................k... |
0a00 | 18 11 02 00 01 00 00 00 84 13 02 00 02 00 00 00 86 13 02 00 01 00 00 00 89 13 02 00 6c 00 00 00 | ............................l... |
0a20 | 8b 13 02 00 01 00 00 00 f8 13 02 00 76 00 00 00 fa 13 02 00 61 01 00 00 71 14 02 00 8b 00 00 00 | ............v.......a...q....... |
0a40 | d3 15 02 00 10 01 00 00 5f 16 02 00 36 00 00 00 70 17 02 00 22 01 00 00 a7 17 02 00 26 02 00 00 | ........_...6...p...".......&... |
0a60 | ca 18 02 00 ec 00 00 00 f1 1a 02 00 8b 00 00 00 de 1b 02 00 8c 01 00 00 6a 1c 02 00 bd 00 00 00 | ........................j....... |
0a80 | f7 1d 02 00 08 02 00 00 b5 1e 02 00 53 01 00 00 be 20 02 00 dc 00 00 00 12 22 02 00 4f 00 00 00 | ............S............"..O... |
0aa0 | ef 22 02 00 aa 03 00 00 3f 23 02 00 8b 01 00 00 ea 26 02 00 80 01 00 00 76 28 02 00 b5 01 00 00 | ."......?#.......&......v(...... |
0ac0 | f7 29 02 00 4c 02 00 00 ad 2b 02 00 61 00 00 00 fa 2d 02 00 8f 05 00 00 5c 2e 02 00 32 02 00 00 | .)..L....+..a....-......\...2... |
0ae0 | ec 33 02 00 0b 01 00 00 1f 36 02 00 3d 02 00 00 2b 37 02 00 7e 00 00 00 69 39 02 00 37 00 00 00 | .3.......6..=...+7..~...i9..7... |
0b00 | e8 39 02 00 8f 01 00 00 20 3a 02 00 01 01 00 00 b0 3b 02 00 da 01 00 00 b2 3c 02 00 3e 01 00 00 | .9.......:.......;.......<..>... |
0b20 | 8d 3e 02 00 8e 02 00 00 cc 3f 02 00 a6 00 00 00 5b 42 02 00 e3 01 00 00 02 43 02 00 af 01 00 00 | .>.......?......[B.......C...... |
0b40 | e6 44 02 00 87 01 00 00 96 46 02 00 f6 01 00 00 1e 48 02 00 17 02 00 00 15 4a 02 00 d9 01 00 00 | .D.......F.......H.......J...... |
0b60 | 2d 4c 02 00 8e 00 00 00 07 4e 02 00 57 01 00 00 96 4e 02 00 82 00 00 00 ee 4f 02 00 fb 00 00 00 | -L.......N..W....N.......O...... |
0b80 | 71 50 02 00 b4 01 00 00 6d 51 02 00 d6 01 00 00 22 53 02 00 59 01 00 00 f9 54 02 00 50 01 00 00 | qP......mQ......"S..Y....T..P... |
0ba0 | 53 56 02 00 be 01 00 00 a4 57 02 00 68 01 00 00 63 59 02 00 04 02 00 00 cc 5a 02 00 84 00 00 00 | SV.......W..h...cY.......Z...... |
0bc0 | d1 5c 02 00 f9 00 00 00 56 5d 02 00 a4 00 00 00 50 5e 02 00 43 00 00 00 f5 5e 02 00 5c 00 00 00 | .\......V]......P^..C....^..\... |
0be0 | 39 5f 02 00 52 00 00 00 96 5f 02 00 46 00 00 00 e9 5f 02 00 50 00 00 00 30 60 02 00 48 00 00 00 | 9_..R...._..F...._..P...0`..H... |
0c00 | 81 60 02 00 4c 00 00 00 ca 60 02 00 47 00 00 00 17 61 02 00 48 00 00 00 5f 61 02 00 41 00 00 00 | .`..L....`..G....a..H..._a..A... |
0c20 | a8 61 02 00 44 00 00 00 ea 61 02 00 19 00 00 00 2f 62 02 00 29 00 00 00 49 62 02 00 12 00 00 00 | .a..D....a....../b..)...Ib...... |
0c40 | 73 62 02 00 3d 00 00 00 86 62 02 00 13 00 00 00 c4 62 02 00 3f 00 00 00 d8 62 02 00 13 00 00 00 | sb..=....b.......b..?....b...... |
0c60 | 18 63 02 00 3f 00 00 00 2c 63 02 00 15 00 00 00 6c 63 02 00 43 00 00 00 82 63 02 00 15 00 00 00 | .c..?...,c......lc..C....c...... |
0c80 | c6 63 02 00 43 00 00 00 dc 63 02 00 31 01 00 00 20 64 02 00 11 00 00 00 52 65 02 00 80 01 00 00 | .c..C....c..1....d......Re...... |
0ca0 | 64 65 02 00 41 01 00 00 e5 66 02 00 19 00 00 00 27 68 02 00 37 00 00 00 41 68 02 00 2a 00 00 00 | de..A....f......'h..7...Ah..*... |
0cc0 | 79 68 02 00 39 00 00 00 a4 68 02 00 29 00 00 00 de 68 02 00 07 00 00 00 08 69 02 00 4d 00 00 00 | yh..9....h..)....h.......i..M... |
0ce0 | 10 69 02 00 b6 00 00 00 5e 69 02 00 40 00 00 00 15 6a 02 00 2f 00 00 00 56 6a 02 00 32 00 00 00 | .i......^i..@....j../...Vj..2... |
0d00 | 86 6a 02 00 35 00 00 00 b9 6a 02 00 1d 00 00 00 ef 6a 02 00 27 00 00 00 0d 6b 02 00 1f 00 00 00 | .j..5....j.......j..'....k...... |
0d20 | 35 6b 02 00 36 00 00 00 55 6b 02 00 39 00 00 00 8c 6b 02 00 18 01 00 00 c6 6b 02 00 1e 00 00 00 | 5k..6...Uk..9....k.......k...... |
0d40 | df 6c 02 00 5c 00 00 00 fe 6c 02 00 37 01 00 00 5b 6d 02 00 cb 01 00 00 93 6e 02 00 ab 01 00 00 | .l..\....l..7...[m.......n...... |
0d60 | 5f 70 02 00 59 01 00 00 0b 72 02 00 3a 01 00 00 65 73 02 00 2d 00 00 00 a0 74 02 00 3a 00 00 00 | _p..Y....r..:...es..-....t..:... |
0d80 | ce 74 02 00 6d 00 00 00 09 75 02 00 77 00 00 00 77 75 02 00 8b 00 00 00 ef 75 02 00 cc 01 00 00 | .t..m....u..w...wu.......u...... |
0da0 | 7b 76 02 00 ba 00 00 00 48 78 02 00 16 00 00 00 03 79 02 00 33 00 00 00 1a 79 02 00 28 00 00 00 | {v......Hx.......y..3....y..(... |
0dc0 | 4e 79 02 00 77 01 00 00 77 79 02 00 51 00 00 00 ef 7a 02 00 74 00 00 00 41 7b 02 00 26 00 00 00 | Ny..w...wy..Q....z..t...A{..&... |
0de0 | b6 7b 02 00 85 00 00 00 dd 7b 02 00 8b 00 00 00 63 7c 02 00 cf 00 00 00 ef 7c 02 00 34 01 00 00 | .{.......{......c|.......|..4... |
0e00 | bf 7d 02 00 2f 00 00 00 f4 7e 02 00 72 00 00 00 24 7f 02 00 65 00 00 00 97 7f 02 00 31 00 00 00 | .}../....~..r...$...e.......1... |
0e20 | fd 7f 02 00 01 01 00 00 2f 80 02 00 33 00 00 00 31 81 02 00 3c 00 00 00 65 81 02 00 93 01 00 00 | ......../...3...1...<...e....... |
0e40 | a2 81 02 00 93 01 00 00 36 83 02 00 e4 01 00 00 ca 84 02 00 63 00 00 00 af 86 02 00 d4 00 00 00 | ........6...........c........... |
0e60 | 13 87 02 00 ed 00 00 00 e8 87 02 00 78 00 00 00 d6 88 02 00 90 00 00 00 4f 89 02 00 c0 01 00 00 | ............x...........O....... |
0e80 | e0 89 02 00 a2 00 00 00 a1 8b 02 00 88 00 00 00 44 8c 02 00 4e 00 00 00 cd 8c 02 00 58 00 00 00 | ................D...N.......X... |
0ea0 | 1c 8d 02 00 08 01 00 00 75 8d 02 00 65 00 00 00 7e 8e 02 00 7e 00 00 00 e4 8e 02 00 48 01 00 00 | ........u...e...~...~.......H... |
0ec0 | 63 8f 02 00 35 01 00 00 ac 90 02 00 90 00 00 00 e2 91 02 00 a3 00 00 00 73 92 02 00 02 01 00 00 | c...5...................s....... |
0ee0 | 17 93 02 00 3f 00 00 00 1a 94 02 00 24 00 00 00 5a 94 02 00 22 01 00 00 7f 94 02 00 1c 00 00 00 | ....?.......$...Z..."........... |
0f00 | a2 95 02 00 2c 00 00 00 bf 95 02 00 43 00 00 00 ec 95 02 00 c8 00 00 00 30 96 02 00 b8 00 00 00 | ....,.......C...........0....... |
0f20 | f9 96 02 00 b1 01 00 00 b2 97 02 00 4f 00 00 00 64 99 02 00 37 00 00 00 b4 99 02 00 26 00 00 00 | ............O...d...7.......&... |
0f40 | ec 99 02 00 0a 02 00 00 13 9a 02 00 62 00 00 00 1e 9c 02 00 41 00 00 00 81 9c 02 00 3d 00 00 00 | ............b.......A.......=... |
0f60 | c3 9c 02 00 5e 00 00 00 01 9d 02 00 35 00 00 00 60 9d 02 00 77 00 00 00 96 9d 02 00 04 00 00 00 | ....^.......5...`...w........... |
0f80 | 0e 9e 02 00 1c 00 00 00 13 9e 02 00 03 00 00 00 30 9e 02 00 03 00 00 00 34 9e 02 00 5c 00 00 00 | ................0.......4...\... |
0fa0 | 38 9e 02 00 a7 01 00 00 95 9e 02 00 0c 00 00 00 3d a0 02 00 a8 00 00 00 4a a0 02 00 70 00 00 00 | 8...............=.......J...p... |
0fc0 | f3 a0 02 00 3c 00 00 00 64 a1 02 00 33 00 00 00 a1 a1 02 00 12 00 00 00 d5 a1 02 00 0c 00 00 00 | ....<...d...3................... |
0fe0 | e8 a1 02 00 79 00 00 00 f5 a1 02 00 45 00 00 00 6f a2 02 00 07 00 00 00 b5 a2 02 00 10 00 00 00 | ....y.......E...o............... |
1000 | bd a2 02 00 22 00 00 00 ce a2 02 00 68 00 00 00 f1 a2 02 00 41 00 00 00 5a a3 02 00 40 00 00 00 | ....".......h.......A...Z...@... |
1020 | 9c a3 02 00 23 00 00 00 dd a3 02 00 c5 00 00 00 01 a4 02 00 9f 00 00 00 c7 a4 02 00 3c 00 00 00 | ....#.......................<... |
1040 | 67 a5 02 00 35 00 00 00 a4 a5 02 00 4e 00 00 00 da a5 02 00 86 00 00 00 29 a6 02 00 68 00 00 00 | g...5.......N...........)...h... |
1060 | b0 a6 02 00 63 00 00 00 19 a7 02 00 2f 00 00 00 7d a7 02 00 48 00 00 00 ad a7 02 00 a3 00 00 00 | ....c......./...}...H........... |
1080 | f6 a7 02 00 b8 00 00 00 9a a8 02 00 81 00 00 00 53 a9 02 00 46 00 00 00 d5 a9 02 00 1c 00 00 00 | ................S...F........... |
10a0 | 1c aa 02 00 7d 00 00 00 39 aa 02 00 60 00 00 00 b7 aa 02 00 ee 00 00 00 18 ab 02 00 09 01 00 00 | ....}...9...`................... |
10c0 | 07 ac 02 00 68 00 00 00 11 ad 02 00 07 00 00 00 7a ad 02 00 12 00 00 00 82 ad 02 00 10 00 00 00 | ....h...........z............... |
10e0 | 95 ad 02 00 0e 00 00 00 a6 ad 02 00 42 00 00 00 b5 ad 02 00 0d 00 00 00 f8 ad 02 00 24 00 00 00 | ............B...............$... |
1100 | 06 ae 02 00 c6 00 00 00 2b ae 02 00 ba 00 00 00 f2 ae 02 00 17 00 00 00 ad af 02 00 1a 00 00 00 | ........+....................... |
1120 | c5 af 02 00 10 00 00 00 e0 af 02 00 c7 00 00 00 f1 af 02 00 1a 00 00 00 b9 b0 02 00 3c 00 00 00 | ............................<... |
1140 | d4 b0 02 00 1a 00 00 00 11 b1 02 00 14 00 00 00 2c b1 02 00 7e 00 00 00 41 b1 02 00 74 00 00 00 | ................,...~...A...t... |
1160 | c0 b1 02 00 26 01 00 00 35 b2 02 00 40 01 00 00 5c b3 02 00 74 00 00 00 9d b4 02 00 63 01 00 00 | ....&...5...@...\...t.......c... |
1180 | 12 b5 02 00 2e 00 00 00 76 b6 02 00 05 00 00 00 a5 b6 02 00 09 00 00 00 ab b6 02 00 07 00 00 00 | ........v....................... |
11a0 | b5 b6 02 00 66 00 00 00 bd b6 02 00 4f 00 00 00 24 b7 02 00 9a 00 00 00 74 b7 02 00 b1 00 00 00 | ....f.......O...$.......t....... |
11c0 | 0f b8 02 00 0e 00 00 00 c1 b8 02 00 67 00 00 00 d0 b8 02 00 ae 00 00 00 38 b9 02 00 89 00 00 00 | ............g...........8....... |
11e0 | e7 b9 02 00 28 00 00 00 71 ba 02 00 3a 00 00 00 9a ba 02 00 ac 00 00 00 d5 ba 02 00 74 00 00 00 | ....(...q...:...............t... |
1200 | 82 bb 02 00 97 00 00 00 f7 bb 02 00 3a 00 00 00 8f bc 02 00 40 00 00 00 ca bc 02 00 27 00 00 00 | ............:.......@.......'... |
1220 | 0b bd 02 00 29 00 00 00 33 bd 02 00 21 00 00 00 5d bd 02 00 08 01 00 00 7f bd 02 00 61 01 00 00 | ....)...3...!...]...........a... |
1240 | 88 be 02 00 2c 00 00 00 ea bf 02 00 2e 00 00 00 17 c0 02 00 80 00 00 00 46 c0 02 00 7b 00 00 00 | ....,...................F...{... |
1260 | c7 c0 02 00 30 00 00 00 43 c1 02 00 c8 00 00 00 74 c1 02 00 c8 00 00 00 3d c2 02 00 9c 00 00 00 | ....0...C.......t.......=....... |
1280 | 06 c3 02 00 40 00 00 00 a3 c3 02 00 b7 00 00 00 e4 c3 02 00 b7 00 00 00 9c c4 02 00 5a 00 00 00 | ....@.......................Z... |
12a0 | 54 c5 02 00 c4 00 00 00 af c5 02 00 6e 00 00 00 74 c6 02 00 a5 00 00 00 e3 c6 02 00 c3 00 00 00 | T...........n...t............... |
12c0 | 89 c7 02 00 18 00 00 00 4d c8 02 00 54 00 00 00 66 c8 02 00 89 00 00 00 bb c8 02 00 6b 00 00 00 | ........M...T...f...........k... |
12e0 | 45 c9 02 00 3d 00 00 00 b1 c9 02 00 91 00 00 00 ef c9 02 00 81 00 00 00 81 ca 02 00 39 00 00 00 | E...=.......................9... |
1300 | 03 cb 02 00 3e 01 00 00 3d cb 02 00 58 00 00 00 7c cc 02 00 c2 00 00 00 d5 cc 02 00 6a 00 00 00 | ....>...=...X...|...........j... |
1320 | 98 cd 02 00 85 02 00 00 03 ce 02 00 cb 00 00 00 89 d0 02 00 40 00 00 00 55 d1 02 00 5f 00 00 00 | ....................@...U..._... |
1340 | 96 d1 02 00 9e 01 00 00 f6 d1 02 00 9f 01 00 00 95 d3 02 00 84 01 00 00 35 d5 02 00 bb 00 00 00 | ........................5....... |
1360 | ba d6 02 00 56 00 00 00 76 d7 02 00 39 00 00 00 cd d7 02 00 1d 00 00 00 07 d8 02 00 4b 00 00 00 | ....V...v...9...............K... |
1380 | 25 d8 02 00 0b 00 00 00 71 d8 02 00 02 01 00 00 7d d8 02 00 30 00 00 00 80 d9 02 00 5d 00 00 00 | %.......q.......}...0.......]... |
13a0 | b1 d9 02 00 5d 00 00 00 0f da 02 00 1a 00 00 00 6d da 02 00 0d 00 00 00 88 da 02 00 3b 00 00 00 | ....]...........m...........;... |
13c0 | 96 da 02 00 15 00 00 00 d2 da 02 00 34 00 00 00 e8 da 02 00 2c 00 00 00 1d db 02 00 2f 00 00 00 | ............4.......,......./... |
13e0 | 4a db 02 00 c8 00 00 00 7a db 02 00 43 01 00 00 43 dc 02 00 9c 00 00 00 87 dd 02 00 3e 00 00 00 | J.......z...C...C...........>... |
1400 | 24 de 02 00 ad 00 00 00 63 de 02 00 aa 00 00 00 11 df 02 00 44 00 00 00 bc df 02 00 1d 00 00 00 | $.......c...........D........... |
1420 | 01 e0 02 00 23 00 00 00 1f e0 02 00 19 00 00 00 43 e0 02 00 12 00 00 00 5d e0 02 00 43 00 00 00 | ....#...........C.......]...C... |
1440 | 70 e0 02 00 31 00 00 00 b4 e0 02 00 0a 00 00 00 e6 e0 02 00 08 00 00 00 f1 e0 02 00 28 01 00 00 | p...1.......................(... |
1460 | fa e0 02 00 81 00 00 00 23 e2 02 00 aa 00 00 00 a5 e2 02 00 d5 00 00 00 50 e3 02 00 a5 01 00 00 | ........#...............P....... |
1480 | 26 e4 02 00 71 00 00 00 cc e5 02 00 78 00 00 00 3e e6 02 00 99 00 00 00 b7 e6 02 00 1d 01 00 00 | &...q.......x...>............... |
14a0 | 51 e7 02 00 49 01 00 00 6f e8 02 00 18 01 00 00 b9 e9 02 00 1a 01 00 00 d2 ea 02 00 39 01 00 00 | Q...I...o...................9... |
14c0 | ed eb 02 00 5f 00 00 00 27 ed 02 00 32 01 00 00 87 ed 02 00 82 00 00 00 ba ee 02 00 a2 00 00 00 | ...._...'...2................... |
14e0 | 3d ef 02 00 93 00 00 00 e0 ef 02 00 af 00 00 00 74 f0 02 00 7e 00 00 00 24 f1 02 00 47 00 00 00 | =...............t...~...$...G... |
1500 | a3 f1 02 00 83 00 00 00 eb f1 02 00 6e 00 00 00 6f f2 02 00 91 00 00 00 de f2 02 00 59 00 00 00 | ............n...o...........Y... |
1520 | 70 f3 02 00 96 00 00 00 ca f3 02 00 8e 00 00 00 61 f4 02 00 c1 00 00 00 f0 f4 02 00 59 01 00 00 | p...............a...........Y... |
1540 | b2 f5 02 00 23 00 00 00 0c f7 02 00 43 00 00 00 30 f7 02 00 27 00 00 00 74 f7 02 00 2d 00 00 00 | ....#.......C...0...'...t...-... |
1560 | 9c f7 02 00 3b 00 00 00 ca f7 02 00 6e 00 00 00 06 f8 02 00 82 00 00 00 75 f8 02 00 68 00 00 00 | ....;.......n...........u...h... |
1580 | f8 f8 02 00 19 00 00 00 61 f9 02 00 19 00 00 00 7b f9 02 00 19 00 00 00 95 f9 02 00 19 00 00 00 | ........a.......{............... |
15a0 | af f9 02 00 19 00 00 00 c9 f9 02 00 19 00 00 00 e3 f9 02 00 19 00 00 00 fd f9 02 00 19 00 00 00 | ................................ |
15c0 | 17 fa 02 00 19 00 00 00 31 fa 02 00 19 00 00 00 4b fa 02 00 19 00 00 00 65 fa 02 00 19 00 00 00 | ........1.......K.......e....... |
15e0 | 7f fa 02 00 7b 00 00 00 99 fa 02 00 c2 00 00 00 15 fb 02 00 41 00 00 00 d8 fb 02 00 c0 00 00 00 | ....{...............A........... |
1600 | 1a fc 02 00 68 00 00 00 db fc 02 00 0e 00 00 00 44 fd 02 00 16 00 00 00 53 fd 02 00 1f 00 00 00 | ....h...........D.......S....... |
1620 | 6a fd 02 00 25 00 00 00 8a fd 02 00 29 00 00 00 b0 fd 02 00 24 00 00 00 da fd 02 00 e6 00 00 00 | j...%.......).......$........... |
1640 | ff fd 02 00 20 00 00 00 e6 fe 02 00 14 00 00 00 07 ff 02 00 45 00 00 00 1c ff 02 00 13 00 00 00 | ....................E........... |
1660 | 62 ff 02 00 13 00 00 00 76 ff 02 00 17 00 00 00 8a ff 02 00 17 00 00 00 a2 ff 02 00 e7 00 00 00 | b.......v....................... |
1680 | ba ff 02 00 3d 00 00 00 a2 00 03 00 12 00 00 00 e0 00 03 00 14 00 00 00 f3 00 03 00 13 00 00 00 | ....=........................... |
16a0 | 08 01 03 00 03 00 00 00 1c 01 03 00 1b 00 00 00 20 01 03 00 59 00 00 00 3c 01 03 00 03 00 00 00 | ....................Y...<....... |
16c0 | 96 01 03 00 14 00 00 00 9a 01 03 00 14 00 00 00 af 01 03 00 1d 00 00 00 c4 01 03 00 1a 00 00 00 | ................................ |
16e0 | e2 01 03 00 0b 00 00 00 fd 01 03 00 18 00 00 00 09 02 03 00 19 00 00 00 22 02 03 00 44 00 00 00 | ........................"...D... |
1700 | 3c 02 03 00 1a 00 00 00 81 02 03 00 1f 00 00 00 9c 02 03 00 1c 00 00 00 bc 02 03 00 20 00 00 00 | <............................... |
1720 | d9 02 03 00 65 01 00 00 fa 02 03 00 54 01 00 00 60 04 03 00 c3 02 00 00 b5 05 03 00 05 00 00 00 | ....e.......T...`............... |
1740 | 79 08 03 00 67 00 00 00 7f 08 03 00 81 01 00 00 e7 08 03 00 07 00 00 00 69 0a 03 00 89 00 00 00 | y...g...................i....... |
1760 | 71 0a 03 00 13 00 00 00 fb 0a 03 00 0f 00 00 00 0f 0b 03 00 1e 00 00 00 1f 0b 03 00 21 00 00 00 | q...........................!... |
1780 | 3e 0b 03 00 11 00 00 00 60 0b 03 00 21 00 00 00 72 0b 03 00 4c 00 00 00 94 0b 03 00 50 00 00 00 | >.......`...!...r...L.......P... |
17a0 | e1 0b 03 00 69 00 00 00 32 0c 03 00 55 00 00 00 9c 0c 03 00 55 00 00 00 f2 0c 03 00 17 00 00 00 | ....i...2...U.......U........... |
17c0 | 48 0d 03 00 0e 00 00 00 60 0d 03 00 0e 00 00 00 6f 0d 03 00 3f 00 00 00 7e 0d 03 00 36 00 00 00 | H.......`.......o...?...~...6... |
17e0 | be 0d 03 00 0b 00 00 00 f5 0d 03 00 d1 00 00 00 01 0e 03 00 19 00 00 00 d3 0e 03 00 87 00 00 00 | ................................ |
1800 | ed 0e 03 00 89 00 00 00 75 0f 03 00 db 00 00 00 ff 0f 03 00 55 00 00 00 db 10 03 00 78 00 00 00 | ........u...........U.......x... |
1820 | 31 11 03 00 75 00 00 00 aa 11 03 00 27 00 00 00 20 12 03 00 1c 00 00 00 48 12 03 00 7d 01 00 00 | 1...u.......'...........H...}... |
1840 | 65 12 03 00 11 00 00 00 e3 13 03 00 0c 00 00 00 f5 13 03 00 2f 00 00 00 02 14 03 00 3f 00 00 00 | e.................../.......?... |
1860 | 32 14 03 00 63 00 00 00 72 14 03 00 09 00 00 00 d6 14 03 00 5d 00 00 00 e0 14 03 00 58 00 00 00 | 2...c...r...........].......X... |
1880 | 3e 15 03 00 59 00 00 00 97 15 03 00 34 00 00 00 f1 15 03 00 17 00 00 00 26 16 03 00 0c 00 00 00 | >...Y.......4...........&....... |
18a0 | 3e 16 03 00 25 00 00 00 4b 16 03 00 13 00 00 00 71 16 03 00 29 00 00 00 85 16 03 00 83 00 00 00 | >...%...K.......q...)........... |
18c0 | af 16 03 00 6e 00 00 00 33 17 03 00 31 00 00 00 a2 17 03 00 06 00 00 00 d4 17 03 00 1d 00 00 00 | ....n...3...1................... |
18e0 | db 17 03 00 0e 00 00 00 f9 17 03 00 0c 00 00 00 08 18 03 00 3f 00 00 00 15 18 03 00 37 00 00 00 | ....................?.......7... |
1900 | 55 18 03 00 07 00 00 00 8d 18 03 00 0b 00 00 00 95 18 03 00 0e 00 00 00 a1 18 03 00 d0 00 00 00 | U............................... |
1920 | b0 18 03 00 9c 00 00 00 81 19 03 00 51 00 00 00 1e 1a 03 00 9c 00 00 00 70 1a 03 00 ef 00 00 00 | ............Q...........p....... |
1940 | 0d 1b 03 00 8d 01 00 00 fd 1b 03 00 37 01 00 00 8b 1d 03 00 38 01 00 00 c3 1e 03 00 ce 00 00 00 | ............7.......8........... |
1960 | fc 1f 03 00 d9 00 00 00 cb 20 03 00 3b 00 00 00 a5 21 03 00 63 00 00 00 e1 21 03 00 78 00 00 00 | ............;....!..c....!..x... |
1980 | 45 22 03 00 9d 00 00 00 be 22 03 00 97 00 00 00 5c 23 03 00 25 00 00 00 f4 23 03 00 a1 00 00 00 | E"......."......\#..%....#...... |
19a0 | 1a 24 03 00 3a 01 00 00 bc 24 03 00 16 00 00 00 f7 25 03 00 1a 00 00 00 0e 26 03 00 04 00 00 00 | .$..:....$.......%.......&...... |
19c0 | 29 26 03 00 0a 00 00 00 2e 26 03 00 27 00 00 00 39 26 03 00 16 00 00 00 61 26 03 00 c8 00 00 00 | )&.......&..'...9&......a&...... |
19e0 | 78 26 03 00 1a 00 00 00 41 27 03 00 2a 00 00 00 5c 27 03 00 0c 00 00 00 87 27 03 00 30 00 00 00 | x&......A'..*...\'.......'..0... |
1a00 | 94 27 03 00 2c 00 00 00 c5 27 03 00 0b 01 00 00 f2 27 03 00 76 00 00 00 fe 28 03 00 bc 00 00 00 | .'..,....'.......'..v....(...... |
1a20 | 75 29 03 00 91 00 00 00 32 2a 03 00 3e 00 00 00 c4 2a 03 00 0c 00 00 00 03 2b 03 00 46 00 00 00 | u)......2*..>....*.......+..F... |
1a40 | 10 2b 03 00 06 00 00 00 57 2b 03 00 14 00 00 00 5e 2b 03 00 06 00 00 00 73 2b 03 00 9f 00 00 00 | .+......W+......^+......s+...... |
1a60 | 7a 2b 03 00 0e 00 00 00 1a 2c 03 00 2d 00 00 00 29 2c 03 00 1b 00 00 00 57 2c 03 00 0f 00 00 00 | z+.......,..-...),......W,...... |
1a80 | 73 2c 03 00 07 00 00 00 83 2c 03 00 16 00 00 00 8b 2c 03 00 1d 00 00 00 a2 2c 03 00 06 00 00 00 | s,.......,.......,.......,...... |
1aa0 | c0 2c 03 00 14 00 00 00 c7 2c 03 00 15 00 00 00 dc 2c 03 00 14 00 00 00 f2 2c 03 00 1f 00 00 00 | .,.......,.......,.......,...... |
1ac0 | 07 2d 03 00 3d 00 00 00 27 2d 03 00 0b 00 00 00 65 2d 03 00 14 00 00 00 71 2d 03 00 12 00 00 00 | .-..=...'-......e-......q-...... |
1ae0 | 86 2d 03 00 14 00 00 00 99 2d 03 00 6c 00 00 00 ae 2d 03 00 07 00 00 00 1b 2e 03 00 6a 00 00 00 | .-.......-..l....-..........j... |
1b00 | 23 2e 03 00 98 00 00 00 8e 2e 03 00 0c 00 00 00 27 2f 03 00 96 00 00 00 34 2f 03 00 3e 00 00 00 | #...............'/......4/..>... |
1b20 | cb 2f 03 00 77 00 00 00 0a 30 03 00 38 00 00 00 82 30 03 00 08 00 00 00 bb 30 03 00 40 00 00 00 | ./..w....0..8....0.......0..@... |
1b40 | c4 30 03 00 1e 00 00 00 05 31 03 00 11 00 00 00 24 31 03 00 1b 00 00 00 36 31 03 00 58 00 00 00 | .0.......1......$1......61..X... |
1b60 | 52 31 03 00 0d 00 00 00 ab 31 03 00 15 00 00 00 b9 31 03 00 16 00 00 00 cf 31 03 00 13 00 00 00 | R1.......1.......1.......1...... |
1b80 | e6 31 03 00 15 00 00 00 fa 31 03 00 2f 00 00 00 10 32 03 00 0b 01 00 00 40 32 03 00 af 00 00 00 | .1.......1../....2......@2...... |
1ba0 | 4c 33 03 00 16 00 00 00 fc 33 03 00 59 00 00 00 13 34 03 00 26 00 00 00 6d 34 03 00 20 00 00 00 | L3.......3..Y....4..&...m4...... |
1bc0 | 94 34 03 00 25 00 00 00 b5 34 03 00 a5 00 00 00 db 34 03 00 09 00 00 00 81 35 03 00 94 00 00 00 | .4..%....4.......4.......5...... |
1be0 | 8b 35 03 00 0d 00 00 00 20 36 03 00 51 00 00 00 2e 36 03 00 25 00 00 00 80 36 03 00 37 00 00 00 | .5.......6..Q....6..%....6..7... |
1c00 | a6 36 03 00 c0 00 00 00 de 36 03 00 71 00 00 00 9f 37 03 00 24 00 00 00 11 38 03 00 52 00 00 00 | .6.......6..q....7..$....8..R... |
1c20 | 36 38 03 00 4e 00 00 00 89 38 03 00 68 00 00 00 d8 38 03 00 55 00 00 00 41 39 03 00 22 00 00 00 | 68..N....8..h....8..U...A9.."... |
1c40 | 97 39 03 00 22 00 00 00 ba 39 03 00 4c 00 00 00 dd 39 03 00 57 00 00 00 2a 3a 03 00 75 00 00 00 | .9.."....9..L....9..W...*:..u... |
1c60 | 82 3a 03 00 70 00 00 00 f8 3a 03 00 75 00 00 00 69 3b 03 00 a4 00 00 00 df 3b 03 00 37 00 00 00 | .:..p....:..u...i;.......;..7... |
1c80 | 84 3c 03 00 fc 00 00 00 bc 3c 03 00 bb 00 00 00 b9 3d 03 00 7a 00 00 00 75 3e 03 00 77 00 00 00 | .<.......<.......=..z...u>..w... |
1ca0 | f0 3e 03 00 71 00 00 00 68 3f 03 00 aa 00 00 00 da 3f 03 00 3a 00 00 00 85 40 03 00 2b 00 00 00 | .>..q...h?.......?..:....@..+... |
1cc0 | c0 40 03 00 48 00 00 00 ec 40 03 00 3a 00 00 00 35 41 03 00 60 00 00 00 70 41 03 00 62 00 00 00 | .@..H....@..:...5A..`...pA..b... |
1ce0 | d1 41 03 00 26 00 00 00 34 42 03 00 2b 00 00 00 5b 42 03 00 43 00 00 00 87 42 03 00 2b 00 00 00 | .A..&...4B..+...[B..C....B..+... |
1d00 | cb 42 03 00 5b 00 00 00 f7 42 03 00 61 00 00 00 53 43 03 00 27 00 00 00 b5 43 03 00 5b 00 00 00 | .B..[....B..a...SC..'....C..[... |
1d20 | dd 43 03 00 2e 00 00 00 39 44 03 00 47 00 00 00 68 44 03 00 9a 00 00 00 b0 44 03 00 31 00 00 00 | .C......9D..G...hD.......D..1... |
1d40 | 4b 45 03 00 31 00 00 00 7d 45 03 00 41 00 00 00 af 45 03 00 84 00 00 00 f1 45 03 00 5f 00 00 00 | KE..1...}E..A....E.......E.._... |
1d60 | 76 46 03 00 5f 00 00 00 d6 46 03 00 3c 00 00 00 36 47 03 00 39 00 00 00 73 47 03 00 89 00 00 00 | vF.._....F..<...6G..9...sG...... |
1d80 | ad 47 03 00 58 00 00 00 37 48 03 00 2c 00 00 00 90 48 03 00 2b 00 00 00 bd 48 03 00 64 00 00 00 | .G..X...7H..,....H..+....H..d... |
1da0 | e9 48 03 00 65 00 00 00 4e 49 03 00 2f 00 00 00 b4 49 03 00 4b 00 00 00 e4 49 03 00 5f 00 00 00 | .H..e...NI../....I..K....I.._... |
1dc0 | 30 4a 03 00 42 00 00 00 90 4a 03 00 70 00 00 00 d3 4a 03 00 64 00 00 00 44 4b 03 00 2a 00 00 00 | 0J..B....J..p....J..d...DK..*... |
1de0 | a9 4b 03 00 3b 00 00 00 d4 4b 03 00 2b 00 00 00 10 4c 03 00 34 00 00 00 3c 4c 03 00 42 00 00 00 | .K..;....K..+....L..4...<L..B... |
1e00 | 71 4c 03 00 99 00 00 00 b4 4c 03 00 3f 00 00 00 4e 4d 03 00 3f 00 00 00 8e 4d 03 00 50 00 00 00 | qL.......L..?...NM..?....M..P... |
1e20 | ce 4d 03 00 b2 00 00 00 1f 4e 03 00 5d 00 00 00 d2 4e 03 00 49 00 00 00 30 4f 03 00 49 00 00 00 | .M.......N..]....N..I...0O..I... |
1e40 | 7a 4f 03 00 3c 00 00 00 c4 4f 03 00 1f 00 00 00 01 50 03 00 59 00 00 00 21 50 03 00 95 00 00 00 | zO..<....O.......P..Y...!P...... |
1e60 | 7b 50 03 00 38 00 00 00 11 51 03 00 10 00 00 00 4a 51 03 00 92 00 00 00 5b 51 03 00 17 00 00 00 | {P..8....Q......JQ......[Q...... |
1e80 | ee 51 03 00 11 00 00 00 06 52 03 00 17 00 00 00 18 52 03 00 25 00 00 00 30 52 03 00 18 00 00 00 | .Q.......R.......R..%...0R...... |
1ea0 | 56 52 03 00 17 00 00 00 6f 52 03 00 1d 00 00 00 87 52 03 00 21 00 00 00 a5 52 03 00 17 00 00 00 | VR......oR.......R..!....R...... |
1ec0 | c7 52 03 00 17 00 00 00 df 52 03 00 b2 00 00 00 f7 52 03 00 42 00 00 00 aa 53 03 00 12 00 00 00 | .R.......R.......R..B....S...... |
1ee0 | ed 53 03 00 b7 00 00 00 00 54 03 00 44 01 00 00 b8 54 03 00 3c 01 00 00 fd 55 03 00 c4 01 00 00 | .S.......T..D....T..<....U...... |
1f00 | 3a 57 03 00 09 00 00 00 ff 58 03 00 0e 00 00 00 09 59 03 00 16 00 00 00 18 59 03 00 16 00 00 00 | :W.......X.......Y.......Y...... |
1f20 | 2f 59 03 00 0d 00 00 00 46 59 03 00 07 00 00 00 54 59 03 00 0e 00 00 00 5c 59 03 00 30 00 00 00 | /Y......FY......TY......\Y..0... |
1f40 | 6b 59 03 00 09 00 00 00 9c 59 03 00 12 00 00 00 a6 59 03 00 12 00 00 00 b9 59 03 00 11 00 00 00 | kY.......Y.......Y.......Y...... |
1f60 | cc 59 03 00 49 00 00 00 de 59 03 00 49 00 00 00 28 5a 03 00 c9 00 00 00 72 5a 03 00 b3 00 00 00 | .Y..I....Y..I...(Z......rZ...... |
1f80 | 3c 5b 03 00 36 00 00 00 f0 5b 03 00 39 00 00 00 27 5c 03 00 81 00 00 00 61 5c 03 00 82 00 00 00 | <[..6....[..9...'\......a\...... |
1fa0 | e3 5c 03 00 92 00 00 00 66 5d 03 00 64 00 00 00 f9 5d 03 00 8a 00 00 00 5e 5e 03 00 15 00 00 00 | .\......f]..d....]......^^...... |
1fc0 | e9 5e 03 00 5f 00 00 00 ff 5e 03 00 44 00 00 00 5f 5f 03 00 69 00 00 00 a4 5f 03 00 92 00 00 00 | .^.._....^..D...__..i...._...... |
1fe0 | 0e 60 03 00 75 00 00 00 a1 60 03 00 66 00 00 00 17 61 03 00 4e 00 00 00 7e 61 03 00 8c 00 00 00 | .`..u....`..f....a..N...~a...... |
2000 | cd 61 03 00 56 00 00 00 5a 62 03 00 76 00 00 00 b1 62 03 00 73 00 00 00 28 63 03 00 c3 00 00 00 | .a..V...Zb..v....b..s...(c...... |
2020 | 9c 63 03 00 c0 00 00 00 60 64 03 00 6b 00 00 00 21 65 03 00 30 00 00 00 8d 65 03 00 7b 00 00 00 | .c......`d..k...!e..0....e..{... |
2040 | be 65 03 00 45 00 00 00 3a 66 03 00 7f 00 00 00 80 66 03 00 6d 00 00 00 00 67 03 00 3d 00 00 00 | .e..E...:f.......f..m....g..=... |
2060 | 6e 67 03 00 d9 00 00 00 ac 67 03 00 a0 00 00 00 86 68 03 00 68 00 00 00 27 69 03 00 9c 00 00 00 | ng.......g.......h..h...'i...... |
2080 | 90 69 03 00 54 00 00 00 2d 6a 03 00 2b 00 00 00 82 6a 03 00 21 00 00 00 ae 6a 03 00 5a 00 00 00 | .i..T...-j..+....j..!....j..Z... |
20a0 | d0 6a 03 00 70 00 00 00 2b 6b 03 00 4a 00 00 00 9c 6b 03 00 16 00 00 00 e7 6b 03 00 19 00 00 00 | .j..p...+k..J....k.......k...... |
20c0 | fe 6b 03 00 25 00 00 00 18 6c 03 00 62 00 00 00 3e 6c 03 00 08 00 00 00 a1 6c 03 00 2d 00 00 00 | .k..%....l..b...>l.......l..-... |
20e0 | aa 6c 03 00 14 00 00 00 d8 6c 03 00 14 00 00 00 ed 6c 03 00 14 00 00 00 02 6d 03 00 14 00 00 00 | .l.......l.......l.......m...... |
2100 | 17 6d 03 00 0d 00 00 00 2c 6d 03 00 39 00 00 00 3a 6d 03 00 43 00 00 00 74 6d 03 00 0b 00 00 00 | .m......,m..9...:m..C...tm...... |
2120 | b8 6d 03 00 da 00 00 00 c4 6d 03 00 f3 00 00 00 9f 6e 03 00 dc 00 00 00 93 6f 03 00 dc 00 00 00 | .m.......m.......n.......o...... |
2140 | 70 70 03 00 43 00 00 00 4d 71 03 00 3d 00 00 00 91 71 03 00 00 01 00 00 cf 71 03 00 b3 00 00 00 | pp..C...Mq..=....q.......q...... |
2160 | d0 72 03 00 0f 00 00 00 84 73 03 00 0b 00 00 00 94 73 03 00 61 00 00 00 a0 73 03 00 0a 00 00 00 | .r.......s.......s..a....s...... |
2180 | 02 74 03 00 0b 00 00 00 0d 74 03 00 18 00 00 00 19 74 03 00 10 00 00 00 32 74 03 00 3a 00 00 00 | .t.......t.......t......2t..:... |
21a0 | 43 74 03 00 12 00 00 00 7e 74 03 00 3c 00 00 00 91 74 03 00 84 00 00 00 ce 74 03 00 14 00 00 00 | Ct......~t..<....t.......t...... |
21c0 | 53 75 03 00 4c 00 00 00 68 75 03 00 05 00 00 00 b5 75 03 00 15 00 00 00 bb 75 03 00 0d 00 00 00 | Su..L...hu.......u.......u...... |
21e0 | d1 75 03 00 b6 00 00 00 df 75 03 00 04 00 00 00 96 76 03 00 bf 00 00 00 9b 76 03 00 52 00 00 00 | .u.......u.......v.......v..R... |
2200 | 5b 77 03 00 06 00 00 00 ae 77 03 00 0e 00 00 00 b5 77 03 00 10 00 00 00 c4 77 03 00 1c 00 00 00 | [w.......w.......w.......w...... |
2220 | d5 77 03 00 17 00 00 00 f2 77 03 00 2b 00 00 00 0a 78 03 00 05 00 00 00 36 78 03 00 2f 00 00 00 | .w.......w..+....x......6x../... |
2240 | 3c 78 03 00 34 00 00 00 6c 78 03 00 01 01 00 00 a1 78 03 00 05 00 00 00 a3 79 03 00 67 00 00 00 | <x..4...lx.......x.......y..g... |
2260 | a9 79 03 00 07 00 00 00 11 7a 03 00 0a 00 00 00 19 7a 03 00 15 00 00 00 24 7a 03 00 19 00 00 00 | .y.......z.......z......$z...... |
2280 | 3a 7a 03 00 a4 00 00 00 54 7a 03 00 32 00 00 00 f9 7a 03 00 31 00 00 00 2c 7b 03 00 1d 00 00 00 | :z......Tz..2....z..1...,{...... |
22a0 | 5e 7b 03 00 14 00 00 00 7c 7b 03 00 32 00 00 00 91 7b 03 00 15 00 00 00 c4 7b 03 00 0a 00 00 00 | ^{......|{..2....{.......{...... |
22c0 | da 7b 03 00 0c 00 00 00 e5 7b 03 00 11 00 00 00 f2 7b 03 00 17 00 00 00 04 7c 03 00 13 00 00 00 | .{.......{.......{.......|...... |
22e0 | 1c 7c 03 00 19 00 00 00 30 7c 03 00 74 00 00 00 4a 7c 03 00 98 00 00 00 bf 7c 03 00 24 00 00 00 | .|......0|..t...J|.......|..$... |
2300 | 58 7d 03 00 25 00 00 00 7d 7d 03 00 0d 00 00 00 a3 7d 03 00 42 00 00 00 b1 7d 03 00 16 00 00 00 | X}..%...}}.......}..B....}...... |
2320 | f4 7d 03 00 13 00 00 00 0b 7e 03 00 55 00 00 00 1f 7e 03 00 95 00 00 00 75 7e 03 00 35 00 00 00 | .}.......~..U....~......u~..5... |
2340 | 0b 7f 03 00 8e 00 00 00 41 7f 03 00 68 00 00 00 d0 7f 03 00 77 00 00 00 39 80 03 00 81 00 00 00 | ........A...h.......w...9....... |
2360 | b1 80 03 00 21 00 00 00 33 81 03 00 2e 00 00 00 55 81 03 00 7e 00 00 00 84 81 03 00 4b 00 00 00 | ....!...3.......U...~.......K... |
2380 | 03 82 03 00 38 00 00 00 4f 82 03 00 95 00 00 00 88 82 03 00 70 00 00 00 1e 83 03 00 32 00 00 00 | ....8...O...........p.......2... |
23a0 | 8f 83 03 00 69 00 00 00 c2 83 03 00 7b 00 00 00 2c 84 03 00 2a 00 00 00 a8 84 03 00 62 00 00 00 | ....i.......{...,...*.......b... |
23c0 | d3 84 03 00 4b 01 00 00 36 85 03 00 a6 00 00 00 82 86 03 00 89 00 00 00 29 87 03 00 af 00 00 00 | ....K...6...............)....... |
23e0 | b3 87 03 00 88 00 00 00 63 88 03 00 31 00 00 00 ec 88 03 00 2d 00 00 00 1e 89 03 00 7a 00 00 00 | ........c...1.......-.......z... |
2400 | 4c 89 03 00 92 00 00 00 c7 89 03 00 6d 00 00 00 5a 8a 03 00 6b 00 00 00 c8 8a 03 00 0e 00 00 00 | L...........m...Z...k........... |
2420 | 34 8b 03 00 4b 00 00 00 43 8b 03 00 33 00 00 00 8f 8b 03 00 39 00 00 00 c3 8b 03 00 0b 00 00 00 | 4...K...C...3.......9........... |
2440 | fd 8b 03 00 6d 00 00 00 09 8c 03 00 1a 00 00 00 77 8c 03 00 20 00 00 00 92 8c 03 00 25 00 00 00 | ....m...........w...........%... |
2460 | b3 8c 03 00 4d 00 00 00 d9 8c 03 00 4e 00 00 00 27 8d 03 00 0b 00 00 00 76 8d 03 00 f6 00 00 00 | ....M.......N...'.......v....... |
2480 | 82 8d 03 00 2e 00 00 00 79 8e 03 00 13 00 00 00 a8 8e 03 00 0f 00 00 00 bc 8e 03 00 12 00 00 00 | ........y....................... |
24a0 | cc 8e 03 00 71 01 00 00 df 8e 03 00 fe 00 00 00 51 90 03 00 4e 00 00 00 50 91 03 00 c9 00 00 00 | ....q...........Q...N...P....... |
24c0 | 9f 91 03 00 13 00 00 00 69 92 03 00 19 00 00 00 7d 92 03 00 7c 00 00 00 97 92 03 00 38 00 00 00 | ........i.......}...|.......8... |
24e0 | 14 93 03 00 3b 00 00 00 4d 93 03 00 46 00 00 00 89 93 03 00 2f 00 00 00 d0 93 03 00 19 00 00 00 | ....;...M...F......./........... |
2500 | 00 94 03 00 12 00 00 00 1a 94 03 00 14 00 00 00 2d 94 03 00 22 00 00 00 42 94 03 00 84 00 00 00 | ................-..."...B....... |
2520 | 65 94 03 00 26 00 00 00 ea 94 03 00 24 00 00 00 11 95 03 00 1b 00 00 00 36 95 03 00 1d 00 00 00 | e...&.......$...........6....... |
2540 | 52 95 03 00 58 00 00 00 70 95 03 00 5b 00 00 00 c9 95 03 00 43 00 00 00 25 96 03 00 56 00 00 00 | R...X...p...[.......C...%...V... |
2560 | 69 96 03 00 43 00 00 00 c0 96 03 00 3f 00 00 00 04 97 03 00 75 00 00 00 44 97 03 00 1e 00 00 00 | i...C.......?.......u...D....... |
2580 | ba 97 03 00 25 00 00 00 d9 97 03 00 25 00 00 00 ff 97 03 00 15 00 00 00 25 98 03 00 86 00 00 00 | ....%.......%...........%....... |
25a0 | 3b 98 03 00 2e 00 00 00 c2 98 03 00 95 00 00 00 f1 98 03 00 43 00 00 00 87 99 03 00 2b 00 00 00 | ;...................C.......+... |
25c0 | cb 99 03 00 2b 00 00 00 f7 99 03 00 37 01 00 00 23 9a 03 00 38 00 00 00 5b 9b 03 00 3b 00 00 00 | ....+.......7...#...8...[...;... |
25e0 | 94 9b 03 00 18 00 00 00 d0 9b 03 00 16 00 00 00 e9 9b 03 00 7a 00 00 00 00 9c 03 00 12 00 00 00 | ....................z........... |
2600 | 7b 9c 03 00 67 00 00 00 8e 9c 03 00 3a 00 00 00 f6 9c 03 00 3a 00 00 00 31 9d 03 00 0c 00 00 00 | {...g.......:.......:...1....... |
2620 | 6c 9d 03 00 18 00 00 00 79 9d 03 00 39 00 00 00 92 9d 03 00 47 00 00 00 cc 9d 03 00 42 00 00 00 | l.......y...9.......G.......B... |
2640 | 14 9e 03 00 4c 00 00 00 57 9e 03 00 3f 00 00 00 a4 9e 03 00 3b 00 00 00 e4 9e 03 00 41 00 00 00 | ....L...W...?.......;.......A... |
2660 | 20 9f 03 00 11 01 00 00 62 9f 03 00 3d 00 00 00 74 a0 03 00 31 00 00 00 b2 a0 03 00 26 01 00 00 | ........b...=...t...1.......&... |
2680 | e4 a0 03 00 e2 00 00 00 0b a2 03 00 9f 00 00 00 ee a2 03 00 9f 00 00 00 8e a3 03 00 3a 00 00 00 | ............................:... |
26a0 | 2e a4 03 00 f8 00 00 00 69 a4 03 00 48 00 00 00 62 a5 03 00 e2 00 00 00 ab a5 03 00 88 00 00 00 | ........i...H...b............... |
26c0 | 8e a6 03 00 31 00 00 00 17 a7 03 00 06 00 00 00 49 a7 03 00 0d 00 00 00 50 a7 03 00 0b 00 00 00 | ....1...........I.......P....... |
26e0 | 5e a7 03 00 2e 00 00 00 6a a7 03 00 67 00 00 00 99 a7 03 00 3e 00 00 00 01 a8 03 00 13 00 00 00 | ^.......j...g.......>........... |
2700 | 40 a8 03 00 ab 00 00 00 54 a8 03 00 b5 00 00 00 00 a9 03 00 b5 00 00 00 b6 a9 03 00 90 00 00 00 | @.......T....................... |
2720 | 6c aa 03 00 30 00 00 00 fd aa 03 00 47 00 00 00 2e ab 03 00 22 00 00 00 76 ab 03 00 22 00 00 00 | l...0.......G......."...v..."... |
2740 | 99 ab 03 00 24 00 00 00 bc ab 03 00 09 00 00 00 e1 ab 03 00 09 00 00 00 eb ab 03 00 92 00 00 00 | ....$........................... |
2760 | f5 ab 03 00 38 00 00 00 88 ac 03 00 05 00 00 00 c1 ac 03 00 0f 00 00 00 c7 ac 03 00 88 00 00 00 | ....8........................... |
2780 | d7 ac 03 00 bd 00 00 00 60 ad 03 00 c2 00 00 00 1e ae 03 00 7e 00 00 00 e1 ae 03 00 0b 00 00 00 | ........`...........~........... |
27a0 | 60 af 03 00 12 00 00 00 6c af 03 00 6a 00 00 00 7f af 03 00 2f 00 00 00 ea af 03 00 0a 00 00 00 | `.......l...j......./........... |
27c0 | 1a b0 03 00 f4 00 00 00 25 b0 03 00 d2 01 00 00 1a b1 03 00 ad 01 00 00 ed b2 03 00 dd 00 00 00 | ........%....................... |
27e0 | 9b b4 03 00 91 01 00 00 79 b5 03 00 7f 00 00 00 0b b7 03 00 af 00 00 00 8b b7 03 00 2a 03 00 00 | ........y...................*... |
2800 | 3b b8 03 00 6b 00 00 00 66 bb 03 00 a3 00 00 00 d2 bb 03 00 9a 00 00 00 76 bc 03 00 50 00 00 00 | ;...k...f...............v...P... |
2820 | 11 bd 03 00 81 00 00 00 62 bd 03 00 2c 00 00 00 e4 bd 03 00 7a 00 00 00 11 be 03 00 2b 00 00 00 | ........b...,.......z.......+... |
2840 | 8c be 03 00 31 00 00 00 b8 be 03 00 25 00 00 00 ea be 03 00 09 00 00 00 10 bf 03 00 34 00 00 00 | ....1.......%...............4... |
2860 | 1a bf 03 00 23 00 00 00 4f bf 03 00 23 00 00 00 73 bf 03 00 25 00 00 00 97 bf 03 00 11 00 00 00 | ....#...O...#...s...%........... |
2880 | bd bf 03 00 12 00 00 00 cf bf 03 00 12 00 00 00 e2 bf 03 00 1e 00 00 00 f5 bf 03 00 23 00 00 00 | ............................#... |
28a0 | 14 c0 03 00 39 00 00 00 38 c0 03 00 24 00 00 00 72 c0 03 00 2c 00 00 00 97 c0 03 00 2d 00 00 00 | ....9...8...$...r...,.......-... |
28c0 | c4 c0 03 00 1c 00 00 00 f2 c0 03 00 1d 00 00 00 0f c1 03 00 1e 00 00 00 2d c1 03 00 0c 00 00 00 | ........................-....... |
28e0 | 4c c1 03 00 28 00 00 00 59 c1 03 00 3a 00 00 00 82 c1 03 00 30 00 00 00 bd c1 03 00 27 00 00 00 | L...(...Y...:.......0.......'... |
2900 | ee c1 03 00 38 00 00 00 16 c2 03 00 1d 00 00 00 4f c2 03 00 13 00 00 00 6d c2 03 00 0b 00 00 00 | ....8...........O.......m....... |
2920 | 81 c2 03 00 28 00 00 00 8d c2 03 00 30 00 00 00 b6 c2 03 00 4c 00 00 00 e7 c2 03 00 74 00 00 00 | ....(.......0.......L.......t... |
2940 | 34 c3 03 00 55 00 00 00 a9 c3 03 00 30 00 00 00 ff c3 03 00 0b 00 00 00 30 c4 03 00 28 00 00 00 | 4...U.......0...........0...(... |
2960 | 3c c4 03 00 35 00 00 00 65 c4 03 00 0a 00 00 00 9b c4 03 00 56 00 00 00 a6 c4 03 00 1f 00 00 00 | <...5...e...........V........... |
2980 | fd c4 03 00 18 00 00 00 1d c5 03 00 2d 00 00 00 36 c5 03 00 23 00 00 00 64 c5 03 00 3f 00 00 00 | ............-...6...#...d...?... |
29a0 | 88 c5 03 00 4d 00 00 00 c8 c5 03 00 20 00 00 00 16 c6 03 00 6d 00 00 00 37 c6 03 00 61 00 00 00 | ....M...............m...7...a... |
29c0 | a5 c6 03 00 63 00 00 00 07 c7 03 00 31 00 00 00 6b c7 03 00 34 00 00 00 9d c7 03 00 1b 01 00 00 | ....c.......1...k...4........... |
29e0 | d2 c7 03 00 3a 00 00 00 ee c8 03 00 4a 00 00 00 29 c9 03 00 38 00 00 00 74 c9 03 00 40 01 00 00 | ....:.......J...)...8...t...@... |
2a00 | ad c9 03 00 3a 00 00 00 ee ca 03 00 4f 00 00 00 29 cb 03 00 2e 00 00 00 79 cb 03 00 86 00 00 00 | ....:.......O...).......y....... |
2a20 | a8 cb 03 00 bb 01 00 00 2f cc 03 00 06 01 00 00 eb cd 03 00 80 00 00 00 f2 ce 03 00 bf 00 00 00 | ......../....................... |
2a40 | 73 cf 03 00 25 00 00 00 33 d0 03 00 4b 00 00 00 59 d0 03 00 79 00 00 00 a5 d0 03 00 22 00 00 00 | s...%...3...K...Y...y......."... |
2a60 | 1f d1 03 00 64 00 00 00 42 d1 03 00 16 00 00 00 a7 d1 03 00 14 00 00 00 be d1 03 00 79 00 00 00 | ....d...B...................y... |
2a80 | d3 d1 03 00 42 00 00 00 4d d2 03 00 1c 00 00 00 90 d2 03 00 1d 00 00 00 ad d2 03 00 33 00 00 00 | ....B...M...................3... |
2aa0 | cb d2 03 00 a7 00 00 00 ff d2 03 00 c1 00 00 00 a7 d3 03 00 32 00 00 00 69 d4 03 00 05 00 00 00 | ....................2...i....... |
2ac0 | 9c d4 03 00 10 00 00 00 a2 d4 03 00 5e 00 00 00 b3 d4 03 00 08 00 00 00 12 d5 03 00 dc 00 00 00 | ............^................... |
2ae0 | 1b d5 03 00 10 00 00 00 f8 d5 03 00 5d 00 00 00 09 d6 03 00 0d 00 00 00 67 d6 03 00 21 00 00 00 | ............]...........g...!... |
2b00 | 75 d6 03 00 21 00 00 00 97 d6 03 00 d4 00 00 00 b9 d6 03 00 14 00 00 00 8e d7 03 00 38 00 00 00 | u...!.......................8... |
2b20 | a3 d7 03 00 a3 00 00 00 dc d7 03 00 a7 00 00 00 80 d8 03 00 23 00 00 00 28 d9 03 00 91 00 00 00 | ....................#...(....... |
2b40 | 4c d9 03 00 59 00 00 00 de d9 03 00 a6 01 00 00 38 da 03 00 ca 00 00 00 df db 03 00 70 01 00 00 | L...Y...........8...........p... |
2b60 | aa dc 03 00 63 01 00 00 1b de 03 00 07 00 00 00 7f df 03 00 15 00 00 00 87 df 03 00 12 00 00 00 | ....c........................... |
2b80 | 9d df 03 00 0f 00 00 00 b0 df 03 00 16 00 00 00 c0 df 03 00 2f 00 00 00 d7 df 03 00 2f 00 00 00 | ..................../......./... |
2ba0 | 07 e0 03 00 77 00 00 00 37 e0 03 00 17 00 00 00 af e0 03 00 10 00 00 00 c7 e0 03 00 51 00 00 00 | ....w...7...................Q... |
2bc0 | d8 e0 03 00 08 00 00 00 2a e1 03 00 bf 00 00 00 33 e1 03 00 58 00 00 00 f3 e1 03 00 e0 00 00 00 | ........*.......3...X........... |
2be0 | 4c e2 03 00 3d 00 00 00 2d e3 03 00 3b 00 00 00 6b e3 03 00 3c 00 00 00 a7 e3 03 00 3e 00 00 00 | L...=...-...;...k...<.......>... |
2c00 | e4 e3 03 00 3c 00 00 00 23 e4 03 00 3d 00 00 00 60 e4 03 00 34 00 00 00 9e e4 03 00 36 00 00 00 | ....<...#...=...`...4.......6... |
2c20 | d3 e4 03 00 33 00 00 00 0a e5 03 00 a3 00 00 00 3e e5 03 00 08 00 00 00 e2 e5 03 00 1b 00 00 00 | ....3...........>............... |
2c40 | eb e5 03 00 09 00 00 00 07 e6 03 00 c5 00 00 00 11 e6 03 00 0f 00 00 00 d7 e6 03 00 0f 00 00 00 | ................................ |
2c60 | e7 e6 03 00 31 00 00 00 f7 e6 03 00 2a 00 00 00 29 e7 03 00 19 00 00 00 54 e7 03 00 0b 00 00 00 | ....1.......*...).......T....... |
2c80 | 6e e7 03 00 40 00 00 00 7a e7 03 00 28 00 00 00 bb e7 03 00 1c 00 00 00 e4 e7 03 00 8e 00 00 00 | n...@...z...(................... |
2ca0 | 01 e8 03 00 08 00 00 00 90 e8 03 00 c1 00 00 00 99 e8 03 00 9a 00 00 00 5b e9 03 00 dc 00 00 00 | ........................[....... |
2cc0 | f6 e9 03 00 a5 01 00 00 d3 ea 03 00 03 00 00 00 79 ec 03 00 98 00 00 00 7d ec 03 00 46 01 00 00 | ................y.......}...F... |
2ce0 | 16 ed 03 00 0a 00 00 00 5d ee 03 00 0a 00 00 00 68 ee 03 00 39 00 00 00 73 ee 03 00 0d 00 00 00 | ........].......h...9...s....... |
2d00 | ad ee 03 00 08 00 00 00 bb ee 03 00 0f 00 00 00 c4 ee 03 00 2d 00 00 00 d4 ee 03 00 e5 00 00 00 | ....................-........... |
2d20 | 02 ef 03 00 ea 00 00 00 e8 ef 03 00 0a 00 00 00 d3 f0 03 00 57 01 00 00 de f0 03 00 31 01 00 00 | ....................W.......1... |
2d40 | 36 f2 03 00 0a 00 00 00 68 f3 03 00 69 01 00 00 73 f3 03 00 26 00 00 00 dd f4 03 00 05 00 00 00 | 6.......h...i...s...&........... |
2d60 | 04 f5 03 00 71 00 00 00 0a f5 03 00 5c 00 00 00 7c f5 03 00 90 00 00 00 d9 f5 03 00 33 00 00 00 | ....q.......\...|...........3... |
2d80 | 6a f6 03 00 51 00 00 00 9e f6 03 00 95 00 00 00 f0 f6 03 00 09 00 00 00 86 f7 03 00 c1 00 00 00 | j...Q........................... |
2da0 | 90 f7 03 00 53 00 00 00 52 f8 03 00 08 00 00 00 a6 f8 03 00 15 00 00 00 af f8 03 00 15 00 00 00 | ....S...R....................... |
2dc0 | c5 f8 03 00 16 00 00 00 db f8 03 00 23 00 00 00 f2 f8 03 00 14 00 00 00 16 f9 03 00 13 00 00 00 | ............#................... |
2de0 | 2b f9 03 00 0d 00 00 00 3f f9 03 00 0e 00 00 00 4d f9 03 00 0f 00 00 00 5c f9 03 00 4f 01 00 00 | +.......?.......M.......\...O... |
2e00 | 6c f9 03 00 20 01 00 00 bc fa 03 00 23 01 00 00 dd fb 03 00 4d 00 00 00 01 fd 03 00 95 00 00 00 | l...........#.......M........... |
2e20 | 4f fd 03 00 89 00 00 00 e5 fd 03 00 22 00 00 00 6f fe 03 00 0f 00 00 00 92 fe 03 00 0f 00 00 00 | O..........."...o............... |
2e40 | a2 fe 03 00 28 00 00 00 b2 fe 03 00 78 01 00 00 db fe 03 00 60 00 00 00 54 00 04 00 1d 01 00 00 | ....(.......x.......`...T....... |
2e60 | b5 00 04 00 0b 00 00 00 d3 01 04 00 53 00 00 00 df 01 04 00 ca 00 00 00 33 02 04 00 dd 00 00 00 | ............S...........3....... |
2e80 | fe 02 04 00 f4 00 00 00 dc 03 04 00 98 00 00 00 d1 04 04 00 98 00 00 00 6a 05 04 00 00 01 00 00 | ........................j....... |
2ea0 | 03 06 04 00 aa 00 00 00 04 07 04 00 05 00 00 00 af 07 04 00 0e 00 00 00 b5 07 04 00 0f 00 00 00 | ................................ |
2ec0 | c4 07 04 00 0b 00 00 00 d4 07 04 00 1f 00 00 00 e0 07 04 00 33 00 00 00 00 08 04 00 73 00 00 00 | ....................3.......s... |
2ee0 | 34 08 04 00 6e 00 00 00 a8 08 04 00 87 00 00 00 17 09 04 00 2e 00 00 00 9f 09 04 00 29 00 00 00 | 4...n.......................)... |
2f00 | ce 09 04 00 b1 00 00 00 f8 09 04 00 17 00 00 00 aa 0a 04 00 a7 00 00 00 c2 0a 04 00 21 00 00 00 | ............................!... |
2f20 | 6a 0b 04 00 90 00 00 00 8c 0b 04 00 26 00 00 00 1d 0c 04 00 1a 00 00 00 44 0c 04 00 44 00 00 00 | j...........&...........D...D... |
2f40 | 5f 0c 04 00 48 00 00 00 a4 0c 04 00 2a 00 00 00 ed 0c 04 00 6e 00 00 00 18 0d 04 00 90 00 00 00 | _...H.......*.......n........... |
2f60 | 87 0d 04 00 cf 00 00 00 18 0e 04 00 0f 00 00 00 e8 0e 04 00 0c 00 00 00 f8 0e 04 00 69 01 00 00 | ............................i... |
2f80 | 05 0f 04 00 93 00 00 00 6f 10 04 00 0f 00 00 00 03 11 04 00 10 00 00 00 13 11 04 00 3e 00 00 00 | ........o...................>... |
2fa0 | 24 11 04 00 81 00 00 00 63 11 04 00 8b 00 00 00 e5 11 04 00 bd 00 00 00 71 12 04 00 30 01 00 00 | $.......c...............q...0... |
2fc0 | 2f 13 04 00 96 00 00 00 60 14 04 00 69 01 00 00 f7 14 04 00 0c 00 00 00 61 16 04 00 5a 00 00 00 | /.......`...i...........a...Z... |
2fe0 | 6e 16 04 00 3c 01 00 00 c9 16 04 00 db 00 00 00 06 18 04 00 52 00 00 00 e2 18 04 00 2f 00 00 00 | n...<...............R......./... |
3000 | 35 19 04 00 ac 00 00 00 65 19 04 00 09 00 00 00 12 1a 04 00 eb 00 00 00 1c 1a 04 00 d8 00 00 00 | 5.......e....................... |
3020 | 08 1b 04 00 5c 00 00 00 e1 1b 04 00 63 00 00 00 3e 1c 04 00 22 01 00 00 a2 1c 04 00 af 00 00 00 | ....\.......c...>..."........... |
3040 | c5 1d 04 00 30 00 00 00 75 1e 04 00 4b 00 00 00 a6 1e 04 00 66 00 00 00 f2 1e 04 00 52 00 00 00 | ....0...u...K.......f.......R... |
3060 | 59 1f 04 00 49 00 00 00 ac 1f 04 00 1b 01 00 00 f6 1f 04 00 bb 00 00 00 12 21 04 00 60 00 00 00 | Y...I....................!..`... |
3080 | ce 21 04 00 62 00 00 00 2f 22 04 00 52 01 00 00 92 22 04 00 f3 00 00 00 e5 23 04 00 bc 00 00 00 | .!..b.../"..R....".......#...... |
30a0 | d9 24 04 00 77 00 00 00 96 25 04 00 af 00 00 00 0e 26 04 00 e8 00 00 00 be 26 04 00 76 00 00 00 | .$..w....%.......&.......&..v... |
30c0 | a7 27 04 00 3c 01 00 00 1e 28 04 00 97 00 00 00 5b 29 04 00 a2 00 00 00 f3 29 04 00 7b 00 00 00 | .'..<....(......[).......)..{... |
30e0 | 96 2a 04 00 d3 00 00 00 12 2b 04 00 62 00 00 00 e6 2b 04 00 0e 00 00 00 49 2c 04 00 cc 00 00 00 | .*.......+..b....+......I,...... |
3100 | 58 2c 04 00 32 00 00 00 25 2d 04 00 11 00 00 00 58 2d 04 00 14 01 00 00 6a 2d 04 00 b9 00 00 00 | X,..2...%-......X-......j-...... |
3120 | 7f 2e 04 00 06 00 00 00 39 2f 04 00 06 00 00 00 40 2f 04 00 5d 02 00 00 47 2f 04 00 0e 00 00 00 | ........9/......@/..]...G/...... |
3140 | a5 31 04 00 80 01 00 00 b4 31 04 00 23 01 00 00 35 33 04 00 0c 01 00 00 59 34 04 00 8b 00 00 00 | .1.......1..#...53......Y4...... |
3160 | 66 35 04 00 06 00 00 00 f2 35 04 00 59 00 00 00 f9 35 04 00 59 00 00 00 53 36 04 00 07 00 00 00 | f5.......5..Y....5..Y...S6...... |
3180 | ad 36 04 00 15 00 00 00 b5 36 04 00 44 00 00 00 cb 36 04 00 4d 00 00 00 10 37 04 00 3d 00 00 00 | .6.......6..D....6..M....7..=... |
31a0 | 5e 37 04 00 10 00 00 00 9c 37 04 00 45 00 00 00 ad 37 04 00 59 00 00 00 f3 37 04 00 7c 00 00 00 | ^7.......7..E....7..Y....7..|... |
31c0 | 4d 38 04 00 ac 00 00 00 ca 38 04 00 89 00 00 00 77 39 04 00 23 00 00 00 01 3a 04 00 0e 00 00 00 | M8.......8......w9..#....:...... |
31e0 | 25 3a 04 00 26 00 00 00 34 3a 04 00 2d 00 00 00 5b 3a 04 00 2e 00 00 00 89 3a 04 00 2d 00 00 00 | %:..&...4:..-...[:.......:..-... |
3200 | b8 3a 04 00 0f 00 00 00 e6 3a 04 00 1d 01 00 00 f6 3a 04 00 19 01 00 00 14 3c 04 00 07 00 00 00 | .:.......:.......:.......<...... |
3220 | 2e 3d 04 00 06 00 00 00 36 3d 04 00 17 00 00 00 3d 3d 04 00 0e 00 00 00 55 3d 04 00 25 00 00 00 | .=......6=......==......U=..%... |
3240 | 64 3d 04 00 0e 00 00 00 8a 3d 04 00 11 00 00 00 99 3d 04 00 0f 00 00 00 ab 3d 04 00 10 00 00 00 | d=.......=.......=.......=...... |
3260 | bb 3d 04 00 07 00 00 00 cc 3d 04 00 0e 00 00 00 d4 3d 04 00 06 00 00 00 e3 3d 04 00 d0 00 00 00 | .=.......=.......=.......=...... |
3280 | ea 3d 04 00 57 00 00 00 bb 3e 04 00 2b 00 00 00 13 3f 04 00 08 00 00 00 3f 3f 04 00 13 00 00 00 | .=..W....>..+....?......??...... |
32a0 | 48 3f 04 00 22 00 00 00 5c 3f 04 00 0b 00 00 00 7f 3f 04 00 11 00 00 00 8b 3f 04 00 08 00 00 00 | H?.."...\?.......?.......?...... |
32c0 | 9d 3f 04 00 1a 00 00 00 a6 3f 04 00 6d 00 00 00 c1 3f 04 00 17 00 00 00 2f 40 04 00 47 01 00 00 | .?.......?..m....?....../@..G... |
32e0 | 47 40 04 00 14 00 00 00 8f 41 04 00 0d 00 00 00 a4 41 04 00 0c 00 00 00 b2 41 04 00 3e 00 00 00 | G@.......A.......A.......A..>... |
3300 | bf 41 04 00 78 00 00 00 fe 41 04 00 3c 00 00 00 77 42 04 00 df 00 00 00 b4 42 04 00 34 00 00 00 | .A..x....A..<...wB.......B..4... |
3320 | 94 43 04 00 4d 00 00 00 c9 43 04 00 3e 00 00 00 17 44 04 00 64 00 00 00 56 44 04 00 db 00 00 00 | .C..M....C..>....D..d...VD...... |
3340 | bb 44 04 00 3b 00 00 00 97 45 04 00 18 00 00 00 d3 45 04 00 12 00 00 00 ec 45 04 00 3f 00 00 00 | .D..;....E.......E.......E..?... |
3360 | ff 45 04 00 04 00 00 00 3f 46 04 00 11 00 00 00 44 46 04 00 11 00 00 00 56 46 04 00 0a 00 00 00 | .E......?F......DF......VF...... |
3380 | 68 46 04 00 2a 00 00 00 73 46 04 00 10 00 00 00 9e 46 04 00 09 00 00 00 af 46 04 00 30 00 00 00 | hF..*...sF.......F.......F..0... |
33a0 | b9 46 04 00 08 00 00 00 ea 46 04 00 05 01 00 00 f3 46 04 00 1e 00 00 00 f9 47 04 00 13 00 00 00 | .F.......F.......F.......G...... |
33c0 | 18 48 04 00 c5 00 00 00 2c 48 04 00 6a 00 00 00 f2 48 04 00 c0 00 00 00 5d 49 04 00 25 00 00 00 | .H......,H..j....H......]I..%... |
33e0 | 1e 4a 04 00 25 00 00 00 44 4a 04 00 03 00 00 00 6a 4a 04 00 d3 00 00 00 6e 4a 04 00 a8 00 00 00 | .J..%...DJ......jJ......nJ...... |
3400 | 42 4b 04 00 90 01 00 00 eb 4b 04 00 d4 01 00 00 7c 4d 04 00 23 01 00 00 51 4f 04 00 2a 00 00 00 | BK.......K......|M..#...QO..*... |
3420 | 75 50 04 00 0a 00 00 00 a0 50 04 00 26 00 00 00 ab 50 04 00 0a 00 00 00 d2 50 04 00 96 01 00 00 | uP.......P..&....P.......P...... |
3440 | dd 50 04 00 05 00 00 00 74 52 04 00 05 00 00 00 7a 52 04 00 2b 00 00 00 80 52 04 00 02 00 00 00 | .P......tR......zR..+....R...... |
3460 | ac 52 04 00 0a 00 00 00 af 52 04 00 53 00 00 00 ba 52 04 00 1d 00 00 00 0e 53 04 00 25 00 00 00 | .R.......R..S....R.......S..%... |
3480 | 2c 53 04 00 18 00 00 00 52 53 04 00 19 00 00 00 6b 53 04 00 19 00 00 00 85 53 04 00 33 00 00 00 | ,S......RS......kS.......S..3... |
34a0 | 9f 53 04 00 33 00 00 00 d3 53 04 00 ea 00 00 00 07 54 04 00 2b 00 00 00 f2 54 04 00 4d 00 00 00 | .S..3....S.......T..+....T..M... |
34c0 | 1e 55 04 00 15 00 00 00 6c 55 04 00 14 02 00 00 82 55 04 00 34 00 00 00 97 57 04 00 33 00 00 00 | .U......lU.......U..4....W..3... |
34e0 | cc 57 04 00 36 00 00 00 00 58 04 00 34 00 00 00 37 58 04 00 2d 00 00 00 6c 58 04 00 27 00 00 00 | .W..6....X..4...7X..-...lX..'... |
3500 | 9a 58 04 00 1b 00 00 00 c2 58 04 00 38 00 00 00 de 58 04 00 38 00 00 00 17 59 04 00 06 00 00 00 | .X.......X..8....X..8....Y...... |
3520 | 50 59 04 00 04 00 00 00 57 59 04 00 05 00 00 00 5c 59 04 00 11 00 00 00 62 59 04 00 19 00 00 00 | PY......WY......\Y......bY...... |
3540 | 74 59 04 00 1d 00 00 00 8e 59 04 00 19 00 00 00 ac 59 04 00 41 00 00 00 c6 59 04 00 11 00 00 00 | tY.......Y.......Y..A....Y...... |
3560 | 08 5a 04 00 12 00 00 00 1a 5a 04 00 06 00 00 00 2d 5a 04 00 0b 00 00 00 34 5a 04 00 f7 00 00 00 | .Z.......Z......-Z......4Z...... |
3580 | 40 5a 04 00 24 01 00 00 38 5b 04 00 39 00 00 00 5d 5c 04 00 05 00 00 00 97 5c 04 00 19 00 00 00 | @Z..$...8[..9...]\.......\...... |
35a0 | 9d 5c 04 00 04 00 00 00 b7 5c 04 00 1b 00 00 00 bc 5c 04 00 25 00 00 00 d8 5c 04 00 2d 00 00 00 | .\.......\.......\..%....\..-... |
35c0 | fe 5c 04 00 2e 00 00 00 2c 5d 04 00 0c 00 00 00 5b 5d 04 00 0a 00 00 00 68 5d 04 00 7a 00 00 00 | .\......,]......[]......h]..z... |
35e0 | 73 5d 04 00 50 00 00 00 ee 5d 04 00 0b 00 00 00 3f 5e 04 00 76 00 00 00 4b 5e 04 00 04 00 00 00 | s]..P....]......?^..v...K^...... |
3600 | c2 5e 04 00 10 00 00 00 c7 5e 04 00 15 00 00 00 d8 5e 04 00 16 00 00 00 ee 5e 04 00 20 00 00 00 | .^.......^.......^.......^...... |
3620 | 05 5f 04 00 1b 00 00 00 26 5f 04 00 0e 00 00 00 42 5f 04 00 16 00 00 00 51 5f 04 00 11 00 00 00 | ._......&_......B_......Q_...... |
3640 | 68 5f 04 00 14 00 00 00 7a 5f 04 00 87 00 00 00 8f 5f 04 00 39 00 00 00 17 60 04 00 3a 00 00 00 | h_......z_......._..9....`..:... |
3660 | 51 60 04 00 3a 00 00 00 8c 60 04 00 ec 00 00 00 c7 60 04 00 14 00 00 00 b4 61 04 00 1f 00 00 00 | Q`..:....`.......`.......a...... |
3680 | c9 61 04 00 25 00 00 00 e9 61 04 00 0c 00 00 00 0f 62 04 00 3e 00 00 00 1c 62 04 00 0c 00 00 00 | .a..%....a.......b..>....b...... |
36a0 | 5b 62 04 00 0a 00 00 00 68 62 04 00 54 00 00 00 73 62 04 00 0b 00 00 00 c8 62 04 00 0c 00 00 00 | [b......hb..T...sb.......b...... |
36c0 | d4 62 04 00 05 00 00 00 e1 62 04 00 1a 00 00 00 e7 62 04 00 16 00 00 00 02 63 04 00 14 00 00 00 | .b.......b.......b.......c...... |
36e0 | 19 63 04 00 1c 00 00 00 2e 63 04 00 75 00 00 00 4b 63 04 00 07 01 00 00 c1 63 04 00 78 01 00 00 | .c.......c..u...Kc.......c..x... |
3700 | c9 64 04 00 45 00 00 00 42 66 04 00 39 00 00 00 88 66 04 00 ec 00 00 00 c2 66 04 00 e6 00 00 00 | .d..E...Bf..9....f.......f...... |
3720 | af 67 04 00 4a 00 00 00 96 68 04 00 57 00 00 00 e1 68 04 00 69 00 00 00 39 69 04 00 d2 00 00 00 | .g..J....h..W....h..i...9i...... |
3740 | a3 69 04 00 c2 00 00 00 76 6a 04 00 b8 00 00 00 39 6b 04 00 98 00 00 00 f2 6b 04 00 b5 00 00 00 | .i......vj......9k.......k...... |
3760 | 8b 6c 04 00 ff 00 00 00 41 6d 04 00 7f 00 00 00 41 6e 04 00 83 00 00 00 c1 6e 04 00 5a 00 00 00 | .l......Am......An.......n..Z... |
3780 | 45 6f 04 00 69 00 00 00 a0 6f 04 00 0d 02 00 00 0a 70 04 00 b8 00 00 00 18 72 04 00 a4 00 00 00 | Eo..i....o.......p.......r...... |
37a0 | d1 72 04 00 b1 01 00 00 76 73 04 00 ad 00 00 00 28 75 04 00 6f 00 00 00 d6 75 04 00 89 00 00 00 | .r......vs......(u..o....u...... |
37c0 | 46 76 04 00 ae 00 00 00 d0 76 04 00 38 01 00 00 7f 77 04 00 46 01 00 00 b8 78 04 00 5f 01 00 00 | Fv.......v..8....w..F....x.._... |
37e0 | ff 79 04 00 f0 00 00 00 5f 7b 04 00 57 00 00 00 50 7c 04 00 83 00 00 00 a8 7c 04 00 32 00 00 00 | .y......_{..W...P|.......|..2... |
3800 | 2c 7d 04 00 25 01 00 00 5f 7d 04 00 6c 00 00 00 85 7e 04 00 6a 01 00 00 f2 7e 04 00 9b 00 00 00 | ,}..%..._}..l....~..j....~...... |
3820 | 5d 80 04 00 2a 00 00 00 f9 80 04 00 78 00 00 00 24 81 04 00 a3 00 00 00 9d 81 04 00 94 00 00 00 | ]...*.......x...$............... |
3840 | 41 82 04 00 93 00 00 00 d6 82 04 00 51 00 00 00 6a 83 04 00 92 00 00 00 bc 83 04 00 c0 00 00 00 | A...........Q...j............... |
3860 | 4f 84 04 00 bb 00 00 00 10 85 04 00 b2 00 00 00 cc 85 04 00 97 00 00 00 7f 86 04 00 b5 00 00 00 | O............................... |
3880 | 17 87 04 00 55 00 00 00 cd 87 04 00 6e 00 00 00 23 88 04 00 a6 00 00 00 92 88 04 00 a7 00 00 00 | ....U.......n...#............... |
38a0 | 39 89 04 00 ac 00 00 00 e1 89 04 00 73 00 00 00 8e 8a 04 00 68 00 00 00 02 8b 04 00 42 01 00 00 | 9...........s.......h.......B... |
38c0 | 6b 8b 04 00 d4 00 00 00 ae 8c 04 00 d1 00 00 00 83 8d 04 00 b3 00 00 00 55 8e 04 00 38 00 00 00 | k.......................U...8... |
38e0 | 09 8f 04 00 87 00 00 00 42 8f 04 00 8f 00 00 00 ca 8f 04 00 79 00 00 00 5a 90 04 00 8a 00 00 00 | ........B...........y...Z....... |
3900 | d4 90 04 00 a3 00 00 00 5f 91 04 00 60 00 00 00 03 92 04 00 66 00 00 00 64 92 04 00 ab 00 00 00 | ........_...`.......f...d....... |
3920 | cb 92 04 00 45 00 00 00 77 93 04 00 d3 00 00 00 bd 93 04 00 d3 00 00 00 91 94 04 00 8e 00 00 00 | ....E...w....................... |
3940 | 65 95 04 00 61 00 00 00 f4 95 04 00 7f 00 00 00 56 96 04 00 69 01 00 00 d6 96 04 00 9d 01 00 00 | e...a...........V...i........... |
3960 | 40 98 04 00 9e 01 00 00 de 99 04 00 b6 00 00 00 7d 9b 04 00 cd 00 00 00 34 9c 04 00 bf 00 00 00 | @...............}.......4....... |
3980 | 02 9d 04 00 a8 00 00 00 c2 9d 04 00 5f 00 00 00 6b 9e 04 00 e5 00 00 00 cb 9e 04 00 55 00 00 00 | ............_...k...........U... |
39a0 | b1 9f 04 00 69 00 00 00 07 a0 04 00 74 00 00 00 71 a0 04 00 57 01 00 00 e6 a0 04 00 8a 00 00 00 | ....i.......t...q...W........... |
39c0 | 3e a2 04 00 9b 00 00 00 c9 a2 04 00 8d 00 00 00 65 a3 04 00 74 00 00 00 f3 a3 04 00 97 00 00 00 | >...............e...t........... |
39e0 | 68 a4 04 00 5c 00 00 00 00 a5 04 00 8e 00 00 00 5d a5 04 00 92 00 00 00 ec a5 04 00 69 00 00 00 | h...\...........]...........i... |
3a00 | 7f a6 04 00 74 01 00 00 e9 a6 04 00 55 00 00 00 5e a8 04 00 87 00 00 00 b4 a8 04 00 3e 00 00 00 | ....t.......U...^...........>... |
3a20 | 3c a9 04 00 d5 00 00 00 7b a9 04 00 91 00 00 00 51 aa 04 00 bf 00 00 00 e3 aa 04 00 37 01 00 00 | <.......{.......Q...........7... |
3a40 | a3 ab 04 00 55 00 00 00 db ac 04 00 2c 00 00 00 31 ad 04 00 21 00 00 00 5e ad 04 00 9d 00 00 00 | ....U.......,...1...!...^....... |
3a60 | 80 ad 04 00 1e 00 00 00 1e ae 04 00 09 00 00 00 3d ae 04 00 1a 00 00 00 47 ae 04 00 b7 00 00 00 | ................=.......G....... |
3a80 | 62 ae 04 00 40 00 00 00 1a af 04 00 31 00 00 00 5b af 04 00 80 00 00 00 8d af 04 00 43 00 00 00 | b...@.......1...[...........C... |
3aa0 | 0e b0 04 00 38 00 00 00 52 b0 04 00 2c 00 00 00 8b b0 04 00 9f 00 00 00 b8 b0 04 00 7e 00 00 00 | ....8...R...,...............~... |
3ac0 | 58 b1 04 00 a3 00 00 00 d7 b1 04 00 55 00 00 00 7b b2 04 00 70 00 00 00 d1 b2 04 00 70 00 00 00 | X...........U...{...p.......p... |
3ae0 | 42 b3 04 00 4e 00 00 00 b3 b3 04 00 3b 00 00 00 02 b4 04 00 6b 01 00 00 3e b4 04 00 4a 00 00 00 | B...N.......;.......k...>...J... |
3b00 | aa b5 04 00 b5 00 00 00 f5 b5 04 00 71 00 00 00 ab b6 04 00 c2 00 00 00 1d b7 04 00 67 00 00 00 | ............q...............g... |
3b20 | e0 b7 04 00 70 00 00 00 48 b8 04 00 dd 00 00 00 b9 b8 04 00 dc 00 00 00 97 b9 04 00 4a 00 00 00 | ....p...H...................J... |
3b40 | 74 ba 04 00 4d 00 00 00 bf ba 04 00 32 00 00 00 0d bb 04 00 6f 00 00 00 40 bb 04 00 68 00 00 00 | t...M.......2.......o...@...h... |
3b60 | b0 bb 04 00 e3 00 00 00 19 bc 04 00 01 03 00 00 fd bc 04 00 2c 00 00 00 ff bf 04 00 bc 01 00 00 | ....................,........... |
3b80 | 2c c0 04 00 da 00 00 00 e9 c1 04 00 8e 00 00 00 c4 c2 04 00 d0 00 00 00 53 c3 04 00 81 00 00 00 | ,.......................S....... |
3ba0 | 24 c4 04 00 b0 01 00 00 a6 c4 04 00 94 00 00 00 57 c6 04 00 f7 00 00 00 ec c6 04 00 49 00 00 00 | $...............W...........I... |
3bc0 | e4 c7 04 00 56 02 00 00 2e c8 04 00 85 00 00 00 85 ca 04 00 08 01 00 00 0b cb 04 00 1d 02 00 00 | ....V........................... |
3be0 | 14 cc 04 00 c5 00 00 00 32 ce 04 00 5d 00 00 00 f8 ce 04 00 5b 00 00 00 56 cf 04 00 46 00 00 00 | ........2...].......[...V...F... |
3c00 | b2 cf 04 00 5b 00 00 00 f9 cf 04 00 b4 00 00 00 55 d0 04 00 33 00 00 00 0a d1 04 00 60 00 00 00 | ....[...........U...3.......`... |
3c20 | 3e d1 04 00 fe 00 00 00 9f d1 04 00 61 00 00 00 9e d2 04 00 9d 00 00 00 00 d3 04 00 9c 00 00 00 | >...........a................... |
3c40 | 9e d3 04 00 13 01 00 00 3b d4 04 00 bb 00 00 00 4f d5 04 00 3d 00 00 00 0b d6 04 00 c2 00 00 00 | ........;.......O...=........... |
3c60 | 49 d6 04 00 db 00 00 00 0c d7 04 00 d2 00 00 00 e8 d7 04 00 77 00 00 00 bb d8 04 00 08 01 00 00 | I...................w........... |
3c80 | 33 d9 04 00 96 00 00 00 3c da 04 00 2e 01 00 00 d3 da 04 00 68 00 00 00 02 dc 04 00 3c 00 00 00 | 3.......<...........h.......<... |
3ca0 | 6b dc 04 00 45 01 00 00 a8 dc 04 00 c1 01 00 00 ee dd 04 00 4e 00 00 00 b0 df 04 00 62 00 00 00 | k...E...............N.......b... |
3cc0 | ff df 04 00 ae 00 00 00 62 e0 04 00 dd 00 00 00 11 e1 04 00 77 00 00 00 ef e1 04 00 b7 00 00 00 | ........b...........w........... |
3ce0 | 67 e2 04 00 a2 00 00 00 1f e3 04 00 bb 00 00 00 c2 e3 04 00 5c 00 00 00 7e e4 04 00 6a 01 00 00 | g...................\...~...j... |
3d00 | db e4 04 00 62 00 00 00 46 e6 04 00 c3 00 00 00 a9 e6 04 00 11 00 00 00 6d e7 04 00 ba 00 00 00 | ....b...F...............m....... |
3d20 | 7f e7 04 00 ba 00 00 00 3a e8 04 00 bc 00 00 00 f5 e8 04 00 6e 00 00 00 b2 e9 04 00 6f 00 00 00 | ........:...........n.......o... |
3d40 | 21 ea 04 00 a0 00 00 00 91 ea 04 00 42 00 00 00 32 eb 04 00 d2 00 00 00 75 eb 04 00 1d 01 00 00 | !...........B...2.......u....... |
3d60 | 48 ec 04 00 9b 01 00 00 66 ed 04 00 9b 01 00 00 02 ef 04 00 6b 00 00 00 9e f0 04 00 98 00 00 00 | H.......f...........k........... |
3d80 | 0a f1 04 00 4a 00 00 00 a3 f1 04 00 0a 00 00 00 ee f1 04 00 18 00 00 00 f9 f1 04 00 3e 00 00 00 | ....J.......................>... |
3da0 | 12 f2 04 00 67 01 00 00 51 f2 04 00 0d 00 00 00 b9 f3 04 00 16 00 00 00 c7 f3 04 00 23 00 00 00 | ....g...Q...................#... |
3dc0 | de f3 04 00 0d 00 00 00 02 f4 04 00 58 00 00 00 10 f4 04 00 67 00 00 00 69 f4 04 00 ef 00 00 00 | ............X.......g...i....... |
3de0 | d1 f4 04 00 6e 00 00 00 c1 f5 04 00 98 00 00 00 30 f6 04 00 0b 00 00 00 c9 f6 04 00 0b 00 00 00 | ....n...........0............... |
3e00 | d5 f6 04 00 4c 00 00 00 e1 f6 04 00 2f 00 00 00 2e f7 04 00 17 00 00 00 5e f7 04 00 10 00 00 00 | ....L......./...........^....... |
3e20 | 76 f7 04 00 10 00 00 00 87 f7 04 00 90 00 00 00 98 f7 04 00 17 00 00 00 29 f8 04 00 37 00 00 00 | v.......................)...7... |
3e40 | 41 f8 04 00 36 00 00 00 79 f8 04 00 1b 00 00 00 b0 f8 04 00 2f 00 00 00 cc f8 04 00 97 00 00 00 | A...6...y.........../........... |
3e60 | fc f8 04 00 10 00 00 00 94 f9 04 00 0a 00 00 00 a5 f9 04 00 18 00 00 00 b0 f9 04 00 72 01 00 00 | ............................r... |
3e80 | c9 f9 04 00 40 00 00 00 3c fb 04 00 7f 01 00 00 7d fb 04 00 c0 00 00 00 fd fc 04 00 48 01 00 00 | ....@...<.......}...........H... |
3ea0 | be fd 04 00 54 01 00 00 07 ff 04 00 9e 01 00 00 5c 00 05 00 14 00 00 00 fb 01 05 00 08 00 00 00 | ....T...........\............... |
3ec0 | 10 02 05 00 18 00 00 00 19 02 05 00 31 00 00 00 32 02 05 00 8f 01 00 00 64 02 05 00 f7 00 00 00 | ............1...2.......d....... |
3ee0 | f4 03 05 00 e9 00 00 00 ec 04 05 00 89 00 00 00 d6 05 05 00 38 00 00 00 60 06 05 00 8f 00 00 00 | ....................8...`....... |
3f00 | 99 06 05 00 37 00 00 00 29 07 05 00 1b 00 00 00 61 07 05 00 25 01 00 00 7d 07 05 00 cb 00 00 00 | ....7...).......a...%...}....... |
3f20 | a3 08 05 00 db 00 00 00 6f 09 05 00 d7 00 00 00 4b 0a 05 00 a5 00 00 00 23 0b 05 00 93 00 00 00 | ........o.......K.......#....... |
3f40 | c9 0b 05 00 e3 00 00 00 5d 0c 05 00 02 02 00 00 41 0d 05 00 c4 00 00 00 44 0f 05 00 a6 00 00 00 | ........].......A.......D....... |
3f60 | 09 10 05 00 e6 00 00 00 b0 10 05 00 4f 00 00 00 97 11 05 00 a4 00 00 00 e7 11 05 00 28 01 00 00 | ............O...............(... |
3f80 | 8c 12 05 00 9d 00 00 00 b5 13 05 00 3b 00 00 00 53 14 05 00 4a 00 00 00 8f 14 05 00 81 00 00 00 | ............;...S...J........... |
3fa0 | da 14 05 00 68 00 00 00 5c 15 05 00 49 00 00 00 c5 15 05 00 36 00 00 00 0f 16 05 00 11 00 00 00 | ....h...\...I.......6........... |
3fc0 | 46 16 05 00 06 00 00 00 58 16 05 00 0f 00 00 00 5f 16 05 00 18 00 00 00 6f 16 05 00 0e 00 00 00 | F.......X......._.......o....... |
3fe0 | 88 16 05 00 0e 00 00 00 97 16 05 00 0f 00 00 00 a6 16 05 00 0b 00 00 00 b6 16 05 00 6c 01 00 00 | ............................l... |
4000 | c2 16 05 00 3a 01 00 00 2f 18 05 00 0f 00 00 00 6a 19 05 00 0f 00 00 00 7a 19 05 00 08 00 00 00 | ....:.../.......j.......z....... |
4020 | 8a 19 05 00 07 00 00 00 93 19 05 00 04 00 00 00 9b 19 05 00 0f 00 00 00 a0 19 05 00 06 00 00 00 | ................................ |
4040 | b0 19 05 00 ff 00 00 00 b7 19 05 00 23 00 00 00 b7 1a 05 00 23 00 00 00 db 1a 05 00 0e 00 00 00 | ............#.......#........... |
4060 | ff 1a 05 00 07 00 00 00 0e 1b 05 00 0a 00 00 00 16 1b 05 00 04 00 00 00 21 1b 05 00 36 00 00 00 | ........................!...6... |
4080 | 26 1b 05 00 b5 00 00 00 5d 1b 05 00 04 00 00 00 13 1c 05 00 f5 00 00 00 18 1c 05 00 19 00 00 00 | &.......]....................... |
40a0 | 0e 1d 05 00 42 00 00 00 28 1d 05 00 1b 00 00 00 6b 1d 05 00 34 01 00 00 87 1d 05 00 3e 00 00 00 | ....B...(.......k...4.......>... |
40c0 | bc 1e 05 00 29 00 00 00 fb 1e 05 00 0f 00 00 00 25 1f 05 00 33 00 00 00 35 1f 05 00 14 02 00 00 | ....)...........%...3...5....... |
40e0 | 69 1f 05 00 40 00 00 00 7e 21 05 00 3d 00 00 00 bf 21 05 00 07 01 00 00 fd 21 05 00 23 00 00 00 | i...@...~!..=....!.......!..#... |
4100 | 05 23 05 00 11 00 00 00 29 23 05 00 3f 00 00 00 3b 23 05 00 20 00 00 00 7b 23 05 00 6f 00 00 00 | .#......)#..?...;#......{#..o... |
4120 | 9c 23 05 00 78 00 00 00 0c 24 05 00 3d 00 00 00 85 24 05 00 68 00 00 00 c3 24 05 00 6b 00 00 00 | .#..x....$..=....$..h....$..k... |
4140 | 2c 25 05 00 23 00 00 00 98 25 05 00 07 00 00 00 bc 25 05 00 7d 00 00 00 c4 25 05 00 06 00 00 00 | ,%..#....%.......%..}....%...... |
4160 | 42 26 05 00 16 00 00 00 49 26 05 00 35 00 00 00 60 26 05 00 10 00 00 00 96 26 05 00 69 02 00 00 | B&......I&..5...`&.......&..i... |
4180 | a7 26 05 00 1b 00 00 00 11 29 05 00 52 01 00 00 2d 29 05 00 4a 00 00 00 80 2a 05 00 e8 01 00 00 | .&.......)..R...-)..J....*...... |
41a0 | cb 2a 05 00 9d 01 00 00 b4 2c 05 00 d7 00 00 00 52 2e 05 00 1e 00 00 00 2a 2f 05 00 2f 00 00 00 | .*.......,......R.......*/../... |
41c0 | 49 2f 05 00 21 00 00 00 79 2f 05 00 0c 00 00 00 9b 2f 05 00 0e 00 00 00 a8 2f 05 00 24 00 00 00 | I/..!...y/......./......./..$... |
41e0 | b7 2f 05 00 0e 00 00 00 dc 2f 05 00 59 00 00 00 eb 2f 05 00 59 00 00 00 45 30 05 00 22 00 00 00 | ./......./..Y..../..Y...E0.."... |
4200 | 9f 30 05 00 05 00 00 00 c2 30 05 00 20 00 00 00 c8 30 05 00 14 00 00 00 e9 30 05 00 3c 00 00 00 | .0.......0.......0.......0..<... |
4220 | fe 30 05 00 42 00 00 00 3b 31 05 00 1f 00 00 00 7e 31 05 00 2e 00 00 00 9e 31 05 00 10 00 00 00 | .0..B...;1......~1.......1...... |
4240 | cd 31 05 00 10 00 00 00 de 31 05 00 12 00 00 00 ef 31 05 00 12 00 00 00 02 32 05 00 2e 00 00 00 | .1.......1.......1.......2...... |
4260 | 15 32 05 00 3c 00 00 00 44 32 05 00 3b 00 00 00 81 32 05 00 0b 00 00 00 bd 32 05 00 38 00 00 00 | .2..<...D2..;....2.......2..8... |
4280 | c9 32 05 00 2c 00 00 00 02 33 05 00 09 00 00 00 2f 33 05 00 09 00 00 00 39 33 05 00 0e 00 00 00 | .2..,....3....../3......93...... |
42a0 | 43 33 05 00 63 00 00 00 52 33 05 00 9c 00 00 00 b6 33 05 00 ab 00 00 00 53 34 05 00 eb 00 00 00 | C3..c...R3.......3......S4...... |
42c0 | ff 34 05 00 30 00 00 00 eb 35 05 00 07 00 00 00 1c 36 05 00 63 00 00 00 24 36 05 00 0c 01 00 00 | .4..0....5.......6..c...$6...... |
42e0 | 88 36 05 00 0c 00 00 00 95 37 05 00 0c 00 00 00 a2 37 05 00 15 00 00 00 af 37 05 00 19 00 00 00 | .6.......7.......7.......7...... |
4300 | c5 37 05 00 08 00 00 00 df 37 05 00 8c 00 00 00 e8 37 05 00 03 00 00 00 75 38 05 00 0a 00 00 00 | .7.......7.......7......u8...... |
4320 | 79 38 05 00 35 00 00 00 84 38 05 00 13 00 00 00 ba 38 05 00 19 00 00 00 ce 38 05 00 06 00 00 00 | y8..5....8.......8.......8...... |
4340 | e8 38 05 00 3b 02 00 00 ef 38 05 00 85 00 00 00 2b 3b 05 00 0e 00 00 00 b1 3b 05 00 09 00 00 00 | .8..;....8......+;.......;...... |
4360 | c0 3b 05 00 35 00 00 00 ca 3b 05 00 04 00 00 00 00 3c 05 00 e8 01 00 00 05 3c 05 00 5f 00 00 00 | .;..5....;.......<.......<.._... |
4380 | ee 3d 05 00 61 00 00 00 4e 3e 05 00 03 00 00 00 b0 3e 05 00 0b 00 00 00 b4 3e 05 00 4c 00 00 00 | .=..a...N>.......>.......>..L... |
43a0 | c0 3e 05 00 2f 00 00 00 0d 3f 05 00 1d 00 00 00 3d 3f 05 00 10 00 00 00 5b 3f 05 00 4d 00 00 00 | .>../....?......=?......[?..M... |
43c0 | 6c 3f 05 00 0f 00 00 00 ba 3f 05 00 3b 00 00 00 ca 3f 05 00 12 00 00 00 06 40 05 00 1d 00 00 00 | l?.......?..;....?.......@...... |
43e0 | 19 40 05 00 44 00 00 00 37 40 05 00 51 00 00 00 7c 40 05 00 41 00 00 00 ce 40 05 00 6a 00 00 00 | .@..D...7@..Q...|@..A....@..j... |
4400 | 10 41 05 00 66 00 00 00 7b 41 05 00 1c 00 00 00 e2 41 05 00 8d 00 00 00 ff 41 05 00 d1 00 00 00 | .A..f...{A.......A.......A...... |
4420 | 8d 42 05 00 1d 00 00 00 5f 43 05 00 e3 00 00 00 7d 43 05 00 e4 00 00 00 61 44 05 00 24 00 00 00 | .B......_C......}C......aD..$... |
4440 | 46 45 05 00 8d 00 00 00 6b 45 05 00 5a 00 00 00 f9 45 05 00 1a 00 00 00 54 46 05 00 21 00 00 00 | FE......kE..Z....E......TF..!... |
4460 | 6f 46 05 00 22 00 00 00 91 46 05 00 70 00 00 00 b4 46 05 00 72 00 00 00 25 47 05 00 29 00 00 00 | oF.."....F..p....F..r...%G..)... |
4480 | 98 47 05 00 77 00 00 00 c2 47 05 00 73 00 00 00 3a 48 05 00 90 00 00 00 ae 48 05 00 53 00 00 00 | .G..w....G..s...:H.......H..S... |
44a0 | 3f 49 05 00 b6 00 00 00 93 49 05 00 5c 00 00 00 4a 4a 05 00 1e 00 00 00 a7 4a 05 00 91 00 00 00 | ?I.......I..\...JJ.......J...... |
44c0 | c6 4a 05 00 54 00 00 00 58 4b 05 00 b7 00 00 00 ad 4b 05 00 60 00 00 00 65 4c 05 00 24 00 00 00 | .J..T...XK.......K..`...eL..$... |
44e0 | c6 4c 05 00 61 00 00 00 eb 4c 05 00 48 00 00 00 4d 4d 05 00 30 00 00 00 96 4d 05 00 3b 00 00 00 | .L..a....L..H...MM..0....M..;... |
4500 | c7 4d 05 00 25 00 00 00 03 4e 05 00 28 00 00 00 29 4e 05 00 2e 00 00 00 52 4e 05 00 9e 00 00 00 | .M..%....N..(...)N......RN...... |
4520 | 81 4e 05 00 3e 00 00 00 20 4f 05 00 11 00 00 00 5f 4f 05 00 19 00 00 00 71 4f 05 00 7a 00 00 00 | .N..>....O......_O......qO..z... |
4540 | 8b 4f 05 00 17 00 00 00 06 50 05 00 13 00 00 00 1e 50 05 00 7d 00 00 00 32 50 05 00 83 00 00 00 | .O.......P.......P..}...2P...... |
4560 | b0 50 05 00 11 00 00 00 34 51 05 00 10 00 00 00 46 51 05 00 33 00 00 00 57 51 05 00 33 00 00 00 | .P......4Q......FQ..3...WQ..3... |
4580 | 8b 51 05 00 33 00 00 00 bf 51 05 00 33 00 00 00 f3 51 05 00 6a 00 00 00 27 52 05 00 22 00 00 00 | .Q..3....Q..3....Q..j...'R.."... |
45a0 | 92 52 05 00 1e 01 00 00 b5 52 05 00 33 00 00 00 d4 53 05 00 dd 00 00 00 08 54 05 00 17 01 00 00 | .R.......R..3....S.......T...... |
45c0 | e6 54 05 00 49 00 00 00 fe 55 05 00 06 00 00 00 48 56 05 00 11 00 00 00 4f 56 05 00 38 00 00 00 | .T..I....U......HV......OV..8... |
45e0 | 61 56 05 00 28 00 00 00 9a 56 05 00 24 00 00 00 c3 56 05 00 9d 00 00 00 e8 56 05 00 37 00 00 00 | aV..(....V..$....V.......V..7... |
4600 | 86 57 05 00 89 00 00 00 be 57 05 00 5c 00 00 00 48 58 05 00 cd 01 00 00 a5 58 05 00 c2 00 00 00 | .W.......W..\...HX.......X...... |
4620 | 73 5a 05 00 65 00 00 00 36 5b 05 00 43 00 00 00 9c 5b 05 00 0a 00 00 00 e0 5b 05 00 b3 00 00 00 | sZ..e...6[..C....[.......[...... |
4640 | eb 5b 05 00 8c 00 00 00 9f 5c 05 00 e8 00 00 00 2c 5d 05 00 21 00 00 00 15 5e 05 00 05 00 00 00 | .[.......\......,]..!....^...... |
4660 | 37 5e 05 00 89 01 00 00 3d 5e 05 00 ae 01 00 00 c7 5f 05 00 27 00 00 00 76 61 05 00 09 00 00 00 | 7^......=^......._..'...va...... |
4680 | 9e 61 05 00 fc 00 00 00 a8 61 05 00 79 01 00 00 a5 62 05 00 0f 00 00 00 1f 64 05 00 6c 00 00 00 | .a.......a..y....b.......d..l... |
46a0 | 2f 64 05 00 35 00 00 00 9c 64 05 00 d4 00 00 00 d2 64 05 00 d4 00 00 00 a7 65 05 00 f4 00 00 00 | /d..5....d.......d.......e...... |
46c0 | 7c 66 05 00 24 00 00 00 71 67 05 00 6f 00 00 00 96 67 05 00 10 00 00 00 06 68 05 00 c6 00 00 00 | |f..$...qg..o....g.......h...... |
46e0 | 17 68 05 00 30 00 00 00 de 68 05 00 a3 00 00 00 0f 69 05 00 a4 00 00 00 b3 69 05 00 25 00 00 00 | .h..0....h.......i.......i..%... |
4700 | 58 6a 05 00 38 00 00 00 7e 6a 05 00 22 00 00 00 b7 6a 05 00 65 00 00 00 da 6a 05 00 80 00 00 00 | Xj..8...~j.."....j..e....j...... |
4720 | 40 6b 05 00 74 00 00 00 c1 6b 05 00 6a 00 00 00 36 6c 05 00 a9 00 00 00 a1 6c 05 00 01 00 00 00 | @k..t....k..j...6l.......l...... |
4740 | 4b 6d 05 00 03 00 00 00 4d 6d 05 00 1f 00 00 00 51 6d 05 00 11 00 00 00 71 6d 05 00 10 00 00 00 | Km......Mm......Qm......qm...... |
4760 | 83 6d 05 00 37 01 00 00 94 6d 05 00 0b 00 00 00 cc 6e 05 00 0e 00 00 00 d8 6e 05 00 17 00 00 00 | .m..7....m.......n.......n...... |
4780 | e7 6e 05 00 22 00 00 00 ff 6e 05 00 05 00 00 00 22 6f 05 00 05 00 00 00 28 6f 05 00 1b 00 00 00 | .n.."....n......"o......(o...... |
47a0 | 2e 6f 05 00 40 00 00 00 4a 6f 05 00 1b 00 00 00 8b 6f 05 00 0c 00 00 00 a7 6f 05 00 eb 00 00 00 | .o..@...Jo.......o.......o...... |
47c0 | b4 6f 05 00 03 00 00 00 a0 70 05 00 41 02 00 00 a4 70 05 00 ad 00 00 00 e6 72 05 00 0d 00 00 00 | .o.......p..A....p.......r...... |
47e0 | 94 73 05 00 91 00 00 00 a2 73 05 00 0b 00 00 00 34 74 05 00 34 00 00 00 40 74 05 00 25 00 00 00 | .s.......s......4t..4...@t..%... |
4800 | 75 74 05 00 16 00 00 00 9b 74 05 00 40 00 00 00 b2 74 05 00 23 00 00 00 f3 74 05 00 1f 00 00 00 | ut.......t..@....t..#....t...... |
4820 | 17 75 05 00 07 00 00 00 37 75 05 00 0f 00 00 00 3f 75 05 00 4b 00 00 00 4f 75 05 00 ab 01 00 00 | .u......7u......?u..K...Ou...... |
4840 | 9b 75 05 00 a3 00 00 00 47 77 05 00 13 00 00 00 eb 77 05 00 0f 00 00 00 ff 77 05 00 1c 00 00 00 | .u......Gw.......w.......w...... |
4860 | 0f 78 05 00 18 00 00 00 2c 78 05 00 23 00 00 00 45 78 05 00 0f 00 00 00 69 78 05 00 10 00 00 00 | .x......,x..#...Ex......ix...... |
4880 | 79 78 05 00 0e 00 00 00 8a 78 05 00 25 00 00 00 99 78 05 00 1a 00 00 00 bf 78 05 00 18 00 00 00 | yx.......x..%....x.......x...... |
48a0 | da 78 05 00 45 00 00 00 f3 78 05 00 16 00 00 00 39 79 05 00 43 00 00 00 50 79 05 00 25 00 00 00 | .x..E....x......9y..C...Py..%... |
48c0 | 94 79 05 00 38 00 00 00 ba 79 05 00 36 00 00 00 f3 79 05 00 20 00 00 00 2a 7a 05 00 13 00 00 00 | .y..8....y..6....y......*z...... |
48e0 | 4b 7a 05 00 1e 00 00 00 5f 7a 05 00 15 00 00 00 7e 7a 05 00 10 00 00 00 94 7a 05 00 ec 00 00 00 | Kz......_z......~z.......z...... |
4900 | a5 7a 05 00 ba 00 00 00 92 7b 05 00 ba 00 00 00 4d 7c 05 00 25 00 00 00 08 7d 05 00 89 00 00 00 | .z.......{......M|..%....}...... |
4920 | 2e 7d 05 00 13 00 00 00 b8 7d 05 00 1a 00 00 00 cc 7d 05 00 3a 00 00 00 e7 7d 05 00 81 01 00 00 | .}.......}.......}..:....}...... |
4940 | 22 7e 05 00 47 00 00 00 a4 7f 05 00 74 00 00 00 ec 7f 05 00 9d 00 00 00 61 80 05 00 7b 01 00 00 | "~..G.......t...........a...{... |
4960 | ff 80 05 00 61 00 00 00 7b 82 05 00 6c 00 00 00 dd 82 05 00 06 00 00 00 4a 83 05 00 47 00 00 00 | ....a...{...l...........J...G... |
4980 | 51 83 05 00 44 00 00 00 99 83 05 00 37 00 00 00 de 83 05 00 07 01 00 00 16 84 05 00 57 00 00 00 | Q...D.......7...............W... |
49a0 | 1e 85 05 00 31 00 00 00 76 85 05 00 5b 00 00 00 a8 85 05 00 1f 00 00 00 04 86 05 00 62 00 00 00 | ....1...v...[...............b... |
49c0 | 24 86 05 00 2b 00 00 00 87 86 05 00 04 00 00 00 b3 86 05 00 16 00 00 00 b8 86 05 00 37 00 00 00 | $...+.......................7... |
49e0 | cf 86 05 00 38 01 00 00 07 87 05 00 0d 00 00 00 40 88 05 00 0d 00 00 00 4e 88 05 00 12 00 00 00 | ....8...........@.......N....... |
4a00 | 5c 88 05 00 0a 00 00 00 6f 88 05 00 4e 00 00 00 7a 88 05 00 08 01 00 00 c9 88 05 00 24 01 00 00 | \.......o...N...z...........$... |
4a20 | d2 89 05 00 15 00 00 00 f7 8a 05 00 9c 01 00 00 0d 8b 05 00 5c 00 00 00 aa 8c 05 00 a4 00 00 00 | ....................\........... |
4a40 | 07 8d 05 00 16 00 00 00 ac 8d 05 00 8a 02 00 00 c3 8d 05 00 1d 00 00 00 4e 90 05 00 0c 00 00 00 | ........................N....... |
4a60 | 6c 90 05 00 1f 00 00 00 79 90 05 00 43 00 00 00 99 90 05 00 0d 00 00 00 dd 90 05 00 c1 00 00 00 | l.......y...C................... |
4a80 | eb 90 05 00 77 00 00 00 ad 91 05 00 69 00 00 00 25 92 05 00 62 00 00 00 8f 92 05 00 76 00 00 00 | ....w.......i...%...b.......v... |
4aa0 | f2 92 05 00 0e 01 00 00 69 93 05 00 cb 00 00 00 78 94 05 00 19 01 00 00 44 95 05 00 43 00 00 00 | ........i.......x.......D...C... |
4ac0 | 5e 96 05 00 ab 00 00 00 a2 96 05 00 9a 00 00 00 4e 97 05 00 a6 00 00 00 e9 97 05 00 6e 01 00 00 | ^...............N...........n... |
4ae0 | 90 98 05 00 17 01 00 00 ff 99 05 00 6f 00 00 00 17 9b 05 00 7b 00 00 00 87 9b 05 00 7d 00 00 00 | ............o.......{.......}... |
4b00 | 03 9c 05 00 12 01 00 00 81 9c 05 00 e6 00 00 00 94 9d 05 00 b6 00 00 00 7b 9e 05 00 3c 01 00 00 | ........................{...<... |
4b20 | 32 9f 05 00 b1 00 00 00 6f a0 05 00 fb 00 00 00 21 a1 05 00 20 00 00 00 1d a2 05 00 a0 01 00 00 | 2.......o.......!............... |
4b40 | 3e a2 05 00 53 00 00 00 df a3 05 00 39 00 00 00 33 a4 05 00 28 00 00 00 6d a4 05 00 4a 00 00 00 | >...S.......9...3...(...m...J... |
4b60 | 96 a4 05 00 3b 00 00 00 e1 a4 05 00 34 00 00 00 1d a5 05 00 52 00 00 00 52 a5 05 00 53 00 00 00 | ....;.......4.......R...R...S... |
4b80 | a5 a5 05 00 52 00 00 00 f9 a5 05 00 80 01 00 00 4c a6 05 00 36 00 00 00 cd a7 05 00 23 00 00 00 | ....R...........L...6.......#... |
4ba0 | 04 a8 05 00 0b 00 00 00 28 a8 05 00 ad 00 00 00 34 a8 05 00 91 00 00 00 e2 a8 05 00 1b 02 00 00 | ........(.......4............... |
4bc0 | 74 a9 05 00 e8 01 00 00 90 ab 05 00 07 00 00 00 79 ad 05 00 df 00 00 00 81 ad 05 00 45 01 00 00 | t...............y...........E... |
4be0 | 61 ae 05 00 22 00 00 00 a7 af 05 00 79 01 00 00 ca af 05 00 a6 00 00 00 44 b1 05 00 e9 00 00 00 | a...".......y...........D....... |
4c00 | eb b1 05 00 83 00 00 00 d5 b2 05 00 19 00 00 00 59 b3 05 00 0f 00 00 00 73 b3 05 00 09 00 00 00 | ................Y.......s....... |
4c20 | 83 b3 05 00 12 00 00 00 8d b3 05 00 0e 00 00 00 a0 b3 05 00 21 00 00 00 af b3 05 00 0e 00 00 00 | ....................!........... |
4c40 | d1 b3 05 00 17 00 00 00 e0 b3 05 00 14 00 00 00 f8 b3 05 00 19 00 00 00 0d b4 05 00 14 00 00 00 | ................................ |
4c60 | 27 b4 05 00 06 00 00 00 3c b4 05 00 13 00 00 00 43 b4 05 00 12 00 00 00 57 b4 05 00 0d 00 00 00 | '.......<.......C.......W....... |
4c80 | 6a b4 05 00 6a 00 00 00 78 b4 05 00 17 00 00 00 e3 b4 05 00 2e 00 00 00 fb b4 05 00 2d 00 00 00 | j...j...x...................-... |
4ca0 | 2a b5 05 00 08 00 00 00 58 b5 05 00 16 00 00 00 61 b5 05 00 ea 00 00 00 78 b5 05 00 59 00 00 00 | *.......X.......a.......x...Y... |
4cc0 | 63 b6 05 00 19 00 00 00 bd b6 05 00 7e 00 00 00 d7 b6 05 00 07 00 00 00 56 b7 05 00 2a 00 00 00 | c...........~...........V...*... |
4ce0 | 5e b7 05 00 4f 00 00 00 89 b7 05 00 17 00 00 00 d9 b7 05 00 3b 00 00 00 f1 b7 05 00 60 00 00 00 | ^...O...............;.......`... |
4d00 | 2d b8 05 00 87 01 00 00 8e b8 05 00 6e 00 00 00 16 ba 05 00 24 00 00 00 85 ba 05 00 54 00 00 00 | -...........n.......$.......T... |
4d20 | aa ba 05 00 a4 01 00 00 ff ba 05 00 8f 01 00 00 a4 bc 05 00 24 00 00 00 34 be 05 00 1f 00 00 00 | ....................$...4....... |
4d40 | 59 be 05 00 07 00 00 00 79 be 05 00 1b 00 00 00 81 be 05 00 08 00 00 00 9d be 05 00 5c 00 00 00 | Y.......y...................\... |
4d60 | a6 be 05 00 08 00 00 00 03 bf 05 00 1b 00 00 00 0c bf 05 00 57 00 00 00 28 bf 05 00 14 00 00 00 | ....................W...(....... |
4d80 | 80 bf 05 00 3f 00 00 00 95 bf 05 00 3a 00 00 00 d5 bf 05 00 75 00 00 00 10 c0 05 00 69 00 00 00 | ....?.......:.......u.......i... |
4da0 | 86 c0 05 00 32 01 00 00 f0 c0 05 00 36 01 00 00 23 c2 05 00 0c 00 00 00 5a c3 05 00 26 00 00 00 | ....2.......6...#.......Z...&... |
4dc0 | 67 c3 05 00 18 00 00 00 8e c3 05 00 2e 00 00 00 a7 c3 05 00 41 01 00 00 d6 c3 05 00 03 00 00 00 | g...................A........... |
4de0 | 18 c5 05 00 04 00 00 00 1c c5 05 00 14 00 00 00 21 c5 05 00 0c 00 00 00 36 c5 05 00 05 00 00 00 | ................!.......6....... |
4e00 | 43 c5 05 00 0c 00 00 00 49 c5 05 00 0d 00 00 00 56 c5 05 00 0b 00 00 00 64 c5 05 00 ae 00 00 00 | C.......I.......V.......d....... |
4e20 | 70 c5 05 00 31 01 00 00 1f c6 05 00 4f 00 00 00 51 c7 05 00 ca 00 00 00 a1 c7 05 00 43 00 00 00 | p...1.......O...Q...........C... |
4e40 | 6c c8 05 00 46 00 00 00 b0 c8 05 00 0b 00 00 00 f7 c8 05 00 0b 00 00 00 03 c9 05 00 19 00 00 00 | l...F........................... |
4e60 | 0f c9 05 00 0f 00 00 00 29 c9 05 00 ba 01 00 00 39 c9 05 00 6a 00 00 00 f4 ca 05 00 13 00 00 00 | ........).......9...j........... |
4e80 | 5f cb 05 00 e4 00 00 00 73 cb 05 00 46 00 00 00 58 cc 05 00 88 01 00 00 9f cc 05 00 89 01 00 00 | _.......s...F...X............... |
4ea0 | 28 ce 05 00 38 00 00 00 b2 cf 05 00 0b 00 00 00 eb cf 05 00 ce 00 00 00 f7 cf 05 00 6c 00 00 00 | (...8.......................l... |
4ec0 | c6 d0 05 00 10 01 00 00 33 d1 05 00 6e 00 00 00 44 d2 05 00 26 00 00 00 b3 d2 05 00 40 00 00 00 | ........3...n...D...&.......@... |
4ee0 | da d2 05 00 a0 00 00 00 1b d3 05 00 b9 00 00 00 bc d3 05 00 58 00 00 00 76 d4 05 00 64 00 00 00 | ....................X...v...d... |
4f00 | cf d4 05 00 39 00 00 00 34 d5 05 00 45 00 00 00 6e d5 05 00 4a 00 00 00 b4 d5 05 00 4b 00 00 00 | ....9...4...E...n...J.......K... |
4f20 | ff d5 05 00 56 00 00 00 4b d6 05 00 57 00 00 00 a2 d6 05 00 96 00 00 00 fa d6 05 00 37 00 00 00 | ....V...K...W...............7... |
4f40 | 91 d7 05 00 8f 00 00 00 c9 d7 05 00 06 00 00 00 59 d8 05 00 0f 00 00 00 60 d8 05 00 1b 00 00 00 | ................Y.......`....... |
4f60 | 70 d8 05 00 33 00 00 00 8c d8 05 00 56 00 00 00 c0 d8 05 00 0b 00 00 00 17 d9 05 00 12 00 00 00 | p...3.......V................... |
4f80 | 23 d9 05 00 38 00 00 00 36 d9 05 00 19 00 00 00 6f d9 05 00 33 00 00 00 89 d9 05 00 1f 00 00 00 | #...8...6.......o...3........... |
4fa0 | bd d9 05 00 2e 00 00 00 dd d9 05 00 93 01 00 00 0c da 05 00 0f 00 00 00 a0 db 05 00 0a 00 00 00 | ................................ |
4fc0 | b0 db 05 00 0a 00 00 00 bb db 05 00 63 00 00 00 c6 db 05 00 2f 00 00 00 2a dc 05 00 32 00 00 00 | ............c......./...*...2... |
4fe0 | 5a dc 05 00 4c 00 00 00 8d dc 05 00 23 00 00 00 da dc 05 00 64 00 00 00 fe dc 05 00 65 00 00 00 | Z...L.......#.......d.......e... |
5000 | 63 dd 05 00 6e 00 00 00 c9 dd 05 00 29 00 00 00 38 de 05 00 dd 00 00 00 62 de 05 00 2d 00 00 00 | c...n.......)...8.......b...-... |
5020 | 40 df 05 00 11 00 00 00 6e df 05 00 11 00 00 00 80 df 05 00 12 00 00 00 92 df 05 00 0c 00 00 00 | @.......n....................... |
5040 | a5 df 05 00 30 00 00 00 b2 df 05 00 3f 00 00 00 e3 df 05 00 40 00 00 00 23 e0 05 00 04 01 00 00 | ....0.......?.......@...#....... |
5060 | 64 e0 05 00 a9 00 00 00 69 e1 05 00 18 00 00 00 13 e2 05 00 08 00 00 00 2c e2 05 00 46 00 00 00 | d.......i...............,...F... |
5080 | 35 e2 05 00 4d 00 00 00 7c e2 05 00 1f 00 00 00 ca e2 05 00 4f 00 00 00 ea e2 05 00 3d 00 00 00 | 5...M...|...........O.......=... |
50a0 | 3a e3 05 00 08 00 00 00 78 e3 05 00 0e 00 00 00 81 e3 05 00 84 01 00 00 90 e3 05 00 8c 00 00 00 | :.......x....................... |
50c0 | 15 e5 05 00 fb 00 00 00 a2 e5 05 00 11 00 00 00 9e e6 05 00 0e 01 00 00 b0 e6 05 00 3a 00 00 00 | ............................:... |
50e0 | bf e7 05 00 09 00 00 00 fa e7 05 00 38 00 00 00 04 e8 05 00 bd 00 00 00 3d e8 05 00 30 00 00 00 | ............8...........=...0... |
5100 | fb e8 05 00 31 00 00 00 2c e9 05 00 24 00 00 00 5e e9 05 00 28 00 00 00 83 e9 05 00 23 00 00 00 | ....1...,...$...^...(.......#... |
5120 | ac e9 05 00 20 00 00 00 d0 e9 05 00 21 00 00 00 f1 e9 05 00 3a 00 00 00 13 ea 05 00 1f 00 00 00 | ............!.......:........... |
5140 | 4e ea 05 00 32 00 00 00 6e ea 05 00 26 00 00 00 a1 ea 05 00 13 00 00 00 c8 ea 05 00 41 00 00 00 | N...2...n...&...............A... |
5160 | dc ea 05 00 a0 00 00 00 1e eb 05 00 3e 00 00 00 bf eb 05 00 1f 00 00 00 fe eb 05 00 ce 00 00 00 | ............>................... |
5180 | 1e ec 05 00 4c 01 00 00 ed ec 05 00 36 01 00 00 3a ee 05 00 21 00 00 00 71 ef 05 00 1e 00 00 00 | ....L.......6...:...!...q....... |
51a0 | 93 ef 05 00 0e 00 00 00 b2 ef 05 00 03 00 00 00 c1 ef 05 00 39 00 00 00 c5 ef 05 00 2f 00 00 00 | ....................9......./... |
51c0 | ff ef 05 00 b8 00 00 00 2f f0 05 00 24 00 00 00 e8 f0 05 00 49 00 00 00 0d f1 05 00 03 00 00 00 | ......../...$.......I........... |
51e0 | 57 f1 05 00 24 00 00 00 5b f1 05 00 03 00 00 00 80 f1 05 00 06 00 00 00 84 f1 05 00 0c 00 00 00 | W...$...[....................... |
5200 | 8b f1 05 00 18 00 00 00 98 f1 05 00 17 00 00 00 b1 f1 05 00 15 00 00 00 c9 f1 05 00 22 00 00 00 | ............................"... |
5220 | df f1 05 00 4c 00 00 00 02 f2 05 00 45 00 00 00 4f f2 05 00 98 00 00 00 95 f2 05 00 15 00 00 00 | ....L.......E...O............... |
5240 | 2e f3 05 00 53 01 00 00 44 f3 05 00 20 00 00 00 98 f4 05 00 03 00 00 00 b9 f4 05 00 21 00 00 00 | ....S...D...................!... |
5260 | bd f4 05 00 21 00 00 00 df f4 05 00 04 00 00 00 01 f5 05 00 15 00 00 00 06 f5 05 00 e1 00 00 00 | ....!........................... |
5280 | 1c f5 05 00 08 00 00 00 fe f5 05 00 0d 00 00 00 07 f6 05 00 c3 00 00 00 15 f6 05 00 20 00 00 00 | ................................ |
52a0 | d9 f6 05 00 21 00 00 00 fa f6 05 00 0c 00 00 00 1c f7 05 00 0a 00 00 00 29 f7 05 00 72 00 00 00 | ....!...................)...r... |
52c0 | 34 f7 05 00 dc 00 00 00 a7 f7 05 00 0e 00 00 00 84 f8 05 00 4f 00 00 00 93 f8 05 00 6a 00 00 00 | 4...................O.......j... |
52e0 | e3 f8 05 00 50 00 00 00 4e f9 05 00 0e 00 00 00 9f f9 05 00 0b 00 00 00 ae f9 05 00 1f 00 00 00 | ....P...N....................... |
5300 | ba f9 05 00 41 00 00 00 da f9 05 00 13 04 00 00 1c fa 05 00 87 00 00 00 30 fe 05 00 25 00 00 00 | ....A...................0...%... |
5320 | b8 fe 05 00 0c 00 00 00 de fe 05 00 16 00 00 00 eb fe 05 00 2f 01 00 00 02 ff 05 00 96 00 00 00 | ..................../........... |
5340 | 32 00 06 00 1e 00 00 00 c9 00 06 00 1c 00 00 00 e8 00 06 00 ad 01 00 00 05 01 06 00 45 00 00 00 | 2...........................E... |
5360 | b3 02 06 00 16 00 00 00 f9 02 06 00 35 00 00 00 10 03 06 00 3b 00 00 00 46 03 06 00 4a 00 00 00 | ............5.......;...F...J... |
5380 | 82 03 06 00 54 00 00 00 cd 03 06 00 73 00 00 00 22 04 06 00 4c 00 00 00 96 04 06 00 0d 00 00 00 | ....T.......s..."...L........... |
53a0 | e3 04 06 00 23 00 00 00 f1 04 06 00 23 00 00 00 15 05 06 00 21 00 00 00 39 05 06 00 15 00 00 00 | ....#.......#.......!...9....... |
53c0 | 5b 05 06 00 0b 00 00 00 71 05 06 00 0a 00 00 00 7d 05 06 00 1e 00 00 00 88 05 06 00 0b 00 00 00 | [.......q.......}............... |
53e0 | a7 05 06 00 1f 00 00 00 b3 05 06 00 15 00 00 00 d3 05 06 00 48 00 00 00 e9 05 06 00 4e 00 00 00 | ....................H.......N... |
5400 | 32 06 06 00 0b 00 00 00 81 06 06 00 3d 00 00 00 8d 06 06 00 25 00 00 00 cb 06 06 00 29 00 00 00 | 2...........=.......%.......)... |
5420 | f1 06 06 00 11 00 00 00 1b 07 06 00 76 00 00 00 2d 07 06 00 43 00 00 00 a4 07 06 00 6b 00 00 00 | ............v...-...C.......k... |
5440 | e8 07 06 00 0c 00 00 00 54 08 06 00 20 00 00 00 61 08 06 00 0d 00 00 00 82 08 06 00 05 00 00 00 | ........T.......a............... |
5460 | 90 08 06 00 0d 00 00 00 96 08 06 00 0e 00 00 00 a4 08 06 00 81 00 00 00 b3 08 06 00 07 00 00 00 | ................................ |
5480 | 35 09 06 00 1a 00 00 00 3d 09 06 00 27 00 00 00 58 09 06 00 19 00 00 00 80 09 06 00 1e 00 00 00 | 5.......=...'...X............... |
54a0 | 9a 09 06 00 17 00 00 00 b9 09 06 00 1f 00 00 00 d1 09 06 00 6d 00 00 00 f1 09 06 00 58 00 00 00 | ....................m.......X... |
54c0 | 5f 0a 06 00 0c 00 00 00 b8 0a 06 00 0b 00 00 00 c5 0a 06 00 10 00 00 00 d1 0a 06 00 3d 00 00 00 | _...........................=... |
54e0 | e2 0a 06 00 39 00 00 00 20 0b 06 00 40 00 00 00 5a 0b 06 00 0d 00 00 00 9b 0b 06 00 0b 00 00 00 | ....9.......@...Z............... |
5500 | a9 0b 06 00 1f 00 00 00 b5 0b 06 00 0f 00 00 00 d5 0b 06 00 0f 00 00 00 e5 0b 06 00 1d 00 00 00 | ................................ |
5520 | f5 0b 06 00 09 00 00 00 13 0c 06 00 10 00 00 00 1d 0c 06 00 14 00 00 00 2e 0c 06 00 1d 00 00 00 | ................................ |
5540 | 43 0c 06 00 0f 00 00 00 61 0c 06 00 1d 00 00 00 71 0c 06 00 17 00 00 00 8f 0c 06 00 d0 01 00 00 | C.......a.......q............... |
5560 | a7 0c 06 00 2e 00 00 00 78 0e 06 00 7d 00 00 00 a7 0e 06 00 c1 00 00 00 25 0f 06 00 0c 00 00 00 | ........x...}...........%....... |
5580 | e7 0f 06 00 13 00 00 00 f4 0f 06 00 15 00 00 00 08 10 06 00 0f 00 00 00 1e 10 06 00 67 00 00 00 | ............................g... |
55a0 | 2e 10 06 00 56 00 00 00 96 10 06 00 11 00 00 00 ed 10 06 00 c1 00 00 00 ff 10 06 00 59 00 00 00 | ....V.......................Y... |
55c0 | c1 11 06 00 c6 00 00 00 1b 12 06 00 07 00 00 00 e2 12 06 00 07 00 00 00 ea 12 06 00 35 00 00 00 | ............................5... |
55e0 | f2 12 06 00 69 00 00 00 28 13 06 00 6c 00 00 00 92 13 06 00 2b 00 00 00 ff 13 06 00 7c 00 00 00 | ....i...(...l.......+.......|... |
5600 | 2b 14 06 00 69 00 00 00 a8 14 06 00 0b 00 00 00 12 15 06 00 09 00 00 00 1e 15 06 00 11 00 00 00 | +...i........................... |
5620 | 28 15 06 00 05 00 00 00 3a 15 06 00 ad 00 00 00 40 15 06 00 4c 00 00 00 ee 15 06 00 12 00 00 00 | (.......:.......@...L........... |
5640 | 3b 16 06 00 04 00 00 00 4e 16 06 00 06 00 00 00 53 16 06 00 06 00 00 00 5a 16 06 00 04 00 00 00 | ;.......N.......S.......Z....... |
5660 | 61 16 06 00 0f 00 00 00 66 16 06 00 16 00 00 00 76 16 06 00 d7 00 00 00 8d 16 06 00 fd 00 00 00 | a.......f.......v............... |
5680 | 65 17 06 00 65 01 00 00 63 18 06 00 06 00 00 00 c9 19 06 00 f4 00 00 00 d0 19 06 00 00 01 00 00 | e...e...c....................... |
56a0 | c5 1a 06 00 06 00 00 00 c6 1b 06 00 0b 02 00 00 cd 1b 06 00 e2 01 00 00 d9 1d 06 00 03 00 00 00 | ................................ |
56c0 | bc 1f 06 00 27 00 00 00 c0 1f 06 00 18 00 00 00 e8 1f 06 00 0a 00 00 00 01 20 06 00 7b 01 00 00 | ....'.......................{... |
56e0 | 0c 20 06 00 40 00 00 00 88 21 06 00 a9 01 00 00 c9 21 06 00 30 00 00 00 73 23 06 00 0c 00 00 00 | ....@....!.......!..0...s#...... |
5700 | a4 23 06 00 10 00 00 00 b1 23 06 00 1b 00 00 00 c2 23 06 00 2e 00 00 00 de 23 06 00 0b 00 00 00 | .#.......#.......#.......#...... |
5720 | 0d 24 06 00 13 00 00 00 19 24 06 00 0b 00 00 00 2d 24 06 00 2e 00 00 00 39 24 06 00 46 00 00 00 | .$.......$......-$......9$..F... |
5740 | 68 24 06 00 0d 00 00 00 af 24 06 00 0b 00 00 00 bd 24 06 00 58 01 00 00 c9 24 06 00 88 00 00 00 | h$.......$.......$..X....$...... |
5760 | 22 26 06 00 45 00 00 00 ab 26 06 00 29 00 00 00 f1 26 06 00 96 00 00 00 1b 27 06 00 10 00 00 00 | "&..E....&..)....&.......'...... |
5780 | b2 27 06 00 2f 00 00 00 c3 27 06 00 43 00 00 00 f3 27 06 00 37 00 00 00 37 28 06 00 49 00 00 00 | .'../....'..C....'..7...7(..I... |
57a0 | 6f 28 06 00 09 00 00 00 b9 28 06 00 a8 00 00 00 c3 28 06 00 3a 00 00 00 6c 29 06 00 08 00 00 00 | o(.......(.......(..:...l)...... |
57c0 | a7 29 06 00 20 00 00 00 b0 29 06 00 28 00 00 00 d1 29 06 00 4b 00 00 00 fa 29 06 00 0f 00 00 00 | .).......)..(....)..K....)...... |
57e0 | 46 2a 06 00 26 01 00 00 56 2a 06 00 5b 01 00 00 7d 2b 06 00 87 00 00 00 d9 2c 06 00 86 00 00 00 | F*..&...V*..[...}+.......,...... |
5800 | 61 2d 06 00 ce 01 00 00 e8 2d 06 00 18 00 00 00 b7 2f 06 00 51 00 00 00 d0 2f 06 00 f2 00 00 00 | a-.......-......./..Q..../...... |
5820 | 22 30 06 00 0e 00 00 00 15 31 06 00 34 00 00 00 24 31 06 00 36 00 00 00 59 31 06 00 bd 00 00 00 | "0.......1..4...$1..6...Y1...... |
5840 | 90 31 06 00 7e 00 00 00 4e 32 06 00 33 00 00 00 cd 32 06 00 0e 00 00 00 01 33 06 00 dd 00 00 00 | .1..~...N2..3....2.......3...... |
5860 | 10 33 06 00 06 00 00 00 ee 33 06 00 12 00 00 00 f5 33 06 00 14 00 00 00 08 34 06 00 0b 00 00 00 | .3.......3.......3.......4...... |
5880 | 1d 34 06 00 14 00 00 00 29 34 06 00 42 00 00 00 3e 34 06 00 07 00 00 00 81 34 06 00 07 00 00 00 | .4......)4..B...>4.......4...... |
58a0 | 89 34 06 00 c7 00 00 00 91 34 06 00 29 00 00 00 59 35 06 00 28 00 00 00 83 35 06 00 23 00 00 00 | .4.......4..)...Y5..(....5..#... |
58c0 | ac 35 06 00 14 00 00 00 d0 35 06 00 20 00 00 00 e5 35 06 00 18 00 00 00 06 36 06 00 28 00 00 00 | .5.......5.......5.......6..(... |
58e0 | 1f 36 06 00 1d 00 00 00 48 36 06 00 29 00 00 00 66 36 06 00 1e 00 00 00 90 36 06 00 30 00 00 00 | .6......H6..)...f6.......6..0... |
5900 | af 36 06 00 4b 00 00 00 e0 36 06 00 6e 00 00 00 2c 37 06 00 2d 00 00 00 9b 37 06 00 2d 00 00 00 | .6..K....6..n...,7..-....7..-... |
5920 | c9 37 06 00 35 00 00 00 f7 37 06 00 16 00 00 00 2d 38 06 00 1c 00 00 00 44 38 06 00 1b 00 00 00 | .7..5....7......-8......D8...... |
5940 | 61 38 06 00 21 00 00 00 7d 38 06 00 41 00 00 00 9f 38 06 00 35 00 00 00 e1 38 06 00 97 00 00 00 | a8..!...}8..A....8..5....8...... |
5960 | 17 39 06 00 4e 00 00 00 af 39 06 00 1d 00 00 00 fe 39 06 00 4c 00 00 00 1c 3a 06 00 17 00 00 00 | .9..N....9.......9..L....:...... |
5980 | 69 3a 06 00 1f 00 00 00 81 3a 06 00 1b 00 00 00 a1 3a 06 00 24 00 00 00 bd 3a 06 00 31 00 00 00 | i:.......:.......:..$....:..1... |
59a0 | e2 3a 06 00 47 00 00 00 14 3b 06 00 4f 00 00 00 5c 3b 06 00 45 00 00 00 ac 3b 06 00 7c 00 00 00 | .:..G....;..O...\;..E....;..|... |
59c0 | f2 3b 06 00 26 00 00 00 6f 3c 06 00 43 00 00 00 96 3c 06 00 4c 00 00 00 da 3c 06 00 3c 00 00 00 | .;..&...o<..C....<..L....<..<... |
59e0 | 27 3d 06 00 39 00 00 00 64 3d 06 00 4a 00 00 00 9e 3d 06 00 5a 00 00 00 e9 3d 06 00 2a 00 00 00 | '=..9...d=..J....=..Z....=..*... |
5a00 | 44 3e 06 00 3f 00 00 00 6f 3e 06 00 47 00 00 00 af 3e 06 00 42 00 00 00 f7 3e 06 00 28 00 00 00 | D>..?...o>..G....>..B....>..(... |
5a20 | 3a 3f 06 00 2a 00 00 00 63 3f 06 00 2d 00 00 00 8e 3f 06 00 30 00 00 00 bc 3f 06 00 2d 00 00 00 | :?..*...c?..-....?..0....?..-... |
5a40 | ed 3f 06 00 2c 00 00 00 1b 40 06 00 19 00 00 00 48 40 06 00 29 00 00 00 62 40 06 00 30 00 00 00 | .?..,....@......H@..)...b@..0... |
5a60 | 8c 40 06 00 24 00 00 00 bd 40 06 00 2b 00 00 00 e2 40 06 00 29 00 00 00 0e 41 06 00 35 00 00 00 | .@..$....@..+....@..)....A..5... |
5a80 | 38 41 06 00 2a 00 00 00 6e 41 06 00 10 00 00 00 99 41 06 00 2b 00 00 00 aa 41 06 00 55 00 00 00 | 8A..*...nA.......A..+....A..U... |
5aa0 | d6 41 06 00 3c 00 00 00 2c 42 06 00 90 00 00 00 69 42 06 00 1a 00 00 00 fa 42 06 00 4c 00 00 00 | .A..<...,B......iB.......B..L... |
5ac0 | 15 43 06 00 1f 00 00 00 62 43 06 00 71 00 00 00 82 43 06 00 6b 00 00 00 f4 43 06 00 5b 00 00 00 | .C......bC..q....C..k....C..[... |
5ae0 | 60 44 06 00 2c 00 00 00 bc 44 06 00 4e 00 00 00 e9 44 06 00 2a 00 00 00 38 45 06 00 a0 00 00 00 | `D..,....D..N....D..*...8E...... |
5b00 | 63 45 06 00 65 00 00 00 04 46 06 00 27 01 00 00 6a 46 06 00 d0 00 00 00 92 47 06 00 d8 00 00 00 | cE..e....F..'...jF.......G...... |
5b20 | 63 48 06 00 3f 00 00 00 3c 49 06 00 38 00 00 00 7c 49 06 00 46 00 00 00 b5 49 06 00 40 00 00 00 | cH..?...<I..8...|I..F....I..@... |
5b40 | fc 49 06 00 53 00 00 00 3d 4a 06 00 45 00 00 00 91 4a 06 00 26 01 00 00 d7 4a 06 00 f1 00 00 00 | .I..S...=J..E....J..&....J...... |
5b60 | fe 4b 06 00 48 00 00 00 f0 4c 06 00 49 00 00 00 39 4d 06 00 d0 00 00 00 83 4d 06 00 24 00 00 00 | .K..H....L..I...9M.......M..$... |
5b80 | 54 4e 06 00 16 00 00 00 79 4e 06 00 60 00 00 00 90 4e 06 00 50 00 00 00 f1 4e 06 00 27 00 00 00 | TN......yN..`....N..P....N..'... |
5ba0 | 42 4f 06 00 18 00 00 00 6a 4f 06 00 49 00 00 00 83 4f 06 00 52 00 00 00 cd 4f 06 00 58 00 00 00 | BO......jO..I....O..R....O..X... |
5bc0 | 20 50 06 00 3d 00 00 00 79 50 06 00 25 00 00 00 b7 50 06 00 26 00 00 00 dd 50 06 00 2a 00 00 00 | .P..=...yP..%....P..&....P..*... |
5be0 | 04 51 06 00 23 00 00 00 2f 51 06 00 47 00 00 00 53 51 06 00 a4 00 00 00 9b 51 06 00 aa 00 00 00 | .Q..#.../Q..G...SQ.......Q...... |
5c00 | 40 52 06 00 55 00 00 00 eb 52 06 00 f4 00 00 00 41 53 06 00 44 00 00 00 36 54 06 00 61 00 00 00 | @R..U....R......AS..D...6T..a... |
5c20 | 7b 54 06 00 54 00 00 00 dd 54 06 00 3c 00 00 00 32 55 06 00 6d 00 00 00 6f 55 06 00 6a 00 00 00 | {T..T....T..<...2U..m...oU..j... |
5c40 | dd 55 06 00 43 00 00 00 48 56 06 00 5c 00 00 00 8c 56 06 00 34 00 00 00 e9 56 06 00 a4 00 00 00 | .U..C...HV..\....V..4....V...... |
5c60 | 1e 57 06 00 a8 00 00 00 c3 57 06 00 e8 00 00 00 6c 58 06 00 ec 00 00 00 55 59 06 00 2c 00 00 00 | .W.......W......lX......UY..,... |
5c80 | 42 5a 06 00 34 00 00 00 6f 5a 06 00 23 00 00 00 a4 5a 06 00 55 00 00 00 c8 5a 06 00 56 00 00 00 | BZ..4...oZ..#....Z..U....Z..V... |
5ca0 | 1e 5b 06 00 35 00 00 00 75 5b 06 00 66 00 00 00 ab 5b 06 00 7b 00 00 00 12 5c 06 00 41 00 00 00 | .[..5...u[..f....[..{....\..A... |
5cc0 | 8e 5c 06 00 42 00 00 00 d0 5c 06 00 41 00 00 00 13 5d 06 00 56 00 00 00 55 5d 06 00 35 00 00 00 | .\..B....\..A....]..V...U]..5... |
5ce0 | ac 5d 06 00 2b 00 00 00 e2 5d 06 00 2f 00 00 00 0e 5e 06 00 44 00 00 00 3e 5e 06 00 63 00 00 00 | .]..+....]../....^..D...>^..c... |
5d00 | 83 5e 06 00 56 00 00 00 e7 5e 06 00 4d 00 00 00 3e 5f 06 00 34 00 00 00 8c 5f 06 00 3f 00 00 00 | .^..V....^..M...>_..4...._..?... |
5d20 | c1 5f 06 00 79 01 00 00 01 60 06 00 df 00 00 00 7b 61 06 00 f0 00 00 00 5b 62 06 00 54 00 00 00 | ._..y....`......{a......[b..T... |
5d40 | 4c 63 06 00 32 00 00 00 a1 63 06 00 0c 01 00 00 d4 63 06 00 59 00 00 00 e1 64 06 00 4e 00 00 00 | Lc..2....c.......c..Y....d..N... |
5d60 | 3b 65 06 00 26 01 00 00 8a 65 06 00 4a 00 00 00 b1 66 06 00 1a 00 00 00 fc 66 06 00 2f 00 00 00 | ;e..&....e..J....f.......f../... |
5d80 | 17 67 06 00 a4 00 00 00 47 67 06 00 2a 00 00 00 ec 67 06 00 1d 01 00 00 17 68 06 00 2d 00 00 00 | .g......Gg..*....g.......h..-... |
5da0 | 35 69 06 00 af 00 00 00 63 69 06 00 63 00 00 00 13 6a 06 00 ce 00 00 00 77 6a 06 00 53 00 00 00 | 5i......ci..c....j......wj..S... |
5dc0 | 46 6b 06 00 45 00 00 00 9a 6b 06 00 34 00 00 00 e0 6b 06 00 7a 00 00 00 15 6c 06 00 32 00 00 00 | Fk..E....k..4....k..z....l..2... |
5de0 | 90 6c 06 00 27 00 00 00 c3 6c 06 00 46 00 00 00 eb 6c 06 00 2e 00 00 00 32 6d 06 00 60 00 00 00 | .l..'....l..F....l......2m..`... |
5e00 | 61 6d 06 00 27 00 00 00 c2 6d 06 00 5b 00 00 00 ea 6d 06 00 78 00 00 00 46 6e 06 00 5f 00 00 00 | am..'....m..[....m..x...Fn.._... |
5e20 | bf 6e 06 00 1b 00 00 00 1f 6f 06 00 0c 00 00 00 3b 6f 06 00 b4 01 00 00 48 6f 06 00 11 00 00 00 | .n.......o......;o......Ho...... |
5e40 | fd 70 06 00 12 00 00 00 0f 71 06 00 ed 00 00 00 22 71 06 00 17 00 00 00 10 72 06 00 18 00 00 00 | .p.......q......"q.......r...... |
5e60 | 28 72 06 00 12 00 00 00 41 72 06 00 35 00 00 00 54 72 06 00 26 00 00 00 8a 72 06 00 2c 00 00 00 | (r......Ar..5...Tr..&....r..,... |
5e80 | b1 72 06 00 75 00 00 00 de 72 06 00 41 00 00 00 54 73 06 00 41 00 00 00 96 73 06 00 6f 00 00 00 | .r..u....r..A...Ts..A....s..o... |
5ea0 | d8 73 06 00 9f 00 00 00 48 74 06 00 a1 00 00 00 e8 74 06 00 7f 00 00 00 8a 75 06 00 77 00 00 00 | .s......Ht.......t.......u..w... |
5ec0 | 0a 76 06 00 08 00 00 00 82 76 06 00 0e 00 00 00 8b 76 06 00 06 00 00 00 9a 76 06 00 15 00 00 00 | .v.......v.......v.......v...... |
5ee0 | a1 76 06 00 27 00 00 00 b7 76 06 00 ee 00 00 00 df 76 06 00 eb 00 00 00 ce 77 06 00 04 00 00 00 | .v..'....v.......v.......w...... |
5f00 | ba 78 06 00 20 00 00 00 bf 78 06 00 22 00 00 00 e0 78 06 00 11 00 00 00 03 79 06 00 3a 00 00 00 | .x.......x.."....x.......y..:... |
5f20 | 15 79 06 00 20 00 00 00 50 79 06 00 14 00 00 00 71 79 06 00 55 00 00 00 86 79 06 00 28 00 00 00 | .y......Py......qy..U....y..(... |
5f40 | dc 79 06 00 88 00 00 00 05 7a 06 00 16 00 00 00 8e 7a 06 00 16 00 00 00 a5 7a 06 00 18 00 00 00 | .y.......z.......z.......z...... |
5f60 | bc 7a 06 00 26 00 00 00 d5 7a 06 00 1a 00 00 00 fc 7a 06 00 27 00 00 00 17 7b 06 00 23 00 00 00 | .z..&....z.......z..'....{..#... |
5f80 | 3f 7b 06 00 17 00 00 00 63 7b 06 00 21 00 00 00 7b 7b 06 00 28 00 00 00 9d 7b 06 00 49 00 00 00 | ?{......c{..!...{{..(....{..I... |
5fa0 | c6 7b 06 00 44 00 00 00 10 7c 06 00 25 00 00 00 55 7c 06 00 12 00 00 00 7b 7c 06 00 3a 00 00 00 | .{..D....|..%...U|......{|..:... |
5fc0 | 8e 7c 06 00 32 00 00 00 c9 7c 06 00 3f 00 00 00 fc 7c 06 00 a2 00 00 00 3c 7d 06 00 21 00 00 00 | .|..2....|..?....|......<}..!... |
5fe0 | df 7d 06 00 0d 00 00 00 01 7e 06 00 4a 00 00 00 0f 7e 06 00 2e 00 00 00 5a 7e 06 00 2e 00 00 00 | .}.......~..J....~......Z~...... |
6000 | 89 7e 06 00 2e 00 00 00 b8 7e 06 00 1f 00 00 00 e7 7e 06 00 41 00 00 00 07 7f 06 00 3c 00 00 00 | .~.......~.......~..A.......<... |
6020 | 49 7f 06 00 5b 00 00 00 86 7f 06 00 30 00 00 00 e2 7f 06 00 3f 00 00 00 13 80 06 00 38 00 00 00 | I...[.......0.......?.......8... |
6040 | 53 80 06 00 52 00 00 00 8c 80 06 00 39 00 00 00 df 80 06 00 3b 00 00 00 19 81 06 00 4a 00 00 00 | S...R.......9.......;.......J... |
6060 | 55 81 06 00 2d 00 00 00 a0 81 06 00 3d 00 00 00 ce 81 06 00 24 00 00 00 0c 82 06 00 20 00 00 00 | U...-.......=.......$........... |
6080 | 31 82 06 00 29 00 00 00 52 82 06 00 2b 00 00 00 7c 82 06 00 38 00 00 00 a8 82 06 00 3a 00 00 00 | 1...)...R...+...|...8.......:... |
60a0 | e1 82 06 00 3a 00 00 00 1c 83 06 00 30 00 00 00 57 83 06 00 27 00 00 00 88 83 06 00 8d 00 00 00 | ....:.......0...W...'........... |
60c0 | b0 83 06 00 8d 00 00 00 3e 84 06 00 2f 00 00 00 cc 84 06 00 2a 00 00 00 fc 84 06 00 19 00 00 00 | ........>.../.......*........... |
60e0 | 27 85 06 00 5e 00 00 00 41 85 06 00 23 00 00 00 a0 85 06 00 37 00 00 00 c4 85 06 00 20 00 00 00 | '...^...A...#.......7........... |
6100 | fc 85 06 00 1c 00 00 00 1d 86 06 00 30 00 00 00 3a 86 06 00 27 00 00 00 6b 86 06 00 20 00 00 00 | ............0...:...'...k....... |
6120 | 93 86 06 00 25 00 00 00 b4 86 06 00 dd 00 00 00 da 86 06 00 da 00 00 00 b8 87 06 00 da 00 00 00 | ....%........................... |
6140 | 93 88 06 00 0e 00 00 00 6e 89 06 00 40 00 00 00 7d 89 06 00 23 00 00 00 be 89 06 00 24 00 00 00 | ........n...@...}...#.......$... |
6160 | e2 89 06 00 07 00 00 00 07 8a 06 00 07 00 00 00 0f 8a 06 00 33 00 00 00 17 8a 06 00 33 00 00 00 | ....................3.......3... |
6180 | 4b 8a 06 00 33 00 00 00 7f 8a 06 00 33 00 00 00 b3 8a 06 00 40 00 00 00 e7 8a 06 00 51 00 00 00 | K...3.......3.......@.......Q... |
61a0 | 28 8b 06 00 4f 00 00 00 7a 8b 06 00 3d 00 00 00 ca 8b 06 00 64 00 00 00 08 8c 06 00 6f 00 00 00 | (...O...z...=.......d.......o... |
61c0 | 6d 8c 06 00 cd 00 00 00 dd 8c 06 00 82 00 00 00 ab 8d 06 00 8f 00 00 00 2e 8e 06 00 e1 00 00 00 | m............................... |
61e0 | be 8e 06 00 c3 00 00 00 a0 8f 06 00 8b 00 00 00 64 90 06 00 19 00 00 00 f0 90 06 00 10 00 00 00 | ................d............... |
6200 | 0a 91 06 00 0c 00 00 00 1b 91 06 00 ac 00 00 00 28 91 06 00 e2 00 00 00 d5 91 06 00 14 00 00 00 | ................(............... |
6220 | b8 92 06 00 c3 00 00 00 cd 92 06 00 95 00 00 00 91 93 06 00 13 01 00 00 27 94 06 00 31 00 00 00 | ........................'...1... |
6240 | 3b 95 06 00 0a 00 00 00 6d 95 06 00 21 01 00 00 78 95 06 00 d8 00 00 00 9a 96 06 00 8b 00 00 00 | ;.......m...!...x............... |
6260 | 73 97 06 00 8c 00 00 00 ff 97 06 00 f8 00 00 00 8c 98 06 00 39 00 00 00 85 99 06 00 49 00 00 00 | s...................9.......I... |
6280 | bf 99 06 00 b6 00 00 00 09 9a 06 00 93 00 00 00 c0 9a 06 00 80 00 00 00 54 9b 06 00 79 00 00 00 | ........................T...y... |
62a0 | d5 9b 06 00 79 00 00 00 4f 9c 06 00 53 01 00 00 c9 9c 06 00 7f 00 00 00 1d 9e 06 00 a9 00 00 00 | ....y...O...S................... |
62c0 | 9d 9e 06 00 b6 00 00 00 47 9f 06 00 83 00 00 00 fe 9f 06 00 86 00 00 00 82 a0 06 00 0e 00 00 00 | ........G....................... |
62e0 | 09 a1 06 00 5d 00 00 00 18 a1 06 00 36 00 00 00 76 a1 06 00 10 00 00 00 ad a1 06 00 0d 00 00 00 | ....].......6...v............... |
6300 | be a1 06 00 45 00 00 00 cc a1 06 00 45 00 00 00 12 a2 06 00 19 00 00 00 58 a2 06 00 22 00 00 00 | ....E.......E...........X..."... |
6320 | 72 a2 06 00 1c 00 00 00 95 a2 06 00 45 00 00 00 b2 a2 06 00 50 00 00 00 f8 a2 06 00 65 00 00 00 | r...........E.......P.......e... |
6340 | 49 a3 06 00 2f 00 00 00 af a3 06 00 60 00 00 00 df a3 06 00 54 00 00 00 40 a4 06 00 55 00 00 00 | I.../.......`.......T...@...U... |
6360 | 95 a4 06 00 48 00 00 00 eb a4 06 00 26 00 00 00 34 a5 06 00 26 00 00 00 5b a5 06 00 b2 00 00 00 | ....H.......&...4...&...[....... |
6380 | 82 a5 06 00 eb 00 00 00 35 a6 06 00 75 00 00 00 21 a7 06 00 77 00 00 00 97 a7 06 00 4d 00 00 00 | ........5...u...!...w.......M... |
63a0 | 0f a8 06 00 e2 00 00 00 5d a8 06 00 78 00 00 00 40 a9 06 00 29 01 00 00 b9 a9 06 00 53 00 00 00 | ........]...x...@...).......S... |
63c0 | e3 aa 06 00 42 00 00 00 37 ab 06 00 8b 00 00 00 7a ab 06 00 1e 00 00 00 06 ac 06 00 56 00 00 00 | ....B...7.......z...........V... |
63e0 | 25 ac 06 00 d2 00 00 00 7c ac 06 00 36 00 00 00 4f ad 06 00 ce 00 00 00 86 ad 06 00 c1 00 00 00 | %.......|...6...O............... |
6400 | 55 ae 06 00 38 00 00 00 17 af 06 00 57 00 00 00 50 af 06 00 bd 00 00 00 a8 af 06 00 85 00 00 00 | U...8.......W...P............... |
6420 | 66 b0 06 00 4f 00 00 00 ec b0 06 00 ba 01 00 00 3c b1 06 00 b6 00 00 00 f7 b2 06 00 63 00 00 00 | f...O...........<...........c... |
6440 | ae b3 06 00 4c 00 00 00 12 b4 06 00 d5 00 00 00 5f b4 06 00 66 00 00 00 35 b5 06 00 45 01 00 00 | ....L..........._...f...5...E... |
6460 | 9c b5 06 00 57 00 00 00 e2 b6 06 00 a4 00 00 00 3a b7 06 00 bc 00 00 00 df b7 06 00 65 00 00 00 | ....W...........:...........e... |
6480 | 9c b8 06 00 3f 00 00 00 02 b9 06 00 c0 01 00 00 42 b9 06 00 72 00 00 00 03 bb 06 00 74 00 00 00 | ....?...........B...r.......t... |
64a0 | 76 bb 06 00 58 00 00 00 eb bb 06 00 45 00 00 00 44 bc 06 00 41 00 00 00 8a bc 06 00 52 00 00 00 | v...X.......E...D...A.......R... |
64c0 | cc bc 06 00 81 00 00 00 1f bd 06 00 75 00 00 00 a1 bd 06 00 30 00 00 00 17 be 06 00 31 00 00 00 | ............u.......0.......1... |
64e0 | 48 be 06 00 7e 00 00 00 7a be 06 00 50 00 00 00 f9 be 06 00 36 00 00 00 4a bf 06 00 50 01 00 00 | H...~...z...P.......6...J...P... |
6500 | 81 bf 06 00 69 00 00 00 d2 c0 06 00 5d 00 00 00 3c c1 06 00 8e 00 00 00 9a c1 06 00 4a 00 00 00 | ....i.......]...<...........J... |
6520 | 29 c2 06 00 57 00 00 00 74 c2 06 00 6d 00 00 00 cc c2 06 00 64 00 00 00 3a c3 06 00 64 00 00 00 | )...W...t...m.......d...:...d... |
6540 | 9f c3 06 00 99 00 00 00 04 c4 06 00 26 00 00 00 9e c4 06 00 ad 00 00 00 c5 c4 06 00 81 00 00 00 | ............&................... |
6560 | 73 c5 06 00 33 00 00 00 f5 c5 06 00 c0 00 00 00 29 c6 06 00 90 00 00 00 ea c6 06 00 a2 00 00 00 | s...3...........)............... |
6580 | 7b c7 06 00 83 00 00 00 1e c8 06 00 41 00 00 00 a2 c8 06 00 3a 00 00 00 e4 c8 06 00 4b 00 00 00 | {...........A.......:.......K... |
65a0 | 1f c9 06 00 65 00 00 00 6b c9 06 00 06 00 00 00 d1 c9 06 00 05 00 00 00 d8 c9 06 00 e3 01 00 00 | ....e...k....................... |
65c0 | de c9 06 00 1e 00 00 00 c2 cb 06 00 1d 00 00 00 e1 cb 06 00 3d 00 00 00 ff cb 06 00 4b 02 00 00 | ....................=.......K... |
65e0 | 3d cc 06 00 5a 02 00 00 89 ce 06 00 6d 00 00 00 e4 d0 06 00 a8 00 00 00 52 d1 06 00 bf 00 00 00 | =...Z.......m...........R....... |
6600 | fb d1 06 00 b2 00 00 00 bb d2 06 00 06 00 00 00 6e d3 06 00 4b 01 00 00 75 d3 06 00 4c 01 00 00 | ................n...K...u...L... |
6620 | c1 d4 06 00 17 00 00 00 0e d6 06 00 0b 00 00 00 26 d6 06 00 0d 00 00 00 32 d6 06 00 55 00 00 00 | ................&.......2...U... |
6640 | 40 d6 06 00 0f 00 00 00 96 d6 06 00 0f 00 00 00 a6 d6 06 00 5c 00 00 00 b6 d6 06 00 ff 02 00 00 | @...................\........... |
6660 | 13 d7 06 00 b1 00 00 00 13 da 06 00 37 00 00 00 c5 da 06 00 06 00 00 00 fd da 06 00 12 00 00 00 | ............7................... |
6680 | 04 db 06 00 9a 00 00 00 17 db 06 00 08 00 00 00 b2 db 06 00 38 00 00 00 bb db 06 00 11 00 00 00 | ....................8........... |
66a0 | f4 db 06 00 1c 00 00 00 06 dc 06 00 12 00 00 00 23 dc 06 00 1a 00 00 00 36 dc 06 00 49 00 00 00 | ................#.......6...I... |
66c0 | 51 dc 06 00 1e 00 00 00 9b dc 06 00 2f 00 00 00 ba dc 06 00 73 00 00 00 ea dc 06 00 ae 00 00 00 | Q.........../.......s........... |
66e0 | 5e dd 06 00 af 00 00 00 0d de 06 00 d0 00 00 00 bd de 06 00 0b 00 00 00 8e df 06 00 08 00 00 00 | ^............................... |
6700 | 9a df 06 00 14 00 00 00 a3 df 06 00 4a 00 00 00 b8 df 06 00 60 00 00 00 03 e0 06 00 06 00 00 00 | ............J.......`........... |
6720 | 64 e0 06 00 06 00 00 00 6b e0 06 00 da 00 00 00 72 e0 06 00 98 00 00 00 4d e1 06 00 bc 00 00 00 | d.......k.......r.......M....... |
6740 | e6 e1 06 00 06 00 00 00 a3 e2 06 00 0a 00 00 00 aa e2 06 00 14 00 00 00 b5 e2 06 00 1b 00 00 00 | ................................ |
6760 | ca e2 06 00 0c 00 00 00 e6 e2 06 00 2e 00 00 00 f3 e2 06 00 1d 00 00 00 22 e3 06 00 0e 00 00 00 | ........................"....... |
6780 | 40 e3 06 00 ff 01 00 00 4f e3 06 00 26 00 00 00 4f e5 06 00 0e 00 00 00 76 e5 06 00 21 00 00 00 | @.......O...&...O.......v...!... |
67a0 | 85 e5 06 00 98 00 00 00 a7 e5 06 00 07 00 00 00 40 e6 06 00 03 00 00 00 48 e6 06 00 91 00 00 00 | ................@.......H....... |
67c0 | 4c e6 06 00 0b 00 00 00 de e6 06 00 6a 00 00 00 ea e6 06 00 0e 00 00 00 55 e7 06 00 08 00 00 00 | L...........j...........U....... |
67e0 | 64 e7 06 00 2b 00 00 00 6d e7 06 00 29 00 00 00 99 e7 06 00 35 00 00 00 c3 e7 06 00 54 00 00 00 | d...+...m...).......5.......T... |
6800 | f9 e7 06 00 5c 00 00 00 4e e8 06 00 7b 00 00 00 ab e8 06 00 56 00 00 00 27 e9 06 00 25 00 00 00 | ....\...N...{.......V...'...%... |
6820 | 7e e9 06 00 3a 00 00 00 a4 e9 06 00 3a 00 00 00 df e9 06 00 0d 00 00 00 1a ea 06 00 64 00 00 00 | ~...:.......:...............d... |
6840 | 28 ea 06 00 64 00 00 00 8d ea 06 00 67 00 00 00 f2 ea 06 00 67 00 00 00 5a eb 06 00 1f 00 00 00 | (...d.......g.......g...Z....... |
6860 | c2 eb 06 00 0c 00 00 00 e2 eb 06 00 16 00 00 00 ef eb 06 00 44 01 00 00 06 ec 06 00 41 00 00 00 | ....................D.......A... |
6880 | 4b ed 06 00 47 00 00 00 8d ed 06 00 d3 00 00 00 d5 ed 06 00 3a 02 00 00 a9 ee 06 00 d7 00 00 00 | K...G...............:........... |
68a0 | e4 f0 06 00 93 00 00 00 bc f1 06 00 4e 01 00 00 50 f2 06 00 30 00 00 00 9f f3 06 00 c8 00 00 00 | ............N...P...0........... |
68c0 | d0 f3 06 00 ab 00 00 00 99 f4 06 00 31 00 00 00 45 f5 06 00 68 01 00 00 77 f5 06 00 39 00 00 00 | ............1...E...h...w...9... |
68e0 | e0 f6 06 00 3b 01 00 00 1a f7 06 00 b2 00 00 00 56 f8 06 00 27 00 00 00 09 f9 06 00 44 00 00 00 | ....;...........V...'.......D... |
6900 | 31 f9 06 00 d2 00 00 00 76 f9 06 00 73 00 00 00 49 fa 06 00 d7 00 00 00 bd fa 06 00 9f 00 00 00 | 1.......v...s...I............... |
6920 | 95 fb 06 00 af 00 00 00 35 fc 06 00 cc 00 00 00 e5 fc 06 00 4f 00 00 00 b2 fd 06 00 3f 01 00 00 | ........5...........O.......?... |
6940 | 02 fe 06 00 c1 00 00 00 42 ff 06 00 59 00 00 00 04 00 07 00 21 01 00 00 5e 00 07 00 59 00 00 00 | ........B...Y.......!...^...Y... |
6960 | 80 01 07 00 29 01 00 00 da 01 07 00 6f 00 00 00 04 03 07 00 8f 00 00 00 74 03 07 00 8d 00 00 00 | ....).......o...........t....... |
6980 | 04 04 07 00 9e 00 00 00 92 04 07 00 6c 00 00 00 31 05 07 00 3a 00 00 00 9e 05 07 00 95 00 00 00 | ............l...1...:........... |
69a0 | d9 05 07 00 68 00 00 00 6f 06 07 00 58 00 00 00 d8 06 07 00 15 01 00 00 31 07 07 00 96 00 00 00 | ....h...o...X...........1....... |
69c0 | 47 08 07 00 52 00 00 00 de 08 07 00 52 00 00 00 31 09 07 00 99 00 00 00 84 09 07 00 96 00 00 00 | G...R.......R...1............... |
69e0 | 1e 0a 07 00 94 00 00 00 b5 0a 07 00 9e 00 00 00 4a 0b 07 00 79 00 00 00 e9 0b 07 00 50 00 00 00 | ................J...y.......P... |
6a00 | 63 0c 07 00 9e 00 00 00 b4 0c 07 00 13 00 00 00 53 0d 07 00 3a 00 00 00 67 0d 07 00 98 01 00 00 | c...............S...:...g....... |
6a20 | a2 0d 07 00 2d 00 00 00 3b 0f 07 00 39 00 00 00 69 0f 07 00 e0 00 00 00 a3 0f 07 00 26 00 00 00 | ....-...;...9...i...........&... |
6a40 | 84 10 07 00 b5 00 00 00 ab 10 07 00 70 01 00 00 61 11 07 00 1b 00 00 00 d2 12 07 00 bb 00 00 00 | ............p...a............... |
6a60 | ee 12 07 00 bb 00 00 00 aa 13 07 00 fd 00 00 00 66 14 07 00 85 00 00 00 64 15 07 00 b5 00 00 00 | ................f.......d....... |
6a80 | ea 15 07 00 5b 00 00 00 a0 16 07 00 83 00 00 00 fc 16 07 00 4b 00 00 00 80 17 07 00 59 01 00 00 | ....[...............K.......Y... |
6aa0 | cc 17 07 00 27 00 00 00 26 19 07 00 f8 00 00 00 4e 19 07 00 28 02 00 00 47 1a 07 00 ff 00 00 00 | ....'...&.......N...(...G....... |
6ac0 | 70 1c 07 00 61 00 00 00 70 1d 07 00 5a 00 00 00 d2 1d 07 00 5c 00 00 00 2d 1e 07 00 a9 00 00 00 | p...a...p...Z.......\...-....... |
6ae0 | 8a 1e 07 00 b6 00 00 00 34 1f 07 00 5e 00 00 00 eb 1f 07 00 d3 00 00 00 4a 20 07 00 24 00 00 00 | ........4...^...........J...$... |
6b00 | 1e 21 07 00 14 00 00 00 43 21 07 00 1a 00 00 00 58 21 07 00 bc 00 00 00 73 21 07 00 68 00 00 00 | .!......C!......X!......s!..h... |
6b20 | 30 22 07 00 1f 00 00 00 99 22 07 00 24 00 00 00 b9 22 07 00 bd 00 00 00 de 22 07 00 1f 00 00 00 | 0"......."..$...."......."...... |
6b40 | 9c 23 07 00 17 00 00 00 bc 23 07 00 21 00 00 00 d4 23 07 00 21 00 00 00 f6 23 07 00 22 00 00 00 | .#.......#..!....#..!....#.."... |
6b60 | 18 24 07 00 40 00 00 00 3b 24 07 00 1a 00 00 00 7c 24 07 00 45 00 00 00 97 24 07 00 17 01 00 00 | .$..@...;$......|$..E....$...... |
6b80 | dd 24 07 00 54 00 00 00 f5 25 07 00 c0 01 00 00 4a 26 07 00 d2 01 00 00 0b 28 07 00 a2 00 00 00 | .$..T....%......J&.......(...... |
6ba0 | de 29 07 00 d1 00 00 00 81 2a 07 00 e4 00 00 00 53 2b 07 00 bf 00 00 00 38 2c 07 00 dc 00 00 00 | .).......*......S+......8,...... |
6bc0 | f8 2c 07 00 4e 01 00 00 d5 2d 07 00 45 00 00 00 24 2f 07 00 34 00 00 00 6a 2f 07 00 b4 00 00 00 | .,..N....-..E...$/..4...j/...... |
6be0 | 9f 2f 07 00 f9 00 00 00 54 30 07 00 c5 00 00 00 4e 31 07 00 27 00 00 00 14 32 07 00 b7 00 00 00 | ./......T0......N1..'....2...... |
6c00 | 3c 32 07 00 ae 00 00 00 f4 32 07 00 52 00 00 00 a3 33 07 00 ab 00 00 00 f6 33 07 00 c8 00 00 00 | <2.......2..R....3.......3...... |
6c20 | a2 34 07 00 5b 00 00 00 6b 35 07 00 6d 00 00 00 c7 35 07 00 ab 00 00 00 35 36 07 00 30 00 00 00 | .4..[...k5..m....5......56..0... |
6c40 | e1 36 07 00 68 00 00 00 12 37 07 00 53 00 00 00 7b 37 07 00 33 00 00 00 cf 37 07 00 2d 00 00 00 | .6..h....7..S...{7..3....7..-... |
6c60 | 03 38 07 00 4e 00 00 00 31 38 07 00 70 00 00 00 80 38 07 00 6c 00 00 00 f1 38 07 00 c5 00 00 00 | .8..N...18..p....8..l....8...... |
6c80 | 5e 39 07 00 b7 00 00 00 24 3a 07 00 38 00 00 00 dc 3a 07 00 39 00 00 00 15 3b 07 00 21 01 00 00 | ^9......$:..8....:..9....;..!... |
6ca0 | 4f 3b 07 00 dd 00 00 00 71 3c 07 00 1e 01 00 00 4f 3d 07 00 5f 01 00 00 6e 3e 07 00 dc 00 00 00 | O;......q<......O=.._...n>...... |
6cc0 | ce 3f 07 00 c8 00 00 00 ab 40 07 00 36 00 00 00 74 41 07 00 6e 00 00 00 ab 41 07 00 91 00 00 00 | .?.......@..6...tA..n....A...... |
6ce0 | 1a 42 07 00 60 00 00 00 ac 42 07 00 b0 00 00 00 0d 43 07 00 6e 00 00 00 be 43 07 00 6b 00 00 00 | .B..`....B.......C..n....C..k... |
6d00 | 2d 44 07 00 35 00 00 00 99 44 07 00 33 00 00 00 cf 44 07 00 f1 00 00 00 03 45 07 00 2b 00 00 00 | -D..5....D..3....D.......E..+... |
6d20 | f5 45 07 00 38 00 00 00 21 46 07 00 3a 01 00 00 5a 46 07 00 4b 00 00 00 95 47 07 00 53 01 00 00 | .E..8...!F..:...ZF..K....G..S... |
6d40 | e1 47 07 00 92 01 00 00 35 49 07 00 a1 00 00 00 c8 4a 07 00 28 00 00 00 6a 4b 07 00 35 01 00 00 | .G......5I.......J..(...jK..5... |
6d60 | 93 4b 07 00 9a 00 00 00 c9 4c 07 00 10 01 00 00 64 4d 07 00 2b 00 00 00 75 4e 07 00 a6 00 00 00 | .K.......L......dM..+...uN...... |
6d80 | a1 4e 07 00 2e 00 00 00 48 4f 07 00 3f 00 00 00 77 4f 07 00 ec 00 00 00 b7 4f 07 00 ee 00 00 00 | .N......HO..?...wO.......O...... |
6da0 | a4 50 07 00 7c 00 00 00 93 51 07 00 9a 01 00 00 10 52 07 00 42 00 00 00 ab 53 07 00 82 00 00 00 | .P..|....Q.......R..B....S...... |
6dc0 | ee 53 07 00 9b 00 00 00 71 54 07 00 31 00 00 00 0d 55 07 00 b4 00 00 00 3f 55 07 00 63 00 00 00 | .S......qT..1....U......?U..c... |
6de0 | f4 55 07 00 33 00 00 00 58 56 07 00 3a 00 00 00 8c 56 07 00 5e 00 00 00 c7 56 07 00 25 01 00 00 | .U..3...XV..:....V..^....V..%... |
6e00 | 26 57 07 00 42 00 00 00 4c 58 07 00 5c 00 00 00 8f 58 07 00 56 00 00 00 ec 58 07 00 fe 00 00 00 | &W..B...LX..\....X..V....X...... |
6e20 | 43 59 07 00 79 00 00 00 42 5a 07 00 55 00 00 00 bc 5a 07 00 58 00 00 00 12 5b 07 00 cd 01 00 00 | CY..y...BZ..U....Z..X....[...... |
6e40 | 6b 5b 07 00 3d 00 00 00 39 5d 07 00 e8 01 00 00 77 5d 07 00 40 00 00 00 60 5f 07 00 7f 00 00 00 | k[..=...9]......w]..@...`_...... |
6e60 | a1 5f 07 00 6c 00 00 00 21 60 07 00 6e 00 00 00 8e 60 07 00 e8 00 00 00 fd 60 07 00 a5 00 00 00 | ._..l...!`..n....`.......`...... |
6e80 | e6 61 07 00 6b 00 00 00 8c 62 07 00 69 01 00 00 f8 62 07 00 34 00 00 00 62 64 07 00 79 00 00 00 | .a..k....b..i....b..4...bd..y... |
6ea0 | 97 64 07 00 3d 00 00 00 11 65 07 00 54 00 00 00 4f 65 07 00 4c 00 00 00 a4 65 07 00 bc 00 00 00 | .d..=....e..T...Oe..L....e...... |
6ec0 | f1 65 07 00 ea 00 00 00 ae 66 07 00 6d 00 00 00 99 67 07 00 e6 00 00 00 07 68 07 00 36 00 00 00 | .e.......f..m....g.......h..6... |
6ee0 | ee 68 07 00 5b 00 00 00 25 69 07 00 6a 00 00 00 81 69 07 00 82 00 00 00 ec 69 07 00 73 00 00 00 | .h..[...%i..j....i.......i..s... |
6f00 | 6f 6a 07 00 49 00 00 00 e3 6a 07 00 29 00 00 00 2d 6b 07 00 2a 01 00 00 57 6b 07 00 47 00 00 00 | oj..I....j..)...-k..*...Wk..G... |
6f20 | 82 6c 07 00 46 00 00 00 ca 6c 07 00 49 00 00 00 11 6d 07 00 49 00 00 00 5b 6d 07 00 22 00 00 00 | .l..F....l..I....m..I...[m.."... |
6f40 | a5 6d 07 00 54 00 00 00 c8 6d 07 00 65 00 00 00 1d 6e 07 00 32 00 00 00 83 6e 07 00 9d 00 00 00 | .m..T....m..e....n..2....n...... |
6f60 | b6 6e 07 00 77 00 00 00 54 6f 07 00 2c 00 00 00 cc 6f 07 00 42 00 00 00 f9 6f 07 00 2b 00 00 00 | .n..w...To..,....o..B....o..+... |
6f80 | 3c 70 07 00 86 01 00 00 68 70 07 00 c4 00 00 00 ef 71 07 00 c6 00 00 00 b4 72 07 00 80 00 00 00 | <p......hp.......q.......r...... |
6fa0 | 7b 73 07 00 49 01 00 00 fc 73 07 00 90 00 00 00 46 75 07 00 38 00 00 00 d7 75 07 00 9f 00 00 00 | {s..I....s......Fu..8....u...... |
6fc0 | 10 76 07 00 1c 01 00 00 b0 76 07 00 d5 00 00 00 cd 77 07 00 38 00 00 00 a3 78 07 00 28 00 00 00 | .v.......v.......w..8....x..(... |
6fe0 | dc 78 07 00 5c 00 00 00 05 79 07 00 29 00 00 00 62 79 07 00 71 00 00 00 8c 79 07 00 41 00 00 00 | .x..\....y..)...by..q....y..A... |
7000 | fe 79 07 00 0f 01 00 00 40 7a 07 00 fc 00 00 00 50 7b 07 00 89 00 00 00 4d 7c 07 00 25 00 00 00 | .y......@z......P{......M|..%... |
7020 | d7 7c 07 00 5f 00 00 00 fd 7c 07 00 ec 00 00 00 5d 7d 07 00 4e 00 00 00 4a 7e 07 00 84 00 00 00 | .|.._....|......]}..N...J~...... |
7040 | 99 7e 07 00 55 00 00 00 1e 7f 07 00 12 01 00 00 74 7f 07 00 75 00 00 00 87 80 07 00 65 00 00 00 | .~..U...........t...u.......e... |
7060 | fd 80 07 00 e2 00 00 00 63 81 07 00 2f 00 00 00 46 82 07 00 29 00 00 00 76 82 07 00 a0 01 00 00 | ........c.../...F...)...v....... |
7080 | a0 82 07 00 ff 00 00 00 41 84 07 00 db 00 00 00 41 85 07 00 36 00 00 00 1d 86 07 00 40 00 00 00 | ........A.......A...6.......@... |
70a0 | 54 86 07 00 1f 00 00 00 95 86 07 00 40 00 00 00 b5 86 07 00 4d 00 00 00 f6 86 07 00 4c 00 00 00 | T...........@.......M.......L... |
70c0 | 44 87 07 00 92 00 00 00 91 87 07 00 43 00 00 00 24 88 07 00 af 00 00 00 68 88 07 00 65 00 00 00 | D...........C...$.......h...e... |
70e0 | 18 89 07 00 a8 00 00 00 7e 89 07 00 38 00 00 00 27 8a 07 00 3e 01 00 00 60 8a 07 00 3c 00 00 00 | ........~...8...'...>...`...<... |
7100 | 9f 8b 07 00 90 00 00 00 dc 8b 07 00 58 00 00 00 6d 8c 07 00 95 00 00 00 c6 8c 07 00 50 00 00 00 | ............X...m...........P... |
7120 | 5c 8d 07 00 64 00 00 00 ad 8d 07 00 50 00 00 00 12 8e 07 00 6d 00 00 00 63 8e 07 00 3a 00 00 00 | \...d.......P.......m...c...:... |
7140 | d1 8e 07 00 29 00 00 00 0c 8f 07 00 6d 00 00 00 36 8f 07 00 c0 00 00 00 a4 8f 07 00 b8 01 00 00 | ....).......m...6............... |
7160 | 65 90 07 00 51 00 00 00 1e 92 07 00 21 00 00 00 70 92 07 00 25 00 00 00 92 92 07 00 71 00 00 00 | e...Q.......!...p...%.......q... |
7180 | b8 92 07 00 24 00 00 00 2a 93 07 00 bc 01 00 00 4f 93 07 00 55 00 00 00 0c 95 07 00 a9 00 00 00 | ....$...*.......O...U........... |
71a0 | 62 95 07 00 4c 00 00 00 0c 96 07 00 ee 00 00 00 59 96 07 00 43 00 00 00 48 97 07 00 39 00 00 00 | b...L...........Y...C...H...9... |
71c0 | 8c 97 07 00 a9 00 00 00 c6 97 07 00 50 00 00 00 70 98 07 00 53 01 00 00 c1 98 07 00 46 00 00 00 | ............P...p...S.......F... |
71e0 | 15 9a 07 00 44 00 00 00 5c 9a 07 00 43 00 00 00 a1 9a 07 00 de 00 00 00 e5 9a 07 00 83 00 00 00 | ....D...\...C................... |
7200 | c4 9b 07 00 83 00 00 00 48 9c 07 00 39 01 00 00 cc 9c 07 00 a0 00 00 00 06 9e 07 00 d1 00 00 00 | ........H...9................... |
7220 | a7 9e 07 00 61 00 00 00 79 9f 07 00 b4 00 00 00 db 9f 07 00 b7 00 00 00 90 a0 07 00 b6 00 00 00 | ....a...y....................... |
7240 | 48 a1 07 00 bb 00 00 00 ff a1 07 00 a1 00 00 00 bb a2 07 00 5c 00 00 00 5d a3 07 00 58 00 00 00 | H...................\...]...X... |
7260 | ba a3 07 00 5c 00 00 00 13 a4 07 00 58 00 00 00 70 a4 07 00 71 00 00 00 c9 a4 07 00 5e 00 00 00 | ....\.......X...p...q.......^... |
7280 | 3b a5 07 00 21 01 00 00 9a a5 07 00 13 01 00 00 bc a6 07 00 12 01 00 00 d0 a7 07 00 09 01 00 00 | ;...!........................... |
72a0 | e3 a8 07 00 40 00 00 00 ed a9 07 00 a3 00 00 00 2e aa 07 00 a3 00 00 00 d2 aa 07 00 9f 00 00 00 | ....@........................... |
72c0 | 76 ab 07 00 9f 00 00 00 16 ac 07 00 bb 00 00 00 b6 ac 07 00 b4 00 00 00 72 ad 07 00 54 00 00 00 | v.......................r...T... |
72e0 | 27 ae 07 00 bc 00 00 00 7c ae 07 00 56 00 00 00 39 af 07 00 be 00 00 00 90 af 07 00 4e 00 00 00 | '.......|...V...9...........N... |
7300 | 4f b0 07 00 cf 01 00 00 9e b0 07 00 29 01 00 00 6e b2 07 00 46 00 00 00 98 b3 07 00 7e 00 00 00 | O...........)...n...F.......~... |
7320 | df b3 07 00 3c 00 00 00 5e b4 07 00 db 00 00 00 9b b4 07 00 42 00 00 00 77 b5 07 00 4e 00 00 00 | ....<...^...........B...w...N... |
7340 | ba b5 07 00 4e 00 00 00 09 b6 07 00 49 00 00 00 58 b6 07 00 49 00 00 00 a2 b6 07 00 43 00 00 00 | ....N.......I...X...I.......C... |
7360 | ec b6 07 00 4b 00 00 00 30 b7 07 00 64 00 00 00 7c b7 07 00 46 00 00 00 e1 b7 07 00 84 00 00 00 | ....K...0...d...|...F........... |
7380 | 28 b8 07 00 7c 00 00 00 ad b8 07 00 86 00 00 00 2a b9 07 00 2f 00 00 00 b1 b9 07 00 79 00 00 00 | (...|...........*.../.......y... |
73a0 | e1 b9 07 00 76 00 00 00 5b ba 07 00 81 00 00 00 d2 ba 07 00 46 01 00 00 54 bb 07 00 71 00 00 00 | ....v...[...........F...T...q... |
73c0 | 9b bc 07 00 66 00 00 00 0d bd 07 00 3f 00 00 00 74 bd 07 00 88 00 00 00 b4 bd 07 00 da 00 00 00 | ....f.......?...t............... |
73e0 | 3d be 07 00 19 00 00 00 18 bf 07 00 90 01 00 00 32 bf 07 00 a5 00 00 00 c3 c0 07 00 43 00 00 00 | =...............2...........C... |
7400 | 69 c1 07 00 2a 00 00 00 ad c1 07 00 4c 00 00 00 d8 c1 07 00 3a 00 00 00 25 c2 07 00 4e 00 00 00 | i...*.......L.......:...%...N... |
7420 | 60 c2 07 00 b0 00 00 00 af c2 07 00 2a 00 00 00 60 c3 07 00 21 00 00 00 8b c3 07 00 51 00 00 00 | `...........*...`...!.......Q... |
7440 | ad c3 07 00 45 00 00 00 ff c3 07 00 5f 00 00 00 45 c4 07 00 37 00 00 00 a5 c4 07 00 41 00 00 00 | ....E......._...E...7.......A... |
7460 | dd c4 07 00 44 00 00 00 1f c5 07 00 6a 00 00 00 64 c5 07 00 3c 00 00 00 cf c5 07 00 56 00 00 00 | ....D.......j...d...<.......V... |
7480 | 0c c6 07 00 4a 00 00 00 63 c6 07 00 ee 00 00 00 ae c6 07 00 47 00 00 00 9d c7 07 00 7a 00 00 00 | ....J...c...........G.......z... |
74a0 | e5 c7 07 00 d2 00 00 00 60 c8 07 00 5f 00 00 00 33 c9 07 00 d5 00 00 00 93 c9 07 00 39 00 00 00 | ........`..._...3...........9... |
74c0 | 69 ca 07 00 70 00 00 00 a3 ca 07 00 5d 00 00 00 14 cb 07 00 55 00 00 00 72 cb 07 00 2b 00 00 00 | i...p.......].......U...r...+... |
74e0 | c8 cb 07 00 38 00 00 00 f4 cb 07 00 46 00 00 00 2d cc 07 00 4c 00 00 00 74 cc 07 00 62 00 00 00 | ....8.......F...-...L...t...b... |
7500 | c1 cc 07 00 55 01 00 00 24 cd 07 00 c0 00 00 00 7a ce 07 00 b6 00 00 00 3b cf 07 00 8d 00 00 00 | ....U...$.......z.......;....... |
7520 | f2 cf 07 00 d5 00 00 00 80 d0 07 00 7e 00 00 00 56 d1 07 00 a4 00 00 00 d5 d1 07 00 a6 00 00 00 | ............~...V............... |
7540 | 7a d2 07 00 c7 01 00 00 21 d3 07 00 32 01 00 00 e9 d4 07 00 a8 00 00 00 1c d6 07 00 79 00 00 00 | z.......!...2...............y... |
7560 | c5 d6 07 00 33 00 00 00 3f d7 07 00 90 00 00 00 73 d7 07 00 b0 00 00 00 04 d8 07 00 63 00 00 00 | ....3...?.......s...........c... |
7580 | b5 d8 07 00 b3 00 00 00 19 d9 07 00 d6 00 00 00 cd d9 07 00 2c 00 00 00 a4 da 07 00 52 00 00 00 | ....................,.......R... |
75a0 | d1 da 07 00 6e 00 00 00 24 db 07 00 4d 01 00 00 93 db 07 00 3b 00 00 00 e1 dc 07 00 ad 00 00 00 | ....n...$...M.......;........... |
75c0 | 1d dd 07 00 7b 02 00 00 cb dd 07 00 54 01 00 00 47 e0 07 00 53 00 00 00 9c e1 07 00 4b 00 00 00 | ....{.......T...G...S.......K... |
75e0 | f0 e1 07 00 04 01 00 00 3c e2 07 00 eb 00 00 00 41 e3 07 00 c8 00 00 00 2d e4 07 00 c8 00 00 00 | ........<.......A.......-....... |
7600 | f6 e4 07 00 b6 00 00 00 bf e5 07 00 bb 00 00 00 76 e6 07 00 60 00 00 00 32 e7 07 00 b5 00 00 00 | ................v...`...2....... |
7620 | 93 e7 07 00 b9 00 00 00 49 e8 07 00 9b 00 00 00 03 e9 07 00 0a 01 00 00 9f e9 07 00 01 01 00 00 | ........I....................... |
7640 | aa ea 07 00 38 00 00 00 ac eb 07 00 3b 00 00 00 e5 eb 07 00 45 00 00 00 21 ec 07 00 2c 00 00 00 | ....8.......;.......E...!...,... |
7660 | 67 ec 07 00 70 00 00 00 94 ec 07 00 4e 00 00 00 05 ed 07 00 7c 01 00 00 54 ed 07 00 71 01 00 00 | g...p.......N.......|...T...q... |
7680 | d1 ee 07 00 90 00 00 00 43 f0 07 00 4b 00 00 00 d4 f0 07 00 11 01 00 00 20 f1 07 00 7b 00 00 00 | ........C...K...............{... |
76a0 | 32 f2 07 00 58 00 00 00 ae f2 07 00 a9 00 00 00 07 f3 07 00 72 00 00 00 b1 f3 07 00 6c 00 00 00 | 2...X...............r.......l... |
76c0 | 24 f4 07 00 60 00 00 00 91 f4 07 00 17 01 00 00 f2 f4 07 00 ff 00 00 00 0a f6 07 00 44 00 00 00 | $...`.......................D... |
76e0 | 0a f7 07 00 87 00 00 00 4f f7 07 00 70 00 00 00 d7 f7 07 00 87 00 00 00 48 f8 07 00 65 00 00 00 | ........O...p...........H...e... |
7700 | d0 f8 07 00 6e 00 00 00 36 f9 07 00 64 00 00 00 a5 f9 07 00 59 02 00 00 0a fa 07 00 88 00 00 00 | ....n...6...d.......Y........... |
7720 | 64 fc 07 00 25 00 00 00 ed fc 07 00 88 00 00 00 13 fd 07 00 a5 00 00 00 9c fd 07 00 57 01 00 00 | d...%.......................W... |
7740 | 42 fe 07 00 32 01 00 00 9a ff 07 00 49 01 00 00 cd 00 08 00 51 01 00 00 17 02 08 00 fb 00 00 00 | B...2.......I.......Q........... |
7760 | 69 03 08 00 28 00 00 00 65 04 08 00 95 00 00 00 8e 04 08 00 af 00 00 00 24 05 08 00 af 00 00 00 | i...(...e...............$....... |
7780 | d4 05 08 00 76 00 00 00 84 06 08 00 a6 00 00 00 fb 06 08 00 84 01 00 00 a2 07 08 00 6a 00 00 00 | ....v.......................j... |
77a0 | 27 09 08 00 b9 00 00 00 92 09 08 00 0f 01 00 00 4c 0a 08 00 36 00 00 00 5c 0b 08 00 a5 00 00 00 | '...............L...6...\....... |
77c0 | 93 0b 08 00 a7 00 00 00 39 0c 08 00 7b 00 00 00 e1 0c 08 00 67 00 00 00 5d 0d 08 00 32 00 00 00 | ........9...{.......g...]...2... |
77e0 | c5 0d 08 00 fe 00 00 00 f8 0d 08 00 9d 00 00 00 f7 0e 08 00 bb 00 00 00 95 0f 08 00 77 00 00 00 | ............................w... |
7800 | 51 10 08 00 bf 00 00 00 c9 10 08 00 c7 00 00 00 89 11 08 00 cc 00 00 00 51 12 08 00 d1 00 00 00 | Q.......................Q....... |
7820 | 1e 13 08 00 2d 04 00 00 f0 13 08 00 5d 00 00 00 1e 18 08 00 e3 00 00 00 7c 18 08 00 cf 00 00 00 | ....-.......]...........|....... |
7840 | 60 19 08 00 07 01 00 00 30 1a 08 00 10 01 00 00 38 1b 08 00 9c 00 00 00 49 1c 08 00 8a 00 00 00 | `.......0.......8.......I....... |
7860 | e6 1c 08 00 97 00 00 00 71 1d 08 00 40 00 00 00 09 1e 08 00 f0 00 00 00 4a 1e 08 00 0b 01 00 00 | ........q...@...........J....... |
7880 | 3b 1f 08 00 37 01 00 00 47 20 08 00 75 01 00 00 7f 21 08 00 97 01 00 00 f5 22 08 00 f0 00 00 00 | ;...7...G...u....!......."...... |
78a0 | 8d 24 08 00 01 01 00 00 7e 25 08 00 aa 00 00 00 80 26 08 00 69 00 00 00 2b 27 08 00 6b 00 00 00 | .$......~%.......&..i...+'..k... |
78c0 | 95 27 08 00 df 00 00 00 01 28 08 00 44 00 00 00 e1 28 08 00 ec 00 00 00 26 29 08 00 86 00 00 00 | .'.......(..D....(......&)...... |
78e0 | 13 2a 08 00 d5 00 00 00 9a 2a 08 00 b9 00 00 00 70 2b 08 00 a6 00 00 00 2a 2c 08 00 c8 00 00 00 | .*.......*......p+......*,...... |
7900 | d1 2c 08 00 71 00 00 00 9a 2d 08 00 2c 01 00 00 0c 2e 08 00 84 00 00 00 39 2f 08 00 00 01 00 00 | .,..q....-..,...........9/...... |
7920 | be 2f 08 00 e5 00 00 00 bf 30 08 00 2d 01 00 00 a5 31 08 00 12 01 00 00 d3 32 08 00 f2 00 00 00 | ./.......0..-....1.......2...... |
7940 | e6 33 08 00 a4 00 00 00 d9 34 08 00 90 01 00 00 7e 35 08 00 a2 00 00 00 0f 37 08 00 b3 01 00 00 | .3.......4......~5.......7...... |
7960 | b2 37 08 00 53 00 00 00 66 39 08 00 5f 00 00 00 ba 39 08 00 80 00 00 00 1a 3a 08 00 81 00 00 00 | .7..S...f9.._....9.......:...... |
7980 | 9b 3a 08 00 8f 00 00 00 1d 3b 08 00 7b 00 00 00 ad 3b 08 00 7a 00 00 00 29 3c 08 00 f3 00 00 00 | .:.......;..{....;..z...)<...... |
79a0 | a4 3c 08 00 f2 00 00 00 98 3d 08 00 3a 00 00 00 8b 3e 08 00 3a 00 00 00 c6 3e 08 00 41 00 00 00 | .<.......=..:....>..:....>..A... |
79c0 | 01 3f 08 00 67 00 00 00 43 3f 08 00 42 00 00 00 ab 3f 08 00 38 00 00 00 ee 3f 08 00 53 00 00 00 | .?..g...C?..B....?..8....?..S... |
79e0 | 27 40 08 00 5c 00 00 00 7b 40 08 00 e1 01 00 00 d8 40 08 00 bb 00 00 00 ba 42 08 00 41 00 00 00 | '@..\...{@.......@.......B..A... |
7a00 | 76 43 08 00 e7 00 00 00 b8 43 08 00 4d 00 00 00 a0 44 08 00 96 00 00 00 ee 44 08 00 80 00 00 00 | vC.......C..M....D.......D...... |
7a20 | 85 45 08 00 e5 00 00 00 06 46 08 00 da 00 00 00 ec 46 08 00 a4 00 00 00 c7 47 08 00 66 00 00 00 | .E.......F.......F.......G..f... |
7a40 | 6c 48 08 00 ad 00 00 00 d3 48 08 00 17 00 00 00 81 49 08 00 16 00 00 00 99 49 08 00 16 00 00 00 | lH.......H.......I.......I...... |
7a60 | b0 49 08 00 1c 00 00 00 c7 49 08 00 1d 00 00 00 e4 49 08 00 14 00 00 00 02 4a 08 00 13 00 00 00 | .I.......I.......I.......J...... |
7a80 | 17 4a 08 00 14 00 00 00 2b 4a 08 00 22 00 00 00 40 4a 08 00 3f 00 00 00 63 4a 08 00 16 00 00 00 | .J......+J.."...@J..?...cJ...... |
7aa0 | a3 4a 08 00 52 00 00 00 ba 4a 08 00 89 00 00 00 0d 4b 08 00 4b 00 00 00 97 4b 08 00 0d 01 00 00 | .J..R....J.......K..K....K...... |
7ac0 | e3 4b 08 00 41 00 00 00 f1 4c 08 00 6d 00 00 00 33 4d 08 00 6a 00 00 00 a1 4d 08 00 32 00 00 00 | .K..A....L..m...3M..j....M..2... |
7ae0 | 0c 4e 08 00 61 00 00 00 3f 4e 08 00 8d 00 00 00 a1 4e 08 00 8e 00 00 00 2f 4f 08 00 47 00 00 00 | .N..a...?N.......N....../O..G... |
7b00 | be 4f 08 00 40 00 00 00 06 50 08 00 6c 00 00 00 47 50 08 00 4c 00 00 00 b4 50 08 00 3f 00 00 00 | .O..@....P..l...GP..L....P..?... |
7b20 | 01 51 08 00 00 01 00 00 41 51 08 00 1c 01 00 00 42 52 08 00 a2 00 00 00 5f 53 08 00 97 00 00 00 | .Q......AQ......BR......_S...... |
7b40 | 02 54 08 00 59 00 00 00 9a 54 08 00 62 00 00 00 f4 54 08 00 1a 00 00 00 57 55 08 00 1c 00 00 00 | .T..Y....T..b....T......WU...... |
7b60 | 72 55 08 00 bb 00 00 00 8f 55 08 00 32 00 00 00 4b 56 08 00 73 00 00 00 7e 56 08 00 61 00 00 00 | rU.......U..2...KV..s...~V..a... |
7b80 | f2 56 08 00 76 00 00 00 54 57 08 00 47 00 00 00 cb 57 08 00 43 01 00 00 13 58 08 00 7d 00 00 00 | .V..v...TW..G....W..C....X..}... |
7ba0 | 57 59 08 00 e5 00 00 00 d5 59 08 00 11 00 00 00 bb 5a 08 00 63 00 00 00 cd 5a 08 00 c6 00 00 00 | WY.......Y.......Z..c....Z...... |
7bc0 | 31 5b 08 00 8e 00 00 00 f8 5b 08 00 2a 00 00 00 87 5c 08 00 98 00 00 00 b2 5c 08 00 bd 00 00 00 | 1[.......[..*....\.......\...... |
7be0 | 4b 5d 08 00 44 00 00 00 09 5e 08 00 a0 00 00 00 4e 5e 08 00 ca 00 00 00 ef 5e 08 00 41 00 00 00 | K]..D....^......N^.......^..A... |
7c00 | ba 5f 08 00 76 00 00 00 fc 5f 08 00 c7 00 00 00 73 60 08 00 58 00 00 00 3b 61 08 00 23 00 00 00 | ._..v...._......s`..X...;a..#... |
7c20 | 94 61 08 00 76 00 00 00 b8 61 08 00 36 00 00 00 2f 62 08 00 97 00 00 00 66 62 08 00 2c 00 00 00 | .a..v....a..6.../b......fb..,... |
7c40 | fe 62 08 00 2b 00 00 00 2b 63 08 00 2e 00 00 00 57 63 08 00 33 00 00 00 86 63 08 00 fc 00 00 00 | .b..+...+c......Wc..3....c...... |
7c60 | ba 63 08 00 e9 00 00 00 b7 64 08 00 31 00 00 00 a1 65 08 00 26 00 00 00 d3 65 08 00 60 00 00 00 | .c.......d..1....e..&....e..`... |
7c80 | fa 65 08 00 1d 00 00 00 5b 66 08 00 89 00 00 00 79 66 08 00 be 00 00 00 03 67 08 00 60 01 00 00 | .e......[f......yf.......g..`... |
7ca0 | c2 67 08 00 80 00 00 00 23 69 08 00 78 00 00 00 a4 69 08 00 7b 00 00 00 1d 6a 08 00 29 00 00 00 | .g......#i..x....i..{....j..)... |
7cc0 | 99 6a 08 00 e9 00 00 00 c3 6a 08 00 3d 00 00 00 ad 6b 08 00 6f 00 00 00 eb 6b 08 00 3b 00 00 00 | .j.......j..=....k..o....k..;... |
7ce0 | 5b 6c 08 00 a5 00 00 00 97 6c 08 00 2d 01 00 00 3d 6d 08 00 2c 01 00 00 6b 6e 08 00 dd 00 00 00 | [l.......l..-...=m..,...kn...... |
7d00 | 98 6f 08 00 64 00 00 00 76 70 08 00 40 00 00 00 db 70 08 00 77 00 00 00 1c 71 08 00 76 00 00 00 | .o..d...vp..@....p..w....q..v... |
7d20 | 94 71 08 00 6f 00 00 00 0b 72 08 00 d3 00 00 00 7b 72 08 00 23 01 00 00 4f 73 08 00 9d 01 00 00 | .q..o....r......{r..#...Os...... |
7d40 | 73 74 08 00 48 00 00 00 11 76 08 00 2c 00 00 00 5a 76 08 00 bb 00 00 00 87 76 08 00 23 00 00 00 | st..H....v..,...Zv.......v..#... |
7d60 | 43 77 08 00 3d 00 00 00 67 77 08 00 42 00 00 00 a5 77 08 00 5b 00 00 00 e8 77 08 00 6b 00 00 00 | Cw..=...gw..B....w..[....w..k... |
7d80 | 44 78 08 00 30 00 00 00 b0 78 08 00 3d 00 00 00 e1 78 08 00 2c 00 00 00 1f 79 08 00 54 00 00 00 | Dx..0....x..=....x..,....y..T... |
7da0 | 4c 79 08 00 38 00 00 00 a1 79 08 00 3a 00 00 00 da 79 08 00 3c 00 00 00 15 7a 08 00 44 00 00 00 | Ly..8....y..:....y..<....z..D... |
7dc0 | 52 7a 08 00 34 00 00 00 97 7a 08 00 32 01 00 00 cc 7a 08 00 30 00 00 00 ff 7b 08 00 dd 00 00 00 | Rz..4....z..2....z..0....{...... |
7de0 | 30 7c 08 00 09 00 00 00 0e 7d 08 00 d6 00 00 00 18 7d 08 00 49 00 00 00 ef 7d 08 00 47 00 00 00 | 0|.......}.......}..I....}..G... |
7e00 | 39 7e 08 00 44 00 00 00 81 7e 08 00 4a 00 00 00 c6 7e 08 00 26 00 00 00 11 7f 08 00 1f 00 00 00 | 9~..D....~..J....~..&........... |
7e20 | 38 7f 08 00 74 00 00 00 58 7f 08 00 12 00 00 00 cd 7f 08 00 30 00 00 00 e0 7f 08 00 45 00 00 00 | 8...t...X...........0.......E... |
7e40 | 11 80 08 00 2e 00 00 00 57 80 08 00 06 00 00 00 86 80 08 00 65 00 00 00 8d 80 08 00 4e 00 00 00 | ........W...........e.......N... |
7e60 | f3 80 08 00 b1 00 00 00 42 81 08 00 9b 00 00 00 f4 81 08 00 91 00 00 00 90 82 08 00 ae 00 00 00 | ........B....................... |
7e80 | 22 83 08 00 22 00 00 00 d1 83 08 00 aa 00 00 00 f4 83 08 00 39 01 00 00 9f 84 08 00 5c 00 00 00 | "..."...............9.......\... |
7ea0 | d9 85 08 00 74 00 00 00 36 86 08 00 58 00 00 00 ab 86 08 00 6f 00 00 00 04 87 08 00 99 00 00 00 | ....t...6...X.......o........... |
7ec0 | 74 87 08 00 80 00 00 00 0e 88 08 00 54 00 00 00 8f 88 08 00 4c 00 00 00 e4 88 08 00 51 00 00 00 | t...........T.......L.......Q... |
7ee0 | 31 89 08 00 d7 00 00 00 83 89 08 00 68 00 00 00 5b 8a 08 00 62 00 00 00 c4 8a 08 00 5e 00 00 00 | 1...........h...[...b.......^... |
7f00 | 27 8b 08 00 3c 00 00 00 86 8b 08 00 77 00 00 00 c3 8b 08 00 40 00 00 00 3b 8c 08 00 d7 00 00 00 | '...<.......w.......@...;....... |
7f20 | 7c 8c 08 00 b3 00 00 00 54 8d 08 00 66 00 00 00 08 8e 08 00 37 00 00 00 6f 8e 08 00 6a 00 00 00 | |.......T...f.......7...o...j... |
7f40 | a7 8e 08 00 42 00 00 00 12 8f 08 00 3d 00 00 00 55 8f 08 00 38 00 00 00 93 8f 08 00 3d 00 00 00 | ....B.......=...U...8.......=... |
7f60 | cc 8f 08 00 40 00 00 00 0a 90 08 00 4a 01 00 00 4b 90 08 00 52 00 00 00 96 91 08 00 51 00 00 00 | ....@.......J...K...R.......Q... |
7f80 | e9 91 08 00 d9 00 00 00 3b 92 08 00 c9 00 00 00 15 93 08 00 4f 00 00 00 df 93 08 00 67 00 00 00 | ........;...........O.......g... |
7fa0 | 2f 94 08 00 8d 00 00 00 97 94 08 00 49 00 00 00 25 95 08 00 a0 01 00 00 6f 95 08 00 87 00 00 00 | /...........I...%.......o....... |
7fc0 | 10 97 08 00 5f 00 00 00 98 97 08 00 fa 00 00 00 f8 97 08 00 54 00 00 00 f3 98 08 00 25 00 00 00 | ...._...............T.......%... |
7fe0 | 48 99 08 00 49 00 00 00 6e 99 08 00 92 00 00 00 b8 99 08 00 54 00 00 00 4b 9a 08 00 96 00 00 00 | H...I...n...........T...K....... |
8000 | a0 9a 08 00 2a 00 00 00 37 9b 08 00 1c 00 00 00 62 9b 08 00 1f 00 00 00 7f 9b 08 00 32 00 00 00 | ....*...7.......b...........2... |
8020 | 9f 9b 08 00 12 01 00 00 d2 9b 08 00 71 00 00 00 e5 9c 08 00 5f 00 00 00 57 9d 08 00 69 00 00 00 | ............q......._...W...i... |
8040 | b7 9d 08 00 a5 00 00 00 21 9e 08 00 45 00 00 00 c7 9e 08 00 09 00 00 00 0d 9f 08 00 2c 00 00 00 | ........!...E...............,... |
8060 | 17 9f 08 00 0e 00 00 00 44 9f 08 00 05 00 00 00 53 9f 08 00 83 00 00 00 59 9f 08 00 44 02 00 00 | ........D.......S.......Y...D... |
8080 | dd 9f 08 00 dc 00 00 00 22 a2 08 00 8a 01 00 00 ff a2 08 00 0f 00 00 00 8a a4 08 00 93 00 00 00 | ........"....................... |
80a0 | 9a a4 08 00 0e 00 00 00 2e a5 08 00 5e 00 00 00 3d a5 08 00 a6 00 00 00 9c a5 08 00 9e 00 00 00 | ............^...=............... |
80c0 | 43 a6 08 00 97 00 00 00 e2 a6 08 00 19 00 00 00 7a a7 08 00 b8 00 00 00 94 a7 08 00 12 00 00 00 | C...............z............... |
80e0 | 4d a8 08 00 60 01 00 00 60 a8 08 00 11 00 00 00 c1 a9 08 00 0f 00 00 00 d3 a9 08 00 0f 00 00 00 | M...`...`....................... |
8100 | e3 a9 08 00 06 00 00 00 f3 a9 08 00 0b 00 00 00 fa a9 08 00 35 00 00 00 06 aa 08 00 28 00 00 00 | ....................5.......(... |
8120 | 3c aa 08 00 44 00 00 00 65 aa 08 00 60 00 00 00 aa aa 08 00 3f 00 00 00 0b ab 08 00 5f 00 00 00 | <...D...e...`.......?......._... |
8140 | 4b ab 08 00 7c 00 00 00 ab ab 08 00 13 00 00 00 28 ac 08 00 1f 00 00 00 3c ac 08 00 17 00 00 00 | K...|...........(.......<....... |
8160 | 5c ac 08 00 15 00 00 00 74 ac 08 00 12 00 00 00 8a ac 08 00 29 00 00 00 9d ac 08 00 0d 00 00 00 | \.......t...........)........... |
8180 | c7 ac 08 00 38 00 00 00 d5 ac 08 00 af 00 00 00 0e ad 08 00 0e 00 00 00 be ad 08 00 a3 01 00 00 | ....8........................... |
81a0 | cd ad 08 00 07 00 00 00 71 af 08 00 0c 00 00 00 79 af 08 00 0d 00 00 00 86 af 08 00 1b 00 00 00 | ........q.......y............... |
81c0 | 94 af 08 00 05 00 00 00 b0 af 08 00 46 01 00 00 b6 af 08 00 9b 01 00 00 fd b0 08 00 06 00 00 00 | ............F................... |
81e0 | 99 b2 08 00 16 00 00 00 a0 b2 08 00 15 00 00 00 b7 b2 08 00 07 00 00 00 cd b2 08 00 9c 00 00 00 | ................................ |
8200 | d5 b2 08 00 2e 00 00 00 72 b3 08 00 49 00 00 00 a1 b3 08 00 e2 00 00 00 eb b3 08 00 58 00 00 00 | ........r...I...............X... |
8220 | ce b4 08 00 14 00 00 00 27 b5 08 00 66 00 00 00 3c b5 08 00 25 00 00 00 a3 b5 08 00 26 00 00 00 | ........'...f...<...%.......&... |
8240 | c9 b5 08 00 20 00 00 00 f0 b5 08 00 13 00 00 00 11 b6 08 00 39 00 00 00 25 b6 08 00 59 00 00 00 | ....................9...%...Y... |
8260 | 5f b6 08 00 3e 00 00 00 b9 b6 08 00 00 01 00 00 f8 b6 08 00 55 00 00 00 f9 b7 08 00 54 00 00 00 | _...>...............U.......T... |
8280 | 4f b8 08 00 51 00 00 00 a4 b8 08 00 55 00 00 00 f6 b8 08 00 52 00 00 00 4c b9 08 00 1a 00 00 00 | O...Q.......U.......R...L....... |
82a0 | 9f b9 08 00 44 00 00 00 ba b9 08 00 36 00 00 00 ff b9 08 00 46 00 00 00 36 ba 08 00 2c 00 00 00 | ....D.......6.......F...6...,... |
82c0 | 7d ba 08 00 22 00 00 00 aa ba 08 00 88 00 00 00 cd ba 08 00 30 00 00 00 56 bb 08 00 43 00 00 00 | }..."...............0...V...C... |
82e0 | 87 bb 08 00 18 00 00 00 cb bb 08 00 28 00 00 00 e4 bb 08 00 2f 00 00 00 0d bc 08 00 68 00 00 00 | ............(......./.......h... |
8300 | 3d bc 08 00 8c 00 00 00 a6 bc 08 00 9a 00 00 00 33 bd 08 00 8a 00 00 00 ce bd 08 00 78 00 00 00 | =...............3...........x... |
8320 | 59 be 08 00 59 00 00 00 d2 be 08 00 19 01 00 00 2c bf 08 00 24 01 00 00 46 c0 08 00 22 01 00 00 | Y...Y...........,...$...F..."... |
8340 | 6b c1 08 00 08 01 00 00 8e c2 08 00 f8 00 00 00 97 c3 08 00 f7 00 00 00 90 c4 08 00 f9 00 00 00 | k............................... |
8360 | 88 c5 08 00 f7 00 00 00 82 c6 08 00 f7 00 00 00 7a c7 08 00 f7 00 00 00 72 c8 08 00 c4 00 00 00 | ................z.......r....... |
8380 | 6a c9 08 00 a1 00 00 00 2f ca 08 00 73 00 00 00 d1 ca 08 00 f8 00 00 00 45 cb 08 00 4e 00 00 00 | j......./...s...........E...N... |
83a0 | 3e cc 08 00 99 00 00 00 8d cc 08 00 4b 00 00 00 27 cd 08 00 5b 00 00 00 73 cd 08 00 4a 00 00 00 | >...........K...'...[...s...J... |
83c0 | cf cd 08 00 4a 00 00 00 1a ce 08 00 50 00 00 00 65 ce 08 00 47 00 00 00 b6 ce 08 00 44 01 00 00 | ....J.......P...e...G.......D... |
83e0 | fe ce 08 00 45 01 00 00 43 d0 08 00 44 01 00 00 89 d1 08 00 44 01 00 00 ce d2 08 00 44 01 00 00 | ....E...C...D.......D.......D... |
8400 | 13 d4 08 00 3c 01 00 00 58 d5 08 00 a0 00 00 00 95 d6 08 00 30 01 00 00 36 d7 08 00 50 01 00 00 | ....<...X...........0...6...P... |
8420 | 67 d8 08 00 d1 00 00 00 b8 d9 08 00 23 01 00 00 8a da 08 00 08 01 00 00 ae db 08 00 29 01 00 00 | g...........#...............)... |
8440 | b7 dc 08 00 2f 01 00 00 e1 dd 08 00 da 00 00 00 11 df 08 00 34 01 00 00 ec df 08 00 89 00 00 00 | ..../...............4........... |
8460 | 21 e1 08 00 66 00 00 00 ab e1 08 00 88 00 00 00 12 e2 08 00 a5 00 00 00 9b e2 08 00 70 00 00 00 | !...f.......................p... |
8480 | 41 e3 08 00 6f 00 00 00 b2 e3 08 00 8e 00 00 00 22 e4 08 00 b0 00 00 00 b1 e4 08 00 0f 01 00 00 | A...o..........."............... |
84a0 | 62 e5 08 00 c3 00 00 00 72 e6 08 00 84 00 00 00 36 e7 08 00 be 00 00 00 bb e7 08 00 db 00 00 00 | b.......r.......6............... |
84c0 | 7a e8 08 00 85 00 00 00 56 e9 08 00 7d 00 00 00 dc e9 08 00 9a 00 00 00 5a ea 08 00 92 00 00 00 | z.......V...}...........Z....... |
84e0 | f5 ea 08 00 91 00 00 00 88 eb 08 00 d5 00 00 00 1a ec 08 00 93 00 00 00 f0 ec 08 00 8e 00 00 00 | ................................ |
8500 | 84 ed 08 00 fa 00 00 00 13 ee 08 00 bd 00 00 00 0e ef 08 00 f5 00 00 00 cc ef 08 00 a6 00 00 00 | ................................ |
8520 | c2 f0 08 00 a1 00 00 00 69 f1 08 00 7b 00 00 00 0b f2 08 00 fc 00 00 00 87 f2 08 00 fd 00 00 00 | ........i...{................... |
8540 | 84 f3 08 00 19 01 00 00 82 f4 08 00 9d 00 00 00 9c f5 08 00 be 01 00 00 3a f6 08 00 b1 00 00 00 | ........................:....... |
8560 | f9 f7 08 00 5b 00 00 00 ab f8 08 00 63 00 00 00 07 f9 08 00 33 01 00 00 6b f9 08 00 3b 00 00 00 | ....[.......c.......3...k...;... |
8580 | 9f fa 08 00 98 00 00 00 db fa 08 00 54 00 00 00 74 fb 08 00 59 00 00 00 c9 fb 08 00 de 00 00 00 | ............T...t...Y........... |
85a0 | 23 fc 08 00 9a 00 00 00 02 fd 08 00 2b 00 00 00 9d fd 08 00 c0 00 00 00 c9 fd 08 00 c5 00 00 00 | #...........+................... |
85c0 | 8a fe 08 00 3a 00 00 00 50 ff 08 00 35 00 00 00 8b ff 08 00 87 00 00 00 c1 ff 08 00 5c 00 00 00 | ....:...P...5...............\... |
85e0 | 49 00 09 00 74 00 00 00 a6 00 09 00 da 00 00 00 1b 01 09 00 f0 00 00 00 f6 01 09 00 84 00 00 00 | I...t........................... |
8600 | e7 02 09 00 f0 00 00 00 6c 03 09 00 f0 00 00 00 5d 04 09 00 f0 00 00 00 4e 05 09 00 f1 00 00 00 | ........l.......].......N....... |
8620 | 3f 06 09 00 5f 00 00 00 31 07 09 00 83 00 00 00 91 07 09 00 bd 00 00 00 15 08 09 00 79 00 00 00 | ?..._...1...................y... |
8640 | d3 08 09 00 7e 00 00 00 4d 09 09 00 36 00 00 00 cc 09 09 00 78 00 00 00 03 0a 09 00 85 00 00 00 | ....~...M...6.......x........... |
8660 | 7c 0a 09 00 51 00 00 00 02 0b 09 00 3e 00 00 00 54 0b 09 00 3e 00 00 00 93 0b 09 00 75 00 00 00 | |...Q.......>...T...>.......u... |
8680 | d2 0b 09 00 53 00 00 00 48 0c 09 00 df 00 00 00 9c 0c 09 00 a1 00 00 00 7c 0d 09 00 ac 00 00 00 | ....S...H...............|....... |
86a0 | 1e 0e 09 00 3b 00 00 00 cb 0e 09 00 47 00 00 00 07 0f 09 00 67 00 00 00 4f 0f 09 00 d8 00 00 00 | ....;.......G.......g...O....... |
86c0 | b7 0f 09 00 5a 00 00 00 90 10 09 00 38 00 00 00 eb 10 09 00 88 01 00 00 24 11 09 00 c5 00 00 00 | ....Z.......8...........$....... |
86e0 | ad 12 09 00 a1 00 00 00 73 13 09 00 6d 00 00 00 15 14 09 00 4e 00 00 00 83 14 09 00 54 00 00 00 | ........s...m.......N.......T... |
8700 | d2 14 09 00 3d 00 00 00 27 15 09 00 8a 00 00 00 65 15 09 00 6f 00 00 00 f0 15 09 00 2e 00 00 00 | ....=...'.......e...o........... |
8720 | 60 16 09 00 31 00 00 00 8f 16 09 00 3c 00 00 00 c1 16 09 00 17 01 00 00 fe 16 09 00 db 00 00 00 | `...1.......<................... |
8740 | 16 18 09 00 49 00 00 00 f2 18 09 00 4a 00 00 00 3c 19 09 00 49 00 00 00 87 19 09 00 49 00 00 00 | ....I.......J...<...I.......I... |
8760 | d1 19 09 00 0b 01 00 00 1b 1a 09 00 51 00 00 00 27 1b 09 00 96 00 00 00 79 1b 09 00 5d 00 00 00 | ............Q...'.......y...]... |
8780 | 10 1c 09 00 49 00 00 00 6e 1c 09 00 46 00 00 00 b8 1c 09 00 37 00 00 00 ff 1c 09 00 38 01 00 00 | ....I...n...F.......7.......8... |
87a0 | 37 1d 09 00 31 00 00 00 70 1e 09 00 30 00 00 00 a2 1e 09 00 39 00 00 00 d3 1e 09 00 33 00 00 00 | 7...1...p...0.......9.......3... |
87c0 | 0d 1f 09 00 33 00 00 00 41 1f 09 00 49 00 00 00 75 1f 09 00 d9 00 00 00 bf 1f 09 00 78 00 00 00 | ....3...A...I...u...........x... |
87e0 | 99 20 09 00 79 00 00 00 12 21 09 00 8c 00 00 00 8c 21 09 00 47 00 00 00 19 22 09 00 fb 00 00 00 | ....y....!.......!..G...."...... |
8800 | 61 22 09 00 b7 00 00 00 5d 23 09 00 5b 00 00 00 15 24 09 00 b7 00 00 00 71 24 09 00 42 00 00 00 | a"......]#..[....$......q$..B... |
8820 | 29 25 09 00 46 00 00 00 6c 25 09 00 30 00 00 00 b3 25 09 00 39 00 00 00 e4 25 09 00 25 00 00 00 | )%..F...l%..0....%..9....%..%... |
8840 | 1e 26 09 00 2e 00 00 00 44 26 09 00 2e 00 00 00 73 26 09 00 39 00 00 00 a2 26 09 00 c1 00 00 00 | .&......D&......s&..9....&...... |
8860 | dc 26 09 00 8c 00 00 00 9e 27 09 00 b5 00 00 00 2b 28 09 00 42 00 00 00 e1 28 09 00 a5 00 00 00 | .&.......'......+(..B....(...... |
8880 | 24 29 09 00 b9 00 00 00 ca 29 09 00 3e 00 00 00 84 2a 09 00 74 00 00 00 c3 2a 09 00 6c 00 00 00 | $).......)..>....*..t....*..l... |
88a0 | 38 2b 09 00 81 00 00 00 a5 2b 09 00 19 00 00 00 27 2c 09 00 23 00 00 00 41 2c 09 00 b7 00 00 00 | 8+.......+......',..#...A,...... |
88c0 | 65 2c 09 00 dc 00 00 00 1d 2d 09 00 13 00 00 00 fa 2d 09 00 54 00 00 00 0e 2e 09 00 5f 01 00 00 | e,.......-.......-..T......._... |
88e0 | 63 2e 09 00 17 00 00 00 c3 2f 09 00 1a 00 00 00 db 2f 09 00 17 00 00 00 f6 2f 09 00 5b 00 00 00 | c......../......./......./..[... |
8900 | 0e 30 09 00 3b 00 00 00 6a 30 09 00 dd 00 00 00 a6 30 09 00 1d 01 00 00 84 31 09 00 32 00 00 00 | .0..;...j0.......0.......1..2... |
8920 | a2 32 09 00 20 00 00 00 d5 32 09 00 5d 00 00 00 f6 32 09 00 54 00 00 00 54 33 09 00 04 00 00 00 | .2.......2..]....2..T...T3...... |
8940 | a9 33 09 00 30 00 00 00 ae 33 09 00 0c 00 00 00 df 33 09 00 0c 00 00 00 ec 33 09 00 60 00 00 00 | .3..0....3.......3.......3..`... |
8960 | f9 33 09 00 09 00 00 00 5a 34 09 00 35 01 00 00 64 34 09 00 33 01 00 00 9a 35 09 00 70 00 00 00 | .3......Z4..5...d4..3....5..p... |
8980 | ce 36 09 00 03 00 00 00 3f 37 09 00 62 00 00 00 43 37 09 00 03 00 00 00 a6 37 09 00 11 00 00 00 | .6......?7..b...C7.......7...... |
89a0 | aa 37 09 00 0b 00 00 00 bc 37 09 00 16 00 00 00 c8 37 09 00 19 00 00 00 df 37 09 00 15 00 00 00 | .7.......7.......7.......7...... |
89c0 | f9 37 09 00 11 00 00 00 0f 38 09 00 14 00 00 00 21 38 09 00 6a 02 00 00 36 38 09 00 3d 01 00 00 | .7.......8......!8..j...68..=... |
89e0 | a1 3a 09 00 85 01 00 00 df 3b 09 00 95 00 00 00 65 3d 09 00 d5 01 00 00 fb 3d 09 00 32 00 00 00 | .:.......;......e=.......=..2... |
8a00 | d1 3f 09 00 1e 00 00 00 04 40 09 00 05 00 00 00 23 40 09 00 45 01 00 00 29 40 09 00 16 00 00 00 | .?.......@......#@..E...)@...... |
8a20 | 6f 41 09 00 3b 00 00 00 86 41 09 00 18 00 00 00 c2 41 09 00 05 00 00 00 db 41 09 00 8e 00 00 00 | oA..;....A.......A.......A...... |
8a40 | e1 41 09 00 60 00 00 00 70 42 09 00 0c 00 00 00 d1 42 09 00 0d 00 00 00 de 42 09 00 3b 00 00 00 | .A..`...pB.......B.......B..;... |
8a60 | ec 42 09 00 07 00 00 00 28 43 09 00 10 00 00 00 30 43 09 00 6c 00 00 00 41 43 09 00 0e 00 00 00 | .B......(C......0C..l...AC...... |
8a80 | ae 43 09 00 4b 00 00 00 bd 43 09 00 47 00 00 00 09 44 09 00 65 00 00 00 51 44 09 00 a1 00 00 00 | .C..K....C..G....D..e...QD...... |
8aa0 | b7 44 09 00 3f 00 00 00 59 45 09 00 4a 01 00 00 99 45 09 00 44 01 00 00 e4 46 09 00 15 00 00 00 | .D..?...YE..J....E..D....F...... |
8ac0 | 29 48 09 00 24 00 00 00 3f 48 09 00 0a 00 00 00 64 48 09 00 24 00 00 00 6f 48 09 00 09 00 00 00 | )H..$...?H......dH..$...oH...... |
8ae0 | 94 48 09 00 29 00 00 00 9e 48 09 00 1b 00 00 00 c8 48 09 00 c9 00 00 00 e4 48 09 00 0b 00 00 00 | .H..)....H.......H.......H...... |
8b00 | ae 49 09 00 85 00 00 00 ba 49 09 00 26 00 00 00 40 4a 09 00 3d 00 00 00 67 4a 09 00 52 00 00 00 | .I.......I..&...@J..=...gJ..R... |
8b20 | a5 4a 09 00 b4 00 00 00 f8 4a 09 00 a9 00 00 00 ad 4b 09 00 26 00 00 00 57 4c 09 00 b0 00 00 00 | .J.......J.......K..&...WL...... |
8b40 | 7e 4c 09 00 df 00 00 00 2f 4d 09 00 1c 00 00 00 0f 4e 09 00 8f 00 00 00 2c 4e 09 00 8c 00 00 00 | ~L....../M.......N......,N...... |
8b60 | bc 4e 09 00 90 00 00 00 49 4f 09 00 5d 00 00 00 da 4f 09 00 44 00 00 00 38 50 09 00 2f 00 00 00 | .N......IO..]....O..D...8P../... |
8b80 | 7d 50 09 00 b0 00 00 00 ad 50 09 00 50 00 00 00 5e 51 09 00 a6 00 00 00 af 51 09 00 ec 00 00 00 | }P.......P..P...^Q.......Q...... |
8ba0 | 56 52 09 00 64 00 00 00 43 53 09 00 53 00 00 00 a8 53 09 00 df 00 00 00 fc 53 09 00 86 00 00 00 | VR..d...CS..S....S.......S...... |
8bc0 | dc 54 09 00 63 00 00 00 63 55 09 00 68 00 00 00 c7 55 09 00 d1 00 00 00 30 56 09 00 6f 00 00 00 | .T..c...cU..h....U......0V..o... |
8be0 | 02 57 09 00 8d 00 00 00 72 57 09 00 78 00 00 00 00 58 09 00 7a 00 00 00 79 58 09 00 7d 00 00 00 | .W......rW..x....X..z...yX..}... |
8c00 | f4 58 09 00 80 00 00 00 72 59 09 00 33 00 00 00 f3 59 09 00 71 00 00 00 27 5a 09 00 db 00 00 00 | .X......rY..3....Y..q...'Z...... |
8c20 | 99 5a 09 00 a5 00 00 00 75 5b 09 00 75 00 00 00 1b 5c 09 00 59 00 00 00 91 5c 09 00 58 00 00 00 | .Z......u[..u....\..Y....\..X... |
8c40 | eb 5c 09 00 9b 00 00 00 44 5d 09 00 b6 00 00 00 e0 5d 09 00 29 00 00 00 97 5e 09 00 9c 00 00 00 | .\......D].......]..)....^...... |
8c60 | c1 5e 09 00 e3 00 00 00 5e 5f 09 00 9e 00 00 00 42 60 09 00 44 00 00 00 e1 60 09 00 44 00 00 00 | .^......^_......B`..D....`..D... |
8c80 | 26 61 09 00 ed 00 00 00 6b 61 09 00 3c 00 00 00 59 62 09 00 bd 00 00 00 96 62 09 00 bf 00 00 00 | &a......ka..<...Yb.......b...... |
8ca0 | 54 63 09 00 88 00 00 00 14 64 09 00 85 00 00 00 9d 64 09 00 6f 00 00 00 23 65 09 00 cf 00 00 00 | Tc.......d.......d..o...#e...... |
8cc0 | 93 65 09 00 17 00 00 00 63 66 09 00 12 00 00 00 7b 66 09 00 18 00 00 00 8e 66 09 00 39 00 00 00 | .e......cf......{f.......f..9... |
8ce0 | a7 66 09 00 1b 00 00 00 e1 66 09 00 21 00 00 00 fd 66 09 00 07 00 00 00 1f 67 09 00 12 00 00 00 | .f.......f..!....f.......g...... |
8d00 | 27 67 09 00 79 00 00 00 3a 67 09 00 e5 00 00 00 b4 67 09 00 ac 00 00 00 9a 68 09 00 84 00 00 00 | 'g..y...:g.......g.......h...... |
8d20 | 47 69 09 00 36 01 00 00 cc 69 09 00 5a 00 00 00 03 6b 09 00 c4 00 00 00 5e 6b 09 00 4b 00 00 00 | Gi..6....i..Z....k......^k..K... |
8d40 | 23 6c 09 00 a7 00 00 00 6f 6c 09 00 17 00 00 00 17 6d 09 00 e8 00 00 00 2f 6d 09 00 48 00 00 00 | #l......ol.......m....../m..H... |
8d60 | 18 6e 09 00 41 00 00 00 61 6e 09 00 2e 00 00 00 a3 6e 09 00 47 00 00 00 d2 6e 09 00 3f 00 00 00 | .n..A...an.......n..G....n..?... |
8d80 | 1a 6f 09 00 9c 00 00 00 5a 6f 09 00 68 00 00 00 f7 6f 09 00 1b 01 00 00 60 70 09 00 22 00 00 00 | .o......Zo..h....o......`p.."... |
8da0 | 7c 71 09 00 08 00 00 00 9f 71 09 00 2a 00 00 00 a8 71 09 00 34 00 00 00 d3 71 09 00 ae 00 00 00 | |q.......q..*....q..4....q...... |
8dc0 | 08 72 09 00 17 01 00 00 b7 72 09 00 79 00 00 00 cf 73 09 00 73 00 00 00 49 74 09 00 bf 00 00 00 | .r.......r..y....s..s...It...... |
8de0 | bd 74 09 00 dc 00 00 00 7d 75 09 00 7b 01 00 00 5a 76 09 00 90 01 00 00 d6 77 09 00 13 01 00 00 | .t......}u..{...Zv.......w...... |
8e00 | 67 79 09 00 a0 00 00 00 7b 7a 09 00 36 01 00 00 1c 7b 09 00 04 02 00 00 53 7c 09 00 b6 00 00 00 | gy......{z..6....{......S|...... |
8e20 | 58 7e 09 00 ad 00 00 00 0f 7f 09 00 67 00 00 00 bd 7f 09 00 71 00 00 00 25 80 09 00 fe 00 00 00 | X~..........g.......q...%....... |
8e40 | 97 80 09 00 7d 00 00 00 96 81 09 00 6d 01 00 00 14 82 09 00 7a 00 00 00 82 83 09 00 e2 00 00 00 | ....}.......m.......z........... |
8e60 | fd 83 09 00 1e 01 00 00 e0 84 09 00 56 00 00 00 ff 85 09 00 16 01 00 00 56 86 09 00 06 01 00 00 | ............V...........V....... |
8e80 | 6d 87 09 00 b1 00 00 00 74 88 09 00 58 00 00 00 26 89 09 00 80 00 00 00 7f 89 09 00 7d 00 00 00 | m.......t...X...&...........}... |
8ea0 | 00 8a 09 00 98 00 00 00 7e 8a 09 00 b5 00 00 00 17 8b 09 00 a2 00 00 00 cd 8b 09 00 00 01 00 00 | ........~....................... |
8ec0 | 70 8c 09 00 37 00 00 00 71 8d 09 00 42 00 00 00 a9 8d 09 00 cf 00 00 00 ec 8d 09 00 fd 00 00 00 | p...7...q...B................... |
8ee0 | bc 8e 09 00 3c 01 00 00 ba 8f 09 00 fb 00 00 00 f7 90 09 00 bf 00 00 00 f3 91 09 00 9e 00 00 00 | ....<........................... |
8f00 | b3 92 09 00 a4 00 00 00 52 93 09 00 fb 00 00 00 f7 93 09 00 18 01 00 00 f3 94 09 00 20 01 00 00 | ........R....................... |
8f20 | 0c 96 09 00 5d 00 00 00 2d 97 09 00 4b 00 00 00 8b 97 09 00 97 00 00 00 d7 97 09 00 57 00 00 00 | ....]...-...K...............W... |
8f40 | 6f 98 09 00 3e 00 00 00 c7 98 09 00 b0 00 00 00 06 99 09 00 f1 00 00 00 b7 99 09 00 b8 00 00 00 | o...>........................... |
8f60 | a9 9a 09 00 b8 00 00 00 62 9b 09 00 5d 00 00 00 1b 9c 09 00 4a 00 00 00 79 9c 09 00 34 00 00 00 | ........b...].......J...y...4... |
8f80 | c4 9c 09 00 2c 00 00 00 f9 9c 09 00 24 00 00 00 26 9d 09 00 41 00 00 00 4b 9d 09 00 d6 00 00 00 | ....,.......$...&...A...K....... |
8fa0 | 8d 9d 09 00 ae 00 00 00 64 9e 09 00 cf 00 00 00 13 9f 09 00 59 00 00 00 e3 9f 09 00 c3 00 00 00 | ........d...........Y........... |
8fc0 | 3d a0 09 00 48 00 00 00 01 a1 09 00 62 00 00 00 4a a1 09 00 86 00 00 00 ad a1 09 00 fe 00 00 00 | =...H.......b...J............... |
8fe0 | 34 a2 09 00 41 00 00 00 33 a3 09 00 93 00 00 00 75 a3 09 00 09 00 00 00 09 a4 09 00 18 00 00 00 | 4...A...3.......u............... |
9000 | 13 a4 09 00 33 00 00 00 2c a4 09 00 99 00 00 00 60 a4 09 00 9a 00 00 00 fa a4 09 00 16 00 00 00 | ....3...,.......`............... |
9020 | 95 a5 09 00 27 00 00 00 ac a5 09 00 30 00 00 00 d4 a5 09 00 10 00 00 00 05 a6 09 00 21 00 00 00 | ....'.......0...............!... |
9040 | 16 a6 09 00 1c 00 00 00 38 a6 09 00 aa 01 00 00 55 a6 09 00 82 00 00 00 00 a8 09 00 ac 00 00 00 | ........8.......U............... |
9060 | 83 a8 09 00 fe 00 00 00 30 a9 09 00 60 00 00 00 2f aa 09 00 86 01 00 00 90 aa 09 00 85 01 00 00 | ........0...`.../............... |
9080 | 17 ac 09 00 01 00 00 00 9d ad 09 00 76 00 00 00 9f ad 09 00 6b 00 00 00 16 ae 09 00 60 00 00 00 | ............v.......k.......`... |
90a0 | 82 ae 09 00 a9 00 00 00 e3 ae 09 00 c9 00 00 00 8d af 09 00 9b 00 00 00 57 b0 09 00 c3 00 00 00 | ........................W....... |
90c0 | f3 b0 09 00 3c 00 00 00 b7 b1 09 00 38 00 00 00 f4 b1 09 00 95 00 00 00 2d b2 09 00 2e 00 00 00 | ....<.......8...........-....... |
90e0 | c3 b2 09 00 57 00 00 00 f2 b2 09 00 61 00 00 00 4a b3 09 00 69 00 00 00 ac b3 09 00 4b 00 00 00 | ....W.......a...J...i.......K... |
9100 | 16 b4 09 00 a4 00 00 00 62 b4 09 00 52 00 00 00 07 b5 09 00 53 00 00 00 5a b5 09 00 65 00 00 00 | ........b...R.......S...Z...e... |
9120 | ae b5 09 00 35 00 00 00 14 b6 09 00 51 00 00 00 4a b6 09 00 a7 00 00 00 9c b6 09 00 8a 00 00 00 | ....5.......Q...J............... |
9140 | 44 b7 09 00 96 00 00 00 cf b7 09 00 81 00 00 00 66 b8 09 00 7f 00 00 00 e8 b8 09 00 88 00 00 00 | D...............f............... |
9160 | 68 b9 09 00 e3 00 00 00 f1 b9 09 00 c3 00 00 00 d5 ba 09 00 3a 00 00 00 99 bb 09 00 5a 00 00 00 | h...................:.......Z... |
9180 | d4 bb 09 00 65 00 00 00 2f bc 09 00 c3 00 00 00 95 bc 09 00 db 00 00 00 59 bd 09 00 50 00 00 00 | ....e.../...............Y...P... |
91a0 | 35 be 09 00 1d 01 00 00 86 be 09 00 f2 00 00 00 a4 bf 09 00 48 00 00 00 97 c0 09 00 b0 00 00 00 | 5...................H........... |
91c0 | e0 c0 09 00 9f 00 00 00 91 c1 09 00 1f 00 00 00 31 c2 09 00 71 00 00 00 51 c2 09 00 75 00 00 00 | ................1...q...Q...u... |
91e0 | c3 c2 09 00 75 00 00 00 39 c3 09 00 dc 00 00 00 af c3 09 00 3f 00 00 00 8c c4 09 00 6d 00 00 00 | ....u...9...........?.......m... |
9200 | cc c4 09 00 da 00 00 00 3a c5 09 00 1c 00 00 00 15 c6 09 00 13 00 00 00 32 c6 09 00 20 00 00 00 | ........:...............2....... |
9220 | 46 c6 09 00 14 00 00 00 67 c6 09 00 13 00 00 00 7c c6 09 00 03 01 00 00 90 c6 09 00 1d 00 00 00 | F.......g.......|............... |
9240 | 94 c7 09 00 1d 00 00 00 b2 c7 09 00 23 00 00 00 d0 c7 09 00 1d 00 00 00 f4 c7 09 00 29 00 00 00 | ............#...............)... |
9260 | 12 c8 09 00 3f 01 00 00 3c c8 09 00 31 00 00 00 7c c9 09 00 31 00 00 00 ae c9 09 00 33 00 00 00 | ....?...<...1...|...1.......3... |
9280 | e0 c9 09 00 33 00 00 00 14 ca 09 00 10 00 00 00 48 ca 09 00 0c 00 00 00 59 ca 09 00 2d 00 00 00 | ....3...........H.......Y...-... |
92a0 | 66 ca 09 00 2c 00 00 00 94 ca 09 00 12 00 00 00 c1 ca 09 00 2c 00 00 00 d4 ca 09 00 25 00 00 00 | f...,...............,.......%... |
92c0 | 01 cb 09 00 3c 00 00 00 27 cb 09 00 12 00 00 00 64 cb 09 00 35 00 00 00 77 cb 09 00 13 00 00 00 | ....<...'.......d...5...w....... |
92e0 | ad cb 09 00 34 00 00 00 c1 cb 09 00 16 00 00 00 f6 cb 09 00 1c 00 00 00 0d cc 09 00 12 00 00 00 | ....4........................... |
9300 | 2a cc 09 00 34 00 00 00 3d cc 09 00 13 00 00 00 72 cc 09 00 1d 00 00 00 86 cc 09 00 30 00 00 00 | *...4...=.......r...........0... |
9320 | a4 cc 09 00 1f 00 00 00 d5 cc 09 00 13 00 00 00 f5 cc 09 00 16 00 00 00 09 cd 09 00 25 01 00 00 | ............................%... |
9340 | 20 cd 09 00 d3 00 00 00 46 ce 09 00 13 00 00 00 1a cf 09 00 38 00 00 00 2e cf 09 00 41 00 00 00 | ........F...........8.......A... |
9360 | 67 cf 09 00 16 00 00 00 a9 cf 09 00 9d 00 00 00 c0 cf 09 00 41 00 00 00 5e d0 09 00 38 00 00 00 | g...................A...^...8... |
9380 | a0 d0 09 00 1e 00 00 00 d9 d0 09 00 22 00 00 00 f8 d0 09 00 5d 00 00 00 1b d1 09 00 55 00 00 00 | ............".......].......U... |
93a0 | 79 d1 09 00 1e 00 00 00 cf d1 09 00 44 00 00 00 ee d1 09 00 25 00 00 00 33 d2 09 00 08 01 00 00 | y...........D.......%...3....... |
93c0 | 59 d2 09 00 fd 01 00 00 62 d3 09 00 87 00 00 00 60 d5 09 00 54 00 00 00 e8 d5 09 00 5b 00 00 00 | Y.......b.......`...T.......[... |
93e0 | 3d d6 09 00 45 00 00 00 99 d6 09 00 87 02 00 00 df d6 09 00 c3 00 00 00 67 d9 09 00 59 00 00 00 | =...E...................g...Y... |
9400 | 2b da 09 00 1e 00 00 00 85 da 09 00 2a 00 00 00 a4 da 09 00 2f 00 00 00 cf da 09 00 27 00 00 00 | +...........*......./.......'... |
9420 | ff da 09 00 37 00 00 00 27 db 09 00 54 00 00 00 5f db 09 00 4f 00 00 00 b4 db 09 00 59 00 00 00 | ....7...'...T..._...O.......Y... |
9440 | 04 dc 09 00 4d 00 00 00 5e dc 09 00 5f 00 00 00 ac dc 09 00 33 00 00 00 0c dd 09 00 64 00 00 00 | ....M...^..._.......3.......d... |
9460 | 40 dd 09 00 7b 00 00 00 a5 dd 09 00 49 00 00 00 21 de 09 00 1e 00 00 00 6b de 09 00 f3 00 00 00 | @...{.......I...!.......k....... |
9480 | 8a de 09 00 f1 00 00 00 7e df 09 00 5e 00 00 00 70 e0 09 00 79 00 00 00 cf e0 09 00 54 00 00 00 | ........~...^...p...y.......T... |
94a0 | 49 e1 09 00 43 00 00 00 9e e1 09 00 4f 00 00 00 e2 e1 09 00 29 00 00 00 32 e2 09 00 82 00 00 00 | I...C.......O.......)...2....... |
94c0 | 5c e2 09 00 22 00 00 00 df e2 09 00 47 02 00 00 02 e3 09 00 47 02 00 00 4a e5 09 00 fc 00 00 00 | \...".......G.......G...J....... |
94e0 | 92 e7 09 00 9c 00 00 00 8f e8 09 00 2c 00 00 00 2c e9 09 00 16 00 00 00 59 e9 09 00 53 00 00 00 | ............,...,.......Y...S... |
9500 | 70 e9 09 00 7d 00 00 00 c4 e9 09 00 66 00 00 00 42 ea 09 00 b4 00 00 00 a9 ea 09 00 55 00 00 00 | p...}.......f...B...........U... |
9520 | 5e eb 09 00 22 00 00 00 b4 eb 09 00 18 00 00 00 d7 eb 09 00 31 00 00 00 f0 eb 09 00 1b 00 00 00 | ^..."...............1........... |
9540 | 22 ec 09 00 1a 00 00 00 3e ec 09 00 17 00 00 00 59 ec 09 00 17 00 00 00 71 ec 09 00 17 00 00 00 | ".......>.......Y.......q....... |
9560 | 89 ec 09 00 35 00 00 00 a1 ec 09 00 41 00 00 00 d7 ec 09 00 25 00 00 00 19 ed 09 00 2d 00 00 00 | ....5.......A.......%.......-... |
9580 | 3f ed 09 00 3e 00 00 00 6d ed 09 00 24 00 00 00 ac ed 09 00 28 00 00 00 d1 ed 09 00 4d 00 00 00 | ?...>...m...$.......(.......M... |
95a0 | fa ed 09 00 50 00 00 00 48 ee 09 00 33 00 00 00 99 ee 09 00 35 00 00 00 cd ee 09 00 20 00 00 00 | ....P...H...3.......5........... |
95c0 | 03 ef 09 00 73 02 00 00 24 ef 09 00 74 02 00 00 98 f1 09 00 c9 00 00 00 0d f4 09 00 28 00 00 00 | ....s...$...t...............(... |
95e0 | d7 f4 09 00 5c 00 00 00 00 f5 09 00 23 00 00 00 5d f5 09 00 27 00 00 00 81 f5 09 00 18 00 00 00 | ....\.......#...]...'........... |
9600 | a9 f5 09 00 25 00 00 00 c2 f5 09 00 1c 00 00 00 e8 f5 09 00 53 00 00 00 05 f6 09 00 53 00 00 00 | ....%...............S.......S... |
9620 | 59 f6 09 00 16 00 00 00 ad f6 09 00 7e 00 00 00 c4 f6 09 00 33 00 00 00 43 f7 09 00 25 00 00 00 | Y...........~.......3...C...%... |
9640 | 77 f7 09 00 af 00 00 00 9d f7 09 00 d0 00 00 00 4d f8 09 00 7e 00 00 00 1e f9 09 00 25 00 00 00 | w...............M...~.......%... |
9660 | 9d f9 09 00 3d 00 00 00 c3 f9 09 00 04 01 00 00 01 fa 09 00 49 00 00 00 06 fb 09 00 bd 00 00 00 | ....=...............I........... |
9680 | 50 fb 09 00 78 00 00 00 0e fc 09 00 41 00 00 00 87 fc 09 00 43 00 00 00 c9 fc 09 00 3d 00 00 00 | P...x.......A.......C.......=... |
96a0 | 0d fd 09 00 27 00 00 00 4b fd 09 00 1a 00 00 00 73 fd 09 00 d2 00 00 00 8e fd 09 00 5b 00 00 00 | ....'...K.......s...........[... |
96c0 | 61 fe 09 00 3d 00 00 00 bd fe 09 00 ab 00 00 00 fb fe 09 00 5a 00 00 00 a7 ff 09 00 5a 00 00 00 | a...=...............Z.......Z... |
96e0 | 02 00 0a 00 77 00 00 00 5d 00 0a 00 7d 00 00 00 d5 00 0a 00 dd 00 00 00 53 01 0a 00 3f 00 00 00 | ....w...]...}...........S...?... |
9700 | 31 02 0a 00 40 00 00 00 71 02 0a 00 55 00 00 00 b2 02 0a 00 af 00 00 00 08 03 0a 00 5e 00 00 00 | 1...@...q...U...............^... |
9720 | b8 03 0a 00 72 00 00 00 17 04 0a 00 3b 00 00 00 8a 04 0a 00 65 00 00 00 c6 04 0a 00 37 00 00 00 | ....r.......;.......e.......7... |
9740 | 2c 05 0a 00 25 00 00 00 64 05 0a 00 51 00 00 00 8a 05 0a 00 55 00 00 00 dc 05 0a 00 38 00 00 00 | ,...%...d...Q.......U.......8... |
9760 | 32 06 0a 00 13 00 00 00 6b 06 0a 00 45 00 00 00 7f 06 0a 00 40 00 00 00 c5 06 0a 00 26 00 00 00 | 2.......k...E.......@.......&... |
9780 | 06 07 0a 00 24 00 00 00 2d 07 0a 00 44 00 00 00 52 07 0a 00 4b 00 00 00 97 07 0a 00 4b 00 00 00 | ....$...-...D...R...K.......K... |
97a0 | e3 07 0a 00 1f 00 00 00 2f 08 0a 00 96 00 00 00 4f 08 0a 00 26 00 00 00 e6 08 0a 00 29 00 00 00 | ......../.......O...&.......)... |
97c0 | 0d 09 0a 00 22 00 00 00 37 09 0a 00 1f 00 00 00 5a 09 0a 00 24 00 00 00 7a 09 0a 00 28 00 00 00 | ...."...7.......Z...$...z...(... |
97e0 | 9f 09 0a 00 18 00 00 00 c8 09 0a 00 1b 00 00 00 e1 09 0a 00 26 00 00 00 fd 09 0a 00 29 00 00 00 | ....................&.......)... |
9800 | 24 0a 0a 00 57 00 00 00 4e 0a 0a 00 54 00 00 00 a6 0a 0a 00 52 00 00 00 fb 0a 0a 00 51 00 00 00 | $...W...N...T.......R.......Q... |
9820 | 4e 0b 0a 00 40 00 00 00 a0 0b 0a 00 28 00 00 00 e1 0b 0a 00 70 00 00 00 0a 0c 0a 00 26 00 00 00 | N...@.......(.......p.......&... |
9840 | 7b 0c 0a 00 79 00 00 00 a2 0c 0a 00 56 00 00 00 1c 0d 0a 00 0b 00 00 00 73 0d 0a 00 2c 00 00 00 | {...y.......V...........s...,... |
9860 | 7f 0d 0a 00 35 00 00 00 ac 0d 0a 00 3f 00 00 00 e2 0d 0a 00 2d 00 00 00 22 0e 0a 00 33 00 00 00 | ....5.......?.......-..."...3... |
9880 | 50 0e 0a 00 31 00 00 00 84 0e 0a 00 69 00 00 00 b6 0e 0a 00 9c 00 00 00 20 0f 0a 00 89 00 00 00 | P...1.......i................... |
98a0 | bd 0f 0a 00 56 00 00 00 47 10 0a 00 4c 00 00 00 9e 10 0a 00 3c 00 00 00 eb 10 0a 00 9e 00 00 00 | ....V...G...L.......<........... |
98c0 | 28 11 0a 00 26 00 00 00 c7 11 0a 00 27 00 00 00 ee 11 0a 00 1f 00 00 00 16 12 0a 00 5c 00 00 00 | (...&.......'...............\... |
98e0 | 36 12 0a 00 3f 00 00 00 93 12 0a 00 36 00 00 00 d3 12 0a 00 38 00 00 00 0a 13 0a 00 66 00 00 00 | 6...?.......6.......8.......f... |
9900 | 43 13 0a 00 24 00 00 00 aa 13 0a 00 27 00 00 00 cf 13 0a 00 27 00 00 00 f7 13 0a 00 1e 00 00 00 | C...$.......'.......'........... |
9920 | 1f 14 0a 00 24 01 00 00 3e 14 0a 00 a1 00 00 00 63 15 0a 00 3c 00 00 00 05 16 0a 00 6e 00 00 00 | ....$...>.......c...<.......n... |
9940 | 42 16 0a 00 83 00 00 00 b1 16 0a 00 3e 00 00 00 35 17 0a 00 55 00 00 00 74 17 0a 00 27 01 00 00 | B...........>...5...U...t...'... |
9960 | ca 17 0a 00 50 00 00 00 f2 18 0a 00 22 00 00 00 43 19 0a 00 5a 00 00 00 66 19 0a 00 2c 00 00 00 | ....P......."...C...Z...f...,... |
9980 | c1 19 0a 00 47 00 00 00 ee 19 0a 00 7b 00 00 00 36 1a 0a 00 77 00 00 00 b2 1a 0a 00 65 00 00 00 | ....G.......{...6...w.......e... |
99a0 | 2a 1b 0a 00 65 00 00 00 90 1b 0a 00 5a 00 00 00 f6 1b 0a 00 5a 00 00 00 51 1c 0a 00 72 00 00 00 | *...e.......Z.......Z...Q...r... |
99c0 | ac 1c 0a 00 2e 00 00 00 1f 1d 0a 00 24 00 00 00 4e 1d 0a 00 61 00 00 00 73 1d 0a 00 55 00 00 00 | ............$...N...a...s...U... |
99e0 | d5 1d 0a 00 2b 00 00 00 2b 1e 0a 00 29 00 00 00 57 1e 0a 00 27 00 00 00 81 1e 0a 00 28 00 00 00 | ....+...+...)...W...'.......(... |
9a00 | a9 1e 0a 00 29 00 00 00 d2 1e 0a 00 27 00 00 00 fc 1e 0a 00 28 00 00 00 24 1f 0a 00 4c 00 00 00 | ....).......'.......(...$...L... |
9a20 | 4d 1f 0a 00 4c 00 00 00 9a 1f 0a 00 38 00 00 00 e7 1f 0a 00 54 00 00 00 20 20 0a 00 0b 00 00 00 | M...L.......8.......T........... |
9a40 | 75 20 0a 00 0f 00 00 00 81 20 0a 00 49 00 00 00 91 20 0a 00 0b 00 00 00 db 20 0a 00 43 00 00 00 | u...........I...............C... |
9a60 | e7 20 0a 00 43 00 00 00 2b 21 0a 00 36 00 00 00 6f 21 0a 00 29 00 00 00 a6 21 0a 00 2e 00 00 00 | ....C...+!..6...o!..)....!...... |
9a80 | d0 21 0a 00 38 00 00 00 ff 21 0a 00 2c 00 00 00 38 22 0a 00 46 00 00 00 65 22 0a 00 22 00 00 00 | .!..8....!..,...8"..F...e".."... |
9aa0 | ac 22 0a 00 77 00 00 00 cf 22 0a 00 28 00 00 00 47 23 0a 00 3e 00 00 00 70 23 0a 00 28 00 00 00 | ."..w...."..(...G#..>...p#..(... |
9ac0 | af 23 0a 00 3e 00 00 00 d8 23 0a 00 29 00 00 00 17 24 0a 00 5d 00 00 00 41 24 0a 00 c9 00 00 00 | .#..>....#..)....$..]...A$...... |
9ae0 | 9f 24 0a 00 3f 00 00 00 69 25 0a 00 dd 00 00 00 a9 25 0a 00 4c 00 00 00 87 26 0a 00 19 00 00 00 | .$..?...i%.......%..L....&...... |
9b00 | d4 26 0a 00 7f 00 00 00 ee 26 0a 00 1d 00 00 00 6e 27 0a 00 73 00 00 00 8c 27 0a 00 31 00 00 00 | .&.......&......n'..s....'..1... |
9b20 | 00 28 0a 00 d7 00 00 00 32 28 0a 00 1e 00 00 00 0a 29 0a 00 24 00 00 00 29 29 0a 00 5c 00 00 00 | .(......2(.......)..$...))..\... |
9b40 | 4e 29 0a 00 21 00 00 00 ab 29 0a 00 52 00 00 00 cd 29 0a 00 5c 00 00 00 20 2a 0a 00 b7 00 00 00 | N)..!....)..R....)..\....*...... |
9b60 | 7d 2a 0a 00 44 01 00 00 35 2b 0a 00 a5 01 00 00 7a 2c 0a 00 27 00 00 00 20 2e 0a 00 88 01 00 00 | }*..D...5+......z,..'........... |
9b80 | 48 2e 0a 00 30 00 00 00 d1 2f 0a 00 3e 00 00 00 02 30 0a 00 33 01 00 00 41 30 0a 00 41 00 00 00 | H...0..../..>....0..3...A0..A... |
9ba0 | 75 31 0a 00 d1 00 00 00 b7 31 0a 00 c2 01 00 00 89 32 0a 00 49 00 00 00 4c 34 0a 00 e7 00 00 00 | u1.......1.......2..I...L4...... |
9bc0 | 96 34 0a 00 65 01 00 00 7e 35 0a 00 1f 00 00 00 e4 36 0a 00 30 00 00 00 04 37 0a 00 33 00 00 00 | .4..e...~5.......6..0....7..3... |
9be0 | 35 37 0a 00 11 00 00 00 69 37 0a 00 05 00 00 00 7b 37 0a 00 03 00 00 00 81 37 0a 00 0e 00 00 00 | 57......i7......{7.......7...... |
9c00 | 85 37 0a 00 1b 00 00 00 94 37 0a 00 1d 00 00 00 b0 37 0a 00 1f 00 00 00 ce 37 0a 00 04 00 00 00 | .7.......7.......7.......7...... |
9c20 | ee 37 0a 00 0d 00 00 00 f3 37 0a 00 32 00 00 00 01 38 0a 00 29 00 00 00 34 38 0a 00 04 00 00 00 | .7.......7..2....8..)...48...... |
9c40 | 5e 38 0a 00 07 00 00 00 63 38 0a 00 09 00 00 00 6b 38 0a 00 0d 00 00 00 75 38 0a 00 17 00 00 00 | ^8......c8......k8......u8...... |
9c60 | 83 38 0a 00 0f 00 00 00 9b 38 0a 00 0d 00 00 00 ab 38 0a 00 06 00 00 00 b9 38 0a 00 19 00 00 00 | .8.......8.......8.......8...... |
9c80 | c0 38 0a 00 14 00 00 00 da 38 0a 00 05 00 00 00 ef 38 0a 00 15 00 00 00 f5 38 0a 00 04 00 00 00 | .8.......8.......8.......8...... |
9ca0 | 0b 39 0a 00 04 00 00 00 10 39 0a 00 06 00 00 00 15 39 0a 00 51 00 00 00 1c 39 0a 00 4a 01 00 00 | .9.......9.......9..Q....9..J... |
9cc0 | 6e 39 0a 00 50 01 00 00 b9 3a 0a 00 4d 00 00 00 0a 3c 0a 00 05 00 00 00 58 3c 0a 00 12 00 00 00 | n9..P....:..M....<......X<...... |
9ce0 | 5e 3c 0a 00 15 00 00 00 71 3c 0a 00 22 00 00 00 87 3c 0a 00 10 00 00 00 aa 3c 0a 00 12 00 00 00 | ^<......q<.."....<.......<...... |
9d00 | bb 3c 0a 00 0e 00 00 00 ce 3c 0a 00 10 00 00 00 dd 3c 0a 00 13 00 00 00 ee 3c 0a 00 16 00 00 00 | .<.......<.......<.......<...... |
9d20 | 02 3d 0a 00 06 00 00 00 19 3d 0a 00 09 00 00 00 20 3d 0a 00 1d 00 00 00 2a 3d 0a 00 05 00 00 00 | .=.......=.......=......*=...... |
9d40 | 48 3d 0a 00 0b 00 00 00 4e 3d 0a 00 13 00 00 00 5a 3d 0a 00 0d 00 00 00 6e 3d 0a 00 05 00 00 00 | H=......N=......Z=......n=...... |
9d60 | 7c 3d 0a 00 68 00 00 00 82 3d 0a 00 67 00 00 00 eb 3d 0a 00 79 00 00 00 53 3e 0a 00 66 00 00 00 | |=..h....=..g....=..y...S>..f... |
9d80 | cd 3e 0a 00 03 00 00 00 34 3f 0a 00 08 00 00 00 38 3f 0a 00 31 00 00 00 41 3f 0a 00 07 00 00 00 | .>......4?......8?..1...A?...... |
9da0 | 73 3f 0a 00 08 00 00 00 7b 3f 0a 00 38 00 00 00 84 3f 0a 00 10 00 00 00 bd 3f 0a 00 0b 00 00 00 | s?......{?..8....?.......?...... |
9dc0 | ce 3f 0a 00 03 00 00 00 da 3f 0a 00 1d 00 00 00 de 3f 0a 00 06 00 00 00 fc 3f 0a 00 1d 00 00 00 | .?.......?.......?.......?...... |
9de0 | 03 40 0a 00 09 00 00 00 21 40 0a 00 26 00 00 00 2b 40 0a 00 6d 00 00 00 52 40 0a 00 46 00 00 00 | .@......!@..&...+@..m...R@..F... |
9e00 | c0 40 0a 00 32 00 00 00 07 41 0a 00 46 00 00 00 3a 41 0a 00 04 00 00 00 81 41 0a 00 08 00 00 00 | .@..2....A..F...:A.......A...... |
9e20 | 86 41 0a 00 07 00 00 00 8f 41 0a 00 46 00 00 00 97 41 0a 00 0d 00 00 00 de 41 0a 00 05 00 00 00 | .A.......A..F....A.......A...... |
9e40 | ec 41 0a 00 1b 00 00 00 f2 41 0a 00 1c 00 00 00 0e 42 0a 00 73 00 00 00 2b 42 0a 00 71 00 00 00 | .A.......A.......B..s...+B..q... |
9e60 | 9f 42 0a 00 04 00 00 00 11 43 0a 00 06 00 00 00 16 43 0a 00 04 00 00 00 1d 43 0a 00 05 00 00 00 | .B.......C.......C.......C...... |
9e80 | 22 43 0a 00 10 00 00 00 28 43 0a 00 3c 00 00 00 39 43 0a 00 32 00 00 00 76 43 0a 00 1c 00 00 00 | "C......(C..<...9C..2...vC...... |
9ea0 | a9 43 0a 00 6d 00 00 00 c6 43 0a 00 08 00 00 00 34 44 0a 00 14 00 00 00 3d 44 0a 00 14 00 00 00 | .C..m....C......4D......=D...... |
9ec0 | 52 44 0a 00 14 00 00 00 67 44 0a 00 14 00 00 00 7c 44 0a 00 14 00 00 00 91 44 0a 00 14 00 00 00 | RD......gD......|D.......D...... |
9ee0 | a6 44 0a 00 14 00 00 00 bb 44 0a 00 06 00 00 00 d0 44 0a 00 06 00 00 00 d7 44 0a 00 06 00 00 00 | .D.......D.......D.......D...... |
9f00 | de 44 0a 00 06 00 00 00 e5 44 0a 00 06 00 00 00 ec 44 0a 00 06 00 00 00 f3 44 0a 00 06 00 00 00 | .D.......D.......D.......D...... |
9f20 | fa 44 0a 00 06 00 00 00 01 45 0a 00 1f 00 00 00 08 45 0a 00 08 00 00 00 28 45 0a 00 08 00 00 00 | .D.......E.......E......(E...... |
9f40 | 31 45 0a 00 a4 00 00 00 3a 45 0a 00 03 00 00 00 df 45 0a 00 0d 00 00 00 e3 45 0a 00 74 00 00 00 | 1E......:E.......E.......E..t... |
9f60 | f1 45 0a 00 9a 00 00 00 66 46 0a 00 4c 00 00 00 01 47 0a 00 04 00 00 00 4e 47 0a 00 0c 00 00 00 | .E......fF..L....G......NG...... |
9f80 | 53 47 0a 00 3f 00 00 00 60 47 0a 00 29 00 00 00 a0 47 0a 00 37 00 00 00 ca 47 0a 00 2c 00 00 00 | SG..?...`G..)....G..7....G..,... |
9fa0 | 02 48 0a 00 0e 00 00 00 2f 48 0a 00 33 00 00 00 3e 48 0a 00 33 00 00 00 72 48 0a 00 0b 00 00 00 | .H....../H..3...>H..3...rH...... |
9fc0 | a6 48 0a 00 14 00 00 00 b2 48 0a 00 71 00 00 00 c7 48 0a 00 46 00 00 00 39 49 0a 00 04 00 00 00 | .H.......H..q....H..F...9I...... |
9fe0 | 80 49 0a 00 0b 00 00 00 85 49 0a 00 12 00 00 00 91 49 0a 00 0f 00 00 00 a4 49 0a 00 08 00 00 00 | .I.......I.......I.......I...... |
a000 | b4 49 0a 00 06 00 00 00 bd 49 0a 00 03 00 00 00 c4 49 0a 00 0a 00 00 00 c8 49 0a 00 0b 00 00 00 | .I.......I.......I.......I...... |
a020 | d3 49 0a 00 40 00 00 00 df 49 0a 00 07 00 00 00 20 4a 0a 00 06 00 00 00 28 4a 0a 00 05 00 00 00 | .I..@....I.......J......(J...... |
a040 | 2f 4a 0a 00 9b 00 00 00 35 4a 0a 00 11 00 00 00 d1 4a 0a 00 0d 00 00 00 e3 4a 0a 00 13 00 00 00 | /J......5J.......J.......J...... |
a060 | f1 4a 0a 00 15 00 00 00 05 4b 0a 00 18 00 00 00 1b 4b 0a 00 1b 00 00 00 34 4b 0a 00 0a 00 00 00 | .J.......K.......K......4K...... |
a080 | 50 4b 0a 00 12 00 00 00 5b 4b 0a 00 1c 00 00 00 6e 4b 0a 00 0f 00 00 00 8b 4b 0a 00 05 00 00 00 | PK......[K......nK.......K...... |
a0a0 | 9b 4b 0a 00 0e 00 00 00 a1 4b 0a 00 0e 00 00 00 b0 4b 0a 00 0d 00 00 00 bf 4b 0a 00 2a 00 00 00 | .K.......K.......K.......K..*... |
a0c0 | cd 4b 0a 00 15 00 00 00 f8 4b 0a 00 31 00 00 00 0e 4c 0a 00 39 00 00 00 40 4c 0a 00 34 00 00 00 | .K.......K..1....L..9...@L..4... |
a0e0 | 7a 4c 0a 00 04 00 00 00 af 4c 0a 00 0b 00 00 00 b4 4c 0a 00 09 00 00 00 c0 4c 0a 00 07 00 00 00 | zL.......L.......L.......L...... |
a100 | ca 4c 0a 00 05 00 00 00 d2 4c 0a 00 72 00 00 00 d8 4c 0a 00 08 00 00 00 4b 4d 0a 00 0e 00 00 00 | .L.......L..r....L......KM...... |
a120 | 54 4d 0a 00 11 00 00 00 63 4d 0a 00 38 00 00 00 75 4d 0a 00 0d 00 00 00 ae 4d 0a 00 0d 00 00 00 | TM......cM..8...uM.......M...... |
a140 | bc 4d 0a 00 06 00 00 00 ca 4d 0a 00 3a 00 00 00 d1 4d 0a 00 0b 00 00 00 0c 4e 0a 00 3f 00 00 00 | .M.......M..:....M.......N..?... |
a160 | 18 4e 0a 00 40 00 00 00 58 4e 0a 00 0e 00 00 00 99 4e 0a 00 0f 00 00 00 a8 4e 0a 00 07 00 00 00 | .N..@...XN.......N.......N...... |
a180 | b8 4e 0a 00 0e 00 00 00 c0 4e 0a 00 0c 00 00 00 cf 4e 0a 00 ad 00 00 00 dc 4e 0a 00 0b 00 00 00 | .N.......N.......N.......N...... |
a1a0 | 8a 4f 0a 00 06 00 00 00 96 4f 0a 00 04 00 00 00 9d 4f 0a 00 d7 00 00 00 a2 4f 0a 00 10 00 00 00 | .O.......O.......O.......O...... |
a1c0 | 7a 50 0a 00 ed 01 00 00 8b 50 0a 00 0b 00 00 00 79 52 0a 00 0b 00 00 00 85 52 0a 00 0c 00 00 00 | zP.......P......yR.......R...... |
a1e0 | 91 52 0a 00 06 00 00 00 9e 52 0a 00 0e 00 00 00 a5 52 0a 00 58 00 00 00 b4 52 0a 00 04 00 00 00 | .R.......R.......R..X....R...... |
a200 | 0d 53 0a 00 04 00 00 00 12 53 0a 00 05 00 00 00 17 53 0a 00 0e 00 00 00 1d 53 0a 00 47 00 00 00 | .S.......S.......S.......S..G... |
a220 | 2c 53 0a 00 05 00 00 00 74 53 0a 00 07 00 00 00 7a 53 0a 00 68 00 00 00 82 53 0a 00 19 00 00 00 | ,S......tS......zS..h....S...... |
a240 | eb 53 0a 00 14 00 00 00 05 54 0a 00 2c 00 00 00 1a 54 0a 00 0b 00 00 00 47 54 0a 00 09 00 00 00 | .S.......T..,....T......GT...... |
a260 | 53 54 0a 00 08 00 00 00 5d 54 0a 00 53 00 00 00 66 54 0a 00 08 00 00 00 ba 54 0a 00 22 00 00 00 | ST......]T..S...fT.......T.."... |
a280 | c3 54 0a 00 04 00 00 00 e6 54 0a 00 05 00 00 00 eb 54 0a 00 da 00 00 00 f1 54 0a 00 43 00 00 00 | .T.......T.......T.......T..C... |
a2a0 | cc 55 0a 00 52 00 00 00 10 56 0a 00 42 00 00 00 63 56 0a 00 3b 00 00 00 a6 56 0a 00 42 00 00 00 | .U..R....V..B...cV..;....V..B... |
a2c0 | e2 56 0a 00 3a 00 00 00 25 57 0a 00 24 00 00 00 60 57 0a 00 1a 00 00 00 85 57 0a 00 66 00 00 00 | .V..:...%W..$...`W.......W..f... |
a2e0 | a0 57 0a 00 6f 00 00 00 07 58 0a 00 89 00 00 00 77 58 0a 00 5d 01 00 00 01 59 0a 00 48 00 00 00 | .W..o....X......wX..]....Y..H... |
a300 | 5f 5a 0a 00 46 00 00 00 a8 5a 0a 00 31 00 00 00 ef 5a 0a 00 31 00 00 00 21 5b 0a 00 3e 00 00 00 | _Z..F....Z..1....Z..1...![..>... |
a320 | 53 5b 0a 00 23 00 00 00 92 5b 0a 00 18 00 00 00 b6 5b 0a 00 7d 00 00 00 cf 5b 0a 00 92 00 00 00 | S[..#....[.......[..}....[...... |
a340 | 4d 5c 0a 00 23 00 00 00 e0 5c 0a 00 20 00 00 00 04 5d 0a 00 21 00 00 00 25 5d 0a 00 21 00 00 00 | M\..#....\.......]..!...%]..!... |
a360 | 47 5d 0a 00 3f 00 00 00 69 5d 0a 00 78 00 00 00 a9 5d 0a 00 7f 00 00 00 22 5e 0a 00 15 00 00 00 | G]..?...i]..x....]......"^...... |
a380 | a2 5e 0a 00 2d 00 00 00 b8 5e 0a 00 27 00 00 00 e6 5e 0a 00 1d 00 00 00 0e 5f 0a 00 5c 00 00 00 | .^..-....^..'....^......._..\... |
a3a0 | 2c 5f 0a 00 1c 00 00 00 89 5f 0a 00 0c 00 00 00 a6 5f 0a 00 21 00 00 00 b3 5f 0a 00 4e 00 00 00 | ,_......._......._..!...._..N... |
a3c0 | d5 5f 0a 00 e0 00 00 00 24 60 0a 00 e0 00 00 00 05 61 0a 00 23 00 00 00 e6 61 0a 00 3e 00 00 00 | ._......$`.......a..#....a..>... |
a3e0 | 0a 62 0a 00 0c 00 00 00 49 62 0a 00 12 00 00 00 56 62 0a 00 11 00 00 00 69 62 0a 00 4d 00 00 00 | .b......Ib......Vb......ib..M... |
a400 | 7b 62 0a 00 b4 00 00 00 c9 62 0a 00 6c 00 00 00 7e 63 0a 00 6b 00 00 00 eb 63 0a 00 81 00 00 00 | {b.......b..l...~c..k....c...... |
a420 | 57 64 0a 00 3b 00 00 00 d9 64 0a 00 12 00 00 00 15 65 0a 00 8b 00 00 00 28 65 0a 00 8c 00 00 00 | Wd..;....d.......e......(e...... |
a440 | b4 65 0a 00 30 01 00 00 41 66 0a 00 fb 00 00 00 72 67 0a 00 fc 00 00 00 6e 68 0a 00 d5 00 00 00 | .e..0...Af......rg......nh...... |
a460 | 6b 69 0a 00 94 00 00 00 41 6a 0a 00 2c 01 00 00 d6 6a 0a 00 f6 01 00 00 03 6c 0a 00 67 00 00 00 | ki......Aj..,....j.......l..g... |
a480 | fa 6d 0a 00 67 00 00 00 62 6e 0a 00 da 00 00 00 ca 6e 0a 00 d9 00 00 00 a5 6f 0a 00 12 00 00 00 | .m..g...bn.......n.......o...... |
a4a0 | 7f 70 0a 00 08 00 00 00 92 70 0a 00 b8 00 00 00 9b 70 0a 00 14 01 00 00 54 71 0a 00 18 00 00 00 | .p.......p.......p......Tq...... |
a4c0 | 69 72 0a 00 18 00 00 00 82 72 0a 00 1b 00 00 00 9b 72 0a 00 1a 00 00 00 b7 72 0a 00 15 00 00 00 | ir.......r.......r.......r...... |
a4e0 | d2 72 0a 00 0d 00 00 00 e8 72 0a 00 14 00 00 00 f6 72 0a 00 0a 00 00 00 0b 73 0a 00 0b 00 00 00 | .r.......r.......r.......s...... |
a500 | 16 73 0a 00 0a 00 00 00 22 73 0a 00 0b 00 00 00 2d 73 0a 00 0a 00 00 00 39 73 0a 00 0a 00 00 00 | .s......"s......-s......9s...... |
a520 | 44 73 0a 00 4d 00 00 00 4f 73 0a 00 7e 03 00 00 9d 73 0a 00 10 00 00 00 1c 77 0a 00 10 00 00 00 | Ds..M...Os..~....s.......w...... |
a540 | 2d 77 0a 00 a0 01 00 00 3e 77 0a 00 98 01 00 00 df 78 0a 00 99 01 00 00 78 7a 0a 00 10 00 00 00 | -w......>w.......x......xz...... |
a560 | 12 7c 0a 00 4a 00 00 00 23 7c 0a 00 16 00 00 00 6e 7c 0a 00 93 00 00 00 85 7c 0a 00 2f 01 00 00 | .|..J...#|......n|.......|../... |
a580 | 19 7d 0a 00 2e 01 00 00 49 7e 0a 00 0b 00 00 00 78 7f 0a 00 2e 00 00 00 84 7f 0a 00 2d 00 00 00 | .}......I~......x...........-... |
a5a0 | b3 7f 0a 00 26 00 00 00 e1 7f 0a 00 37 00 00 00 08 80 0a 00 33 00 00 00 40 80 0a 00 29 00 00 00 | ....&.......7.......3...@...)... |
a5c0 | 74 80 0a 00 3b 00 00 00 9e 80 0a 00 1e 00 00 00 da 80 0a 00 3b 00 00 00 f9 80 0a 00 2e 00 00 00 | t...;...............;........... |
a5e0 | 35 81 0a 00 4e 00 00 00 64 81 0a 00 11 00 00 00 b3 81 0a 00 06 00 00 00 c5 81 0a 00 11 00 00 00 | 5...N...d....................... |
a600 | cc 81 0a 00 06 00 00 00 de 81 0a 00 2d 00 00 00 e5 81 0a 00 25 00 00 00 13 82 0a 00 09 00 00 00 | ............-.......%........... |
a620 | 39 82 0a 00 b9 00 00 00 43 82 0a 00 0c 00 00 00 fd 82 0a 00 0c 00 00 00 0a 83 0a 00 0c 00 00 00 | 9.......C....................... |
a640 | 17 83 0a 00 13 00 00 00 24 83 0a 00 30 00 00 00 38 83 0a 00 31 00 00 00 69 83 0a 00 07 00 00 00 | ........$...0...8...1...i....... |
a660 | 9b 83 0a 00 07 00 00 00 a3 83 0a 00 0d 00 00 00 ab 83 0a 00 14 00 00 00 b9 83 0a 00 1d 00 00 00 | ................................ |
a680 | ce 83 0a 00 49 00 00 00 ec 83 0a 00 19 00 00 00 36 84 0a 00 0a 00 00 00 50 84 0a 00 24 00 00 00 | ....I...........6.......P...$... |
a6a0 | 5b 84 0a 00 27 00 00 00 80 84 0a 00 0b 00 00 00 a8 84 0a 00 10 00 00 00 b4 84 0a 00 10 00 00 00 | [...'........................... |
a6c0 | c5 84 0a 00 70 00 00 00 d6 84 0a 00 57 00 00 00 47 85 0a 00 42 00 00 00 9f 85 0a 00 32 00 00 00 | ....p.......W...G...B.......2... |
a6e0 | e2 85 0a 00 37 00 00 00 15 86 0a 00 5a 00 00 00 4d 86 0a 00 a3 00 00 00 a8 86 0a 00 74 00 00 00 | ....7.......Z...M...........t... |
a700 | 4c 87 0a 00 35 01 00 00 c1 87 0a 00 73 00 00 00 f7 88 0a 00 16 01 00 00 6b 89 0a 00 7e 00 00 00 | L...5.......s...........k...~... |
a720 | 82 8a 0a 00 49 00 00 00 01 8b 0a 00 2f 02 00 00 4b 8b 0a 00 6f 00 00 00 7b 8d 0a 00 39 01 00 00 | ....I......./...K...o...{...9... |
a740 | eb 8d 0a 00 dd 00 00 00 25 8f 0a 00 20 00 00 00 03 90 0a 00 30 00 00 00 24 90 0a 00 14 00 00 00 | ........%...........0...$....... |
a760 | 55 90 0a 00 2c 00 00 00 6a 90 0a 00 90 00 00 00 97 90 0a 00 52 00 00 00 28 91 0a 00 58 00 00 00 | U...,...j...........R...(...X... |
a780 | 7b 91 0a 00 26 00 00 00 d4 91 0a 00 58 00 00 00 fb 91 0a 00 e4 00 00 00 54 92 0a 00 68 00 00 00 | {...&.......X...........T...h... |
a7a0 | 39 93 0a 00 5d 00 00 00 a2 93 0a 00 6c 00 00 00 00 94 0a 00 5a 00 00 00 6d 94 0a 00 a4 00 00 00 | 9...].......l.......Z...m....... |
a7c0 | c8 94 0a 00 eb 00 00 00 6d 95 0a 00 41 00 00 00 59 96 0a 00 52 00 00 00 9b 96 0a 00 6d 00 00 00 | ........m...A...Y...R.......m... |
a7e0 | ee 96 0a 00 c7 00 00 00 5c 97 0a 00 f1 00 00 00 24 98 0a 00 08 00 00 00 16 99 0a 00 35 00 00 00 | ........\.......$...........5... |
a800 | 1f 99 0a 00 32 00 00 00 55 99 0a 00 4c 00 00 00 88 99 0a 00 30 00 00 00 d5 99 0a 00 38 00 00 00 | ....2...U...L.......0.......8... |
a820 | 06 9a 0a 00 36 00 00 00 3f 9a 0a 00 19 00 00 00 76 9a 0a 00 3a 00 00 00 90 9a 0a 00 37 00 00 00 | ....6...?.......v...:.......7... |
a840 | cb 9a 0a 00 7b 01 00 00 03 9b 0a 00 14 00 00 00 7f 9c 0a 00 16 00 00 00 94 9c 0a 00 36 00 00 00 | ....{.......................6... |
a860 | ab 9c 0a 00 47 00 00 00 e2 9c 0a 00 55 00 00 00 2a 9d 0a 00 35 00 00 00 80 9d 0a 00 29 00 00 00 | ....G.......U...*...5.......)... |
a880 | b6 9d 0a 00 23 00 00 00 e0 9d 0a 00 24 00 00 00 04 9e 0a 00 af 00 00 00 29 9e 0a 00 6c 00 00 00 | ....#.......$...........)...l... |
a8a0 | d9 9e 0a 00 29 00 00 00 46 9f 0a 00 a7 00 00 00 70 9f 0a 00 ee 00 00 00 18 a0 0a 00 47 00 00 00 | ....)...F.......p...........G... |
a8c0 | 07 a1 0a 00 47 00 00 00 4f a1 0a 00 3a 00 00 00 97 a1 0a 00 4b 00 00 00 d2 a1 0a 00 4d 00 00 00 | ....G...O...:.......K.......M... |
a8e0 | 1e a2 0a 00 5a 01 00 00 6c a2 0a 00 9f 01 00 00 c7 a3 0a 00 b5 00 00 00 67 a5 0a 00 1d 00 00 00 | ....Z...l...............g....... |
a900 | 1d a6 0a 00 51 00 00 00 3b a6 0a 00 31 00 00 00 8d a6 0a 00 32 00 00 00 bf a6 0a 00 1a 00 00 00 | ....Q...;...1.......2........... |
a920 | f2 a6 0a 00 4c 00 00 00 0d a7 0a 00 80 00 00 00 5a a7 0a 00 25 00 00 00 db a7 0a 00 26 00 00 00 | ....L...........Z...%.......&... |
a940 | 01 a8 0a 00 26 00 00 00 28 a8 0a 00 40 00 00 00 4f a8 0a 00 17 00 00 00 90 a8 0a 00 09 00 00 00 | ....&...(...@...O............... |
a960 | a8 a8 0a 00 2d 00 00 00 b2 a8 0a 00 3c 00 00 00 e0 a8 0a 00 42 00 00 00 1d a9 0a 00 b1 00 00 00 | ....-.......<.......B........... |
a980 | 60 a9 0a 00 54 00 00 00 12 aa 0a 00 2c 00 00 00 67 aa 0a 00 47 00 00 00 94 aa 0a 00 bc 00 00 00 | `...T.......,...g...G........... |
a9a0 | dc aa 0a 00 bf 00 00 00 99 ab 0a 00 1e 00 00 00 59 ac 0a 00 37 00 00 00 78 ac 0a 00 33 00 00 00 | ................Y...7...x...3... |
a9c0 | b0 ac 0a 00 9a 00 00 00 e4 ac 0a 00 01 00 00 00 7f ad 0a 00 2c 00 00 00 81 ad 0a 00 11 00 00 00 | ....................,........... |
a9e0 | ae ad 0a 00 06 00 00 00 c0 ad 0a 00 06 00 00 00 c7 ad 0a 00 06 00 00 00 ce ad 0a 00 06 00 00 00 | ................................ |
aa00 | d5 ad 0a 00 06 00 00 00 dc ad 0a 00 06 00 00 00 e3 ad 0a 00 06 00 00 00 ea ad 0a 00 06 00 00 00 | ................................ |
aa20 | f1 ad 0a 00 06 00 00 00 f8 ad 0a 00 06 00 00 00 ff ad 0a 00 0e 00 00 00 06 ae 0a 00 01 00 00 00 | ................................ |
aa40 | 15 ae 0a 00 11 00 00 00 17 ae 0a 00 0a 00 00 00 29 ae 0a 00 1a 00 00 00 34 ae 0a 00 b7 00 00 00 | ................).......4....... |
aa60 | 4f ae 0a 00 02 00 00 00 07 af 0a 00 0e 00 00 00 0a af 0a 00 2d 00 00 00 19 af 0a 00 10 00 00 00 | O...................-........... |
aa80 | 47 af 0a 00 0f 00 00 00 58 af 0a 00 11 00 00 00 68 af 0a 00 13 00 00 00 7a af 0a 00 06 00 00 00 | G.......X.......h.......z....... |
aaa0 | 8e af 0a 00 06 00 00 00 95 af 0a 00 06 00 00 00 9c af 0a 00 06 00 00 00 a3 af 0a 00 02 00 00 00 | ................................ |
aac0 | aa af 0a 00 03 00 00 00 ad af 0a 00 02 00 00 00 b1 af 0a 00 08 00 00 00 b4 af 0a 00 02 00 00 00 | ................................ |
aae0 | bd af 0a 00 02 00 00 00 c0 af 0a 00 02 00 00 00 c3 af 0a 00 02 00 00 00 c6 af 0a 00 02 00 00 00 | ................................ |
ab00 | c9 af 0a 00 32 00 00 00 cc af 0a 00 02 00 00 00 ff af 0a 00 02 00 00 00 02 b0 0a 00 35 00 00 00 | ....2.......................5... |
ab20 | 05 b0 0a 00 17 00 00 00 3b b0 0a 00 01 00 00 00 53 b0 0a 00 1a 00 00 00 55 b0 0a 00 80 00 00 00 | ........;.......S.......U....... |
ab40 | 70 b0 0a 00 02 00 00 00 f1 b0 0a 00 02 00 00 00 f4 b0 0a 00 02 00 00 00 f7 b0 0a 00 02 00 00 00 | p............................... |
ab60 | fa b0 0a 00 11 00 00 00 fd b0 0a 00 11 00 00 00 0f b1 0a 00 03 00 00 00 21 b1 0a 00 02 00 00 00 | ........................!....... |
ab80 | 25 b1 0a 00 02 00 00 00 28 b1 0a 00 63 00 00 00 2b b1 0a 00 0f 00 00 00 8f b1 0a 00 01 00 00 00 | %.......(...c...+............... |
aba0 | 9f b1 0a 00 20 00 00 00 a1 b1 0a 00 02 00 00 00 c2 b1 0a 00 02 00 00 00 c5 b1 0a 00 02 00 00 00 | ................................ |
abc0 | c8 b1 0a 00 02 00 00 00 cb b1 0a 00 01 00 00 00 ce b1 0a 00 1a 00 00 00 d0 b1 0a 00 a2 00 00 00 | ................................ |
abe0 | eb b1 0a 00 e6 00 00 00 8e b2 0a 00 11 00 00 00 75 b3 0a 00 02 00 00 00 87 b3 0a 00 02 00 00 00 | ................u............... |
ac00 | 8a b3 0a 00 02 00 00 00 8d b3 0a 00 01 00 00 00 90 b3 0a 00 11 00 00 00 92 b3 0a 00 c3 00 00 00 | ................................ |
ac20 | a4 b3 0a 00 0f 00 00 00 68 b4 0a 00 11 00 00 00 78 b4 0a 00 02 00 00 00 8a b4 0a 00 01 00 00 00 | ........h.......x............... |
ac40 | 8d b4 0a 00 6b 00 00 00 8f b4 0a 00 02 00 00 00 fb b4 0a 00 3b 00 00 00 fe b4 0a 00 02 00 00 00 | ....k...............;........... |
ac60 | 3a b5 0a 00 02 00 00 00 3d b5 0a 00 0a 00 00 00 40 b5 0a 00 6b 02 00 00 4b b5 0a 00 01 00 00 00 | :.......=.......@...k...K....... |
ac80 | b7 b7 0a 00 02 00 00 00 b9 b7 0a 00 01 00 00 00 bc b7 0a 00 6c 00 00 00 be b7 0a 00 01 00 00 00 | ....................l........... |
aca0 | 2b b8 0a 00 76 00 00 00 2d b8 0a 00 61 01 00 00 a4 b8 0a 00 8b 00 00 00 06 ba 0a 00 10 01 00 00 | +...v...-...a................... |
acc0 | 92 ba 0a 00 36 00 00 00 a3 bb 0a 00 22 01 00 00 da bb 0a 00 26 02 00 00 fd bc 0a 00 ec 00 00 00 | ....6.......".......&........... |
ace0 | 24 bf 0a 00 8b 00 00 00 11 c0 0a 00 8c 01 00 00 9d c0 0a 00 bd 00 00 00 2a c2 0a 00 08 02 00 00 | $.......................*....... |
ad00 | e8 c2 0a 00 53 01 00 00 f1 c4 0a 00 dc 00 00 00 45 c6 0a 00 4f 00 00 00 22 c7 0a 00 aa 03 00 00 | ....S...........E...O..."....... |
ad20 | 72 c7 0a 00 8b 01 00 00 1d cb 0a 00 80 01 00 00 a9 cc 0a 00 b5 01 00 00 2a ce 0a 00 4c 02 00 00 | r.......................*...L... |
ad40 | e0 cf 0a 00 61 00 00 00 2d d2 0a 00 8f 05 00 00 8f d2 0a 00 32 02 00 00 1f d8 0a 00 0b 01 00 00 | ....a...-...........2........... |
ad60 | 52 da 0a 00 3d 02 00 00 5e db 0a 00 7e 00 00 00 9c dd 0a 00 37 00 00 00 1b de 0a 00 8f 01 00 00 | R...=...^...~.......7........... |
ad80 | 53 de 0a 00 01 01 00 00 e3 df 0a 00 da 01 00 00 e5 e0 0a 00 3e 01 00 00 c0 e2 0a 00 8e 02 00 00 | S...................>........... |
ada0 | ff e3 0a 00 a6 00 00 00 8e e6 0a 00 e3 01 00 00 35 e7 0a 00 af 01 00 00 19 e9 0a 00 87 01 00 00 | ................5............... |
adc0 | c9 ea 0a 00 f6 01 00 00 51 ec 0a 00 17 02 00 00 48 ee 0a 00 d9 01 00 00 60 f0 0a 00 8e 00 00 00 | ........Q.......H.......`....... |
ade0 | 3a f2 0a 00 57 01 00 00 c9 f2 0a 00 82 00 00 00 21 f4 0a 00 fb 00 00 00 a4 f4 0a 00 b4 01 00 00 | :...W...........!............... |
ae00 | a0 f5 0a 00 d6 01 00 00 55 f7 0a 00 59 01 00 00 2c f9 0a 00 50 01 00 00 86 fa 0a 00 be 01 00 00 | ........U...Y...,...P........... |
ae20 | d7 fb 0a 00 68 01 00 00 96 fd 0a 00 04 02 00 00 ff fe 0a 00 84 00 00 00 04 01 0b 00 f9 00 00 00 | ....h........................... |
ae40 | 89 01 0b 00 a4 00 00 00 83 02 0b 00 43 00 00 00 28 03 0b 00 5c 00 00 00 6c 03 0b 00 52 00 00 00 | ............C...(...\...l...R... |
ae60 | c9 03 0b 00 46 00 00 00 1c 04 0b 00 50 00 00 00 63 04 0b 00 48 00 00 00 b4 04 0b 00 4c 00 00 00 | ....F.......P...c...H.......L... |
ae80 | fd 04 0b 00 47 00 00 00 4a 05 0b 00 48 00 00 00 92 05 0b 00 41 00 00 00 db 05 0b 00 44 00 00 00 | ....G...J...H.......A.......D... |
aea0 | 1d 06 0b 00 19 00 00 00 62 06 0b 00 29 00 00 00 7c 06 0b 00 12 00 00 00 a6 06 0b 00 3d 00 00 00 | ........b...)...|...........=... |
aec0 | b9 06 0b 00 13 00 00 00 f7 06 0b 00 3f 00 00 00 0b 07 0b 00 13 00 00 00 4b 07 0b 00 3f 00 00 00 | ............?...........K...?... |
aee0 | 5f 07 0b 00 15 00 00 00 9f 07 0b 00 43 00 00 00 b5 07 0b 00 15 00 00 00 f9 07 0b 00 43 00 00 00 | _...........C...............C... |
af00 | 0f 08 0b 00 31 01 00 00 53 08 0b 00 11 00 00 00 85 09 0b 00 80 01 00 00 97 09 0b 00 41 01 00 00 | ....1...S...................A... |
af20 | 18 0b 0b 00 19 00 00 00 5a 0c 0b 00 37 00 00 00 74 0c 0b 00 2a 00 00 00 ac 0c 0b 00 39 00 00 00 | ........Z...7...t...*.......9... |
af40 | d7 0c 0b 00 29 00 00 00 11 0d 0b 00 07 00 00 00 3b 0d 0b 00 4d 00 00 00 43 0d 0b 00 b6 00 00 00 | ....)...........;...M...C....... |
af60 | 91 0d 0b 00 40 00 00 00 48 0e 0b 00 2f 00 00 00 89 0e 0b 00 32 00 00 00 b9 0e 0b 00 35 00 00 00 | ....@...H.../.......2.......5... |
af80 | ec 0e 0b 00 1d 00 00 00 22 0f 0b 00 27 00 00 00 40 0f 0b 00 1f 00 00 00 68 0f 0b 00 36 00 00 00 | ........"...'...@.......h...6... |
afa0 | 88 0f 0b 00 39 00 00 00 bf 0f 0b 00 18 01 00 00 f9 0f 0b 00 1e 00 00 00 12 11 0b 00 5c 00 00 00 | ....9.......................\... |
afc0 | 31 11 0b 00 37 01 00 00 8e 11 0b 00 cb 01 00 00 c6 12 0b 00 ab 01 00 00 92 14 0b 00 59 01 00 00 | 1...7.......................Y... |
afe0 | 3e 16 0b 00 3a 01 00 00 98 17 0b 00 2d 00 00 00 d3 18 0b 00 3a 00 00 00 01 19 0b 00 6d 00 00 00 | >...:.......-.......:.......m... |
b000 | 3c 19 0b 00 77 00 00 00 aa 19 0b 00 8b 00 00 00 22 1a 0b 00 cc 01 00 00 ae 1a 0b 00 ba 00 00 00 | <...w..........."............... |
b020 | 7b 1c 0b 00 16 00 00 00 36 1d 0b 00 33 00 00 00 4d 1d 0b 00 28 00 00 00 81 1d 0b 00 77 01 00 00 | {.......6...3...M...(.......w... |
b040 | aa 1d 0b 00 51 00 00 00 22 1f 0b 00 74 00 00 00 74 1f 0b 00 26 00 00 00 e9 1f 0b 00 85 00 00 00 | ....Q..."...t...t...&........... |
b060 | 10 20 0b 00 8b 00 00 00 96 20 0b 00 cf 00 00 00 22 21 0b 00 34 01 00 00 f2 21 0b 00 2f 00 00 00 | ................"!..4....!../... |
b080 | 27 23 0b 00 72 00 00 00 57 23 0b 00 65 00 00 00 ca 23 0b 00 31 00 00 00 30 24 0b 00 01 01 00 00 | '#..r...W#..e....#..1...0$...... |
b0a0 | 62 24 0b 00 33 00 00 00 64 25 0b 00 3c 00 00 00 98 25 0b 00 93 01 00 00 d5 25 0b 00 93 01 00 00 | b$..3...d%..<....%.......%...... |
b0c0 | 69 27 0b 00 e4 01 00 00 fd 28 0b 00 63 00 00 00 e2 2a 0b 00 d4 00 00 00 46 2b 0b 00 ed 00 00 00 | i'.......(..c....*......F+...... |
b0e0 | 1b 2c 0b 00 78 00 00 00 09 2d 0b 00 90 00 00 00 82 2d 0b 00 c0 01 00 00 13 2e 0b 00 a2 00 00 00 | .,..x....-.......-.............. |
b100 | d4 2f 0b 00 88 00 00 00 77 30 0b 00 4e 00 00 00 00 31 0b 00 58 00 00 00 4f 31 0b 00 08 01 00 00 | ./......w0..N....1..X...O1...... |
b120 | a8 31 0b 00 65 00 00 00 b1 32 0b 00 7e 00 00 00 17 33 0b 00 48 01 00 00 96 33 0b 00 35 01 00 00 | .1..e....2..~....3..H....3..5... |
b140 | df 34 0b 00 90 00 00 00 15 36 0b 00 a3 00 00 00 a6 36 0b 00 02 01 00 00 4a 37 0b 00 3f 00 00 00 | .4.......6.......6......J7..?... |
b160 | 4d 38 0b 00 24 00 00 00 8d 38 0b 00 22 01 00 00 b2 38 0b 00 1c 00 00 00 d5 39 0b 00 2c 00 00 00 | M8..$....8.."....8.......9..,... |
b180 | f2 39 0b 00 43 00 00 00 1f 3a 0b 00 c8 00 00 00 63 3a 0b 00 b8 00 00 00 2c 3b 0b 00 b1 01 00 00 | .9..C....:......c:......,;...... |
b1a0 | e5 3b 0b 00 4f 00 00 00 97 3d 0b 00 37 00 00 00 e7 3d 0b 00 26 00 00 00 1f 3e 0b 00 0a 02 00 00 | .;..O....=..7....=..&....>...... |
b1c0 | 46 3e 0b 00 62 00 00 00 51 40 0b 00 41 00 00 00 b4 40 0b 00 3d 00 00 00 f6 40 0b 00 5e 00 00 00 | F>..b...Q@..A....@..=....@..^... |
b1e0 | 34 41 0b 00 35 00 00 00 93 41 0b 00 77 00 00 00 c9 41 0b 00 04 00 00 00 41 42 0b 00 1c 00 00 00 | 4A..5....A..w....A......AB...... |
b200 | 46 42 0b 00 03 00 00 00 63 42 0b 00 03 00 00 00 67 42 0b 00 5c 00 00 00 6b 42 0b 00 a7 01 00 00 | FB......cB......gB..\...kB...... |
b220 | c8 42 0b 00 0c 00 00 00 70 44 0b 00 a8 00 00 00 7d 44 0b 00 70 00 00 00 26 45 0b 00 3c 00 00 00 | .B......pD......}D..p...&E..<... |
b240 | 97 45 0b 00 33 00 00 00 d4 45 0b 00 12 00 00 00 08 46 0b 00 0c 00 00 00 1b 46 0b 00 79 00 00 00 | .E..3....E.......F.......F..y... |
b260 | 28 46 0b 00 45 00 00 00 a2 46 0b 00 07 00 00 00 e8 46 0b 00 10 00 00 00 f0 46 0b 00 22 00 00 00 | (F..E....F.......F.......F.."... |
b280 | 01 47 0b 00 68 00 00 00 24 47 0b 00 41 00 00 00 8d 47 0b 00 40 00 00 00 cf 47 0b 00 23 00 00 00 | .G..h...$G..A....G..@....G..#... |
b2a0 | 10 48 0b 00 c5 00 00 00 34 48 0b 00 9f 00 00 00 fa 48 0b 00 3c 00 00 00 9a 49 0b 00 35 00 00 00 | .H......4H.......H..<....I..5... |
b2c0 | d7 49 0b 00 4e 00 00 00 0d 4a 0b 00 86 00 00 00 5c 4a 0b 00 68 00 00 00 e3 4a 0b 00 63 00 00 00 | .I..N....J......\J..h....J..c... |
b2e0 | 4c 4b 0b 00 2f 00 00 00 b0 4b 0b 00 48 00 00 00 e0 4b 0b 00 a3 00 00 00 29 4c 0b 00 b8 00 00 00 | LK../....K..H....K......)L...... |
b300 | cd 4c 0b 00 81 00 00 00 86 4d 0b 00 46 00 00 00 08 4e 0b 00 1c 00 00 00 4f 4e 0b 00 7d 00 00 00 | .L.......M..F....N......ON..}... |
b320 | 6c 4e 0b 00 60 00 00 00 ea 4e 0b 00 ee 00 00 00 4b 4f 0b 00 09 01 00 00 3a 50 0b 00 68 00 00 00 | lN..`....N......KO......:P..h... |
b340 | 44 51 0b 00 07 00 00 00 ad 51 0b 00 12 00 00 00 b5 51 0b 00 10 00 00 00 c8 51 0b 00 0e 00 00 00 | DQ.......Q.......Q.......Q...... |
b360 | d9 51 0b 00 42 00 00 00 e8 51 0b 00 0d 00 00 00 2b 52 0b 00 24 00 00 00 39 52 0b 00 c6 00 00 00 | .Q..B....Q......+R..$...9R...... |
b380 | 5e 52 0b 00 ba 00 00 00 25 53 0b 00 17 00 00 00 e0 53 0b 00 1a 00 00 00 f8 53 0b 00 10 00 00 00 | ^R......%S.......S.......S...... |
b3a0 | 13 54 0b 00 c7 00 00 00 24 54 0b 00 1a 00 00 00 ec 54 0b 00 3c 00 00 00 07 55 0b 00 1a 00 00 00 | .T......$T.......T..<....U...... |
b3c0 | 44 55 0b 00 14 00 00 00 5f 55 0b 00 7e 00 00 00 74 55 0b 00 74 00 00 00 f3 55 0b 00 26 01 00 00 | DU......_U..~...tU..t....U..&... |
b3e0 | 68 56 0b 00 40 01 00 00 8f 57 0b 00 74 00 00 00 d0 58 0b 00 63 01 00 00 45 59 0b 00 2e 00 00 00 | hV..@....W..t....X..c...EY...... |
b400 | a9 5a 0b 00 05 00 00 00 d8 5a 0b 00 09 00 00 00 de 5a 0b 00 07 00 00 00 e8 5a 0b 00 66 00 00 00 | .Z.......Z.......Z.......Z..f... |
b420 | f0 5a 0b 00 4f 00 00 00 57 5b 0b 00 9a 00 00 00 a7 5b 0b 00 b1 00 00 00 42 5c 0b 00 0e 00 00 00 | .Z..O...W[.......[......B\...... |
b440 | f4 5c 0b 00 67 00 00 00 03 5d 0b 00 ae 00 00 00 6b 5d 0b 00 89 00 00 00 1a 5e 0b 00 28 00 00 00 | .\..g....]......k].......^..(... |
b460 | a4 5e 0b 00 3a 00 00 00 cd 5e 0b 00 ac 00 00 00 08 5f 0b 00 74 00 00 00 b5 5f 0b 00 97 00 00 00 | .^..:....^......._..t...._...... |
b480 | 2a 60 0b 00 3a 00 00 00 c2 60 0b 00 40 00 00 00 fd 60 0b 00 27 00 00 00 3e 61 0b 00 29 00 00 00 | *`..:....`..@....`..'...>a..)... |
b4a0 | 66 61 0b 00 21 00 00 00 90 61 0b 00 08 01 00 00 b2 61 0b 00 61 01 00 00 bb 62 0b 00 2c 00 00 00 | fa..!....a.......a..a....b..,... |
b4c0 | 1d 64 0b 00 2e 00 00 00 4a 64 0b 00 80 00 00 00 79 64 0b 00 7b 00 00 00 fa 64 0b 00 30 00 00 00 | .d......Jd......yd..{....d..0... |
b4e0 | 76 65 0b 00 c8 00 00 00 a7 65 0b 00 c8 00 00 00 70 66 0b 00 9c 00 00 00 39 67 0b 00 40 00 00 00 | ve.......e......pf......9g..@... |
b500 | d6 67 0b 00 b7 00 00 00 17 68 0b 00 b7 00 00 00 cf 68 0b 00 5a 00 00 00 87 69 0b 00 c4 00 00 00 | .g.......h.......h..Z....i...... |
b520 | e2 69 0b 00 6e 00 00 00 a7 6a 0b 00 a5 00 00 00 16 6b 0b 00 c3 00 00 00 bc 6b 0b 00 18 00 00 00 | .i..n....j.......k.......k...... |
b540 | 80 6c 0b 00 54 00 00 00 99 6c 0b 00 89 00 00 00 ee 6c 0b 00 6b 00 00 00 78 6d 0b 00 3d 00 00 00 | .l..T....l.......l..k...xm..=... |
b560 | e4 6d 0b 00 91 00 00 00 22 6e 0b 00 81 00 00 00 b4 6e 0b 00 39 00 00 00 36 6f 0b 00 3e 01 00 00 | .m......"n.......n..9...6o..>... |
b580 | 70 6f 0b 00 58 00 00 00 af 70 0b 00 c2 00 00 00 08 71 0b 00 6a 00 00 00 cb 71 0b 00 85 02 00 00 | po..X....p.......q..j....q...... |
b5a0 | 36 72 0b 00 cb 00 00 00 bc 74 0b 00 40 00 00 00 88 75 0b 00 5f 00 00 00 c9 75 0b 00 9e 01 00 00 | 6r.......t..@....u.._....u...... |
b5c0 | 29 76 0b 00 9f 01 00 00 c8 77 0b 00 84 01 00 00 68 79 0b 00 bb 00 00 00 ed 7a 0b 00 56 00 00 00 | )v.......w......hy.......z..V... |
b5e0 | a9 7b 0b 00 39 00 00 00 00 7c 0b 00 1d 00 00 00 3a 7c 0b 00 4b 00 00 00 58 7c 0b 00 0b 00 00 00 | .{..9....|......:|..K...X|...... |
b600 | a4 7c 0b 00 02 01 00 00 b0 7c 0b 00 30 00 00 00 b3 7d 0b 00 5d 00 00 00 e4 7d 0b 00 5d 00 00 00 | .|.......|..0....}..]....}..]... |
b620 | 42 7e 0b 00 1a 00 00 00 a0 7e 0b 00 0d 00 00 00 bb 7e 0b 00 3b 00 00 00 c9 7e 0b 00 15 00 00 00 | B~.......~.......~..;....~...... |
b640 | 05 7f 0b 00 34 00 00 00 1b 7f 0b 00 2c 00 00 00 50 7f 0b 00 2f 00 00 00 7d 7f 0b 00 c8 00 00 00 | ....4.......,...P.../...}....... |
b660 | ad 7f 0b 00 43 01 00 00 76 80 0b 00 9c 00 00 00 ba 81 0b 00 3e 00 00 00 57 82 0b 00 ad 00 00 00 | ....C...v...........>...W....... |
b680 | 96 82 0b 00 aa 00 00 00 44 83 0b 00 44 00 00 00 ef 83 0b 00 1d 00 00 00 34 84 0b 00 23 00 00 00 | ........D...D...........4...#... |
b6a0 | 52 84 0b 00 19 00 00 00 76 84 0b 00 12 00 00 00 90 84 0b 00 43 00 00 00 a3 84 0b 00 31 00 00 00 | R.......v...........C.......1... |
b6c0 | e7 84 0b 00 0a 00 00 00 19 85 0b 00 08 00 00 00 24 85 0b 00 28 01 00 00 2d 85 0b 00 81 00 00 00 | ................$...(...-....... |
b6e0 | 56 86 0b 00 aa 00 00 00 d8 86 0b 00 d5 00 00 00 83 87 0b 00 a5 01 00 00 59 88 0b 00 71 00 00 00 | V.......................Y...q... |
b700 | ff 89 0b 00 78 00 00 00 71 8a 0b 00 99 00 00 00 ea 8a 0b 00 1d 01 00 00 84 8b 0b 00 49 01 00 00 | ....x...q...................I... |
b720 | a2 8c 0b 00 18 01 00 00 ec 8d 0b 00 1a 01 00 00 05 8f 0b 00 39 01 00 00 20 90 0b 00 5f 00 00 00 | ....................9......._... |
b740 | 5a 91 0b 00 32 01 00 00 ba 91 0b 00 82 00 00 00 ed 92 0b 00 a2 00 00 00 70 93 0b 00 93 00 00 00 | Z...2...................p....... |
b760 | 13 94 0b 00 af 00 00 00 a7 94 0b 00 7e 00 00 00 57 95 0b 00 47 00 00 00 d6 95 0b 00 83 00 00 00 | ............~...W...G........... |
b780 | 1e 96 0b 00 6e 00 00 00 a2 96 0b 00 91 00 00 00 11 97 0b 00 59 00 00 00 a3 97 0b 00 96 00 00 00 | ....n...............Y........... |
b7a0 | fd 97 0b 00 8e 00 00 00 94 98 0b 00 c1 00 00 00 23 99 0b 00 59 01 00 00 e5 99 0b 00 23 00 00 00 | ................#...Y.......#... |
b7c0 | 3f 9b 0b 00 43 00 00 00 63 9b 0b 00 27 00 00 00 a7 9b 0b 00 2d 00 00 00 cf 9b 0b 00 3b 00 00 00 | ?...C...c...'.......-.......;... |
b7e0 | fd 9b 0b 00 6e 00 00 00 39 9c 0b 00 82 00 00 00 a8 9c 0b 00 68 00 00 00 2b 9d 0b 00 19 00 00 00 | ....n...9...........h...+....... |
b800 | 94 9d 0b 00 19 00 00 00 ae 9d 0b 00 19 00 00 00 c8 9d 0b 00 19 00 00 00 e2 9d 0b 00 19 00 00 00 | ................................ |
b820 | fc 9d 0b 00 19 00 00 00 16 9e 0b 00 19 00 00 00 30 9e 0b 00 19 00 00 00 4a 9e 0b 00 19 00 00 00 | ................0.......J....... |
b840 | 64 9e 0b 00 19 00 00 00 7e 9e 0b 00 19 00 00 00 98 9e 0b 00 19 00 00 00 b2 9e 0b 00 7b 00 00 00 | d.......~...................{... |
b860 | cc 9e 0b 00 c2 00 00 00 48 9f 0b 00 41 00 00 00 0b a0 0b 00 c0 00 00 00 4d a0 0b 00 68 00 00 00 | ........H...A...........M...h... |
b880 | 0e a1 0b 00 0e 00 00 00 77 a1 0b 00 16 00 00 00 86 a1 0b 00 1f 00 00 00 9d a1 0b 00 25 00 00 00 | ........w...................%... |
b8a0 | bd a1 0b 00 29 00 00 00 e3 a1 0b 00 24 00 00 00 0d a2 0b 00 e6 00 00 00 32 a2 0b 00 20 00 00 00 | ....).......$...........2....... |
b8c0 | 19 a3 0b 00 14 00 00 00 3a a3 0b 00 45 00 00 00 4f a3 0b 00 13 00 00 00 95 a3 0b 00 13 00 00 00 | ........:...E...O............... |
b8e0 | a9 a3 0b 00 17 00 00 00 bd a3 0b 00 17 00 00 00 d5 a3 0b 00 e7 00 00 00 ed a3 0b 00 3d 00 00 00 | ............................=... |
b900 | d5 a4 0b 00 12 00 00 00 13 a5 0b 00 14 00 00 00 26 a5 0b 00 13 00 00 00 3b a5 0b 00 03 00 00 00 | ................&.......;....... |
b920 | 4f a5 0b 00 1b 00 00 00 53 a5 0b 00 59 00 00 00 6f a5 0b 00 03 00 00 00 c9 a5 0b 00 14 00 00 00 | O.......S...Y...o............... |
b940 | cd a5 0b 00 14 00 00 00 e2 a5 0b 00 1d 00 00 00 f7 a5 0b 00 1a 00 00 00 15 a6 0b 00 0b 00 00 00 | ................................ |
b960 | 30 a6 0b 00 18 00 00 00 3c a6 0b 00 19 00 00 00 55 a6 0b 00 44 00 00 00 6f a6 0b 00 1a 00 00 00 | 0.......<.......U...D...o....... |
b980 | b4 a6 0b 00 1f 00 00 00 cf a6 0b 00 1c 00 00 00 ef a6 0b 00 20 00 00 00 0c a7 0b 00 65 01 00 00 | ............................e... |
b9a0 | 2d a7 0b 00 54 01 00 00 93 a8 0b 00 c3 02 00 00 e8 a9 0b 00 05 00 00 00 ac ac 0b 00 67 00 00 00 | -...T.......................g... |
b9c0 | b2 ac 0b 00 81 01 00 00 1a ad 0b 00 07 00 00 00 9c ae 0b 00 89 00 00 00 a4 ae 0b 00 13 00 00 00 | ................................ |
b9e0 | 2e af 0b 00 0f 00 00 00 42 af 0b 00 1e 00 00 00 52 af 0b 00 21 00 00 00 71 af 0b 00 11 00 00 00 | ........B.......R...!...q....... |
ba00 | 93 af 0b 00 21 00 00 00 a5 af 0b 00 4c 00 00 00 c7 af 0b 00 50 00 00 00 14 b0 0b 00 69 00 00 00 | ....!.......L.......P.......i... |
ba20 | 65 b0 0b 00 55 00 00 00 cf b0 0b 00 55 00 00 00 25 b1 0b 00 17 00 00 00 7b b1 0b 00 0e 00 00 00 | e...U.......U...%.......{....... |
ba40 | 93 b1 0b 00 0e 00 00 00 a2 b1 0b 00 3f 00 00 00 b1 b1 0b 00 36 00 00 00 f1 b1 0b 00 0b 00 00 00 | ............?.......6........... |
ba60 | 28 b2 0b 00 d1 00 00 00 34 b2 0b 00 19 00 00 00 06 b3 0b 00 87 00 00 00 20 b3 0b 00 89 00 00 00 | (.......4....................... |
ba80 | a8 b3 0b 00 db 00 00 00 32 b4 0b 00 55 00 00 00 0e b5 0b 00 78 00 00 00 64 b5 0b 00 75 00 00 00 | ........2...U.......x...d...u... |
baa0 | dd b5 0b 00 27 00 00 00 53 b6 0b 00 1c 00 00 00 7b b6 0b 00 7d 01 00 00 98 b6 0b 00 11 00 00 00 | ....'...S.......{...}........... |
bac0 | 16 b8 0b 00 0c 00 00 00 28 b8 0b 00 2f 00 00 00 35 b8 0b 00 3f 00 00 00 65 b8 0b 00 63 00 00 00 | ........(.../...5...?...e...c... |
bae0 | a5 b8 0b 00 09 00 00 00 09 b9 0b 00 5d 00 00 00 13 b9 0b 00 58 00 00 00 71 b9 0b 00 59 00 00 00 | ............].......X...q...Y... |
bb00 | ca b9 0b 00 34 00 00 00 24 ba 0b 00 17 00 00 00 59 ba 0b 00 0c 00 00 00 71 ba 0b 00 25 00 00 00 | ....4...$.......Y.......q...%... |
bb20 | 7e ba 0b 00 13 00 00 00 a4 ba 0b 00 29 00 00 00 b8 ba 0b 00 83 00 00 00 e2 ba 0b 00 6e 00 00 00 | ~...........)...............n... |
bb40 | 66 bb 0b 00 31 00 00 00 d5 bb 0b 00 06 00 00 00 07 bc 0b 00 1d 00 00 00 0e bc 0b 00 0e 00 00 00 | f...1........................... |
bb60 | 2c bc 0b 00 0c 00 00 00 3b bc 0b 00 3f 00 00 00 48 bc 0b 00 37 00 00 00 88 bc 0b 00 07 00 00 00 | ,.......;...?...H...7........... |
bb80 | c0 bc 0b 00 0b 00 00 00 c8 bc 0b 00 0e 00 00 00 d4 bc 0b 00 d0 00 00 00 e3 bc 0b 00 9c 00 00 00 | ................................ |
bba0 | b4 bd 0b 00 51 00 00 00 51 be 0b 00 9c 00 00 00 a3 be 0b 00 ef 00 00 00 40 bf 0b 00 8d 01 00 00 | ....Q...Q...............@....... |
bbc0 | 30 c0 0b 00 37 01 00 00 be c1 0b 00 38 01 00 00 f6 c2 0b 00 ce 00 00 00 2f c4 0b 00 d9 00 00 00 | 0...7.......8.........../....... |
bbe0 | fe c4 0b 00 3b 00 00 00 d8 c5 0b 00 63 00 00 00 14 c6 0b 00 78 00 00 00 78 c6 0b 00 9d 00 00 00 | ....;.......c.......x...x....... |
bc00 | f1 c6 0b 00 97 00 00 00 8f c7 0b 00 25 00 00 00 27 c8 0b 00 a1 00 00 00 4d c8 0b 00 3a 01 00 00 | ............%...'.......M...:... |
bc20 | ef c8 0b 00 16 00 00 00 2a ca 0b 00 1a 00 00 00 41 ca 0b 00 04 00 00 00 5c ca 0b 00 0a 00 00 00 | ........*.......A.......\....... |
bc40 | 61 ca 0b 00 27 00 00 00 6c ca 0b 00 16 00 00 00 94 ca 0b 00 c8 00 00 00 ab ca 0b 00 1a 00 00 00 | a...'...l....................... |
bc60 | 74 cb 0b 00 2a 00 00 00 8f cb 0b 00 0c 00 00 00 ba cb 0b 00 30 00 00 00 c7 cb 0b 00 2c 00 00 00 | t...*...............0.......,... |
bc80 | f8 cb 0b 00 0b 01 00 00 25 cc 0b 00 76 00 00 00 31 cd 0b 00 bc 00 00 00 a8 cd 0b 00 91 00 00 00 | ........%...v...1............... |
bca0 | 65 ce 0b 00 3e 00 00 00 f7 ce 0b 00 0c 00 00 00 36 cf 0b 00 46 00 00 00 43 cf 0b 00 06 00 00 00 | e...>...........6...F...C....... |
bcc0 | 8a cf 0b 00 14 00 00 00 91 cf 0b 00 06 00 00 00 a6 cf 0b 00 9f 00 00 00 ad cf 0b 00 0e 00 00 00 | ................................ |
bce0 | 4d d0 0b 00 2d 00 00 00 5c d0 0b 00 1b 00 00 00 8a d0 0b 00 0f 00 00 00 a6 d0 0b 00 07 00 00 00 | M...-...\....................... |
bd00 | b6 d0 0b 00 16 00 00 00 be d0 0b 00 1d 00 00 00 d5 d0 0b 00 06 00 00 00 f3 d0 0b 00 14 00 00 00 | ................................ |
bd20 | fa d0 0b 00 15 00 00 00 0f d1 0b 00 14 00 00 00 25 d1 0b 00 1f 00 00 00 3a d1 0b 00 3d 00 00 00 | ................%.......:...=... |
bd40 | 5a d1 0b 00 0b 00 00 00 98 d1 0b 00 14 00 00 00 a4 d1 0b 00 12 00 00 00 b9 d1 0b 00 14 00 00 00 | Z............................... |
bd60 | cc d1 0b 00 6c 00 00 00 e1 d1 0b 00 07 00 00 00 4e d2 0b 00 6a 00 00 00 56 d2 0b 00 98 00 00 00 | ....l...........N...j...V....... |
bd80 | c1 d2 0b 00 0c 00 00 00 5a d3 0b 00 96 00 00 00 67 d3 0b 00 3e 00 00 00 fe d3 0b 00 77 00 00 00 | ........Z.......g...>.......w... |
bda0 | 3d d4 0b 00 38 00 00 00 b5 d4 0b 00 08 00 00 00 ee d4 0b 00 40 00 00 00 f7 d4 0b 00 1e 00 00 00 | =...8...............@........... |
bdc0 | 38 d5 0b 00 11 00 00 00 57 d5 0b 00 1b 00 00 00 69 d5 0b 00 58 00 00 00 85 d5 0b 00 0d 00 00 00 | 8.......W.......i...X........... |
bde0 | de d5 0b 00 15 00 00 00 ec d5 0b 00 16 00 00 00 02 d6 0b 00 13 00 00 00 19 d6 0b 00 15 00 00 00 | ................................ |
be00 | 2d d6 0b 00 2f 00 00 00 43 d6 0b 00 0b 01 00 00 73 d6 0b 00 af 00 00 00 7f d7 0b 00 16 00 00 00 | -.../...C.......s............... |
be20 | 2f d8 0b 00 59 00 00 00 46 d8 0b 00 26 00 00 00 a0 d8 0b 00 20 00 00 00 c7 d8 0b 00 25 00 00 00 | /...Y...F...&...............%... |
be40 | e8 d8 0b 00 a5 00 00 00 0e d9 0b 00 09 00 00 00 b4 d9 0b 00 94 00 00 00 be d9 0b 00 0d 00 00 00 | ................................ |
be60 | 53 da 0b 00 51 00 00 00 61 da 0b 00 25 00 00 00 b3 da 0b 00 37 00 00 00 d9 da 0b 00 c0 00 00 00 | S...Q...a...%.......7........... |
be80 | 11 db 0b 00 71 00 00 00 d2 db 0b 00 24 00 00 00 44 dc 0b 00 52 00 00 00 69 dc 0b 00 4e 00 00 00 | ....q.......$...D...R...i...N... |
bea0 | bc dc 0b 00 68 00 00 00 0b dd 0b 00 55 00 00 00 74 dd 0b 00 22 00 00 00 ca dd 0b 00 22 00 00 00 | ....h.......U...t..."......."... |
bec0 | ed dd 0b 00 4c 00 00 00 10 de 0b 00 57 00 00 00 5d de 0b 00 75 00 00 00 b5 de 0b 00 70 00 00 00 | ....L.......W...]...u.......p... |
bee0 | 2b df 0b 00 75 00 00 00 9c df 0b 00 a4 00 00 00 12 e0 0b 00 37 00 00 00 b7 e0 0b 00 fc 00 00 00 | +...u...............7........... |
bf00 | ef e0 0b 00 bb 00 00 00 ec e1 0b 00 7a 00 00 00 a8 e2 0b 00 77 00 00 00 23 e3 0b 00 71 00 00 00 | ............z.......w...#...q... |
bf20 | 9b e3 0b 00 aa 00 00 00 0d e4 0b 00 3a 00 00 00 b8 e4 0b 00 2b 00 00 00 f3 e4 0b 00 48 00 00 00 | ............:.......+.......H... |
bf40 | 1f e5 0b 00 3a 00 00 00 68 e5 0b 00 60 00 00 00 a3 e5 0b 00 62 00 00 00 04 e6 0b 00 26 00 00 00 | ....:...h...`.......b.......&... |
bf60 | 67 e6 0b 00 2b 00 00 00 8e e6 0b 00 43 00 00 00 ba e6 0b 00 2b 00 00 00 fe e6 0b 00 5b 00 00 00 | g...+.......C.......+.......[... |
bf80 | 2a e7 0b 00 61 00 00 00 86 e7 0b 00 27 00 00 00 e8 e7 0b 00 5b 00 00 00 10 e8 0b 00 2e 00 00 00 | *...a.......'.......[........... |
bfa0 | 6c e8 0b 00 47 00 00 00 9b e8 0b 00 9a 00 00 00 e3 e8 0b 00 31 00 00 00 7e e9 0b 00 31 00 00 00 | l...G...............1...~...1... |
bfc0 | b0 e9 0b 00 41 00 00 00 e2 e9 0b 00 84 00 00 00 24 ea 0b 00 5f 00 00 00 a9 ea 0b 00 5f 00 00 00 | ....A...........$..._......._... |
bfe0 | 09 eb 0b 00 3c 00 00 00 69 eb 0b 00 39 00 00 00 a6 eb 0b 00 89 00 00 00 e0 eb 0b 00 58 00 00 00 | ....<...i...9...............X... |
c000 | 6a ec 0b 00 2c 00 00 00 c3 ec 0b 00 2b 00 00 00 f0 ec 0b 00 64 00 00 00 1c ed 0b 00 65 00 00 00 | j...,.......+.......d.......e... |
c020 | 81 ed 0b 00 2f 00 00 00 e7 ed 0b 00 4b 00 00 00 17 ee 0b 00 5f 00 00 00 63 ee 0b 00 42 00 00 00 | ..../.......K......._...c...B... |
c040 | c3 ee 0b 00 70 00 00 00 06 ef 0b 00 64 00 00 00 77 ef 0b 00 2a 00 00 00 dc ef 0b 00 3b 00 00 00 | ....p.......d...w...*.......;... |
c060 | 07 f0 0b 00 2b 00 00 00 43 f0 0b 00 34 00 00 00 6f f0 0b 00 42 00 00 00 a4 f0 0b 00 99 00 00 00 | ....+...C...4...o...B........... |
c080 | e7 f0 0b 00 3f 00 00 00 81 f1 0b 00 3f 00 00 00 c1 f1 0b 00 50 00 00 00 01 f2 0b 00 b2 00 00 00 | ....?.......?.......P........... |
c0a0 | 52 f2 0b 00 5d 00 00 00 05 f3 0b 00 49 00 00 00 63 f3 0b 00 49 00 00 00 ad f3 0b 00 3c 00 00 00 | R...].......I...c...I.......<... |
c0c0 | f7 f3 0b 00 1f 00 00 00 34 f4 0b 00 59 00 00 00 54 f4 0b 00 95 00 00 00 ae f4 0b 00 38 00 00 00 | ........4...Y...T...........8... |
c0e0 | 44 f5 0b 00 10 00 00 00 7d f5 0b 00 92 00 00 00 8e f5 0b 00 17 00 00 00 21 f6 0b 00 11 00 00 00 | D.......}...............!....... |
c100 | 39 f6 0b 00 17 00 00 00 4b f6 0b 00 25 00 00 00 63 f6 0b 00 18 00 00 00 89 f6 0b 00 17 00 00 00 | 9.......K...%...c............... |
c120 | a2 f6 0b 00 1d 00 00 00 ba f6 0b 00 21 00 00 00 d8 f6 0b 00 17 00 00 00 fa f6 0b 00 17 00 00 00 | ............!................... |
c140 | 12 f7 0b 00 b2 00 00 00 2a f7 0b 00 42 00 00 00 dd f7 0b 00 12 00 00 00 20 f8 0b 00 b7 00 00 00 | ........*...B................... |
c160 | 33 f8 0b 00 44 01 00 00 eb f8 0b 00 3c 01 00 00 30 fa 0b 00 c4 01 00 00 6d fb 0b 00 09 00 00 00 | 3...D.......<...0.......m....... |
c180 | 32 fd 0b 00 0e 00 00 00 3c fd 0b 00 16 00 00 00 4b fd 0b 00 16 00 00 00 62 fd 0b 00 0d 00 00 00 | 2.......<.......K.......b....... |
c1a0 | 79 fd 0b 00 07 00 00 00 87 fd 0b 00 0e 00 00 00 8f fd 0b 00 30 00 00 00 9e fd 0b 00 09 00 00 00 | y...................0........... |
c1c0 | cf fd 0b 00 12 00 00 00 d9 fd 0b 00 12 00 00 00 ec fd 0b 00 11 00 00 00 ff fd 0b 00 49 00 00 00 | ............................I... |
c1e0 | 11 fe 0b 00 49 00 00 00 5b fe 0b 00 c9 00 00 00 a5 fe 0b 00 b3 00 00 00 6f ff 0b 00 36 00 00 00 | ....I...[...............o...6... |
c200 | 23 00 0c 00 39 00 00 00 5a 00 0c 00 81 00 00 00 94 00 0c 00 82 00 00 00 16 01 0c 00 92 00 00 00 | #...9...Z....................... |
c220 | 99 01 0c 00 64 00 00 00 2c 02 0c 00 8a 00 00 00 91 02 0c 00 15 00 00 00 1c 03 0c 00 5f 00 00 00 | ....d...,..................._... |
c240 | 32 03 0c 00 44 00 00 00 92 03 0c 00 69 00 00 00 d7 03 0c 00 92 00 00 00 41 04 0c 00 75 00 00 00 | 2...D.......i...........A...u... |
c260 | d4 04 0c 00 66 00 00 00 4a 05 0c 00 4e 00 00 00 b1 05 0c 00 8c 00 00 00 00 06 0c 00 56 00 00 00 | ....f...J...N...............V... |
c280 | 8d 06 0c 00 76 00 00 00 e4 06 0c 00 73 00 00 00 5b 07 0c 00 c3 00 00 00 cf 07 0c 00 c0 00 00 00 | ....v.......s...[............... |
c2a0 | 93 08 0c 00 6b 00 00 00 54 09 0c 00 30 00 00 00 c0 09 0c 00 7b 00 00 00 f1 09 0c 00 45 00 00 00 | ....k...T...0.......{.......E... |
c2c0 | 6d 0a 0c 00 7f 00 00 00 b3 0a 0c 00 6d 00 00 00 33 0b 0c 00 3d 00 00 00 a1 0b 0c 00 d9 00 00 00 | m...........m...3...=........... |
c2e0 | df 0b 0c 00 a0 00 00 00 b9 0c 0c 00 68 00 00 00 5a 0d 0c 00 9c 00 00 00 c3 0d 0c 00 54 00 00 00 | ............h...Z...........T... |
c300 | 60 0e 0c 00 2b 00 00 00 b5 0e 0c 00 21 00 00 00 e1 0e 0c 00 5a 00 00 00 03 0f 0c 00 70 00 00 00 | `...+.......!.......Z.......p... |
c320 | 5e 0f 0c 00 4a 00 00 00 cf 0f 0c 00 16 00 00 00 1a 10 0c 00 19 00 00 00 31 10 0c 00 25 00 00 00 | ^...J...................1...%... |
c340 | 4b 10 0c 00 62 00 00 00 71 10 0c 00 08 00 00 00 d4 10 0c 00 2d 00 00 00 dd 10 0c 00 14 00 00 00 | K...b...q...........-........... |
c360 | 0b 11 0c 00 14 00 00 00 20 11 0c 00 14 00 00 00 35 11 0c 00 14 00 00 00 4a 11 0c 00 0d 00 00 00 | ................5.......J....... |
c380 | 5f 11 0c 00 39 00 00 00 6d 11 0c 00 43 00 00 00 a7 11 0c 00 0b 00 00 00 eb 11 0c 00 da 00 00 00 | _...9...m...C................... |
c3a0 | f7 11 0c 00 f3 00 00 00 d2 12 0c 00 dc 00 00 00 c6 13 0c 00 dc 00 00 00 a3 14 0c 00 43 00 00 00 | ............................C... |
c3c0 | 80 15 0c 00 3d 00 00 00 c4 15 0c 00 00 01 00 00 02 16 0c 00 b3 00 00 00 03 17 0c 00 0f 00 00 00 | ....=........................... |
c3e0 | b7 17 0c 00 0b 00 00 00 c7 17 0c 00 61 00 00 00 d3 17 0c 00 0a 00 00 00 35 18 0c 00 0b 00 00 00 | ............a...........5....... |
c400 | 40 18 0c 00 18 00 00 00 4c 18 0c 00 10 00 00 00 65 18 0c 00 3a 00 00 00 76 18 0c 00 12 00 00 00 | @.......L.......e...:...v....... |
c420 | b1 18 0c 00 3c 00 00 00 c4 18 0c 00 84 00 00 00 01 19 0c 00 14 00 00 00 86 19 0c 00 4c 00 00 00 | ....<.......................L... |
c440 | 9b 19 0c 00 05 00 00 00 e8 19 0c 00 15 00 00 00 ee 19 0c 00 0d 00 00 00 04 1a 0c 00 b6 00 00 00 | ................................ |
c460 | 12 1a 0c 00 04 00 00 00 c9 1a 0c 00 bf 00 00 00 ce 1a 0c 00 52 00 00 00 8e 1b 0c 00 06 00 00 00 | ....................R........... |
c480 | e1 1b 0c 00 0e 00 00 00 e8 1b 0c 00 10 00 00 00 f7 1b 0c 00 1c 00 00 00 08 1c 0c 00 17 00 00 00 | ................................ |
c4a0 | 25 1c 0c 00 2b 00 00 00 3d 1c 0c 00 05 00 00 00 69 1c 0c 00 2f 00 00 00 6f 1c 0c 00 34 00 00 00 | %...+...=.......i.../...o...4... |
c4c0 | 9f 1c 0c 00 01 01 00 00 d4 1c 0c 00 05 00 00 00 d6 1d 0c 00 67 00 00 00 dc 1d 0c 00 07 00 00 00 | ....................g........... |
c4e0 | 44 1e 0c 00 0a 00 00 00 4c 1e 0c 00 15 00 00 00 57 1e 0c 00 19 00 00 00 6d 1e 0c 00 a4 00 00 00 | D.......L.......W.......m....... |
c500 | 87 1e 0c 00 32 00 00 00 2c 1f 0c 00 31 00 00 00 5f 1f 0c 00 1d 00 00 00 91 1f 0c 00 14 00 00 00 | ....2...,...1..._............... |
c520 | af 1f 0c 00 32 00 00 00 c4 1f 0c 00 15 00 00 00 f7 1f 0c 00 0a 00 00 00 0d 20 0c 00 0c 00 00 00 | ....2........................... |
c540 | 18 20 0c 00 11 00 00 00 25 20 0c 00 17 00 00 00 37 20 0c 00 13 00 00 00 4f 20 0c 00 19 00 00 00 | ........%.......7.......O....... |
c560 | 63 20 0c 00 74 00 00 00 7d 20 0c 00 98 00 00 00 f2 20 0c 00 24 00 00 00 8b 21 0c 00 25 00 00 00 | c...t...}...........$....!..%... |
c580 | b0 21 0c 00 0d 00 00 00 d6 21 0c 00 42 00 00 00 e4 21 0c 00 16 00 00 00 27 22 0c 00 13 00 00 00 | .!.......!..B....!......'"...... |
c5a0 | 3e 22 0c 00 55 00 00 00 52 22 0c 00 95 00 00 00 a8 22 0c 00 35 00 00 00 3e 23 0c 00 8e 00 00 00 | >"..U...R"......."..5...>#...... |
c5c0 | 74 23 0c 00 68 00 00 00 03 24 0c 00 77 00 00 00 6c 24 0c 00 81 00 00 00 e4 24 0c 00 21 00 00 00 | t#..h....$..w...l$.......$..!... |
c5e0 | 66 25 0c 00 2e 00 00 00 88 25 0c 00 7e 00 00 00 b7 25 0c 00 4b 00 00 00 36 26 0c 00 38 00 00 00 | f%.......%..~....%..K...6&..8... |
c600 | 82 26 0c 00 95 00 00 00 bb 26 0c 00 70 00 00 00 51 27 0c 00 32 00 00 00 c2 27 0c 00 69 00 00 00 | .&.......&..p...Q'..2....'..i... |
c620 | f5 27 0c 00 7b 00 00 00 5f 28 0c 00 2a 00 00 00 db 28 0c 00 62 00 00 00 06 29 0c 00 4b 01 00 00 | .'..{..._(..*....(..b....)..K... |
c640 | 69 29 0c 00 a6 00 00 00 b5 2a 0c 00 89 00 00 00 5c 2b 0c 00 af 00 00 00 e6 2b 0c 00 88 00 00 00 | i).......*......\+.......+...... |
c660 | 96 2c 0c 00 31 00 00 00 1f 2d 0c 00 2d 00 00 00 51 2d 0c 00 7a 00 00 00 7f 2d 0c 00 92 00 00 00 | .,..1....-..-...Q-..z....-...... |
c680 | fa 2d 0c 00 6d 00 00 00 8d 2e 0c 00 6b 00 00 00 fb 2e 0c 00 0e 00 00 00 67 2f 0c 00 4b 00 00 00 | .-..m.......k...........g/..K... |
c6a0 | 76 2f 0c 00 33 00 00 00 c2 2f 0c 00 39 00 00 00 f6 2f 0c 00 0b 00 00 00 30 30 0c 00 6d 00 00 00 | v/..3..../..9..../......00..m... |
c6c0 | 3c 30 0c 00 1a 00 00 00 aa 30 0c 00 20 00 00 00 c5 30 0c 00 25 00 00 00 e6 30 0c 00 4d 00 00 00 | <0.......0.......0..%....0..M... |
c6e0 | 0c 31 0c 00 4e 00 00 00 5a 31 0c 00 0b 00 00 00 a9 31 0c 00 f6 00 00 00 b5 31 0c 00 2e 00 00 00 | .1..N...Z1.......1.......1...... |
c700 | ac 32 0c 00 13 00 00 00 db 32 0c 00 0f 00 00 00 ef 32 0c 00 12 00 00 00 ff 32 0c 00 71 01 00 00 | .2.......2.......2.......2..q... |
c720 | 12 33 0c 00 fe 00 00 00 84 34 0c 00 4e 00 00 00 83 35 0c 00 c9 00 00 00 d2 35 0c 00 13 00 00 00 | .3.......4..N....5.......5...... |
c740 | 9c 36 0c 00 19 00 00 00 b0 36 0c 00 7c 00 00 00 ca 36 0c 00 38 00 00 00 47 37 0c 00 3b 00 00 00 | .6.......6..|....6..8...G7..;... |
c760 | 80 37 0c 00 46 00 00 00 bc 37 0c 00 2f 00 00 00 03 38 0c 00 19 00 00 00 33 38 0c 00 12 00 00 00 | .7..F....7../....8......38...... |
c780 | 4d 38 0c 00 14 00 00 00 60 38 0c 00 22 00 00 00 75 38 0c 00 84 00 00 00 98 38 0c 00 26 00 00 00 | M8......`8.."...u8.......8..&... |
c7a0 | 1d 39 0c 00 24 00 00 00 44 39 0c 00 1b 00 00 00 69 39 0c 00 1d 00 00 00 85 39 0c 00 58 00 00 00 | .9..$...D9......i9.......9..X... |
c7c0 | a3 39 0c 00 5b 00 00 00 fc 39 0c 00 43 00 00 00 58 3a 0c 00 56 00 00 00 9c 3a 0c 00 43 00 00 00 | .9..[....9..C...X:..V....:..C... |
c7e0 | f3 3a 0c 00 3f 00 00 00 37 3b 0c 00 75 00 00 00 77 3b 0c 00 1e 00 00 00 ed 3b 0c 00 25 00 00 00 | .:..?...7;..u...w;.......;..%... |
c800 | 0c 3c 0c 00 25 00 00 00 32 3c 0c 00 15 00 00 00 58 3c 0c 00 86 00 00 00 6e 3c 0c 00 2e 00 00 00 | .<..%...2<......X<......n<...... |
c820 | f5 3c 0c 00 95 00 00 00 24 3d 0c 00 43 00 00 00 ba 3d 0c 00 2b 00 00 00 fe 3d 0c 00 2b 00 00 00 | .<......$=..C....=..+....=..+... |
c840 | 2a 3e 0c 00 37 01 00 00 56 3e 0c 00 38 00 00 00 8e 3f 0c 00 3b 00 00 00 c7 3f 0c 00 18 00 00 00 | *>..7...V>..8....?..;....?...... |
c860 | 03 40 0c 00 16 00 00 00 1c 40 0c 00 7a 00 00 00 33 40 0c 00 12 00 00 00 ae 40 0c 00 67 00 00 00 | .@.......@..z...3@.......@..g... |
c880 | c1 40 0c 00 3a 00 00 00 29 41 0c 00 3a 00 00 00 64 41 0c 00 0c 00 00 00 9f 41 0c 00 18 00 00 00 | .@..:...)A..:...dA.......A...... |
c8a0 | ac 41 0c 00 39 00 00 00 c5 41 0c 00 47 00 00 00 ff 41 0c 00 42 00 00 00 47 42 0c 00 4c 00 00 00 | .A..9....A..G....A..B...GB..L... |
c8c0 | 8a 42 0c 00 3f 00 00 00 d7 42 0c 00 3b 00 00 00 17 43 0c 00 41 00 00 00 53 43 0c 00 11 01 00 00 | .B..?....B..;....C..A...SC...... |
c8e0 | 95 43 0c 00 3d 00 00 00 a7 44 0c 00 31 00 00 00 e5 44 0c 00 26 01 00 00 17 45 0c 00 e2 00 00 00 | .C..=....D..1....D..&....E...... |
c900 | 3e 46 0c 00 9f 00 00 00 21 47 0c 00 9f 00 00 00 c1 47 0c 00 3a 00 00 00 61 48 0c 00 f8 00 00 00 | >F......!G.......G..:...aH...... |
c920 | 9c 48 0c 00 48 00 00 00 95 49 0c 00 e2 00 00 00 de 49 0c 00 88 00 00 00 c1 4a 0c 00 31 00 00 00 | .H..H....I.......I.......J..1... |
c940 | 4a 4b 0c 00 06 00 00 00 7c 4b 0c 00 0d 00 00 00 83 4b 0c 00 0b 00 00 00 91 4b 0c 00 2e 00 00 00 | JK......|K.......K.......K...... |
c960 | 9d 4b 0c 00 67 00 00 00 cc 4b 0c 00 3e 00 00 00 34 4c 0c 00 13 00 00 00 73 4c 0c 00 ab 00 00 00 | .K..g....K..>...4L......sL...... |
c980 | 87 4c 0c 00 b5 00 00 00 33 4d 0c 00 b5 00 00 00 e9 4d 0c 00 90 00 00 00 9f 4e 0c 00 30 00 00 00 | .L......3M.......M.......N..0... |
c9a0 | 30 4f 0c 00 47 00 00 00 61 4f 0c 00 22 00 00 00 a9 4f 0c 00 22 00 00 00 cc 4f 0c 00 24 00 00 00 | 0O..G...aO.."....O.."....O..$... |
c9c0 | ef 4f 0c 00 09 00 00 00 14 50 0c 00 09 00 00 00 1e 50 0c 00 92 00 00 00 28 50 0c 00 38 00 00 00 | .O.......P.......P......(P..8... |
c9e0 | bb 50 0c 00 05 00 00 00 f4 50 0c 00 0f 00 00 00 fa 50 0c 00 88 00 00 00 0a 51 0c 00 bd 00 00 00 | .P.......P.......P.......Q...... |
ca00 | 93 51 0c 00 c2 00 00 00 51 52 0c 00 7e 00 00 00 14 53 0c 00 0b 00 00 00 93 53 0c 00 12 00 00 00 | .Q......QR..~....S.......S...... |
ca20 | 9f 53 0c 00 6a 00 00 00 b2 53 0c 00 2f 00 00 00 1d 54 0c 00 0a 00 00 00 4d 54 0c 00 f4 00 00 00 | .S..j....S../....T......MT...... |
ca40 | 58 54 0c 00 d2 01 00 00 4d 55 0c 00 ad 01 00 00 20 57 0c 00 dd 00 00 00 ce 58 0c 00 91 01 00 00 | XT......MU.......W.......X...... |
ca60 | ac 59 0c 00 7f 00 00 00 3e 5b 0c 00 af 00 00 00 be 5b 0c 00 2a 03 00 00 6e 5c 0c 00 6b 00 00 00 | .Y......>[.......[..*...n\..k... |
ca80 | 99 5f 0c 00 a3 00 00 00 05 60 0c 00 9a 00 00 00 a9 60 0c 00 50 00 00 00 44 61 0c 00 81 00 00 00 | ._.......`.......`..P...Da...... |
caa0 | 95 61 0c 00 2c 00 00 00 17 62 0c 00 7a 00 00 00 44 62 0c 00 2b 00 00 00 bf 62 0c 00 31 00 00 00 | .a..,....b..z...Db..+....b..1... |
cac0 | eb 62 0c 00 25 00 00 00 1d 63 0c 00 09 00 00 00 43 63 0c 00 34 00 00 00 4d 63 0c 00 23 00 00 00 | .b..%....c......Cc..4...Mc..#... |
cae0 | 82 63 0c 00 23 00 00 00 a6 63 0c 00 25 00 00 00 ca 63 0c 00 11 00 00 00 f0 63 0c 00 12 00 00 00 | .c..#....c..%....c.......c...... |
cb00 | 02 64 0c 00 12 00 00 00 15 64 0c 00 1e 00 00 00 28 64 0c 00 23 00 00 00 47 64 0c 00 39 00 00 00 | .d.......d......(d..#...Gd..9... |
cb20 | 6b 64 0c 00 24 00 00 00 a5 64 0c 00 2c 00 00 00 ca 64 0c 00 2d 00 00 00 f7 64 0c 00 1c 00 00 00 | kd..$....d..,....d..-....d...... |
cb40 | 25 65 0c 00 1d 00 00 00 42 65 0c 00 1e 00 00 00 60 65 0c 00 0c 00 00 00 7f 65 0c 00 28 00 00 00 | %e......Be......`e.......e..(... |
cb60 | 8c 65 0c 00 3a 00 00 00 b5 65 0c 00 30 00 00 00 f0 65 0c 00 27 00 00 00 21 66 0c 00 38 00 00 00 | .e..:....e..0....e..'...!f..8... |
cb80 | 49 66 0c 00 1d 00 00 00 82 66 0c 00 13 00 00 00 a0 66 0c 00 0b 00 00 00 b4 66 0c 00 28 00 00 00 | If.......f.......f.......f..(... |
cba0 | c0 66 0c 00 30 00 00 00 e9 66 0c 00 4c 00 00 00 1a 67 0c 00 74 00 00 00 67 67 0c 00 55 00 00 00 | .f..0....f..L....g..t...gg..U... |
cbc0 | dc 67 0c 00 30 00 00 00 32 68 0c 00 0b 00 00 00 63 68 0c 00 28 00 00 00 6f 68 0c 00 35 00 00 00 | .g..0...2h......ch..(...oh..5... |
cbe0 | 98 68 0c 00 0a 00 00 00 ce 68 0c 00 56 00 00 00 d9 68 0c 00 1f 00 00 00 30 69 0c 00 18 00 00 00 | .h.......h..V....h......0i...... |
cc00 | 50 69 0c 00 2d 00 00 00 69 69 0c 00 23 00 00 00 97 69 0c 00 3f 00 00 00 bb 69 0c 00 4d 00 00 00 | Pi..-...ii..#....i..?....i..M... |
cc20 | fb 69 0c 00 20 00 00 00 49 6a 0c 00 6d 00 00 00 6a 6a 0c 00 61 00 00 00 d8 6a 0c 00 63 00 00 00 | .i......Ij..m...jj..a....j..c... |
cc40 | 3a 6b 0c 00 31 00 00 00 9e 6b 0c 00 34 00 00 00 d0 6b 0c 00 1b 01 00 00 05 6c 0c 00 3a 00 00 00 | :k..1....k..4....k.......l..:... |
cc60 | 21 6d 0c 00 4a 00 00 00 5c 6d 0c 00 38 00 00 00 a7 6d 0c 00 40 01 00 00 e0 6d 0c 00 3a 00 00 00 | !m..J...\m..8....m..@....m..:... |
cc80 | 21 6f 0c 00 4f 00 00 00 5c 6f 0c 00 2e 00 00 00 ac 6f 0c 00 86 00 00 00 db 6f 0c 00 bb 01 00 00 | !o..O...\o.......o.......o...... |
cca0 | 62 70 0c 00 06 01 00 00 1e 72 0c 00 80 00 00 00 25 73 0c 00 bf 00 00 00 a6 73 0c 00 25 00 00 00 | bp.......r......%s.......s..%... |
ccc0 | 66 74 0c 00 4b 00 00 00 8c 74 0c 00 79 00 00 00 d8 74 0c 00 22 00 00 00 52 75 0c 00 64 00 00 00 | ft..K....t..y....t.."...Ru..d... |
cce0 | 75 75 0c 00 16 00 00 00 da 75 0c 00 14 00 00 00 f1 75 0c 00 79 00 00 00 06 76 0c 00 42 00 00 00 | uu.......u.......u..y....v..B... |
cd00 | 80 76 0c 00 1c 00 00 00 c3 76 0c 00 1d 00 00 00 e0 76 0c 00 33 00 00 00 fe 76 0c 00 a7 00 00 00 | .v.......v.......v..3....v...... |
cd20 | 32 77 0c 00 c1 00 00 00 da 77 0c 00 32 00 00 00 9c 78 0c 00 05 00 00 00 cf 78 0c 00 10 00 00 00 | 2w.......w..2....x.......x...... |
cd40 | d5 78 0c 00 5e 00 00 00 e6 78 0c 00 08 00 00 00 45 79 0c 00 dc 00 00 00 4e 79 0c 00 10 00 00 00 | .x..^....x......Ey......Ny...... |
cd60 | 2b 7a 0c 00 5d 00 00 00 3c 7a 0c 00 0d 00 00 00 9a 7a 0c 00 21 00 00 00 a8 7a 0c 00 21 00 00 00 | +z..]...<z.......z..!....z..!... |
cd80 | ca 7a 0c 00 d4 00 00 00 ec 7a 0c 00 14 00 00 00 c1 7b 0c 00 38 00 00 00 d6 7b 0c 00 a3 00 00 00 | .z.......z.......{..8....{...... |
cda0 | 0f 7c 0c 00 a7 00 00 00 b3 7c 0c 00 23 00 00 00 5b 7d 0c 00 91 00 00 00 7f 7d 0c 00 59 00 00 00 | .|.......|..#...[}.......}..Y... |
cdc0 | 11 7e 0c 00 a6 01 00 00 6b 7e 0c 00 ca 00 00 00 12 80 0c 00 70 01 00 00 dd 80 0c 00 63 01 00 00 | .~......k~..........p.......c... |
cde0 | 4e 82 0c 00 07 00 00 00 b2 83 0c 00 15 00 00 00 ba 83 0c 00 12 00 00 00 d0 83 0c 00 0f 00 00 00 | N............................... |
ce00 | e3 83 0c 00 16 00 00 00 f3 83 0c 00 2f 00 00 00 0a 84 0c 00 2f 00 00 00 3a 84 0c 00 77 00 00 00 | ............/......./...:...w... |
ce20 | 6a 84 0c 00 17 00 00 00 e2 84 0c 00 10 00 00 00 fa 84 0c 00 51 00 00 00 0b 85 0c 00 08 00 00 00 | j...................Q........... |
ce40 | 5d 85 0c 00 bf 00 00 00 66 85 0c 00 58 00 00 00 26 86 0c 00 e0 00 00 00 7f 86 0c 00 3d 00 00 00 | ].......f...X...&...........=... |
ce60 | 60 87 0c 00 3b 00 00 00 9e 87 0c 00 3c 00 00 00 da 87 0c 00 3e 00 00 00 17 88 0c 00 3c 00 00 00 | `...;.......<.......>.......<... |
ce80 | 56 88 0c 00 3d 00 00 00 93 88 0c 00 34 00 00 00 d1 88 0c 00 36 00 00 00 06 89 0c 00 33 00 00 00 | V...=.......4.......6.......3... |
cea0 | 3d 89 0c 00 a3 00 00 00 71 89 0c 00 08 00 00 00 15 8a 0c 00 1b 00 00 00 1e 8a 0c 00 09 00 00 00 | =.......q....................... |
cec0 | 3a 8a 0c 00 c5 00 00 00 44 8a 0c 00 0f 00 00 00 0a 8b 0c 00 0f 00 00 00 1a 8b 0c 00 31 00 00 00 | :.......D...................1... |
cee0 | 2a 8b 0c 00 2a 00 00 00 5c 8b 0c 00 19 00 00 00 87 8b 0c 00 0b 00 00 00 a1 8b 0c 00 40 00 00 00 | *...*...\...................@... |
cf00 | ad 8b 0c 00 28 00 00 00 ee 8b 0c 00 1c 00 00 00 17 8c 0c 00 8e 00 00 00 34 8c 0c 00 08 00 00 00 | ....(...................4....... |
cf20 | c3 8c 0c 00 c1 00 00 00 cc 8c 0c 00 9a 00 00 00 8e 8d 0c 00 dc 00 00 00 29 8e 0c 00 a5 01 00 00 | ........................)....... |
cf40 | 06 8f 0c 00 03 00 00 00 ac 90 0c 00 98 00 00 00 b0 90 0c 00 46 01 00 00 49 91 0c 00 0a 00 00 00 | ....................F...I....... |
cf60 | 90 92 0c 00 0a 00 00 00 9b 92 0c 00 39 00 00 00 a6 92 0c 00 0d 00 00 00 e0 92 0c 00 08 00 00 00 | ............9................... |
cf80 | ee 92 0c 00 0f 00 00 00 f7 92 0c 00 2d 00 00 00 07 93 0c 00 e5 00 00 00 35 93 0c 00 ea 00 00 00 | ............-...........5....... |
cfa0 | 1b 94 0c 00 0a 00 00 00 06 95 0c 00 57 01 00 00 11 95 0c 00 31 01 00 00 69 96 0c 00 0a 00 00 00 | ............W.......1...i....... |
cfc0 | 9b 97 0c 00 69 01 00 00 a6 97 0c 00 26 00 00 00 10 99 0c 00 05 00 00 00 37 99 0c 00 71 00 00 00 | ....i.......&...........7...q... |
cfe0 | 3d 99 0c 00 5c 00 00 00 af 99 0c 00 90 00 00 00 0c 9a 0c 00 33 00 00 00 9d 9a 0c 00 51 00 00 00 | =...\...............3.......Q... |
d000 | d1 9a 0c 00 95 00 00 00 23 9b 0c 00 09 00 00 00 b9 9b 0c 00 c1 00 00 00 c3 9b 0c 00 53 00 00 00 | ........#...................S... |
d020 | 85 9c 0c 00 08 00 00 00 d9 9c 0c 00 15 00 00 00 e2 9c 0c 00 15 00 00 00 f8 9c 0c 00 16 00 00 00 | ................................ |
d040 | 0e 9d 0c 00 23 00 00 00 25 9d 0c 00 14 00 00 00 49 9d 0c 00 13 00 00 00 5e 9d 0c 00 0d 00 00 00 | ....#...%.......I.......^....... |
d060 | 72 9d 0c 00 0e 00 00 00 80 9d 0c 00 0f 00 00 00 8f 9d 0c 00 4f 01 00 00 9f 9d 0c 00 20 01 00 00 | r...................O........... |
d080 | ef 9e 0c 00 23 01 00 00 10 a0 0c 00 4d 00 00 00 34 a1 0c 00 95 00 00 00 82 a1 0c 00 89 00 00 00 | ....#.......M...4............... |
d0a0 | 18 a2 0c 00 22 00 00 00 a2 a2 0c 00 0f 00 00 00 c5 a2 0c 00 0f 00 00 00 d5 a2 0c 00 28 00 00 00 | ....".......................(... |
d0c0 | e5 a2 0c 00 78 01 00 00 0e a3 0c 00 60 00 00 00 87 a4 0c 00 1d 01 00 00 e8 a4 0c 00 0b 00 00 00 | ....x.......`................... |
d0e0 | 06 a6 0c 00 53 00 00 00 12 a6 0c 00 ca 00 00 00 66 a6 0c 00 dd 00 00 00 31 a7 0c 00 f4 00 00 00 | ....S...........f.......1....... |
d100 | 0f a8 0c 00 98 00 00 00 04 a9 0c 00 98 00 00 00 9d a9 0c 00 00 01 00 00 36 aa 0c 00 aa 00 00 00 | ........................6....... |
d120 | 37 ab 0c 00 05 00 00 00 e2 ab 0c 00 0e 00 00 00 e8 ab 0c 00 0f 00 00 00 f7 ab 0c 00 0b 00 00 00 | 7............................... |
d140 | 07 ac 0c 00 1f 00 00 00 13 ac 0c 00 33 00 00 00 33 ac 0c 00 73 00 00 00 67 ac 0c 00 6e 00 00 00 | ............3...3...s...g...n... |
d160 | db ac 0c 00 87 00 00 00 4a ad 0c 00 2e 00 00 00 d2 ad 0c 00 29 00 00 00 01 ae 0c 00 b1 00 00 00 | ........J...........)........... |
d180 | 2b ae 0c 00 17 00 00 00 dd ae 0c 00 a7 00 00 00 f5 ae 0c 00 21 00 00 00 9d af 0c 00 90 00 00 00 | +...................!........... |
d1a0 | bf af 0c 00 26 00 00 00 50 b0 0c 00 1a 00 00 00 77 b0 0c 00 44 00 00 00 92 b0 0c 00 48 00 00 00 | ....&...P.......w...D.......H... |
d1c0 | d7 b0 0c 00 2a 00 00 00 20 b1 0c 00 6e 00 00 00 4b b1 0c 00 90 00 00 00 ba b1 0c 00 cf 00 00 00 | ....*.......n...K............... |
d1e0 | 4b b2 0c 00 0f 00 00 00 1b b3 0c 00 0c 00 00 00 2b b3 0c 00 69 01 00 00 38 b3 0c 00 93 00 00 00 | K...............+...i...8....... |
d200 | a2 b4 0c 00 0f 00 00 00 36 b5 0c 00 10 00 00 00 46 b5 0c 00 3e 00 00 00 57 b5 0c 00 81 00 00 00 | ........6.......F...>...W....... |
d220 | 96 b5 0c 00 8b 00 00 00 18 b6 0c 00 bd 00 00 00 a4 b6 0c 00 30 01 00 00 62 b7 0c 00 96 00 00 00 | ....................0...b....... |
d240 | 93 b8 0c 00 69 01 00 00 2a b9 0c 00 0c 00 00 00 94 ba 0c 00 5a 00 00 00 a1 ba 0c 00 3c 01 00 00 | ....i...*...........Z.......<... |
d260 | fc ba 0c 00 db 00 00 00 39 bc 0c 00 52 00 00 00 15 bd 0c 00 2f 00 00 00 68 bd 0c 00 ac 00 00 00 | ........9...R......./...h....... |
d280 | 98 bd 0c 00 09 00 00 00 45 be 0c 00 eb 00 00 00 4f be 0c 00 d8 00 00 00 3b bf 0c 00 5c 00 00 00 | ........E.......O.......;...\... |
d2a0 | 14 c0 0c 00 63 00 00 00 71 c0 0c 00 22 01 00 00 d5 c0 0c 00 af 00 00 00 f8 c1 0c 00 30 00 00 00 | ....c...q..."...............0... |
d2c0 | a8 c2 0c 00 4b 00 00 00 d9 c2 0c 00 66 00 00 00 25 c3 0c 00 52 00 00 00 8c c3 0c 00 49 00 00 00 | ....K.......f...%...R.......I... |
d2e0 | df c3 0c 00 1b 01 00 00 29 c4 0c 00 bb 00 00 00 45 c5 0c 00 60 00 00 00 01 c6 0c 00 62 00 00 00 | ........).......E...`.......b... |
d300 | 62 c6 0c 00 52 01 00 00 c5 c6 0c 00 f3 00 00 00 18 c8 0c 00 bc 00 00 00 0c c9 0c 00 77 00 00 00 | b...R.......................w... |
d320 | c9 c9 0c 00 af 00 00 00 41 ca 0c 00 e8 00 00 00 f1 ca 0c 00 76 00 00 00 da cb 0c 00 3c 01 00 00 | ........A...........v.......<... |
d340 | 51 cc 0c 00 97 00 00 00 8e cd 0c 00 a2 00 00 00 26 ce 0c 00 7b 00 00 00 c9 ce 0c 00 d3 00 00 00 | Q...............&...{........... |
d360 | 45 cf 0c 00 62 00 00 00 19 d0 0c 00 0e 00 00 00 7c d0 0c 00 cc 00 00 00 8b d0 0c 00 32 00 00 00 | E...b...........|...........2... |
d380 | 58 d1 0c 00 11 00 00 00 8b d1 0c 00 14 01 00 00 9d d1 0c 00 b9 00 00 00 b2 d2 0c 00 06 00 00 00 | X............................... |
d3a0 | 6c d3 0c 00 06 00 00 00 73 d3 0c 00 5d 02 00 00 7a d3 0c 00 0e 00 00 00 d8 d5 0c 00 80 01 00 00 | l.......s...]...z............... |
d3c0 | e7 d5 0c 00 23 01 00 00 68 d7 0c 00 0c 01 00 00 8c d8 0c 00 8b 00 00 00 99 d9 0c 00 06 00 00 00 | ....#...h....................... |
d3e0 | 25 da 0c 00 59 00 00 00 2c da 0c 00 59 00 00 00 86 da 0c 00 07 00 00 00 e0 da 0c 00 15 00 00 00 | %...Y...,...Y................... |
d400 | e8 da 0c 00 44 00 00 00 fe da 0c 00 4d 00 00 00 43 db 0c 00 3d 00 00 00 91 db 0c 00 10 00 00 00 | ....D.......M...C...=........... |
d420 | cf db 0c 00 45 00 00 00 e0 db 0c 00 59 00 00 00 26 dc 0c 00 7c 00 00 00 80 dc 0c 00 ac 00 00 00 | ....E.......Y...&...|........... |
d440 | fd dc 0c 00 89 00 00 00 aa dd 0c 00 23 00 00 00 34 de 0c 00 0e 00 00 00 58 de 0c 00 26 00 00 00 | ............#...4.......X...&... |
d460 | 67 de 0c 00 2d 00 00 00 8e de 0c 00 2e 00 00 00 bc de 0c 00 2d 00 00 00 eb de 0c 00 0f 00 00 00 | g...-...............-........... |
d480 | 19 df 0c 00 1d 01 00 00 29 df 0c 00 19 01 00 00 47 e0 0c 00 07 00 00 00 61 e1 0c 00 06 00 00 00 | ........).......G.......a....... |
d4a0 | 69 e1 0c 00 17 00 00 00 70 e1 0c 00 0e 00 00 00 88 e1 0c 00 25 00 00 00 97 e1 0c 00 0e 00 00 00 | i.......p...........%........... |
d4c0 | bd e1 0c 00 11 00 00 00 cc e1 0c 00 0f 00 00 00 de e1 0c 00 10 00 00 00 ee e1 0c 00 07 00 00 00 | ................................ |
d4e0 | ff e1 0c 00 0e 00 00 00 07 e2 0c 00 06 00 00 00 16 e2 0c 00 d0 00 00 00 1d e2 0c 00 57 00 00 00 | ............................W... |
d500 | ee e2 0c 00 2b 00 00 00 46 e3 0c 00 08 00 00 00 72 e3 0c 00 13 00 00 00 7b e3 0c 00 22 00 00 00 | ....+...F.......r.......{..."... |
d520 | 8f e3 0c 00 0b 00 00 00 b2 e3 0c 00 11 00 00 00 be e3 0c 00 08 00 00 00 d0 e3 0c 00 1a 00 00 00 | ................................ |
d540 | d9 e3 0c 00 6d 00 00 00 f4 e3 0c 00 17 00 00 00 62 e4 0c 00 47 01 00 00 7a e4 0c 00 14 00 00 00 | ....m...........b...G...z....... |
d560 | c2 e5 0c 00 0d 00 00 00 d7 e5 0c 00 0c 00 00 00 e5 e5 0c 00 3e 00 00 00 f2 e5 0c 00 78 00 00 00 | ....................>.......x... |
d580 | 31 e6 0c 00 3c 00 00 00 aa e6 0c 00 df 00 00 00 e7 e6 0c 00 34 00 00 00 c7 e7 0c 00 4d 00 00 00 | 1...<...............4.......M... |
d5a0 | fc e7 0c 00 3e 00 00 00 4a e8 0c 00 64 00 00 00 89 e8 0c 00 db 00 00 00 ee e8 0c 00 3b 00 00 00 | ....>...J...d...............;... |
d5c0 | ca e9 0c 00 18 00 00 00 06 ea 0c 00 12 00 00 00 1f ea 0c 00 3f 00 00 00 32 ea 0c 00 04 00 00 00 | ....................?...2....... |
d5e0 | 72 ea 0c 00 11 00 00 00 77 ea 0c 00 11 00 00 00 89 ea 0c 00 0a 00 00 00 9b ea 0c 00 2a 00 00 00 | r.......w...................*... |
d600 | a6 ea 0c 00 10 00 00 00 d1 ea 0c 00 09 00 00 00 e2 ea 0c 00 30 00 00 00 ec ea 0c 00 08 00 00 00 | ....................0........... |
d620 | 1d eb 0c 00 05 01 00 00 26 eb 0c 00 1e 00 00 00 2c ec 0c 00 13 00 00 00 4b ec 0c 00 c5 00 00 00 | ........&.......,.......K....... |
d640 | 5f ec 0c 00 6a 00 00 00 25 ed 0c 00 c0 00 00 00 90 ed 0c 00 25 00 00 00 51 ee 0c 00 25 00 00 00 | _...j...%...........%...Q...%... |
d660 | 77 ee 0c 00 03 00 00 00 9d ee 0c 00 d3 00 00 00 a1 ee 0c 00 a8 00 00 00 75 ef 0c 00 90 01 00 00 | w.......................u....... |
d680 | 1e f0 0c 00 d4 01 00 00 af f1 0c 00 23 01 00 00 84 f3 0c 00 2a 00 00 00 a8 f4 0c 00 0a 00 00 00 | ............#.......*........... |
d6a0 | d3 f4 0c 00 26 00 00 00 de f4 0c 00 0a 00 00 00 05 f5 0c 00 96 01 00 00 10 f5 0c 00 05 00 00 00 | ....&........................... |
d6c0 | a7 f6 0c 00 05 00 00 00 ad f6 0c 00 2b 00 00 00 b3 f6 0c 00 02 00 00 00 df f6 0c 00 0a 00 00 00 | ............+................... |
d6e0 | e2 f6 0c 00 53 00 00 00 ed f6 0c 00 1d 00 00 00 41 f7 0c 00 25 00 00 00 5f f7 0c 00 18 00 00 00 | ....S...........A...%..._....... |
d700 | 85 f7 0c 00 19 00 00 00 9e f7 0c 00 19 00 00 00 b8 f7 0c 00 33 00 00 00 d2 f7 0c 00 33 00 00 00 | ....................3.......3... |
d720 | 06 f8 0c 00 ea 00 00 00 3a f8 0c 00 2b 00 00 00 25 f9 0c 00 4d 00 00 00 51 f9 0c 00 15 00 00 00 | ........:...+...%...M...Q....... |
d740 | 9f f9 0c 00 14 02 00 00 b5 f9 0c 00 34 00 00 00 ca fb 0c 00 33 00 00 00 ff fb 0c 00 36 00 00 00 | ............4.......3.......6... |
d760 | 33 fc 0c 00 34 00 00 00 6a fc 0c 00 2d 00 00 00 9f fc 0c 00 27 00 00 00 cd fc 0c 00 1b 00 00 00 | 3...4...j...-.......'........... |
d780 | f5 fc 0c 00 38 00 00 00 11 fd 0c 00 38 00 00 00 4a fd 0c 00 06 00 00 00 83 fd 0c 00 04 00 00 00 | ....8.......8...J............... |
d7a0 | 8a fd 0c 00 05 00 00 00 8f fd 0c 00 11 00 00 00 95 fd 0c 00 19 00 00 00 a7 fd 0c 00 1d 00 00 00 | ................................ |
d7c0 | c1 fd 0c 00 19 00 00 00 df fd 0c 00 41 00 00 00 f9 fd 0c 00 11 00 00 00 3b fe 0c 00 12 00 00 00 | ............A...........;....... |
d7e0 | 4d fe 0c 00 06 00 00 00 60 fe 0c 00 0b 00 00 00 67 fe 0c 00 f7 00 00 00 73 fe 0c 00 24 01 00 00 | M.......`.......g.......s...$... |
d800 | 6b ff 0c 00 39 00 00 00 90 00 0d 00 05 00 00 00 ca 00 0d 00 19 00 00 00 d0 00 0d 00 04 00 00 00 | k...9........................... |
d820 | ea 00 0d 00 1b 00 00 00 ef 00 0d 00 25 00 00 00 0b 01 0d 00 2d 00 00 00 31 01 0d 00 2e 00 00 00 | ............%.......-...1....... |
d840 | 5f 01 0d 00 0c 00 00 00 8e 01 0d 00 0a 00 00 00 9b 01 0d 00 7a 00 00 00 a6 01 0d 00 50 00 00 00 | _...................z.......P... |
d860 | 21 02 0d 00 0b 00 00 00 72 02 0d 00 76 00 00 00 7e 02 0d 00 04 00 00 00 f5 02 0d 00 10 00 00 00 | !.......r...v...~............... |
d880 | fa 02 0d 00 15 00 00 00 0b 03 0d 00 16 00 00 00 21 03 0d 00 20 00 00 00 38 03 0d 00 1b 00 00 00 | ................!.......8....... |
d8a0 | 59 03 0d 00 0e 00 00 00 75 03 0d 00 16 00 00 00 84 03 0d 00 11 00 00 00 9b 03 0d 00 14 00 00 00 | Y.......u....................... |
d8c0 | ad 03 0d 00 87 00 00 00 c2 03 0d 00 39 00 00 00 4a 04 0d 00 3a 00 00 00 84 04 0d 00 3a 00 00 00 | ............9...J...:.......:... |
d8e0 | bf 04 0d 00 ec 00 00 00 fa 04 0d 00 14 00 00 00 e7 05 0d 00 1f 00 00 00 fc 05 0d 00 25 00 00 00 | ............................%... |
d900 | 1c 06 0d 00 0c 00 00 00 42 06 0d 00 3e 00 00 00 4f 06 0d 00 0c 00 00 00 8e 06 0d 00 0a 00 00 00 | ........B...>...O............... |
d920 | 9b 06 0d 00 54 00 00 00 a6 06 0d 00 0b 00 00 00 fb 06 0d 00 0c 00 00 00 07 07 0d 00 05 00 00 00 | ....T........................... |
d940 | 14 07 0d 00 1a 00 00 00 1a 07 0d 00 16 00 00 00 35 07 0d 00 14 00 00 00 4c 07 0d 00 1c 00 00 00 | ................5.......L....... |
d960 | 61 07 0d 00 75 00 00 00 7e 07 0d 00 07 01 00 00 f4 07 0d 00 78 01 00 00 fc 08 0d 00 45 00 00 00 | a...u...~...........x.......E... |
d980 | 75 0a 0d 00 39 00 00 00 bb 0a 0d 00 ec 00 00 00 f5 0a 0d 00 e6 00 00 00 e2 0b 0d 00 4a 00 00 00 | u...9.......................J... |
d9a0 | c9 0c 0d 00 57 00 00 00 14 0d 0d 00 69 00 00 00 6c 0d 0d 00 d2 00 00 00 d6 0d 0d 00 c2 00 00 00 | ....W.......i...l............... |
d9c0 | a9 0e 0d 00 b8 00 00 00 6c 0f 0d 00 98 00 00 00 25 10 0d 00 b5 00 00 00 be 10 0d 00 ff 00 00 00 | ........l.......%............... |
d9e0 | 74 11 0d 00 7f 00 00 00 74 12 0d 00 83 00 00 00 f4 12 0d 00 5a 00 00 00 78 13 0d 00 69 00 00 00 | t.......t...........Z...x...i... |
da00 | d3 13 0d 00 0d 02 00 00 3d 14 0d 00 b8 00 00 00 4b 16 0d 00 a4 00 00 00 04 17 0d 00 b1 01 00 00 | ........=.......K............... |
da20 | a9 17 0d 00 ad 00 00 00 5b 19 0d 00 6f 00 00 00 09 1a 0d 00 89 00 00 00 79 1a 0d 00 ae 00 00 00 | ........[...o...........y....... |
da40 | 03 1b 0d 00 38 01 00 00 b2 1b 0d 00 46 01 00 00 eb 1c 0d 00 5f 01 00 00 32 1e 0d 00 f0 00 00 00 | ....8.......F......._...2....... |
da60 | 92 1f 0d 00 57 00 00 00 83 20 0d 00 83 00 00 00 db 20 0d 00 32 00 00 00 5f 21 0d 00 25 01 00 00 | ....W...............2..._!..%... |
da80 | 92 21 0d 00 6c 00 00 00 b8 22 0d 00 6a 01 00 00 25 23 0d 00 9b 00 00 00 90 24 0d 00 2a 00 00 00 | .!..l...."..j...%#.......$..*... |
daa0 | 2c 25 0d 00 78 00 00 00 57 25 0d 00 a3 00 00 00 d0 25 0d 00 94 00 00 00 74 26 0d 00 93 00 00 00 | ,%..x...W%.......%......t&...... |
dac0 | 09 27 0d 00 51 00 00 00 9d 27 0d 00 92 00 00 00 ef 27 0d 00 c0 00 00 00 82 28 0d 00 bb 00 00 00 | .'..Q....'.......'.......(...... |
dae0 | 43 29 0d 00 b2 00 00 00 ff 29 0d 00 97 00 00 00 b2 2a 0d 00 b5 00 00 00 4a 2b 0d 00 55 00 00 00 | C).......).......*......J+..U... |
db00 | 00 2c 0d 00 6e 00 00 00 56 2c 0d 00 a6 00 00 00 c5 2c 0d 00 a7 00 00 00 6c 2d 0d 00 ac 00 00 00 | .,..n...V,.......,......l-...... |
db20 | 14 2e 0d 00 73 00 00 00 c1 2e 0d 00 68 00 00 00 35 2f 0d 00 42 01 00 00 9e 2f 0d 00 d4 00 00 00 | ....s.......h...5/..B..../...... |
db40 | e1 30 0d 00 d1 00 00 00 b6 31 0d 00 b3 00 00 00 88 32 0d 00 38 00 00 00 3c 33 0d 00 87 00 00 00 | .0.......1.......2..8...<3...... |
db60 | 75 33 0d 00 8f 00 00 00 fd 33 0d 00 79 00 00 00 8d 34 0d 00 8a 00 00 00 07 35 0d 00 a3 00 00 00 | u3.......3..y....4.......5...... |
db80 | 92 35 0d 00 60 00 00 00 36 36 0d 00 66 00 00 00 97 36 0d 00 ab 00 00 00 fe 36 0d 00 45 00 00 00 | .5..`...66..f....6.......6..E... |
dba0 | aa 37 0d 00 d3 00 00 00 f0 37 0d 00 d3 00 00 00 c4 38 0d 00 8e 00 00 00 98 39 0d 00 61 00 00 00 | .7.......7.......8.......9..a... |
dbc0 | 27 3a 0d 00 7f 00 00 00 89 3a 0d 00 69 01 00 00 09 3b 0d 00 9d 01 00 00 73 3c 0d 00 9e 01 00 00 | ':.......:..i....;......s<...... |
dbe0 | 11 3e 0d 00 b6 00 00 00 b0 3f 0d 00 cd 00 00 00 67 40 0d 00 bf 00 00 00 35 41 0d 00 a8 00 00 00 | .>.......?......g@......5A...... |
dc00 | f5 41 0d 00 5f 00 00 00 9e 42 0d 00 e5 00 00 00 fe 42 0d 00 55 00 00 00 e4 43 0d 00 69 00 00 00 | .A.._....B.......B..U....C..i... |
dc20 | 3a 44 0d 00 74 00 00 00 a4 44 0d 00 57 01 00 00 19 45 0d 00 8a 00 00 00 71 46 0d 00 9b 00 00 00 | :D..t....D..W....E......qF...... |
dc40 | fc 46 0d 00 8d 00 00 00 98 47 0d 00 74 00 00 00 26 48 0d 00 97 00 00 00 9b 48 0d 00 5c 00 00 00 | .F.......G..t...&H.......H..\... |
dc60 | 33 49 0d 00 8e 00 00 00 90 49 0d 00 92 00 00 00 1f 4a 0d 00 69 00 00 00 b2 4a 0d 00 74 01 00 00 | 3I.......I.......J..i....J..t... |
dc80 | 1c 4b 0d 00 55 00 00 00 91 4c 0d 00 87 00 00 00 e7 4c 0d 00 3e 00 00 00 6f 4d 0d 00 d5 00 00 00 | .K..U....L.......L..>...oM...... |
dca0 | ae 4d 0d 00 91 00 00 00 84 4e 0d 00 bf 00 00 00 16 4f 0d 00 37 01 00 00 d6 4f 0d 00 55 00 00 00 | .M.......N.......O..7....O..U... |
dcc0 | 0e 51 0d 00 2c 00 00 00 64 51 0d 00 21 00 00 00 91 51 0d 00 9d 00 00 00 b3 51 0d 00 1e 00 00 00 | .Q..,...dQ..!....Q.......Q...... |
dce0 | 51 52 0d 00 09 00 00 00 70 52 0d 00 1a 00 00 00 7a 52 0d 00 b7 00 00 00 95 52 0d 00 40 00 00 00 | QR......pR......zR.......R..@... |
dd00 | 4d 53 0d 00 31 00 00 00 8e 53 0d 00 80 00 00 00 c0 53 0d 00 43 00 00 00 41 54 0d 00 38 00 00 00 | MS..1....S.......S..C...AT..8... |
dd20 | 85 54 0d 00 2c 00 00 00 be 54 0d 00 9f 00 00 00 eb 54 0d 00 7e 00 00 00 8b 55 0d 00 a3 00 00 00 | .T..,....T.......T..~....U...... |
dd40 | 0a 56 0d 00 55 00 00 00 ae 56 0d 00 70 00 00 00 04 57 0d 00 70 00 00 00 75 57 0d 00 4e 00 00 00 | .V..U....V..p....W..p...uW..N... |
dd60 | e6 57 0d 00 3b 00 00 00 35 58 0d 00 6b 01 00 00 71 58 0d 00 4a 00 00 00 dd 59 0d 00 b5 00 00 00 | .W..;...5X..k...qX..J....Y...... |
dd80 | 28 5a 0d 00 71 00 00 00 de 5a 0d 00 c2 00 00 00 50 5b 0d 00 67 00 00 00 13 5c 0d 00 70 00 00 00 | (Z..q....Z......P[..g....\..p... |
dda0 | 7b 5c 0d 00 dd 00 00 00 ec 5c 0d 00 dc 00 00 00 ca 5d 0d 00 4a 00 00 00 a7 5e 0d 00 4d 00 00 00 | {\.......\.......]..J....^..M... |
ddc0 | f2 5e 0d 00 32 00 00 00 40 5f 0d 00 6f 00 00 00 73 5f 0d 00 68 00 00 00 e3 5f 0d 00 e3 00 00 00 | .^..2...@_..o...s_..h...._...... |
dde0 | 4c 60 0d 00 01 03 00 00 30 61 0d 00 2c 00 00 00 32 64 0d 00 bc 01 00 00 5f 64 0d 00 da 00 00 00 | L`......0a..,...2d......_d...... |
de00 | 1c 66 0d 00 8e 00 00 00 f7 66 0d 00 d0 00 00 00 86 67 0d 00 81 00 00 00 57 68 0d 00 b0 01 00 00 | .f.......f.......g......Wh...... |
de20 | d9 68 0d 00 94 00 00 00 8a 6a 0d 00 f7 00 00 00 1f 6b 0d 00 49 00 00 00 17 6c 0d 00 56 02 00 00 | .h.......j.......k..I....l..V... |
de40 | 61 6c 0d 00 85 00 00 00 b8 6e 0d 00 08 01 00 00 3e 6f 0d 00 1d 02 00 00 47 70 0d 00 c5 00 00 00 | al.......n......>o......Gp...... |
de60 | 65 72 0d 00 5d 00 00 00 2b 73 0d 00 5b 00 00 00 89 73 0d 00 46 00 00 00 e5 73 0d 00 5b 00 00 00 | er..]...+s..[....s..F....s..[... |
de80 | 2c 74 0d 00 b4 00 00 00 88 74 0d 00 33 00 00 00 3d 75 0d 00 60 00 00 00 71 75 0d 00 fe 00 00 00 | ,t.......t..3...=u..`...qu...... |
dea0 | d2 75 0d 00 61 00 00 00 d1 76 0d 00 9d 00 00 00 33 77 0d 00 9c 00 00 00 d1 77 0d 00 13 01 00 00 | .u..a....v......3w.......w...... |
dec0 | 6e 78 0d 00 bb 00 00 00 82 79 0d 00 3d 00 00 00 3e 7a 0d 00 c2 00 00 00 7c 7a 0d 00 db 00 00 00 | nx.......y..=...>z......|z...... |
dee0 | 3f 7b 0d 00 d2 00 00 00 1b 7c 0d 00 77 00 00 00 ee 7c 0d 00 08 01 00 00 66 7d 0d 00 96 00 00 00 | ?{.......|..w....|......f}...... |
df00 | 6f 7e 0d 00 2e 01 00 00 06 7f 0d 00 68 00 00 00 35 80 0d 00 3c 00 00 00 9e 80 0d 00 45 01 00 00 | o~..........h...5...<.......E... |
df20 | db 80 0d 00 c1 01 00 00 21 82 0d 00 4e 00 00 00 e3 83 0d 00 62 00 00 00 32 84 0d 00 ae 00 00 00 | ........!...N.......b...2....... |
df40 | 95 84 0d 00 dd 00 00 00 44 85 0d 00 77 00 00 00 22 86 0d 00 b7 00 00 00 9a 86 0d 00 a2 00 00 00 | ........D...w..."............... |
df60 | 52 87 0d 00 bb 00 00 00 f5 87 0d 00 5c 00 00 00 b1 88 0d 00 6a 01 00 00 0e 89 0d 00 62 00 00 00 | R...........\.......j.......b... |
df80 | 79 8a 0d 00 c3 00 00 00 dc 8a 0d 00 11 00 00 00 a0 8b 0d 00 ba 00 00 00 b2 8b 0d 00 ba 00 00 00 | y............................... |
dfa0 | 6d 8c 0d 00 bc 00 00 00 28 8d 0d 00 6e 00 00 00 e5 8d 0d 00 6f 00 00 00 54 8e 0d 00 a0 00 00 00 | m.......(...n.......o...T....... |
dfc0 | c4 8e 0d 00 42 00 00 00 65 8f 0d 00 d2 00 00 00 a8 8f 0d 00 1d 01 00 00 7b 90 0d 00 9b 01 00 00 | ....B...e...............{....... |
dfe0 | 99 91 0d 00 9b 01 00 00 35 93 0d 00 6b 00 00 00 d1 94 0d 00 98 00 00 00 3d 95 0d 00 4a 00 00 00 | ........5...k...........=...J... |
e000 | d6 95 0d 00 0a 00 00 00 21 96 0d 00 18 00 00 00 2c 96 0d 00 3e 00 00 00 45 96 0d 00 67 01 00 00 | ........!.......,...>...E...g... |
e020 | 84 96 0d 00 0d 00 00 00 ec 97 0d 00 16 00 00 00 fa 97 0d 00 23 00 00 00 11 98 0d 00 0d 00 00 00 | ....................#........... |
e040 | 35 98 0d 00 58 00 00 00 43 98 0d 00 67 00 00 00 9c 98 0d 00 ef 00 00 00 04 99 0d 00 6e 00 00 00 | 5...X...C...g...............n... |
e060 | f4 99 0d 00 98 00 00 00 63 9a 0d 00 0b 00 00 00 fc 9a 0d 00 0b 00 00 00 08 9b 0d 00 4c 00 00 00 | ........c...................L... |
e080 | 14 9b 0d 00 2f 00 00 00 61 9b 0d 00 17 00 00 00 91 9b 0d 00 10 00 00 00 a9 9b 0d 00 10 00 00 00 | ..../...a....................... |
e0a0 | ba 9b 0d 00 90 00 00 00 cb 9b 0d 00 17 00 00 00 5c 9c 0d 00 37 00 00 00 74 9c 0d 00 36 00 00 00 | ................\...7...t...6... |
e0c0 | ac 9c 0d 00 1b 00 00 00 e3 9c 0d 00 2f 00 00 00 ff 9c 0d 00 97 00 00 00 2f 9d 0d 00 10 00 00 00 | ............/.........../....... |
e0e0 | c7 9d 0d 00 0a 00 00 00 d8 9d 0d 00 18 00 00 00 e3 9d 0d 00 72 01 00 00 fc 9d 0d 00 40 00 00 00 | ....................r.......@... |
e100 | 6f 9f 0d 00 7f 01 00 00 b0 9f 0d 00 c0 00 00 00 30 a1 0d 00 48 01 00 00 f1 a1 0d 00 54 01 00 00 | o...............0...H.......T... |
e120 | 3a a3 0d 00 9e 01 00 00 8f a4 0d 00 14 00 00 00 2e a6 0d 00 08 00 00 00 43 a6 0d 00 18 00 00 00 | :.......................C....... |
e140 | 4c a6 0d 00 31 00 00 00 65 a6 0d 00 8f 01 00 00 97 a6 0d 00 f7 00 00 00 27 a8 0d 00 e9 00 00 00 | L...1...e...............'....... |
e160 | 1f a9 0d 00 89 00 00 00 09 aa 0d 00 38 00 00 00 93 aa 0d 00 8f 00 00 00 cc aa 0d 00 37 00 00 00 | ............8...............7... |
e180 | 5c ab 0d 00 1b 00 00 00 94 ab 0d 00 25 01 00 00 b0 ab 0d 00 cb 00 00 00 d6 ac 0d 00 db 00 00 00 | \...........%................... |
e1a0 | a2 ad 0d 00 d7 00 00 00 7e ae 0d 00 a5 00 00 00 56 af 0d 00 93 00 00 00 fc af 0d 00 e3 00 00 00 | ........~.......V............... |
e1c0 | 90 b0 0d 00 02 02 00 00 74 b1 0d 00 c4 00 00 00 77 b3 0d 00 a6 00 00 00 3c b4 0d 00 e6 00 00 00 | ........t.......w.......<....... |
e1e0 | e3 b4 0d 00 4f 00 00 00 ca b5 0d 00 a4 00 00 00 1a b6 0d 00 28 01 00 00 bf b6 0d 00 9d 00 00 00 | ....O...............(........... |
e200 | e8 b7 0d 00 3b 00 00 00 86 b8 0d 00 4a 00 00 00 c2 b8 0d 00 81 00 00 00 0d b9 0d 00 68 00 00 00 | ....;.......J...............h... |
e220 | 8f b9 0d 00 49 00 00 00 f8 b9 0d 00 36 00 00 00 42 ba 0d 00 11 00 00 00 79 ba 0d 00 06 00 00 00 | ....I.......6...B.......y....... |
e240 | 8b ba 0d 00 0f 00 00 00 92 ba 0d 00 18 00 00 00 a2 ba 0d 00 0e 00 00 00 bb ba 0d 00 0e 00 00 00 | ................................ |
e260 | ca ba 0d 00 0f 00 00 00 d9 ba 0d 00 0b 00 00 00 e9 ba 0d 00 6c 01 00 00 f5 ba 0d 00 3a 01 00 00 | ....................l.......:... |
e280 | 62 bc 0d 00 0f 00 00 00 9d bd 0d 00 0f 00 00 00 ad bd 0d 00 08 00 00 00 bd bd 0d 00 07 00 00 00 | b............................... |
e2a0 | c6 bd 0d 00 04 00 00 00 ce bd 0d 00 0f 00 00 00 d3 bd 0d 00 06 00 00 00 e3 bd 0d 00 ff 00 00 00 | ................................ |
e2c0 | ea bd 0d 00 23 00 00 00 ea be 0d 00 23 00 00 00 0e bf 0d 00 0e 00 00 00 32 bf 0d 00 07 00 00 00 | ....#.......#...........2....... |
e2e0 | 41 bf 0d 00 0a 00 00 00 49 bf 0d 00 04 00 00 00 54 bf 0d 00 36 00 00 00 59 bf 0d 00 b5 00 00 00 | A.......I.......T...6...Y....... |
e300 | 90 bf 0d 00 04 00 00 00 46 c0 0d 00 f5 00 00 00 4b c0 0d 00 19 00 00 00 41 c1 0d 00 42 00 00 00 | ........F.......K.......A...B... |
e320 | 5b c1 0d 00 1b 00 00 00 9e c1 0d 00 34 01 00 00 ba c1 0d 00 3e 00 00 00 ef c2 0d 00 29 00 00 00 | [...........4.......>.......)... |
e340 | 2e c3 0d 00 0f 00 00 00 58 c3 0d 00 33 00 00 00 68 c3 0d 00 14 02 00 00 9c c3 0d 00 40 00 00 00 | ........X...3...h...........@... |
e360 | b1 c5 0d 00 3d 00 00 00 f2 c5 0d 00 07 01 00 00 30 c6 0d 00 23 00 00 00 38 c7 0d 00 11 00 00 00 | ....=...........0...#...8....... |
e380 | 5c c7 0d 00 3f 00 00 00 6e c7 0d 00 20 00 00 00 ae c7 0d 00 6f 00 00 00 cf c7 0d 00 78 00 00 00 | \...?...n...........o.......x... |
e3a0 | 3f c8 0d 00 3d 00 00 00 b8 c8 0d 00 68 00 00 00 f6 c8 0d 00 6b 00 00 00 5f c9 0d 00 23 00 00 00 | ?...=.......h.......k..._...#... |
e3c0 | cb c9 0d 00 07 00 00 00 ef c9 0d 00 7d 00 00 00 f7 c9 0d 00 06 00 00 00 75 ca 0d 00 16 00 00 00 | ............}...........u....... |
e3e0 | 7c ca 0d 00 35 00 00 00 93 ca 0d 00 10 00 00 00 c9 ca 0d 00 69 02 00 00 da ca 0d 00 1b 00 00 00 | |...5...............i........... |
e400 | 44 cd 0d 00 52 01 00 00 60 cd 0d 00 4a 00 00 00 b3 ce 0d 00 e8 01 00 00 fe ce 0d 00 9d 01 00 00 | D...R...`...J................... |
e420 | e7 d0 0d 00 d7 00 00 00 85 d2 0d 00 1e 00 00 00 5d d3 0d 00 2f 00 00 00 7c d3 0d 00 21 00 00 00 | ................].../...|...!... |
e440 | ac d3 0d 00 0c 00 00 00 ce d3 0d 00 0e 00 00 00 db d3 0d 00 24 00 00 00 ea d3 0d 00 0e 00 00 00 | ....................$........... |
e460 | 0f d4 0d 00 59 00 00 00 1e d4 0d 00 59 00 00 00 78 d4 0d 00 22 00 00 00 d2 d4 0d 00 05 00 00 00 | ....Y.......Y...x..."........... |
e480 | f5 d4 0d 00 20 00 00 00 fb d4 0d 00 14 00 00 00 1c d5 0d 00 3c 00 00 00 31 d5 0d 00 42 00 00 00 | ....................<...1...B... |
e4a0 | 6e d5 0d 00 1f 00 00 00 b1 d5 0d 00 2e 00 00 00 d1 d5 0d 00 10 00 00 00 00 d6 0d 00 10 00 00 00 | n............................... |
e4c0 | 11 d6 0d 00 12 00 00 00 22 d6 0d 00 12 00 00 00 35 d6 0d 00 2e 00 00 00 48 d6 0d 00 3c 00 00 00 | ........".......5.......H...<... |
e4e0 | 77 d6 0d 00 3b 00 00 00 b4 d6 0d 00 0b 00 00 00 f0 d6 0d 00 38 00 00 00 fc d6 0d 00 2c 00 00 00 | w...;...............8.......,... |
e500 | 35 d7 0d 00 09 00 00 00 62 d7 0d 00 09 00 00 00 6c d7 0d 00 0e 00 00 00 76 d7 0d 00 63 00 00 00 | 5.......b.......l.......v...c... |
e520 | 85 d7 0d 00 9c 00 00 00 e9 d7 0d 00 ab 00 00 00 86 d8 0d 00 eb 00 00 00 32 d9 0d 00 30 00 00 00 | ........................2...0... |
e540 | 1e da 0d 00 07 00 00 00 4f da 0d 00 63 00 00 00 57 da 0d 00 0c 01 00 00 bb da 0d 00 0c 00 00 00 | ........O...c...W............... |
e560 | c8 db 0d 00 0c 00 00 00 d5 db 0d 00 15 00 00 00 e2 db 0d 00 19 00 00 00 f8 db 0d 00 08 00 00 00 | ................................ |
e580 | 12 dc 0d 00 8c 00 00 00 1b dc 0d 00 03 00 00 00 a8 dc 0d 00 0a 00 00 00 ac dc 0d 00 35 00 00 00 | ............................5... |
e5a0 | b7 dc 0d 00 13 00 00 00 ed dc 0d 00 19 00 00 00 01 dd 0d 00 06 00 00 00 1b dd 0d 00 3b 02 00 00 | ............................;... |
e5c0 | 22 dd 0d 00 85 00 00 00 5e df 0d 00 0e 00 00 00 e4 df 0d 00 09 00 00 00 f3 df 0d 00 35 00 00 00 | ".......^...................5... |
e5e0 | fd df 0d 00 04 00 00 00 33 e0 0d 00 e8 01 00 00 38 e0 0d 00 5f 00 00 00 21 e2 0d 00 61 00 00 00 | ........3.......8..._...!...a... |
e600 | 81 e2 0d 00 03 00 00 00 e3 e2 0d 00 0b 00 00 00 e7 e2 0d 00 4c 00 00 00 f3 e2 0d 00 2f 00 00 00 | ....................L......./... |
e620 | 40 e3 0d 00 1d 00 00 00 70 e3 0d 00 10 00 00 00 8e e3 0d 00 4d 00 00 00 9f e3 0d 00 0f 00 00 00 | @.......p...........M........... |
e640 | ed e3 0d 00 3b 00 00 00 fd e3 0d 00 12 00 00 00 39 e4 0d 00 1d 00 00 00 4c e4 0d 00 44 00 00 00 | ....;...........9.......L...D... |
e660 | 6a e4 0d 00 51 00 00 00 af e4 0d 00 41 00 00 00 01 e5 0d 00 6a 00 00 00 43 e5 0d 00 66 00 00 00 | j...Q.......A.......j...C...f... |
e680 | ae e5 0d 00 1c 00 00 00 15 e6 0d 00 8d 00 00 00 32 e6 0d 00 d1 00 00 00 c0 e6 0d 00 1d 00 00 00 | ................2............... |
e6a0 | 92 e7 0d 00 e3 00 00 00 b0 e7 0d 00 e4 00 00 00 94 e8 0d 00 24 00 00 00 79 e9 0d 00 8d 00 00 00 | ....................$...y....... |
e6c0 | 9e e9 0d 00 5a 00 00 00 2c ea 0d 00 1a 00 00 00 87 ea 0d 00 21 00 00 00 a2 ea 0d 00 22 00 00 00 | ....Z...,...........!......."... |
e6e0 | c4 ea 0d 00 70 00 00 00 e7 ea 0d 00 72 00 00 00 58 eb 0d 00 29 00 00 00 cb eb 0d 00 77 00 00 00 | ....p.......r...X...).......w... |
e700 | f5 eb 0d 00 73 00 00 00 6d ec 0d 00 90 00 00 00 e1 ec 0d 00 53 00 00 00 72 ed 0d 00 b6 00 00 00 | ....s...m...........S...r....... |
e720 | c6 ed 0d 00 5c 00 00 00 7d ee 0d 00 1e 00 00 00 da ee 0d 00 91 00 00 00 f9 ee 0d 00 54 00 00 00 | ....\...}...................T... |
e740 | 8b ef 0d 00 b7 00 00 00 e0 ef 0d 00 60 00 00 00 98 f0 0d 00 24 00 00 00 f9 f0 0d 00 61 00 00 00 | ............`.......$.......a... |
e760 | 1e f1 0d 00 48 00 00 00 80 f1 0d 00 30 00 00 00 c9 f1 0d 00 3b 00 00 00 fa f1 0d 00 25 00 00 00 | ....H.......0.......;.......%... |
e780 | 36 f2 0d 00 28 00 00 00 5c f2 0d 00 2e 00 00 00 85 f2 0d 00 9e 00 00 00 b4 f2 0d 00 3e 00 00 00 | 6...(...\...................>... |
e7a0 | 53 f3 0d 00 11 00 00 00 92 f3 0d 00 19 00 00 00 a4 f3 0d 00 7a 00 00 00 be f3 0d 00 17 00 00 00 | S...................z........... |
e7c0 | 39 f4 0d 00 13 00 00 00 51 f4 0d 00 7d 00 00 00 65 f4 0d 00 83 00 00 00 e3 f4 0d 00 11 00 00 00 | 9.......Q...}...e............... |
e7e0 | 67 f5 0d 00 10 00 00 00 79 f5 0d 00 33 00 00 00 8a f5 0d 00 33 00 00 00 be f5 0d 00 33 00 00 00 | g.......y...3.......3.......3... |
e800 | f2 f5 0d 00 33 00 00 00 26 f6 0d 00 6a 00 00 00 5a f6 0d 00 22 00 00 00 c5 f6 0d 00 1e 01 00 00 | ....3...&...j...Z..."........... |
e820 | e8 f6 0d 00 33 00 00 00 07 f8 0d 00 dd 00 00 00 3b f8 0d 00 17 01 00 00 19 f9 0d 00 49 00 00 00 | ....3...........;...........I... |
e840 | 31 fa 0d 00 06 00 00 00 7b fa 0d 00 11 00 00 00 82 fa 0d 00 38 00 00 00 94 fa 0d 00 28 00 00 00 | 1.......{...........8.......(... |
e860 | cd fa 0d 00 24 00 00 00 f6 fa 0d 00 9d 00 00 00 1b fb 0d 00 37 00 00 00 b9 fb 0d 00 89 00 00 00 | ....$...............7........... |
e880 | f1 fb 0d 00 5c 00 00 00 7b fc 0d 00 cd 01 00 00 d8 fc 0d 00 c2 00 00 00 a6 fe 0d 00 65 00 00 00 | ....\...{...................e... |
e8a0 | 69 ff 0d 00 43 00 00 00 cf ff 0d 00 0a 00 00 00 13 00 0e 00 b3 00 00 00 1e 00 0e 00 8c 00 00 00 | i...C........................... |
e8c0 | d2 00 0e 00 e8 00 00 00 5f 01 0e 00 21 00 00 00 48 02 0e 00 05 00 00 00 6a 02 0e 00 89 01 00 00 | ........_...!...H.......j....... |
e8e0 | 70 02 0e 00 ae 01 00 00 fa 03 0e 00 27 00 00 00 a9 05 0e 00 09 00 00 00 d1 05 0e 00 fc 00 00 00 | p...........'................... |
e900 | db 05 0e 00 79 01 00 00 d8 06 0e 00 0f 00 00 00 52 08 0e 00 6c 00 00 00 62 08 0e 00 35 00 00 00 | ....y...........R...l...b...5... |
e920 | cf 08 0e 00 d4 00 00 00 05 09 0e 00 d4 00 00 00 da 09 0e 00 f4 00 00 00 af 0a 0e 00 24 00 00 00 | ............................$... |
e940 | a4 0b 0e 00 6f 00 00 00 c9 0b 0e 00 10 00 00 00 39 0c 0e 00 c6 00 00 00 4a 0c 0e 00 30 00 00 00 | ....o...........9.......J...0... |
e960 | 11 0d 0e 00 a3 00 00 00 42 0d 0e 00 a4 00 00 00 e6 0d 0e 00 25 00 00 00 8b 0e 0e 00 38 00 00 00 | ........B...........%.......8... |
e980 | b1 0e 0e 00 22 00 00 00 ea 0e 0e 00 65 00 00 00 0d 0f 0e 00 80 00 00 00 73 0f 0e 00 74 00 00 00 | ....".......e...........s...t... |
e9a0 | f4 0f 0e 00 6a 00 00 00 69 10 0e 00 a9 00 00 00 d4 10 0e 00 01 00 00 00 7e 11 0e 00 03 00 00 00 | ....j...i...............~....... |
e9c0 | 80 11 0e 00 1f 00 00 00 84 11 0e 00 11 00 00 00 a4 11 0e 00 10 00 00 00 b6 11 0e 00 37 01 00 00 | ............................7... |
e9e0 | c7 11 0e 00 0b 00 00 00 ff 12 0e 00 0e 00 00 00 0b 13 0e 00 17 00 00 00 1a 13 0e 00 22 00 00 00 | ............................"... |
ea00 | 32 13 0e 00 05 00 00 00 55 13 0e 00 05 00 00 00 5b 13 0e 00 1b 00 00 00 61 13 0e 00 40 00 00 00 | 2.......U.......[.......a...@... |
ea20 | 7d 13 0e 00 1b 00 00 00 be 13 0e 00 0c 00 00 00 da 13 0e 00 eb 00 00 00 e7 13 0e 00 03 00 00 00 | }............................... |
ea40 | d3 14 0e 00 41 02 00 00 d7 14 0e 00 ad 00 00 00 19 17 0e 00 0d 00 00 00 c7 17 0e 00 91 00 00 00 | ....A........................... |
ea60 | d5 17 0e 00 0b 00 00 00 67 18 0e 00 34 00 00 00 73 18 0e 00 25 00 00 00 a8 18 0e 00 16 00 00 00 | ........g...4...s...%........... |
ea80 | ce 18 0e 00 40 00 00 00 e5 18 0e 00 23 00 00 00 26 19 0e 00 1f 00 00 00 4a 19 0e 00 07 00 00 00 | ....@.......#...&.......J....... |
eaa0 | 6a 19 0e 00 0f 00 00 00 72 19 0e 00 4b 00 00 00 82 19 0e 00 ab 01 00 00 ce 19 0e 00 a3 00 00 00 | j.......r...K................... |
eac0 | 7a 1b 0e 00 13 00 00 00 1e 1c 0e 00 0f 00 00 00 32 1c 0e 00 1c 00 00 00 42 1c 0e 00 18 00 00 00 | z...............2.......B....... |
eae0 | 5f 1c 0e 00 23 00 00 00 78 1c 0e 00 0f 00 00 00 9c 1c 0e 00 10 00 00 00 ac 1c 0e 00 0e 00 00 00 | _...#...x....................... |
eb00 | bd 1c 0e 00 25 00 00 00 cc 1c 0e 00 1a 00 00 00 f2 1c 0e 00 18 00 00 00 0d 1d 0e 00 45 00 00 00 | ....%.......................E... |
eb20 | 26 1d 0e 00 16 00 00 00 6c 1d 0e 00 43 00 00 00 83 1d 0e 00 25 00 00 00 c7 1d 0e 00 38 00 00 00 | &.......l...C.......%.......8... |
eb40 | ed 1d 0e 00 36 00 00 00 26 1e 0e 00 20 00 00 00 5d 1e 0e 00 13 00 00 00 7e 1e 0e 00 1e 00 00 00 | ....6...&.......].......~....... |
eb60 | 92 1e 0e 00 15 00 00 00 b1 1e 0e 00 10 00 00 00 c7 1e 0e 00 ec 00 00 00 d8 1e 0e 00 ba 00 00 00 | ................................ |
eb80 | c5 1f 0e 00 ba 00 00 00 80 20 0e 00 25 00 00 00 3b 21 0e 00 89 00 00 00 61 21 0e 00 13 00 00 00 | ............%...;!......a!...... |
eba0 | eb 21 0e 00 1a 00 00 00 ff 21 0e 00 3a 00 00 00 1a 22 0e 00 81 01 00 00 55 22 0e 00 47 00 00 00 | .!.......!..:...."......U"..G... |
ebc0 | d7 23 0e 00 74 00 00 00 1f 24 0e 00 9d 00 00 00 94 24 0e 00 7b 01 00 00 32 25 0e 00 61 00 00 00 | .#..t....$.......$..{...2%..a... |
ebe0 | ae 26 0e 00 6c 00 00 00 10 27 0e 00 06 00 00 00 7d 27 0e 00 47 00 00 00 84 27 0e 00 44 00 00 00 | .&..l....'......}'..G....'..D... |
ec00 | cc 27 0e 00 37 00 00 00 11 28 0e 00 07 01 00 00 49 28 0e 00 57 00 00 00 51 29 0e 00 31 00 00 00 | .'..7....(......I(..W...Q)..1... |
ec20 | a9 29 0e 00 5b 00 00 00 db 29 0e 00 1f 00 00 00 37 2a 0e 00 62 00 00 00 57 2a 0e 00 2b 00 00 00 | .)..[....)......7*..b...W*..+... |
ec40 | ba 2a 0e 00 04 00 00 00 e6 2a 0e 00 16 00 00 00 eb 2a 0e 00 37 00 00 00 02 2b 0e 00 38 01 00 00 | .*.......*.......*..7....+..8... |
ec60 | 3a 2b 0e 00 0d 00 00 00 73 2c 0e 00 0d 00 00 00 81 2c 0e 00 12 00 00 00 8f 2c 0e 00 0a 00 00 00 | :+......s,.......,.......,...... |
ec80 | a2 2c 0e 00 4e 00 00 00 ad 2c 0e 00 08 01 00 00 fc 2c 0e 00 24 01 00 00 05 2e 0e 00 15 00 00 00 | .,..N....,.......,..$........... |
eca0 | 2a 2f 0e 00 9c 01 00 00 40 2f 0e 00 5c 00 00 00 dd 30 0e 00 a4 00 00 00 3a 31 0e 00 16 00 00 00 | */......@/..\....0......:1...... |
ecc0 | df 31 0e 00 8a 02 00 00 f6 31 0e 00 1d 00 00 00 81 34 0e 00 0c 00 00 00 9f 34 0e 00 1f 00 00 00 | .1.......1.......4.......4...... |
ece0 | ac 34 0e 00 43 00 00 00 cc 34 0e 00 0d 00 00 00 10 35 0e 00 c1 00 00 00 1e 35 0e 00 77 00 00 00 | .4..C....4.......5.......5..w... |
ed00 | e0 35 0e 00 69 00 00 00 58 36 0e 00 62 00 00 00 c2 36 0e 00 76 00 00 00 25 37 0e 00 0e 01 00 00 | .5..i...X6..b....6..v...%7...... |
ed20 | 9c 37 0e 00 cb 00 00 00 ab 38 0e 00 19 01 00 00 77 39 0e 00 43 00 00 00 91 3a 0e 00 ab 00 00 00 | .7.......8......w9..C....:...... |
ed40 | d5 3a 0e 00 9a 00 00 00 81 3b 0e 00 a6 00 00 00 1c 3c 0e 00 6e 01 00 00 c3 3c 0e 00 17 01 00 00 | .:.......;.......<..n....<...... |
ed60 | 32 3e 0e 00 6f 00 00 00 4a 3f 0e 00 7b 00 00 00 ba 3f 0e 00 7d 00 00 00 36 40 0e 00 12 01 00 00 | 2>..o...J?..{....?..}...6@...... |
ed80 | b4 40 0e 00 e6 00 00 00 c7 41 0e 00 b6 00 00 00 ae 42 0e 00 3c 01 00 00 65 43 0e 00 b1 00 00 00 | .@.......A.......B..<...eC...... |
eda0 | a2 44 0e 00 fb 00 00 00 54 45 0e 00 20 00 00 00 50 46 0e 00 a0 01 00 00 71 46 0e 00 53 00 00 00 | .D......TE......PF......qF..S... |
edc0 | 12 48 0e 00 39 00 00 00 66 48 0e 00 28 00 00 00 a0 48 0e 00 4a 00 00 00 c9 48 0e 00 3b 00 00 00 | .H..9...fH..(....H..J....H..;... |
ede0 | 14 49 0e 00 34 00 00 00 50 49 0e 00 52 00 00 00 85 49 0e 00 53 00 00 00 d8 49 0e 00 52 00 00 00 | .I..4...PI..R....I..S....I..R... |
ee00 | 2c 4a 0e 00 80 01 00 00 7f 4a 0e 00 36 00 00 00 00 4c 0e 00 23 00 00 00 37 4c 0e 00 0b 00 00 00 | ,J.......J..6....L..#...7L...... |
ee20 | 5b 4c 0e 00 ad 00 00 00 67 4c 0e 00 91 00 00 00 15 4d 0e 00 1b 02 00 00 a7 4d 0e 00 e8 01 00 00 | [L......gL.......M.......M...... |
ee40 | c3 4f 0e 00 07 00 00 00 ac 51 0e 00 df 00 00 00 b4 51 0e 00 45 01 00 00 94 52 0e 00 22 00 00 00 | .O.......Q.......Q..E....R.."... |
ee60 | da 53 0e 00 79 01 00 00 fd 53 0e 00 a6 00 00 00 77 55 0e 00 e9 00 00 00 1e 56 0e 00 83 00 00 00 | .S..y....S......wU.......V...... |
ee80 | 08 57 0e 00 19 00 00 00 8c 57 0e 00 0f 00 00 00 a6 57 0e 00 09 00 00 00 b6 57 0e 00 12 00 00 00 | .W.......W.......W.......W...... |
eea0 | c0 57 0e 00 0e 00 00 00 d3 57 0e 00 21 00 00 00 e2 57 0e 00 0e 00 00 00 04 58 0e 00 17 00 00 00 | .W.......W..!....W.......X...... |
eec0 | 13 58 0e 00 14 00 00 00 2b 58 0e 00 19 00 00 00 40 58 0e 00 14 00 00 00 5a 58 0e 00 06 00 00 00 | .X......+X......@X......ZX...... |
eee0 | 6f 58 0e 00 13 00 00 00 76 58 0e 00 12 00 00 00 8a 58 0e 00 0d 00 00 00 9d 58 0e 00 6a 00 00 00 | oX......vX.......X.......X..j... |
ef00 | ab 58 0e 00 17 00 00 00 16 59 0e 00 2e 00 00 00 2e 59 0e 00 2d 00 00 00 5d 59 0e 00 08 00 00 00 | .X.......Y.......Y..-...]Y...... |
ef20 | 8b 59 0e 00 16 00 00 00 94 59 0e 00 ea 00 00 00 ab 59 0e 00 59 00 00 00 96 5a 0e 00 19 00 00 00 | .Y.......Y.......Y..Y....Z...... |
ef40 | f0 5a 0e 00 7e 00 00 00 0a 5b 0e 00 07 00 00 00 89 5b 0e 00 2a 00 00 00 91 5b 0e 00 4f 00 00 00 | .Z..~....[.......[..*....[..O... |
ef60 | bc 5b 0e 00 17 00 00 00 0c 5c 0e 00 3b 00 00 00 24 5c 0e 00 60 00 00 00 60 5c 0e 00 87 01 00 00 | .[.......\..;...$\..`...`\...... |
ef80 | c1 5c 0e 00 6e 00 00 00 49 5e 0e 00 24 00 00 00 b8 5e 0e 00 54 00 00 00 dd 5e 0e 00 a4 01 00 00 | .\..n...I^..$....^..T....^...... |
efa0 | 32 5f 0e 00 8f 01 00 00 d7 60 0e 00 24 00 00 00 67 62 0e 00 1f 00 00 00 8c 62 0e 00 07 00 00 00 | 2_.......`..$...gb.......b...... |
efc0 | ac 62 0e 00 1b 00 00 00 b4 62 0e 00 08 00 00 00 d0 62 0e 00 5c 00 00 00 d9 62 0e 00 08 00 00 00 | .b.......b.......b..\....b...... |
efe0 | 36 63 0e 00 1b 00 00 00 3f 63 0e 00 57 00 00 00 5b 63 0e 00 14 00 00 00 b3 63 0e 00 3f 00 00 00 | 6c......?c..W...[c.......c..?... |
f000 | c8 63 0e 00 3a 00 00 00 08 64 0e 00 75 00 00 00 43 64 0e 00 69 00 00 00 b9 64 0e 00 32 01 00 00 | .c..:....d..u...Cd..i....d..2... |
f020 | 23 65 0e 00 36 01 00 00 56 66 0e 00 0c 00 00 00 8d 67 0e 00 26 00 00 00 9a 67 0e 00 18 00 00 00 | #e..6...Vf.......g..&....g...... |
f040 | c1 67 0e 00 2e 00 00 00 da 67 0e 00 41 01 00 00 09 68 0e 00 03 00 00 00 4b 69 0e 00 04 00 00 00 | .g.......g..A....h......Ki...... |
f060 | 4f 69 0e 00 14 00 00 00 54 69 0e 00 0c 00 00 00 69 69 0e 00 05 00 00 00 76 69 0e 00 0c 00 00 00 | Oi......Ti......ii......vi...... |
f080 | 7c 69 0e 00 0d 00 00 00 89 69 0e 00 0b 00 00 00 97 69 0e 00 ae 00 00 00 a3 69 0e 00 31 01 00 00 | |i.......i.......i.......i..1... |
f0a0 | 52 6a 0e 00 4f 00 00 00 84 6b 0e 00 ca 00 00 00 d4 6b 0e 00 43 00 00 00 9f 6c 0e 00 46 00 00 00 | Rj..O....k.......k..C....l..F... |
f0c0 | e3 6c 0e 00 0b 00 00 00 2a 6d 0e 00 0b 00 00 00 36 6d 0e 00 19 00 00 00 42 6d 0e 00 0f 00 00 00 | .l......*m......6m......Bm...... |
f0e0 | 5c 6d 0e 00 ba 01 00 00 6c 6d 0e 00 6a 00 00 00 27 6f 0e 00 13 00 00 00 92 6f 0e 00 e4 00 00 00 | \m......lm..j...'o.......o...... |
f100 | a6 6f 0e 00 46 00 00 00 8b 70 0e 00 88 01 00 00 d2 70 0e 00 89 01 00 00 5b 72 0e 00 38 00 00 00 | .o..F....p.......p......[r..8... |
f120 | e5 73 0e 00 0b 00 00 00 1e 74 0e 00 ce 00 00 00 2a 74 0e 00 6c 00 00 00 f9 74 0e 00 10 01 00 00 | .s.......t......*t..l....t...... |
f140 | 66 75 0e 00 6e 00 00 00 77 76 0e 00 26 00 00 00 e6 76 0e 00 40 00 00 00 0d 77 0e 00 a0 00 00 00 | fu..n...wv..&....v..@....w...... |
f160 | 4e 77 0e 00 b9 00 00 00 ef 77 0e 00 58 00 00 00 a9 78 0e 00 64 00 00 00 02 79 0e 00 39 00 00 00 | Nw.......w..X....x..d....y..9... |
f180 | 67 79 0e 00 45 00 00 00 a1 79 0e 00 4a 00 00 00 e7 79 0e 00 4b 00 00 00 32 7a 0e 00 56 00 00 00 | gy..E....y..J....y..K...2z..V... |
f1a0 | 7e 7a 0e 00 57 00 00 00 d5 7a 0e 00 96 00 00 00 2d 7b 0e 00 37 00 00 00 c4 7b 0e 00 8f 00 00 00 | ~z..W....z......-{..7....{...... |
f1c0 | fc 7b 0e 00 06 00 00 00 8c 7c 0e 00 0f 00 00 00 93 7c 0e 00 1b 00 00 00 a3 7c 0e 00 33 00 00 00 | .{.......|.......|.......|..3... |
f1e0 | bf 7c 0e 00 56 00 00 00 f3 7c 0e 00 0b 00 00 00 4a 7d 0e 00 12 00 00 00 56 7d 0e 00 38 00 00 00 | .|..V....|......J}......V}..8... |
f200 | 69 7d 0e 00 19 00 00 00 a2 7d 0e 00 33 00 00 00 bc 7d 0e 00 1f 00 00 00 f0 7d 0e 00 2e 00 00 00 | i}.......}..3....}.......}...... |
f220 | 10 7e 0e 00 93 01 00 00 3f 7e 0e 00 0f 00 00 00 d3 7f 0e 00 0a 00 00 00 e3 7f 0e 00 0a 00 00 00 | .~......?~...................... |
f240 | ee 7f 0e 00 63 00 00 00 f9 7f 0e 00 2f 00 00 00 5d 80 0e 00 32 00 00 00 8d 80 0e 00 4c 00 00 00 | ....c......./...]...2.......L... |
f260 | c0 80 0e 00 23 00 00 00 0d 81 0e 00 64 00 00 00 31 81 0e 00 65 00 00 00 96 81 0e 00 6e 00 00 00 | ....#.......d...1...e.......n... |
f280 | fc 81 0e 00 29 00 00 00 6b 82 0e 00 dd 00 00 00 95 82 0e 00 2d 00 00 00 73 83 0e 00 11 00 00 00 | ....)...k...........-...s....... |
f2a0 | a1 83 0e 00 11 00 00 00 b3 83 0e 00 12 00 00 00 c5 83 0e 00 0c 00 00 00 d8 83 0e 00 30 00 00 00 | ............................0... |
f2c0 | e5 83 0e 00 3f 00 00 00 16 84 0e 00 40 00 00 00 56 84 0e 00 04 01 00 00 97 84 0e 00 a9 00 00 00 | ....?.......@...V............... |
f2e0 | 9c 85 0e 00 18 00 00 00 46 86 0e 00 08 00 00 00 5f 86 0e 00 46 00 00 00 68 86 0e 00 4d 00 00 00 | ........F......._...F...h...M... |
f300 | af 86 0e 00 1f 00 00 00 fd 86 0e 00 4f 00 00 00 1d 87 0e 00 3d 00 00 00 6d 87 0e 00 08 00 00 00 | ............O.......=...m....... |
f320 | ab 87 0e 00 0e 00 00 00 b4 87 0e 00 84 01 00 00 c3 87 0e 00 8c 00 00 00 48 89 0e 00 fb 00 00 00 | ........................H....... |
f340 | d5 89 0e 00 11 00 00 00 d1 8a 0e 00 0e 01 00 00 e3 8a 0e 00 3a 00 00 00 f2 8b 0e 00 09 00 00 00 | ....................:........... |
f360 | 2d 8c 0e 00 38 00 00 00 37 8c 0e 00 bd 00 00 00 70 8c 0e 00 30 00 00 00 2e 8d 0e 00 31 00 00 00 | -...8...7.......p...0.......1... |
f380 | 5f 8d 0e 00 24 00 00 00 91 8d 0e 00 28 00 00 00 b6 8d 0e 00 23 00 00 00 df 8d 0e 00 20 00 00 00 | _...$.......(.......#........... |
f3a0 | 03 8e 0e 00 21 00 00 00 24 8e 0e 00 3a 00 00 00 46 8e 0e 00 1f 00 00 00 81 8e 0e 00 32 00 00 00 | ....!...$...:...F...........2... |
f3c0 | a1 8e 0e 00 26 00 00 00 d4 8e 0e 00 13 00 00 00 fb 8e 0e 00 41 00 00 00 0f 8f 0e 00 a0 00 00 00 | ....&...............A........... |
f3e0 | 51 8f 0e 00 3e 00 00 00 f2 8f 0e 00 1f 00 00 00 31 90 0e 00 ce 00 00 00 51 90 0e 00 4c 01 00 00 | Q...>...........1.......Q...L... |
f400 | 20 91 0e 00 36 01 00 00 6d 92 0e 00 21 00 00 00 a4 93 0e 00 1e 00 00 00 c6 93 0e 00 0e 00 00 00 | ....6...m...!................... |
f420 | e5 93 0e 00 03 00 00 00 f4 93 0e 00 39 00 00 00 f8 93 0e 00 2f 00 00 00 32 94 0e 00 b8 00 00 00 | ............9......./...2....... |
f440 | 62 94 0e 00 24 00 00 00 1b 95 0e 00 49 00 00 00 40 95 0e 00 03 00 00 00 8a 95 0e 00 24 00 00 00 | b...$.......I...@...........$... |
f460 | 8e 95 0e 00 03 00 00 00 b3 95 0e 00 06 00 00 00 b7 95 0e 00 0c 00 00 00 be 95 0e 00 18 00 00 00 | ................................ |
f480 | cb 95 0e 00 17 00 00 00 e4 95 0e 00 15 00 00 00 fc 95 0e 00 22 00 00 00 12 96 0e 00 4c 00 00 00 | ....................".......L... |
f4a0 | 35 96 0e 00 45 00 00 00 82 96 0e 00 98 00 00 00 c8 96 0e 00 15 00 00 00 61 97 0e 00 53 01 00 00 | 5...E...................a...S... |
f4c0 | 77 97 0e 00 20 00 00 00 cb 98 0e 00 03 00 00 00 ec 98 0e 00 21 00 00 00 f0 98 0e 00 21 00 00 00 | w...................!.......!... |
f4e0 | 12 99 0e 00 04 00 00 00 34 99 0e 00 15 00 00 00 39 99 0e 00 e1 00 00 00 4f 99 0e 00 08 00 00 00 | ........4.......9.......O....... |
f500 | 31 9a 0e 00 0d 00 00 00 3a 9a 0e 00 c3 00 00 00 48 9a 0e 00 20 00 00 00 0c 9b 0e 00 21 00 00 00 | 1.......:.......H...........!... |
f520 | 2d 9b 0e 00 0c 00 00 00 4f 9b 0e 00 0a 00 00 00 5c 9b 0e 00 72 00 00 00 67 9b 0e 00 dc 00 00 00 | -.......O.......\...r...g....... |
f540 | da 9b 0e 00 0e 00 00 00 b7 9c 0e 00 4f 00 00 00 c6 9c 0e 00 6a 00 00 00 16 9d 0e 00 50 00 00 00 | ............O.......j.......P... |
f560 | 81 9d 0e 00 0e 00 00 00 d2 9d 0e 00 0b 00 00 00 e1 9d 0e 00 1f 00 00 00 ed 9d 0e 00 41 00 00 00 | ............................A... |
f580 | 0d 9e 0e 00 13 04 00 00 4f 9e 0e 00 87 00 00 00 63 a2 0e 00 25 00 00 00 eb a2 0e 00 0c 00 00 00 | ........O.......c...%........... |
f5a0 | 11 a3 0e 00 16 00 00 00 1e a3 0e 00 2f 01 00 00 35 a3 0e 00 96 00 00 00 65 a4 0e 00 1e 00 00 00 | ............/...5.......e....... |
f5c0 | fc a4 0e 00 1c 00 00 00 1b a5 0e 00 ad 01 00 00 38 a5 0e 00 45 00 00 00 e6 a6 0e 00 16 00 00 00 | ................8...E........... |
f5e0 | 2c a7 0e 00 35 00 00 00 43 a7 0e 00 3b 00 00 00 79 a7 0e 00 4a 00 00 00 b5 a7 0e 00 54 00 00 00 | ,...5...C...;...y...J.......T... |
f600 | 00 a8 0e 00 73 00 00 00 55 a8 0e 00 4c 00 00 00 c9 a8 0e 00 0d 00 00 00 16 a9 0e 00 23 00 00 00 | ....s...U...L...............#... |
f620 | 24 a9 0e 00 23 00 00 00 48 a9 0e 00 21 00 00 00 6c a9 0e 00 15 00 00 00 8e a9 0e 00 0b 00 00 00 | $...#...H...!...l............... |
f640 | a4 a9 0e 00 0a 00 00 00 b0 a9 0e 00 1e 00 00 00 bb a9 0e 00 0b 00 00 00 da a9 0e 00 1f 00 00 00 | ................................ |
f660 | e6 a9 0e 00 15 00 00 00 06 aa 0e 00 48 00 00 00 1c aa 0e 00 4e 00 00 00 65 aa 0e 00 0b 00 00 00 | ............H.......N...e....... |
f680 | b4 aa 0e 00 3d 00 00 00 c0 aa 0e 00 25 00 00 00 fe aa 0e 00 29 00 00 00 24 ab 0e 00 11 00 00 00 | ....=.......%.......)...$....... |
f6a0 | 4e ab 0e 00 76 00 00 00 60 ab 0e 00 43 00 00 00 d7 ab 0e 00 6b 00 00 00 1b ac 0e 00 0c 00 00 00 | N...v...`...C.......k........... |
f6c0 | 87 ac 0e 00 20 00 00 00 94 ac 0e 00 0d 00 00 00 b5 ac 0e 00 05 00 00 00 c3 ac 0e 00 0d 00 00 00 | ................................ |
f6e0 | c9 ac 0e 00 0e 00 00 00 d7 ac 0e 00 81 00 00 00 e6 ac 0e 00 07 00 00 00 68 ad 0e 00 1a 00 00 00 | ........................h....... |
f700 | 70 ad 0e 00 27 00 00 00 8b ad 0e 00 19 00 00 00 b3 ad 0e 00 1e 00 00 00 cd ad 0e 00 17 00 00 00 | p...'........................... |
f720 | ec ad 0e 00 1f 00 00 00 04 ae 0e 00 6d 00 00 00 24 ae 0e 00 58 00 00 00 92 ae 0e 00 0c 00 00 00 | ............m...$...X........... |
f740 | eb ae 0e 00 0b 00 00 00 f8 ae 0e 00 10 00 00 00 04 af 0e 00 3d 00 00 00 15 af 0e 00 39 00 00 00 | ....................=.......9... |
f760 | 53 af 0e 00 40 00 00 00 8d af 0e 00 0d 00 00 00 ce af 0e 00 0b 00 00 00 dc af 0e 00 1f 00 00 00 | S...@........................... |
f780 | e8 af 0e 00 0f 00 00 00 08 b0 0e 00 0f 00 00 00 18 b0 0e 00 1d 00 00 00 28 b0 0e 00 09 00 00 00 | ........................(....... |
f7a0 | 46 b0 0e 00 10 00 00 00 50 b0 0e 00 14 00 00 00 61 b0 0e 00 1d 00 00 00 76 b0 0e 00 0f 00 00 00 | F.......P.......a.......v....... |
f7c0 | 94 b0 0e 00 1d 00 00 00 a4 b0 0e 00 17 00 00 00 c2 b0 0e 00 d0 01 00 00 da b0 0e 00 2e 00 00 00 | ................................ |
f7e0 | ab b2 0e 00 7d 00 00 00 da b2 0e 00 c1 00 00 00 58 b3 0e 00 0c 00 00 00 1a b4 0e 00 13 00 00 00 | ....}...........X............... |
f800 | 27 b4 0e 00 15 00 00 00 3b b4 0e 00 0f 00 00 00 51 b4 0e 00 67 00 00 00 61 b4 0e 00 56 00 00 00 | '.......;.......Q...g...a...V... |
f820 | c9 b4 0e 00 11 00 00 00 20 b5 0e 00 c1 00 00 00 32 b5 0e 00 59 00 00 00 f4 b5 0e 00 c6 00 00 00 | ................2...Y........... |
f840 | 4e b6 0e 00 07 00 00 00 15 b7 0e 00 07 00 00 00 1d b7 0e 00 35 00 00 00 25 b7 0e 00 69 00 00 00 | N...................5...%...i... |
f860 | 5b b7 0e 00 6c 00 00 00 c5 b7 0e 00 2b 00 00 00 32 b8 0e 00 7c 00 00 00 5e b8 0e 00 69 00 00 00 | [...l.......+...2...|...^...i... |
f880 | db b8 0e 00 0b 00 00 00 45 b9 0e 00 09 00 00 00 51 b9 0e 00 11 00 00 00 5b b9 0e 00 05 00 00 00 | ........E.......Q.......[....... |
f8a0 | 6d b9 0e 00 ad 00 00 00 73 b9 0e 00 4c 00 00 00 21 ba 0e 00 12 00 00 00 6e ba 0e 00 04 00 00 00 | m.......s...L...!.......n....... |
f8c0 | 81 ba 0e 00 06 00 00 00 86 ba 0e 00 06 00 00 00 8d ba 0e 00 04 00 00 00 94 ba 0e 00 0f 00 00 00 | ................................ |
f8e0 | 99 ba 0e 00 16 00 00 00 a9 ba 0e 00 d7 00 00 00 c0 ba 0e 00 fd 00 00 00 98 bb 0e 00 65 01 00 00 | ............................e... |
f900 | 96 bc 0e 00 06 00 00 00 fc bd 0e 00 f4 00 00 00 03 be 0e 00 00 01 00 00 f8 be 0e 00 06 00 00 00 | ................................ |
f920 | f9 bf 0e 00 0b 02 00 00 00 c0 0e 00 e2 01 00 00 0c c2 0e 00 03 00 00 00 ef c3 0e 00 27 00 00 00 | ............................'... |
f940 | f3 c3 0e 00 18 00 00 00 1b c4 0e 00 0a 00 00 00 34 c4 0e 00 7b 01 00 00 3f c4 0e 00 40 00 00 00 | ................4...{...?...@... |
f960 | bb c5 0e 00 a9 01 00 00 fc c5 0e 00 30 00 00 00 a6 c7 0e 00 0c 00 00 00 d7 c7 0e 00 10 00 00 00 | ............0................... |
f980 | e4 c7 0e 00 1b 00 00 00 f5 c7 0e 00 2e 00 00 00 11 c8 0e 00 0b 00 00 00 40 c8 0e 00 13 00 00 00 | ........................@....... |
f9a0 | 4c c8 0e 00 0b 00 00 00 60 c8 0e 00 2e 00 00 00 6c c8 0e 00 46 00 00 00 9b c8 0e 00 0d 00 00 00 | L.......`.......l...F........... |
f9c0 | e2 c8 0e 00 0b 00 00 00 f0 c8 0e 00 58 01 00 00 fc c8 0e 00 88 00 00 00 55 ca 0e 00 45 00 00 00 | ............X...........U...E... |
f9e0 | de ca 0e 00 29 00 00 00 24 cb 0e 00 96 00 00 00 4e cb 0e 00 10 00 00 00 e5 cb 0e 00 2f 00 00 00 | ....)...$.......N.........../... |
fa00 | f6 cb 0e 00 43 00 00 00 26 cc 0e 00 37 00 00 00 6a cc 0e 00 49 00 00 00 a2 cc 0e 00 09 00 00 00 | ....C...&...7...j...I........... |
fa20 | ec cc 0e 00 a8 00 00 00 f6 cc 0e 00 3a 00 00 00 9f cd 0e 00 08 00 00 00 da cd 0e 00 20 00 00 00 | ............:................... |
fa40 | e3 cd 0e 00 28 00 00 00 04 ce 0e 00 4b 00 00 00 2d ce 0e 00 0f 00 00 00 79 ce 0e 00 26 01 00 00 | ....(.......K...-.......y...&... |
fa60 | 89 ce 0e 00 5b 01 00 00 b0 cf 0e 00 87 00 00 00 0c d1 0e 00 86 00 00 00 94 d1 0e 00 ce 01 00 00 | ....[........................... |
fa80 | 1b d2 0e 00 18 00 00 00 ea d3 0e 00 51 00 00 00 03 d4 0e 00 f2 00 00 00 55 d4 0e 00 0e 00 00 00 | ............Q...........U....... |
faa0 | 48 d5 0e 00 34 00 00 00 57 d5 0e 00 36 00 00 00 8c d5 0e 00 bd 00 00 00 c3 d5 0e 00 7e 00 00 00 | H...4...W...6...............~... |
fac0 | 81 d6 0e 00 33 00 00 00 00 d7 0e 00 0e 00 00 00 34 d7 0e 00 dd 00 00 00 43 d7 0e 00 06 00 00 00 | ....3...........4.......C....... |
fae0 | 21 d8 0e 00 12 00 00 00 28 d8 0e 00 14 00 00 00 3b d8 0e 00 0b 00 00 00 50 d8 0e 00 14 00 00 00 | !.......(.......;.......P....... |
fb00 | 5c d8 0e 00 42 00 00 00 71 d8 0e 00 07 00 00 00 b4 d8 0e 00 07 00 00 00 bc d8 0e 00 c7 00 00 00 | \...B...q....................... |
fb20 | c4 d8 0e 00 29 00 00 00 8c d9 0e 00 28 00 00 00 b6 d9 0e 00 23 00 00 00 df d9 0e 00 14 00 00 00 | ....).......(.......#........... |
fb40 | 03 da 0e 00 20 00 00 00 18 da 0e 00 18 00 00 00 39 da 0e 00 28 00 00 00 52 da 0e 00 1d 00 00 00 | ................9...(...R....... |
fb60 | 7b da 0e 00 29 00 00 00 99 da 0e 00 1e 00 00 00 c3 da 0e 00 30 00 00 00 e2 da 0e 00 4b 00 00 00 | {...)...............0.......K... |
fb80 | 13 db 0e 00 6e 00 00 00 5f db 0e 00 2d 00 00 00 ce db 0e 00 2d 00 00 00 fc db 0e 00 35 00 00 00 | ....n..._...-.......-.......5... |
fba0 | 2a dc 0e 00 16 00 00 00 60 dc 0e 00 1c 00 00 00 77 dc 0e 00 1b 00 00 00 94 dc 0e 00 21 00 00 00 | *.......`.......w...........!... |
fbc0 | b0 dc 0e 00 41 00 00 00 d2 dc 0e 00 35 00 00 00 14 dd 0e 00 97 00 00 00 4a dd 0e 00 4e 00 00 00 | ....A.......5...........J...N... |
fbe0 | e2 dd 0e 00 1d 00 00 00 31 de 0e 00 4c 00 00 00 4f de 0e 00 17 00 00 00 9c de 0e 00 1f 00 00 00 | ........1...L...O............... |
fc00 | b4 de 0e 00 1b 00 00 00 d4 de 0e 00 24 00 00 00 f0 de 0e 00 31 00 00 00 15 df 0e 00 47 00 00 00 | ............$.......1.......G... |
fc20 | 47 df 0e 00 4f 00 00 00 8f df 0e 00 45 00 00 00 df df 0e 00 7c 00 00 00 25 e0 0e 00 26 00 00 00 | G...O.......E.......|...%...&... |
fc40 | a2 e0 0e 00 43 00 00 00 c9 e0 0e 00 4c 00 00 00 0d e1 0e 00 3c 00 00 00 5a e1 0e 00 39 00 00 00 | ....C.......L.......<...Z...9... |
fc60 | 97 e1 0e 00 4a 00 00 00 d1 e1 0e 00 5a 00 00 00 1c e2 0e 00 2a 00 00 00 77 e2 0e 00 3f 00 00 00 | ....J.......Z.......*...w...?... |
fc80 | a2 e2 0e 00 47 00 00 00 e2 e2 0e 00 42 00 00 00 2a e3 0e 00 28 00 00 00 6d e3 0e 00 2a 00 00 00 | ....G.......B...*...(...m...*... |
fca0 | 96 e3 0e 00 2d 00 00 00 c1 e3 0e 00 30 00 00 00 ef e3 0e 00 2d 00 00 00 20 e4 0e 00 2c 00 00 00 | ....-.......0.......-.......,... |
fcc0 | 4e e4 0e 00 19 00 00 00 7b e4 0e 00 29 00 00 00 95 e4 0e 00 30 00 00 00 bf e4 0e 00 24 00 00 00 | N.......{...).......0.......$... |
fce0 | f0 e4 0e 00 2b 00 00 00 15 e5 0e 00 29 00 00 00 41 e5 0e 00 35 00 00 00 6b e5 0e 00 2a 00 00 00 | ....+.......)...A...5...k...*... |
fd00 | a1 e5 0e 00 10 00 00 00 cc e5 0e 00 2b 00 00 00 dd e5 0e 00 55 00 00 00 09 e6 0e 00 3c 00 00 00 | ............+.......U.......<... |
fd20 | 5f e6 0e 00 90 00 00 00 9c e6 0e 00 1a 00 00 00 2d e7 0e 00 4c 00 00 00 48 e7 0e 00 1f 00 00 00 | _...............-...L...H....... |
fd40 | 95 e7 0e 00 71 00 00 00 b5 e7 0e 00 6b 00 00 00 27 e8 0e 00 5b 00 00 00 93 e8 0e 00 2c 00 00 00 | ....q.......k...'...[.......,... |
fd60 | ef e8 0e 00 4e 00 00 00 1c e9 0e 00 2a 00 00 00 6b e9 0e 00 a0 00 00 00 96 e9 0e 00 65 00 00 00 | ....N.......*...k...........e... |
fd80 | 37 ea 0e 00 27 01 00 00 9d ea 0e 00 d0 00 00 00 c5 eb 0e 00 d8 00 00 00 96 ec 0e 00 3f 00 00 00 | 7...'.......................?... |
fda0 | 6f ed 0e 00 38 00 00 00 af ed 0e 00 46 00 00 00 e8 ed 0e 00 40 00 00 00 2f ee 0e 00 53 00 00 00 | o...8.......F.......@.../...S... |
fdc0 | 70 ee 0e 00 45 00 00 00 c4 ee 0e 00 26 01 00 00 0a ef 0e 00 f1 00 00 00 31 f0 0e 00 48 00 00 00 | p...E.......&...........1...H... |
fde0 | 23 f1 0e 00 49 00 00 00 6c f1 0e 00 d0 00 00 00 b6 f1 0e 00 24 00 00 00 87 f2 0e 00 16 00 00 00 | #...I...l...........$........... |
fe00 | ac f2 0e 00 60 00 00 00 c3 f2 0e 00 50 00 00 00 24 f3 0e 00 27 00 00 00 75 f3 0e 00 18 00 00 00 | ....`.......P...$...'...u....... |
fe20 | 9d f3 0e 00 49 00 00 00 b6 f3 0e 00 52 00 00 00 00 f4 0e 00 58 00 00 00 53 f4 0e 00 3d 00 00 00 | ....I.......R.......X...S...=... |
fe40 | ac f4 0e 00 25 00 00 00 ea f4 0e 00 26 00 00 00 10 f5 0e 00 2a 00 00 00 37 f5 0e 00 23 00 00 00 | ....%.......&.......*...7...#... |
fe60 | 62 f5 0e 00 47 00 00 00 86 f5 0e 00 a4 00 00 00 ce f5 0e 00 aa 00 00 00 73 f6 0e 00 55 00 00 00 | b...G...................s...U... |
fe80 | 1e f7 0e 00 f4 00 00 00 74 f7 0e 00 44 00 00 00 69 f8 0e 00 61 00 00 00 ae f8 0e 00 54 00 00 00 | ........t...D...i...a.......T... |
fea0 | 10 f9 0e 00 3c 00 00 00 65 f9 0e 00 6d 00 00 00 a2 f9 0e 00 6a 00 00 00 10 fa 0e 00 43 00 00 00 | ....<...e...m.......j.......C... |
fec0 | 7b fa 0e 00 5c 00 00 00 bf fa 0e 00 34 00 00 00 1c fb 0e 00 a4 00 00 00 51 fb 0e 00 a8 00 00 00 | {...\.......4...........Q....... |
fee0 | f6 fb 0e 00 e8 00 00 00 9f fc 0e 00 ec 00 00 00 88 fd 0e 00 2c 00 00 00 75 fe 0e 00 34 00 00 00 | ....................,...u...4... |
ff00 | a2 fe 0e 00 23 00 00 00 d7 fe 0e 00 55 00 00 00 fb fe 0e 00 56 00 00 00 51 ff 0e 00 35 00 00 00 | ....#.......U.......V...Q...5... |
ff20 | a8 ff 0e 00 66 00 00 00 de ff 0e 00 7b 00 00 00 45 00 0f 00 41 00 00 00 c1 00 0f 00 42 00 00 00 | ....f.......{...E...A.......B... |
ff40 | 03 01 0f 00 41 00 00 00 46 01 0f 00 56 00 00 00 88 01 0f 00 35 00 00 00 df 01 0f 00 2b 00 00 00 | ....A...F...V.......5.......+... |
ff60 | 15 02 0f 00 2f 00 00 00 41 02 0f 00 44 00 00 00 71 02 0f 00 63 00 00 00 b6 02 0f 00 56 00 00 00 | ..../...A...D...q...c.......V... |
ff80 | 1a 03 0f 00 4d 00 00 00 71 03 0f 00 34 00 00 00 bf 03 0f 00 3f 00 00 00 f4 03 0f 00 79 01 00 00 | ....M...q...4.......?.......y... |
ffa0 | 34 04 0f 00 df 00 00 00 ae 05 0f 00 f0 00 00 00 8e 06 0f 00 54 00 00 00 7f 07 0f 00 32 00 00 00 | 4...................T.......2... |
ffc0 | d4 07 0f 00 0c 01 00 00 07 08 0f 00 59 00 00 00 14 09 0f 00 4e 00 00 00 6e 09 0f 00 26 01 00 00 | ............Y.......N...n...&... |
ffe0 | bd 09 0f 00 4a 00 00 00 e4 0a 0f 00 1a 00 00 00 2f 0b 0f 00 2f 00 00 00 4a 0b 0f 00 a4 00 00 00 | ....J.........../.../...J....... |
10000 | 7a 0b 0f 00 2a 00 00 00 1f 0c 0f 00 1d 01 00 00 4a 0c 0f 00 2d 00 00 00 68 0d 0f 00 af 00 00 00 | z...*...........J...-...h....... |
10020 | 96 0d 0f 00 63 00 00 00 46 0e 0f 00 ce 00 00 00 aa 0e 0f 00 53 00 00 00 79 0f 0f 00 45 00 00 00 | ....c...F...........S...y...E... |
10040 | cd 0f 0f 00 34 00 00 00 13 10 0f 00 7a 00 00 00 48 10 0f 00 32 00 00 00 c3 10 0f 00 27 00 00 00 | ....4.......z...H...2.......'... |
10060 | f6 10 0f 00 46 00 00 00 1e 11 0f 00 2e 00 00 00 65 11 0f 00 60 00 00 00 94 11 0f 00 27 00 00 00 | ....F...........e...`.......'... |
10080 | f5 11 0f 00 5b 00 00 00 1d 12 0f 00 78 00 00 00 79 12 0f 00 5f 00 00 00 f2 12 0f 00 1b 00 00 00 | ....[.......x...y..._........... |
100a0 | 52 13 0f 00 0c 00 00 00 6e 13 0f 00 b4 01 00 00 7b 13 0f 00 11 00 00 00 30 15 0f 00 12 00 00 00 | R.......n.......{.......0....... |
100c0 | 42 15 0f 00 ed 00 00 00 55 15 0f 00 17 00 00 00 43 16 0f 00 18 00 00 00 5b 16 0f 00 12 00 00 00 | B.......U.......C.......[....... |
100e0 | 74 16 0f 00 35 00 00 00 87 16 0f 00 26 00 00 00 bd 16 0f 00 2c 00 00 00 e4 16 0f 00 75 00 00 00 | t...5.......&.......,.......u... |
10100 | 11 17 0f 00 41 00 00 00 87 17 0f 00 41 00 00 00 c9 17 0f 00 6f 00 00 00 0b 18 0f 00 9f 00 00 00 | ....A.......A.......o........... |
10120 | 7b 18 0f 00 a1 00 00 00 1b 19 0f 00 7f 00 00 00 bd 19 0f 00 77 00 00 00 3d 1a 0f 00 08 00 00 00 | {...................w...=....... |
10140 | b5 1a 0f 00 0e 00 00 00 be 1a 0f 00 06 00 00 00 cd 1a 0f 00 15 00 00 00 d4 1a 0f 00 27 00 00 00 | ............................'... |
10160 | ea 1a 0f 00 ee 00 00 00 12 1b 0f 00 eb 00 00 00 01 1c 0f 00 04 00 00 00 ed 1c 0f 00 20 00 00 00 | ................................ |
10180 | f2 1c 0f 00 22 00 00 00 13 1d 0f 00 11 00 00 00 36 1d 0f 00 3a 00 00 00 48 1d 0f 00 20 00 00 00 | ...."...........6...:...H....... |
101a0 | 83 1d 0f 00 14 00 00 00 a4 1d 0f 00 55 00 00 00 b9 1d 0f 00 28 00 00 00 0f 1e 0f 00 88 00 00 00 | ............U.......(........... |
101c0 | 38 1e 0f 00 16 00 00 00 c1 1e 0f 00 16 00 00 00 d8 1e 0f 00 18 00 00 00 ef 1e 0f 00 26 00 00 00 | 8...........................&... |
101e0 | 08 1f 0f 00 1a 00 00 00 2f 1f 0f 00 27 00 00 00 4a 1f 0f 00 23 00 00 00 72 1f 0f 00 17 00 00 00 | ......../...'...J...#...r....... |
10200 | 96 1f 0f 00 21 00 00 00 ae 1f 0f 00 28 00 00 00 d0 1f 0f 00 49 00 00 00 f9 1f 0f 00 44 00 00 00 | ....!.......(.......I.......D... |
10220 | 43 20 0f 00 25 00 00 00 88 20 0f 00 12 00 00 00 ae 20 0f 00 3a 00 00 00 c1 20 0f 00 32 00 00 00 | C...%...............:.......2... |
10240 | fc 20 0f 00 3f 00 00 00 2f 21 0f 00 a2 00 00 00 6f 21 0f 00 21 00 00 00 12 22 0f 00 0d 00 00 00 | ....?.../!......o!..!...."...... |
10260 | 34 22 0f 00 4a 00 00 00 42 22 0f 00 2e 00 00 00 8d 22 0f 00 2e 00 00 00 bc 22 0f 00 2e 00 00 00 | 4"..J...B"......."......."...... |
10280 | eb 22 0f 00 1f 00 00 00 1a 23 0f 00 41 00 00 00 3a 23 0f 00 3c 00 00 00 7c 23 0f 00 5b 00 00 00 | .".......#..A...:#..<...|#..[... |
102a0 | b9 23 0f 00 30 00 00 00 15 24 0f 00 3f 00 00 00 46 24 0f 00 38 00 00 00 86 24 0f 00 52 00 00 00 | .#..0....$..?...F$..8....$..R... |
102c0 | bf 24 0f 00 39 00 00 00 12 25 0f 00 3b 00 00 00 4c 25 0f 00 4a 00 00 00 88 25 0f 00 2d 00 00 00 | .$..9....%..;...L%..J....%..-... |
102e0 | d3 25 0f 00 3d 00 00 00 01 26 0f 00 24 00 00 00 3f 26 0f 00 20 00 00 00 64 26 0f 00 29 00 00 00 | .%..=....&..$...?&......d&..)... |
10300 | 85 26 0f 00 2b 00 00 00 af 26 0f 00 38 00 00 00 db 26 0f 00 3a 00 00 00 14 27 0f 00 3a 00 00 00 | .&..+....&..8....&..:....'..:... |
10320 | 4f 27 0f 00 30 00 00 00 8a 27 0f 00 27 00 00 00 bb 27 0f 00 8d 00 00 00 e3 27 0f 00 8d 00 00 00 | O'..0....'..'....'.......'...... |
10340 | 71 28 0f 00 2f 00 00 00 ff 28 0f 00 2a 00 00 00 2f 29 0f 00 19 00 00 00 5a 29 0f 00 5e 00 00 00 | q(../....(..*.../)......Z)..^... |
10360 | 74 29 0f 00 23 00 00 00 d3 29 0f 00 37 00 00 00 f7 29 0f 00 20 00 00 00 2f 2a 0f 00 1c 00 00 00 | t)..#....)..7....)....../*...... |
10380 | 50 2a 0f 00 30 00 00 00 6d 2a 0f 00 27 00 00 00 9e 2a 0f 00 20 00 00 00 c6 2a 0f 00 25 00 00 00 | P*..0...m*..'....*.......*..%... |
103a0 | e7 2a 0f 00 dd 00 00 00 0d 2b 0f 00 da 00 00 00 eb 2b 0f 00 da 00 00 00 c6 2c 0f 00 0e 00 00 00 | .*.......+.......+.......,...... |
103c0 | a1 2d 0f 00 40 00 00 00 b0 2d 0f 00 23 00 00 00 f1 2d 0f 00 24 00 00 00 15 2e 0f 00 07 00 00 00 | .-..@....-..#....-..$........... |
103e0 | 3a 2e 0f 00 07 00 00 00 42 2e 0f 00 33 00 00 00 4a 2e 0f 00 33 00 00 00 7e 2e 0f 00 33 00 00 00 | :.......B...3...J...3...~...3... |
10400 | b2 2e 0f 00 33 00 00 00 e6 2e 0f 00 40 00 00 00 1a 2f 0f 00 51 00 00 00 5b 2f 0f 00 4f 00 00 00 | ....3.......@..../..Q...[/..O... |
10420 | ad 2f 0f 00 3d 00 00 00 fd 2f 0f 00 64 00 00 00 3b 30 0f 00 6f 00 00 00 a0 30 0f 00 cd 00 00 00 | ./..=..../..d...;0..o....0...... |
10440 | 10 31 0f 00 82 00 00 00 de 31 0f 00 8f 00 00 00 61 32 0f 00 e1 00 00 00 f1 32 0f 00 c3 00 00 00 | .1.......1......a2.......2...... |
10460 | d3 33 0f 00 8b 00 00 00 97 34 0f 00 19 00 00 00 23 35 0f 00 10 00 00 00 3d 35 0f 00 0c 00 00 00 | .3.......4......#5......=5...... |
10480 | 4e 35 0f 00 ac 00 00 00 5b 35 0f 00 e2 00 00 00 08 36 0f 00 14 00 00 00 eb 36 0f 00 c3 00 00 00 | N5......[5.......6.......6...... |
104a0 | 00 37 0f 00 95 00 00 00 c4 37 0f 00 13 01 00 00 5a 38 0f 00 31 00 00 00 6e 39 0f 00 0a 00 00 00 | .7.......7......Z8..1...n9...... |
104c0 | a0 39 0f 00 21 01 00 00 ab 39 0f 00 d8 00 00 00 cd 3a 0f 00 8b 00 00 00 a6 3b 0f 00 8c 00 00 00 | .9..!....9.......:.......;...... |
104e0 | 32 3c 0f 00 f8 00 00 00 bf 3c 0f 00 39 00 00 00 b8 3d 0f 00 49 00 00 00 f2 3d 0f 00 b6 00 00 00 | 2<.......<..9....=..I....=...... |
10500 | 3c 3e 0f 00 93 00 00 00 f3 3e 0f 00 80 00 00 00 87 3f 0f 00 79 00 00 00 08 40 0f 00 79 00 00 00 | <>.......>.......?..y....@..y... |
10520 | 82 40 0f 00 53 01 00 00 fc 40 0f 00 7f 00 00 00 50 42 0f 00 a9 00 00 00 d0 42 0f 00 b6 00 00 00 | .@..S....@......PB.......B...... |
10540 | 7a 43 0f 00 83 00 00 00 31 44 0f 00 86 00 00 00 b5 44 0f 00 0e 00 00 00 3c 45 0f 00 5d 00 00 00 | zC......1D.......D......<E..]... |
10560 | 4b 45 0f 00 36 00 00 00 a9 45 0f 00 10 00 00 00 e0 45 0f 00 0d 00 00 00 f1 45 0f 00 45 00 00 00 | KE..6....E.......E.......E..E... |
10580 | ff 45 0f 00 45 00 00 00 45 46 0f 00 19 00 00 00 8b 46 0f 00 22 00 00 00 a5 46 0f 00 1c 00 00 00 | .E..E...EF.......F.."....F...... |
105a0 | c8 46 0f 00 45 00 00 00 e5 46 0f 00 50 00 00 00 2b 47 0f 00 65 00 00 00 7c 47 0f 00 2f 00 00 00 | .F..E....F..P...+G..e...|G../... |
105c0 | e2 47 0f 00 60 00 00 00 12 48 0f 00 54 00 00 00 73 48 0f 00 55 00 00 00 c8 48 0f 00 48 00 00 00 | .G..`....H..T...sH..U....H..H... |
105e0 | 1e 49 0f 00 26 00 00 00 67 49 0f 00 26 00 00 00 8e 49 0f 00 b2 00 00 00 b5 49 0f 00 eb 00 00 00 | .I..&...gI..&....I.......I...... |
10600 | 68 4a 0f 00 75 00 00 00 54 4b 0f 00 77 00 00 00 ca 4b 0f 00 4d 00 00 00 42 4c 0f 00 e2 00 00 00 | hJ..u...TK..w....K..M...BL...... |
10620 | 90 4c 0f 00 78 00 00 00 73 4d 0f 00 29 01 00 00 ec 4d 0f 00 53 00 00 00 16 4f 0f 00 42 00 00 00 | .L..x...sM..)....M..S....O..B... |
10640 | 6a 4f 0f 00 8b 00 00 00 ad 4f 0f 00 1e 00 00 00 39 50 0f 00 56 00 00 00 58 50 0f 00 d2 00 00 00 | jO.......O......9P..V...XP...... |
10660 | af 50 0f 00 36 00 00 00 82 51 0f 00 ce 00 00 00 b9 51 0f 00 c1 00 00 00 88 52 0f 00 38 00 00 00 | .P..6....Q.......Q.......R..8... |
10680 | 4a 53 0f 00 57 00 00 00 83 53 0f 00 bd 00 00 00 db 53 0f 00 85 00 00 00 99 54 0f 00 4f 00 00 00 | JS..W....S.......S.......T..O... |
106a0 | 1f 55 0f 00 ba 01 00 00 6f 55 0f 00 b6 00 00 00 2a 57 0f 00 63 00 00 00 e1 57 0f 00 4c 00 00 00 | .U......oU......*W..c....W..L... |
106c0 | 45 58 0f 00 d5 00 00 00 92 58 0f 00 66 00 00 00 68 59 0f 00 45 01 00 00 cf 59 0f 00 57 00 00 00 | EX.......X..f...hY..E....Y..W... |
106e0 | 15 5b 0f 00 a4 00 00 00 6d 5b 0f 00 bc 00 00 00 12 5c 0f 00 65 00 00 00 cf 5c 0f 00 3f 00 00 00 | .[......m[.......\..e....\..?... |
10700 | 35 5d 0f 00 c0 01 00 00 75 5d 0f 00 72 00 00 00 36 5f 0f 00 74 00 00 00 a9 5f 0f 00 58 00 00 00 | 5]......u]..r...6_..t...._..X... |
10720 | 1e 60 0f 00 45 00 00 00 77 60 0f 00 41 00 00 00 bd 60 0f 00 52 00 00 00 ff 60 0f 00 81 00 00 00 | .`..E...w`..A....`..R....`...... |
10740 | 52 61 0f 00 75 00 00 00 d4 61 0f 00 30 00 00 00 4a 62 0f 00 31 00 00 00 7b 62 0f 00 7e 00 00 00 | Ra..u....a..0...Jb..1...{b..~... |
10760 | ad 62 0f 00 50 00 00 00 2c 63 0f 00 36 00 00 00 7d 63 0f 00 50 01 00 00 b4 63 0f 00 69 00 00 00 | .b..P...,c..6...}c..P....c..i... |
10780 | 05 65 0f 00 5d 00 00 00 6f 65 0f 00 8e 00 00 00 cd 65 0f 00 4a 00 00 00 5c 66 0f 00 57 00 00 00 | .e..]...oe.......e..J...\f..W... |
107a0 | a7 66 0f 00 6d 00 00 00 ff 66 0f 00 64 00 00 00 6d 67 0f 00 64 00 00 00 d2 67 0f 00 99 00 00 00 | .f..m....f..d...mg..d....g...... |
107c0 | 37 68 0f 00 26 00 00 00 d1 68 0f 00 ad 00 00 00 f8 68 0f 00 81 00 00 00 a6 69 0f 00 33 00 00 00 | 7h..&....h.......h.......i..3... |
107e0 | 28 6a 0f 00 c0 00 00 00 5c 6a 0f 00 90 00 00 00 1d 6b 0f 00 a2 00 00 00 ae 6b 0f 00 83 00 00 00 | (j......\j.......k.......k...... |
10800 | 51 6c 0f 00 41 00 00 00 d5 6c 0f 00 3a 00 00 00 17 6d 0f 00 4b 00 00 00 52 6d 0f 00 65 00 00 00 | Ql..A....l..:....m..K...Rm..e... |
10820 | 9e 6d 0f 00 06 00 00 00 04 6e 0f 00 05 00 00 00 0b 6e 0f 00 e3 01 00 00 11 6e 0f 00 1e 00 00 00 | .m.......n.......n.......n...... |
10840 | f5 6f 0f 00 1d 00 00 00 14 70 0f 00 3d 00 00 00 32 70 0f 00 4b 02 00 00 70 70 0f 00 5a 02 00 00 | .o.......p..=...2p..K...pp..Z... |
10860 | bc 72 0f 00 6d 00 00 00 17 75 0f 00 a8 00 00 00 85 75 0f 00 bf 00 00 00 2e 76 0f 00 b2 00 00 00 | .r..m....u.......u.......v...... |
10880 | ee 76 0f 00 06 00 00 00 a1 77 0f 00 4b 01 00 00 a8 77 0f 00 4c 01 00 00 f4 78 0f 00 17 00 00 00 | .v.......w..K....w..L....x...... |
108a0 | 41 7a 0f 00 0b 00 00 00 59 7a 0f 00 0d 00 00 00 65 7a 0f 00 55 00 00 00 73 7a 0f 00 0f 00 00 00 | Az......Yz......ez..U...sz...... |
108c0 | c9 7a 0f 00 0f 00 00 00 d9 7a 0f 00 5c 00 00 00 e9 7a 0f 00 ff 02 00 00 46 7b 0f 00 b1 00 00 00 | .z.......z..\....z......F{...... |
108e0 | 46 7e 0f 00 37 00 00 00 f8 7e 0f 00 06 00 00 00 30 7f 0f 00 12 00 00 00 37 7f 0f 00 9a 00 00 00 | F~..7....~......0.......7....... |
10900 | 4a 7f 0f 00 08 00 00 00 e5 7f 0f 00 38 00 00 00 ee 7f 0f 00 11 00 00 00 27 80 0f 00 1c 00 00 00 | J...........8...........'....... |
10920 | 39 80 0f 00 12 00 00 00 56 80 0f 00 1a 00 00 00 69 80 0f 00 49 00 00 00 84 80 0f 00 1e 00 00 00 | 9.......V.......i...I........... |
10940 | ce 80 0f 00 2f 00 00 00 ed 80 0f 00 73 00 00 00 1d 81 0f 00 ae 00 00 00 91 81 0f 00 af 00 00 00 | ..../.......s................... |
10960 | 40 82 0f 00 d0 00 00 00 f0 82 0f 00 0b 00 00 00 c1 83 0f 00 08 00 00 00 cd 83 0f 00 14 00 00 00 | @............................... |
10980 | d6 83 0f 00 4a 00 00 00 eb 83 0f 00 60 00 00 00 36 84 0f 00 06 00 00 00 97 84 0f 00 06 00 00 00 | ....J.......`...6............... |
109a0 | 9e 84 0f 00 da 00 00 00 a5 84 0f 00 98 00 00 00 80 85 0f 00 bc 00 00 00 19 86 0f 00 06 00 00 00 | ................................ |
109c0 | d6 86 0f 00 0a 00 00 00 dd 86 0f 00 14 00 00 00 e8 86 0f 00 1b 00 00 00 fd 86 0f 00 0c 00 00 00 | ................................ |
109e0 | 19 87 0f 00 2e 00 00 00 26 87 0f 00 1d 00 00 00 55 87 0f 00 0e 00 00 00 73 87 0f 00 ff 01 00 00 | ........&.......U.......s....... |
10a00 | 82 87 0f 00 26 00 00 00 82 89 0f 00 0e 00 00 00 a9 89 0f 00 21 00 00 00 b8 89 0f 00 98 00 00 00 | ....&...............!........... |
10a20 | da 89 0f 00 07 00 00 00 73 8a 0f 00 03 00 00 00 7b 8a 0f 00 91 00 00 00 7f 8a 0f 00 0b 00 00 00 | ........s.......{............... |
10a40 | 11 8b 0f 00 6a 00 00 00 1d 8b 0f 00 0e 00 00 00 88 8b 0f 00 08 00 00 00 97 8b 0f 00 2b 00 00 00 | ....j.......................+... |
10a60 | a0 8b 0f 00 29 00 00 00 cc 8b 0f 00 35 00 00 00 f6 8b 0f 00 54 00 00 00 2c 8c 0f 00 5c 00 00 00 | ....).......5.......T...,...\... |
10a80 | 81 8c 0f 00 7b 00 00 00 de 8c 0f 00 56 00 00 00 5a 8d 0f 00 25 00 00 00 b1 8d 0f 00 3a 00 00 00 | ....{.......V...Z...%.......:... |
10aa0 | d7 8d 0f 00 3a 00 00 00 12 8e 0f 00 0d 00 00 00 4d 8e 0f 00 64 00 00 00 5b 8e 0f 00 64 00 00 00 | ....:...........M...d...[...d... |
10ac0 | c0 8e 0f 00 67 00 00 00 25 8f 0f 00 67 00 00 00 8d 8f 0f 00 1f 00 00 00 f5 8f 0f 00 0c 00 00 00 | ....g...%...g................... |
10ae0 | 15 90 0f 00 16 00 00 00 22 90 0f 00 44 01 00 00 39 90 0f 00 41 00 00 00 7e 91 0f 00 47 00 00 00 | ........"...D...9...A...~...G... |
10b00 | c0 91 0f 00 d3 00 00 00 08 92 0f 00 3a 02 00 00 dc 92 0f 00 d7 00 00 00 17 95 0f 00 93 00 00 00 | ............:................... |
10b20 | ef 95 0f 00 4e 01 00 00 83 96 0f 00 30 00 00 00 d2 97 0f 00 c8 00 00 00 03 98 0f 00 ab 00 00 00 | ....N.......0................... |
10b40 | cc 98 0f 00 31 00 00 00 78 99 0f 00 68 01 00 00 aa 99 0f 00 39 00 00 00 13 9b 0f 00 3b 01 00 00 | ....1...x...h.......9.......;... |
10b60 | 4d 9b 0f 00 b2 00 00 00 89 9c 0f 00 27 00 00 00 3c 9d 0f 00 44 00 00 00 64 9d 0f 00 d2 00 00 00 | M...........'...<...D...d....... |
10b80 | a9 9d 0f 00 73 00 00 00 7c 9e 0f 00 d7 00 00 00 f0 9e 0f 00 9f 00 00 00 c8 9f 0f 00 af 00 00 00 | ....s...|....................... |
10ba0 | 68 a0 0f 00 cc 00 00 00 18 a1 0f 00 4f 00 00 00 e5 a1 0f 00 3f 01 00 00 35 a2 0f 00 c1 00 00 00 | h...........O.......?...5....... |
10bc0 | 75 a3 0f 00 59 00 00 00 37 a4 0f 00 21 01 00 00 91 a4 0f 00 59 00 00 00 b3 a5 0f 00 29 01 00 00 | u...Y...7...!.......Y.......)... |
10be0 | 0d a6 0f 00 6f 00 00 00 37 a7 0f 00 8f 00 00 00 a7 a7 0f 00 8d 00 00 00 37 a8 0f 00 9e 00 00 00 | ....o...7...............7....... |
10c00 | c5 a8 0f 00 6c 00 00 00 64 a9 0f 00 3a 00 00 00 d1 a9 0f 00 95 00 00 00 0c aa 0f 00 68 00 00 00 | ....l...d...:...............h... |
10c20 | a2 aa 0f 00 58 00 00 00 0b ab 0f 00 15 01 00 00 64 ab 0f 00 96 00 00 00 7a ac 0f 00 52 00 00 00 | ....X...........d.......z...R... |
10c40 | 11 ad 0f 00 52 00 00 00 64 ad 0f 00 99 00 00 00 b7 ad 0f 00 96 00 00 00 51 ae 0f 00 94 00 00 00 | ....R...d...............Q....... |
10c60 | e8 ae 0f 00 9e 00 00 00 7d af 0f 00 79 00 00 00 1c b0 0f 00 50 00 00 00 96 b0 0f 00 9e 00 00 00 | ........}...y.......P........... |
10c80 | e7 b0 0f 00 13 00 00 00 86 b1 0f 00 3a 00 00 00 9a b1 0f 00 98 01 00 00 d5 b1 0f 00 2d 00 00 00 | ............:...............-... |
10ca0 | 6e b3 0f 00 39 00 00 00 9c b3 0f 00 e0 00 00 00 d6 b3 0f 00 26 00 00 00 b7 b4 0f 00 b5 00 00 00 | n...9...............&........... |
10cc0 | de b4 0f 00 70 01 00 00 94 b5 0f 00 1b 00 00 00 05 b7 0f 00 bb 00 00 00 21 b7 0f 00 bb 00 00 00 | ....p...................!....... |
10ce0 | dd b7 0f 00 fd 00 00 00 99 b8 0f 00 85 00 00 00 97 b9 0f 00 b5 00 00 00 1d ba 0f 00 5b 00 00 00 | ............................[... |
10d00 | d3 ba 0f 00 83 00 00 00 2f bb 0f 00 4b 00 00 00 b3 bb 0f 00 59 01 00 00 ff bb 0f 00 27 00 00 00 | ......../...K.......Y.......'... |
10d20 | 59 bd 0f 00 f8 00 00 00 81 bd 0f 00 28 02 00 00 7a be 0f 00 ff 00 00 00 a3 c0 0f 00 61 00 00 00 | Y...........(...z...........a... |
10d40 | a3 c1 0f 00 5a 00 00 00 05 c2 0f 00 5c 00 00 00 60 c2 0f 00 a9 00 00 00 bd c2 0f 00 b6 00 00 00 | ....Z.......\...`............... |
10d60 | 67 c3 0f 00 5e 00 00 00 1e c4 0f 00 d3 00 00 00 7d c4 0f 00 24 00 00 00 51 c5 0f 00 14 00 00 00 | g...^...........}...$...Q....... |
10d80 | 76 c5 0f 00 1a 00 00 00 8b c5 0f 00 bc 00 00 00 a6 c5 0f 00 68 00 00 00 63 c6 0f 00 1f 00 00 00 | v...................h...c....... |
10da0 | cc c6 0f 00 24 00 00 00 ec c6 0f 00 bd 00 00 00 11 c7 0f 00 1f 00 00 00 cf c7 0f 00 17 00 00 00 | ....$........................... |
10dc0 | ef c7 0f 00 21 00 00 00 07 c8 0f 00 21 00 00 00 29 c8 0f 00 22 00 00 00 4b c8 0f 00 40 00 00 00 | ....!.......!...)..."...K...@... |
10de0 | 6e c8 0f 00 1a 00 00 00 af c8 0f 00 45 00 00 00 ca c8 0f 00 17 01 00 00 10 c9 0f 00 54 00 00 00 | n...........E...............T... |
10e00 | 28 ca 0f 00 c0 01 00 00 7d ca 0f 00 d2 01 00 00 3e cc 0f 00 a2 00 00 00 11 ce 0f 00 d1 00 00 00 | (.......}.......>............... |
10e20 | b4 ce 0f 00 e4 00 00 00 86 cf 0f 00 bf 00 00 00 6b d0 0f 00 dc 00 00 00 2b d1 0f 00 4e 01 00 00 | ................k.......+...N... |
10e40 | 08 d2 0f 00 45 00 00 00 57 d3 0f 00 34 00 00 00 9d d3 0f 00 b4 00 00 00 d2 d3 0f 00 f9 00 00 00 | ....E...W...4................... |
10e60 | 87 d4 0f 00 c5 00 00 00 81 d5 0f 00 27 00 00 00 47 d6 0f 00 b7 00 00 00 6f d6 0f 00 ae 00 00 00 | ............'...G.......o....... |
10e80 | 27 d7 0f 00 52 00 00 00 d6 d7 0f 00 ab 00 00 00 29 d8 0f 00 c8 00 00 00 d5 d8 0f 00 5b 00 00 00 | '...R...........)...........[... |
10ea0 | 9e d9 0f 00 6d 00 00 00 fa d9 0f 00 ab 00 00 00 68 da 0f 00 30 00 00 00 14 db 0f 00 68 00 00 00 | ....m...........h...0.......h... |
10ec0 | 45 db 0f 00 53 00 00 00 ae db 0f 00 33 00 00 00 02 dc 0f 00 2d 00 00 00 36 dc 0f 00 4e 00 00 00 | E...S.......3.......-...6...N... |
10ee0 | 64 dc 0f 00 70 00 00 00 b3 dc 0f 00 6c 00 00 00 24 dd 0f 00 c5 00 00 00 91 dd 0f 00 b7 00 00 00 | d...p.......l...$............... |
10f00 | 57 de 0f 00 38 00 00 00 0f df 0f 00 39 00 00 00 48 df 0f 00 21 01 00 00 82 df 0f 00 dd 00 00 00 | W...8.......9...H...!........... |
10f20 | a4 e0 0f 00 1e 01 00 00 82 e1 0f 00 5f 01 00 00 a1 e2 0f 00 dc 00 00 00 01 e4 0f 00 c8 00 00 00 | ............_................... |
10f40 | de e4 0f 00 36 00 00 00 a7 e5 0f 00 6e 00 00 00 de e5 0f 00 91 00 00 00 4d e6 0f 00 60 00 00 00 | ....6.......n...........M...`... |
10f60 | df e6 0f 00 b0 00 00 00 40 e7 0f 00 6e 00 00 00 f1 e7 0f 00 6b 00 00 00 60 e8 0f 00 35 00 00 00 | ........@...n.......k...`...5... |
10f80 | cc e8 0f 00 33 00 00 00 02 e9 0f 00 f1 00 00 00 36 e9 0f 00 2b 00 00 00 28 ea 0f 00 38 00 00 00 | ....3...........6...+...(...8... |
10fa0 | 54 ea 0f 00 3a 01 00 00 8d ea 0f 00 4b 00 00 00 c8 eb 0f 00 53 01 00 00 14 ec 0f 00 92 01 00 00 | T...:.......K.......S........... |
10fc0 | 68 ed 0f 00 a1 00 00 00 fb ee 0f 00 28 00 00 00 9d ef 0f 00 35 01 00 00 c6 ef 0f 00 9a 00 00 00 | h...........(.......5........... |
10fe0 | fc f0 0f 00 10 01 00 00 97 f1 0f 00 2b 00 00 00 a8 f2 0f 00 a6 00 00 00 d4 f2 0f 00 2e 00 00 00 | ............+................... |
11000 | 7b f3 0f 00 3f 00 00 00 aa f3 0f 00 ec 00 00 00 ea f3 0f 00 ee 00 00 00 d7 f4 0f 00 7c 00 00 00 | {...?.......................|... |
11020 | c6 f5 0f 00 9a 01 00 00 43 f6 0f 00 42 00 00 00 de f7 0f 00 82 00 00 00 21 f8 0f 00 9b 00 00 00 | ........C...B...........!....... |
11040 | a4 f8 0f 00 31 00 00 00 40 f9 0f 00 b4 00 00 00 72 f9 0f 00 63 00 00 00 27 fa 0f 00 33 00 00 00 | ....1...@.......r...c...'...3... |
11060 | 8b fa 0f 00 3a 00 00 00 bf fa 0f 00 5e 00 00 00 fa fa 0f 00 25 01 00 00 59 fb 0f 00 42 00 00 00 | ....:.......^.......%...Y...B... |
11080 | 7f fc 0f 00 5c 00 00 00 c2 fc 0f 00 56 00 00 00 1f fd 0f 00 fe 00 00 00 76 fd 0f 00 79 00 00 00 | ....\.......V...........v...y... |
110a0 | 75 fe 0f 00 55 00 00 00 ef fe 0f 00 58 00 00 00 45 ff 0f 00 cd 01 00 00 9e ff 0f 00 3d 00 00 00 | u...U.......X...E...........=... |
110c0 | 6c 01 10 00 e8 01 00 00 aa 01 10 00 40 00 00 00 93 03 10 00 7f 00 00 00 d4 03 10 00 6c 00 00 00 | l...........@...............l... |
110e0 | 54 04 10 00 6e 00 00 00 c1 04 10 00 e8 00 00 00 30 05 10 00 a5 00 00 00 19 06 10 00 6b 00 00 00 | T...n...........0...........k... |
11100 | bf 06 10 00 69 01 00 00 2b 07 10 00 34 00 00 00 95 08 10 00 79 00 00 00 ca 08 10 00 3d 00 00 00 | ....i...+...4.......y.......=... |
11120 | 44 09 10 00 54 00 00 00 82 09 10 00 4c 00 00 00 d7 09 10 00 bc 00 00 00 24 0a 10 00 ea 00 00 00 | D...T.......L...........$....... |
11140 | e1 0a 10 00 6d 00 00 00 cc 0b 10 00 e6 00 00 00 3a 0c 10 00 36 00 00 00 21 0d 10 00 5b 00 00 00 | ....m...........:...6...!...[... |
11160 | 58 0d 10 00 6a 00 00 00 b4 0d 10 00 82 00 00 00 1f 0e 10 00 73 00 00 00 a2 0e 10 00 49 00 00 00 | X...j...............s.......I... |
11180 | 16 0f 10 00 29 00 00 00 60 0f 10 00 2a 01 00 00 8a 0f 10 00 47 00 00 00 b5 10 10 00 46 00 00 00 | ....)...`...*.......G.......F... |
111a0 | fd 10 10 00 49 00 00 00 44 11 10 00 49 00 00 00 8e 11 10 00 22 00 00 00 d8 11 10 00 54 00 00 00 | ....I...D...I.......".......T... |
111c0 | fb 11 10 00 65 00 00 00 50 12 10 00 32 00 00 00 b6 12 10 00 9d 00 00 00 e9 12 10 00 77 00 00 00 | ....e...P...2...............w... |
111e0 | 87 13 10 00 2c 00 00 00 ff 13 10 00 42 00 00 00 2c 14 10 00 2b 00 00 00 6f 14 10 00 86 01 00 00 | ....,.......B...,...+...o....... |
11200 | 9b 14 10 00 c4 00 00 00 22 16 10 00 c6 00 00 00 e7 16 10 00 80 00 00 00 ae 17 10 00 49 01 00 00 | ........"...................I... |
11220 | 2f 18 10 00 90 00 00 00 79 19 10 00 38 00 00 00 0a 1a 10 00 9f 00 00 00 43 1a 10 00 1c 01 00 00 | /.......y...8...........C....... |
11240 | e3 1a 10 00 d5 00 00 00 00 1c 10 00 38 00 00 00 d6 1c 10 00 28 00 00 00 0f 1d 10 00 5c 00 00 00 | ............8.......(.......\... |
11260 | 38 1d 10 00 29 00 00 00 95 1d 10 00 71 00 00 00 bf 1d 10 00 41 00 00 00 31 1e 10 00 0f 01 00 00 | 8...).......q.......A...1....... |
11280 | 73 1e 10 00 fc 00 00 00 83 1f 10 00 89 00 00 00 80 20 10 00 25 00 00 00 0a 21 10 00 5f 00 00 00 | s...................%....!.._... |
112a0 | 30 21 10 00 ec 00 00 00 90 21 10 00 4e 00 00 00 7d 22 10 00 84 00 00 00 cc 22 10 00 55 00 00 00 | 0!.......!..N...}"......."..U... |
112c0 | 51 23 10 00 12 01 00 00 a7 23 10 00 75 00 00 00 ba 24 10 00 65 00 00 00 30 25 10 00 e2 00 00 00 | Q#.......#..u....$..e...0%...... |
112e0 | 96 25 10 00 2f 00 00 00 79 26 10 00 29 00 00 00 a9 26 10 00 a0 01 00 00 d3 26 10 00 ff 00 00 00 | .%../...y&..)....&.......&...... |
11300 | 74 28 10 00 db 00 00 00 74 29 10 00 36 00 00 00 50 2a 10 00 40 00 00 00 87 2a 10 00 1f 00 00 00 | t(......t)..6...P*..@....*...... |
11320 | c8 2a 10 00 40 00 00 00 e8 2a 10 00 4d 00 00 00 29 2b 10 00 4c 00 00 00 77 2b 10 00 92 00 00 00 | .*..@....*..M...)+..L...w+...... |
11340 | c4 2b 10 00 43 00 00 00 57 2c 10 00 af 00 00 00 9b 2c 10 00 65 00 00 00 4b 2d 10 00 a8 00 00 00 | .+..C...W,.......,..e...K-...... |
11360 | b1 2d 10 00 38 00 00 00 5a 2e 10 00 3e 01 00 00 93 2e 10 00 3c 00 00 00 d2 2f 10 00 90 00 00 00 | .-..8...Z...>.......<..../...... |
11380 | 0f 30 10 00 58 00 00 00 a0 30 10 00 95 00 00 00 f9 30 10 00 50 00 00 00 8f 31 10 00 64 00 00 00 | .0..X....0.......0..P....1..d... |
113a0 | e0 31 10 00 50 00 00 00 45 32 10 00 6d 00 00 00 96 32 10 00 3a 00 00 00 04 33 10 00 29 00 00 00 | .1..P...E2..m....2..:....3..)... |
113c0 | 3f 33 10 00 6d 00 00 00 69 33 10 00 c0 00 00 00 d7 33 10 00 b8 01 00 00 98 34 10 00 51 00 00 00 | ?3..m...i3.......3.......4..Q... |
113e0 | 51 36 10 00 21 00 00 00 a3 36 10 00 25 00 00 00 c5 36 10 00 71 00 00 00 eb 36 10 00 24 00 00 00 | Q6..!....6..%....6..q....6..$... |
11400 | 5d 37 10 00 bc 01 00 00 82 37 10 00 55 00 00 00 3f 39 10 00 a9 00 00 00 95 39 10 00 4c 00 00 00 | ]7.......7..U...?9.......9..L... |
11420 | 3f 3a 10 00 ee 00 00 00 8c 3a 10 00 43 00 00 00 7b 3b 10 00 39 00 00 00 bf 3b 10 00 a9 00 00 00 | ?:.......:..C...{;..9....;...... |
11440 | f9 3b 10 00 50 00 00 00 a3 3c 10 00 53 01 00 00 f4 3c 10 00 46 00 00 00 48 3e 10 00 44 00 00 00 | .;..P....<..S....<..F...H>..D... |
11460 | 8f 3e 10 00 43 00 00 00 d4 3e 10 00 de 00 00 00 18 3f 10 00 83 00 00 00 f7 3f 10 00 83 00 00 00 | .>..C....>.......?.......?...... |
11480 | 7b 40 10 00 39 01 00 00 ff 40 10 00 a0 00 00 00 39 42 10 00 d1 00 00 00 da 42 10 00 61 00 00 00 | {@..9....@......9B.......B..a... |
114a0 | ac 43 10 00 b4 00 00 00 0e 44 10 00 b7 00 00 00 c3 44 10 00 b6 00 00 00 7b 45 10 00 bb 00 00 00 | .C.......D.......D......{E...... |
114c0 | 32 46 10 00 a1 00 00 00 ee 46 10 00 5c 00 00 00 90 47 10 00 58 00 00 00 ed 47 10 00 5c 00 00 00 | 2F.......F..\....G..X....G..\... |
114e0 | 46 48 10 00 58 00 00 00 a3 48 10 00 71 00 00 00 fc 48 10 00 5e 00 00 00 6e 49 10 00 21 01 00 00 | FH..X....H..q....H..^...nI..!... |
11500 | cd 49 10 00 13 01 00 00 ef 4a 10 00 12 01 00 00 03 4c 10 00 09 01 00 00 16 4d 10 00 40 00 00 00 | .I.......J.......L.......M..@... |
11520 | 20 4e 10 00 a3 00 00 00 61 4e 10 00 a3 00 00 00 05 4f 10 00 9f 00 00 00 a9 4f 10 00 9f 00 00 00 | .N......aN.......O.......O...... |
11540 | 49 50 10 00 bb 00 00 00 e9 50 10 00 b4 00 00 00 a5 51 10 00 54 00 00 00 5a 52 10 00 bc 00 00 00 | IP.......P.......Q..T...ZR...... |
11560 | af 52 10 00 56 00 00 00 6c 53 10 00 be 00 00 00 c3 53 10 00 4e 00 00 00 82 54 10 00 cf 01 00 00 | .R..V...lS.......S..N....T...... |
11580 | d1 54 10 00 29 01 00 00 a1 56 10 00 46 00 00 00 cb 57 10 00 7e 00 00 00 12 58 10 00 3c 00 00 00 | .T..)....V..F....W..~....X..<... |
115a0 | 91 58 10 00 db 00 00 00 ce 58 10 00 42 00 00 00 aa 59 10 00 4e 00 00 00 ed 59 10 00 4e 00 00 00 | .X.......X..B....Y..N....Y..N... |
115c0 | 3c 5a 10 00 49 00 00 00 8b 5a 10 00 49 00 00 00 d5 5a 10 00 43 00 00 00 1f 5b 10 00 4b 00 00 00 | <Z..I....Z..I....Z..C....[..K... |
115e0 | 63 5b 10 00 64 00 00 00 af 5b 10 00 46 00 00 00 14 5c 10 00 84 00 00 00 5b 5c 10 00 7c 00 00 00 | c[..d....[..F....\......[\..|... |
11600 | e0 5c 10 00 86 00 00 00 5d 5d 10 00 2f 00 00 00 e4 5d 10 00 79 00 00 00 14 5e 10 00 76 00 00 00 | .\......]]../....]..y....^..v... |
11620 | 8e 5e 10 00 81 00 00 00 05 5f 10 00 46 01 00 00 87 5f 10 00 71 00 00 00 ce 60 10 00 66 00 00 00 | .^......._..F...._..q....`..f... |
11640 | 40 61 10 00 3f 00 00 00 a7 61 10 00 88 00 00 00 e7 61 10 00 da 00 00 00 70 62 10 00 19 00 00 00 | @a..?....a.......a......pb...... |
11660 | 4b 63 10 00 90 01 00 00 65 63 10 00 a5 00 00 00 f6 64 10 00 43 00 00 00 9c 65 10 00 2a 00 00 00 | Kc......ec.......d..C....e..*... |
11680 | e0 65 10 00 4c 00 00 00 0b 66 10 00 3a 00 00 00 58 66 10 00 4e 00 00 00 93 66 10 00 b0 00 00 00 | .e..L....f..:...Xf..N....f...... |
116a0 | e2 66 10 00 2a 00 00 00 93 67 10 00 21 00 00 00 be 67 10 00 51 00 00 00 e0 67 10 00 45 00 00 00 | .f..*....g..!....g..Q....g..E... |
116c0 | 32 68 10 00 5f 00 00 00 78 68 10 00 37 00 00 00 d8 68 10 00 41 00 00 00 10 69 10 00 44 00 00 00 | 2h.._...xh..7....h..A....i..D... |
116e0 | 52 69 10 00 6a 00 00 00 97 69 10 00 3c 00 00 00 02 6a 10 00 56 00 00 00 3f 6a 10 00 4a 00 00 00 | Ri..j....i..<....j..V...?j..J... |
11700 | 96 6a 10 00 ee 00 00 00 e1 6a 10 00 47 00 00 00 d0 6b 10 00 7a 00 00 00 18 6c 10 00 d2 00 00 00 | .j.......j..G....k..z....l...... |
11720 | 93 6c 10 00 5f 00 00 00 66 6d 10 00 d5 00 00 00 c6 6d 10 00 39 00 00 00 9c 6e 10 00 70 00 00 00 | .l.._...fm.......m..9....n..p... |
11740 | d6 6e 10 00 5d 00 00 00 47 6f 10 00 55 00 00 00 a5 6f 10 00 2b 00 00 00 fb 6f 10 00 38 00 00 00 | .n..]...Go..U....o..+....o..8... |
11760 | 27 70 10 00 46 00 00 00 60 70 10 00 4c 00 00 00 a7 70 10 00 62 00 00 00 f4 70 10 00 55 01 00 00 | 'p..F...`p..L....p..b....p..U... |
11780 | 57 71 10 00 c0 00 00 00 ad 72 10 00 b6 00 00 00 6e 73 10 00 8d 00 00 00 25 74 10 00 d5 00 00 00 | Wq.......r......ns......%t...... |
117a0 | b3 74 10 00 7e 00 00 00 89 75 10 00 a4 00 00 00 08 76 10 00 a6 00 00 00 ad 76 10 00 c7 01 00 00 | .t..~....u.......v.......v...... |
117c0 | 54 77 10 00 32 01 00 00 1c 79 10 00 a8 00 00 00 4f 7a 10 00 79 00 00 00 f8 7a 10 00 33 00 00 00 | Tw..2....y......Oz..y....z..3... |
117e0 | 72 7b 10 00 90 00 00 00 a6 7b 10 00 b0 00 00 00 37 7c 10 00 63 00 00 00 e8 7c 10 00 b3 00 00 00 | r{.......{......7|..c....|...... |
11800 | 4c 7d 10 00 d6 00 00 00 00 7e 10 00 2c 00 00 00 d7 7e 10 00 52 00 00 00 04 7f 10 00 6e 00 00 00 | L}.......~..,....~..R.......n... |
11820 | 57 7f 10 00 4d 01 00 00 c6 7f 10 00 3b 00 00 00 14 81 10 00 ad 00 00 00 50 81 10 00 7b 02 00 00 | W...M.......;...........P...{... |
11840 | fe 81 10 00 54 01 00 00 7a 84 10 00 53 00 00 00 cf 85 10 00 4b 00 00 00 23 86 10 00 04 01 00 00 | ....T...z...S.......K...#....... |
11860 | 6f 86 10 00 eb 00 00 00 74 87 10 00 c8 00 00 00 60 88 10 00 c8 00 00 00 29 89 10 00 b6 00 00 00 | o.......t.......`.......)....... |
11880 | f2 89 10 00 bb 00 00 00 a9 8a 10 00 60 00 00 00 65 8b 10 00 b5 00 00 00 c6 8b 10 00 b9 00 00 00 | ............`...e............... |
118a0 | 7c 8c 10 00 9b 00 00 00 36 8d 10 00 0a 01 00 00 d2 8d 10 00 01 01 00 00 dd 8e 10 00 38 00 00 00 | |.......6...................8... |
118c0 | df 8f 10 00 3b 00 00 00 18 90 10 00 45 00 00 00 54 90 10 00 2c 00 00 00 9a 90 10 00 70 00 00 00 | ....;.......E...T...,.......p... |
118e0 | c7 90 10 00 4e 00 00 00 38 91 10 00 7c 01 00 00 87 91 10 00 71 01 00 00 04 93 10 00 90 00 00 00 | ....N...8...|.......q........... |
11900 | 76 94 10 00 4b 00 00 00 07 95 10 00 11 01 00 00 53 95 10 00 7b 00 00 00 65 96 10 00 58 00 00 00 | v...K...........S...{...e...X... |
11920 | e1 96 10 00 a9 00 00 00 3a 97 10 00 72 00 00 00 e4 97 10 00 6c 00 00 00 57 98 10 00 60 00 00 00 | ........:...r.......l...W...`... |
11940 | c4 98 10 00 17 01 00 00 25 99 10 00 ff 00 00 00 3d 9a 10 00 44 00 00 00 3d 9b 10 00 87 00 00 00 | ........%.......=...D...=....... |
11960 | 82 9b 10 00 70 00 00 00 0a 9c 10 00 87 00 00 00 7b 9c 10 00 65 00 00 00 03 9d 10 00 6e 00 00 00 | ....p...........{...e.......n... |
11980 | 69 9d 10 00 64 00 00 00 d8 9d 10 00 59 02 00 00 3d 9e 10 00 88 00 00 00 97 a0 10 00 25 00 00 00 | i...d.......Y...=...........%... |
119a0 | 20 a1 10 00 88 00 00 00 46 a1 10 00 a5 00 00 00 cf a1 10 00 57 01 00 00 75 a2 10 00 32 01 00 00 | ........F...........W...u...2... |
119c0 | cd a3 10 00 49 01 00 00 00 a5 10 00 51 01 00 00 4a a6 10 00 fb 00 00 00 9c a7 10 00 28 00 00 00 | ....I.......Q...J...........(... |
119e0 | 98 a8 10 00 95 00 00 00 c1 a8 10 00 af 00 00 00 57 a9 10 00 af 00 00 00 07 aa 10 00 76 00 00 00 | ................W...........v... |
11a00 | b7 aa 10 00 a6 00 00 00 2e ab 10 00 84 01 00 00 d5 ab 10 00 6a 00 00 00 5a ad 10 00 b9 00 00 00 | ....................j...Z....... |
11a20 | c5 ad 10 00 0f 01 00 00 7f ae 10 00 36 00 00 00 8f af 10 00 a5 00 00 00 c6 af 10 00 a7 00 00 00 | ............6................... |
11a40 | 6c b0 10 00 7b 00 00 00 14 b1 10 00 67 00 00 00 90 b1 10 00 32 00 00 00 f8 b1 10 00 fe 00 00 00 | l...{.......g.......2........... |
11a60 | 2b b2 10 00 9d 00 00 00 2a b3 10 00 bb 00 00 00 c8 b3 10 00 77 00 00 00 84 b4 10 00 bf 00 00 00 | +.......*...........w........... |
11a80 | fc b4 10 00 c7 00 00 00 bc b5 10 00 cc 00 00 00 84 b6 10 00 d1 00 00 00 51 b7 10 00 2d 04 00 00 | ........................Q...-... |
11aa0 | 23 b8 10 00 5d 00 00 00 51 bc 10 00 e3 00 00 00 af bc 10 00 cf 00 00 00 93 bd 10 00 07 01 00 00 | #...]...Q....................... |
11ac0 | 63 be 10 00 10 01 00 00 6b bf 10 00 9c 00 00 00 7c c0 10 00 8a 00 00 00 19 c1 10 00 97 00 00 00 | c.......k.......|............... |
11ae0 | a4 c1 10 00 40 00 00 00 3c c2 10 00 f0 00 00 00 7d c2 10 00 0b 01 00 00 6e c3 10 00 37 01 00 00 | ....@...<.......}.......n...7... |
11b00 | 7a c4 10 00 75 01 00 00 b2 c5 10 00 97 01 00 00 28 c7 10 00 f0 00 00 00 c0 c8 10 00 01 01 00 00 | z...u...........(............... |
11b20 | b1 c9 10 00 aa 00 00 00 b3 ca 10 00 69 00 00 00 5e cb 10 00 6b 00 00 00 c8 cb 10 00 df 00 00 00 | ............i...^...k........... |
11b40 | 34 cc 10 00 44 00 00 00 14 cd 10 00 ec 00 00 00 59 cd 10 00 86 00 00 00 46 ce 10 00 d5 00 00 00 | 4...D...........Y.......F....... |
11b60 | cd ce 10 00 b9 00 00 00 a3 cf 10 00 a6 00 00 00 5d d0 10 00 c8 00 00 00 04 d1 10 00 71 00 00 00 | ................]...........q... |
11b80 | cd d1 10 00 2c 01 00 00 3f d2 10 00 84 00 00 00 6c d3 10 00 00 01 00 00 f1 d3 10 00 e5 00 00 00 | ....,...?.......l............... |
11ba0 | f2 d4 10 00 2d 01 00 00 d8 d5 10 00 12 01 00 00 06 d7 10 00 f2 00 00 00 19 d8 10 00 a4 00 00 00 | ....-........................... |
11bc0 | 0c d9 10 00 90 01 00 00 b1 d9 10 00 a2 00 00 00 42 db 10 00 b3 01 00 00 e5 db 10 00 53 00 00 00 | ................B...........S... |
11be0 | 99 dd 10 00 5f 00 00 00 ed dd 10 00 80 00 00 00 4d de 10 00 81 00 00 00 ce de 10 00 8f 00 00 00 | ...._...........M............... |
11c00 | 50 df 10 00 7b 00 00 00 e0 df 10 00 7a 00 00 00 5c e0 10 00 f3 00 00 00 d7 e0 10 00 f2 00 00 00 | P...{.......z...\............... |
11c20 | cb e1 10 00 3a 00 00 00 be e2 10 00 3a 00 00 00 f9 e2 10 00 41 00 00 00 34 e3 10 00 67 00 00 00 | ....:.......:.......A...4...g... |
11c40 | 76 e3 10 00 42 00 00 00 de e3 10 00 38 00 00 00 21 e4 10 00 53 00 00 00 5a e4 10 00 5c 00 00 00 | v...B.......8...!...S...Z...\... |
11c60 | ae e4 10 00 e1 01 00 00 0b e5 10 00 bb 00 00 00 ed e6 10 00 41 00 00 00 a9 e7 10 00 e7 00 00 00 | ....................A........... |
11c80 | eb e7 10 00 4d 00 00 00 d3 e8 10 00 96 00 00 00 21 e9 10 00 80 00 00 00 b8 e9 10 00 e5 00 00 00 | ....M...........!............... |
11ca0 | 39 ea 10 00 da 00 00 00 1f eb 10 00 a4 00 00 00 fa eb 10 00 66 00 00 00 9f ec 10 00 ad 00 00 00 | 9...................f........... |
11cc0 | 06 ed 10 00 17 00 00 00 b4 ed 10 00 16 00 00 00 cc ed 10 00 16 00 00 00 e3 ed 10 00 1c 00 00 00 | ................................ |
11ce0 | fa ed 10 00 1d 00 00 00 17 ee 10 00 14 00 00 00 35 ee 10 00 13 00 00 00 4a ee 10 00 14 00 00 00 | ................5.......J....... |
11d00 | 5e ee 10 00 22 00 00 00 73 ee 10 00 3f 00 00 00 96 ee 10 00 16 00 00 00 d6 ee 10 00 52 00 00 00 | ^..."...s...?...............R... |
11d20 | ed ee 10 00 89 00 00 00 40 ef 10 00 4b 00 00 00 ca ef 10 00 0d 01 00 00 16 f0 10 00 41 00 00 00 | ........@...K...............A... |
11d40 | 24 f1 10 00 6d 00 00 00 66 f1 10 00 6a 00 00 00 d4 f1 10 00 32 00 00 00 3f f2 10 00 61 00 00 00 | $...m...f...j.......2...?...a... |
11d60 | 72 f2 10 00 8d 00 00 00 d4 f2 10 00 8e 00 00 00 62 f3 10 00 47 00 00 00 f1 f3 10 00 40 00 00 00 | r...............b...G.......@... |
11d80 | 39 f4 10 00 6c 00 00 00 7a f4 10 00 4c 00 00 00 e7 f4 10 00 3f 00 00 00 34 f5 10 00 00 01 00 00 | 9...l...z...L.......?...4....... |
11da0 | 74 f5 10 00 1c 01 00 00 75 f6 10 00 a2 00 00 00 92 f7 10 00 97 00 00 00 35 f8 10 00 59 00 00 00 | t.......u...............5...Y... |
11dc0 | cd f8 10 00 62 00 00 00 27 f9 10 00 1a 00 00 00 8a f9 10 00 1c 00 00 00 a5 f9 10 00 bb 00 00 00 | ....b...'....................... |
11de0 | c2 f9 10 00 32 00 00 00 7e fa 10 00 73 00 00 00 b1 fa 10 00 61 00 00 00 25 fb 10 00 76 00 00 00 | ....2...~...s.......a...%...v... |
11e00 | 87 fb 10 00 47 00 00 00 fe fb 10 00 43 01 00 00 46 fc 10 00 7d 00 00 00 8a fd 10 00 e5 00 00 00 | ....G.......C...F...}........... |
11e20 | 08 fe 10 00 11 00 00 00 ee fe 10 00 63 00 00 00 00 ff 10 00 c6 00 00 00 64 ff 10 00 8e 00 00 00 | ............c...........d....... |
11e40 | 2b 00 11 00 2a 00 00 00 ba 00 11 00 98 00 00 00 e5 00 11 00 bd 00 00 00 7e 01 11 00 44 00 00 00 | +...*...................~...D... |
11e60 | 3c 02 11 00 a0 00 00 00 81 02 11 00 ca 00 00 00 22 03 11 00 41 00 00 00 ed 03 11 00 76 00 00 00 | <..............."...A.......v... |
11e80 | 2f 04 11 00 c7 00 00 00 a6 04 11 00 58 00 00 00 6e 05 11 00 23 00 00 00 c7 05 11 00 76 00 00 00 | /...........X...n...#.......v... |
11ea0 | eb 05 11 00 36 00 00 00 62 06 11 00 97 00 00 00 99 06 11 00 2c 00 00 00 31 07 11 00 2b 00 00 00 | ....6...b...........,...1...+... |
11ec0 | 5e 07 11 00 2e 00 00 00 8a 07 11 00 33 00 00 00 b9 07 11 00 fc 00 00 00 ed 07 11 00 e9 00 00 00 | ^...........3................... |
11ee0 | ea 08 11 00 31 00 00 00 d4 09 11 00 26 00 00 00 06 0a 11 00 60 00 00 00 2d 0a 11 00 1d 00 00 00 | ....1.......&.......`...-....... |
11f00 | 8e 0a 11 00 89 00 00 00 ac 0a 11 00 be 00 00 00 36 0b 11 00 60 01 00 00 f5 0b 11 00 80 00 00 00 | ................6...`........... |
11f20 | 56 0d 11 00 78 00 00 00 d7 0d 11 00 7b 00 00 00 50 0e 11 00 29 00 00 00 cc 0e 11 00 e9 00 00 00 | V...x.......{...P...)........... |
11f40 | f6 0e 11 00 3d 00 00 00 e0 0f 11 00 6f 00 00 00 1e 10 11 00 3b 00 00 00 8e 10 11 00 a5 00 00 00 | ....=.......o.......;........... |
11f60 | ca 10 11 00 2d 01 00 00 70 11 11 00 2c 01 00 00 9e 12 11 00 dd 00 00 00 cb 13 11 00 64 00 00 00 | ....-...p...,...............d... |
11f80 | a9 14 11 00 40 00 00 00 0e 15 11 00 77 00 00 00 4f 15 11 00 76 00 00 00 c7 15 11 00 6f 00 00 00 | ....@.......w...O...v.......o... |
11fa0 | 3e 16 11 00 d3 00 00 00 ae 16 11 00 23 01 00 00 82 17 11 00 9d 01 00 00 a6 18 11 00 48 00 00 00 | >...........#...............H... |
11fc0 | 44 1a 11 00 2c 00 00 00 8d 1a 11 00 bb 00 00 00 ba 1a 11 00 23 00 00 00 76 1b 11 00 3d 00 00 00 | D...,...............#...v...=... |
11fe0 | 9a 1b 11 00 42 00 00 00 d8 1b 11 00 5b 00 00 00 1b 1c 11 00 6b 00 00 00 77 1c 11 00 30 00 00 00 | ....B.......[.......k...w...0... |
12000 | e3 1c 11 00 3d 00 00 00 14 1d 11 00 2c 00 00 00 52 1d 11 00 54 00 00 00 7f 1d 11 00 38 00 00 00 | ....=.......,...R...T.......8... |
12020 | d4 1d 11 00 3a 00 00 00 0d 1e 11 00 3c 00 00 00 48 1e 11 00 44 00 00 00 85 1e 11 00 34 00 00 00 | ....:.......<...H...D.......4... |
12040 | ca 1e 11 00 32 01 00 00 ff 1e 11 00 30 00 00 00 32 20 11 00 dd 00 00 00 63 20 11 00 09 00 00 00 | ....2.......0...2.......c....... |
12060 | 41 21 11 00 d6 00 00 00 4b 21 11 00 49 00 00 00 22 22 11 00 47 00 00 00 6c 22 11 00 44 00 00 00 | A!......K!..I...""..G...l"..D... |
12080 | b4 22 11 00 4a 00 00 00 f9 22 11 00 26 00 00 00 44 23 11 00 1f 00 00 00 6b 23 11 00 74 00 00 00 | ."..J...."..&...D#......k#..t... |
120a0 | 8b 23 11 00 12 00 00 00 00 24 11 00 30 00 00 00 13 24 11 00 45 00 00 00 44 24 11 00 2e 00 00 00 | .#.......$..0....$..E...D$...... |
120c0 | 8a 24 11 00 06 00 00 00 b9 24 11 00 65 00 00 00 c0 24 11 00 4e 00 00 00 26 25 11 00 b1 00 00 00 | .$.......$..e....$..N...&%...... |
120e0 | 75 25 11 00 9b 00 00 00 27 26 11 00 91 00 00 00 c3 26 11 00 ae 00 00 00 55 27 11 00 22 00 00 00 | u%......'&.......&......U'.."... |
12100 | 04 28 11 00 aa 00 00 00 27 28 11 00 39 01 00 00 d2 28 11 00 5c 00 00 00 0c 2a 11 00 74 00 00 00 | .(......'(..9....(..\....*..t... |
12120 | 69 2a 11 00 58 00 00 00 de 2a 11 00 6f 00 00 00 37 2b 11 00 99 00 00 00 a7 2b 11 00 80 00 00 00 | i*..X....*..o...7+.......+...... |
12140 | 41 2c 11 00 54 00 00 00 c2 2c 11 00 4c 00 00 00 17 2d 11 00 51 00 00 00 64 2d 11 00 d7 00 00 00 | A,..T....,..L....-..Q...d-...... |
12160 | b6 2d 11 00 68 00 00 00 8e 2e 11 00 62 00 00 00 f7 2e 11 00 5e 00 00 00 5a 2f 11 00 3c 00 00 00 | .-..h.......b.......^...Z/..<... |
12180 | b9 2f 11 00 77 00 00 00 f6 2f 11 00 40 00 00 00 6e 30 11 00 d7 00 00 00 af 30 11 00 b3 00 00 00 | ./..w..../..@...n0.......0...... |
121a0 | 87 31 11 00 66 00 00 00 3b 32 11 00 37 00 00 00 a2 32 11 00 6a 00 00 00 da 32 11 00 42 00 00 00 | .1..f...;2..7....2..j....2..B... |
121c0 | 45 33 11 00 3d 00 00 00 88 33 11 00 38 00 00 00 c6 33 11 00 3d 00 00 00 ff 33 11 00 40 00 00 00 | E3..=....3..8....3..=....3..@... |
121e0 | 3d 34 11 00 4a 01 00 00 7e 34 11 00 52 00 00 00 c9 35 11 00 51 00 00 00 1c 36 11 00 d9 00 00 00 | =4..J...~4..R....5..Q....6...... |
12200 | 6e 36 11 00 c9 00 00 00 48 37 11 00 4f 00 00 00 12 38 11 00 67 00 00 00 62 38 11 00 8d 00 00 00 | n6......H7..O....8..g...b8...... |
12220 | ca 38 11 00 49 00 00 00 58 39 11 00 a0 01 00 00 a2 39 11 00 87 00 00 00 43 3b 11 00 5f 00 00 00 | .8..I...X9.......9......C;.._... |
12240 | cb 3b 11 00 fa 00 00 00 2b 3c 11 00 54 00 00 00 26 3d 11 00 25 00 00 00 7b 3d 11 00 49 00 00 00 | .;......+<..T...&=..%...{=..I... |
12260 | a1 3d 11 00 92 00 00 00 eb 3d 11 00 54 00 00 00 7e 3e 11 00 96 00 00 00 d3 3e 11 00 2a 00 00 00 | .=.......=..T...~>.......>..*... |
12280 | 6a 3f 11 00 1c 00 00 00 95 3f 11 00 1f 00 00 00 b2 3f 11 00 32 00 00 00 d2 3f 11 00 12 01 00 00 | j?.......?.......?..2....?...... |
122a0 | 05 40 11 00 71 00 00 00 18 41 11 00 5f 00 00 00 8a 41 11 00 69 00 00 00 ea 41 11 00 a5 00 00 00 | .@..q....A.._....A..i....A...... |
122c0 | 54 42 11 00 45 00 00 00 fa 42 11 00 09 00 00 00 40 43 11 00 2c 00 00 00 4a 43 11 00 0e 00 00 00 | TB..E....B......@C..,...JC...... |
122e0 | 77 43 11 00 05 00 00 00 86 43 11 00 83 00 00 00 8c 43 11 00 44 02 00 00 10 44 11 00 dc 00 00 00 | wC.......C.......C..D....D...... |
12300 | 55 46 11 00 8a 01 00 00 32 47 11 00 0f 00 00 00 bd 48 11 00 93 00 00 00 cd 48 11 00 0e 00 00 00 | UF......2G.......H.......H...... |
12320 | 61 49 11 00 5e 00 00 00 70 49 11 00 a6 00 00 00 cf 49 11 00 9e 00 00 00 76 4a 11 00 97 00 00 00 | aI..^...pI.......I......vJ...... |
12340 | 15 4b 11 00 19 00 00 00 ad 4b 11 00 b8 00 00 00 c7 4b 11 00 12 00 00 00 80 4c 11 00 60 01 00 00 | .K.......K.......K.......L..`... |
12360 | 93 4c 11 00 11 00 00 00 f4 4d 11 00 0f 00 00 00 06 4e 11 00 0f 00 00 00 16 4e 11 00 06 00 00 00 | .L.......M.......N.......N...... |
12380 | 26 4e 11 00 0b 00 00 00 2d 4e 11 00 35 00 00 00 39 4e 11 00 28 00 00 00 6f 4e 11 00 44 00 00 00 | &N......-N..5...9N..(...oN..D... |
123a0 | 98 4e 11 00 60 00 00 00 dd 4e 11 00 3f 00 00 00 3e 4f 11 00 5f 00 00 00 7e 4f 11 00 7c 00 00 00 | .N..`....N..?...>O.._...~O..|... |
123c0 | de 4f 11 00 13 00 00 00 5b 50 11 00 1f 00 00 00 6f 50 11 00 17 00 00 00 8f 50 11 00 15 00 00 00 | .O......[P......oP.......P...... |
123e0 | a7 50 11 00 12 00 00 00 bd 50 11 00 29 00 00 00 d0 50 11 00 0d 00 00 00 fa 50 11 00 38 00 00 00 | .P.......P..)....P.......P..8... |
12400 | 08 51 11 00 af 00 00 00 41 51 11 00 0e 00 00 00 f1 51 11 00 a3 01 00 00 00 52 11 00 07 00 00 00 | .Q......AQ.......Q.......R...... |
12420 | a4 53 11 00 0c 00 00 00 ac 53 11 00 0d 00 00 00 b9 53 11 00 1b 00 00 00 c7 53 11 00 05 00 00 00 | .S.......S.......S.......S...... |
12440 | e3 53 11 00 46 01 00 00 e9 53 11 00 9b 01 00 00 30 55 11 00 06 00 00 00 cc 56 11 00 16 00 00 00 | .S..F....S......0U.......V...... |
12460 | d3 56 11 00 15 00 00 00 ea 56 11 00 07 00 00 00 00 57 11 00 9c 00 00 00 08 57 11 00 2e 00 00 00 | .V.......V.......W.......W...... |
12480 | a5 57 11 00 49 00 00 00 d4 57 11 00 e2 00 00 00 1e 58 11 00 58 00 00 00 01 59 11 00 14 00 00 00 | .W..I....W.......X..X....Y...... |
124a0 | 5a 59 11 00 66 00 00 00 6f 59 11 00 25 00 00 00 d6 59 11 00 26 00 00 00 fc 59 11 00 20 00 00 00 | ZY..f...oY..%....Y..&....Y...... |
124c0 | 23 5a 11 00 13 00 00 00 44 5a 11 00 39 00 00 00 58 5a 11 00 59 00 00 00 92 5a 11 00 3e 00 00 00 | #Z......DZ..9...XZ..Y....Z..>... |
124e0 | ec 5a 11 00 00 01 00 00 2b 5b 11 00 55 00 00 00 2c 5c 11 00 54 00 00 00 82 5c 11 00 51 00 00 00 | .Z......+[..U...,\..T....\..Q... |
12500 | d7 5c 11 00 55 00 00 00 29 5d 11 00 52 00 00 00 7f 5d 11 00 1a 00 00 00 d2 5d 11 00 44 00 00 00 | .\..U...)]..R....].......]..D... |
12520 | ed 5d 11 00 36 00 00 00 32 5e 11 00 46 00 00 00 69 5e 11 00 2c 00 00 00 b0 5e 11 00 22 00 00 00 | .]..6...2^..F...i^..,....^.."... |
12540 | dd 5e 11 00 88 00 00 00 00 5f 11 00 30 00 00 00 89 5f 11 00 43 00 00 00 ba 5f 11 00 18 00 00 00 | .^......._..0...._..C...._...... |
12560 | fe 5f 11 00 28 00 00 00 17 60 11 00 2f 00 00 00 40 60 11 00 68 00 00 00 70 60 11 00 8c 00 00 00 | ._..(....`../...@`..h...p`...... |
12580 | d9 60 11 00 9a 00 00 00 66 61 11 00 8a 00 00 00 01 62 11 00 78 00 00 00 8c 62 11 00 59 00 00 00 | .`......fa.......b..x....b..Y... |
125a0 | 05 63 11 00 19 01 00 00 5f 63 11 00 24 01 00 00 79 64 11 00 22 01 00 00 9e 65 11 00 08 01 00 00 | .c......_c..$...yd.."....e...... |
125c0 | c1 66 11 00 f8 00 00 00 ca 67 11 00 f7 00 00 00 c3 68 11 00 f9 00 00 00 bb 69 11 00 f7 00 00 00 | .f.......g.......h.......i...... |
125e0 | b5 6a 11 00 f7 00 00 00 ad 6b 11 00 f7 00 00 00 a5 6c 11 00 c4 00 00 00 9d 6d 11 00 a1 00 00 00 | .j.......k.......l.......m...... |
12600 | 62 6e 11 00 73 00 00 00 04 6f 11 00 f8 00 00 00 78 6f 11 00 4e 00 00 00 71 70 11 00 99 00 00 00 | bn..s....o......xo..N...qp...... |
12620 | c0 70 11 00 4b 00 00 00 5a 71 11 00 5b 00 00 00 a6 71 11 00 4a 00 00 00 02 72 11 00 4a 00 00 00 | .p..K...Zq..[....q..J....r..J... |
12640 | 4d 72 11 00 50 00 00 00 98 72 11 00 47 00 00 00 e9 72 11 00 44 01 00 00 31 73 11 00 45 01 00 00 | Mr..P....r..G....r..D...1s..E... |
12660 | 76 74 11 00 44 01 00 00 bc 75 11 00 44 01 00 00 01 77 11 00 44 01 00 00 46 78 11 00 3c 01 00 00 | vt..D....u..D....w..D...Fx..<... |
12680 | 8b 79 11 00 a0 00 00 00 c8 7a 11 00 30 01 00 00 69 7b 11 00 50 01 00 00 9a 7c 11 00 d1 00 00 00 | .y.......z..0...i{..P....|...... |
126a0 | eb 7d 11 00 23 01 00 00 bd 7e 11 00 08 01 00 00 e1 7f 11 00 29 01 00 00 ea 80 11 00 2f 01 00 00 | .}..#....~..........)......./... |
126c0 | 14 82 11 00 da 00 00 00 44 83 11 00 34 01 00 00 1f 84 11 00 89 00 00 00 54 85 11 00 66 00 00 00 | ........D...4...........T...f... |
126e0 | de 85 11 00 88 00 00 00 45 86 11 00 a5 00 00 00 ce 86 11 00 70 00 00 00 74 87 11 00 6f 00 00 00 | ........E...........p...t...o... |
12700 | e5 87 11 00 8e 00 00 00 55 88 11 00 b0 00 00 00 e4 88 11 00 0f 01 00 00 95 89 11 00 c3 00 00 00 | ........U....................... |
12720 | a5 8a 11 00 84 00 00 00 69 8b 11 00 be 00 00 00 ee 8b 11 00 db 00 00 00 ad 8c 11 00 85 00 00 00 | ........i....................... |
12740 | 89 8d 11 00 7d 00 00 00 0f 8e 11 00 9a 00 00 00 8d 8e 11 00 92 00 00 00 28 8f 11 00 91 00 00 00 | ....}...................(....... |
12760 | bb 8f 11 00 d5 00 00 00 4d 90 11 00 93 00 00 00 23 91 11 00 8e 00 00 00 b7 91 11 00 fa 00 00 00 | ........M.......#............... |
12780 | 46 92 11 00 bd 00 00 00 41 93 11 00 f5 00 00 00 ff 93 11 00 a6 00 00 00 f5 94 11 00 a1 00 00 00 | F.......A....................... |
127a0 | 9c 95 11 00 7b 00 00 00 3e 96 11 00 fc 00 00 00 ba 96 11 00 fd 00 00 00 b7 97 11 00 19 01 00 00 | ....{...>....................... |
127c0 | b5 98 11 00 9d 00 00 00 cf 99 11 00 be 01 00 00 6d 9a 11 00 b1 00 00 00 2c 9c 11 00 5b 00 00 00 | ................m.......,...[... |
127e0 | de 9c 11 00 63 00 00 00 3a 9d 11 00 33 01 00 00 9e 9d 11 00 3b 00 00 00 d2 9e 11 00 98 00 00 00 | ....c...:...3.......;........... |
12800 | 0e 9f 11 00 54 00 00 00 a7 9f 11 00 59 00 00 00 fc 9f 11 00 de 00 00 00 56 a0 11 00 9a 00 00 00 | ....T.......Y...........V....... |
12820 | 35 a1 11 00 2b 00 00 00 d0 a1 11 00 c0 00 00 00 fc a1 11 00 c5 00 00 00 bd a2 11 00 3a 00 00 00 | 5...+.......................:... |
12840 | 83 a3 11 00 35 00 00 00 be a3 11 00 87 00 00 00 f4 a3 11 00 5c 00 00 00 7c a4 11 00 74 00 00 00 | ....5...............\...|...t... |
12860 | d9 a4 11 00 da 00 00 00 4e a5 11 00 f0 00 00 00 29 a6 11 00 84 00 00 00 1a a7 11 00 f0 00 00 00 | ........N.......)............... |
12880 | 9f a7 11 00 f0 00 00 00 90 a8 11 00 f0 00 00 00 81 a9 11 00 f1 00 00 00 72 aa 11 00 5f 00 00 00 | ........................r..._... |
128a0 | 64 ab 11 00 83 00 00 00 c4 ab 11 00 bd 00 00 00 48 ac 11 00 79 00 00 00 06 ad 11 00 7e 00 00 00 | d...............H...y.......~... |
128c0 | 80 ad 11 00 36 00 00 00 ff ad 11 00 78 00 00 00 36 ae 11 00 85 00 00 00 af ae 11 00 51 00 00 00 | ....6.......x...6...........Q... |
128e0 | 35 af 11 00 3e 00 00 00 87 af 11 00 3e 00 00 00 c6 af 11 00 75 00 00 00 05 b0 11 00 53 00 00 00 | 5...>.......>.......u.......S... |
12900 | 7b b0 11 00 df 00 00 00 cf b0 11 00 a1 00 00 00 af b1 11 00 ac 00 00 00 51 b2 11 00 3b 00 00 00 | {.......................Q...;... |
12920 | fe b2 11 00 47 00 00 00 3a b3 11 00 67 00 00 00 82 b3 11 00 d8 00 00 00 ea b3 11 00 5a 00 00 00 | ....G...:...g...............Z... |
12940 | c3 b4 11 00 38 00 00 00 1e b5 11 00 88 01 00 00 57 b5 11 00 c5 00 00 00 e0 b6 11 00 a1 00 00 00 | ....8...........W............... |
12960 | a6 b7 11 00 6d 00 00 00 48 b8 11 00 4e 00 00 00 b6 b8 11 00 54 00 00 00 05 b9 11 00 3d 00 00 00 | ....m...H...N.......T.......=... |
12980 | 5a b9 11 00 8a 00 00 00 98 b9 11 00 6f 00 00 00 23 ba 11 00 2e 00 00 00 93 ba 11 00 31 00 00 00 | Z...........o...#...........1... |
129a0 | c2 ba 11 00 3c 00 00 00 f4 ba 11 00 17 01 00 00 31 bb 11 00 db 00 00 00 49 bc 11 00 49 00 00 00 | ....<...........1.......I...I... |
129c0 | 25 bd 11 00 4a 00 00 00 6f bd 11 00 49 00 00 00 ba bd 11 00 49 00 00 00 04 be 11 00 0b 01 00 00 | %...J...o...I.......I........... |
129e0 | 4e be 11 00 51 00 00 00 5a bf 11 00 96 00 00 00 ac bf 11 00 5d 00 00 00 43 c0 11 00 49 00 00 00 | N...Q...Z...........]...C...I... |
12a00 | a1 c0 11 00 46 00 00 00 eb c0 11 00 37 00 00 00 32 c1 11 00 38 01 00 00 6a c1 11 00 31 00 00 00 | ....F.......7...2...8...j...1... |
12a20 | a3 c2 11 00 30 00 00 00 d5 c2 11 00 39 00 00 00 06 c3 11 00 33 00 00 00 40 c3 11 00 33 00 00 00 | ....0.......9.......3...@...3... |
12a40 | 74 c3 11 00 49 00 00 00 a8 c3 11 00 d9 00 00 00 f2 c3 11 00 78 00 00 00 cc c4 11 00 79 00 00 00 | t...I...............x.......y... |
12a60 | 45 c5 11 00 8c 00 00 00 bf c5 11 00 47 00 00 00 4c c6 11 00 fb 00 00 00 94 c6 11 00 b7 00 00 00 | E...........G...L............... |
12a80 | 90 c7 11 00 5b 00 00 00 48 c8 11 00 b7 00 00 00 a4 c8 11 00 42 00 00 00 5c c9 11 00 46 00 00 00 | ....[...H...........B...\...F... |
12aa0 | 9f c9 11 00 30 00 00 00 e6 c9 11 00 39 00 00 00 17 ca 11 00 25 00 00 00 51 ca 11 00 2e 00 00 00 | ....0.......9.......%...Q....... |
12ac0 | 77 ca 11 00 2e 00 00 00 a6 ca 11 00 39 00 00 00 d5 ca 11 00 c1 00 00 00 0f cb 11 00 8c 00 00 00 | w...........9................... |
12ae0 | d1 cb 11 00 b5 00 00 00 5e cc 11 00 42 00 00 00 14 cd 11 00 a5 00 00 00 57 cd 11 00 b9 00 00 00 | ........^...B...........W....... |
12b00 | fd cd 11 00 3e 00 00 00 b7 ce 11 00 74 00 00 00 f6 ce 11 00 6c 00 00 00 6b cf 11 00 81 00 00 00 | ....>.......t.......l...k....... |
12b20 | d8 cf 11 00 19 00 00 00 5a d0 11 00 23 00 00 00 74 d0 11 00 b7 00 00 00 98 d0 11 00 dc 00 00 00 | ........Z...#...t............... |
12b40 | 50 d1 11 00 13 00 00 00 2d d2 11 00 54 00 00 00 41 d2 11 00 5f 01 00 00 96 d2 11 00 17 00 00 00 | P.......-...T...A..._........... |
12b60 | f6 d3 11 00 1a 00 00 00 0e d4 11 00 17 00 00 00 29 d4 11 00 5b 00 00 00 41 d4 11 00 3b 00 00 00 | ................)...[...A...;... |
12b80 | 9d d4 11 00 dd 00 00 00 d9 d4 11 00 1d 01 00 00 b7 d5 11 00 32 00 00 00 d5 d6 11 00 20 00 00 00 | ....................2........... |
12ba0 | 08 d7 11 00 5d 00 00 00 29 d7 11 00 54 00 00 00 87 d7 11 00 04 00 00 00 dc d7 11 00 30 00 00 00 | ....]...)...T...............0... |
12bc0 | e1 d7 11 00 0c 00 00 00 12 d8 11 00 0c 00 00 00 1f d8 11 00 60 00 00 00 2c d8 11 00 09 00 00 00 | ....................`...,....... |
12be0 | 8d d8 11 00 35 01 00 00 97 d8 11 00 33 01 00 00 cd d9 11 00 70 00 00 00 01 db 11 00 03 00 00 00 | ....5.......3.......p........... |
12c00 | 72 db 11 00 62 00 00 00 76 db 11 00 03 00 00 00 d9 db 11 00 11 00 00 00 dd db 11 00 0b 00 00 00 | r...b...v....................... |
12c20 | ef db 11 00 16 00 00 00 fb db 11 00 19 00 00 00 12 dc 11 00 15 00 00 00 2c dc 11 00 11 00 00 00 | ........................,....... |
12c40 | 42 dc 11 00 14 00 00 00 54 dc 11 00 6a 02 00 00 69 dc 11 00 3d 01 00 00 d4 de 11 00 85 01 00 00 | B.......T...j...i...=........... |
12c60 | 12 e0 11 00 95 00 00 00 98 e1 11 00 d5 01 00 00 2e e2 11 00 32 00 00 00 04 e4 11 00 1e 00 00 00 | ....................2........... |
12c80 | 37 e4 11 00 05 00 00 00 56 e4 11 00 45 01 00 00 5c e4 11 00 16 00 00 00 a2 e5 11 00 3b 00 00 00 | 7.......V...E...\...........;... |
12ca0 | b9 e5 11 00 18 00 00 00 f5 e5 11 00 05 00 00 00 0e e6 11 00 8e 00 00 00 14 e6 11 00 60 00 00 00 | ............................`... |
12cc0 | a3 e6 11 00 0c 00 00 00 04 e7 11 00 0d 00 00 00 11 e7 11 00 3b 00 00 00 1f e7 11 00 07 00 00 00 | ....................;........... |
12ce0 | 5b e7 11 00 10 00 00 00 63 e7 11 00 6c 00 00 00 74 e7 11 00 0e 00 00 00 e1 e7 11 00 4b 00 00 00 | [.......c...l...t...........K... |
12d00 | f0 e7 11 00 47 00 00 00 3c e8 11 00 65 00 00 00 84 e8 11 00 a1 00 00 00 ea e8 11 00 3f 00 00 00 | ....G...<...e...............?... |
12d20 | 8c e9 11 00 4a 01 00 00 cc e9 11 00 44 01 00 00 17 eb 11 00 15 00 00 00 5c ec 11 00 24 00 00 00 | ....J.......D...........\...$... |
12d40 | 72 ec 11 00 0a 00 00 00 97 ec 11 00 24 00 00 00 a2 ec 11 00 09 00 00 00 c7 ec 11 00 29 00 00 00 | r...........$...............)... |
12d60 | d1 ec 11 00 1b 00 00 00 fb ec 11 00 c9 00 00 00 17 ed 11 00 0b 00 00 00 e1 ed 11 00 85 00 00 00 | ................................ |
12d80 | ed ed 11 00 26 00 00 00 73 ee 11 00 3d 00 00 00 9a ee 11 00 52 00 00 00 d8 ee 11 00 b4 00 00 00 | ....&...s...=.......R........... |
12da0 | 2b ef 11 00 a9 00 00 00 e0 ef 11 00 26 00 00 00 8a f0 11 00 b0 00 00 00 b1 f0 11 00 df 00 00 00 | +...........&................... |
12dc0 | 62 f1 11 00 1c 00 00 00 42 f2 11 00 8f 00 00 00 5f f2 11 00 8c 00 00 00 ef f2 11 00 90 00 00 00 | b.......B......._............... |
12de0 | 7c f3 11 00 5d 00 00 00 0d f4 11 00 44 00 00 00 6b f4 11 00 2f 00 00 00 b0 f4 11 00 b0 00 00 00 | |...].......D...k.../........... |
12e00 | e0 f4 11 00 50 00 00 00 91 f5 11 00 a6 00 00 00 e2 f5 11 00 ec 00 00 00 89 f6 11 00 64 00 00 00 | ....P.......................d... |
12e20 | 76 f7 11 00 53 00 00 00 db f7 11 00 df 00 00 00 2f f8 11 00 86 00 00 00 0f f9 11 00 63 00 00 00 | v...S.........../...........c... |
12e40 | 96 f9 11 00 68 00 00 00 fa f9 11 00 d1 00 00 00 63 fa 11 00 6f 00 00 00 35 fb 11 00 8d 00 00 00 | ....h...........c...o...5....... |
12e60 | a5 fb 11 00 78 00 00 00 33 fc 11 00 7a 00 00 00 ac fc 11 00 7d 00 00 00 27 fd 11 00 80 00 00 00 | ....x...3...z.......}...'....... |
12e80 | a5 fd 11 00 33 00 00 00 26 fe 11 00 71 00 00 00 5a fe 11 00 db 00 00 00 cc fe 11 00 a5 00 00 00 | ....3...&...q...Z............... |
12ea0 | a8 ff 11 00 75 00 00 00 4e 00 12 00 59 00 00 00 c4 00 12 00 58 00 00 00 1e 01 12 00 9b 00 00 00 | ....u...N...Y.......X........... |
12ec0 | 77 01 12 00 b6 00 00 00 13 02 12 00 29 00 00 00 ca 02 12 00 9c 00 00 00 f4 02 12 00 e3 00 00 00 | w...........)................... |
12ee0 | 91 03 12 00 9e 00 00 00 75 04 12 00 44 00 00 00 14 05 12 00 44 00 00 00 59 05 12 00 ed 00 00 00 | ........u...D.......D...Y....... |
12f00 | 9e 05 12 00 3c 00 00 00 8c 06 12 00 bd 00 00 00 c9 06 12 00 bf 00 00 00 87 07 12 00 88 00 00 00 | ....<........................... |
12f20 | 47 08 12 00 85 00 00 00 d0 08 12 00 6f 00 00 00 56 09 12 00 cf 00 00 00 c6 09 12 00 17 00 00 00 | G...........o...V............... |
12f40 | 96 0a 12 00 12 00 00 00 ae 0a 12 00 18 00 00 00 c1 0a 12 00 39 00 00 00 da 0a 12 00 1b 00 00 00 | ....................9........... |
12f60 | 14 0b 12 00 21 00 00 00 30 0b 12 00 07 00 00 00 52 0b 12 00 12 00 00 00 5a 0b 12 00 79 00 00 00 | ....!...0.......R.......Z...y... |
12f80 | 6d 0b 12 00 e5 00 00 00 e7 0b 12 00 ac 00 00 00 cd 0c 12 00 84 00 00 00 7a 0d 12 00 36 01 00 00 | m.......................z...6... |
12fa0 | ff 0d 12 00 5a 00 00 00 36 0f 12 00 c4 00 00 00 91 0f 12 00 4b 00 00 00 56 10 12 00 a7 00 00 00 | ....Z...6...........K...V....... |
12fc0 | a2 10 12 00 17 00 00 00 4a 11 12 00 e8 00 00 00 62 11 12 00 48 00 00 00 4b 12 12 00 41 00 00 00 | ........J.......b...H...K...A... |
12fe0 | 94 12 12 00 2e 00 00 00 d6 12 12 00 47 00 00 00 05 13 12 00 3f 00 00 00 4d 13 12 00 9c 00 00 00 | ............G.......?...M....... |
13000 | 8d 13 12 00 68 00 00 00 2a 14 12 00 1b 01 00 00 93 14 12 00 22 00 00 00 af 15 12 00 08 00 00 00 | ....h...*..........."........... |
13020 | d2 15 12 00 2a 00 00 00 db 15 12 00 34 00 00 00 06 16 12 00 ae 00 00 00 3b 16 12 00 17 01 00 00 | ....*.......4...........;....... |
13040 | ea 16 12 00 79 00 00 00 02 18 12 00 73 00 00 00 7c 18 12 00 bf 00 00 00 f0 18 12 00 dc 00 00 00 | ....y.......s...|............... |
13060 | b0 19 12 00 7b 01 00 00 8d 1a 12 00 90 01 00 00 09 1c 12 00 13 01 00 00 9a 1d 12 00 a0 00 00 00 | ....{........................... |
13080 | ae 1e 12 00 36 01 00 00 4f 1f 12 00 04 02 00 00 86 20 12 00 b6 00 00 00 8b 22 12 00 ad 00 00 00 | ....6...O................"...... |
130a0 | 42 23 12 00 67 00 00 00 f0 23 12 00 71 00 00 00 58 24 12 00 fe 00 00 00 ca 24 12 00 7d 00 00 00 | B#..g....#..q...X$.......$..}... |
130c0 | c9 25 12 00 6d 01 00 00 47 26 12 00 7a 00 00 00 b5 27 12 00 e2 00 00 00 30 28 12 00 1e 01 00 00 | .%..m...G&..z....'......0(...... |
130e0 | 13 29 12 00 56 00 00 00 32 2a 12 00 16 01 00 00 89 2a 12 00 06 01 00 00 a0 2b 12 00 b1 00 00 00 | .)..V...2*.......*.......+...... |
13100 | a7 2c 12 00 58 00 00 00 59 2d 12 00 80 00 00 00 b2 2d 12 00 7d 00 00 00 33 2e 12 00 98 00 00 00 | .,..X...Y-.......-..}...3....... |
13120 | b1 2e 12 00 b5 00 00 00 4a 2f 12 00 a2 00 00 00 00 30 12 00 00 01 00 00 a3 30 12 00 37 00 00 00 | ........J/.......0.......0..7... |
13140 | a4 31 12 00 42 00 00 00 dc 31 12 00 cf 00 00 00 1f 32 12 00 fd 00 00 00 ef 32 12 00 3c 01 00 00 | .1..B....1.......2.......2..<... |
13160 | ed 33 12 00 fb 00 00 00 2a 35 12 00 bf 00 00 00 26 36 12 00 9e 00 00 00 e6 36 12 00 a4 00 00 00 | .3......*5......&6.......6...... |
13180 | 85 37 12 00 fb 00 00 00 2a 38 12 00 18 01 00 00 26 39 12 00 20 01 00 00 3f 3a 12 00 5d 00 00 00 | .7......*8......&9......?:..]... |
131a0 | 60 3b 12 00 4b 00 00 00 be 3b 12 00 97 00 00 00 0a 3c 12 00 57 00 00 00 a2 3c 12 00 3e 00 00 00 | `;..K....;.......<..W....<..>... |
131c0 | fa 3c 12 00 b0 00 00 00 39 3d 12 00 f1 00 00 00 ea 3d 12 00 b8 00 00 00 dc 3e 12 00 b8 00 00 00 | .<......9=.......=.......>...... |
131e0 | 95 3f 12 00 5d 00 00 00 4e 40 12 00 4a 00 00 00 ac 40 12 00 34 00 00 00 f7 40 12 00 2c 00 00 00 | .?..]...N@..J....@..4....@..,... |
13200 | 2c 41 12 00 24 00 00 00 59 41 12 00 41 00 00 00 7e 41 12 00 d6 00 00 00 c0 41 12 00 ae 00 00 00 | ,A..$...YA..A...~A.......A...... |
13220 | 97 42 12 00 cf 00 00 00 46 43 12 00 59 00 00 00 16 44 12 00 c3 00 00 00 70 44 12 00 48 00 00 00 | .B......FC..Y....D......pD..H... |
13240 | 34 45 12 00 62 00 00 00 7d 45 12 00 86 00 00 00 e0 45 12 00 fe 00 00 00 67 46 12 00 41 00 00 00 | 4E..b...}E.......E......gF..A... |
13260 | 66 47 12 00 93 00 00 00 a8 47 12 00 09 00 00 00 3c 48 12 00 18 00 00 00 46 48 12 00 33 00 00 00 | fG.......G......<H......FH..3... |
13280 | 5f 48 12 00 99 00 00 00 93 48 12 00 9a 00 00 00 2d 49 12 00 16 00 00 00 c8 49 12 00 27 00 00 00 | _H.......H......-I.......I..'... |
132a0 | df 49 12 00 30 00 00 00 07 4a 12 00 10 00 00 00 38 4a 12 00 21 00 00 00 49 4a 12 00 1c 00 00 00 | .I..0....J......8J..!...IJ...... |
132c0 | 6b 4a 12 00 aa 01 00 00 88 4a 12 00 82 00 00 00 33 4c 12 00 ac 00 00 00 b6 4c 12 00 fe 00 00 00 | kJ.......J......3L.......L...... |
132e0 | 63 4d 12 00 60 00 00 00 62 4e 12 00 86 01 00 00 c3 4e 12 00 85 01 00 00 4a 50 12 00 01 00 00 00 | cM..`...bN.......N......JP...... |
13300 | d0 51 12 00 76 00 00 00 d2 51 12 00 6b 00 00 00 49 52 12 00 60 00 00 00 b5 52 12 00 a9 00 00 00 | .Q..v....Q..k...IR..`....R...... |
13320 | 16 53 12 00 c9 00 00 00 c0 53 12 00 9b 00 00 00 8a 54 12 00 c3 00 00 00 26 55 12 00 3c 00 00 00 | .S.......S.......T......&U..<... |
13340 | ea 55 12 00 38 00 00 00 27 56 12 00 95 00 00 00 60 56 12 00 2e 00 00 00 f6 56 12 00 57 00 00 00 | .U..8...'V......`V.......V..W... |
13360 | 25 57 12 00 61 00 00 00 7d 57 12 00 69 00 00 00 df 57 12 00 4b 00 00 00 49 58 12 00 a4 00 00 00 | %W..a...}W..i....W..K...IX...... |
13380 | 95 58 12 00 52 00 00 00 3a 59 12 00 53 00 00 00 8d 59 12 00 65 00 00 00 e1 59 12 00 35 00 00 00 | .X..R...:Y..S....Y..e....Y..5... |
133a0 | 47 5a 12 00 51 00 00 00 7d 5a 12 00 a7 00 00 00 cf 5a 12 00 8a 00 00 00 77 5b 12 00 96 00 00 00 | GZ..Q...}Z.......Z......w[...... |
133c0 | 02 5c 12 00 81 00 00 00 99 5c 12 00 7f 00 00 00 1b 5d 12 00 88 00 00 00 9b 5d 12 00 e3 00 00 00 | .\.......\.......].......]...... |
133e0 | 24 5e 12 00 c3 00 00 00 08 5f 12 00 3a 00 00 00 cc 5f 12 00 5a 00 00 00 07 60 12 00 65 00 00 00 | $^......._..:...._..Z....`..e... |
13400 | 62 60 12 00 c3 00 00 00 c8 60 12 00 db 00 00 00 8c 61 12 00 50 00 00 00 68 62 12 00 1d 01 00 00 | b`.......`.......a..P...hb...... |
13420 | b9 62 12 00 f2 00 00 00 d7 63 12 00 48 00 00 00 ca 64 12 00 b0 00 00 00 13 65 12 00 9f 00 00 00 | .b.......c..H....d.......e...... |
13440 | c4 65 12 00 1f 00 00 00 64 66 12 00 71 00 00 00 84 66 12 00 75 00 00 00 f6 66 12 00 75 00 00 00 | .e......df..q....f..u....f..u... |
13460 | 6c 67 12 00 dc 00 00 00 e2 67 12 00 3f 00 00 00 bf 68 12 00 6d 00 00 00 ff 68 12 00 da 00 00 00 | lg.......g..?....h..m....h...... |
13480 | 6d 69 12 00 1c 00 00 00 48 6a 12 00 13 00 00 00 65 6a 12 00 20 00 00 00 79 6a 12 00 14 00 00 00 | mi......Hj......ej......yj...... |
134a0 | 9a 6a 12 00 13 00 00 00 af 6a 12 00 03 01 00 00 c3 6a 12 00 1d 00 00 00 c7 6b 12 00 1d 00 00 00 | .j.......j.......j.......k...... |
134c0 | e5 6b 12 00 23 00 00 00 03 6c 12 00 1d 00 00 00 27 6c 12 00 29 00 00 00 45 6c 12 00 3f 01 00 00 | .k..#....l......'l..)...El..?... |
134e0 | 6f 6c 12 00 31 00 00 00 af 6d 12 00 31 00 00 00 e1 6d 12 00 33 00 00 00 13 6e 12 00 33 00 00 00 | ol..1....m..1....m..3....n..3... |
13500 | 47 6e 12 00 10 00 00 00 7b 6e 12 00 0c 00 00 00 8c 6e 12 00 2d 00 00 00 99 6e 12 00 2c 00 00 00 | Gn......{n.......n..-....n..,... |
13520 | c7 6e 12 00 12 00 00 00 f4 6e 12 00 2c 00 00 00 07 6f 12 00 25 00 00 00 34 6f 12 00 3c 00 00 00 | .n.......n..,....o..%...4o..<... |
13540 | 5a 6f 12 00 12 00 00 00 97 6f 12 00 35 00 00 00 aa 6f 12 00 13 00 00 00 e0 6f 12 00 34 00 00 00 | Zo.......o..5....o.......o..4... |
13560 | f4 6f 12 00 16 00 00 00 29 70 12 00 1c 00 00 00 40 70 12 00 12 00 00 00 5d 70 12 00 34 00 00 00 | .o......)p......@p......]p..4... |
13580 | 70 70 12 00 13 00 00 00 a5 70 12 00 1d 00 00 00 b9 70 12 00 30 00 00 00 d7 70 12 00 1f 00 00 00 | pp.......p.......p..0....p...... |
135a0 | 08 71 12 00 13 00 00 00 28 71 12 00 16 00 00 00 3c 71 12 00 25 01 00 00 53 71 12 00 d3 00 00 00 | .q......(q......<q..%...Sq...... |
135c0 | 79 72 12 00 13 00 00 00 4d 73 12 00 38 00 00 00 61 73 12 00 41 00 00 00 9a 73 12 00 16 00 00 00 | yr......Ms..8...as..A....s...... |
135e0 | dc 73 12 00 9d 00 00 00 f3 73 12 00 41 00 00 00 91 74 12 00 38 00 00 00 d3 74 12 00 1e 00 00 00 | .s.......s..A....t..8....t...... |
13600 | 0c 75 12 00 22 00 00 00 2b 75 12 00 5d 00 00 00 4e 75 12 00 55 00 00 00 ac 75 12 00 1e 00 00 00 | .u.."...+u..]...Nu..U....u...... |
13620 | 02 76 12 00 44 00 00 00 21 76 12 00 25 00 00 00 66 76 12 00 08 01 00 00 8c 76 12 00 fd 01 00 00 | .v..D...!v..%...fv.......v...... |
13640 | 95 77 12 00 87 00 00 00 93 79 12 00 54 00 00 00 1b 7a 12 00 5b 00 00 00 70 7a 12 00 45 00 00 00 | .w.......y..T....z..[...pz..E... |
13660 | cc 7a 12 00 87 02 00 00 12 7b 12 00 c3 00 00 00 9a 7d 12 00 59 00 00 00 5e 7e 12 00 1e 00 00 00 | .z.......{.......}..Y...^~...... |
13680 | b8 7e 12 00 2a 00 00 00 d7 7e 12 00 2f 00 00 00 02 7f 12 00 27 00 00 00 32 7f 12 00 37 00 00 00 | .~..*....~../.......'...2...7... |
136a0 | 5a 7f 12 00 54 00 00 00 92 7f 12 00 4f 00 00 00 e7 7f 12 00 59 00 00 00 37 80 12 00 4d 00 00 00 | Z...T.......O.......Y...7...M... |
136c0 | 91 80 12 00 5f 00 00 00 df 80 12 00 33 00 00 00 3f 81 12 00 64 00 00 00 73 81 12 00 7b 00 00 00 | ...._.......3...?...d...s...{... |
136e0 | d8 81 12 00 49 00 00 00 54 82 12 00 1e 00 00 00 9e 82 12 00 f3 00 00 00 bd 82 12 00 f1 00 00 00 | ....I...T....................... |
13700 | b1 83 12 00 5e 00 00 00 a3 84 12 00 79 00 00 00 02 85 12 00 54 00 00 00 7c 85 12 00 43 00 00 00 | ....^.......y.......T...|...C... |
13720 | d1 85 12 00 4f 00 00 00 15 86 12 00 29 00 00 00 65 86 12 00 82 00 00 00 8f 86 12 00 22 00 00 00 | ....O.......)...e..........."... |
13740 | 12 87 12 00 47 02 00 00 35 87 12 00 47 02 00 00 7d 89 12 00 fc 00 00 00 c5 8b 12 00 9c 00 00 00 | ....G...5...G...}............... |
13760 | c2 8c 12 00 2c 00 00 00 5f 8d 12 00 16 00 00 00 8c 8d 12 00 53 00 00 00 a3 8d 12 00 7d 00 00 00 | ....,..._...........S.......}... |
13780 | f7 8d 12 00 66 00 00 00 75 8e 12 00 b4 00 00 00 dc 8e 12 00 55 00 00 00 91 8f 12 00 22 00 00 00 | ....f...u...........U......."... |
137a0 | e7 8f 12 00 18 00 00 00 0a 90 12 00 31 00 00 00 23 90 12 00 1b 00 00 00 55 90 12 00 1a 00 00 00 | ............1...#.......U....... |
137c0 | 71 90 12 00 17 00 00 00 8c 90 12 00 17 00 00 00 a4 90 12 00 17 00 00 00 bc 90 12 00 35 00 00 00 | q...........................5... |
137e0 | d4 90 12 00 41 00 00 00 0a 91 12 00 25 00 00 00 4c 91 12 00 2d 00 00 00 72 91 12 00 3e 00 00 00 | ....A.......%...L...-...r...>... |
13800 | a0 91 12 00 24 00 00 00 df 91 12 00 28 00 00 00 04 92 12 00 4d 00 00 00 2d 92 12 00 50 00 00 00 | ....$.......(.......M...-...P... |
13820 | 7b 92 12 00 33 00 00 00 cc 92 12 00 35 00 00 00 00 93 12 00 20 00 00 00 36 93 12 00 73 02 00 00 | {...3.......5...........6...s... |
13840 | 57 93 12 00 74 02 00 00 cb 95 12 00 c9 00 00 00 40 98 12 00 28 00 00 00 0a 99 12 00 5c 00 00 00 | W...t...........@...(.......\... |
13860 | 33 99 12 00 23 00 00 00 90 99 12 00 27 00 00 00 b4 99 12 00 18 00 00 00 dc 99 12 00 25 00 00 00 | 3...#.......'...............%... |
13880 | f5 99 12 00 1c 00 00 00 1b 9a 12 00 53 00 00 00 38 9a 12 00 53 00 00 00 8c 9a 12 00 16 00 00 00 | ............S...8...S........... |
138a0 | e0 9a 12 00 7e 00 00 00 f7 9a 12 00 33 00 00 00 76 9b 12 00 25 00 00 00 aa 9b 12 00 af 00 00 00 | ....~.......3...v...%........... |
138c0 | d0 9b 12 00 d0 00 00 00 80 9c 12 00 7e 00 00 00 51 9d 12 00 25 00 00 00 d0 9d 12 00 3d 00 00 00 | ............~...Q...%.......=... |
138e0 | f6 9d 12 00 04 01 00 00 34 9e 12 00 49 00 00 00 39 9f 12 00 bd 00 00 00 83 9f 12 00 78 00 00 00 | ........4...I...9...........x... |
13900 | 41 a0 12 00 41 00 00 00 ba a0 12 00 43 00 00 00 fc a0 12 00 3d 00 00 00 40 a1 12 00 27 00 00 00 | A...A.......C.......=...@...'... |
13920 | 7e a1 12 00 1a 00 00 00 a6 a1 12 00 d2 00 00 00 c1 a1 12 00 5b 00 00 00 94 a2 12 00 3d 00 00 00 | ~...................[.......=... |
13940 | f0 a2 12 00 ab 00 00 00 2e a3 12 00 5a 00 00 00 da a3 12 00 5a 00 00 00 35 a4 12 00 77 00 00 00 | ............Z.......Z...5...w... |
13960 | 90 a4 12 00 7d 00 00 00 08 a5 12 00 dd 00 00 00 86 a5 12 00 3f 00 00 00 64 a6 12 00 40 00 00 00 | ....}...............?...d...@... |
13980 | a4 a6 12 00 55 00 00 00 e5 a6 12 00 af 00 00 00 3b a7 12 00 5e 00 00 00 eb a7 12 00 72 00 00 00 | ....U...........;...^.......r... |
139a0 | 4a a8 12 00 3b 00 00 00 bd a8 12 00 65 00 00 00 f9 a8 12 00 37 00 00 00 5f a9 12 00 25 00 00 00 | J...;.......e.......7..._...%... |
139c0 | 97 a9 12 00 51 00 00 00 bd a9 12 00 55 00 00 00 0f aa 12 00 38 00 00 00 65 aa 12 00 13 00 00 00 | ....Q.......U.......8...e....... |
139e0 | 9e aa 12 00 45 00 00 00 b2 aa 12 00 40 00 00 00 f8 aa 12 00 26 00 00 00 39 ab 12 00 24 00 00 00 | ....E.......@.......&...9...$... |
13a00 | 60 ab 12 00 44 00 00 00 85 ab 12 00 4b 00 00 00 ca ab 12 00 4b 00 00 00 16 ac 12 00 1f 00 00 00 | `...D.......K.......K........... |
13a20 | 62 ac 12 00 96 00 00 00 82 ac 12 00 26 00 00 00 19 ad 12 00 29 00 00 00 40 ad 12 00 22 00 00 00 | b...........&.......)...@..."... |
13a40 | 6a ad 12 00 1f 00 00 00 8d ad 12 00 24 00 00 00 ad ad 12 00 28 00 00 00 d2 ad 12 00 18 00 00 00 | j...........$.......(........... |
13a60 | fb ad 12 00 1b 00 00 00 14 ae 12 00 26 00 00 00 30 ae 12 00 29 00 00 00 57 ae 12 00 57 00 00 00 | ............&...0...)...W...W... |
13a80 | 81 ae 12 00 54 00 00 00 d9 ae 12 00 52 00 00 00 2e af 12 00 51 00 00 00 81 af 12 00 40 00 00 00 | ....T.......R.......Q.......@... |
13aa0 | d3 af 12 00 28 00 00 00 14 b0 12 00 70 00 00 00 3d b0 12 00 26 00 00 00 ae b0 12 00 79 00 00 00 | ....(.......p...=...&.......y... |
13ac0 | d5 b0 12 00 56 00 00 00 4f b1 12 00 0b 00 00 00 a6 b1 12 00 2c 00 00 00 b2 b1 12 00 35 00 00 00 | ....V...O...........,.......5... |
13ae0 | df b1 12 00 3f 00 00 00 15 b2 12 00 2d 00 00 00 55 b2 12 00 33 00 00 00 83 b2 12 00 31 00 00 00 | ....?.......-...U...3.......1... |
13b00 | b7 b2 12 00 69 00 00 00 e9 b2 12 00 9c 00 00 00 53 b3 12 00 89 00 00 00 f0 b3 12 00 56 00 00 00 | ....i...........S...........V... |
13b20 | 7a b4 12 00 4c 00 00 00 d1 b4 12 00 3c 00 00 00 1e b5 12 00 9e 00 00 00 5b b5 12 00 26 00 00 00 | z...L.......<...........[...&... |
13b40 | fa b5 12 00 27 00 00 00 21 b6 12 00 1f 00 00 00 49 b6 12 00 5c 00 00 00 69 b6 12 00 3f 00 00 00 | ....'...!.......I...\...i...?... |
13b60 | c6 b6 12 00 36 00 00 00 06 b7 12 00 38 00 00 00 3d b7 12 00 66 00 00 00 76 b7 12 00 24 00 00 00 | ....6.......8...=...f...v...$... |
13b80 | dd b7 12 00 27 00 00 00 02 b8 12 00 27 00 00 00 2a b8 12 00 1e 00 00 00 52 b8 12 00 24 01 00 00 | ....'.......'...*.......R...$... |
13ba0 | 71 b8 12 00 a1 00 00 00 96 b9 12 00 3c 00 00 00 38 ba 12 00 6e 00 00 00 75 ba 12 00 83 00 00 00 | q...........<...8...n...u....... |
13bc0 | e4 ba 12 00 3e 00 00 00 68 bb 12 00 55 00 00 00 a7 bb 12 00 27 01 00 00 fd bb 12 00 50 00 00 00 | ....>...h...U.......'.......P... |
13be0 | 25 bd 12 00 22 00 00 00 76 bd 12 00 5a 00 00 00 99 bd 12 00 2c 00 00 00 f4 bd 12 00 47 00 00 00 | %..."...v...Z.......,.......G... |
13c00 | 21 be 12 00 7b 00 00 00 69 be 12 00 77 00 00 00 e5 be 12 00 65 00 00 00 5d bf 12 00 65 00 00 00 | !...{...i...w.......e...]...e... |
13c20 | c3 bf 12 00 5a 00 00 00 29 c0 12 00 5a 00 00 00 84 c0 12 00 72 00 00 00 df c0 12 00 2e 00 00 00 | ....Z...)...Z.......r........... |
13c40 | 52 c1 12 00 24 00 00 00 81 c1 12 00 61 00 00 00 a6 c1 12 00 55 00 00 00 08 c2 12 00 2b 00 00 00 | R...$.......a.......U.......+... |
13c60 | 5e c2 12 00 29 00 00 00 8a c2 12 00 27 00 00 00 b4 c2 12 00 28 00 00 00 dc c2 12 00 29 00 00 00 | ^...).......'.......(.......)... |
13c80 | 05 c3 12 00 27 00 00 00 2f c3 12 00 28 00 00 00 57 c3 12 00 4c 00 00 00 80 c3 12 00 4c 00 00 00 | ....'.../...(...W...L.......L... |
13ca0 | cd c3 12 00 38 00 00 00 1a c4 12 00 54 00 00 00 53 c4 12 00 0b 00 00 00 a8 c4 12 00 0f 00 00 00 | ....8.......T...S............... |
13cc0 | b4 c4 12 00 49 00 00 00 c4 c4 12 00 0b 00 00 00 0e c5 12 00 43 00 00 00 1a c5 12 00 43 00 00 00 | ....I...............C.......C... |
13ce0 | 5e c5 12 00 36 00 00 00 a2 c5 12 00 29 00 00 00 d9 c5 12 00 2e 00 00 00 03 c6 12 00 38 00 00 00 | ^...6.......)...............8... |
13d00 | 32 c6 12 00 2c 00 00 00 6b c6 12 00 46 00 00 00 98 c6 12 00 22 00 00 00 df c6 12 00 77 00 00 00 | 2...,...k...F.......".......w... |
13d20 | 02 c7 12 00 28 00 00 00 7a c7 12 00 3e 00 00 00 a3 c7 12 00 28 00 00 00 e2 c7 12 00 3e 00 00 00 | ....(...z...>.......(.......>... |
13d40 | 0b c8 12 00 29 00 00 00 4a c8 12 00 5d 00 00 00 74 c8 12 00 c9 00 00 00 d2 c8 12 00 3f 00 00 00 | ....)...J...]...t...........?... |
13d60 | 9c c9 12 00 dd 00 00 00 dc c9 12 00 4c 00 00 00 ba ca 12 00 19 00 00 00 07 cb 12 00 7f 00 00 00 | ............L................... |
13d80 | 21 cb 12 00 1d 00 00 00 a1 cb 12 00 73 00 00 00 bf cb 12 00 31 00 00 00 33 cc 12 00 d7 00 00 00 | !...........s.......1...3....... |
13da0 | 65 cc 12 00 1e 00 00 00 3d cd 12 00 24 00 00 00 5c cd 12 00 5c 00 00 00 81 cd 12 00 21 00 00 00 | e.......=...$...\...\.......!... |
13dc0 | de cd 12 00 52 00 00 00 00 ce 12 00 5c 00 00 00 53 ce 12 00 b7 00 00 00 b0 ce 12 00 44 01 00 00 | ....R.......\...S...........D... |
13de0 | 68 cf 12 00 a5 01 00 00 ad d0 12 00 27 00 00 00 53 d2 12 00 88 01 00 00 7b d2 12 00 30 00 00 00 | h...........'...S.......{...0... |
13e00 | 04 d4 12 00 3e 00 00 00 35 d4 12 00 33 01 00 00 74 d4 12 00 41 00 00 00 a8 d5 12 00 d1 00 00 00 | ....>...5...3...t...A........... |
13e20 | ea d5 12 00 c2 01 00 00 bc d6 12 00 49 00 00 00 7f d8 12 00 e7 00 00 00 c9 d8 12 00 65 01 00 00 | ............I...............e... |
13e40 | b1 d9 12 00 1f 00 00 00 17 db 12 00 30 00 00 00 37 db 12 00 33 00 00 00 68 db 12 00 11 00 00 00 | ............0...7...3...h....... |
13e60 | 9c db 12 00 05 00 00 00 ae db 12 00 03 00 00 00 b4 db 12 00 0e 00 00 00 b8 db 12 00 1b 00 00 00 | ................................ |
13e80 | c7 db 12 00 1d 00 00 00 e3 db 12 00 1f 00 00 00 01 dc 12 00 04 00 00 00 21 dc 12 00 0d 00 00 00 | ........................!....... |
13ea0 | 26 dc 12 00 32 00 00 00 34 dc 12 00 29 00 00 00 67 dc 12 00 04 00 00 00 91 dc 12 00 07 00 00 00 | &...2...4...)...g............... |
13ec0 | 96 dc 12 00 09 00 00 00 9e dc 12 00 0d 00 00 00 a8 dc 12 00 17 00 00 00 b6 dc 12 00 0f 00 00 00 | ................................ |
13ee0 | ce dc 12 00 0d 00 00 00 de dc 12 00 06 00 00 00 ec dc 12 00 19 00 00 00 f3 dc 12 00 14 00 00 00 | ................................ |
13f00 | 0d dd 12 00 05 00 00 00 22 dd 12 00 15 00 00 00 28 dd 12 00 04 00 00 00 3e dd 12 00 04 00 00 00 | ........".......(.......>....... |
13f20 | 43 dd 12 00 06 00 00 00 48 dd 12 00 51 00 00 00 4f dd 12 00 4a 01 00 00 a1 dd 12 00 50 01 00 00 | C.......H...Q...O...J.......P... |
13f40 | ec de 12 00 4d 00 00 00 3d e0 12 00 05 00 00 00 8b e0 12 00 12 00 00 00 91 e0 12 00 15 00 00 00 | ....M...=....................... |
13f60 | a4 e0 12 00 22 00 00 00 ba e0 12 00 10 00 00 00 dd e0 12 00 12 00 00 00 ee e0 12 00 0e 00 00 00 | ...."........................... |
13f80 | 01 e1 12 00 10 00 00 00 10 e1 12 00 13 00 00 00 21 e1 12 00 16 00 00 00 35 e1 12 00 06 00 00 00 | ................!.......5....... |
13fa0 | 4c e1 12 00 09 00 00 00 53 e1 12 00 1d 00 00 00 5d e1 12 00 05 00 00 00 7b e1 12 00 0b 00 00 00 | L.......S.......].......{....... |
13fc0 | 81 e1 12 00 13 00 00 00 8d e1 12 00 0d 00 00 00 a1 e1 12 00 05 00 00 00 af e1 12 00 68 00 00 00 | ............................h... |
13fe0 | b5 e1 12 00 67 00 00 00 1e e2 12 00 79 00 00 00 86 e2 12 00 66 00 00 00 00 e3 12 00 03 00 00 00 | ....g.......y.......f........... |
14000 | 67 e3 12 00 08 00 00 00 6b e3 12 00 31 00 00 00 74 e3 12 00 07 00 00 00 a6 e3 12 00 08 00 00 00 | g.......k...1...t............... |
14020 | ae e3 12 00 38 00 00 00 b7 e3 12 00 10 00 00 00 f0 e3 12 00 0b 00 00 00 01 e4 12 00 03 00 00 00 | ....8........................... |
14040 | 0d e4 12 00 1d 00 00 00 11 e4 12 00 06 00 00 00 2f e4 12 00 1d 00 00 00 36 e4 12 00 09 00 00 00 | ................/.......6....... |
14060 | 54 e4 12 00 26 00 00 00 5e e4 12 00 6d 00 00 00 85 e4 12 00 46 00 00 00 f3 e4 12 00 32 00 00 00 | T...&...^...m.......F.......2... |
14080 | 3a e5 12 00 46 00 00 00 6d e5 12 00 04 00 00 00 b4 e5 12 00 08 00 00 00 b9 e5 12 00 07 00 00 00 | :...F...m....................... |
140a0 | c2 e5 12 00 46 00 00 00 ca e5 12 00 0d 00 00 00 11 e6 12 00 05 00 00 00 1f e6 12 00 1b 00 00 00 | ....F........................... |
140c0 | 25 e6 12 00 1c 00 00 00 41 e6 12 00 73 00 00 00 5e e6 12 00 71 00 00 00 d2 e6 12 00 04 00 00 00 | %.......A...s...^...q........... |
140e0 | 44 e7 12 00 06 00 00 00 49 e7 12 00 04 00 00 00 50 e7 12 00 05 00 00 00 55 e7 12 00 10 00 00 00 | D.......I.......P.......U....... |
14100 | 5b e7 12 00 3c 00 00 00 6c e7 12 00 32 00 00 00 a9 e7 12 00 1c 00 00 00 dc e7 12 00 6d 00 00 00 | [...<...l...2...............m... |
14120 | f9 e7 12 00 08 00 00 00 67 e8 12 00 14 00 00 00 70 e8 12 00 14 00 00 00 85 e8 12 00 14 00 00 00 | ........g.......p............... |
14140 | 9a e8 12 00 14 00 00 00 af e8 12 00 14 00 00 00 c4 e8 12 00 14 00 00 00 d9 e8 12 00 14 00 00 00 | ................................ |
14160 | ee e8 12 00 06 00 00 00 03 e9 12 00 06 00 00 00 0a e9 12 00 06 00 00 00 11 e9 12 00 06 00 00 00 | ................................ |
14180 | 18 e9 12 00 06 00 00 00 1f e9 12 00 06 00 00 00 26 e9 12 00 06 00 00 00 2d e9 12 00 06 00 00 00 | ................&.......-....... |
141a0 | 34 e9 12 00 1f 00 00 00 3b e9 12 00 08 00 00 00 5b e9 12 00 08 00 00 00 64 e9 12 00 a4 00 00 00 | 4.......;.......[.......d....... |
141c0 | 6d e9 12 00 03 00 00 00 12 ea 12 00 0d 00 00 00 16 ea 12 00 74 00 00 00 24 ea 12 00 9a 00 00 00 | m...................t...$....... |
141e0 | 99 ea 12 00 4c 00 00 00 34 eb 12 00 04 00 00 00 81 eb 12 00 0c 00 00 00 86 eb 12 00 3f 00 00 00 | ....L...4...................?... |
14200 | 93 eb 12 00 29 00 00 00 d3 eb 12 00 37 00 00 00 fd eb 12 00 2c 00 00 00 35 ec 12 00 0e 00 00 00 | ....).......7.......,...5....... |
14220 | 62 ec 12 00 33 00 00 00 71 ec 12 00 33 00 00 00 a5 ec 12 00 0b 00 00 00 d9 ec 12 00 14 00 00 00 | b...3...q...3................... |
14240 | e5 ec 12 00 71 00 00 00 fa ec 12 00 46 00 00 00 6c ed 12 00 04 00 00 00 b3 ed 12 00 0b 00 00 00 | ....q.......F...l............... |
14260 | b8 ed 12 00 12 00 00 00 c4 ed 12 00 0f 00 00 00 d7 ed 12 00 08 00 00 00 e7 ed 12 00 06 00 00 00 | ................................ |
14280 | f0 ed 12 00 03 00 00 00 f7 ed 12 00 0a 00 00 00 fb ed 12 00 0b 00 00 00 06 ee 12 00 40 00 00 00 | ............................@... |
142a0 | 12 ee 12 00 07 00 00 00 53 ee 12 00 06 00 00 00 5b ee 12 00 05 00 00 00 62 ee 12 00 9b 00 00 00 | ........S.......[.......b....... |
142c0 | 68 ee 12 00 11 00 00 00 04 ef 12 00 0d 00 00 00 16 ef 12 00 13 00 00 00 24 ef 12 00 15 00 00 00 | h.......................$....... |
142e0 | 38 ef 12 00 18 00 00 00 4e ef 12 00 1b 00 00 00 67 ef 12 00 0a 00 00 00 83 ef 12 00 12 00 00 00 | 8.......N.......g............... |
14300 | 8e ef 12 00 1c 00 00 00 a1 ef 12 00 0f 00 00 00 be ef 12 00 05 00 00 00 ce ef 12 00 0e 00 00 00 | ................................ |
14320 | d4 ef 12 00 0e 00 00 00 e3 ef 12 00 0d 00 00 00 f2 ef 12 00 2a 00 00 00 00 f0 12 00 15 00 00 00 | ....................*........... |
14340 | 2b f0 12 00 31 00 00 00 41 f0 12 00 39 00 00 00 73 f0 12 00 34 00 00 00 ad f0 12 00 04 00 00 00 | +...1...A...9...s...4........... |
14360 | e2 f0 12 00 0b 00 00 00 e7 f0 12 00 09 00 00 00 f3 f0 12 00 07 00 00 00 fd f0 12 00 05 00 00 00 | ................................ |
14380 | 05 f1 12 00 72 00 00 00 0b f1 12 00 08 00 00 00 7e f1 12 00 0e 00 00 00 87 f1 12 00 11 00 00 00 | ....r...........~............... |
143a0 | 96 f1 12 00 38 00 00 00 a8 f1 12 00 0d 00 00 00 e1 f1 12 00 0d 00 00 00 ef f1 12 00 06 00 00 00 | ....8........................... |
143c0 | fd f1 12 00 3a 00 00 00 04 f2 12 00 0b 00 00 00 3f f2 12 00 3f 00 00 00 4b f2 12 00 40 00 00 00 | ....:...........?...?...K...@... |
143e0 | 8b f2 12 00 0e 00 00 00 cc f2 12 00 0f 00 00 00 db f2 12 00 07 00 00 00 eb f2 12 00 0e 00 00 00 | ................................ |
14400 | f3 f2 12 00 0c 00 00 00 02 f3 12 00 ad 00 00 00 0f f3 12 00 0b 00 00 00 bd f3 12 00 06 00 00 00 | ................................ |
14420 | c9 f3 12 00 04 00 00 00 d0 f3 12 00 d7 00 00 00 d5 f3 12 00 10 00 00 00 ad f4 12 00 ed 01 00 00 | ................................ |
14440 | be f4 12 00 0b 00 00 00 ac f6 12 00 0b 00 00 00 b8 f6 12 00 0c 00 00 00 c4 f6 12 00 06 00 00 00 | ................................ |
14460 | d1 f6 12 00 0e 00 00 00 d8 f6 12 00 58 00 00 00 e7 f6 12 00 04 00 00 00 40 f7 12 00 04 00 00 00 | ............X...........@....... |
14480 | 45 f7 12 00 05 00 00 00 4a f7 12 00 0e 00 00 00 50 f7 12 00 47 00 00 00 5f f7 12 00 05 00 00 00 | E.......J.......P...G..._....... |
144a0 | a7 f7 12 00 07 00 00 00 ad f7 12 00 68 00 00 00 b5 f7 12 00 19 00 00 00 1e f8 12 00 14 00 00 00 | ............h................... |
144c0 | 38 f8 12 00 2c 00 00 00 4d f8 12 00 0b 00 00 00 7a f8 12 00 09 00 00 00 86 f8 12 00 08 00 00 00 | 8...,...M.......z............... |
144e0 | 90 f8 12 00 53 00 00 00 99 f8 12 00 08 00 00 00 ed f8 12 00 22 00 00 00 f6 f8 12 00 04 00 00 00 | ....S..............."........... |
14500 | 19 f9 12 00 05 00 00 00 1e f9 12 00 01 00 00 00 00 00 00 00 aa 06 00 00 72 09 00 00 c9 0a 00 00 | ........................r....... |
14520 | 1c 03 00 00 ae 13 00 00 cb 09 00 00 8a 0d 00 00 00 00 00 00 27 0e 00 00 b4 04 00 00 00 00 00 00 | ....................'........... |
14540 | 00 00 00 00 71 0f 00 00 31 11 00 00 7b 00 00 00 0a 11 00 00 69 06 00 00 9e 0c 00 00 a8 08 00 00 | ....q...1...{.......i........... |
14560 | 76 13 00 00 95 0d 00 00 0d 08 00 00 00 00 00 00 19 06 00 00 00 00 00 00 1e 07 00 00 7f 10 00 00 | v............................... |
14580 | 00 00 00 00 ae 0b 00 00 86 0a 00 00 d0 0c 00 00 36 11 00 00 19 02 00 00 ba 00 00 00 00 00 00 00 | ................6............... |
145a0 | a0 06 00 00 5f 03 00 00 d8 07 00 00 0b 03 00 00 2d 07 00 00 57 12 00 00 00 00 00 00 00 00 00 00 | ...._...........-...W........... |
145c0 | 17 06 00 00 94 0d 00 00 69 0f 00 00 e8 00 00 00 f6 00 00 00 14 01 00 00 22 01 00 00 28 01 00 00 | ........i..............."...(... |
145e0 | 30 01 00 00 36 01 00 00 3e 01 00 00 40 01 00 00 42 01 00 00 5d 05 00 00 aa 09 00 00 62 07 00 00 | 0...6...>...@...B...].......b... |
14600 | b1 0b 00 00 02 06 00 00 be 09 00 00 16 07 00 00 00 00 00 00 82 13 00 00 37 06 00 00 00 00 00 00 | ........................7....... |
14620 | d5 09 00 00 3d 07 00 00 dc 0e 00 00 00 00 00 00 00 00 00 00 29 03 00 00 52 0f 00 00 eb 0e 00 00 | ....=...............)...R....... |
14640 | 21 14 00 00 e5 08 00 00 00 00 00 00 be 03 00 00 1e 09 00 00 ec 11 00 00 00 00 00 00 00 00 00 00 | !............................... |
14660 | d4 07 00 00 97 0d 00 00 8d 06 00 00 b5 0d 00 00 b7 00 00 00 00 00 00 00 00 00 00 00 41 02 00 00 | ............................A... |
14680 | 0c 0c 00 00 59 04 00 00 50 12 00 00 00 00 00 00 d7 07 00 00 e8 0c 00 00 26 10 00 00 c7 06 00 00 | ....Y...P...............&....... |
146a0 | 42 02 00 00 4d 0c 00 00 a3 11 00 00 13 05 00 00 a7 0d 00 00 77 01 00 00 25 10 00 00 b6 0b 00 00 | B...M...............w...%....... |
146c0 | b2 12 00 00 73 03 00 00 00 00 00 00 00 00 00 00 21 02 00 00 30 14 00 00 21 09 00 00 9b 04 00 00 | ....s...........!...0...!....... |
146e0 | 59 09 00 00 25 07 00 00 c1 02 00 00 50 0f 00 00 4a 04 00 00 17 04 00 00 00 00 00 00 4b 0e 00 00 | Y...%.......P...J...........K... |
14700 | e6 06 00 00 80 03 00 00 00 00 00 00 d0 08 00 00 57 02 00 00 9d 13 00 00 c4 13 00 00 6c 0a 00 00 | ................W...........l... |
14720 | 85 01 00 00 00 00 00 00 cc 0a 00 00 a5 00 00 00 89 05 00 00 cd 10 00 00 c0 03 00 00 fb 10 00 00 | ................................ |
14740 | 00 00 00 00 34 12 00 00 1d 10 00 00 ab 0f 00 00 31 0e 00 00 48 13 00 00 9a 0e 00 00 00 00 00 00 | ....4...........1...H........... |
14760 | 9a 12 00 00 00 00 00 00 62 13 00 00 76 00 00 00 ce 0a 00 00 ab 13 00 00 76 12 00 00 83 0b 00 00 | ........b...v...........v....... |
14780 | 65 04 00 00 00 00 00 00 4d 00 00 00 b0 0e 00 00 7c 0b 00 00 00 00 00 00 5f 0f 00 00 5f 13 00 00 | e.......M.......|......._..._... |
147a0 | 20 09 00 00 00 00 00 00 84 05 00 00 4e 14 00 00 aa 08 00 00 46 10 00 00 4c 07 00 00 ae 0e 00 00 | ............N.......F...L....... |
147c0 | f6 0d 00 00 d3 07 00 00 00 00 00 00 a4 00 00 00 00 00 00 00 00 00 00 00 74 11 00 00 73 04 00 00 | ........................t...s... |
147e0 | 4f 0a 00 00 2a 01 00 00 9b 01 00 00 0a 05 00 00 73 0a 00 00 21 0b 00 00 84 01 00 00 ec 02 00 00 | O...*...........s...!........... |
14800 | ed 05 00 00 a8 03 00 00 14 12 00 00 06 02 00 00 2d 14 00 00 8b 03 00 00 00 00 00 00 7f 00 00 00 | ................-............... |
14820 | 00 00 00 00 c7 0d 00 00 b5 03 00 00 20 0c 00 00 96 13 00 00 cd 13 00 00 93 11 00 00 00 00 00 00 | ................................ |
14840 | 97 0a 00 00 34 02 00 00 d3 09 00 00 00 00 00 00 7b 0a 00 00 3c 0f 00 00 00 00 00 00 f8 0d 00 00 | ....4...........{...<........... |
14860 | 53 05 00 00 b4 06 00 00 1a 10 00 00 9f 0a 00 00 00 00 00 00 9d 06 00 00 bf 0b 00 00 22 0a 00 00 | S..........................."... |
14880 | 15 06 00 00 00 00 00 00 2b 14 00 00 00 00 00 00 d5 01 00 00 41 0b 00 00 00 00 00 00 6d 11 00 00 | ........+...........A.......m... |
148a0 | 96 07 00 00 fc 07 00 00 ae 00 00 00 7a 02 00 00 00 13 00 00 8f 0b 00 00 a5 0b 00 00 00 00 00 00 | ............z................... |
148c0 | 86 0d 00 00 33 01 00 00 a9 0e 00 00 00 00 00 00 b6 06 00 00 d3 06 00 00 00 00 00 00 19 05 00 00 | ....3........................... |
148e0 | 00 00 00 00 fe 0b 00 00 d0 06 00 00 00 00 00 00 3a 0c 00 00 00 00 00 00 d5 05 00 00 20 12 00 00 | ................:............... |
14900 | 36 00 00 00 57 03 00 00 00 00 00 00 a0 04 00 00 00 00 00 00 0e 08 00 00 00 00 00 00 00 00 00 00 | 6...W........................... |
14920 | 3b 00 00 00 7a 0a 00 00 cd 0e 00 00 00 00 00 00 00 00 00 00 72 0b 00 00 02 01 00 00 00 00 00 00 | ;...z...............r........... |
14940 | 50 09 00 00 81 04 00 00 5d 0e 00 00 c3 01 00 00 04 0f 00 00 85 12 00 00 c1 06 00 00 b9 0e 00 00 | P.......]....................... |
14960 | af 01 00 00 00 00 00 00 09 01 00 00 96 03 00 00 9b 0e 00 00 6d 04 00 00 2c 04 00 00 00 00 00 00 | ....................m...,....... |
14980 | 00 00 00 00 0b 0e 00 00 ad 09 00 00 3a 11 00 00 00 00 00 00 d1 12 00 00 dd 12 00 00 39 06 00 00 | ............:...............9... |
149a0 | 1d 03 00 00 d6 05 00 00 b1 12 00 00 dd 0b 00 00 3d 10 00 00 83 07 00 00 00 00 00 00 1b 03 00 00 | ................=............... |
149c0 | 7a 05 00 00 66 12 00 00 f1 0a 00 00 3e 0a 00 00 50 07 00 00 ba 04 00 00 00 00 00 00 e5 05 00 00 | z...f.......>...P............... |
149e0 | 6a 10 00 00 66 0d 00 00 45 04 00 00 3d 11 00 00 5e 12 00 00 5e 0b 00 00 7e 01 00 00 ee 02 00 00 | j...f...E...=...^...^...~....... |
14a00 | 01 0a 00 00 cd 07 00 00 00 00 00 00 56 11 00 00 b8 0c 00 00 65 10 00 00 00 00 00 00 00 00 00 00 | ............V.......e........... |
14a20 | 00 00 00 00 23 08 00 00 83 06 00 00 00 00 00 00 00 00 00 00 f2 0c 00 00 79 11 00 00 00 00 00 00 | ....#...................y....... |
14a40 | 00 00 00 00 34 01 00 00 9a 10 00 00 00 00 00 00 1f 0c 00 00 a1 12 00 00 00 00 00 00 b4 0e 00 00 | ....4........................... |
14a60 | b0 10 00 00 55 13 00 00 c6 13 00 00 50 06 00 00 9e 10 00 00 d2 06 00 00 4b 06 00 00 78 03 00 00 | ....U.......P...........K...x... |
14a80 | bd 12 00 00 00 00 00 00 64 04 00 00 e4 11 00 00 de 0b 00 00 00 00 00 00 91 0f 00 00 5c 12 00 00 | ........d...................\... |
14aa0 | 00 00 00 00 5a 09 00 00 e2 07 00 00 31 07 00 00 f3 10 00 00 51 13 00 00 00 00 00 00 03 02 00 00 | ....Z.......1.......Q........... |
14ac0 | c4 09 00 00 bf 0e 00 00 76 07 00 00 00 00 00 00 2b 0b 00 00 47 02 00 00 28 06 00 00 b4 07 00 00 | ........v.......+...G...(....... |
14ae0 | c7 03 00 00 00 00 00 00 fd 0c 00 00 00 00 00 00 e2 02 00 00 5a 12 00 00 b9 07 00 00 77 10 00 00 | ....................Z.......w... |
14b00 | 31 08 00 00 eb 13 00 00 00 00 00 00 c6 0f 00 00 7c 09 00 00 61 02 00 00 b1 13 00 00 fd 12 00 00 | 1...............|...a........... |
14b20 | 00 00 00 00 53 08 00 00 87 04 00 00 8d 11 00 00 58 13 00 00 00 00 00 00 00 00 00 00 72 0c 00 00 | ....S...........X...........r... |
14b40 | 04 12 00 00 04 02 00 00 00 00 00 00 c8 0d 00 00 16 11 00 00 a5 01 00 00 19 0a 00 00 f8 0c 00 00 | ................................ |
14b60 | 00 00 00 00 00 00 00 00 cd 05 00 00 00 00 00 00 d4 03 00 00 60 0a 00 00 00 00 00 00 c4 00 00 00 | ....................`........... |
14b80 | 88 06 00 00 06 0a 00 00 f8 0f 00 00 a6 10 00 00 12 10 00 00 59 0d 00 00 3e 05 00 00 60 0d 00 00 | ....................Y...>...`... |
14ba0 | 06 10 00 00 00 00 00 00 33 13 00 00 00 00 00 00 99 10 00 00 14 11 00 00 f1 08 00 00 6d 0f 00 00 | ........3...................m... |
14bc0 | 76 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fb 08 00 00 0a 0d 00 00 4d 04 00 00 24 11 00 00 | v.......................M...$... |
14be0 | 00 00 00 00 60 13 00 00 2e 12 00 00 29 01 00 00 85 0d 00 00 1e 12 00 00 38 0a 00 00 05 09 00 00 | ....`.......)...........8....... |
14c00 | 26 0f 00 00 00 00 00 00 ac 06 00 00 c7 0f 00 00 75 06 00 00 00 00 00 00 ef 09 00 00 00 00 00 00 | &...............u............... |
14c20 | 00 00 00 00 b1 05 00 00 14 02 00 00 00 00 00 00 00 00 00 00 99 11 00 00 64 12 00 00 f3 0e 00 00 | ........................d....... |
14c40 | de 0e 00 00 00 00 00 00 a6 13 00 00 67 0e 00 00 89 0b 00 00 05 0e 00 00 f7 10 00 00 45 00 00 00 | ............g...............E... |
14c60 | 00 00 00 00 12 0a 00 00 a5 02 00 00 1a 08 00 00 20 01 00 00 0c 0f 00 00 00 00 00 00 00 00 00 00 | ................................ |
14c80 | 00 00 00 00 3b 08 00 00 4b 05 00 00 00 00 00 00 f5 01 00 00 82 0e 00 00 4b 08 00 00 00 00 00 00 | ....;...K...............K....... |
14ca0 | 00 00 00 00 95 0b 00 00 8d 0d 00 00 87 0b 00 00 ec 12 00 00 87 0a 00 00 e5 0b 00 00 00 00 00 00 | ................................ |
14cc0 | d3 12 00 00 31 01 00 00 a6 07 00 00 ea 09 00 00 ab 07 00 00 00 00 00 00 8e 08 00 00 01 03 00 00 | ....1........................... |
14ce0 | 91 00 00 00 00 00 00 00 ad 0a 00 00 a8 0f 00 00 f0 0e 00 00 68 04 00 00 03 01 00 00 00 00 00 00 | ....................h........... |
14d00 | e6 08 00 00 60 08 00 00 00 00 00 00 1d 0c 00 00 da 00 00 00 ed 0c 00 00 de 09 00 00 64 05 00 00 | ....`.......................d... |
14d20 | 7c 01 00 00 ab 01 00 00 ce 0f 00 00 71 04 00 00 de 0a 00 00 3f 0e 00 00 04 01 00 00 89 02 00 00 | |...........q.......?........... |
14d40 | 9e 0d 00 00 07 0d 00 00 bc 03 00 00 00 00 00 00 00 00 00 00 c0 00 00 00 88 09 00 00 00 00 00 00 | ................................ |
14d60 | e9 11 00 00 00 00 00 00 00 00 00 00 97 04 00 00 48 10 00 00 00 00 00 00 0e 12 00 00 90 13 00 00 | ................H............... |
14d80 | b6 09 00 00 00 00 00 00 e4 07 00 00 00 00 00 00 c4 10 00 00 2d 0a 00 00 70 0f 00 00 f7 0a 00 00 | ....................-...p....... |
14da0 | 6b 12 00 00 bd 09 00 00 f6 08 00 00 53 13 00 00 00 00 00 00 6a 0a 00 00 92 0b 00 00 08 02 00 00 | k...........S.......j........... |
14dc0 | 00 00 00 00 00 00 00 00 9c 12 00 00 ab 0c 00 00 a9 02 00 00 d6 0e 00 00 31 0d 00 00 00 00 00 00 | ........................1....... |
14de0 | 1a 09 00 00 09 06 00 00 35 03 00 00 af 0c 00 00 8f 08 00 00 7d 12 00 00 54 05 00 00 57 0f 00 00 | ........5...........}...T...W... |
14e00 | a1 0b 00 00 84 08 00 00 00 00 00 00 88 10 00 00 2f 0b 00 00 dd 0a 00 00 1d 06 00 00 37 02 00 00 | ................/...........7... |
14e20 | 08 0a 00 00 00 00 00 00 bc 0f 00 00 00 00 00 00 00 00 00 00 6e 08 00 00 1e 0f 00 00 80 0b 00 00 | ....................n........... |
14e40 | d0 13 00 00 a1 07 00 00 9f 0d 00 00 56 0a 00 00 4f 0d 00 00 0b 0f 00 00 d9 0c 00 00 1b 0c 00 00 | ............V...O............... |
14e60 | 48 00 00 00 c2 0e 00 00 e7 09 00 00 ef 0e 00 00 d9 04 00 00 41 00 00 00 34 09 00 00 07 0e 00 00 | H...................A...4....... |
14e80 | 00 00 00 00 16 05 00 00 6f 08 00 00 73 0d 00 00 4f 08 00 00 e7 10 00 00 3d 05 00 00 00 00 00 00 | ........o...s...O.......=....... |
14ea0 | da 0e 00 00 67 0a 00 00 aa 0b 00 00 85 0b 00 00 d4 10 00 00 00 00 00 00 04 0e 00 00 fa 10 00 00 | ....g........................... |
14ec0 | cb 03 00 00 00 00 00 00 13 07 00 00 71 01 00 00 00 00 00 00 b7 0b 00 00 13 04 00 00 c3 02 00 00 | ............q................... |
14ee0 | 15 0e 00 00 d9 0e 00 00 27 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 0a 00 00 00 00 00 00 | ........'....................... |
14f00 | eb 0b 00 00 0f 14 00 00 d0 0a 00 00 fb 0a 00 00 7f 07 00 00 cc 01 00 00 2c 14 00 00 12 00 00 00 | ........................,....... |
14f20 | 0b 00 00 00 49 10 00 00 bc 0e 00 00 64 0e 00 00 3f 0f 00 00 56 0b 00 00 4d 02 00 00 70 12 00 00 | ....I.......d...?...V...M...p... |
14f40 | 9c 00 00 00 b5 0a 00 00 00 00 00 00 ea 02 00 00 ea 01 00 00 ac 10 00 00 97 07 00 00 41 0d 00 00 | ............................A... |
14f60 | 26 07 00 00 02 0f 00 00 44 05 00 00 74 00 00 00 df 00 00 00 2e 11 00 00 00 00 00 00 39 00 00 00 | &.......D...t...............9... |
14f80 | 11 12 00 00 3d 0d 00 00 00 00 00 00 eb 00 00 00 17 0e 00 00 08 0d 00 00 17 09 00 00 00 00 00 00 | ....=........................... |
14fa0 | 00 00 00 00 c2 10 00 00 42 0b 00 00 6b 01 00 00 c9 02 00 00 00 00 00 00 7a 04 00 00 fe 0e 00 00 | ........B...k...........z....... |
14fc0 | 00 0f 00 00 f8 11 00 00 dc 03 00 00 cc 0e 00 00 47 12 00 00 f4 01 00 00 2f 0d 00 00 ee 10 00 00 | ................G......./....... |
14fe0 | 39 0b 00 00 00 00 00 00 73 06 00 00 cc 08 00 00 32 0f 00 00 38 04 00 00 97 06 00 00 e4 09 00 00 | 9.......s.......2...8........... |
15000 | 39 04 00 00 7e 10 00 00 5d 12 00 00 00 00 00 00 99 04 00 00 4c 02 00 00 fd 0f 00 00 0d 0e 00 00 | 9...~...]...........L........... |
15020 | 53 01 00 00 ca 04 00 00 00 00 00 00 47 00 00 00 00 00 00 00 a1 09 00 00 00 00 00 00 08 0b 00 00 | S...........G................... |
15040 | 4a 11 00 00 00 00 00 00 1e 0b 00 00 2e 08 00 00 00 00 00 00 a1 03 00 00 c5 0c 00 00 e6 12 00 00 | J............................... |
15060 | f5 0d 00 00 e3 11 00 00 62 00 00 00 e4 0a 00 00 00 00 00 00 b6 08 00 00 d3 03 00 00 39 0c 00 00 | ........b...................9... |
15080 | 00 00 00 00 ba 13 00 00 ea 04 00 00 11 0b 00 00 81 00 00 00 30 11 00 00 b7 13 00 00 5a 0a 00 00 | ....................0.......Z... |
150a0 | fd 11 00 00 00 00 00 00 56 02 00 00 00 00 00 00 ae 0a 00 00 2a 03 00 00 63 13 00 00 03 05 00 00 | ........V...........*...c....... |
150c0 | e3 0e 00 00 dd 01 00 00 58 11 00 00 00 00 00 00 00 00 00 00 f6 07 00 00 00 00 00 00 a4 0b 00 00 | ........X....................... |
150e0 | e1 10 00 00 00 00 00 00 f8 01 00 00 45 12 00 00 13 10 00 00 00 00 00 00 5d 11 00 00 a4 0d 00 00 | ............E...........]....... |
15100 | a3 0e 00 00 00 00 00 00 a0 08 00 00 00 00 00 00 25 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................%............... |
15120 | 0e 02 00 00 00 00 00 00 00 00 00 00 d5 07 00 00 0e 07 00 00 5b 08 00 00 dd 02 00 00 2b 0f 00 00 | ....................[.......+... |
15140 | 7b 02 00 00 b5 0e 00 00 00 00 00 00 83 09 00 00 1f 00 00 00 59 11 00 00 32 00 00 00 ef 0a 00 00 | {...................Y...2....... |
15160 | 9e 08 00 00 ff 12 00 00 a1 04 00 00 de 0d 00 00 00 00 00 00 57 0c 00 00 15 11 00 00 00 00 00 00 | ....................W........... |
15180 | fb 13 00 00 cc 07 00 00 3b 0e 00 00 61 0a 00 00 0c 14 00 00 e2 10 00 00 90 09 00 00 43 11 00 00 | ........;...a...............C... |
151a0 | 1c 12 00 00 00 00 00 00 09 11 00 00 00 00 00 00 ab 04 00 00 00 00 00 00 51 02 00 00 39 0f 00 00 | ........................Q...9... |
151c0 | 3d 02 00 00 3e 0d 00 00 d4 0b 00 00 00 00 00 00 cf 0d 00 00 da 07 00 00 00 00 00 00 e3 04 00 00 | =...>........................... |
151e0 | a3 08 00 00 fd 07 00 00 00 00 00 00 00 00 00 00 dc 0d 00 00 00 00 00 00 7a 08 00 00 67 04 00 00 | ........................z...g... |
15200 | 00 00 00 00 3c 0c 00 00 00 00 00 00 d3 00 00 00 06 01 00 00 08 01 00 00 0a 01 00 00 0b 01 00 00 | ....<........................... |
15220 | 0c 01 00 00 0d 01 00 00 0e 01 00 00 10 01 00 00 11 01 00 00 f6 0c 00 00 43 09 00 00 ce 0b 00 00 | ........................C....... |
15240 | 7d 06 00 00 00 00 00 00 44 0d 00 00 17 01 00 00 18 01 00 00 f2 00 00 00 1a 01 00 00 26 04 00 00 | }.......D...................&... |
15260 | 24 00 00 00 1e 01 00 00 00 00 00 00 1f 01 00 00 24 04 00 00 b9 0c 00 00 a3 03 00 00 00 00 00 00 | $...............$............... |
15280 | 00 00 00 00 40 09 00 00 00 00 00 00 24 01 00 00 be 05 00 00 00 00 00 00 3c 0b 00 00 25 01 00 00 | ....@.......$...........<...%... |
152a0 | 46 02 00 00 26 01 00 00 00 00 00 00 27 01 00 00 7f 13 00 00 f7 11 00 00 00 00 00 00 07 0b 00 00 | F...&.......'................... |
152c0 | a0 00 00 00 00 00 00 00 32 07 00 00 00 00 00 00 c6 04 00 00 2d 01 00 00 00 00 00 00 2e 01 00 00 | ........2...........-........... |
152e0 | 00 00 00 00 2f 01 00 00 2a 0a 00 00 19 0e 00 00 6c 01 00 00 8a 10 00 00 22 14 00 00 00 00 00 00 | ..../...*.......l......."....... |
15300 | 6f 03 00 00 38 03 00 00 af 11 00 00 c0 11 00 00 5c 0f 00 00 00 00 00 00 c9 03 00 00 35 01 00 00 | o...8...........\...........5... |
15320 | 00 00 00 00 1c 08 00 00 00 00 00 00 46 05 00 00 23 02 00 00 0f 09 00 00 73 0e 00 00 89 0a 00 00 | ............F...#.......s....... |
15340 | 6f 05 00 00 59 0c 00 00 57 11 00 00 d8 00 00 00 6e 10 00 00 00 00 00 00 00 00 00 00 fd 05 00 00 | o...Y...W.......n............... |
15360 | c3 0b 00 00 38 01 00 00 3a 01 00 00 27 12 00 00 3b 01 00 00 00 00 00 00 9e 07 00 00 00 00 00 00 | ....8...:...'...;............... |
15380 | ab 05 00 00 09 13 00 00 e2 08 00 00 3f 01 00 00 64 0a 00 00 00 00 00 00 00 00 00 00 3a 07 00 00 | ............?...d...........:... |
153a0 | 45 0b 00 00 00 00 00 00 b2 05 00 00 00 00 00 00 8b 12 00 00 d8 0a 00 00 00 00 00 00 de 11 00 00 | E............................... |
153c0 | a2 09 00 00 ad 03 00 00 84 0d 00 00 86 13 00 00 00 00 00 00 00 00 00 00 3e 00 00 00 64 10 00 00 | ........................>...d... |
153e0 | 95 13 00 00 83 12 00 00 00 00 00 00 2c 01 00 00 00 00 00 00 85 0e 00 00 17 11 00 00 a4 06 00 00 | ............,................... |
15400 | eb 12 00 00 45 03 00 00 00 00 00 00 8a 0c 00 00 9f 10 00 00 65 09 00 00 00 00 00 00 00 00 00 00 | ....E...............e........... |
15420 | 81 03 00 00 b2 03 00 00 25 04 00 00 8c 02 00 00 c6 09 00 00 e4 08 00 00 00 00 00 00 63 08 00 00 | ........%...................c... |
15440 | 00 00 00 00 77 0a 00 00 00 00 00 00 00 00 00 00 9b 13 00 00 54 0d 00 00 b0 03 00 00 81 10 00 00 | ....w...............T........... |
15460 | 58 0f 00 00 2f 0f 00 00 ca 0d 00 00 78 09 00 00 00 00 00 00 00 00 00 00 3b 0c 00 00 00 00 00 00 | X.../.......x...........;....... |
15480 | 9d 03 00 00 1a 0f 00 00 f4 06 00 00 06 05 00 00 39 0a 00 00 00 00 00 00 ff 06 00 00 80 00 00 00 | ................9............... |
154a0 | 00 00 00 00 4c 12 00 00 19 12 00 00 00 00 00 00 00 00 00 00 ba 01 00 00 79 13 00 00 77 08 00 00 | ....L...................y...w... |
154c0 | 70 13 00 00 e0 00 00 00 00 00 00 00 e8 05 00 00 7e 02 00 00 93 0c 00 00 d7 0c 00 00 00 00 00 00 | p...............~............... |
154e0 | 3d 08 00 00 96 0d 00 00 00 00 00 00 6f 09 00 00 37 13 00 00 e4 00 00 00 9a 07 00 00 cd 11 00 00 | =...........o...7............... |
15500 | b7 08 00 00 ca 05 00 00 00 00 00 00 98 02 00 00 6b 02 00 00 80 04 00 00 00 00 00 00 00 00 00 00 | ................k............... |
15520 | 50 13 00 00 23 0a 00 00 1b 00 00 00 00 00 00 00 00 00 00 00 95 09 00 00 9b 07 00 00 00 00 00 00 | P...#........................... |
15540 | 92 04 00 00 6a 03 00 00 00 00 00 00 00 00 00 00 a0 0d 00 00 da 03 00 00 13 02 00 00 aa 0f 00 00 | ....j........................... |
15560 | 74 01 00 00 00 00 00 00 00 00 00 00 b0 0c 00 00 60 01 00 00 00 00 00 00 bc 08 00 00 a6 04 00 00 | t...............`............... |
15580 | d6 07 00 00 dd 05 00 00 00 00 00 00 9f 05 00 00 00 00 00 00 10 14 00 00 bc 01 00 00 e6 04 00 00 | ................................ |
155a0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6f 11 00 00 02 0e 00 00 91 09 00 00 | ....................o........... |
155c0 | 0c 10 00 00 2b 0d 00 00 00 00 00 00 00 00 00 00 d6 11 00 00 cd 02 00 00 00 00 00 00 00 00 00 00 | ....+........................... |
155e0 | 1a 06 00 00 32 03 00 00 82 09 00 00 ff 0e 00 00 90 08 00 00 b6 04 00 00 06 14 00 00 00 00 00 00 | ....2........................... |
15600 | 00 00 00 00 36 13 00 00 2d 0b 00 00 90 0d 00 00 98 10 00 00 f3 00 00 00 00 00 00 00 8e 12 00 00 | ....6...-....................... |
15620 | cc 00 00 00 c9 09 00 00 e8 0a 00 00 00 00 00 00 8f 0e 00 00 8b 11 00 00 5d 02 00 00 51 09 00 00 | ........................]...Q... |
15640 | 00 00 00 00 6b 07 00 00 e6 07 00 00 00 00 00 00 09 04 00 00 93 00 00 00 e9 13 00 00 00 00 00 00 | ....k........................... |
15660 | 00 00 00 00 00 00 00 00 70 10 00 00 00 00 00 00 00 00 00 00 53 00 00 00 0d 0a 00 00 99 0b 00 00 | ........p...........S........... |
15680 | 00 00 00 00 6f 0e 00 00 00 03 00 00 00 00 00 00 00 00 00 00 1f 0a 00 00 bb 05 00 00 89 13 00 00 | ....o........................... |
156a0 | 00 00 00 00 71 02 00 00 00 00 00 00 98 00 00 00 26 02 00 00 00 00 00 00 7f 0a 00 00 2b 00 00 00 | ....q...........&...........+... |
156c0 | 46 00 00 00 00 00 00 00 8b 05 00 00 00 00 00 00 42 0c 00 00 ea 05 00 00 d3 0d 00 00 ba 02 00 00 | F...............B............... |
156e0 | 5d 01 00 00 16 0e 00 00 9e 01 00 00 77 11 00 00 00 00 00 00 3b 0b 00 00 76 05 00 00 dc 0b 00 00 | ]...........w.......;...v....... |
15700 | 9d 0a 00 00 5e 13 00 00 00 00 00 00 b4 11 00 00 d0 0d 00 00 f4 05 00 00 00 00 00 00 69 08 00 00 | ....^.......................i... |
15720 | f1 02 00 00 dd 07 00 00 08 13 00 00 de 04 00 00 57 06 00 00 e4 0b 00 00 78 0f 00 00 00 00 00 00 | ................W.......x....... |
15740 | ce 0d 00 00 c5 01 00 00 bd 0f 00 00 cd 00 00 00 22 12 00 00 ff 0a 00 00 00 00 00 00 5a 03 00 00 | ................"...........Z... |
15760 | 00 00 00 00 a2 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 03 00 00 00 00 00 00 00 00 00 00 | ................................ |
15780 | 3d 01 00 00 f2 0a 00 00 90 11 00 00 57 10 00 00 d1 08 00 00 7c 0c 00 00 92 10 00 00 00 00 00 00 | =...........W.......|........... |
157a0 | 97 08 00 00 00 00 00 00 00 00 00 00 2b 01 00 00 18 0e 00 00 e2 0b 00 00 78 11 00 00 10 12 00 00 | ............+...........x....... |
157c0 | 00 00 00 00 09 12 00 00 6a 01 00 00 d6 08 00 00 4c 06 00 00 b7 12 00 00 36 0c 00 00 3f 0b 00 00 | ........j.......L.......6...?... |
157e0 | 40 03 00 00 7d 08 00 00 50 0c 00 00 03 06 00 00 00 00 00 00 20 0b 00 00 90 0e 00 00 00 00 00 00 | @...}...P....................... |
15800 | 6d 12 00 00 00 00 00 00 e2 06 00 00 00 00 00 00 7b 12 00 00 04 07 00 00 fb 0b 00 00 02 14 00 00 | m...............{............... |
15820 | 92 0f 00 00 d4 00 00 00 7a 10 00 00 00 00 00 00 18 0c 00 00 a9 00 00 00 a0 13 00 00 01 0b 00 00 | ........z....................... |
15840 | 93 06 00 00 1e 0c 00 00 00 00 00 00 2c 02 00 00 56 09 00 00 00 00 00 00 61 09 00 00 00 00 00 00 | ............,...V.......a....... |
15860 | c0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 04 00 00 29 0d 00 00 16 10 00 00 00 00 00 00 | ................4...)........... |
15880 | 3c 0a 00 00 0d 04 00 00 00 00 00 00 10 03 00 00 b0 0f 00 00 01 0c 00 00 e2 0a 00 00 98 0c 00 00 | <............................... |
158a0 | 2e 0a 00 00 13 06 00 00 1c 06 00 00 c5 0d 00 00 50 0b 00 00 42 04 00 00 cf 03 00 00 e4 03 00 00 | ................P...B........... |
158c0 | 35 0f 00 00 79 07 00 00 f6 12 00 00 00 00 00 00 d0 12 00 00 00 00 00 00 00 00 00 00 1a 07 00 00 | 5...y........................... |
158e0 | 00 00 00 00 cb 0b 00 00 79 12 00 00 83 13 00 00 00 00 00 00 d2 08 00 00 c8 08 00 00 00 00 00 00 | ........y....................... |
15900 | 00 00 00 00 00 00 00 00 59 08 00 00 10 05 00 00 4c 10 00 00 7c 11 00 00 58 07 00 00 00 00 00 00 | ........Y.......L...|...X....... |
15920 | e1 0c 00 00 c0 0a 00 00 20 05 00 00 7b 0f 00 00 98 0f 00 00 97 12 00 00 00 00 00 00 38 05 00 00 | ............{...............8... |
15940 | 00 00 00 00 00 00 00 00 4a 0c 00 00 00 00 00 00 c5 12 00 00 e0 0b 00 00 91 03 00 00 f5 0b 00 00 | ........J....................... |
15960 | 01 12 00 00 04 0c 00 00 34 07 00 00 0d 0d 00 00 32 0c 00 00 96 01 00 00 00 00 00 00 e8 02 00 00 | ........4.......2............... |
15980 | 00 00 00 00 00 00 00 00 00 00 00 00 e1 02 00 00 c3 05 00 00 ca 07 00 00 b3 11 00 00 9c 09 00 00 | ................................ |
159a0 | 94 13 00 00 83 04 00 00 00 00 00 00 13 08 00 00 ac 0f 00 00 7b 0e 00 00 8a 07 00 00 cc 0f 00 00 | ....................{........... |
159c0 | a6 09 00 00 00 00 00 00 00 00 00 00 f1 04 00 00 59 05 00 00 00 00 00 00 e9 12 00 00 9d 02 00 00 | ................Y............... |
159e0 | c8 05 00 00 a2 0c 00 00 47 0b 00 00 ac 11 00 00 49 09 00 00 44 0b 00 00 3c 09 00 00 2f 0c 00 00 | ........G.......I...D...<.../... |
15a00 | 4f 0e 00 00 e4 06 00 00 49 14 00 00 00 00 00 00 ff 10 00 00 cb 02 00 00 8a 06 00 00 00 00 00 00 | O.......I....................... |
15a20 | 33 02 00 00 bc 00 00 00 00 00 00 00 78 0d 00 00 80 13 00 00 00 00 00 00 10 04 00 00 50 0a 00 00 | 3...........x...............P... |
15a40 | 5f 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a2 0d 00 00 db 11 00 00 00 00 00 00 e6 03 00 00 | _............................... |
15a60 | 11 11 00 00 d5 0b 00 00 c6 0c 00 00 ce 07 00 00 00 00 00 00 00 00 00 00 f2 02 00 00 00 00 00 00 | ................................ |
15a80 | 00 00 00 00 61 0b 00 00 58 10 00 00 47 05 00 00 86 12 00 00 00 00 00 00 1f 12 00 00 00 00 00 00 | ....a...X...G................... |
15aa0 | 0b 05 00 00 00 00 00 00 80 0f 00 00 00 00 00 00 00 00 00 00 52 09 00 00 00 00 00 00 ef 04 00 00 | ....................R........... |
15ac0 | a1 0a 00 00 00 00 00 00 30 04 00 00 00 00 00 00 31 0c 00 00 a7 01 00 00 00 00 00 00 bd 0d 00 00 | ........0.......1............... |
15ae0 | d1 03 00 00 2a 06 00 00 48 0a 00 00 00 11 00 00 e0 08 00 00 f5 13 00 00 b6 05 00 00 00 00 00 00 | ....*...H....................... |
15b00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 27 06 00 00 e6 05 00 00 00 00 00 00 00 00 00 00 | ................'............... |
15b20 | a0 0b 00 00 a5 09 00 00 00 00 00 00 00 00 00 00 00 08 00 00 c8 0f 00 00 b7 02 00 00 b8 02 00 00 | ................................ |
15b40 | b9 02 00 00 00 00 00 00 69 0e 00 00 e5 13 00 00 5f 0a 00 00 1d 11 00 00 00 00 00 00 a0 11 00 00 | ........i......._............... |
15b60 | 01 13 00 00 d2 11 00 00 80 0c 00 00 6c 07 00 00 74 08 00 00 00 00 00 00 b4 02 00 00 b5 02 00 00 | ............l...t............... |
15b80 | b6 02 00 00 17 13 00 00 00 00 00 00 54 0a 00 00 00 00 00 00 ab 0e 00 00 40 00 00 00 00 00 00 00 | ............T...........@....... |
15ba0 | bf 13 00 00 00 00 00 00 00 00 00 00 04 0b 00 00 e4 12 00 00 d1 04 00 00 b1 02 00 00 b2 02 00 00 | ................................ |
15bc0 | 03 00 00 00 ef 0b 00 00 42 00 00 00 00 00 00 00 4f 11 00 00 00 00 00 00 41 0a 00 00 de 03 00 00 | ........B.......O.......A....... |
15be0 | 55 09 00 00 c1 0f 00 00 00 00 00 00 51 10 00 00 00 00 00 00 6b 0d 00 00 ae 02 00 00 af 02 00 00 | U...........Q.......k........... |
15c00 | b0 02 00 00 d3 13 00 00 00 00 00 00 1c 0f 00 00 cf 13 00 00 00 00 00 00 00 00 00 00 86 10 00 00 | ................................ |
15c20 | e8 06 00 00 00 00 00 00 21 10 00 00 c5 02 00 00 78 00 00 00 bd 07 00 00 b9 12 00 00 7f 09 00 00 | ........!.......x............... |
15c40 | 00 00 00 00 f1 0b 00 00 00 00 00 00 e8 08 00 00 30 00 00 00 00 00 00 00 00 00 00 00 7e 0f 00 00 | ................0...........~... |
15c60 | a3 0f 00 00 14 0a 00 00 9e 02 00 00 30 0f 00 00 27 08 00 00 30 0e 00 00 ec 0a 00 00 00 00 00 00 | ............0...'...0........... |
15c80 | 9f 11 00 00 47 07 00 00 59 10 00 00 91 0c 00 00 b1 04 00 00 00 00 00 00 6f 0a 00 00 00 00 00 00 | ....G...Y...............o....... |
15ca0 | bc 05 00 00 4f 0c 00 00 3a 0d 00 00 69 11 00 00 99 08 00 00 a8 04 00 00 84 00 00 00 d7 10 00 00 | ....O...:...i................... |
15cc0 | fd 03 00 00 9f 12 00 00 65 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........e....................... |
15ce0 | 00 00 00 00 00 00 00 00 4f 02 00 00 33 07 00 00 e0 0a 00 00 13 0f 00 00 f3 0c 00 00 00 00 00 00 | ........O...3................... |
15d00 | 5b 11 00 00 d4 0c 00 00 8c 0d 00 00 eb 07 00 00 2b 11 00 00 09 0c 00 00 00 00 00 00 c4 08 00 00 | [...............+............... |
15d20 | 90 04 00 00 f5 0f 00 00 31 00 00 00 0a 0f 00 00 c1 08 00 00 7a 09 00 00 00 00 00 00 00 00 00 00 | ........1...........z........... |
15d40 | 76 11 00 00 27 13 00 00 2e 0c 00 00 85 00 00 00 5e 0c 00 00 ca 11 00 00 28 10 00 00 fc 03 00 00 | v...'...........^.......(....... |
15d60 | 55 0c 00 00 c5 07 00 00 00 00 00 00 5b 0c 00 00 f3 0b 00 00 f5 09 00 00 ed 02 00 00 00 00 00 00 | U...........[................... |
15d80 | 00 00 00 00 b8 13 00 00 c8 0b 00 00 2e 0d 00 00 00 00 00 00 8c 13 00 00 fd 00 00 00 33 14 00 00 | ............................3... |
15da0 | 00 00 00 00 00 00 00 00 00 00 00 00 2e 04 00 00 ac 0e 00 00 00 00 00 00 00 00 00 00 ee 0c 00 00 | ................................ |
15dc0 | 60 0f 00 00 90 12 00 00 8b 0f 00 00 30 07 00 00 7f 0c 00 00 ac 01 00 00 fa 0e 00 00 00 00 00 00 | `...........0................... |
15de0 | 76 03 00 00 86 0b 00 00 e1 0e 00 00 76 08 00 00 00 00 00 00 9d 0e 00 00 56 12 00 00 36 0a 00 00 | v...........v...........V...6... |
15e00 | 7c 03 00 00 b1 0a 00 00 e3 0d 00 00 b4 01 00 00 a3 13 00 00 6c 09 00 00 3f 07 00 00 10 10 00 00 | |...................l...?....... |
15e20 | 00 00 00 00 bc 0d 00 00 89 09 00 00 91 07 00 00 00 00 00 00 17 0c 00 00 0c 12 00 00 00 00 00 00 | ................................ |
15e40 | 00 00 00 00 13 03 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 32 09 00 00 f1 0f 00 00 | ........................2....... |
15e60 | 00 00 00 00 2e 0e 00 00 52 02 00 00 f6 06 00 00 1b 10 00 00 ae 05 00 00 2b 05 00 00 00 00 00 00 | ........R...............+....... |
15e80 | 00 00 00 00 d8 10 00 00 00 00 00 00 00 00 00 00 05 10 00 00 4a 0f 00 00 f7 09 00 00 ab 0d 00 00 | ....................J........... |
15ea0 | d7 01 00 00 01 10 00 00 c1 12 00 00 dd 03 00 00 76 0f 00 00 be 02 00 00 e6 0b 00 00 cd 0b 00 00 | ................v............... |
15ec0 | 00 00 00 00 77 12 00 00 ac 00 00 00 fb 09 00 00 6b 00 00 00 d2 01 00 00 49 12 00 00 26 12 00 00 | ....w...........k.......I...&... |
15ee0 | 49 05 00 00 b9 08 00 00 00 00 00 00 66 0b 00 00 bc 09 00 00 70 0e 00 00 1b 11 00 00 05 03 00 00 | I...........f.......p........... |
15f00 | 53 04 00 00 4c 01 00 00 00 00 00 00 ad 07 00 00 fb 00 00 00 63 01 00 00 14 0b 00 00 00 00 00 00 | S...L...............c........... |
15f20 | 00 00 00 00 e3 03 00 00 00 00 00 00 00 00 00 00 08 0e 00 00 ce 04 00 00 13 0e 00 00 c0 0c 00 00 | ................................ |
15f40 | 9d 0c 00 00 39 10 00 00 6a 0f 00 00 21 07 00 00 ca 0f 00 00 00 00 00 00 8d 02 00 00 00 00 00 00 | ....9...j...!................... |
15f60 | 06 09 00 00 00 00 00 00 00 00 00 00 78 0a 00 00 d5 04 00 00 a8 00 00 00 b2 01 00 00 4f 05 00 00 | ............x...............O... |
15f80 | 05 05 00 00 00 00 00 00 25 02 00 00 00 00 00 00 d6 02 00 00 38 14 00 00 00 00 00 00 24 12 00 00 | ........%...........8.......$... |
15fa0 | 19 01 00 00 3e 10 00 00 23 07 00 00 14 08 00 00 43 12 00 00 e6 0c 00 00 8f 06 00 00 dd 08 00 00 | ....>...#.......C............... |
15fc0 | 4d 01 00 00 44 01 00 00 2c 13 00 00 4a 09 00 00 a7 11 00 00 00 00 00 00 9b 02 00 00 2c 10 00 00 | M...D...,...J...............,... |
15fe0 | 01 09 00 00 ca 09 00 00 28 09 00 00 b2 11 00 00 18 02 00 00 00 00 00 00 38 12 00 00 00 00 00 00 | ........(...............8....... |
16000 | 9d 12 00 00 00 00 00 00 00 00 00 00 26 11 00 00 24 09 00 00 bb 0e 00 00 4f 0f 00 00 bd 0c 00 00 | ............&...$.......O....... |
16020 | 00 00 00 00 86 03 00 00 00 00 00 00 36 02 00 00 60 07 00 00 12 0f 00 00 f2 09 00 00 00 00 00 00 | ............6...`............... |
16040 | 00 00 00 00 e0 06 00 00 e3 00 00 00 34 0e 00 00 4c 13 00 00 00 00 00 00 00 00 00 00 99 02 00 00 | ............4...L............... |
16060 | fa 0d 00 00 9a 04 00 00 e4 0c 00 00 6c 0f 00 00 d7 0d 00 00 33 0a 00 00 94 05 00 00 0a 14 00 00 | ............l.......3........... |
16080 | 00 00 00 00 85 0c 00 00 62 0b 00 00 ef 02 00 00 48 0c 00 00 a9 05 00 00 df 06 00 00 a6 0c 00 00 | ........b.......H............... |
160a0 | 36 10 00 00 80 0a 00 00 84 0b 00 00 23 12 00 00 f2 10 00 00 48 05 00 00 68 01 00 00 00 00 00 00 | 6...........#.......H...h....... |
160c0 | 23 14 00 00 00 00 00 00 dc 08 00 00 a9 07 00 00 27 10 00 00 ca 06 00 00 56 10 00 00 ea 10 00 00 | #...............'.......V....... |
160e0 | 00 00 00 00 cd 06 00 00 5b 03 00 00 37 04 00 00 00 00 00 00 00 00 00 00 f4 0c 00 00 30 10 00 00 | ........[...7...............0... |
16100 | 0d 0c 00 00 00 00 00 00 04 0a 00 00 49 0b 00 00 a1 0d 00 00 00 00 00 00 d7 00 00 00 00 00 00 00 | ............I................... |
16120 | b6 13 00 00 05 00 00 00 00 00 00 00 1d 07 00 00 b3 04 00 00 c6 03 00 00 00 00 00 00 00 00 00 00 | ................................ |
16140 | 79 04 00 00 00 00 00 00 d5 0a 00 00 00 00 00 00 bf 05 00 00 00 00 00 00 3e 04 00 00 c7 12 00 00 | y.......................>....... |
16160 | 00 00 00 00 00 00 00 00 45 0c 00 00 2d 09 00 00 8b 0b 00 00 81 11 00 00 b8 11 00 00 00 00 00 00 | ........E...-................... |
16180 | 74 0e 00 00 cf 07 00 00 3e 06 00 00 8b 10 00 00 57 0d 00 00 4a 01 00 00 00 00 00 00 00 00 00 00 | t.......>.......W...J........... |
161a0 | ef 0f 00 00 3f 06 00 00 b9 09 00 00 86 09 00 00 a9 0f 00 00 00 00 00 00 66 08 00 00 93 05 00 00 | ....?...................f....... |
161c0 | e7 0f 00 00 45 07 00 00 65 07 00 00 90 10 00 00 a9 0a 00 00 f3 05 00 00 00 00 00 00 39 08 00 00 | ....E...e...................9... |
161e0 | 19 08 00 00 00 00 00 00 00 00 00 00 30 08 00 00 00 00 00 00 b6 0f 00 00 e4 05 00 00 00 00 00 00 | ............0................... |
16200 | 15 0f 00 00 08 06 00 00 7d 0b 00 00 00 00 00 00 17 0b 00 00 cc 02 00 00 61 0c 00 00 0e 0d 00 00 | ........}...............a....... |
16220 | 2a 11 00 00 f5 12 00 00 0f 0a 00 00 0e 11 00 00 08 05 00 00 b2 06 00 00 d8 11 00 00 bd 06 00 00 | *............................... |
16240 | af 09 00 00 91 02 00 00 bd 08 00 00 f1 0c 00 00 00 00 00 00 00 00 00 00 29 10 00 00 00 00 00 00 | ........................)....... |
16260 | d3 0f 00 00 41 09 00 00 7c 08 00 00 b5 05 00 00 16 0b 00 00 ed 0f 00 00 6b 0b 00 00 11 09 00 00 | ....A...|...............k....... |
16280 | 3b 04 00 00 99 0f 00 00 00 00 00 00 2a 09 00 00 a6 06 00 00 93 0b 00 00 a2 00 00 00 00 00 00 00 | ;...........*................... |
162a0 | f9 02 00 00 30 0c 00 00 c7 10 00 00 00 00 00 00 79 10 00 00 7d 03 00 00 00 00 00 00 a5 05 00 00 | ....0...........y...}........... |
162c0 | ee 0e 00 00 f1 06 00 00 0f 0d 00 00 f0 03 00 00 48 11 00 00 00 00 00 00 4a 00 00 00 5e 05 00 00 | ................H.......J...^... |
162e0 | 56 0e 00 00 00 00 00 00 8d 01 00 00 38 11 00 00 38 02 00 00 cd 01 00 00 8d 05 00 00 8d 00 00 00 | V...........8...8............... |
16300 | e6 0a 00 00 00 00 00 00 e7 13 00 00 00 00 00 00 ff 07 00 00 00 00 00 00 e1 08 00 00 e9 03 00 00 | ................................ |
16320 | 00 00 00 00 4c 14 00 00 8c 03 00 00 cb 08 00 00 21 05 00 00 3b 12 00 00 00 00 00 00 ba 03 00 00 | ....L...........!...;........... |
16340 | e8 07 00 00 03 0a 00 00 d7 11 00 00 72 12 00 00 cf 01 00 00 4e 07 00 00 00 00 00 00 49 13 00 00 | ............r.......N.......I... |
16360 | 00 00 00 00 00 00 00 00 30 0a 00 00 e1 01 00 00 5e 00 00 00 00 00 00 00 6a 0d 00 00 00 00 00 00 | ........0.......^.......j....... |
16380 | bd 10 00 00 00 00 00 00 84 02 00 00 62 0e 00 00 05 0b 00 00 00 00 00 00 9f 0c 00 00 66 0f 00 00 | ............b...............f... |
163a0 | 3c 14 00 00 1f 14 00 00 00 00 00 00 65 0a 00 00 0d 02 00 00 3e 02 00 00 00 00 00 00 7e 0a 00 00 | <...........e.......>.......~... |
163c0 | e9 10 00 00 50 03 00 00 fa 0c 00 00 00 00 00 00 00 00 00 00 1b 0a 00 00 6f 0b 00 00 38 09 00 00 | ....P...................o...8... |
163e0 | 00 00 00 00 00 00 00 00 74 0d 00 00 0b 0b 00 00 6e 0e 00 00 81 02 00 00 00 00 00 00 00 00 00 00 | ........t.......n............... |
16400 | 00 00 00 00 68 06 00 00 ba 09 00 00 00 00 00 00 dc 10 00 00 7b 09 00 00 00 00 00 00 39 03 00 00 | ....h...............{.......9... |
16420 | 00 00 00 00 d5 06 00 00 00 00 00 00 55 02 00 00 00 00 00 00 66 07 00 00 4e 10 00 00 9e 0a 00 00 | ............U.......f...N....... |
16440 | 1d 0a 00 00 90 00 00 00 5b 05 00 00 76 09 00 00 c7 04 00 00 a7 03 00 00 f7 0b 00 00 88 08 00 00 | ........[...v................... |
16460 | 3c 08 00 00 da 0f 00 00 25 13 00 00 18 03 00 00 00 00 00 00 82 0c 00 00 de 12 00 00 a8 0a 00 00 | <.......%....................... |
16480 | fb 04 00 00 47 11 00 00 88 12 00 00 5f 0d 00 00 00 00 00 00 e8 04 00 00 00 00 00 00 4e 04 00 00 | ....G......._...............N... |
164a0 | c9 04 00 00 f4 03 00 00 a7 09 00 00 00 00 00 00 3b 0a 00 00 00 00 00 00 22 03 00 00 3f 13 00 00 | ................;......."...?... |
164c0 | 00 00 00 00 00 00 00 00 0b 0a 00 00 00 00 00 00 00 00 00 00 3d 06 00 00 1c 0b 00 00 00 00 00 00 | ....................=........... |
164e0 | 49 06 00 00 ab 0b 00 00 2b 02 00 00 5f 01 00 00 2b 10 00 00 72 0e 00 00 e7 0a 00 00 0a 07 00 00 | I.......+..._...+...r........... |
16500 | 00 00 00 00 f0 06 00 00 3e 0f 00 00 00 00 00 00 43 03 00 00 ad 02 00 00 66 0e 00 00 2f 04 00 00 | ........>.......C.......f.../... |
16520 | 00 00 00 00 3e 08 00 00 8c 06 00 00 9a 0f 00 00 be 0d 00 00 e2 01 00 00 a4 09 00 00 26 13 00 00 | ....>.......................&... |
16540 | ce 06 00 00 cc 05 00 00 f4 09 00 00 e7 0d 00 00 ce 05 00 00 ab 10 00 00 25 08 00 00 00 00 00 00 | ........................%....... |
16560 | 00 00 00 00 03 14 00 00 00 00 00 00 a2 0b 00 00 b8 09 00 00 00 00 00 00 00 00 00 00 61 07 00 00 | ............................a... |
16580 | b5 00 00 00 73 07 00 00 b3 09 00 00 f4 0e 00 00 22 0f 00 00 00 00 00 00 00 00 00 00 17 07 00 00 | ....s..........."............... |
165a0 | 00 00 00 00 23 04 00 00 00 00 00 00 74 03 00 00 fe 05 00 00 2f 11 00 00 00 00 00 00 00 00 00 00 | ....#.......t......./........... |
165c0 | 35 12 00 00 40 11 00 00 ce 03 00 00 b6 03 00 00 00 00 00 00 74 04 00 00 00 00 00 00 05 02 00 00 | 5...@...............t........... |
165e0 | 00 00 00 00 00 00 00 00 bc 11 00 00 72 01 00 00 3a 02 00 00 4b 02 00 00 07 07 00 00 6c 0c 00 00 | ............r...:...K.......l... |
16600 | 36 08 00 00 60 09 00 00 00 00 00 00 bf 11 00 00 d8 03 00 00 00 00 00 00 df 02 00 00 a9 06 00 00 | 6...`........................... |
16620 | 3c 13 00 00 00 00 00 00 87 09 00 00 c9 06 00 00 00 00 00 00 7d 0d 00 00 33 0f 00 00 62 0d 00 00 | <...................}...3...b... |
16640 | 00 00 00 00 fd 06 00 00 50 0d 00 00 cd 12 00 00 00 00 00 00 55 0a 00 00 0c 0b 00 00 00 00 00 00 | ........P...........U........... |
16660 | 35 11 00 00 08 11 00 00 00 00 00 00 00 00 00 00 2c 08 00 00 0c 13 00 00 f4 12 00 00 0c 09 00 00 | 5...............,............... |
16680 | cc 0b 00 00 00 00 00 00 00 00 00 00 07 13 00 00 00 00 00 00 6d 06 00 00 f6 05 00 00 21 03 00 00 | ....................m.......!... |
166a0 | 04 05 00 00 5b 0f 00 00 87 13 00 00 00 00 00 00 a2 05 00 00 1b 06 00 00 10 00 00 00 8b 08 00 00 | ....[........................... |
166c0 | 00 00 00 00 e5 11 00 00 40 0c 00 00 34 0b 00 00 04 03 00 00 aa 0a 00 00 00 00 00 00 0d 0f 00 00 | ........@...4................... |
166e0 | 00 00 00 00 2d 0f 00 00 ba 11 00 00 f2 08 00 00 11 0c 00 00 f7 03 00 00 f9 05 00 00 28 00 00 00 | ....-.......................(... |
16700 | da 08 00 00 21 0f 00 00 00 00 00 00 29 0b 00 00 00 00 00 00 92 03 00 00 33 0e 00 00 00 00 00 00 | ....!.......)...........3....... |
16720 | c0 07 00 00 2e 09 00 00 b0 06 00 00 00 00 00 00 78 08 00 00 42 05 00 00 ac 02 00 00 00 00 00 00 | ................x...B........... |
16740 | d3 0e 00 00 00 00 00 00 09 10 00 00 00 00 00 00 f5 05 00 00 e4 0d 00 00 00 00 00 00 73 00 00 00 | ............................s... |
16760 | 00 00 00 00 b6 00 00 00 68 0c 00 00 00 00 00 00 96 12 00 00 00 00 00 00 94 10 00 00 28 14 00 00 | ........h...................(... |
16780 | 26 0d 00 00 b2 0a 00 00 31 12 00 00 95 06 00 00 00 00 00 00 00 00 00 00 7e 11 00 00 96 11 00 00 | &.......1...............~....... |
167a0 | 00 00 00 00 68 02 00 00 19 13 00 00 00 00 00 00 d6 00 00 00 00 00 00 00 1e 0a 00 00 10 0a 00 00 | ....h........................... |
167c0 | c2 08 00 00 cf 0b 00 00 70 06 00 00 8a 00 00 00 a5 06 00 00 ae 06 00 00 68 0e 00 00 b9 00 00 00 | ........p...............h....... |
167e0 | b7 03 00 00 1d 0d 00 00 ff 05 00 00 58 0a 00 00 67 10 00 00 c8 03 00 00 00 00 00 00 00 00 00 00 | ............X...g............... |
16800 | 39 02 00 00 52 00 00 00 af 10 00 00 e2 0d 00 00 00 00 00 00 00 00 00 00 a5 0f 00 00 55 10 00 00 | 9...R.......................U... |
16820 | e1 03 00 00 5d 13 00 00 87 00 00 00 4f 01 00 00 a3 05 00 00 21 06 00 00 71 0d 00 00 c2 0c 00 00 | ....].......O.......!...q....... |
16840 | ca 03 00 00 e5 0f 00 00 79 0e 00 00 58 12 00 00 e5 07 00 00 00 0e 00 00 00 00 00 00 ae 08 00 00 | ........y...X................... |
16860 | 93 13 00 00 7c 07 00 00 50 02 00 00 5a 08 00 00 70 0a 00 00 02 12 00 00 6a 00 00 00 e5 01 00 00 | ....|...P...Z...p.......j....... |
16880 | 6e 03 00 00 23 0e 00 00 79 06 00 00 00 00 00 00 02 13 00 00 00 00 00 00 bb 13 00 00 24 0e 00 00 | n...#...y...................$... |
168a0 | e0 02 00 00 07 08 00 00 d0 0e 00 00 c2 0b 00 00 00 00 00 00 32 08 00 00 a4 0a 00 00 d0 10 00 00 | ....................2........... |
168c0 | 00 00 00 00 a4 03 00 00 00 00 00 00 4b 01 00 00 24 0c 00 00 e7 05 00 00 a9 08 00 00 9c 0d 00 00 | ............K...$............... |
168e0 | 37 00 00 00 a4 0e 00 00 00 00 00 00 84 06 00 00 01 07 00 00 ce 00 00 00 3a 0b 00 00 fa 03 00 00 | 7.......................:....... |
16900 | 3b 10 00 00 1b 13 00 00 ab 12 00 00 a6 0f 00 00 81 0b 00 00 14 04 00 00 b3 03 00 00 7c 10 00 00 | ;...........................|... |
16920 | 18 10 00 00 99 12 00 00 2e 07 00 00 35 10 00 00 00 00 00 00 00 00 00 00 29 14 00 00 00 00 00 00 | ............5...........)....... |
16940 | 00 00 00 00 00 00 00 00 e7 0e 00 00 85 0f 00 00 00 00 00 00 e4 10 00 00 97 03 00 00 8a 05 00 00 | ................................ |
16960 | 99 0e 00 00 2f 09 00 00 00 00 00 00 00 00 00 00 24 08 00 00 00 00 00 00 9c 04 00 00 f7 0e 00 00 | ..../...........$............... |
16980 | a3 12 00 00 8f 07 00 00 fb 02 00 00 f7 00 00 00 3a 12 00 00 ec 13 00 00 73 0b 00 00 ff 13 00 00 | ................:.......s....... |
169a0 | f8 07 00 00 f2 12 00 00 29 00 00 00 3f 02 00 00 00 00 00 00 2d 12 00 00 00 00 00 00 89 0d 00 00 | ........)...?.......-........... |
169c0 | c0 06 00 00 24 06 00 00 d6 0b 00 00 00 00 00 00 9a 08 00 00 a6 00 00 00 bb 04 00 00 00 00 00 00 | ....$........................... |
169e0 | 00 00 00 00 00 00 00 00 f2 0e 00 00 e3 06 00 00 7b 05 00 00 fa 05 00 00 e9 00 00 00 20 08 00 00 | ................{............... |
16a00 | 00 00 00 00 77 02 00 00 a5 0c 00 00 28 0b 00 00 d6 0a 00 00 5c 0b 00 00 e3 08 00 00 c3 0f 00 00 | ....w.......(.......\........... |
16a20 | 8c 08 00 00 00 00 00 00 94 06 00 00 00 00 00 00 5e 01 00 00 00 00 00 00 6c 0b 00 00 00 00 00 00 | ................^.......l....... |
16a40 | 00 00 00 00 00 00 00 00 24 0d 00 00 00 00 00 00 00 00 00 00 fc 00 00 00 a8 06 00 00 e7 11 00 00 | ........$....................... |
16a60 | 00 00 00 00 00 00 00 00 ed 09 00 00 20 04 00 00 a8 13 00 00 00 00 00 00 c3 10 00 00 7c 04 00 00 | ............................|... |
16a80 | 00 00 00 00 e0 0c 00 00 a0 12 00 00 7a 13 00 00 50 11 00 00 3d 0e 00 00 4e 00 00 00 00 00 00 00 | ............z...P...=...N....... |
16aa0 | 68 00 00 00 00 00 00 00 ff 0c 00 00 18 13 00 00 00 00 00 00 00 00 00 00 c1 0d 00 00 00 00 00 00 | h............................... |
16ac0 | 67 05 00 00 75 12 00 00 4a 13 00 00 82 11 00 00 00 00 00 00 be 07 00 00 7d 11 00 00 97 13 00 00 | g...u...J...............}....... |
16ae0 | 00 00 00 00 bb 0d 00 00 00 00 00 00 52 08 00 00 3d 04 00 00 00 00 00 00 d3 02 00 00 00 00 00 00 | ............R...=............... |
16b00 | 72 08 00 00 c4 02 00 00 e5 06 00 00 fd 08 00 00 6b 0e 00 00 27 04 00 00 a1 0e 00 00 29 05 00 00 | r...............k...'.......)... |
16b20 | 22 0d 00 00 a5 08 00 00 bd 0e 00 00 f4 11 00 00 c7 0a 00 00 00 00 00 00 c8 0a 00 00 00 00 00 00 | "............................... |
16b40 | 00 00 00 00 6e 0d 00 00 a2 0e 00 00 a1 0f 00 00 18 12 00 00 ee 08 00 00 00 00 00 00 5e 0d 00 00 | ....n.......................^... |
16b60 | b7 0f 00 00 00 00 00 00 98 13 00 00 00 00 00 00 24 0a 00 00 00 00 00 00 aa 12 00 00 e2 00 00 00 | ................$............... |
16b80 | 29 08 00 00 75 04 00 00 00 00 00 00 9b 08 00 00 00 00 00 00 7f 12 00 00 77 0b 00 00 00 00 00 00 | )...u...................w....... |
16ba0 | 00 00 00 00 95 0a 00 00 18 06 00 00 00 00 00 00 9d 08 00 00 8f 02 00 00 09 0f 00 00 c8 12 00 00 | ................................ |
16bc0 | 00 00 00 00 42 03 00 00 1a 14 00 00 60 0c 00 00 9f 04 00 00 8b 01 00 00 13 0a 00 00 5b 0a 00 00 | ....B.......`...............[... |
16be0 | 11 04 00 00 00 00 00 00 30 0b 00 00 3b 11 00 00 00 00 00 00 68 09 00 00 d2 10 00 00 b1 07 00 00 | ........0...;.......h........... |
16c00 | 08 10 00 00 a8 01 00 00 d8 06 00 00 c1 0a 00 00 89 06 00 00 00 00 00 00 00 00 00 00 c1 07 00 00 | ................................ |
16c20 | f9 0e 00 00 07 14 00 00 09 0a 00 00 50 01 00 00 c1 00 00 00 da 0c 00 00 97 00 00 00 00 00 00 00 | ............P................... |
16c40 | 1c 11 00 00 75 07 00 00 e8 0f 00 00 00 00 00 00 4f 03 00 00 00 00 00 00 f3 02 00 00 32 01 00 00 | ....u...........O...........2... |
16c60 | 00 00 00 00 02 03 00 00 03 04 00 00 b7 0c 00 00 d9 02 00 00 00 00 00 00 ad 11 00 00 4f 13 00 00 | ............................O... |
16c80 | 23 06 00 00 95 0c 00 00 00 00 00 00 00 00 00 00 0f 08 00 00 a9 11 00 00 49 08 00 00 a7 0e 00 00 | #.......................I....... |
16ca0 | 5f 00 00 00 00 00 00 00 5f 0e 00 00 6f 12 00 00 00 00 00 00 95 03 00 00 00 00 00 00 cd 0d 00 00 | _......._...o................... |
16cc0 | 01 11 00 00 f5 04 00 00 7b 03 00 00 7e 09 00 00 00 00 00 00 d2 0d 00 00 05 12 00 00 cb 07 00 00 | ........{...~................... |
16ce0 | 00 00 00 00 9c 06 00 00 e0 03 00 00 00 00 00 00 c4 06 00 00 32 06 00 00 fa 0b 00 00 53 0a 00 00 | ....................2.......S... |
16d00 | 70 08 00 00 58 02 00 00 cc 06 00 00 57 01 00 00 97 0c 00 00 3c 07 00 00 5e 06 00 00 d6 0d 00 00 | p...X.......W.......<...^....... |
16d20 | 00 00 00 00 3a 09 00 00 73 08 00 00 00 00 00 00 00 00 00 00 51 0c 00 00 d9 0a 00 00 c7 02 00 00 | ....:...s...........Q........... |
16d40 | 00 00 00 00 f1 0e 00 00 30 0d 00 00 00 00 00 00 a4 05 00 00 63 0b 00 00 00 00 00 00 96 00 00 00 | ........0...........c........... |
16d60 | 95 12 00 00 a1 13 00 00 4d 13 00 00 db 06 00 00 d6 09 00 00 1e 13 00 00 ea 13 00 00 12 09 00 00 | ........M....................... |
16d80 | 14 10 00 00 3d 12 00 00 00 00 00 00 00 00 00 00 99 00 00 00 7d 00 00 00 c6 12 00 00 00 00 00 00 | ....=...............}........... |
16da0 | 00 00 00 00 c3 06 00 00 94 12 00 00 63 0c 00 00 a2 0a 00 00 d7 0f 00 00 cd 0c 00 00 36 03 00 00 | ............c...............6... |
16dc0 | ba 06 00 00 ed 0a 00 00 1f 09 00 00 4f 0b 00 00 67 11 00 00 85 10 00 00 f4 02 00 00 ee 13 00 00 | ............O...g............... |
16de0 | 5c 06 00 00 a1 11 00 00 7d 0f 00 00 71 09 00 00 ef 08 00 00 9e 05 00 00 7a 07 00 00 2d 0e 00 00 | \.......}...q...........z...-... |
16e00 | f1 07 00 00 dc 09 00 00 ca 12 00 00 ab 00 00 00 5e 0a 00 00 45 10 00 00 7a 11 00 00 ca 0b 00 00 | ................^...E...z....... |
16e20 | a9 0d 00 00 ac 03 00 00 ff 08 00 00 1c 13 00 00 00 00 00 00 90 07 00 00 b8 0b 00 00 5a 13 00 00 | ............................Z... |
16e40 | 76 0e 00 00 14 07 00 00 41 0c 00 00 34 06 00 00 00 00 00 00 45 09 00 00 22 10 00 00 00 00 00 00 | v.......A...4.......E..."....... |
16e60 | 00 00 00 00 43 07 00 00 00 00 00 00 d7 0b 00 00 f0 08 00 00 07 0a 00 00 00 00 00 00 00 00 00 00 | ....C........................... |
16e80 | a1 08 00 00 ce 08 00 00 d3 01 00 00 9a 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 98 04 00 00 | ................................ |
16ea0 | c6 0d 00 00 86 08 00 00 e5 10 00 00 00 00 00 00 f1 13 00 00 9c 13 00 00 99 06 00 00 00 00 00 00 | ................................ |
16ec0 | 7c 12 00 00 00 00 00 00 0a 06 00 00 ae 12 00 00 66 00 00 00 10 0e 00 00 00 00 00 00 00 00 00 00 | |...............f............... |
16ee0 | 6b 09 00 00 b4 0c 00 00 9c 0e 00 00 18 14 00 00 e7 06 00 00 57 0e 00 00 72 00 00 00 bf 09 00 00 | k...................W...r....... |
16f00 | 71 0c 00 00 19 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 05 00 00 63 05 00 00 3a 0f 00 00 | q...................(...c...:... |
16f20 | cf 09 00 00 00 00 00 00 75 01 00 00 14 0e 00 00 5c 07 00 00 4a 12 00 00 64 02 00 00 71 06 00 00 | ........u.......\...J...d...q... |
16f40 | b9 0d 00 00 da 04 00 00 00 00 00 00 00 00 00 00 67 09 00 00 88 07 00 00 cd 09 00 00 00 00 00 00 | ................g............... |
16f60 | 0e 0a 00 00 a3 02 00 00 bb 10 00 00 f6 0e 00 00 00 00 00 00 55 0d 00 00 52 12 00 00 66 09 00 00 | ....................U...R...f... |
16f80 | 00 00 00 00 d8 0c 00 00 3a 14 00 00 38 0c 00 00 de 06 00 00 40 06 00 00 00 00 00 00 ff 0b 00 00 | ........:...8.......@........... |
16fa0 | b1 06 00 00 21 08 00 00 e5 0a 00 00 00 00 00 00 6f 0d 00 00 3a 03 00 00 5e 11 00 00 29 13 00 00 | ....!...........o...:...^...)... |
16fc0 | 3a 0e 00 00 b6 0a 00 00 00 00 00 00 2a 12 00 00 c1 0b 00 00 a6 11 00 00 ea 0d 00 00 ac 0a 00 00 | :...........*................... |
16fe0 | 97 10 00 00 48 02 00 00 00 14 00 00 5c 11 00 00 00 00 00 00 43 01 00 00 a7 04 00 00 85 11 00 00 | ....H.......\.......C........... |
17000 | 43 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0f 00 00 3f 0c 00 00 00 00 00 00 5d 03 00 00 | C...................?.......]... |
17020 | 00 00 00 00 80 0d 00 00 00 00 00 00 00 00 00 00 81 01 00 00 b1 11 00 00 00 00 00 00 00 00 00 00 | ................................ |
17040 | 4c 00 00 00 09 02 00 00 00 00 00 00 c7 00 00 00 6a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | L...............j............... |
17060 | 2e 0b 00 00 aa 03 00 00 ee 0f 00 00 c6 01 00 00 9b 05 00 00 3c 00 00 00 74 13 00 00 00 00 00 00 | ....................<...t....... |
17080 | 6e 13 00 00 52 07 00 00 c2 11 00 00 7e 0d 00 00 1d 08 00 00 d7 05 00 00 76 01 00 00 00 01 00 00 | n...R.......~...........v....... |
170a0 | 80 08 00 00 00 00 00 00 ea 0b 00 00 00 00 00 00 91 05 00 00 00 00 00 00 77 03 00 00 e6 02 00 00 | ........................w....... |
170c0 | 00 00 00 00 69 01 00 00 18 0f 00 00 d9 10 00 00 55 0e 00 00 0a 13 00 00 75 03 00 00 ff 01 00 00 | ....i...........U.......u....... |
170e0 | c2 00 00 00 63 0d 00 00 65 03 00 00 ea 0a 00 00 c7 01 00 00 00 00 00 00 20 03 00 00 96 06 00 00 | ....c...e....................... |
17100 | 1c 01 00 00 57 07 00 00 00 00 00 00 21 0d 00 00 82 12 00 00 77 0c 00 00 7a 01 00 00 08 14 00 00 | ....W.......!.......w...z....... |
17120 | 61 04 00 00 4d 05 00 00 f7 01 00 00 8e 11 00 00 59 06 00 00 24 03 00 00 09 09 00 00 00 00 00 00 | a...M...........Y...$........... |
17140 | 00 00 00 00 46 04 00 00 d2 05 00 00 97 0e 00 00 ba 05 00 00 75 0a 00 00 f5 0c 00 00 8e 10 00 00 | ....F...............u........... |
17160 | 3d 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 04 00 00 00 00 00 00 ea 0e 00 00 | =...................c........... |
17180 | 04 08 00 00 66 13 00 00 69 04 00 00 00 00 00 00 37 0f 00 00 00 00 00 00 a2 01 00 00 00 00 00 00 | ....f...i.......7............... |
171a0 | 00 00 00 00 89 0f 00 00 1d 02 00 00 15 12 00 00 b4 10 00 00 7f 11 00 00 00 00 00 00 79 0c 00 00 | ............................y... |
171c0 | 00 00 00 00 72 13 00 00 be 13 00 00 5c 05 00 00 43 0e 00 00 e8 09 00 00 0c 0e 00 00 00 00 00 00 | ....r.......\...C............... |
171e0 | 9f 0b 00 00 35 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4b 0b 00 00 98 12 00 00 ef 03 00 00 | ....5...............K........... |
17200 | 00 00 00 00 0b 09 00 00 f5 0e 00 00 3d 0b 00 00 1e 10 00 00 45 01 00 00 39 0e 00 00 d8 0e 00 00 | ............=.......E...9....... |
17220 | c4 11 00 00 74 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4e 0e 00 00 31 06 00 00 37 03 00 00 | ....t...............N...1...7... |
17240 | 6c 0d 00 00 8d 0e 00 00 d5 08 00 00 00 00 00 00 b0 11 00 00 d9 13 00 00 d1 0e 00 00 da 06 00 00 | l............................... |
17260 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 04 00 00 00 00 00 00 2d 02 00 00 | ....................T.......-... |
17280 | 00 00 00 00 9d 07 00 00 34 0c 00 00 00 00 00 00 38 06 00 00 d1 10 00 00 82 0a 00 00 3a 0a 00 00 | ........4.......8...........:... |
172a0 | 2a 05 00 00 6d 09 00 00 71 0a 00 00 8a 0f 00 00 d9 00 00 00 07 06 00 00 00 00 00 00 cf 06 00 00 | *...m...q....................... |
172c0 | c0 0f 00 00 00 00 00 00 9f 0e 00 00 00 00 00 00 61 11 00 00 00 00 00 00 43 0a 00 00 c9 11 00 00 | ................a.......C....... |
172e0 | 13 09 00 00 c6 0b 00 00 33 03 00 00 06 0f 00 00 00 00 00 00 00 00 00 00 dc 13 00 00 00 00 00 00 | ........3....................... |
17300 | b1 0d 00 00 dd 13 00 00 8f 00 00 00 ca 0c 00 00 aa 02 00 00 3d 0f 00 00 fd 09 00 00 3c 01 00 00 | ....................=.......<... |
17320 | 2a 0d 00 00 00 00 00 00 00 00 00 00 72 10 00 00 1d 0f 00 00 e1 13 00 00 d5 00 00 00 f4 13 00 00 | *...........r................... |
17340 | e2 13 00 00 a4 12 00 00 b1 08 00 00 e9 0f 00 00 5b 01 00 00 cf 0a 00 00 d2 0a 00 00 30 02 00 00 | ................[...........0... |
17360 | 96 0a 00 00 cc 03 00 00 00 00 00 00 81 0e 00 00 00 00 00 00 00 00 00 00 e2 0c 00 00 f5 00 00 00 | ................................ |
17380 | c2 07 00 00 66 05 00 00 39 09 00 00 57 0a 00 00 10 09 00 00 00 02 00 00 a2 13 00 00 00 00 00 00 | ....f...9...W................... |
173a0 | e7 07 00 00 25 09 00 00 00 00 00 00 2a 14 00 00 8f 0f 00 00 53 0e 00 00 7d 0a 00 00 00 00 00 00 | ....%.......*.......S...}....... |
173c0 | e5 0e 00 00 c9 0d 00 00 fc 06 00 00 e1 04 00 00 4a 06 00 00 00 00 00 00 f1 0d 00 00 db 03 00 00 | ................J............... |
173e0 | f8 05 00 00 a8 11 00 00 05 04 00 00 00 00 00 00 23 11 00 00 54 0b 00 00 9d 10 00 00 00 00 00 00 | ................#...T........... |
17400 | 87 0d 00 00 d1 0a 00 00 00 00 00 00 00 00 00 00 89 0e 00 00 00 00 00 00 8b 09 00 00 6f 0c 00 00 | ............................o... |
17420 | b4 0a 00 00 68 0a 00 00 7a 0c 00 00 38 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....h...z...8................... |
17440 | 00 00 00 00 02 11 00 00 d3 08 00 00 00 00 00 00 ee 0a 00 00 00 00 00 00 b5 0c 00 00 16 00 00 00 | ................................ |
17460 | ac 08 00 00 00 00 00 00 72 0d 00 00 a2 04 00 00 f4 0d 00 00 d6 06 00 00 40 04 00 00 f8 06 00 00 | ........r...............@....... |
17480 | 8b 07 00 00 b9 01 00 00 ac 0d 00 00 30 03 00 00 f7 07 00 00 5c 0c 00 00 c3 0e 00 00 f0 0a 00 00 | ............0.......\........... |
174a0 | 27 05 00 00 0f 0b 00 00 35 14 00 00 e7 0c 00 00 89 01 00 00 00 00 00 00 00 00 00 00 db 0d 00 00 | '.......5....................... |
174c0 | 41 05 00 00 00 00 00 00 aa 0d 00 00 33 0d 00 00 00 00 00 00 00 00 00 00 13 0c 00 00 00 00 00 00 | A...........3................... |
174e0 | 04 09 00 00 43 0d 00 00 6b 0a 00 00 59 0a 00 00 02 07 00 00 dd 04 00 00 4c 0b 00 00 29 02 00 00 | ....C...k...Y...........L...)... |
17500 | 07 00 00 00 e4 13 00 00 f2 06 00 00 6c 02 00 00 9b 0a 00 00 04 06 00 00 5d 08 00 00 47 01 00 00 | ............l...........]...G... |
17520 | 3b 07 00 00 be 12 00 00 9d 0f 00 00 0d 13 00 00 66 01 00 00 c7 11 00 00 00 00 00 00 00 00 00 00 | ;...............f............... |
17540 | 96 05 00 00 d9 06 00 00 ee 06 00 00 9f 01 00 00 11 05 00 00 f3 03 00 00 00 00 00 00 00 00 00 00 | ................................ |
17560 | bf 06 00 00 00 00 00 00 4f 07 00 00 20 0f 00 00 49 0c 00 00 c7 05 00 00 e3 0c 00 00 59 01 00 00 | ........O.......I...........Y... |
17580 | 00 00 00 00 6d 07 00 00 00 00 00 00 3f 08 00 00 da 13 00 00 00 00 00 00 0a 0a 00 00 b3 10 00 00 | ....m.......?................... |
175a0 | 00 00 00 00 00 00 00 00 15 00 00 00 6f 13 00 00 8e 13 00 00 00 00 00 00 00 00 00 00 88 0e 00 00 | ............o................... |
175c0 | 03 0c 00 00 54 10 00 00 00 00 00 00 53 12 00 00 96 0b 00 00 00 00 00 00 76 0b 00 00 10 13 00 00 | ....T.......S...........v....... |
175e0 | c6 10 00 00 00 00 00 00 2a 13 00 00 97 09 00 00 54 09 00 00 fb 12 00 00 00 00 00 00 3d 03 00 00 | ........*.......T...........=... |
17600 | 3c 0d 00 00 4d 0f 00 00 79 0b 00 00 f0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ef 0d 00 00 | <...M...y....................... |
17620 | 00 00 00 00 70 04 00 00 fe 0f 00 00 79 0a 00 00 14 0c 00 00 00 00 00 00 0b 11 00 00 5f 09 00 00 | ....p.......y..............._... |
17640 | 4f 14 00 00 92 12 00 00 00 00 00 00 d5 10 00 00 b1 01 00 00 da 05 00 00 12 08 00 00 f1 05 00 00 | O............................... |
17660 | 00 00 00 00 42 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 0b 00 00 30 13 00 00 | ....B.......................0... |
17680 | bb 0c 00 00 05 13 00 00 5e 0f 00 00 34 11 00 00 99 0c 00 00 77 07 00 00 d4 12 00 00 cb 11 00 00 | ........^...4.......w........... |
176a0 | 8c 12 00 00 06 0e 00 00 a4 0c 00 00 f6 10 00 00 91 10 00 00 56 13 00 00 d9 08 00 00 00 00 00 00 | ....................V........... |
176c0 | 00 00 00 00 00 00 00 00 51 0d 00 00 5a 0c 00 00 00 00 00 00 f5 11 00 00 00 00 00 00 00 00 00 00 | ........Q...Z................... |
176e0 | 6b 10 00 00 b8 00 00 00 8a 0a 00 00 77 0f 00 00 78 0e 00 00 00 00 00 00 c1 0e 00 00 c4 04 00 00 | k...........w...x............... |
17700 | 00 00 00 00 1b 12 00 00 85 02 00 00 7e 06 00 00 bd 13 00 00 09 05 00 00 8e 0e 00 00 00 00 00 00 | ............~................... |
17720 | 00 00 00 00 00 00 00 00 e7 12 00 00 ec 08 00 00 92 08 00 00 d8 09 00 00 71 0e 00 00 82 08 00 00 | ........................q....... |
17740 | f9 0f 00 00 33 06 00 00 5f 11 00 00 00 00 00 00 3a 08 00 00 5f 04 00 00 5e 0e 00 00 45 0f 00 00 | ....3..._.......:..._...^...E... |
17760 | 84 0c 00 00 75 02 00 00 d0 11 00 00 ad 0f 00 00 fe 06 00 00 6c 06 00 00 12 12 00 00 a4 01 00 00 | ....u...............l........... |
17780 | 98 0d 00 00 0b 10 00 00 00 00 00 00 53 11 00 00 1a 12 00 00 6d 0c 00 00 c3 07 00 00 00 00 00 00 | ............S.......m........... |
177a0 | 74 07 00 00 e0 05 00 00 36 09 00 00 00 00 00 00 c8 13 00 00 11 08 00 00 5c 10 00 00 46 14 00 00 | t.......6...............\...F... |
177c0 | 5a 10 00 00 d4 04 00 00 cc 10 00 00 00 00 00 00 00 00 00 00 a1 05 00 00 47 0a 00 00 4d 10 00 00 | Z.......................G...M... |
177e0 | bf 0f 00 00 00 00 00 00 b7 09 00 00 09 0b 00 00 5f 06 00 00 00 00 00 00 f0 0b 00 00 00 00 00 00 | ................_............... |
17800 | ce 01 00 00 84 04 00 00 00 00 00 00 c0 01 00 00 1f 05 00 00 8e 0b 00 00 44 00 00 00 00 00 00 00 | ........................D....... |
17820 | 9a 0d 00 00 00 00 00 00 3d 14 00 00 c5 09 00 00 40 0f 00 00 38 00 00 00 ac 04 00 00 00 00 00 00 | ........=.......@...8........... |
17840 | 00 00 00 00 00 00 00 00 00 00 00 00 a4 10 00 00 56 00 00 00 0e 0e 00 00 25 0a 00 00 48 0d 00 00 | ................V.......%...H... |
17860 | 06 00 00 00 60 11 00 00 00 00 00 00 1f 04 00 00 00 00 00 00 8f 0c 00 00 1f 0e 00 00 00 00 00 00 | ....`........................... |
17880 | 19 10 00 00 0b 08 00 00 b2 13 00 00 e6 0f 00 00 ea 06 00 00 49 11 00 00 7e 00 00 00 00 00 00 00 | ....................I...~....... |
178a0 | 01 02 00 00 b0 01 00 00 8c 05 00 00 70 0c 00 00 86 0e 00 00 00 00 00 00 1e 08 00 00 0f 13 00 00 | ............p................... |
178c0 | d1 07 00 00 19 14 00 00 f9 0b 00 00 16 0a 00 00 00 00 00 00 2d 05 00 00 0c 08 00 00 00 00 00 00 | ....................-........... |
178e0 | 00 00 00 00 77 0e 00 00 07 11 00 00 c4 01 00 00 dc 00 00 00 91 11 00 00 38 0f 00 00 00 00 00 00 | ....w...................8....... |
17900 | 8d 13 00 00 00 00 00 00 dc 06 00 00 4b 0a 00 00 d3 04 00 00 00 10 00 00 62 11 00 00 fa 0a 00 00 | ............K...........b....... |
17920 | 00 00 00 00 7c 0e 00 00 db 12 00 00 c6 06 00 00 d6 10 00 00 00 00 00 00 50 05 00 00 6b 11 00 00 | ....|...................P...k... |
17940 | 16 14 00 00 16 12 00 00 00 00 00 00 00 00 00 00 16 03 00 00 00 00 00 00 71 11 00 00 00 00 00 00 | ........................q....... |
17960 | 15 0a 00 00 7d 13 00 00 10 0c 00 00 03 11 00 00 da 11 00 00 00 00 00 00 23 10 00 00 1a 0a 00 00 | ....}...................#....... |
17980 | 80 12 00 00 23 0d 00 00 ec 0c 00 00 00 00 00 00 cb 0c 00 00 71 00 00 00 c7 08 00 00 00 00 00 00 | ....#...............q........... |
179a0 | 00 00 00 00 14 05 00 00 00 00 00 00 18 07 00 00 00 00 00 00 55 0f 00 00 37 07 00 00 9d 09 00 00 | ....................U...7....... |
179c0 | 00 00 00 00 6b 0c 00 00 df 12 00 00 00 00 00 00 b2 0d 00 00 22 05 00 00 5e 10 00 00 00 00 00 00 | ....k..............."...^....... |
179e0 | 4d 0d 00 00 b4 13 00 00 12 06 00 00 6a 11 00 00 00 00 00 00 91 12 00 00 fb 11 00 00 00 00 00 00 | M...........j................... |
17a00 | a1 02 00 00 00 00 00 00 a4 13 00 00 00 00 00 00 00 00 00 00 d1 00 00 00 0e 06 00 00 00 00 00 00 | ................................ |
17a20 | de 10 00 00 19 11 00 00 22 06 00 00 44 03 00 00 ba 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........"...D................... |
17a40 | 00 00 00 00 c4 0c 00 00 7e 13 00 00 af 07 00 00 00 00 00 00 ed 06 00 00 00 00 00 00 00 00 00 00 | ........~....................... |
17a60 | 0a 0e 00 00 80 11 00 00 03 0d 00 00 a4 02 00 00 cb 00 00 00 07 09 00 00 a0 01 00 00 29 06 00 00 | ............................)... |
17a80 | 91 08 00 00 00 00 00 00 b8 12 00 00 2c 0c 00 00 68 13 00 00 c5 13 00 00 fb 0c 00 00 00 00 00 00 | ............,...h............... |
17aa0 | 00 00 00 00 ec 0b 00 00 62 06 00 00 ef 0c 00 00 99 0a 00 00 00 00 00 00 00 00 00 00 7e 05 00 00 | ........b...................~... |
17ac0 | 2b 03 00 00 83 08 00 00 00 00 00 00 00 00 00 00 3f 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | +...............?............... |
17ae0 | 00 00 00 00 ad 00 00 00 00 00 00 00 9b 10 00 00 16 06 00 00 f8 03 00 00 1f 13 00 00 94 07 00 00 | ................................ |
17b00 | 00 00 00 00 91 0d 00 00 80 09 00 00 4f 06 00 00 f8 04 00 00 31 0a 00 00 00 00 00 00 b3 08 00 00 | ............O.......1........... |
17b20 | c9 10 00 00 57 09 00 00 f8 08 00 00 00 00 00 00 0c 07 00 00 00 00 00 00 46 03 00 00 1a 11 00 00 | ....W...................F....... |
17b40 | 00 00 00 00 8e 01 00 00 00 00 00 00 98 08 00 00 02 0d 00 00 88 03 00 00 e4 0f 00 00 41 01 00 00 | ............................A... |
17b60 | ba 07 00 00 0c 02 00 00 13 0d 00 00 c1 03 00 00 00 00 00 00 00 00 00 00 8c 04 00 00 69 12 00 00 | ............................i... |
17b80 | d0 03 00 00 00 00 00 00 00 00 00 00 a7 0b 00 00 3b 0f 00 00 fe 12 00 00 00 00 00 00 a0 09 00 00 | ................;............... |
17ba0 | 60 0b 00 00 6e 11 00 00 06 07 00 00 f5 02 00 00 28 0c 00 00 94 08 00 00 fb 0e 00 00 bb 0b 00 00 | `...n...........(............... |
17bc0 | 89 12 00 00 0e 0c 00 00 00 00 00 00 af 00 00 00 00 00 00 00 1a 0c 00 00 e6 0d 00 00 00 00 00 00 | ................................ |
17be0 | 7f 0d 00 00 33 10 00 00 00 00 00 00 75 0c 00 00 00 00 00 00 22 07 00 00 bd 00 00 00 4e 12 00 00 | ....3.......u.......".......N... |
17c00 | 70 07 00 00 0d 03 00 00 ca 08 00 00 ee 0d 00 00 e1 0b 00 00 a5 0a 00 00 36 0d 00 00 48 03 00 00 | p.......................6...H... |
17c20 | 00 00 00 00 3e 12 00 00 e8 12 00 00 00 00 00 00 6c 10 00 00 00 00 00 00 00 00 00 00 e5 09 00 00 | ....>...........l............... |
17c40 | 6c 12 00 00 44 02 00 00 00 00 00 00 ae 04 00 00 20 0a 00 00 55 04 00 00 34 05 00 00 d6 0f 00 00 | l...D...............U...4....... |
17c60 | c2 04 00 00 ab 02 00 00 41 13 00 00 74 0b 00 00 7e 07 00 00 f9 10 00 00 bf 01 00 00 06 0c 00 00 | ........A...t...~............... |
17c80 | 5c 01 00 00 2f 12 00 00 00 00 00 00 0f 05 00 00 47 0f 00 00 00 00 00 00 ca 02 00 00 00 00 00 00 | \.../...........G............... |
17ca0 | 00 00 00 00 42 12 00 00 00 00 00 00 de 02 00 00 00 00 00 00 6c 0e 00 00 32 12 00 00 00 00 00 00 | ....B...............l...2....... |
17cc0 | 67 0b 00 00 65 08 00 00 67 0f 00 00 00 00 00 00 a5 03 00 00 00 00 00 00 2e 00 00 00 00 00 00 00 | g...e...g....................... |
17ce0 | 69 02 00 00 91 0e 00 00 65 05 00 00 00 00 00 00 00 00 00 00 d5 12 00 00 aa 05 00 00 df 10 00 00 | i.......e....................... |
17d00 | 67 02 00 00 46 13 00 00 38 08 00 00 a6 0a 00 00 68 0d 00 00 fb 07 00 00 45 11 00 00 00 00 00 00 | g...F...8.......h.......E....... |
17d20 | 0c 03 00 00 00 00 00 00 5a 02 00 00 78 07 00 00 49 0e 00 00 b8 05 00 00 51 08 00 00 0f 07 00 00 | ........Z...x...I.......Q....... |
17d40 | 2c 0d 00 00 d7 04 00 00 bb 08 00 00 00 00 00 00 9e 12 00 00 00 00 00 00 86 0f 00 00 53 07 00 00 | ,...........................S... |
17d60 | fe 07 00 00 49 0d 00 00 a5 0e 00 00 b3 02 00 00 cd 03 00 00 58 0e 00 00 4d 08 00 00 00 00 00 00 | ....I...............X...M....... |
17d80 | 43 02 00 00 cb 0e 00 00 07 0c 00 00 00 00 00 00 4e 0f 00 00 00 00 00 00 2a 02 00 00 00 00 00 00 | C...............N.......*....... |
17da0 | 39 0d 00 00 14 0f 00 00 62 0a 00 00 9b 00 00 00 0b 0d 00 00 70 01 00 00 33 08 00 00 ee 05 00 00 | 9.......b...........p...3....... |
17dc0 | 3c 06 00 00 b8 07 00 00 cd 08 00 00 f9 01 00 00 7d 01 00 00 00 00 00 00 00 00 00 00 2a 08 00 00 | <...............}...........*... |
17de0 | ee 12 00 00 00 00 00 00 fc 11 00 00 00 00 00 00 1a 04 00 00 b5 04 00 00 40 12 00 00 73 02 00 00 | ........................@...s... |
17e00 | 80 06 00 00 c5 0b 00 00 00 00 00 00 6b 06 00 00 00 00 00 00 40 0d 00 00 00 00 00 00 59 0b 00 00 | ............k.......@.......Y... |
17e20 | 61 0d 00 00 00 00 00 00 a8 07 00 00 92 0a 00 00 ae 10 00 00 00 00 00 00 6c 03 00 00 e0 04 00 00 | a.......................l....... |
17e40 | 8e 04 00 00 40 14 00 00 87 05 00 00 13 14 00 00 bb 11 00 00 85 05 00 00 00 00 00 00 67 07 00 00 | ....@.......................g... |
17e60 | 00 00 00 00 78 04 00 00 82 0b 00 00 27 09 00 00 ad 04 00 00 14 14 00 00 23 09 00 00 ca 10 00 00 | ....x.......'...........#....... |
17e80 | 00 00 00 00 62 03 00 00 e1 09 00 00 00 00 00 00 a7 0f 00 00 db 00 00 00 66 03 00 00 7e 0e 00 00 | ....b...................f...~... |
17ea0 | 51 0f 00 00 92 06 00 00 b4 09 00 00 e9 0e 00 00 d9 01 00 00 4a 10 00 00 c0 09 00 00 52 06 00 00 | Q...................J.......R... |
17ec0 | b2 0c 00 00 00 00 00 00 6b 03 00 00 15 0c 00 00 72 05 00 00 d0 02 00 00 00 00 00 00 19 04 00 00 | ........k.......r............... |
17ee0 | ef 00 00 00 00 00 00 00 00 00 00 00 fe 02 00 00 4e 08 00 00 52 10 00 00 36 05 00 00 38 13 00 00 | ................N...R...6...8... |
17f00 | 37 0b 00 00 2c 03 00 00 00 00 00 00 7f 0e 00 00 df 0c 00 00 00 00 00 00 6b 08 00 00 27 03 00 00 | 7...,...................k...'... |
17f20 | 3a 13 00 00 84 11 00 00 fc 01 00 00 63 02 00 00 88 00 00 00 00 00 00 00 33 09 00 00 6a 08 00 00 | :...........c...........3...j... |
17f40 | 00 00 00 00 73 10 00 00 1f 03 00 00 cf 0c 00 00 a7 0a 00 00 a6 03 00 00 d1 13 00 00 b3 07 00 00 | ....s........................... |
17f60 | 1a 0d 00 00 10 08 00 00 1a 02 00 00 1b 07 00 00 ae 01 00 00 36 14 00 00 00 00 00 00 a5 11 00 00 | ....................6........... |
17f80 | 67 01 00 00 05 07 00 00 2e 02 00 00 b3 0c 00 00 00 00 00 00 5a 0b 00 00 fd 04 00 00 c6 07 00 00 | g...................Z........... |
17fa0 | e1 00 00 00 fe 00 00 00 7f 08 00 00 00 00 00 00 96 09 00 00 a8 02 00 00 5b 07 00 00 28 12 00 00 | ........................[...(... |
17fc0 | 8e 0f 00 00 b7 05 00 00 fd 10 00 00 00 00 00 00 00 00 00 00 fb 01 00 00 08 0f 00 00 55 12 00 00 | ............................U... |
17fe0 | f9 07 00 00 d1 0d 00 00 00 00 00 00 6e 12 00 00 00 00 00 00 c9 0b 00 00 00 00 00 00 7b 11 00 00 | ............n...............{... |
18000 | 8b 0e 00 00 00 00 00 00 79 09 00 00 cb 06 00 00 54 13 00 00 4b 0f 00 00 e5 12 00 00 00 00 00 00 | ........y.......T...K........... |
18020 | 6b 13 00 00 55 07 00 00 00 00 00 00 bb 0f 00 00 c0 12 00 00 9b 03 00 00 62 02 00 00 9a 02 00 00 | k...U...................b....... |
18040 | ce 0e 00 00 00 00 00 00 00 00 00 00 b3 00 00 00 36 04 00 00 23 0f 00 00 00 00 00 00 de 0c 00 00 | ................6...#........... |
18060 | 00 00 00 00 6b 04 00 00 f4 00 00 00 4c 0a 00 00 12 11 00 00 d8 02 00 00 00 00 00 00 00 06 00 00 | ....k.......L................... |
18080 | 00 00 00 00 49 04 00 00 cf 12 00 00 00 00 00 00 11 07 00 00 19 0d 00 00 00 00 00 00 74 02 00 00 | ....I.......................t... |
180a0 | 62 12 00 00 a9 0c 00 00 89 03 00 00 00 00 00 00 35 0a 00 00 c8 01 00 00 00 00 00 00 36 12 00 00 | b...............5...........6... |
180c0 | ba 10 00 00 00 00 00 00 47 10 00 00 4d 12 00 00 02 0a 00 00 8b 00 00 00 cb 12 00 00 e9 04 00 00 | ........G...M................... |
180e0 | 8a 11 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 b7 0d 00 00 a9 10 00 00 00 00 00 00 00 00 00 00 | ................................ |
18100 | cf 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 be 0c 00 00 90 01 00 00 b5 0f 00 00 00 00 00 00 | ................................ |
18120 | 94 01 00 00 98 06 00 00 8c 10 00 00 44 0f 00 00 00 00 00 00 00 00 00 00 e2 04 00 00 a2 08 00 00 | ............D................... |
18140 | 44 12 00 00 5c 04 00 00 4e 0b 00 00 00 00 00 00 74 06 00 00 1e 11 00 00 26 06 00 00 47 06 00 00 | D...\...N.......t.......&...G... |
18160 | fc 08 00 00 00 00 00 00 00 00 00 00 11 02 00 00 83 0f 00 00 31 0f 00 00 08 00 00 00 20 13 00 00 | ....................1........... |
18180 | 12 0c 00 00 7c 13 00 00 bf 00 00 00 89 04 00 00 44 13 00 00 00 00 00 00 15 0b 00 00 cf 04 00 00 | ....|...........D............... |
181a0 | d7 06 00 00 b2 09 00 00 df 07 00 00 be 06 00 00 00 00 00 00 00 00 00 00 dd 0c 00 00 a2 12 00 00 | ................................ |
181c0 | 00 00 00 00 19 09 00 00 c3 0a 00 00 8a 01 00 00 56 06 00 00 44 14 00 00 ac 12 00 00 f0 0f 00 00 | ................V...D........... |
181e0 | f7 13 00 00 bd 0b 00 00 1b 04 00 00 50 04 00 00 1c 04 00 00 14 06 00 00 1d 04 00 00 00 00 00 00 | ............P................... |
18200 | 4d 09 00 00 0a 08 00 00 07 0f 00 00 34 08 00 00 00 00 00 00 e0 01 00 00 49 00 00 00 f8 0e 00 00 | M...........4...........I....... |
18220 | 00 00 00 00 6f 06 00 00 ad 0c 00 00 00 00 00 00 1b 09 00 00 4a 05 00 00 fc 0a 00 00 ab 11 00 00 | ....o...............J........... |
18240 | 40 13 00 00 00 00 00 00 00 00 00 00 d1 11 00 00 fe 09 00 00 81 12 00 00 00 00 00 00 00 00 00 00 | @............................... |
18260 | 58 00 00 00 10 11 00 00 0a 0c 00 00 e8 13 00 00 05 0f 00 00 d4 02 00 00 04 14 00 00 64 01 00 00 | X...........................d... |
18280 | 5a 01 00 00 c5 00 00 00 00 00 00 00 92 13 00 00 f2 0f 00 00 6a 0e 00 00 f3 07 00 00 4e 05 00 00 | Z...................j.......N... |
182a0 | f0 00 00 00 00 00 00 00 ee 07 00 00 26 0c 00 00 2f 07 00 00 64 06 00 00 00 00 00 00 b3 05 00 00 | ............&.../...d........... |
182c0 | c8 09 00 00 00 00 00 00 00 00 00 00 e0 09 00 00 00 00 00 00 17 02 00 00 00 00 00 00 9e 04 00 00 | ................................ |
182e0 | f1 00 00 00 04 11 00 00 00 00 00 00 00 12 00 00 e0 10 00 00 53 0d 00 00 ec 04 00 00 69 0b 00 00 | ....................S.......i... |
18300 | be 04 00 00 81 09 00 00 00 00 00 00 45 02 00 00 8e 05 00 00 1b 05 00 00 40 02 00 00 22 0b 00 00 | ............E...........@..."... |
18320 | 2a 10 00 00 0e 00 00 00 00 00 00 00 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b4 00 00 00 | *............................... |
18340 | b3 0f 00 00 6a 06 00 00 50 08 00 00 00 00 00 00 d8 04 00 00 00 00 00 00 9c 08 00 00 8c 0f 00 00 | ....j...P....................... |
18360 | df 0a 00 00 b4 05 00 00 00 00 00 00 38 0b 00 00 16 0c 00 00 45 0d 00 00 b6 10 00 00 5a 00 00 00 | ............8.......E.......Z... |
18380 | 70 03 00 00 1d 13 00 00 2c 0b 00 00 00 00 00 00 26 0b 00 00 28 04 00 00 00 00 00 00 87 07 00 00 | p.......,.......&...(........... |
183a0 | 00 00 00 00 00 00 00 00 00 00 00 00 88 0f 00 00 5d 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................]............... |
183c0 | bb 00 00 00 00 00 00 00 00 00 00 00 81 0d 00 00 00 00 00 00 00 00 00 00 06 08 00 00 f2 13 00 00 | ................................ |
183e0 | c7 13 00 00 2a 00 00 00 00 00 00 00 3d 0a 00 00 88 0b 00 00 f0 10 00 00 b8 08 00 00 d0 0f 00 00 | ....*.......=................... |
18400 | 71 08 00 00 00 00 00 00 9a 01 00 00 de 08 00 00 f3 09 00 00 8f 0d 00 00 07 03 00 00 bd 0a 00 00 | q............................... |
18420 | e6 10 00 00 ec 09 00 00 00 00 00 00 4d 0e 00 00 30 06 00 00 00 00 00 00 eb 08 00 00 0e 09 00 00 | ............M...0............... |
18440 | f1 11 00 00 d7 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f3 08 00 00 72 0a 00 00 2c 07 00 00 | ........................r...,... |
18460 | 00 00 00 00 00 00 00 00 85 13 00 00 fc 05 00 00 00 00 00 00 00 00 00 00 f3 12 00 00 b4 0b 00 00 | ................................ |
18480 | 1e 14 00 00 0d 06 00 00 00 00 00 00 55 03 00 00 15 04 00 00 63 07 00 00 11 13 00 00 6a 07 00 00 | ............U.......c.......j... |
184a0 | 00 00 00 00 00 00 00 00 00 00 00 00 c8 04 00 00 2b 07 00 00 d1 02 00 00 31 05 00 00 6f 01 00 00 | ................+.......1...o... |
184c0 | 48 08 00 00 3e 14 00 00 2f 0e 00 00 07 04 00 00 8d 10 00 00 0a 0b 00 00 b5 0b 00 00 00 00 00 00 | H...>.../....................... |
184e0 | b0 08 00 00 9b 0c 00 00 28 03 00 00 22 11 00 00 03 0f 00 00 81 13 00 00 29 07 00 00 35 00 00 00 | ........(..."...........)...5... |
18500 | 00 00 00 00 cf 08 00 00 00 00 00 00 dc 0c 00 00 1e 05 00 00 00 00 00 00 ef 01 00 00 d7 03 00 00 | ................................ |
18520 | 69 03 00 00 e5 04 00 00 00 00 00 00 bf 07 00 00 ac 07 00 00 78 12 00 00 d3 0a 00 00 f5 06 00 00 | i...................x........... |
18540 | e7 03 00 00 00 00 00 00 00 00 00 00 20 00 00 00 dd 06 00 00 72 03 00 00 00 00 00 00 af 13 00 00 | ....................r........... |
18560 | f9 0d 00 00 00 00 00 00 00 00 00 00 55 0b 00 00 ff 0f 00 00 00 00 00 00 00 00 00 00 74 0a 00 00 | ............U...............t... |
18580 | 61 12 00 00 83 02 00 00 86 05 00 00 c1 10 00 00 4e 09 00 00 00 00 00 00 bf 03 00 00 6c 08 00 00 | a...............N...........l... |
185a0 | 00 00 00 00 7e 04 00 00 00 00 00 00 bb 09 00 00 00 00 00 00 f0 01 00 00 c9 12 00 00 70 09 00 00 | ....~.......................p... |
185c0 | d1 0c 00 00 a6 02 00 00 3e 07 00 00 92 09 00 00 00 00 00 00 e8 0e 00 00 e3 02 00 00 c5 0f 00 00 | ........>....................... |
185e0 | 41 12 00 00 00 00 00 00 a8 0c 00 00 b3 12 00 00 00 00 00 00 c2 13 00 00 23 0c 00 00 00 00 00 00 | A.......................#....... |
18600 | 00 00 00 00 8c 0c 00 00 e9 05 00 00 7b 01 00 00 3a 05 00 00 32 13 00 00 b7 10 00 00 0e 05 00 00 | ............{...:...2........... |
18620 | 40 0e 00 00 0a 12 00 00 c3 00 00 00 ce 10 00 00 3e 0b 00 00 93 09 00 00 7c 00 00 00 00 00 00 00 | @...............>.......|....... |
18640 | 41 08 00 00 00 00 00 00 00 00 00 00 8b 0a 00 00 ff 00 00 00 00 00 00 00 51 06 00 00 97 01 00 00 | A.......................Q....... |
18660 | 4a 07 00 00 00 00 00 00 30 12 00 00 00 00 00 00 00 00 00 00 2c 00 00 00 10 0d 00 00 6e 07 00 00 | J.......0...........,.......n... |
18680 | b7 0a 00 00 d2 02 00 00 b8 0a 00 00 01 06 00 00 00 00 00 00 b2 00 00 00 5f 10 00 00 3c 10 00 00 | ........................_...<... |
186a0 | 44 07 00 00 01 0f 00 00 c4 07 00 00 95 01 00 00 5d 07 00 00 91 0a 00 00 2a 0f 00 00 08 12 00 00 | D...............].......*....... |
186c0 | 6e 04 00 00 00 00 00 00 61 10 00 00 00 00 00 00 49 0a 00 00 3f 14 00 00 00 00 00 00 0c 06 00 00 | n.......a.......I...?........... |
186e0 | bf 08 00 00 1d 0e 00 00 09 14 00 00 00 00 00 00 f9 08 00 00 d5 02 00 00 ac 13 00 00 e3 07 00 00 | ................................ |
18700 | af 06 00 00 d4 09 00 00 a8 12 00 00 27 00 00 00 95 11 00 00 00 00 00 00 29 04 00 00 70 11 00 00 | ............'...........)...p... |
18720 | 2e 05 00 00 cc 0d 00 00 1f 0b 00 00 83 11 00 00 a5 0d 00 00 00 00 00 00 e2 05 00 00 00 00 00 00 | ................................ |
18740 | 18 08 00 00 00 00 00 00 78 10 00 00 00 00 00 00 ea 07 00 00 d2 12 00 00 5e 08 00 00 f7 06 00 00 | ........x...............^....... |
18760 | 0a 03 00 00 c8 06 00 00 6d 03 00 00 dc 01 00 00 df 13 00 00 00 00 00 00 15 02 00 00 00 00 00 00 | ........m....................... |
18780 | 60 03 00 00 00 00 00 00 c2 12 00 00 00 00 00 00 01 0d 00 00 00 00 00 00 3a 00 00 00 f7 04 00 00 | `.......................:....... |
187a0 | 6a 04 00 00 c2 0f 00 00 00 00 00 00 83 00 00 00 43 06 00 00 b0 04 00 00 00 00 00 00 55 05 00 00 | j...............C...........U... |
187c0 | 00 00 00 00 bd 05 00 00 9a 0c 00 00 05 14 00 00 32 05 00 00 06 04 00 00 00 00 00 00 5f 05 00 00 | ................2..........._... |
187e0 | 00 00 00 00 11 00 00 00 bc 04 00 00 3c 05 00 00 94 0c 00 00 5b 06 00 00 00 00 00 00 6b 05 00 00 | ............<.......[.......k... |
18800 | 07 05 00 00 00 00 00 00 9d 00 00 00 49 01 00 00 cf 05 00 00 b3 0d 00 00 c4 12 00 00 24 13 00 00 | ............I...............$... |
18820 | 67 0d 00 00 00 00 00 00 42 09 00 00 00 00 00 00 76 0d 00 00 f3 04 00 00 2b 0e 00 00 69 07 00 00 | g.......B.......v.......+...i... |
18840 | 41 14 00 00 35 0e 00 00 74 05 00 00 d9 0d 00 00 be 00 00 00 5c 13 00 00 39 01 00 00 bf 02 00 00 | A...5...t...........\...9....... |
18860 | e5 0c 00 00 26 09 00 00 28 0e 00 00 62 04 00 00 3b 05 00 00 b3 01 00 00 00 00 00 00 00 00 00 00 | ....&...(...b...;............... |
18880 | 25 0c 00 00 eb 06 00 00 f0 13 00 00 1d 12 00 00 56 08 00 00 c3 04 00 00 c5 04 00 00 b1 00 00 00 | %...............V............... |
188a0 | 68 07 00 00 00 04 00 00 d7 12 00 00 a6 0d 00 00 00 00 00 00 48 0b 00 00 4d 06 00 00 9e 11 00 00 | h...................H...M....... |
188c0 | fb 05 00 00 bd 02 00 00 87 10 00 00 0f 0f 00 00 3e 0e 00 00 a7 08 00 00 3d 00 00 00 94 0e 00 00 | ................>.......=....... |
188e0 | cc 04 00 00 47 0d 00 00 60 04 00 00 47 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e6 0e 00 00 | ....G...`...G................... |
18900 | 86 0c 00 00 00 00 00 00 00 00 00 00 42 14 00 00 cb 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............B................... |
18920 | 92 11 00 00 b8 01 00 00 c2 03 00 00 d2 04 00 00 b7 06 00 00 00 00 00 00 68 05 00 00 4e 0d 00 00 | ........................h...N... |
18940 | 94 0a 00 00 e5 03 00 00 00 00 00 00 00 00 00 00 c3 13 00 00 00 00 00 00 02 02 00 00 89 08 00 00 | ................................ |
18960 | 00 00 00 00 2d 08 00 00 70 0b 00 00 00 00 00 00 00 00 00 00 cb 01 00 00 f7 0c 00 00 90 03 00 00 | ....-...p....................... |
18980 | c8 10 00 00 e8 01 00 00 56 03 00 00 00 00 00 00 8d 0a 00 00 bb 01 00 00 51 04 00 00 77 05 00 00 | ........V...............Q...w... |
189a0 | a1 10 00 00 78 01 00 00 7c 0d 00 00 28 07 00 00 8d 0b 00 00 00 00 00 00 52 03 00 00 bf 04 00 00 | ....x...|...(...........R....... |
189c0 | a0 10 00 00 00 00 00 00 5d 00 00 00 21 11 00 00 00 00 00 00 b5 07 00 00 b8 04 00 00 00 00 00 00 | ........]...!................... |
189e0 | fd 0e 00 00 00 00 00 00 6c 11 00 00 82 07 00 00 00 00 00 00 4a 02 00 00 96 08 00 00 25 00 00 00 | ........l...........J.......%... |
18a00 | 00 00 00 00 37 05 00 00 02 05 00 00 8a 0e 00 00 00 00 00 00 17 00 00 00 4e 11 00 00 09 03 00 00 | ....7...................N....... |
18a20 | 47 0e 00 00 14 13 00 00 8b 0d 00 00 95 08 00 00 2b 09 00 00 00 00 00 00 00 00 00 00 92 07 00 00 | G...............+............... |
18a40 | f8 10 00 00 00 00 00 00 83 0c 00 00 19 0c 00 00 78 13 00 00 68 03 00 00 9f 0f 00 00 9b 12 00 00 | ................x...h........... |
18a60 | 00 00 00 00 b0 12 00 00 23 01 00 00 fc 13 00 00 e8 0b 00 00 46 01 00 00 48 01 00 00 e3 12 00 00 | ........#...........F...H....... |
18a80 | d3 11 00 00 00 00 00 00 88 0d 00 00 2f 06 00 00 09 0d 00 00 fe 08 00 00 19 03 00 00 00 00 00 00 | ............/................... |
18aa0 | e1 12 00 00 b1 10 00 00 00 00 00 00 c9 0f 00 00 7d 09 00 00 00 00 00 00 00 00 00 00 c9 08 00 00 | ................}............... |
18ac0 | eb 03 00 00 07 10 00 00 c5 0a 00 00 00 00 00 00 6e 0b 00 00 00 00 00 00 00 00 00 00 57 00 00 00 | ................n...........W... |
18ae0 | 52 01 00 00 73 12 00 00 f6 13 00 00 ed 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 0b 00 00 | R...s........................... |
18b00 | 00 00 00 00 11 03 00 00 e2 0e 00 00 3c 03 00 00 be 0f 00 00 00 00 00 00 00 00 00 00 16 0d 00 00 | ............<................... |
18b20 | e4 01 00 00 0c 0a 00 00 00 00 00 00 c8 0e 00 00 48 07 00 00 65 12 00 00 00 00 00 00 00 00 00 00 | ................H...e........... |
18b40 | 0d 10 00 00 00 00 00 00 6e 05 00 00 00 00 00 00 02 09 00 00 1b 0b 00 00 8e 0c 00 00 87 01 00 00 | ........n....................... |
18b60 | 00 00 00 00 3e 13 00 00 33 00 00 00 93 08 00 00 00 00 00 00 8d 09 00 00 bc 02 00 00 bd 03 00 00 | ....>...3....................... |
18b80 | a3 0d 00 00 3e 09 00 00 00 00 00 00 00 00 00 00 46 0f 00 00 80 0e 00 00 00 00 00 00 88 05 00 00 | ....>...........F............... |
18ba0 | 4a 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 04 00 00 a0 07 00 00 00 00 00 00 | J............................... |
18bc0 | 6d 05 00 00 b9 13 00 00 63 00 00 00 fc 0c 00 00 00 00 00 00 ac 09 00 00 0b 04 00 00 6d 02 00 00 | m.......c...................m... |
18be0 | 80 02 00 00 35 05 00 00 45 0a 00 00 0b 0c 00 00 87 0f 00 00 f8 0b 00 00 00 00 00 00 ab 09 00 00 | ....5...E....................... |
18c00 | 76 02 00 00 00 00 00 00 8a 09 00 00 b5 13 00 00 a7 13 00 00 4f 04 00 00 e1 06 00 00 c3 0c 00 00 | v...................O........... |
18c20 | 79 0d 00 00 12 0e 00 00 24 0b 00 00 00 00 00 00 4a 08 00 00 85 08 00 00 51 0a 00 00 00 00 00 00 | y.......$.......J.......Q....... |
18c40 | 00 00 00 00 00 00 00 00 2e 13 00 00 00 00 00 00 55 01 00 00 21 0c 00 00 18 0d 00 00 51 07 00 00 | ................U...!.......Q... |
18c60 | 4c 05 00 00 3b 13 00 00 47 04 00 00 7d 0e 00 00 ef 07 00 00 00 00 00 00 bb 07 00 00 75 0e 00 00 | L...;...G...}...............u... |
18c80 | db 0e 00 00 c2 06 00 00 2f 00 00 00 af 0e 00 00 00 00 00 00 32 02 00 00 f9 12 00 00 27 0c 00 00 | ......../...........2.......'... |
18ca0 | 10 06 00 00 c5 03 00 00 62 09 00 00 c0 05 00 00 00 00 00 00 9c 07 00 00 00 00 00 00 bb 12 00 00 | ........b....................... |
18cc0 | b7 0e 00 00 12 07 00 00 69 13 00 00 00 00 00 00 3f 12 00 00 f9 03 00 00 8f 13 00 00 ae 0c 00 00 | ........i.......?............... |
18ce0 | 59 13 00 00 8d 08 00 00 f8 09 00 00 00 00 00 00 00 00 00 00 fb 0f 00 00 d6 01 00 00 fa 06 00 00 | Y............................... |
18d00 | d3 10 00 00 00 00 00 00 ba 0a 00 00 00 00 00 00 72 04 00 00 92 0e 00 00 00 00 00 00 00 00 00 00 | ................r............... |
18d20 | 00 00 00 00 c5 06 00 00 95 07 00 00 f8 02 00 00 11 0d 00 00 1c 07 00 00 05 01 00 00 8f 04 00 00 | ................................ |
18d40 | 1f 0f 00 00 04 04 00 00 4e 13 00 00 e5 00 00 00 00 00 00 00 00 00 00 00 3b 14 00 00 00 00 00 00 | ........N...............;....... |
18d60 | 00 00 00 00 db 09 00 00 00 00 00 00 00 00 00 00 36 06 00 00 60 00 00 00 00 00 00 00 d6 04 00 00 | ................6...`........... |
18d80 | 00 00 00 00 90 0b 00 00 82 10 00 00 d1 01 00 00 00 00 00 00 aa 13 00 00 0c 00 00 00 bb 03 00 00 | ................................ |
18da0 | 50 10 00 00 23 03 00 00 00 00 00 00 04 0d 00 00 00 00 00 00 5b 02 00 00 00 00 00 00 66 04 00 00 | P...#...............[.......f... |
18dc0 | ed 12 00 00 00 00 00 00 54 02 00 00 3f 0d 00 00 af 0b 00 00 60 12 00 00 aa 00 00 00 29 0f 00 00 | ........T...?.......`.......)... |
18de0 | 00 00 00 00 13 00 00 00 5d 04 00 00 a3 0b 00 00 88 04 00 00 c4 05 00 00 00 00 00 00 8e 02 00 00 | ........]....................... |
18e00 | ea 03 00 00 c2 05 00 00 00 00 00 00 00 00 00 00 6e 02 00 00 d4 05 00 00 00 00 00 00 a3 07 00 00 | ................n............... |
18e20 | a9 12 00 00 a6 01 00 00 5f 12 00 00 87 08 00 00 0f 02 00 00 09 08 00 00 00 00 00 00 de 13 00 00 | ........_....................... |
18e40 | c3 0d 00 00 00 00 00 00 d6 03 00 00 84 12 00 00 00 00 00 00 0f 12 00 00 ba 12 00 00 d8 05 00 00 | ................................ |
18e60 | 00 00 00 00 ce 13 00 00 00 00 00 00 eb 11 00 00 00 00 00 00 f6 04 00 00 e5 02 00 00 8c 07 00 00 | ................................ |
18e80 | 22 0e 00 00 1c 0c 00 00 21 0a 00 00 00 00 00 00 f7 08 00 00 54 01 00 00 0d 09 00 00 ec 05 00 00 | ".......!...........T........... |
18ea0 | c0 13 00 00 a7 07 00 00 ae 0f 00 00 00 00 00 00 73 0f 00 00 33 11 00 00 de 00 00 00 a3 0a 00 00 | ................s...3........... |
18ec0 | f2 03 00 00 dd 0f 00 00 c6 11 00 00 25 14 00 00 92 00 00 00 5c 0e 00 00 00 00 00 00 79 08 00 00 | ............%.......\.......y... |
18ee0 | 08 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb 02 00 00 9a 06 00 00 00 00 00 00 ea 08 00 00 | ................................ |
18f00 | 51 03 00 00 4a 0e 00 00 61 0e 00 00 f3 13 00 00 fa 0f 00 00 59 00 00 00 da 10 00 00 00 00 00 00 | Q...J...a...........Y........... |
18f20 | 65 0b 00 00 c1 09 00 00 2c 12 00 00 00 00 00 00 35 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | e.......,.......5............... |
18f40 | 9e 0b 00 00 00 00 00 00 9a 0a 00 00 7a 03 00 00 57 08 00 00 94 04 00 00 92 05 00 00 7b 07 00 00 | ............z...W...........{... |
18f60 | 00 00 00 00 65 11 00 00 00 00 00 00 00 00 00 00 2b 08 00 00 0f 0e 00 00 26 14 00 00 34 14 00 00 | ....e...........+.......&...4... |
18f80 | 88 0a 00 00 23 0b 00 00 78 0c 00 00 00 00 00 00 00 00 00 00 65 0f 00 00 32 04 00 00 1c 0a 00 00 | ....#...x...........e...2....... |
18fa0 | 63 11 00 00 00 00 00 00 65 0c 00 00 56 01 00 00 00 00 00 00 2a 07 00 00 35 0b 00 00 b8 06 00 00 | c.......e...V.......*...5....... |
18fc0 | 00 00 00 00 9b 0b 00 00 00 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 db 02 00 00 f2 0d 00 00 | ................................ |
18fe0 | 00 00 00 00 00 00 00 00 05 11 00 00 54 12 00 00 b5 01 00 00 83 10 00 00 00 00 00 00 a2 03 00 00 | ............T................... |
19000 | 77 04 00 00 ad 08 00 00 1b 0d 00 00 56 0f 00 00 c4 0e 00 00 00 00 00 00 b6 01 00 00 00 00 00 00 | w...........V................... |
19020 | ad 0b 00 00 0b 12 00 00 8d 12 00 00 0d 0b 00 00 ad 12 00 00 bc 10 00 00 a0 05 00 00 7d 07 00 00 | ............................}... |
19040 | c9 00 00 00 4d 07 00 00 00 00 00 00 6a 13 00 00 6d 01 00 00 5d 0d 00 00 00 00 00 00 59 12 00 00 | ....M.......j...m...].......Y... |
19060 | 00 00 00 00 00 00 00 00 1f 02 00 00 64 0b 00 00 cb 0f 00 00 9c 10 00 00 31 02 00 00 ee 11 00 00 | ............d...........1....... |
19080 | 00 00 00 00 6d 0a 00 00 96 04 00 00 00 00 00 00 06 13 00 00 99 09 00 00 00 00 00 00 c8 0c 00 00 | ....m........................... |
190a0 | 2c 11 00 00 4c 0f 00 00 1b 0e 00 00 79 05 00 00 3f 09 00 00 f9 06 00 00 00 00 00 00 2c 05 00 00 | ,...L.......y...?...........,... |
190c0 | c7 09 00 00 00 00 00 00 b9 0a 00 00 c5 05 00 00 a9 0b 00 00 2c 0a 00 00 e4 0e 00 00 1e 03 00 00 | ....................,........... |
190e0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 13 00 00 fc 10 00 00 45 06 00 00 4f 12 00 00 | ........................E...O... |
19100 | e9 07 00 00 3f 03 00 00 47 03 00 00 cf 10 00 00 70 05 00 00 40 0a 00 00 00 00 00 00 97 02 00 00 | ....?...G.......p...@........... |
19120 | 15 08 00 00 bb 0a 00 00 00 00 00 00 9c 05 00 00 ac 0b 00 00 00 00 00 00 00 00 00 00 89 07 00 00 | ................................ |
19140 | f3 01 00 00 53 0f 00 00 ba 0f 00 00 1f 0d 00 00 00 00 00 00 6d 0b 00 00 2d 13 00 00 86 06 00 00 | ....S...............m...-....... |
19160 | 87 06 00 00 87 0c 00 00 00 00 00 00 28 08 00 00 89 11 00 00 eb 0d 00 00 38 07 00 00 e2 03 00 00 | ............(...........8....... |
19180 | 88 02 00 00 7f 0f 00 00 76 0c 00 00 00 00 00 00 40 0b 00 00 12 03 00 00 08 04 00 00 00 00 00 00 | ........v.......@............... |
191a0 | 57 04 00 00 a8 10 00 00 c3 08 00 00 00 00 00 00 5a 11 00 00 58 06 00 00 37 0d 00 00 00 00 00 00 | W...............Z...X...7....... |
191c0 | 00 00 00 00 00 00 00 00 4b 03 00 00 9f 02 00 00 00 00 00 00 0f 04 00 00 9d 05 00 00 f4 0b 00 00 | ........K....................... |
191e0 | 2f 10 00 00 8c 09 00 00 88 11 00 00 55 11 00 00 37 11 00 00 42 08 00 00 6c 04 00 00 fc 04 00 00 | /...........U...7...B...l....... |
19200 | 72 07 00 00 71 12 00 00 95 02 00 00 b5 10 00 00 c8 00 00 00 97 11 00 00 0a 04 00 00 31 10 00 00 | r...q.......................1... |
19220 | 47 14 00 00 00 00 00 00 00 00 00 00 29 0e 00 00 8f 01 00 00 f3 0a 00 00 00 00 00 00 54 03 00 00 | G...........)...............T... |
19240 | fe 10 00 00 00 00 00 00 2f 0a 00 00 a3 06 00 00 1a 0b 00 00 00 00 00 00 09 0e 00 00 00 00 00 00 | ......../....................... |
19260 | df 11 00 00 7d 04 00 00 0e 14 00 00 ea 0c 00 00 86 11 00 00 7c 02 00 00 93 03 00 00 a4 0f 00 00 | ....}...............|........... |
19280 | 63 10 00 00 15 05 00 00 75 0b 00 00 79 03 00 00 9e 03 00 00 da 01 00 00 55 06 00 00 c1 05 00 00 | c.......u...y...........U....... |
192a0 | 00 00 00 00 75 09 00 00 7f 0b 00 00 d6 0c 00 00 49 07 00 00 00 00 00 00 d2 13 00 00 58 03 00 00 | ....u...........I...........X... |
192c0 | 00 00 00 00 00 00 00 00 1c 05 00 00 00 00 00 00 9c 0b 00 00 98 01 00 00 00 00 00 00 0e 03 00 00 | ................................ |
192e0 | f1 03 00 00 00 00 00 00 25 11 00 00 18 0b 00 00 b0 0d 00 00 99 07 00 00 00 00 00 00 00 00 00 00 | ........%....................... |
19300 | 93 0a 00 00 1e 00 00 00 00 00 00 00 f0 09 00 00 e3 0f 00 00 c8 11 00 00 a6 12 00 00 f5 08 00 00 | ................................ |
19320 | 21 13 00 00 ee 03 00 00 15 13 00 00 b2 04 00 00 e6 00 00 00 f2 07 00 00 1f 08 00 00 ab 03 00 00 | !............................... |
19340 | 00 00 00 00 ab 0a 00 00 7c 05 00 00 d9 11 00 00 00 00 00 00 00 00 00 00 43 0b 00 00 00 00 00 00 | ........|...............C....... |
19360 | a2 0f 00 00 41 10 00 00 f5 07 00 00 a6 08 00 00 22 0c 00 00 ed 07 00 00 16 13 00 00 2e 10 00 00 | ....A..........."............... |
19380 | 00 00 00 00 00 00 00 00 7a 0d 00 00 ed 00 00 00 8f 11 00 00 16 0f 00 00 c3 11 00 00 be 0e 00 00 | ........z....................... |
193a0 | 2f 13 00 00 00 00 00 00 cc 12 00 00 00 00 00 00 7f 04 00 00 61 00 00 00 00 00 00 00 00 00 00 00 | /...................a........... |
193c0 | 5c 08 00 00 1c 0e 00 00 00 00 00 00 ee 00 00 00 00 00 00 00 d5 0c 00 00 18 00 00 00 f6 03 00 00 | \............................... |
193e0 | 00 00 00 00 00 00 00 00 00 00 00 00 fb 06 00 00 69 05 00 00 00 00 00 00 a9 04 00 00 7c 06 00 00 | ................i...........|... |
19400 | 81 05 00 00 80 10 00 00 00 00 00 00 db 0f 00 00 00 00 00 00 40 05 00 00 de 01 00 00 00 00 00 00 | ....................@........... |
19420 | b6 0e 00 00 03 08 00 00 00 00 00 00 df 03 00 00 72 11 00 00 00 00 00 00 54 00 00 00 29 11 00 00 | ................r.......T...)... |
19440 | 00 00 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 15 01 00 00 47 08 00 00 4d 0a 00 00 00 00 00 00 | ....................G...M....... |
19460 | fb 03 00 00 c6 00 00 00 e0 0d 00 00 5b 0e 00 00 b1 0c 00 00 69 10 00 00 44 0e 00 00 b2 08 00 00 | ............[.......i...D....... |
19480 | 2b 12 00 00 dc 11 00 00 72 0f 00 00 81 07 00 00 51 00 00 00 00 00 00 00 0a 00 00 00 1c 09 00 00 | +.......r.......Q............... |
194a0 | ce 0c 00 00 00 00 00 00 63 03 00 00 42 0d 00 00 87 0e 00 00 5a 0f 00 00 cd 0f 00 00 d4 13 00 00 | ........c...B.......Z........... |
194c0 | 91 04 00 00 00 00 00 00 20 11 00 00 85 04 00 00 cb 0d 00 00 00 00 00 00 10 02 00 00 00 00 00 00 | ................................ |
194e0 | 5d 0a 00 00 99 0d 00 00 4b 0c 00 00 b1 0f 00 00 be 10 00 00 00 00 00 00 5c 0d 00 00 00 00 00 00 | ].......K...............\....... |
19500 | 0a 09 00 00 5d 0b 00 00 00 00 00 00 00 00 00 00 28 0a 00 00 0f 11 00 00 7a 06 00 00 15 10 00 00 | ....]...........(.......z....... |
19520 | 3a 04 00 00 c4 0d 00 00 5d 0c 00 00 95 0e 00 00 08 08 00 00 6e 0a 00 00 7b 08 00 00 0e 04 00 00 | :.......]...........n...{....... |
19540 | af 0a 00 00 af 0d 00 00 b5 09 00 00 a3 10 00 00 00 00 00 00 00 00 00 00 c6 02 00 00 db 0b 00 00 | ................................ |
19560 | 5a 07 00 00 9a 13 00 00 d1 0f 00 00 d4 06 00 00 00 00 00 00 5b 00 00 00 db 07 00 00 00 00 00 00 | Z...................[........... |
19580 | 42 07 00 00 69 0d 00 00 54 0c 00 00 00 00 00 00 00 00 00 00 81 0a 00 00 34 0d 00 00 e2 09 00 00 | B...i...T...............4....... |
195a0 | 00 00 00 00 44 04 00 00 00 00 00 00 f3 11 00 00 52 13 00 00 ab 06 00 00 d1 05 00 00 03 0e 00 00 | ....D...........R............... |
195c0 | 34 00 00 00 b3 0e 00 00 00 00 00 00 85 03 00 00 00 00 00 00 00 00 00 00 9d 0d 00 00 00 0b 00 00 | 4............................... |
195e0 | 4b 11 00 00 b3 0b 00 00 09 00 00 00 2b 13 00 00 ef 06 00 00 86 02 00 00 5f 02 00 00 ea 11 00 00 | K...........+..........._....... |
19600 | b6 0d 00 00 b8 03 00 00 13 0b 00 00 d4 11 00 00 00 00 00 00 00 00 00 00 9f 03 00 00 00 00 00 00 | ................................ |
19620 | 20 14 00 00 54 07 00 00 a8 05 00 00 4c 03 00 00 ed 03 00 00 d7 02 00 00 6c 13 00 00 27 02 00 00 | ....T.......L...........l...'... |
19640 | 00 00 00 00 41 11 00 00 5e 02 00 00 78 0b 00 00 02 08 00 00 87 03 00 00 41 07 00 00 00 00 00 00 | ....A...^...x...........A....... |
19660 | 99 05 00 00 00 00 00 00 20 0e 00 00 d0 05 00 00 f0 11 00 00 00 00 00 00 f2 11 00 00 a3 01 00 00 | ................................ |
19680 | 6c 05 00 00 00 00 00 00 26 03 00 00 d0 00 00 00 8e 03 00 00 3c 12 00 00 70 02 00 00 00 00 00 00 | l.......&...........<...p....... |
196a0 | 00 00 00 00 2d 0d 00 00 64 0c 00 00 bd 04 00 00 00 00 00 00 00 00 00 00 a3 09 00 00 60 06 00 00 | ....-...d...................`... |
196c0 | 58 01 00 00 cc 09 00 00 00 00 00 00 00 00 00 00 9c 02 00 00 05 0a 00 00 60 10 00 00 00 00 00 00 | X.......................`....... |
196e0 | be 08 00 00 1e 02 00 00 3e 03 00 00 a7 05 00 00 83 0d 00 00 a7 10 00 00 d7 0e 00 00 03 09 00 00 | ........>....................... |
19700 | 0c 0d 00 00 9c 0c 00 00 0f 0c 00 00 aa 04 00 00 00 00 00 00 f2 0b 00 00 8f 12 00 00 d2 0c 00 00 | ................................ |
19720 | 48 06 00 00 50 00 00 00 3b 09 00 00 9f 00 00 00 00 00 00 00 ae 11 00 00 05 0d 00 00 d9 09 00 00 | H...P...;....................... |
19740 | 5e 07 00 00 93 07 00 00 ec 01 00 00 6d 0d 00 00 c9 0c 00 00 3b 06 00 00 8e 00 00 00 00 00 00 00 | ^...........m.......;........... |
19760 | 89 00 00 00 00 00 00 00 06 0d 00 00 d2 0b 00 00 00 07 00 00 29 12 00 00 24 0f 00 00 ce 12 00 00 | ....................)...$....... |
19780 | c9 13 00 00 00 00 00 00 fd 0b 00 00 00 00 00 00 63 12 00 00 21 12 00 00 1b 01 00 00 b9 0f 00 00 | ................c...!........... |
197a0 | 34 13 00 00 d8 13 00 00 ee 0b 00 00 9d 0b 00 00 00 00 00 00 44 11 00 00 eb 04 00 00 aa 0e 00 00 | 4...................D........... |
197c0 | 00 00 00 00 00 00 00 00 dd 0e 00 00 00 00 00 00 06 11 00 00 af 08 00 00 9e 00 00 00 90 06 00 00 | ................................ |
197e0 | 00 00 00 00 00 00 00 00 00 00 00 00 7b 0c 00 00 00 00 00 00 7f 05 00 00 41 03 00 00 82 04 00 00 | ............{...........A....... |
19800 | 7b 0d 00 00 27 0d 00 00 e7 02 00 00 f6 0f 00 00 9c 11 00 00 42 13 00 00 79 02 00 00 51 11 00 00 | {...'...............B...y...Q... |
19820 | b2 0e 00 00 8a 04 00 00 00 00 00 00 00 00 00 00 4d 14 00 00 46 11 00 00 32 0a 00 00 98 0a 00 00 | ................M...F...2....... |
19840 | 00 00 00 00 08 09 00 00 cf 0f 00 00 b0 07 00 00 a3 00 00 00 b8 0e 00 00 68 0b 00 00 9e 0f 00 00 | ........................h....... |
19860 | 82 01 00 00 b1 03 00 00 e9 0c 00 00 05 0c 00 00 00 00 00 00 6a 12 00 00 ed 10 00 00 00 00 00 00 | ....................j........... |
19880 | 2f 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 14 00 00 fd 0d 00 00 35 06 00 00 43 13 00 00 | /...............C.......5...C... |
198a0 | ea 00 00 00 00 00 00 00 96 10 00 00 06 03 00 00 00 00 00 00 aa 07 00 00 29 09 00 00 be 01 00 00 | ........................)....... |
198c0 | 9f 13 00 00 48 0f 00 00 00 00 00 00 11 0a 00 00 30 05 00 00 c5 0e 00 00 4c 04 00 00 5c 02 00 00 | ....H...........0.......L...\... |
198e0 | e4 04 00 00 00 00 00 00 37 0e 00 00 16 01 00 00 de 0f 00 00 43 0f 00 00 c5 10 00 00 54 06 00 00 | ........7...........C.......T... |
19900 | c1 11 00 00 00 09 00 00 00 00 00 00 00 00 00 00 4b 0d 00 00 00 00 00 00 ba 0d 00 00 00 00 00 00 | ................K............... |
19920 | 1e 06 00 00 fc 0b 00 00 a7 0c 00 00 45 14 00 00 00 00 00 00 f9 09 00 00 37 12 00 00 ba 0b 00 00 | ............E...........7....... |
19940 | 00 0d 00 00 d5 0d 00 00 00 00 00 00 d7 0a 00 00 eb 10 00 00 df 01 00 00 15 0d 00 00 1b 02 00 00 | ................................ |
19960 | 00 00 00 00 94 0b 00 00 17 0a 00 00 b6 11 00 00 21 01 00 00 00 00 00 00 4c 09 00 00 00 00 00 00 | ................!.......L....... |
19980 | 00 00 00 00 00 00 00 00 00 00 00 00 f9 0c 00 00 53 10 00 00 2e 06 00 00 a0 03 00 00 00 00 00 00 | ................S............... |
199a0 | 00 00 00 00 ba 08 00 00 00 00 00 00 b3 06 00 00 21 00 00 00 65 00 00 00 00 00 00 00 97 05 00 00 | ................!...e........... |
199c0 | c1 01 00 00 98 09 00 00 44 08 00 00 d7 09 00 00 c6 05 00 00 00 00 00 00 2d 06 00 00 00 00 00 00 | ........D...............-....... |
199e0 | e6 01 00 00 00 00 00 00 67 06 00 00 00 00 00 00 50 0e 00 00 0f 06 00 00 53 0c 00 00 1f 10 00 00 | ........g.......P.......S....... |
19a00 | 00 00 00 00 6d 0e 00 00 f8 0a 00 00 a8 0e 00 00 b8 0d 00 00 94 11 00 00 00 00 00 00 ca 0a 00 00 | ....m........................... |
19a20 | 58 09 00 00 2e 14 00 00 00 00 00 00 a5 13 00 00 bf 12 00 00 45 0e 00 00 8a 12 00 00 28 02 00 00 | X...................E.......(... |
19a40 | b5 06 00 00 e0 0e 00 00 00 00 00 00 00 00 00 00 aa 01 00 00 c0 10 00 00 a7 06 00 00 d5 11 00 00 | ................................ |
19a60 | 1a 05 00 00 45 13 00 00 17 12 00 00 18 11 00 00 00 00 00 00 46 07 00 00 00 00 00 00 51 0b 00 00 | ....E...............F.......Q... |
19a80 | f0 07 00 00 61 0f 00 00 00 00 00 00 c8 02 00 00 00 00 00 00 52 0e 00 00 e0 12 00 00 00 00 00 00 | ....a...............R........... |
19aa0 | c4 0f 00 00 e0 11 00 00 9b 06 00 00 00 00 00 00 bb 02 00 00 02 0b 00 00 e3 0b 00 00 b2 0f 00 00 | ................................ |
19ac0 | 1f 07 00 00 00 00 00 00 00 00 00 00 63 06 00 00 00 00 00 00 00 00 00 00 12 02 00 00 e2 11 00 00 | ............c................... |
19ae0 | 00 00 00 00 18 0a 00 00 f4 10 00 00 00 00 00 00 93 04 00 00 d6 13 00 00 dd 11 00 00 94 02 00 00 | ................................ |
19b00 | a2 02 00 00 a0 02 00 00 f1 12 00 00 87 12 00 00 00 00 00 00 bc 07 00 00 9c 0a 00 00 31 03 00 00 | ............................1... |
19b20 | ad 05 00 00 a3 04 00 00 a9 03 00 00 02 10 00 00 32 0d 00 00 dc 04 00 00 b4 0f 00 00 00 00 00 00 | ................2............... |
19b40 | fc 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 13 00 00 6d 08 00 00 d9 12 00 00 00 00 00 00 | ................1...m........... |
19b60 | 75 13 00 00 84 0a 00 00 94 00 00 00 dc 02 00 00 c6 0e 00 00 86 00 00 00 00 00 00 00 00 00 00 00 | u............................... |
19b80 | d1 06 00 00 c7 07 00 00 8d 04 00 00 a8 09 00 00 ef 13 00 00 ac 05 00 00 00 00 00 00 59 0f 00 00 | ............................Y... |
19ba0 | d4 0a 00 00 00 00 00 00 00 00 00 00 ec 07 00 00 25 03 00 00 db 13 00 00 f7 05 00 00 b7 04 00 00 | ................%............... |
19bc0 | 03 12 00 00 c2 0a 00 00 e0 13 00 00 f4 0f 00 00 85 07 00 00 b9 10 00 00 af 0f 00 00 21 04 00 00 | ............................!... |
19be0 | 00 00 00 00 00 00 00 00 9b 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 06 00 00 d0 01 00 00 | ................................ |
19c00 | 94 03 00 00 00 00 00 00 f5 10 00 00 0c 05 00 00 aa 0c 00 00 dd 09 00 00 1e 0d 00 00 82 0f 00 00 | ................................ |
19c20 | 00 00 00 00 a9 13 00 00 c5 08 00 00 36 07 00 00 a9 09 00 00 2d 0c 00 00 17 0d 00 00 af 12 00 00 | ............6.......-........... |
19c40 | a1 00 00 00 51 0e 00 00 a2 07 00 00 00 00 00 00 68 08 00 00 db 0c 00 00 1d 14 00 00 9f 07 00 00 | ....Q...........h............... |
19c60 | 00 00 00 00 5d 06 00 00 43 08 00 00 df 0b 00 00 7b 04 00 00 00 00 00 00 8c 0e 00 00 60 02 00 00 | ....]...C.......{...........`... |
19c80 | 00 00 00 00 fa 11 00 00 d5 13 00 00 93 0e 00 00 7f 02 00 00 38 10 00 00 00 00 00 00 66 0a 00 00 | ....................8.......f... |
19ca0 | 17 14 00 00 ca 01 00 00 8f 0a 00 00 7e 0c 00 00 00 00 00 00 0e 0f 00 00 00 00 00 00 04 10 00 00 | ............~................... |
19cc0 | 00 00 00 00 00 00 00 00 14 0d 00 00 fa 07 00 00 52 05 00 00 00 00 00 00 34 0a 00 00 61 08 00 00 | ................R.......4...a... |
19ce0 | 00 00 00 00 b2 10 00 00 8e 06 00 00 00 00 00 00 5c 0a 00 00 00 00 00 00 00 00 00 00 4c 11 00 00 | ................\...........L... |
19d00 | 20 0d 00 00 2d 11 00 00 5f 0c 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 c6 08 00 00 00 00 00 00 | ....-..._....................... |
19d20 | 39 12 00 00 d9 0f 00 00 b6 0c 00 00 cb 0a 00 00 58 08 00 00 ac 0c 00 00 4e 0a 00 00 48 09 00 00 | 9...............X.......N...H... |
19d40 | 0f 00 00 00 15 07 00 00 11 10 00 00 f9 04 00 00 f8 12 00 00 1d 00 00 00 cd 0a 00 00 62 10 00 00 | ............................b... |
19d60 | fe 0a 00 00 b5 12 00 00 0c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ae 07 00 00 01 14 00 00 | ................................ |
19d80 | 68 12 00 00 00 00 00 00 00 00 00 00 81 0f 00 00 00 00 00 00 e7 00 00 00 e7 01 00 00 db 0a 00 00 | h............................... |
19da0 | cf 11 00 00 59 03 00 00 0b 14 00 00 80 07 00 00 00 00 00 00 db 05 00 00 f0 05 00 00 00 00 00 00 | ....Y........................... |
19dc0 | da 12 00 00 00 00 00 00 00 00 00 00 58 04 00 00 fa 04 00 00 84 0f 00 00 d2 07 00 00 c2 09 00 00 | ............X................... |
19de0 | 7d 0c 00 00 b6 07 00 00 28 11 00 00 8c 01 00 00 a2 11 00 00 fe 03 00 00 22 09 00 00 d0 04 00 00 | }.......(..............."....... |
19e00 | b2 0b 00 00 40 08 00 00 a7 02 00 00 6b 0f 00 00 c2 0d 00 00 02 00 00 00 f9 0a 00 00 00 00 00 00 | ....@.......k................... |
19e20 | e9 06 00 00 00 00 00 00 00 00 00 00 d9 05 00 00 24 05 00 00 fd 02 00 00 ca 00 00 00 8a 0b 00 00 | ................$............... |
19e40 | 37 08 00 00 00 00 00 00 35 08 00 00 46 06 00 00 74 0f 00 00 00 00 00 00 90 05 00 00 1f 11 00 00 | 7.......5...F...t............... |
19e60 | 63 0a 00 00 36 0b 00 00 00 00 00 00 8b 06 00 00 fe 11 00 00 77 13 00 00 93 12 00 00 10 0f 00 00 | c...6...............w........... |
19e80 | 47 09 00 00 37 10 00 00 00 00 00 00 83 0a 00 00 41 04 00 00 00 00 00 00 d8 12 00 00 bc 0a 00 00 | G...7...........A............... |
19ea0 | f6 02 00 00 00 00 00 00 9b 11 00 00 37 01 00 00 00 00 00 00 65 01 00 00 99 13 00 00 a0 0e 00 00 | ............7.......e........... |
19ec0 | 47 13 00 00 65 0d 00 00 8f 05 00 00 44 06 00 00 64 09 00 00 6e 06 00 00 46 0d 00 00 00 00 00 00 | G...e.......D...d...n...F....... |
19ee0 | f8 13 00 00 00 00 00 00 46 0b 00 00 7d 05 00 00 dc 07 00 00 df 04 00 00 00 00 00 00 04 13 00 00 | ........F...}................... |
19f00 | 3e 0c 00 00 1d 05 00 00 00 00 00 00 dc 0f 00 00 34 03 00 00 b0 09 00 00 13 11 00 00 fe 0d 00 00 | >...............4............... |
19f20 | 93 10 00 00 61 05 00 00 2d 00 00 00 00 00 00 00 fb 0d 00 00 f2 05 00 00 00 00 00 00 d1 09 00 00 | ....a...-....................... |
19f40 | 1a 00 00 00 da 09 00 00 e3 10 00 00 3f 00 00 00 98 0e 00 00 24 07 00 00 37 09 00 00 53 06 00 00 | ............?.......$...7...S... |
19f60 | d2 00 00 00 00 00 00 00 84 10 00 00 ed 0d 00 00 46 0a 00 00 27 0a 00 00 ef 12 00 00 cc 13 00 00 | ................F...'........... |
19f80 | a6 0e 00 00 a5 04 00 00 00 00 00 00 3f 10 00 00 52 0a 00 00 05 08 00 00 00 00 00 00 f4 07 00 00 | ............?...R............... |
19fa0 | 8d 07 00 00 98 11 00 00 84 0e 00 00 42 06 00 00 c9 01 00 00 2c 0e 00 00 6f 07 00 00 34 10 00 00 | ............B.......,...o...4... |
19fc0 | f7 12 00 00 25 0d 00 00 68 10 00 00 e8 0d 00 00 00 00 00 00 d0 09 00 00 54 0f 00 00 ad 13 00 00 | ....%...h...............T....... |
19fe0 | e3 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c 0b 00 00 00 00 00 00 00 00 00 00 f0 04 00 00 | ................................ |
1a000 | 2d 04 00 00 3c 02 00 00 9d 04 00 00 30 09 00 00 91 01 00 00 da 0a 00 00 5a 05 00 00 00 00 00 00 | -...<.......0...........Z....... |
1a020 | 00 00 00 00 49 02 00 00 c1 0c 00 00 e1 07 00 00 00 00 00 00 69 00 00 00 ef 05 00 00 f4 04 00 00 | ....I...............i........... |
1a040 | 17 10 00 00 33 0b 00 00 00 00 00 00 0b 13 00 00 00 00 00 00 3a 06 00 00 93 01 00 00 88 0c 00 00 | ....3...............:........... |
1a060 | 4c 08 00 00 00 00 00 00 d0 07 00 00 1b 14 00 00 ca 13 00 00 6d 10 00 00 93 0f 00 00 14 00 00 00 | L...................m........... |
1a080 | 00 00 00 00 41 06 00 00 fa 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 98 07 00 00 | ....A........................... |
1a0a0 | 00 00 00 00 a9 01 00 00 71 07 00 00 00 00 00 00 58 0b 00 00 27 11 00 00 95 05 00 00 7b 13 00 00 | ........q.......X...'.......{... |
1a0c0 | 0c 11 00 00 00 00 00 00 44 09 00 00 a5 10 00 00 00 00 00 00 fc 0f 00 00 31 14 00 00 03 03 00 00 | ........D...............1....... |
1a0e0 | 0d 14 00 00 b1 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ca 0e 00 00 00 00 00 00 de 07 00 00 | ................................ |
1a100 | 37 0c 00 00 a2 10 00 00 01 0e 00 00 23 05 00 00 aa 10 00 00 7a 0b 00 00 00 05 00 00 ea 12 00 00 | 7...........#.......z........... |
1a120 | f7 0f 00 00 ed 11 00 00 be 0a 00 00 73 05 00 00 b5 11 00 00 00 00 00 00 00 00 00 00 7e 08 00 00 | ............s...............~... |
1a140 | fa 00 00 00 00 00 00 00 ea 0f 00 00 00 00 00 00 c5 11 00 00 00 00 00 00 00 00 00 00 d2 0e 00 00 | ................................ |
1a160 | 28 0f 00 00 00 00 00 00 fe 04 00 00 2d 10 00 00 02 0c 00 00 00 00 00 00 00 00 00 00 71 05 00 00 | (...........-...............q... |
1a180 | 22 00 00 00 00 00 00 00 5e 04 00 00 92 0d 00 00 00 00 00 00 bf 0a 00 00 00 00 00 00 00 00 00 00 | ".......^....................... |
1a1a0 | cb 10 00 00 00 00 00 00 42 0f 00 00 00 00 00 00 59 0e 00 00 4b 00 00 00 97 0f 00 00 8a 03 00 00 | ........B.......Y...K........... |
1a1c0 | 74 10 00 00 db 10 00 00 00 00 00 00 00 00 00 00 4f 10 00 00 65 13 00 00 60 05 00 00 ec 03 00 00 | t...............O...e...`....... |
1a1e0 | 00 00 00 00 00 00 00 00 87 02 00 00 ad 06 00 00 d8 0f 00 00 e9 09 00 00 67 13 00 00 00 00 00 00 | ........................g....... |
1a200 | 64 00 00 00 bc 06 00 00 4a 0a 00 00 7f 06 00 00 00 00 00 00 1c 14 00 00 85 06 00 00 00 00 00 00 | d.......J....................... |
1a220 | 00 00 00 00 0f 03 00 00 0e 13 00 00 9e 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 05 00 00 | ................................ |
1a240 | 8a 13 00 00 4a 0d 00 00 e6 11 00 00 cc 11 00 00 00 00 00 00 1e 04 00 00 77 0d 00 00 0a 10 00 00 | ....J...................w....... |
1a260 | 96 02 00 00 b4 03 00 00 67 00 00 00 9f 09 00 00 00 00 00 00 db 08 00 00 75 0f 00 00 58 0d 00 00 | ........g...............u...X... |
1a280 | 00 00 00 00 00 00 00 00 1d 09 00 00 5b 10 00 00 00 00 00 00 14 09 00 00 90 0c 00 00 a1 0c 00 00 | ............[................... |
1a2a0 | ed 08 00 00 3b 02 00 00 32 0e 00 00 e9 0b 00 00 4e 03 00 00 4b 12 00 00 ec 0d 00 00 8c 11 00 00 | ....;...2.......N...K........... |
1a2c0 | 00 00 00 00 fd 0a 00 00 c0 08 00 00 cb 05 00 00 71 10 00 00 00 00 00 00 00 00 00 00 2e 03 00 00 | ................q............... |
1a2e0 | 82 02 00 00 00 00 00 00 79 00 00 00 93 0d 00 00 c8 07 00 00 00 00 00 00 00 00 00 00 43 05 00 00 | ........y...................C... |
1a300 | 00 00 00 00 4c 0e 00 00 00 00 00 00 b4 12 00 00 9b 09 00 00 01 05 00 00 34 0f 00 00 1b 08 00 00 | ....L...................4....... |
1a320 | 00 00 00 00 7a 0f 00 00 ce 09 00 00 00 00 00 00 3c 11 00 00 75 05 00 00 a4 07 00 00 75 11 00 00 | ....z...........<...u.......u... |
1a340 | fd 13 00 00 00 00 00 00 3f 05 00 00 00 00 00 00 2f 08 00 00 00 00 00 00 56 05 00 00 ec 0f 00 00 | ........?......./.......V....... |
1a360 | 00 00 00 00 00 00 00 00 f9 13 00 00 13 12 00 00 22 13 00 00 00 00 00 00 95 0f 00 00 2f 02 00 00 | ................".........../... |
1a380 | 77 09 00 00 da 02 00 00 a7 00 00 00 dd 0d 00 00 66 02 00 00 00 00 00 00 c3 03 00 00 33 0c 00 00 | w...............f...........3... |
1a3a0 | 4d 11 00 00 ab 08 00 00 00 00 00 00 19 07 00 00 17 03 00 00 d0 0b 00 00 00 00 00 00 61 13 00 00 | M...........................a... |
1a3c0 | 00 00 00 00 00 00 00 00 00 00 00 00 c0 0d 00 00 f0 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................................ |
1a3e0 | 00 00 00 00 00 00 00 00 00 00 00 00 91 0b 00 00 8d 03 00 00 ec 06 00 00 00 00 00 00 71 0b 00 00 | ............................q... |
1a400 | c7 0b 00 00 f9 00 00 00 cd 04 00 00 00 00 00 00 63 0f 00 00 93 02 00 00 a6 0b 00 00 07 12 00 00 | ................c............... |
1a420 | ff 04 00 00 07 02 00 00 27 07 00 00 df 05 00 00 0d 05 00 00 69 09 00 00 1c 10 00 00 b3 13 00 00 | ........'...........i........... |
1a440 | 5f 07 00 00 92 0c 00 00 8e 0d 00 00 af 04 00 00 4e 0c 00 00 8b 0c 00 00 00 00 00 00 06 06 00 00 | _...............N............... |
1a460 | 00 00 00 00 c4 03 00 00 26 08 00 00 52 0b 00 00 06 12 00 00 00 00 00 00 00 00 00 00 f4 08 00 00 | ........&...R................... |
1a480 | a4 04 00 00 6a 0b 00 00 c0 0b 00 00 03 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....j........................... |
1a4a0 | ae 03 00 00 b9 06 00 00 8b 02 00 00 2f 03 00 00 00 00 00 00 72 06 00 00 00 00 00 00 00 00 00 00 | ............/.......r........... |
1a4c0 | 00 00 00 00 12 05 00 00 20 07 00 00 fd 01 00 00 00 00 00 00 fa 12 00 00 41 0e 00 00 6c 00 00 00 | ........................A...l... |
1a4e0 | 25 06 00 00 00 00 00 00 df 0f 00 00 16 08 00 00 56 04 00 00 00 00 00 00 29 0a 00 00 f9 11 00 00 | %...............V.......)....... |
1a500 | 17 05 00 00 99 01 00 00 00 00 00 00 b9 0b 00 00 00 00 00 00 00 00 00 00 9e 06 00 00 6f 10 00 00 | ............................o... |
1a520 | 23 00 00 00 22 04 00 00 2b 04 00 00 00 00 00 00 b0 05 00 00 e9 01 00 00 d8 08 00 00 3c 0e 00 00 | #..."...+...................<... |
1a540 | 00 00 00 00 a4 11 00 00 00 00 00 00 00 00 00 00 e8 10 00 00 00 00 00 00 00 00 00 00 0b 06 00 00 | ................................ |
1a560 | 00 00 00 00 00 00 00 00 f3 0f 00 00 00 00 00 00 9d 11 00 00 00 00 00 00 2b 0a 00 00 00 00 00 00 | ........................+....... |
1a580 | db 01 00 00 ad 0d 00 00 80 01 00 00 28 13 00 00 7d 10 00 00 b3 0a 00 00 2c 0f 00 00 15 03 00 00 | ............(...}.......,....... |
1a5a0 | 00 00 00 00 ec 10 00 00 e3 01 00 00 83 0e 00 00 00 00 00 00 9a 05 00 00 9f 06 00 00 ad 0e 00 00 | ................................ |
1a5c0 | 39 14 00 00 08 03 00 00 00 00 00 00 00 00 00 00 5d 10 00 00 bc 13 00 00 d3 05 00 00 00 00 00 00 | 9...............]............... |
1a5e0 | 61 03 00 00 00 00 00 00 f6 0b 00 00 64 0d 00 00 73 09 00 00 00 00 00 00 54 0e 00 00 25 12 00 00 | a...........d...s.......T...%... |
1a600 | 0e 10 00 00 75 0d 00 00 32 0b 00 00 00 00 00 00 e7 0b 00 00 ad 10 00 00 3d 13 00 00 69 0a 00 00 | ....u...2...............=...i... |
1a620 | 5b 09 00 00 6e 0c 00 00 2b 0c 00 00 fc 0d 00 00 e2 12 00 00 00 00 00 00 84 09 00 00 d3 0c 00 00 | [...n...+....................... |
1a640 | 81 08 00 00 2c 06 00 00 f5 03 00 00 d4 01 00 00 96 0c 00 00 45 05 00 00 37 14 00 00 77 00 00 00 | ....,...............E...7...w... |
1a660 | 00 00 00 00 11 06 00 00 44 10 00 00 00 00 00 00 20 10 00 00 00 00 00 00 c7 0c 00 00 78 05 00 00 | ........D...................x... |
1a680 | 0d 11 00 00 48 12 00 00 9e 0e 00 00 95 10 00 00 00 00 00 00 00 00 00 00 82 00 00 00 6e 00 00 00 | ....H.......................n... |
1a6a0 | a7 12 00 00 00 00 00 00 00 00 00 00 42 11 00 00 03 10 00 00 4c 0d 00 00 3d 0c 00 00 7f 01 00 00 | ............B.......L...=....... |
1a6c0 | 00 00 00 00 33 05 00 00 67 12 00 00 e1 05 00 00 c4 0b 00 00 00 00 00 00 d5 0f 00 00 78 06 00 00 | ....3...g...................x... |
1a6e0 | 73 11 00 00 00 00 00 00 e9 08 00 00 78 02 00 00 0b 02 00 00 f8 00 00 00 ec 0e 00 00 ef 11 00 00 | s...........x................... |
1a700 | a5 12 00 00 00 00 00 00 59 07 00 00 e9 0a 00 00 f2 04 00 00 24 14 00 00 56 07 00 00 ff 03 00 00 | ........Y...........$...V....... |
1a720 | 00 00 00 00 00 00 00 00 84 03 00 00 00 00 00 00 4e 06 00 00 d4 0f 00 00 96 0e 00 00 52 0c 00 00 | ................N...........R... |
1a740 | 19 00 00 00 d2 03 00 00 9a 03 00 00 21 0e 00 00 da 0d 00 00 08 07 00 00 49 0f 00 00 00 00 00 00 | ............!...........I....... |
1a760 | 00 00 00 00 86 01 00 00 00 00 00 00 b4 0d 00 00 c1 13 00 00 8f 09 00 00 00 00 00 00 64 13 00 00 | ............................d... |
1a780 | f2 01 00 00 ef 10 00 00 00 00 00 00 57 0b 00 00 00 00 00 00 eb 0c 00 00 ed 13 00 00 94 09 00 00 | ............W................... |
1a7a0 | 00 00 00 00 00 00 00 00 00 00 00 00 b6 12 00 00 23 13 00 00 00 00 00 00 6e 09 00 00 00 00 00 00 | ................#.......n....... |
1a7c0 | 90 0a 00 00 44 0a 00 00 51 01 00 00 77 06 00 00 00 00 00 00 ee 04 00 00 54 11 00 00 00 00 00 00 | ....D...Q...w...........T....... |
1a7e0 | 41 0f 00 00 b1 0e 00 00 1c 00 00 00 1a 13 00 00 00 00 00 00 df 0d 00 00 7e 12 00 00 e9 02 00 00 | A.......................~....... |
1a800 | e4 02 00 00 00 00 00 00 65 06 00 00 98 0b 00 00 dd 00 00 00 00 00 00 00 db 04 00 00 18 05 00 00 | ........e....................... |
1a820 | 88 01 00 00 57 13 00 00 00 00 00 00 55 00 00 00 31 0b 00 00 bd 11 00 00 16 02 00 00 33 04 00 00 | ....W.......U...1...........3... |
1a840 | 00 00 00 00 82 0d 00 00 00 00 00 00 e7 08 00 00 4e 02 00 00 00 00 00 00 00 00 00 00 19 0b 00 00 | ................N............... |
1a860 | df 08 00 00 c2 02 00 00 48 0e 00 00 57 05 00 00 83 05 00 00 39 13 00 00 5c 09 00 00 32 10 00 00 | ........H...W.......9...\...2... |
1a880 | 00 00 00 00 2b 06 00 00 4d 03 00 00 00 00 00 00 e9 0d 00 00 69 0c 00 00 01 08 00 00 22 08 00 00 | ....+...M...........i......."... |
1a8a0 | 24 10 00 00 0f 10 00 00 79 01 00 00 92 02 00 00 00 00 00 00 5b 0d 00 00 70 0d 00 00 4b 14 00 00 | $.......y...........[...p...K... |
1a8c0 | 00 00 00 00 71 03 00 00 0b 07 00 00 36 0e 00 00 15 14 00 00 00 00 00 00 00 00 00 00 8d 0f 00 00 | ....q.......6................... |
1a8e0 | 00 00 00 00 85 0a 00 00 5e 09 00 00 00 00 00 00 00 00 00 00 75 08 00 00 61 01 00 00 00 00 00 00 | ........^...........u...a....... |
1a900 | eb 01 00 00 46 0c 00 00 06 0b 00 00 00 00 00 00 2c 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....F...........,............... |
1a920 | 91 13 00 00 eb 05 00 00 fa 08 00 00 a0 0c 00 00 eb 0a 00 00 5c 00 00 00 53 0b 00 00 00 00 00 00 | ....................\...S....... |
1a940 | 76 0a 00 00 4a 03 00 00 ee 01 00 00 00 00 00 00 98 03 00 00 52 04 00 00 00 00 00 00 00 00 00 00 | v...J...............R........... |
1a960 | d6 12 00 00 a5 07 00 00 e3 05 00 00 5b 0b 00 00 ed 0e 00 00 d5 03 00 00 d4 08 00 00 e1 0a 00 00 | ............[................... |
1a980 | b7 01 00 00 1e 0e 00 00 5b 13 00 00 00 00 00 00 94 0f 00 00 00 00 00 00 d9 0b 00 00 35 07 00 00 | ........[...................5... |
1a9a0 | 00 00 00 00 07 01 00 00 6d 00 00 00 1f 06 00 00 54 08 00 00 ee 09 00 00 a6 05 00 00 b9 11 00 00 | ........m.......T............... |
1a9c0 | 7b 0b 00 00 38 0e 00 00 00 00 00 00 00 00 00 00 0d 00 00 00 35 09 00 00 a8 0b 00 00 46 09 00 00 | {...8...............5.......F... |
1a9e0 | d9 03 00 00 00 00 00 00 b5 08 00 00 00 00 00 00 e8 11 00 00 1b 0f 00 00 2f 05 00 00 00 00 00 00 | ......................../....... |
1aa00 | 80 05 00 00 cf 0e 00 00 fa 01 00 00 00 00 00 00 00 00 00 00 e1 0d 00 00 00 00 00 00 63 09 00 00 | ............................c... |
1aa20 | 62 08 00 00 96 0f 00 00 00 00 00 00 8a 08 00 00 76 04 00 00 00 00 00 00 4b 10 00 00 71 13 00 00 | b...............v.......K...q... |
1aa40 | 90 02 00 00 c0 0e 00 00 df 0e 00 00 9c 0f 00 00 c3 12 00 00 eb 09 00 00 87 11 00 00 9a 09 00 00 | ................................ |
1aa60 | de 05 00 00 52 0d 00 00 66 06 00 00 00 00 00 00 03 0b 00 00 00 00 00 00 62 01 00 00 b7 07 00 00 | ....R...f...............b....... |
1aa80 | 5f 0b 00 00 5b 04 00 00 00 00 00 00 49 03 00 00 46 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | _...[.......I...F............... |
1aaa0 | 00 00 00 00 0a 02 00 00 03 07 00 00 fe 0c 00 00 fa 09 00 00 09 07 00 00 a4 08 00 00 7b 06 00 00 | ............................{... |
1aac0 | 00 00 00 00 01 01 00 00 00 0c 00 00 00 00 00 00 fc 02 00 00 3f 11 00 00 bc 0c 00 00 15 09 00 00 | ....................?........... |
1aae0 | f1 01 00 00 8c 00 00 00 48 04 00 00 00 00 00 00 eb 0f 00 00 00 00 00 00 00 00 00 00 45 08 00 00 | ........H...................E... |
1ab00 | d4 0e 00 00 46 08 00 00 00 00 00 00 89 10 00 00 00 00 00 00 00 00 00 00 37 0a 00 00 aa 11 00 00 | ....F...................7....... |
1ab20 | 11 14 00 00 6f 02 00 00 51 12 00 00 00 00 00 00 72 02 00 00 91 06 00 00 c1 04 00 00 cb 13 00 00 | ....o...Q.......r............... |
1ab40 | 8b 13 00 00 b0 0b 00 00 e7 04 00 00 e1 11 00 00 89 0c 00 00 00 00 00 00 e5 0d 00 00 00 00 00 00 | ................................ |
1ab60 | cf 00 00 00 62 05 00 00 00 00 00 00 00 00 00 00 1a 0e 00 00 00 00 00 00 00 00 00 00 ff 0d 00 00 | ....b........................... |
1ab80 | fc 0e 00 00 83 01 00 00 10 07 00 00 26 0e 00 00 d1 0b 00 00 00 00 00 00 95 00 00 00 00 00 00 00 | ............&................... |
1aba0 | a3 0c 00 00 3b 03 00 00 9d 01 00 00 56 0c 00 00 d7 13 00 00 97 0b 00 00 55 08 00 00 7e 03 00 00 | ....;.......V...........U...~... |
1abc0 | 00 00 00 00 13 13 00 00 35 13 00 00 00 00 00 00 00 00 00 00 a0 0f 00 00 73 01 00 00 bf 0c 00 00 | ........5...............s....... |
1abe0 | 9e 09 00 00 7e 0b 00 00 4e 01 00 00 12 14 00 00 00 00 00 00 7c 0f 00 00 3b 0d 00 00 82 05 00 00 | ....~...N...........|...;....... |
1ac00 | f6 01 00 00 00 00 00 00 ae 09 00 00 df 09 00 00 00 00 00 00 73 13 00 00 00 00 00 00 26 00 00 00 | ....................s.......&... |
1ac20 | 7c 0a 00 00 e0 07 00 00 bb 06 00 00 00 00 00 00 c2 01 00 00 00 00 00 00 6a 02 00 00 61 06 00 00 | |.......................j...a... |
1ac40 | 00 00 00 00 25 0b 00 00 e3 13 00 00 5a 0e 00 00 b8 10 00 00 44 0c 00 00 36 0f 00 00 82 03 00 00 | ....%.......Z.......D...6....... |
1ac60 | 65 0e 00 00 12 04 00 00 00 00 00 00 00 00 00 00 66 0c 00 00 64 08 00 00 60 0e 00 00 00 00 00 00 | e...............f...d...`....... |
1ac80 | d9 07 00 00 c9 05 00 00 00 00 00 00 00 00 00 00 bf 10 00 00 f3 06 00 00 00 00 00 00 40 10 00 00 | ............................@... |
1aca0 | dc 12 00 00 53 03 00 00 2e 0f 00 00 1c 0d 00 00 c9 07 00 00 9a 11 00 00 00 00 00 00 00 00 00 00 | ....S........................... |
1acc0 | 17 08 00 00 e8 03 00 00 00 00 00 00 00 00 00 00 e6 13 00 00 5c 03 00 00 25 0e 00 00 00 00 00 00 | ....................\...%....... |
1ace0 | b0 0a 00 00 39 11 00 00 00 00 00 00 6f 04 00 00 46 0e 00 00 8f 03 00 00 27 0f 00 00 32 14 00 00 | ....9.......o...F.......'...2... |
1ad00 | 8c 0a 00 00 4b 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4b 04 00 00 32 11 00 00 be 0b 00 00 | ....K...............K...2....... |
1ad20 | 4f 09 00 00 bd 01 00 00 00 00 00 00 d2 0f 00 00 1d 0b 00 00 b2 07 00 00 00 00 00 00 f1 09 00 00 | O............................... |
1ad40 | ff 09 00 00 24 02 00 00 00 00 00 00 64 0f 00 00 64 03 00 00 e0 0f 00 00 81 0c 00 00 27 14 00 00 | ....$.......d...d...........'... |
1ad60 | 00 00 00 00 51 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c6 0a 00 00 00 00 00 00 2a 04 00 00 | ....Q.......................*... |
1ad80 | 83 03 00 00 59 02 00 00 00 00 00 00 be 11 00 00 52 11 00 00 4a 0b 00 00 00 00 00 00 00 00 00 00 | ....Y...........R...J........... |
1ada0 | 00 00 00 00 00 00 00 00 6f 00 00 00 40 07 00 00 18 09 00 00 66 11 00 00 31 09 00 00 8e 07 00 00 | ........o...@.......f...1....... |
1adc0 | 84 13 00 00 c3 09 00 00 ce 02 00 00 00 00 00 00 00 00 00 00 18 04 00 00 7a 00 00 00 7b 10 00 00 | ........................z...{... |
1ade0 | 00 00 00 00 e3 0a 00 00 73 0c 00 00 2a 0e 00 00 00 00 00 00 5a 06 00 00 f7 0d 00 00 86 07 00 00 | ........s...*.......Z........... |
1ae00 | 58 05 00 00 0f 01 00 00 00 00 00 00 00 00 00 00 c9 0e 00 00 00 00 00 00 00 00 00 00 62 0c 00 00 | X...........................b... |
1ae20 | 00 00 00 00 33 12 00 00 6e 0f 00 00 10 0b 00 00 f0 12 00 00 43 04 00 00 68 0f 00 00 f6 0a 00 00 | ....3...n...........C...h....... |
1ae40 | 13 01 00 00 00 00 00 00 00 00 00 00 98 05 00 00 00 00 00 00 c0 04 00 00 00 00 00 00 dc 0a 00 00 | ................................ |
1ae60 | 00 00 00 00 00 00 00 00 ba 0e 00 00 00 00 00 00 00 00 00 00 79 0f 00 00 5a 04 00 00 35 0c 00 00 | ....................y...Z...5... |
1ae80 | a0 0a 00 00 00 00 00 00 1d 01 00 00 00 00 00 00 00 00 00 00 39 05 00 00 3e 11 00 00 af 05 00 00 | ....................9...>....... |
1aea0 | 12 01 00 00 0d 07 00 00 4b 13 00 00 00 00 00 00 00 00 00 00 c7 0e 00 00 26 0a 00 00 f1 10 00 00 | ........K...............&....... |
1aec0 | 7a 12 00 00 4d 0b 00 00 11 0e 00 00 f7 02 00 00 bf 0d 00 00 00 00 00 00 00 00 00 00 14 03 00 00 | z...M........................... |
1aee0 | 00 00 00 00 81 06 00 00 31 04 00 00 28 0d 00 00 67 08 00 00 74 0c 00 00 00 00 00 00 86 04 00 00 | ........1...(...g...t........... |
1af00 | 53 09 00 00 b4 08 00 00 8b 04 00 00 6d 13 00 00 00 00 00 00 b8 0f 00 00 f4 0a 00 00 ed 04 00 00 | S...........m................... |
1af20 | 70 00 00 00 00 00 00 00 f5 0a 00 00 17 0f 00 00 3c 04 00 00 00 00 00 00 dd 10 00 00 67 03 00 00 | p...............<...........g... |
1af40 | 75 10 00 00 25 0f 00 00 00 00 00 00 00 00 00 00 67 0c 00 00 35 04 00 00 74 09 00 00 d5 0e 00 00 | u...%...........g...5...t....... |
1af60 | 00 00 00 00 00 00 00 00 2a 0c 00 00 88 13 00 00 00 00 00 00 00 00 00 00 8f 10 00 00 a1 01 00 00 | ........*....................... |
1af80 | ed 01 00 00 cc 0c 00 00 00 00 00 00 00 00 00 00 95 04 00 00 ff 11 00 00 00 00 00 00 0e 0b 00 00 | ................................ |
1afa0 | 00 00 00 00 ce 11 00 00 fe 13 00 00 64 11 00 00 d4 0d 00 00 00 00 00 00 85 09 00 00 6a 09 00 00 | ............d...............j... |
1afc0 | 00 00 00 00 2d 03 00 00 00 00 00 00 f6 09 00 00 64 07 00 00 00 00 00 00 00 00 00 00 bc 12 00 00 | ....-...........d............... |
1afe0 | 4c 0c 00 00 b7 11 00 00 e1 0f 00 00 92 01 00 00 42 0a 00 00 20 02 00 00 75 00 00 00 b9 04 00 00 | L...............B.......u....... |
1b000 | 00 00 00 00 4b 07 00 00 e6 09 00 00 00 00 00 00 af 03 00 00 4f 00 00 00 99 03 00 00 6a 05 00 00 | ....K...............O.......j... |
1b020 | 00 00 00 00 3a 10 00 00 00 00 00 00 00 00 00 00 16 09 00 00 00 00 00 00 00 00 00 00 8e 0a 00 00 | ....:........................... |
1b040 | 76 10 00 00 3f 0a 00 00 fa 13 00 00 f6 11 00 00 56 0d 00 00 62 0f 00 00 00 00 00 00 00 00 00 00 | v...?...........V...b........... |
1b060 | fc 09 00 00 00 00 00 00 8d 0c 00 00 ad 01 00 00 d8 0d 00 00 e2 0f 00 00 9c 03 00 00 d2 09 00 00 | ................................ |
1b080 | 12 0d 00 00 8a 02 00 00 2a 0b 00 00 00 00 00 00 00 00 00 00 66 10 00 00 a8 0d 00 00 5d 09 00 00 | ........*...........f.......]... |
1b0a0 | 5e 03 00 00 00 00 00 00 fe 01 00 00 00 00 00 00 00 00 00 00 dc 05 00 00 00 00 00 00 00 00 00 00 | ^............................... |
1b0c0 | 9c 01 00 00 02 04 00 00 f0 02 00 00 6e 01 00 00 8e 09 00 00 1a 03 00 00 01 04 00 00 39 07 00 00 | ............n...............9... |
1b0e0 | 5b 12 00 00 43 00 00 00 d3 0b 00 00 0d 12 00 00 a1 06 00 00 00 00 00 00 43 10 00 00 bc 0b 00 00 | [...C...................C....... |
1b100 | 68 11 00 00 7a 0e 00 00 53 02 00 00 00 00 00 00 12 0b 00 00 ae 0d 00 00 00 00 00 00 5a 0d 00 00 | h...z...S...................Z... |
1b120 | 29 0c 00 00 6f 0f 00 00 84 07 00 00 00 00 00 00 82 06 00 00 42 10 00 00 48 14 00 00 7d 02 00 00 | )...o...............B...H...}... |
1b140 | 26 05 00 00 00 00 00 00 63 0e 00 00 00 00 00 00 00 00 00 00 22 02 00 00 7f 03 00 00 00 00 00 00 | &.......c..........."........... |
1b160 | 9b 0f 00 00 9f 08 00 00 1c 02 00 00 00 00 00 00 00 00 00 00 f3 0d 00 00 00 00 00 00 12 13 00 00 | ................................ |
1b180 | 9a 00 00 00 00 00 00 00 00 00 00 00 20 06 00 00 11 0f 00 00 58 0c 00 00 00 21 3c 68 3a 68 3a 68 | ....................X....!<h:h:h |
1b1a0 | 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 | :h:h:h:h:h/x>:.Match.everything. |
1b1c0 | 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 21 3c 68 | except.the.specified.prefix..!<h |
1b1e0 | 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 | :h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h |
1b200 | 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 | >:.Match.everything.except.the.s |
1b220 | 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 2e 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a | pecified.range..!<h:h:h:h:h:h:h: |
1b240 | 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 | h>:.Match.everything.except.the. |
1b260 | 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2e 00 21 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a | specified.address..!<x.x.x.x/x>: |
1b280 | 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 | .Match.everything.except.the.spe |
1b2a0 | 63 69 66 69 65 64 20 73 75 62 6e 65 74 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 | cified.subnet..!<x.x.x.x>-<x.x.x |
1b2c0 | 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 | .x>:.Match.everything.except.the |
1b2e0 | 20 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 65 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 | .specified.range..!<x.x.x.x>:.Ma |
1b300 | 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 | tch.everything.except.the.specif |
1b320 | 69 65 64 20 61 64 64 72 65 73 73 2e 00 22 4d 61 6e 61 67 65 64 20 61 64 64 72 65 73 73 20 63 6f | ied.address.."Managed.address.co |
1b340 | 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 22 4f 74 68 65 72 20 63 6f 6e 66 69 67 75 | nfiguration".flag."Other.configu |
1b360 | 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 | ration".flag.################### |
1b380 | c3 a4 23 23 23 23 23 23 23 23 23 23 23 23 23 20 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 | ..#############.Flowtables.Firew |
1b3a0 | 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 | all.Configuration.############## |
1b3c0 | 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 00 28 54 68 69 73 20 63 61 6e 20 62 65 | ###################.(This.can.be |
1b3e0 | 20 75 73 65 66 75 6c 20 77 68 65 6e 20 61 20 63 61 6c 6c 65 64 20 73 65 72 76 69 63 65 20 68 61 | .useful.when.a.called.service.ha |
1b400 | 73 20 6d 61 6e 79 20 61 6e 64 2f 6f 72 20 6f 66 74 65 6e 20 63 68 61 6e 67 69 6e 67 20 64 65 73 | s.many.and/or.often.changing.des |
1b420 | 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 2d 20 65 2e 67 2e 20 4e 65 74 66 6c 69 | tination.addresses.-.e.g..Netfli |
1b440 | 78 2e 29 00 2a 2a 28 44 65 66 61 75 6c 74 29 2a 2a 20 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 | x.).**(Default)**.Flows.are.defi |
1b460 | 6e 65 64 20 62 79 20 74 68 65 20 35 2d 74 75 70 6c 65 2c 20 66 61 69 72 6e 65 73 73 20 69 73 20 | ned.by.the.5-tuple,.fairness.is. |
1b480 | 61 70 70 6c 69 65 64 20 6f 76 65 72 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 | applied.over.source.and.destinat |
1b4a0 | 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 61 6c 73 6f 20 6f 76 65 72 20 69 6e 64 69 | ion.addresses.and.also.over.indi |
1b4c0 | 76 69 64 75 61 6c 20 66 6c 6f 77 73 2e 00 2a 2a 31 2d 32 35 34 2a 2a 20 e2 80 93 20 69 6e 74 65 | vidual.flows..**1-254**.....inte |
1b4e0 | 72 66 61 63 65 73 20 77 69 74 68 20 61 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 69 6e 74 | rfaces.with.a.channel.number.int |
1b500 | 65 72 66 65 72 65 20 77 69 74 68 20 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 | erfere.with.interfering.interfac |
1b520 | 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 | es.and.interfaces.with.the.same. |
1b540 | 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 2e 20 2a 2a 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 | channel.number..**interfering**. |
1b560 | e2 80 93 20 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 | ....interfering.interfaces.are.a |
1b580 | 73 73 75 6d 65 64 20 74 6f 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 61 6c 6c 20 6f 74 68 | ssumed.to.interfere.with.all.oth |
1b5a0 | 65 72 20 63 68 61 6e 6e 65 6c 73 20 65 78 63 65 70 74 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e | er.channels.except.noninterferin |
1b5c0 | 67 20 63 68 61 6e 6e 65 6c 73 2e 20 2a 2a 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 e2 | g.channels..**noninterfering**.. |
1b5e0 | 80 93 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 | ...noninterfering.interfaces.are |
1b600 | 20 61 73 73 75 6d 65 64 20 74 6f 20 6f 6e 6c 79 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 | .assumed.to.only.interfere.with. |
1b620 | 74 68 65 6d 73 65 6c 76 65 73 2e 00 2a 2a 31 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f 6e 6e | themselves..**1..Confirm.IP.conn |
1b640 | 65 63 74 69 76 69 74 79 20 62 65 74 77 65 65 6e 20 74 75 6e 6e 65 6c 20 73 6f 75 72 63 65 2d 61 | ectivity.between.tunnel.source-a |
1b660 | 64 64 72 65 73 73 20 61 6e 64 20 72 65 6d 6f 74 65 3a 2a 2a 00 2a 2a 31 30 2a 2a 20 2d 20 3a 61 | ddress.and.remote:**.**10**.-.:a |
1b680 | 62 62 72 3a 60 49 50 46 49 58 20 28 49 50 20 46 6c 6f 77 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 | bbr:`IPFIX.(IP.Flow.Information. |
1b6a0 | 45 78 70 6f 72 74 29 60 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 33 39 31 37 60 00 2a 2a 32 2e | Export)`.as.per.:rfc:`3917`.**2. |
1b6c0 | 20 43 6f 6e 66 69 72 6d 20 74 68 65 20 6c 69 6e 6b 20 74 79 70 65 20 68 61 73 20 62 65 65 6e 20 | .Confirm.the.link.type.has.been. |
1b6e0 | 73 65 74 20 74 6f 20 47 52 45 3a 2a 2a 00 2a 2a 33 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f | set.to.GRE:**.**3..Confirm.IP.co |
1b700 | 6e 6e 65 63 74 69 76 69 74 79 20 61 63 72 6f 73 73 20 74 68 65 20 74 75 6e 6e 65 6c 3a 2a 2a 00 | nnectivity.across.the.tunnel:**. |
1b720 | 2a 2a 35 2a 2a 20 2d 20 4d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 | **5**.-.Most.common.version,.but |
1b740 | 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 49 50 76 34 20 66 6c 6f 77 73 20 6f 6e 6c 79 00 2a | .restricted.to.IPv4.flows.only.* |
1b760 | 2a 39 2a 2a 20 2d 20 4e 65 74 46 6c 6f 77 20 76 65 72 73 69 6f 6e 20 39 20 28 64 65 66 61 75 6c | *9**.-.NetFlow.version.9.(defaul |
1b780 | 74 29 00 2a 2a 41 53 20 70 61 74 68 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 41 63 | t).**AS.path.length.check**.**Ac |
1b7a0 | 74 69 76 65 2d 61 63 74 69 76 65 2a 2a 3a 20 62 6f 74 68 20 44 48 43 50 20 73 65 72 76 65 72 73 | tive-active**:.both.DHCP.servers |
1b7c0 | 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 6f 20 44 48 43 50 20 72 65 71 75 65 73 74 73 2e 20 | .will.respond.to.DHCP.requests.. |
1b7e0 | 49 66 20 60 60 6d 6f 64 65 60 60 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 69 73 | If.``mode``.is.not.defined,.this |
1b800 | 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 62 65 68 61 76 69 6f 72 2e 00 2a 2a 41 63 74 69 | .is.the.default.behavior..**Acti |
1b820 | 76 65 2d 70 61 73 73 69 76 65 2a 2a 3a 20 6f 6e 6c 79 20 60 60 70 72 69 6d 61 72 79 60 60 20 73 | ve-passive**:.only.``primary``.s |
1b840 | 65 72 76 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 6f 20 44 48 43 50 20 72 65 71 75 65 | erver.will.respond.to.DHCP.reque |
1b860 | 73 74 73 2e 20 49 66 20 74 68 69 73 20 73 65 72 76 65 72 20 67 6f 65 73 20 6f 66 66 6c 69 6e 65 | sts..If.this.server.goes.offline |
1b880 | 2c 20 74 68 65 6e 20 60 60 73 65 63 6f 6e 64 61 72 79 60 60 20 73 65 72 76 65 72 20 77 69 6c 6c | ,.then.``secondary``.server.will |
1b8a0 | 20 74 61 6b 65 20 70 6c 61 63 65 2e 00 2a 2a 41 6c 72 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 | .take.place..**Already-selected. |
1b8c0 | 65 78 74 65 72 6e 61 6c 20 63 68 65 63 6b 2a 2a 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a | external.check**.**Applies.to:** |
1b8e0 | 20 49 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a | .Inbound.traffic..**Applies.to:* |
1b900 | 2a 20 4f 75 74 62 6f 75 6e 64 20 54 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f | *.Outbound.Traffic..**Applies.to |
1b920 | 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 79 20 74 68 | :**.Outbound.traffic..**Apply.th |
1b940 | 65 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | e.traffic.policy.to.an.interface |
1b960 | 20 69 6e 67 72 65 73 73 20 6f 72 20 65 67 72 65 73 73 2a 2a 2e 00 2a 2a 42 72 69 64 67 65 20 50 | .ingress.or.egress**..**Bridge.P |
1b980 | 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 | ort?**:.choose.appropiate.path.b |
1b9a0 | 61 73 65 64 20 6f 6e 20 69 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 | ased.on.if.interface.were.the.pa |
1b9c0 | 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 | cket.was.received.is.part.of.a.b |
1b9e0 | 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a | ridge,.or.not..**Bridge.Port?**: |
1ba00 | 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f | .choose.appropriate.path.based.o |
1ba20 | 6e 20 77 68 65 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 | n.whether.interface.where.the.pa |
1ba40 | 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 | cket.was.received.is.part.of.a.b |
1ba60 | 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 2e 00 2a 2a 43 69 73 63 6f 20 49 4f 53 20 52 6f 75 74 65 | ridge,.or.not..**Cisco.IOS.Route |
1ba80 | 72 3a 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 76 69 61 20 49 50 20 | r:**.**Client.IP.address.via.IP. |
1baa0 | 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 50 20 73 | range.definition**.**Client.IP.s |
1bac0 | 75 62 6e 65 74 73 20 76 69 61 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 75 | ubnets.via.CIDR.notation**.**Clu |
1bae0 | 73 74 65 72 2d 4c 69 73 74 20 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 43 6f 6e 6e 74 | ster-List.length.check**.**Connt |
1bb00 | 72 61 63 6b 20 49 67 6e 6f 72 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 | rack.Ignore**:.rules.defined.und |
1bb20 | 65 72 20 60 60 73 65 74 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 | er.``set.system.conntrack.ignore |
1bb40 | 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 43 72 65 61 74 65 20 61 | .[ipv4.|.ipv6]....``..**Create.a |
1bb60 | 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 2a 2a 2e 00 2a 2a 44 48 43 50 28 76 36 29 2a 2a 00 | .traffic.policy**..**DHCP(v6)**. |
1bb80 | 2a 2a 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 50 44 29 2a | **DHCPv6.Prefix.Delegation.(PD)* |
1bba0 | 2a 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 | *.**Destination.NAT**:.rules.def |
1bbc0 | 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 | ined.under.``set.[nat.|.nat66].d |
1bbe0 | 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 69 | estination...``..**Destination.i |
1bc00 | 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 69 61 | s.the.router?**:.choose.appropia |
1bc20 | 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 | te.path.based.on.destination.IP. |
1bc40 | 61 64 64 72 65 73 73 2e 20 54 72 61 6e 73 69 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 6e 75 | address..Transit.forward.continu |
1bc60 | 6e 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 | nes.to.**forward**,.while.traffi |
1bc80 | 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 | c.that.destination.IP.address.is |
1bca0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 6e | .configured.on.the.router.contin |
1bcc0 | 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 2a 2a 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 | ues.to.**input**..**Destination. |
1bce0 | 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 | is.the.router?**:.choose.appropr |
1bd00 | 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 | iate.path.based.on.destination.I |
1bd20 | 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e 73 69 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 | P.address..Transit.forward.conti |
1bd40 | 6e 75 65 73 20 74 6f 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 | nues.to.**forward**,.while.traff |
1bd60 | 69 63 20 74 68 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 | ic.that.destination.IP.address.i |
1bd80 | 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 | s.configured.on.the.router.conti |
1bda0 | 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 74 2a 2a 2e 00 2a 2a 44 6f 63 75 6d 65 6e 74 61 74 69 | nues.to.**input**..**Documentati |
1bdc0 | 6f 6e 20 75 6e 64 65 72 20 64 65 76 65 6c 6f 70 6d 65 6e 74 2a 2a 00 2a 2a 45 74 68 65 72 6e 65 | on.under.development**.**Etherne |
1bde0 | 74 20 28 70 72 6f 74 6f 63 6f 6c 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | t.(protocol,.destination.address |
1be00 | 20 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 29 2a 2a 00 2a 2a 45 78 61 6d 70 6c 65 3a | .or.source.address)**.**Example: |
1be20 | 2a 2a 00 2a 2a 45 78 74 65 72 6e 61 6c 20 63 68 65 63 6b 2a 2a 00 2a 2a 46 69 72 65 77 61 6c 6c | **.**External.check**.**Firewall |
1be40 | 20 6d 61 72 6b 2a 2a 00 2a 2a 46 6c 6f 77 74 61 62 6c 65 20 52 65 66 65 72 65 6e 63 65 3a 2a 2a | .mark**.**Flowtable.Reference:** |
1be60 | 20 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 6b 65 72 6e 65 6c 2e 6f 72 67 2f 6e 65 74 77 6f 72 6b | .https://docs.kernel.org/network |
1be80 | 69 6e 67 2f 6e 66 5f 66 6c 6f 77 74 61 62 6c 65 2e 68 74 6d 6c 00 2a 2a 46 6f 72 20 6d 6f 72 65 | ing/nf_flowtable.html.**For.more |
1bea0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2a 2a 20 6f 66 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b | .information**.of.Netfilter.hook |
1bec0 | 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 6b 65 74 20 66 6c | s.and.Linux.networking.packet.fl |
1bee0 | 6f 77 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 6c 74 65 72 2d 48 | ows.can.be.found.in.`Netfilter-H |
1bf00 | 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f | ooks.<https://wiki.nftables.org/ |
1bf20 | 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 74 66 69 6c 74 65 | wiki-nftables/index.php/Netfilte |
1bf40 | 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a | r_hooks>`_.**Forward.(Bridge)**: |
1bf60 | 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 61 | .stage.where.traffic.that.is.tra |
1bf80 | 73 73 70 61 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 | sspasing.through.the.bridge.is.f |
1bfa0 | 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 | iltered.and.controlled:.**Forwar |
1bfc0 | 64 20 28 42 72 69 64 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 | d.(Bridge)**:.stage.where.traffi |
1bfe0 | 63 20 74 68 61 74 20 69 73 20 74 72 65 73 70 61 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 | c.that.is.trespasing.through.the |
1c000 | 20 62 72 69 64 67 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c | .bridge.is.filtered.and.controll |
1c020 | 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 | ed:.**Forward**:.stage.where.tra |
1c040 | 6e 73 69 74 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 | nsit.traffic.can.be.filtered.and |
1c060 | 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 | .controlled..This.includes.ipv4. |
1c080 | 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 | and.ipv6.filtering.rules,.define |
1c0a0 | 64 20 69 6e 3a 00 2a 2a 48 61 72 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 3a 2a 2a 20 73 68 6f 75 | d.in:.**Hardware.offload:**.shou |
1c0c0 | 6c 64 20 62 65 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 4e 49 43 73 20 75 73 65 64 | ld.be.supported.by.the.NICs.used |
1c0e0 | 2e 00 2a 2a 49 47 50 20 63 6f 73 74 20 63 68 65 63 6b 2a 2a 00 2a 2a 49 50 76 34 20 28 44 53 43 | ..**IGP.cost.check**.**IPv4.(DSC |
1c100 | 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d 75 6d 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 68 2c 20 | P.value,.maximum.packet.length,. |
1c120 | 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 | protocol,.source.address,**.**de |
1c140 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 | stination.address,.source.port,. |
1c160 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a | destination.port.or.TCP.flags)** |
1c180 | 00 2a 2a 49 50 76 36 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d 75 6d 20 70 61 79 | .**IPv6.(DSCP.value,.maximum.pay |
1c1a0 | 6c 6f 61 64 20 6c 65 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 | load.length,.protocol,.source.ad |
1c1c0 | 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 | dress,**.**destination.address,. |
1c1e0 | 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 6f 72 | source.port,.destination.port.or |
1c200 | 20 54 43 50 20 66 6c 61 67 73 29 2a 2a 00 2a 2a 49 66 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 | .TCP.flags)**.**If.you.are.looki |
1c220 | 6e 67 20 66 6f 72 20 61 20 70 6f 6c 69 63 79 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 62 6f 75 6e | ng.for.a.policy.for.your.outboun |
1c240 | 64 20 74 72 61 66 66 69 63 2a 2a 20 62 75 74 20 79 6f 75 20 64 6f 6e 27 74 20 6b 6e 6f 77 20 77 | d.traffic**.but.you.don't.know.w |
1c260 | 68 69 63 68 20 6f 6e 65 20 79 6f 75 20 6e 65 65 64 20 61 6e 64 20 79 6f 75 20 64 6f 6e 27 74 20 | hich.one.you.need.and.you.don't. |
1c280 | 77 61 6e 74 20 74 6f 20 67 6f 20 74 68 72 6f 75 67 68 20 65 76 65 72 79 20 70 6f 73 73 69 62 6c | want.to.go.through.every.possibl |
1c2a0 | 65 20 70 6f 6c 69 63 79 20 73 68 6f 77 6e 20 68 65 72 65 2c 20 2a 2a 6f 75 72 20 62 65 74 20 69 | e.policy.shown.here,.**our.bet.i |
1c2c0 | 73 20 74 68 61 74 20 68 69 67 68 6c 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 61 72 65 20 6c 6f 6f | s.that.highly.likely.you.are.loo |
1c2e0 | 6b 69 6e 67 20 66 6f 72 20 61 2a 2a 20 53 68 61 70 65 72 5f 20 2a 2a 70 6f 6c 69 63 79 20 61 6e | king.for.a**.Shaper_.**policy.an |
1c300 | 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 2a 2a 20 3a 72 65 66 3a 60 73 65 74 20 69 74 73 20 71 75 | d.you.want.to**.:ref:`set.its.qu |
1c320 | 65 75 65 73 20 3c 65 6d 62 65 64 3e 60 20 2a 2a 61 73 20 46 51 2d 43 6f 44 65 6c 2a 2a 2e 00 2a | eues.<embed>`.**as.FQ-CoDel**..* |
1c340 | 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 | *Important.note.about.default-ac |
1c360 | 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 | tions:**.If.default.action.for.a |
1c380 | 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 | ny.base.chain.is.not.defined,.th |
1c3a0 | 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 | en.the.default.action.is.set.to. |
1c3c0 | 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 | **accept**.for.that.chain..For.c |
1c3e0 | 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 | ustom.chains,.if.default.action. |
1c400 | 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 | is.not.defined,.then.the.default |
1c420 | 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 00 2a 2a 49 6d 70 | -action.is.set.to.**drop**.**Imp |
1c440 | 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e | ortant.note.about.default-action |
1c460 | 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 62 | s:**.If.default.action.for.any.b |
1c480 | 61 73 65 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 | ase.chain.is.not.defined,.then.t |
1c4a0 | 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 | he.default.action.is.set.to.**ac |
1c4c0 | 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 75 73 74 6f | cept**.for.that.chain..For.custo |
1c4e0 | 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 6e | m.chains,.if.default.action.is.n |
1c500 | 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 | ot.defined,.then.the.default-act |
1c520 | 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 | ion.is.set.to.**drop**..**Import |
1c540 | 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a | ant.note.about.default-actions:* |
1c560 | 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 63 68 61 69 | *.If.default.action.for.any.chai |
1c580 | 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 | n.is.not.defined,.then.the.defau |
1c5a0 | 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 | lt.action.is.set.to.**accept**.f |
1c5c0 | 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 4f 6e 6c 79 20 66 6f 72 20 63 75 73 74 6f 6d 20 63 | or.that.chain..Only.for.custom.c |
1c5e0 | 68 61 69 6e 73 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 | hains,.the.default.action.is.set |
1c600 | 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 | .to.**drop**..**Important.note.a |
1c620 | 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 | bout.default-actions:**.If.defau |
1c640 | 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 | lt.action.for.any.chain.is.not.d |
1c660 | 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 | efined,.then.the.default.action. |
1c680 | 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 | is.set.to.**drop**.for.that.chai |
1c6a0 | 6e 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 | n..**Important.note.on.usage.of. |
1c6c0 | 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 | terms:**.The.firewall.makes.use. |
1c6e0 | 6f 66 20 74 68 65 20 74 65 72 6d 73 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 6e 70 75 74 60 2c | of.the.terms.`forward`,.`input`, |
1c700 | 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 | .and.`output`.for.firewall.polic |
1c720 | 79 2e 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 4e 65 74 66 69 6c 74 65 72 | y..More.information.of.Netfilter |
1c740 | 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 6b | .hooks.and.Linux.networking.pack |
1c760 | 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 6c | et.flows.can.be.found.in.`Netfil |
1c780 | 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 | ter-Hooks.<https://wiki.nftables |
1c7a0 | 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 74 | .org/wiki-nftables/index.php/Net |
1c7c0 | 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 | filter_hooks>`_.**Important.note |
1c7e0 | 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 72 65 77 61 | .on.usage.of.terms:**.The.firewa |
1c800 | 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 60 69 6e 60 2c 20 | ll.makes.use.of.the.terms.`in`,. |
1c820 | 60 6f 75 74 60 2c 20 61 6e 64 20 60 6c 6f 63 61 6c 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 | `out`,.and.`local`.for.firewall. |
1c840 | 70 6f 6c 69 63 79 2e 20 55 73 65 72 73 20 65 78 70 65 72 69 65 6e 63 65 64 20 77 69 74 68 20 6e | policy..Users.experienced.with.n |
1c860 | 65 74 66 69 6c 74 65 72 20 6f 66 74 65 6e 20 63 6f 6e 66 75 73 65 20 60 69 6e 60 20 74 6f 20 62 | etfilter.often.confuse.`in`.to.b |
1c880 | 65 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 65 20 60 49 4e 50 55 54 60 20 63 68 61 | e.a.reference.to.the.`INPUT`.cha |
1c8a0 | 69 6e 2c 20 61 6e 64 20 60 6f 75 74 60 20 74 68 65 20 60 4f 55 54 50 55 54 60 20 63 68 61 69 6e | in,.and.`out`.the.`OUTPUT`.chain |
1c8c0 | 20 66 72 6f 6d 20 6e 65 74 66 69 6c 74 65 72 2e 20 54 68 69 73 20 69 73 20 6e 6f 74 20 74 68 65 | .from.netfilter..This.is.not.the |
1c8e0 | 20 63 61 73 65 2e 20 54 68 65 73 65 20 69 6e 73 74 65 61 64 20 69 6e 64 69 63 61 74 65 20 74 68 | .case..These.instead.indicate.th |
1c900 | 65 20 75 73 65 20 6f 66 20 74 68 65 20 60 46 4f 52 57 41 52 44 60 20 63 68 61 69 6e 20 61 6e 64 | e.use.of.the.`FORWARD`.chain.and |
1c920 | 20 65 69 74 68 65 72 20 74 68 65 20 69 6e 70 75 74 20 6f 72 20 6f 75 74 70 75 74 20 69 6e 74 65 | .either.the.input.or.output.inte |
1c940 | 72 66 61 63 65 2e 20 54 68 65 20 60 49 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 77 68 69 63 68 20 | rface..The.`INPUT`.chain,.which. |
1c960 | 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 | is.used.for.local.traffic.to.the |
1c980 | 20 4f 53 2c 20 69 73 20 61 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 61 73 20 60 6c 6f 63 61 6c | .OS,.is.a.reference.to.as.`local |
1c9a0 | 60 20 77 69 74 68 20 72 65 73 70 65 63 74 20 74 6f 20 69 74 73 20 69 6e 70 75 74 20 69 6e 74 65 | `.with.respect.to.its.input.inte |
1c9c0 | 72 66 61 63 65 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 | rface..**Important.note:**.This. |
1c9e0 | 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 | documentation.is.valid.only.for. |
1ca00 | 56 79 4f 53 20 53 61 67 69 74 74 61 20 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e | VyOS.Sagitta.prior.to.1.4-rollin |
1ca20 | 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a | g-202308040557.**Important.note: |
1ca40 | 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f | **.This.documentation.is.valid.o |
1ca60 | 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 61 20 70 72 69 6f 72 20 74 6f 20 31 2e | nly.for.VyOS.Sagitta.prior.to.1. |
1ca80 | 34 2d 72 6f 6c 6c 69 6e 67 2d 59 59 59 59 4d 4d 44 44 48 48 6d 6d 00 2a 2a 49 6e 70 75 74 2a 2a | 4-rolling-YYYYMMDDHHmm.**Input** |
1caa0 | 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 | :.stage.where.traffic.destinated |
1cac0 | 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c | .to.the.router.itself.can.be.fil |
1cae0 | 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 | tered.and.controlled..This.is.wh |
1cb00 | 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 | ere.all.rules.for.securing.the.r |
1cb20 | 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e | outer.should.take.place..This.in |
1cb40 | 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 | cludes.ipv4.and.ipv6.filtering.r |
1cb60 | 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 49 6e 70 75 74 2a 2a 3a 20 73 74 61 | ules,.defined.in:.**Input**:.sta |
1cb80 | 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 | ge.where.traffic.destined.for.th |
1cba0 | 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 | e.router.itself.can.be.filtered. |
1cbc0 | 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 65 72 65 20 61 6c | and.controlled..This.is.where.al |
1cbe0 | 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 | l.rules.for.securing.the.router. |
1cc00 | 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 | should.take.place..This.includes |
1cc20 | 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 | .ipv4.and.ipv6.filtering.rules,. |
1cc40 | 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 49 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2a 2a 00 2a | defined.in:.**Interface.name**.* |
1cc60 | 2a 4c 45 46 54 2a 2a 00 2a 2a 4c 45 46 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e 74 65 72 66 61 63 | *LEFT**.**LEFT:**.*.WAN.interfac |
1cc80 | 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 31 60 20 2a 20 60 65 74 68 30 2e 32 30 31 60 20 69 6e 74 | e.on.`eth0.201`.*.`eth0.201`.int |
1cca0 | 65 72 66 61 63 65 20 49 50 3a 20 60 31 37 32 2e 31 38 2e 32 30 31 2e 31 30 2f 32 34 60 20 2a 20 | erface.IP:.`172.18.201.10/24`.*. |
1ccc0 | 60 76 74 69 31 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 30 2e 32 2f | `vti10`.interface.IP:.`10.0.0.2/ |
1cce0 | 33 31 60 20 2a 20 60 64 75 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 | 31`.*.`dum0`.interface.IP:.`10.0 |
1cd00 | 2e 31 31 2e 31 2f 32 34 60 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 29 | .11.1/24`.(for.testing.purposes) |
1cd20 | 00 2a 2a 4c 61 79 65 72 20 33 20 62 72 69 64 67 65 2a 2a 3a 20 57 68 65 6e 20 61 6e 20 49 50 20 | .**Layer.3.bridge**:.When.an.IP. |
1cd40 | 61 64 64 72 65 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 62 72 69 64 67 | address.is.assigned.to.the.bridg |
1cd60 | 65 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 69 66 20 74 72 61 66 66 69 63 20 69 73 20 73 | e.interface,.and.if.traffic.is.s |
1cd80 | 65 6e 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 74 68 69 73 20 49 50 20 28 66 6f | ent.to.the.router.to.this.IP.(fo |
1cda0 | 72 20 65 78 61 6d 70 6c 65 20 75 73 69 6e 67 20 73 75 63 68 20 49 50 20 61 73 20 64 65 66 61 75 | r.example.using.such.IP.as.defau |
1cdc0 | 6c 74 20 67 61 74 65 77 61 79 29 2c 20 74 68 65 6e 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 | lt.gateway),.then.rules.defined. |
1cde0 | 66 6f 72 20 2a 2a 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 2a 2a 20 77 6f 6e 27 74 20 6d 61 | for.**bridge.firewall**.won't.ma |
1ce00 | 74 63 68 2c 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 61 6e 61 6c 79 73 69 73 20 63 6f 6e 74 69 | tch,.and.firewall.analysis.conti |
1ce20 | 6e 75 65 73 20 61 74 20 2a 2a 49 50 20 6c 61 79 65 72 2a 2a 2e 00 2a 2a 4c 65 61 66 32 20 63 6f | nues.at.**IP.layer**..**Leaf2.co |
1ce40 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 | nfiguration:**.**Leaf3.configura |
1ce60 | 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 69 6e 75 78 20 73 79 73 74 65 6d 64 2d 6e 65 74 77 6f 72 6b 64 | tion:**.**Linux.systemd-networkd |
1ce80 | 3a 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 63 68 65 63 6b 2a 2a 00 2a | :**.**Local.preference.check**.* |
1cea0 | 2a 4c 6f 63 61 6c 20 72 6f 75 74 65 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 45 44 20 63 68 65 63 6b | *Local.route.check**.**MED.check |
1cec0 | 2a 2a 00 2a 2a 4d 75 6c 74 69 2d 70 61 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 4e 6f 64 65 20 31 | **.**Multi-path.check**.**Node.1 |
1cee0 | 2a 2a 00 2a 2a 4e 6f 64 65 20 31 3a 2a 2a 00 2a 2a 4e 6f 64 65 20 32 2a 2a 00 2a 2a 4e 6f 64 65 | **.**Node.1:**.**Node.2**.**Node |
1cf00 | 20 32 3a 2a 2a 00 2a 2a 4e 6f 64 65 31 3a 2a 2a 00 2a 2a 4e 6f 64 65 32 3a 2a 2a 00 2a 2a 4f 50 | .2:**.**Node1:**.**Node2:**.**OP |
1cf20 | 54 49 4f 4e 41 4c 3a 2a 2a 20 45 78 63 6c 75 64 65 20 49 6e 74 65 72 2d 56 4c 41 4e 20 74 72 61 | TIONAL:**.Exclude.Inter-VLAN.tra |
1cf40 | 66 66 69 63 20 28 62 65 74 77 65 65 6e 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 31 29 | ffic.(between.VLAN10.and.VLAN11) |
1cf60 | 20 66 72 6f 6d 20 50 42 52 00 2a 2a 4f 53 50 46 20 6e 65 74 77 6f 72 6b 20 72 6f 75 74 69 6e 67 | .from.PBR.**OSPF.network.routing |
1cf80 | 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 | .table**.....includes.a.list.of. |
1cfa0 | 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 66 6f 72 20 61 6c 6c 20 61 63 63 65 73 73 69 62 | acquired.routes.for.all.accessib |
1cfc0 | 6c 65 20 6e 65 74 77 6f 72 6b 73 20 28 6f 72 20 61 67 67 72 65 67 61 74 65 64 20 61 72 65 61 20 | le.networks.(or.aggregated.area. |
1cfe0 | 72 61 6e 67 65 73 29 20 6f 66 20 4f 53 50 46 20 73 79 73 74 65 6d 2e 20 22 49 41 22 20 66 6c 61 | ranges).of.OSPF.system.."IA".fla |
1d000 | 67 20 6d 65 61 6e 73 20 74 68 61 74 20 72 6f 75 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 | g.means.that.route.destination.i |
1d020 | 73 20 69 6e 20 74 68 65 20 61 72 65 61 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 | s.in.the.area.to.which.the.route |
1d040 | 72 20 69 73 20 6e 6f 74 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 2e 65 2e 20 69 74 e2 80 99 73 20 | r.is.not.connected,.i.e..it...s. |
1d060 | 61 6e 20 69 6e 74 65 72 2d 61 72 65 61 20 70 61 74 68 2e 20 49 6e 20 73 71 75 61 72 65 20 62 72 | an.inter-area.path..In.square.br |
1d080 | 61 63 6b 65 74 73 20 61 20 73 75 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 66 6f 72 20 61 6c 6c 20 | ackets.a.summary.metric.for.all. |
1d0a0 | 6c 69 6e 6b 73 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 20 61 20 70 61 74 68 20 6c 69 65 73 20 | links.through.which.a.path.lies. |
1d0c0 | 74 6f 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 20 22 76 | to.this.network.is.specified.."v |
1d0e0 | 69 61 22 20 70 72 65 66 69 78 20 64 65 66 69 6e 65 73 20 61 20 72 6f 75 74 65 72 2d 67 61 74 65 | ia".prefix.defines.a.router-gate |
1d100 | 77 61 79 2c 20 69 2e 65 2e 20 74 68 65 20 66 69 72 73 74 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 | way,.i.e..the.first.router.on.th |
1d120 | 65 20 77 61 79 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 6e 65 78 74 20 68 | e.way.to.the.destination.(next.h |
1d140 | 6f 70 29 2e 20 2a 2a 4f 53 50 46 20 72 6f 75 74 65 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 | op)..**OSPF.router.routing.table |
1d160 | 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 | **.....includes.a.list.of.acquir |
1d180 | 65 64 20 72 6f 75 74 65 73 20 74 6f 20 61 6c 6c 20 61 63 63 65 73 73 69 62 6c 65 20 41 42 52 73 | ed.routes.to.all.accessible.ABRs |
1d1a0 | 20 61 6e 64 20 41 53 42 52 73 2e 20 2a 2a 4f 53 50 46 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 | .and.ASBRs..**OSPF.external.rout |
1d1c0 | 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 | ing.table**.....includes.a.list. |
1d1e0 | 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 65 78 74 65 | of.acquired.routes.that.are.exte |
1d200 | 72 6e 61 6c 20 74 6f 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 22 45 22 20 66 6c | rnal.to.the.OSPF.process.."E".fl |
1d220 | 61 67 20 70 6f 69 6e 74 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d | ag.points.to.the.external.link.m |
1d240 | 65 74 72 69 63 20 74 79 70 65 20 28 45 31 20 e2 80 93 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 | etric.type.(E1.....metric.type.1 |
1d260 | 2c 20 45 32 20 e2 80 93 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 29 2e 20 45 78 74 65 72 6e 61 | ,.E2.....metric.type.2)..Externa |
1d280 | 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 20 69 73 20 70 72 69 6e 74 65 64 20 69 6e 20 74 68 65 20 | l.link.metric.is.printed.in.the. |
1d2a0 | 22 3c 6d 65 74 72 69 63 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 | "<metric.of.the.router.which.adv |
1d2c0 | 65 72 74 69 73 65 64 20 74 68 65 20 6c 69 6e 6b 3e 2f 3c 6c 69 6e 6b 20 6d 65 74 72 69 63 3e 22 | ertised.the.link>/<link.metric>" |
1d2e0 | 20 66 6f 72 6d 61 74 2e 00 2a 2a 4f 6e 65 20 67 61 74 65 77 61 79 3a 2a 2a 00 2a 2a 4f 72 69 67 | .format..**One.gateway:**.**Orig |
1d300 | 69 6e 20 63 68 65 63 6b 2a 2a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 | in.check**.**Output**:.stage.whe |
1d320 | 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 | re.traffic.that.is.originated.by |
1d340 | 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 | .the.router.itself.can.be.filter |
1d360 | 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 61 72 65 20 69 6e 20 6d 69 6e 64 20 | ed.and.controlled..Bare.in.mind. |
1d380 | 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 | that.this.traffic.can.be.a.new.c |
1d3a0 | 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 | onnection.originted.by.a.interna |
1d3c0 | 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 | l.process.running.on.VyOS.router |
1d3e0 | 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 63 61 6e 20 62 65 20 61 20 72 65 73 70 6f | ,.such.as.NTP,.or.can.be.a.respo |
1d400 | 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c | nse.to.traffic.received.external |
1d420 | 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c | y.through.**inputt**.(for.exampl |
1d440 | 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d | e.response.to.an.ssh.login.attem |
1d460 | 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 | pt.to.the.router)..This.includes |
1d480 | 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 | .ipv4.and.ipv6.filtering.rules,. |
1d4a0 | 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 | defined.in:.**Output**:.stage.wh |
1d4c0 | 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d | ere.traffic.that.originates.from |
1d4e0 | 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 | .the.router.itself.can.be.filter |
1d500 | 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 | ed.and.controlled..Bear.in.mind. |
1d520 | 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 | that.this.traffic.can.be.a.new.c |
1d540 | 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e | onnection.originated.by.a.intern |
1d560 | 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 | al.process.running.on.VyOS.route |
1d580 | 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f | r,.such.as.NTP,.or.a.response.to |
1d5a0 | 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f | .traffic.received.externaly.thro |
1d5c0 | 75 67 68 20 2a 2a 69 6e 70 75 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f | ugh.**input**.(for.example.respo |
1d5e0 | 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 | nse.to.an.ssh.login.attempt.to.t |
1d600 | 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 | he.router)..This.includes.ipv4.a |
1d620 | 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 | nd.ipv6.filtering.rules,.defined |
1d640 | 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 | .in:.**Output**:.stage.where.tra |
1d660 | 66 66 69 63 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 72 6f | ffic.that.originates.from.the.ro |
1d680 | 75 74 65 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 | uter.itself.can.be.filtered.and. |
1d6a0 | 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 | controlled..Bear.in.mind.that.th |
1d6c0 | 69 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 | is.traffic.can.be.a.new.connecti |
1d6e0 | 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 | on.originated.by.a.internal.proc |
1d700 | 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 | ess.running.on.VyOS.router,.such |
1d720 | 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 | .as.NTP,.or.a.response.to.traffi |
1d740 | 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 | c.received.externaly.through.**i |
1d760 | 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f | nputt**.(for.example.response.to |
1d780 | 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 | .an.ssh.login.attempt.to.the.rou |
1d7a0 | 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 | ter)..This.includes.ipv4.and.ipv |
1d7c0 | 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a | 6.filtering.rules,.defined.in:.* |
1d7e0 | 2a 50 65 65 72 20 61 64 64 72 65 73 73 2a 2a 00 2a 2a 50 6f 6c 69 63 79 20 52 6f 75 74 65 2a 2a | *Peer.address**.**Policy.Route** |
1d800 | 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 70 6f 6c 69 | :.rules.defined.under.``set.poli |
1d820 | 63 79 20 5b 72 6f 75 74 65 20 7c 20 72 6f 75 74 65 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 50 6f 6c | cy.[route.|.route6]....``..**Pol |
1d840 | 69 63 79 20 64 65 66 69 6e 69 74 69 6f 6e 3a 2a 2a 00 2a 2a 50 6f 73 74 72 6f 75 74 69 6e 67 2a | icy.definition:**.**Postrouting* |
1d860 | 2a 3a 20 61 73 20 69 6e 20 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 2c 20 73 65 76 65 72 61 6c | *:.as.in.**Prerouting**,.several |
1d880 | 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 | .actions.defined.in.different.pa |
1d8a0 | 72 74 73 20 6f 66 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 70 65 | rts.of.VyOS.configuration.are.pe |
1d8c0 | 72 66 6f 72 6d 65 64 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2e 20 54 68 69 73 20 69 6e 63 6c | rformed.in.this.stage..This.incl |
1d8e0 | 75 64 65 73 3a 00 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 63 | udes:.**Prerouting**:.several.ac |
1d900 | 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2c | tions.can.be.done.in.this.stage, |
1d920 | 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 | .and.currently.these.actions.are |
1d940 | 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 56 | .defined.in.different.parts.in.V |
1d960 | 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 6f | yOS.configuration..Order.is.impo |
1d980 | 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 | rtant,.and.all.these.actions.are |
1d9a0 | 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 65 | .performed.before.any.actions.de |
1d9c0 | 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e | fined.under.``firewall``.section |
1d9e0 | 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 | ..Relevant.configuration.that.ac |
1da00 | 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 65 72 6f 75 74 69 | ts.in.this.stage.are:.**Prerouti |
1da20 | 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f 6e | ng**:.several.actions.can.be.don |
1da40 | 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 74 | e.in.this.stage,.and.currently.t |
1da60 | 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 | hese.actions.are.defined.in.diff |
1da80 | 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 76 79 6f 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | erent.parts.in.vyos.configuratio |
1daa0 | 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 74 | n..Order.is.important,.and.all.t |
1dac0 | 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f 72 | hese.actions.are.performed.befor |
1dae0 | 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 20 75 6e 64 65 72 20 60 60 66 69 72 | e.any.actions.define.under.``fir |
1db00 | 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 69 67 | ewall``.section..Relevant.config |
1db20 | 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 20 | uration.that.acts.in.this.stage. |
1db40 | 61 72 65 3a 00 2a 2a 50 72 69 6d 61 72 79 2a 2a 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 | are:.**Primary**.**Queueing.disc |
1db60 | 69 70 6c 69 6e 65 2a 2a 20 46 61 69 72 2f 46 6c 6f 77 20 51 75 65 75 65 20 43 6f 44 65 6c 2e 00 | ipline**.Fair/Flow.Queue.CoDel.. |
1db80 | 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 44 65 66 69 63 69 74 | **Queueing.discipline:**.Deficit |
1dba0 | 20 52 6f 75 6e 64 20 52 6f 62 69 6e 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c | .Round.Robin..**Queueing.discipl |
1dbc0 | 69 6e 65 3a 2a 2a 20 44 65 66 69 63 69 74 20 6d 6f 64 65 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 | ine:**.Deficit.mode..**Queueing. |
1dbe0 | 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d | discipline:**.Generalized.Random |
1dc00 | 20 45 61 72 6c 79 20 44 72 6f 70 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 | .Early.Drop..**Queueing.discipli |
1dc20 | 6e 65 3a 2a 2a 20 48 69 65 72 61 72 63 68 69 63 61 6c 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 2e | ne:**.Hierarchical.Token.Bucket. |
1dc40 | 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 49 6e 67 72 65 73 | .**Queueing.discipline:**.Ingres |
1dc60 | 73 20 70 6f 6c 69 63 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 | s.policer..**Queueing.discipline |
1dc80 | 3a 2a 2a 20 50 46 49 46 4f 20 28 50 61 63 6b 65 74 20 46 69 72 73 74 20 49 6e 20 46 69 72 73 74 | :**.PFIFO.(Packet.First.In.First |
1dca0 | 20 4f 75 74 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 | .Out)..**Queueing.discipline:**. |
1dcc0 | 50 52 49 4f 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 53 | PRIO..**Queueing.discipline:**.S |
1dce0 | 46 51 20 28 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 69 6e 67 29 | FQ.(Stochastic.Fairness.Queuing) |
1dd00 | 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 54 6f 63 6b 65 | ..**Queueing.discipline:**.Tocke |
1dd20 | 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 | n.Bucket.Filter..**Queueing.disc |
1dd40 | 69 70 6c 69 6e 65 3a 2a 2a 20 6e 65 74 65 6d 20 28 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f | ipline:**.netem.(Network.Emulato |
1dd60 | 72 29 20 2b 20 54 42 46 20 28 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 29 2e 00 | r).+.TBF.(Token.Bucket.Filter).. |
1dd80 | 2a 2a 52 31 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 31 2a 2a 00 2a 2a 52 32 20 53 74 | **R1.Static.Key**.**R1**.**R2.St |
1dda0 | 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a 52 32 2a 2a 00 2a 2a 52 41 44 49 55 53 20 62 61 73 65 64 | atic.Key**.**R2**.**RADIUS.based |
1ddc0 | 20 49 50 20 70 6f 6f 6c 73 20 28 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 29 2a 2a 00 | .IP.pools.(Framed-IP-Address)**. |
1dde0 | 2a 2a 52 41 44 49 55 53 20 73 65 73 73 69 6f 6e 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 44 4d 2f | **RADIUS.sessions.management.DM/ |
1de00 | 43 6f 41 2a 2a 00 2a 2a 52 49 47 48 54 2a 2a 00 2a 2a 52 49 47 48 54 3a 2a 2a 20 2a 20 57 41 4e | CoA**.**RIGHT**.**RIGHT:**.*.WAN |
1de20 | 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 32 60 20 2a 20 60 65 74 68 30 | .interface.on.`eth0.202`.*.`eth0 |
1de40 | 2e 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 37 32 2e 31 38 2e 32 30 32 2e | .201`.interface.IP:.`172.18.202. |
1de60 | 31 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 | 10/24`.*.`vti10`.interface.IP:.` |
1de80 | 31 30 2e 30 2e 30 2e 33 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 | 10.0.0.3/31`.*.`dum0`.interface. |
1dea0 | 49 50 3a 20 60 31 30 2e 30 2e 31 32 2e 31 2f 32 34 60 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 | IP:.`10.0.12.1/24`.(for.testing. |
1dec0 | 70 75 72 70 6f 73 65 73 29 00 2a 2a 52 6f 75 74 65 72 20 31 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 | purposes).**Router.1**.**Router. |
1dee0 | 32 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 33 2a 2a 00 2a 2a 52 6f 75 74 65 72 2d 49 44 20 63 68 65 | 2**.**Router.3**.**Router-ID.che |
1df00 | 63 6b 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 61 66 74 65 72 20 72 6f 75 74 | ck**.**Routes.learned.after.rout |
1df20 | 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 3a 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c | ing.policy.applied:**.**Routes.l |
1df40 | 65 61 72 6e 65 64 20 62 65 66 6f 72 65 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 | earned.before.routing.policy.app |
1df60 | 6c 69 65 64 3a 2a 2a 00 2a 2a 53 57 31 2a 2a 00 2a 2a 53 57 32 2a 2a 00 2a 2a 53 65 63 6f 6e 64 | lied:**.**SW1**.**SW2**.**Second |
1df80 | 61 72 79 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 20 49 50 53 65 63 2a 2a 00 2a 2a 53 65 74 | ary**.**Setting.up.IPSec**.**Set |
1dfa0 | 74 69 6e 67 20 75 70 20 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c 2a 2a 00 2a 2a 53 6f 75 72 63 | ting.up.the.GRE.tunnel**.**Sourc |
1dfc0 | 65 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 | e.NAT**:.rules.defined.under.``s |
1dfe0 | 65 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 | et.[nat.|.nat66].destination...` |
1e000 | 60 2e 00 2a 2a 53 70 69 6e 65 31 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 53 | `..**Spine1.Configuration:**.**S |
1e020 | 74 61 74 75 73 2a 2a 00 2a 2a 54 6f 20 73 65 65 20 74 68 65 20 72 65 64 69 73 74 72 69 62 75 74 | tatus**.**To.see.the.redistribut |
1e040 | 65 64 20 72 6f 75 74 65 73 3a 2a 2a 00 2a 2a 54 77 6f 20 67 61 74 65 77 61 79 73 20 61 6e 64 20 | ed.routes:**.**Two.gateways.and. |
1e060 | 64 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 73 3a 2a 2a 00 2a 2a 56 4c 41 4e 20 49 44 2a 2a | different.metrics:**.**VLAN.ID** |
1e080 | 00 2a 2a 56 79 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 57 65 69 67 68 74 20 63 68 65 63 6b | .**VyOS.Router:**.**Weight.check |
1e0a0 | 2a 2a 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 | **.**address**.can.be.specified. |
1e0c0 | 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 61 73 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 | multiple.times.as.IPv4.and/or.IP |
1e0e0 | 76 36 20 61 64 64 72 65 73 73 2c 20 65 2e 67 2e 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e | v6.address,.e.g..192.0.2.1/24.an |
1e100 | 64 2f 6f 72 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 | d/or.2001:db8::1/64.**address**. |
1e120 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2c | can.be.specified.multiple.times, |
1e140 | 20 65 2e 67 2e 20 31 39 32 2e 31 36 38 2e 31 30 30 2e 31 20 61 6e 64 2f 6f 72 20 31 39 32 2e 31 | .e.g..192.168.100.1.and/or.192.1 |
1e160 | 36 38 2e 31 30 30 2e 30 2f 32 34 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 | 68.100.0/24.**allow**.-.Negotiat |
1e180 | 65 20 49 50 76 34 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 20 28 | e.IPv4.only.if.client.requests.( |
1e1a0 | 44 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 | Default.value).**allow**.-.Negot |
1e1c0 | 69 61 74 65 20 49 50 76 36 20 6f 6e 6c 79 20 69 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 | iate.IPv6.only.if.client.request |
1e1e0 | 73 00 2a 2a 61 6c 6c 6f 77 2d 68 6f 73 74 2d 6e 65 74 77 6f 72 6b 73 2a 2a 20 63 61 6e 6e 6f 74 | s.**allow-host-networks**.cannot |
1e200 | 20 62 65 20 75 73 65 64 20 77 69 74 68 20 2a 2a 6e 65 74 77 6f 72 6b 2a 2a 00 2a 2a 61 6c 77 61 | .be.used.with.**network**.**alwa |
1e220 | 79 73 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 | ys**:.Restart.containers.when.th |
1e240 | 65 79 20 65 78 69 74 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 73 74 61 74 75 73 2c 20 72 | ey.exit,.regardless.of.status,.r |
1e260 | 65 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 00 2a 2a 61 70 70 65 6e 64 3a 2a 2a | etrying.indefinitely.**append:** |
1e280 | 20 54 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 | .The.relay.agent.is.allowed.to.a |
1e2a0 | 70 70 65 6e 64 20 69 74 73 20 6f 77 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | ppend.its.own.relay.information. |
1e2c0 | 74 6f 20 61 20 72 65 63 65 69 76 65 64 20 44 48 43 50 20 70 61 63 6b 65 74 2c 20 64 69 73 72 65 | to.a.received.DHCP.packet,.disre |
1e2e0 | 67 61 72 64 69 6e 67 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 | garding.relay.information.alread |
1e300 | 79 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 2e 00 2a 2a 61 70 70 6c 69 | y.present.in.the.packet..**appli |
1e320 | 63 61 74 69 6f 6e 2a 2a 3a 20 61 6e 61 6c 79 7a 65 73 20 72 65 63 65 69 76 65 64 20 66 6c 6f 77 | cation**:.analyzes.received.flow |
1e340 | 20 64 61 74 61 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 69 6e 74 72 75 73 69 6f | .data.in.the.context.of.intrusio |
1e360 | 6e 20 64 65 74 65 63 74 69 6f 6e 20 6f 72 20 74 72 61 66 66 69 63 20 70 72 6f 66 69 6c 69 6e 67 | n.detection.or.traffic.profiling |
1e380 | 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 00 2a 2a 61 75 74 6f 2a 2a 20 e2 80 93 20 61 75 74 6f 6d | ,.for.example.**auto**.....autom |
1e3a0 | 61 74 69 63 61 6c 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 | atically.determines.the.interfac |
1e3c0 | 65 20 74 79 70 65 2e 20 2a 2a 77 69 72 65 64 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 73 20 6f 70 | e.type..**wired**.....enables.op |
1e3e0 | 74 69 6d 69 73 61 74 69 6f 6e 73 20 66 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 | timisations.for.wired.interfaces |
1e400 | 2e 20 2a 2a 77 69 72 65 6c 65 73 73 2a 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 73 20 61 20 6e 75 | ..**wireless**.....disables.a.nu |
1e420 | 6d 62 65 72 20 6f 66 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 6f | mber.of.optimisations.that.are.o |
1e440 | 6e 6c 79 20 63 6f 72 72 65 63 74 20 6f 6e 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e | nly.correct.on.wired.interfaces. |
1e460 | 20 53 70 65 63 69 66 79 69 6e 67 20 77 69 72 65 6c 65 73 73 20 69 73 20 61 6c 77 61 79 73 20 63 | .Specifying.wireless.is.always.c |
1e480 | 6f 72 72 65 63 74 2c 20 62 75 74 20 6d 61 79 20 63 61 75 73 65 20 73 6c 6f 77 65 72 20 63 6f 6e | orrect,.but.may.cause.slower.con |
1e4a0 | 76 65 72 67 65 6e 63 65 20 61 6e 64 20 65 78 74 72 61 20 72 6f 75 74 69 6e 67 20 74 72 61 66 66 | vergence.and.extra.routing.traff |
1e4c0 | 69 63 2e 00 2a 2a 62 61 6e 2d 74 69 6d 65 2a 2a 20 61 6e 64 20 2a 2a 74 68 72 65 73 68 6f 6c 64 | ic..**ban-time**.and.**threshold |
1e4e0 | 2a 2a 3a 20 74 68 65 73 65 20 76 61 6c 75 65 73 20 61 72 65 20 6b 65 70 74 20 76 65 72 79 20 6c | **:.these.values.are.kept.very.l |
1e500 | 6f 77 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 61 73 69 6c 79 20 69 64 65 6e 74 69 66 79 20 61 | ow.in.order.to.easily.identify.a |
1e520 | 6e 64 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 61 74 74 61 63 6b 2e 00 2a 2a 62 72 6f 61 64 63 | nd.generate.and.attack..**broadc |
1e540 | 61 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 73 | ast**.....broadcast.IP.addresses |
1e560 | 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 6e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 2a 2a | .distribution..**non-broadcast** |
1e580 | 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 4e 42 4d | .....address.distribution.in.NBM |
1e5a0 | 41 20 6e 65 74 77 6f 72 6b 73 20 74 6f 70 6f 6c 6f 67 79 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d | A.networks.topology..**point-to- |
1e5c0 | 6d 75 6c 74 69 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 | multipoint**.....address.distrib |
1e5e0 | 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 6e 65 74 | ution.in.point-to-multipoint.net |
1e600 | 77 6f 72 6b 73 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 | works..**point-to-point**.....ad |
1e620 | 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 | dress.distribution.in.point-to-p |
1e640 | 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 | oint.networks..**broadcast**.... |
1e660 | 20 62 72 6f 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 64 69 73 74 72 69 62 75 | .broadcast.IP.addresses.distribu |
1e680 | 74 69 6f 6e 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 | tion..**point-to-point**.....add |
1e6a0 | 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f | ress.distribution.in.point-to-po |
1e6c0 | 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 00 2a 2a 63 61 6c 6c 69 6e 67 2d 73 69 64 2a 2a 20 2d 20 | int.networks..**calling-sid**.-. |
1e6e0 | 43 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 | Calculate.interface.identifier.f |
1e700 | 72 6f 6d 20 63 61 6c 6c 69 6e 67 2d 73 74 61 74 69 6f 6e 2d 69 64 2e 00 2a 2a 63 69 73 63 6f 2a | rom.calling-station-id..**cisco* |
1e720 | 2a 20 e2 80 93 20 61 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 | *.....a.router.will.be.considere |
1e740 | 64 20 61 73 20 41 42 52 20 69 66 20 69 74 20 68 61 73 20 73 65 76 65 72 61 6c 20 63 6f 6e 66 69 | d.as.ABR.if.it.has.several.confi |
1e760 | 67 75 72 65 64 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 64 | gured.links.to.the.networks.in.d |
1e780 | 69 66 66 65 72 65 6e 74 20 61 72 65 61 73 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 69 73 20 61 | ifferent.areas.one.of.which.is.a |
1e7a0 | 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 4d 6f 72 65 6f 76 65 72 2c 20 74 68 65 20 6c 69 | .backbone.area..Moreover,.the.li |
1e7c0 | 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 73 68 6f 75 6c 64 20 62 | nk.to.the.backbone.area.should.b |
1e7e0 | 65 20 61 63 74 69 76 65 20 28 77 6f 72 6b 69 6e 67 29 2e 20 2a 2a 69 62 6d 2a 2a 20 e2 80 93 20 | e.active.(working)..**ibm**..... |
1e800 | 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 63 69 73 63 6f 22 20 6d 6f 64 65 6c 20 62 75 74 20 69 | identical.to."cisco".model.but.i |
1e820 | 6e 20 74 68 69 73 20 63 61 73 65 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 6c 69 6e 6b | n.this.case.a.backbone.area.link |
1e840 | 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 63 74 69 76 65 2e 20 2a 2a 73 74 61 6e 64 61 72 64 2a 2a | .may.not.be.active..**standard** |
1e860 | 20 e2 80 93 20 72 6f 75 74 65 72 20 68 61 73 20 73 65 76 65 72 61 6c 20 61 63 74 69 76 65 20 6c | .....router.has.several.active.l |
1e880 | 69 6e 6b 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 61 72 65 61 73 2e 20 2a 2a 73 68 6f 72 74 | inks.to.different.areas..**short |
1e8a0 | 63 75 74 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 22 73 74 61 6e 64 61 72 64 | cut**.....identical.to."standard |
1e8c0 | 22 20 62 75 74 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 6c 20 61 20 72 6f 75 74 65 72 20 69 73 20 | ".but.in.this.model.a.router.is. |
1e8e0 | 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 61 72 65 61 73 | allowed.to.use.a.connected.areas |
1e900 | 20 74 6f 70 6f 6c 6f 67 79 20 77 69 74 68 6f 75 74 20 69 6e 76 6f 6c 76 69 6e 67 20 61 20 62 61 | .topology.without.involving.a.ba |
1e920 | 63 6b 62 6f 6e 65 20 61 72 65 61 20 66 6f 72 20 69 6e 74 65 72 2d 61 72 65 61 20 63 6f 6e 6e 65 | ckbone.area.for.inter-area.conne |
1e940 | 63 74 69 6f 6e 73 2e 00 2a 2a 63 6f 6c 6c 65 63 74 6f 72 2a 2a 3a 20 72 65 73 70 6f 6e 73 69 62 | ctions..**collector**:.responsib |
1e960 | 6c 65 20 66 6f 72 20 72 65 63 65 70 74 69 6f 6e 2c 20 73 74 6f 72 61 67 65 20 61 6e 64 20 70 72 | le.for.reception,.storage.and.pr |
1e980 | 65 2d 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 66 6c 6f 77 20 64 61 74 61 20 72 65 63 65 69 76 | e-processing.of.flow.data.receiv |
1e9a0 | 65 64 20 66 72 6f 6d 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 00 2a 2a 64 65 66 61 75 6c | ed.from.a.flow.exporter.**defaul |
1e9c0 | 74 2a 2a 20 e2 80 93 20 20 74 68 69 73 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 | t**......this.area.will.be.used. |
1e9e0 | 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 6f 6e 6c 79 20 69 66 20 41 42 52 20 64 6f 65 | for.shortcutting.only.if.ABR.doe |
1ea00 | 73 20 6e 6f 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e | s.not.have.a.link.to.the.backbon |
1ea20 | 65 20 61 72 65 61 20 6f 72 20 74 68 69 73 20 6c 69 6e 6b 20 77 61 73 20 6c 6f 73 74 2e 20 2a 2a | e.area.or.this.link.was.lost..** |
1ea40 | 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 65 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 | enable**.....the.area.will.be.us |
1ea60 | 65 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 69 6e 67 20 65 76 65 72 79 20 74 69 6d 65 20 74 | ed.for.shortcutting.every.time.t |
1ea80 | 68 65 20 72 6f 75 74 65 20 74 68 61 74 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 69 74 20 69 73 | he.route.that.goes.through.it.is |
1eaa0 | 20 63 68 65 61 70 65 72 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 69 73 20 61 | .cheaper..**disable**.....this.a |
1eac0 | 72 65 61 20 69 73 20 6e 65 76 65 72 20 75 73 65 64 20 62 79 20 41 42 52 20 66 6f 72 20 72 6f 75 | rea.is.never.used.by.ABR.for.rou |
1eae0 | 74 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 2e 00 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 | tes.shortcutting..**default**... |
1eb00 | 93 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 64 20 | ..enable.split-horizon.on.wired. |
1eb20 | 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f | interfaces,.and.disable.split-ho |
1eb40 | 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a | rizon.on.wireless.interfaces..** |
1eb60 | 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f | enable**.....enable.split-horizo |
1eb80 | 6e 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 64 69 73 61 62 6c 65 2a | n.on.this.interfaces..**disable* |
1eba0 | 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 | *.....disable.split-horizon.on.t |
1ebc0 | 68 69 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f | his.interfaces..**deny**.-.Do.no |
1ebe0 | 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 34 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e | t.negotiate.IPv4.**deny**.-.Do.n |
1ec00 | 6f 74 20 6e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 28 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | ot.negotiate.IPv6.(default.value |
1ec20 | 29 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 64 65 6e 79 20 6d 70 70 65 00 2a 2a 64 65 6e 79 2a 2a 3a | ).**deny**.-.deny.mppe.**deny**: |
1ec40 | 20 44 65 6e 79 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f 6e 20 61 75 74 68 6f 72 69 7a 61 74 69 | .Deny.second.session.authorizati |
1ec60 | 6f 6e 2e 00 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 2a 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 | on..**destination**.-.specify.wh |
1ec80 | 69 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 77 69 6c 6c | ich.packets.the.translation.will |
1eca0 | 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 2c 20 6f 6e 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 | .be.applied.to,.only.based.on.th |
1ecc0 | 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f 72 20 70 6f 72 | e.destination.address.and/or.por |
1ece0 | 74 20 6e 75 6d 62 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 2a 2a 64 68 63 70 2a 2a 20 69 6e | t.number.configured..**dhcp**.in |
1ed00 | 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 | terface.address.is.received.by.D |
1ed20 | 48 43 50 20 66 72 6f 6d 20 61 20 44 48 43 50 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 | HCP.from.a.DHCP.server.on.this.s |
1ed40 | 65 67 6d 65 6e 74 2e 00 2a 2a 64 68 63 70 76 36 2a 2a 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 | egment..**dhcpv6**.interface.add |
1ed60 | 72 65 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 43 50 76 36 20 66 72 6f 6d 20 | ress.is.received.by.DHCPv6.from. |
1ed80 | 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e | a.DHCPv6.server.on.this.segment. |
1eda0 | 00 2a 2a 64 69 73 61 62 6c 65 2a 2a 3a 20 44 69 73 61 62 6c 65 73 20 73 65 73 73 69 6f 6e 20 63 | .**disable**:.Disables.session.c |
1edc0 | 6f 6e 74 72 6f 6c 2e 00 2a 2a 64 69 73 63 61 72 64 3a 2a 2a 20 52 65 63 65 69 76 65 64 20 70 61 | ontrol..**discard:**.Received.pa |
1ede0 | 63 6b 65 74 73 20 77 68 69 63 68 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 20 72 65 6c 61 | ckets.which.already.contain.rela |
1ee00 | 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 69 73 63 61 72 64 65 64 2e | y.information.will.be.discarded. |
1ee20 | 00 2a 2a 64 6f 77 6e 73 74 72 65 61 6d 3a 2a 2a 20 44 6f 77 6e 73 74 72 65 61 6d 20 6e 65 74 77 | .**downstream:**.Downstream.netw |
1ee40 | 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 68 65 20 64 69 73 74 72 69 62 75 74 | ork.interfaces.are.the.distribut |
1ee60 | 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f | ion.interfaces.to.the.destinatio |
1ee80 | 6e 20 6e 65 74 77 6f 72 6b 73 2c 20 77 68 65 72 65 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 | n.networks,.where.multicast.clie |
1eea0 | 6e 74 73 20 63 61 6e 20 6a 6f 69 6e 20 67 72 6f 75 70 73 20 61 6e 64 20 72 65 63 65 69 76 65 20 | nts.can.join.groups.and.receive. |
1eec0 | 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e | multicast.data..One.or.more.down |
1eee0 | 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 | stream.interfaces.must.be.config |
1ef00 | 75 72 65 64 2e 00 2a 2a 65 78 70 6f 72 74 65 72 2a 2a 3a 20 61 67 67 72 65 67 61 74 65 73 20 70 | ured..**exporter**:.aggregates.p |
1ef20 | 61 63 6b 65 74 73 20 69 6e 74 6f 20 66 6c 6f 77 73 20 61 6e 64 20 65 78 70 6f 72 74 73 20 66 6c | ackets.into.flows.and.exports.fl |
1ef40 | 6f 77 20 72 65 63 6f 72 64 73 20 74 6f 77 61 72 64 73 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 66 | ow.records.towards.one.or.more.f |
1ef60 | 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 00 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 | low.collectors.**firewall.all-pi |
1ef80 | 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 | ng**.affects.only.to.LOCAL.and.i |
1efa0 | 74 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 | t.always.behaves.in.the.most.res |
1efc0 | 74 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 69 72 65 77 61 6c 6c 20 67 6c 6f 62 61 6c 2d 6f | trictive.way.**firewall.global-o |
1efe0 | 70 74 69 6f 6e 73 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 | ptions.all-ping**.affects.only.t |
1f000 | 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e | o.LOCAL.and.it.always.behaves.in |
1f020 | 20 74 68 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 6f 72 77 | .the.most.restrictive.way.**forw |
1f040 | 61 72 64 3a 2a 2a 20 41 6c 6c 20 70 61 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 | ard:**.All.packets.are.forwarded |
1f060 | 2c 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 | ,.relay.information.already.pres |
1f080 | 65 6e 74 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 64 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 | ent.will.be.ignored..**inbound-i |
1f0a0 | 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 | nterface**.-.applicable.only.to. |
1f0c0 | 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 | :ref:`destination-nat`..It.confi |
1f0e0 | 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 | gures.the.interface.which.is.use |
1f100 | 64 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 20 74 72 61 | d.for.the.inside.traffic.the.tra |
1f120 | 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 69 6e 62 6f | nslation.rule.applies.to..**inbo |
1f140 | 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c | und-interface**.-.applicable.onl |
1f160 | 79 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 | y.to.:ref:`destination-nat`..It. |
1f180 | 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 | configures.the.interface.which.i |
1f1a0 | 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 | s.used.for.the.inside.traffic.th |
1f1c0 | 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 | e.translation.rule.applies.to..I |
1f1e0 | 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 | nterface.groups,.inverted.select |
1f200 | 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f | ion.and.wildcard,.are.also.suppo |
1f220 | 72 74 65 64 2e 00 2a 2a 69 70 76 34 2d 61 64 64 72 2a 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 | rted..**ipv4-addr**.-.Calculate. |
1f240 | 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 72 6f 6d 20 49 50 76 34 20 61 | interface.identifier.from.IPv4.a |
1f260 | 64 64 72 65 73 73 2e 00 2a 2a 6c 32 2a 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c | ddress..**l2**:.It.means.that.cl |
1f280 | 69 65 6e 74 73 20 61 72 65 20 6f 6e 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 77 68 65 72 65 20 | ients.are.on.same.network.where. |
1f2a0 | 69 6e 74 65 72 66 61 63 65 20 69 73 2e 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 6c 61 79 | interface.is.**(default)**.**lay |
1f2c0 | 65 72 32 2a 2a 20 2d 20 55 73 65 73 20 58 4f 52 20 6f 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 | er2**.-.Uses.XOR.of.hardware.MAC |
1f2e0 | 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 20 66 69 | .addresses.and.packet.type.ID.fi |
1f300 | 65 6c 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f | eld.to.generate.the.hash..The.fo |
1f320 | 72 6d 75 6c 61 20 69 73 00 2a 2a 6c 61 79 65 72 32 2b 33 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c | rmula.is.**layer2+3**.-.This.pol |
1f340 | 69 63 79 20 75 73 65 73 20 61 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 6f 66 20 6c 61 79 65 72 32 | icy.uses.a.combination.of.layer2 |
1f360 | 20 61 6e 64 20 6c 61 79 65 72 33 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .and.layer3.protocol.information |
1f380 | 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 55 73 65 73 20 58 4f 52 20 | .to.generate.the.hash..Uses.XOR. |
1f3a0 | 6f 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 | of.hardware.MAC.addresses.and.IP |
1f3c0 | 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e | .addresses.to.generate.the.hash. |
1f3e0 | 20 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 3a 00 2a 2a 6c 61 79 65 72 33 2b 34 2a 2a 20 2d 20 | .The.formula.is:.**layer3+4**.-. |
1f400 | 54 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 75 70 70 65 72 20 6c 61 79 65 72 20 70 72 6f | This.policy.uses.upper.layer.pro |
1f420 | 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c | tocol.information,.when.availabl |
1f440 | 65 2c 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 69 73 20 61 6c | e,.to.generate.the.hash..This.al |
1f460 | 6c 6f 77 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 | lows.for.traffic.to.a.particular |
1f480 | 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 74 6f 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 | .network.peer.to.span.multiple.s |
1f4a0 | 6c 61 76 65 73 2c 20 61 6c 74 68 6f 75 67 68 20 61 20 73 69 6e 67 6c 65 20 63 6f 6e 6e 65 63 74 | laves,.although.a.single.connect |
1f4c0 | 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 | ion.will.not.span.multiple.slave |
1f4e0 | 73 2e 00 2a 2a 6c 65 66 74 2a 2a 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 41 63 74 20 61 73 | s..**left**.**level-1**.-.Act.as |
1f500 | 20 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 | .a.station.(Level.1).router.only |
1f520 | 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 4c 65 76 65 6c 2d 31 20 6f 6e 6c 79 20 61 64 6a | ..**level-1**.-.Level-1.only.adj |
1f540 | 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 | acencies.are.formed..**level-1-2 |
1f560 | 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 | **.-.Act.as.a.station.(Level.1). |
1f580 | 72 6f 75 74 65 72 20 61 6e 64 20 61 72 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 | router.and.area.(Level.2).router |
1f5a0 | 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 4c 65 76 65 6c 2d 31 2d 32 20 61 64 6a 61 | ..**level-1-2**.-.Level-1-2.adja |
1f5c0 | 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c | cencies.are.formed.**level-2-onl |
1f5e0 | 79 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 6e 20 61 72 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 | y**.-.Act.as.an.area.(Level.2).r |
1f600 | 6f 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 4c | outer.only..**level-2-only**.-.L |
1f620 | 65 76 65 6c 2d 32 20 6f 6e 6c 79 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d | evel-2.only.adjacencies.are.form |
1f640 | 65 64 00 2a 2a 6c 6f 63 61 6c 20 73 69 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 6c | ed.**local.side.-.commands**.**l |
1f660 | 6f 63 61 6c 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 | ocal**:.All.authentication.queri |
1f680 | 65 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 6c 6f 63 61 6c 6c 79 2e 00 2a 2a 6c 6f 63 61 6c 2a | es.are.handled.locally..**local* |
1f6a0 | 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 65 6e 74 20 61 72 65 20 62 65 68 69 | *:.It.means.that.client.are.behi |
1f6c0 | 6e 64 20 73 6f 6d 65 20 72 6f 75 74 65 72 2e 00 2a 2a 6c 6f 67 2d 66 61 69 6c 2a 2a 20 49 6e 20 | nd.some.router..**log-fail**.In. |
1f6e0 | 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 61 74 74 | this.mode,.the.recursor.will.att |
1f700 | 65 6d 70 74 20 74 6f 20 76 61 6c 69 64 61 74 65 20 61 6c 6c 20 64 61 74 61 20 69 74 20 72 65 74 | empt.to.validate.all.data.it.ret |
1f720 | 72 69 65 76 65 73 20 66 72 6f 6d 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 | rieves.from.authoritative.server |
1f740 | 73 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 44 4e | s,.regardless.of.the.client's.DN |
1f760 | 53 53 45 43 20 64 65 73 69 72 65 73 2c 20 61 6e 64 20 77 69 6c 6c 20 6c 6f 67 20 74 68 65 20 76 | SSEC.desires,.and.will.log.the.v |
1f780 | 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 20 54 68 69 73 20 6d 6f 64 65 20 63 61 6e 20 | alidation.result..This.mode.can. |
1f7a0 | 62 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 72 61 20 6c | be.used.to.determine.the.extra.l |
1f7c0 | 6f 61 64 20 61 6e 64 20 61 6d 6f 75 6e 74 20 6f 66 20 70 6f 73 73 69 62 6c 79 20 62 6f 67 75 73 | oad.and.amount.of.possibly.bogus |
1f7e0 | 20 61 6e 73 77 65 72 73 20 62 65 66 6f 72 65 20 74 75 72 6e 69 6e 67 20 6f 6e 20 66 75 6c 6c 2d | .answers.before.turning.on.full- |
1f800 | 62 6c 6f 77 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 52 65 73 70 6f 6e 73 65 73 20 74 6f 20 63 | blown.validation..Responses.to.c |
1f820 | 6c 69 65 6e 74 20 71 75 65 72 69 65 73 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 77 69 | lient.queries.are.the.same.as.wi |
1f840 | 74 68 20 70 72 6f 63 65 73 73 2e 00 2a 2a 6c 6f 6f 6b 75 70 2d 61 2a 2a 20 41 20 46 6c 61 67 2e | th.process..**lookup-a**.A.Flag. |
1f860 | 00 2a 2a 6c 6f 6f 6b 75 70 2d 73 72 76 2a 2a 20 53 20 66 6c 61 67 2e 00 2a 2a 6e 61 72 72 6f 77 | .**lookup-srv**.S.flag..**narrow |
1f880 | 2a 2a 20 2d 20 55 73 65 20 6f 6c 64 20 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 77 69 74 68 20 | **.-.Use.old.style.of.TLVs.with. |
1f8a0 | 6e 61 72 72 6f 77 20 6d 65 74 72 69 63 2e 00 2a 2a 6e 65 74 2d 61 64 6d 69 6e 2a 2a 3a 20 4e 65 | narrow.metric..**net-admin**:.Ne |
1f8c0 | 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 6f 6e 73 20 28 69 6e 74 65 72 66 61 63 65 2c 20 66 69 72 | twork.operations.(interface,.fir |
1f8e0 | 65 77 61 6c 6c 2c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 29 00 2a 2a 6e 65 74 2d 62 69 6e | ewall,.routing.tables).**net-bin |
1f900 | 64 2d 73 65 72 76 69 63 65 2a 2a 3a 20 42 69 6e 64 20 61 20 73 6f 63 6b 65 74 20 74 6f 20 70 72 | d-service**:.Bind.a.socket.to.pr |
1f920 | 69 76 69 6c 65 67 65 64 20 70 6f 72 74 73 20 28 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 6c 65 73 | ivileged.ports.(port.numbers.les |
1f940 | 73 20 74 68 61 6e 20 31 30 32 34 29 00 2a 2a 6e 65 74 2d 72 61 77 2a 2a 3a 20 50 65 72 6d 69 73 | s.than.1024).**net-raw**:.Permis |
1f960 | 73 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 72 61 77 20 6e 65 74 77 6f 72 6b 20 73 6f 63 6b 65 | sion.to.create.raw.network.socke |
1f980 | 74 73 00 2a 2a 6e 6f 2a 2a 3a 20 44 6f 20 6e 6f 74 20 72 65 73 74 61 72 74 20 63 6f 6e 74 61 69 | ts.**no**:.Do.not.restart.contai |
1f9a0 | 6e 65 72 73 20 6f 6e 20 65 78 69 74 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 | ners.on.exit.**noauth**:.Authent |
1f9c0 | 69 63 61 74 69 6f 6e 20 64 69 73 61 62 6c 65 64 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 | ication.disabled.**noauth**:.Aut |
1f9e0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 69 73 61 62 6c 65 64 2e 00 2a 2a 6f 66 66 2a 2a 20 49 6e | hentication.disabled..**off**.In |
1fa00 | 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e 6f 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 | .this.mode,.no.DNSSEC.processing |
1fa20 | 20 74 61 6b 65 73 20 70 6c 61 63 65 2e 20 54 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 | .takes.place..The.recursor.will. |
1fa40 | 6e 6f 74 20 73 65 74 20 74 68 65 20 44 4e 53 53 45 43 20 4f 4b 20 28 44 4f 29 20 62 69 74 20 69 | not.set.the.DNSSEC.OK.(DO).bit.i |
1fa60 | 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 | n.the.outgoing.queries.and.will. |
1fa80 | 69 67 6e 6f 72 65 20 74 68 65 20 44 4f 20 61 6e 64 20 41 44 20 62 69 74 73 20 69 6e 20 71 75 65 | ignore.the.DO.and.AD.bits.in.que |
1faa0 | 72 69 65 73 2e 00 2a 2a 6f 6e 2d 66 61 69 6c 75 72 65 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f | ries..**on-failure**:.Restart.co |
1fac0 | 6e 74 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 65 79 20 65 78 69 74 20 77 69 74 68 20 61 20 6e | ntainers.when.they.exit.with.a.n |
1fae0 | 6f 6e 2d 7a 65 72 6f 20 65 78 69 74 20 63 6f 64 65 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 | on-zero.exit.code,.retrying.inde |
1fb00 | 66 69 6e 69 74 65 6c 79 20 28 64 65 66 61 75 6c 74 29 00 2a 2a 6f 72 64 65 72 2a 2a 20 52 75 6c | finitely.(default).**order**.Rul |
1fb20 | 65 20 6f 72 64 65 72 2e 20 52 65 71 75 69 72 65 73 20 60 3c 76 61 6c 75 65 3e 60 2e 00 2a 2a 6f | e.order..Requires.`<value>`..**o |
1fb40 | 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 | utbound-interface**.-.applicable |
1fb60 | 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 | .only.to.:ref:`source-nat`..It.c |
1fb80 | 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 | onfigures.the.interface.which.is |
1fba0 | 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 | .used.for.the.outside.traffic.th |
1fbc0 | 61 74 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 | at.this.translation.rule.applies |
1fbe0 | 20 74 6f 2e 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 | .to..**outbound-interface**.-.ap |
1fc00 | 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 | plicable.only.to.:ref:`source-na |
1fc20 | 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | t`..It.configures.the.interface. |
1fc40 | 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 72 | which.is.used.for.the.outside.tr |
1fc60 | 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 | affic.that.this.translation.rule |
1fc80 | 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 | .applies.to..Interface.groups,.i |
1fca0 | 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 | nverted.selection.and.wildcard,. |
1fcc0 | 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d | are.also.supported..**prefer**.- |
1fce0 | 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e | .Ask.client.for.IPv4.negotiation |
1fd00 | 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 | ,.do.not.fail.if.it.rejects.**pr |
1fd20 | 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 49 50 76 36 20 6e 65 67 | efer**.-.Ask.client.for.IPv6.neg |
1fd40 | 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a 65 | otiation,.do.not.fail.if.it.reje |
1fd60 | 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 | cts.**prefer**.-.ask.client.for. |
1fd80 | 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 69 6c 00 2a | mppe,.if.it.rejects.don't.fail.* |
1fda0 | 2a 70 72 65 66 65 72 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c | *prefer**.-.ask.client.for.mppe, |
1fdc0 | 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 69 6c 2e 20 28 44 65 66 61 | .if.it.rejects.don't.fail..(Defa |
1fde0 | 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 70 72 65 66 65 72 65 6e 63 65 2a 2a 20 52 75 6c 65 20 70 | ult.value).**preference**.Rule.p |
1fe00 | 72 65 66 65 72 65 6e 63 65 2e 20 52 65 71 75 69 72 65 73 20 60 3c 76 61 6c 75 65 3e 60 2e 20 44 | reference..Requires.`<value>`..D |
1fe20 | 65 66 61 75 6c 74 73 20 74 6f 20 30 20 69 66 20 6e 6f 74 20 73 65 74 2e 00 2a 2a 70 72 6f 63 65 | efaults.to.0.if.not.set..**proce |
1fe40 | 73 73 2a 2a 20 57 68 65 6e 20 64 6e 73 73 65 63 20 69 73 20 73 65 74 20 74 6f 20 70 72 6f 63 65 | ss**.When.dnssec.is.set.to.proce |
1fe60 | 73 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 70 72 | ss.the.behavior.is.similar.to.pr |
1fe80 | 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 | ocess-no-validate..However,.the. |
1fea0 | 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 76 61 6c 69 64 61 74 65 20 74 68 | recursor.will.try.to.validate.th |
1fec0 | 65 20 64 61 74 61 20 69 66 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6f 66 20 74 68 65 20 44 4f | e.data.if.at.least.one.of.the.DO |
1fee0 | 20 6f 72 20 41 44 20 62 69 74 73 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 3b | .or.AD.bits.is.set.in.the.query; |
1ff00 | 20 69 6e 20 74 68 61 74 20 63 61 73 65 2c 20 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 41 | .in.that.case,.it.will.set.the.A |
1ff20 | 44 2d 62 69 74 20 69 6e 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 77 68 65 6e 20 74 68 65 20 64 | D-bit.in.the.response.when.the.d |
1ff40 | 61 74 61 20 69 73 20 76 61 6c 69 64 61 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 2c 20 6f | ata.is.validated.successfully,.o |
1ff60 | 72 20 73 65 6e 64 20 53 45 52 56 46 41 49 4c 20 77 68 65 6e 20 74 68 65 20 76 61 6c 69 64 61 74 | r.send.SERVFAIL.when.the.validat |
1ff80 | 69 6f 6e 20 63 6f 6d 65 73 20 75 70 20 62 6f 67 75 73 2e 00 2a 2a 70 72 6f 63 65 73 73 2d 6e 6f | ion.comes.up.bogus..**process-no |
1ffa0 | 2d 76 61 6c 69 64 61 74 65 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 72 65 63 | -validate**.In.this.mode.the.rec |
1ffc0 | 75 72 73 6f 72 20 61 63 74 73 20 61 73 20 61 20 22 73 65 63 75 72 69 74 79 20 61 77 61 72 65 2c | ursor.acts.as.a."security.aware, |
1ffe0 | 20 6e 6f 6e 2d 76 61 6c 69 64 61 74 69 6e 67 22 20 6e 61 6d 65 73 65 72 76 65 72 2c 20 6d 65 61 | .non-validating".nameserver,.mea |
20000 | 6e 69 6e 67 20 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 44 4f 2d 62 69 74 20 6f 6e 20 6f | ning.it.will.set.the.DO-bit.on.o |
20020 | 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 | utgoing.queries.and.will.provide |
20040 | 20 44 4e 53 53 45 43 20 72 65 6c 61 74 65 64 20 52 52 73 65 74 73 20 28 4e 53 45 43 2c 20 52 52 | .DNSSEC.related.RRsets.(NSEC,.RR |
20060 | 53 49 47 29 20 74 6f 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 61 73 6b 20 66 6f 72 20 74 68 65 | SIG).to.clients.that.ask.for.the |
20080 | 6d 20 28 62 79 20 6d 65 61 6e 73 20 6f 66 20 61 20 44 4f 2d 62 69 74 20 69 6e 20 74 68 65 20 71 | m.(by.means.of.a.DO-bit.in.the.q |
200a0 | 75 65 72 79 29 2c 20 65 78 63 65 70 74 20 66 6f 72 20 7a 6f 6e 65 73 20 70 72 6f 76 69 64 65 64 | uery),.except.for.zones.provided |
200c0 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 75 74 68 2d 7a 6f 6e 65 73 20 73 65 74 74 69 6e 67 2e | .through.the.auth-zones.setting. |
200e0 | 20 49 74 20 77 69 6c 6c 20 6e 6f 74 20 64 6f 20 61 6e 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 69 | .It.will.not.do.any.validation.i |
20100 | 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e 6f 74 20 65 76 65 6e 20 77 68 65 6e 20 72 65 71 75 65 | n.this.mode,.not.even.when.reque |
20120 | 73 74 65 64 20 62 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 2a 2a 70 72 6f 74 6f 63 6f 6c 2a 2a | sted.by.the.client..**protocol** |
20140 | 20 2d 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 74 79 70 65 73 20 6f 66 20 70 72 6f 74 6f 63 | .-.specify.which.types.of.protoc |
20160 | 6f 6c 73 20 74 68 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 | ols.this.translation.rule.applie |
20180 | 73 20 74 6f 2e 20 4f 6e 6c 79 20 70 61 63 6b 65 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 | s.to..Only.packets.matching.the. |
201a0 | 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 20 61 72 65 20 4e 41 54 65 64 2e 20 42 79 | specified.protocol.are.NATed..By |
201c0 | 20 64 65 66 61 75 6c 74 20 74 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 20 60 61 6c 6c 60 20 70 | .default.this.applies.to.`all`.p |
201e0 | 72 6f 74 6f 63 6f 6c 73 2e 00 2a 2a 70 72 6f 74 6f 63 6f 6c 2d 73 70 65 63 69 66 69 63 2a 2a 20 | rotocols..**protocol-specific**. |
20200 | 50 20 66 6c 61 67 2e 00 2a 2a 72 61 64 69 75 73 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 | P.flag..**radius**:.All.authenti |
20220 | 63 61 74 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 62 79 20 61 20 | cation.queries.are.handled.by.a. |
20240 | 63 6f 6e 66 69 67 75 72 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 2a 2a 72 61 6e 64 | configured.RADIUS.server..**rand |
20260 | 6f 6d 2a 2a 20 2d 20 52 61 6e 64 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 | om**.-.Random.interface.identifi |
20280 | 65 72 20 66 6f 72 20 49 50 76 36 00 2a 2a 72 65 67 65 78 70 2a 2a 20 52 65 67 75 6c 61 72 20 65 | er.for.IPv6.**regexp**.Regular.e |
202a0 | 78 70 72 65 73 73 69 6f 6e 2e 20 52 65 71 75 69 72 65 73 20 60 3c 76 61 6c 75 65 3e 60 2e 00 2a | xpression..Requires.`<value>`..* |
202c0 | 2a 72 65 6d 6f 74 65 20 73 69 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 72 65 70 6c | *remote.side.-.commands**.**repl |
202e0 | 61 63 65 2a 2a 3a 20 54 65 72 6d 69 6e 61 74 65 20 66 69 72 73 74 20 73 65 73 73 69 6f 6e 20 77 | ace**:.Terminate.first.session.w |
20300 | 68 65 6e 20 73 65 63 6f 6e 64 20 69 73 20 61 75 74 68 6f 72 69 7a 65 64 20 2a 2a 28 64 65 66 61 | hen.second.is.authorized.**(defa |
20320 | 75 6c 74 29 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 3a 2a 2a 20 52 65 6c 61 79 20 69 6e 66 6f 72 6d | ult)**.**replace:**.Relay.inform |
20340 | 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 61 20 70 61 63 6b 65 | ation.already.present.in.a.packe |
20360 | 74 20 69 73 20 73 74 72 69 70 70 65 64 20 61 6e 64 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 | t.is.stripped.and.replaced.with. |
20380 | 74 68 65 20 72 6f 75 74 65 72 27 73 20 6f 77 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 | the.router's.own.relay.informati |
203a0 | 6f 6e 20 73 65 74 2e 00 2a 2a 72 65 70 6c 61 63 65 6d 65 6e 74 2a 2a 20 52 65 70 6c 61 63 65 6d | on.set..**replacement**.Replacem |
203c0 | 65 6e 74 20 44 4e 53 20 6e 61 6d 65 2e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 52 65 71 75 | ent.DNS.name..**require**.-.Requ |
203e0 | 69 72 65 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 72 65 2a 2a | ire.IPv4.negotiation.**require** |
20400 | 20 2d 20 52 65 71 75 69 72 65 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 2a 2a 72 65 | .-.Require.IPv6.negotiation.**re |
20420 | 71 75 69 72 65 2a 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 | quire**.-.ask.client.for.mppe,.i |
20440 | 66 20 69 74 20 72 65 6a 65 63 74 73 20 64 72 6f 70 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 2a 2a 72 | f.it.rejects.drop.connection.**r |
20460 | 65 73 6f 6c 76 65 2d 75 72 69 2a 2a 20 55 20 66 6c 61 67 2e 00 2a 2a 72 69 67 68 74 2a 2a 00 2a | esolve-uri**.U.flag..**right**.* |
20480 | 2a 73 65 72 76 69 63 65 2a 2a 20 53 65 72 76 69 63 65 20 74 79 70 65 2e 20 52 65 71 75 69 72 65 | *service**.Service.type..Require |
204a0 | 73 20 60 3c 76 61 6c 75 65 3e 60 2e 00 2a 2a 73 65 74 70 63 61 70 2a 2a 3a 20 43 61 70 61 62 69 | s.`<value>`..**setpcap**:.Capabi |
204c0 | 6c 69 74 79 20 73 65 74 73 20 28 66 72 6f 6d 20 62 6f 75 6e 64 65 64 20 6f 72 20 69 6e 68 65 72 | lity.sets.(from.bounded.or.inher |
204e0 | 69 74 65 64 20 73 65 74 29 00 2a 2a 73 68 61 72 65 64 2a 2a 3a 20 4d 75 6c 74 69 70 6c 65 20 63 | ited.set).**shared**:.Multiple.c |
20500 | 6c 69 65 6e 74 73 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 2e 20 2a | lients.share.the.same.network..* |
20520 | 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 73 6f 75 72 63 65 2a 2a 20 2d 20 73 70 65 63 69 66 | *(default)**.**source**.-.specif |
20540 | 69 65 73 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 68 65 20 4e 41 54 20 74 72 61 6e 73 6c | ies.which.packets.the.NAT.transl |
20560 | 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 20 62 61 73 65 64 20 6f 6e 20 74 | ation.rule.applies.to.based.on.t |
20580 | 68 65 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 | he.packets.source.IP.address.and |
205a0 | 2f 6f 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 4f 6e 6c 79 20 6d 61 74 63 68 69 6e 67 20 70 | /or.source.port..Only.matching.p |
205c0 | 61 63 6b 65 74 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 66 6f 72 20 4e 41 54 2e 00 2a | ackets.are.considered.for.NAT..* |
205e0 | 2a 73 79 73 2d 61 64 6d 69 6e 2a 2a 3a 20 41 64 6d 69 6e 69 73 74 61 74 69 6f 6e 20 6f 70 65 72 | *sys-admin**:.Administation.oper |
20600 | 61 74 69 6f 6e 73 20 28 71 75 6f 74 61 63 74 6c 2c 20 6d 6f 75 6e 74 2c 20 73 65 74 68 6f 73 74 | ations.(quotactl,.mount,.sethost |
20620 | 6e 61 6d 65 2c 20 73 65 74 64 6f 6d 61 69 6e 61 6d 65 29 00 2a 2a 73 79 73 2d 74 69 6d 65 2a 2a | name,.setdomainame).**sys-time** |
20640 | 3a 20 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 73 65 74 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b | :.Permission.to.set.system.clock |
20660 | 00 2a 2a 74 72 61 6e 73 69 74 69 6f 6e 2a 2a 20 2d 20 53 65 6e 64 20 61 6e 64 20 61 63 63 65 70 | .**transition**.-.Send.and.accep |
20680 | 74 20 62 6f 74 68 20 73 74 79 6c 65 73 20 6f 66 20 54 4c 56 73 20 64 75 72 69 6e 67 20 74 72 61 | t.both.styles.of.TLVs.during.tra |
206a0 | 6e 73 69 74 69 6f 6e 2e 00 2a 2a 75 70 73 74 72 65 61 6d 3a 2a 2a 20 54 68 65 20 75 70 73 74 72 | nsition..**upstream:**.The.upstr |
206c0 | 65 61 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 74 68 65 20 6f 75 74 | eam.network.interface.is.the.out |
206e0 | 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 72 65 73 70 6f 6e 73 | going.interface.which.is.respons |
20700 | 69 62 6c 65 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 61 76 61 69 6c 61 | ible.for.communicating.to.availa |
20720 | 62 6c 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 61 20 73 6f 75 72 63 65 73 2e 20 54 68 65 72 | ble.multicast.data.sources..Ther |
20740 | 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 | e.can.only.be.one.upstream.inter |
20760 | 66 61 63 65 2e 00 2a 2a 76 61 6c 69 64 61 74 65 2a 2a 20 54 68 65 20 68 69 67 68 65 73 74 20 6d | face..**validate**.The.highest.m |
20780 | 6f 64 65 20 6f 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 49 6e 20 74 68 69 | ode.of.DNSSEC.processing..In.thi |
207a0 | 73 20 6d 6f 64 65 2c 20 61 6c 6c 20 71 75 65 72 69 65 73 20 77 69 6c 6c 20 62 65 20 76 61 6c 69 | s.mode,.all.queries.will.be.vali |
207c0 | 64 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 6e 73 77 65 72 65 64 20 77 69 74 68 20 | dated.and.will.be.answered.with. |
207e0 | 61 20 53 45 52 56 46 41 49 4c 20 69 6e 20 63 61 73 65 20 6f 66 20 62 6f 67 75 73 20 64 61 74 61 | a.SERVFAIL.in.case.of.bogus.data |
20800 | 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 72 65 71 | ,.regardless.of.the.client's.req |
20820 | 75 65 73 74 2e 00 2a 2a 76 6c 61 6e 2a 2a 3a 20 4f 6e 65 20 56 4c 41 4e 20 70 65 72 20 63 6c 69 | uest..**vlan**:.One.VLAN.per.cli |
20840 | 65 6e 74 2e 00 2a 2a 77 69 64 65 2a 2a 20 2d 20 55 73 65 20 6e 65 77 20 73 74 79 6c 65 20 6f 66 | ent..**wide**.-.Use.new.style.of |
20860 | 20 54 4c 56 73 20 74 6f 20 63 61 72 72 79 20 77 69 64 65 72 20 6d 65 74 72 69 63 2e 00 2a 2a 78 | .TLVs.to.carry.wider.metric..**x |
20880 | 3a 78 3a 78 3a 78 2a 2a 20 2d 20 53 70 65 63 69 66 79 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 | :x:x:x**.-.Specify.interface.ide |
208a0 | 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a 62 67 70 64 2a 20 73 75 70 70 6f 72 74 73 | ntifier.for.IPv6.*bgpd*.supports |
208c0 | 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 | .Multiprotocol.Extension.for.BGP |
208e0 | 2e 20 53 6f 20 69 66 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 75 70 70 6f 72 74 73 20 74 | ..So.if.a.remote.peer.supports.t |
20900 | 68 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 2a 62 67 70 64 2a 20 63 61 6e 20 65 78 63 68 61 6e 67 65 | he.protocol,.*bgpd*.can.exchange |
20920 | 20 49 50 76 36 20 61 6e 64 2f 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 | .IPv6.and/or.multicast.routing.i |
20940 | 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 30 00 30 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 | nformation..0.0.if.not.defined,. |
20960 | 77 68 69 63 68 20 6d 65 61 6e 73 20 6e 6f 20 72 65 66 72 65 73 68 69 6e 67 2e 00 30 20 69 66 20 | which.means.no.refreshing..0.if. |
20980 | 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 30 30 30 30 30 30 00 30 30 31 30 31 30 00 30 30 31 31 30 | not.defined..000000.001010.00110 |
209a0 | 30 00 30 30 31 31 31 30 00 30 31 30 30 31 30 00 30 31 30 31 30 30 00 30 31 30 31 31 30 00 30 31 | 0.001110.010010.010100.010110.01 |
209c0 | 31 30 31 30 00 30 31 31 31 30 30 00 30 31 31 31 31 30 00 30 3a 20 44 69 73 61 62 6c 65 20 44 41 | 1010.011100.011110.0:.Disable.DA |
209e0 | 44 00 31 00 31 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 31 2d 74 6f 2d 31 20 4e 41 54 | D.1.1.if.not.defined..1-to-1.NAT |
20a00 | 00 31 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 00 31 2e 20 46 | .1..Create.an.event.handler.1..F |
20a20 | 69 72 73 74 20 70 61 63 6b 65 74 20 69 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 65 68 74 30 2c | irst.packet.is.received.on.eht0, |
20a40 | 20 77 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e | .with.destination.address.192.0. |
20a60 | 32 2e 31 30 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 61 6e 64 20 64 65 73 74 69 6e 61 74 | 2.100,.protocol.tcp.and.destinat |
20a80 | 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 73 73 75 6d 65 20 73 75 63 68 20 64 65 73 74 69 | ion.port.1122..Assume.such.desti |
20aa0 | 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f | nation.address.is.reachable.thro |
20ac0 | 75 67 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 31 2e 00 31 30 00 31 30 20 2d 20 31 30 20 4d | ugh.interface.eth1..10.10.-.10.M |
20ae0 | 42 69 74 2f 73 00 31 30 2e 30 2e 30 2e 30 20 74 6f 20 31 30 2e 32 35 35 2e 32 35 35 2e 32 35 35 | Bit/s.10.0.0.0.to.10.255.255.255 |
20b00 | 20 28 43 49 44 52 3a 20 31 30 2e 30 2e 30 2e 30 2f 38 29 00 31 30 30 20 2d 20 31 30 30 20 4d 42 | .(CIDR:.10.0.0.0/8).100.-.100.MB |
20b20 | 69 74 2f 73 00 31 30 30 30 20 2d 20 31 20 47 42 69 74 2f 73 00 31 30 30 30 30 20 2d 20 31 30 20 | it/s.1000.-.1.GBit/s.10000.-.10. |
20b40 | 47 42 69 74 2f 73 00 31 30 30 30 30 30 20 2d 20 31 30 30 20 47 42 69 74 2f 73 00 31 30 30 30 31 | GBit/s.100000.-.100.GBit/s.10001 |
20b60 | 30 00 31 30 30 31 30 30 00 31 30 30 31 31 30 00 31 30 31 31 31 30 00 31 31 00 31 31 39 00 31 32 | 0.100100.100110.101110.11.119.12 |
20b80 | 00 31 32 31 2c 20 32 34 39 00 31 33 00 31 34 00 31 35 00 31 36 00 31 37 00 31 37 32 2e 31 36 2e | .121,.249.13.14.15.16.17.172.16. |
20ba0 | 30 2e 30 20 74 6f 20 31 37 32 2e 33 31 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 37 32 | 0.0.to.172.31.255.255.(CIDR:.172 |
20bc0 | 2e 31 36 2e 30 2e 30 2f 31 32 29 00 31 38 00 31 39 00 31 39 32 2e 31 36 38 2e 30 2e 30 20 74 6f | .16.0.0/12).18.19.192.168.0.0.to |
20be0 | 20 31 39 32 2e 31 36 38 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 39 32 2e 31 36 38 2e | .192.168.255.255.(CIDR:.192.168. |
20c00 | 30 2e 30 2f 31 36 29 00 31 3a 20 45 6e 61 62 6c 65 20 44 41 44 20 28 64 65 66 61 75 6c 74 29 00 | 0.0/16).1:.Enable.DAD.(default). |
20c20 | 32 00 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 00 32 2e 20 | 2.2..Add.regex.to.the.script.2.. |
20c40 | 53 69 6e 63 65 20 74 68 69 73 20 69 73 20 74 68 65 20 66 69 72 73 74 20 70 61 63 6b 65 74 2c 20 | Since.this.is.the.first.packet,. |
20c60 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 20 6f 66 20 74 68 69 73 20 63 6f 6e 6e 65 63 | connection.status.of.this.connec |
20c80 | 74 69 6f 6e 2c 20 73 6f 20 66 61 72 20 69 73 20 2a 2a 6e 65 77 2a 2a 2e 20 53 6f 20 6e 65 69 74 | tion,.so.far.is.**new**..So.neit |
20ca0 | 68 65 72 20 72 75 6c 65 20 31 30 20 6e 6f 72 20 32 30 20 61 72 65 20 76 61 6c 69 64 2e 00 32 30 | her.rule.10.nor.20.are.valid..20 |
20cc0 | 00 32 31 00 32 32 00 32 33 00 32 35 30 30 20 2d 20 32 2e 35 20 47 42 69 74 2f 73 00 32 35 30 30 | .21.22.23.2500.-.2.5.GBit/s.2500 |
20ce0 | 30 20 2d 20 32 35 20 47 42 69 74 2f 73 00 32 35 32 00 32 36 00 32 38 00 32 3a 20 45 6e 61 62 6c | 0.-.25.GBit/s.252.26.28.2:.Enabl |
20d00 | 65 20 44 41 44 2c 20 61 6e 64 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f | e.DAD,.and.disable.IPv6.operatio |
20d20 | 6e 20 69 66 20 4d 41 43 2d 62 61 73 65 64 20 64 75 70 6c 69 63 61 74 65 20 6c 69 6e 6b 2d 6c 6f | n.if.MAC-based.duplicate.link-lo |
20d40 | 63 61 6c 20 61 64 64 72 65 73 73 20 68 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2e 00 32 46 41 20 | cal.address.has.been.found..2FA. |
20d60 | 4f 54 50 20 73 75 70 70 6f 72 74 00 33 00 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 61 74 68 | OTP.support.3.3..Add.a.full.path |
20d80 | 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 00 33 30 00 33 34 00 33 36 00 33 38 00 34 00 34 2e 20 | .to.the.script.30.34.36.38.4.4.. |
20da0 | 41 64 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 00 34 2e 20 4f 6e 63 65 20 | Add.optional.parameters.4..Once. |
20dc0 | 61 6e 73 77 65 72 20 66 72 6f 6d 20 73 65 72 76 65 72 20 31 39 32 2e 30 2e 32 2e 31 30 30 20 69 | answer.from.server.192.0.2.100.i |
20de0 | 73 20 73 65 65 6e 20 69 6e 20 6f 70 70 6f 73 69 74 65 20 64 69 72 65 63 74 69 6f 6e 2c 20 63 6f | s.seen.in.opposite.direction,.co |
20e00 | 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 77 69 6c 6c 20 62 65 20 74 72 69 67 67 65 72 65 64 | nnection.state.will.be.triggered |
20e20 | 20 74 6f 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 73 6f 20 74 68 69 73 20 72 65 70 | .to.**established**,.so.this.rep |
20e40 | 6c 79 20 69 73 20 61 63 63 65 70 74 65 64 20 69 6e 20 72 75 6c 65 20 31 30 2e 00 34 30 20 4d 48 | ly.is.accepted.in.rule.10..40.MH |
20e60 | 7a 20 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 73 77 69 74 63 68 20 74 68 65 69 72 20 70 72 69 6d | z.channels.may.switch.their.prim |
20e80 | 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 73 20 69 66 20 6e 65 | ary.and.secondary.channels.if.ne |
20ea0 | 65 64 65 64 20 6f 72 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e | eded.or.creation.of.40.MHz.chann |
20ec0 | 65 6c 20 6d 61 79 62 65 20 72 65 6a 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 6f 76 65 72 6c | el.maybe.rejected.based.on.overl |
20ee0 | 61 70 70 69 6e 67 20 42 53 53 65 73 2e 20 54 68 65 73 65 20 63 68 61 6e 67 65 73 20 61 72 65 20 | apping.BSSes..These.changes.are. |
20f00 | 64 6f 6e 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 68 6f 73 74 61 70 64 20 | done.automatically.when.hostapd. |
20f20 | 69 73 20 73 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c | is.setting.up.the.40.MHz.channel |
20f40 | 2e 00 34 30 30 30 30 20 2d 20 34 30 20 47 42 69 74 2f 73 00 34 32 00 34 34 00 34 36 00 35 00 35 | ..40000.-.40.GBit/s.42.44.46.5.5 |
20f60 | 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 35 2e 20 53 65 63 6f 6e 64 20 70 61 63 6b 65 | .if.not.defined..5..Second.packe |
20f80 | 74 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 72 65 63 65 69 76 65 | t.for.this.connection.is.receive |
20fa0 | 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 53 69 6e 63 65 20 63 6f 6e 6e 65 63 74 69 6f | d.by.the.router..Since.connectio |
20fc0 | 6e 20 73 74 61 74 65 20 69 73 20 2a 2a 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 74 68 65 6e | n.state.is.**established**,.then |
20fe0 | 20 72 75 6c 65 20 31 30 20 69 73 20 68 69 74 2c 20 61 6e 64 20 61 20 6e 65 77 20 65 6e 74 72 79 | .rule.10.is.hit,.and.a.new.entry |
21000 | 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 46 54 30 31 20 69 73 20 61 64 64 65 64 20 | .in.the.flowtable.FT01.is.added. |
21020 | 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 35 30 30 30 20 2d 20 35 20 47 42 | for.this.connection..5000.-.5.GB |
21040 | 69 74 2f 73 00 35 30 30 30 30 20 2d 20 35 30 20 47 42 69 74 2f 73 00 35 34 00 36 00 36 2e 20 41 | it/s.50000.-.50.GBit/s.54.6.6..A |
21060 | 6c 6c 20 73 75 62 73 65 63 75 65 6e 74 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 73 6b 69 70 20 | ll.subsecuent.packets.will.skip. |
21080 | 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 61 74 68 2c 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 6f 66 | traditional.path,.and.will.be.of |
210a0 | 66 6c 6f 61 64 65 64 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 2a 2a 46 61 73 74 20 | floaded.and.will.use.the.**Fast. |
210c0 | 50 61 74 68 2a 2a 2e 00 36 36 00 36 36 25 20 6f 66 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 | Path**..66.66%.of.traffic.is.rou |
210e0 | 74 65 64 20 74 6f 20 65 74 68 30 2c 20 65 74 68 31 20 67 65 74 73 20 33 33 25 20 6f 66 20 74 72 | ted.to.eth0,.eth1.gets.33%.of.tr |
21100 | 61 66 66 69 63 2e 00 36 37 00 36 39 00 36 69 6e 34 20 28 53 49 54 29 00 36 69 6e 34 20 75 73 65 | affic..67.69.6in4.(SIT).6in4.use |
21120 | 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 6f 20 65 6e 63 61 70 73 75 6c 61 74 65 20 49 50 76 36 20 | s.tunneling.to.encapsulate.IPv6. |
21140 | 74 72 61 66 66 69 63 20 6f 76 65 72 20 49 50 76 34 20 6c 69 6e 6b 73 20 61 73 20 64 65 66 69 6e | traffic.over.IPv4.links.as.defin |
21160 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 32 31 33 60 2e 20 54 68 65 20 36 69 6e 34 20 74 72 61 66 | ed.in.:rfc:`4213`..The.6in4.traf |
21180 | 66 69 63 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 49 50 76 34 20 69 6e 73 69 64 65 20 49 50 76 | fic.is.sent.over.IPv4.inside.IPv |
211a0 | 34 20 70 61 63 6b 65 74 73 20 77 68 6f 73 65 20 49 50 20 68 65 61 64 65 72 73 20 68 61 76 65 20 | 4.packets.whose.IP.headers.have. |
211c0 | 74 68 65 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 73 65 74 20 74 6f 20 34 31 | the.IP.protocol.number.set.to.41 |
211e0 | 2e 20 54 68 69 73 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 69 73 20 73 70 65 63 69 66 | ..This.protocol.number.is.specif |
21200 | 69 63 61 6c 6c 79 20 64 65 73 69 67 6e 61 74 65 64 20 66 6f 72 20 49 50 76 36 20 65 6e 63 61 70 | ically.designated.for.IPv6.encap |
21220 | 73 75 6c 61 74 69 6f 6e 2c 20 74 68 65 20 49 50 76 34 20 70 61 63 6b 65 74 20 68 65 61 64 65 72 | sulation,.the.IPv4.packet.header |
21240 | 20 69 73 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 | .is.immediately.followed.by.the. |
21260 | 49 50 76 36 20 70 61 63 6b 65 74 20 62 65 69 6e 67 20 63 61 72 72 69 65 64 2e 20 54 68 65 20 65 | IPv6.packet.being.carried..The.e |
21280 | 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 76 65 72 68 65 61 64 20 69 73 20 74 68 65 20 73 69 7a | ncapsulation.overhead.is.the.siz |
212a0 | 65 20 6f 66 20 74 68 65 20 49 50 76 34 20 68 65 61 64 65 72 20 6f 66 20 32 30 20 62 79 74 65 73 | e.of.the.IPv4.header.of.20.bytes |
212c0 | 2c 20 74 68 65 72 65 66 6f 72 65 20 77 69 74 68 20 61 6e 20 4d 54 55 20 6f 66 20 31 35 30 30 20 | ,.therefore.with.an.MTU.of.1500. |
212e0 | 62 79 74 65 73 2c 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 6f 66 20 31 34 38 30 20 62 79 74 65 | bytes,.IPv6.packets.of.1480.byte |
21300 | 73 20 63 61 6e 20 62 65 20 73 65 6e 74 20 77 69 74 68 6f 75 74 20 66 72 61 67 6d 65 6e 74 61 74 | s.can.be.sent.without.fragmentat |
21320 | 69 6f 6e 2e 20 54 68 69 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 65 63 68 6e 69 71 75 65 20 69 73 | ion..This.tunneling.technique.is |
21340 | 20 66 72 65 71 75 65 6e 74 6c 79 20 75 73 65 64 20 62 79 20 49 50 76 36 20 74 75 6e 6e 65 6c 20 | .frequently.used.by.IPv6.tunnel. |
21360 | 62 72 6f 6b 65 72 73 20 6c 69 6b 65 20 60 48 75 72 72 69 63 61 6e 65 20 45 6c 65 63 74 72 69 63 | brokers.like.`Hurricane.Electric |
21380 | 60 5f 2e 00 37 00 37 30 00 38 00 38 30 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 | `_..7.70.8.802.1q.VLAN.interface |
213a0 | 73 20 61 72 65 20 72 65 70 72 65 73 65 6e 74 65 64 20 61 73 20 76 69 72 74 75 61 6c 20 73 75 62 | s.are.represented.as.virtual.sub |
213c0 | 2d 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 56 79 4f 53 2e 20 54 68 65 20 74 65 72 6d 20 75 73 | -interfaces.in.VyOS..The.term.us |
213e0 | 65 64 20 66 6f 72 20 74 68 69 73 20 69 73 20 60 60 76 69 66 60 60 2e 00 39 00 3a 61 62 62 72 3a | ed.for.this.is.``vif``..9.:abbr: |
21400 | 60 41 46 49 20 28 41 64 64 72 65 73 73 20 66 61 6d 69 6c 79 20 61 75 74 68 6f 72 69 74 79 20 69 | `AFI.(Address.family.authority.i |
21420 | 64 65 6e 74 69 66 69 65 72 29 60 20 2d 20 60 60 34 39 60 60 20 54 68 65 20 41 46 49 20 76 61 6c | dentifier)`.-.``49``.The.AFI.val |
21440 | 75 65 20 34 39 20 69 73 20 77 68 61 74 20 49 53 2d 49 53 20 75 73 65 73 20 66 6f 72 20 70 72 69 | ue.49.is.what.IS-IS.uses.for.pri |
21460 | 76 61 74 65 20 61 64 64 72 65 73 73 69 6e 67 2e 00 3a 61 62 62 72 3a 60 41 52 50 20 28 41 64 64 | vate.addressing..:abbr:`ARP.(Add |
21480 | 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 | ress.Resolution.Protocol)`.is.a. |
214a0 | 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 | communication.protocol.used.for. |
214c0 | 64 69 73 63 6f 76 65 72 69 6e 67 20 74 68 65 20 6c 69 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 | discovering.the.link.layer.addre |
214e0 | 73 73 2c 20 73 75 63 68 20 61 73 20 61 20 4d 41 43 20 61 64 64 72 65 73 73 2c 20 61 73 73 6f 63 | ss,.such.as.a.MAC.address,.assoc |
21500 | 69 61 74 65 64 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 6e 65 74 20 6c 61 79 65 | iated.with.a.given.internet.laye |
21520 | 72 20 61 64 64 72 65 73 73 2c 20 74 79 70 69 63 61 6c 6c 79 20 61 6e 20 49 50 76 34 20 61 64 64 | r.address,.typically.an.IPv4.add |
21540 | 72 65 73 73 2e 20 54 68 69 73 20 6d 61 70 70 69 6e 67 20 69 73 20 61 20 63 72 69 74 69 63 61 6c | ress..This.mapping.is.a.critical |
21560 | 20 66 75 6e 63 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 | .function.in.the.Internet.protoc |
21580 | 6f 6c 20 73 75 69 74 65 2e 20 41 52 50 20 77 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 31 39 38 | ol.suite..ARP.was.defined.in.198 |
215a0 | 32 20 62 79 20 3a 72 66 63 3a 60 38 32 36 60 20 77 68 69 63 68 20 69 73 20 49 6e 74 65 72 6e 65 | 2.by.:rfc:`826`.which.is.Interne |
215c0 | 74 20 53 74 61 6e 64 61 72 64 20 53 54 44 20 33 37 2e 00 3a 61 62 62 72 3a 60 42 46 44 20 28 42 | t.Standard.STD.37..:abbr:`BFD.(B |
215e0 | 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 63 74 69 6f | idirectional.Forwarding.Detectio |
21600 | 6e 29 60 20 69 73 20 64 65 73 63 72 69 62 65 64 20 61 6e 64 20 65 78 74 65 6e 64 65 64 20 62 79 | n)`.is.described.and.extended.by |
21620 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 52 46 43 73 3a 20 3a 72 66 63 3a 60 35 38 38 30 60 | .the.following.RFCs:.:rfc:`5880` |
21640 | 2c 20 3a 72 66 63 3a 60 35 38 38 31 60 20 61 6e 64 20 3a 72 66 63 3a 60 35 38 38 33 60 2e 00 3a | ,.:rfc:`5881`.and.:rfc:`5883`..: |
21660 | 61 62 62 72 3a 60 42 47 50 20 28 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 | abbr:`BGP.(Border.Gateway.Protoc |
21680 | 6f 6c 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 45 78 74 65 72 69 6f 72 20 47 61 74 65 | ol)`.is.one.of.the.Exterior.Gate |
216a0 | 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 74 68 65 20 64 65 20 66 61 63 74 6f 20 73 | way.Protocols.and.the.de.facto.s |
216c0 | 74 61 6e 64 61 72 64 20 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | tandard.interdomain.routing.prot |
216e0 | 6f 63 6f 6c 2e 20 54 68 65 20 6c 61 74 65 73 74 20 42 47 50 20 76 65 72 73 69 6f 6e 20 69 73 20 | ocol..The.latest.BGP.version.is. |
21700 | 34 2e 20 42 47 50 2d 34 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 | 4..BGP-4.is.described.in.:rfc:`1 |
21720 | 37 37 31 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 20 3a 72 66 63 3a 60 34 32 37 31 60 2e | 771`.and.updated.by.:rfc:`4271`. |
21740 | 20 3a 72 66 63 3a 60 32 38 35 38 60 20 61 64 64 73 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 | .:rfc:`2858`.adds.multiprotocol. |
21760 | 73 75 70 70 6f 72 74 20 74 6f 20 42 47 50 2e 00 3a 61 62 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 | support.to.BGP..:abbr:`CKN.(MACs |
21780 | 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 | ec.connectivity.association.name |
217a0 | 29 60 20 6b 65 79 00 3a 61 62 62 72 3a 60 44 4d 56 50 4e 20 28 44 79 6e 61 6d 69 63 20 4d 75 6c | )`.key.:abbr:`DMVPN.(Dynamic.Mul |
217c0 | 74 69 70 6f 69 6e 74 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 | tipoint.Virtual.Private.Network) |
217e0 | 60 20 69 73 20 61 20 64 79 6e 61 6d 69 63 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 | `.is.a.dynamic.:abbr:`VPN.(Virtu |
21800 | 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 65 63 68 6e 6f 6c 6f 67 79 20 | al.Private.Network)`.technology. |
21820 | 6f 72 69 67 69 6e 61 6c 6c 79 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 43 69 73 63 6f 2e 20 57 | originally.developed.by.Cisco..W |
21840 | 68 69 6c 65 20 74 68 65 69 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 77 61 73 20 73 6f | hile.their.implementation.was.so |
21860 | 6d 65 77 68 61 74 20 70 72 6f 70 72 69 65 74 61 72 79 2c 20 74 68 65 20 75 6e 64 65 72 6c 79 69 | mewhat.proprietary,.the.underlyi |
21880 | 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 61 63 74 75 61 6c 6c 79 20 73 74 61 | ng.technologies.are.actually.sta |
218a0 | 6e 64 61 72 64 73 20 62 61 73 65 64 2e 20 54 68 65 20 74 68 72 65 65 20 74 65 63 68 6e 6f 6c 6f | ndards.based..The.three.technolo |
218c0 | 67 69 65 73 20 61 72 65 3a 00 3a 61 62 62 72 3a 60 44 4e 41 54 20 28 44 65 73 74 69 6e 61 74 69 | gies.are:.:abbr:`DNAT.(Destinati |
218e0 | 6f 6e 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 | on.Network.Address.Translation)` |
21900 | 20 63 68 61 6e 67 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | .changes.the.destination.address |
21920 | 20 6f 66 20 70 61 63 6b 65 74 73 20 70 61 73 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 | .of.packets.passing.through.the. |
21940 | 72 6f 75 74 65 72 2c 20 77 68 69 6c 65 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 | router,.while.:ref:`source-nat`. |
21960 | 63 68 61 6e 67 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 70 61 | changes.the.source.address.of.pa |
21980 | 63 6b 65 74 73 2e 20 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 77 68 | ckets..DNAT.is.typically.used.wh |
219a0 | 65 6e 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 28 70 75 62 6c 69 63 29 20 68 6f 73 74 20 6e 65 65 | en.an.external.(public).host.nee |
219c0 | 64 73 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 73 65 73 73 69 6f 6e 20 77 69 74 68 20 61 6e | ds.to.initiate.a.session.with.an |
219e0 | 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 20 41 20 63 75 73 74 | .internal.(private).host..A.cust |
21a00 | 6f 6d 65 72 20 6e 65 65 64 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 70 72 69 76 61 74 65 20 73 | omer.needs.to.access.a.private.s |
21a20 | 65 72 76 69 63 65 20 62 65 68 69 6e 64 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 63 | ervice.behind.the.routers.public |
21a40 | 20 49 50 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 | .IP..A.connection.is.established |
21a60 | 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 | .with.the.routers.public.IP.addr |
21a80 | 65 73 73 20 6f 6e 20 61 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 70 6f 72 74 20 61 6e 64 20 74 68 75 | ess.on.a.well.known.port.and.thu |
21aa0 | 73 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 69 73 20 70 6f 72 74 20 69 73 20 72 | s.all.traffic.for.this.port.is.r |
21ac0 | 65 77 72 69 74 74 65 6e 20 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c | ewritten.to.address.the.internal |
21ae0 | 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 2e 00 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 74 | .(private).host..:abbr:`EAP.(Ext |
21b00 | 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 | ensible.Authentication.Protocol) |
21b20 | 60 20 6f 76 65 72 20 4c 41 4e 20 28 45 41 50 6f 4c 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 | `.over.LAN.(EAPoL).is.a.network. |
21b40 | 70 6f 72 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 | port.authentication.protocol.use |
21b60 | 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 58 20 28 50 6f 72 74 20 42 61 73 65 64 20 4e 65 74 | d.in.IEEE.802.1X.(Port.Based.Net |
21b80 | 77 6f 72 6b 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 20 64 65 76 65 6c 6f 70 65 64 20 74 | work.Access.Control).developed.t |
21ba0 | 6f 20 67 69 76 65 20 61 20 67 65 6e 65 72 69 63 20 6e 65 74 77 6f 72 6b 20 73 69 67 6e 2d 6f 6e | o.give.a.generic.network.sign-on |
21bc0 | 20 74 6f 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 73 2e 00 3a 61 | .to.access.network.resources..:a |
21be0 | 62 62 72 3a 60 45 55 49 2d 36 34 20 28 36 34 2d 42 69 74 20 45 78 74 65 6e 64 65 64 20 55 6e 69 | bbr:`EUI-64.(64-Bit.Extended.Uni |
21c00 | 71 75 65 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e | que.Identifier)`.as.specified.in |
21c20 | 20 3a 72 66 63 3a 60 34 32 39 31 60 20 61 6c 6c 6f 77 73 20 61 20 68 6f 73 74 20 74 6f 20 61 73 | .:rfc:`4291`.allows.a.host.to.as |
21c40 | 73 69 67 6e 20 69 74 65 73 6c 66 20 61 20 75 6e 69 71 75 65 20 36 34 2d 42 69 74 20 49 50 76 36 | sign.iteslf.a.unique.64-Bit.IPv6 |
21c60 | 20 61 64 64 72 65 73 73 2e 00 3a 61 62 62 72 3a 60 47 45 4e 45 56 45 20 28 47 65 6e 65 72 69 63 | .address..:abbr:`GENEVE.(Generic |
21c80 | 20 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 45 6e 63 61 70 73 75 6c | .Network.Virtualization.Encapsul |
21ca0 | 61 74 69 6f 6e 29 60 20 73 75 70 70 6f 72 74 73 20 61 6c 6c 20 6f 66 20 74 68 65 20 63 61 70 61 | ation)`.supports.all.of.the.capa |
21cc0 | 62 69 6c 69 74 69 65 73 20 6f 66 20 3a 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 | bilities.of.:abbr:`VXLAN.(Virtua |
21ce0 | 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 2c 20 3a 61 62 62 72 3a 60 4e 56 47 52 45 | l.Extensible.LAN)`,.:abbr:`NVGRE |
21d00 | 20 28 4e 65 74 77 6f 72 6b 20 56 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 69 6e 67 20 47 | .(Network.Virtualization.using.G |
21d20 | 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 | eneric.Routing.Encapsulation)`,. |
21d40 | 61 6e 64 20 3a 61 62 62 72 3a 60 53 54 54 20 28 53 74 61 74 65 6c 65 73 73 20 54 72 61 6e 73 70 | and.:abbr:`STT.(Stateless.Transp |
21d60 | 6f 72 74 20 54 75 6e 6e 65 6c 69 6e 67 29 60 20 61 6e 64 20 77 61 73 20 64 65 73 69 67 6e 65 64 | ort.Tunneling)`.and.was.designed |
21d80 | 20 74 6f 20 6f 76 65 72 63 6f 6d 65 20 74 68 65 69 72 20 70 65 72 63 65 69 76 65 64 20 6c 69 6d | .to.overcome.their.perceived.lim |
21da0 | 69 74 61 74 69 6f 6e 73 2e 20 4d 61 6e 79 20 62 65 6c 69 65 76 65 20 47 45 4e 45 56 45 20 63 6f | itations..Many.believe.GENEVE.co |
21dc0 | 75 6c 64 20 65 76 65 6e 74 75 61 6c 6c 79 20 72 65 70 6c 61 63 65 20 74 68 65 73 65 20 65 61 72 | uld.eventually.replace.these.ear |
21de0 | 6c 69 65 72 20 66 6f 72 6d 61 74 73 20 65 6e 74 69 72 65 6c 79 2e 00 3a 61 62 62 72 3a 60 47 52 | lier.formats.entirely..:abbr:`GR |
21e00 | 45 20 28 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e | E.(Generic.Routing.Encapsulation |
21e20 | 29 60 2c 20 47 52 45 2f 49 50 73 65 63 20 28 6f 72 20 49 50 49 50 2f 49 50 73 65 63 2c 20 53 49 | )`,.GRE/IPsec.(or.IPIP/IPsec,.SI |
21e40 | 54 2f 49 50 73 65 63 2c 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 74 61 74 65 6c 65 73 73 20 | T/IPsec,.or.any.other.stateless. |
21e60 | 74 75 6e 6e 65 6c 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 49 50 73 65 63 29 20 69 73 20 74 | tunnel.protocol.over.IPsec).is.t |
21e80 | 68 65 20 75 73 75 61 6c 20 77 61 79 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 66 | he.usual.way.to.protect.the.traf |
21ea0 | 66 69 63 20 69 6e 73 69 64 65 20 61 20 74 75 6e 6e 65 6c 2e 00 3a 61 62 62 72 3a 60 47 52 4f 20 | fic.inside.a.tunnel..:abbr:`GRO. |
21ec0 | 28 47 65 6e 65 72 69 63 20 72 65 63 65 69 76 65 20 6f 66 66 6c 6f 61 64 29 60 20 69 73 20 74 68 | (Generic.receive.offload)`.is.th |
21ee0 | 65 20 63 6f 6d 70 6c 65 6d 65 6e 74 20 74 6f 20 47 53 4f 2e 20 49 64 65 61 6c 6c 79 20 61 6e 79 | e.complement.to.GSO..Ideally.any |
21f00 | 20 66 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 62 79 20 47 52 4f 20 73 68 6f 75 6c 64 20 62 | .frame.assembled.by.GRO.should.b |
21f20 | 65 20 73 65 67 6d 65 6e 74 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e 20 69 64 65 6e 74 69 63 | e.segmented.to.create.an.identic |
21f40 | 61 6c 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 75 73 69 6e 67 20 47 53 4f 2c | al.sequence.of.frames.using.GSO, |
21f60 | 20 61 6e 64 20 61 6e 79 20 73 65 71 75 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 73 65 67 6d | .and.any.sequence.of.frames.segm |
21f80 | 65 6e 74 65 64 20 62 79 20 47 53 4f 20 73 68 6f 75 6c 64 20 62 65 20 61 62 6c 65 20 74 6f 20 62 | ented.by.GSO.should.be.able.to.b |
21fa0 | 65 20 72 65 61 73 73 65 6d 62 6c 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e | e.reassembled.back.to.the.origin |
21fc0 | 61 6c 20 62 79 20 47 52 4f 2e 20 54 68 65 20 6f 6e 6c 79 20 65 78 63 65 70 74 69 6f 6e 20 74 6f | al.by.GRO..The.only.exception.to |
21fe0 | 20 74 68 69 73 20 69 73 20 49 50 76 34 20 49 44 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 61 | .this.is.IPv4.ID.in.the.case.tha |
22000 | 74 20 74 68 65 20 44 46 20 62 69 74 20 69 73 20 73 65 74 20 66 6f 72 20 61 20 67 69 76 65 6e 20 | t.the.DF.bit.is.set.for.a.given. |
22020 | 49 50 20 68 65 61 64 65 72 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 49 | IP.header..If.the.value.of.the.I |
22040 | 50 76 34 20 49 44 20 69 73 20 6e 6f 74 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 69 6e 63 72 65 | Pv4.ID.is.not.sequentially.incre |
22060 | 6d 65 6e 74 69 6e 67 20 69 74 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 20 73 6f 20 74 68 | menting.it.will.be.altered.so.th |
22080 | 61 74 20 69 74 20 69 73 20 77 68 65 6e 20 61 20 66 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 | at.it.is.when.a.frame.assembled. |
220a0 | 76 69 61 20 47 52 4f 20 69 73 20 73 65 67 6d 65 6e 74 65 64 20 76 69 61 20 47 53 4f 2e 00 3a 61 | via.GRO.is.segmented.via.GSO..:a |
220c0 | 62 62 72 3a 60 47 53 4f 20 28 47 65 6e 65 72 69 63 20 53 65 67 6d 65 6e 74 61 74 69 6f 6e 20 4f | bbr:`GSO.(Generic.Segmentation.O |
220e0 | 66 66 6c 6f 61 64 29 60 20 69 73 20 61 20 70 75 72 65 20 73 6f 66 74 77 61 72 65 20 6f 66 66 6c | ffload)`.is.a.pure.software.offl |
22100 | 6f 61 64 20 74 68 61 74 20 69 73 20 6d 65 61 6e 74 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 63 | oad.that.is.meant.to.deal.with.c |
22120 | 61 73 65 73 20 77 68 65 72 65 20 64 65 76 69 63 65 20 64 72 69 76 65 72 73 20 63 61 6e 6e 6f 74 | ases.where.device.drivers.cannot |
22140 | 20 70 65 72 66 6f 72 6d 20 74 68 65 20 6f 66 66 6c 6f 61 64 73 20 64 65 73 63 72 69 62 65 64 20 | .perform.the.offloads.described. |
22160 | 61 62 6f 76 65 2e 20 57 68 61 74 20 6f 63 63 75 72 73 20 69 6e 20 47 53 4f 20 69 73 20 74 68 61 | above..What.occurs.in.GSO.is.tha |
22180 | 74 20 61 20 67 69 76 65 6e 20 73 6b 62 75 66 66 20 77 69 6c 6c 20 68 61 76 65 20 69 74 73 20 64 | t.a.given.skbuff.will.have.its.d |
221a0 | 61 74 61 20 62 72 6f 6b 65 6e 20 6f 75 74 20 6f 76 65 72 20 6d 75 6c 74 69 70 6c 65 20 73 6b 62 | ata.broken.out.over.multiple.skb |
221c0 | 75 66 66 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 72 65 73 69 7a 65 64 20 74 6f 20 6d | uffs.that.have.been.resized.to.m |
221e0 | 61 74 63 68 20 74 68 65 20 4d 53 53 20 70 72 6f 76 69 64 65 64 20 76 69 61 20 73 6b 62 5f 73 68 | atch.the.MSS.provided.via.skb_sh |
22200 | 69 6e 66 6f 28 29 2d 3e 67 73 6f 5f 73 69 7a 65 2e 00 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 | info()->gso_size..:abbr:`IGMP.(I |
22220 | 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f | nternet.Group.Management.Protoco |
22240 | 6c 29 60 20 70 72 6f 78 79 20 73 65 6e 64 73 20 49 47 4d 50 20 68 6f 73 74 20 6d 65 73 73 61 67 | l)`.proxy.sends.IGMP.host.messag |
22260 | 65 73 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 | es.on.behalf.of.a.connected.clie |
22280 | 6e 74 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 64 65 66 69 6e | nt..The.configuration.must.defin |
222a0 | 65 20 6f 6e 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 | e.one,.and.only.one.upstream.int |
222c0 | 65 72 66 61 63 65 2c 20 61 6e 64 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 | erface,.and.one.or.more.downstre |
222e0 | 61 6d 20 69 6e 74 65 72 66 61 63 65 73 2e 00 3a 61 62 62 72 3a 60 49 50 53 65 63 20 28 49 50 20 | am.interfaces..:abbr:`IPSec.(IP. |
22300 | 53 65 63 75 72 69 74 79 29 60 20 2d 20 74 6f 6f 20 6d 61 6e 79 20 52 46 43 73 20 74 6f 20 6c 69 | Security)`.-.too.many.RFCs.to.li |
22320 | 73 74 2c 20 62 75 74 20 73 74 61 72 74 20 77 69 74 68 20 3a 72 66 63 3a 60 34 33 30 31 60 00 3a | st,.but.start.with.:rfc:`4301`.: |
22340 | 61 62 62 72 3a 60 49 53 2d 49 53 20 28 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d | abbr:`IS-IS.(Intermediate.System |
22360 | 20 74 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 29 60 20 69 73 20 61 20 6c | .to.Intermediate.System)`.is.a.l |
22380 | 69 6e 6b 2d 73 74 61 74 65 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f | ink-state.interior.gateway.proto |
223a0 | 63 6f 6c 20 28 49 47 50 29 20 77 68 69 63 68 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 | col.(IGP).which.is.described.in. |
223c0 | 49 53 4f 31 30 35 38 39 2c 20 3a 72 66 63 3a 60 31 31 39 35 60 2c 20 3a 72 66 63 3a 60 35 33 30 | ISO10589,.:rfc:`1195`,.:rfc:`530 |
223e0 | 38 60 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 74 68 65 20 44 69 6a 6b 73 74 72 61 20 73 68 6f 72 | 8`..IS-IS.runs.the.Dijkstra.shor |
22400 | 74 65 73 74 2d 70 61 74 68 20 66 69 72 73 74 20 28 53 50 46 29 20 61 6c 67 6f 72 69 74 68 6d 20 | test-path.first.(SPF).algorithm. |
22420 | 74 6f 20 63 72 65 61 74 65 20 61 20 64 61 74 61 62 61 73 65 20 6f 66 20 74 68 65 20 6e 65 74 77 | to.create.a.database.of.the.netw |
22440 | 6f 72 6b e2 80 99 73 20 74 6f 70 6f 6c 6f 67 79 2c 20 61 6e 64 20 66 72 6f 6d 20 74 68 61 74 20 | ork...s.topology,.and.from.that. |
22460 | 64 61 74 61 62 61 73 65 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 62 65 73 74 20 28 | database.to.determine.the.best.( |
22480 | 74 68 61 74 20 69 73 2c 20 6c 6f 77 65 73 74 20 63 6f 73 74 29 20 70 61 74 68 20 74 6f 20 61 20 | that.is,.lowest.cost).path.to.a. |
224a0 | 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 73 79 | destination..The.intermediate.sy |
224c0 | 73 74 65 6d 73 20 28 74 68 65 20 6e 61 6d 65 20 66 6f 72 20 72 6f 75 74 65 72 73 29 20 65 78 63 | stems.(the.name.for.routers).exc |
224e0 | 68 61 6e 67 65 20 74 6f 70 6f 6c 6f 67 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 | hange.topology.information.with. |
22500 | 74 68 65 69 72 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 65 6e 63 74 65 64 20 6e 65 69 67 68 62 6f | their.directly.conencted.neighbo |
22520 | 72 73 2e 20 49 53 2d 49 53 20 72 75 6e 73 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 | rs..IS-IS.runs.directly.on.the.d |
22540 | 61 74 61 20 6c 69 6e 6b 20 6c 61 79 65 72 20 28 4c 61 79 65 72 20 32 29 2e 20 49 53 2d 49 53 20 | ata.link.layer.(Layer.2)..IS-IS. |
22560 | 61 64 64 72 65 73 73 65 73 20 61 72 65 20 63 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 4e 45 54 73 | addresses.are.called.:abbr:`NETs |
22580 | 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 73 29 60 20 61 6e 64 20 63 61 | .(Network.Entity.Titles)`.and.ca |
225a0 | 6e 20 62 65 20 38 20 74 6f 20 32 30 20 62 79 74 65 73 20 6c 6f 6e 67 2c 20 62 75 74 20 61 72 65 | n.be.8.to.20.bytes.long,.but.are |
225c0 | 20 67 65 6e 65 72 61 6c 6c 79 20 31 30 20 62 79 74 65 73 20 6c 6f 6e 67 2e 20 54 68 65 20 74 72 | .generally.10.bytes.long..The.tr |
225e0 | 65 65 20 64 61 74 61 62 61 73 65 20 74 68 61 74 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 | ee.database.that.is.created.with |
22600 | 20 49 53 2d 49 53 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6f 6e 65 20 74 68 61 | .IS-IS.is.similar.to.the.one.tha |
22620 | 74 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 4f 53 50 46 20 69 6e 20 74 68 61 74 20 74 | t.is.created.with.OSPF.in.that.t |
22640 | 68 65 20 70 61 74 68 73 20 63 68 6f 73 65 6e 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 | he.paths.chosen.should.be.simila |
22660 | 72 2e 20 43 6f 6d 70 61 72 69 73 6f 6e 73 20 74 6f 20 4f 53 50 46 20 61 72 65 20 69 6e 65 76 69 | r..Comparisons.to.OSPF.are.inevi |
22680 | 74 61 62 6c 65 20 61 6e 64 20 6f 66 74 65 6e 20 61 72 65 20 72 65 61 73 6f 6e 61 62 6c 65 20 6f | table.and.often.are.reasonable.o |
226a0 | 6e 65 73 20 74 6f 20 6d 61 6b 65 20 69 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 77 61 | nes.to.make.in.regards.to.the.wa |
226c0 | 79 20 61 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 65 69 | y.a.network.will.respond.with.ei |
226e0 | 74 68 65 72 20 49 47 50 2e 00 3a 61 62 62 72 3a 60 4c 33 56 50 4e 20 56 52 46 73 20 28 20 4c 61 | ther.IGP..:abbr:`L3VPN.VRFs.(.La |
22700 | 79 65 72 20 33 20 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 73 20 29 | yer.3.Virtual.Private.Networks.) |
22720 | 60 20 62 67 70 64 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 49 50 76 34 20 52 46 43 20 34 33 36 | `.bgpd.supports.for.IPv4.RFC.436 |
22740 | 34 20 61 6e 64 20 49 50 76 36 20 52 46 43 20 34 36 35 39 2e 20 4c 33 56 50 4e 20 72 6f 75 74 65 | 4.and.IPv6.RFC.4659..L3VPN.route |
22760 | 73 2c 20 61 6e 64 20 74 68 65 69 72 20 61 73 73 6f 63 69 61 74 65 64 20 56 52 46 20 4d 50 4c 53 | s,.and.their.associated.VRF.MPLS |
22780 | 20 6c 61 62 65 6c 73 2c 20 63 61 6e 20 62 65 20 64 69 73 74 72 69 62 75 74 65 64 20 74 6f 20 56 | .labels,.can.be.distributed.to.V |
227a0 | 50 4e 20 53 41 46 49 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 | PN.SAFI.neighbors.in.the.default |
227c0 | 2c 20 69 2e 65 2e 2c 20 6e 6f 6e 20 56 52 46 2c 20 42 47 50 20 69 6e 73 74 61 6e 63 65 2e 20 56 | ,.i.e.,.non.VRF,.BGP.instance..V |
227e0 | 52 46 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 72 65 61 63 68 65 64 20 75 73 69 6e 67 | RF.MPLS.labels.are.reached.using |
22800 | 20 63 6f 72 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 77 68 69 63 68 20 61 72 65 20 64 69 73 74 | .core.MPLS.labels.which.are.dist |
22820 | 72 69 62 75 74 65 64 20 75 73 69 6e 67 20 4c 44 50 20 6f 72 20 42 47 50 20 6c 61 62 65 6c 65 64 | ributed.using.LDP.or.BGP.labeled |
22840 | 20 75 6e 69 63 61 73 74 2e 20 62 67 70 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 69 6e 74 | .unicast..bgpd.also.supports.int |
22860 | 65 72 2d 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 2e 00 3a 61 62 62 72 3a 60 4c 44 50 | er-VRF.route.leaking..:abbr:`LDP |
22880 | 20 28 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 | .(Label.Distribution.Protocol)`. |
228a0 | 69 73 20 61 20 54 43 50 20 62 61 73 65 64 20 4d 50 4c 53 20 73 69 67 6e 61 6c 69 6e 67 20 70 72 | is.a.TCP.based.MPLS.signaling.pr |
228c0 | 6f 74 6f 63 6f 6c 20 74 68 61 74 20 64 69 73 74 72 69 62 75 74 65 73 20 6c 61 62 65 6c 73 20 63 | otocol.that.distributes.labels.c |
228e0 | 72 65 61 74 69 6e 67 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 77 69 74 63 68 65 64 20 70 61 74 68 | reating.MPLS.label.switched.path |
22900 | 73 20 69 6e 20 61 20 64 79 6e 61 6d 69 63 20 6d 61 6e 6e 65 72 2e 20 4c 44 50 20 69 73 20 6e 6f | s.in.a.dynamic.manner..LDP.is.no |
22920 | 74 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 73 20 69 74 20 72 65 6c 69 | t.a.routing.protocol,.as.it.reli |
22940 | 65 73 20 6f 6e 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f | es.on.other.routing.protocols.fo |
22960 | 72 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 2e 20 4c 44 50 20 63 61 6e 6e | r.forwarding.decisions..LDP.cann |
22980 | 6f 74 20 62 6f 6f 74 73 74 72 61 70 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 72 65 66 6f | ot.bootstrap.itself,.and.therefo |
229a0 | 72 65 20 72 65 6c 69 65 73 20 6f 6e 20 73 61 69 64 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | re.relies.on.said.routing.protoc |
229c0 | 6f 6c 73 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 77 69 74 68 20 6f 74 68 65 72 | ols.for.communication.with.other |
229e0 | 20 72 6f 75 74 65 72 73 20 74 68 61 74 20 75 73 65 20 4c 44 50 2e 00 3a 61 62 62 72 3a 60 4c 4c | .routers.that.use.LDP..:abbr:`LL |
22a00 | 44 50 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f | DP.(Link.Layer.Discovery.Protoco |
22a20 | 6c 29 60 20 69 73 20 61 20 76 65 6e 64 6f 72 2d 6e 65 75 74 72 61 6c 20 6c 69 6e 6b 20 6c 61 79 | l)`.is.a.vendor-neutral.link.lay |
22a40 | 65 72 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 | er.protocol.in.the.Internet.Prot |
22a60 | 6f 63 6f 6c 20 53 75 69 74 65 20 75 73 65 64 20 62 79 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 | ocol.Suite.used.by.network.devic |
22a80 | 65 73 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 69 72 20 69 64 65 6e 74 69 74 | es.for.advertising.their.identit |
22aa0 | 79 2c 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 6e 65 69 67 68 62 6f 72 73 20 6f | y,.capabilities,.and.neighbors.o |
22ac0 | 6e 20 61 6e 20 49 45 45 45 20 38 30 32 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b | n.an.IEEE.802.local.area.network |
22ae0 | 2c 20 70 72 69 6e 63 69 70 61 6c 6c 79 20 77 69 72 65 64 20 45 74 68 65 72 6e 65 74 2e 20 54 68 | ,.principally.wired.Ethernet..Th |
22b00 | 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 6d 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 | e.protocol.is.formally.referred. |
22b20 | 74 6f 20 62 79 20 74 68 65 20 49 45 45 45 20 61 73 20 53 74 61 74 69 6f 6e 20 61 6e 64 20 4d 65 | to.by.the.IEEE.as.Station.and.Me |
22b40 | 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 43 6f 6e 6e 65 63 74 69 76 69 74 79 20 | dia.Access.Control.Connectivity. |
22b60 | 44 69 73 63 6f 76 65 72 79 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e | Discovery.specified.in.IEEE.802. |
22b80 | 31 41 42 20 61 6e 64 20 49 45 45 45 20 38 30 32 2e 33 2d 32 30 31 32 20 73 65 63 74 69 6f 6e 20 | 1AB.and.IEEE.802.3-2012.section. |
22ba0 | 36 20 63 6c 61 75 73 65 20 37 39 2e 00 3a 61 62 62 72 3a 60 4c 52 4f 20 28 4c 61 72 67 65 20 52 | 6.clause.79..:abbr:`LRO.(Large.R |
22bc0 | 65 63 65 69 76 65 20 4f 66 66 6c 6f 61 64 29 60 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 20 | eceive.Offload)`.is.a.technique. |
22be0 | 64 65 73 69 67 6e 65 64 20 74 6f 20 62 6f 6f 73 74 20 74 68 65 20 65 66 66 69 63 69 65 6e 63 79 | designed.to.boost.the.efficiency |
22c00 | 20 6f 66 20 68 6f 77 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 27 73 20 6e 65 74 77 6f 72 6b 20 | .of.how.your.computer's.network. |
22c20 | 69 6e 74 65 72 66 61 63 65 20 63 61 72 64 20 28 4e 49 43 29 20 70 72 6f 63 65 73 73 65 73 20 69 | interface.card.(NIC).processes.i |
22c40 | 6e 63 6f 6d 69 6e 67 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 2e 20 54 79 70 69 63 61 6c | ncoming.network.traffic..Typical |
22c60 | 6c 79 2c 20 6e 65 74 77 6f 72 6b 20 64 61 74 61 20 61 72 72 69 76 65 73 20 69 6e 20 73 6d 61 6c | ly,.network.data.arrives.in.smal |
22c80 | 6c 65 72 20 63 68 75 6e 6b 73 20 63 61 6c 6c 65 64 20 70 61 63 6b 65 74 73 2e 20 50 72 6f 63 65 | ler.chunks.called.packets..Proce |
22ca0 | 73 73 69 6e 67 20 65 61 63 68 20 70 61 63 6b 65 74 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 63 | ssing.each.packet.individually.c |
22cc0 | 6f 6e 73 75 6d 65 73 20 43 50 55 20 28 63 65 6e 74 72 61 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 | onsumes.CPU.(central.processing. |
22ce0 | 75 6e 69 74 29 20 72 65 73 6f 75 72 63 65 73 2e 20 4c 6f 74 73 20 6f 66 20 73 6d 61 6c 6c 20 70 | unit).resources..Lots.of.small.p |
22d00 | 61 63 6b 65 74 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 70 65 72 66 6f 72 6d 61 6e 63 65 | ackets.can.lead.to.a.performance |
22d20 | 20 62 6f 74 74 6c 65 6e 65 63 6b 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 68 61 6e 64 69 6e 67 20 | .bottleneck..Instead.of.handing. |
22d40 | 74 68 65 20 43 50 55 20 65 61 63 68 20 70 61 63 6b 65 74 20 61 73 20 69 74 20 63 6f 6d 65 73 20 | the.CPU.each.packet.as.it.comes. |
22d60 | 69 6e 2c 20 4c 52 4f 20 69 6e 73 74 72 75 63 74 73 20 74 68 65 20 4e 49 43 20 74 6f 20 63 6f 6d | in,.LRO.instructs.the.NIC.to.com |
22d80 | 62 69 6e 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 73 20 69 | bine.multiple.incoming.packets.i |
22da0 | 6e 74 6f 20 61 20 73 69 6e 67 6c 65 2c 20 6c 61 72 67 65 72 20 70 61 63 6b 65 74 2e 20 54 68 69 | nto.a.single,.larger.packet..Thi |
22dc0 | 73 20 6c 61 72 67 65 72 20 70 61 63 6b 65 74 20 69 73 20 74 68 65 6e 20 70 61 73 73 65 64 20 74 | s.larger.packet.is.then.passed.t |
22de0 | 6f 20 74 68 65 20 43 50 55 20 66 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 2e 00 3a 61 62 62 72 3a | o.the.CPU.for.processing..:abbr: |
22e00 | 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f | `MKA.(MACsec.Key.Agreement.proto |
22e20 | 63 6f 6c 29 60 20 69 73 20 75 73 65 64 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 6b 65 79 | col)`.is.used.to.synchronize.key |
22e40 | 73 20 62 65 74 77 65 65 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 70 65 65 72 73 2e 00 3a 61 62 62 | s.between.individual.peers..:abb |
22e60 | 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 | r:`MPLS.(Multi-Protocol.Label.Sw |
22e80 | 69 74 63 68 69 6e 67 29 60 20 69 73 20 61 20 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 | itching)`.is.a.packet.forwarding |
22ea0 | 20 70 61 72 61 64 69 67 6d 20 77 68 69 63 68 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 72 65 67 | .paradigm.which.differs.from.reg |
22ec0 | 75 6c 61 72 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 49 | ular.IP.forwarding..Instead.of.I |
22ee0 | 50 20 61 64 64 72 65 73 73 65 73 20 62 65 69 6e 67 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 | P.addresses.being.used.to.make.t |
22f00 | 68 65 20 64 65 63 69 73 69 6f 6e 20 6f 6e 20 66 69 6e 64 69 6e 67 20 74 68 65 20 65 78 69 74 20 | he.decision.on.finding.the.exit. |
22f20 | 69 6e 74 65 72 66 61 63 65 2c 20 61 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 69 6e 73 74 65 61 64 | interface,.a.router.will.instead |
22f40 | 20 75 73 65 20 61 6e 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f 6e 20 61 20 33 32 20 62 69 74 2f | .use.an.exact.match.on.a.32.bit/ |
22f60 | 34 20 62 79 74 65 20 68 65 61 64 65 72 20 63 61 6c 6c 65 64 20 74 68 65 20 4d 50 4c 53 20 6c 61 | 4.byte.header.called.the.MPLS.la |
22f80 | 62 65 6c 2e 20 54 68 69 73 20 6c 61 62 65 6c 20 69 73 20 69 6e 73 65 72 74 65 64 20 62 65 74 77 | bel..This.label.is.inserted.betw |
22fa0 | 65 65 6e 20 74 68 65 20 65 74 68 65 72 6e 65 74 20 28 6c 61 79 65 72 20 32 29 20 68 65 61 64 65 | een.the.ethernet.(layer.2).heade |
22fc0 | 72 20 61 6e 64 20 74 68 65 20 49 50 20 28 6c 61 79 65 72 20 33 29 20 68 65 61 64 65 72 2e 20 4f | r.and.the.IP.(layer.3).header..O |
22fe0 | 6e 65 20 63 61 6e 20 73 74 61 74 69 63 61 6c 6c 79 20 6f 72 20 64 79 6e 61 6d 69 63 61 6c 6c 79 | ne.can.statically.or.dynamically |
23000 | 20 61 73 73 69 67 6e 20 6c 61 62 65 6c 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 2c 20 62 75 74 20 77 | .assign.label.allocations,.but.w |
23020 | 65 20 77 69 6c 6c 20 66 6f 63 75 73 20 6f 6e 20 64 79 6e 61 6d 69 63 20 61 6c 6c 6f 63 61 74 69 | e.will.focus.on.dynamic.allocati |
23040 | 6f 6e 20 6f 66 20 6c 61 62 65 6c 73 20 75 73 69 6e 67 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 | on.of.labels.using.some.sort.of. |
23060 | 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 73 75 63 | label.distribution.protocol.(suc |
23080 | 68 20 61 73 20 74 68 65 20 61 70 74 6c 79 20 6e 61 6d 65 64 20 4c 61 62 65 6c 20 44 69 73 74 72 | h.as.the.aptly.named.Label.Distr |
230a0 | 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 2f 20 4c 44 50 2c 20 52 65 73 6f 75 72 63 65 | ibution.Protocol./.LDP,.Resource |
230c0 | 20 52 65 73 65 72 76 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 2f 20 52 53 56 50 2c 20 6f 72 | .Reservation.Protocol./.RSVP,.or |
230e0 | 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 74 68 72 6f 75 67 68 20 4f 53 50 46 2f 49 53 | .Segment.Routing.through.OSPF/IS |
23100 | 49 53 29 2e 20 54 68 65 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6c 6c 6f 77 20 66 6f 72 20 74 | IS)..These.protocols.allow.for.t |
23120 | 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 61 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 2f | he.creation.of.a.unidirectional/ |
23140 | 75 6e 69 63 61 73 74 20 70 61 74 68 20 63 61 6c 6c 65 64 20 61 20 6c 61 62 65 6c 65 64 20 73 77 | unicast.path.called.a.labeled.sw |
23160 | 69 74 63 68 65 64 20 70 61 74 68 20 28 69 6e 69 74 69 61 6c 69 7a 65 64 20 61 73 20 4c 53 50 29 | itched.path.(initialized.as.LSP) |
23180 | 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 6f 70 65 | .throughout.the.network.that.ope |
231a0 | 72 61 74 65 73 20 76 65 72 79 20 6d 75 63 68 20 6c 69 6b 65 20 61 20 74 75 6e 6e 65 6c 20 74 68 | rates.very.much.like.a.tunnel.th |
231c0 | 72 6f 75 67 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 41 6e 20 65 61 73 79 20 77 61 79 20 6f | rough.the.network..An.easy.way.o |
231e0 | 66 20 74 68 69 6e 6b 69 6e 67 20 61 62 6f 75 74 20 68 6f 77 20 61 6e 20 4d 50 4c 53 20 4c 53 50 | f.thinking.about.how.an.MPLS.LSP |
23200 | 20 61 63 74 75 61 6c 6c 79 20 66 6f 72 77 61 72 64 73 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 | .actually.forwards.traffic.throu |
23220 | 67 68 6f 75 74 20 61 20 6e 65 74 77 6f 72 6b 20 69 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 61 | ghout.a.network.is.to.think.of.a |
23240 | 20 47 52 45 20 74 75 6e 6e 65 6c 2e 20 54 68 65 79 20 61 72 65 20 6e 6f 74 20 74 68 65 20 73 61 | .GRE.tunnel..They.are.not.the.sa |
23260 | 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 79 20 6f 70 65 72 61 74 65 2c 20 62 75 74 20 74 68 65 79 | me.in.how.they.operate,.but.they |
23280 | 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 79 20 68 61 6e 64 6c 65 | .are.the.same.in.how.they.handle |
232a0 | 20 74 68 65 20 74 75 6e 6e 65 6c 65 64 20 70 61 63 6b 65 74 2e 20 49 74 20 77 6f 75 6c 64 20 62 | .the.tunneled.packet..It.would.b |
232c0 | 65 20 67 6f 6f 64 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 4d 50 4c 53 20 61 73 20 61 20 74 75 6e | e.good.to.think.of.MPLS.as.a.tun |
232e0 | 6e 65 6c 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 | neling.technology.that.can.be.us |
23300 | 65 64 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 74 | ed.to.transport.many.different.t |
23320 | 79 70 65 73 20 6f 66 20 70 61 63 6b 65 74 73 2c 20 74 6f 20 61 69 64 20 69 6e 20 74 72 61 66 66 | ypes.of.packets,.to.aid.in.traff |
23340 | 69 63 20 65 6e 67 69 6e 65 65 72 69 6e 67 20 62 79 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 65 20 74 | ic.engineering.by.allowing.one.t |
23360 | 6f 20 73 70 65 63 69 66 79 20 70 61 74 68 73 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e | o.specify.paths.throughout.the.n |
23380 | 65 74 77 6f 72 6b 20 28 75 73 69 6e 67 20 52 53 56 50 20 6f 72 20 53 52 29 2c 20 61 6e 64 20 74 | etwork.(using.RSVP.or.SR),.and.t |
233a0 | 6f 20 67 65 6e 65 72 61 6c 6c 79 20 61 6c 6c 6f 77 20 66 6f 72 20 65 61 73 69 65 72 20 69 6e 74 | o.generally.allow.for.easier.int |
233c0 | 72 61 2f 69 6e 74 65 72 20 6e 65 74 77 6f 72 6b 20 74 72 61 6e 73 70 6f 72 74 20 6f 66 20 64 61 | ra/inter.network.transport.of.da |
233e0 | 74 61 20 70 61 63 6b 65 74 73 2e 00 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 | ta.packets..:abbr:`NAT.(Network. |
23400 | 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 6f 6d 6d 6f | Address.Translation)`.is.a.commo |
23420 | 6e 20 6d 65 74 68 6f 64 20 6f 66 20 72 65 6d 61 70 70 69 6e 67 20 6f 6e 65 20 49 50 20 61 64 64 | n.method.of.remapping.one.IP.add |
23440 | 72 65 73 73 20 73 70 61 63 65 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 62 79 20 6d 6f 64 69 66 | ress.space.into.another.by.modif |
23460 | 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | ying.network.address.information |
23480 | 20 69 6e 20 74 68 65 20 49 50 20 68 65 61 64 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 77 68 69 | .in.the.IP.header.of.packets.whi |
234a0 | 6c 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 74 72 61 6e 73 69 74 20 61 63 72 6f 73 73 20 61 20 | le.they.are.in.transit.across.a. |
234c0 | 74 72 61 66 66 69 63 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 2e 20 54 68 65 20 74 65 63 68 | traffic.routing.device..The.tech |
234e0 | 6e 69 71 75 65 20 77 61 73 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 20 61 73 20 61 20 73 | nique.was.originally.used.as.a.s |
23500 | 68 6f 72 74 63 75 74 20 74 6f 20 61 76 6f 69 64 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 61 | hortcut.to.avoid.the.need.to.rea |
23520 | 64 64 72 65 73 73 20 65 76 65 72 79 20 68 6f 73 74 20 77 68 65 6e 20 61 20 6e 65 74 77 6f 72 6b | ddress.every.host.when.a.network |
23540 | 20 77 61 73 20 6d 6f 76 65 64 2e 20 49 74 20 68 61 73 20 62 65 63 6f 6d 65 20 61 20 70 6f 70 75 | .was.moved..It.has.become.a.popu |
23560 | 6c 61 72 20 61 6e 64 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 6f 6c 20 69 6e 20 63 6f 6e 73 65 72 | lar.and.essential.tool.in.conser |
23580 | 76 69 6e 67 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 69 6e 20 74 68 65 | ving.global.address.space.in.the |
235a0 | 20 66 61 63 65 20 6f 66 20 49 50 76 34 20 61 64 64 72 65 73 73 20 65 78 68 61 75 73 74 69 6f 6e | .face.of.IPv4.address.exhaustion |
235c0 | 2e 20 4f 6e 65 20 49 6e 74 65 72 6e 65 74 2d 72 6f 75 74 61 62 6c 65 20 49 50 20 61 64 64 72 65 | ..One.Internet-routable.IP.addre |
235e0 | 73 73 20 6f 66 20 61 20 4e 41 54 20 67 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 | ss.of.a.NAT.gateway.can.be.used. |
23600 | 66 6f 72 20 61 6e 20 65 6e 74 69 72 65 20 70 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 2e 00 3a | for.an.entire.private.network..: |
23620 | 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 | abbr:`NAT.(Network.Address.Trans |
23640 | 6c 61 74 69 6f 6e 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 65 6e 74 69 72 65 6c 79 20 | lation)`.is.configured.entirely. |
23660 | 6f 6e 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 6f 20 63 61 6c 6c 65 64 20 60 72 75 6c 65 73 60 | on.a.series.of.so.called.`rules` |
23680 | 2e 20 52 75 6c 65 73 20 61 72 65 20 6e 75 6d 62 65 72 65 64 20 61 6e 64 20 65 76 61 6c 75 61 74 | ..Rules.are.numbered.and.evaluat |
236a0 | 65 64 20 62 79 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 4f 53 20 69 6e 20 6e 75 6d 65 72 | ed.by.the.underlying.OS.in.numer |
236c0 | 69 63 61 6c 20 6f 72 64 65 72 21 20 54 68 65 20 72 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e | ical.order!.The.rule.numbers.can |
236e0 | 20 62 65 20 63 68 61 6e 67 65 73 20 62 79 20 75 74 69 6c 69 7a 69 6e 67 20 74 68 65 20 3a 63 66 | .be.changes.by.utilizing.the.:cf |
23700 | 67 63 6d 64 3a 60 72 65 6e 61 6d 65 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 63 6f 70 79 60 | gcmd:`rename`.and.:cfgcmd:`copy` |
23720 | 20 63 6f 6d 6d 61 6e 64 73 2e 00 3a 61 62 62 72 3a 60 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f | .commands..:abbr:`NAT64.(IPv6-to |
23740 | 2d 49 50 76 34 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 | -IPv4.Prefix.Translation)`.is.a. |
23760 | 63 72 69 74 69 63 61 6c 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 6e 20 6d 6f 64 65 72 6e 20 6e 65 74 | critical.component.in.modern.net |
23780 | 77 6f 72 6b 69 6e 67 2c 20 66 61 63 69 6c 69 74 61 74 69 6e 67 20 63 6f 6d 6d 75 6e 69 63 61 74 | working,.facilitating.communicat |
237a0 | 69 6f 6e 20 62 65 74 77 65 65 6e 20 49 50 76 36 20 61 6e 64 20 49 50 76 34 20 6e 65 74 77 6f 72 | ion.between.IPv6.and.IPv4.networ |
237c0 | 6b 73 2e 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 6f 75 74 6c 69 6e 65 73 20 | ks..This.documentation.outlines. |
237e0 | 74 68 65 20 73 65 74 75 70 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 61 6e 64 20 75 73 | the.setup,.configuration,.and.us |
23800 | 61 67 65 20 6f 66 20 74 68 65 20 4e 41 54 36 34 20 66 65 61 74 75 72 65 20 69 6e 20 79 6f 75 72 | age.of.the.NAT64.feature.in.your |
23820 | 20 70 72 6f 6a 65 63 74 2e 20 57 68 65 74 68 65 72 20 79 6f 75 20 61 72 65 20 74 72 61 6e 73 69 | .project..Whether.you.are.transi |
23840 | 74 69 6f 6e 69 6e 67 20 74 6f 20 49 50 76 36 20 6f 72 20 6e 65 65 64 20 74 6f 20 73 65 61 6d 6c | tioning.to.IPv6.or.need.to.seaml |
23860 | 65 73 73 6c 79 20 63 6f 6e 6e 65 63 74 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 64 65 76 69 | essly.connect.IPv4.and.IPv6.devi |
23880 | 63 65 73 2e 20 4e 41 54 36 34 20 69 73 20 61 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 | ces..NAT64.is.a.stateful.transla |
238a0 | 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 | tion.mechanism.that.translates.I |
238c0 | 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 | Pv6.addresses.to.IPv4.addresses. |
238e0 | 61 6e 64 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 36 20 61 64 64 72 65 | and.IPv4.addresses.to.IPv6.addre |
23900 | 73 73 65 73 2e 20 4e 41 54 36 34 20 69 73 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 49 50 | sses..NAT64.is.used.to.enable.IP |
23920 | 76 36 2d 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 20 74 6f 20 63 6f 6e 74 61 63 74 20 49 50 76 34 20 | v6-only.clients.to.contact.IPv4. |
23940 | 73 65 72 76 65 72 73 20 75 73 69 6e 67 20 75 6e 69 63 61 73 74 20 55 44 50 2c 20 54 43 50 2c 20 | servers.using.unicast.UDP,.TCP,. |
23960 | 6f 72 20 49 43 4d 50 2e 00 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 | or.ICMP..:abbr:`NET.(Network.Ent |
23980 | 69 74 79 20 54 69 74 6c 65 29 60 20 73 65 6c 65 63 74 6f 72 3a 20 60 60 30 30 60 60 20 4d 75 73 | ity.Title)`.selector:.``00``.Mus |
239a0 | 74 20 61 6c 77 61 79 73 20 62 65 20 30 30 2e 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 6e 64 | t.always.be.00..This.setting.ind |
239c0 | 69 63 61 74 65 73 20 22 74 68 69 73 20 73 79 73 74 65 6d 22 20 6f 72 20 22 6c 6f 63 61 6c 20 73 | icates."this.system".or."local.s |
239e0 | 79 73 74 65 6d 2e 22 00 3a 61 62 62 72 3a 60 4e 48 52 50 20 28 4e 65 78 74 20 48 6f 70 20 52 65 | ystem.".:abbr:`NHRP.(Next.Hop.Re |
23a00 | 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 3a 72 66 63 3a 60 32 33 33 32 60 00 | solution.Protocol)`.:rfc:`2332`. |
23a20 | 3a 61 62 62 72 3a 60 4e 50 54 76 36 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f | :abbr:`NPTv6.(IPv6-to-IPv6.Netwo |
23a40 | 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 6e 20 61 64 | rk.Prefix.Translation)`.is.an.ad |
23a60 | 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 62 61 73 | dress.translation.technology.bas |
23a80 | 65 64 20 6f 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 2c 20 75 73 65 64 20 74 6f 20 63 6f 6e | ed.on.IPv6.networks,.used.to.con |
23aa0 | 76 65 72 74 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 61 | vert.an.IPv6.address.prefix.in.a |
23ac0 | 6e 20 49 50 76 36 20 6d 65 73 73 61 67 65 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 | n.IPv6.message.into.another.IPv6 |
23ae0 | 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6c 6c 20 74 68 69 73 20 61 64 | .address.prefix..We.call.this.ad |
23b00 | 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 74 68 6f 64 20 4e 41 54 36 36 2e 20 | dress.translation.method.NAT66.. |
23b20 | 44 65 76 69 63 65 73 20 74 68 61 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 4e 41 54 36 36 20 66 | Devices.that.support.the.NAT66.f |
23b40 | 75 6e 63 74 69 6f 6e 20 61 72 65 20 63 61 6c 6c 65 64 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 | unction.are.called.NAT66.devices |
23b60 | 2c 20 77 68 69 63 68 20 63 61 6e 20 70 72 6f 76 69 64 65 20 4e 41 54 36 36 20 73 6f 75 72 63 65 | ,.which.can.provide.NAT66.source |
23b80 | 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 | .and.destination.address.transla |
23ba0 | 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 73 2e 00 3a 61 62 62 72 3a 60 4e 54 50 20 28 4e 65 74 77 | tion.functions..:abbr:`NTP.(Netw |
23bc0 | 6f 72 6b 20 54 69 6d 65 20 50 72 6f 74 6f 63 6f 6c 60 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b | ork.Time.Protocol`).is.a.network |
23be0 | 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 63 6c 6f 63 6b 20 73 79 6e 63 68 72 6f 6e 69 | ing.protocol.for.clock.synchroni |
23c00 | 7a 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 | zation.between.computer.systems. |
23c20 | 6f 76 65 72 20 70 61 63 6b 65 74 2d 73 77 69 74 63 68 65 64 2c 20 76 61 72 69 61 62 6c 65 2d 6c | over.packet-switched,.variable-l |
23c40 | 61 74 65 6e 63 79 20 64 61 74 61 20 6e 65 74 77 6f 72 6b 73 2e 20 49 6e 20 6f 70 65 72 61 74 69 | atency.data.networks..In.operati |
23c60 | 6f 6e 20 73 69 6e 63 65 20 62 65 66 6f 72 65 20 31 39 38 35 2c 20 4e 54 50 20 69 73 20 6f 6e 65 | on.since.before.1985,.NTP.is.one |
23c80 | 20 6f 66 20 74 68 65 20 6f 6c 64 65 73 74 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c | .of.the.oldest.Internet.protocol |
23ca0 | 73 20 69 6e 20 63 75 72 72 65 6e 74 20 75 73 65 2e 00 3a 61 62 62 72 3a 60 4f 53 50 46 20 28 4f | s.in.current.use..:abbr:`OSPF.(O |
23cc0 | 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 29 60 20 69 73 20 61 20 72 | pen.Shortest.Path.First)`.is.a.r |
23ce0 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 50 72 6f | outing.protocol.for.Internet.Pro |
23d00 | 74 6f 63 6f 6c 20 28 49 50 29 20 6e 65 74 77 6f 72 6b 73 2e 20 49 74 20 75 73 65 73 20 61 20 6c | tocol.(IP).networks..It.uses.a.l |
23d20 | 69 6e 6b 20 73 74 61 74 65 20 72 6f 75 74 69 6e 67 20 28 4c 53 52 29 20 61 6c 67 6f 72 69 74 68 | ink.state.routing.(LSR).algorith |
23d40 | 6d 20 61 6e 64 20 66 61 6c 6c 73 20 69 6e 74 6f 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 69 6e | m.and.falls.into.the.group.of.in |
23d60 | 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 2c | terior.gateway.protocols.(IGPs), |
23d80 | 20 6f 70 65 72 61 74 69 6e 67 20 77 69 74 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 61 75 74 6f 6e | .operating.within.a.single.auton |
23da0 | 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 28 41 53 29 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 | omous.system.(AS)..It.is.defined |
23dc0 | 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f 6e 20 32 20 69 6e 20 3a 72 66 63 3a 60 32 33 32 38 | .as.OSPF.Version.2.in.:rfc:`2328 |
23de0 | 60 20 28 31 39 39 38 29 20 66 6f 72 20 49 50 76 34 2e 20 55 70 64 61 74 65 73 20 66 6f 72 20 49 | `.(1998).for.IPv4..Updates.for.I |
23e00 | 50 76 36 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f | Pv6.are.specified.as.OSPF.Versio |
23e20 | 6e 20 33 20 69 6e 20 3a 72 66 63 3a 60 35 33 34 30 60 20 28 32 30 30 38 29 2e 20 4f 53 50 46 20 | n.3.in.:rfc:`5340`.(2008)..OSPF. |
23e40 | 73 75 70 70 6f 72 74 73 20 74 68 65 20 3a 61 62 62 72 3a 60 43 49 44 52 20 28 43 6c 61 73 73 6c | supports.the.:abbr:`CIDR.(Classl |
23e60 | 65 73 73 20 49 6e 74 65 72 2d 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 64 72 65 | ess.Inter-Domain.Routing)`.addre |
23e80 | 73 73 69 6e 67 20 6d 6f 64 65 6c 2e 00 3a 61 62 62 72 3a 60 50 49 4d 20 28 50 72 6f 74 6f 63 6f | ssing.model..:abbr:`PIM.(Protoco |
23ea0 | 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 29 60 20 6d 75 73 74 20 62 | l.Independent.Multicast)`.must.b |
23ec0 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 | e.configured.in.every.interface. |
23ee0 | 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 | of.every.participating.router..E |
23f00 | 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c | very.router.must.also.have.the.l |
23f20 | 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d | ocation.of.the.Rendevouz.Point.m |
23f40 | 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 | anually.configured..Then,.unidir |
23f60 | 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 | ectional.shared.trees.rooted.at. |
23f80 | 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 | the.Rendevouz.Point.will.automat |
23fa0 | 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 | ically.be.built.for.multicast.di |
23fc0 | 73 74 72 69 62 75 74 69 6f 6e 2e 00 3a 61 62 62 72 3a 60 50 50 50 6f 45 20 28 50 6f 69 6e 74 2d | stribution..:abbr:`PPPoE.(Point- |
23fe0 | 74 6f 2d 50 6f 69 6e 74 20 50 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 | to-Point.Protocol.over.Ethernet) |
24000 | 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 65 6e 63 61 | `.is.a.network.protocol.for.enca |
24020 | 70 73 75 6c 61 74 69 6e 67 20 50 50 50 20 66 72 61 6d 65 73 20 69 6e 73 69 64 65 20 45 74 68 65 | psulating.PPP.frames.inside.Ethe |
24040 | 72 6e 65 74 20 66 72 61 6d 65 73 2e 20 49 74 20 61 70 70 65 61 72 65 64 20 69 6e 20 31 39 39 39 | rnet.frames..It.appeared.in.1999 |
24060 | 2c 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 74 68 65 20 62 6f 6f 6d 20 6f 66 20 | ,.in.the.context.of.the.boom.of. |
24080 | 44 53 4c 20 61 73 20 74 68 65 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 74 75 6e 6e 65 6c 69 6e | DSL.as.the.solution.for.tunnelin |
240a0 | 67 20 70 61 63 6b 65 74 73 20 6f 76 65 72 20 74 68 65 20 44 53 4c 20 63 6f 6e 6e 65 63 74 69 6f | g.packets.over.the.DSL.connectio |
240c0 | 6e 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 49 53 50 73 20 28 49 6e 74 65 72 6e 65 74 20 53 | n.to.the.:abbr:`ISPs.(Internet.S |
240e0 | 65 72 76 69 63 65 20 50 72 6f 76 69 64 65 72 73 29 60 20 49 50 20 6e 65 74 77 6f 72 6b 2c 20 61 | ervice.Providers)`.IP.network,.a |
24100 | 6e 64 20 66 72 6f 6d 20 74 68 65 72 65 20 74 6f 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 | nd.from.there.to.the.rest.of.the |
24120 | 20 49 6e 74 65 72 6e 65 74 2e 20 41 20 32 30 30 35 20 6e 65 74 77 6f 72 6b 69 6e 67 20 62 6f 6f | .Internet..A.2005.networking.boo |
24140 | 6b 20 6e 6f 74 65 64 20 74 68 61 74 20 22 4d 6f 73 74 20 44 53 4c 20 70 72 6f 76 69 64 65 72 73 | k.noted.that."Most.DSL.providers |
24160 | 20 75 73 65 20 50 50 50 6f 45 2c 20 77 68 69 63 68 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 | .use.PPPoE,.which.provides.authe |
24180 | 6e 74 69 63 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6d 70 72 | ntication,.encryption,.and.compr |
241a0 | 65 73 73 69 6f 6e 2e 22 20 54 79 70 69 63 61 6c 20 75 73 65 20 6f 66 20 50 50 50 6f 45 20 69 6e | ession.".Typical.use.of.PPPoE.in |
241c0 | 76 6f 6c 76 65 73 20 6c 65 76 65 72 61 67 69 6e 67 20 74 68 65 20 50 50 50 20 66 61 63 69 6c 69 | volves.leveraging.the.PPP.facili |
241e0 | 74 69 65 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 | ties.for.authenticating.the.user |
24200 | 20 77 69 74 68 20 61 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2c 20 70 | .with.a.username.and.password,.p |
24220 | 72 65 64 6f 6d 69 6e 61 74 65 6c 79 20 76 69 61 20 74 68 65 20 50 41 50 20 70 72 6f 74 6f 63 6f | redominately.via.the.PAP.protoco |
24240 | 6c 20 61 6e 64 20 6c 65 73 73 20 6f 66 74 65 6e 20 76 69 61 20 43 48 41 50 2e 00 3a 61 62 62 72 | l.and.less.often.via.CHAP..:abbr |
24260 | 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 61 | :`RAs.(Router.advertisements)`.a |
24280 | 72 65 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 38 36 31 23 73 65 63 74 69 | re.described.in.:rfc:`4861#secti |
242a0 | 6f 6e 2d 34 2e 36 2e 32 60 2e 20 54 68 65 79 20 61 72 65 20 70 61 72 74 20 6f 66 20 77 68 61 74 | on-4.6.2`..They.are.part.of.what |
242c0 | 20 69 73 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 | .is.known.as.:abbr:`SLAAC.(State |
242e0 | 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 | less.Address.Autoconfiguration)` |
24300 | 2e 00 3a 61 62 62 72 3a 60 52 49 50 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f | ..:abbr:`RIP.(Routing.Informatio |
24320 | 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 | n.Protocol)`.is.a.widely.deploye |
24340 | 64 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 | d.interior.gateway.protocol..RIP |
24360 | 20 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 69 6e 20 74 68 65 20 31 39 37 30 73 20 61 74 20 58 | .was.developed.in.the.1970s.at.X |
24380 | 65 72 6f 78 20 4c 61 62 73 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 58 4e 53 20 72 6f 75 | erox.Labs.as.part.of.the.XNS.rou |
243a0 | 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 | ting.protocol..RIP.is.a.distance |
243c0 | 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 69 73 20 62 61 73 65 64 20 6f 6e | -vector.protocol.and.is.based.on |
243e0 | 20 74 68 65 20 42 65 6c 6c 6d 61 6e 2d 46 6f 72 64 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 41 73 | .the.Bellman-Ford.algorithms..As |
24400 | 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 52 49 50 | .a.distance-vector.protocol,.RIP |
24420 | 20 72 6f 75 74 65 72 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 74 6f 20 69 74 73 20 6e 65 69 67 | .router.send.updates.to.its.neig |
24440 | 68 62 6f 72 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 2c 20 74 68 75 73 20 61 6c 6c 6f 77 69 6e | hbors.periodically,.thus.allowin |
24460 | 67 20 74 68 65 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 6f 20 61 20 6b 6e 6f 77 6e 20 74 6f 70 | g.the.convergence.to.a.known.top |
24480 | 6f 6c 6f 67 79 2e 20 49 6e 20 65 61 63 68 20 75 70 64 61 74 65 2c 20 74 68 65 20 64 69 73 74 61 | ology..In.each.update,.the.dista |
244a0 | 6e 63 65 20 74 6f 20 61 6e 79 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 62 65 | nce.to.any.given.network.will.be |
244c0 | 20 62 72 6f 61 64 63 61 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 72 6f | .broadcast.to.its.neighboring.ro |
244e0 | 75 74 65 72 2e 00 3a 61 62 62 72 3a 60 52 50 4b 49 20 28 52 65 73 6f 75 72 63 65 20 50 75 62 6c | uter..:abbr:`RPKI.(Resource.Publ |
24500 | 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 69 73 20 61 20 66 72 61 | ic.Key.Infrastructure)`.is.a.fra |
24520 | 6d 65 77 6f 72 6b 20 3a 61 62 62 72 3a 60 50 4b 49 20 28 50 75 62 6c 69 63 20 4b 65 79 20 49 6e | mework.:abbr:`PKI.(Public.Key.In |
24540 | 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 | frastructure)`.designed.to.secur |
24560 | 65 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 72 61 73 74 72 75 | e.the.Internet.routing.infrastru |
24580 | 63 74 75 72 65 2e 20 49 74 20 61 73 73 6f 63 69 61 74 65 73 20 42 47 50 20 72 6f 75 74 65 20 61 | cture..It.associates.BGP.route.a |
245a0 | 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 77 69 74 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 | nnouncements.with.the.correct.or |
245c0 | 69 67 69 6e 61 74 69 6e 67 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 75 73 20 | iginating.:abbr:`ASN.(Autonomus. |
245e0 | 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 77 68 69 63 68 20 42 47 50 20 72 6f 75 74 65 72 | System.Number)`.which.BGP.router |
24600 | 73 20 63 61 6e 20 74 68 65 6e 20 75 73 65 20 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 72 6f 75 | s.can.then.use.to.check.each.rou |
24620 | 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 3a 61 62 | te.against.the.corresponding.:ab |
24640 | 62 72 3a 60 52 4f 41 20 28 52 6f 75 74 65 20 4f 72 69 67 69 6e 20 41 75 74 68 6f 72 69 73 61 74 | br:`ROA.(Route.Origin.Authorisat |
24660 | 69 6f 6e 29 60 20 66 6f 72 20 76 61 6c 69 64 69 74 79 2e 20 52 50 4b 49 20 69 73 20 64 65 73 63 | ion)`.for.validity..RPKI.is.desc |
24680 | 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 36 34 38 30 60 2e 00 3a 61 62 62 72 3a 60 52 50 4b | ribed.in.:rfc:`6480`..:abbr:`RPK |
246a0 | 49 20 28 52 65 73 6f 75 72 63 65 20 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 75 | I.(Resource.Public.Key.Infrastru |
246c0 | 63 74 75 72 65 29 60 20 69 73 20 61 20 66 72 61 6d 65 77 6f 72 6b 20 64 65 73 69 67 6e 65 64 20 | cture)`.is.a.framework.designed. |
246e0 | 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 72 6f 75 74 69 6e 67 20 69 | to.secure.the.Internet.routing.i |
24700 | 6e 66 72 61 73 74 72 75 63 74 75 72 65 2e 20 49 74 20 61 73 73 6f 63 69 61 74 65 73 20 42 47 50 | nfrastructure..It.associates.BGP |
24720 | 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 77 69 74 68 20 74 68 65 20 63 6f | .route.announcements.with.the.co |
24740 | 72 72 65 63 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 | rrect.originating.:abbr:`ASN.(Au |
24760 | 74 6f 6e 6f 6d 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 77 68 69 63 68 20 42 47 | tonomus.System.Number)`.which.BG |
24780 | 50 20 72 6f 75 74 65 72 73 20 63 61 6e 20 74 68 65 6e 20 75 73 65 20 74 6f 20 63 68 65 63 6b 20 | P.routers.can.then.use.to.check. |
247a0 | 65 61 63 68 20 72 6f 75 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e | each.route.against.the.correspon |
247c0 | 64 69 6e 67 20 3a 61 62 62 72 3a 60 52 4f 41 20 28 52 6f 75 74 65 20 4f 72 69 67 69 6e 20 41 75 | ding.:abbr:`ROA.(Route.Origin.Au |
247e0 | 74 68 6f 72 69 73 61 74 69 6f 6e 29 60 20 66 6f 72 20 76 61 6c 69 64 69 74 79 2e 20 52 50 4b 49 | thorisation)`.for.validity..RPKI |
24800 | 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 36 34 38 30 60 2e 00 3a 61 | .is.described.in.:rfc:`6480`..:a |
24820 | 62 62 72 3a 60 52 50 53 20 28 52 65 63 65 69 76 65 20 50 61 63 6b 65 74 20 53 74 65 65 72 69 6e | bbr:`RPS.(Receive.Packet.Steerin |
24840 | 67 29 60 20 69 73 20 6c 6f 67 69 63 61 6c 6c 79 20 61 20 73 6f 66 74 77 61 72 65 20 69 6d 70 6c | g)`.is.logically.a.software.impl |
24860 | 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 3a 61 62 62 72 3a 60 52 53 53 20 28 52 65 63 65 69 76 | ementation.of.:abbr:`RSS.(Receiv |
24880 | 65 20 53 69 64 65 20 53 63 61 6c 69 6e 67 29 60 2e 20 42 65 69 6e 67 20 69 6e 20 73 6f 66 74 77 | e.Side.Scaling)`..Being.in.softw |
248a0 | 61 72 65 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 69 6c 79 20 63 61 6c 6c 65 64 20 6c 61 | are,.it.is.necessarily.called.la |
248c0 | 74 65 72 20 69 6e 20 74 68 65 20 64 61 74 61 70 61 74 68 2e 20 57 68 65 72 65 61 73 20 52 53 53 | ter.in.the.datapath..Whereas.RSS |
248e0 | 20 73 65 6c 65 63 74 73 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 68 65 6e 63 65 20 43 50 55 | .selects.the.queue.and.hence.CPU |
24900 | 20 74 68 61 74 20 77 69 6c 6c 20 72 75 6e 20 74 68 65 20 68 61 72 64 77 61 72 65 20 69 6e 74 65 | .that.will.run.the.hardware.inte |
24920 | 72 72 75 70 74 20 68 61 6e 64 6c 65 72 2c 20 52 50 53 20 73 65 6c 65 63 74 73 20 74 68 65 20 43 | rrupt.handler,.RPS.selects.the.C |
24940 | 50 55 20 74 6f 20 70 65 72 66 6f 72 6d 20 70 72 6f 74 6f 63 6f 6c 20 70 72 6f 63 65 73 73 69 6e | PU.to.perform.protocol.processin |
24960 | 67 20 61 62 6f 76 65 20 74 68 65 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 2e 20 54 | g.above.the.interrupt.handler..T |
24980 | 68 69 73 20 69 73 20 61 63 63 6f 6d 70 6c 69 73 68 65 64 20 62 79 20 70 6c 61 63 69 6e 67 20 74 | his.is.accomplished.by.placing.t |
249a0 | 68 65 20 70 61 63 6b 65 74 20 6f 6e 20 74 68 65 20 64 65 73 69 72 65 64 20 43 50 55 27 73 20 62 | he.packet.on.the.desired.CPU's.b |
249c0 | 61 63 6b 6c 6f 67 20 71 75 65 75 65 20 61 6e 64 20 77 61 6b 69 6e 67 20 75 70 20 74 68 65 20 43 | acklog.queue.and.waking.up.the.C |
249e0 | 50 55 20 66 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 52 50 53 20 68 61 73 20 73 6f 6d 65 20 | PU.for.processing..RPS.has.some. |
24a00 | 61 64 76 61 6e 74 61 67 65 73 20 6f 76 65 72 20 52 53 53 3a 00 3a 61 62 62 72 3a 60 53 4c 41 41 | advantages.over.RSS:.:abbr:`SLAA |
24a20 | 43 20 28 53 74 61 74 65 6c 65 73 73 20 41 64 64 72 65 73 73 20 41 75 74 6f 63 6f 6e 66 69 67 75 | C.(Stateless.Address.Autoconfigu |
24a40 | 72 61 74 69 6f 6e 29 60 20 3a 72 66 63 3a 60 34 38 36 32 60 2e 20 49 50 76 36 20 68 6f 73 74 73 | ration)`.:rfc:`4862`..IPv6.hosts |
24a60 | 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 73 65 6c 76 65 73 20 61 75 74 6f 6d 61 | .can.configure.themselves.automa |
24a80 | 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 6e 20 49 50 76 | tically.when.connected.to.an.IPv |
24aa0 | 36 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 | 6.network.using.the.Neighbor.Dis |
24ac0 | 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 76 69 61 20 3a 61 62 62 72 3a 60 49 43 4d 50 76 | covery.Protocol.via.:abbr:`ICMPv |
24ae0 | 36 20 28 49 6e 74 65 72 6e 65 74 20 43 6f 6e 74 72 6f 6c 20 4d 65 73 73 61 67 65 20 50 72 6f 74 | 6.(Internet.Control.Message.Prot |
24b00 | 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 36 29 60 20 72 6f 75 74 65 72 20 64 69 73 63 6f 76 65 72 | ocol.version.6)`.router.discover |
24b20 | 79 20 6d 65 73 73 61 67 65 73 2e 20 57 68 65 6e 20 66 69 72 73 74 20 63 6f 6e 6e 65 63 74 65 64 | y.messages..When.first.connected |
24b40 | 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 6c 69 | .to.a.network,.a.host.sends.a.li |
24b60 | 6e 6b 2d 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 75 6c | nk-local.router.solicitation.mul |
24b80 | 74 69 63 61 73 74 20 72 65 71 75 65 73 74 20 66 6f 72 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 | ticast.request.for.its.configura |
24ba0 | 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 3b 20 72 6f 75 74 65 72 73 20 72 65 73 70 6f 6e 64 | tion.parameters;.routers.respond |
24bc0 | 20 74 6f 20 73 75 63 68 20 61 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 72 6f 75 74 65 72 | .to.such.a.request.with.a.router |
24be0 | 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 70 61 63 6b 65 74 20 74 68 61 74 20 63 6f 6e 74 61 | .advertisement.packet.that.conta |
24c00 | 69 6e 73 20 49 6e 74 65 72 6e 65 74 20 4c 61 79 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ins.Internet.Layer.configuration |
24c20 | 20 70 61 72 61 6d 65 74 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 4e 41 54 20 28 53 6f 75 72 63 65 | .parameters..:abbr:`SNAT.(Source |
24c40 | 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 | .Network.Address.Translation)`.i |
24c60 | 73 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a | s.the.most.common.form.of.:abbr: |
24c80 | 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f | `NAT.(Network.Address.Translatio |
24ca0 | 6e 29 60 20 61 6e 64 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f | n)`.and.is.typically.referred.to |
24cc0 | 20 73 69 6d 70 6c 79 20 61 73 20 4e 41 54 2e 20 54 6f 20 62 65 20 6d 6f 72 65 20 63 6f 72 72 65 | .simply.as.NAT..To.be.more.corre |
24ce0 | 63 74 2c 20 77 68 61 74 20 6d 6f 73 74 20 70 65 6f 70 6c 65 20 72 65 66 65 72 20 74 6f 20 61 73 | ct,.what.most.people.refer.to.as |
24d00 | 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 | .:abbr:`NAT.(Network.Address.Tra |
24d20 | 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 63 74 75 61 6c 6c 79 20 74 68 65 20 70 72 6f 63 65 | nslation)`.is.actually.the.proce |
24d40 | 73 73 20 6f 66 20 3a 61 62 62 72 3a 60 50 41 54 20 28 50 6f 72 74 20 41 64 64 72 65 73 73 20 54 | ss.of.:abbr:`PAT.(Port.Address.T |
24d60 | 72 61 6e 73 6c 61 74 69 6f 6e 29 60 2c 20 6f 72 20 4e 41 54 20 6f 76 65 72 6c 6f 61 64 2e 20 53 | ranslation)`,.or.NAT.overload..S |
24d80 | 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 62 79 20 69 6e 74 65 72 6e 61 | NAT.is.typically.used.by.interna |
24da0 | 6c 20 75 73 65 72 73 2f 70 72 69 76 61 74 65 20 68 6f 73 74 73 20 74 6f 20 61 63 63 65 73 73 20 | l.users/private.hosts.to.access. |
24dc0 | 74 68 65 20 49 6e 74 65 72 6e 65 74 20 2d 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 | the.Internet.-.the.source.addres |
24de0 | 73 20 69 73 20 74 72 61 6e 73 6c 61 74 65 64 20 61 6e 64 20 74 68 75 73 20 6b 65 70 74 20 70 72 | s.is.translated.and.thus.kept.pr |
24e00 | 69 76 61 74 65 2e 00 3a 61 62 62 72 3a 60 53 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 | ivate..:abbr:`SNAT64.(IPv6-to-IP |
24e20 | 76 34 20 53 6f 75 72 63 65 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 | v4.Source.Address.Translation)`. |
24e40 | 69 73 20 61 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e | is.a.stateful.translation.mechan |
24e60 | 69 73 6d 20 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 36 20 61 64 64 72 65 73 73 | ism.that.translates.IPv6.address |
24e80 | 65 73 20 74 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 2e 00 3a 61 62 62 72 3a 60 53 4e 4d | es.to.IPv4.addresses..:abbr:`SNM |
24ea0 | 50 20 28 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f | P.(Simple.Network.Management.Pro |
24ec0 | 74 6f 63 6f 6c 29 60 20 69 73 20 61 6e 20 49 6e 74 65 72 6e 65 74 20 53 74 61 6e 64 61 72 64 20 | tocol)`.is.an.Internet.Standard. |
24ee0 | 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 63 6f 6c 6c 65 63 74 69 6e 67 20 61 6e 64 20 6f 72 67 61 | protocol.for.collecting.and.orga |
24f00 | 6e 69 7a 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6d 61 6e 61 67 65 64 | nizing.information.about.managed |
24f20 | 20 64 65 76 69 63 65 73 20 6f 6e 20 49 50 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 66 6f 72 20 | .devices.on.IP.networks.and.for. |
24f40 | 6d 6f 64 69 66 79 69 6e 67 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 63 68 | modifying.that.information.to.ch |
24f60 | 61 6e 67 65 20 64 65 76 69 63 65 20 62 65 68 61 76 69 6f 72 2e 20 44 65 76 69 63 65 73 20 74 68 | ange.device.behavior..Devices.th |
24f80 | 61 74 20 74 79 70 69 63 61 6c 6c 79 20 73 75 70 70 6f 72 74 20 53 4e 4d 50 20 69 6e 63 6c 75 64 | at.typically.support.SNMP.includ |
24fa0 | 65 20 63 61 62 6c 65 20 6d 6f 64 65 6d 73 2c 20 72 6f 75 74 65 72 73 2c 20 73 77 69 74 63 68 65 | e.cable.modems,.routers,.switche |
24fc0 | 73 2c 20 73 65 72 76 65 72 73 2c 20 77 6f 72 6b 73 74 61 74 69 6f 6e 73 2c 20 70 72 69 6e 74 65 | s,.servers,.workstations,.printe |
24fe0 | 72 73 2c 20 61 6e 64 20 6d 6f 72 65 2e 00 3a 61 62 62 72 3a 60 53 4e 50 54 76 36 20 28 53 6f 75 | rs,.and.more..:abbr:`SNPTv6.(Sou |
25000 | 72 63 65 20 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 | rce.IPv6-to-IPv6.Network.Prefix. |
25020 | 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 54 68 65 20 63 6f 6e 76 65 72 73 69 6f 6e 20 66 75 6e | Translation)`.The.conversion.fun |
25040 | 63 74 69 6f 6e 20 69 73 20 6d 61 69 6e 6c 79 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c | ction.is.mainly.used.in.the.foll |
25060 | 6f 77 69 6e 67 20 73 63 65 6e 61 72 69 6f 73 3a 00 3a 61 62 62 72 3a 60 53 53 48 20 28 53 65 63 | owing.scenarios:.:abbr:`SSH.(Sec |
25080 | 75 72 65 20 53 68 65 6c 6c 29 60 20 69 73 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6e | ure.Shell)`.is.a.cryptographic.n |
250a0 | 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 6f 70 65 72 61 74 69 6e 67 20 6e 65 | etwork.protocol.for.operating.ne |
250c0 | 74 77 6f 72 6b 20 73 65 72 76 69 63 65 73 20 73 65 63 75 72 65 6c 79 20 6f 76 65 72 20 61 6e 20 | twork.services.securely.over.an. |
250e0 | 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 | unsecured.network..The.standard. |
25100 | 54 43 50 20 70 6f 72 74 20 66 6f 72 20 53 53 48 20 69 73 20 32 32 2e 20 54 68 65 20 62 65 73 74 | TCP.port.for.SSH.is.22..The.best |
25120 | 20 6b 6e 6f 77 6e 20 65 78 61 6d 70 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 66 6f | .known.example.application.is.fo |
25140 | 72 20 72 65 6d 6f 74 65 20 6c 6f 67 69 6e 20 74 6f 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 | r.remote.login.to.computer.syste |
25160 | 6d 73 20 62 79 20 75 73 65 72 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 50 20 28 53 65 63 75 72 65 | ms.by.users..:abbr:`SSTP.(Secure |
25180 | 20 53 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 | .Socket.Tunneling.Protocol)`.is. |
251a0 | 61 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c 20 50 72 | a.form.of.:abbr:`VPN.(Virtual.Pr |
251c0 | 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 | ivate.Network)`.tunnel.that.prov |
251e0 | 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 50 50 | ides.a.mechanism.to.transport.PP |
25200 | 50 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 | P.traffic.through.an.SSL/TLS.cha |
25220 | 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 | nnel..SSL/TLS.provides.transport |
25240 | 2d 6c 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 | -level.security.with.key.negotia |
25260 | 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 61 66 66 69 63 20 69 6e 74 | tion,.encryption.and.traffic.int |
25280 | 65 67 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 65 20 6f 66 20 53 53 4c 2f | egrity.checking..The.use.of.SSL/ |
252a0 | 54 4c 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 61 6c 6c 6f 77 73 20 53 53 54 | TLS.over.TCP.port.443.allows.SST |
252c0 | 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 | P.to.pass.through.virtually.all. |
252e0 | 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 | firewalls.and.proxy.servers.exce |
25300 | 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 | pt.for.authenticated.web.proxies |
25320 | 2e 00 3a 61 62 62 72 3a 60 53 53 54 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e | ..:abbr:`SSTP.(Secure.Socket.Tun |
25340 | 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a | neling.Protocol)`.is.a.form.of.: |
25360 | 61 62 62 72 3a 60 56 54 50 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f | abbr:`VTP.(Virtual.Private.Netwo |
25380 | 72 6b 29 60 20 74 75 6e 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 | rk)`.tunnel.that.provides.a.mech |
253a0 | 61 6e 69 73 6d 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 | anism.to.transport.PPP.traffic.t |
253c0 | 68 72 6f 75 67 68 20 61 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 | hrough.an.SSL/TLS.channel..SSL/T |
253e0 | 4c 53 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 | LS.provides.transport-level.secu |
25400 | 72 69 74 79 20 77 69 74 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 | rity.with.key.negotiation,.encry |
25420 | 70 74 69 6f 6e 20 61 6e 64 20 74 72 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 | ption.and.traffic.integrity.chec |
25440 | 6b 69 6e 67 2e 20 54 68 65 20 75 73 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 | king..The.use.of.SSL/TLS.over.TC |
25460 | 50 20 70 6f 72 74 20 34 34 33 20 28 62 79 20 64 65 66 61 75 6c 74 2c 20 70 6f 72 74 20 63 61 6e | P.port.443.(by.default,.port.can |
25480 | 20 62 65 20 63 68 61 6e 67 65 64 29 20 61 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 | .be.changed).allows.SSTP.to.pass |
254a0 | 20 74 68 72 6f 75 67 68 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 | .through.virtually.all.firewalls |
254c0 | 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 | .and.proxy.servers.except.for.au |
254e0 | 74 68 65 6e 74 69 63 61 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 | thenticated.web.proxies..:abbr:` |
25500 | 53 54 50 20 28 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 | STP.(Spanning.Tree.Protocol)`.is |
25520 | 20 61 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 62 75 69 6c 64 73 20 | .a.network.protocol.that.builds. |
25540 | 61 20 6c 6f 6f 70 2d 66 72 65 65 20 6c 6f 67 69 63 61 6c 20 74 6f 70 6f 6c 6f 67 79 20 66 6f 72 | a.loop-free.logical.topology.for |
25560 | 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 62 61 73 69 63 20 66 75 | .Ethernet.networks..The.basic.fu |
25580 | 6e 63 74 69 6f 6e 20 6f 66 20 53 54 50 20 69 73 20 74 6f 20 70 72 65 76 65 6e 74 20 62 72 69 64 | nction.of.STP.is.to.prevent.brid |
255a0 | 67 65 20 6c 6f 6f 70 73 20 61 6e 64 20 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 72 61 64 69 61 | ge.loops.and.the.broadcast.radia |
255c0 | 74 69 6f 6e 20 74 68 61 74 20 72 65 73 75 6c 74 73 20 66 72 6f 6d 20 74 68 65 6d 2e 20 53 70 61 | tion.that.results.from.them..Spa |
255e0 | 6e 6e 69 6e 67 20 74 72 65 65 20 61 6c 73 6f 20 61 6c 6c 6f 77 73 20 61 20 6e 65 74 77 6f 72 6b | nning.tree.also.allows.a.network |
25600 | 20 64 65 73 69 67 6e 20 74 6f 20 69 6e 63 6c 75 64 65 20 62 61 63 6b 75 70 20 6c 69 6e 6b 73 20 | .design.to.include.backup.links. |
25620 | 70 72 6f 76 69 64 69 6e 67 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 20 69 66 20 61 6e 20 | providing.fault.tolerance.if.an. |
25640 | 61 63 74 69 76 65 20 6c 69 6e 6b 20 66 61 69 6c 73 2e 00 3a 61 62 62 72 3a 60 54 46 54 50 20 28 | active.link.fails..:abbr:`TFTP.( |
25660 | 54 72 69 76 69 61 6c 20 46 69 6c 65 20 54 72 61 6e 73 66 65 72 20 50 72 6f 74 6f 63 6f 6c 29 60 | Trivial.File.Transfer.Protocol)` |
25680 | 20 69 73 20 61 20 73 69 6d 70 6c 65 2c 20 6c 6f 63 6b 73 74 65 70 20 66 69 6c 65 20 74 72 61 6e | .is.a.simple,.lockstep.file.tran |
256a0 | 73 66 65 72 20 70 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 61 20 63 6c 69 | sfer.protocol.which.allows.a.cli |
256c0 | 65 6e 74 20 74 6f 20 67 65 74 20 61 20 66 69 6c 65 20 66 72 6f 6d 20 6f 72 20 70 75 74 20 61 20 | ent.to.get.a.file.from.or.put.a. |
256e0 | 66 69 6c 65 20 6f 6e 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 2e 20 4f 6e 65 20 6f 66 20 | file.onto.a.remote.host..One.of. |
25700 | 69 74 73 20 70 72 69 6d 61 72 79 20 75 73 65 73 20 69 73 20 69 6e 20 74 68 65 20 65 61 72 6c 79 | its.primary.uses.is.in.the.early |
25720 | 20 73 74 61 67 65 73 20 6f 66 20 6e 6f 64 65 73 20 62 6f 6f 74 69 6e 67 20 66 72 6f 6d 20 61 20 | .stages.of.nodes.booting.from.a. |
25740 | 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 2e 20 54 46 54 50 20 68 61 73 20 62 65 65 | local.area.network..TFTP.has.bee |
25760 | 6e 20 75 73 65 64 20 66 6f 72 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 63 61 | n.used.for.this.application.beca |
25780 | 75 73 65 20 69 74 20 69 73 20 76 65 72 79 20 73 69 6d 70 6c 65 20 74 6f 20 69 6d 70 6c 65 6d 65 | use.it.is.very.simple.to.impleme |
257a0 | 6e 74 2e 00 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 69 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 | nt..:abbr:`VNI.(Virtual.Network. |
257c0 | 49 64 65 6e 74 69 66 69 65 72 29 60 20 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f | Identifier)`.is.an.identifier.fo |
257e0 | 72 20 61 20 75 6e 69 71 75 65 20 65 6c 65 6d 65 6e 74 20 6f 66 20 61 20 76 69 72 74 75 61 6c 20 | r.a.unique.element.of.a.virtual. |
25800 | 6e 65 74 77 6f 72 6b 2e 20 20 49 6e 20 6d 61 6e 79 20 73 69 74 75 61 74 69 6f 6e 73 20 74 68 69 | network...In.many.situations.thi |
25820 | 73 20 6d 61 79 20 72 65 70 72 65 73 65 6e 74 20 61 6e 20 4c 32 20 73 65 67 6d 65 6e 74 2c 20 68 | s.may.represent.an.L2.segment,.h |
25840 | 6f 77 65 76 65 72 2c 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 64 65 66 69 6e 65 | owever,.the.control.plane.define |
25860 | 73 20 74 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 73 65 6d 61 6e 74 69 63 73 20 6f 66 20 64 65 | s.the.forwarding.semantics.of.de |
25880 | 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 56 4e 49 20 4d 41 59 20 | capsulated.packets..The.VNI.MAY. |
258a0 | 62 65 20 75 73 65 64 20 61 73 20 70 61 72 74 20 6f 66 20 45 43 4d 50 20 66 6f 72 77 61 72 64 69 | be.used.as.part.of.ECMP.forwardi |
258c0 | 6e 67 20 64 65 63 69 73 69 6f 6e 73 20 6f 72 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 61 | ng.decisions.or.MAY.be.used.as.a |
258e0 | 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 | .mechanism.to.distinguish.betwee |
25900 | 6e 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 61 64 64 72 65 73 73 20 73 70 61 63 65 73 20 63 6f 6e | n.overlapping.address.spaces.con |
25920 | 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 | tained.in.the.encapsulated.packe |
25940 | 74 20 77 68 65 6e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 63 72 6f 73 73 20 43 50 55 | t.when.load.balancing.across.CPU |
25960 | 73 2e 00 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 | s..:abbr:`VRF.(Virtual.Routing.a |
25980 | 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 64 65 76 69 63 65 73 20 63 6f 6d 62 69 6e 65 64 | nd.Forwarding)`.devices.combined |
259a0 | 20 77 69 74 68 20 69 70 20 72 75 6c 65 73 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c | .with.ip.rules.provides.the.abil |
259c0 | 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 76 69 72 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 61 6e | ity.to.create.virtual.routing.an |
259e0 | 64 20 66 6f 72 77 61 72 64 69 6e 67 20 64 6f 6d 61 69 6e 73 20 28 61 6b 61 20 56 52 46 73 2c 20 | d.forwarding.domains.(aka.VRFs,. |
25a00 | 56 52 46 2d 6c 69 74 65 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 63 29 20 69 6e 20 74 68 65 20 | VRF-lite.to.be.specific).in.the. |
25a20 | 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b 20 73 74 61 63 6b 2e 20 4f 6e 65 20 75 73 65 20 63 61 73 | Linux.network.stack..One.use.cas |
25a40 | 65 20 69 73 20 74 68 65 20 6d 75 6c 74 69 2d 74 65 6e 61 6e 63 79 20 70 72 6f 62 6c 65 6d 20 77 | e.is.the.multi-tenancy.problem.w |
25a60 | 68 65 72 65 20 65 61 63 68 20 74 65 6e 61 6e 74 20 68 61 73 20 74 68 65 69 72 20 6f 77 6e 20 75 | here.each.tenant.has.their.own.u |
25a80 | 6e 69 71 75 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e 64 20 69 6e 20 74 68 65 20 | nique.routing.tables.and.in.the. |
25aa0 | 76 65 72 79 20 6c 65 61 73 74 20 6e 65 65 64 20 64 69 66 66 65 72 65 6e 74 20 64 65 66 61 75 6c | very.least.need.different.defaul |
25ac0 | 74 20 67 61 74 65 77 61 79 73 2e 00 3a 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 | t.gateways..:abbr:`VXLAN.(Virtua |
25ae0 | 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 4c 41 4e 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 | l.Extensible.LAN)`.is.a.network. |
25b00 | 76 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 61 | virtualization.technology.that.a |
25b20 | 74 74 65 6d 70 74 73 20 74 6f 20 61 64 64 72 65 73 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 | ttempts.to.address.the.scalabili |
25b40 | 74 79 20 70 72 6f 62 6c 65 6d 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 6c 61 72 67 | ty.problems.associated.with.larg |
25b60 | 65 20 63 6c 6f 75 64 20 63 6f 6d 70 75 74 69 6e 67 20 64 65 70 6c 6f 79 6d 65 6e 74 73 2e 20 49 | e.cloud.computing.deployments..I |
25b80 | 74 20 75 73 65 73 20 61 20 56 4c 41 4e 2d 6c 69 6b 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e | t.uses.a.VLAN-like.encapsulation |
25ba0 | 20 74 65 63 68 6e 69 71 75 65 20 74 6f 20 65 6e 63 61 70 73 75 6c 61 74 65 20 4f 53 49 20 6c 61 | .technique.to.encapsulate.OSI.la |
25bc0 | 79 65 72 20 32 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 77 69 74 68 69 6e 20 6c 61 79 | yer.2.Ethernet.frames.within.lay |
25be0 | 65 72 20 34 20 55 44 50 20 64 61 74 61 67 72 61 6d 73 2c 20 75 73 69 6e 67 20 34 37 38 39 20 61 | er.4.UDP.datagrams,.using.4789.a |
25c00 | 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 74 | s.the.default.IANA-assigned.dest |
25c20 | 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 56 58 4c 41 4e 20 65 | ination.UDP.port.number..VXLAN.e |
25c40 | 6e 64 70 6f 69 6e 74 73 2c 20 77 68 69 63 68 20 74 65 72 6d 69 6e 61 74 65 20 56 58 4c 41 4e 20 | ndpoints,.which.terminate.VXLAN. |
25c60 | 74 75 6e 6e 65 6c 73 20 61 6e 64 20 6d 61 79 20 62 65 20 65 69 74 68 65 72 20 76 69 72 74 75 61 | tunnels.and.may.be.either.virtua |
25c80 | 6c 20 6f 72 20 70 68 79 73 69 63 61 6c 20 73 77 69 74 63 68 20 70 6f 72 74 73 2c 20 61 72 65 20 | l.or.physical.switch.ports,.are. |
25ca0 | 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 62 72 3a 60 56 54 45 50 73 20 28 56 58 4c 41 4e 20 74 75 6e | known.as.:abbr:`VTEPs.(VXLAN.tun |
25cc0 | 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 29 60 2e 00 3a 61 62 62 72 3a 60 57 41 50 20 28 57 69 72 | nel.endpoints)`..:abbr:`WAP.(Wir |
25ce0 | 65 6c 65 73 73 20 41 63 63 65 73 73 2d 50 6f 69 6e 74 29 60 20 70 72 6f 76 69 64 65 73 20 6e 65 | eless.Access-Point)`.provides.ne |
25d00 | 74 77 6f 72 6b 20 61 63 63 65 73 73 20 74 6f 20 63 6f 6e 6e 65 63 74 69 6e 67 20 73 74 61 74 69 | twork.access.to.connecting.stati |
25d20 | 6f 6e 73 20 69 66 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 68 61 72 64 77 61 72 65 20 73 75 70 | ons.if.the.physical.hardware.sup |
25d40 | 70 6f 72 74 73 20 61 63 74 69 6e 67 20 61 73 20 61 20 57 41 50 00 3a 61 62 62 72 3a 60 57 4c 41 | ports.acting.as.a.WAP.:abbr:`WLA |
25d60 | 4e 20 28 57 69 72 65 6c 65 73 73 20 4c 41 4e 29 60 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 | N.(Wireless.LAN)`.interface.prov |
25d80 | 69 64 65 20 38 30 32 2e 31 31 20 28 61 2f 62 2f 67 2f 6e 2f 61 63 29 20 77 69 72 65 6c 65 73 73 | ide.802.11.(a/b/g/n/ac).wireless |
25da0 | 20 73 75 70 70 6f 72 74 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 | .support.(commonly.referred.to.a |
25dc0 | 73 20 57 69 2d 46 69 29 20 62 79 20 6d 65 61 6e 73 20 6f 66 20 63 6f 6d 70 61 74 69 62 6c 65 20 | s.Wi-Fi).by.means.of.compatible. |
25de0 | 68 61 72 64 77 61 72 65 2e 20 49 66 20 79 6f 75 72 20 68 61 72 64 77 61 72 65 20 73 75 70 70 6f | hardware..If.your.hardware.suppo |
25e00 | 72 74 73 20 69 74 2c 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 6c | rts.it,.VyOS.supports.multiple.l |
25e20 | 6f 67 69 63 61 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 70 65 72 20 70 | ogical.wireless.interfaces.per.p |
25e40 | 68 79 73 69 63 61 6c 20 64 65 76 69 63 65 2e 00 3a 61 62 62 72 3a 60 57 50 41 20 28 57 69 2d 46 | hysical.device..:abbr:`WPA.(Wi-F |
25e60 | 69 20 50 72 6f 74 65 63 74 65 64 20 41 63 63 65 73 73 29 60 20 61 6e 64 20 57 50 41 32 20 45 6e | i.Protected.Access)`.and.WPA2.En |
25e80 | 74 65 72 70 72 69 73 65 20 69 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 68 20 38 30 32 | terprise.in.combination.with.802 |
25ea0 | 2e 31 78 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 | .1x.based.authentication.can.be. |
25ec0 | 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 6f 72 20 63 6f | used.to.authenticate.users.or.co |
25ee0 | 6d 70 75 74 65 72 73 20 69 6e 20 61 20 64 6f 6d 61 69 6e 2e 00 3a 61 62 62 72 3a 60 6d 47 52 45 | mputers.in.a.domain..:abbr:`mGRE |
25f00 | 20 28 4d 75 6c 74 69 70 6f 69 6e 74 20 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 | .(Multipoint.Generic.Routing.Enc |
25f20 | 61 70 73 75 6c 61 74 69 6f 6e 29 60 20 3a 72 66 63 3a 60 31 37 30 32 60 00 3a 63 66 67 63 6d 64 | apsulation)`.:rfc:`1702`.:cfgcmd |
25f40 | 3a 60 61 64 76 2d 72 6f 75 74 65 72 20 3c 41 2e 42 2e 43 2e 44 3e 60 20 e2 80 93 20 72 6f 75 74 | :`adv-router.<A.B.C.D>`.....rout |
25f60 | 65 72 20 69 64 2c 20 77 68 69 63 68 20 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 | er.id,.which.link.advertisements |
25f80 | 20 6e 65 65 64 20 74 6f 20 62 65 20 72 65 76 69 65 77 65 64 2e 00 3a 63 66 67 63 6d 64 3a 60 73 | .need.to.be.reviewed..:cfgcmd:`s |
25fa0 | 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 60 20 64 69 73 70 6c 61 79 73 20 6f 6e 6c 79 20 73 65 6c | elf-originate`.displays.only.sel |
25fc0 | 66 2d 6f 72 69 67 69 6e 61 74 65 64 20 4c 53 41 73 20 66 72 6f 6d 20 74 68 65 20 6c 6f 63 61 6c | f-originated.LSAs.from.the.local |
25fe0 | 20 72 6f 75 74 65 72 2e 00 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 63 6f | .router..:cfgcmd:`set.service.co |
26000 | 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 20 70 65 65 72 | nntrack-sync.interface.eth0.peer |
26020 | 20 31 39 32 2e 31 36 38 2e 30 2e 32 35 30 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 | .192.168.0.250`.:code:`set.servi |
26040 | 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 | ce.webproxy.url-filtering.squidg |
26060 | 75 61 72 64 20 61 75 74 6f 2d 75 70 64 61 74 65 20 75 70 64 61 74 65 2d 68 6f 75 72 20 32 33 60 | uard.auto-update.update-hour.23` |
26080 | 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c | .:code:`set.service.webproxy.url |
260a0 | 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 | -filtering.squidguard.block-cate |
260c0 | 67 6f 72 79 20 61 64 73 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 | gory.ads`.:code:`set.service.web |
260e0 | 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 | proxy.url-filtering.squidguard.b |
26100 | 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 6d 61 6c 77 61 72 65 60 00 3a 63 6f 64 65 3a 60 73 65 | lock-category.malware`.:code:`se |
26120 | 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 | t.service.webproxy.whitelist.des |
26140 | 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 60 00 3a | tination-address.192.0.2.0/24`.: |
26160 | 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 | code:`set.service.webproxy.white |
26180 | 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 20 31 39 38 2e 35 31 2e | list.destination-address.198.51. |
261a0 | 31 30 30 2e 33 33 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 | 100.33`.:code:`set.service.webpr |
261c0 | 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 39 32 | oxy.whitelist.source-address.192 |
261e0 | 2e 31 36 38 2e 31 2e 32 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 | .168.1.2`.:code:`set.service.web |
26200 | 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 | proxy.whitelist.source-address.1 |
26220 | 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 60 00 3a 6c 61 73 74 70 72 6f 6f 66 72 65 61 64 3a 32 30 | 92.168.2.0/24`.:lastproofread:20 |
26240 | 32 31 2d 30 37 2d 31 32 00 3a 6f 70 63 6d 64 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 77 69 | 21-07-12.:opcmd:`generate.pki.wi |
26260 | 72 65 67 75 61 72 64 20 6b 65 79 2d 70 61 69 72 60 2e 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 | reguard.key-pair`..:ref:`routing |
26280 | 2d 62 67 70 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 3a 20 60 60 73 65 74 20 | -bgp`.:ref:`routing-bgp`:.``set. |
262a0 | 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 2e 2e | vrf.name.<name>.protocols.bgp... |
262c0 | 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 00 3a 72 65 66 3a 60 72 6f | .``.:ref:`routing-isis`.:ref:`ro |
262e0 | 75 74 69 6e 67 2d 69 73 69 73 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d | uting-isis`:.``set.vrf.name.<nam |
26300 | 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 69 73 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f | e>.protocols.isis....``.:ref:`ro |
26320 | 75 74 69 6e 67 2d 6f 73 70 66 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 3a | uting-ospf`.:ref:`routing-ospf`: |
26340 | 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 | .``set.vrf.name.<name>.protocols |
26360 | 20 6f 73 70 66 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 | .ospf....``.:ref:`routing-ospfv3 |
26380 | 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 60 3a 20 60 60 73 65 74 20 76 | `.:ref:`routing-ospfv3`:.``set.v |
263a0 | 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 76 33 20 | rf.name.<name>.protocols.ospfv3. |
263c0 | 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 3a 72 65 66 | ...``.:ref:`routing-static`.:ref |
263e0 | 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d | :`routing-static`:.``set.vrf.nam |
26400 | 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 73 74 61 74 69 63 20 2e 2e 2e 60 60 00 | e.<name>.protocols.static....``. |
26420 | 3a 72 66 63 3a 60 32 31 33 31 60 20 73 74 61 74 65 73 3a 20 54 68 65 20 63 6c 69 65 6e 74 20 4d | :rfc:`2131`.states:.The.client.M |
26440 | 41 59 20 63 68 6f 6f 73 65 20 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 20 70 72 6f 76 69 64 65 20 | AY.choose.to.explicitly.provide. |
26460 | 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 27 63 6c 69 65 | the.identifier.through.the.'clie |
26480 | 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 20 6f 70 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 63 6c | nt.identifier'.option..If.the.cl |
264a0 | 69 65 6e 74 20 73 75 70 70 6c 69 65 73 20 61 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 | ient.supplies.a.'client.identifi |
264c0 | 65 72 27 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 4d 55 53 54 20 75 73 65 20 74 68 65 20 73 61 6d | er',.the.client.MUST.use.the.sam |
264e0 | 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 20 69 6e 20 61 6c 6c 20 73 75 62 | e.'client.identifier'.in.all.sub |
26500 | 73 65 71 75 65 6e 74 20 6d 65 73 73 61 67 65 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 | sequent.messages,.and.the.server |
26520 | 20 4d 55 53 54 20 75 73 65 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 65 72 20 74 6f 20 69 64 65 | .MUST.use.that.identifier.to.ide |
26540 | 6e 74 69 66 79 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 3a 72 66 63 3a 60 32 31 33 36 60 20 42 61 | ntify.the.client..:rfc:`2136`.Ba |
26560 | 73 65 64 00 3a 72 66 63 3a 60 32 33 32 38 60 2c 20 74 68 65 20 73 75 63 63 65 73 73 6f 72 20 74 | sed.:rfc:`2328`,.the.successor.t |
26580 | 6f 20 3a 72 66 63 3a 60 31 35 38 33 60 2c 20 73 75 67 67 65 73 74 73 20 61 63 63 6f 72 64 69 6e | o.:rfc:`1583`,.suggests.accordin |
265a0 | 67 20 74 6f 20 73 65 63 74 69 6f 6e 20 47 2e 32 20 28 63 68 61 6e 67 65 73 29 20 69 6e 20 73 65 | g.to.section.G.2.(changes).in.se |
265c0 | 63 74 69 6f 6e 20 31 36 2e 34 2e 31 20 61 20 63 68 61 6e 67 65 20 74 6f 20 74 68 65 20 70 61 74 | ction.16.4.1.a.change.to.the.pat |
265e0 | 68 20 70 72 65 66 65 72 65 6e 63 65 20 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 70 72 65 76 | h.preference.algorithm.that.prev |
26600 | 65 6e 74 73 20 70 6f 73 73 69 62 6c 65 20 72 6f 75 74 69 6e 67 20 6c 6f 6f 70 73 20 74 68 61 74 | ents.possible.routing.loops.that |
26620 | 20 77 65 72 65 20 70 6f 73 73 69 62 6c 65 20 69 6e 20 74 68 65 20 6f 6c 64 20 76 65 72 73 69 6f | .were.possible.in.the.old.versio |
26640 | 6e 20 6f 66 20 4f 53 50 46 76 32 2e 20 4d 6f 72 65 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 69 | n.of.OSPFv2..More.specifically.i |
26660 | 74 20 64 65 6d 61 6e 64 73 20 74 68 61 74 20 69 6e 74 65 72 2d 61 72 65 61 20 70 61 74 68 73 20 | t.demands.that.inter-area.paths. |
26680 | 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 62 61 63 6b 62 6f 6e 65 20 70 61 74 68 20 61 72 65 | and.intra-area.backbone.path.are |
266a0 | 20 6e 6f 77 20 6f 66 20 65 71 75 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 62 75 74 20 73 74 69 | .now.of.equal.preference.but.sti |
266c0 | 6c 6c 20 62 6f 74 68 20 70 72 65 66 65 72 72 65 64 20 74 6f 20 65 78 74 65 72 6e 61 6c 20 70 61 | ll.both.preferred.to.external.pa |
266e0 | 74 68 73 2e 00 3a 76 79 74 61 73 6b 3a 60 54 33 36 34 32 60 20 64 65 73 63 72 69 62 65 73 20 61 | ths..:vytask:`T3642`.describes.a |
26700 | 20 6e 65 77 20 43 4c 49 20 73 75 62 73 79 73 74 65 6d 20 74 68 61 74 20 73 65 72 76 65 73 20 61 | .new.CLI.subsystem.that.serves.a |
26720 | 73 20 61 20 22 63 65 72 74 73 74 6f 72 65 22 20 74 6f 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 | s.a."certstore".to.all.services. |
26740 | 72 65 71 75 69 72 69 6e 67 20 61 6e 79 20 6b 69 6e 64 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e | requiring.any.kind.of.encryption |
26760 | 20 6b 65 79 28 73 29 2e 20 49 6e 20 73 68 6f 72 74 2c 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 | .key(s)..In.short,.public.and.pr |
26780 | 69 76 61 74 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 6e 6f 77 20 73 74 6f 72 65 | ivate.certificates.are.now.store |
267a0 | 64 20 69 6e 20 50 4b 43 53 23 38 20 66 6f 72 6d 61 74 20 69 6e 20 74 68 65 20 72 65 67 75 6c 61 | d.in.PKCS#8.format.in.the.regula |
267c0 | 72 20 56 79 4f 53 20 43 4c 49 2e 20 4b 65 79 73 20 63 61 6e 20 6e 6f 77 20 62 65 20 61 64 64 65 | r.VyOS.CLI..Keys.can.now.be.adde |
267e0 | 64 2c 20 65 64 69 74 65 64 2c 20 61 6e 64 20 64 65 6c 65 74 65 64 20 75 73 69 6e 67 20 74 68 65 | d,.edited,.and.deleted.using.the |
26800 | 20 72 65 67 75 6c 61 72 20 73 65 74 2f 65 64 69 74 2f 64 65 6c 65 74 65 20 43 4c 49 20 63 6f 6d | .regular.set/edit/delete.CLI.com |
26820 | 6d 61 6e 64 73 2e 00 3c 31 2d 36 35 35 33 35 3e 3a 20 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 2e | mands..<1-65535>:.Numbered.port. |
26840 | 00 3c 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 45 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 | .<aa:nn:nn>:.Extended.community. |
26860 | 6c 69 73 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 68 3a 68 3a 68 3a | list.regular.expression..<h:h:h: |
26880 | 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a 20 49 50 76 36 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 | h:h:h:h:h/x>:.IPv6.prefix.to.mat |
268a0 | 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 | ch..<h:h:h:h:h:h:h:h>-<h:h:h:h:h |
268c0 | 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 20 72 61 6e 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 | :h:h:h>:.IPv6.range.to.match..<h |
268e0 | 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f | :h:h:h:h:h:h:h>:.IPv6.address.to |
26900 | 20 6d 61 74 63 68 2e 00 3c 6c 69 6e 65 73 3e 00 3c 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 | .match..<lines>.<number>.must.be |
26920 | 20 66 72 6f 6d 20 33 34 20 2d 20 31 37 33 2e 20 46 6f 72 20 38 30 20 4d 48 7a 20 63 68 61 6e 6e | .from.34.-.173..For.80.MHz.chann |
26940 | 65 6c 73 20 69 74 20 73 68 6f 75 6c 64 20 62 65 20 63 68 61 6e 6e 65 6c 20 2b 20 36 2e 00 3c 6e | els.it.should.be.channel.+.6..<n |
26960 | 75 6d 62 65 72 3e 20 e2 80 93 20 61 72 65 61 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 72 6f 75 | umber>.....area.identifier.throu |
26980 | 67 68 20 77 68 69 63 68 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 67 6f 65 73 2e 20 3c 41 | gh.which.a.virtual.link.goes..<A |
269a0 | 2e 42 2e 43 2e 44 3e 20 e2 80 93 20 41 42 52 20 72 6f 75 74 65 72 2d 69 64 20 77 69 74 68 20 77 | .B.C.D>.....ABR.router-id.with.w |
269c0 | 68 69 63 68 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 65 73 74 61 62 6c 69 73 68 | hich.a.virtual.link.is.establish |
269e0 | 65 64 2e 20 56 69 72 74 75 61 6c 20 6c 69 6e 6b 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 | ed..Virtual.link.must.be.configu |
26a00 | 72 65 64 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 2e 00 3c 70 6f 72 74 20 6e 61 6d 65 3e | red.on.both.routers..<port.name> |
26a20 | 3a 20 4e 61 6d 65 64 20 70 6f 72 74 20 28 61 6e 79 20 6e 61 6d 65 20 69 6e 20 2f 65 74 63 2f 73 | :.Named.port.(any.name.in./etc/s |
26a40 | 65 72 76 69 63 65 73 2c 20 65 2e 67 2e 2c 20 68 74 74 70 29 2e 00 3c 72 74 20 61 61 3a 6e 6e 3a | ervices,.e.g.,.http)..<rt.aa:nn: |
26a60 | 6e 6e 3e 3a 20 52 6f 75 74 65 20 54 61 72 67 65 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 | nn>:.Route.Target.regular.expres |
26a80 | 73 69 6f 6e 2e 00 3c 73 6f 6f 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 53 69 74 65 20 6f 66 20 4f 72 | sion..<soo.aa:nn:nn>:.Site.of.Or |
26aa0 | 69 67 69 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 74 61 72 74 3e | igin.regular.expression..<start> |
26ac0 | 2d 3c 65 6e 64 3e 3a 20 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 20 72 61 6e 67 65 20 28 65 2e 67 | -<end>:.Numbered.port.range.(e.g |
26ae0 | 2e 2c 20 31 30 30 31 2d 31 30 30 35 29 2e 00 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 53 75 62 6e | .,.1001-1005)..<x.x.x.x/x>:.Subn |
26b00 | 65 74 20 74 6f 20 6d 61 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e | et.to.match..<x.x.x.x>-<x.x.x.x> |
26b20 | 3a 20 49 50 20 72 61 6e 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 3a 20 | :.IP.range.to.match..<x.x.x.x>:. |
26b40 | 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 41 20 2a 2a 64 6f 6d 61 69 6e 20 | IP.address.to.match..A.**domain. |
26b60 | 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 | group**.represents.a.collection. |
26b80 | 6f 66 20 64 6f 6d 61 69 6e 73 2e 00 41 20 2a 2a 6d 61 63 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 | of.domains..A.**mac.group**.repr |
26ba0 | 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 6d 61 63 20 61 64 64 72 65 | esents.a.collection.of.mac.addre |
26bc0 | 73 73 65 73 2e 00 41 20 2a 2a 70 6f 72 74 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 | sses..A.**port.group**.represent |
26be0 | 73 20 6f 6e 6c 79 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 6e 6f 74 20 74 68 65 20 70 72 6f | s.only.port.numbers,.not.the.pro |
26c00 | 74 6f 63 6f 6c 2e 20 50 6f 72 74 20 67 72 6f 75 70 73 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 | tocol..Port.groups.can.be.refere |
26c20 | 6e 63 65 64 20 66 6f 72 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 49 74 20 69 | nced.for.either.TCP.or.UDP..It.i |
26c40 | 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 54 43 50 20 61 6e 64 20 55 44 50 20 67 | s.recommended.that.TCP.and.UDP.g |
26c60 | 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 20 73 65 70 61 72 61 74 65 6c 79 20 74 6f 20 | roups.are.created.separately.to. |
26c80 | 61 76 6f 69 64 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 66 69 6c 74 65 72 69 6e 67 20 75 6e 6e | avoid.accidentally.filtering.unn |
26ca0 | 65 63 65 73 73 61 72 79 20 70 6f 72 74 73 2e 20 52 61 6e 67 65 73 20 6f 66 20 70 6f 72 74 73 20 | ecessary.ports..Ranges.of.ports. |
26cc0 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 75 73 69 6e 67 20 60 2d 60 2e 00 41 | can.be.specified.by.using.`-`..A |
26ce0 | 20 2a 62 69 74 2a 20 69 73 20 77 72 69 74 74 65 6e 20 61 73 20 2a 2a 62 69 74 2a 2a 2c 00 41 20 | .*bit*.is.written.as.**bit**,.A. |
26d00 | 3a 61 62 62 72 3a 60 4e 49 53 20 28 4e 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 | :abbr:`NIS.(Network.Information. |
26d20 | 53 65 72 76 69 63 65 29 60 20 64 6f 6d 61 69 6e 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 62 | Service)`.domain.can.be.set.to.b |
26d40 | 65 20 75 73 65 64 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 41 20 42 47 50 | e.used.for.DHCPv6.clients..A.BGP |
26d60 | 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 64 69 76 69 64 65 73 20 6f 75 72 20 41 53 20 69 6e | .confederation.divides.our.AS.in |
26d80 | 74 6f 20 73 75 62 2d 41 53 65 73 20 74 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 | to.sub-ASes.to.reduce.the.number |
26da0 | 20 6f 66 20 72 65 71 75 69 72 65 64 20 49 42 47 50 20 70 65 65 72 69 6e 67 73 2e 20 57 69 74 68 | .of.required.IBGP.peerings..With |
26dc0 | 69 6e 20 61 20 73 75 62 2d 41 53 20 77 65 20 73 74 69 6c 6c 20 72 65 71 75 69 72 65 20 66 75 6c | in.a.sub-AS.we.still.require.ful |
26de0 | 6c 2d 6d 65 73 68 20 49 42 47 50 20 62 75 74 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 73 75 | l-mesh.IBGP.but.between.these.su |
26e00 | 62 2d 41 53 65 73 20 77 65 20 75 73 65 20 73 6f 6d 65 74 68 69 6e 67 20 74 68 61 74 20 6c 6f 6f | b-ASes.we.use.something.that.loo |
26e20 | 6b 73 20 6c 69 6b 65 20 45 42 47 50 20 62 75 74 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 49 42 | ks.like.EBGP.but.behaves.like.IB |
26e40 | 47 50 20 28 63 61 6c 6c 65 64 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 42 47 50 29 2e 20 43 | GP.(called.confederation.BGP)..C |
26e60 | 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 72 69 | onfederation.mechanism.is.descri |
26e80 | 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 30 36 35 60 00 41 20 42 47 50 2d 73 70 65 61 6b 69 6e | bed.in.:rfc:`5065`.A.BGP-speakin |
26ea0 | 67 20 72 6f 75 74 65 72 20 6c 69 6b 65 20 56 79 4f 53 20 63 61 6e 20 72 65 74 72 69 65 76 65 20 | g.router.like.VyOS.can.retrieve. |
26ec0 | 52 4f 41 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 52 50 4b 49 20 22 52 65 6c 79 69 | ROA.information.from.RPKI."Relyi |
26ee0 | 6e 67 20 50 61 72 74 79 20 73 6f 66 74 77 61 72 65 22 20 28 6f 66 74 65 6e 20 6a 75 73 74 20 63 | ng.Party.software".(often.just.c |
26f00 | 61 6c 6c 65 64 20 61 6e 20 22 52 50 4b 49 20 73 65 72 76 65 72 22 20 6f 72 20 22 52 50 4b 49 20 | alled.an."RPKI.server".or."RPKI. |
26f20 | 76 61 6c 69 64 61 74 6f 72 22 29 20 62 79 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 54 52 20 | validator").by.using.:abbr:`RTR. |
26f40 | 28 52 50 4b 49 20 74 6f 20 52 6f 75 74 65 72 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 72 | (RPKI.to.Router)`.protocol..Ther |
26f60 | 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 69 6d 70 6c 65 6d | e.are.several.open.source.implem |
26f80 | 65 6e 74 61 74 69 6f 6e 73 20 74 6f 20 63 68 6f 6f 73 65 20 66 72 6f 6d 2c 20 73 75 63 68 20 61 | entations.to.choose.from,.such.a |
26fa0 | 73 20 4e 4c 4e 65 74 4c 61 62 73 27 20 52 6f 75 74 69 6e 61 74 6f 72 5f 20 28 77 72 69 74 74 65 | s.NLNetLabs'.Routinator_.(writte |
26fc0 | 6e 20 69 6e 20 52 75 73 74 29 2c 20 43 6c 6f 75 64 66 6c 61 72 65 27 73 20 47 6f 52 54 52 5f 20 | n.in.Rust),.Cloudflare's.GoRTR_. |
26fe0 | 61 6e 64 20 4f 63 74 6f 52 50 4b 49 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 47 6f 29 2c 20 61 | and.OctoRPKI_.(written.in.Go),.a |
27000 | 6e 64 20 52 49 50 45 20 4e 43 43 27 73 20 52 50 4b 49 20 56 61 6c 69 64 61 74 6f 72 5f 20 28 77 | nd.RIPE.NCC's.RPKI.Validator_.(w |
27020 | 72 69 74 74 65 6e 20 69 6e 20 4a 61 76 61 29 2e 20 54 68 65 20 52 54 52 20 70 72 6f 74 6f 63 6f | ritten.in.Java)..The.RTR.protoco |
27040 | 6c 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 32 31 30 60 2e 00 41 | l.is.described.in.:rfc:`8210`..A |
27060 | 20 42 47 50 2d 73 70 65 61 6b 69 6e 67 20 72 6f 75 74 65 72 20 6c 69 6b 65 20 56 79 4f 53 20 63 | .BGP-speaking.router.like.VyOS.c |
27080 | 61 6e 20 72 65 74 72 69 65 76 65 20 52 4f 41 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d | an.retrieve.ROA.information.from |
270a0 | 20 52 50 4b 49 20 22 52 65 6c 79 69 6e 67 20 50 61 72 74 79 20 73 6f 66 74 77 61 72 65 22 20 28 | .RPKI."Relying.Party.software".( |
270c0 | 6f 66 74 65 6e 20 6a 75 73 74 20 63 61 6c 6c 65 64 20 61 6e 20 22 52 50 4b 49 20 73 65 72 76 65 | often.just.called.an."RPKI.serve |
270e0 | 72 22 20 6f 72 20 22 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 22 29 20 62 79 20 75 73 69 6e 67 | r".or."RPKI.validator").by.using |
27100 | 20 3a 61 62 62 72 3a 60 52 54 52 20 28 52 50 4b 49 20 74 6f 20 52 6f 75 74 65 72 29 60 20 70 72 | .:abbr:`RTR.(RPKI.to.Router)`.pr |
27120 | 6f 74 6f 63 6f 6c 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 6f 70 65 6e 20 73 | otocol..There.are.several.open.s |
27140 | 6f 75 72 63 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 74 6f 20 63 68 6f 6f 73 65 20 | ource.implementations.to.choose. |
27160 | 66 72 6f 6d 2c 20 73 75 63 68 20 61 73 20 4e 4c 4e 65 74 4c 61 62 73 27 20 52 6f 75 74 69 6e 61 | from,.such.as.NLNetLabs'.Routina |
27180 | 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 52 75 73 74 29 2c 20 4f 70 65 6e 42 53 44 27 | tor_.(written.in.Rust),.OpenBSD' |
271a0 | 73 20 72 70 6b 69 2d 63 6c 69 65 6e 74 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 43 29 2c 20 61 | s.rpki-client_.(written.in.C),.a |
271c0 | 6e 64 20 53 74 61 79 52 54 52 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 47 6f 29 2e 20 54 68 65 | nd.StayRTR_.(written.in.Go)..The |
271e0 | 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 | .RTR.protocol.is.described.in.:r |
27200 | 66 63 3a 60 38 32 31 30 60 2e 00 41 20 42 72 69 64 67 65 20 69 73 20 61 20 77 61 79 20 74 6f 20 | fc:`8210`..A.Bridge.is.a.way.to. |
27220 | 63 6f 6e 6e 65 63 74 20 74 77 6f 20 45 74 68 65 72 6e 65 74 20 73 65 67 6d 65 6e 74 73 20 74 6f | connect.two.Ethernet.segments.to |
27240 | 67 65 74 68 65 72 20 69 6e 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 | gether.in.a.protocol.independent |
27260 | 20 77 61 79 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 62 61 73 65 | .way..Packets.are.forwarded.base |
27280 | 64 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 61 64 64 72 65 73 73 2c 20 72 61 74 68 65 72 20 74 68 | d.on.Ethernet.address,.rather.th |
272a0 | 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 28 6c 69 6b 65 20 61 20 72 6f 75 74 65 72 29 2e 20 53 | an.IP.address.(like.a.router)..S |
272c0 | 69 6e 63 65 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 64 6f 6e 65 20 61 74 20 4c 61 79 65 72 | ince.forwarding.is.done.at.Layer |
272e0 | 20 32 2c 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 67 6f 20 74 72 61 6e 73 70 61 | .2,.all.protocols.can.go.transpa |
27300 | 72 65 6e 74 6c 79 20 74 68 72 6f 75 67 68 20 61 20 62 72 69 64 67 65 2e 20 54 68 65 20 4c 69 6e | rently.through.a.bridge..The.Lin |
27320 | 75 78 20 62 72 69 64 67 65 20 63 6f 64 65 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 20 73 75 62 73 | ux.bridge.code.implements.a.subs |
27340 | 65 74 20 6f 66 20 74 68 65 20 41 4e 53 49 2f 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 6e 64 | et.of.the.ANSI/IEEE.802.1d.stand |
27360 | 61 72 64 2e 00 41 20 47 52 45 20 74 75 6e 6e 65 6c 20 6f 70 65 72 61 74 65 73 20 61 74 20 6c 61 | ard..A.GRE.tunnel.operates.at.la |
27380 | 79 65 72 20 33 20 6f 66 20 74 68 65 20 4f 53 49 20 6d 6f 64 65 6c 20 61 6e 64 20 69 73 20 72 65 | yer.3.of.the.OSI.model.and.is.re |
273a0 | 70 72 65 73 65 6e 74 65 64 20 62 79 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 34 37 2e 20 54 68 65 | presented.by.IP.protocol.47..The |
273c0 | 20 6d 61 69 6e 20 62 65 6e 65 66 69 74 20 6f 66 20 61 20 47 52 45 20 74 75 6e 6e 65 6c 20 69 73 | .main.benefit.of.a.GRE.tunnel.is |
273e0 | 20 74 68 61 74 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 63 61 72 72 79 20 6d 75 6c 74 | .that.you.are.able.to.carry.mult |
27400 | 69 70 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 74 | iple.protocols.inside.the.same.t |
27420 | 75 6e 6e 65 6c 2e 20 47 52 45 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 63 61 | unnel..GRE.also.supports.multica |
27440 | 73 74 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 75 70 70 6f 72 74 73 20 72 6f 75 74 69 6e 67 20 | st.traffic.and.supports.routing. |
27460 | 70 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 20 6c 65 76 65 72 61 67 65 20 6d 75 6c 74 69 63 61 73 | protocols.that.leverage.multicas |
27480 | 74 20 74 6f 20 66 6f 72 6d 20 6e 65 69 67 68 62 6f 72 20 61 64 6a 61 63 65 6e 63 69 65 73 2e 00 | t.to.form.neighbor.adjacencies.. |
274a0 | 41 20 52 75 6c 65 2d 53 65 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 76 65 | A.Rule-Set.can.be.applied.to.eve |
274c0 | 72 79 20 69 6e 74 65 72 66 61 63 65 3a 00 41 20 53 4e 54 50 20 73 65 72 76 65 72 20 61 64 64 72 | ry.interface:.A.SNTP.server.addr |
274e0 | 65 73 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 66 6f 72 20 44 48 43 50 76 36 20 | ess.can.be.specified.for.DHCPv6. |
27500 | 63 6c 69 65 6e 74 73 2e 00 41 20 56 52 46 20 64 65 76 69 63 65 20 69 73 20 63 72 65 61 74 65 64 | clients..A.VRF.device.is.created |
27520 | 20 77 69 74 68 20 61 6e 20 61 73 73 6f 63 69 61 74 65 64 20 72 6f 75 74 65 20 74 61 62 6c 65 2e | .with.an.associated.route.table. |
27540 | 20 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 68 65 6e 20 65 6e 73 | .Network.interfaces.are.then.ens |
27560 | 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 20 64 65 76 69 63 65 2e 00 41 20 56 79 4f 53 20 47 52 | laved.to.a.VRF.device..A.VyOS.GR |
27580 | 45 20 74 75 6e 6e 65 6c 20 63 61 6e 20 63 61 72 72 79 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 | E.tunnel.can.carry.both.IPv4.and |
275a0 | 20 49 50 76 36 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 63 72 | .IPv6.traffic.and.can.also.be.cr |
275c0 | 65 61 74 65 64 20 6f 76 65 72 20 65 69 74 68 65 72 20 49 50 76 34 20 28 67 72 65 29 20 6f 72 20 | eated.over.either.IPv4.(gre).or. |
275e0 | 49 50 76 36 20 28 69 70 36 67 72 65 29 2e 00 41 20 56 79 4f 53 20 72 6f 75 74 65 72 20 77 69 74 | IPv6.(ip6gre)..A.VyOS.router.wit |
27600 | 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 2d 20 65 74 68 30 20 28 57 41 4e 29 20 61 6e | h.two.interfaces.-.eth0.(WAN).an |
27620 | 64 20 65 74 68 31 20 28 4c 41 4e 29 20 2d 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 69 6d | d.eth1.(LAN).-.is.required.to.im |
27640 | 70 6c 65 6d 65 6e 74 20 61 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 44 4e 53 20 63 6f 6e 66 | plement.a.split-horizon.DNS.conf |
27660 | 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 2e 00 41 20 62 61 73 | iguration.for.example.com..A.bas |
27680 | 69 63 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 20 74 75 6e 6e | ic.configuration.requires.a.tunn |
276a0 | 65 6c 20 73 6f 75 72 63 65 20 28 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 29 2c 20 61 20 74 75 | el.source.(source-address),.a.tu |
276c0 | 6e 6e 65 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 72 65 6d 6f 74 65 29 2c 20 61 6e 20 65 6e | nnel.destination.(remote),.an.en |
276e0 | 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 28 67 72 65 29 2c 20 61 6e 64 20 61 6e 20 61 | capsulation.type.(gre),.and.an.a |
27700 | 64 64 72 65 73 73 20 28 69 70 76 34 2f 69 70 76 36 29 2e 20 42 65 6c 6f 77 20 69 73 20 61 20 62 | ddress.(ipv4/ipv6)..Below.is.a.b |
27720 | 61 73 69 63 20 49 50 76 34 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 | asic.IPv4.only.configuration.exa |
27740 | 6d 70 6c 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 6e | mple.taken.from.a.VyOS.router.an |
27760 | 64 20 61 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6d 61 69 6e 20 64 | d.a.Cisco.IOS.router..The.main.d |
27780 | 69 66 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 74 77 6f 20 63 6f 6e 66 | ifference.between.these.two.conf |
277a0 | 69 67 75 72 61 74 69 6f 6e 73 20 69 73 20 74 68 61 74 20 56 79 4f 53 20 72 65 71 75 69 72 65 73 | igurations.is.that.VyOS.requires |
277c0 | 20 79 6f 75 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 65 6e | .you.explicitly.configure.the.en |
277e0 | 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 2e 20 54 68 65 20 43 69 73 63 6f 20 72 6f 75 74 | capsulation.type..The.Cisco.rout |
27800 | 65 72 20 64 65 66 61 75 6c 74 73 20 74 6f 20 47 52 45 20 49 50 20 6f 74 68 65 72 77 69 73 65 20 | er.defaults.to.GRE.IP.otherwise. |
27820 | 69 74 20 77 6f 75 6c 64 20 68 61 76 65 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 | it.would.have.to.be.configured.a |
27840 | 73 20 77 65 6c 6c 2e 00 41 20 62 61 73 69 63 20 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 | s.well..A.basic.introduction.to. |
27860 | 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e | zone-based.firewalls.can.be.foun |
27880 | 64 20 60 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f | d.`here.<https://support.vyos.io |
278a0 | 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 | /en/kb/articles/a-primer-to-zone |
278c0 | 2d 62 61 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 | -based-firewall>`_,.and.an.examp |
278e0 | 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 | le.at.:ref:`examples-zone-policy |
27900 | 60 2e 00 41 20 62 72 69 64 67 65 20 6e 61 6d 65 64 20 60 62 72 31 30 30 60 00 41 20 62 72 69 65 | `..A.bridge.named.`br100`.A.brie |
27920 | 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 20 | f.description.what.this.network. |
27940 | 69 73 20 61 6c 6c 20 61 62 6f 75 74 2e 00 41 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 6d | is.all.about..A.class.can.have.m |
27960 | 75 6c 74 69 70 6c 65 20 6d 61 74 63 68 20 66 69 6c 74 65 72 73 3a 00 41 20 63 6f 6d 6d 6f 6e 20 | ultiple.match.filters:.A.common. |
27980 | 65 78 61 6d 70 6c 65 20 69 73 20 74 68 65 20 63 61 73 65 20 6f 66 20 73 6f 6d 65 20 70 6f 6c 69 | example.is.the.case.of.some.poli |
279a0 | 63 69 65 73 20 77 68 69 63 68 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 65 66 66 65 63 | cies.which,.in.order.to.be.effec |
279c0 | 74 69 76 65 2c 20 74 68 65 79 20 6e 65 65 64 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f | tive,.they.need.to.be.applied.to |
279e0 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 64 69 72 65 63 74 6c 79 20 63 | .an.interface.that.is.directly.c |
27a00 | 6f 6e 6e 65 63 74 65 64 20 77 68 65 72 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 73 | onnected.where.the.bottleneck.is |
27a20 | 2e 20 49 66 20 79 6f 75 72 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 | ..If.your.router.is.not.directly |
27a40 | 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 2c 20 62 75 | .connected.to.the.bottleneck,.bu |
27a60 | 74 20 73 6f 6d 65 20 68 6f 70 20 62 65 66 6f 72 65 20 69 74 2c 20 79 6f 75 20 63 61 6e 20 65 6d | t.some.hop.before.it,.you.can.em |
27a80 | 75 6c 61 74 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 62 79 20 65 6d 62 65 64 64 69 6e | ulate.the.bottleneck.by.embeddin |
27aa0 | 67 20 79 6f 75 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 | g.your.non-shaping.policy.into.a |
27ac0 | 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 6f 6e 65 20 73 6f 20 74 68 61 74 20 69 74 | .classful.shaping.one.so.that.it |
27ae0 | 20 74 61 6b 65 73 20 65 66 66 65 63 74 2e 00 41 20 63 6f 6d 70 6c 65 74 65 20 4c 44 41 50 20 61 | .takes.effect..A.complete.LDAP.a |
27b00 | 75 74 68 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 75 6c 64 20 | uth.OpenVPN.configuration.could. |
27b20 | 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 3a | look.like.the.following.example: |
27b40 | 00 41 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 63 61 6e 20 62 65 20 | .A.configuration.example.can.be. |
27b60 | 66 6f 75 6e 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 20 49 6e 20 74 68 69 73 20 73 | found.in.this.section..In.this.s |
27b80 | 69 6d 70 6c 69 66 69 65 64 20 73 63 65 6e 61 72 69 6f 2c 20 6d 61 69 6e 20 74 68 69 6e 67 73 20 | implified.scenario,.main.things. |
27ba0 | 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 72 65 3a 00 41 20 63 6f 6e 6e 65 63 74 69 | to.be.considered.are:.A.connecti |
27bc0 | 6f 6e 20 61 74 74 65 6d 70 74 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 61 73 3a 00 41 20 64 | on.attempt.will.be.shown.as:.A.d |
27be0 | 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e | efault.route.is.automatically.in |
27c00 | 73 74 61 6c 6c 65 64 20 6f 6e 63 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 70 | stalled.once.the.interface.is.up |
27c20 | 2e 20 54 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 62 65 68 61 76 69 6f 72 20 75 73 65 20 74 68 | ..To.change.this.behavior.use.th |
27c40 | 65 20 60 60 6e 6f 2d 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 69 6f | e.``no-default-route``.CLI.optio |
27c60 | 6e 2e 00 41 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 66 6f | n..A.description.can.be.added.fo |
27c80 | 72 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 75 6e 69 71 75 65 20 72 65 6c 61 79 20 49 44 | r.each.and.every.unique.relay.ID |
27ca0 | 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 | ..This.is.useful.to.distinguish. |
27cc0 | 62 65 74 77 65 65 6e 20 6d 75 6c 74 69 70 6c 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 73 | between.multiple.different.ports |
27ce0 | 2f 61 70 70 6c 69 61 63 74 69 6f 6e 73 2e 00 41 20 64 69 73 61 62 6c 65 64 20 67 72 6f 75 70 20 | /appliactions..A.disabled.group. |
27d00 | 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 56 52 52 50 20 70 72 | will.be.removed.from.the.VRRP.pr |
27d20 | 6f 63 65 73 73 20 61 6e 64 20 79 6f 75 72 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 70 | ocess.and.your.router.will.not.p |
27d40 | 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 56 52 52 50 20 66 6f 72 20 74 68 61 74 20 56 52 49 44 | articipate.in.VRRP.for.that.VRID |
27d60 | 2e 20 49 74 20 77 69 6c 6c 20 64 69 73 61 70 70 65 61 72 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 | ..It.will.disappear.from.operati |
27d80 | 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 6f 75 74 70 75 74 2c 20 72 61 74 68 65 | onal.mode.commands.output,.rathe |
27da0 | 72 20 74 68 61 6e 20 65 6e 74 65 72 20 74 68 65 20 62 61 63 6b 75 70 20 73 74 61 74 65 2e 00 41 | r.than.enter.the.backup.state..A |
27dc0 | 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 | .domain.name.is.the.label.(name) |
27de0 | 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 | .assigned.to.a.computer.network. |
27e00 | 61 6e 64 20 69 73 20 74 68 75 73 20 75 6e 69 71 75 65 2e 20 56 79 4f 53 20 61 70 70 65 6e 64 73 | and.is.thus.unique..VyOS.appends |
27e20 | 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 61 73 20 61 20 73 75 66 66 69 78 20 74 6f 20 | .the.domain.name.as.a.suffix.to. |
27e40 | 61 6e 79 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 2e 20 46 6f 72 20 65 78 61 6d 70 6c | any.unqualified.name..For.exampl |
27e60 | 65 2c 20 69 66 20 79 6f 75 20 73 65 74 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 65 | e,.if.you.set.the.domain.name.`e |
27e80 | 78 61 6d 70 6c 65 2e 63 6f 6d 60 2c 20 61 6e 64 20 79 6f 75 20 77 6f 75 6c 64 20 70 69 6e 67 20 | xample.com`,.and.you.would.ping. |
27ea0 | 74 68 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 6e 61 6d 65 20 6f 66 20 60 63 72 75 78 60 2c 20 | the.unqualified.name.of.`crux`,. |
27ec0 | 74 68 65 6e 20 56 79 4f 53 20 71 75 61 6c 69 66 69 65 73 20 74 68 65 20 6e 61 6d 65 20 74 6f 20 | then.VyOS.qualifies.the.name.to. |
27ee0 | 60 63 72 75 78 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2e 00 41 20 64 75 6d 6d 79 20 69 6e 74 65 | `crux.example.com`..A.dummy.inte |
27f00 | 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 70 72 6f 76 69 64 65 72 2d 61 73 73 69 67 6e 65 64 20 | rface.for.the.provider-assigned. |
27f20 | 49 50 3b 00 41 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 60 60 66 77 6d 61 72 6b 60 60 20 61 | IP;.A.firewall.mark.``fwmark``.a |
27f40 | 6c 6c 6f 77 73 20 75 73 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 70 6f 72 74 73 20 66 6f 72 20 68 | llows.using.multiple.ports.for.h |
27f60 | 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 2e | igh-availability.virtual-server. |
27f80 | 20 49 74 20 75 73 65 73 20 66 77 6d 61 72 6b 20 76 61 6c 75 65 2e 00 41 20 66 75 6c 6c 20 65 78 | .It.uses.fwmark.value..A.full.ex |
27fa0 | 61 6d 70 6c 65 20 6f 66 20 61 20 54 75 6e 6e 65 6c 62 72 6f 6b 65 72 2e 6e 65 74 20 63 6f 6e 66 | ample.of.a.Tunnelbroker.net.conf |
27fc0 | 69 67 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 3a 72 65 66 3a 60 68 65 72 65 20 3c 65 | ig.can.be.found.at.:ref:`here.<e |
27fe0 | 78 61 6d 70 6c 65 73 2d 74 75 6e 6e 65 6c 62 72 6f 6b 65 72 2d 69 70 76 36 3e 60 2e 00 41 20 67 | xamples-tunnelbroker-ipv6>`..A.g |
28000 | 65 6e 65 72 69 63 20 60 3c 6e 61 6d 65 3e 60 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 69 73 | eneric.`<name>`.referencing.this |
28020 | 20 73 79 6e 63 20 73 65 72 76 69 63 65 2e 00 41 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 74 68 65 | .sync.service..A.hostname.is.the |
28040 | 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 6e 65 74 77 | .label.(name).assigned.to.a.netw |
28060 | 6f 72 6b 20 64 65 76 69 63 65 20 28 61 20 68 6f 73 74 29 20 6f 6e 20 61 20 6e 65 74 77 6f 72 6b | ork.device.(a.host).on.a.network |
28080 | 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 6f 6e 65 20 | .and.is.used.to.distinguish.one. |
280a0 | 64 65 76 69 63 65 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 20 6f 6e 20 73 70 65 63 69 66 69 63 20 | device.from.another.on.specific. |
280c0 | 6e 65 74 77 6f 72 6b 73 20 6f 72 20 6f 76 65 72 20 74 68 65 20 69 6e 74 65 72 6e 65 74 2e 20 4f | networks.or.over.the.internet..O |
280e0 | 6e 20 74 68 65 20 6f 74 68 65 72 20 68 61 6e 64 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 | n.the.other.hand.this.will.be.th |
28100 | 65 20 6e 61 6d 65 20 77 68 69 63 68 20 61 70 70 65 61 72 73 20 6f 6e 20 74 68 65 20 63 6f 6d 6d | e.name.which.appears.on.the.comm |
28120 | 61 6e 64 20 6c 69 6e 65 20 70 72 6f 6d 70 74 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c | and.line.prompt..A.human.readabl |
28140 | 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 43 41 20 69 73 20 61 62 | e.description.what.this.CA.is.ab |
28160 | 6f 75 74 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 65 73 63 72 69 70 74 69 6f | out..A.human.readable.descriptio |
28180 | 6e 20 77 68 61 74 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 61 62 6f 75 74 | n.what.this.certificate.is.about |
281a0 | 2e 00 41 20 6c 6f 6f 6b 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 | ..A.lookback.interface.is.always |
281c0 | 20 75 70 2c 20 74 68 75 73 20 69 74 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 6d | .up,.thus.it.could.be.used.for.m |
281e0 | 61 6e 61 67 65 6d 65 6e 74 20 74 72 61 66 66 69 63 20 6f 72 20 61 73 20 73 6f 75 72 63 65 2f 64 | anagement.traffic.or.as.source/d |
28200 | 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f 72 20 61 6e 64 20 3a 61 62 62 72 3a 60 49 47 50 20 28 49 | estination.for.and.:abbr:`IGP.(I |
28220 | 6e 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6c 69 6b 65 20 | nterior.Gateway.Protocol)`.like. |
28240 | 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 20 73 6f 20 79 6f 75 72 20 69 6e 74 65 72 | :ref:`routing-bgp`.so.your.inter |
28260 | 6e 61 6c 20 42 47 50 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e | nal.BGP.link.is.not.dependent.on |
28280 | 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 73 20 61 6e 64 20 6d 75 6c 74 69 70 | .physical.link.states.and.multip |
282a0 | 6c 65 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 68 6f 73 65 6e 20 74 6f 20 74 68 65 20 64 | le.routes.can.be.chosen.to.the.d |
282c0 | 65 73 74 69 6e 61 74 69 6f 6e 2e 20 41 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 | estination..A.:ref:`dummy-interf |
282e0 | 61 63 65 60 20 49 6e 74 65 72 66 61 63 65 20 73 68 6f 75 6c 64 20 61 6c 77 61 79 73 20 62 65 20 | ace`.Interface.should.always.be. |
28300 | 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d | preferred.over.a.:ref:`loopback- |
28320 | 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 2e 00 41 20 6c 6f 6f 70 62 61 63 6b | interface`.interface..A.loopback |
28340 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 75 70 2c 20 74 68 75 73 20 69 74 | .interface.is.always.up,.thus.it |
28360 | 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 74 72 | .could.be.used.for.management.tr |
28380 | 61 66 66 69 63 20 6f 72 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 | affic.or.as.source/destination.f |
283a0 | 6f 72 20 61 6e 64 20 3a 61 62 62 72 3a 60 49 47 50 20 28 49 6e 74 65 72 69 6f 72 20 47 61 74 65 | or.and.:abbr:`IGP.(Interior.Gate |
283c0 | 77 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6c 69 6b 65 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e | way.Protocol)`.like.:ref:`routin |
283e0 | 67 2d 62 67 70 60 20 73 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 6c 69 6e 6b | g-bgp`.so.your.internal.BGP.link |
28400 | 20 69 73 20 6e 6f 74 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 70 68 79 73 69 63 61 6c 20 6c 69 | .is.not.dependent.on.physical.li |
28420 | 6e 6b 20 73 74 61 74 65 73 20 61 6e 64 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 73 20 63 61 | nk.states.and.multiple.routes.ca |
28440 | 6e 20 62 65 20 63 68 6f 73 65 6e 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 | n.be.chosen.to.the.destination.. |
28460 | 41 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 60 20 49 6e 74 65 72 66 61 | A.:ref:`dummy-interface`.Interfa |
28480 | 63 65 20 73 68 6f 75 6c 64 20 61 6c 77 61 79 73 20 62 65 20 70 72 65 66 65 72 72 65 64 20 6f 76 | ce.should.always.be.preferred.ov |
284a0 | 65 72 20 61 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 20 69 | er.a.:ref:`loopback-interface`.i |
284c0 | 6e 74 65 72 66 61 63 65 2e 00 41 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 20 69 73 20 61 20 | nterface..A.managed.device.is.a. |
284e0 | 6e 65 74 77 6f 72 6b 20 6e 6f 64 65 20 74 68 61 74 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 6e 20 | network.node.that.implements.an. |
28500 | 53 4e 4d 50 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 75 6e 69 64 69 | SNMP.interface.that.allows.unidi |
28520 | 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 61 64 2d 6f 6e 6c 79 29 20 6f 72 20 62 69 64 69 72 65 63 | rectional.(read-only).or.bidirec |
28540 | 74 69 6f 6e 61 6c 20 28 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 29 20 61 63 63 65 73 73 20 74 | tional.(read.and.write).access.t |
28560 | 6f 20 6e 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4d 61 6e | o.node-specific.information..Man |
28580 | 61 67 65 64 20 64 65 76 69 63 65 73 20 65 78 63 68 61 6e 67 65 20 6e 6f 64 65 2d 73 70 65 63 69 | aged.devices.exchange.node-speci |
285a0 | 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 4e 4d 53 73 2e 20 53 | fic.information.with.the.NMSs..S |
285c0 | 6f 6d 65 74 69 6d 65 73 20 63 61 6c 6c 65 64 20 6e 65 74 77 6f 72 6b 20 65 6c 65 6d 65 6e 74 73 | ometimes.called.network.elements |
285e0 | 2c 20 74 68 65 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 61 6e 79 | ,.the.managed.devices.can.be.any |
28600 | 20 74 79 70 65 20 6f 66 20 64 65 76 69 63 65 2c 20 69 6e 63 6c 75 64 69 6e 67 2c 20 62 75 74 20 | .type.of.device,.including,.but. |
28620 | 6e 6f 74 20 6c 69 6d 69 74 65 64 20 74 6f 2c 20 72 6f 75 74 65 72 73 2c 20 61 63 63 65 73 73 20 | not.limited.to,.routers,.access. |
28640 | 73 65 72 76 65 72 73 2c 20 73 77 69 74 63 68 65 73 2c 20 63 61 62 6c 65 20 6d 6f 64 65 6d 73 2c | servers,.switches,.cable.modems, |
28660 | 20 62 72 69 64 67 65 73 2c 20 68 75 62 73 2c 20 49 50 20 74 65 6c 65 70 68 6f 6e 65 73 2c 20 49 | .bridges,.hubs,.IP.telephones,.I |
28680 | 50 20 76 69 64 65 6f 20 63 61 6d 65 72 61 73 2c 20 63 6f 6d 70 75 74 65 72 20 68 6f 73 74 73 2c | P.video.cameras,.computer.hosts, |
286a0 | 20 61 6e 64 20 70 72 69 6e 74 65 72 73 2e 00 41 20 6d 61 74 63 68 20 66 69 6c 74 65 72 20 63 61 | .and.printers..A.match.filter.ca |
286c0 | 6e 20 63 6f 6e 74 61 69 6e 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 74 65 72 69 61 20 61 6e 64 20 | n.contain.multiple.criteria.and. |
286e0 | 77 69 6c 6c 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 20 69 66 20 61 6c 6c 20 74 68 6f 73 65 20 | will.match.traffic.if.all.those. |
28700 | 63 72 69 74 65 72 69 61 20 61 72 65 20 74 72 75 65 2e 00 41 20 6d 6f 6e 69 74 6f 72 65 64 20 73 | criteria.are.true..A.monitored.s |
28720 | 74 61 74 69 63 20 72 6f 75 74 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 65 20 69 6e 73 74 61 | tatic.route.conditions.the.insta |
28740 | 6c 6c 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 52 49 42 20 6f 6e 20 74 68 65 20 42 46 44 20 73 65 | llation.to.the.RIB.on.the.BFD.se |
28760 | 73 73 69 6f 6e 20 72 75 6e 6e 69 6e 67 20 73 74 61 74 65 3a 20 77 68 65 6e 20 42 46 44 20 73 65 | ssion.running.state:.when.BFD.se |
28780 | 73 73 69 6f 6e 20 69 73 20 75 70 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 69 6e 73 74 61 6c 6c | ssion.is.up.the.route.is.install |
287a0 | 65 64 20 74 6f 20 52 49 42 2c 20 62 75 74 20 77 68 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 | ed.to.RIB,.but.when.the.BFD.sess |
287c0 | 69 6f 6e 20 69 73 20 64 6f 77 6e 20 69 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 | ion.is.down.it.is.removed.from.t |
287e0 | 68 65 20 52 49 42 2e 00 41 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 74 61 | he.RIB..A.network.management.sta |
28800 | 74 69 6f 6e 20 65 78 65 63 75 74 65 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 74 68 61 74 20 | tion.executes.applications.that. |
28820 | 6d 6f 6e 69 74 6f 72 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 6d 61 6e 61 67 65 64 20 64 65 76 69 | monitor.and.control.managed.devi |
28840 | 63 65 73 2e 20 4e 4d 53 73 20 70 72 6f 76 69 64 65 20 74 68 65 20 62 75 6c 6b 20 6f 66 20 74 68 | ces..NMSs.provide.the.bulk.of.th |
28860 | 65 20 70 72 6f 63 65 73 73 69 6e 67 20 61 6e 64 20 6d 65 6d 6f 72 79 20 72 65 73 6f 75 72 63 65 | e.processing.and.memory.resource |
28880 | 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e | s.required.for.network.managemen |
288a0 | 74 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 4e 4d 53 73 20 6d 61 79 20 65 78 69 73 74 20 6f 6e | t..One.or.more.NMSs.may.exist.on |
288c0 | 20 61 6e 79 20 6d 61 6e 61 67 65 64 20 6e 65 74 77 6f 72 6b 2e 00 41 20 6e 65 77 20 69 6e 74 65 | .any.managed.network..A.new.inte |
288e0 | 72 66 61 63 65 20 62 65 63 6f 6d 65 73 20 70 72 65 73 65 6e 74 20 60 60 50 6f 72 74 2d 63 68 61 | rface.becomes.present.``Port-cha |
28900 | 6e 6e 65 6c 31 60 60 2c 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 6b 65 20 | nnel1``,.all.configuration.like. |
28920 | 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 2c 20 53 54 50 20 77 69 6c | allowed.VLAN.interfaces,.STP.wil |
28940 | 6c 20 68 61 70 70 65 6e 20 68 65 72 65 2e 00 41 20 70 61 63 6b 65 74 20 72 61 74 65 20 6c 69 6d | l.happen.here..A.packet.rate.lim |
28960 | 69 74 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 61 20 72 75 6c 65 20 74 6f 20 61 70 70 6c | it.can.be.set.for.a.rule.to.appl |
28980 | 79 20 74 68 65 20 72 75 6c 65 20 74 6f 20 74 72 61 66 66 69 63 20 61 62 6f 76 65 20 6f 72 20 62 | y.the.rule.to.traffic.above.or.b |
289a0 | 65 6c 6f 77 20 61 20 73 70 65 63 69 66 69 65 64 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 6f 20 63 | elow.a.specified.threshold..To.c |
289c0 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 75 73 65 3a 00 | onfigure.the.rate.limiting.use:. |
289e0 | 41 20 70 61 63 6b 65 74 20 74 68 61 74 20 66 69 6e 64 73 20 61 20 6d 61 74 63 68 69 6e 67 20 65 | A.packet.that.finds.a.matching.e |
28a00 | 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 | ntry.in.the.flowtable.(flowtable |
28a20 | 20 68 69 74 29 20 69 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 6f 20 74 68 65 20 6f 75 74 70 | .hit).is.transmitted.to.the.outp |
28a40 | 75 74 20 6e 65 74 64 65 76 69 63 65 2c 20 68 65 6e 63 65 2c 20 70 61 63 6b 65 74 73 20 62 79 70 | ut.netdevice,.hence,.packets.byp |
28a60 | 61 73 73 20 74 68 65 20 63 6c 61 73 73 69 63 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 | ass.the.classic.IP.forwarding.pa |
28a80 | 74 68 20 61 6e 64 20 75 73 65 73 20 74 68 65 20 2a 2a 46 61 73 74 20 50 61 74 68 2a 2a 20 28 6f | th.and.uses.the.**Fast.Path**.(o |
28aa0 | 72 61 6e 67 65 20 63 69 72 63 6c 65 73 20 70 61 74 68 29 2e 20 54 68 65 20 76 69 73 69 62 6c 65 | range.circles.path)..The.visible |
28ac0 | 20 65 66 66 65 63 74 20 69 73 20 74 68 61 74 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 65 65 20 74 | .effect.is.that.you.do.not.see.t |
28ae0 | 68 65 73 65 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 6f 66 20 74 68 65 20 4e 65 74 | hese.packets.from.any.of.the.Net |
28b00 | 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 63 6f 6d 69 6e 67 20 61 66 74 65 72 20 69 6e 67 72 65 73 | filter.hooks.coming.after.ingres |
28b20 | 73 2e 20 49 6e 20 63 61 73 65 20 74 68 61 74 20 74 68 65 72 65 20 69 73 20 6e 6f 20 6d 61 74 63 | s..In.case.that.there.is.no.matc |
28b40 | 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f | hing.entry.in.the.flowtable.(flo |
28b60 | 77 74 61 62 6c 65 20 6d 69 73 73 29 2c 20 74 68 65 20 70 61 63 6b 65 74 20 66 6f 6c 6c 6f 77 73 | wtable.miss),.the.packet.follows |
28b80 | 20 74 68 65 20 63 6c 61 73 73 69 63 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 2e | .the.classic.IP.forwarding.path. |
28ba0 | 00 41 20 70 65 6e 61 6c 74 79 20 6f 66 20 31 30 30 30 20 69 73 20 61 73 73 65 73 73 65 64 20 65 | .A.penalty.of.1000.is.assessed.e |
28bc0 | 61 63 68 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c 73 2e 20 57 68 65 6e 20 74 | ach.time.the.route.fails..When.t |
28be0 | 68 65 20 70 65 6e 61 6c 74 69 65 73 20 72 65 61 63 68 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 | he.penalties.reach.a.predefined. |
28c00 | 74 68 72 65 73 68 6f 6c 64 20 28 73 75 70 70 72 65 73 73 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 | threshold.(suppress-value),.the. |
28c20 | 72 6f 75 74 65 72 20 73 74 6f 70 73 20 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 20 72 6f 75 | router.stops.advertising.the.rou |
28c40 | 74 65 2e 00 41 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 71 75 | te..A.physical.interface.is.requ |
28c60 | 69 72 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 69 73 20 4d 41 43 73 65 63 20 69 6e 73 74 | ired.to.connect.this.MACsec.inst |
28c80 | 61 6e 63 65 20 74 6f 2e 20 54 72 61 66 66 69 63 20 6c 65 61 76 69 6e 67 20 74 68 69 73 20 69 6e | ance.to..Traffic.leaving.this.in |
28ca0 | 74 65 72 66 61 63 65 20 77 69 6c 6c 20 6e 6f 77 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 | terface.will.now.be.authenticate |
28cc0 | 64 2f 65 6e 63 72 79 70 74 65 64 2e 00 41 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 | d/encrypted..A.pool.of.addresses |
28ce0 | 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 62 79 20 75 73 69 6e 67 20 61 20 68 79 70 68 65 | .can.be.defined.by.using.a.hyphe |
28d00 | 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 49 50 20 61 64 64 72 65 73 73 65 73 3a 00 41 20 70 6f | n.between.two.IP.addresses:.A.po |
28d20 | 72 74 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 61 20 70 6f 72 74 20 6e 75 6d 62 65 72 | rt.can.be.set.with.a.port.number |
28d40 | 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 65 20 64 65 66 69 6e 65 64 | .or.a.name.which.is.here.defined |
28d60 | 3a 20 60 60 2f 65 74 63 2f 73 65 72 76 69 63 65 73 60 60 2e 00 41 20 71 75 65 72 79 20 66 6f 72 | :.``/etc/services``..A.query.for |
28d80 | 20 77 68 69 63 68 20 74 68 65 72 65 20 69 73 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 20 | .which.there.is.authoritatively. |
28da0 | 6e 6f 20 61 6e 73 77 65 72 20 69 73 20 63 61 63 68 65 64 20 74 6f 20 71 75 69 63 6b 6c 79 20 64 | no.answer.is.cached.to.quickly.d |
28dc0 | 65 6e 79 20 61 20 72 65 63 6f 72 64 27 73 20 65 78 69 73 74 65 6e 63 65 20 6c 61 74 65 72 20 6f | eny.a.record's.existence.later.o |
28de0 | 6e 2c 20 77 69 74 68 6f 75 74 20 70 75 74 74 69 6e 67 20 61 20 68 65 61 76 79 20 6c 6f 61 64 20 | n,.without.putting.a.heavy.load. |
28e00 | 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 2e 20 49 6e 20 70 72 61 63 74 69 63 | on.the.remote.server..In.practic |
28e20 | 65 2c 20 63 61 63 68 65 73 20 63 61 6e 20 62 65 63 6f 6d 65 20 73 61 74 75 72 61 74 65 64 20 77 | e,.caches.can.become.saturated.w |
28e40 | 69 74 68 20 68 75 6e 64 72 65 64 73 20 6f 66 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 68 6f 73 | ith.hundreds.of.thousands.of.hos |
28e60 | 74 73 20 77 68 69 63 68 20 61 72 65 20 74 72 69 65 64 20 6f 6e 6c 79 20 6f 6e 63 65 2e 00 41 20 | ts.which.are.tried.only.once..A. |
28e80 | 72 65 63 65 69 76 65 64 20 4e 48 52 50 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e | received.NHRP.Traffic.Indication |
28ea0 | 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 72 65 73 6f 6c 75 74 69 6f 6e 20 61 6e 64 | .will.trigger.the.resolution.and |
28ec0 | 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 20 6f 66 20 61 20 73 68 6f 72 74 63 75 74 20 72 6f 75 | .establishment.of.a.shortcut.rou |
28ee0 | 74 65 2e 00 41 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 49 44 20 63 61 6e 20 6e 6f 74 20 62 | te..A.routing.table.ID.can.not.b |
28f00 | 65 20 6d 6f 64 69 66 69 65 64 20 6f 6e 63 65 20 69 74 20 69 73 20 61 73 73 69 67 6e 65 64 2e 20 | e.modified.once.it.is.assigned.. |
28f20 | 49 74 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 63 68 61 6e 67 65 64 20 62 79 20 64 65 6c 65 74 69 | It.can.only.be.changed.by.deleti |
28f40 | 6e 67 20 61 6e 64 20 72 65 2d 61 64 64 69 6e 67 20 74 68 65 20 56 52 46 20 69 6e 73 74 61 6e 63 | ng.and.re-adding.the.VRF.instanc |
28f60 | 65 2e 00 41 20 72 75 6c 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 | e..A.rule-set.is.a.named.collect |
28f80 | 69 6f 6e 20 6f 66 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 | ion.of.firewall.rules.that.can.b |
28fa0 | 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 61 20 7a | e.applied.to.an.interface.or.a.z |
28fc0 | 6f 6e 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 | one..Each.rule.is.numbered,.has. |
28fe0 | 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 | an.action.to.apply.if.the.rule.i |
29000 | 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 | s.matched,.and.the.ability.to.sp |
29020 | 65 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 | ecify.the.criteria.to.match..Dat |
29040 | 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 | a.packets.go.through.the.rules.f |
29060 | 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 | rom.1.-.999999,.at.the.first.mat |
29080 | 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 | ch.the.action.of.the.rule.will.b |
290a0 | 65 20 65 78 65 63 75 74 65 64 2e 00 41 20 72 75 6c 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 | e.executed..A.rule-set.is.a.name |
290c0 | 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 | d.collection.of.rules.that.can.b |
290e0 | 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 68 20 | e.applied.to.an.interface..Each. |
29100 | 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 | rule.is.numbered,.has.an.action. |
29120 | 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c | to.apply.if.the.rule.is.matched, |
29140 | 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 | .and.the.ability.to.specify.the. |
29160 | 63 72 69 74 65 72 69 61 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 | criteria.to.match..Data.packets. |
29180 | 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 | go.through.the.rules.from.1.-.99 |
291a0 | 39 39 39 39 2c 20 61 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 | 9999,.at.the.first.match.the.act |
291c0 | 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 | ion.of.the.rule.will.be.executed |
291e0 | 2e 00 41 20 73 63 72 69 70 74 20 63 61 6e 20 62 65 20 72 75 6e 20 77 68 65 6e 20 61 6e 20 69 6e | ..A.script.can.be.run.when.an.in |
29200 | 74 65 72 66 61 63 65 20 73 74 61 74 65 20 63 68 61 6e 67 65 20 6f 63 63 75 72 73 2e 20 53 63 72 | terface.state.change.occurs..Scr |
29220 | 69 70 74 73 20 61 72 65 20 72 75 6e 20 66 72 6f 6d 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 | ipts.are.run.from./config/script |
29240 | 73 2c 20 66 6f 72 20 61 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 20 73 70 65 63 | s,.for.a.different.location.spec |
29260 | 69 66 79 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 3a 00 41 20 73 65 67 6d 65 6e 74 20 49 44 20 | ify.the.full.path:.A.segment.ID. |
29280 | 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 70 72 65 66 | that.contains.an.IP.address.pref |
292a0 | 69 78 20 63 61 6c 63 75 6c 61 74 65 64 20 62 79 20 61 6e 20 49 47 50 20 69 6e 20 74 68 65 20 73 | ix.calculated.by.an.IGP.in.the.s |
292c0 | 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 63 6f 72 65 20 6e 65 74 77 6f 72 6b 2e 20 50 72 | ervice.provider.core.network..Pr |
292e0 | 65 66 69 78 20 53 49 44 73 20 61 72 65 20 67 6c 6f 62 61 6c 6c 79 20 75 6e 69 71 75 65 2c 20 74 | efix.SIDs.are.globally.unique,.t |
29300 | 68 69 73 20 76 61 6c 75 65 20 69 6e 64 65 6e 74 69 66 79 20 69 74 00 41 20 73 65 6e 64 69 6e 67 | his.value.indentify.it.A.sending |
29320 | 20 73 74 61 74 69 6f 6e 20 28 63 6f 6d 70 75 74 65 72 20 6f 72 20 6e 65 74 77 6f 72 6b 20 73 77 | .station.(computer.or.network.sw |
29340 | 69 74 63 68 29 20 6d 61 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 64 61 74 61 20 66 | itch).may.be.transmitting.data.f |
29360 | 61 73 74 65 72 20 74 68 61 6e 20 74 68 65 20 6f 74 68 65 72 20 65 6e 64 20 6f 66 20 74 68 65 20 | aster.than.the.other.end.of.the. |
29380 | 6c 69 6e 6b 20 63 61 6e 20 61 63 63 65 70 74 20 69 74 2e 20 55 73 69 6e 67 20 66 6c 6f 77 20 63 | link.can.accept.it..Using.flow.c |
293a0 | 6f 6e 74 72 6f 6c 2c 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 73 74 61 74 69 6f 6e 20 63 61 | ontrol,.the.receiving.station.ca |
293c0 | 6e 20 73 69 67 6e 61 6c 20 74 68 65 20 73 65 6e 64 65 72 20 72 65 71 75 65 73 74 69 6e 67 20 73 | n.signal.the.sender.requesting.s |
293e0 | 75 73 70 65 6e 73 69 6f 6e 20 6f 66 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 75 6e 74 69 6c | uspension.of.transmissions.until |
29400 | 20 74 68 65 20 72 65 63 65 69 76 65 72 20 63 61 74 63 68 65 73 20 75 70 2e 00 41 20 73 68 61 72 | .the.receiver.catches.up..A.shar |
29420 | 65 64 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 64 20 60 60 4e 45 54 31 60 60 20 73 65 72 76 65 73 | ed.network.named.``NET1``.serves |
29440 | 20 73 75 62 6e 65 74 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 60 60 00 41 20 73 69 6d 70 | .subnet.``2001:db8::/64``.A.simp |
29460 | 6c 65 20 42 47 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 76 69 61 20 49 50 76 36 2e 00 41 | le.BGP.configuration.via.IPv6..A |
29480 | 20 73 69 6d 70 6c 65 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 69 6f 6e 20 28 | .simple.Random.Early.Detection.( |
294a0 | 52 45 44 29 20 70 6f 6c 69 63 79 20 77 6f 75 6c 64 20 73 74 61 72 74 20 72 61 6e 64 6f 6d 6c 79 | RED).policy.would.start.randomly |
294c0 | 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 62 | .dropping.packets.from.a.queue.b |
294e0 | 65 66 6f 72 65 20 69 74 20 72 65 61 63 68 65 73 20 69 74 73 20 71 75 65 75 65 20 6c 69 6d 69 74 | efore.it.reaches.its.queue.limit |
29500 | 20 74 68 75 73 20 61 76 6f 69 64 69 6e 67 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 54 68 61 74 20 | .thus.avoiding.congestion..That. |
29520 | 69 73 20 67 6f 6f 64 20 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 73 20 74 | is.good.for.TCP.connections.as.t |
29540 | 68 65 20 67 72 61 64 75 61 6c 20 64 72 6f 70 70 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 20 61 | he.gradual.dropping.of.packets.a |
29560 | 63 74 73 20 61 73 20 61 20 73 69 67 6e 61 6c 20 66 6f 72 20 74 68 65 20 73 65 6e 64 65 72 20 74 | cts.as.a.signal.for.the.sender.t |
29580 | 6f 20 64 65 63 72 65 61 73 65 20 69 74 73 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 72 61 74 65 | o.decrease.its.transmission.rate |
295a0 | 2e 00 41 20 73 69 6d 70 6c 65 20 65 42 47 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 41 | ..A.simple.eBGP.configuration:.A |
295c0 | 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 53 68 61 70 65 72 20 75 73 69 6e 67 20 | .simple.example.of.Shaper.using. |
295e0 | 70 72 69 6f 72 69 74 69 65 73 2e 00 41 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 | priorities..A.simple.example.of. |
29600 | 61 6e 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 77 6f 72 6b 69 6e 67 20 69 6e 73 69 64 | an.FQ-CoDel.policy.working.insid |
29620 | 65 20 61 20 53 68 61 70 65 72 20 6f 6e 65 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 | e.a.Shaper.one..A.simplified.tra |
29640 | 66 66 69 63 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 66 | ffic.flow.diagram,.based.on.Netf |
29660 | 69 6c 74 65 72 20 70 61 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 | ilter.packet.flow,.is.shown.next |
29680 | 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 61 | ,.in.order.to.have.a.full.view.a |
296a0 | 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 20 | nd.understanding.of.how.packets. |
296c0 | 61 72 65 20 70 72 6f 63 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c 65 | are.processed,.and.what.possible |
296e0 | 20 70 61 74 68 73 20 74 72 61 66 66 69 63 20 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6d 70 6c | .paths.traffic.can.take..A.simpl |
29700 | 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 | ified.traffic.flow,.based.on.Net |
29720 | 66 69 6c 74 65 72 20 70 61 63 6b 65 74 20 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 | filter.packet.flow,.is.shown.nex |
29740 | 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 | t,.in.order.to.have.a.full.view. |
29760 | 61 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 | and.understanding.of.how.packets |
29780 | 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c | .are.processed,.and.what.possibl |
297a0 | 65 20 70 61 74 68 73 20 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6e 67 6c 65 20 69 6e 74 65 72 | e.paths.can.take..A.single.inter |
297c0 | 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b | nal.network.and.external.network |
297e0 | 2e 20 55 73 65 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 6e 65 63 | ..Use.the.NAT66.device.to.connec |
29800 | 74 20 61 20 73 69 6e 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 | t.a.single.internal.network.and. |
29820 | 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 2c 20 61 6e 64 20 74 68 65 20 68 6f 73 74 73 20 69 6e | public.network,.and.the.hosts.in |
29840 | 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 75 73 65 20 49 50 76 36 20 61 | .the.internal.network.use.IPv6.a |
29860 | 64 64 72 65 73 73 20 70 72 65 66 69 78 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 73 75 70 70 6f 72 | ddress.prefixes.that.only.suppor |
29880 | 74 20 72 6f 75 74 69 6e 67 20 77 69 74 68 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 61 6e 67 65 | t.routing.within.the.local.range |
298a0 | 2e 20 57 68 65 6e 20 61 20 68 6f 73 74 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 | ..When.a.host.in.the.internal.ne |
298c0 | 74 77 6f 72 6b 20 61 63 63 65 73 73 65 73 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 | twork.accesses.the.external.netw |
298e0 | 6f 72 6b 2c 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 | ork,.the.source.IPv6.address.pre |
29900 | 66 69 78 20 69 6e 20 74 68 65 20 6d 65 73 73 61 67 65 20 77 69 6c 6c 20 62 65 20 63 6f 6e 76 65 | fix.in.the.message.will.be.conve |
29920 | 72 74 65 64 20 69 6e 74 6f 20 61 20 67 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 49 50 76 36 20 | rted.into.a.global.unicast.IPv6. |
29940 | 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 62 79 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 | address.prefix.by.the.NAT66.devi |
29960 | 63 65 2e 00 41 20 73 74 61 74 69 6f 6e 20 61 63 74 73 20 61 73 20 61 20 57 69 2d 46 69 20 63 6c | ce..A.station.acts.as.a.Wi-Fi.cl |
29980 | 69 65 6e 74 20 61 63 63 65 73 73 69 6e 67 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 | ient.accessing.the.network.throu |
299a0 | 67 68 20 61 6e 20 61 76 61 69 6c 61 62 6c 65 20 57 41 50 00 41 20 73 79 6e 63 20 67 72 6f 75 70 | gh.an.available.WAP.A.sync.group |
299c0 | 20 61 6c 6c 6f 77 73 20 56 52 52 50 20 67 72 6f 75 70 73 20 74 6f 20 74 72 61 6e 73 69 74 69 6f | .allows.VRRP.groups.to.transitio |
299e0 | 6e 20 74 6f 67 65 74 68 65 72 2e 00 41 20 74 79 70 69 63 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 | n.together..A.typical.configurat |
29a00 | 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 2e 00 41 20 74 79 70 69 63 61 6c 20 70 72 6f | ion.using.2.nodes..A.typical.pro |
29a20 | 62 6c 65 6d 20 77 69 74 68 20 75 73 69 6e 67 20 4e 41 54 20 61 6e 64 20 68 6f 73 74 69 6e 67 20 | blem.with.using.NAT.and.hosting. |
29a40 | 70 75 62 6c 69 63 20 73 65 72 76 65 72 73 20 69 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 66 6f | public.servers.is.the.ability.fo |
29a60 | 72 20 69 6e 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 20 74 6f 20 72 65 61 63 68 20 61 6e 20 69 | r.internal.systems.to.reach.an.i |
29a80 | 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 75 73 69 6e 67 20 69 74 27 73 20 65 78 74 65 72 6e | nternal.server.using.it's.extern |
29aa0 | 61 6c 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 74 | al.IP.address..The.solution.to.t |
29ac0 | 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 74 68 65 20 75 73 65 20 6f 66 20 73 70 6c 69 74 2d | his.is.usually.the.use.of.split- |
29ae0 | 44 4e 53 20 74 6f 20 63 6f 72 72 65 63 74 6c 79 20 70 6f 69 6e 74 20 68 6f 73 74 20 73 79 73 74 | DNS.to.correctly.point.host.syst |
29b00 | 65 6d 73 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 68 65 6e | ems.to.the.internal.address.when |
29b20 | 20 72 65 71 75 65 73 74 73 20 61 72 65 20 6d 61 64 65 20 69 6e 74 65 72 6e 61 6c 6c 79 2e 20 42 | .requests.are.made.internally..B |
29b40 | 65 63 61 75 73 65 20 6d 61 6e 79 20 73 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 73 20 6c 61 63 | ecause.many.smaller.networks.lac |
29b60 | 6b 20 44 4e 53 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2c 20 61 20 77 6f 72 6b 2d 61 72 6f | k.DNS.infrastructure,.a.work-aro |
29b80 | 75 6e 64 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 64 65 70 6c 6f 79 65 64 20 74 6f 20 66 61 63 69 | und.is.commonly.deployed.to.faci |
29ba0 | 6c 69 74 61 74 65 20 74 68 65 20 74 72 61 66 66 69 63 20 62 79 20 4e 41 54 69 6e 67 20 74 68 65 | litate.the.traffic.by.NATing.the |
29bc0 | 20 72 65 71 75 65 73 74 20 66 72 6f 6d 20 69 6e 74 65 72 6e 61 6c 20 68 6f 73 74 73 20 74 6f 20 | .request.from.internal.hosts.to. |
29be0 | 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 6e | the.source.address.of.the.intern |
29c00 | 61 6c 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 41 20 | al.interface.on.the.firewall..A. |
29c20 | 75 73 65 72 20 66 72 69 65 6e 64 6c 79 20 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f 6e | user.friendly.alias.for.this.con |
29c40 | 6e 65 63 74 69 6f 6e 2e 20 43 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 | nection..Can.be.used.instead.of. |
29c60 | 74 68 65 20 64 65 76 69 63 65 20 6e 61 6d 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e | the.device.name.when.connecting. |
29c80 | 00 41 20 75 73 65 72 20 66 72 69 65 6e 64 6c 79 20 64 65 73 63 72 69 70 74 69 6f 6e 20 69 64 65 | .A.user.friendly.description.ide |
29ca0 | 6e 74 69 66 79 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 70 65 72 69 70 68 65 72 61 | ntifying.the.connected.periphera |
29cc0 | 6c 2e 00 41 20 76 61 6c 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 73 20 41 52 50 20 6d 6f 6e | l..A.value.of.0.disables.ARP.mon |
29ce0 | 69 74 6f 72 69 6e 67 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e | itoring..The.default.value.is.0. |
29d00 | 00 41 20 76 61 6c 75 65 20 6f 66 20 32 39 36 20 77 6f 72 6b 73 20 77 65 6c 6c 20 6f 6e 20 76 65 | .A.value.of.296.works.well.on.ve |
29d20 | 72 79 20 73 6c 6f 77 20 6c 69 6e 6b 73 20 28 34 30 20 62 79 74 65 73 20 66 6f 72 20 54 43 50 2f | ry.slow.links.(40.bytes.for.TCP/ |
29d40 | 49 50 20 68 65 61 64 65 72 20 2b 20 32 35 36 20 62 79 74 65 73 20 6f 66 20 64 61 74 61 29 2e 00 | IP.header.+.256.bytes.of.data).. |
29d60 | 41 20 76 65 72 79 20 73 6d 61 6c 6c 20 62 75 66 66 65 72 20 77 69 6c 6c 20 73 6f 6f 6e 20 73 74 | A.very.small.buffer.will.soon.st |
29d80 | 61 72 74 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 41 20 7a 6f 6e 65 20 6d 75 73 | art.dropping.packets..A.zone.mus |
29da0 | 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 | t.be.configured.before.an.interf |
29dc0 | 61 63 65 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 74 20 61 6e 64 20 61 6e 20 69 6e 74 | ace.is.assigned.to.it.and.an.int |
29de0 | 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 6f 6e 6c 79 20 61 | erface.can.be.assigned.to.only.a |
29e00 | 20 73 69 6e 67 6c 65 20 7a 6f 6e 65 2e 00 41 43 4d 45 00 41 43 4d 45 20 44 69 72 65 63 74 6f 72 | .single.zone..ACME.ACME.Director |
29e20 | 79 20 52 65 73 6f 75 72 63 65 20 55 52 49 2e 00 41 50 49 00 41 52 50 00 41 62 6f 76 65 20 63 6f | y.Resource.URI..API.ARP.Above.co |
29e40 | 6d 6d 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 60 31 30 2e 30 2e 30 2e 33 60 20 61 73 20 73 6f 75 | mmand.will.use.`10.0.0.3`.as.sou |
29e60 | 72 63 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 61 6c 6c 20 52 41 44 49 55 53 20 | rce.IPv4.address.for.all.RADIUS. |
29e80 | 71 75 65 72 69 65 73 20 6f 6e 20 74 68 69 73 20 4e 41 53 2e 00 41 62 6f 76 65 2c 20 63 6f 6d 6d | queries.on.this.NAS..Above,.comm |
29ea0 | 61 6e 64 20 73 79 6e 74 61 78 20 69 73 6e 20 6e 6f 74 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | and.syntax.isn.noted.to.configur |
29ec0 | 65 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 | e.dynamic.dns.on.a.specific.inte |
29ee0 | 72 66 61 63 65 2e 20 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6f 76 65 72 6c 6f 6f | rface..It.is.possible.to.overloo |
29f00 | 6b 20 74 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 61 64 64 72 65 73 73 20 6f 70 74 69 6f 6e 2c | k.the.additional.address.option, |
29f20 | 20 77 65 62 2c 20 77 68 65 6e 20 63 6f 6d 70 6c 65 74 65 69 6e 67 20 74 68 6f 73 65 20 63 6f 6d | .web,.when.completeing.those.com |
29f40 | 6d 61 6e 64 73 2e 20 64 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e 6f 74 68 65 72 20 77 61 79 | mands..ddclient_.has.another.way |
29f60 | 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 50 20 61 64 64 72 65 73 73 | .to.determine.the.WAN.IP.address |
29f80 | 2c 20 75 73 69 6e 67 20 61 20 77 65 62 2d 62 61 73 65 64 20 75 72 6c 20 74 6f 20 64 65 74 65 72 | ,.using.a.web-based.url.to.deter |
29fa0 | 6d 69 6e 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 45 61 63 68 20 6f 66 20 74 68 | mine.the.external.IP..Each.of.th |
29fc0 | 65 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 62 65 | e.commands.above.will.need.to.be |
29fe0 | 20 6d 6f 64 69 66 69 65 64 20 74 6f 20 75 73 65 20 27 77 65 62 27 20 61 73 20 74 68 65 20 27 69 | .modified.to.use.'web'.as.the.'i |
2a000 | 6e 74 65 72 66 61 63 65 27 20 73 70 65 63 69 66 69 65 64 20 69 66 20 74 68 69 73 20 66 75 6e 63 | nterface'.specified.if.this.func |
2a020 | 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 41 63 63 | tionality.is.to.be.utilized..Acc |
2a040 | 65 6c 65 72 61 74 69 6f 6e 00 41 63 63 65 70 74 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | eleration.Accept.SSH.connections |
2a060 | 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 64 65 76 69 63 65 3e 60 20 6f 6e 20 54 43 50 | .for.the.given.`<device>`.on.TCP |
2a080 | 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 2e 20 41 66 74 65 72 20 73 75 63 63 65 73 73 66 75 6c | .port.`<port>`..After.successful |
2a0a0 | 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 | l.authentication.the.user.will.b |
2a0c0 | 65 20 64 69 72 65 63 74 6c 79 20 64 72 6f 70 70 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 6e 65 63 | e.directly.dropped.to.the.connec |
2a0e0 | 74 65 64 20 73 65 72 69 61 6c 20 64 65 76 69 63 65 2e 00 41 63 63 65 70 74 20 6f 6e 6c 79 20 63 | ted.serial.device..Accept.only.c |
2a100 | 65 72 74 61 69 6e 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 | ertain.protocols:.You.may.want.t |
2a120 | 6f 20 72 65 70 6c 69 63 61 74 65 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 66 6c 6f 77 73 20 64 | o.replicate.the.state.of.flows.d |
2a140 | 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 6c 61 79 65 72 20 34 20 70 72 6f 74 6f 63 | epending.on.their.layer.4.protoc |
2a160 | 6f 6c 2e 00 41 63 63 65 70 74 20 70 65 65 72 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 | ol..Accept.peer.interface.identi |
2a180 | 66 69 65 72 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e | fier..By.default.is.not.defined. |
2a1a0 | 00 41 63 63 65 70 74 61 62 6c 65 20 72 61 74 65 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 | .Acceptable.rate.of.connections. |
2a1c0 | 28 65 2e 67 2e 20 31 2f 6d 69 6e 2c 20 36 30 2f 73 65 63 29 00 41 63 63 65 73 73 20 4c 69 73 74 | (e.g..1/min,.60/sec).Access.List |
2a1e0 | 20 50 6f 6c 69 63 79 00 41 63 63 65 73 73 20 4c 69 73 74 73 00 41 63 74 69 6f 6e 20 6d 75 73 74 | .Policy.Access.Lists.Action.must |
2a200 | 20 62 65 20 74 61 6b 65 6e 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 2d 20 41 20 63 6f 6e 64 69 74 | .be.taken.immediately.-.A.condit |
2a220 | 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 69 6d 6d | ion.that.should.be.corrected.imm |
2a240 | 65 64 69 61 74 65 6c 79 2c 20 73 75 63 68 20 61 73 20 61 20 63 6f 72 72 75 70 74 65 64 20 73 79 | ediately,.such.as.a.corrupted.sy |
2a260 | 73 74 65 6d 20 64 61 74 61 62 61 73 65 2e 00 41 63 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c | stem.database..Action.which.will |
2a280 | 20 62 65 20 72 75 6e 20 6f 6e 63 65 20 74 68 65 20 63 74 72 6c 2d 61 6c 74 2d 64 65 6c 20 6b 65 | .be.run.once.the.ctrl-alt-del.ke |
2a2a0 | 79 73 74 72 6f 6b 65 20 69 73 20 72 65 63 65 69 76 65 64 2e 00 41 63 74 69 6f 6e 73 00 41 63 74 | ystroke.is.received..Actions.Act |
2a2c0 | 69 76 65 20 44 69 72 65 63 74 6f 72 79 00 41 63 74 69 76 65 20 68 65 61 6c 74 68 20 63 68 65 63 | ive.Directory.Active.health.chec |
2a2e0 | 6b 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 00 41 64 64 20 4e 54 41 20 28 6e 65 67 61 74 69 | k.backend.server.Add.NTA.(negati |
2a300 | 76 65 20 74 72 75 73 74 20 61 6e 63 68 6f 72 29 20 66 6f 72 20 74 68 69 73 20 64 6f 6d 61 69 6e | ve.trust.anchor).for.this.domain |
2a320 | 2e 20 54 68 69 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 69 66 20 74 68 65 20 64 6f 6d 61 69 6e | ..This.must.be.set.if.the.domain |
2a340 | 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 44 4e 53 53 45 43 2e 00 41 64 64 20 50 6f | .does.not.support.DNSSEC..Add.Po |
2a360 | 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 74 6f 20 42 65 61 63 6f 6e | wer.Constraint.element.to.Beacon |
2a380 | 20 61 6e 64 20 50 72 6f 62 65 20 52 65 73 70 6f 6e 73 65 20 66 72 61 6d 65 73 2e 00 41 64 64 20 | .and.Probe.Response.frames..Add. |
2a3a0 | 61 20 66 6f 72 77 61 72 64 69 6e 67 20 72 75 6c 65 20 6d 61 74 63 68 69 6e 67 20 55 44 50 20 70 | a.forwarding.rule.matching.UDP.p |
2a3c0 | 6f 72 74 20 6f 6e 20 79 6f 75 72 20 69 6e 74 65 72 6e 65 74 20 72 6f 75 74 65 72 2e 00 41 64 64 | ort.on.your.internet.router..Add |
2a3e0 | 20 61 20 68 6f 73 74 20 64 65 76 69 63 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e | .a.host.device.to.the.container. |
2a400 | 00 41 64 64 20 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 20 64 69 72 65 63 74 69 76 65 20 74 6f | .Add.access-control.directive.to |
2a420 | 20 61 6c 6c 6f 77 20 6f 72 20 64 65 6e 79 20 75 73 65 72 73 20 61 6e 64 20 67 72 6f 75 70 73 2e | .allow.or.deny.users.and.groups. |
2a440 | 20 44 69 72 65 63 74 69 76 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 69 6e 20 74 68 65 | .Directives.are.processed.in.the |
2a460 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 64 65 72 20 6f 66 20 70 72 65 63 65 64 65 6e 63 65 3a 20 | .following.order.of.precedence:. |
2a480 | 60 60 64 65 6e 79 2d 75 73 65 72 73 60 60 2c 20 60 60 61 6c 6c 6f 77 2d 75 73 65 72 73 60 60 2c | ``deny-users``,.``allow-users``, |
2a4a0 | 20 60 60 64 65 6e 79 2d 67 72 6f 75 70 73 60 60 20 61 6e 64 20 60 60 61 6c 6c 6f 77 2d 67 72 6f | .``deny-groups``.and.``allow-gro |
2a4c0 | 75 70 73 60 60 2e 00 41 64 64 20 63 75 73 74 6f 6d 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 | ups``..Add.custom.environment.va |
2a4e0 | 72 69 61 62 6c 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 | riables..Multiple.environment.va |
2a500 | 72 69 61 62 6c 65 73 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 | riables.are.allowed..The.followi |
2a520 | 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 65 20 6b 65 79 | ng.commands.translate.to."-e.key |
2a540 | 3d 76 61 6c 75 65 22 20 77 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 63 72 | =value".when.the.container.is.cr |
2a560 | 65 61 74 65 64 2e 00 41 64 64 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 73 20 66 6f 72 20 72 6f | eated..Add.default.routes.for.ro |
2a580 | 75 74 69 6e 67 20 60 60 74 61 62 6c 65 20 31 30 60 60 20 61 6e 64 20 60 60 74 61 62 6c 65 20 31 | uting.``table.10``.and.``table.1 |
2a5a0 | 31 60 60 00 41 64 64 20 6d 75 6c 74 69 70 6c 65 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 6f 6e | 1``.Add.multiple.source.IP.in.on |
2a5c0 | 65 20 72 75 6c 65 20 77 69 74 68 20 73 61 6d 65 20 70 72 69 6f 72 69 74 79 00 41 64 64 20 6e 65 | e.rule.with.same.priority.Add.ne |
2a5e0 | 77 20 70 6f 72 74 20 74 6f 20 53 53 4c 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 73 20 69 | w.port.to.SSL-ports.acl..Ports.i |
2a600 | 6e 63 6c 75 64 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 53 4c 2d 70 6f 72 74 73 20 | ncluded.by.default.in.SSL-ports. |
2a620 | 61 63 6c 3a 20 34 34 33 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 61 66 65 2d 70 6f | acl:.443.Add.new.port.to.Safe-po |
2a640 | 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 65 66 61 75 | rts.acl..Ports.included.by.defau |
2a660 | 6c 74 20 69 6e 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 3a 20 32 31 2c 20 37 30 2c 20 38 30 | lt.in.Safe-ports.acl:.21,.70,.80 |
2a680 | 2c 20 32 31 30 2c 20 32 38 30 2c 20 34 34 33 2c 20 34 38 38 2c 20 35 39 31 2c 20 37 37 37 2c 20 | ,.210,.280,.443,.488,.591,.777,. |
2a6a0 | 38 37 33 2c 20 31 30 32 35 2d 36 35 35 33 35 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 | 873,.1025-65535.Add.or.replace.B |
2a6c0 | 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 6d 61 74 | GP.community.attribute.in.format |
2a6e0 | 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 36 35 35 33 35 3e 60 60 20 6f 72 20 66 72 6f 6d 20 77 | .``<0-65535:0-65535>``.or.from.w |
2a700 | 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 00 41 64 64 20 6f 72 20 | ell-known.community.list.Add.or. |
2a720 | 72 65 70 6c 61 63 65 20 42 47 50 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 | replace.BGP.large-community.attr |
2a740 | 69 62 75 74 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 34 32 39 34 39 36 37 32 39 35 3a | ibute.in.format.``<0-4294967295: |
2a760 | 30 2d 34 32 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 00 41 64 64 | 0-4294967295:0-4294967295>``.Add |
2a780 | 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 6d 61 74 63 68 69 6e 67 20 56 4c 41 4e 20 73 6f 75 72 | .policy.route.matching.VLAN.sour |
2a7a0 | 63 65 20 61 64 64 72 65 73 73 65 73 00 41 64 64 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 | ce.addresses.Add.public.key.port |
2a7c0 | 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 6e | ion.for.the.certificate.named.`n |
2a7e0 | 61 6d 65 60 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 64 64 20 74 68 65 20 43 41 | ame`.to.the.VyOS.CLI..Add.the.CA |
2a800 | 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 20 54 | s.private.key.to.the.VyOS.CLI..T |
2a820 | 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 | his.should.never.leave.the.syste |
2a840 | 6d 2c 20 61 6e 64 20 69 73 20 6f 6e 6c 79 20 72 65 71 75 69 72 65 64 20 69 66 20 79 6f 75 20 75 | m,.and.is.only.required.if.you.u |
2a860 | 73 65 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 67 65 6e 65 | se.VyOS.as.your.certificate.gene |
2a880 | 72 61 74 6f 72 20 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 62 6f 76 65 2e 00 41 64 64 20 74 68 | rator.as.mentioned.above..Add.th |
2a8a0 | 65 20 63 6f 6d 6d 61 6e 64 73 20 66 72 6f 6d 20 53 6e 69 70 70 65 74 20 69 6e 20 74 68 65 20 57 | e.commands.from.Snippet.in.the.W |
2a8c0 | 69 6e 64 6f 77 73 20 73 69 64 65 20 76 69 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 20 41 6c 73 6f | indows.side.via.PowerShell..Also |
2a8e0 | 20 69 6d 70 6f 72 74 20 74 68 65 20 72 6f 6f 74 20 43 41 20 63 65 72 74 20 74 6f 20 74 68 65 20 | .import.the.root.CA.cert.to.the. |
2a900 | 57 69 6e 64 6f 77 73 20 e2 80 9c 54 72 75 73 74 65 64 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 | Windows....Trusted.Root.Certific |
2a920 | 61 74 69 6f 6e 20 41 75 74 68 6f 72 69 74 69 65 73 e2 80 9d 20 61 6e 64 20 65 73 74 61 62 6c 69 | ation.Authorities....and.establi |
2a940 | 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 41 64 64 20 74 68 65 20 70 72 69 76 61 | sh.the.connection..Add.the.priva |
2a960 | 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 | te.key.portion.of.this.certifica |
2a980 | 74 65 20 74 6f 20 74 68 65 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 | te.to.the.CLI..This.should.never |
2a9a0 | 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 | .leave.the.system.as.it.is.used. |
2a9c0 | 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 00 41 64 64 20 74 68 65 20 70 75 62 | to.decrypt.the.data..Add.the.pub |
2a9e0 | 6c 69 63 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 43 41 20 6e 61 | lic.CA.certificate.for.the.CA.na |
2aa00 | 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 64 64 69 | med.`name`.to.the.VyOS.CLI..Addi |
2aa20 | 6e 67 20 61 20 32 46 41 20 77 69 74 68 20 61 6e 20 4f 54 50 2d 6b 65 79 00 41 64 64 69 74 69 6f | ng.a.2FA.with.an.OTP-key.Additio |
2aa40 | 6e 61 6c 20 67 6c 6f 62 61 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 73 65 74 2c 20 69 | nal.global.parameters.are.set,.i |
2aa60 | 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 63 6f 6e 6e | ncluding.the.maximum.number.conn |
2aa80 | 65 63 74 69 6f 6e 20 6c 69 6d 69 74 20 6f 66 20 34 30 30 30 20 61 6e 64 20 61 20 6d 69 6e 69 6d | ection.limit.of.4000.and.a.minim |
2aaa0 | 75 6d 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 6f 66 20 31 2e 33 2e 00 41 64 64 69 74 69 6f 6e 61 | um.TLS.version.of.1.3..Additiona |
2aac0 | 6c 20 6f 70 74 69 6f 6e 20 74 6f 20 72 75 6e 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 20 74 | l.option.to.run.TFTP.server.in.t |
2aae0 | 68 65 20 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 | he.:abbr:`VRF.(Virtual.Routing.a |
2ab00 | 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 63 6f 6e 74 65 78 74 00 41 64 64 69 74 69 6f 6e | nd.Forwarding)`.context.Addition |
2ab20 | 61 6c 6c 79 20 79 6f 75 20 73 68 6f 75 6c 64 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 68 61 | ally.you.should.keep.in.mind.tha |
2ab40 | 74 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 75 6e 64 61 6d 65 6e 74 61 6c 6c 79 20 64 69 73 | t.this.feature.fundamentally.dis |
2ab60 | 61 62 6c 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 75 73 65 20 77 69 64 65 6c 79 20 | ables.the.ability.to.use.widely. |
2ab80 | 64 65 70 6c 6f 79 65 64 20 42 47 50 20 66 65 61 74 75 72 65 73 2e 20 42 47 50 20 75 6e 6e 75 6d | deployed.BGP.features..BGP.unnum |
2aba0 | 62 65 72 65 64 2c 20 68 6f 73 74 6e 61 6d 65 20 73 75 70 70 6f 72 74 2c 20 41 53 34 2c 20 41 64 | bered,.hostname.support,.AS4,.Ad |
2abc0 | 64 70 61 74 68 2c 20 52 6f 75 74 65 20 52 65 66 72 65 73 68 2c 20 4f 52 46 2c 20 44 79 6e 61 6d | dpath,.Route.Refresh,.ORF,.Dynam |
2abe0 | 69 63 20 43 61 70 61 62 69 6c 69 74 69 65 73 2c 20 61 6e 64 20 67 72 61 63 65 66 75 6c 20 72 65 | ic.Capabilities,.and.graceful.re |
2ac00 | 73 74 61 72 74 2e 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 65 61 63 68 20 63 6c 69 65 6e 74 | start..Additionally,.each.client |
2ac20 | 20 6e 65 65 64 73 20 61 20 63 6f 70 79 20 6f 66 20 63 61 20 63 65 72 74 20 61 6e 64 20 69 74 73 | .needs.a.copy.of.ca.cert.and.its |
2ac40 | 20 6f 77 6e 20 63 6c 69 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 2e 20 | .own.client.key.and.cert.files.. |
2ac60 | 54 68 65 20 66 69 6c 65 73 20 61 72 65 20 70 6c 61 69 6e 74 65 78 74 20 73 6f 20 74 68 65 79 20 | The.files.are.plaintext.so.they. |
2ac80 | 6d 61 79 20 62 65 20 63 6f 70 69 65 64 20 65 69 74 68 65 72 20 6d 61 6e 75 61 6c 6c 79 20 66 72 | may.be.copied.either.manually.fr |
2aca0 | 6f 6d 20 74 68 65 20 43 4c 49 2e 20 43 6c 69 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 74 20 | om.the.CLI..Client.key.and.cert. |
2acc0 | 66 69 6c 65 73 20 73 68 6f 75 6c 64 20 62 65 20 73 69 67 6e 65 64 20 77 69 74 68 20 74 68 65 20 | files.should.be.signed.with.the. |
2ace0 | 70 72 6f 70 65 72 20 63 61 20 63 65 72 74 20 61 6e 64 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 | proper.ca.cert.and.generated.on. |
2ad00 | 74 68 65 20 73 65 72 76 65 72 20 73 69 64 65 2e 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 77 | the.server.side..Additionally,.w |
2ad20 | 65 20 77 61 6e 74 20 74 6f 20 75 73 65 20 56 50 4e 73 20 6f 6e 6c 79 20 6f 6e 20 6f 75 72 20 65 | e.want.to.use.VPNs.only.on.our.e |
2ad40 | 74 68 31 20 69 6e 74 65 72 66 61 63 65 20 28 74 68 65 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 | th1.interface.(the.external.inte |
2ad60 | 72 66 61 63 65 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 61 62 6f 76 65 29 00 41 64 64 72 65 73 | rface.in.the.image.above).Addres |
2ad80 | 73 00 41 64 64 72 65 73 73 20 43 6f 6e 76 65 72 73 69 6f 6e 00 41 64 64 72 65 73 73 20 46 61 6d | s.Address.Conversion.Address.Fam |
2ada0 | 69 6c 69 65 73 00 41 64 64 72 65 73 73 20 47 72 6f 75 70 73 00 41 64 64 72 65 73 73 20 70 6f 6f | ilies.Address.Groups.Address.poo |
2adc0 | 6c 20 73 68 61 6c 6c 20 62 65 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 30 30 60 60 20 74 68 72 | l.shall.be.``2001:db8::100``.thr |
2ade0 | 6f 75 67 68 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 39 39 60 60 2e 00 41 64 64 72 65 73 73 20 | ough.``2001:db8::199``..Address. |
2ae00 | 70 6f 6f 6c 73 00 41 64 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 | pools.Address.to.listen.for.HTTP |
2ae20 | 53 20 72 65 71 75 65 73 74 73 00 41 64 64 73 20 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 | S.requests.Adds.registry.to.list |
2ae40 | 20 6f 66 20 75 6e 71 75 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 | .of.unqualified-search-registrie |
2ae60 | 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 | s..By.default,.for.any.image.tha |
2ae80 | 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 | t.does.not.include.the.registry. |
2aea0 | 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 4f 53 20 77 69 6c 6c 20 75 73 65 | in.the.image.name,.VyOS.will.use |
2aec0 | 20 64 6f 63 6b 65 72 2e 69 6f 20 61 6e 64 20 71 75 61 79 2e 69 6f 20 61 73 20 74 68 65 20 63 6f | .docker.io.and.quay.io.as.the.co |
2aee0 | 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 2e 00 41 64 64 73 20 72 65 67 69 73 74 72 79 20 | ntainer.registry..Adds.registry. |
2af00 | 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d 72 65 | to.list.of.unqualified-search-re |
2af20 | 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 69 6d | gistries..By.default,.for.any.im |
2af40 | 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 72 65 | age.that.does.not.include.the.re |
2af60 | 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 6f 73 20 77 | gistry.in.the.image.name,.Vyos.w |
2af80 | 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e 69 6f 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e | ill.use.docker.io.as.the.contain |
2afa0 | 65 72 20 72 65 67 69 73 74 72 79 2e 00 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 44 69 73 74 | er.registry..Administrative.Dist |
2afc0 | 61 6e 63 65 00 41 64 76 61 6e 63 65 64 20 49 6e 74 65 72 66 61 63 65 20 4f 70 74 69 6f 6e 73 00 | ance.Advanced.Interface.Options. |
2afe0 | 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 63 6f 6e 66 69 67 | Advanced.Options.Advanced.config |
2b000 | 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 | uration.can.be.used.in.order.to. |
2b020 | 61 70 70 6c 79 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 2c | apply.source.or.destination.NAT, |
2b040 | 20 61 6e 64 20 77 69 74 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2c 20 62 65 20 61 62 | .and.within.a.single.rule,.be.ab |
2b060 | 6c 65 20 74 6f 20 64 65 66 69 6e 65 20 6d 75 6c 74 69 70 6c 65 20 74 72 61 6e 73 6c 61 74 65 64 | le.to.define.multiple.translated |
2b080 | 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 4e 41 54 20 62 61 6c 61 6e 63 65 73 20 74 68 65 20 | .addresses,.so.NAT.balances.the. |
2b0a0 | 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6d 6f 6e 67 20 74 68 65 6d 2e 00 41 64 76 61 6e 74 61 | translations.among.them..Advanta |
2b0c0 | 67 65 73 20 6f 66 20 4f 70 65 6e 56 50 4e 20 61 72 65 3a 00 41 64 76 65 72 74 69 73 65 20 44 4e | ges.of.OpenVPN.are:.Advertise.DN |
2b0e0 | 53 20 73 65 72 76 65 72 20 70 65 72 20 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e | S.server.per.https://tools.ietf. |
2b100 | 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 36 31 30 36 00 41 64 76 65 72 74 69 73 69 6e 67 20 61 20 4e | org/html/rfc6106.Advertising.a.N |
2b120 | 41 54 36 34 20 50 72 65 66 69 78 00 41 64 76 65 72 74 69 73 69 6e 67 20 61 20 50 72 65 66 69 78 | AT64.Prefix.Advertising.a.Prefix |
2b140 | 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 | .After.commit.the.plaintext.pass |
2b160 | 77 6f 72 64 73 20 77 69 6c 6c 20 62 65 20 68 61 73 68 65 64 20 61 6e 64 20 73 74 6f 72 65 64 20 | words.will.be.hashed.and.stored. |
2b180 | 69 6e 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 20 72 65 73 75 6c | in.your.configuration..The.resul |
2b1a0 | 74 69 6e 67 20 43 4c 49 20 63 6f 6e 66 69 67 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 | ting.CLI.config.will.look.like:. |
2b1c0 | 41 66 74 65 72 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | After.committing.the.configurati |
2b1e0 | 6f 6e 20 77 65 20 63 61 6e 20 76 65 72 69 66 79 20 61 6c 6c 20 6c 65 61 6b 65 64 20 72 6f 75 74 | on.we.can.verify.all.leaked.rout |
2b200 | 65 73 20 61 72 65 20 69 6e 73 74 61 6c 6c 65 64 2c 20 61 6e 64 20 74 72 79 20 74 6f 20 49 43 4d | es.are.installed,.and.try.to.ICM |
2b220 | 50 20 70 69 6e 67 20 50 43 31 20 66 72 6f 6d 20 50 43 33 2e 00 41 66 74 65 72 20 74 68 65 20 50 | P.ping.PC1.from.PC3..After.the.P |
2b240 | 4b 49 20 63 65 72 74 73 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 | KI.certs.are.all.set.up.we.can.s |
2b260 | 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 | tart.configuring.our.IPSec/IKE.p |
2b280 | 72 6f 70 6f 73 61 6c 73 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 | roposals.used.for.key-exchange.e |
2b2a0 | 6e 64 20 64 61 74 61 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 | nd.data.encryption..The.used.enc |
2b2c0 | 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c | ryption.ciphers.and.integrity.al |
2b2e0 | 67 6f 72 69 74 68 6d 73 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 | gorithms.vary.from.operating.sys |
2b300 | 74 65 6d 20 74 6f 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 | tem.to.operating.system..The.one |
2b320 | 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 72 65 20 76 61 6c 69 64 | s.used.in.this.example.are.valid |
2b340 | 61 74 65 64 20 74 6f 20 77 6f 72 6b 20 6f 6e 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 41 66 74 65 | ated.to.work.on.Windows.10..Afte |
2b360 | 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 20 77 | r.the.PKI.certs.are.all.set.up.w |
2b380 | 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 53 65 | e.can.start.configuring.our.IPSe |
2b3a0 | 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 78 63 | c/IKE.proposals.used.for.key-exc |
2b3c0 | 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 20 75 | hange.end.data.encryption..The.u |
2b3e0 | 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 | sed.encryption.ciphers.and.integ |
2b400 | 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 61 74 | rity.algorithms.vary.from.operat |
2b420 | 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 2e 20 | ing.system.to.operating.system.. |
2b440 | 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 70 6f 73 74 20 61 72 65 20 76 | The.ones.used.in.this.post.are.v |
2b460 | 61 6c 69 64 61 74 65 64 20 74 6f 20 77 6f 72 6b 20 6f 6e 20 62 6f 74 68 20 57 69 6e 64 6f 77 73 | alidated.to.work.on.both.Windows |
2b480 | 20 31 30 20 61 6e 64 20 69 4f 53 2f 69 50 61 64 4f 53 20 31 34 20 74 6f 20 31 37 2e 00 41 66 74 | .10.and.iOS/iPadOS.14.to.17..Aft |
2b4a0 | 65 72 20 77 65 20 68 61 76 65 20 69 6d 70 6f 72 74 65 64 20 74 68 65 20 43 41 20 63 65 72 74 69 | er.we.have.imported.the.CA.certi |
2b4c0 | 66 69 63 61 74 65 28 73 29 20 77 65 20 63 61 6e 20 6e 6f 77 20 69 6d 70 6f 72 74 20 61 6e 64 20 | ficate(s).we.can.now.import.and. |
2b4e0 | 61 64 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 65 64 20 62 79 20 73 65 72 76 69 63 65 | add.certificates.used.by.service |
2b500 | 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e 00 41 66 74 65 72 20 79 6f 75 20 6f 62 74 61 | s.on.this.router..After.you.obta |
2b520 | 69 6e 65 64 20 79 6f 75 72 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 | ined.your.server.certificate.you |
2b540 | 20 63 61 6e 20 69 6d 70 6f 72 74 20 69 74 20 66 72 6f 6d 20 61 20 66 69 6c 65 20 6f 6e 20 74 68 | .can.import.it.from.a.file.on.th |
2b560 | 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2c 20 6f 72 20 70 61 73 74 65 20 69 74 20 | e.local.filesystem,.or.paste.it. |
2b580 | 69 6e 74 6f 20 74 68 65 20 43 4c 49 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 77 | into.the.CLI..Please.note.that.w |
2b5a0 | 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6d 61 6e | hen.entering.the.certificate.man |
2b5c0 | 75 61 6c 6c 79 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d | ually.you.need.to.strip.the.``-- |
2b5e0 | 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 | ---BEGIN.KEY-----``.and.``-----E |
2b600 | 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 | ND.KEY-----``.tags..Also,.the.ce |
2b620 | 72 74 69 66 69 63 61 74 65 20 6f 72 20 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 | rtificate.or.key.needs.to.be.pre |
2b640 | 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 | sented.in.a.single.line.without. |
2b660 | 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2e 00 41 67 65 6e 74 20 2d 20 73 6f | line.breaks.(``\n``)..Agent.-.so |
2b680 | 66 74 77 61 72 65 20 77 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 6d 61 6e 61 67 65 64 20 64 65 76 | ftware.which.runs.on.managed.dev |
2b6a0 | 69 63 65 73 00 41 6c 65 72 74 00 41 6c 67 6f 72 69 74 68 6d 00 41 6c 69 61 73 65 73 00 41 6c 6c | ices.Alert.Algorithm.Aliases.All |
2b6c0 | 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 6d 75 | .DNS.requests.for.example.com.mu |
2b6e0 | 73 74 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 74 6f 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 | st.be.forwarded.to.a.DNS.server. |
2b700 | 61 74 20 31 39 32 2e 30 2e 32 2e 32 35 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 63 61 66 65 | at.192.0.2.254.and.2001:db8:cafe |
2b720 | 3a 3a 31 00 41 6c 6c 20 53 4e 4d 50 20 4d 49 42 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e | ::1.All.SNMP.MIBs.are.located.in |
2b740 | 20 65 61 63 68 20 69 6d 61 67 65 20 6f 66 20 56 79 4f 53 20 68 65 72 65 3a 20 60 60 2f 75 73 72 | .each.image.of.VyOS.here:.``/usr |
2b760 | 2f 73 68 61 72 65 2f 73 6e 6d 70 2f 6d 69 62 73 2f 60 60 00 41 6c 6c 20 61 76 61 69 6c 61 62 6c | /share/snmp/mibs/``.All.availabl |
2b780 | 65 20 57 57 41 4e 20 63 61 72 64 73 20 68 61 76 65 20 61 20 62 75 69 6c 64 20 69 6e 2c 20 72 65 | e.WWAN.cards.have.a.build.in,.re |
2b7a0 | 70 72 6f 67 72 61 6d 6d 61 62 6c 65 20 66 69 72 6d 77 61 72 65 2e 20 4d 6f 73 74 20 6f 66 20 74 | programmable.firmware..Most.of.t |
2b7c0 | 68 65 20 76 65 6e 64 6f 72 73 20 70 72 6f 76 69 64 65 20 61 20 72 65 67 75 6c 61 72 20 75 70 64 | he.vendors.provide.a.regular.upd |
2b7e0 | 61 74 65 20 74 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 | ate.to.the.firmware.used.in.the. |
2b800 | 62 61 73 65 62 61 6e 64 20 63 68 69 70 2e 00 41 6c 6c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 | baseband.chip..All.certificates. |
2b820 | 73 68 6f 75 6c 64 20 62 65 20 73 74 6f 72 65 64 20 6f 6e 20 56 79 4f 53 20 75 6e 64 65 72 20 60 | should.be.stored.on.VyOS.under.` |
2b840 | 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 60 60 2e 20 49 66 20 63 65 72 74 69 66 69 63 61 74 65 73 | `/config/auth``..If.certificates |
2b860 | 20 61 72 65 20 6e 6f 74 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 | .are.not.stored.in.the.``/config |
2b880 | 60 60 20 64 69 72 65 63 74 6f 72 79 20 74 68 65 79 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6d 69 | ``.directory.they.will.not.be.mi |
2b8a0 | 67 72 61 74 65 64 20 64 75 72 69 6e 67 20 61 20 73 6f 66 74 77 61 72 65 20 75 70 64 61 74 65 2e | grated.during.a.software.update. |
2b8c0 | 00 41 6c 6c 20 66 61 63 69 6c 69 74 69 65 73 00 41 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 75 | .All.facilities.All.interfaces.u |
2b8e0 | 73 65 64 20 66 6f 72 20 74 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 6d 75 73 74 20 62 65 20 63 | sed.for.the.DHCP.relay.must.be.c |
2b900 | 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 75 70 6c | onfigured..This.includes.the.upl |
2b920 | 69 6e 6b 20 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 41 6c 6c 20 69 74 65 6d | ink.to.the.DHCP.server..All.item |
2b940 | 73 20 69 6e 20 61 20 73 79 6e 63 20 67 72 6f 75 70 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 | s.in.a.sync.group.should.be.simi |
2b960 | 6c 61 72 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 49 66 20 6f 6e 65 20 56 52 52 50 20 67 72 | larly.configured..If.one.VRRP.gr |
2b980 | 6f 75 70 20 69 73 20 73 65 74 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 65 6d 70 | oup.is.set.to.a.different.preemp |
2b9a0 | 74 69 6f 6e 20 64 65 6c 61 79 20 6f 72 20 70 72 69 6f 72 69 74 79 2c 20 69 74 20 77 6f 75 6c 64 | tion.delay.or.priority,.it.would |
2b9c0 | 20 72 65 73 75 6c 74 20 69 6e 20 61 6e 20 65 6e 64 6c 65 73 73 20 74 72 61 6e 73 69 74 69 6f 6e | .result.in.an.endless.transition |
2b9e0 | 20 6c 6f 6f 70 2e 00 41 6c 6c 20 6f 74 68 65 72 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 77 69 | .loop..All.other.DNS.requests.wi |
2ba00 | 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 | ll.be.forwarded.to.a.different.s |
2ba20 | 65 74 20 6f 66 20 44 4e 53 20 73 65 72 76 65 72 73 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 2c 20 | et.of.DNS.servers.at.192.0.2.1,. |
2ba40 | 31 39 32 2e 30 2e 32 2e 32 2c 20 32 30 30 31 3a 64 62 38 3a 3a 31 3a 66 66 66 66 20 61 6e 64 20 | 192.0.2.2,.2001:db8::1:ffff.and. |
2ba60 | 32 30 30 31 3a 64 62 38 3a 3a 32 3a 66 66 66 66 00 41 6c 6c 20 72 65 70 6c 79 20 73 69 7a 65 73 | 2001:db8::2:ffff.All.reply.sizes |
2ba80 | 20 61 72 65 20 61 63 63 65 70 74 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 41 6c 6c 20 72 6f | .are.accepted.by.default..All.ro |
2baa0 | 75 74 65 72 73 20 69 6e 20 74 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 61 67 | uters.in.the.PIM.network.must.ag |
2bac0 | 72 65 65 20 6f 6e 20 74 68 65 73 65 20 76 61 6c 75 65 73 2e 00 41 6c 6c 20 73 63 72 69 70 74 73 | ree.on.these.values..All.scripts |
2bae0 | 20 65 78 63 65 63 75 74 65 64 20 74 68 69 73 20 77 61 79 20 61 72 65 20 65 78 65 63 75 74 65 64 | .excecuted.this.way.are.executed |
2bb00 | 20 61 73 20 72 6f 6f 74 20 75 73 65 72 20 2d 20 74 68 69 73 20 6d 61 79 20 62 65 20 64 61 6e 67 | .as.root.user.-.this.may.be.dang |
2bb20 | 65 72 6f 75 73 2e 20 54 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 65 66 3a 60 63 6f 6d 6d 61 | erous..Together.with.:ref:`comma |
2bb40 | 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 | nd-scripting`.this.can.be.used.f |
2bb60 | 6f 72 20 61 75 74 6f 6d 61 74 69 6e 67 20 28 72 65 2d 29 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | or.automating.(re-)configuration |
2bb80 | 2e 00 41 6c 6c 20 74 68 65 73 65 20 72 75 6c 65 73 20 77 69 74 68 20 4f 54 43 20 77 69 6c 6c 20 | ..All.these.rules.with.OTC.will. |
2bba0 | 68 65 6c 70 20 74 6f 20 64 65 74 65 63 74 20 61 6e 64 20 6d 69 74 69 67 61 74 65 20 72 6f 75 74 | help.to.detect.and.mitigate.rout |
2bbc0 | 65 20 6c 65 61 6b 73 20 61 6e 64 20 68 61 70 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 | e.leaks.and.happen.automatically |
2bbe0 | 20 69 66 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 73 65 74 2e 00 41 6c 6c 20 74 68 6f 73 65 | .if.local-role.is.set..All.those |
2bc00 | 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 67 72 6f 75 70 65 64 20 75 6e 64 65 72 20 60 60 69 | .protocols.are.grouped.under.``i |
2bc20 | 6e 74 65 72 66 61 63 65 73 20 74 75 6e 6e 65 6c 60 60 20 69 6e 20 56 79 4f 53 2e 20 4c 65 74 27 | nterfaces.tunnel``.in.VyOS..Let' |
2bc40 | 73 20 74 61 6b 65 20 61 20 63 6c 6f 73 65 72 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 70 72 6f 74 | s.take.a.closer.look.at.the.prot |
2bc60 | 6f 63 6f 6c 73 20 61 6e 64 20 6f 70 74 69 6f 6e 73 20 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 | ocols.and.options.currently.supp |
2bc80 | 6f 72 74 65 64 20 62 79 20 56 79 4f 53 2e 00 41 6c 6c 20 74 72 61 66 66 69 63 20 62 65 74 77 65 | orted.by.VyOS..All.traffic.betwe |
2bca0 | 65 6e 20 7a 6f 6e 65 73 20 69 73 20 61 66 66 65 63 74 65 64 20 62 79 20 65 78 69 73 74 69 6e 67 | en.zones.is.affected.by.existing |
2bcc0 | 20 70 6f 6c 69 63 69 65 73 00 41 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 64 20 66 72 6f | .policies.All.traffic.to.and.fro |
2bce0 | 6d 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 69 6e 20 61 20 7a 6f 6e 65 20 69 73 20 | m.an.interface.within.a.zone.is. |
2bd00 | 70 65 72 6d 69 74 74 65 64 2e 00 41 6c 6c 20 74 75 6e 6e 65 6c 20 73 65 73 73 69 6f 6e 73 20 63 | permitted..All.tunnel.sessions.c |
2bd20 | 61 6e 20 62 65 20 63 68 65 63 6b 65 64 20 76 69 61 3a 00 41 6c 6c 6f 63 61 74 69 6f 6e 20 63 6c | an.be.checked.via:.Allocation.cl |
2bd40 | 69 65 6e 74 73 20 69 70 20 61 64 64 72 65 73 73 65 73 20 62 79 20 52 41 44 49 55 53 00 41 6c 6c | ients.ip.addresses.by.RADIUS.All |
2bd60 | 6f 77 20 60 60 73 73 68 60 60 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 41 | ow.``ssh``.dynamic-protection..A |
2bd80 | 6c 6c 6f 77 20 61 63 63 65 73 73 20 74 6f 20 73 69 74 65 73 20 69 6e 20 61 20 64 6f 6d 61 69 6e | llow.access.to.sites.in.a.domain |
2bda0 | 20 77 69 74 68 6f 75 74 20 72 65 74 72 69 65 76 69 6e 67 20 74 68 65 6d 20 66 72 6f 6d 20 74 68 | .without.retrieving.them.from.th |
2bdc0 | 65 20 50 72 6f 78 79 20 63 61 63 68 65 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 6f 73 2e | e.Proxy.cache..Specifying."vyos. |
2bde0 | 6e 65 74 22 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e | net".will.allow.access.to.vyos.n |
2be00 | 65 74 20 62 75 74 20 74 68 65 20 70 61 67 65 73 20 61 63 63 65 73 73 65 64 20 77 69 6c 6c 20 6e | et.but.the.pages.accessed.will.n |
2be20 | 6f 74 20 62 65 20 63 61 63 68 65 64 2e 20 49 74 20 75 73 65 66 75 6c 20 66 6f 72 20 77 6f 72 6b | ot.be.cached..It.useful.for.work |
2be40 | 69 6e 67 20 61 72 6f 75 6e 64 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 22 49 66 2d 4d 6f 64 | ing.around.problems.with."If-Mod |
2be60 | 69 66 69 65 64 2d 53 69 6e 63 65 22 20 63 68 65 63 6b 69 6e 67 20 61 74 20 63 65 72 74 61 69 6e | ified-Since".checking.at.certain |
2be80 | 20 73 69 74 65 73 2e 00 41 6c 6c 6f 77 20 62 67 70 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 74 | .sites..Allow.bgp.to.negotiate.t |
2bea0 | 68 65 20 65 78 74 65 6e 64 65 64 2d 6e 65 78 74 68 6f 70 20 63 61 70 61 62 69 6c 69 74 79 20 77 | he.extended-nexthop.capability.w |
2bec0 | 69 74 68 20 69 74 e2 80 99 73 20 70 65 65 72 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 65 65 72 | ith.it...s.peer..If.you.are.peer |
2bee0 | 69 6e 67 20 6f 76 65 72 20 61 20 49 50 76 36 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 | ing.over.a.IPv6.Link-Local.addre |
2bf00 | 73 73 20 74 68 65 6e 20 74 68 69 73 20 63 61 70 61 62 69 6c 69 74 79 20 69 73 20 74 75 72 6e 65 | ss.then.this.capability.is.turne |
2bf20 | 64 20 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 | d.on.automatically..If.you.are.p |
2bf40 | 65 65 72 69 6e 67 20 6f 76 65 72 20 61 20 49 50 76 36 20 47 6c 6f 62 61 6c 20 41 64 64 72 65 73 | eering.over.a.IPv6.Global.Addres |
2bf60 | 73 20 74 68 65 6e 20 74 75 72 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 | s.then.turning.on.this.command.w |
2bf80 | 69 6c 6c 20 61 6c 6c 6f 77 20 42 47 50 20 74 6f 20 69 6e 73 74 61 6c 6c 20 49 50 76 34 20 72 6f | ill.allow.BGP.to.install.IPv4.ro |
2bfa0 | 75 74 65 73 20 77 69 74 68 20 49 50 76 36 20 6e 65 78 74 68 6f 70 73 20 69 66 20 79 6f 75 20 64 | utes.with.IPv6.nexthops.if.you.d |
2bfc0 | 6f 20 6e 6f 74 20 68 61 76 65 20 49 50 76 34 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 69 6e | o.not.have.IPv4.configured.on.in |
2bfe0 | 74 65 72 66 61 63 65 73 2e 00 41 6c 6c 6f 77 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 20 72 65 71 | terfaces..Allow.cross-origin.req |
2c000 | 75 65 73 74 73 20 66 72 6f 6d 20 60 3c 6f 72 69 67 69 6e 3e 60 2e 00 41 6c 6c 6f 77 20 65 78 70 | uests.from.`<origin>`..Allow.exp |
2c020 | 6c 69 63 69 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 | licit.IPv6.address.for.the.inter |
2c040 | 66 61 63 65 2e 00 41 6c 6c 6f 77 20 68 6f 73 74 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 6e 20 61 | face..Allow.host.networking.in.a |
2c060 | 20 63 6f 6e 74 61 69 6e 65 72 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 63 6b 20 6f 66 | .container..The.network.stack.of |
2c080 | 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 6e 6f 74 20 69 73 6f 6c 61 74 65 64 20 66 | .the.container.is.not.isolated.f |
2c0a0 | 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 6f | rom.the.host.and.will.use.the.ho |
2c0c0 | 73 74 20 49 50 2e 00 41 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 | st.IP..Allow.listing.additional. |
2c0e0 | 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 73 20 74 6f 20 62 65 20 62 72 6f 77 73 65 64 20 28 69 6e | custom.domains.to.be.browsed.(in |
2c100 | 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c | .addition.to.the.default.``local |
2c120 | 60 60 29 20 73 6f 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 6c 65 63 74 65 | ``).so.that.they.can.be.reflecte |
2c140 | 64 2e 00 41 6c 6c 6f 77 20 74 68 69 73 20 42 46 44 20 70 65 65 72 20 74 6f 20 6e 6f 74 20 62 65 | d..Allow.this.BFD.peer.to.not.be |
2c160 | 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 00 41 6c 6c 6f 77 65 64 20 76 61 6c 75 | .directly.connected.Allowed.valu |
2c180 | 65 73 20 66 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 53 59 4e 60 60 2c 20 60 60 41 43 4b | es.fpr.TCP.flags:.``SYN``,.``ACK |
2c1a0 | 60 60 2c 20 60 60 46 49 4e 60 60 2c 20 60 60 52 53 54 60 60 2c 20 60 60 55 52 47 60 60 2c 20 60 | ``,.``FIN``,.``RST``,.``URG``,.` |
2c1c0 | 60 50 53 48 60 60 2c 20 60 60 41 4c 4c 60 60 20 57 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 | `PSH``,.``ALL``.When.specifying. |
2c1e0 | 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 | more.than.one.flag,.flags.should |
2c200 | 20 62 65 20 63 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 2e 20 54 68 65 20 60 60 21 60 60 20 6e | .be.comma.separated..The.``!``.n |
2c220 | 65 67 61 74 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 6c 6c | egate.the.selected.protocol..All |
2c240 | 6f 77 65 64 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 61 63 6b | owed.values.fpr.TCP.flags:.``ack |
2c260 | 60 60 2c 20 60 60 63 77 72 60 60 2c 20 60 60 65 63 6e 60 60 2c 20 60 60 66 69 6e 60 60 2c 20 60 | ``,.``cwr``,.``ecn``,.``fin``,.` |
2c280 | 60 70 73 68 60 60 2c 20 60 60 72 73 74 60 60 2c 20 60 60 73 79 6e 60 60 20 61 6e 64 20 60 60 75 | `psh``,.``rst``,.``syn``.and.``u |
2c2a0 | 72 67 60 60 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 61 72 65 20 73 75 70 70 6f 72 | rg``..Multiple.values.are.suppor |
2c2c0 | 74 65 64 2c 20 61 6e 64 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 | ted,.and.for.inverted.selection. |
2c2e0 | 75 73 65 20 60 60 6e 6f 74 60 60 2c 20 61 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 61 | use.``not``,.as.shown.in.the.exa |
2c300 | 6d 70 6c 65 2e 00 41 6c 6c 6f 77 73 20 73 70 65 63 69 66 69 63 20 56 4c 41 4e 20 49 44 73 20 74 | mple..Allows.specific.VLAN.IDs.t |
2c320 | 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 6d 65 6d 62 65 72 | o.pass.through.the.bridge.member |
2c340 | 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 61 6e 20 65 69 74 68 65 72 20 62 65 20 61 | .interface..This.can.either.be.a |
2c360 | 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 56 4c 41 4e 20 69 64 20 6f 72 20 61 20 72 61 6e 67 65 20 | n.individual.VLAN.id.or.a.range. |
2c380 | 6f 66 20 56 4c 41 4e 20 69 64 73 20 64 65 6c 69 6d 69 74 65 64 20 62 79 20 61 20 68 79 70 68 65 | of.VLAN.ids.delimited.by.a.hyphe |
2c3a0 | 6e 2e 00 41 6c 6c 6f 77 73 20 74 6f 20 64 65 66 69 6e 65 20 55 52 4c 20 70 61 74 68 20 6d 61 74 | n..Allows.to.define.URL.path.mat |
2c3c0 | 63 68 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 | ching.rules.for.a.specific.servi |
2c3e0 | 63 65 2e 00 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | ce..Allows.you.to.configure.the. |
2c400 | 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 | next-hop.interface.for.an.interf |
2c420 | 61 63 65 2d 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 | ace-based.IPv4.static.route..`<i |
2c440 | 6e 74 65 72 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 | nterface>`.will.be.the.next-hop. |
2c460 | 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 | interface.where.traffic.is.route |
2c480 | 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 6c 6f | d.for.the.given.`<subnet>`..Allo |
2c4a0 | 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 | ws.you.to.configure.the.next-hop |
2c4c0 | 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 | .interface.for.an.interface-base |
2c4e0 | 64 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 | d.IPv6.static.route..`<interface |
2c500 | 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 | >`.will.be.the.next-hop.interfac |
2c520 | 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f 72 20 74 68 | e.where.traffic.is.routed.for.th |
2c540 | 65 20 67 69 76 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 72 65 61 64 79 20 6c 65 61 72 | e.given.`<subnet>`..Already.lear |
2c560 | 6e 65 64 20 6b 6e 6f 77 6e 5f 68 6f 73 74 73 20 66 69 6c 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 | ned.known_hosts.files.of.clients |
2c580 | 20 6e 65 65 64 20 61 6e 20 75 70 64 61 74 65 20 61 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 | .need.an.update.as.the.public.ke |
2c5a0 | 79 20 77 69 6c 6c 20 63 68 61 6e 67 65 2e 00 41 6c 73 6f 2c 20 2a 2a 64 65 66 61 75 6c 74 2d 61 | y.will.change..Also,.**default-a |
2c5c0 | 63 74 69 6f 6e 2a 2a 20 69 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 | ction**.is.an.action.that.takes. |
2c5e0 | 70 6c 61 63 65 20 77 68 65 6e 65 76 65 72 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 20 6e 6f 74 | place.whenever.a.packet.does.not |
2c600 | 20 6d 61 74 63 68 20 61 6e 79 20 72 75 6c 65 20 69 6e 20 69 74 27 73 20 63 68 61 69 6e 2e 20 46 | .match.any.rule.in.it's.chain..F |
2c620 | 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 70 6f 73 73 69 62 6c 65 20 6f 70 74 69 6f 6e 73 | or.base.chains,.possible.options |
2c640 | 20 66 6f 72 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2a 2a 20 61 72 65 20 2a 2a 61 63 | .for.**default-action**.are.**ac |
2c660 | 63 65 70 74 2a 2a 20 6f 72 20 2a 2a 64 72 6f 70 2a 2a 2e 00 41 6c 73 6f 2c 20 66 6f 72 20 62 61 | cept**.or.**drop**..Also,.for.ba |
2c680 | 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 74 68 69 73 20 63 6f 6e 66 69 | ckwards.compatibility.this.confi |
2c6a0 | 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 75 73 65 73 20 67 65 6e 65 72 69 63 20 69 6e 74 | guration,.which.uses.generic.int |
2c6c0 | 65 72 66 61 63 65 20 64 65 66 69 6e 69 74 69 6f 6e 2c 20 69 73 20 73 74 69 6c 6c 20 76 61 6c 69 | erface.definition,.is.still.vali |
2c6e0 | 64 3a 00 41 6c 73 6f 2c 20 66 6f 72 20 74 68 6f 73 65 20 77 68 6f 20 68 61 76 65 6e 27 74 20 75 | d:.Also,.for.those.who.haven't.u |
2c700 | 70 64 61 74 65 64 20 74 6f 20 6e 65 77 65 72 20 76 65 72 73 69 6f 6e 2c 20 6c 65 67 61 63 79 20 | pdated.to.newer.version,.legacy. |
2c720 | 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 70 72 65 73 65 6e 74 20 61 | documentation.is.still.present.a |
2c740 | 6e 64 20 76 61 6c 69 64 20 66 6f 72 20 61 6c 6c 20 73 61 67 69 74 74 61 20 76 65 72 73 69 6f 6e | nd.valid.for.all.sagitta.version |
2c760 | 20 70 72 69 6f 72 20 74 6f 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 | .prior.to.VyOS.1.4-rolling-20230 |
2c780 | 38 30 34 30 35 35 37 3a 00 41 6c 73 6f 2c 20 69 6e 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 | 8040557:.Also,.in.:ref:`destinat |
2c7a0 | 69 6f 6e 2d 6e 61 74 60 2c 20 72 65 64 69 72 65 63 74 69 6f 6e 20 74 6f 20 6c 6f 63 61 6c 68 6f | ion-nat`,.redirection.to.localho |
2c7c0 | 73 74 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 20 72 65 64 69 72 65 63 74 20 73 74 | st.is.supported..The.redirect.st |
2c7e0 | 61 74 65 6d 65 6e 74 20 69 73 20 61 20 73 70 65 63 69 61 6c 20 66 6f 72 6d 20 6f 66 20 64 6e 61 | atement.is.a.special.form.of.dna |
2c800 | 74 20 77 68 69 63 68 20 61 6c 77 61 79 73 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 65 20 64 65 | t.which.always.translates.the.de |
2c820 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 68 | stination.address.to.the.local.h |
2c840 | 6f 73 74 e2 80 99 73 20 6f 6e 65 2e 00 41 6c 74 65 72 6e 61 74 65 20 52 6f 75 74 69 6e 67 20 54 | ost...s.one..Alternate.Routing.T |
2c860 | 61 62 6c 65 73 00 41 6c 74 65 72 6e 61 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 | ables.Alternate.routing.tables.a |
2c880 | 72 65 20 75 73 65 64 20 77 69 74 68 20 70 6f 6c 69 63 79 20 62 61 73 65 64 20 72 6f 75 74 69 6e | re.used.with.policy.based.routin |
2c8a0 | 67 20 62 79 20 75 74 69 6c 69 7a 69 6e 67 20 3a 72 65 66 3a 60 76 72 66 60 2e 00 41 6c 74 65 72 | g.by.utilizing.:ref:`vrf`..Alter |
2c8c0 | 6e 61 74 69 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 | native.to.multicast,.the.remote. |
2c8e0 | 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c | IPv4.address.of.the.VXLAN.tunnel |
2c900 | 20 63 61 6e 20 62 65 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 20 4c 65 74 27 73 20 63 68 61 6e | .can.be.set.directly..Let's.chan |
2c920 | 67 65 20 74 68 65 20 4d 75 6c 74 69 63 61 73 74 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 | ge.the.Multicast.example.from.ab |
2c940 | 6f 76 65 3a 00 41 6c 77 61 79 73 20 65 78 63 6c 75 64 65 20 74 68 69 73 20 61 64 64 72 65 73 73 | ove:.Always.exclude.this.address |
2c960 | 20 66 72 6f 6d 20 61 6e 79 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 2e 20 54 68 69 73 20 61 64 | .from.any.defined.range..This.ad |
2c980 | 64 72 65 73 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 61 73 73 69 67 6e 65 64 20 62 79 20 | dress.will.never.be.assigned.by. |
2c9a0 | 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 41 6e 20 2a 2a 69 6e 74 65 72 66 61 63 65 20 | the.DHCP.server..An.**interface. |
2c9c0 | 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 | group**.represents.a.collection. |
2c9e0 | 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 00 41 6e 20 41 53 20 69 73 20 61 20 63 6f 6e 6e 65 63 | of.interfaces..An.AS.is.a.connec |
2ca00 | 74 65 64 20 67 72 6f 75 70 20 6f 66 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 49 50 20 70 72 65 66 | ted.group.of.one.or.more.IP.pref |
2ca20 | 69 78 65 73 20 72 75 6e 20 62 79 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 6e 65 74 77 6f 72 6b 20 | ixes.run.by.one.or.more.network. |
2ca40 | 6f 70 65 72 61 74 6f 72 73 20 77 68 69 63 68 20 68 61 73 20 61 20 53 49 4e 47 4c 45 20 61 6e 64 | operators.which.has.a.SINGLE.and |
2ca60 | 20 43 4c 45 41 52 4c 59 20 44 45 46 49 4e 45 44 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 2e | .CLEARLY.DEFINED.routing.policy. |
2ca80 | 00 41 6e 20 49 50 76 34 20 54 43 50 20 66 69 6c 74 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 | .An.IPv4.TCP.filter.will.only.ma |
2caa0 | 74 63 68 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 6e 20 49 50 76 34 20 68 65 61 64 65 72 20 | tch.packets.with.an.IPv4.header. |
2cac0 | 6c 65 6e 67 74 68 20 6f 66 20 32 30 20 62 79 74 65 73 20 28 77 68 69 63 68 20 69 73 20 74 68 65 | length.of.20.bytes.(which.is.the |
2cae0 | 20 6d 61 6a 6f 72 69 74 79 20 6f 66 20 49 50 76 34 20 70 61 63 6b 65 74 73 20 61 6e 79 77 61 79 | .majority.of.IPv4.packets.anyway |
2cb00 | 29 2e 00 41 6e 20 53 4e 4d 50 2d 6d 61 6e 61 67 65 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 73 69 | )..An.SNMP-managed.network.consi |
2cb20 | 73 74 73 20 6f 66 20 74 68 72 65 65 20 6b 65 79 20 63 6f 6d 70 6f 6e 65 6e 74 73 3a 00 41 6e 20 | sts.of.three.key.components:.An. |
2cb40 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 73 70 65 63 69 66 79 69 6e 67 20 77 68 69 63 68 20 73 | `<interface>`.specifying.which.s |
2cb60 | 6c 61 76 65 20 69 73 20 74 68 65 20 70 72 69 6d 61 72 79 20 64 65 76 69 63 65 2e 20 54 68 65 20 | lave.is.the.primary.device..The. |
2cb80 | 73 70 65 63 69 66 69 65 64 20 64 65 76 69 63 65 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 62 65 20 | specified.device.will.always.be. |
2cba0 | 74 68 65 20 61 63 74 69 76 65 20 73 6c 61 76 65 20 77 68 69 6c 65 20 69 74 20 69 73 20 61 76 61 | the.active.slave.while.it.is.ava |
2cbc0 | 69 6c 61 62 6c 65 2e 20 4f 6e 6c 79 20 77 68 65 6e 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 73 | ilable..Only.when.the.primary.is |
2cbe0 | 20 6f 66 66 2d 6c 69 6e 65 20 77 69 6c 6c 20 61 6c 74 65 72 6e 61 74 65 20 64 65 76 69 63 65 73 | .off-line.will.alternate.devices |
2cc00 | 20 62 65 20 75 73 65 64 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 6f 6e | .be.used..This.is.useful.when.on |
2cc20 | 65 20 73 6c 61 76 65 20 69 73 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 6e 6f 74 68 65 | e.slave.is.preferred.over.anothe |
2cc40 | 72 2c 20 65 2e 67 2e 2c 20 77 68 65 6e 20 6f 6e 65 20 73 6c 61 76 65 20 68 61 73 20 68 69 67 68 | r,.e.g.,.when.one.slave.has.high |
2cc60 | 65 72 20 74 68 72 6f 75 67 68 70 75 74 20 74 68 61 6e 20 61 6e 6f 74 68 65 72 2e 00 41 6e 20 61 | er.throughput.than.another..An.a |
2cc80 | 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 | dditional.layer.of.symmetric-key |
2cca0 | 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 | .crypto.can.be.used.on.top.of.th |
2ccc0 | 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e | e.asymmetric.crypto..An.addition |
2cce0 | 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f | al.layer.of.symmetric-key.crypto |
2cd00 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d | .can.be.used.on.top.of.the.asymm |
2cd20 | 65 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 75 74 6f 6d | etric.crypto..This.command.autom |
2cd40 | 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 73 20 66 6f 72 20 79 6f 75 20 74 68 65 20 72 65 71 | atically.creates.for.you.the.req |
2cd60 | 75 69 72 65 64 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 | uired.CLI.command.to.install.thi |
2cd80 | 73 20 50 53 4b 20 66 6f 72 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 00 41 6e 20 61 64 64 69 74 | s.PSK.for.a.given.peer..An.addit |
2cda0 | 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 | ional.layer.of.symmetric-key.cry |
2cdc0 | 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 | pto.can.be.used.on.top.of.the.as |
2cde0 | 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e 20 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 | ymmetric.crypto..This.is.optiona |
2ce00 | 6c 2e 00 41 6e 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 73 63 68 65 6d 65 20 69 | l..An.advantage.of.this.scheme.i |
2ce20 | 73 20 74 68 61 74 20 79 6f 75 20 67 65 74 20 61 20 72 65 61 6c 20 69 6e 74 65 72 66 61 63 65 20 | s.that.you.get.a.real.interface. |
2ce40 | 77 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 | with.its.own.address,.which.make |
2ce60 | 73 20 69 74 20 65 61 73 69 65 72 20 74 6f 20 73 65 74 75 70 20 73 74 61 74 69 63 20 72 6f 75 74 | s.it.easier.to.setup.static.rout |
2ce80 | 65 73 20 6f 72 20 75 73 65 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | es.or.use.dynamic.routing.protoc |
2cea0 | 6f 6c 73 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 6d 6f 64 69 66 79 20 49 50 73 | ols.without.having.to.modify.IPs |
2cec0 | 65 63 20 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 6f 74 68 65 72 20 61 64 76 61 6e 74 61 67 65 | ec.policies..The.other.advantage |
2cee0 | 20 69 73 20 74 68 61 74 20 69 74 20 67 72 65 61 74 6c 79 20 73 69 6d 70 6c 69 66 69 65 73 20 72 | .is.that.it.greatly.simplifies.r |
2cf00 | 6f 75 74 65 72 20 74 6f 20 72 6f 75 74 65 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 77 | outer.to.router.communication,.w |
2cf20 | 68 69 63 68 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 20 77 69 74 68 20 70 6c 61 69 6e 20 49 50 | hich.can.be.tricky.with.plain.IP |
2cf40 | 73 65 63 20 62 65 63 61 75 73 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6f 75 74 67 6f 69 6e | sec.because.the.external.outgoin |
2cf60 | 67 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 75 73 75 61 6c 6c 79 20 | g.address.of.the.router.usually. |
2cf80 | 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 74 68 65 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6f | doesn't.match.the.IPsec.policy.o |
2cfa0 | 66 20 74 79 70 69 63 61 6c 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 73 65 74 75 70 20 61 6e 64 | f.typical.site-to-site.setup.and |
2cfc0 | 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 75 | .you.need.to.add.special.configu |
2cfe0 | 72 61 74 69 6f 6e 20 66 6f 72 20 69 74 2c 20 6f 72 20 61 64 6a 75 73 74 20 74 68 65 20 73 6f 75 | ration.for.it,.or.adjust.the.sou |
2d000 | 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 | rce.address.for.outgoing.traffic |
2d020 | 20 6f 66 20 79 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 20 47 52 45 2f 49 50 73 65 63 | .of.your.applications..GRE/IPsec |
2d040 | 20 68 61 73 20 6e 6f 20 73 75 63 68 20 70 72 6f 62 6c 65 6d 20 61 6e 64 20 69 73 20 63 6f 6d 70 | .has.no.such.problem.and.is.comp |
2d060 | 6c 65 74 65 6c 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 66 6f 72 20 74 68 65 20 61 70 70 6c 69 | letely.transparent.for.the.appli |
2d080 | 63 61 74 69 6f 6e 73 2e 00 41 6e 20 61 67 65 6e 74 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 2d 6d | cations..An.agent.is.a.network-m |
2d0a0 | 61 6e 61 67 65 6d 65 6e 74 20 73 6f 66 74 77 61 72 65 20 6d 6f 64 75 6c 65 20 74 68 61 74 20 72 | anagement.software.module.that.r |
2d0c0 | 65 73 69 64 65 73 20 6f 6e 20 61 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 2e 20 41 6e 20 61 | esides.on.a.managed.device..An.a |
2d0e0 | 67 65 6e 74 20 68 61 73 20 6c 6f 63 61 6c 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 6d 61 6e 61 | gent.has.local.knowledge.of.mana |
2d100 | 67 65 6d 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 72 61 6e 73 6c 61 74 65 | gement.information.and.translate |
2d120 | 73 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 6f 72 20 66 72 6f 6d 20 61 6e | s.that.information.to.or.from.an |
2d140 | 20 53 4e 4d 50 2d 73 70 65 63 69 66 69 63 20 66 6f 72 6d 2e 00 41 6e 20 61 6c 74 65 72 6e 61 74 | .SNMP-specific.form..An.alternat |
2d160 | 65 20 63 6f 6d 6d 61 6e 64 20 63 6f 75 6c 64 20 62 65 20 22 6d 70 6c 73 2d 74 65 20 6f 6e 22 20 | e.command.could.be."mpls-te.on". |
2d180 | 28 54 72 61 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 29 00 41 6e 20 61 72 62 69 74 72 61 | (Traffic.Engineering).An.arbitra |
2d1a0 | 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 | ry.netmask.can.be.applied.to.mas |
2d1c0 | 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 | k.addresses.to.only.match.agains |
2d1e0 | 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 00 41 6e 20 61 72 62 69 74 72 61 | t.a.specific.portion..An.arbitra |
2d200 | 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 | ry.netmask.can.be.applied.to.mas |
2d220 | 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 | k.addresses.to.only.match.agains |
2d240 | 74 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 | t.a.specific.portion..This.is.pa |
2d260 | 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 | rticularly.useful.with.IPv6.and. |
2d280 | 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 | a.zone-based.firewall.as.rules.w |
2d2a0 | 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 | ill.remain.valid.if.the.IPv6.pre |
2d2c0 | 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e | fix.changes.and.the.host.portion |
2d2e0 | 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 | .of.systems.IPv6.address.is.stat |
2d300 | 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 | ic.(for.example,.with.SLAAC.or.` |
2d320 | 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a | tokenised.IPv6.addresses.<https: |
2d340 | 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 | //datatracker.ietf.org/doc/id/dr |
2d360 | 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 | aft-chown-6man-tokenised-ipv6-id |
2d380 | 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 61 72 62 69 74 72 61 72 | entifiers-02.txt>`_).An.arbitrar |
2d3a0 | 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b | y.netmask.can.be.applied.to.mask |
2d3c0 | 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 | .addresses.to.only.match.against |
2d3e0 | 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 | .a.specific.portion..This.is.par |
2d400 | 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 61 | ticularly.useful.with.IPv6.and.a |
2d420 | 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 69 | .zone-based.firewall.as.rules.wi |
2d440 | 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 | ll.remain.valid.if.the.IPv6.pref |
2d460 | 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 | ix.changes.and.the.host.portion. |
2d480 | 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 | of.systems.IPv6.address.is.stati |
2d4a0 | 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 | c.(for.example,.with.SLAAC.or.`t |
2d4c0 | 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f | okenised.IPv6.addresses.<https:/ |
2d4e0 | 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 | /datatracker.ietf.org/doc/id/dra |
2d500 | 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 | ft-chown-6man-tokenised-ipv6-ide |
2d520 | 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 2e 00 41 6e 20 61 72 62 69 74 72 61 72 | ntifiers-02.txt>`_)..An.arbitrar |
2d540 | 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b | y.netmask.can.be.applied.to.mask |
2d560 | 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 | .addresses.to.only.match.against |
2d580 | 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 | .a.specific.portion..This.is.par |
2d5a0 | 74 69 63 75 6c 61 72 6c 79 20 75 73 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 73 20 72 75 | ticularly.useful.with.IPv6.as.ru |
2d5c0 | 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 | les.will.remain.valid.if.the.IPv |
2d5e0 | 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f | 6.prefix.changes.and.the.host.po |
2d600 | 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 | rtion.of.systems.IPv6.address.is |
2d620 | 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 | .static.(for.example,.with.SLAAC |
2d640 | 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 | .or.`tokenised.IPv6.addresses.<h |
2d660 | 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f | ttps://datatracker.ietf.org/doc/ |
2d680 | 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 | id/draft-chown-6man-tokenised-ip |
2d6a0 | 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 62 61 73 | v6-identifiers-02.txt>`_).An.bas |
2d6c0 | 69 63 20 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 | ic.introduction.to.zone-based.fi |
2d6e0 | 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 68 65 72 65 20 3c 68 74 74 70 | rewalls.can.be.found.`here.<http |
2d700 | 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c | s://support.vyos.io/en/kb/articl |
2d720 | 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 2d 66 69 72 65 77 61 | es/a-primer-to-zone-based-firewa |
2d740 | 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 | ll>`_,.and.an.example.at.:ref:`e |
2d760 | 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 41 6e 20 65 78 61 6d 70 6c 65 | xamples-zone-policy`..An.example |
2d780 | 20 6f 66 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 73 65 6e 64 73 20 60 | .of.a.configuration.that.sends.` |
2d7a0 | 60 74 65 6c 65 67 72 61 66 60 60 20 6d 65 74 72 69 63 73 20 74 6f 20 72 65 6d 6f 74 65 20 60 60 | `telegraf``.metrics.to.remote.`` |
2d7c0 | 49 6e 66 6c 75 78 44 42 20 32 60 60 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 63 72 65 61 74 | InfluxDB.2``.An.example.of.creat |
2d7e0 | 69 6e 67 20 61 20 56 4c 41 4e 2d 61 77 61 72 65 20 62 72 69 64 67 65 20 69 73 20 61 73 20 66 6f | ing.a.VLAN-aware.bridge.is.as.fo |
2d800 | 6c 6c 6f 77 73 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 6b 65 79 20 67 65 6e 65 72 61 74 | llows:.An.example.of.key.generat |
2d820 | 69 6f 6e 3a 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 74 68 65 20 64 61 74 61 20 63 61 70 74 | ion:.An.example.of.the.data.capt |
2d840 | 75 72 65 64 20 62 79 20 61 20 46 52 45 45 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 69 74 68 | ured.by.a.FREERADIUS.server.with |
2d860 | 20 73 71 6c 20 61 63 63 6f 75 6e 74 69 6e 67 3a 00 41 6e 20 65 78 61 6d 70 6c 65 3a 00 41 6e 20 | .sql.accounting:.An.example:.An. |
2d880 | 6f 70 74 69 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 61 20 71 75 6f 74 65 64 20 73 74 72 69 6e | option.that.takes.a.quoted.strin |
2d8a0 | 67 20 69 73 20 73 65 74 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f 74 65 20 | g.is.set.by.replacing.all.quote. |
2d8c0 | 63 68 61 72 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 26 71 75 | characters.with.the.string.``&qu |
2d8e0 | 6f 74 3b 60 60 20 69 6e 73 69 64 65 20 74 68 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 2d | ot;``.inside.the.static-mapping- |
2d900 | 70 61 72 61 6d 65 74 65 72 73 20 76 61 6c 75 65 2e 20 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 | parameters.value..The.resulting. |
2d920 | 6c 69 6e 65 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 77 69 6c 6c 20 62 65 20 60 60 6f 70 74 | line.in.dhcpd.conf.will.be.``opt |
2d940 | 69 6f 6e 20 70 78 65 6c 69 6e 75 78 2e 63 6f 6e 66 69 67 66 69 6c 65 20 22 70 78 65 6c 69 6e 75 | ion.pxelinux.configfile."pxelinu |
2d960 | 78 2e 63 66 67 2f 30 31 2d 30 30 2d 31 35 2d 31 37 2d 34 34 2d 32 64 2d 61 61 22 3b 60 60 2e 00 | x.cfg/01-00-15-17-44-2d-aa";``.. |
2d980 | 41 6e 61 6c 79 73 69 73 20 6f 6e 20 77 68 61 74 20 68 61 70 70 65 6e 73 20 66 6f 72 20 64 65 73 | Analysis.on.what.happens.for.des |
2d9a0 | 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 | ired.connection:.And.base.chain. |
2d9c0 | 66 6f 72 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 | for.traffic.generated.by.the.rou |
2d9e0 | 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 | ter.is.``set.firewall.ipv4.outpu |
2da00 | 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 66 6f | t.filter....``.And.base.chain.fo |
2da20 | 72 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 | r.traffic.generated.by.the.route |
2da40 | 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 | r.is.``set.firewall.ipv6.output. |
2da60 | 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 41 6e 64 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 65 20 | filter....``.And.content.of.the. |
2da80 | 73 63 72 69 70 74 3a 00 41 6e 64 20 66 6f 72 20 69 70 76 36 3a 00 41 6e 64 20 6e 65 78 74 2c 20 | script:.And.for.ipv6:.And.next,. |
2daa0 | 73 6f 6d 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 77 68 65 72 65 | some.configuration.example.where |
2dac0 | 20 67 72 6f 75 70 73 20 61 72 65 20 75 73 65 64 3a 00 41 6e 64 20 6f 70 2d 6d 6f 64 65 20 63 6f | .groups.are.used:.And.op-mode.co |
2dae0 | 6d 6d 61 6e 64 73 3a 00 41 6e 64 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 49 50 76 34 20 2a | mmands:.And.the.different.IPv4.* |
2db00 | 2a 72 65 73 65 74 2a 2a 20 63 6f 6d 6d 61 6e 64 73 20 61 76 61 69 6c 61 62 6c 65 3a 00 41 6e 64 | *reset**.commands.available:.And |
2db20 | 20 74 68 65 6e 20 68 61 73 68 20 69 73 20 72 65 64 75 63 65 64 20 6d 6f 64 75 6c 6f 20 73 6c 61 | .then.hash.is.reduced.modulo.sla |
2db40 | 76 65 20 63 6f 75 6e 74 2e 00 41 6e 64 2c 20 74 6f 20 70 72 69 6e 74 20 6f 6e 6c 79 20 62 72 69 | ve.count..And,.to.print.only.bri |
2db60 | 64 67 65 20 66 69 72 65 77 61 6c 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 41 6e 6f 74 68 65 | dge.firewall.information:.Anothe |
2db80 | 72 20 74 65 72 6d 20 6f 66 74 65 6e 20 75 73 65 64 20 66 6f 72 20 44 4e 41 54 20 69 73 20 2a 2a | r.term.often.used.for.DNAT.is.** |
2dba0 | 31 2d 74 6f 2d 31 20 4e 41 54 2a 2a 2e 20 46 6f 72 20 61 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 | 1-to-1.NAT**..For.a.1-to-1.NAT.c |
2dbc0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 62 6f 74 68 20 44 4e 41 54 20 61 6e 64 20 53 4e 41 54 | onfiguration,.both.DNAT.and.SNAT |
2dbe0 | 20 61 72 65 20 75 73 65 64 20 74 6f 20 4e 41 54 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 72 6f | .are.used.to.NAT.all.traffic.fro |
2dc00 | 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 | m.an.external.IP.address.to.an.i |
2dc20 | 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 76 69 63 65 2d 76 65 72 73 | nternal.IP.address.and.vice-vers |
2dc40 | 61 2e 00 41 6e 6f 74 68 65 72 20 74 68 69 6e 67 20 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 | a..Another.thing.to.keep.in.mind |
2dc60 | 20 77 69 74 68 20 4c 44 50 20 69 73 20 74 68 61 74 20 6d 75 63 68 20 6c 69 6b 65 20 42 47 50 2c | .with.LDP.is.that.much.like.BGP, |
2dc80 | 20 69 74 20 69 73 20 61 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 72 75 6e 73 20 6f 6e 20 74 | .it.is.a.protocol.that.runs.on.t |
2dca0 | 6f 70 20 6f 66 20 54 43 50 2e 20 49 74 20 68 6f 77 65 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 | op.of.TCP..It.however.does.not.h |
2dcc0 | 61 76 65 20 61 6e 20 61 62 69 6c 69 74 79 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c | ave.an.ability.to.do.something.l |
2dce0 | 69 6b 65 20 61 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 20 6c 69 6b 65 20 42 47 | ike.a.refresh.capability.like.BG |
2dd00 | 50 73 20 72 6f 75 74 65 20 72 65 66 72 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 65 | Ps.route.refresh.capability..The |
2dd20 | 72 65 66 6f 72 65 20 6f 6e 65 20 6d 69 67 68 74 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 | refore.one.might.have.to.reset.t |
2dd40 | 68 65 20 6e 65 69 67 68 62 6f 72 20 66 6f 72 20 61 20 63 61 70 61 62 69 6c 69 74 79 20 63 68 61 | he.neighbor.for.a.capability.cha |
2dd60 | 6e 67 65 20 6f 72 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 68 61 6e 67 65 20 74 6f | nge.or.a.configuration.change.to |
2dd80 | 20 77 6f 72 6b 2e 00 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 65 78 70 65 63 74 73 20 | .work..Apple.iOS/iPadOS.expects. |
2dda0 | 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 | the.server.name.to.be.also.used. |
2ddc0 | 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d | in.the.server's.certificate.comm |
2dde0 | 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 | on.name,.so.it's.best.to.use.thi |
2de00 | 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 | s.DNS.name.for.your.VPN.connecti |
2de20 | 6f 6e 2e 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 | on..Apply.a.route-map.filter.to. |
2de40 | 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f | routes.for.the.specified.protoco |
2de60 | 6c 2e 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 | l..Apply.a.route-map.filter.to.r |
2de80 | 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c | outes.for.the.specified.protocol |
2dea0 | 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 | ..The.following.protocols.can.be |
2dec0 | 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 | .used:.any,.babel,.bgp,.connecte |
2dee0 | 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 | d,.eigrp,.isis,.kernel,.ospf,.ri |
2df00 | 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d | p,.static,.table.Apply.a.route-m |
2df20 | 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 | ap.filter.to.routes.for.the.spec |
2df40 | 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 | ified.protocol..The.following.pr |
2df60 | 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c | otocols.can.be.used:.any,.babel, |
2df80 | 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f | .bgp,.connected,.isis,.kernel,.o |
2dfa0 | 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c | spfv3,.ripng,.static,.table.Appl |
2dfc0 | 79 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 2a 2a 69 6e 62 6f 75 6e 64 2a 2a 20 | y.routing.policy.to.**inbound**. |
2dfe0 | 64 69 72 65 63 74 69 6f 6e 20 6f 66 20 6f 75 74 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 | direction.of.out.VLAN.interfaces |
2e000 | 00 41 70 70 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 20 5a 6f 6e 65 00 41 | .Applying.a.Rule-Set.to.a.Zone.A |
2e020 | 70 70 6c 79 69 6e 67 20 61 20 52 75 6c 65 2d 53 65 74 20 74 6f 20 61 6e 20 49 6e 74 65 72 66 61 | pplying.a.Rule-Set.to.an.Interfa |
2e040 | 63 65 00 41 70 70 6c 79 69 6e 67 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 41 72 65 | ce.Applying.a.traffic.policy.Are |
2e060 | 61 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 41 72 65 61 20 69 64 65 6e 74 69 66 69 65 72 3a | a.Configuration.Area.identifier: |
2e080 | 20 60 60 30 30 30 31 60 60 20 49 53 2d 49 53 20 61 72 65 61 20 6e 75 6d 62 65 72 20 28 6e 75 6d | .``0001``.IS-IS.area.number.(num |
2e0a0 | 62 65 72 69 63 61 6c 20 61 72 65 61 20 60 60 31 60 60 29 00 41 72 67 75 6d 65 6e 74 73 20 77 68 | berical.area.``1``).Arguments.wh |
2e0c0 | 69 63 68 20 77 69 6c 6c 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 74 68 65 20 65 78 65 63 75 74 | ich.will.be.passed.to.the.execut |
2e0e0 | 61 62 6c 65 2e 00 41 72 69 73 74 61 20 45 4f 53 00 41 72 75 62 61 2f 48 50 00 41 73 20 49 6e 74 | able..Arista.EOS.Aruba/HP.As.Int |
2e100 | 65 72 6e 65 74 20 77 69 64 65 20 50 4d 54 55 20 64 69 73 63 6f 76 65 72 79 20 72 61 72 65 6c 79 | ernet.wide.PMTU.discovery.rarely |
2e120 | 20 77 6f 72 6b 73 2c 20 77 65 20 73 6f 6d 65 74 69 6d 65 73 20 6e 65 65 64 20 74 6f 20 63 6c 61 | .works,.we.sometimes.need.to.cla |
2e140 | 6d 70 20 6f 75 72 20 54 43 50 20 4d 53 53 20 76 61 6c 75 65 20 74 6f 20 61 20 73 70 65 63 69 66 | mp.our.TCP.MSS.value.to.a.specif |
2e160 | 69 63 20 76 61 6c 75 65 2e 20 54 68 69 73 20 69 73 20 61 20 66 69 65 6c 64 20 69 6e 20 74 68 65 | ic.value..This.is.a.field.in.the |
2e180 | 20 54 43 50 20 6f 70 74 69 6f 6e 73 20 70 61 72 74 20 6f 66 20 61 20 53 59 4e 20 70 61 63 6b 65 | .TCP.options.part.of.a.SYN.packe |
2e1a0 | 74 2e 20 42 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 4d 53 53 20 76 61 6c 75 65 2c 20 79 6f 75 | t..By.setting.the.MSS.value,.you |
2e1c0 | 20 61 72 65 20 74 65 6c 6c 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 20 75 6e 65 | .are.telling.the.remote.side.une |
2e1e0 | 71 75 69 76 6f 63 61 6c 6c 79 20 27 64 6f 20 6e 6f 74 20 74 72 79 20 74 6f 20 73 65 6e 64 20 6d | quivocally.'do.not.try.to.send.m |
2e200 | 65 20 70 61 63 6b 65 74 73 20 62 69 67 67 65 72 20 74 68 61 6e 20 74 68 69 73 20 76 61 6c 75 65 | e.packets.bigger.than.this.value |
2e220 | 27 2e 00 41 73 20 53 53 54 50 20 70 72 6f 76 69 64 65 73 20 50 50 50 20 76 69 61 20 61 20 53 53 | '..As.SSTP.provides.PPP.via.a.SS |
2e240 | 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 | L/TLS.channel.the.use.of.either. |
2e260 | 70 75 62 6c 69 63 61 6c 6c 79 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 | publically.signed.certificates.a |
2e280 | 73 20 77 65 6c 6c 20 61 73 20 61 20 70 72 69 76 61 74 65 20 50 4b 49 20 69 73 20 72 65 71 75 69 | s.well.as.a.private.PKI.is.requi |
2e2a0 | 72 65 64 2e 00 41 73 20 56 79 4f 53 20 69 73 20 4c 69 6e 75 78 20 62 61 73 65 64 20 74 68 65 20 | red..As.VyOS.is.Linux.based.the. |
2e2c0 | 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 69 73 20 6e 6f 74 20 75 73 69 6e 67 20 34 | default.port.used.is.not.using.4 |
2e2e0 | 37 38 39 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 | 789.as.the.default.IANA-assigned |
2e300 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 49 6e | .destination.UDP.port.number..In |
2e320 | 73 74 65 61 64 20 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 4c 69 6e 75 78 20 64 65 66 61 75 6c | stead.VyOS.uses.the.Linux.defaul |
2e340 | 74 20 70 6f 72 74 20 6f 66 20 38 34 37 32 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 | t.port.of.8472..As.VyOS.is.based |
2e360 | 20 6f 6e 20 4c 69 6e 75 78 20 61 6e 64 20 74 68 65 72 65 20 77 61 73 20 6e 6f 20 6f 66 66 69 63 | .on.Linux.and.there.was.no.offic |
2e380 | 69 61 6c 20 49 41 4e 41 20 70 6f 72 74 20 61 73 73 69 67 6e 65 64 20 66 6f 72 20 56 58 4c 41 4e | ial.IANA.port.assigned.for.VXLAN |
2e3a0 | 2c 20 56 79 4f 53 20 75 73 65 73 20 61 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 38 34 | ,.VyOS.uses.a.default.port.of.84 |
2e3c0 | 37 32 2e 20 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 70 6f 72 74 20 6f 6e 20 61 | 72..You.can.change.the.port.on.a |
2e3e0 | 20 70 65 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 67 65 | .per.VXLAN.interface.basis.to.ge |
2e400 | 74 20 69 74 20 77 6f 72 6b 69 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 76 65 6e | t.it.working.across.multiple.ven |
2e420 | 64 6f 72 73 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 4c 69 6e 75 78 20 | dors..As.VyOS.is.based.on.Linux. |
2e440 | 69 74 20 6c 65 76 65 72 61 67 65 73 20 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 20 54 68 65 20 4e | it.leverages.its.firewall..The.N |
2e460 | 65 74 66 69 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 74 65 64 20 69 70 74 61 62 6c 65 | etfilter.project.created.iptable |
2e480 | 73 20 61 6e 64 20 69 74 73 20 73 75 63 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 | s.and.its.successor.nftables.for |
2e4a0 | 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 | .the.Linux.kernel.to.work.direct |
2e4c0 | 6c 79 20 6f 6e 20 70 61 63 6b 65 74 20 64 61 74 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f | ly.on.packet.data.flows..This.no |
2e4e0 | 77 20 65 78 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 | w.extends.the.concept.of.zone-ba |
2e500 | 73 65 64 20 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 | sed.security.to.allow.for.manipu |
2e520 | 6c 61 74 69 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 | lating.the.data.at.multiple.stag |
2e540 | 65 73 20 6f 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 | es.once.accepted.by.the.network. |
2e560 | 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 | interface.and.the.driver.before. |
2e580 | 62 65 69 6e 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 | being.handed.off.to.the.destinat |
2e5a0 | 69 6f 6e 20 28 65 2e 67 2e 2c 20 61 20 77 65 62 20 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 | ion.(e.g.,.a.web.server.OR.anoth |
2e5c0 | 65 72 20 64 65 76 69 63 65 29 2e 00 41 73 20 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 | er.device)..As.VyOS.makes.use.of |
2e5e0 | 20 74 68 65 20 51 4d 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f | .the.QMI.interface.to.connect.to |
2e600 | 20 74 68 65 20 57 57 41 4e 20 6d 6f 64 65 6d 20 63 61 72 64 73 2c 20 61 6c 73 6f 20 74 68 65 20 | .the.WWAN.modem.cards,.also.the. |
2e620 | 66 69 72 6d 77 61 72 65 20 63 61 6e 20 62 65 20 72 65 70 72 6f 67 72 61 6d 6d 65 64 2e 00 41 73 | firmware.can.be.reprogrammed..As |
2e640 | 20 61 20 72 65 66 65 72 65 6e 63 65 3a 20 66 6f 72 20 31 30 6d 62 69 74 2f 73 20 6f 6e 20 49 6e | .a.reference:.for.10mbit/s.on.In |
2e660 | 74 65 6c 2c 20 79 6f 75 20 6d 69 67 68 74 20 6e 65 65 64 20 61 74 20 6c 65 61 73 74 20 31 30 6b | tel,.you.might.need.at.least.10k |
2e680 | 62 79 74 65 20 62 75 66 66 65 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 61 63 68 | byte.buffer.if.you.want.to.reach |
2e6a0 | 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 65 64 20 72 61 74 65 2e 00 41 73 20 61 20 72 65 73 75 | .your.configured.rate..As.a.resu |
2e6c0 | 6c 74 2c 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 65 61 63 68 20 70 61 63 6b 65 | lt,.the.processing.of.each.packe |
2e6e0 | 74 20 62 65 63 6f 6d 65 73 20 6d 6f 72 65 20 65 66 66 69 63 69 65 6e 74 2c 20 70 6f 74 65 6e 74 | t.becomes.more.efficient,.potent |
2e700 | 69 61 6c 6c 79 20 6c 65 76 65 72 61 67 69 6e 67 20 68 61 72 64 77 61 72 65 20 65 6e 63 72 79 70 | ially.leveraging.hardware.encryp |
2e720 | 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 69 6e 67 20 73 75 70 70 6f 72 74 20 61 76 61 69 6c 61 62 6c | tion.offloading.support.availabl |
2e740 | 65 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 41 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 | e.in.the.kernel..As.an.alternati |
2e760 | 76 65 20 74 6f 20 61 70 70 6c 79 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 65 | ve.to.applying.policy.to.an.inte |
2e780 | 72 66 61 63 65 20 64 69 72 65 63 74 6c 79 2c 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 | rface.directly,.a.zone-based.fir |
2e7a0 | 65 77 61 6c 6c 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 74 6f 20 73 69 6d 70 6c 69 66 79 | ewall.can.be.created.to.simplify |
2e7c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 6e 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 | .configuration.when.multiple.int |
2e7e0 | 65 72 66 61 63 65 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 63 75 72 | erfaces.belong.to.the.same.secur |
2e800 | 69 74 79 20 7a 6f 6e 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 61 70 70 6c 79 69 6e 67 20 72 75 | ity.zone..Instead.of.applying.ru |
2e820 | 6c 65 2d 73 65 74 73 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 2c 20 74 68 65 79 20 61 72 65 20 | le-sets.to.interfaces,.they.are. |
2e840 | 61 70 70 6c 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 7a 6f 6e 65 2d 64 65 73 74 69 6e 61 74 69 | applied.to.source.zone-destinati |
2e860 | 6f 6e 20 7a 6f 6e 65 20 70 61 69 72 73 2e 00 41 73 20 62 6f 74 68 20 4d 69 63 72 6f 73 6f 66 74 | on.zone.pairs..As.both.Microsoft |
2e880 | 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 6f 6e | .Windows.and.Apple.iOS/iPadOS.on |
2e8a0 | 6c 79 20 73 75 70 70 6f 72 74 20 61 20 63 65 72 74 61 69 6e 20 73 65 74 20 6f 66 20 65 6e 63 72 | ly.support.a.certain.set.of.encr |
2e8c0 | 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 | yption.ciphers.and.integrity.alg |
2e8e0 | 6f 72 69 74 68 6d 73 20 77 65 20 77 69 6c 6c 20 76 61 6c 69 64 61 74 65 20 74 68 65 20 63 6f 6e | orithms.we.will.validate.the.con |
2e900 | 66 69 67 75 72 65 64 20 49 4b 45 2f 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 6e 64 20 6f 6e | figured.IKE/ESP.proposals.and.on |
2e920 | 6c 79 20 6c 69 73 74 20 74 68 65 20 63 6f 6d 70 61 74 69 62 6c 65 20 6f 6e 65 73 20 74 6f 20 74 | ly.list.the.compatible.ones.to.t |
2e940 | 68 65 20 75 73 65 72 20 e2 80 94 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 61 72 65 20 64 65 66 69 | he.user.....if.multiple.are.defi |
2e960 | 6e 65 64 2e 20 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 70 72 | ned..If.there.are.no.matching.pr |
2e980 | 6f 70 6f 73 61 6c 73 20 66 6f 75 6e 64 20 e2 80 94 20 77 65 20 63 61 6e 20 6e 6f 74 20 67 65 6e | oposals.found.....we.can.not.gen |
2e9a0 | 65 72 61 74 65 20 61 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 79 6f 75 2e 00 41 73 20 64 65 73 63 | erate.a.profile.for.you..As.desc |
2e9c0 | 72 69 62 65 64 2c 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 65 76 61 6c | ribed,.first.packet.will.be.eval |
2e9e0 | 75 61 74 65 64 20 62 79 20 61 6c 6c 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 70 61 74 68 2c 20 | uated.by.all.the.firewall.path,. |
2ea00 | 73 6f 20 64 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 | so.desired.connection.should.be. |
2ea20 | 65 78 70 6c 69 63 69 74 65 6c 79 20 61 63 63 65 70 74 65 64 2e 20 53 61 6d 65 20 74 68 69 6e 67 | explicitely.accepted..Same.thing |
2ea40 | 20 73 68 6f 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 66 6f | .should.be.taken.into.account.fo |
2ea60 | 72 20 74 72 61 66 66 69 63 20 69 6e 20 72 65 76 65 72 73 65 20 6f 72 64 65 72 2e 20 49 6e 20 6d | r.traffic.in.reverse.order..In.m |
2ea80 | 6f 73 74 20 63 61 73 65 73 20 73 74 61 74 65 20 70 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 | ost.cases.state.policies.are.use |
2eaa0 | 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 61 63 63 65 70 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | d.in.order.to.accept.connection. |
2eac0 | 69 6e 20 72 65 76 65 72 73 65 20 70 61 74 63 68 2e 00 41 73 20 6d 6f 72 65 20 61 6e 64 20 6d 6f | in.reverse.patch..As.more.and.mo |
2eae0 | 72 65 20 72 6f 75 74 65 72 73 20 72 75 6e 20 6f 6e 20 48 79 70 65 72 76 69 73 6f 72 73 2c 20 65 | re.routers.run.on.Hypervisors,.e |
2eb00 | 78 70 65 63 69 61 6c 6c 79 20 77 69 74 68 20 61 20 3a 61 62 62 72 3a 60 4e 4f 53 20 28 4e 65 74 | xpecially.with.a.:abbr:`NOS.(Net |
2eb20 | 77 6f 72 6b 20 4f 70 65 72 61 74 69 6e 67 20 53 79 73 74 65 6d 29 60 20 61 73 20 56 79 4f 53 2c | work.Operating.System)`.as.VyOS, |
2eb40 | 20 69 74 20 6d 61 6b 65 73 20 66 65 77 65 72 20 61 6e 64 20 66 65 77 65 72 20 73 65 6e 73 65 20 | .it.makes.fewer.and.fewer.sense. |
2eb60 | 74 6f 20 75 73 65 20 73 74 61 74 69 63 20 72 65 73 6f 75 72 63 65 20 62 69 6e 64 69 6e 67 73 20 | to.use.static.resource.bindings. |
2eb80 | 6c 69 6b 65 20 60 60 73 6d 70 2d 61 66 66 69 6e 69 74 79 60 60 20 61 73 20 70 72 65 73 65 6e 74 | like.``smp-affinity``.as.present |
2eba0 | 20 69 6e 20 56 79 4f 53 20 31 2e 32 20 61 6e 64 20 65 61 72 6c 69 65 72 20 74 6f 20 70 69 6e 20 | .in.VyOS.1.2.and.earlier.to.pin. |
2ebc0 | 63 65 72 74 61 69 6e 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 73 20 74 6f 20 73 70 | certain.interrupt.handlers.to.sp |
2ebe0 | 65 63 69 66 69 63 20 43 50 55 73 2e 00 41 73 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 | ecific.CPUs..As.network.address. |
2ec00 | 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 | translation.modifies.the.IP.addr |
2ec20 | 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 70 61 63 6b 65 74 73 2c 20 4e 41 54 20 | ess.information.in.packets,.NAT. |
2ec40 | 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6d 61 79 20 76 61 72 79 20 69 6e 20 74 68 65 69 | implementations.may.vary.in.thei |
2ec60 | 72 20 73 70 65 63 69 66 69 63 20 62 65 68 61 76 69 6f 72 20 69 6e 20 76 61 72 69 6f 75 73 20 61 | r.specific.behavior.in.various.a |
2ec80 | 64 64 72 65 73 73 69 6e 67 20 63 61 73 65 73 20 61 6e 64 20 74 68 65 69 72 20 65 66 66 65 63 74 | ddressing.cases.and.their.effect |
2eca0 | 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 70 65 63 69 66 69 | .on.network.traffic..The.specifi |
2ecc0 | 63 73 20 6f 66 20 4e 41 54 20 62 65 68 61 76 69 6f 72 20 61 72 65 20 6e 6f 74 20 63 6f 6d 6d 6f | cs.of.NAT.behavior.are.not.commo |
2ece0 | 6e 6c 79 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 76 65 6e 64 6f 72 73 20 6f 66 20 65 71 75 | nly.documented.by.vendors.of.equ |
2ed00 | 69 70 6d 65 6e 74 20 63 6f 6e 74 61 69 6e 69 6e 67 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 | ipment.containing.NAT.implementa |
2ed20 | 74 69 6f 6e 73 2e 00 41 73 20 6f 66 20 56 79 4f 53 20 31 2e 34 2c 20 4f 70 65 6e 56 50 4e 20 73 | tions..As.of.VyOS.1.4,.OpenVPN.s |
2ed40 | 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 63 61 6e 20 75 73 65 20 65 69 74 68 65 72 20 | ite-to-site.mode.can.use.either. |
2ed60 | 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 20 6f 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 | pre-shared.keys.or.x.509.certifi |
2ed80 | 63 61 74 65 73 2e 00 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 20 61 6e 64 20 69 66 20 6e 6f 74 | cates..As.per.default.and.if.not |
2eda0 | 20 6f 74 68 65 72 77 69 73 65 20 64 65 66 69 6e 65 64 2c 20 6d 73 63 68 61 70 2d 76 32 20 69 73 | .otherwise.defined,.mschap-v2.is |
2edc0 | 20 62 65 69 6e 67 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 | .being.used.for.authentication.a |
2ede0 | 6e 64 20 6d 70 70 65 20 31 32 38 2d 62 69 74 20 28 73 74 61 74 65 6c 65 73 73 29 20 66 6f 72 20 | nd.mppe.128-bit.(stateless).for. |
2ee00 | 65 6e 63 72 79 70 74 69 6f 6e 2e 20 49 66 20 6e 6f 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 | encryption..If.no.gateway-addres |
2ee20 | 73 20 69 73 20 73 65 74 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | s.is.set.within.the.configuratio |
2ee40 | 6e 2c 20 74 68 65 20 6c 6f 77 65 73 74 20 49 50 20 6f 75 74 20 6f 66 20 74 68 65 20 2f 32 34 20 | n,.the.lowest.IP.out.of.the./24. |
2ee60 | 63 6c 69 65 6e 74 2d 69 70 2d 70 6f 6f 6c 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 2e 20 46 6f | client-ip-pool.is.being.used..Fo |
2ee80 | 72 20 69 6e 73 74 61 6e 63 65 2c 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 | r.instance,.in.the.example.below |
2eea0 | 20 69 74 20 77 6f 75 6c 64 20 62 65 20 31 39 32 2e 31 36 38 2e 30 2e 31 2e 00 41 73 20 73 61 69 | .it.would.be.192.168.0.1..As.sai |
2eec0 | 64 20 62 65 66 6f 72 65 2c 20 6f 6e 63 65 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 61 | d.before,.once.firewall.groups.a |
2eee0 | 72 65 20 63 72 65 61 74 65 64 2c 20 74 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 | re.created,.they.can.be.referenc |
2ef00 | 65 64 20 65 69 74 68 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 2c 20 6e 61 74 36 | ed.either.in.firewall,.nat,.nat6 |
2ef20 | 36 20 61 6e 64 2f 6f 72 20 70 6f 6c 69 63 79 2d 72 6f 75 74 65 20 72 75 6c 65 73 2e 00 41 73 20 | 6.and/or.policy-route.rules..As. |
2ef40 | 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 6f 6e 65 20 | shown.in.the.example.above,.one. |
2ef60 | 6f 66 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 74 6f 20 6d 61 74 63 68 20 70 61 | of.the.possibilities.to.match.pa |
2ef80 | 63 6b 65 74 73 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6d 61 72 6b 73 20 64 6f 6e 65 20 62 79 20 | ckets.is.based.on.marks.done.by. |
2efa0 | 74 68 65 20 66 69 72 65 77 61 6c 6c 2c 20 60 74 68 61 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 | the.firewall,.`that.can.give.you |
2efc0 | 20 61 20 67 72 65 61 74 20 64 65 61 6c 20 6f 66 20 66 6c 65 78 69 62 69 6c 69 74 79 60 5f 2e 00 | .a.great.deal.of.flexibility`_.. |
2efe0 | 41 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 63 6f 6d 6d 61 6e 64 20 6f 66 20 | As.shown.in.the.last.command.of. |
2f000 | 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 60 71 75 65 75 65 2d 74 79 | the.example.above,.the.`queue-ty |
2f020 | 70 65 60 20 73 65 74 74 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 73 65 20 63 6f 6d 62 69 6e 61 | pe`.setting.allows.these.combina |
2f040 | 74 69 6f 6e 73 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 20 69 | tions..You.will.be.able.to.use.i |
2f060 | 74 20 69 6e 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 2e 00 41 73 20 74 68 65 20 65 78 61 6d 70 | t.in.many.policies..As.the.examp |
2f080 | 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 2c 20 74 68 65 20 64 65 76 69 63 65 | le.image.below.shows,.the.device |
2f0a0 | 20 6e 6f 77 20 6e 65 65 64 73 20 72 75 6c 65 73 20 74 6f 20 61 6c 6c 6f 77 2f 62 6c 6f 63 6b 20 | .now.needs.rules.to.allow/block. |
2f0c0 | 74 72 61 66 66 69 63 20 74 6f 20 6f 72 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 69 63 65 73 20 | traffic.to.or.from.the.services. |
2f0e0 | 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 20 74 68 61 74 20 68 61 76 65 20 | running.on.the.device.that.have. |
2f100 | 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 74 68 61 74 20 69 6e 74 65 72 66 61 | open.connections.on.that.interfa |
2f120 | 63 65 2e 00 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f 77 20 73 | ce..As.the.example.image.below.s |
2f140 | 68 6f 77 73 2c 20 74 68 65 20 64 65 76 69 63 65 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 | hows,.the.device.was.configured. |
2f160 | 77 69 74 68 20 72 75 6c 65 73 20 62 6c 6f 63 6b 69 6e 67 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f | with.rules.blocking.inbound.or.o |
2f180 | 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 | utbound.traffic.on.each.interfac |
2f1a0 | 65 2e 00 41 73 20 74 68 65 20 6e 61 6d 65 20 69 6d 70 6c 69 65 73 2c 20 69 74 27 73 20 49 50 76 | e..As.the.name.implies,.it's.IPv |
2f1c0 | 34 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 49 50 76 36 2c 20 61 73 20 73 69 6d 70 6c | 4.encapsulated.in.IPv6,.as.simpl |
2f1e0 | 65 20 61 73 20 74 68 61 74 2e 00 41 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 62 65 6c 6f 77 20 | e.as.that..As.well.as.the.below. |
2f200 | 74 6f 20 61 6c 6c 6f 77 20 4e 41 54 2d 74 72 61 76 65 72 73 61 6c 20 28 77 68 65 6e 20 4e 41 54 | to.allow.NAT-traversal.(when.NAT |
2f220 | 20 69 73 20 64 65 74 65 63 74 65 64 20 62 79 20 74 68 65 20 56 50 4e 20 63 6c 69 65 6e 74 2c 20 | .is.detected.by.the.VPN.client,. |
2f240 | 45 53 50 20 69 73 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 55 44 50 20 66 6f 72 20 4e | ESP.is.encapsulated.in.UDP.for.N |
2f260 | 41 54 2d 74 72 61 76 65 72 73 61 6c 29 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c | AT-traversal):.As.with.other.pol |
2f280 | 69 63 69 65 73 2c 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 63 61 6e 20 65 6d 62 65 64 5f 20 61 6e | icies,.Round-Robin.can.embed_.an |
2f2a0 | 6f 74 68 65 72 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 72 6f 75 67 | other.policy.into.a.class.throug |
2f2c0 | 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 2e 00 41 73 | h.the.``queue-type``.setting..As |
2f2e0 | 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 53 68 61 70 65 72 20 63 61 6e | .with.other.policies,.Shaper.can |
2f300 | 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f 20 69 74 73 20 | .embed_.other.policies.into.its. |
2f320 | 63 6c 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 | classes.through.the.``queue-type |
2f340 | 60 60 20 73 65 74 74 69 6e 67 20 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | ``.setting.and.then.configure.th |
2f360 | 65 69 72 20 70 61 72 61 6d 65 74 65 72 73 2e 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f | eir.parameters..As.with.other.po |
2f380 | 6c 69 63 69 65 73 2c 20 79 6f 75 20 63 61 6e 20 64 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 | licies,.you.can.define.different |
2f3a0 | 20 74 79 70 65 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 79 6f 75 72 | .type.of.matching.rules.for.your |
2f3c0 | 20 63 6c 61 73 73 65 73 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 | .classes:.As.with.other.policies |
2f3e0 | 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 | ,.you.can.embed_.other.policies. |
2f400 | 69 6e 74 6f 20 74 68 65 20 63 6c 61 73 73 65 73 20 28 61 6e 64 20 64 65 66 61 75 6c 74 29 20 6f | into.the.classes.(and.default).o |
2f420 | 66 20 79 6f 75 72 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 6f 6c 69 63 79 20 74 68 72 | f.your.Priority.Queue.policy.thr |
2f440 | 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 3a | ough.the.``queue-type``.setting: |
2f460 | 00 41 73 20 79 6f 75 20 63 61 6e 20 73 65 65 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 68 | .As.you.can.see.in.the.example.h |
2f480 | 65 72 65 2c 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 72 75 6c | ere,.you.can.assign.the.same.rul |
2f4a0 | 65 2d 73 65 74 20 74 6f 20 73 65 76 65 72 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 20 41 6e 20 | e-set.to.several.interfaces..An. |
2f4c0 | 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 68 61 76 65 20 6f 6e 65 20 72 75 6c 65 | interface.can.only.have.one.rule |
2f4e0 | 2d 73 65 74 20 70 65 72 20 63 68 61 69 6e 2e 00 41 73 20 79 6f 75 20 63 61 6e 20 73 65 65 2c 20 | -set.per.chain..As.you.can.see,. |
2f500 | 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 | Leaf2.and.Leaf3.configuration.is |
2f520 | 20 61 6c 6d 6f 73 74 20 69 64 65 6e 74 69 63 61 6c 2e 20 54 68 65 72 65 20 61 72 65 20 6c 6f 74 | .almost.identical..There.are.lot |
2f540 | 73 20 6f 66 20 63 6f 6d 6d 61 6e 64 73 20 61 62 6f 76 65 2c 20 49 27 6c 6c 20 74 72 79 20 74 6f | s.of.commands.above,.I'll.try.to |
2f560 | 20 69 6e 74 6f 20 6d 6f 72 65 20 64 65 74 61 69 6c 20 62 65 6c 6f 77 2c 20 63 6f 6d 6d 61 6e 64 | .into.more.detail.below,.command |
2f580 | 20 64 65 73 63 72 69 70 74 69 6f 6e 73 20 61 72 65 20 70 6c 61 63 65 64 20 75 6e 64 65 72 20 74 | .descriptions.are.placed.under.t |
2f5a0 | 68 65 20 63 6f 6d 6d 61 6e 64 20 62 6f 78 65 73 3a 00 41 73 73 69 67 6e 20 60 3c 6d 65 6d 62 65 | he.command.boxes:.Assign.`<membe |
2f5c0 | 72 3e 60 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 72 69 64 67 65 20 60 3c 69 6e 74 65 72 66 | r>`.interface.to.bridge.`<interf |
2f5e0 | 61 63 65 3e 60 2e 20 41 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 77 69 6c 6c 20 | ace>`..A.completion.helper.will. |
2f600 | 68 65 6c 70 20 79 6f 75 20 77 69 74 68 20 61 6c 6c 20 61 6c 6c 6f 77 65 64 20 69 6e 74 65 72 66 | help.you.with.all.allowed.interf |
2f620 | 61 63 65 73 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 62 72 69 64 67 65 64 2e 20 54 68 69 73 20 | aces.which.can.be.bridged..This. |
2f640 | 69 6e 63 6c 75 64 65 73 20 3a 72 65 66 3a 60 65 74 68 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 | includes.:ref:`ethernet-interfac |
2f660 | 65 60 2c 20 3a 72 65 66 3a 60 62 6f 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a | e`,.:ref:`bond-interface`,.:ref: |
2f680 | 60 6c 32 74 70 76 33 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 6f 70 65 6e 76 70 | `l2tpv3-interface`,.:ref:`openvp |
2f6a0 | 6e 60 2c 20 3a 72 65 66 3a 60 76 78 6c 61 6e 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 | n`,.:ref:`vxlan-interface`,.:ref |
2f6c0 | 3a 60 77 69 72 65 6c 65 73 73 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 74 75 6e | :`wireless-interface`,.:ref:`tun |
2f6e0 | 6e 65 6c 2d 69 6e 74 65 72 66 61 63 65 60 20 61 6e 64 20 3a 72 65 66 3a 60 67 65 6e 65 76 65 2d | nel-interface`.and.:ref:`geneve- |
2f700 | 69 6e 74 65 72 66 61 63 65 60 2e 00 41 73 73 69 67 6e 20 61 20 73 70 65 63 69 66 69 63 20 62 61 | interface`..Assign.a.specific.ba |
2f720 | 63 6b 65 6e 64 20 74 6f 20 61 20 72 75 6c 65 00 41 73 73 69 67 6e 20 69 6e 74 65 72 66 61 63 65 | ckend.to.a.rule.Assign.interface |
2f740 | 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 74 6f 20 | .identified.by.`<interface>`.to. |
2f760 | 56 52 46 20 6e 61 6d 65 64 20 60 3c 6e 61 6d 65 3e 60 2e 00 41 73 73 69 67 6e 20 6d 65 6d 62 65 | VRF.named.`<name>`..Assign.membe |
2f780 | 72 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 50 6f 72 74 43 68 61 6e 6e 65 6c 00 41 73 73 69 | r.interfaces.to.PortChannel.Assi |
2f7a0 | 67 6e 20 73 74 61 74 69 63 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 60 3c 75 73 65 72 3e 60 | gn.static.IP.address.to.`<user>` |
2f7c0 | 20 61 63 63 6f 75 6e 74 2e 00 41 73 73 69 67 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 | .account..Assign.the.IP.address. |
2f7e0 | 74 6f 20 74 68 69 73 20 6d 61 63 68 69 6e 65 20 66 6f 72 20 60 3c 74 69 6d 65 3e 60 20 73 65 63 | to.this.machine.for.`<time>`.sec |
2f800 | 6f 6e 64 73 2e 00 41 73 73 69 67 6e 20 74 68 65 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 | onds..Assign.the.SSH.public.key. |
2f820 | 70 6f 72 74 69 6f 6e 20 60 3c 6b 65 79 3e 60 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 70 65 | portion.`<key>`.identified.by.pe |
2f840 | 72 2d 6b 65 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 74 6f 20 74 68 65 20 6c 6f 63 61 | r-key.`<identifier>`.to.the.loca |
2f860 | 6c 20 75 73 65 72 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 2e 00 41 73 73 6f 63 69 61 74 65 73 20 | l.user.`<username>`..Associates. |
2f880 | 74 68 65 20 70 72 65 76 69 6f 75 73 6c 79 20 67 65 6e 65 72 61 74 65 64 20 70 72 69 76 61 74 65 | the.previously.generated.private |
2f8a0 | 20 6b 65 79 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 | .key.to.a.specific.WireGuard.int |
2f8c0 | 65 72 66 61 63 65 2e 20 54 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 63 61 6e 20 62 65 20 67 | erface..The.private.key.can.be.g |
2f8e0 | 65 6e 65 72 61 74 65 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 00 41 73 73 75 72 65 20 74 | enerate.via.the.command.Assure.t |
2f900 | 68 61 74 20 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 61 6c 6c 6f 77 20 74 68 | hat.your.firewall.rules.allow.th |
2f920 | 65 20 74 72 61 66 66 69 63 2c 20 69 6e 20 77 68 69 63 68 20 63 61 73 65 20 79 6f 75 20 68 61 76 | e.traffic,.in.which.case.you.hav |
2f940 | 65 20 61 20 77 6f 72 6b 69 6e 67 20 56 50 4e 20 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 2e | e.a.working.VPN.using.WireGuard. |
2f960 | 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 31 00 41 73 73 75 72 | .Assured.Forwarding(AF).11.Assur |
2f980 | 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 32 00 41 73 73 75 72 65 64 20 46 6f 72 | ed.Forwarding(AF).12.Assured.For |
2f9a0 | 77 61 72 64 69 6e 67 28 41 46 29 20 31 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e | warding(AF).13.Assured.Forwardin |
2f9c0 | 67 28 41 46 29 20 32 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 | g(AF).21.Assured.Forwarding(AF). |
2f9e0 | 32 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 33 00 41 73 73 | 22.Assured.Forwarding(AF).23.Ass |
2fa00 | 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 31 00 41 73 73 75 72 65 64 20 46 | ured.Forwarding(AF).31.Assured.F |
2fa20 | 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 | orwarding(AF).32.Assured.Forward |
2fa40 | 69 6e 67 28 41 46 29 20 33 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 | ing(AF).33.Assured.Forwarding(AF |
2fa60 | 29 20 34 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 32 00 41 | ).41.Assured.Forwarding(AF).42.A |
2fa80 | 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 33 00 41 74 20 65 76 65 72 | ssured.Forwarding(AF).43.At.ever |
2faa0 | 79 20 72 6f 75 6e 64 2c 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 61 64 64 | y.round,.the.deficit.counter.add |
2fac0 | 73 20 74 68 65 20 71 75 61 6e 74 75 6d 20 73 6f 20 74 68 61 74 20 65 76 65 6e 20 6c 61 72 67 65 | s.the.quantum.so.that.even.large |
2fae0 | 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 69 72 20 6f 70 70 6f 72 74 75 | .packets.will.have.their.opportu |
2fb00 | 6e 69 74 79 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 2e 00 41 74 20 74 68 65 20 6d 6f 6d 65 | nity.to.be.dequeued..At.the.mome |
2fb20 | 6e 74 20 69 74 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c 6f 6f 6b 20 61 74 20 74 68 | nt.it.not.possible.to.look.at.th |
2fb40 | 65 20 77 68 6f 6c 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 20 77 69 74 68 20 56 79 4f 53 20 6f | e.whole.firewall.log.with.VyOS.o |
2fb60 | 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 41 6c 6c 20 6c 6f 67 73 20 77 69 | perational.commands..All.logs.wi |
2fb80 | 6c 6c 20 73 61 76 65 20 74 6f 20 60 60 2f 76 61 72 2f 6c 6f 67 73 2f 6d 65 73 73 61 67 65 73 60 | ll.save.to.``/var/logs/messages` |
2fba0 | 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 67 72 65 70 20 27 31 30 2e 31 30 2e 30 2e | `..For.example:.``grep.'10.10.0. |
2fbc0 | 31 30 27 20 2f 76 61 72 2f 6c 6f 67 2f 6d 65 73 73 61 67 65 73 60 60 00 41 74 20 74 68 65 20 74 | 10'./var/log/messages``.At.the.t |
2fbe0 | 69 6d 65 20 6f 66 20 74 68 69 73 20 77 72 69 74 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | ime.of.this.writing.the.followin |
2fc00 | 67 20 64 69 73 70 6c 61 79 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a 00 41 74 20 76 65 72 | g.displays.are.supported:.At.ver |
2fc20 | 79 20 6c 6f 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 33 4d 62 69 74 29 2c 20 62 65 73 69 64 | y.low.rates.(below.3Mbit),.besid |
2fc40 | 65 73 20 74 75 6e 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 28 33 30 30 20 6b 65 65 70 73 20 62 | es.tuning.`quantum`.(300.keeps.b |
2fc60 | 65 69 6e 67 20 6f 6b 29 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 77 61 6e 74 20 74 6f 20 69 6e | eing.ok).you.may.also.want.to.in |
2fc80 | 63 72 65 61 73 65 20 60 74 61 72 67 65 74 60 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b | crease.`target`.to.something.lik |
2fca0 | 65 20 31 35 6d 73 20 61 6e 64 20 69 6e 63 72 65 61 73 65 20 60 69 6e 74 65 72 76 61 6c 60 20 74 | e.15ms.and.increase.`interval`.t |
2fcc0 | 6f 20 73 6f 6d 65 74 68 69 6e 67 20 61 72 6f 75 6e 64 20 31 35 30 20 6d 73 2e 00 41 74 74 61 63 | o.something.around.150.ms..Attac |
2fce0 | 68 65 73 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 63 6f | hes.user-defined.network.to.a.co |
2fd00 | 6e 74 61 69 6e 65 72 2e 20 4f 6e 6c 79 20 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 62 | ntainer..Only.one.network.must.b |
2fd20 | 65 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 6d 75 73 74 20 61 6c 72 65 61 64 79 20 65 78 69 | e.specified.and.must.already.exi |
2fd40 | 73 74 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f | st..Authentication.Authenticatio |
2fd60 | 6e 20 28 45 41 50 6f 4c 29 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 41 64 76 61 6e 63 65 | n.(EAPoL).Authentication.Advance |
2fd80 | 64 20 4f 70 74 69 6f 6e 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 | d.Options.Authentication.applica |
2fda0 | 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 69 64 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 | tion.client-id..Authentication.a |
2fdc0 | 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 73 65 63 72 65 74 2e 00 41 75 74 68 65 6e | pplication.client-secret..Authen |
2fde0 | 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 74 65 6e 61 6e 74 2d 69 64 00 41 | tication.application.tenant-id.A |
2fe00 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 64 6f 6e 65 20 62 79 20 75 73 69 6e 67 20 74 | uthentication.is.done.by.using.t |
2fe20 | 68 65 20 60 60 6f 70 65 6e 76 70 6e 2d 61 75 74 68 2d 6c 64 61 70 2e 73 6f 60 60 20 70 6c 75 67 | he.``openvpn-auth-ldap.so``.plug |
2fe40 | 69 6e 20 77 68 69 63 68 20 69 73 20 73 68 69 70 70 65 64 20 77 69 74 68 20 65 76 65 72 79 20 56 | in.which.is.shipped.with.every.V |
2fe60 | 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2e 20 41 20 64 65 64 69 63 61 74 65 64 20 63 6f | yOS.installation..A.dedicated.co |
2fe80 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 49 74 | nfiguration.file.is.required..It |
2fea0 | 20 69 73 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 73 74 6f 72 65 20 69 74 20 69 6e | .is.best.practise.to.store.it.in |
2fec0 | 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 74 6f 20 73 75 72 76 69 76 65 20 69 6d 61 67 65 20 75 70 | .``/config``.to.survive.image.up |
2fee0 | 64 61 74 65 73 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f | dates.Authentication.organizatio |
2ff00 | 6e 20 6e 61 6d 65 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 68 | n.name.Authentication.token.Auth |
2ff20 | 65 6e 74 69 63 61 74 69 6f 6e 20 e2 80 93 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 | entication.....to.verify.that.th |
2ff40 | 65 20 6d 65 73 73 61 67 65 20 69 73 20 66 72 6f 6d 20 61 20 76 61 6c 69 64 20 73 6f 75 72 63 65 | e.message.is.from.a.valid.source |
2ff60 | 2e 00 41 75 74 68 6f 72 69 74 61 74 69 76 65 20 7a 6f 6e 65 73 00 41 75 74 68 6f 72 69 7a 61 74 | ..Authoritative.zones.Authorizat |
2ff80 | 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 4c 41 4e 20 43 72 65 61 74 69 6f | ion.token.Automatic.VLAN.Creatio |
2ffa0 | 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 4c 41 4e 20 63 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 | n.Automatic.VLAN.creation.Automa |
2ffc0 | 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 66 6f 72 20 65 | tically.create.BFD.session.for.e |
2ffe0 | 61 63 68 20 52 49 50 20 70 65 65 72 20 64 69 73 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 | ach.RIP.peer.discovered.in.this. |
30000 | 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 | interface..When.the.BFD.session. |
30020 | 6d 6f 6e 69 74 6f 72 20 73 69 67 6e 61 6c 69 7a 65 20 74 68 61 74 20 74 68 65 20 6c 69 6e 6b 20 | monitor.signalize.that.the.link. |
30040 | 69 73 20 64 6f 77 6e 20 74 68 65 20 52 49 50 20 70 65 65 72 20 69 73 20 72 65 6d 6f 76 65 64 20 | is.down.the.RIP.peer.is.removed. |
30060 | 61 6e 64 20 61 6c 6c 20 74 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 61 73 73 6f 63 | and.all.the.learned.routes.assoc |
30080 | 69 61 74 65 64 20 77 69 74 68 20 74 68 61 74 20 70 65 65 72 20 61 72 65 20 72 65 6d 6f 76 65 64 | iated.with.that.peer.are.removed |
300a0 | 2e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 62 6f 6f 74 20 73 79 73 74 65 6d 20 6f 6e | ..Automatically.reboot.system.on |
300c0 | 20 6b 65 72 6e 65 6c 20 70 61 6e 69 63 20 61 66 74 65 72 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 | .kernel.panic.after.60.seconds.. |
300e0 | 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 73 00 41 76 6f 69 64 69 6e 67 20 22 6c 65 61 | Autonomous.Systems.Avoiding."lea |
30100 | 6b 79 22 20 4e 41 54 00 41 7a 75 72 65 2d 64 61 74 61 2d 65 78 70 6c 6f 72 65 72 00 42 46 44 00 | ky".NAT.Azure-data-explorer.BFD. |
30120 | 42 46 44 20 53 74 61 74 69 63 20 52 6f 75 74 65 20 4d 6f 6e 69 74 6f 72 69 6e 67 00 42 46 44 20 | BFD.Static.Route.Monitoring.BFD. |
30140 | 73 65 6e 64 73 20 6c 6f 74 73 20 6f 66 20 73 6d 61 6c 6c 20 55 44 50 20 70 61 63 6b 65 74 73 20 | sends.lots.of.small.UDP.packets. |
30160 | 76 65 72 79 20 71 75 69 63 6b 6c 79 20 74 6f 20 65 6e 73 75 72 65 73 20 74 68 61 74 20 74 68 65 | very.quickly.to.ensures.that.the |
30180 | 20 70 65 65 72 20 69 73 20 73 74 69 6c 6c 20 61 6c 69 76 65 2e 00 42 47 50 00 42 47 50 20 2d 20 | .peer.is.still.alive..BGP.BGP.-. |
301a0 | 41 53 20 50 61 74 68 20 50 6f 6c 69 63 79 00 42 47 50 20 2d 20 43 6f 6d 6d 75 6e 69 74 79 20 4c | AS.Path.Policy.BGP.-.Community.L |
301c0 | 69 73 74 00 42 47 50 20 2d 20 45 78 74 65 6e 64 65 64 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 | ist.BGP.-.Extended.Community.Lis |
301e0 | 74 00 42 47 50 20 2d 20 4c 61 72 67 65 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 | t.BGP.-.Large.Community.List.BGP |
30200 | 20 45 78 61 6d 70 6c 65 00 42 47 50 20 52 6f 75 74 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | .Example.BGP.Router.Configuratio |
30220 | 6e 00 42 47 50 20 53 63 61 6c 69 6e 67 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 | n.BGP.Scaling.Configuration.BGP. |
30240 | 61 67 67 72 65 67 61 74 6f 72 20 61 74 74 72 69 62 75 74 65 3a 20 41 53 20 6e 75 6d 62 65 72 20 | aggregator.attribute:.AS.number. |
30260 | 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 6e 20 61 67 67 72 65 67 61 74 69 6f 6e 2e | or.IP.address.of.an.aggregation. |
30280 | 00 42 47 50 20 61 73 2d 70 61 74 68 20 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 | .BGP.as-path.list.to.match..BGP. |
302a0 | 61 74 6f 6d 69 63 20 61 67 67 72 65 67 61 74 65 20 61 74 74 72 69 62 75 74 65 2e 00 42 47 50 20 | atomic.aggregate.attribute..BGP. |
302c0 | 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 65 78 74 | community-list.to.match..BGP.ext |
302e0 | 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 72 6f | ended.community.to.match..BGP.ro |
30300 | 6c 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 39 32 33 | les.are.defined.in.RFC.:rfc:`923 |
30320 | 34 60 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 6e 20 65 61 73 79 20 77 61 79 20 74 6f 20 61 64 | 4`.and.provide.an.easy.way.to.ad |
30340 | 64 20 72 6f 75 74 65 20 6c 65 61 6b 20 70 72 65 76 65 6e 74 69 6f 6e 2c 20 64 65 74 65 63 74 69 | d.route.leak.prevention,.detecti |
30360 | 6f 6e 20 61 6e 64 20 6d 69 74 69 67 61 74 69 6f 6e 2e 20 54 68 65 20 6c 6f 63 61 6c 20 52 6f 6c | on.and.mitigation..The.local.Rol |
30380 | 65 20 76 61 6c 75 65 20 69 73 20 6e 65 67 6f 74 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 6e | e.value.is.negotiated.with.the.n |
303a0 | 65 77 20 42 47 50 20 52 6f 6c 65 20 63 61 70 61 62 69 6c 69 74 79 20 77 68 69 63 68 20 68 61 73 | ew.BGP.Role.capability.which.has |
303c0 | 20 61 20 62 75 69 6c 74 2d 69 6e 20 63 68 65 63 6b 20 6f 66 20 74 68 65 20 63 6f 72 72 65 73 70 | .a.built-in.check.of.the.corresp |
303e0 | 6f 6e 64 69 6e 67 20 76 61 6c 75 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 69 73 6d 61 | onding.value..In.case.of.a.misma |
30400 | 74 63 68 20 74 68 65 20 6e 65 77 20 4f 50 45 4e 20 52 6f 6c 65 73 20 4d 69 73 6d 61 74 63 68 20 | tch.the.new.OPEN.Roles.Mismatch. |
30420 | 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 3c 32 2c 20 31 31 3e 20 77 6f 75 6c 64 20 62 65 20 73 65 | Notification.<2,.11>.would.be.se |
30440 | 6e 74 2e 20 54 68 65 20 63 6f 72 72 65 63 74 20 52 6f 6c 65 20 70 61 69 72 73 20 61 72 65 3a 00 | nt..The.correct.Role.pairs.are:. |
30460 | 42 47 50 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 73 69 64 65 20 74 68 65 | BGP.routers.connected.inside.the |
30480 | 20 73 61 6d 65 20 41 53 20 74 68 72 6f 75 67 68 20 42 47 50 20 62 65 6c 6f 6e 67 20 74 6f 20 61 | .same.AS.through.BGP.belong.to.a |
304a0 | 6e 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 73 65 73 73 69 6f 6e 2c 20 6f 72 20 49 42 47 50 2e | n.internal.BGP.session,.or.IBGP. |
304c0 | 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 70 72 65 76 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 | .In.order.to.prevent.routing.tab |
304e0 | 6c 65 20 6c 6f 6f 70 73 2c 20 49 42 47 50 20 73 70 65 61 6b 65 72 20 64 6f 65 73 20 6e 6f 74 20 | le.loops,.IBGP.speaker.does.not. |
30500 | 61 64 76 65 72 74 69 73 65 20 49 42 47 50 2d 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 74 6f | advertise.IBGP-learned.routes.to |
30520 | 20 6f 74 68 65 72 20 49 42 47 50 20 73 70 65 61 6b 65 72 20 28 53 70 6c 69 74 20 48 6f 72 69 7a | .other.IBGP.speaker.(Split.Horiz |
30540 | 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 29 2e 20 41 73 20 73 75 63 68 2c 20 49 42 47 50 20 72 65 71 | on.mechanism)..As.such,.IBGP.req |
30560 | 75 69 72 65 73 20 61 20 66 75 6c 6c 20 6d 65 73 68 20 6f 66 20 61 6c 6c 20 70 65 65 72 73 2e 20 | uires.a.full.mesh.of.all.peers.. |
30580 | 46 6f 72 20 6c 61 72 67 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 69 73 20 71 75 69 63 6b 6c 79 | For.large.networks,.this.quickly |
305a0 | 20 62 65 63 6f 6d 65 73 20 75 6e 73 63 61 6c 61 62 6c 65 2e 00 42 47 50 20 72 6f 75 74 65 73 20 | .becomes.unscalable..BGP.routes. |
305c0 | 6d 61 79 20 62 65 20 6c 65 61 6b 65 64 20 28 69 2e 65 2e 20 63 6f 70 69 65 64 29 20 62 65 74 77 | may.be.leaked.(i.e..copied).betw |
305e0 | 65 65 6e 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 | een.a.unicast.VRF.RIB.and.the.VP |
30600 | 4e 20 53 41 46 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 66 6f | N.SAFI.RIB.of.the.default.VRF.fo |
30620 | 72 20 75 73 65 20 69 6e 20 4d 50 4c 53 2d 62 61 73 65 64 20 4c 33 56 50 4e 73 2e 20 55 6e 69 63 | r.use.in.MPLS-based.L3VPNs..Unic |
30640 | 61 73 74 20 72 6f 75 74 65 73 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 6c 65 61 6b 65 64 20 62 65 | ast.routes.may.also.be.leaked.be |
30660 | 74 77 65 65 6e 20 61 6e 79 20 56 52 46 73 20 28 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 75 6e | tween.any.VRFs.(including.the.un |
30680 | 69 63 61 73 74 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 42 47 50 20 69 6e 73 | icast.RIB.of.the.default.BGP.ins |
306a0 | 74 61 6e 63 65 29 2e 20 41 20 73 68 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 69 73 20 61 6c 73 | tance)..A.shortcut.syntax.is.als |
306c0 | 6f 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 6c 65 61 6b 69 | o.available.for.specifying.leaki |
306e0 | 6e 67 20 66 72 6f 6d 20 6f 6e 65 20 56 52 46 20 74 6f 20 61 6e 6f 74 68 65 72 20 56 52 46 20 75 | ng.from.one.VRF.to.another.VRF.u |
30700 | 73 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 6e 73 74 61 6e 63 65 e2 80 99 73 20 56 50 | sing.the.default.instance...s.VP |
30720 | 4e 20 52 49 42 20 61 73 20 74 68 65 20 69 6e 74 65 6d 65 64 69 61 72 79 20 2e 20 41 20 63 6f 6d | N.RIB.as.the.intemediary...A.com |
30740 | 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 56 52 46 2d 56 52 46 20 66 | mon.application.of.the.VRF-VRF.f |
30760 | 65 61 74 75 72 65 20 69 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 63 75 73 74 6f 6d 65 72 e2 | eature.is.to.connect.a.customer. |
30780 | 80 99 73 20 70 72 69 76 61 74 65 20 72 6f 75 74 69 6e 67 20 64 6f 6d 61 69 6e 20 74 6f 20 61 20 | ..s.private.routing.domain.to.a. |
307a0 | 70 72 6f 76 69 64 65 72 e2 80 99 73 20 56 50 4e 20 73 65 72 76 69 63 65 2e 20 4c 65 61 6b 69 6e | provider...s.VPN.service..Leakin |
307c0 | 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 69 6e 74 20 6f | g.is.configured.from.the.point.o |
307e0 | 66 20 76 69 65 77 20 6f 66 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 56 52 46 3a 20 69 6d 70 | f.view.of.an.individual.VRF:.imp |
30800 | 6f 72 74 20 72 65 66 65 72 73 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 6f 6d | ort.refers.to.routes.leaked.from |
30820 | 20 56 50 4e 20 74 6f 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 2c 20 77 68 65 72 65 61 73 20 65 | .VPN.to.a.unicast.VRF,.whereas.e |
30840 | 78 70 6f 72 74 20 72 65 66 65 72 73 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 | xport.refers.to.routes.leaked.fr |
30860 | 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 00 42 61 62 65 6c 00 42 | om.a.unicast.VRF.to.VPN..Babel.B |
30880 | 61 62 65 6c 20 61 20 64 75 61 6c 20 73 74 61 63 6b 20 70 72 6f 74 6f 63 6f 6c 2e 20 41 20 73 69 | abel.a.dual.stack.protocol..A.si |
308a0 | 6e 67 6c 65 20 42 61 62 65 6c 20 69 6e 73 74 61 6e 63 65 20 69 73 20 61 62 6c 65 20 74 6f 20 70 | ngle.Babel.instance.is.able.to.p |
308c0 | 65 72 66 6f 72 6d 20 72 6f 75 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 | erform.routing.for.both.IPv4.and |
308e0 | 20 49 50 76 36 2e 00 42 61 62 65 6c 20 69 73 20 61 20 6d 6f 64 65 72 6e 20 72 6f 75 74 69 6e 67 | .IPv6..Babel.is.a.modern.routing |
30900 | 20 70 72 6f 74 6f 63 6f 6c 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 72 6f 62 75 73 74 20 | .protocol.designed.to.be.robust. |
30920 | 61 6e 64 20 65 66 66 69 63 69 65 6e 74 20 62 6f 74 68 20 69 6e 20 6f 72 64 69 6e 61 72 79 20 77 | and.efficient.both.in.ordinary.w |
30940 | 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 69 6e 20 77 69 72 65 6c 65 73 73 20 6d 65 | ired.networks.and.in.wireless.me |
30960 | 73 68 20 6e 65 74 77 6f 72 6b 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 75 73 65 73 | sh.networks..By.default,.it.uses |
30980 | 20 68 6f 70 2d 63 6f 75 6e 74 20 6f 6e 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 | .hop-count.on.wired.networks.and |
309a0 | 20 61 20 76 61 72 69 61 6e 74 20 6f 66 20 45 54 58 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 6c 69 | .a.variant.of.ETX.on.wireless.li |
309c0 | 6e 6b 73 2c 20 49 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 61 6b | nks,.It.can.be.configured.to.tak |
309e0 | 65 20 72 61 64 69 6f 20 64 69 76 65 72 73 69 74 79 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 61 | e.radio.diversity.into.account.a |
30a00 | 6e 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 6f 6d 70 75 74 65 20 61 20 6c 69 | nd.to.automatically.compute.a.li |
30a20 | 6e 6b 27 73 20 6c 61 74 65 6e 63 79 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 69 74 20 69 6e 20 74 | nk's.latency.and.include.it.in.t |
30a40 | 68 65 20 6d 65 74 72 69 63 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 | he.metric..It.is.defined.in.:rfc |
30a60 | 3a 60 38 39 36 36 60 2e 00 42 61 63 6b 65 6e 64 00 42 61 63 6b 65 6e 64 20 73 65 72 76 69 63 65 | :`8966`..Backend.Backend.service |
30a80 | 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 63 68 65 63 6b 65 64 20 61 67 61 69 6e 73 | .certificates.are.checked.agains |
30aa0 | 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 73 70 65 63 | t.the.certificate.authority.spec |
30ac0 | 69 66 69 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 | ified.in.the.configuration,.whic |
30ae0 | 68 20 63 6f 75 6c 64 20 62 65 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 43 41 2e 00 42 61 6c 61 6e | h.could.be.an.internal.CA..Balan |
30b00 | 63 65 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 42 61 6c 61 6e 63 69 6e 67 20 52 75 6c 65 73 00 42 | ce.algorithms:.Balancing.Rules.B |
30b20 | 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 42 61 | alancing.based.on.domain.name.Ba |
30b40 | 6c 61 6e 63 69 6e 67 20 77 69 74 68 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 00 | lancing.with.HTTP.health.checks. |
30b60 | 42 61 6e 64 77 69 64 74 68 20 53 68 61 70 69 6e 67 00 42 61 6e 64 77 69 64 74 68 20 53 68 61 70 | Bandwidth.Shaping.Bandwidth.Shap |
30b80 | 69 6e 67 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 00 42 61 6e 64 77 69 64 74 68 20 72 61 | ing.for.local.users.Bandwidth.ra |
30ba0 | 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 | te.limits.can.be.set.for.local.u |
30bc0 | 73 65 72 73 20 6f 72 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e | sers.or.RADIUS.based.attributes. |
30be0 | 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 | .Bandwidth.rate.limits.can.be.se |
30c00 | 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 76 69 61 20 52 41 44 49 55 53 20 | t.for.local.users.or.via.RADIUS. |
30c20 | 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 | based.attributes..Bandwidth.rate |
30c40 | 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 | .limits.can.be.set.for.local.use |
30c60 | 72 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 72 20 76 | rs.within.the.configuration.or.v |
30c80 | 69 61 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 73 65 | ia.RADIUS.based.attributes..Base |
30ca0 | 20 63 68 61 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 | .chain.is.for.traffic.toward.the |
30cc0 | 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 69 | .router.is.``set.firewall.ipv4.i |
30ce0 | 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 65 20 63 68 61 69 6e 20 69 73 20 | nput.filter....``.Base.chain.is. |
30d00 | 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 | for.traffic.toward.the.router.is |
30d20 | 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 | .``set.firewall.ipv6.input.filte |
30d40 | 72 20 2e 2e 2e 60 60 00 42 61 73 65 6c 69 6e 65 20 44 4d 56 50 4e 20 74 6f 70 6f 6c 6f 67 79 00 | r....``.Baseline.DMVPN.topology. |
30d60 | 42 61 73 69 63 20 43 6f 6e 63 65 70 74 73 00 42 61 73 69 63 20 63 6f 6d 6d 61 6e 64 73 00 42 61 | Basic.Concepts.Basic.commands.Ba |
30d80 | 73 69 63 20 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 | sic.filtering.can.be.done.using. |
30da0 | 61 63 63 65 73 73 2d 6c 69 73 74 20 61 6e 64 20 61 63 63 65 73 73 2d 6c 69 73 74 36 2e 00 42 61 | access-list.and.access-list6..Ba |
30dc0 | 73 69 63 20 66 69 6c 74 65 72 69 6e 67 20 63 6f 75 6c 64 20 61 6c 73 6f 20 62 65 20 61 70 70 6c | sic.filtering.could.also.be.appl |
30de0 | 69 65 64 20 74 6f 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 00 42 61 73 69 63 20 73 65 74 75 70 | ied.to.IPv6.traffic..Basic.setup |
30e00 | 00 42 65 20 73 75 72 65 20 74 6f 20 73 65 74 20 61 20 73 61 6e 65 20 64 65 66 61 75 6c 74 20 63 | .Be.sure.to.set.a.sane.default.c |
30e20 | 6f 6e 66 69 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 66 69 6c 65 | onfig.in.the.default.config.file |
30e40 | 2c 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 20 69 6e 20 74 68 65 20 63 61 73 | ,.this.will.be.loaded.in.the.cas |
30e60 | 65 20 74 68 61 74 20 61 20 75 73 65 72 20 69 73 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 61 | e.that.a.user.is.authenticated.a |
30e80 | 6e 64 20 6e 6f 20 66 69 6c 65 20 69 73 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 | nd.no.file.is.found.in.the.confi |
30ea0 | 67 75 72 65 64 20 64 69 72 65 63 74 6f 72 79 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 75 73 65 | gured.directory.matching.the.use |
30ec0 | 72 73 20 75 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 2e 00 42 65 61 6d 66 6f 72 6d 69 6e 67 20 63 | rs.username/group..Beamforming.c |
30ee0 | 61 70 61 62 69 6c 69 74 69 65 73 3a 00 42 65 63 61 75 73 65 20 61 6e 20 61 67 67 72 65 67 61 74 | apabilities:.Because.an.aggregat |
30f00 | 6f 72 20 63 61 6e 6e 6f 74 20 62 65 20 61 63 74 69 76 65 20 77 69 74 68 6f 75 74 20 61 74 20 6c | or.cannot.be.active.without.at.l |
30f20 | 65 61 73 74 20 6f 6e 65 20 61 76 61 69 6c 61 62 6c 65 20 6c 69 6e 6b 2c 20 73 65 74 74 69 6e 67 | east.one.available.link,.setting |
30f40 | 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 30 20 6f 72 20 74 6f 20 31 20 68 61 73 20 74 68 | .this.option.to.0.or.to.1.has.th |
30f60 | 65 20 65 78 61 63 74 20 73 61 6d 65 20 65 66 66 65 63 74 2e 00 42 65 63 61 75 73 65 20 65 78 69 | e.exact.same.effect..Because.exi |
30f80 | 73 74 69 6e 67 20 73 65 73 73 69 6f 6e 73 20 64 6f 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 | sting.sessions.do.not.automatica |
30fa0 | 6c 6c 79 20 66 61 69 6c 20 6f 76 65 72 20 74 6f 20 61 20 6e 65 77 20 70 61 74 68 2c 20 74 68 65 | lly.fail.over.to.a.new.path,.the |
30fc0 | 20 73 65 73 73 69 6f 6e 20 74 61 62 6c 65 20 63 61 6e 20 62 65 20 66 6c 75 73 68 65 64 20 6f 6e | .session.table.can.be.flushed.on |
30fe0 | 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 63 68 61 6e 67 65 3a 00 42 | .each.connection.state.change:.B |
31000 | 65 66 6f 72 65 20 65 6e 61 62 6c 69 6e 67 20 61 6e 79 20 68 61 72 64 77 61 72 65 20 73 65 67 6d | efore.enabling.any.hardware.segm |
31020 | 65 6e 74 61 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 | entation.offload.a.corresponding |
31040 | 20 73 6f 66 74 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e | .software.offload.is.required.in |
31060 | 20 47 53 4f 2e 20 4f 74 68 65 72 77 69 73 65 20 69 74 20 62 65 63 6f 6d 65 73 20 70 6f 73 73 69 | .GSO..Otherwise.it.becomes.possi |
31080 | 62 6c 65 20 66 6f 72 20 61 20 66 72 61 6d 65 20 74 6f 20 62 65 20 72 65 2d 72 6f 75 74 65 64 20 | ble.for.a.frame.to.be.re-routed. |
310a0 | 62 65 74 77 65 65 6e 20 64 65 76 69 63 65 73 20 61 6e 64 20 65 6e 64 20 75 70 20 62 65 69 6e 67 | between.devices.and.end.up.being |
310c0 | 20 75 6e 61 62 6c 65 20 74 6f 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 42 65 66 6f 72 | .unable.to.be.transmitted..Befor |
310e0 | 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 20 72 75 6c 65 2d 73 | e.you.are.able.to.apply.a.rule-s |
31100 | 65 74 20 74 6f 20 61 20 7a 6f 6e 65 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 72 65 61 74 65 20 | et.to.a.zone.you.have.to.create. |
31120 | 74 68 65 20 7a 6f 6e 65 73 20 66 69 72 73 74 2e 00 42 65 6c 6f 77 20 61 72 65 20 61 20 6c 69 73 | the.zones.first..Below.are.a.lis |
31140 | 74 20 6f 66 20 72 65 63 6f 72 64 20 74 79 70 65 73 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 62 | t.of.record.types.available.to.b |
31160 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 69 6e 20 56 79 4f 53 2e 20 53 6f 6d 65 20 72 | e.configured.within.VyOS..Some.r |
31180 | 65 63 6f 72 64 73 20 73 75 70 70 6f 72 74 20 73 70 65 63 69 61 6c 20 60 3c 6e 61 6d 65 3e 60 20 | ecords.support.special.`<name>`. |
311a0 | 6b 65 79 77 6f 72 64 73 3a 00 42 65 6c 6f 77 20 66 6c 6f 77 2d 63 68 61 72 74 20 63 6f 75 6c 64 | keywords:.Below.flow-chart.could |
311c0 | 20 62 65 20 61 20 71 75 69 63 6b 20 72 65 66 65 72 65 6e 63 65 20 66 6f 72 20 74 68 65 20 63 6c | .be.a.quick.reference.for.the.cl |
311e0 | 6f 73 65 2d 61 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 64 65 70 65 6e 64 69 6e 67 | ose-action.combination.depending |
31200 | 20 6f 6e 20 68 6f 77 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 | .on.how.the.peer.is.configured.. |
31220 | 42 65 6c 6f 77 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | Below.is.an.example.to.configure |
31240 | 20 61 20 4c 4e 53 3a 00 42 65 73 74 20 65 66 66 6f 72 74 20 74 72 61 66 66 69 63 2c 20 64 65 66 | .a.LNS:.Best.effort.traffic,.def |
31260 | 61 75 6c 74 00 42 65 74 77 65 65 6e 20 63 6f 6d 70 75 74 65 72 73 2c 20 74 68 65 20 6d 6f 73 74 | ault.Between.computers,.the.most |
31280 | 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 65 64 20 77 61 73 20 22 | .common.configuration.used.was." |
312a0 | 38 4e 31 22 3a 20 65 69 67 68 74 20 62 69 74 20 63 68 61 72 61 63 74 65 72 73 2c 20 77 69 74 68 | 8N1":.eight.bit.characters,.with |
312c0 | 20 6f 6e 65 20 73 74 61 72 74 20 62 69 74 2c 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 2c 20 61 6e | .one.start.bit,.one.stop.bit,.an |
312e0 | 64 20 6e 6f 20 70 61 72 69 74 79 20 62 69 74 2e 20 54 68 75 73 20 31 30 20 42 61 75 64 20 74 69 | d.no.parity.bit..Thus.10.Baud.ti |
31300 | 6d 65 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 65 6e 64 20 61 20 73 69 6e 67 6c 65 20 63 68 | mes.are.used.to.send.a.single.ch |
31320 | 61 72 61 63 74 65 72 2c 20 61 6e 64 20 73 6f 20 64 69 76 69 64 69 6e 67 20 74 68 65 20 73 69 67 | aracter,.and.so.dividing.the.sig |
31340 | 6e 61 6c 6c 69 6e 67 20 62 69 74 2d 72 61 74 65 20 62 79 20 74 65 6e 20 72 65 73 75 6c 74 73 20 | nalling.bit-rate.by.ten.results. |
31360 | 69 6e 20 74 68 65 20 6f 76 65 72 61 6c 6c 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 73 70 65 65 | in.the.overall.transmission.spee |
31380 | 64 20 69 6e 20 63 68 61 72 61 63 74 65 72 73 20 70 65 72 20 73 65 63 6f 6e 64 2e 20 54 68 69 73 | d.in.characters.per.second..This |
313a0 | 20 69 73 20 61 6c 73 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 20 69 66 20 | .is.also.the.default.setting.if. |
313c0 | 6e 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 | none.of.those.options.are.define |
313e0 | 64 2e 00 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 4e 41 54 00 42 69 6e 61 72 79 20 76 61 6c 75 | d..Bidirectional.NAT.Binary.valu |
31400 | 65 00 42 69 6e 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 67 69 | e.Bind.container.network.to.a.gi |
31420 | 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 42 69 6e 64 20 6c 69 73 74 65 6e 65 72 20 | ven.VRF.instance..Bind.listener. |
31440 | 74 6f 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2f 61 64 64 72 65 73 73 2c 20 6d | to.specific.interface/address,.m |
31460 | 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 49 50 76 36 00 42 69 6e 64 73 20 65 74 68 31 2e 32 34 31 | andatory.for.IPv6.Binds.eth1.241 |
31480 | 20 61 6e 64 20 76 78 6c 61 6e 32 34 31 20 74 6f 20 65 61 63 68 20 6f 74 68 65 72 20 62 79 20 6d | .and.vxlan241.to.each.other.by.m |
314a0 | 61 6b 69 6e 67 20 74 68 65 6d 20 62 6f 74 68 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 | aking.them.both.member.interface |
314c0 | 73 20 6f 66 20 74 68 65 20 73 61 6d 65 20 62 72 69 64 67 65 2e 00 42 6c 61 63 6b 68 6f 6c 65 00 | s.of.the.same.bridge..Blackhole. |
314e0 | 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 53 75 62 73 | Block.source.IP.in.seconds..Subs |
31500 | 65 71 75 65 6e 74 20 62 6c 6f 63 6b 73 20 69 6e 63 72 65 61 73 65 20 62 79 20 61 20 66 61 63 74 | equent.blocks.increase.by.a.fact |
31520 | 6f 72 20 6f 66 20 31 2e 35 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 2e 00 42 6c | or.of.1.5.The.default.is.120..Bl |
31540 | 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 20 77 68 65 6e 20 74 68 65 69 72 20 63 75 6d 75 6c 61 74 | ock.source.IP.when.their.cumulat |
31560 | 69 76 65 20 61 74 74 61 63 6b 20 73 63 6f 72 65 20 65 78 63 65 65 64 73 20 74 68 72 65 73 68 6f | ive.attack.score.exceeds.thresho |
31580 | 6c 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 33 30 2e 00 42 6c 6f 63 6b 69 6e 67 20 | ld..The.default.is.30..Blocking. |
315a0 | 63 61 6c 6c 20 77 69 74 68 20 6e 6f 20 74 69 6d 65 6f 75 74 2e 20 53 79 73 74 65 6d 20 77 69 6c | call.with.no.timeout..System.wil |
315c0 | 6c 20 62 65 63 6f 6d 65 20 75 6e 72 65 73 70 6f 6e 73 69 76 65 20 69 66 20 73 63 72 69 70 74 20 | l.become.unresponsive.if.script. |
315e0 | 64 6f 65 73 20 6e 6f 74 20 72 65 74 75 72 6e 21 00 42 6f 61 72 64 65 72 20 47 61 74 65 77 61 79 | does.not.return!.Boarder.Gateway |
31600 | 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 20 6f 72 69 67 69 6e 20 63 6f 64 65 20 74 6f 20 6d | .Protocol.(BGP).origin.code.to.m |
31620 | 61 74 63 68 2e 00 42 6f 6e 64 20 2f 20 4c 69 6e 6b 20 41 67 67 72 65 67 61 74 69 6f 6e 00 42 6f | atch..Bond./.Link.Aggregation.Bo |
31640 | 6e 64 20 6f 70 74 69 6f 6e 73 00 42 6f 6f 74 20 69 6d 61 67 65 20 6c 65 6e 67 74 68 20 69 6e 20 | nd.options.Boot.image.length.in. |
31660 | 35 31 32 2d 6f 63 74 65 74 20 62 6c 6f 63 6b 73 00 42 6f 6f 74 73 74 72 61 70 20 66 69 6c 65 20 | 512-octet.blocks.Bootstrap.file. |
31680 | 6e 61 6d 65 00 42 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 6d 75 6c 74 69 63 61 73 | name.Both.IPv4.and.IPv6.multicas |
316a0 | 74 20 69 73 20 70 6f 73 73 69 62 6c 65 2e 00 42 6f 74 68 20 6c 6f 63 61 6c 20 61 64 6d 69 6e 69 | t.is.possible..Both.local.admini |
316c0 | 73 74 65 72 65 64 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 3a | stered.and.remote.administered.: |
316e0 | 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 | abbr:`RADIUS.(Remote.Authenticat |
31700 | 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 20 61 63 63 6f 75 | ion.Dial-In.User.Service)`.accou |
31720 | 6e 74 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 42 6f 74 68 20 72 65 70 6c 69 65 73 20 | nts.are.supported..Both.replies. |
31740 | 61 6e 64 20 72 65 71 75 65 73 74 73 20 74 79 70 65 20 67 72 61 74 75 69 74 6f 75 73 20 61 72 70 | and.requests.type.gratuitous.arp |
31760 | 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 20 74 6f 20 62 | .will.trigger.the.ARP.table.to.b |
31780 | 65 20 75 70 64 61 74 65 64 2c 20 69 66 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6f 6e | e.updated,.if.this.setting.is.on |
317a0 | 2e 00 42 72 61 6e 63 68 20 31 27 73 20 72 6f 75 74 65 72 20 6d 69 67 68 74 20 68 61 76 65 20 74 | ..Branch.1's.router.might.have.t |
317c0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6c 69 6e 65 73 3a 00 42 72 69 64 67 65 00 42 72 69 64 67 | he.following.lines:.Bridge.Bridg |
317e0 | 65 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 72 69 64 67 65 20 | e.Firewall.Configuration.Bridge. |
31800 | 4f 70 74 69 6f 6e 73 00 42 72 69 64 67 65 20 52 75 6c 65 73 00 42 72 69 64 67 65 20 61 6e 73 77 | Options.Bridge.Rules.Bridge.answ |
31820 | 65 72 73 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 | ers.on.IP.address.192.0.2.1/24.a |
31840 | 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 2f 36 34 00 42 72 69 64 67 65 20 6d 61 78 69 | nd.2001:db8::ffff/64.Bridge.maxi |
31860 | 6d 75 6d 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 | mum.aging.`<time>`.in.seconds.(d |
31880 | 65 66 61 75 6c 74 3a 20 32 30 29 2e 00 42 72 69 64 67 65 3a 00 42 75 72 73 74 20 63 6f 75 6e 74 | efault:.20)..Bridge:.Burst.count |
318a0 | 00 42 75 73 69 6e 65 73 73 20 55 73 65 72 73 00 42 75 74 20 62 65 66 6f 72 65 20 6c 65 61 72 6e | .Business.Users.But.before.learn |
318c0 | 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 70 6f 6c 69 63 79 2c 20 77 65 | ing.to.configure.your.policy,.we |
318e0 | 20 77 69 6c 6c 20 77 61 72 6e 20 79 6f 75 20 61 62 6f 75 74 20 74 68 65 20 64 69 66 66 65 72 65 | .will.warn.you.about.the.differe |
31900 | 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 61 6e 64 20 61 6c 73 6f 20 73 68 | nt.units.you.can.use.and.also.sh |
31920 | 6f 77 20 79 6f 75 20 77 68 61 74 20 2a 63 6c 61 73 73 65 73 2a 20 61 72 65 20 61 6e 64 20 68 6f | ow.you.what.*classes*.are.and.ho |
31940 | 77 20 74 68 65 79 20 77 6f 72 6b 2c 20 61 73 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 6d 61 | w.they.work,.as.some.policies.ma |
31960 | 79 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 2e | y.require.you.to.configure.them. |
31980 | 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 73 65 73 20 6d 75 6c 74 69 63 61 73 74 20 | .By.default.VRRP.uses.multicast. |
319a0 | 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f | packets..If.your.network.does.no |
319c0 | 74 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 77 68 61 74 65 76 65 72 | t.support.multicast.for.whatever |
319e0 | 20 72 65 61 73 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 6d 61 6b 65 20 56 52 52 50 20 75 73 65 20 75 | .reason,.you.can.make.VRRP.use.u |
31a00 | 6e 69 63 61 73 74 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 69 6e 73 74 65 61 64 2e 00 42 79 | nicast.communication.instead..By |
31a20 | 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 75 73 65 73 20 70 72 65 65 6d 70 74 69 6f 6e 2e 20 59 | .default.VRRP.uses.preemption..Y |
31a40 | 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 20 69 74 20 77 69 74 68 20 74 68 65 20 22 6e 6f 2d 70 | ou.can.disable.it.with.the."no-p |
31a60 | 72 65 65 6d 70 74 22 20 6f 70 74 69 6f 6e 3a 00 42 79 20 64 65 66 61 75 6c 74 20 60 73 74 72 69 | reempt".option:.By.default.`stri |
31a80 | 63 74 2d 6c 73 61 2d 63 68 65 63 6b 69 6e 67 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 | ct-lsa-checking`.is.configured.t |
31aa0 | 68 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 77 69 6c 6c 20 61 62 6f 72 74 20 74 68 65 20 47 72 | hen.the.helper.will.abort.the.Gr |
31ac0 | 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 77 68 65 6e 20 61 20 4c 53 41 20 63 68 61 6e 67 65 | aceful.Restart.when.a.LSA.change |
31ae0 | 20 6f 63 63 75 72 73 20 77 68 69 63 68 20 61 66 66 65 63 74 73 20 74 68 65 20 72 65 73 74 61 72 | .occurs.which.affects.the.restar |
31b00 | 74 69 6e 67 20 72 6f 75 74 65 72 2e 00 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 73 63 6f 70 | ting.router..By.default.the.scop |
31b20 | 65 20 6f 66 20 74 68 65 20 70 6f 72 74 20 62 69 6e 64 69 6e 67 73 20 66 6f 72 20 75 6e 62 6f 75 | e.of.the.port.bindings.for.unbou |
31b40 | 6e 64 20 73 6f 63 6b 65 74 73 20 69 73 20 6c 69 6d 69 74 65 64 20 74 6f 20 74 68 65 20 64 65 66 | nd.sockets.is.limited.to.the.def |
31b60 | 61 75 6c 74 20 56 52 46 2e 20 54 68 61 74 20 69 73 2c 20 69 74 20 77 69 6c 6c 20 6e 6f 74 20 62 | ault.VRF..That.is,.it.will.not.b |
31b80 | 65 20 6d 61 74 63 68 65 64 20 62 79 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 6f 6e | e.matched.by.packets.arriving.on |
31ba0 | 20 69 6e 74 65 72 66 61 63 65 73 20 65 6e 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 20 61 6e | .interfaces.enslaved.to.a.VRF.an |
31bc0 | 64 20 70 72 6f 63 65 73 73 65 73 20 6d 61 79 20 62 69 6e 64 20 74 6f 20 74 68 65 20 73 61 6d 65 | d.processes.may.bind.to.the.same |
31be0 | 20 70 6f 72 74 20 69 66 20 74 68 65 79 20 62 69 6e 64 20 74 6f 20 61 20 56 52 46 2e 00 42 79 20 | .port.if.they.bind.to.a.VRF..By. |
31c00 | 64 65 66 61 75 6c 74 2c 20 46 52 52 20 77 69 6c 6c 20 62 72 69 6e 67 20 75 70 20 70 65 65 72 69 | default,.FRR.will.bring.up.peeri |
31c20 | 6e 67 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 | ng.with.minimal.common.capabilit |
31c40 | 79 20 66 6f 72 20 74 68 65 20 62 6f 74 68 20 73 69 64 65 73 2e 20 46 6f 72 20 65 78 61 6d 70 6c | y.for.the.both.sides..For.exampl |
31c60 | 65 2c 20 69 66 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 68 61 73 20 75 6e 69 63 61 | e,.if.the.local.router.has.unica |
31c80 | 73 74 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e | st.and.multicast.capabilities.an |
31ca0 | 64 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 20 6f 6e 6c 79 20 68 61 73 20 75 6e 69 | d.the.remote.router.only.has.uni |
31cc0 | 63 61 73 74 20 63 61 70 61 62 69 6c 69 74 79 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 | cast.capability.the.local.router |
31ce0 | 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 | .will.establish.the.connection.w |
31d00 | 69 74 68 20 75 6e 69 63 61 73 74 20 6f 6e 6c 79 20 63 61 70 61 62 69 6c 69 74 79 2e 20 57 68 65 | ith.unicast.only.capability..Whe |
31d20 | 6e 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 | n.there.are.no.common.capabiliti |
31d40 | 65 73 2c 20 46 52 52 20 73 65 6e 64 73 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 61 62 69 | es,.FRR.sends.Unsupported.Capabi |
31d60 | 6c 69 74 79 20 65 72 72 6f 72 20 61 6e 64 20 74 68 65 6e 20 72 65 73 65 74 73 20 74 68 65 20 63 | lity.error.and.then.resets.the.c |
31d80 | 6f 6e 6e 65 63 74 69 6f 6e 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 | onnection..By.default,.VyOS.does |
31da0 | 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 28 | .not.advertise.a.default.route.( |
31dc0 | 30 2e 30 2e 30 2e 30 2f 30 29 20 65 76 65 6e 20 69 66 20 69 74 20 69 73 20 69 6e 20 72 6f 75 74 | 0.0.0.0/0).even.if.it.is.in.rout |
31de0 | 69 6e 67 20 74 61 62 6c 65 2e 20 57 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 6e 6e 6f | ing.table..When.you.want.to.anno |
31e00 | 75 6e 63 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 65 72 2c | unce.default.routes.to.the.peer, |
31e20 | 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 20 55 73 69 6e 67 20 6f 70 74 69 6f 6e 61 | .use.this.command..Using.optiona |
31e40 | 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 79 | l.argument.:cfgcmd:`route-map`.y |
31e60 | 6f 75 20 63 61 6e 20 69 6e 6a 65 63 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 | ou.can.inject.the.default.route. |
31e80 | 74 6f 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f 72 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 63 6f | to.given.neighbor.only.if.the.co |
31ea0 | 6e 64 69 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 20 6d 65 | nditions.in.the.route.map.are.me |
31ec0 | 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 61 20 6e 65 77 20 74 6f 6b 65 6e 20 69 73 20 67 65 | t..By.default,.a.new.token.is.ge |
31ee0 | 6e 65 72 61 74 65 64 20 65 76 65 72 79 20 33 30 20 73 65 63 6f 6e 64 73 20 62 79 20 74 68 65 20 | nerated.every.30.seconds.by.the. |
31f00 | 6d 6f 62 69 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 | mobile.application..In.order.to. |
31f20 | 63 6f 6d 70 65 6e 73 61 74 65 20 66 6f 72 20 70 6f 73 73 69 62 6c 65 20 74 69 6d 65 2d 73 6b 65 | compensate.for.possible.time-ske |
31f40 | 77 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 73 65 72 | w.between.the.client.and.the.ser |
31f60 | 76 65 72 2c 20 61 6e 20 65 78 74 72 61 20 74 6f 6b 65 6e 20 62 65 66 6f 72 65 20 61 6e 64 20 61 | ver,.an.extra.token.before.and.a |
31f80 | 66 74 65 72 20 74 68 65 20 63 75 72 72 65 6e 74 20 74 69 6d 65 20 69 73 20 61 6c 6c 6f 77 65 64 | fter.the.current.time.is.allowed |
31fa0 | 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 20 6f 66 | ..This.allows.for.a.time.skew.of |
31fc0 | 20 75 70 20 74 6f 20 33 30 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 61 75 74 68 65 6e | .up.to.30.seconds.between.authen |
31fe0 | 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 42 79 20 64 | tication.server.and.client..By.d |
32000 | 65 66 61 75 6c 74 2c 20 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 75 70 64 61 74 65 20 61 20 | efault,.ddclient_.will.update.a. |
32020 | 64 79 6e 61 6d 69 63 20 64 6e 73 20 72 65 63 6f 72 64 20 75 73 69 6e 67 20 74 68 65 20 49 50 20 | dynamic.dns.record.using.the.IP. |
32040 | 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 | address.directly.attached.to.the |
32060 | 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 | .interface..If.your.VyOS.instanc |
32080 | 65 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2c 20 79 6f 75 72 20 72 65 63 6f 72 64 20 77 69 6c | e.is.behind.NAT,.your.record.wil |
320a0 | 6c 20 62 65 20 75 70 64 61 74 65 64 20 74 6f 20 70 6f 69 6e 74 20 74 6f 20 79 6f 75 72 20 69 6e | l.be.updated.to.point.to.your.in |
320c0 | 74 65 72 6e 61 6c 20 49 50 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 65 6e 61 62 6c 69 6e 67 20 | ternal.IP..By.default,.enabling. |
320e0 | 52 50 4b 49 20 64 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 62 65 73 74 20 70 61 74 68 20 73 | RPKI.does.not.change.best.path.s |
32100 | 65 6c 65 63 74 69 6f 6e 2e 20 49 6e 20 70 61 72 74 69 63 75 6c 61 72 2c 20 69 6e 76 61 6c 69 64 | election..In.particular,.invalid |
32120 | 20 70 72 65 66 69 78 65 73 20 77 69 6c 6c 20 73 74 69 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 | .prefixes.will.still.be.consider |
32140 | 65 64 20 64 75 72 69 6e 67 20 62 65 73 74 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 48 | ed.during.best.path.selection..H |
32160 | 6f 77 65 76 65 72 2c 20 74 68 65 20 72 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | owever,.the.router.can.be.config |
32180 | 75 72 65 64 20 74 6f 20 69 67 6e 6f 72 65 20 61 6c 6c 20 69 6e 76 61 6c 69 64 20 70 72 65 66 69 | ured.to.ignore.all.invalid.prefi |
321a0 | 78 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 73 75 70 70 6f 72 74 73 20 62 6f 74 | xes..By.default,.it.supports.bot |
321c0 | 68 20 70 6c 61 6e 6e 65 64 20 61 6e 64 20 75 6e 70 6c 61 6e 6e 65 64 20 6f 75 74 61 67 65 73 2e | h.planned.and.unplanned.outages. |
321e0 | 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6c 6f 63 61 6c 6c 79 20 61 64 76 65 72 74 69 73 65 64 20 | .By.default,.locally.advertised. |
32200 | 70 72 65 66 69 78 65 73 20 75 73 65 20 74 68 65 20 69 6d 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c | prefixes.use.the.implicit-null.l |
32220 | 61 62 65 6c 20 74 6f 20 65 6e 63 6f 64 65 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e | abel.to.encode.in.the.outgoing.N |
32240 | 4c 52 49 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 6e 67 69 6e 78 20 65 78 70 6f 73 65 73 20 74 | LRI..By.default,.nginx.exposes.t |
32260 | 68 65 20 6c 6f 63 61 6c 20 41 50 49 20 6f 6e 20 61 6c 6c 20 76 69 72 74 75 61 6c 20 73 65 72 76 | he.local.API.on.all.virtual.serv |
32280 | 65 72 73 2e 20 55 73 65 20 74 68 69 73 20 74 6f 20 72 65 73 74 72 69 63 74 20 6e 67 69 6e 78 20 | ers..Use.this.to.restrict.nginx. |
322a0 | 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 2e 00 42 79 | to.one.or.more.virtual.hosts..By |
322c0 | 20 64 65 66 61 75 6c 74 2c 20 72 65 63 6f 72 64 65 64 20 66 6c 6f 77 73 20 77 69 6c 6c 20 62 65 | .default,.recorded.flows.will.be |
322e0 | 20 73 61 76 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 61 6e 64 20 63 61 6e 20 62 65 20 6c 69 73 | .saved.internally.and.can.be.lis |
32300 | 74 65 64 20 77 69 74 68 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 2e 20 59 6f 75 20 6d 61 | ted.with.the.CLI.command..You.ma |
32320 | 79 20 64 69 73 61 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 2d 6d 65 6d | y.disable.using.the.local.in-mem |
32340 | 6f 72 79 20 74 61 62 6c 65 20 77 69 74 68 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 42 79 20 64 | ory.table.with.the.command:.By.d |
32360 | 65 66 61 75 6c 74 2c 20 74 68 65 20 42 47 50 20 70 72 65 66 69 78 20 69 73 20 61 64 76 65 72 74 | efault,.the.BGP.prefix.is.advert |
32380 | 69 73 65 64 20 65 76 65 6e 20 69 66 20 69 74 27 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 69 6e | ised.even.if.it's.not.present.in |
323a0 | 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 69 73 20 62 65 68 61 76 69 6f | .the.routing.table..This.behavio |
323c0 | 75 72 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 74 68 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 | ur.differs.from.the.implementati |
323e0 | 6f 6e 20 6f 66 20 73 6f 6d 65 20 76 65 6e 64 6f 72 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 | on.of.some.vendors..By.default,. |
32400 | 74 68 69 73 20 62 72 69 64 67 69 6e 67 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 42 79 20 64 65 66 | this.bridging.is.allowed..By.def |
32420 | 61 75 6c 74 2c 20 77 68 65 6e 20 56 79 4f 53 20 72 65 63 65 69 76 65 73 20 61 6e 20 49 43 4d 50 | ault,.when.VyOS.receives.an.ICMP |
32440 | 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 70 61 63 6b 65 74 20 64 65 73 74 69 6e 65 64 20 66 6f | .echo.request.packet.destined.fo |
32460 | 72 20 69 74 73 65 6c 66 2c 20 69 74 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 77 69 74 68 20 61 6e | r.itself,.it.will.answer.with.an |
32480 | 20 49 43 4d 50 20 65 63 68 6f 20 72 65 70 6c 79 2c 20 75 6e 6c 65 73 73 20 79 6f 75 20 61 76 6f | .ICMP.echo.reply,.unless.you.avo |
324a0 | 69 64 20 69 74 20 74 68 72 6f 75 67 68 20 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 00 42 79 20 75 | id.it.through.its.firewall..By.u |
324c0 | 73 69 6e 67 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 | sing.Pseudo-Ethernet.interfaces. |
324e0 | 74 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6c 65 73 73 20 73 79 73 74 65 6d 20 6f 76 65 72 68 65 | there.will.be.less.system.overhe |
32500 | 61 64 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 72 75 6e 6e 69 6e 67 20 61 20 74 72 61 64 69 74 69 | ad.compared.to.running.a.traditi |
32520 | 6f 6e 61 6c 20 62 72 69 64 67 69 6e 67 20 61 70 70 72 6f 61 63 68 2e 20 50 73 65 75 64 6f 2d 45 | onal.bridging.approach..Pseudo-E |
32540 | 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 | thernet.interfaces.can.also.be.u |
32560 | 73 65 64 20 74 6f 20 77 6f 72 6b 61 72 6f 75 6e 64 20 74 68 65 20 67 65 6e 65 72 61 6c 20 6c 69 | sed.to.workaround.the.general.li |
32580 | 6d 69 74 20 6f 66 20 34 30 39 36 20 76 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 | mit.of.4096.virtual.LANs.(VLANs) |
325a0 | 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2c 20 73 69 6e | .per.physical.Ethernet.port,.sin |
325c0 | 63 65 20 74 68 61 74 20 6c 69 6d 69 74 20 69 73 20 77 69 74 68 20 72 65 73 70 65 63 74 20 74 6f | ce.that.limit.is.with.respect.to |
325e0 | 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 65 73 73 2e 00 42 79 70 61 73 73 69 6e 67 | .a.single.MAC.address..Bypassing |
32600 | 20 74 68 65 20 77 65 62 70 72 6f 78 79 00 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 | .the.webproxy.CA.(Certificate.Au |
32620 | 74 68 6f 72 69 74 79 29 00 43 41 4b 45 00 43 52 49 54 49 43 2f 45 43 50 00 43 61 6c 6c 20 61 6e | thority).CAKE.CRITIC/ECP.Call.an |
32640 | 6f 74 68 65 72 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 2e | other.route-map.policy.on.match. |
32660 | 00 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 00 43 65 72 74 61 69 6e 20 | .Capability.Negotiation.Certain. |
32680 | 76 65 6e 64 6f 72 73 20 75 73 65 20 62 72 6f 61 64 63 61 73 74 73 20 74 6f 20 69 64 65 6e 74 69 | vendors.use.broadcasts.to.identi |
326a0 | 66 79 20 74 68 65 69 72 20 65 71 75 69 70 6d 65 6e 74 20 77 69 74 68 69 6e 20 6f 6e 65 20 65 74 | fy.their.equipment.within.one.et |
326c0 | 68 65 72 6e 65 74 20 73 65 67 6d 65 6e 74 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 69 66 | hernet.segment..Unfortunately.if |
326e0 | 20 79 6f 75 20 73 70 6c 69 74 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 6d 75 6c | .you.split.your.network.with.mul |
32700 | 74 69 70 6c 65 20 56 4c 41 4e 73 20 79 6f 75 20 6c 6f 6f 73 65 20 74 68 65 20 61 62 69 6c 69 74 | tiple.VLANs.you.loose.the.abilit |
32720 | 79 20 6f 66 20 69 64 65 6e 74 69 66 79 69 6e 67 20 79 6f 75 72 20 65 71 75 69 70 6d 65 6e 74 2e | y.of.identifying.your.equipment. |
32740 | 00 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 20 28 43 41 29 00 43 65 72 74 | .Certificate.Authority.(CA).Cert |
32760 | 69 66 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 20 69 6e 20 50 45 4d 20 66 | ificate.revocation.list.in.PEM.f |
32780 | 6f 72 6d 61 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 73 00 43 68 61 6e 67 65 20 73 79 73 74 65 | ormat..Certificates.Change.syste |
327a0 | 6d 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 74 6f 20 67 69 76 65 6e 20 6c 61 6e 67 75 | m.keyboard.layout.to.given.langu |
327c0 | 61 67 65 2e 00 43 68 61 6e 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 77 | age..Change.the.default-action.w |
327e0 | 69 74 68 20 74 68 69 73 20 73 65 74 74 69 6e 67 2e 00 43 68 61 6e 67 65 73 20 69 6e 20 42 47 50 | ith.this.setting..Changes.in.BGP |
32800 | 20 70 6f 6c 69 63 69 65 73 20 72 65 71 75 69 72 65 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f | .policies.require.the.BGP.sessio |
32820 | 6e 20 74 6f 20 62 65 20 63 6c 65 61 72 65 64 2e 20 43 6c 65 61 72 69 6e 67 20 68 61 73 20 61 20 | n.to.be.cleared..Clearing.has.a. |
32840 | 6c 61 72 67 65 20 6e 65 67 61 74 69 76 65 20 69 6d 70 61 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b | large.negative.impact.on.network |
32860 | 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 53 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f | .operations..Soft.reconfiguratio |
32880 | 6e 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 67 65 6e 65 72 61 74 65 20 69 6e 62 6f 75 6e | n.enables.you.to.generate.inboun |
328a0 | 64 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 6f 72 2c 20 63 68 61 6e 67 | d.updates.from.a.neighbor,.chang |
328c0 | 65 20 61 6e 64 20 61 63 74 69 76 61 74 65 20 42 47 50 20 70 6f 6c 69 63 69 65 73 20 77 69 74 68 | e.and.activate.BGP.policies.with |
328e0 | 6f 75 74 20 63 6c 65 61 72 69 6e 67 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 43 68 | out.clearing.the.BGP.session..Ch |
32900 | 61 6e 67 65 73 20 74 6f 20 74 68 65 20 4e 41 54 20 73 79 73 74 65 6d 20 6f 6e 6c 79 20 61 66 66 | anges.to.the.NAT.system.only.aff |
32920 | 65 63 74 20 6e 65 77 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e | ect.newly.established.connection |
32940 | 73 2e 20 41 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f | s..Already.established.connectio |
32960 | 6e 73 20 61 72 65 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2e 00 43 68 61 6e 67 69 6e 67 20 74 68 | ns.are.not.affected..Changing.th |
32980 | 65 20 6b 65 79 6d 61 70 20 6f 6e 6c 79 20 68 61 73 20 61 6e 20 65 66 66 65 63 74 20 6f 6e 20 74 | e.keymap.only.has.an.effect.on.t |
329a0 | 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2c 20 75 73 69 6e 67 20 53 53 48 20 6f 72 20 | he.system.console,.using.SSH.or. |
329c0 | 53 65 72 69 61 6c 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 64 65 76 69 | Serial.remote.access.to.the.devi |
329e0 | 63 65 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 20 61 73 20 74 68 65 20 6b 65 79 62 6f 61 | ce.is.not.affected.as.the.keyboa |
32a00 | 72 64 20 6c 61 79 6f 75 74 20 68 65 72 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 79 6f | rd.layout.here.corresponds.to.yo |
32a20 | 75 72 20 61 63 63 65 73 73 20 73 79 73 74 65 6d 2e 00 43 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 | ur.access.system..Channel.number |
32a40 | 20 28 49 45 45 45 20 38 30 32 2e 31 31 29 2c 20 66 6f 72 20 32 2e 34 47 68 7a 20 28 38 30 32 2e | .(IEEE.802.11),.for.2.4Ghz.(802. |
32a60 | 31 31 20 62 2f 67 2f 6e 29 20 63 68 61 6e 6e 65 6c 73 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 2d | 11.b/g/n).channels.range.from.1- |
32a80 | 31 34 2e 20 4f 6e 20 35 47 68 7a 20 28 38 30 32 2e 31 31 20 61 2f 68 2f 6a 2f 6e 2f 61 63 29 20 | 14..On.5Ghz.(802.11.a/h/j/n/ac). |
32aa0 | 63 68 61 6e 6e 65 6c 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 30 2c 20 33 34 20 74 6f 20 | channels.available.are.0,.34.to. |
32ac0 | 31 37 33 00 43 68 65 63 6b 20 69 66 20 74 68 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 64 65 76 | 173.Check.if.the.Intel...QAT.dev |
32ae0 | 69 63 65 20 69 73 20 75 70 20 61 6e 64 20 72 65 61 64 79 20 74 6f 20 64 6f 20 74 68 65 20 6a 6f | ice.is.up.and.ready.to.do.the.jo |
32b00 | 62 2e 00 43 68 65 63 6b 20 73 74 61 74 75 73 00 43 68 65 63 6b 20 74 68 65 20 6d 61 6e 79 20 70 | b..Check.status.Check.the.many.p |
32b20 | 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 60 73 68 6f | arameters.available.for.the.`sho |
32b40 | 77 20 69 70 76 36 20 72 6f 75 74 65 60 20 63 6f 6d 6d 61 6e 64 3a 00 43 68 65 63 6b 3a 00 43 68 | w.ipv6.route`.command:.Check:.Ch |
32b60 | 65 63 6b 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 43 68 65 63 6b 73 00 43 68 6f 6f 73 65 | ecking.connections.Checks.Choose |
32b80 | 20 79 6f 75 72 20 60 60 64 69 72 65 63 74 6f 72 79 60 60 20 6c 6f 63 61 74 69 6f 6e 20 63 61 72 | .your.``directory``.location.car |
32ba0 | 65 66 75 6c 6c 79 20 6f 72 20 79 6f 75 20 77 69 6c 6c 20 6c 6f 6f 73 65 20 74 68 65 20 63 6f 6e | efully.or.you.will.loose.the.con |
32bc0 | 74 65 6e 74 20 6f 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 73 2e 20 41 6e 79 20 64 69 72 65 | tent.on.image.upgrades..Any.dire |
32be0 | 63 74 6f 72 79 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 69 73 20 73 61 76 65 20 | ctory.under.``/config``.is.save. |
32c00 | 61 74 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 64 2e 00 43 69 73 63 6f 20 | at.this.will.be.migrated..Cisco. |
32c20 | 43 61 74 61 6c 79 73 74 00 43 69 73 63 6f 20 61 6e 64 20 41 6c 6c 69 65 64 20 54 65 6c 65 73 79 | Catalyst.Cisco.and.Allied.Telesy |
32c40 | 6e 20 63 61 6c 6c 20 69 74 20 50 72 69 76 61 74 65 20 56 4c 41 4e 00 43 6c 61 6d 70 20 4d 53 53 | n.call.it.Private.VLAN.Clamp.MSS |
32c60 | 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 49 50 00 43 6c 61 73 73 20 74 72 65 61 74 6d 65 | .for.a.specific.IP.Class.treatme |
32c80 | 6e 74 00 43 6c 61 73 73 65 73 00 43 6c 61 73 73 6c 65 73 73 20 73 74 61 74 69 63 20 72 6f 75 74 | nt.Classes.Classless.static.rout |
32ca0 | 65 00 43 6c 65 61 72 20 61 6c 6c 20 42 47 50 20 65 78 74 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 | e.Clear.all.BGP.extcommunities.. |
32cc0 | 43 6c 69 65 6e 74 00 43 6c 69 65 6e 74 20 41 64 64 72 65 73 73 20 50 6f 6f 6c 73 00 43 6c 69 65 | Client.Client.Address.Pools.Clie |
32ce0 | 6e 74 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 43 6f 6e 66 69 67 75 | nt.Authentication.Client.Configu |
32d00 | 72 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 49 50 20 50 6f 6f 6c 20 41 64 76 61 6e 63 65 64 20 4f | ration.Client.IP.Pool.Advanced.O |
32d20 | 70 74 69 6f 6e 73 00 43 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 | ptions.Client.IP.addresses.will. |
32d40 | 62 65 20 70 72 6f 76 69 64 65 64 20 66 72 6f 6d 20 70 6f 6f 6c 20 60 31 39 32 2e 30 2e 32 2e 30 | be.provided.from.pool.`192.0.2.0 |
32d60 | 2f 32 35 60 00 43 6c 69 65 6e 74 20 53 69 64 65 00 43 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 | /25`.Client.Side.Client.configur |
32d80 | 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 43 6c 69 65 6e 74 20 | ation.Client.domain.name.Client. |
32da0 | 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 00 43 6c 69 65 6e 74 20 69 73 6f 6c 61 74 69 6f 6e 20 63 | domain.search.Client.isolation.c |
32dc0 | 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6c 6f 77 2d 6c 65 76 65 6c 20 | an.be.used.to.prevent.low-level. |
32de0 | 62 72 69 64 67 69 6e 67 20 6f 66 20 66 72 61 6d 65 73 20 62 65 74 77 65 65 6e 20 61 73 73 6f 63 | bridging.of.frames.between.assoc |
32e00 | 69 61 74 65 64 20 73 74 61 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 42 53 53 2e 00 43 6c 69 65 6e | iated.stations.in.the.BSS..Clien |
32e20 | 74 3a 00 43 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 68 65 | t:.Clients.are.identified.by.the |
32e40 | 20 43 4e 20 66 69 65 6c 64 20 6f 66 20 74 68 65 69 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 | .CN.field.of.their.x.509.certifi |
32e60 | 63 61 74 65 73 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 74 68 65 20 43 4e 20 69 73 | cates,.in.this.example.the.CN.is |
32e80 | 20 60 60 63 6c 69 65 6e 74 30 60 60 3a 00 43 6c 69 65 6e 74 73 20 72 65 63 65 69 76 69 6e 67 20 | .``client0``:.Clients.receiving. |
32ea0 | 61 64 76 65 72 74 69 73 65 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 | advertise.messages.from.multiple |
32ec0 | 20 73 65 72 76 65 72 73 20 63 68 6f 6f 73 65 20 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 | .servers.choose.the.server.with. |
32ee0 | 74 68 65 20 68 69 67 68 65 73 74 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 | the.highest.preference.value..Th |
32f00 | 65 20 72 61 6e 67 65 20 66 6f 72 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 60 60 30 2e 2e 2e | e.range.for.this.value.is.``0... |
32f20 | 32 35 35 60 60 2e 00 43 6c 6f 63 6b 20 64 61 65 6d 6f 6e 00 43 6f 6d 6d 61 6e 64 20 63 6f 6d 70 | 255``..Clock.daemon.Command.comp |
32f40 | 6c 65 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 6c 69 73 74 20 61 76 61 69 6c | letion.can.be.used.to.list.avail |
32f60 | 61 62 6c 65 20 74 69 6d 65 20 7a 6f 6e 65 73 2e 20 54 68 65 20 61 64 6a 75 73 74 6d 65 6e 74 20 | able.time.zones..The.adjustment. |
32f80 | 66 6f 72 20 64 61 79 6c 69 67 68 74 20 74 69 6d 65 20 77 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 | for.daylight.time.will.take.plac |
32fa0 | 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 74 69 6d | e.automatically.based.on.the.tim |
32fc0 | 65 20 6f 66 20 79 65 61 72 2e 00 43 6f 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 61 62 6c 69 6e 67 | e.of.year..Command.for.disabling |
32fe0 | 20 61 20 72 75 6c 65 20 62 75 74 20 6b 65 65 70 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 | .a.rule.but.keep.it.in.the.confi |
33000 | 67 75 72 61 74 69 6f 6e 2e 00 43 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c | guration..Command.should.probabl |
33020 | 79 20 62 65 20 65 78 74 65 6e 64 65 64 20 74 6f 20 6c 69 73 74 20 61 6c 73 6f 20 74 68 65 20 72 | y.be.extended.to.list.also.the.r |
33040 | 65 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 69 73 20 | eal.interfaces.assigned.to.this. |
33060 | 6f 6e 65 20 56 52 46 20 74 6f 20 67 65 74 20 61 20 62 65 74 74 65 72 20 6f 76 65 72 76 69 65 77 | one.VRF.to.get.a.better.overview |
33080 | 2e 00 43 6f 6d 6d 61 6e 64 20 75 73 65 64 20 74 6f 20 75 70 64 61 74 65 20 47 65 6f 49 50 20 64 | ..Command.used.to.update.GeoIP.d |
330a0 | 61 74 61 62 61 73 65 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 73 65 74 73 2e 00 43 6f 6d 6d 61 | atabase.and.firewall.sets..Comma |
330c0 | 6e 64 73 00 43 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 76 61 6c 69 64 20 | nds.Common.configuration,.valid. |
330e0 | 66 6f 72 20 62 6f 74 68 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 6e | for.both.primary.and.secondary.n |
33100 | 6f 64 65 2e 00 43 6f 6d 6d 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 | ode..Common.interface.configurat |
33120 | 69 6f 6e 00 43 6f 6d 6d 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 65 64 65 72 61 74 | ion.Common.parameters.Confederat |
33140 | 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 | ion.Configuration.Confidentialit |
33160 | 79 20 e2 80 93 20 45 6e 63 72 79 70 74 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 70 | y.....Encryption.of.packets.to.p |
33180 | 72 65 76 65 6e 74 20 73 6e 6f 6f 70 69 6e 67 20 62 79 20 61 6e 20 75 6e 61 75 74 68 6f 72 69 7a | revent.snooping.by.an.unauthoriz |
331a0 | 65 64 20 73 6f 75 72 63 65 2e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 | ed.source..Configuration.Configu |
331c0 | 72 61 74 69 6f 6e 20 45 78 61 6d 70 6c 65 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 45 78 61 | ration.Example.Configuration.Exa |
331e0 | 6d 70 6c 65 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 47 75 69 64 65 00 43 6f 6e 66 69 67 | mples.Configuration.Guide.Config |
33200 | 75 72 61 74 69 6f 6e 20 4f 70 74 69 6f 6e 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f | uration.Options.Configuration.co |
33220 | 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 | mmands.covered.in.this.section:. |
33240 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 74 68 65 20 70 | Configuration.commands.for.the.p |
33260 | 72 69 76 61 74 65 20 61 6e 64 20 70 75 62 6c 69 63 20 6b 65 79 20 77 69 6c 6c 20 62 65 20 64 69 | rivate.and.public.key.will.be.di |
33280 | 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 73 63 72 65 65 6e 20 77 68 69 63 68 20 6e 65 65 64 | splayed.on.the.screen.which.need |
332a0 | 73 20 74 6f 20 62 65 20 73 65 74 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 66 69 72 73 74 2e | s.to.be.set.on.the.router.first. |
332c0 | 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 | .Note.the.command.with.the.publi |
332e0 | 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 | c.key.(set.pki.key-pair.ipsec-LE |
33300 | 46 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 | FT.public.key.'MIIBIjANBgkqh...' |
33320 | 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 | )..Then.do.the.same.on.the.oppos |
33340 | 69 74 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e | ite.router:.Configuration.comman |
33360 | 64 73 20 77 69 6c 6c 20 64 69 73 70 6c 61 79 2e 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e | ds.will.display..Note.the.comman |
33380 | 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b | d.with.the.public.key.(set.pki.k |
333a0 | 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d | ey-pair.ipsec-LEFT.public.key.'M |
333c0 | 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 | IIBIjANBgkqh...')..Then.do.the.s |
333e0 | 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 | ame.on.the.opposite.router:.Conf |
33400 | 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | iguration.example:.Configuration |
33420 | 20 66 6f 72 20 74 68 65 73 65 20 65 78 70 6f 72 74 65 64 20 72 6f 75 74 65 73 20 6d 75 73 74 2c | .for.these.exported.routes.must, |
33440 | 20 61 74 20 61 20 6d 69 6e 69 6d 75 6d 2c 20 73 70 65 63 69 66 79 20 74 68 65 73 65 20 74 77 6f | .at.a.minimum,.specify.these.two |
33460 | 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 3a 72 | .parameters..Configuration.of.:r |
33480 | 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 43 6f 6e 66 69 67 75 72 61 74 69 6f | ef:`routing-static`.Configuratio |
334a0 | 6e 20 6f 66 20 61 20 44 48 43 50 20 48 41 20 70 61 69 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 | n.of.a.DHCP.HA.pair:.Configurati |
334c0 | 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 61 69 72 00 43 6f 6e 66 69 | on.of.a.DHCP.failover.pair.Confi |
334e0 | 67 75 72 61 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 20 62 65 74 77 65 65 | guration.of.route.leaking.betwee |
33500 | 6e 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 4e 20 | n.a.unicast.VRF.RIB.and.the.VPN. |
33520 | 53 41 46 49 20 52 49 42 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 69 73 20 61 | SAFI.RIB.of.the.default.VRF.is.a |
33540 | 63 63 6f 6d 70 6c 69 73 68 65 64 20 76 69 61 20 63 6f 6d 6d 61 6e 64 73 20 69 6e 20 74 68 65 20 | ccomplished.via.commands.in.the. |
33560 | 63 6f 6e 74 65 78 74 20 6f 66 20 61 20 56 52 46 20 61 64 64 72 65 73 73 2d 66 61 6d 69 6c 79 2e | context.of.a.VRF.address-family. |
33580 | 00 43 6f 6e 66 69 67 75 72 65 00 43 6f 6e 66 69 67 75 72 65 20 3a 61 62 62 72 3a 60 4d 54 55 20 | .Configure.Configure.:abbr:`MTU. |
335a0 | 28 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 29 60 20 6f 6e 20 | (Maximum.Transmission.Unit)`.on. |
335c0 | 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 49 74 20 69 73 20 74 68 65 20 73 | given.`<interface>`..It.is.the.s |
335e0 | 69 7a 65 20 28 69 6e 20 62 79 74 65 73 29 20 6f 66 20 74 68 65 20 6c 61 72 67 65 73 74 20 65 74 | ize.(in.bytes).of.the.largest.et |
33600 | 68 65 72 6e 65 74 20 66 72 61 6d 65 20 73 65 6e 74 20 6f 6e 20 74 68 69 73 20 6c 69 6e 6b 2e 00 | hernet.frame.sent.on.this.link.. |
33620 | 43 6f 6e 66 69 67 75 72 65 20 42 46 44 00 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 72 65 | Configure.BFD.Configure.DNS.`<re |
33640 | 63 6f 72 64 3e 60 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 75 70 64 61 74 65 64 2e 20 | cord>`.which.should.be.updated.. |
33660 | 54 68 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 | This.can.be.set.multiple.times.. |
33680 | 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 7a 6f 6e 65 3e 60 20 74 6f 20 62 65 20 75 70 64 | Configure.DNS.`<zone>`.to.be.upd |
336a0 | 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 45 4e 45 56 45 20 74 75 6e 6e 65 6c 20 66 61 | ated..Configure.GENEVE.tunnel.fa |
336c0 | 72 20 65 6e 64 2f 72 65 6d 6f 74 65 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2e 00 43 6f | r.end/remote.tunnel.endpoint..Co |
336e0 | 6e 66 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 33 | nfigure.Graceful.Restart.:rfc:`3 |
33700 | 36 32 33 60 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c | 623`.helper.support..By.default, |
33720 | 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 69 73 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 | .helper.support.is.disabled.for. |
33740 | 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 20 65 6e 61 62 | all.neighbours..This.config.enab |
33760 | 6c 65 73 2f 64 69 73 61 62 6c 65 73 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 6f 6e 20 74 | les/disables.helper.support.on.t |
33780 | 68 69 73 20 72 6f 75 74 65 72 20 66 6f 72 20 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 00 43 | his.router.for.all.neighbours..C |
337a0 | 6f 6e 66 69 67 75 72 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 | onfigure.Graceful.Restart.:rfc:` |
337c0 | 33 36 32 33 60 20 72 65 73 74 61 72 74 69 6e 67 20 73 75 70 70 6f 72 74 2e 20 57 68 65 6e 20 65 | 3623`.restarting.support..When.e |
337e0 | 6e 61 62 6c 65 64 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 72 61 63 65 20 70 65 72 69 6f 64 | nabled,.the.default.grace.period |
33800 | 20 69 73 20 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 43 4d 50 20 | .is.120.seconds..Configure.ICMP. |
33820 | 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 | threshold.parameters..Configure. |
33840 | 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 44 48 43 50 20 60 3c 73 65 72 76 65 72 3e | IP.address.of.the.DHCP.`<server> |
33860 | 60 20 77 68 69 63 68 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 6c 61 79 65 64 20 | `.which.will.handle.the.relayed. |
33880 | 70 61 63 6b 65 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 41 44 49 55 53 20 60 3c 73 65 72 76 | packets..Configure.RADIUS.`<serv |
338a0 | 65 72 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 64 20 70 6f 72 74 20 66 6f 72 20 61 | er>`.and.its.required.port.for.a |
338c0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 73 2e 00 43 6f 6e 66 69 67 75 72 | uthentication.requests..Configur |
338e0 | 65 20 52 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 | e.RADIUS.`<server>`.and.its.requ |
33900 | 69 72 65 64 20 73 68 61 72 65 64 20 60 3c 73 65 63 72 65 74 3e 60 20 66 6f 72 20 63 6f 6d 6d 75 | ired.shared.`<secret>`.for.commu |
33920 | 6e 69 63 61 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e | nicating.with.the.RADIUS.server. |
33940 | 00 43 6f 6e 66 69 67 75 72 65 20 53 4e 41 54 20 72 75 6c 65 20 28 34 30 29 20 74 6f 20 6f 6e 6c | .Configure.SNAT.rule.(40).to.onl |
33960 | 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e | y.NAT.packets.with.a.destination |
33980 | 20 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 30 2e 32 2e 31 2e 00 43 6f 6e 66 69 67 75 72 65 | .address.of.192.0.2.1..Configure |
339a0 | 20 54 43 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 67 | .TCP.threshold.parameters.Config |
339c0 | 75 72 65 20 55 44 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e | ure.UDP.threshold.parameters.Con |
339e0 | 66 69 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 69 63 68 20 69 73 20 73 68 6f 77 | figure.`<message>`.which.is.show |
33a00 | 6e 20 61 66 74 65 72 20 75 73 65 72 20 68 61 73 20 6c 6f 67 67 65 64 20 69 6e 20 74 6f 20 74 68 | n.after.user.has.logged.in.to.th |
33a20 | 65 20 73 79 73 74 65 6d 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 | e.system..Configure.`<message>`. |
33a40 | 77 68 69 63 68 20 69 73 20 73 68 6f 77 6e 20 64 75 72 69 6e 67 20 53 53 48 20 63 6f 6e 6e 65 63 | which.is.shown.during.SSH.connec |
33a60 | 74 20 61 6e 64 20 62 65 66 6f 72 65 20 61 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e | t.and.before.a.user.is.logged.in |
33a80 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 | ..Configure.`<password>`.used.wh |
33aa0 | 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 | en.authenticating.the.update.req |
33ac0 | 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 | uest.for.DynDNS.service.identifi |
33ae0 | 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 | ed.by.`<service-name>`..Configur |
33b00 | 65 20 60 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 | e.`<password>`.used.when.authent |
33b20 | 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 | icating.the.update.request.for.D |
33b40 | 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 | ynDNS.service.identified.by.`<se |
33b60 | 72 76 69 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 | rvice>`..Configure.`<username>`. |
33b80 | 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 | used.when.authenticating.the.upd |
33ba0 | 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 | ate.request.for.DynDNS.service.i |
33bc0 | 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 | dentified.by.`<service-name>`..C |
33be0 | 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 73 65 64 20 77 68 65 6e 20 | onfigure.`<username>`.used.when. |
33c00 | 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 | authenticating.the.update.reques |
33c20 | 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 | t.for.DynDNS.service.identified. |
33c40 | 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 2e 20 46 6f 72 20 4e 61 6d 65 63 68 65 61 70 2c 20 73 | by.`<service>`..For.Namecheap,.s |
33c60 | 65 74 20 74 68 65 20 3c 64 6f 6d 61 69 6e 3e 20 79 6f 75 20 77 69 73 68 20 74 6f 20 75 70 64 61 | et.the.<domain>.you.wish.to.upda |
33c80 | 74 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 55 52 4c 20 74 68 61 74 20 63 6f 6e 74 61 69 6e | te..Configure.a.URL.that.contain |
33ca0 | 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 69 6d 61 67 65 73 2e 00 43 6f 6e 66 | s.information.about.images..Conf |
33cc0 | 69 67 75 72 65 20 61 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 61 64 64 72 65 73 73 2e 20 49 74 20 | igure.a.sFlow.agent.address..It. |
33ce0 | 63 61 6e 20 62 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 | can.be.IPv4.or.IPv6.address,.but |
33d00 | 20 79 6f 75 20 6d 75 73 74 20 73 65 74 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 63 6f 6c 2c | .you.must.set.the.same.protocol, |
33d20 | 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 | .which.is.used.for.sFlow.collect |
33d40 | 6f 72 20 61 64 64 72 65 73 73 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 75 73 69 6e 67 20 | or.addresses..By.default,.using. |
33d60 | 72 6f 75 74 65 72 2d 69 64 20 66 72 6f 6d 20 42 47 50 20 6f 72 20 4f 53 50 46 20 70 72 6f 74 6f | router-id.from.BGP.or.OSPF.proto |
33d80 | 63 6f 6c 2c 20 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 66 | col,.or.the.primary.IP.address.f |
33da0 | 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 | rom.the.first.interface..Configu |
33dc0 | 72 65 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 | re.a.static.route.for.<subnet>.u |
33de0 | 73 69 6e 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 2c 20 75 73 65 20 73 6f 75 | sing.gateway.<address>.,.use.sou |
33e00 | 72 63 65 20 61 64 64 72 65 73 73 20 74 6f 20 69 6e 64 65 6e 74 69 66 79 20 74 68 65 20 70 65 65 | rce.address.to.indentify.the.pee |
33e20 | 72 20 77 68 65 6e 20 69 73 20 6d 75 6c 74 69 2d 68 6f 70 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 | r.when.is.multi-hop.session.and. |
33e40 | 74 68 65 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 65 65 72 20 | the.gateway.address.as.BFD.peer. |
33e60 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 | destination.address..Configure.a |
33e80 | 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 6e 67 | .static.route.for.<subnet>.using |
33ea0 | 20 67 61 74 65 77 61 79 20 3c 61 64 64 72 65 73 73 3e 20 61 6e 64 20 75 73 65 20 74 68 65 20 67 | .gateway.<address>.and.use.the.g |
33ec0 | 61 74 65 77 61 79 20 61 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 65 65 72 20 64 65 73 74 69 | ateway.address.as.BFD.peer.desti |
33ee0 | 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 | nation.address..Configure.addres |
33f00 | 73 20 6f 66 20 4e 65 74 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 4e 65 74 46 6c 6f 77 20 | s.of.NetFlow.collector..NetFlow. |
33f20 | 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 62 6f 74 | server.at.`<address>`.can.be.bot |
33f40 | 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 | h.listening.on.an.IPv4.or.IPv6.a |
33f60 | 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c | ddress..Configure.address.of.sFl |
33f80 | 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 3c 61 | ow.collector..sFlow.server.at.<a |
33fa0 | 64 64 72 65 73 73 3e 20 63 61 6e 20 62 65 20 62 6f 74 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e | ddress>.can.be.both.listening.on |
33fc0 | 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 | .an.IPv4.or.IPv6.address..Config |
33fe0 | 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 | ure.address.of.sFlow.collector.. |
34000 | 73 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 | sFlow.server.at.`<address>`.can. |
34020 | 62 65 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 42 75 74 20 | be.an.IPv4.or.IPv6.address..But. |
34040 | 79 6f 75 20 63 61 6e 6e 6f 74 20 65 78 70 6f 72 74 20 74 6f 20 62 6f 74 68 20 49 50 76 34 20 61 | you.cannot.export.to.both.IPv4.a |
34060 | 6e 64 20 49 50 76 36 20 63 6f 6c 6c 65 63 74 6f 72 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 | nd.IPv6.collectors.at.the.same.t |
34080 | 69 6d 65 21 00 43 6f 6e 66 69 67 75 72 65 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 | ime!.Configure.agent.IP.address. |
340a0 | 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 | associated.with.this.interface.. |
340c0 | 43 6f 6e 66 69 67 75 72 65 20 61 67 67 72 65 67 61 74 69 6f 6e 20 64 65 6c 61 79 20 74 69 6d 65 | Configure.aggregation.delay.time |
340e0 | 72 20 69 6e 74 65 72 76 61 6c 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6c 65 72 74 20 73 63 72 69 | r.interval..Configure.alert.scri |
34100 | 70 74 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 61 6e | pt.that.will.be.executed.when.an |
34120 | 20 61 74 74 61 63 6b 20 69 73 20 64 65 74 65 63 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 | .attack.is.detected..Configure.a |
34140 | 6e 20 61 63 63 6f 75 6e 74 69 6e 67 20 73 65 72 76 65 72 20 61 6e 64 20 65 6e 61 62 6c 65 20 61 | n.accounting.server.and.enable.a |
34160 | 63 63 6f 75 6e 74 69 6e 67 20 77 69 74 68 3a 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 6e | ccounting.with:.Configure.and.en |
34180 | 61 62 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 | able.collection.of.flow.informat |
341a0 | 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 | ion.for.the.interface.identified |
341c0 | 20 62 79 20 3c 69 6e 74 65 72 66 61 63 65 3e 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 | .by.<interface>..Configure.and.e |
341e0 | 6e 61 62 6c 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 | nable.collection.of.flow.informa |
34200 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 | tion.for.the.interface.identifie |
34220 | 64 20 62 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 75 | d.by.`<interface>`..Configure.au |
34240 | 74 6f 2d 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 6e 65 77 20 69 6d 61 67 65 73 00 43 6f 6e 66 69 | to-checking.for.new.images.Confi |
34260 | 67 75 72 65 20 62 61 63 6b 65 6e 64 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f 64 65 20 54 43 50 20 6f | gure.backend.`<name>`.mode.TCP.o |
34280 | 72 20 48 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 28 61 | r.HTTP.Configure.both.routers.(a |
342a0 | 20 61 6e 64 20 62 29 20 66 6f 72 20 44 48 43 50 76 36 2d 50 44 20 76 69 61 20 64 75 6d 6d 79 20 | .and.b).for.DHCPv6-PD.via.dummy. |
342c0 | 69 6e 74 65 72 66 61 63 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 64 69 72 65 63 74 69 6f 6e 20 66 | interface:.Configure.direction.f |
342e0 | 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 67 75 72 65 | or.processing.traffic..Configure |
34300 | 20 65 69 74 68 65 72 20 6f 6e 65 20 6f 72 20 74 77 6f 20 73 74 6f 70 20 62 69 74 73 2e 20 54 68 | .either.one.or.two.stop.bits..Th |
34320 | 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 73 20 69 66 20 | is.defaults.to.one.stop.bits.if. |
34340 | 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 69 74 | left.unconfigured..Configure.eit |
34360 | 68 65 72 20 73 65 76 65 6e 20 6f 72 20 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 2e 20 54 68 | her.seven.or.eight.data.bits..Th |
34380 | 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 20 69 | is.defaults.to.eight.data.bits.i |
343a0 | 66 20 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 67 | f.left.unconfigured..Configure.g |
343c0 | 65 6e 65 72 61 6c 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e | eneral.threshold.parameters..Con |
343e0 | 66 69 67 75 72 65 20 68 6f 77 20 6c 6f 6e 67 20 61 6e 20 49 50 20 28 61 74 74 61 63 6b 65 72 29 | figure.how.long.an.IP.(attacker) |
34400 | 20 73 68 6f 75 6c 64 20 62 65 20 6b 65 70 74 20 69 6e 20 62 6c 6f 63 6b 65 64 20 73 74 61 74 65 | .should.be.kept.in.blocked.state |
34420 | 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 39 30 30 2e 00 43 6f 6e 66 69 67 75 | ..Default.value.is.1900..Configu |
34440 | 72 65 20 69 6e 64 69 76 69 64 75 61 6c 20 62 72 69 64 67 65 20 70 6f 72 74 20 60 3c 70 72 69 6f | re.individual.bridge.port.`<prio |
34460 | 72 69 74 79 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e | rity>`..Configure.interface.`<in |
34480 | 74 65 72 66 61 63 65 3e 60 20 77 69 74 68 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 69 6e 74 65 72 | terface>`.with.one.or.more.inter |
344a0 | 66 61 63 65 20 61 64 64 72 65 73 73 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 66 | face.addresses..Configure.interf |
344c0 | 61 63 65 2d 73 70 65 63 69 66 69 63 20 48 6f 73 74 2f 52 6f 75 74 65 72 20 62 65 68 61 76 69 6f | ace-specific.Host/Router.behavio |
344e0 | 75 72 2e 20 49 66 20 73 65 74 2c 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 73 | ur..If.set,.the.interface.will.s |
34500 | 77 69 74 63 68 20 74 6f 20 68 6f 73 74 20 6d 6f 64 65 20 61 6e 64 20 49 50 76 36 20 66 6f 72 77 | witch.to.host.mode.and.IPv6.forw |
34520 | 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 64 69 73 61 62 6c 65 64 20 6f 6e 20 74 68 69 73 20 | arding.will.be.disabled.on.this. |
34540 | 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 6c 69 73 74 65 6e 20 69 6e 74 65 | interface..Configure.listen.inte |
34560 | 72 66 61 63 65 20 66 6f 72 20 6d 69 72 72 6f 72 69 6e 67 20 74 72 61 66 66 69 63 2e 00 43 6f 6e | rface.for.mirroring.traffic..Con |
34580 | 66 69 67 75 72 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 6c 69 73 | figure.local.IPv4.address.to.lis |
345a0 | 74 65 6e 20 66 6f 72 20 73 66 6c 6f 77 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 77 20 53 4e 4d | ten.for.sflow..Configure.new.SNM |
345c0 | 50 20 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 77 69 74 68 20 70 61 73 73 77 6f 72 | P.user.named."vyos".with.passwor |
345e0 | 64 20 22 76 79 6f 73 31 32 33 34 35 36 37 38 22 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d | d."vyos12345678".Configure.next- |
34600 | 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 60 3c 74 61 72 67 65 74 2d 61 64 64 | hop.`<address>`.and.`<target-add |
34620 | 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e | ress>`.for.an.IPv4.static.route. |
34640 | 20 53 70 65 63 69 66 79 20 74 68 65 20 74 61 72 67 65 74 20 49 50 76 34 20 61 64 64 72 65 73 73 | .Specify.the.target.IPv4.address |
34660 | 20 66 6f 72 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 | .for.health.checking..Configure. |
34680 | 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 | next-hop.`<address>`.for.an.IPv4 |
346a0 | 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 | .static.route..Multiple.static.r |
346c0 | 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 | outes.can.be.created..Configure. |
346e0 | 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 36 | next-hop.`<address>`.for.an.IPv6 |
34700 | 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 | .static.route..Multiple.static.r |
34720 | 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 | outes.can.be.created..Configure. |
34740 | 6f 6e 65 20 6f 66 20 74 68 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 79 73 74 65 6d 20 70 65 72 | one.of.the.predefined.system.per |
34760 | 66 6f 72 6d 61 6e 63 65 20 70 72 6f 66 69 6c 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 | formance.profiles..Configure.one |
34780 | 20 6f 72 20 6d 6f 72 65 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 74 68 65 20 67 69 76 65 6e | .or.more.attributes.to.the.given |
347a0 | 20 4e 54 50 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 72 20 6d 6f | .NTP.server..Configure.one.or.mo |
347c0 | 72 65 20 73 65 72 76 65 72 73 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 20 | re.servers.for.synchronisation.. |
347e0 | 53 65 72 76 65 72 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 | Server.name.can.be.either.an.IP. |
34800 | 61 64 64 72 65 73 73 20 6f 72 20 3a 61 62 62 72 3a 60 46 51 44 4e 20 28 46 75 6c 6c 79 20 51 75 | address.or.:abbr:`FQDN.(Fully.Qu |
34820 | 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 29 60 2e 00 43 6f 6e 66 69 67 75 72 65 | alified.Domain.Name)`..Configure |
34840 | 20 6f 70 74 69 6f 6e 61 6c 20 54 54 4c 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 20 67 69 76 65 6e | .optional.TTL.value.on.the.given |
34860 | 20 72 65 73 6f 75 72 63 65 20 72 65 63 6f 72 64 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 | .resource.record..This.defaults. |
34880 | 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 68 79 73 69 63 | to.600.seconds..Configure.physic |
348a0 | 61 6c 20 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 2e 00 43 6f 6e | al.interface.duplex.setting..Con |
348c0 | 66 69 67 75 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 | figure.physical.interface.speed. |
348e0 | 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e | setting..Configure.port.mirrorin |
34900 | 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 | g.for.`interface`.inbound.traffi |
34920 | 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d 6f 6e 69 74 | c.and.copy.the.traffic.to.`monit |
34940 | 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 | or-interface`.Configure.port.mir |
34960 | 72 6f 72 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 61 63 65 60 20 6f 75 74 62 6f 75 6e 64 20 | roring.for.`interface`.outbound. |
34980 | 74 72 61 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 74 6f 20 | traffic.and.copy.the.traffic.to. |
349a0 | 60 6d 6f 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 20 70 6f | `monitor-interface`.Configure.po |
349c0 | 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 | rt.number.of.remote.VXLAN.endpoi |
349e0 | 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 74 6f 20 62 65 20 | nt..Configure.port.number.to.be. |
34a00 | 75 73 65 64 20 66 6f 72 20 73 66 6c 6f 77 20 63 6f 6e 65 63 74 69 6f 6e 2e 20 44 65 66 61 75 6c | used.for.sflow.conection..Defaul |
34a20 | 74 20 70 6f 72 74 20 69 73 20 36 33 34 33 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 74 6f 63 | t.port.is.6343..Configure.protoc |
34a40 | 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 74 6f 20 72 65 6d | ol.used.for.communication.to.rem |
34a60 | 6f 74 65 20 73 79 73 6c 6f 67 20 68 6f 73 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 65 69 74 | ote.syslog.host..This.can.be.eit |
34a80 | 68 65 72 20 55 44 50 20 6f 72 20 54 43 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 78 79 20 | her.UDP.or.TCP..Configure.proxy. |
34aa0 | 70 6f 72 74 20 69 66 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6c 69 73 74 65 6e 20 74 6f 20 74 68 | port.if.it.does.not.listen.to.th |
34ac0 | 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 38 30 2e 00 43 6f 6e 66 69 67 75 72 65 20 72 65 71 | e.default.port.80..Configure.req |
34ae0 | 75 65 73 74 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 74 6f 20 75 | uests.to.the.backend.server.to.u |
34b00 | 73 65 20 53 53 4c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 63 61 | se.SSL.encryption.and.authentica |
34b20 | 74 65 20 62 61 63 6b 65 6e 64 20 61 67 61 69 6e 73 74 20 3c 63 61 2d 63 65 72 74 69 66 69 63 61 | te.backend.against.<ca-certifica |
34b40 | 74 65 3e 00 43 6f 6e 66 69 67 75 72 65 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 62 61 | te>.Configure.requests.to.the.ba |
34b60 | 63 6b 65 6e 64 20 73 65 72 76 65 72 20 74 6f 20 75 73 65 20 53 53 4c 20 65 6e 63 72 79 70 74 69 | ckend.server.to.use.SSL.encrypti |
34b80 | 6f 6e 20 77 69 74 68 6f 75 74 20 76 61 6c 69 64 61 74 69 6e 67 20 73 65 72 76 65 72 20 63 65 72 | on.without.validating.server.cer |
34ba0 | 74 69 66 69 63 61 74 65 00 43 6f 6e 66 69 67 75 72 65 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 49 | tificate.Configure.sFlow.agent.I |
34bc0 | 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 00 43 6f 6e 66 69 67 75 72 65 20 73 63 | Pv4.or.IPv6.address.Configure.sc |
34be0 | 68 65 64 75 6c 65 20 63 6f 75 6e 74 65 72 2d 70 6f 6c 6c 69 6e 67 20 69 6e 20 73 65 63 6f 6e 64 | hedule.counter-polling.in.second |
34c00 | 73 20 28 64 65 66 61 75 6c 74 3a 20 33 30 29 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 | s.(default:.30).Configure.servic |
34c20 | 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 48 54 54 50 00 43 6f 6e 66 | e.`<name>`.mode.TCP.or.HTTP.Conf |
34c40 | 69 67 75 72 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 75 73 65 20 74 68 | igure.service.`<name>`.to.use.th |
34c60 | 65 20 62 61 63 6b 65 6e 64 20 3c 6e 61 6d 65 3e 00 43 6f 6e 66 69 67 75 72 65 20 73 65 73 73 69 | e.backend.<name>.Configure.sessi |
34c80 | 6f 6e 20 74 69 6d 65 6f 75 74 20 61 66 74 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 20 | on.timeout.after.which.the.user. |
34ca0 | 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 6f 75 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 73 79 | will.be.logged.out..Configure.sy |
34cc0 | 73 74 65 6d 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2e 20 41 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 | stem.domain.name..A.domain.name. |
34ce0 | 6d 75 73 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 | must.start.and.end.with.a.letter |
34d00 | 20 6f 72 20 64 69 67 69 74 2c 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 | .or.digit,.and.have.as.interior. |
34d20 | 63 68 61 72 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c | characters.only.letters,.digits, |
34d40 | 20 6f 72 20 61 20 68 79 70 68 65 6e 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 41 2d 73 69 | .or.a.hyphen..Configure.the.A-si |
34d60 | 64 65 20 72 6f 75 74 65 72 20 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 | de.router.for.NPTv6.using.the.pr |
34d80 | 65 66 69 78 65 73 20 61 62 6f 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 42 2d 73 69 | efixes.above:.Configure.the.B-si |
34da0 | 64 65 20 72 6f 75 74 65 72 20 66 6f 72 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 | de.router.for.NPTv6.using.the.pr |
34dc0 | 65 66 69 78 65 73 20 61 62 6f 76 65 3a 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 44 4e 53 20 | efixes.above:.Configure.the.DNS. |
34de0 | 60 3c 73 65 72 76 65 72 3e 60 20 49 50 2f 46 51 44 4e 20 75 73 65 64 20 77 68 65 6e 20 75 70 64 | `<server>`.IP/FQDN.used.when.upd |
34e00 | 61 74 69 6e 67 20 74 68 69 73 20 64 79 6e 61 6d 69 63 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 43 | ating.this.dynamic.assignment..C |
34e20 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6c 69 73 74 65 6e | onfigure.the.IPv4.or.IPv6.listen |
34e40 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 54 46 54 50 20 73 65 72 76 65 72 2e 20 4d 75 6c | .address.of.the.TFTP.server..Mul |
34e60 | 74 69 70 6c 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 61 | tiple.IPv4.and.IPv6.addresses.ca |
34e80 | 6e 20 62 65 20 67 69 76 65 6e 2e 20 54 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6f 6e 65 20 54 46 | n.be.given..There.will.be.one.TF |
34ea0 | 54 50 20 73 65 72 76 65 72 20 69 6e 73 74 61 6e 63 65 73 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e | TP.server.instances.listening.on |
34ec0 | 20 65 61 63 68 20 49 50 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | .each.IP.address..Configure.the. |
34ee0 | 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c | connection.tracking.protocol.hel |
34f00 | 70 65 72 20 6d 6f 64 75 6c 65 73 2e 20 41 6c 6c 20 6d 6f 64 75 6c 65 73 20 61 72 65 20 65 6e 61 | per.modules..All.modules.are.ena |
34f20 | 62 6c 65 20 62 79 20 64 65 66 61 75 6c 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 | ble.by.default..Configure.the.di |
34f40 | 73 63 72 65 74 65 20 70 6f 72 74 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 52 41 44 49 | screte.port.under.which.the.RADI |
34f60 | 55 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 | US.server.can.be.reached..Config |
34f80 | 75 72 65 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 74 20 75 6e 64 65 72 20 77 68 69 63 | ure.the.discrete.port.under.whic |
34fa0 | 68 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 72 65 61 63 68 | h.the.TACACS.server.can.be.reach |
34fc0 | 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 | ed..Configure.the.load-balancing |
34fe0 | 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 66 6f 72 20 48 54 54 50 2e | .reverse-proxy.service.for.HTTP. |
35000 | 00 43 6f 6e 66 69 67 75 72 65 20 74 72 61 66 66 69 63 20 63 61 70 74 75 72 65 20 6d 6f 64 65 2e | .Configure.traffic.capture.mode. |
35020 | 00 43 6f 6e 66 69 67 75 72 65 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 3a 61 62 62 72 3a 60 4d | .Configure.user.defined.:abbr:`M |
35040 | 41 43 20 28 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 65 | AC.(Media.Access.Control)`.addre |
35060 | 73 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e 66 69 | ss.on.given.`<interface>`..Confi |
35080 | 67 75 72 65 20 77 61 74 65 72 6d 61 72 6b 20 77 61 72 6e 69 6e 67 20 67 65 6e 65 72 61 74 69 6f | gure.watermark.warning.generatio |
350a0 | 6e 20 66 6f 72 20 61 6e 20 49 47 4d 50 20 67 72 6f 75 70 20 6c 69 6d 69 74 2e 20 47 65 6e 65 72 | n.for.an.IGMP.group.limit..Gener |
350c0 | 61 74 65 73 20 77 61 72 6e 69 6e 67 20 6f 6e 63 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 | ates.warning.once.the.configured |
350e0 | 20 67 72 6f 75 70 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 20 77 68 69 6c 65 20 61 64 | .group.limit.is.reached.while.ad |
35100 | 64 69 6e 67 20 6e 65 77 20 67 72 6f 75 70 73 2e 00 43 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 | ding.new.groups..Configured.rout |
35120 | 69 6e 67 20 74 61 62 6c 65 20 60 3c 69 64 3e 60 20 69 73 20 75 73 65 64 20 62 79 20 56 52 46 20 | ing.table.`<id>`.is.used.by.VRF. |
35140 | 60 3c 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 64 20 76 61 6c 75 65 00 43 6f 6e 66 69 | `<name>`..Configured.value.Confi |
35160 | 67 75 72 65 73 20 74 68 65 20 42 47 50 20 73 70 65 61 6b 65 72 20 73 6f 20 74 68 61 74 20 69 74 | gures.the.BGP.speaker.so.that.it |
35180 | 20 6f 6e 6c 79 20 61 63 63 65 70 74 73 20 69 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e | .only.accepts.inbound.connection |
351a0 | 73 20 66 72 6f 6d 2c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 69 74 69 61 74 65 20 6f 75 | s.from,.but.does.not.initiate.ou |
351c0 | 74 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 70 65 65 72 20 6f | tbound.connections.to.the.peer.o |
351e0 | 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 49 50 6f 45 20 53 | r.peer.group..Configuring.IPoE.S |
35200 | 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 49 50 73 65 63 00 43 6f 6e 66 69 67 75 72 | erver.Configuring.IPsec.Configur |
35220 | 69 6e 67 20 4c 32 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 4e 53 20 | ing.L2TP.Server.Configuring.LNS. |
35240 | 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 53 65 72 76 65 72 29 00 43 6f 6e 66 69 67 75 72 69 6e | (L2TP.Network.Server).Configurin |
35260 | 67 20 50 50 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 50 50 54 50 20 | g.PPPoE.Server.Configuring.PPTP. |
35280 | 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 52 41 44 49 55 53 20 61 63 63 6f 75 6e | Server.Configuring.RADIUS.accoun |
352a0 | 74 69 6e 67 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 | ting.Configuring.RADIUS.authenti |
352c0 | 63 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 54 50 20 53 65 72 76 65 72 00 43 | cation.Configuring.SSTP.Server.C |
352e0 | 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 54 50 20 63 6c 69 65 6e 74 00 43 6f 6e 66 69 67 75 72 69 | onfiguring.SSTP.client.Configuri |
35300 | 6e 67 20 56 79 4f 53 20 74 6f 20 61 63 74 20 61 73 20 79 6f 75 72 20 49 50 53 65 63 20 61 63 63 | ng.VyOS.to.act.as.your.IPSec.acc |
35320 | 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 73 20 6f 6e 65 20 74 68 69 6e 67 2c 20 62 | ess.concentrator.is.one.thing,.b |
35340 | 75 74 20 79 6f 75 20 70 72 6f 62 61 62 6c 79 20 6e 65 65 64 20 74 6f 20 73 65 74 75 70 20 79 6f | ut.you.probably.need.to.setup.yo |
35360 | 75 72 20 63 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 | ur.client.connecting.to.the.serv |
35380 | 65 72 20 73 6f 20 74 68 65 79 20 63 61 6e 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 49 50 53 65 63 | er.so.they.can.talk.to.the.IPSec |
353a0 | 20 67 61 74 65 77 61 79 2e 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 6c 69 73 74 65 6e 2d 61 | .gateway..Configuring.a.listen-a |
353c0 | 64 64 72 65 73 73 20 69 73 20 65 73 73 65 6e 74 69 61 6c 20 66 6f 72 20 74 68 65 20 73 65 72 76 | ddress.is.essential.for.the.serv |
353e0 | 69 63 65 20 74 6f 20 77 6f 72 6b 2e 00 43 6f 6e 6e 65 63 74 2f 44 69 73 63 6f 6e 6e 65 63 74 00 | ice.to.work..Connect/Disconnect. |
35400 | 43 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 6e 74 20 73 68 6f 75 6c 64 20 75 73 65 20 60 3c 61 64 | Connected.client.should.use.`<ad |
35420 | 64 72 65 73 73 3e 60 20 61 73 20 74 68 65 69 72 20 44 4e 53 20 73 65 72 76 65 72 2e 20 54 68 69 | dress>`.as.their.DNS.server..Thi |
35440 | 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 65 70 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 | s.command.accepts.both.IPv4.and. |
35460 | 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 55 70 20 74 6f 20 74 77 6f 20 6e 61 6d 65 73 65 | IPv6.addresses..Up.to.two.namese |
35480 | 72 76 65 72 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 49 50 76 34 | rvers.can.be.configured.for.IPv4 |
354a0 | 2c 20 75 70 20 74 6f 20 74 68 72 65 65 20 66 6f 72 20 49 50 76 36 2e 00 43 6f 6e 6e 65 63 74 69 | ,.up.to.three.for.IPv6..Connecti |
354c0 | 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 | ons.to.the.RPKI.caching.server.c |
354e0 | 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 48 54 | an.not.only.be.established.by.HT |
35500 | 54 50 2f 54 4c 53 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 | TP/TLS.but.you.can.also.rely.on. |
35520 | 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 | a.secure.SSH.session.to.the.serv |
35540 | 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 20 79 6f 75 20 66 69 72 73 74 20 6e 65 65 64 | er..To.enable.SSH.you.first.need |
35560 | 20 74 6f 20 63 72 65 61 74 65 20 79 6f 75 72 73 65 6c 73 20 61 6e 20 53 53 48 20 63 6c 69 65 6e | .to.create.yoursels.an.SSH.clien |
35580 | 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 | t.keypair.using.``generate.ssh.c |
355a0 | 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 | lient-key./config/auth/id_rsa_rp |
355c0 | 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 | ki``..Once.your.key.is.created.y |
355e0 | 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e | ou.can.setup.the.connection..Con |
35600 | 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 | nections.to.the.RPKI.caching.ser |
35620 | 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 | ver.can.not.only.be.established. |
35640 | 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c | by.HTTP/TLS.but.you.can.also.rel |
35660 | 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 | y.on.a.secure.SSH.session.to.the |
35680 | 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 2c 20 66 69 72 73 74 20 79 6f | .server..To.enable.SSH,.first.yo |
356a0 | 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b | u.need.to.create.an.SSH.client.k |
356c0 | 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 | eypair.using.``generate.ssh.clie |
356e0 | 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 | nt-key./config/auth/id_rsa_rpki` |
35700 | 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 | `..Once.your.key.is.created.you. |
35720 | 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 65 63 | can.setup.the.connection..Connec |
35740 | 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 | tions.to.the.RPKI.caching.server |
35760 | 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 | .can.not.only.be.established.by. |
35780 | 54 43 50 20 75 73 69 6e 67 20 74 68 65 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c 20 62 75 74 20 79 | TCP.using.the.RTR.protocol.but.y |
357a0 | 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 | ou.can.also.rely.on.a.secure.SSH |
357c0 | 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 70 72 6f | .session.to.the.server..This.pro |
357e0 | 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 20 69 6e 74 65 67 72 69 74 79 20 61 6e 64 20 63 6f | vides.transport.integrity.and.co |
35800 | 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 61 6e 64 20 69 74 20 69 73 20 61 20 67 6f 6f 64 20 69 | nfidentiality.and.it.is.a.good.i |
35820 | 64 65 61 20 69 66 20 79 6f 75 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 73 6f 66 74 77 61 72 65 20 | dea.if.your.validation.software. |
35840 | 73 75 70 70 6f 72 74 73 20 69 74 2e 20 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 2c 20 66 69 72 | supports.it...To.enable.SSH,.fir |
35860 | 73 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 6e 20 53 53 48 20 63 6c 69 | st.you.need.to.create.an.SSH.cli |
35880 | 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 | ent.keypair.using.``generate.ssh |
358a0 | 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f | .client-key./config/auth/id_rsa_ |
358c0 | 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 | rpki``..Once.your.key.is.created |
358e0 | 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 | .you.can.setup.the.connection..C |
35900 | 6f 6e 6e 74 72 61 63 6b 00 43 6f 6e 6e 74 72 61 63 6b 20 53 79 6e 63 00 43 6f 6e 6e 74 72 61 63 | onntrack.Conntrack.Sync.Conntrac |
35920 | 6b 20 53 79 6e 63 20 45 78 61 6d 70 6c 65 00 43 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 20 | k.Sync.Example.Conntrack.ignore. |
35940 | 72 75 6c 65 73 00 43 6f 6e 6e 74 72 61 63 6b 20 6c 6f 67 00 43 6f 6e 73 6f 6c 65 00 43 6f 6e 73 | rules.Conntrack.log.Console.Cons |
35960 | 6f 6c 65 20 53 65 72 76 65 72 00 43 6f 6e 73 74 72 61 69 6e 20 74 68 65 20 6d 65 6d 6f 72 79 20 | ole.Server.Constrain.the.memory. |
35980 | 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 43 6f 6e 74 | available.to.the.container..Cont |
359a0 | 61 69 6e 65 72 00 43 6f 6e 74 61 69 6e 65 72 20 4e 65 74 77 6f 72 6b 73 00 43 6f 6e 74 61 69 6e | ainer.Container.Networks.Contain |
359c0 | 65 72 20 52 65 67 69 73 74 72 79 00 43 6f 6e 74 72 61 63 6b 20 54 69 6d 65 6f 75 74 73 00 43 6f | er.Registry.Contrack.Timeouts.Co |
359e0 | 6e 76 65 72 74 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 | nvert.the.address.prefix.of.a.si |
35a00 | 6e 67 6c 65 20 60 66 63 30 30 3a 3a 2f 36 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 | ngle.`fc00::/64`.network.to.`fc0 |
35a20 | 31 3a 3a 2f 36 34 60 00 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 65 66 | 1::/64`.Convert.the.address.pref |
35a40 | 69 78 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 60 66 63 30 31 3a 3a 2f 36 34 60 20 6e 65 74 77 6f | ix.of.a.single.`fc01::/64`.netwo |
35a60 | 72 6b 20 74 6f 20 60 66 63 30 30 3a 3a 2f 36 34 60 00 43 6f 70 79 20 74 68 65 20 6b 65 79 2c 20 | rk.to.`fc00::/64`.Copy.the.key,. |
35a80 | 61 73 20 69 74 20 69 73 20 6e 6f 74 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c | as.it.is.not.stored.on.the.local |
35aa0 | 20 66 69 6c 65 73 79 73 74 65 6d 2e 20 42 65 63 61 75 73 65 20 69 74 20 69 73 20 61 20 73 79 6d | .filesystem..Because.it.is.a.sym |
35ac0 | 6d 65 74 72 69 63 20 6b 65 79 2c 20 6f 6e 6c 79 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 70 65 | metric.key,.only.you.and.your.pe |
35ae0 | 65 72 20 73 68 6f 75 6c 64 20 68 61 76 65 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 69 74 73 20 | er.should.have.knowledge.of.its. |
35b00 | 63 6f 6e 74 65 6e 74 2e 20 4d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 | content..Make.sure.you.distribut |
35b20 | 65 20 74 68 65 20 6b 65 79 20 69 6e 20 61 20 73 61 66 65 20 6d 61 6e 6e 65 72 2c 00 43 6f 75 6e | e.the.key.in.a.safe.manner,.Coun |
35b40 | 74 72 79 20 63 6f 64 65 20 28 49 53 4f 2f 49 45 43 20 33 31 36 36 2d 31 29 2e 20 55 73 65 64 20 | try.code.(ISO/IEC.3166-1)..Used. |
35b60 | 74 6f 20 73 65 74 20 72 65 67 75 6c 61 74 6f 72 79 20 64 6f 6d 61 69 6e 2e 20 53 65 74 20 61 73 | to.set.regulatory.domain..Set.as |
35b80 | 20 6e 65 65 64 65 64 20 74 6f 20 69 6e 64 69 63 61 74 65 20 63 6f 75 6e 74 72 79 20 69 6e 20 77 | .needed.to.indicate.country.in.w |
35ba0 | 68 69 63 68 20 64 65 76 69 63 65 20 69 73 20 6f 70 65 72 61 74 69 6e 67 2e 20 54 68 69 73 20 63 | hich.device.is.operating..This.c |
35bc0 | 61 6e 20 6c 69 6d 69 74 20 61 76 61 69 6c 61 62 6c 65 20 63 68 61 6e 6e 65 6c 73 20 61 6e 64 20 | an.limit.available.channels.and. |
35be0 | 74 72 61 6e 73 6d 69 74 20 70 6f 77 65 72 2e 00 43 72 65 61 74 20 63 6f 6d 6d 75 6e 69 74 79 2d | transmit.power..Creat.community- |
35c00 | 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c | list.policy.identified.by.name.< |
35c20 | 74 65 78 74 3e 2e 00 43 72 65 61 74 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 | text>..Creat.extcommunity-list.p |
35c40 | 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e | olicy.identified.by.name.<text>. |
35c60 | 00 43 72 65 61 74 65 20 44 48 43 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 68 20 | .Create.DHCP.address.range.with. |
35c80 | 61 20 72 61 6e 67 65 20 69 64 20 6f 66 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 65 73 | a.range.id.of.`<n>`..DHCP.leases |
35ca0 | 20 61 72 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 20 70 | .are.taken.from.this.pool..The.p |
35cc0 | 6f 6f 6c 20 73 74 61 72 74 73 20 61 74 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e | ool.starts.at.address.`<address> |
35ce0 | 60 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 | `..Create.DHCP.address.range.wit |
35d00 | 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 | h.a.range.id.of.`<n>`..DHCP.leas |
35d20 | 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 | es.are.taken.from.this.pool..The |
35d40 | 20 70 6f 6f 6c 20 73 74 6f 70 73 20 77 69 74 68 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 | .pool.stops.with.address.`<addre |
35d60 | 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 4e 53 20 72 65 63 6f 72 64 20 70 65 72 20 63 6c 69 65 | ss>`..Create.DNS.record.per.clie |
35d80 | 6e 74 20 6c 65 61 73 65 2c 20 62 79 20 61 64 64 69 6e 67 20 63 6c 69 65 6e 74 73 20 74 6f 20 2f | nt.lease,.by.adding.clients.to./ |
35da0 | 65 74 63 2f 68 6f 73 74 73 20 66 69 6c 65 2e 20 45 6e 74 72 79 20 77 69 6c 6c 20 68 61 76 65 20 | etc/hosts.file..Entry.will.have. |
35dc0 | 66 6f 72 6d 61 74 3a 20 60 3c 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e 5f 3c | format:.`<shared-network-name>_< |
35de0 | 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 43 72 65 61 74 65 20 | hostname>.<domain-name>`.Create. |
35e00 | 60 3c 75 73 65 72 3e 60 20 66 6f 72 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | `<user>`.for.local.authenticatio |
35e20 | 6e 20 6f 6e 20 74 68 69 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 75 73 65 72 73 20 70 61 73 73 | n.on.this.system..The.users.pass |
35e40 | 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 73 65 74 20 74 6f 20 60 3c 70 61 73 73 3e 60 2e 00 43 72 | word.will.be.set.to.`<pass>`..Cr |
35e60 | 65 61 74 65 20 60 60 31 37 32 2e 31 38 2e 32 30 31 2e 30 2f 32 34 60 60 20 61 73 20 61 20 73 75 | eate.``172.18.201.0/24``.as.a.su |
35e80 | 62 6e 65 74 20 77 69 74 68 69 6e 20 60 60 4e 45 54 31 60 60 20 61 6e 64 20 70 61 73 73 20 61 64 | bnet.within.``NET1``.and.pass.ad |
35ea0 | 64 72 65 73 73 20 6f 66 20 55 6e 69 66 69 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 61 74 20 60 60 31 | dress.of.Unifi.controller.at.``1 |
35ec0 | 37 32 2e 31 36 2e 31 30 30 2e 31 60 60 20 74 6f 20 63 6c 69 65 6e 74 73 20 6f 66 20 74 68 61 74 | 72.16.100.1``.to.clients.of.that |
35ee0 | 20 73 75 62 6e 65 74 2e 00 43 72 65 61 74 65 20 61 20 62 61 73 69 63 20 62 72 69 64 67 65 00 43 | .subnet..Create.a.basic.bridge.C |
35f00 | 72 65 61 74 65 20 61 20 66 69 6c 65 20 6e 61 6d 65 64 20 60 60 56 79 4f 53 2d 31 2e 33 2e 36 2e | reate.a.file.named.``VyOS-1.3.6. |
35f20 | 31 2e 34 2e 31 2e 34 34 36 34 31 2e 43 6f 6e 66 69 67 4d 67 6d 74 2d 43 6f 6d 6d 61 6e 64 73 60 | 1.4.1.44641.ConfigMgmt-Commands` |
35f40 | 60 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 74 65 6e 74 3a 00 43 | `.using.the.following.content:.C |
35f60 | 72 65 61 74 65 20 61 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 2c 20 69 74 20 | reate.a.load.balancing.rule,.it. |
35f80 | 63 61 6e 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 39 39 | can.be.a.number.between.1.and.99 |
35fa0 | 39 39 3a 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 | 99:.Create.a.new.:abbr:`CA.(Cert |
35fc0 | 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 6f 75 74 70 75 74 20 74 | ificate.Authority)`.and.output.t |
35fe0 | 68 65 20 43 41 73 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f 6e | he.CAs.public.and.private.key.on |
36000 | 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 44 48 43 50 20 | .the.console..Create.a.new.DHCP. |
36020 | 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 63 72 69 70 74 69 | static.mapping.named.`<descripti |
36040 | 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 68 6f 73 74 | on>`.which.is.valid.for.the.host |
36060 | 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 69 74 73 20 44 48 43 50 20 75 6e 69 71 75 65 20 69 | .identified.by.its.DHCP.unique.i |
36080 | 64 65 6e 74 69 66 69 65 72 20 28 44 55 49 44 29 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 2e | dentifier.(DUID).`<identifier>`. |
360a0 | 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e | .Create.a.new.DHCP.static.mappin |
360c0 | 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 | g.named.`<description>`.which.is |
360e0 | 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 | .valid.for.the.host.identified.b |
36100 | 79 20 69 74 73 20 4d 41 43 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 20 | y.its.MAC.`<address>`..Create.a. |
36120 | 6e 65 77 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 | new.VLAN.interface.on.interface. |
36140 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 75 73 69 6e 67 20 74 68 65 20 56 4c 41 4e 20 6e 75 6d | `<interface>`.using.the.VLAN.num |
36160 | 62 65 72 20 70 72 6f 76 69 64 65 64 20 76 69 61 20 60 3c 76 6c 61 6e 2d 69 64 3e 60 2e 00 43 72 | ber.provided.via.`<vlan-id>`..Cr |
36180 | 65 61 74 65 20 61 20 6e 65 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 61 69 | eate.a.new.public/private.keypai |
361a0 | 72 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 6e 20 | r.and.output.the.certificate.on. |
361c0 | 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 62 6c 69 63 | the.console..Create.a.new.public |
361e0 | 2f 70 72 69 76 61 74 65 20 6b 65 79 70 61 69 72 20 77 68 69 63 68 20 69 73 20 73 69 67 6e 65 64 | /private.keypair.which.is.signed |
36200 | 20 62 79 20 74 68 65 20 43 41 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 2d 6e 61 6d | .by.the.CA.referenced.by.`ca-nam |
36220 | 65 60 2e 20 54 68 65 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 74 68 | e`..The.signed.certificate.is.th |
36240 | 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 | en.output.to.the.console..Create |
36260 | 20 61 20 6e 65 77 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 | .a.new.self-signed.certificate.. |
36280 | 54 68 65 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 69 73 20 74 68 65 6e 20 73 68 6f 77 6e | The.public/private.is.then.shown |
362a0 | 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 | .on.the.console..Create.a.new.su |
362c0 | 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 | bordinate.:abbr:`CA.(Certificate |
362e0 | 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 | .Authority)`.and.sign.it.using.t |
36300 | 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 | he.private.key.referenced.by.`ca |
36320 | 2d 6e 61 6d 65 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 | -name`..Create.a.new.subordinate |
36340 | 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 | .:abbr:`CA.(Certificate.Authorit |
36360 | 79 29 60 20 61 6e 64 20 73 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 | y)`.and.sign.it.using.the.privat |
36380 | 65 20 6b 65 79 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 6e 61 6d 65 60 2e 00 43 72 65 61 | e.key.referenced.by.`name`..Crea |
363a0 | 74 65 20 61 20 70 65 65 72 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 79 6f 75 20 | te.a.peer.as.you.would.when.you. |
363c0 | 73 70 65 63 69 66 79 20 61 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 69 66 20 74 | specify.an.ASN,.except.that.if.t |
363e0 | 68 65 20 70 65 65 72 73 20 41 53 4e 20 69 73 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 6d | he.peers.ASN.is.different.than.m |
36400 | 69 6e 65 20 61 73 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 63 | ine.as.specified.under.the.:cfgc |
36420 | 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e 64 | md:`protocols.bgp.<asn>`.command |
36440 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e 00 | .the.connection.will.be.denied.. |
36460 | 43 72 65 61 74 65 20 61 20 70 65 65 72 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 | Create.a.peer.as.you.would.when. |
36480 | 79 6f 75 20 73 70 65 63 69 66 79 20 61 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 | you.specify.an.ASN,.except.that. |
364a0 | 69 66 20 74 68 65 20 70 65 65 72 73 20 41 53 4e 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 | if.the.peers.ASN.is.the.same.as. |
364c0 | 6d 69 6e 65 20 61 73 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 | mine.as.specified.under.the.:cfg |
364e0 | 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e | cmd:`protocols.bgp.<asn>`.comman |
36500 | 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e | d.the.connection.will.be.denied. |
36520 | 00 43 72 65 61 74 65 20 61 20 73 74 61 74 69 63 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e | .Create.a.static.hostname.mappin |
36540 | 67 20 77 68 69 63 68 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 65 20 74 68 65 20 | g.which.will.always.resolve.the. |
36560 | 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 74 6f 20 49 50 20 61 64 64 72 65 73 73 20 | name.`<hostname>`.to.IP.address. |
36580 | 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 73 2d 70 61 74 68 2d 70 6f 6c 69 | `<address>`..Create.as-path-poli |
365a0 | 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 | cy.identified.by.name.<text>..Cr |
365c0 | 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 | eate.firewall.rule.in.forward.ch |
365e0 | 61 69 6e 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 77 68 69 63 68 20 66 6c 6f 77 74 62 61 6c 65 20 | ain,.and.define.which.flowtbale. |
36600 | 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 | should.be.used..Only.applicable. |
36620 | 69 66 20 61 63 74 69 6f 6e 20 69 73 20 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 | if.action.is.``offload``..Create |
36640 | 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 61 69 6e 2c | .firewall.rule.in.forward.chain, |
36660 | 20 61 6e 64 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 | .and.set.action.to.``offload``.. |
36680 | 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 3a 20 63 72 65 61 74 65 20 61 20 66 | Create.firewall.rule:.create.a.f |
366a0 | 69 72 65 77 61 6c 6c 20 72 75 6c 65 2c 20 73 65 74 74 69 6e 67 20 61 63 74 69 6f 6e 20 74 6f 20 | irewall.rule,.setting.action.to. |
366c0 | 60 60 6f 66 66 6c 6f 61 64 60 60 20 61 6e 64 20 75 73 69 6e 67 20 64 65 73 69 72 65 64 20 66 6c | ``offload``.and.using.desired.fl |
366e0 | 6f 77 74 61 62 6c 65 20 66 6f 72 20 60 60 6f 66 66 6c 6f 61 64 2d 74 61 72 67 65 74 60 60 2e 00 | owtable.for.``offload-target``.. |
36700 | 43 72 65 61 74 65 20 66 6c 6f 77 74 61 62 6c 65 3a 20 63 72 65 61 74 65 20 66 6c 6f 77 74 61 62 | Create.flowtable:.create.flowtab |
36720 | 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | le,.which.includes.the.interface |
36740 | 73 20 74 68 61 74 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 | s.that.are.going.to.be.used.by.t |
36760 | 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e 00 43 72 65 61 74 65 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 | he.flowtable..Create.large-commu |
36780 | 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e | nity-list.policy.identified.by.n |
367a0 | 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 6e 61 6d 65 64 20 60 3c 61 6c 69 61 73 | ame.<text>..Create.named.`<alias |
367c0 | 3e 60 20 66 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 73 74 61 74 69 63 20 6d 61 70 | >`.for.the.configured.static.map |
367e0 | 70 69 6e 67 20 66 6f 72 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 2e 20 54 68 75 73 20 74 68 65 20 | ping.for.`<hostname>`..Thus.the. |
36800 | 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 3a 63 66 67 63 6d 64 3a 60 73 | address.configured.as.:cfgcmd:`s |
36820 | 65 74 20 73 79 73 74 65 6d 20 73 74 61 74 69 63 2d 68 6f 73 74 2d 6d 61 70 70 69 6e 67 20 68 6f | et.system.static-host-mapping.ho |
36840 | 73 74 2d 6e 61 6d 65 20 3c 68 6f 73 74 6e 61 6d 65 3e 20 69 6e 65 74 20 3c 61 64 64 72 65 73 73 | st-name.<hostname>.inet.<address |
36860 | 3e 60 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 20 76 69 61 20 6d 75 6c 74 69 70 6c 65 20 6e | >`.can.be.reached.via.multiple.n |
36880 | 61 6d 65 73 2e 00 43 72 65 61 74 65 20 6e 65 77 20 3a 72 66 63 3a 60 32 31 33 36 60 20 44 4e 53 | ames..Create.new.:rfc:`2136`.DNS |
368a0 | 20 75 70 64 61 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c | .update.configuration.which.will |
368c0 | 20 75 70 64 61 74 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 | .update.the.IP.address.assigned. |
368e0 | 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 | to.`<interface>`.on.the.service. |
36900 | 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e | you.configured.under.`<service-n |
36920 | 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 20 6e 65 77 20 56 52 46 20 69 6e 73 74 61 6e 63 65 20 77 | ame>`..Create.new.VRF.instance.w |
36940 | 69 74 68 20 60 3c 6e 61 6d 65 3e 60 2e 20 54 68 65 20 6e 61 6d 65 20 69 73 20 75 73 65 64 20 77 | ith.`<name>`..The.name.is.used.w |
36960 | 68 65 6e 20 70 6c 61 63 69 6e 67 20 69 6e 64 69 76 69 64 75 61 6c 20 69 6e 74 65 72 66 61 63 65 | hen.placing.individual.interface |
36980 | 73 20 69 6e 74 6f 20 74 68 65 20 56 52 46 2e 00 43 72 65 61 74 65 20 6e 65 77 20 64 79 6e 61 6d | s.into.the.VRF..Create.new.dynam |
369a0 | 69 63 20 44 4e 53 20 75 70 64 61 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 | ic.DNS.update.configuration.whic |
369c0 | 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 | h.will.update.the.IP.address.ass |
369e0 | 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 | igned.to.`<interface>`.on.the.se |
36a00 | 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 65 72 | rvice.you.configured.under.`<ser |
36a20 | 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 20 6e 65 77 20 73 79 73 74 65 6d 20 75 | vice-name>`..Create.new.system.u |
36a40 | 73 65 72 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 20 60 3c 6e 61 6d 65 3e 60 20 61 6e 64 20 72 | ser.with.username.`<name>`.and.r |
36a60 | 65 61 6c 2d 6e 61 6d 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 73 74 72 69 6e 67 3e 60 | eal-name.specified.by.`<string>` |
36a80 | 2e 00 43 72 65 61 74 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 6c 69 73 | ..Create.service.`<name>`.to.lis |
36aa0 | 74 65 6e 20 6f 6e 20 3c 70 6f 72 74 3e 00 43 72 65 61 74 65 73 20 61 20 6e 61 6d 65 64 20 63 6f | ten.on.<port>.Creates.a.named.co |
36ac0 | 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 00 43 72 65 61 74 65 73 20 6c 6f 63 61 6c 20 49 50 | ntainer.network.Creates.local.IP |
36ae0 | 6f 45 20 75 73 65 72 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 3d 2a 2a 3c 69 6e 74 65 72 66 61 | oE.user.with.username=**<interfa |
36b00 | 63 65 3e 2a 2a 20 61 6e 64 20 70 61 73 73 77 6f 72 64 3d 2a 2a 3c 4d 41 43 3e 2a 2a 20 28 6d 61 | ce>**.and.password=**<MAC>**.(ma |
36b20 | 63 2d 61 64 64 72 65 73 73 29 00 43 72 65 61 74 65 73 20 73 74 61 74 69 63 20 70 65 65 72 20 6d | c-address).Creates.static.peer.m |
36b40 | 61 70 70 69 6e 67 20 6f 66 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 20 74 6f 20 3a 61 | apping.of.protocol-address.to.:a |
36b60 | 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c 74 69 70 6c | bbr:`NBMA.(Non-broadcast.multipl |
36b80 | 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 29 60 20 61 64 64 72 65 73 73 2e 00 43 72 65 61 | e-access.network)`.address..Crea |
36ba0 | 74 69 6e 67 20 61 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 76 65 72 79 20 | ting.a.bridge.interface.is.very. |
36bc0 | 73 69 6d 70 6c 65 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c | simple..In.this.example,.we.will |
36be0 | 20 68 61 76 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 66 6c 6f 77 20 74 61 62 6c 65 3a 00 43 72 | .have:.Creating.a.flow.table:.Cr |
36c00 | 65 61 74 69 6e 67 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 43 72 65 61 74 69 6e 67 | eating.a.traffic.policy.Creating |
36c20 | 20 72 75 6c 65 73 20 66 6f 72 20 75 73 69 6e 67 20 66 6c 6f 77 20 74 61 62 6c 65 73 3a 00 43 72 | .rules.for.using.flow.tables:.Cr |
36c40 | 65 64 65 6e 74 69 61 6c 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 68 65 72 65 20 61 6e | edentials.can.be.defined.here.an |
36c60 | 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 61 64 64 69 6e 67 20 | d.will.only.be.used.when.adding. |
36c80 | 61 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 2e | a.container.image.to.the.system. |
36ca0 | 00 43 72 69 74 69 63 61 6c 00 43 72 69 74 69 63 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 | .Critical.Critical.conditions.-. |
36cc0 | 65 2e 67 2e 20 68 61 72 64 20 64 72 69 76 65 20 65 72 72 6f 72 73 2e 00 43 72 79 73 74 61 6c 66 | e.g..hard.drive.errors..Crystalf |
36ce0 | 6f 6e 74 7a 20 43 46 41 2d 35 33 33 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 | ontz.CFA-533.Crystalfontz.CFA-63 |
36d00 | 31 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 33 00 43 72 79 73 74 61 6c 66 6f | 1.Crystalfontz.CFA-633.Crystalfo |
36d20 | 6e 74 7a 20 43 46 41 2d 36 33 35 00 43 75 72 20 48 6f 70 20 4c 69 6d 69 74 00 43 75 72 72 65 6e | ntz.CFA-635.Cur.Hop.Limit.Curren |
36d40 | 74 6c 79 20 64 6f 65 73 20 6e 6f 74 20 64 6f 20 6d 75 63 68 20 61 73 20 63 61 63 68 69 6e 67 20 | tly.does.not.do.much.as.caching. |
36d60 | 69 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2e 00 43 75 72 72 65 6e 74 6c 79 20 64 79 | is.not.implemented..Currently.dy |
36d80 | 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 66 6f 72 20 74 | namic.routing.is.supported.for.t |
36da0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 00 43 75 73 74 6f 6d 20 46 | he.following.protocols:.Custom.F |
36dc0 | 69 6c 65 00 43 75 73 74 6f 6d 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e | ile.Custom.bridge.firewall.chain |
36de0 | 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 20 60 60 73 | s.can.be.create.with.command.``s |
36e00 | 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e | et.firewall.bridge.name.<name>.. |
36e20 | 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f | ..``..In.order.to.use.such.custo |
36e40 | 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 61 63 74 69 6f 6e 20 6a 75 6d 70 | m.chain,.a.rule.with.action.jump |
36e60 | 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 74 61 72 67 65 74 20 73 68 6f 75 | ,.and.the.appropiate.target.shou |
36e80 | 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 | ld.be.defined.in.a.base.chain..C |
36ea0 | 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 | ustom.firewall.chains.can.be.cre |
36ec0 | 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 | ated,.with.commands.``set.firewa |
36ee0 | 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 5b 6e 61 6d 65 20 7c 20 69 70 76 36 2d 6e 61 | ll.[ipv4.|.ipv6].[name.|.ipv6-na |
36f00 | 6d 65 5d 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 | me].<name>....``..In.order.to.us |
36f20 | 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 | e.such.custom.chain,.a.rule.with |
36f40 | 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 | .**action.jump**,.and.the.approp |
36f60 | 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 | iate.**target**.should.be.define |
36f80 | 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 | d.in.a.base.chain..Custom.firewa |
36fa0 | 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 | ll.chains.can.be.created,.with.c |
36fc0 | 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6e 61 6d 65 | ommands.``set.firewall.ipv4.name |
36fe0 | 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 | .<name>....``..In.order.to.use.s |
37000 | 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a | uch.custom.chain,.a.rule.with.** |
37020 | 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 | action.jump**,.and.the.appropiat |
37040 | 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 | e.**target**.should.be.defined.i |
37060 | 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 | n.a.base.chain..Custom.firewall. |
37080 | 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d | chains.can.be.created,.with.comm |
370a0 | 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6e 61 6d 65 20 3c 6e | ands.``set.firewall.ipv6.name.<n |
370c0 | 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 | ame>....``..In.order.to.use.such |
370e0 | 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 | .custom.chain,.a.rule.with.**act |
37100 | 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a | ion.jump**,.and.the.appropiate.* |
37120 | 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 | *target**.should.be.defined.in.a |
37140 | 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 68 65 61 6c 74 68 2d 63 68 65 63 6b | .base.chain..Custom.health-check |
37160 | 20 73 63 72 69 70 74 20 61 6c 6c 6f 77 73 20 63 68 65 63 6b 69 6e 67 20 72 65 61 6c 2d 73 65 72 | .script.allows.checking.real-ser |
37180 | 76 65 72 20 61 76 61 69 6c 61 62 69 6c 69 74 79 00 43 75 73 74 6f 6d 69 7a 65 64 20 69 67 6e 6f | ver.availability.Customized.igno |
371a0 | 72 65 20 72 75 6c 65 73 2c 20 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 | re.rules,.based.on.a.packet.and. |
371c0 | 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 00 44 43 4f 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 | flow.selector..DCO.can.be.enable |
371e0 | 64 20 66 6f 72 20 62 6f 74 68 20 6e 65 77 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 74 75 6e 6e | d.for.both.new.and.existing.tunn |
37200 | 65 6c 73 2c 56 79 4f 53 20 61 64 64 73 20 61 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 65 61 63 68 20 | els,VyOS.adds.an.option.in.each. |
37220 | 74 75 6e 6e 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 65 72 65 20 77 65 20 63 61 | tunnel.configuration.where.we.ca |
37240 | 6e 20 65 6e 61 62 6c 65 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 20 2e 54 68 65 20 63 75 72 | n.enable.this.function...The.cur |
37260 | 72 65 6e 74 20 62 65 73 74 20 70 72 61 63 74 69 63 65 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 | rent.best.practice.is.to.create. |
37280 | 61 20 6e 65 77 20 74 75 6e 6e 65 6c 20 77 69 74 68 20 44 43 4f 20 74 6f 20 6d 69 6e 69 6d 69 7a | a.new.tunnel.with.DCO.to.minimiz |
372a0 | 65 20 74 68 65 20 63 68 61 6e 63 65 20 6f 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 65 78 | e.the.chance.of.problems.with.ex |
372c0 | 69 73 74 69 6e 67 20 63 6c 69 65 6e 74 73 2e 00 44 43 4f 20 73 75 70 70 6f 72 74 20 69 73 20 61 | isting.clients..DCO.support.is.a |
372e0 | 20 70 65 72 2d 74 75 6e 6e 65 6c 20 6f 70 74 69 6f 6e 20 61 6e 64 20 69 74 20 69 73 20 6e 6f 74 | .per-tunnel.option.and.it.is.not |
37300 | 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c | .automatically.enabled.by.defaul |
37320 | 74 20 66 6f 72 20 6e 65 77 20 6f 72 20 75 70 67 72 61 64 65 64 20 74 75 6e 6e 65 6c 73 2e 20 45 | t.for.new.or.upgraded.tunnels..E |
37340 | 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 6c 73 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 74 6f | xisting.tunnels.will.continue.to |
37360 | 20 66 75 6e 63 74 69 6f 6e 20 61 73 20 74 68 65 79 20 68 61 76 65 20 69 6e 20 74 68 65 20 70 61 | .function.as.they.have.in.the.pa |
37380 | 73 74 2e 00 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 00 44 48 20 47 72 6f 75 70 20 31 34 00 | st..DDoS.Protection.DH.Group.14. |
373a0 | 44 48 43 50 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 6d 75 73 74 20 62 65 20 63 | DHCP.High.Availability.must.be.c |
373c0 | 6f 6e 66 69 67 75 72 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 62 79 20 74 68 65 20 66 6f 6c 6c | onfigured.explicitly.by.the.foll |
373e0 | 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 73 20 6f 6e 20 62 6f 74 68 20 73 65 72 76 65 72 73 | owing.statements.on.both.servers |
37400 | 3a 00 44 48 43 50 20 52 65 6c 61 79 00 44 48 43 50 20 53 65 72 76 65 72 00 44 48 43 50 20 66 61 | :.DHCP.Relay.DHCP.Server.DHCP.fa |
37420 | 69 6c 6f 76 65 72 20 70 61 72 61 6d 65 74 65 72 73 00 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e | ilover.parameters.DHCP.lease.ran |
37440 | 67 65 00 44 48 43 50 20 72 61 6e 67 65 20 73 70 61 6e 73 20 66 72 6f 6d 20 60 31 39 32 2e 31 36 | ge.DHCP.range.spans.from.`192.16 |
37460 | 38 2e 31 38 39 2e 31 30 60 20 2d 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 30 60 00 44 48 | 8.189.10`.-.`192.168.189.250`.DH |
37480 | 43 50 20 72 65 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 | CP.relay.example.DHCP.server.is. |
374a0 | 6c 6f 63 61 74 65 64 20 61 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 31 30 2e 30 2e 31 2e 34 | located.at.IPv4.address.10.0.1.4 |
374c0 | 20 6f 6e 20 60 60 65 74 68 32 60 60 2e 00 44 48 43 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f | .on.``eth2``..DHCPv6.address.poo |
374e0 | 6c 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 20 73 79 | ls.must.be.configured.for.the.sy |
37500 | 73 74 65 6d 20 74 6f 20 61 63 74 20 61 73 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2e 20 | stem.to.act.as.a.DHCPv6.server.. |
37520 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 64 65 73 63 72 69 62 65 73 20 | The.following.example.describes. |
37540 | 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 6f 2e 00 44 48 43 50 76 36 20 72 65 6c 61 79 20 | a.common.scenario..DHCPv6.relay. |
37560 | 65 78 61 6d 70 6c 65 00 44 48 43 50 76 36 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 65 63 65 | example.DHCPv6.requests.are.rece |
37580 | 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 6f 6e 20 60 6c 69 73 74 65 6e 69 6e 67 | ived.by.the.router.on.`listening |
375a0 | 20 69 6e 74 65 72 66 61 63 65 60 20 60 60 65 74 68 31 60 60 00 44 4d 56 50 4e 00 44 4d 56 50 4e | .interface`.``eth1``.DMVPN.DMVPN |
375c0 | 20 65 78 61 6d 70 6c 65 20 6e 65 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6e 65 74 77 6f 72 6b 00 44 | .example.network.DMVPN.network.D |
375e0 | 4d 56 50 4e 20 6f 6e 6c 79 20 61 75 74 6f 6d 61 74 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 | MVPN.only.automates.the.tunnel.e |
37600 | 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 20 61 6e 64 20 73 65 74 75 70 2e 20 41 20 63 | ndpoint.discovery.and.setup..A.c |
37620 | 6f 6d 70 6c 65 74 65 20 73 6f 6c 75 74 69 6f 6e 20 61 6c 73 6f 20 69 6e 63 6f 72 70 6f 72 61 74 | omplete.solution.also.incorporat |
37640 | 65 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | es.the.use.of.a.routing.protocol |
37660 | 2e 20 42 47 50 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 77 65 6c 6c 20 73 75 69 74 65 | ..BGP.is.particularly.well.suite |
37680 | 64 20 66 6f 72 20 75 73 65 20 77 69 74 68 20 44 4d 56 50 4e 2e 00 44 4e 41 54 00 44 4e 41 54 20 | d.for.use.with.DMVPN..DNAT.DNAT. |
376a0 | 69 73 20 74 79 70 69 63 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 20 2a 2a | is.typically.referred.to.as.a.** |
376c0 | 50 6f 72 74 20 46 6f 72 77 61 72 64 2a 2a 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 56 79 4f 53 20 | Port.Forward**..When.using.VyOS. |
376e0 | 61 73 20 61 20 4e 41 54 20 72 6f 75 74 65 72 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 2c 20 61 20 | as.a.NAT.router.and.firewall,.a. |
37700 | 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 61 73 6b 20 69 73 20 74 6f 20 | common.configuration.task.is.to. |
37720 | 72 65 64 69 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 73 | redirect.incoming.traffic.to.a.s |
37740 | 79 73 74 65 6d 20 62 65 68 69 6e 64 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 44 4e 41 54 20 | ystem.behind.the.firewall..DNAT. |
37760 | 72 75 6c 65 20 31 30 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e | rule.10.replaces.the.destination |
37780 | 20 61 64 64 72 65 73 73 20 6f 66 20 61 6e 20 69 6e 62 6f 75 6e 64 20 70 61 63 6b 65 74 20 77 69 | .address.of.an.inbound.packet.wi |
377a0 | 74 68 20 31 39 32 2e 30 2e 32 2e 31 30 00 44 4e 41 54 36 36 00 44 4e 53 20 46 6f 72 77 61 72 64 | th.192.0.2.10.DNAT66.DNS.Forward |
377c0 | 69 6e 67 00 44 4e 53 20 6e 61 6d 65 20 73 65 72 76 65 72 73 00 44 4e 53 20 73 65 61 72 63 68 20 | ing.DNS.name.servers.DNS.search. |
377e0 | 6c 69 73 74 20 74 6f 20 61 64 76 65 72 74 69 73 65 00 44 4e 53 20 73 65 72 76 65 72 20 49 50 76 | list.to.advertise.DNS.server.IPv |
37800 | 34 20 61 64 64 72 65 73 73 00 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 | 4.address.DNS.server.is.located. |
37820 | 61 74 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 60 60 00 44 4e 53 53 4c 00 44 53 43 50 | at.``2001:db8::ffff``.DNSSL.DSCP |
37840 | 20 76 61 6c 75 65 73 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 32 34 37 34 60 20 61 6e 64 20 3a | .values.as.per.:rfc:`2474`.and.: |
37860 | 72 66 63 3a 60 34 35 39 35 60 3a 00 44 53 53 53 2f 43 43 4b 20 4d 6f 64 65 20 69 6e 20 34 30 20 | rfc:`4595`:.DSSS/CCK.Mode.in.40. |
37880 | 4d 48 7a 2c 20 74 68 69 73 20 73 65 74 73 20 60 60 5b 44 53 53 53 5f 43 43 4b 2d 34 30 5d 60 60 | MHz,.this.sets.``[DSSS_CCK-40]`` |
378a0 | 00 44 61 74 61 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 44 42 2d 49 50 2e 63 6f 6d 20 75 | .Data.is.provided.by.DB-IP.com.u |
378c0 | 6e 64 65 72 20 43 43 2d 42 59 2d 34 2e 30 20 6c 69 63 65 6e 73 65 2e 20 41 74 74 72 69 62 75 74 | nder.CC-BY-4.0.license..Attribut |
378e0 | 69 6f 6e 20 72 65 71 75 69 72 65 64 2c 20 70 65 72 6d 69 74 73 20 72 65 64 69 73 74 72 69 62 75 | ion.required,.permits.redistribu |
37900 | 74 69 6f 6e 20 73 6f 20 77 65 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 61 20 64 61 74 61 62 61 73 | tion.so.we.can.include.a.databas |
37920 | 65 20 69 6e 20 69 6d 61 67 65 73 28 7e 33 4d 42 20 63 6f 6d 70 72 65 73 73 65 64 29 2e 20 49 6e | e.in.images(~3MB.compressed)..In |
37940 | 63 6c 75 64 65 73 20 63 72 6f 6e 20 73 63 72 69 70 74 20 28 6d 61 6e 75 61 6c 6c 79 20 63 61 6c | cludes.cron.script.(manually.cal |
37960 | 6c 61 62 6c 65 20 62 79 20 6f 70 2d 6d 6f 64 65 20 75 70 64 61 74 65 20 67 65 6f 69 70 29 20 74 | lable.by.op-mode.update.geoip).t |
37980 | 6f 20 6b 65 65 70 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 72 75 6c 65 73 20 75 70 64 61 74 65 | o.keep.database.and.rules.update |
379a0 | 64 2e 00 44 65 62 75 67 00 44 65 62 75 67 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 73 20 2d 20 | d..Debug.Debug-level.messages.-. |
379c0 | 4d 65 73 73 61 67 65 73 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f | Messages.that.contain.informatio |
379e0 | 6e 20 6e 6f 72 6d 61 6c 6c 79 20 6f 66 20 75 73 65 20 6f 6e 6c 79 20 77 68 65 6e 20 64 65 62 75 | n.normally.of.use.only.when.debu |
37a00 | 67 67 69 6e 67 20 61 20 70 72 6f 67 72 61 6d 2e 00 44 65 66 61 75 6c 74 00 44 65 66 61 75 6c 74 | gging.a.program..Default.Default |
37a20 | 20 31 2e 00 44 65 66 61 75 6c 74 20 47 61 74 65 77 61 79 2f 52 6f 75 74 65 00 44 65 66 61 75 6c | .1..Default.Gateway/Route.Defaul |
37a40 | 74 20 52 6f 75 74 65 72 20 50 72 65 66 65 72 65 6e 63 65 00 44 65 66 61 75 6c 74 20 62 65 68 61 | t.Router.Preference.Default.beha |
37a60 | 76 69 6f 72 20 2d 20 64 6f 6e 27 74 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 | vior.-.don't.ask.client.for.mppe |
37a80 | 2c 20 62 75 74 20 61 6c 6c 6f 77 20 69 74 20 69 66 20 63 6c 69 65 6e 74 20 77 61 6e 74 73 2e 20 | ,.but.allow.it.if.client.wants.. |
37aa0 | 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 52 41 44 49 55 53 20 6d 61 79 20 6f 76 65 72 | Please.note.that.RADIUS.may.over |
37ac0 | 72 69 64 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 62 79 20 4d 53 2d 4d 50 50 45 2d 45 6e 63 72 | ride.this.option.by.MS-MPPE-Encr |
37ae0 | 79 70 74 69 6f 6e 2d 50 6f 6c 69 63 79 20 61 74 74 72 69 62 75 74 65 2e 00 44 65 66 61 75 6c 74 | yption-Policy.attribute..Default |
37b00 | 20 67 61 74 65 77 61 79 20 61 6e 64 20 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 61 74 20 60 31 | .gateway.and.DNS.server.is.at.`1 |
37b20 | 39 32 2e 30 2e 32 2e 32 35 34 60 00 44 65 66 61 75 6c 74 20 69 73 20 35 31 32 20 4d 42 2e 20 55 | 92.0.2.254`.Default.is.512.MB..U |
37b40 | 73 65 20 30 20 4d 42 20 66 6f 72 20 75 6e 6c 69 6d 69 74 65 64 20 6d 65 6d 6f 72 79 2e 00 44 65 | se.0.MB.for.unlimited.memory..De |
37b60 | 66 61 75 6c 74 20 69 73 20 60 60 61 6e 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 2e 00 44 65 66 61 | fault.is.``any-available``..Defa |
37b80 | 75 6c 74 20 69 73 20 60 60 69 63 6d 70 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 74 6f 20 64 | ult.is.``icmp``..Default.is.to.d |
37ba0 | 65 74 65 63 74 73 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 20 63 68 61 6e 67 | etects.physical.link.state.chang |
37bc0 | 65 73 2e 00 44 65 66 61 75 6c 74 20 70 6f 72 74 20 69 73 20 33 31 32 38 2e 00 44 65 66 61 75 6c | es..Default.port.is.3128..Defaul |
37be0 | 74 3a 20 31 00 44 65 66 61 75 6c 74 3a 20 34 34 33 00 44 65 66 61 75 6c 74 73 20 74 6f 20 27 75 | t:.1.Default:.443.Defaults.to.'u |
37c00 | 69 64 27 00 44 65 66 61 75 6c 74 73 20 74 6f 20 32 32 35 2e 30 2e 30 2e 35 30 2e 00 44 65 66 61 | id'.Defaults.to.225.0.0.50..Defa |
37c20 | 75 6c 74 73 20 74 6f 20 60 60 75 73 60 60 2e 00 44 65 66 69 6e 65 20 43 6f 6e 65 63 74 69 6f 6e | ults.to.``us``..Define.Conection |
37c40 | 20 54 69 6d 65 6f 75 74 73 00 44 65 66 69 6e 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 70 72 | .Timeouts.Define.IPv4.or.IPv6.pr |
37c60 | 65 66 69 78 20 66 6f 72 20 61 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 20 4f | efix.for.a.given.network.name..O |
37c80 | 6e 6c 79 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 6f 6e 65 20 49 50 76 36 20 70 72 65 66 69 78 | nly.one.IPv4.and.one.IPv6.prefix |
37ca0 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 00 44 | .can.be.used.per.network.name..D |
37cc0 | 65 66 69 6e 65 20 49 50 76 34 2f 49 50 76 36 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 | efine.IPv4/IPv6.management.addre |
37ce0 | 73 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 76 69 61 20 4c 4c 44 50 2e 20 4d 75 6c 74 69 70 6c | ss.transmitted.via.LLDP..Multipl |
37d00 | 65 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 20 4f 6e 6c 79 | e.addresses.can.be.defined..Only |
37d20 | 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 73 79 73 74 | .addresses.connected.to.the.syst |
37d40 | 65 6d 20 77 69 6c 6c 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 44 65 66 69 6e 65 20 61 | em.will.be.transmitted..Define.a |
37d60 | 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 67 72 6f 75 70 2e 00 44 65 66 | .IPv4.or.IPv6.Network.group..Def |
37d80 | 69 6e 65 20 61 20 49 50 76 34 20 6f 72 20 61 20 49 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f | ine.a.IPv4.or.a.IPv6.address.gro |
37da0 | 75 70 00 44 65 66 69 6e 65 20 61 20 5a 6f 6e 65 00 44 65 66 69 6e 65 20 61 20 64 69 73 63 72 65 | up.Define.a.Zone.Define.a.discre |
37dc0 | 74 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 31 30 30 2e 36 34 2e 30 | te.source.IP.address.of.100.64.0 |
37de0 | 2e 31 20 66 6f 72 20 53 4e 41 54 20 72 75 6c 65 20 32 30 00 44 65 66 69 6e 65 20 61 20 64 6f 6d | .1.for.SNAT.rule.20.Define.a.dom |
37e00 | 61 69 6e 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 6d 61 63 20 67 72 6f 75 70 2e 00 44 | ain.group..Define.a.mac.group..D |
37e20 | 65 66 69 6e 65 20 61 20 70 6f 72 74 20 67 72 6f 75 70 2e 20 41 20 70 6f 72 74 20 6e 61 6d 65 20 | efine.a.port.group..A.port.name. |
37e40 | 63 61 6e 20 62 65 20 61 6e 79 20 6e 61 6d 65 20 64 65 66 69 6e 65 64 20 69 6e 20 2f 65 74 63 2f | can.be.any.name.defined.in./etc/ |
37e60 | 73 65 72 76 69 63 65 73 2e 20 65 2e 67 2e 3a 20 68 74 74 70 00 44 65 66 69 6e 65 20 61 6c 6c 6f | services..e.g.:.http.Define.allo |
37e80 | 77 65 64 20 63 69 70 68 65 72 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 53 53 48 20 63 6f 6e | wed.ciphers.used.for.the.SSH.con |
37ea0 | 6e 65 63 74 69 6f 6e 2e 20 41 20 6e 75 6d 62 65 72 20 6f 66 20 61 6c 6c 6f 77 65 64 20 63 69 70 | nection..A.number.of.allowed.cip |
37ec0 | 68 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2c 20 75 73 65 20 6d 75 6c 74 69 | hers.can.be.specified,.use.multi |
37ee0 | 70 6c 65 20 6f 63 63 75 72 72 65 6e 63 65 73 20 74 6f 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c | ple.occurrences.to.allow.multipl |
37f00 | 65 20 63 69 70 68 65 72 73 2e 00 44 65 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 | e.ciphers..Define.an.interface.g |
37f20 | 72 6f 75 70 2e 20 57 69 6c 64 63 61 72 64 20 61 72 65 20 61 63 63 65 70 74 65 64 20 74 6f 6f 2e | roup..Wildcard.are.accepted.too. |
37f40 | 00 44 65 66 69 6e 65 20 62 65 68 61 76 69 6f 72 20 66 6f 72 20 67 72 61 74 75 69 74 6f 75 73 20 | .Define.behavior.for.gratuitous. |
37f60 | 41 52 50 20 66 72 61 6d 65 73 20 77 68 6f 27 73 20 49 50 20 69 73 20 6e 6f 74 20 61 6c 72 65 61 | ARP.frames.who's.IP.is.not.alrea |
37f80 | 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e 20 49 66 20 | dy.present.in.the.ARP.table..If. |
37fa0 | 63 6f 6e 66 69 67 75 72 65 64 20 63 72 65 61 74 65 20 6e 65 77 20 65 6e 74 72 69 65 73 20 69 6e | configured.create.new.entries.in |
37fc0 | 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 | .the.ARP.table..Define.different |
37fe0 | 20 6d 6f 64 65 73 20 66 6f 72 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 | .modes.for.IP.directed.broadcast |
38000 | 20 66 6f 72 77 61 72 64 69 6e 67 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | .forwarding.as.described.in.:rfc |
38020 | 3a 60 31 38 31 32 60 20 61 6e 64 20 3a 72 66 63 3a 60 32 36 34 34 60 2e 00 44 65 66 69 6e 65 20 | :`1812`.and.:rfc:`2644`..Define. |
38040 | 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 72 65 70 6c | different.modes.for.sending.repl |
38060 | 69 65 73 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 72 65 63 65 69 76 65 64 20 41 52 50 20 | ies.in.response.to.received.ARP. |
38080 | 72 65 71 75 65 73 74 73 20 74 68 61 74 20 72 65 73 6f 6c 76 65 20 6c 6f 63 61 6c 20 74 61 72 67 | requests.that.resolve.local.targ |
380a0 | 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 3a 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e | et.IP.addresses:.Define.differen |
380c0 | 74 20 72 65 73 74 72 69 63 74 69 6f 6e 20 6c 65 76 65 6c 73 20 66 6f 72 20 61 6e 6e 6f 75 6e 63 | t.restriction.levels.for.announc |
380e0 | 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 | ing.the.local.source.IP.address. |
38100 | 66 72 6f 6d 20 49 50 20 70 61 63 6b 65 74 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 | from.IP.packets.in.ARP.requests. |
38120 | 73 65 6e 74 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 44 65 66 69 6e 65 20 68 6f 77 20 74 6f | sent.on.interface..Define.how.to |
38140 | 20 68 61 6e 64 6c 65 20 6c 65 61 66 2d 73 65 6f 6e 64 73 2e 00 44 65 66 69 6e 65 20 69 6e 74 65 | .handle.leaf-seonds..Define.inte |
38160 | 72 66 61 63 65 73 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 | rfaces.to.be.used.in.the.flowtab |
38180 | 6c 65 2e 00 44 65 66 69 6e 65 20 6c 65 6e 67 74 68 20 6f 66 20 70 61 63 6b 65 74 20 70 61 79 6c | le..Define.length.of.packet.payl |
381a0 | 6f 61 64 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 6e 20 6e 65 74 6c 69 6e 6b 20 6d 65 73 73 61 67 | oad.to.include.in.netlink.messag |
381c0 | 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 | e..Only.applicable.if.rule.log.i |
381e0 | 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 | s.enable.and.log.group.is.define |
38200 | 64 2e 00 44 65 66 69 6e 65 20 6c 6f 67 20 67 72 6f 75 70 20 74 6f 20 73 65 6e 64 20 6d 65 73 73 | d..Define.log.group.to.send.mess |
38220 | 61 67 65 20 74 6f 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 | age.to..Only.applicable.if.rule. |
38240 | 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6c 6f 67 2d 6c 65 76 65 6c 2e | log.is.enable..Define.log-level. |
38260 | 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 | .Only.applicable.if.rule.log.is. |
38280 | 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 | enable..Define.number.of.packets |
382a0 | 20 74 6f 20 71 75 65 75 65 20 69 6e 73 69 64 65 20 74 68 65 20 6b 65 72 6e 65 6c 20 62 65 66 6f | .to.queue.inside.the.kernel.befo |
382c0 | 72 65 20 73 65 6e 64 69 6e 67 20 74 68 65 6d 20 74 6f 20 75 73 65 72 73 70 61 63 65 2e 20 4f 6e | re.sending.them.to.userspace..On |
382e0 | 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 | ly.applicable.if.rule.log.is.ena |
38300 | 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 2e 00 44 65 | ble.and.log.group.is.defined..De |
38320 | 66 69 6e 65 20 6f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 6f 66 20 48 69 67 68 20 41 76 61 69 | fine.operation.mode.of.High.Avai |
38340 | 6c 61 62 69 6c 69 74 79 20 66 65 61 74 75 72 65 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 | lability.feature..Default.value. |
38360 | 69 66 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 73 20 60 | if.command.is.not.specified.is.` |
38380 | 61 63 74 69 76 65 2d 61 63 74 69 76 65 60 00 44 65 66 69 6e 65 20 74 68 65 20 74 69 6d 65 20 69 | active-active`.Define.the.time.i |
383a0 | 6e 74 65 72 76 61 6c 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 6c 6f 63 61 6c 20 63 61 63 68 | nterval.to.update.the.local.cach |
383c0 | 65 00 44 65 66 69 6e 65 20 74 68 65 20 7a 6f 6e 65 20 61 73 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e | e.Define.the.zone.as.a.local.zon |
383e0 | 65 2e 20 41 20 6c 6f 63 61 6c 20 7a 6f 6e 65 20 68 61 73 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 | e..A.local.zone.has.no.interface |
38400 | 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 72 6f 75 | s.and.will.be.applied.to.the.rou |
38420 | 74 65 72 20 69 74 73 65 6c 66 2e 00 44 65 66 69 6e 65 20 74 79 70 65 20 6f 66 20 6f 66 66 6c 6f | ter.itself..Define.type.of.offlo |
38440 | 61 64 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 3a 20 | ad.to.be.used.by.the.flowtable:. |
38460 | 60 60 68 61 72 64 77 61 72 65 60 60 20 6f 72 20 60 60 73 6f 66 74 77 61 72 65 60 60 2e 20 42 79 | ``hardware``.or.``software``..By |
38480 | 20 64 65 66 61 75 6c 74 2c 20 60 60 73 6f 66 74 77 61 72 65 60 60 20 6f 66 66 6c 6f 61 64 20 69 | .default,.``software``.offload.i |
384a0 | 73 20 75 73 65 64 2e 00 44 65 66 69 6e 65 20 75 73 65 64 20 65 74 68 65 72 74 79 70 65 20 6f 66 | s.used..Define.used.ethertype.of |
384c0 | 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 65 66 69 6e 65 64 20 74 68 65 20 49 | .bridge.interface..Defined.the.I |
384e0 | 50 76 34 2c 20 49 50 76 36 20 6f 72 20 46 51 44 4e 20 61 6e 64 20 70 6f 72 74 20 6e 75 6d 62 65 | Pv4,.IPv6.or.FQDN.and.port.numbe |
38500 | 72 20 6f 66 20 74 68 65 20 63 61 63 68 69 6e 67 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 69 6e | r.of.the.caching.RPKI.caching.in |
38520 | 73 74 61 6e 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6c | stance.which.is.used..Defines.al |
38540 | 74 65 72 6e 61 74 65 20 73 6f 75 72 63 65 73 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 69 6e 67 | ternate.sources.for.multicasting |
38560 | 20 61 6e 64 20 49 47 4d 50 20 64 61 74 61 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 | .and.IGMP.data..The.network.addr |
38580 | 65 73 73 20 6d 75 73 74 20 62 65 20 6f 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 6f 72 | ess.must.be.on.the.following.for |
385a0 | 6d 61 74 20 27 61 2e 62 2e 63 2e 64 2f 6e 27 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 | mat.'a.b.c.d/n'..By.default,.the |
385c0 | 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 63 63 65 70 74 20 64 61 74 61 20 66 72 6f 6d 20 73 6f | .router.will.accept.data.from.so |
385e0 | 75 72 63 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 61 73 20 63 6f 6e | urces.on.the.same.network.as.con |
38600 | 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 74 68 65 20 | figured.on.an.interface..If.the. |
38620 | 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 20 6c 69 65 73 20 6f 6e 20 61 20 72 65 6d 6f 74 | multicast.source.lies.on.a.remot |
38640 | 65 20 6e 65 74 77 6f 72 6b 2c 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 66 72 6f 6d 20 | e.network,.one.must.define.from. |
38660 | 77 68 65 72 65 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 65 20 61 63 63 65 70 74 65 64 | where.traffic.should.be.accepted |
38680 | 2e 00 44 65 66 69 6e 65 73 20 61 6e 20 6f 66 66 2d 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 20 70 72 | ..Defines.an.off-NBMA.network.pr |
386a0 | 65 66 69 78 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 47 52 45 20 69 6e 74 65 72 66 61 63 65 | efix.for.which.the.GRE.interface |
386c0 | 20 77 69 6c 6c 20 61 63 74 20 61 73 20 61 20 67 61 74 65 77 61 79 2e 20 54 68 69 73 20 61 6e 20 | .will.act.as.a.gateway..This.an. |
386e0 | 61 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 64 65 66 69 6e 69 6e 67 20 6c 6f 63 61 6c 20 69 6e | alternative.to.defining.local.in |
38700 | 74 65 72 66 61 63 65 73 20 77 69 74 68 20 73 68 6f 72 74 63 75 74 2d 64 65 73 74 69 6e 61 74 69 | terfaces.with.shortcut-destinati |
38720 | 6f 6e 20 66 6c 61 67 2e 00 44 65 66 69 6e 65 73 20 62 6c 61 63 6b 68 6f 6c 65 20 64 69 73 74 61 | on.flag..Defines.blackhole.dista |
38740 | 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 20 | nce.for.this.route,.routes.with. |
38760 | 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 | smaller.administrative.distance. |
38780 | 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 20 | are.elected.prior.to.those.with. |
387a0 | 61 20 68 69 67 68 65 72 20 64 69 73 74 61 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 6d 69 6e 69 6d | a.higher.distance..Defines.minim |
387c0 | 75 6d 20 61 63 63 65 70 74 61 62 6c 65 20 4d 54 55 2e 20 49 66 20 63 6c 69 65 6e 74 20 77 69 6c | um.acceptable.MTU..If.client.wil |
387e0 | 6c 20 74 72 79 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 6c 65 73 73 20 74 68 65 6e 20 73 70 65 | l.try.to.negotiate.less.then.spe |
38800 | 63 69 66 69 65 64 20 4d 54 55 20 74 68 65 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 4e 41 4b 65 64 | cified.MTU.then.it.will.be.NAKed |
38820 | 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 20 69 66 20 72 65 6a 65 63 74 73 20 67 72 65 61 | .or.disconnected.if.rejects.grea |
38840 | 74 65 72 20 4d 54 55 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 31 30 30 2a | ter.MTU..Default.value.is.**100* |
38860 | 2a 2e 00 44 65 66 69 6e 65 73 20 6e 65 78 74 2d 68 6f 70 20 64 69 73 74 61 6e 63 65 20 66 6f 72 | *..Defines.next-hop.distance.for |
38880 | 20 74 68 69 73 20 72 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 | .this.route,.routes.with.smaller |
388a0 | 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 | .administrative.distance.are.ele |
388c0 | 63 74 65 64 20 70 72 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 | cted.prior.to.those.with.a.highe |
388e0 | 72 20 64 69 73 74 61 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 70 72 65 66 65 72 72 65 64 20 4d 52 | r.distance..Defines.preferred.MR |
38900 | 55 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 44 65 | U..By.default.is.not.defined..De |
38920 | 66 69 6e 65 73 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 41 52 50 | fines.protocols.for.checking.ARP |
38940 | 2c 20 49 43 4d 50 2c 20 54 43 50 00 44 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | ,.ICMP,.TCP.Defines.the.maximum. |
38960 | 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 | `<number>`.of.unanswered.echo.re |
38980 | 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 | quests..Upon.reaching.the.value. |
389a0 | 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 | `<number>`,.the.session.will.be. |
389c0 | 72 65 73 65 74 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d | reset..Defines.the.maximum.`<num |
389e0 | 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 71 75 65 73 74 | ber>`.of.unanswered.echo.request |
38a00 | 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d | s..Upon.reaching.the.value.`<num |
38a20 | 62 65 72 3e 60 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 73 65 74 | ber>`,.the.session.will.be.reset |
38a40 | 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 2a 2a 2e 00 44 65 66 69 6e 65 | ..Default.value.is.**3**..Define |
38a60 | 73 20 74 68 65 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 75 73 65 64 20 66 6f 72 20 61 | s.the.round-trip.time.used.for.a |
38a80 | 63 74 69 76 65 20 71 75 65 75 65 20 6d 61 6e 61 67 65 6d 65 6e 74 20 28 41 51 4d 29 20 69 6e 20 | ctive.queue.management.(AQM).in. |
38aa0 | 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 | milliseconds..The.default.value. |
38ac0 | 69 73 20 31 30 30 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 64 65 | is.100..Defines.the.specified.de |
38ae0 | 76 69 63 65 20 61 73 20 61 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 20 41 76 61 69 6c 61 | vice.as.a.system.console..Availa |
38b00 | 62 6c 65 20 63 6f 6e 73 6f 6c 65 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 28 73 65 65 20 | ble.console.devices.can.be.(see. |
38b20 | 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 29 3a 00 44 65 66 69 6e 69 6e 67 20 50 65 65 | completion.helper):.Defining.Pee |
38b40 | 72 73 00 44 65 6c 65 67 61 74 65 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 68 65 20 72 61 | rs.Delegate.prefixes.from.the.ra |
38b60 | 6e 67 65 20 69 6e 64 69 63 61 74 65 64 20 62 79 20 74 68 65 20 73 74 61 72 74 20 61 6e 64 20 73 | nge.indicated.by.the.start.and.s |
38b80 | 74 6f 70 20 71 75 61 6c 69 66 69 65 72 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e | top.qualifier..Delete.BGP.commun |
38ba0 | 69 74 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 | ities.matching.the.community-lis |
38bc0 | 74 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 74 63 68 69 | t..Delete.BGP.communities.matchi |
38be0 | 6e 67 20 74 68 65 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c | ng.the.large-community-list..Del |
38c00 | 65 74 65 20 4c 6f 67 73 00 44 65 6c 65 74 65 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 63 6f 6e | ete.Logs.Delete.a.particular.con |
38c20 | 74 61 69 6e 65 72 20 69 6d 61 67 65 20 62 61 73 65 64 20 6f 6e 20 69 74 27 73 20 69 6d 61 67 65 | tainer.image.based.on.it's.image |
38c40 | 20 49 44 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 6c 65 74 65 20 61 6c 6c 20 63 6f 6e | .ID..You.can.also.delete.all.con |
38c60 | 74 61 69 6e 65 72 20 69 6d 61 67 65 73 20 61 74 20 6f 6e 63 65 2e 00 44 65 6c 65 74 65 20 61 6c | tainer.images.at.once..Delete.al |
38c80 | 6c 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 | l.BGP.communities.Delete.all.BGP |
38ca0 | 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 69 65 73 00 44 65 6c 65 74 65 20 64 65 66 61 75 6c | .large-communities.Delete.defaul |
38cc0 | 74 20 72 6f 75 74 65 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 2e 00 44 65 6c 65 74 65 73 | t.route.from.the.system..Deletes |
38ce0 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 66 69 6c 65 | .the.specified.user-defined.file |
38d00 | 20 3c 74 65 78 74 3e 20 69 6e 20 74 68 65 20 2f 76 61 72 2f 6c 6f 67 2f 75 73 65 72 20 64 69 72 | .<text>.in.the./var/log/user.dir |
38d20 | 65 63 74 6f 72 79 00 44 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e | ectory.Depending.on.the.location |
38d40 | 2c 20 6e 6f 74 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 | ,.not.all.of.these.channels.may. |
38d60 | 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 73 65 21 00 44 65 73 63 72 69 70 74 69 6f | be.available.for.use!.Descriptio |
38d80 | 6e 00 44 65 73 70 69 74 65 20 74 68 65 20 44 72 6f 70 2d 54 61 69 6c 20 70 6f 6c 69 63 79 20 64 | n.Despite.the.Drop-Tail.policy.d |
38da0 | 6f 65 73 20 6e 6f 74 20 73 6c 6f 77 20 64 6f 77 6e 20 70 61 63 6b 65 74 73 2c 20 69 66 20 6d 61 | oes.not.slow.down.packets,.if.ma |
38dc0 | 6e 79 20 70 61 63 6b 65 74 73 20 61 72 65 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 74 68 65 79 20 | ny.packets.are.to.be.sent,.they. |
38de0 | 63 6f 75 6c 64 20 67 65 74 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 74 72 79 69 6e 67 20 74 6f | could.get.dropped.when.trying.to |
38e00 | 20 67 65 74 20 65 6e 71 75 65 75 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 2e 20 54 68 69 73 20 | .get.enqueued.at.the.tail..This. |
38e20 | 63 61 6e 20 68 61 70 70 65 6e 20 69 66 20 74 68 65 20 71 75 65 75 65 20 68 61 73 20 73 74 69 6c | can.happen.if.the.queue.has.stil |
38e40 | 6c 20 6e 6f 74 20 62 65 65 6e 20 61 62 6c 65 20 74 6f 20 72 65 6c 65 61 73 65 20 65 6e 6f 75 67 | l.not.been.able.to.release.enoug |
38e60 | 68 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 69 74 73 20 68 65 61 64 2e 00 44 65 73 70 69 74 65 | h.packets.from.its.head..Despite |
38e80 | 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 41 44 20 69 73 20 61 20 73 75 70 65 72 73 65 74 20 | .the.fact.that.AD.is.a.superset. |
38ea0 | 6f 66 20 4c 44 41 50 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 41 64 64 72 65 73 73 00 44 65 73 74 | of.LDAP.Destination.Address.Dest |
38ec0 | 69 6e 61 74 69 6f 6e 20 4e 41 54 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 50 72 65 66 69 78 00 44 | ination.NAT.Destination.Prefix.D |
38ee0 | 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 63 69 73 63 6f | etailed.information.about."cisco |
38f00 | 22 20 61 6e 64 20 22 69 62 6d 22 20 6d 6f 64 65 6c 73 20 64 69 66 66 65 72 65 6e 63 65 73 20 63 | ".and."ibm".models.differences.c |
38f20 | 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 3a 72 66 63 3a 60 33 35 30 39 60 2e 20 41 20 22 73 | an.be.found.in.:rfc:`3509`..A."s |
38f40 | 68 6f 72 74 63 75 74 22 20 6d 6f 64 65 6c 20 61 6c 6c 6f 77 73 20 41 42 52 20 74 6f 20 63 72 65 | hortcut".model.allows.ABR.to.cre |
38f60 | 61 74 65 20 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 61 72 65 61 73 20 62 61 73 65 64 20 6f | ate.routes.between.areas.based.o |
38f80 | 6e 20 74 68 65 20 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 74 68 65 20 61 72 65 61 73 20 63 6f 6e 6e | n.the.topology.of.the.areas.conn |
38fa0 | 65 63 74 65 64 20 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 62 75 74 20 6e 6f 74 20 75 73 69 | ected.to.this.router.but.not.usi |
38fc0 | 6e 67 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 6e 20 63 61 73 65 20 69 66 20 6e 6f | ng.a.backbone.area.in.case.if.no |
38fe0 | 6e 2d 62 61 63 6b 62 6f 6e 65 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 63 68 65 61 70 65 72 | n-backbone.route.will.be.cheaper |
39000 | 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 73 68 | ..For.more.information.about."sh |
39020 | 6f 72 74 63 75 74 22 20 6d 6f 64 65 6c 2c 20 73 65 65 20 3a 74 3a 60 6f 73 70 66 2d 73 68 6f 72 | ortcut".model,.see.:t:`ospf-shor |
39040 | 74 63 75 74 2d 61 62 72 2d 30 32 2e 74 78 74 60 00 44 65 74 65 72 6d 69 6e 65 73 20 68 6f 77 20 | tcut-abr-02.txt`.Determines.how. |
39060 | 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c 64 20 73 6f 66 74 20 73 77 69 74 | opennhrp.daemon.should.soft.swit |
39080 | 63 68 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 2e 20 43 75 72 72 65 6e | ch.the.multicast.traffic..Curren |
390a0 | 74 6c 79 2c 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 20 63 61 70 74 75 72 | tly,.multicast.traffic.is.captur |
390c0 | 65 64 20 62 79 20 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d 6f 6e 20 75 73 69 6e 67 20 61 20 70 61 | ed.by.opennhrp.daemon.using.a.pa |
390e0 | 63 6b 65 74 20 73 6f 63 6b 65 74 2c 20 61 6e 64 20 72 65 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 | cket.socket,.and.resent.back.to. |
39100 | 70 72 6f 70 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 | proper.destinations..This.means. |
39120 | 74 68 61 74 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 20 73 65 6e 64 69 6e 67 20 69 73 | that.multicast.packet.sending.is |
39140 | 20 43 50 55 20 69 6e 74 65 6e 73 69 76 65 2e 00 44 65 76 69 63 65 20 69 73 20 69 6e 63 61 70 61 | .CPU.intensive..Device.is.incapa |
39160 | 62 6c 65 20 6f 66 20 34 30 20 4d 48 7a 2c 20 64 6f 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 2e | ble.of.40.MHz,.do.not.advertise. |
39180 | 20 54 68 69 73 20 73 65 74 73 20 60 60 5b 34 30 2d 49 4e 54 4f 4c 45 52 41 4e 54 5d 60 60 00 44 | .This.sets.``[40-INTOLERANT]``.D |
391a0 | 65 76 69 63 65 73 20 65 76 61 6c 75 61 74 69 6e 67 20 77 68 65 74 68 65 72 20 61 6e 20 49 50 76 | evices.evaluating.whether.an.IPv |
391c0 | 34 20 61 64 64 72 65 73 73 20 69 73 20 70 75 62 6c 69 63 20 6d 75 73 74 20 62 65 20 75 70 64 61 | 4.address.is.public.must.be.upda |
391e0 | 74 65 64 20 74 6f 20 72 65 63 6f 67 6e 69 7a 65 20 74 68 65 20 6e 65 77 20 61 64 64 72 65 73 73 | ted.to.recognize.the.new.address |
39200 | 20 73 70 61 63 65 2e 20 41 6c 6c 6f 63 61 74 69 6e 67 20 6d 6f 72 65 20 70 72 69 76 61 74 65 20 | .space..Allocating.more.private. |
39220 | 49 50 76 34 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 4e 41 54 20 64 65 76 69 63 | IPv4.address.space.for.NAT.devic |
39240 | 65 73 20 6d 69 67 68 74 20 70 72 6f 6c 6f 6e 67 20 74 68 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 | es.might.prolong.the.transition. |
39260 | 74 6f 20 49 50 76 36 2e 00 44 69 66 66 65 72 65 6e 74 20 4e 41 54 20 54 79 70 65 73 00 44 69 66 | to.IPv6..Different.NAT.Types.Dif |
39280 | 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 70 61 72 61 6d 65 74 65 72 73 00 44 69 72 65 63 74 69 6f 6e | fie-Hellman.parameters.Direction |
392a0 | 3a 20 2a 2a 69 6e 2a 2a 20 61 6e 64 20 2a 2a 6f 75 74 2a 2a 2e 20 50 72 6f 74 65 63 74 20 70 75 | :.**in**.and.**out**..Protect.pu |
392c0 | 62 6c 69 63 20 6e 65 74 77 6f 72 6b 20 66 72 6f 6d 20 65 78 74 65 72 6e 61 6c 20 61 74 74 61 63 | blic.network.from.external.attac |
392e0 | 6b 73 2c 20 61 6e 64 20 69 64 65 6e 74 69 66 79 20 69 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b | ks,.and.identify.internal.attack |
39300 | 73 20 74 6f 77 61 72 64 73 20 69 6e 74 65 72 6e 65 74 2e 00 44 69 73 61 62 6c 65 20 28 6c 6f 63 | s.towards.internet..Disable.(loc |
39320 | 6b 29 20 61 63 63 6f 75 6e 74 2e 20 55 73 65 72 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c | k).account..User.will.not.be.abl |
39340 | 65 20 74 6f 20 6c 6f 67 20 69 6e 2e 00 44 69 73 61 62 6c 65 20 43 50 55 20 70 6f 77 65 72 20 73 | e.to.log.in..Disable.CPU.power.s |
39360 | 61 76 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 43 | aving.mechanisms.also.known.as.C |
39380 | 20 73 74 61 74 65 73 2e 00 44 69 73 61 62 6c 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e | .states..Disable.Compression.Con |
393a0 | 74 72 6f 6c 20 50 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 2e 20 43 43 50 20 69 73 20 65 6e 61 62 | trol.Protocol.(CCP)..CCP.is.enab |
393c0 | 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 44 69 73 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f | led.by.default..Disable.MLD.repo |
393e0 | 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 | rts.and.query.on.the.interface.. |
39400 | 44 69 73 61 62 6c 65 20 60 3c 75 73 65 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 44 69 73 61 62 6c | Disable.`<user>`.account..Disabl |
39420 | 65 20 61 20 42 46 44 20 70 65 65 72 00 44 69 73 61 62 6c 65 20 61 20 63 6f 6e 74 61 69 6e 65 72 | e.a.BFD.peer.Disable.a.container |
39440 | 2e 00 44 69 73 61 62 6c 65 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 | ..Disable.a.given.container.regi |
39460 | 73 74 72 79 00 44 69 73 61 62 6c 65 20 61 6c 6c 20 6f 70 74 69 6f 6e 61 6c 20 43 50 55 20 6d 69 | stry.Disable.all.optional.CPU.mi |
39480 | 74 69 67 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 69 6d 70 72 6f 76 65 73 20 73 79 73 74 65 6d 20 | tigations..This.improves.system. |
394a0 | 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 62 75 74 20 69 74 20 6d 61 79 20 61 6c 73 6f 20 65 78 70 | performance,.but.it.may.also.exp |
394c0 | 6f 73 65 20 75 73 65 72 73 20 74 6f 20 73 65 76 65 72 61 6c 20 43 50 55 20 76 75 6c 6e 65 72 61 | ose.users.to.several.CPU.vulnera |
394e0 | 62 69 6c 69 74 69 65 73 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 67 | bilities..Disable.connection.log |
39500 | 67 69 6e 67 20 76 69 61 20 53 79 73 6c 6f 67 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 74 72 61 | ging.via.Syslog..Disable.conntra |
39520 | 63 6b 20 6c 6f 6f 73 65 20 74 72 61 63 6b 20 6f 70 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 64 68 | ck.loose.track.option.Disable.dh |
39540 | 63 70 2d 72 65 6c 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 64 68 63 70 76 36 | cp-relay.service..Disable.dhcpv6 |
39560 | 2d 72 65 6c 61 79 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 67 69 76 65 6e 20 60 3c | -relay.service..Disable.given.`< |
39580 | 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 49 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 | interface>`..It.will.be.placed.i |
395a0 | 6e 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 64 6f 77 6e 20 28 60 60 41 2f 44 60 60 | n.administratively.down.(``A/D`` |
395c0 | 29 20 73 74 61 74 65 2e 00 44 69 73 61 62 6c 65 20 68 6f 73 74 69 6e 67 20 61 75 74 68 6f 72 69 | ).state..Disable.hosting.authori |
395e0 | 74 61 74 69 76 65 20 7a 6f 6e 65 20 66 6f 72 20 60 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 20 | tative.zone.for.`<domain-name>`. |
39600 | 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 | without.deleting.from.configurat |
39620 | 69 6f 6e 2e 00 44 69 73 61 62 6c 65 20 69 6d 6d 65 64 69 61 74 65 20 73 65 73 73 69 6f 6e 20 72 | ion..Disable.immediate.session.r |
39640 | 65 73 65 74 20 69 66 20 70 65 65 72 27 73 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 6e 6b 20 67 6f | eset.if.peer's.connected.link.go |
39660 | 65 73 20 64 6f 77 6e 2e 00 44 69 73 61 62 6c 65 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 64 20 | es.down..Disable.password.based. |
39680 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 4c 6f 67 69 6e 20 76 69 61 20 53 53 48 20 6b 65 | authentication..Login.via.SSH.ke |
396a0 | 79 73 20 6f 6e 6c 79 2e 20 54 68 69 73 20 68 61 72 64 65 6e 73 20 73 65 63 75 72 69 74 79 21 00 | ys.only..This.hardens.security!. |
396c0 | 44 69 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 50 49 | Disable.sending.and.receiving.PI |
396e0 | 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 | M.control.packets.on.the.interfa |
39700 | 63 65 2e 00 44 69 73 61 62 6c 65 20 73 70 65 63 69 66 69 63 20 72 65 63 6f 72 64 20 77 69 74 68 | ce..Disable.specific.record.with |
39720 | 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 69 74 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 | out.deleting.it.from.configurati |
39740 | 6f 6e 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 68 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 | on..Disable.the.host.validation. |
39760 | 74 68 72 6f 75 67 68 20 72 65 76 65 72 73 65 20 44 4e 53 20 6c 6f 6f 6b 75 70 73 20 2d 20 63 61 | through.reverse.DNS.lookups.-.ca |
39780 | 6e 20 73 70 65 65 64 75 70 20 6c 6f 67 69 6e 20 74 69 6d 65 20 77 68 65 6e 20 72 65 76 65 72 73 | n.speedup.login.time.when.revers |
397a0 | 65 20 6c 6f 6f 6b 75 70 20 69 73 20 6e 6f 74 20 70 6f 73 73 69 62 6c 65 2e 00 44 69 73 61 62 6c | e.lookup.is.not.possible..Disabl |
397c0 | 65 20 74 68 65 20 70 65 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 44 69 73 61 62 6c 65 | e.the.peer.configuration.Disable |
397e0 | 20 74 68 69 73 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 | .this.IPv4.static.route.entry..D |
39800 | 69 73 61 62 6c 65 20 74 68 69 73 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e | isable.this.IPv6.static.route.en |
39820 | 74 72 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 | try..Disable.this.service..Disab |
39840 | 6c 65 20 74 72 61 6e 73 6d 69 74 20 6f 66 20 4c 4c 44 50 20 66 72 61 6d 65 73 20 6f 6e 20 67 69 | le.transmit.of.LLDP.frames.on.gi |
39860 | 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 55 73 65 66 75 6c 20 74 6f 20 65 78 63 | ven.`<interface>`..Useful.to.exc |
39880 | 6c 75 64 65 20 63 65 72 74 61 69 6e 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 4c 4c 44 | lude.certain.interfaces.from.LLD |
398a0 | 50 20 77 68 65 6e 20 60 60 61 6c 6c 60 60 20 68 61 76 65 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 | P.when.``all``.have.been.enabled |
398c0 | 2e 00 44 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 2d 20 6e 6f 20 6b 65 72 6e 65 | ..Disabled.by.default.-.no.kerne |
398e0 | 6c 20 6d 6f 64 75 6c 65 20 6c 6f 61 64 65 64 2e 00 44 69 73 61 62 6c 65 73 20 63 61 63 68 69 6e | l.module.loaded..Disables.cachin |
39900 | 67 20 6f 66 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 66 6f 72 77 61 | g.of.peer.information.from.forwa |
39920 | 72 64 65 64 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 70 6c 79 20 70 61 63 6b 65 | rded.NHRP.Resolution.Reply.packe |
39940 | 74 73 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 75 63 65 20 6d | ts..This.can.be.used.to.reduce.m |
39960 | 65 6d 6f 72 79 20 63 6f 6e 73 75 6d 70 74 69 6f 6e 20 6f 6e 20 62 69 67 20 4e 42 4d 41 20 73 75 | emory.consumption.on.big.NBMA.su |
39980 | 62 6e 65 74 73 2e 00 44 69 73 61 62 6c 65 73 20 66 6c 6f 77 20 69 73 6f 6c 61 74 69 6f 6e 2c 20 | bnets..Disables.flow.isolation,. |
399a0 | 61 6c 6c 20 74 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 61 20 73 69 6e | all.traffic.passes.through.a.sin |
399c0 | 67 6c 65 20 71 75 65 75 65 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 61 63 65 2d 62 61 | gle.queue..Disables.interface-ba |
399e0 | 73 65 64 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 61 62 6c 65 73 20 | sed.IPv4.static.route..Disables. |
39a00 | 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 | interface-based.IPv6.static.rout |
39a20 | 65 2e 00 44 69 73 61 62 6c 65 73 20 71 75 69 63 6b 6c 65 61 76 65 20 6d 6f 64 65 2e 20 49 6e 20 | e..Disables.quickleave.mode..In. |
39a40 | 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 65 | this.mode.the.daemon.will.not.se |
39a60 | 6e 64 20 61 20 4c 65 61 76 65 20 49 47 4d 50 20 6d 65 73 73 61 67 65 20 75 70 73 74 72 65 61 6d | nd.a.Leave.IGMP.message.upstream |
39a80 | 20 61 73 20 73 6f 6f 6e 20 61 73 20 69 74 20 72 65 63 65 69 76 65 73 20 61 20 4c 65 61 76 65 20 | .as.soon.as.it.receives.a.Leave. |
39aa0 | 6d 65 73 73 61 67 65 20 66 6f 72 20 61 6e 79 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 | message.for.any.downstream.inter |
39ac0 | 66 61 63 65 2e 20 54 68 65 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 61 73 6b 20 66 6f | face..The.daemon.will.not.ask.fo |
39ae0 | 72 20 4d 65 6d 62 65 72 73 68 69 70 20 72 65 70 6f 72 74 73 20 6f 6e 20 74 68 65 20 64 6f 77 6e | r.Membership.reports.on.the.down |
39b00 | 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 20 69 66 20 61 20 72 65 70 6f | stream.interfaces,.and.if.a.repo |
39b20 | 72 74 20 69 73 20 72 65 63 65 69 76 65 64 20 74 68 65 20 67 72 6f 75 70 20 69 73 20 6e 6f 74 20 | rt.is.received.the.group.is.not. |
39b40 | 6a 6f 69 6e 65 64 20 61 67 61 69 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 2e 00 44 69 73 61 62 | joined.again.the.upstream..Disab |
39b60 | 6c 65 73 20 77 65 62 20 66 69 6c 74 65 72 69 6e 67 20 77 69 74 68 6f 75 74 20 64 69 73 63 61 72 | les.web.filtering.without.discar |
39b80 | 64 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 44 69 73 61 62 6c 65 73 20 77 65 62 | ding.configuration..Disables.web |
39ba0 | 20 70 72 6f 78 79 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6d 6f 64 65 20 61 74 20 61 20 6c 69 73 | .proxy.transparent.mode.at.a.lis |
39bc0 | 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 00 44 69 73 61 62 6c 69 6e 67 20 41 64 76 65 72 74 | tening.address..Disabling.Advert |
39be0 | 69 73 65 6d 65 6e 74 73 00 44 69 73 61 62 6c 69 6e 67 20 61 20 56 52 52 50 20 67 72 6f 75 70 00 | isements.Disabling.a.VRRP.group. |
39c00 | 44 69 73 61 62 6c 69 6e 67 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 6e 20 74 68 65 20 | Disabling.the.encryption.on.the. |
39c20 | 6c 69 6e 6b 20 62 79 20 72 65 6d 6f 76 69 6e 67 20 60 60 73 65 63 75 72 69 74 79 20 65 6e 63 72 | link.by.removing.``security.encr |
39c40 | 79 70 74 60 60 20 77 69 6c 6c 20 73 68 6f 77 20 74 68 65 20 75 6e 65 6e 63 72 79 70 74 65 64 20 | ypt``.will.show.the.unencrypted. |
39c60 | 62 75 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 63 6f 6e 74 65 6e 74 2e 00 44 69 73 61 64 | but.authenticated.content..Disad |
39c80 | 76 61 6e 74 61 67 65 73 20 61 72 65 3a 00 44 69 73 61 73 73 6f 63 69 61 74 65 20 73 74 61 74 69 | vantages.are:.Disassociate.stati |
39ca0 | 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 65 78 63 65 73 73 69 76 65 20 74 72 61 6e 73 6d 69 73 73 | ons.based.on.excessive.transmiss |
39cc0 | 69 6f 6e 20 66 61 69 6c 75 72 65 73 20 6f 72 20 6f 74 68 65 72 20 69 6e 64 69 63 61 74 69 6f 6e | ion.failures.or.other.indication |
39ce0 | 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 73 73 2e 00 44 69 73 70 6c 61 79 20 49 50 | s.of.connection.loss..Display.IP |
39d00 | 76 34 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 | v4.routing.table.for.VRF.identif |
39d20 | 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 49 50 76 36 20 72 6f | ied.by.`<name>`..Display.IPv6.ro |
39d40 | 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 | uting.table.for.VRF.identified.b |
39d60 | 79 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 69 73 70 6c 61 79 20 4c 6f 67 73 00 44 69 73 70 6c 61 79 | y.`<name>`..Display.Logs.Display |
39d80 | 20 4f 54 50 20 6b 65 79 20 66 6f 72 20 75 73 65 72 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 61 75 | .OTP.key.for.user.Display.all.au |
39da0 | 74 68 6f 72 69 7a 61 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 20 6f 66 20 74 68 65 20 73 70 65 63 | thorization.attempts.of.the.spec |
39dc0 | 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 41 52 | ified.image.Display.all.known.AR |
39de0 | 50 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 | P.table.entries.on.a.given.inter |
39e00 | 66 61 63 65 20 6f 6e 6c 79 20 28 60 65 74 68 31 60 29 3a 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 | face.only.(`eth1`):.Display.all. |
39e20 | 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 20 73 70 61 6e 6e 69 6e 67 | known.ARP.table.entries.spanning |
39e40 | 20 61 63 72 6f 73 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 00 44 69 73 70 6c 61 79 20 63 | .across.all.interfaces.Display.c |
39e60 | 6f 6e 74 65 6e 74 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 | ontents.of.a.specified.user-defi |
39e80 | 6e 65 64 20 6c 6f 67 20 66 69 6c 65 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d | ned.log.file.of.the.specified.im |
39ea0 | 61 67 65 00 44 69 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 61 6c 6c 20 6d 61 73 74 | age.Display.contents.of.all.mast |
39ec0 | 65 72 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d | er.log.files.of.the.specified.im |
39ee0 | 61 67 65 00 44 69 73 70 6c 61 79 20 6c 61 73 74 20 6c 69 6e 65 73 20 6f 66 20 74 68 65 20 73 79 | age.Display.last.lines.of.the.sy |
39f00 | 73 74 65 6d 20 6c 6f 67 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 | stem.log.of.the.specified.image. |
39f20 | 44 69 73 70 6c 61 79 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 75 73 65 72 2d 64 65 66 69 6e 65 64 | Display.list.of.all.user-defined |
39f40 | 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 | .log.files.of.the.specified.imag |
39f60 | 65 00 44 69 73 70 6c 61 79 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 20 67 69 76 65 6e 20 63 61 74 | e.Display.log.files.of.given.cat |
39f80 | 65 67 6f 72 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 55 73 65 20 74 61 62 20 63 6f | egory.on.the.console..Use.tab.co |
39fa0 | 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 76 61 69 6c 61 | mpletion.to.get.a.list.of.availa |
39fc0 | 62 6c 65 20 63 61 74 65 67 6f 72 69 65 73 2e 20 54 68 6f 73 20 63 61 74 65 67 6f 72 69 65 73 20 | ble.categories..Thos.categories. |
39fe0 | 63 6f 75 6c 64 20 62 65 3a 20 61 6c 6c 2c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 20 63 6c | could.be:.all,.authorization,.cl |
3a000 | 75 73 74 65 72 2c 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2c 20 64 68 63 70 2c 20 64 69 72 | uster,.conntrack-sync,.dhcp,.dir |
3a020 | 65 63 74 6f 72 79 2c 20 64 6e 73 2c 20 66 69 6c 65 2c 20 66 69 72 65 77 61 6c 6c 2c 20 68 74 74 | ectory,.dns,.file,.firewall,.htt |
3a040 | 70 73 2c 20 69 6d 61 67 65 20 6c 6c 64 70 2c 20 6e 61 74 2c 20 6f 70 65 6e 76 70 6e 2c 20 73 6e | ps,.image.lldp,.nat,.openvpn,.sn |
3a060 | 6d 70 2c 20 74 61 69 6c 2c 20 76 70 6e 2c 20 76 72 72 70 00 44 69 73 70 6c 61 79 73 20 69 6e 66 | mp,.tail,.vpn,.vrrp.Displays.inf |
3a080 | 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 20 64 69 73 | ormation.about.all.neighbors.dis |
3a0a0 | 63 6f 76 65 72 65 64 20 76 69 61 20 4c 4c 44 50 2e 00 44 69 73 70 6c 61 79 73 20 71 75 65 75 65 | covered.via.LLDP..Displays.queue |
3a0c0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 61 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 | .information.for.a.PPPoE.interfa |
3a0e0 | 63 65 2e 00 44 69 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 | ce..Displays.the.route.packets.t |
3a100 | 61 6b 65 6e 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 75 74 69 6c 69 7a 69 6e 67 | aken.to.a.network.host.utilizing |
3a120 | 20 56 52 46 20 69 6e 73 74 61 6e 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 | .VRF.instance.identified.by.`<na |
3a140 | 6d 65 3e 60 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 | me>`..When.using.the.IPv4.or.IPv |
3a160 | 36 20 6f 70 74 69 6f 6e 2c 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 | 6.option,.displays.the.route.pac |
3a180 | 6b 65 74 73 20 74 61 6b 65 6e 20 74 6f 20 74 68 65 20 67 69 76 65 6e 20 68 6f 73 74 73 20 49 50 | kets.taken.to.the.given.hosts.IP |
3a1a0 | 20 61 64 64 72 65 73 73 20 66 61 6d 69 6c 79 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 | .address.family..This.option.is. |
3a1c0 | 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 20 68 6f 73 74 20 69 73 20 73 70 65 63 69 66 69 65 | useful.when.the.host.is.specifie |
3a1e0 | 64 20 61 73 20 61 20 68 6f 73 74 6e 61 6d 65 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 6e 20 49 | d.as.a.hostname.rather.than.an.I |
3a200 | 50 20 61 64 64 72 65 73 73 2e 00 44 6f 20 2a 6e 6f 74 2a 20 6d 61 6e 75 61 6c 6c 79 20 65 64 69 | P.address..Do.*not*.manually.edi |
3a220 | 74 20 60 2f 65 74 63 2f 68 6f 73 74 73 60 2e 20 54 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 61 | t.`/etc/hosts`..This.file.will.a |
3a240 | 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 72 65 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 62 | utomatically.be.regenerated.on.b |
3a260 | 6f 6f 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 65 74 74 69 6e 67 73 20 69 6e 20 74 68 69 | oot.based.on.the.settings.in.thi |
3a280 | 73 20 73 65 63 74 69 6f 6e 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 79 6f 75 27 6c 6c 20 6c 6f | s.section,.which.means.you'll.lo |
3a2a0 | 73 65 20 61 6c 6c 20 79 6f 75 72 20 6d 61 6e 75 61 6c 20 65 64 69 74 73 2e 20 49 6e 73 74 65 61 | se.all.your.manual.edits..Instea |
3a2c0 | 64 2c 20 63 6f 6e 66 69 67 75 72 65 20 73 74 61 74 69 63 20 68 6f 73 74 20 6d 61 70 70 69 6e 67 | d,.configure.static.host.mapping |
3a2e0 | 73 20 61 73 20 66 6f 6c 6c 6f 77 73 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 34 20 | s.as.follows..Do.not.allow.IPv4. |
3a300 | 6e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 | nexthop.tracking.to.resolve.via. |
3a320 | 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 | the.default.route..This.paramete |
3a340 | 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 | r.is.configured.per-VRF,.so.the. |
3a360 | 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 | command.is.also.available.in.the |
3a380 | 20 56 52 46 20 73 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 36 20 | .VRF.subnode..Do.not.allow.IPv6. |
3a3a0 | 6e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 | nexthop.tracking.to.resolve.via. |
3a3c0 | 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 | the.default.route..This.paramete |
3a3e0 | 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 | r.is.configured.per-VRF,.so.the. |
3a400 | 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 | command.is.also.available.in.the |
3a420 | 20 56 52 46 20 73 75 62 6e 6f 64 65 2e 00 44 6f 20 6e 6f 74 20 61 73 73 69 67 6e 20 61 20 6c 69 | .VRF.subnode..Do.not.assign.a.li |
3a440 | 6e 6b 2d 6c 6f 63 61 6c 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e | nk-local.IPv6.address.to.this.in |
3a460 | 74 65 72 66 61 63 65 2e 00 44 6f 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 20 61 73 | terface..Do.not.configure.IFB.as |
3a480 | 20 74 68 65 20 66 69 72 73 74 20 73 74 65 70 2e 20 46 69 72 73 74 20 63 72 65 61 74 65 20 65 76 | .the.first.step..First.create.ev |
3a4a0 | 65 72 79 74 68 69 6e 67 20 65 6c 73 65 20 6f 66 20 79 6f 75 72 20 74 72 61 66 66 69 63 2d 70 6f | erything.else.of.your.traffic-po |
3a4c0 | 6c 69 63 79 2c 20 61 6e 64 20 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 | licy,.and.then.you.can.configure |
3a4e0 | 20 49 46 42 2e 20 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 6d 69 67 68 74 20 67 65 74 20 74 68 | .IFB..Otherwise.you.might.get.th |
3a500 | 65 20 60 60 52 54 4e 45 54 4c 49 4e 4b 20 61 6e 73 77 65 72 3a 20 46 69 6c 65 20 65 78 69 73 74 | e.``RTNETLINK.answer:.File.exist |
3a520 | 73 60 60 20 65 72 72 6f 72 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 6f 6c 76 65 64 20 77 | s``.error,.which.can.be.solved.w |
3a540 | 69 74 68 20 60 60 73 75 64 6f 20 69 70 20 6c 69 6e 6b 20 64 65 6c 65 74 65 20 69 66 62 30 60 60 | ith.``sudo.ip.link.delete.ifb0`` |
3a560 | 2e 00 44 6f 20 6e 6f 74 20 6c 65 61 76 65 20 69 6e 74 72 6f 73 70 65 63 74 69 6f 6e 20 65 6e 61 | ..Do.not.leave.introspection.ena |
3a580 | 62 6c 65 64 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 2c 20 69 74 20 69 73 20 61 20 73 65 63 75 | bled.in.production,.it.is.a.secu |
3a5a0 | 72 69 74 79 20 72 69 73 6b 2e 00 44 6f 20 6e 6f 74 20 73 65 6e 64 20 48 61 72 64 20 52 65 73 65 | rity.risk..Do.not.send.Hard.Rese |
3a5c0 | 74 20 43 45 41 53 45 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 66 6f 72 20 22 41 64 6d 69 6e 69 | t.CEASE.Notification.for."Admini |
3a5e0 | 73 74 72 61 74 69 76 65 20 52 65 73 65 74 22 20 65 76 65 6e 74 73 2e 20 57 68 65 6e 20 73 65 74 | strative.Reset".events..When.set |
3a600 | 20 61 6e 64 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 4e 6f 74 69 66 69 63 61 74 69 | .and.Graceful.Restart.Notificati |
3a620 | 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 | on.capability.is.exchanged.betwe |
3a640 | 65 6e 20 74 68 65 20 70 65 65 72 73 2c 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 70 | en.the.peers,.Graceful.Restart.p |
3a660 | 72 6f 63 65 64 75 72 65 73 20 61 70 70 6c 79 2c 20 61 6e 64 20 72 6f 75 74 65 73 20 77 69 6c 6c | rocedures.apply,.and.routes.will |
3a680 | 20 62 65 20 72 65 74 61 69 6e 65 64 2e 00 44 6f 20 6e 6f 74 20 75 73 65 20 74 68 65 20 6c 6f 63 | .be.retained..Do.not.use.the.loc |
3a6a0 | 61 6c 20 60 60 2f 65 74 63 2f 68 6f 73 74 73 60 60 20 66 69 6c 65 20 69 6e 20 6e 61 6d 65 20 72 | al.``/etc/hosts``.file.in.name.r |
3a6c0 | 65 73 6f 6c 75 74 69 6f 6e 2e 20 56 79 4f 53 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c | esolution..VyOS.DHCP.server.will |
3a6e0 | 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 74 6f 20 61 64 64 20 72 65 73 6f 6c 76 65 72 73 20 | .use.this.file.to.add.resolvers. |
3a700 | 74 6f 20 61 73 73 69 67 6e 65 64 20 61 64 64 72 65 73 73 65 73 2e 00 44 6f 65 73 20 6e 6f 74 20 | to.assigned.addresses..Does.not. |
3a720 | 6e 65 65 64 20 74 6f 20 62 65 20 75 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 70 72 | need.to.be.used.together.with.pr |
3a740 | 6f 78 79 5f 61 72 70 2e 00 44 6f 6d 61 69 6e 00 44 6f 6d 61 69 6e 20 47 72 6f 75 70 73 00 44 6f | oxy_arp..Domain.Domain.Groups.Do |
3a760 | 6d 61 69 6e 20 4e 61 6d 65 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 28 73 29 20 66 6f 72 20 77 68 69 | main.Name.Domain.name(s).for.whi |
3a780 | 63 68 20 74 6f 20 6f 62 74 61 69 6e 20 63 65 72 74 69 66 69 63 61 74 65 00 44 6f 6d 61 69 6e 20 | ch.to.obtain.certificate.Domain. |
3a7a0 | 6e 61 6d 65 73 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d 62 65 | names.can.include.letters,.numbe |
3a7c0 | 72 73 2c 20 68 79 70 68 65 6e 73 20 61 6e 64 20 70 65 72 69 6f 64 73 20 77 69 74 68 20 61 20 6d | rs,.hyphens.and.periods.with.a.m |
3a7e0 | 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 32 35 33 20 63 68 61 72 61 63 74 65 72 73 2e | aximum.length.of.253.characters. |
3a800 | 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 20 74 6f 20 61 70 70 6c 79 2c 20 6d 75 6c 74 69 70 6c 65 | .Domain.names.to.apply,.multiple |
3a820 | 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 | .domain-names.can.be.specified.. |
3a840 | 44 6f 6d 61 69 6e 20 73 65 61 72 63 68 20 6f 72 64 65 72 00 44 6f 6e 27 74 20 62 65 20 61 66 72 | Domain.search.order.Don't.be.afr |
3a860 | 61 69 64 20 74 68 61 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 72 65 2d 64 6f 20 79 6f 75 72 20 | aid.that.you.need.to.re-do.your. |
3a880 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4b 65 79 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f | configuration..Key.transformatio |
3a8a0 | 6e 20 69 73 20 68 61 6e 64 6c 65 64 2c 20 61 73 20 61 6c 77 61 79 73 2c 20 62 79 20 6f 75 72 20 | n.is.handled,.as.always,.by.our. |
3a8c0 | 6d 69 67 72 61 74 69 6f 6e 20 73 63 72 69 70 74 73 2c 20 73 6f 20 74 68 69 73 20 77 69 6c 6c 20 | migration.scripts,.so.this.will. |
3a8e0 | 62 65 20 61 20 73 6d 6f 6f 74 68 20 74 72 61 6e 73 69 74 69 6f 6e 20 66 6f 72 20 79 6f 75 21 00 | be.a.smooth.transition.for.you!. |
3a900 | 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 74 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 | Don't.forget,.the.CIDR.declared. |
3a920 | 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 20 2a 2a 4d 55 53 54 20 | in.the.network.statement.**MUST. |
3a940 | 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e | exist.in.your.routing.table.(dyn |
3a960 | 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 29 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f | amic.or.static),.the.best.way.to |
3a980 | 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 | .make.sure.that.is.true.is.creat |
3a9a0 | 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 66 6f 72 67 | ing.a.static.route:**.Don't.forg |
3a9c0 | 65 74 2c 20 74 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 | et,.the.CIDR.declared.in.the.net |
3a9e0 | 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 20 4d 55 53 54 20 2a 2a 65 78 69 73 74 20 69 6e 20 79 | work.statement.MUST.**exist.in.y |
3aa00 | 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 | our.routing.table.(dynamic.or.st |
3aa20 | 61 74 69 63 29 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 | atic),.the.best.way.to.make.sure |
3aa40 | 20 74 68 61 74 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 | .that.is.true.is.creating.a.stat |
3aa60 | 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 61 | ic.route:**.Don't.get.confused.a |
3aa80 | 62 6f 75 74 20 74 68 65 20 75 73 65 64 20 2f 33 31 20 74 75 6e 6e 65 6c 20 73 75 62 6e 65 74 2e | bout.the.used./31.tunnel.subnet. |
3aaa0 | 20 3a 72 66 63 3a 60 33 30 32 31 60 20 67 69 76 65 73 20 79 6f 75 20 61 64 64 69 74 69 6f 6e 61 | .:rfc:`3021`.gives.you.additiona |
3aac0 | 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 75 73 69 6e 67 20 2f 33 31 20 73 75 62 6e | l.information.for.using./31.subn |
3aae0 | 65 74 73 20 6f 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6c 69 6e 6b 73 2e 00 44 6f 77 | ets.on.point-to-point.links..Dow |
3ab00 | 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 | nload.bandwidth.limit.in.kbit/s. |
3ab20 | 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 | for.`<user>`..Download.bandwidth |
3ab40 | 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 | .limit.in.kbit/s.for.user.on.int |
3ab60 | 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 2f 55 | erface.`<interface>`..Download/U |
3ab80 | 70 64 61 74 65 20 63 6f 6d 70 6c 65 74 65 20 62 6c 61 63 6b 6c 69 73 74 00 44 6f 77 6e 6c 6f 61 | pdate.complete.blacklist.Downloa |
3aba0 | 64 2f 55 70 64 61 74 65 20 70 61 72 74 69 61 6c 20 62 6c 61 63 6b 6c 69 73 74 2e 00 44 72 6f 70 | d/Update.partial.blacklist..Drop |
3abc0 | 20 41 53 2d 4e 55 4d 42 45 52 20 66 72 6f 6d 20 74 68 65 20 42 47 50 20 41 53 20 70 61 74 68 2e | .AS-NUMBER.from.the.BGP.AS.path. |
3abe0 | 00 44 72 6f 70 20 54 61 69 6c 00 44 72 6f 70 20 72 61 74 65 00 44 72 6f 70 70 65 64 20 70 61 63 | .Drop.Tail.Drop.rate.Dropped.pac |
3ac00 | 6b 65 74 73 20 72 65 70 6f 72 74 65 64 20 6f 6e 20 44 52 4f 50 4d 4f 4e 20 4e 65 74 6c 69 6e 6b | kets.reported.on.DROPMON.Netlink |
3ac20 | 20 63 68 61 6e 6e 65 6c 20 62 79 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 61 72 65 20 65 78 70 | .channel.by.Linux.kernel.are.exp |
3ac40 | 6f 72 74 65 64 20 76 69 61 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 73 46 6c 6f 77 20 76 35 20 | orted.via.the.standard.sFlow.v5. |
3ac60 | 65 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 72 65 70 6f 72 74 69 6e 67 20 64 72 6f 70 70 65 64 20 | extension.for.reporting.dropped. |
3ac80 | 70 61 63 6b 65 74 73 00 44 75 61 6c 2d 53 74 61 63 6b 20 49 50 76 34 2f 49 50 76 36 20 70 72 6f | packets.Dual-Stack.IPv4/IPv6.pro |
3aca0 | 76 69 73 69 6f 6e 69 6e 67 20 77 69 74 68 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e | visioning.with.Prefix.Delegation |
3acc0 | 00 44 75 6d 6d 79 00 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 44 75 6d 6d 79 20 69 6e 74 | .Dummy.Dummy.interface.Dummy.int |
3ace0 | 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 69 6e 74 65 72 66 61 63 65 | erfaces.can.be.used.as.interface |
3ad00 | 73 20 74 68 61 74 20 61 6c 77 61 79 73 20 73 74 61 79 20 75 70 20 28 69 6e 20 74 68 65 20 73 61 | s.that.always.stay.up.(in.the.sa |
3ad20 | 6d 65 20 66 61 73 68 69 6f 6e 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 73 20 69 6e 20 43 69 73 63 6f | me.fashion.to.loopbacks.in.Cisco |
3ad40 | 20 49 4f 53 29 2c 20 6f 72 20 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 00 | .IOS),.or.for.testing.purposes.. |
3ad60 | 44 75 70 6c 69 63 61 74 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 69 6e 63 6c 75 64 | Duplicate.packets.are.not.includ |
3ad80 | 65 64 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 63 61 6c 63 75 6c 61 74 69 6f | ed.in.the.packet.loss.calculatio |
3ada0 | 6e 2c 20 61 6c 74 68 6f 75 67 68 20 74 68 65 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 | n,.although.the.round-trip.time. |
3adc0 | 6f 66 20 74 68 65 73 65 20 70 61 63 6b 65 74 73 20 69 73 20 75 73 65 64 20 69 6e 20 63 61 6c 63 | of.these.packets.is.used.in.calc |
3ade0 | 75 6c 61 74 69 6e 67 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2f 20 61 76 65 72 61 67 65 2f 6d 61 78 | ulating.the.minimum/.average/max |
3ae00 | 69 6d 75 6d 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 6e 75 6d 62 65 72 73 2e 00 44 75 | imum.round-trip.time.numbers..Du |
3ae20 | 72 69 6e 67 20 69 6e 69 74 69 61 6c 20 64 65 70 6c 6f 79 6d 65 6e 74 20 77 65 20 72 65 63 6f 6d | ring.initial.deployment.we.recom |
3ae40 | 6d 65 6e 64 20 75 73 69 6e 67 20 74 68 65 20 73 74 61 67 69 6e 67 20 41 50 49 20 6f 66 20 4c 65 | mend.using.the.staging.API.of.Le |
3ae60 | 74 73 45 6e 63 72 79 70 74 20 74 6f 20 70 72 65 76 65 6e 74 20 61 6e 64 20 62 6c 61 63 6b 6c 69 | tsEncrypt.to.prevent.and.blackli |
3ae80 | 73 74 69 6e 67 20 6f 66 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 68 65 20 41 50 49 20 65 6e | sting.of.your.system..The.API.en |
3aea0 | 64 70 6f 69 6e 74 20 69 73 20 68 74 74 70 73 3a 2f 2f 61 63 6d 65 2d 73 74 61 67 69 6e 67 2d 76 | dpoint.is.https://acme-staging-v |
3aec0 | 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 79 | 02.api.letsencrypt.org/directory |
3aee0 | 00 44 75 72 69 6e 67 20 70 72 6f 66 69 6c 65 20 69 6d 70 6f 72 74 2c 20 74 68 65 20 75 73 65 72 | .During.profile.import,.the.user |
3af00 | 20 69 73 20 61 73 6b 65 64 20 74 6f 20 65 6e 74 65 72 20 69 74 73 20 49 50 53 65 63 20 63 72 65 | .is.asked.to.enter.its.IPSec.cre |
3af20 | 64 65 6e 74 69 61 6c 73 20 28 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 29 | dentials.(username.and.password) |
3af40 | 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 6d 6f 62 69 6c 65 2e 00 | .which.is.stored.on.the.mobile.. |
3af60 | 44 79 6e 61 6d 69 63 20 44 4e 53 00 44 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 00 45 | Dynamic.DNS.Dynamic-protection.E |
3af80 | 41 50 6f 4c 20 63 6f 6d 65 73 20 77 69 74 68 20 61 6e 20 69 64 65 6e 74 69 66 79 20 6f 70 74 69 | APoL.comes.with.an.identify.opti |
3afa0 | 6f 6e 2e 20 57 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 73 65 20 74 68 65 20 69 6e 74 | on..We.automatically.use.the.int |
3afc0 | 65 72 66 61 63 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 61 73 20 69 64 65 6e 74 69 74 79 20 70 | erface.MAC.address.as.identity.p |
3afe0 | 61 72 61 6d 65 74 65 72 2e 00 45 53 50 20 28 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 | arameter..ESP.(Encapsulating.Sec |
3b000 | 75 72 69 74 79 20 50 61 79 6c 6f 61 64 29 20 41 74 74 72 69 62 75 74 65 73 00 45 53 50 20 50 68 | urity.Payload).Attributes.ESP.Ph |
3b020 | 61 73 65 3a 00 45 53 50 20 69 73 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 | ase:.ESP.is.used.to.provide.conf |
3b040 | 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 64 61 74 61 20 6f 72 69 67 69 6e 20 61 75 74 68 65 6e 74 | identiality,.data.origin.authent |
3b060 | 69 63 61 74 69 6f 6e 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 20 69 6e 74 65 67 72 69 74 | ication,.connectionless.integrit |
3b080 | 79 2c 20 61 6e 20 61 6e 74 69 2d 72 65 70 6c 61 79 20 73 65 72 76 69 63 65 20 28 61 20 66 6f 72 | y,.an.anti-replay.service.(a.for |
3b0a0 | 6d 20 6f 66 20 70 61 72 74 69 61 6c 20 73 65 71 75 65 6e 63 65 20 69 6e 74 65 67 72 69 74 79 29 | m.of.partial.sequence.integrity) |
3b0c0 | 2c 20 61 6e 64 20 6c 69 6d 69 74 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 63 6f 6e 66 69 | ,.and.limited.traffic.flow.confi |
3b0e0 | 64 65 6e 74 69 61 6c 69 74 79 2e 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e | dentiality..https://datatracker. |
3b100 | 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 66 63 34 33 30 33 00 45 61 63 68 20 3a | ietf.org/doc/html/rfc4303.Each.: |
3b120 | 61 62 62 72 3a 60 41 53 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 29 60 20 68 61 | abbr:`AS.(Autonomous.System)`.ha |
3b140 | 73 20 61 6e 20 69 64 65 6e 74 69 66 79 69 6e 67 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 61 74 | s.an.identifying.number.associat |
3b160 | 65 64 20 77 69 74 68 20 69 74 20 63 61 6c 6c 65 64 20 61 6e 20 3a 61 62 62 72 3a 60 41 53 4e 20 | ed.with.it.called.an.:abbr:`ASN. |
3b180 | 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 69 | (Autonomous.System.Number)`..Thi |
3b1a0 | 73 20 69 73 20 61 20 74 77 6f 20 6f 63 74 65 74 20 76 61 6c 75 65 20 72 61 6e 67 69 6e 67 20 69 | s.is.a.two.octet.value.ranging.i |
3b1c0 | 6e 20 76 61 6c 75 65 20 66 72 6f 6d 20 31 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 41 53 20 | n.value.from.1.to.65535..The.AS. |
3b1e0 | 6e 75 6d 62 65 72 73 20 36 34 35 31 32 20 74 68 72 6f 75 67 68 20 36 35 35 33 35 20 61 72 65 20 | numbers.64512.through.65535.are. |
3b200 | 64 65 66 69 6e 65 64 20 61 73 20 70 72 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 2e 20 50 | defined.as.private.AS.numbers..P |
3b220 | 72 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 64 | rivate.AS.numbers.must.not.be.ad |
3b240 | 76 65 72 74 69 73 65 64 20 6f 6e 20 74 68 65 20 67 6c 6f 62 61 6c 20 49 6e 74 65 72 6e 65 74 2e | vertised.on.the.global.Internet. |
3b260 | 20 54 68 65 20 32 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 68 61 73 20 | .The.2-byte.AS.number.range.has. |
3b280 | 62 65 65 6e 20 65 78 68 61 75 73 74 65 64 2e 20 34 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 | been.exhausted..4-byte.AS.number |
3b2a0 | 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 36 37 39 33 60 2c 20 | s.are.specified.in.:rfc:`6793`,. |
3b2c0 | 61 6e 64 20 70 72 6f 76 69 64 65 20 61 20 70 6f 6f 6c 20 6f 66 20 34 32 39 34 39 36 37 32 39 36 | and.provide.a.pool.of.4294967296 |
3b2e0 | 20 41 53 20 6e 75 6d 62 65 72 73 2e 00 45 61 63 68 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e | .AS.numbers..Each.Netfilter.conn |
3b300 | 65 63 74 69 6f 6e 20 69 73 20 75 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 | ection.is.uniquely.identified.by |
3b320 | 20 61 20 28 6c 61 79 65 72 2d 33 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 | .a.(layer-3.protocol,.source.add |
3b340 | 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 6c 61 79 65 72 | ress,.destination.address,.layer |
3b360 | 2d 34 20 70 72 6f 74 6f 63 6f 6c 2c 20 6c 61 79 65 72 2d 34 20 6b 65 79 29 20 74 75 70 6c 65 2e | -4.protocol,.layer-4.key).tuple. |
3b380 | 20 54 68 65 20 6c 61 79 65 72 2d 34 20 6b 65 79 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 | .The.layer-4.key.depends.on.the. |
3b3a0 | 74 72 61 6e 73 70 6f 72 74 20 70 72 6f 74 6f 63 6f 6c 3b 20 66 6f 72 20 54 43 50 2f 55 44 50 20 | transport.protocol;.for.TCP/UDP. |
3b3c0 | 69 74 20 69 73 20 74 68 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 66 6f 72 20 74 75 6e 6e | it.is.the.port.numbers,.for.tunn |
3b3e0 | 65 6c 73 20 69 74 20 63 61 6e 20 62 65 20 74 68 65 69 72 20 74 75 6e 6e 65 6c 20 49 44 2c 20 62 | els.it.can.be.their.tunnel.ID,.b |
3b400 | 75 74 20 6f 74 68 65 72 77 69 73 65 20 69 73 20 6a 75 73 74 20 7a 65 72 6f 2c 20 61 73 20 69 66 | ut.otherwise.is.just.zero,.as.if |
3b420 | 20 69 74 20 77 65 72 65 20 6e 6f 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 75 70 6c 65 2e 20 | .it.were.not.part.of.the.tuple.. |
3b440 | 54 6f 20 62 65 20 61 62 6c 65 20 74 6f 20 69 6e 73 70 65 63 74 20 74 68 65 20 54 43 50 20 70 6f | To.be.able.to.inspect.the.TCP.po |
3b460 | 72 74 20 69 6e 20 61 6c 6c 20 63 61 73 65 73 2c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 | rt.in.all.cases,.packets.will.be |
3b480 | 20 6d 61 6e 64 61 74 6f 72 69 6c 79 20 64 65 66 72 61 67 6d 65 6e 74 65 64 2e 00 45 61 63 68 20 | .mandatorily.defragmented..Each. |
3b4a0 | 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 74 68 72 6f | VXLAN.segment.is.identified.thro |
3b4c0 | 75 67 68 20 61 20 32 34 2d 62 69 74 20 73 65 67 6d 65 6e 74 20 49 44 2c 20 74 65 72 6d 65 64 20 | ugh.a.24-bit.segment.ID,.termed. |
3b4e0 | 74 68 65 20 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 | the.:abbr:`VNI.(VXLAN.Network.Id |
3b500 | 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 | entifier.(or.VXLAN.Segment.ID))` |
3b520 | 2c 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 75 70 20 74 6f 20 31 36 4d 20 56 58 4c 41 4e 20 73 65 | ,.This.allows.up.to.16M.VXLAN.se |
3b540 | 67 6d 65 6e 74 73 20 74 6f 20 63 6f 65 78 69 73 74 20 77 69 74 68 69 6e 20 74 68 65 20 73 61 6d | gments.to.coexist.within.the.sam |
3b560 | 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 6f 6d 61 69 6e 2e 00 45 61 63 68 20 62 72 | e.administrative.domain..Each.br |
3b580 | 69 64 67 65 20 68 61 73 20 61 20 72 65 6c 61 74 69 76 65 20 70 72 69 6f 72 69 74 79 20 61 6e 64 | idge.has.a.relative.priority.and |
3b5a0 | 20 63 6f 73 74 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 6f 63 69 61 | .cost..Each.interface.is.associa |
3b5c0 | 74 65 64 20 77 69 74 68 20 61 20 70 6f 72 74 20 28 6e 75 6d 62 65 72 29 20 69 6e 20 74 68 65 20 | ted.with.a.port.(number).in.the. |
3b5e0 | 53 54 50 20 63 6f 64 65 2e 20 45 61 63 68 20 68 61 73 20 61 20 70 72 69 6f 72 69 74 79 20 61 6e | STP.code..Each.has.a.priority.an |
3b600 | 64 20 61 20 63 6f 73 74 2c 20 74 68 61 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 69 64 65 | d.a.cost,.that.is.used.to.decide |
3b620 | 20 77 68 69 63 68 20 69 73 20 74 68 65 20 73 68 6f 72 74 65 73 74 20 70 61 74 68 20 74 6f 20 66 | .which.is.the.shortest.path.to.f |
3b640 | 6f 72 77 61 72 64 20 61 20 70 61 63 6b 65 74 2e 20 54 68 65 20 6c 6f 77 65 73 74 20 63 6f 73 74 | orward.a.packet..The.lowest.cost |
3b660 | 20 70 61 74 68 20 69 73 20 61 6c 77 61 79 73 20 75 73 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 | .path.is.always.used.unless.the. |
3b680 | 6f 74 68 65 72 20 70 61 74 68 20 69 73 20 64 6f 77 6e 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 | other.path.is.down..If.you.have. |
3b6a0 | 6d 75 6c 74 69 70 6c 65 20 62 72 69 64 67 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 | multiple.bridges.and.interfaces. |
3b6c0 | 74 68 65 6e 20 79 6f 75 20 6d 61 79 20 6e 65 65 64 20 74 6f 20 61 64 6a 75 73 74 20 74 68 65 20 | then.you.may.need.to.adjust.the. |
3b6e0 | 70 72 69 6f 72 69 74 69 65 73 20 74 6f 20 61 63 68 69 65 76 65 20 6f 70 74 69 6d 75 6d 20 70 65 | priorities.to.achieve.optimum.pe |
3b700 | 72 66 6f 72 6d 61 6e 63 65 2e 00 45 61 63 68 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 | rformance..Each.broadcast.relay. |
3b720 | 69 6e 73 74 61 6e 63 65 20 63 61 6e 20 62 65 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 64 69 73 | instance.can.be.individually.dis |
3b740 | 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 | abled.without.deleting.the.confi |
3b760 | 67 75 72 65 64 20 6e 6f 64 65 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | gured.node.by.using.the.followin |
3b780 | 67 20 63 6f 6d 6d 61 6e 64 3a 00 45 61 63 68 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 61 | g.command:.Each.class.can.have.a |
3b7a0 | 20 67 75 61 72 61 6e 74 65 65 64 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 6f 74 61 6c 20 62 61 | .guaranteed.part.of.the.total.ba |
3b7c0 | 6e 64 77 69 64 74 68 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 77 68 6f 6c 65 20 70 6f | ndwidth.defined.for.the.whole.po |
3b7e0 | 6c 69 63 79 2c 20 73 6f 20 61 6c 6c 20 74 68 6f 73 65 20 73 68 61 72 65 73 20 74 6f 67 65 74 68 | licy,.so.all.those.shares.togeth |
3b800 | 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 68 69 67 68 65 72 20 74 68 61 6e 20 74 68 65 | er.should.not.be.higher.than.the |
3b820 | 20 70 6f 6c 69 63 79 27 73 20 77 68 6f 6c 65 20 62 61 6e 64 77 69 64 74 68 2e 00 45 61 63 68 20 | .policy's.whole.bandwidth..Each. |
3b840 | 63 6c 61 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 61 20 64 65 66 69 63 69 74 20 63 6f 75 6e | class.is.assigned.a.deficit.coun |
3b860 | 74 65 72 20 28 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 74 68 61 74 20 61 20 | ter.(the.number.of.bytes.that.a. |
3b880 | 66 6c 6f 77 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 77 68 65 6e | flow.is.allowed.to.transmit.when |
3b8a0 | 20 69 74 20 69 73 20 69 74 73 20 74 75 72 6e 29 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 74 6f 20 | .it.is.its.turn).initialized.to. |
3b8c0 | 71 75 61 6e 74 75 6d 2e 20 51 75 61 6e 74 75 6d 20 69 73 20 61 20 70 61 72 61 6d 65 74 65 72 20 | quantum..Quantum.is.a.parameter. |
3b8e0 | 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 77 68 69 63 68 20 61 63 74 73 20 6c 69 6b 65 20 61 20 | you.configure.which.acts.like.a. |
3b900 | 63 72 65 64 69 74 20 6f 66 20 66 69 78 20 62 79 74 65 73 20 74 68 65 20 63 6f 75 6e 74 65 72 20 | credit.of.fix.bytes.the.counter. |
3b920 | 72 65 63 65 69 76 65 73 20 6f 6e 20 65 61 63 68 20 72 6f 75 6e 64 2e 20 54 68 65 6e 20 74 68 65 | receives.on.each.round..Then.the |
3b940 | 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 73 74 61 72 74 73 20 6d 6f 76 69 6e | .Round-Robin.policy.starts.movin |
3b960 | 67 20 69 74 73 20 52 6f 75 6e 64 20 52 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 74 68 72 6f 75 67 | g.its.Round.Robin.pointer.throug |
3b980 | 68 20 74 68 65 20 71 75 65 75 65 73 2e 20 49 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 | h.the.queues..If.the.deficit.cou |
3b9a0 | 6e 74 65 72 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 68 65 20 70 61 63 6b 65 74 27 | nter.is.greater.than.the.packet' |
3b9c0 | 73 20 73 69 7a 65 20 61 74 20 74 68 65 20 68 65 61 64 20 6f 66 20 74 68 65 20 71 75 65 75 65 2c | s.size.at.the.head.of.the.queue, |
3b9e0 | 20 74 68 69 73 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 6e 64 20 74 68 | .this.packet.will.be.sent.and.th |
3ba00 | 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 62 65 20 64 | e.value.of.the.counter.will.be.d |
3ba20 | 65 63 72 65 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 70 61 63 6b 65 74 20 73 69 7a 65 2e 20 54 | ecremented.by.the.packet.size..T |
3ba40 | 68 65 6e 2c 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6e 65 78 74 20 70 61 63 6b 65 74 | hen,.the.size.of.the.next.packet |
3ba60 | 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 74 68 65 20 63 6f 75 6e 74 65 72 | .will.be.compared.to.the.counter |
3ba80 | 20 76 61 6c 75 65 20 61 67 61 69 6e 2c 20 72 65 70 65 61 74 69 6e 67 20 74 68 65 20 70 72 6f 63 | .value.again,.repeating.the.proc |
3baa0 | 65 73 73 2e 20 4f 6e 63 65 20 74 68 65 20 71 75 65 75 65 20 69 73 20 65 6d 70 74 79 20 6f 72 20 | ess..Once.the.queue.is.empty.or. |
3bac0 | 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 63 6f 75 6e 74 65 72 20 69 73 20 69 6e 73 75 | the.value.of.the.counter.is.insu |
3bae0 | 66 66 69 63 69 65 6e 74 2c 20 74 68 65 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 69 6e 74 65 | fficient,.the.Round-Robin.pointe |
3bb00 | 72 20 77 69 6c 6c 20 6d 6f 76 65 20 74 6f 20 74 68 65 20 6e 65 78 74 20 71 75 65 75 65 2e 20 49 | r.will.move.to.the.next.queue..I |
3bb20 | 66 20 74 68 65 20 71 75 65 75 65 20 69 73 20 65 6d 70 74 79 2c 20 74 68 65 20 76 61 6c 75 65 20 | f.the.queue.is.empty,.the.value. |
3bb40 | 6f 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 69 73 20 72 65 73 65 74 20 | of.the.deficit.counter.is.reset. |
3bb60 | 74 6f 20 30 2e 00 45 61 63 68 20 64 79 6e 61 6d 69 63 20 4e 48 53 20 77 69 6c 6c 20 67 65 74 20 | to.0..Each.dynamic.NHS.will.get. |
3bb80 | 61 20 70 65 65 72 20 65 6e 74 72 79 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 | a.peer.entry.with.the.configured |
3bba0 | 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 | .network.address.and.the.discove |
3bbc0 | 72 65 64 20 4e 42 4d 41 20 61 64 64 72 65 73 73 2e 00 45 61 63 68 20 68 65 61 6c 74 68 20 63 68 | red.NBMA.address..Each.health.ch |
3bbe0 | 65 63 6b 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 69 74 73 20 6f 77 6e 20 74 65 73 | eck.is.configured.in.its.own.tes |
3bc00 | 74 2c 20 74 65 73 74 73 20 61 72 65 20 6e 75 6d 62 65 72 65 64 20 61 6e 64 20 70 72 6f 63 65 73 | t,.tests.are.numbered.and.proces |
3bc20 | 73 65 64 20 69 6e 20 6e 75 6d 65 72 69 63 20 6f 72 64 65 72 2e 20 46 6f 72 20 6d 75 6c 74 69 20 | sed.in.numeric.order..For.multi. |
3bc40 | 74 61 72 67 65 74 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 | target.health.checking.multiple. |
3bc60 | 74 65 73 74 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 3a 00 45 61 63 68 20 69 6e 64 69 76 | tests.can.be.defined:.Each.indiv |
3bc80 | 69 64 75 61 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 63 6f 6e 73 6f 6c 65 2d 73 65 72 76 65 72 20 | idual.configured.console-server. |
3bca0 | 64 65 76 69 63 65 20 63 61 6e 20 62 65 20 64 69 72 65 63 74 6c 79 20 65 78 70 6f 73 65 64 20 74 | device.can.be.directly.exposed.t |
3bcc0 | 6f 20 74 68 65 20 6f 75 74 73 69 64 65 20 77 6f 72 6c 64 2e 20 41 20 75 73 65 72 20 63 61 6e 20 | o.the.outside.world..A.user.can. |
3bce0 | 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 20 76 69 61 20 53 53 48 20 74 6f 20 74 68 65 20 | directly.connect.via.SSH.to.the. |
3bd00 | 63 6f 6e 66 69 67 75 72 65 64 20 70 6f 72 74 2e 00 45 61 63 68 20 6e 6f 64 65 20 28 48 75 62 20 | configured.port..Each.node.(Hub. |
3bd20 | 61 6e 64 20 53 70 6f 6b 65 29 20 75 73 65 73 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 | and.Spoke).uses.an.IP.address.fr |
3bd40 | 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 31 37 32 2e 31 36 2e 32 35 33 2e 31 32 38 2f 32 39 | om.the.network.172.16.253.128/29 |
3bd60 | 2e 00 45 61 63 68 20 6f 66 20 74 68 65 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 | ..Each.of.the.install.command.sh |
3bd80 | 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | ould.be.applied.to.the.configura |
3bda0 | 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 | tion.and.commited.before.using.u |
3bdc0 | 6e 64 65 72 20 74 68 65 20 6f 70 65 6e 63 6f 6e 6e 65 63 74 20 63 6f 6e 66 69 67 75 72 61 74 69 | nder.the.openconnect.configurati |
3bde0 | 6f 6e 3a 00 45 61 63 68 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 68 61 73 20 74 | on:.Each.site-to-site.peer.has.t |
3be00 | 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 45 65 6e 61 62 6c 65 73 20 74 68 65 20 47 65 | he.next.options:.Eenables.the.Ge |
3be20 | 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d | neric.Protocol.extension.(VXLAN- |
3be40 | 47 50 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 | GPE)..Currently,.this.is.only.su |
3be60 | 70 70 6f 72 74 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e | pported.together.with.the.extern |
3be80 | 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 6d 61 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 61 73 73 | al.keyword..Email.address.to.ass |
3bea0 | 6f 63 69 61 74 65 20 77 69 74 68 20 63 65 72 74 69 66 69 63 61 74 65 00 45 6d 61 69 6c 20 75 73 | ociate.with.certificate.Email.us |
3bec0 | 65 64 20 66 6f 72 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 61 6e 64 20 72 65 63 6f 76 65 72 79 | ed.for.registration.and.recovery |
3bee0 | 20 63 6f 6e 74 61 63 74 2e 00 45 6d 62 65 64 64 69 6e 67 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 | .contact..Embedding.one.policy.i |
3bf00 | 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 00 45 6d 65 72 67 65 6e 63 79 00 45 6e 61 62 6c 65 | nto.another.one.Emergency.Enable |
3bf20 | 20 3a 61 62 62 72 3a 60 42 4d 50 20 28 42 47 50 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 50 72 6f 74 | .:abbr:`BMP.(BGP.Monitoring.Prot |
3bf40 | 6f 63 6f 6c 29 60 20 73 75 70 70 6f 72 74 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 49 53 | ocol)`.support.Enable.BFD.for.IS |
3bf60 | 49 53 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f | IS.on.an.interface.Enable.BFD.fo |
3bf80 | 72 20 4f 53 50 46 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 | r.OSPF.on.an.interface.Enable.BF |
3bfa0 | 44 20 66 6f 72 20 4f 53 50 46 76 33 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 | D.for.OSPFv3.on.an.interface.Ena |
3bfc0 | 62 6c 65 20 42 46 44 20 69 6e 20 42 47 50 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 49 53 49 | ble.BFD.in.BGP.Enable.BFD.in.ISI |
3bfe0 | 53 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 42 46 44 20 | S.Enable.BFD.in.OSPF.Enable.BFD. |
3c000 | 6f 6e 20 61 20 42 47 50 20 70 65 65 72 20 67 72 6f 75 70 00 45 6e 61 62 6c 65 20 42 46 44 20 6f | on.a.BGP.peer.group.Enable.BFD.o |
3c020 | 6e 20 61 20 73 69 6e 67 6c 65 20 42 47 50 20 6e 65 69 67 68 62 6f 72 00 45 6e 61 62 6c 65 20 44 | n.a.single.BGP.neighbor.Enable.D |
3c040 | 48 43 50 20 66 61 69 6c 6f 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 | HCP.failover.configuration.for.t |
3c060 | 68 69 73 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 2e 00 45 6e 61 62 6c 65 20 47 72 61 70 68 51 4c | his.address.pool..Enable.GraphQL |
3c080 | 20 53 63 68 65 6d 61 20 69 6e 74 72 6f 73 70 65 63 74 69 6f 6e 2e 00 45 6e 61 62 6c 65 20 48 54 | .Schema.introspection..Enable.HT |
3c0a0 | 2d 64 65 6c 61 79 65 64 20 42 6c 6f 63 6b 20 41 63 6b 20 60 60 5b 44 45 4c 41 59 45 44 2d 42 41 | -delayed.Block.Ack.``[DELAYED-BA |
3c0c0 | 5d 60 60 00 45 6e 61 62 6c 65 20 49 43 4d 50 20 52 6f 75 74 65 72 20 44 69 73 63 6f 76 65 72 79 | ]``.Enable.ICMP.Router.Discovery |
3c0e0 | 20 50 72 6f 74 6f 63 6f 6c 20 73 75 70 70 6f 72 74 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e | .Protocol.support.Enable.IGMP.an |
3c100 | 64 20 4d 4c 44 20 71 75 65 72 69 65 72 2e 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d | d.MLD.querier..Enable.IGMP.and.M |
3c120 | 4c 44 20 73 6e 6f 6f 70 69 6e 67 2e 00 45 6e 61 62 6c 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e | LD.snooping..Enable.IP.forwardin |
3c140 | 67 20 6f 6e 20 63 6c 69 65 6e 74 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 | g.on.client.Enable.IS-IS.Enable. |
3c160 | 49 53 2d 49 53 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f | IS-IS.and.IGP-LDP.synchronizatio |
3c180 | 6e 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 | n.Enable.IS-IS.and.redistribute. |
3c1a0 | 72 6f 75 74 65 73 20 6e 6f 74 20 6e 61 74 69 76 65 6c 79 20 69 6e 20 49 53 2d 49 53 00 45 6e 61 | routes.not.natively.in.IS-IS.Ena |
3c1c0 | 62 6c 65 20 49 53 2d 49 53 20 77 69 74 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 | ble.IS-IS.with.Segment.Routing.( |
3c1e0 | 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 00 45 6e 61 62 6c 65 20 4c 2d 53 49 47 20 54 58 4f 50 20 | Experimental).Enable.L-SIG.TXOP. |
3c200 | 70 72 6f 74 65 63 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 44 50 | protection.capability.Enable.LDP |
3c220 | 43 20 28 4c 6f 77 20 44 65 6e 73 69 74 79 20 50 61 72 69 74 79 20 43 68 65 63 6b 29 20 63 6f 64 | C.(Low.Density.Parity.Check).cod |
3c240 | 69 6e 67 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 63 6f 64 69 6e | ing.capability.Enable.LDPC.codin |
3c260 | 67 20 63 61 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 4c 44 50 20 73 65 72 76 69 63 65 | g.capability.Enable.LLDP.service |
3c280 | 00 45 6e 61 62 6c 65 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 61 6e 64 20 49 47 50 | .Enable.OSPF.Enable.OSPF.and.IGP |
3c2a0 | 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 3a 00 45 6e 61 62 6c 65 20 4f 53 50 | -LDP.synchronization:.Enable.OSP |
3c2c0 | 46 20 77 69 74 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 | F.with.Segment.Routing.(Experime |
3c2e0 | 6e 74 61 6c 29 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 69 74 68 20 72 6f 75 74 65 20 72 65 | ntal):.Enable.OSPF.with.route.re |
3c300 | 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 61 6e 64 | distribution.of.the.loopback.and |
3c320 | 20 64 65 66 61 75 6c 74 20 6f 72 69 67 69 6e 61 74 65 3a 00 45 6e 61 62 6c 65 20 4f 54 50 20 32 | .default.originate:.Enable.OTP.2 |
3c340 | 46 41 20 66 6f 72 20 75 73 65 72 20 60 75 73 65 72 6e 61 6d 65 60 20 77 69 74 68 20 64 65 66 61 | FA.for.user.`username`.with.defa |
3c360 | 75 6c 74 20 73 65 74 74 69 6e 67 73 2c 20 75 73 69 6e 67 20 74 68 65 20 42 41 53 45 33 32 20 65 | ult.settings,.using.the.BASE32.e |
3c380 | 6e 63 6f 64 65 64 20 32 46 41 2f 4d 46 41 20 6b 65 79 20 73 70 65 63 69 66 69 65 64 20 62 79 20 | ncoded.2FA/MFA.key.specified.by. |
3c3a0 | 60 3c 6b 65 79 3e 60 2e 00 45 6e 61 62 6c 65 20 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 | `<key>`..Enable.OpenVPN.Data.Cha |
3c3c0 | 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 66 65 61 74 75 72 65 20 62 79 20 6c 6f 61 64 69 6e 67 20 | nnel.Offload.feature.by.loading. |
3c3e0 | 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 6b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 2e 00 45 | the.appropriate.kernel.module..E |
3c400 | 6e 61 62 6c 65 20 50 52 45 46 36 34 20 6f 70 74 69 6f 6e 20 61 73 20 6f 75 74 6c 69 6e 65 64 20 | nable.PREF64.option.as.outlined. |
3c420 | 69 6e 20 3a 72 66 63 3a 60 38 37 38 31 60 2e 00 45 6e 61 62 6c 65 20 53 4e 4d 50 00 45 6e 61 62 | in.:rfc:`8781`..Enable.SNMP.Enab |
3c440 | 6c 65 20 53 4e 4d 50 20 71 75 65 72 69 65 73 20 6f 66 20 74 68 65 20 4c 4c 44 50 20 64 61 74 61 | le.SNMP.queries.of.the.LLDP.data |
3c460 | 62 61 73 65 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 6e 20 | base.Enable.SNMP.support.for.an. |
3c480 | 69 6e 64 69 76 69 64 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2e 00 45 6e 61 62 6c | individual.routing.daemon..Enabl |
3c4a0 | 65 20 53 54 50 00 45 6e 61 62 6c 65 20 54 46 54 50 20 73 65 72 76 69 63 65 20 62 79 20 73 70 65 | e.STP.Enable.TFTP.service.by.spe |
3c4c0 | 63 69 66 79 69 6e 67 20 74 68 65 20 60 3c 64 69 72 65 63 74 6f 72 79 3e 60 20 77 68 69 63 68 20 | cifying.the.`<directory>`.which. |
3c4e0 | 77 69 6c 6c 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 72 76 65 20 66 69 6c 65 73 2e 00 45 6e 61 | will.be.used.to.serve.files..Ena |
3c500 | 62 6c 65 20 56 48 54 20 54 58 4f 50 20 50 6f 77 65 72 20 53 61 76 65 20 4d 6f 64 65 00 45 6e 61 | ble.VHT.TXOP.Power.Save.Mode.Ena |
3c520 | 62 6c 65 20 56 4c 41 4e 2d 41 77 61 72 65 20 42 72 69 64 67 65 00 45 6e 61 62 6c 65 20 61 75 74 | ble.VLAN-Aware.Bridge.Enable.aut |
3c540 | 6f 6d 61 74 69 63 20 72 65 64 69 72 65 63 74 20 66 72 6f 6d 20 68 74 74 70 20 74 6f 20 68 74 74 | omatic.redirect.from.http.to.htt |
3c560 | 70 73 2e 00 45 6e 61 62 6c 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 | ps..Enable.creation.of.shortcut. |
3c580 | 72 6f 75 74 65 73 2e 00 45 6e 61 62 6c 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f | routes..Enable.different.types.o |
3c5a0 | 66 20 68 61 72 64 77 61 72 65 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 6e 20 74 68 65 20 67 69 76 | f.hardware.offloading.on.the.giv |
3c5c0 | 65 6e 20 4e 49 43 2e 00 45 6e 61 62 6c 65 20 67 69 76 65 6e 20 6c 65 67 61 63 79 20 70 72 6f 74 | en.NIC..Enable.given.legacy.prot |
3c5e0 | 6f 63 6f 6c 20 6f 6e 20 74 68 69 73 20 4c 4c 44 50 20 69 6e 73 74 61 6e 63 65 2e 20 4c 65 67 61 | ocol.on.this.LLDP.instance..Lega |
3c600 | 63 79 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 65 3a 00 45 6e 61 62 6c 65 20 6c 61 79 | cy.protocols.include:.Enable.lay |
3c620 | 65 72 20 37 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 00 45 6e 61 62 6c 65 20 6c 6f | er.7.HTTP.health.check.Enable.lo |
3c640 | 67 67 69 6e 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 20 49 66 | gging.for.the.matched.packet..If |
3c660 | 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e | .this.configuration.command.is.n |
3c680 | 6f 74 20 70 72 65 73 65 6e 74 2c 20 74 68 65 6e 20 6c 6f 67 20 69 73 20 6e 6f 74 20 65 6e 61 62 | ot.present,.then.log.is.not.enab |
3c6a0 | 6c 65 64 2e 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 61 62 6c 65 20 56 79 4f 53 20 74 6f 20 62 | led..Enable.or.Disable.VyOS.to.b |
3c6c0 | 65 20 3a 72 66 63 3a 60 31 33 33 37 60 20 63 6f 6e 66 6f 72 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f | e.:rfc:`1337`.conform..The.follo |
3c6e0 | 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c | wing.system.parameter.will.be.al |
3c700 | 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 20 44 69 73 61 62 6c 65 20 69 66 20 56 79 4f 53 | tered:.Enable.or.Disable.if.VyOS |
3c720 | 20 75 73 65 20 49 50 76 34 20 54 43 50 20 53 59 4e 20 43 6f 6f 6b 69 65 73 2e 20 54 68 65 20 66 | .use.IPv4.TCP.SYN.Cookies..The.f |
3c740 | 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 | ollowing.system.parameter.will.b |
3c760 | 65 20 61 6c 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 | e.altered:.Enable.or.disable.log |
3c780 | 67 69 6e 67 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 00 45 6e 61 | ging.for.the.matched.packet..Ena |
3c7a0 | 62 6c 65 20 6f 73 70 66 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 73 65 74 | ble.ospf.on.an.interface.and.set |
3c7c0 | 20 61 73 73 6f 63 69 61 74 65 64 20 61 72 65 61 2e 00 45 6e 61 62 6c 65 20 70 6f 6c 69 63 79 20 | .associated.area..Enable.policy. |
3c7e0 | 66 6f 72 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 62 79 20 72 65 76 65 72 73 65 | for.source.validation.by.reverse |
3c800 | 64 20 70 61 74 68 2c 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 | d.path,.as.specified.in.:rfc:`37 |
3c820 | 30 34 60 2e 20 43 75 72 72 65 6e 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 70 72 61 63 74 69 63 | 04`..Current.recommended.practic |
3c840 | 65 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 20 69 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 74 | e.in.:rfc:`3704`.is.to.enable.st |
3c860 | 72 69 63 74 20 6d 6f 64 65 20 74 6f 20 70 72 65 76 65 6e 74 20 49 50 20 73 70 6f 6f 66 69 6e 67 | rict.mode.to.prevent.IP.spoofing |
3c880 | 20 66 72 6f 6d 20 44 44 6f 73 20 61 74 74 61 63 6b 73 2e 20 49 66 20 75 73 69 6e 67 20 61 73 79 | .from.DDos.attacks..If.using.asy |
3c8a0 | 6d 6d 65 74 72 69 63 20 72 6f 75 74 69 6e 67 20 6f 72 20 6f 74 68 65 72 20 63 6f 6d 70 6c 69 63 | mmetric.routing.or.other.complic |
3c8c0 | 61 74 65 64 20 72 6f 75 74 69 6e 67 2c 20 74 68 65 6e 20 6c 6f 6f 73 65 20 6d 6f 64 65 20 69 73 | ated.routing,.then.loose.mode.is |
3c8e0 | 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 6e 61 62 6c 65 20 72 65 63 65 69 76 69 6e 67 20 50 | .recommended..Enable.receiving.P |
3c900 | 50 44 55 20 75 73 69 6e 67 20 53 54 42 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b | PDU.using.STBC.(Space.Time.Block |
3c920 | 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 73 61 6d 70 6c 69 6e 67 20 6f 66 20 70 61 63 6b | .Coding).Enable.sampling.of.pack |
3c940 | 65 74 73 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 | ets,.which.will.be.transmitted.t |
3c960 | 6f 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 73 2e 00 45 6e 61 62 6c 65 20 73 65 6e 64 69 | o.sFlow.collectors..Enable.sendi |
3c980 | 6e 67 20 50 50 44 55 20 75 73 69 6e 67 20 53 54 42 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 | ng.PPDU.using.STBC.(Space.Time.B |
3c9a0 | 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 6f 66 20 43 | lock.Coding).Enable.sending.of.C |
3c9c0 | 69 73 63 6f 20 73 74 79 6c 65 20 4e 48 52 50 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 | isco.style.NHRP.Traffic.Indicati |
3c9e0 | 6f 6e 20 70 61 63 6b 65 74 73 2e 20 49 66 20 74 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 61 | on.packets..If.this.is.enabled.a |
3ca00 | 6e 64 20 6f 70 65 6e 6e 68 72 70 20 64 65 74 65 63 74 73 20 61 20 66 6f 72 77 61 72 64 65 64 20 | nd.opennhrp.detects.a.forwarded. |
3ca20 | 20 70 61 63 6b 65 74 2c 20 69 74 20 77 69 6c 6c 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 | .packet,.it.will.send.a.message. |
3ca40 | 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 65 6e 64 65 72 20 6f 66 20 74 68 65 20 70 61 | to.the.original.sender.of.the.pa |
3ca60 | 63 6b 65 74 20 69 6e 73 74 72 75 63 74 69 6e 67 20 69 74 20 74 6f 20 63 72 65 61 74 65 20 61 20 | cket.instructing.it.to.create.a. |
3ca80 | 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 64 65 73 74 69 | direct.connection.with.the.desti |
3caa0 | 6e 61 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 61 73 69 63 61 6c 6c 79 20 61 20 70 72 6f 74 | nation..This.is.basically.a.prot |
3cac0 | 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 49 | ocol.independent.equivalent.of.I |
3cae0 | 43 4d 50 20 72 65 64 69 72 65 63 74 2e 00 45 6e 61 62 6c 65 20 73 70 61 6e 6e 69 6e 67 20 74 72 | CMP.redirect..Enable.spanning.tr |
3cb00 | 65 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 53 54 50 20 69 73 20 64 69 73 61 62 6c 65 64 20 62 79 20 | ee.protocol..STP.is.disabled.by. |
3cb20 | 64 65 66 61 75 6c 74 2e 00 45 6e 61 62 6c 65 20 74 68 65 20 4f 70 61 71 75 65 2d 4c 53 41 20 63 | default..Enable.the.Opaque-LSA.c |
3cb40 | 61 70 61 62 69 6c 69 74 79 20 28 72 66 63 32 33 37 30 29 2c 20 6e 65 63 65 73 73 61 72 79 20 74 | apability.(rfc2370),.necessary.t |
3cb60 | 6f 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c 20 6f 6e 20 49 47 50 00 45 6e 61 62 6c 65 20 | o.transport.label.on.IGP.Enable. |
3cb80 | 74 68 69 73 20 66 65 61 74 75 72 65 20 63 61 75 73 65 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | this.feature.causes.an.interface |
3cba0 | 20 72 65 73 65 74 2e 00 45 6e 61 62 6c 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 4c | .reset..Enable.transmission.of.L |
3cbc0 | 4c 44 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 | LDP.information.on.given.`<inter |
3cbe0 | 66 61 63 65 3e 60 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 73 61 79 20 60 60 61 6c 6c 60 60 | face>`..You.can.also.say.``all`` |
3cc00 | 20 68 65 72 65 20 73 6f 20 4c 4c 44 50 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 6f 6e 20 65 76 | .here.so.LLDP.is.turned.on.on.ev |
3cc20 | 65 72 79 20 69 6e 74 65 72 66 61 63 65 2e 00 45 6e 61 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 | ery.interface..Enabled.on-demand |
3cc40 | 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 62 72 69 6e 67 20 75 70 20 74 68 65 20 | .PPPoE.connections.bring.up.the. |
3cc60 | 6c 69 6e 6b 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 61 66 66 69 63 20 6e 65 65 64 73 20 74 6f 20 | link.only.when.traffic.needs.to. |
3cc80 | 70 61 73 73 20 74 68 69 73 20 6c 69 6e 6b 2e 20 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 | pass.this.link...If.the.link.fai |
3cca0 | 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 | ls.for.any.reason,.the.link.is.b |
3ccc0 | 72 6f 75 67 68 74 20 62 61 63 6b 20 75 70 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 | rought.back.up.automatically.onc |
3cce0 | 65 20 74 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 61 | e.traffic.passes.the.interface.a |
3cd00 | 67 61 69 6e 2e 20 49 66 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 6f 6e 2d 64 65 6d | gain..If.you.configure.an.on-dem |
3cd20 | 61 6e 64 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 79 6f 75 20 6d 75 73 74 20 61 | and.PPPoE.connection,.you.must.a |
3cd40 | 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 70 | lso.configure.the.idle.timeout.p |
3cd60 | 65 72 69 6f 64 2c 20 61 66 74 65 72 20 77 68 69 63 68 20 61 6e 20 69 64 6c 65 20 50 50 50 6f 45 | eriod,.after.which.an.idle.PPPoE |
3cd80 | 20 6c 69 6e 6b 20 77 69 6c 6c 20 62 65 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 2e 20 41 20 6e 6f | .link.will.be.disconnected..A.no |
3cda0 | 6e 2d 7a 65 72 6f 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 77 69 6c 6c 20 6e 65 76 65 72 20 64 | n-zero.idle.timeout.will.never.d |
3cdc0 | 69 73 63 6f 6e 6e 65 63 74 20 74 68 65 20 6c 69 6e 6b 20 61 66 74 65 72 20 69 74 20 66 69 72 73 | isconnect.the.link.after.it.firs |
3cde0 | 74 20 63 61 6d 65 20 75 70 2e 00 45 6e 61 62 6c 65 73 20 43 69 73 63 6f 20 73 74 79 6c 65 20 61 | t.came.up..Enables.Cisco.style.a |
3ce00 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 54 | uthentication.on.NHRP.packets..T |
3ce20 | 68 69 73 20 65 6d 62 65 64 73 20 74 68 65 20 73 65 63 72 65 74 20 70 6c 61 69 6e 74 65 78 74 20 | his.embeds.the.secret.plaintext. |
3ce40 | 70 61 73 73 77 6f 72 64 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e 48 52 50 20 70 61 | password.to.the.outgoing.NHRP.pa |
3ce60 | 63 6b 65 74 73 2e 20 49 6e 63 6f 6d 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 20 6f 6e 20 | ckets..Incoming.NHRP.packets.on. |
3ce80 | 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 64 69 73 63 61 72 64 65 64 20 75 6e 6c | this.interface.are.discarded.unl |
3cea0 | 65 73 73 20 74 68 65 20 73 65 63 72 65 74 20 70 61 73 73 77 6f 72 64 20 69 73 20 70 72 65 73 65 | ess.the.secret.password.is.prese |
3cec0 | 6e 74 2e 20 4d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 73 65 63 72 65 74 | nt..Maximum.length.of.the.secret |
3cee0 | 20 69 73 20 38 20 63 68 61 72 61 63 74 65 72 73 2e 00 45 6e 61 62 6c 65 73 20 48 54 54 50 20 68 | .is.8.characters..Enables.HTTP.h |
3cf00 | 65 61 6c 74 68 20 63 68 65 63 6b 73 20 75 73 69 6e 67 20 4f 50 54 49 4f 4e 20 48 54 54 50 20 72 | ealth.checks.using.OPTION.HTTP.r |
3cf20 | 65 71 75 65 73 74 73 20 61 67 61 69 6e 73 74 20 27 2f 27 20 61 6e 64 20 65 78 70 65 63 74 69 6e | equests.against.'/'.and.expectin |
3cf40 | 67 20 61 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 73 70 6f 6e 73 65 20 63 6f 64 65 20 69 6e 20 | g.a.successful.response.code.in. |
3cf60 | 74 68 65 20 32 30 30 2d 33 39 39 20 72 61 6e 67 65 2e 00 45 6e 61 62 6c 65 73 20 61 6e 20 4d 50 | the.200-399.range..Enables.an.MP |
3cf80 | 4c 53 20 6c 61 62 65 6c 20 74 6f 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 72 6f 75 | LS.label.to.be.attached.to.a.rou |
3cfa0 | 74 65 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 | te.exported.from.the.current.uni |
3cfc0 | 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 73 70 | cast.VRF.to.VPN..If.the.value.sp |
3cfe0 | 65 63 69 66 69 65 64 20 69 73 20 61 75 74 6f 2c 20 74 68 65 20 6c 61 62 65 6c 20 76 61 6c 75 65 | ecified.is.auto,.the.label.value |
3d000 | 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 66 72 6f 6d 20 | .is.automatically.assigned.from. |
3d020 | 61 20 70 6f 6f 6c 20 6d 61 69 6e 74 61 69 6e 65 64 2e 00 45 6e 61 62 6c 65 73 20 62 61 6e 64 77 | a.pool.maintained..Enables.bandw |
3d040 | 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2e 00 45 6e 61 62 6c 65 73 | idth.shaping.via.RADIUS..Enables |
3d060 | 20 69 6d 70 6f 72 74 20 6f 72 20 65 78 70 6f 72 74 20 6f 66 20 72 6f 75 74 65 73 20 62 65 74 77 | .import.or.export.of.routes.betw |
3d080 | 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 | een.the.current.unicast.VRF.and. |
3d0a0 | 56 50 4e 2e 00 45 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f | VPN..Enables.the.Generic.Protoco |
3d0c0 | 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 | l.extension.(VXLAN-GPE)..Current |
3d0e0 | 6c 79 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 | ly,.this.is.only.supported.toget |
3d100 | 68 65 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 | her.with.the.external.keyword..E |
3d120 | 6e 61 62 6c 65 73 20 74 68 65 20 65 63 68 6f 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6d 6f 64 | nables.the.echo.transmission.mod |
3d140 | 65 00 45 6e 61 62 6c 65 73 20 74 68 65 20 72 6f 6f 74 20 70 61 72 74 69 74 69 6f 6e 20 61 75 74 | e.Enables.the.root.partition.aut |
3d160 | 6f 2d 65 78 74 65 6e 73 69 6f 6e 20 61 6e 64 20 72 65 73 69 7a 65 73 20 74 6f 20 74 68 65 20 6d | o-extension.and.resizes.to.the.m |
3d180 | 61 78 69 6d 75 6d 20 61 76 61 69 6c 61 62 6c 65 20 73 70 61 63 65 20 6f 6e 20 73 79 73 74 65 6d | aximum.available.space.on.system |
3d1a0 | 20 62 6f 6f 74 2e 00 45 6e 61 62 6c 69 6e 67 20 41 64 76 65 72 74 69 73 6d 65 6e 74 73 00 45 6e | .boot..Enabling.Advertisments.En |
3d1c0 | 61 62 6c 69 6e 67 20 4f 70 65 6e 56 50 4e 20 44 43 4f 00 45 6e 61 62 6c 69 6e 67 20 53 53 48 20 | abling.OpenVPN.DCO.Enabling.SSH. |
3d1e0 | 6f 6e 6c 79 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 | only.requires.you.to.specify.the |
3d200 | 20 70 6f 72 74 20 60 60 3c 70 6f 72 74 3e 60 60 20 79 6f 75 20 77 61 6e 74 20 53 53 48 20 74 6f | .port.``<port>``.you.want.SSH.to |
3d220 | 20 6c 69 73 74 65 6e 20 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 53 53 48 20 72 75 6e 73 | .listen.on..By.default,.SSH.runs |
3d240 | 20 6f 6e 20 70 6f 72 74 20 32 32 2e 00 45 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 66 75 6e 63 74 | .on.port.22..Enabling.this.funct |
3d260 | 69 6f 6e 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 72 69 73 6b 20 6f 66 20 62 61 6e 64 77 69 | ion.increases.the.risk.of.bandwi |
3d280 | 64 74 68 20 73 61 74 75 72 61 74 69 6f 6e 2e 00 45 6e 66 6f 72 63 65 20 73 74 72 69 63 74 20 70 | dth.saturation..Enforce.strict.p |
3d2a0 | 61 74 68 20 63 68 65 63 6b 69 6e 67 00 45 6e 66 6f 72 63 65 20 73 74 72 69 63 74 20 70 61 74 68 | ath.checking.Enforce.strict.path |
3d2c0 | 20 63 68 65 63 6b 69 6e 67 2e 00 45 6e 73 6c 61 76 65 20 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e | .checking..Enslave.`<member>`.in |
3d2e0 | 74 65 72 66 61 63 65 20 74 6f 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 45 | terface.to.bond.`<interface>`..E |
3d300 | 6e 73 75 72 65 20 74 68 61 74 20 77 68 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f 75 74 65 73 | nsure.that.when.comparing.routes |
3d320 | 20 77 68 65 72 65 20 62 6f 74 68 20 61 72 65 20 65 71 75 61 6c 20 6f 6e 20 6d 6f 73 74 20 6d 65 | .where.both.are.equal.on.most.me |
3d340 | 74 72 69 63 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 6c 6f 63 61 6c 2d 70 72 65 66 2c 20 41 53 5f | trics,.including.local-pref,.AS_ |
3d360 | 50 41 54 48 20 6c 65 6e 67 74 68 2c 20 49 47 50 20 63 6f 73 74 2c 20 4d 45 44 2c 20 74 68 61 74 | PATH.length,.IGP.cost,.MED,.that |
3d380 | 20 74 68 65 20 74 69 65 20 69 73 20 62 72 6f 6b 65 6e 20 62 61 73 65 64 20 6f 6e 20 72 6f 75 74 | .the.tie.is.broken.based.on.rout |
3d3a0 | 65 72 2d 49 44 2e 00 45 6e 74 65 72 70 72 69 73 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 20 | er-ID..Enterprise.installations. |
3d3c0 | 75 73 75 61 6c 6c 79 20 73 68 69 70 20 61 20 6b 69 6e 64 20 6f 66 20 64 69 72 65 63 74 6f 72 79 | usually.ship.a.kind.of.directory |
3d3e0 | 20 73 65 72 76 69 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 74 6f 20 68 61 76 65 20 61 | .service.which.is.used.to.have.a |
3d400 | 20 73 69 6e 67 6c 65 20 70 61 73 73 77 6f 72 64 20 73 74 6f 72 65 20 66 6f 72 20 61 6c 6c 20 65 | .single.password.store.for.all.e |
3d420 | 6d 70 6c 6f 79 65 65 73 2e 20 56 79 4f 53 20 61 6e 64 20 4f 70 65 6e 56 50 4e 20 73 75 70 70 6f | mployees..VyOS.and.OpenVPN.suppo |
3d440 | 72 74 20 75 73 69 6e 67 20 4c 44 41 50 2f 41 44 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 | rt.using.LDAP/AD.as.single.user. |
3d460 | 62 61 63 6b 65 6e 64 2e 00 45 72 69 63 73 73 6f 6e 20 63 61 6c 6c 20 69 74 20 4d 41 43 2d 46 6f | backend..Ericsson.call.it.MAC-Fo |
3d480 | 72 63 65 64 20 46 6f 72 77 61 72 64 69 6e 67 20 28 52 46 43 20 44 72 61 66 74 29 00 45 72 72 6f | rced.Forwarding.(RFC.Draft).Erro |
3d4a0 | 72 00 45 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 00 45 73 74 61 62 6c 69 73 68 65 64 20 73 | r.Error.conditions.Established.s |
3d4c0 | 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 76 69 65 77 65 64 20 75 73 69 6e 67 20 74 68 65 20 | essions.can.be.viewed.using.the. |
3d4e0 | 2a 2a 73 68 6f 77 20 6c 32 74 70 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 2a 2a 20 6f 70 | **show.l2tp-server.sessions**.op |
3d500 | 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 00 45 74 68 65 72 6e 65 74 00 45 74 68 65 72 | erational.command.Ethernet.Ether |
3d520 | 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 69 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 | net.flow.control.is.a.mechanism. |
3d540 | 66 6f 72 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 73 74 6f 70 70 69 6e 67 20 74 68 65 20 74 72 61 | for.temporarily.stopping.the.tra |
3d560 | 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 64 61 74 61 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 66 61 | nsmission.of.data.on.Ethernet.fa |
3d580 | 6d 69 6c 79 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 67 6f 61 6c | mily.computer.networks..The.goal |
3d5a0 | 20 6f 66 20 74 68 69 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 74 6f 20 65 6e 73 75 72 65 20 | .of.this.mechanism.is.to.ensure. |
3d5c0 | 7a 65 72 6f 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 69 6e 20 74 68 65 20 70 72 65 73 65 6e 63 65 | zero.packet.loss.in.the.presence |
3d5e0 | 20 6f 66 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 00 45 74 68 65 72 6e 65 74 | .of.network.congestion..Ethernet |
3d600 | 20 6f 70 74 69 6f 6e 73 00 45 74 68 65 72 74 79 70 65 20 60 60 30 78 38 31 30 30 60 60 20 69 73 | .options.Ethertype.``0x8100``.is |
3d620 | 20 75 73 65 64 20 66 6f 72 20 60 60 38 30 32 2e 31 71 60 60 20 61 6e 64 20 65 74 68 65 72 74 79 | .used.for.``802.1q``.and.etherty |
3d640 | 70 65 20 60 60 30 78 38 38 61 38 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 60 60 38 30 32 2e | pe.``0x88a8``.is.used.for.``802. |
3d660 | 31 61 64 60 60 2e 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 00 45 76 65 6e 74 20 48 61 6e 64 6c | 1ad``..Event.Handler.Event.Handl |
3d680 | 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 53 74 65 70 73 00 45 76 65 6e 74 20 48 61 6e | er.Configuration.Steps.Event.Han |
3d6a0 | 64 6c 65 72 20 54 65 63 68 6e 6f 6c 6f 67 79 20 4f 76 65 72 76 69 65 77 00 45 76 65 6e 74 20 68 | dler.Technology.Overview.Event.h |
3d6c0 | 61 6e 64 6c 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 73 63 72 | andler.allows.you.to.execute.scr |
3d6e0 | 69 70 74 73 20 77 68 65 6e 20 61 20 73 74 72 69 6e 67 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 | ipts.when.a.string.that.matches. |
3d700 | 61 20 72 65 67 65 78 20 6f 72 20 61 20 72 65 67 65 78 20 77 69 74 68 20 61 20 73 65 72 76 69 63 | a.regex.or.a.regex.with.a.servic |
3d720 | 65 20 6e 61 6d 65 20 61 70 70 65 61 72 73 20 69 6e 20 6a 6f 75 72 6e 61 6c 64 20 6c 6f 67 73 2e | e.name.appears.in.journald.logs. |
3d740 | 20 59 6f 75 20 63 61 6e 20 70 61 73 73 20 76 61 72 69 61 62 6c 65 73 2c 20 61 72 67 75 6d 65 6e | .You.can.pass.variables,.argumen |
3d760 | 74 73 2c 20 61 6e 64 20 61 20 66 75 6c 6c 20 6d 61 74 63 68 69 6e 67 20 73 74 72 69 6e 67 20 74 | ts,.and.a.full.matching.string.t |
3d780 | 6f 20 74 68 65 20 73 63 72 69 70 74 2e 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 73 63 72 69 | o.the.script..Event.handler.scri |
3d7a0 | 70 74 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 73 20 74 | pt.Event.handler.that.monitors.t |
3d7c0 | 68 65 20 73 74 61 74 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2e 00 45 76 65 72 | he.state.of.interface.eth0..Ever |
3d7e0 | 79 20 4e 41 54 20 72 75 6c 65 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d | y.NAT.rule.has.a.translation.com |
3d800 | 6d 61 6e 64 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 64 65 66 69 6e 65 | mand.defined..The.address.define |
3d820 | 64 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 61 64 64 | d.for.the.translation.is.the.add |
3d840 | 72 65 73 73 20 75 73 65 64 20 77 68 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 | ress.used.when.the.address.infor |
3d860 | 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e 00 | mation.in.a.packet.is.replaced.. |
3d880 | 45 76 65 72 79 20 53 4e 41 54 36 36 20 72 75 6c 65 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 | Every.SNAT66.rule.has.a.translat |
3d8a0 | 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 70 72 65 66 69 78 20 | ion.command.defined..The.prefix. |
3d8c0 | 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 | defined.for.the.translation.is.t |
3d8e0 | 68 65 20 70 72 65 66 69 78 20 75 73 65 64 20 77 68 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 | he.prefix.used.when.the.address. |
3d900 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 | information.in.a.packet.is.repla |
3d920 | 63 65 64 2e e3 80 81 00 45 76 65 72 79 20 53 53 48 20 6b 65 79 20 63 6f 6d 65 73 20 69 6e 20 74 | ced.....Every.SSH.key.comes.in.t |
3d940 | 68 72 65 65 20 70 61 72 74 73 3a 00 45 76 65 72 79 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 | hree.parts:.Every.SSH.public.key |
3d960 | 20 70 6f 72 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 3c 69 64 65 6e 74 69 66 | .portion.referenced.by.`<identif |
3d980 | 69 65 72 3e 60 20 72 65 71 75 69 72 65 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ier>`.requires.the.configuration |
3d9a0 | 20 6f 66 20 74 68 65 20 60 3c 74 79 70 65 3e 60 20 6f 66 20 70 75 62 6c 69 63 2d 6b 65 79 20 75 | .of.the.`<type>`.of.public-key.u |
3d9c0 | 73 65 64 2e 20 54 68 69 73 20 74 79 70 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6f 66 3a 00 45 76 | sed..This.type.can.be.any.of:.Ev |
3d9e0 | 65 72 79 20 55 44 50 20 70 6f 72 74 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 | ery.UDP.port.which.will.be.forwa |
3da00 | 72 64 20 72 65 71 75 69 72 65 73 20 6f 6e 65 20 75 6e 69 71 75 65 20 49 44 2e 20 43 75 72 72 65 | rd.requires.one.unique.ID..Curre |
3da20 | 6e 74 6c 79 20 77 65 20 73 75 70 70 6f 72 74 20 39 39 20 49 44 73 21 00 45 76 65 72 79 20 56 69 | ntly.we.support.99.IDs!.Every.Vi |
3da40 | 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 62 65 68 61 76 65 | rtual.Ethernet.interfaces.behave |
3da60 | 73 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 | s.like.a.real.Ethernet.interface |
3da80 | 2e 20 54 68 65 79 20 63 61 6e 20 68 61 76 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 | ..They.can.have.IPv4/IPv6.addres |
3daa0 | 73 65 73 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 6f 72 20 63 61 6e 20 72 65 71 75 65 73 74 20 61 | ses.configured,.or.can.request.a |
3dac0 | 64 64 72 65 73 73 65 73 20 62 79 20 44 48 43 50 2f 20 44 48 43 50 76 36 20 61 6e 64 20 61 72 65 | ddresses.by.DHCP/.DHCPv6.and.are |
3dae0 | 20 61 73 73 6f 63 69 61 74 65 64 2f 6d 61 70 70 65 64 20 77 69 74 68 20 61 20 72 65 61 6c 20 65 | .associated/mapped.with.a.real.e |
3db00 | 74 68 65 72 6e 65 74 20 70 6f 72 74 2e 20 54 68 69 73 20 61 6c 73 6f 20 6d 61 6b 65 73 20 50 73 | thernet.port..This.also.makes.Ps |
3db20 | 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 65 72 65 73 | eudo-Ethernet.interfaces.interes |
3db40 | 74 69 6e 67 20 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 20 41 20 50 73 65 | ting.for.testing.purposes..A.Pse |
3db60 | 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 | udo-Ethernet.device.will.inherit |
3db80 | 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 20 28 73 70 65 65 64 2c 20 64 75 70 6c 65 78 2c | .characteristics.(speed,.duplex, |
3dba0 | 20 2e 2e 2e 29 20 66 72 6f 6d 20 69 74 73 20 70 68 79 73 69 63 61 6c 20 70 61 72 65 6e 74 20 28 | ....).from.its.physical.parent.( |
3dbc0 | 74 68 65 20 73 6f 20 63 61 6c 6c 65 64 20 6c 69 6e 6b 29 20 69 6e 74 65 72 66 61 63 65 2e 00 45 | the.so.called.link).interface..E |
3dbe0 | 76 65 72 79 20 57 57 41 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 6e | very.WWAN.connection.requires.an |
3dc00 | 20 3a 61 62 62 72 3a 60 41 50 4e 20 28 41 63 63 65 73 73 20 50 6f 69 6e 74 20 4e 61 6d 65 29 60 | .:abbr:`APN.(Access.Point.Name)` |
3dc20 | 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 63 6c 69 65 6e 74 20 74 6f 20 | .which.is.used.by.the.client.to. |
3dc40 | 64 69 61 6c 20 69 6e 74 6f 20 74 68 65 20 49 53 50 73 20 6e 65 74 77 6f 72 6b 2e 20 54 68 69 73 | dial.into.the.ISPs.network..This |
3dc60 | 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 43 6f 6e 74 61 | .is.a.mandatory.parameter..Conta |
3dc80 | 63 74 20 79 6f 75 72 20 53 65 72 76 69 63 65 20 50 72 6f 76 69 64 65 72 20 66 6f 72 20 63 6f 72 | ct.your.Service.Provider.for.cor |
3dca0 | 72 65 63 74 20 41 50 4e 2e 00 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 | rect.APN..Every.connection/remot |
3dcc0 | 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 | e-access.pool.we.configure.also. |
3dce0 | 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f | needs.a.pool.where.we.can.draw.o |
3dd00 | 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 | ur.client.IP.addresses.from..We. |
3dd20 | 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 | provide.one.IPv4.and.IPv6.pool.. |
3dd40 | 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 | Authorized.clients.will.receive. |
3dd60 | 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 | an.IPv4.address.from.the.192.0.2 |
3dd80 | 2e 31 32 38 2f 32 35 20 70 72 65 66 69 78 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 | .128/25.prefix.and.an.IPv6.addre |
3dda0 | 73 73 20 66 72 6f 6d 20 74 68 65 20 32 30 30 31 3a 64 62 38 3a 32 30 30 30 3a 3a 2f 36 34 20 70 | ss.from.the.2001:db8:2000::/64.p |
3ddc0 | 72 65 66 69 78 2e 20 57 65 20 63 61 6e 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 | refix..We.can.also.send.some.DNS |
3dde0 | 20 6e 61 6d 65 73 65 72 76 65 72 73 20 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 | .nameservers.down.to.our.clients |
3de00 | 20 75 73 65 64 20 6f 6e 20 74 68 65 69 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 76 65 72 79 | .used.on.their.connection..Every |
3de20 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 | .connection/remote-access.pool.w |
3de40 | 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 | e.configure.also.needs.a.pool.wh |
3de60 | 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 | ere.we.can.draw.our.client.IP.ad |
3de80 | 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 | dresses.from..We.provide.one.IPv |
3dea0 | 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 | 4.and.IPv6.pool..Authorized.clie |
3dec0 | 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 | nts.will.receive.an.IPv4.address |
3dee0 | 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 49 50 76 34 20 70 72 65 66 69 78 | .from.the.configured.IPv4.prefix |
3df00 | 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 49 50 | .and.an.IPv6.address.from.the.IP |
3df20 | 76 36 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6e 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 | v6.prefix..We.can.also.send.some |
3df40 | 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 | .DNS.nameservers.down.to.our.cli |
3df60 | 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 74 68 65 69 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 | ents.used.on.their.connection..E |
3df80 | 78 61 6d 70 6c 65 00 45 78 61 6d 70 6c 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 45 78 61 | xample.Example.Configuration.Exa |
3dfa0 | 6d 70 6c 65 20 49 50 76 36 20 6f 6e 6c 79 3a 00 45 78 61 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 00 | mple.IPv6.only:.Example.Network. |
3dfc0 | 45 78 61 6d 70 6c 65 20 50 61 72 74 69 61 6c 20 43 6f 6e 66 69 67 00 45 78 61 6d 70 6c 65 20 63 | Example.Partial.Config.Example.c |
3dfe0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 | onfiguration.for.WireGuard.inter |
3e000 | 66 61 63 65 73 3a 00 45 78 61 6d 70 6c 65 20 66 6f 72 20 63 68 61 6e 67 69 6e 67 20 72 61 74 65 | faces:.Example.for.changing.rate |
3e020 | 2d 6c 69 6d 69 74 20 76 69 61 20 52 41 44 49 55 53 20 43 6f 41 2e 00 45 78 61 6d 70 6c 65 20 66 | -limit.via.RADIUS.CoA..Example.f |
3e040 | 6f 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 73 69 6d 70 6c 65 20 4c 32 54 50 20 6f 76 65 | or.configuring.a.simple.L2TP.ove |
3e060 | 72 20 49 50 73 65 63 20 56 50 4e 20 66 6f 72 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 28 77 | r.IPsec.VPN.for.remote.access.(w |
3e080 | 6f 72 6b 73 20 77 69 74 68 20 6e 61 74 69 76 65 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 4d 61 63 | orks.with.native.Windows.and.Mac |
3e0a0 | 20 56 50 4e 20 63 6c 69 65 6e 74 73 29 3a 00 45 78 61 6d 70 6c 65 20 6f 66 20 72 65 64 69 72 65 | .VPN.clients):.Example.of.redire |
3e0c0 | 63 74 69 6f 6e 3a 00 45 78 61 6d 70 6c 65 20 73 79 6e 70 72 6f 78 79 00 45 78 61 6d 70 6c 65 2c | ction:.Example.synproxy.Example, |
3e0e0 | 20 66 72 6f 6d 20 72 61 64 69 75 73 2d 73 65 72 76 65 72 20 73 65 6e 64 20 63 6f 6d 6d 61 6e 64 | .from.radius-server.send.command |
3e100 | 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 20 63 6c 69 65 6e 74 20 77 69 74 68 20 75 73 65 72 | .for.disconnect.client.with.user |
3e120 | 6e 61 6d 65 20 74 65 73 74 00 45 78 61 6d 70 6c 65 3a 00 45 78 61 6d 70 6c 65 3a 20 44 65 6c 65 | name.test.Example:.Example:.Dele |
3e140 | 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 65 | gate.a./64.prefix.to.interface.e |
3e160 | 74 68 38 20 77 68 69 63 68 20 77 69 6c 6c 20 75 73 65 20 61 20 6c 6f 63 61 6c 20 61 64 64 72 65 | th8.which.will.use.a.local.addre |
3e180 | 73 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 20 6f 66 20 60 60 3c 70 72 65 66 69 78 3e 3a | ss.on.this.router.of.``<prefix>: |
3e1a0 | 3a 66 66 66 66 60 60 2c 20 61 73 20 74 68 65 20 61 64 64 72 65 73 73 20 36 35 35 33 34 20 77 69 | :ffff``,.as.the.address.65534.wi |
3e1c0 | 6c 6c 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 60 60 66 66 66 66 60 60 20 69 6e 20 68 65 78 | ll.correspond.to.``ffff``.in.hex |
3e1e0 | 61 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 3a 20 46 6f 72 20 | adecimal.notation..Example:.For. |
3e200 | 61 6e 20 7e 38 2c 30 30 30 20 68 6f 73 74 20 6e 65 74 77 6f 72 6b 20 61 20 73 6f 75 72 63 65 20 | an.~8,000.host.network.a.source. |
3e220 | 4e 41 54 20 70 6f 6f 6c 20 6f 66 20 33 32 20 49 50 20 61 64 64 72 65 73 73 65 73 20 69 73 20 72 | NAT.pool.of.32.IP.addresses.is.r |
3e240 | 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 78 61 6d 70 6c 65 3a 20 49 66 20 49 44 20 69 73 20 31 20 | ecommended..Example:.If.ID.is.1. |
3e260 | 61 6e 64 20 74 68 65 20 63 6c 69 65 6e 74 20 69 73 20 64 65 6c 65 67 61 74 65 64 20 61 6e 20 49 | and.the.client.is.delegated.an.I |
3e280 | 50 76 36 20 70 72 65 66 69 78 20 32 30 30 31 3a 64 62 38 3a 66 66 66 66 3a 3a 2f 34 38 2c 20 64 | Pv6.prefix.2001:db8:ffff::/48,.d |
3e2a0 | 68 63 70 36 63 20 77 69 6c 6c 20 63 6f 6d 62 69 6e 65 20 74 68 65 20 74 77 6f 20 76 61 6c 75 65 | hcp6c.will.combine.the.two.value |
3e2c0 | 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 49 50 76 36 20 70 72 65 66 69 78 2c 20 32 30 30 | s.into.a.single.IPv6.prefix,.200 |
3e2e0 | 31 3a 64 62 38 3a 66 66 66 66 3a 31 3a 3a 2f 36 34 2c 20 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 | 1:db8:ffff:1::/64,.and.will.conf |
3e300 | 69 67 75 72 65 20 74 68 65 20 70 72 65 66 69 78 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 | igure.the.prefix.on.the.specifie |
3e320 | 64 20 69 6e 74 65 72 66 61 63 65 2e 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 | d.interface..Example:.Mirror.the |
3e340 | 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 | .inbound.traffic.of.`bond1`.port |
3e360 | 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 | .to.`eth3`.Example:.Mirror.the.i |
3e380 | 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 | nbound.traffic.of.`br1`.port.to. |
3e3a0 | 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 | `eth3`.Example:.Mirror.the.inbou |
3e3c0 | 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 65 74 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 | nd.traffic.of.`eth1`.port.to.`et |
3e3e0 | 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 | h3`.Example:.Mirror.the.outbound |
3e400 | 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 | .traffic.of.`bond1`.port.to.`eth |
3e420 | 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 | 3`.Example:.Mirror.the.outbound. |
3e440 | 74 72 61 66 66 69 63 20 6f 66 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 | traffic.of.`br1`.port.to.`eth3`. |
3e460 | 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 | Example:.Mirror.the.outbound.tra |
3e480 | 66 66 69 63 20 6f 66 20 60 65 74 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 | ffic.of.`eth1`.port.to.`eth3`.Ex |
3e4a0 | 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f | ample:.Set.`eth0`.member.port.to |
3e4c0 | 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 34 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 | .be.allowed.VLAN.4.Example:.Set. |
3e4e0 | 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 | `eth0`.member.port.to.be.allowed |
3e500 | 20 56 4c 41 4e 20 36 2d 38 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 | .VLAN.6-8.Example:.Set.`eth0`.me |
3e520 | 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 20 32 00 45 78 | mber.port.to.be.native.VLAN.2.Ex |
3e540 | 61 6d 70 6c 65 3a 20 74 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 69 73 20 73 65 74 20 74 6f 20 | ample:.to.be.appended.is.set.to. |
3e560 | 60 60 76 79 6f 73 2e 6e 65 74 60 60 20 61 6e 64 20 74 68 65 20 55 52 4c 20 72 65 63 65 69 76 65 | ``vyos.net``.and.the.URL.receive |
3e580 | 64 20 69 73 20 60 60 77 77 77 2f 66 6f 6f 2e 68 74 6d 6c 60 60 2c 20 74 68 65 20 73 79 73 74 65 | d.is.``www/foo.html``,.the.syste |
3e5a0 | 6d 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 2c 20 66 69 6e 61 6c 20 | m.will.use.the.generated,.final. |
3e5c0 | 55 52 4c 20 6f 66 20 60 60 77 77 77 2e 76 79 6f 73 2e 6e 65 74 2f 66 6f 6f 2e 68 74 6d 6c 60 60 | URL.of.``www.vyos.net/foo.html`` |
3e5e0 | 2e 00 45 78 61 6d 70 6c 65 73 00 45 78 61 6d 70 6c 65 73 20 6f 66 20 70 6f 6c 69 63 69 65 73 20 | ..Examples.Examples.of.policies. |
3e600 | 75 73 61 67 65 3a 00 45 78 61 6d 70 6c 65 73 3a 00 45 78 63 6c 75 64 65 20 49 50 20 61 64 64 72 | usage:.Examples:.Exclude.IP.addr |
3e620 | 65 73 73 65 73 20 66 72 6f 6d 20 60 60 56 52 52 50 20 70 61 63 6b 65 74 73 60 60 2e 20 54 68 69 | esses.from.``VRRP.packets``..Thi |
3e640 | 73 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 60 20 69 73 | s.option.``excluded-address``.is |
3e660 | 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 65 74 20 49 50 76 34 20 | .used.when.you.want.to.set.IPv4. |
3e680 | 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 76 69 72 | +.IPv6.addresses.on.the.same.vir |
3e6a0 | 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 77 68 65 6e 20 75 73 65 64 20 6d 6f 72 65 | tual.interface.or.when.used.more |
3e6c0 | 20 74 68 61 6e 20 32 30 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 00 45 78 63 6c 75 64 65 20 61 | .than.20.IP.addresses..Exclude.a |
3e6e0 | 64 64 72 65 73 73 00 45 78 63 6c 75 64 65 20 74 72 61 66 66 69 63 00 45 78 69 74 20 70 6f 6c 69 | ddress.Exclude.traffic.Exit.poli |
3e700 | 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 6f 20 6e 65 78 74 20 73 65 71 75 65 6e 63 65 | cy.on.match:.go.to.next.sequence |
3e720 | 20 6e 75 6d 62 65 72 2e 00 45 78 69 74 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 | .number..Exit.policy.on.match:.g |
3e740 | 6f 20 74 6f 20 72 75 6c 65 20 3c 31 2d 36 35 35 33 35 3e 00 45 78 70 65 64 69 74 65 64 20 66 6f | o.to.rule.<1-65535>.Expedited.fo |
3e760 | 72 77 61 72 64 69 6e 67 20 28 45 46 29 00 45 78 70 6c 61 6e 61 74 69 6f 6e 00 45 78 70 6c 69 63 | rwarding.(EF).Explanation.Explic |
3e780 | 69 74 6c 79 20 64 65 63 6c 61 72 65 20 49 44 20 66 6f 72 20 74 68 69 73 20 6d 69 6e 69 6f 6e 20 | itly.declare.ID.for.this.minion. |
3e7a0 | 74 6f 20 75 73 65 20 28 64 65 66 61 75 6c 74 3a 20 68 6f 73 74 6e 61 6d 65 29 00 45 78 74 65 72 | to.use.(default:.hostname).Exter |
3e7c0 | 6e 61 6c 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 69 73 20 61 74 20 32 30 30 31 3a 64 62 38 | nal.DHCPv6.server.is.at.2001:db8 |
3e7e0 | 3a 3a 34 00 45 78 74 65 72 6e 61 6c 20 52 6f 75 74 65 20 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e | ::4.External.Route.Summarisation |
3e800 | 00 45 78 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d | .External.attack:.an.attack.from |
3e820 | 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 74 6f 77 61 72 64 73 20 61 6e 20 69 6e 74 65 72 6e 61 | .the.internet.towards.an.interna |
3e840 | 6c 20 49 50 20 69 73 20 69 64 65 6e 74 69 66 79 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 | l.IP.is.identify..In.this.case,. |
3e860 | 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 77 61 72 64 73 20 73 75 63 68 20 49 50 20 | all.connections.towards.such.IP. |
3e880 | 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 00 46 51 2d 43 6f 44 65 6c 00 46 51 2d 43 6f 44 65 | will.be.blocked.FQ-CoDel.FQ-CoDe |
3e8a0 | 6c 20 66 69 67 68 74 73 20 62 75 66 66 65 72 62 6c 6f 61 74 20 61 6e 64 20 72 65 64 75 63 65 73 | l.fights.bufferbloat.and.reduces |
3e8c0 | 20 6c 61 74 65 6e 63 79 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 63 6f 6d | .latency.without.the.need.of.com |
3e8e0 | 70 6c 65 78 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 2e 20 49 74 20 68 61 73 20 62 65 63 6f | plex.configurations..It.has.beco |
3e900 | 6d 65 20 74 68 65 20 6e 65 77 20 64 65 66 61 75 6c 74 20 51 75 65 75 65 69 6e 67 20 44 69 73 63 | me.the.new.default.Queueing.Disc |
3e920 | 69 70 6c 69 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 6f 66 20 73 6f 6d | ipline.for.the.interfaces.of.som |
3e940 | 65 20 47 4e 55 2f 4c 69 6e 75 78 20 64 69 73 74 72 69 62 75 74 69 6f 6e 73 2e 00 46 51 2d 43 6f | e.GNU/Linux.distributions..FQ-Co |
3e960 | 44 65 6c 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 20 6d 6f 64 69 66 69 65 64 20 44 65 66 69 63 | Del.is.based.on.a.modified.Defic |
3e980 | 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 20 28 44 52 52 5f 29 20 71 75 65 75 65 20 73 63 68 65 | it.Round.Robin.(DRR_).queue.sche |
3e9a0 | 64 75 6c 65 72 20 77 69 74 68 20 74 68 65 20 43 6f 44 65 6c 20 41 63 74 69 76 65 20 51 75 65 75 | duler.with.the.CoDel.Active.Queu |
3e9c0 | 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 28 41 51 4d 29 20 61 6c 67 6f 72 69 74 68 6d 20 6f 70 65 | e.Management.(AQM).algorithm.ope |
3e9e0 | 72 61 74 69 6e 67 20 6f 6e 20 65 61 63 68 20 71 75 65 75 65 2e 00 46 51 2d 43 6f 44 65 6c 20 69 | rating.on.each.queue..FQ-CoDel.i |
3ea00 | 73 20 74 75 6e 65 64 20 74 6f 20 72 75 6e 20 6f 6b 20 77 69 74 68 20 69 74 73 20 64 65 66 61 75 | s.tuned.to.run.ok.with.its.defau |
3ea20 | 6c 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 31 30 47 62 69 74 20 73 70 65 65 64 73 2e 20 | lt.parameters.at.10Gbit.speeds.. |
3ea40 | 49 74 20 6d 69 67 68 74 20 77 6f 72 6b 20 6f 6b 20 74 6f 6f 20 61 74 20 6f 74 68 65 72 20 73 70 | It.might.work.ok.too.at.other.sp |
3ea60 | 65 65 64 73 20 77 69 74 68 6f 75 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 74 68 69 6e | eeds.without.configuring.anythin |
3ea80 | 67 2c 20 62 75 74 20 68 65 72 65 20 77 65 20 77 69 6c 6c 20 65 78 70 6c 61 69 6e 20 73 6f 6d 65 | g,.but.here.we.will.explain.some |
3eaa0 | 20 63 61 73 65 73 20 77 68 65 6e 20 79 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 74 75 | .cases.when.you.might.want.to.tu |
3eac0 | 6e 65 20 69 74 73 20 70 61 72 61 6d 65 74 65 72 73 2e 00 46 51 2d 43 6f 64 65 6c 20 69 73 20 61 | ne.its.parameters..FQ-Codel.is.a |
3eae0 | 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 | .non-shaping.(work-conserving).p |
3eb00 | 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c | olicy,.so.it.will.only.be.useful |
3eb20 | 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 | .if.your.outgoing.interface.is.r |
3eb40 | 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 | eally.full..If.it.is.not,.VyOS.w |
3eb60 | 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 46 51 2d 43 6f 64 | ill.not.own.the.queue.and.FQ-Cod |
3eb80 | 65 6c 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 | el.will.have.no.effect..If.there |
3eba0 | 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 | .is.bandwidth.available.on.the.p |
3ebc0 | 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 51 2d | hysical.link,.you.can.embed_.FQ- |
3ebe0 | 43 6f 64 65 6c 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f | Codel.into.a.classful.shaping.po |
3ec00 | 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 | licy.to.make.sure.it.owns.the.qu |
3ec20 | 65 75 65 2e 20 49 66 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 73 75 72 65 20 69 66 20 79 6f 75 20 | eue..If.you.are.not.sure.if.you. |
3ec40 | 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 79 6f 75 72 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 | need.to.embed.your.FQ-CoDel.poli |
3ec60 | 63 79 20 69 6e 74 6f 20 61 20 53 68 61 70 65 72 2c 20 64 6f 20 69 74 2e 00 46 52 52 00 46 52 52 | cy.into.a.Shaper,.do.it..FRR.FRR |
3ec80 | 20 6f 66 66 65 72 73 20 6f 6e 6c 79 20 70 61 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 | .offers.only.partial.support.for |
3eca0 | 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 65 78 | .some.of.the.routing.protocol.ex |
3ecc0 | 74 65 6e 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 77 69 74 68 20 4d 50 4c 53 | tensions.that.are.used.with.MPLS |
3ece0 | 2d 54 45 3b 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 20 63 6f 6d 70 6c | -TE;.it.does.not.support.a.compl |
3ed00 | 65 74 65 20 52 53 56 50 2d 54 45 20 73 6f 6c 75 74 69 6f 6e 2e 00 46 52 52 20 73 75 70 70 6f 72 | ete.RSVP-TE.solution..FRR.suppor |
3ed20 | 74 73 20 61 20 6e 65 77 20 77 61 79 20 6f 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 56 4c 41 4e | ts.a.new.way.of.configuring.VLAN |
3ed40 | 2d 74 6f 2d 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 66 6f 72 20 45 56 50 4e 2d 56 58 4c 41 4e 2c | -to-VNI.mappings.for.EVPN-VXLAN, |
3ed60 | 20 77 68 65 6e 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 | .when.working.with.the.Linux.ker |
3ed80 | 6e 65 6c 2e 20 49 6e 20 74 68 69 73 20 6e 65 77 20 77 61 79 2c 20 74 68 65 20 6d 61 70 70 69 6e | nel..In.this.new.way,.the.mappin |
3eda0 | 67 20 6f 66 20 61 20 56 4c 41 4e 20 74 6f 20 61 20 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c | g.of.a.VLAN.to.a.:abbr:`VNI.(VXL |
3edc0 | 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 | AN.Network.Identifier.(or.VXLAN. |
3ede0 | 53 65 67 6d 65 6e 74 20 49 44 29 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 | Segment.ID))`.is.configured.agai |
3ee00 | 6e 73 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 | nst.a.container.VXLAN.interface. |
3ee20 | 77 68 69 63 68 20 69 73 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 20 3a 61 62 62 72 3a | which.is.referred.to.as.a.:abbr: |
3ee40 | 60 53 56 44 20 28 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 29 60 2e 00 46 54 50 | `SVD.(Single.VXLAN.device)`..FTP |
3ee60 | 20 64 61 65 6d 6f 6e 00 46 61 63 69 6c 69 74 69 65 73 00 46 61 63 69 6c 69 74 69 65 73 20 63 61 | .daemon.Facilities.Facilities.ca |
3ee80 | 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 74 6f 20 6d 65 65 74 20 74 68 65 20 6e 65 65 64 73 20 | n.be.adjusted.to.meet.the.needs. |
3eea0 | 6f 66 20 74 68 65 20 75 73 65 72 3a 00 46 61 63 69 6c 69 74 79 20 43 6f 64 65 00 46 61 69 6c 6f | of.the.user:.Facility.Code.Failo |
3eec0 | 76 65 72 00 46 61 69 6c 6f 76 65 72 20 52 6f 75 74 65 73 00 46 61 69 6c 6f 76 65 72 20 6d 65 63 | ver.Failover.Routes.Failover.mec |
3eee0 | 68 61 6e 69 73 6d 20 74 6f 20 75 73 65 20 66 6f 72 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 | hanism.to.use.for.conntrack-sync |
3ef00 | 2e 00 46 61 69 6c 6f 76 65 72 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 | ..Failover.routes.are.manually.c |
3ef20 | 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 62 75 74 20 74 68 65 79 20 69 6e 73 74 61 | onfigured.routes,.but.they.insta |
3ef40 | 6c 6c 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 66 20 74 68 65 20 68 | ll.to.the.routing.table.if.the.h |
3ef60 | 65 61 6c 74 68 2d 63 68 65 63 6b 20 74 61 72 67 65 74 20 69 73 20 61 6c 69 76 65 2e 20 49 66 20 | ealth-check.target.is.alive..If. |
3ef80 | 74 68 65 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 20 61 6c 69 76 65 20 74 68 65 20 72 6f 75 74 | the.target.is.not.alive.the.rout |
3efa0 | 65 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 | e.is.removed.from.the.routing.ta |
3efc0 | 62 6c 65 20 75 6e 74 69 6c 20 74 68 65 20 74 61 72 67 65 74 20 77 69 6c 6c 20 62 65 20 61 76 61 | ble.until.the.target.will.be.ava |
3efe0 | 69 6c 61 62 6c 65 2e 00 46 61 69 6c 6f 76 65 72 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 | ilable..Failover.routes.are.manu |
3f000 | 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 62 75 74 20 74 68 65 79 | ally.configured.routes,.but.they |
3f020 | 20 6f 6e 6c 79 20 69 6e 73 74 61 6c 6c 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 | .only.install.to.the.routing.tab |
3f040 | 6c 65 20 69 66 20 74 68 65 20 68 65 61 6c 74 68 2d 63 68 65 63 6b 20 74 61 72 67 65 74 20 69 73 | le.if.the.health-check.target.is |
3f060 | 20 61 6c 69 76 65 2e 20 49 66 20 74 68 65 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 20 61 6c 69 | .alive..If.the.target.is.not.ali |
3f080 | 76 65 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 | ve.the.route.is.removed.from.the |
3f0a0 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 6e 74 69 6c 20 74 68 65 20 74 61 72 67 65 74 20 | .routing.table.until.the.target. |
3f0c0 | 62 65 63 6f 6d 65 73 20 61 76 61 69 6c 61 62 6c 65 2e 00 46 61 69 72 20 51 75 65 75 65 00 46 61 | becomes.available..Fair.Queue.Fa |
3f0e0 | 69 72 20 51 75 65 75 65 20 69 73 20 61 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 6b 2d | ir.Queue.is.a.non-shaping.(work- |
3f100 | 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 6f | conserving).policy,.so.it.will.o |
3f120 | 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 | nly.be.useful.if.your.outgoing.i |
3f140 | 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 | nterface.is.really.full..If.it.i |
3f160 | 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 | s.not,.VyOS.will.not.own.the.que |
3f180 | 75 65 20 61 6e 64 20 46 61 69 72 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 | ue.and.Fair.Queue.will.have.no.e |
3f1a0 | 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 | ffect..If.there.is.bandwidth.ava |
3f1c0 | 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 | ilable.on.the.physical.link,.you |
3f1e0 | 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 61 69 72 2d 51 75 65 75 65 20 69 6e 74 6f 20 61 20 63 6c | .can.embed_.Fair-Queue.into.a.cl |
3f200 | 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 | assful.shaping.policy.to.make.su |
3f220 | 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 00 46 61 69 72 20 51 75 65 75 65 | re.it.owns.the.queue..Fair.Queue |
3f240 | 20 69 73 20 61 20 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 20 73 63 68 65 64 75 6c 65 72 20 | .is.a.work-conserving.scheduler. |
3f260 | 77 68 69 63 68 20 73 63 68 65 64 75 6c 65 73 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e | which.schedules.the.transmission |
3f280 | 20 6f 66 20 70 61 63 6b 65 74 73 20 62 61 73 65 64 20 6f 6e 20 66 6c 6f 77 73 2c 20 74 68 61 74 | .of.packets.based.on.flows,.that |
3f2a0 | 20 69 73 2c 20 69 74 20 62 61 6c 61 6e 63 65 73 20 74 72 61 66 66 69 63 20 64 69 73 74 72 69 62 | .is,.it.balances.traffic.distrib |
3f2c0 | 75 74 69 6e 67 20 69 74 20 74 68 72 6f 75 67 68 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 2d 71 | uting.it.through.different.sub-q |
3f2e0 | 75 65 75 65 73 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 65 6e 73 75 72 65 20 66 61 69 72 6e 65 73 | ueues.in.order.to.ensure.fairnes |
3f300 | 73 20 73 6f 20 74 68 61 74 20 65 61 63 68 20 66 6c 6f 77 20 69 73 20 61 62 6c 65 20 74 6f 20 73 | s.so.that.each.flow.is.able.to.s |
3f320 | 65 6e 64 20 64 61 74 61 20 69 6e 20 74 75 72 6e 2c 20 70 72 65 76 65 6e 74 69 6e 67 20 61 6e 79 | end.data.in.turn,.preventing.any |
3f340 | 20 73 69 6e 67 6c 65 20 6f 6e 65 20 66 72 6f 6d 20 64 72 6f 77 6e 69 6e 67 20 6f 75 74 20 74 68 | .single.one.from.drowning.out.th |
3f360 | 65 20 72 65 73 74 2e 00 46 61 73 74 4e 65 74 4d 6f 6e 00 46 61 73 74 4e 65 74 4d 6f 6e 20 69 73 | e.rest..FastNetMon.FastNetMon.is |
3f380 | 20 61 20 68 69 67 68 2d 70 65 72 66 6f 72 6d 61 6e 63 65 20 44 44 6f 53 20 64 65 74 65 63 74 6f | .a.high-performance.DDoS.detecto |
3f3a0 | 72 2f 73 65 6e 73 6f 72 20 62 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 6d 75 6c 74 69 70 6c | r/sensor.built.on.top.of.multipl |
3f3c0 | 65 20 70 61 63 6b 65 74 20 63 61 70 74 75 72 65 20 65 6e 67 69 6e 65 73 3a 20 4e 65 74 46 6c 6f | e.packet.capture.engines:.NetFlo |
3f3e0 | 77 2c 20 49 50 46 49 58 2c 20 73 46 6c 6f 77 2c 20 41 46 5f 50 41 43 4b 45 54 20 28 70 6f 72 74 | w,.IPFIX,.sFlow,.AF_PACKET.(port |
3f400 | 20 6d 69 72 72 6f 72 29 2e 20 49 74 20 63 61 6e 20 64 65 74 65 63 74 20 68 6f 73 74 73 20 69 6e | .mirror)..It.can.detect.hosts.in |
3f420 | 20 74 68 65 20 64 65 70 6c 6f 79 65 64 20 6e 65 74 77 6f 72 6b 20 73 65 6e 64 69 6e 67 20 6f 72 | .the.deployed.network.sending.or |
3f440 | 20 72 65 63 65 69 76 69 6e 67 20 6c 61 72 67 65 20 76 6f 6c 75 6d 65 73 20 6f 66 20 74 72 61 66 | .receiving.large.volumes.of.traf |
3f460 | 66 69 63 2c 20 70 61 63 6b 65 74 73 2f 62 79 74 65 73 2f 66 6c 6f 77 73 20 70 65 72 20 73 65 63 | fic,.packets/bytes/flows.per.sec |
3f480 | 6f 6e 64 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 61 | ond.and.perform.a.configurable.a |
3f4a0 | 63 74 69 6f 6e 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 61 74 20 65 76 65 6e 74 2c 20 73 75 63 68 | ction.to.handle.that.event,.such |
3f4c0 | 20 61 73 20 63 61 6c 6c 69 6e 67 20 61 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 2e 00 46 65 61 | .as.calling.a.custom.script..Fea |
3f4e0 | 74 75 72 65 73 20 6f 66 20 74 68 65 20 43 75 72 72 65 6e 74 20 49 6d 70 6c 65 6d 65 6e 74 61 74 | tures.of.the.Current.Implementat |
3f500 | 69 6f 6e 00 46 69 65 6c 64 00 46 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 66 | ion.Field.File.identified.by.`<f |
3f520 | 69 6c 65 6e 61 6d 65 3e 60 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 54 53 49 47 20 61 75 | ilename>`.containing.the.TSIG.au |
3f540 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 66 6f 72 20 52 46 43 32 31 33 36 20 6e 73 75 | thentication.key.for.RFC2136.nsu |
3f560 | 70 64 61 74 65 20 6f 6e 20 72 65 6d 6f 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c 65 | pdate.on.remote.DNS.server..File |
3f580 | 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6b 65 79 66 69 6c 65 3e 60 20 63 6f 6e 74 61 | .identified.by.`<keyfile>`.conta |
3f5a0 | 69 6e 69 6e 67 20 74 68 65 20 73 65 63 72 65 74 20 52 4e 44 43 20 6b 65 79 20 73 68 61 72 65 64 | ining.the.secret.RNDC.key.shared |
3f5c0 | 20 77 69 74 68 20 72 65 6d 6f 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c 74 65 72 20 | .with.remote.DNS.server..Filter. |
3f5e0 | 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f | Type-3.summary-LSAs.announced.to |
3f600 | 20 6f 74 68 65 72 20 61 72 65 61 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 69 6e 74 | .other.areas.originated.from.int |
3f620 | 72 61 2d 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 | ra-.area.paths.from.specified.ar |
3f640 | 65 61 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 | ea..This.command.makes.sense.in. |
3f660 | 41 42 52 20 6f 6e 6c 79 2e 00 46 69 6c 74 65 72 20 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f | ABR.only..Filter.traffic.based.o |
3f680 | 6e 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 69 | n.source/destination.address..Fi |
3f6a0 | 6c 74 65 72 2d 49 64 3d 32 30 30 30 2f 33 30 30 30 20 28 6d 65 61 6e 73 20 32 30 30 30 4b 62 69 | lter-Id=2000/3000.(means.2000Kbi |
3f6c0 | 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 72 61 74 65 20 61 6e 64 20 33 30 30 30 4b 62 69 74 20 | t.down-stream.rate.and.3000Kbit. |
3f6e0 | 75 70 2d 73 74 72 65 61 6d 20 72 61 74 65 29 00 46 69 6c 74 65 72 2d 49 64 3d 35 30 30 30 2f 34 | up-stream.rate).Filter-Id=5000/4 |
3f700 | 30 30 30 20 28 6d 65 61 6e 73 20 35 30 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 | 000.(means.5000Kbit.down-stream. |
3f720 | 72 61 74 65 20 61 6e 64 20 34 30 30 30 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 74 65 | rate.and.4000Kbit.up-stream.rate |
3f740 | 29 20 49 66 20 61 74 74 72 69 62 75 74 65 20 46 69 6c 74 65 72 2d 49 64 20 72 65 64 65 66 69 6e | ).If.attribute.Filter-Id.redefin |
3f760 | 65 64 2c 20 72 65 70 6c 61 63 65 20 69 74 20 69 6e 20 52 41 44 49 55 53 20 43 6f 41 20 72 65 71 | ed,.replace.it.in.RADIUS.CoA.req |
3f780 | 75 65 73 74 2e 00 46 69 6c 74 65 72 69 6e 67 00 46 69 6c 74 65 72 69 6e 67 20 69 73 20 75 73 65 | uest..Filtering.Filtering.is.use |
3f7a0 | 64 20 66 6f 72 20 62 6f 74 68 20 69 6e 70 75 74 20 61 6e 64 20 6f 75 74 70 75 74 20 6f 66 20 74 | d.for.both.input.and.output.of.t |
3f7c0 | 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4f 6e 63 65 20 66 69 6c | he.routing.information..Once.fil |
3f7e0 | 74 65 72 69 6e 67 20 69 73 20 64 65 66 69 6e 65 64 2c 20 69 74 20 63 61 6e 20 62 65 20 61 70 70 | tering.is.defined,.it.can.be.app |
3f800 | 6c 69 65 64 20 69 6e 20 61 6e 79 20 64 69 72 65 63 74 69 6f 6e 2e 20 56 79 4f 53 20 6d 61 6b 65 | lied.in.any.direction..VyOS.make |
3f820 | 73 20 66 69 6c 74 65 72 69 6e 67 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 61 63 6c 73 20 | s.filtering.possible.using.acls. |
3f840 | 61 6e 64 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 00 46 69 6e 61 6c 6c 79 2c 20 74 6f 20 61 70 | and.prefix.lists..Finally,.to.ap |
3f860 | 70 6c 79 20 74 68 65 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 74 6f 20 69 6e 67 72 65 73 73 20 | ply.the.policy.route.to.ingress. |
3f880 | 74 72 61 66 66 69 63 20 6f 6e 20 6f 75 72 20 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 77 65 | traffic.on.our.LAN.interface,.we |
3f8a0 | 20 75 73 65 3a 00 46 69 72 65 77 61 6c 6c 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 34 20 52 | .use:.Firewall.Firewall.-.IPv4.R |
3f8c0 | 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 36 20 52 75 6c 65 73 00 46 69 72 65 77 | ules.Firewall.-.IPv6.Rules.Firew |
3f8e0 | 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 | all.Configuration.Firewall.Confi |
3f900 | 67 75 72 61 74 69 6f 6e 20 28 44 65 70 72 65 63 61 74 65 64 29 00 46 69 72 65 77 61 6c 6c 20 44 | guration.(Deprecated).Firewall.D |
3f920 | 65 73 63 72 69 70 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 45 78 63 65 70 74 69 6f 6e 73 00 46 | escription.Firewall.Exceptions.F |
3f940 | 69 72 65 77 61 6c 6c 20 4c 6f 67 73 00 46 69 72 65 77 61 6c 6c 20 52 75 6c 65 73 00 46 69 72 65 | irewall.Logs.Firewall.Rules.Fire |
3f960 | 77 61 6c 6c 20 67 72 6f 75 70 73 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 | wall.groups.Firewall.groups.repr |
3f980 | 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 | esent.collections.of.IP.addresse |
3f9a0 | 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 | s,.networks,.ports,.mac.addresse |
3f9c0 | 73 20 6f 72 20 64 6f 6d 61 69 6e 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 | s.or.domains..Once.created,.a.gr |
3f9e0 | 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c | oup.can.be.referenced.by.firewal |
3fa00 | 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 | l,.nat.and.policy.route.rules.as |
3fa20 | 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | .either.a.source.or.destination. |
3fa40 | 6d 61 74 63 68 65 72 2e 20 4d 65 6d 62 65 72 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 6f 72 | matcher..Members.can.be.added.or |
3fa60 | 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 61 20 67 72 6f 75 70 20 77 69 74 68 6f 75 74 20 63 68 | .removed.from.a.group.without.ch |
3fa80 | 61 6e 67 65 73 20 74 6f 2c 20 6f 72 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 6c 6f 61 64 2c | anges.to,.or.the.need.to.reload, |
3faa0 | 20 69 6e 64 69 76 69 64 75 61 6c 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 00 46 69 72 65 | .individual.firewall.rules..Fire |
3fac0 | 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e | wall.groups.represent.collection |
3fae0 | 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 | s.of.IP.addresses,.networks,.por |
3fb00 | 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 20 69 6e | ts,.mac.addresses,.domains.or.in |
3fb20 | 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 | terfaces..Once.created,.a.group. |
3fb40 | 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e | can.be.referenced.by.firewall,.n |
3fb60 | 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 | at.and.policy.route.rules.as.eit |
3fb80 | 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 | her.a.source.or.destination.matc |
3fba0 | 68 65 72 2c 20 61 6e 64 20 61 73 20 69 6e 62 70 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 20 | her,.and.as.inbpund/outbound.in. |
3fbc0 | 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 00 46 69 72 | the.case.of.interface.group..Fir |
3fbe0 | 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f | ewall.groups.represent.collectio |
3fc00 | 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f | ns.of.IP.addresses,.networks,.po |
3fc20 | 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 20 69 | rts,.mac.addresses,.domains.or.i |
3fc40 | 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 | nterfaces..Once.created,.a.group |
3fc60 | 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 | .can.be.referenced.by.firewall,. |
3fc80 | 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 | nat.and.policy.route.rules.as.ei |
3fca0 | 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 | ther.a.source.or.destination.mat |
3fcc0 | 63 68 65 72 2c 20 61 6e 64 2f 6f 72 20 61 73 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 | cher,.and/or.as.inbound/outbound |
3fce0 | 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e | .in.the.case.of.interface.group. |
3fd00 | 00 46 69 72 65 77 61 6c 6c 20 6d 61 72 6b 2e 20 49 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c | .Firewall.mark..It.possible.to.l |
3fd20 | 6f 61 64 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f 6e 20 60 60 | oadbalancing.traffic.based.on.`` |
3fd40 | 66 77 6d 61 72 6b 60 60 20 76 61 6c 75 65 00 46 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 63 | fwmark``.value.Firewall.policy.c |
3fd60 | 61 6e 20 61 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 74 75 6e 6e 65 6c | an.also.be.applied.to.the.tunnel |
3fd80 | 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 60 6c 6f 63 61 6c 60 2c 20 60 69 6e 60 2c 20 61 6e | .interface.for.`local`,.`in`,.an |
3fda0 | 64 20 60 6f 75 74 60 20 64 69 72 65 63 74 69 6f 6e 73 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 73 | d.`out`.directions.and.functions |
3fdc0 | 20 69 64 65 6e 74 69 63 61 6c 6c 79 20 74 6f 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 | .identically.to.ethernet.interfa |
3fde0 | 63 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 61 72 65 20 77 72 69 74 74 65 6e 20 | ces..Firewall.rules.are.written. |
3fe00 | 61 73 20 6e 6f 72 6d 61 6c 2c 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 | as.normal,.using.the.internal.IP |
3fe20 | 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 6f 75 74 62 6f 75 | .address.as.the.source.of.outbou |
3fe40 | 6e 64 20 72 75 6c 65 73 20 61 6e 64 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 | nd.rules.and.the.destination.of. |
3fe60 | 69 6e 62 6f 75 6e 64 20 72 75 6c 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 66 6f | inbound.rules..Firewall.rules.fo |
3fe80 | 72 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 00 46 69 72 65 77 61 6c 6c 2d 4c 65 67 61 63 | r.Destination.NAT.Firewall-Legac |
3fea0 | 79 00 46 69 72 6d 77 61 72 65 20 55 70 64 61 74 65 00 46 69 72 73 74 20 68 6f 70 20 69 6e 74 65 | y.Firmware.Update.First.hop.inte |
3fec0 | 72 66 61 63 65 20 6f 66 20 61 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2e 00 46 69 72 73 74 | rface.of.a.route.to.match..First |
3fee0 | 20 6f 66 20 61 6c 6c 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 42 47 50 20 72 | .of.all.you.must.configure.BGP.r |
3ff00 | 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e | outer.with.the.:abbr:`ASN.(Auton |
3ff20 | 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 65 20 41 53 20 6e 75 | omous.System.Number)`..The.AS.nu |
3ff40 | 6d 62 65 72 20 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 74 68 65 20 61 75 | mber.is.an.identifier.for.the.au |
3ff60 | 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 42 47 50 20 70 72 6f 74 6f 63 6f | tonomous.system..The.BGP.protoco |
3ff80 | 6c 20 75 73 65 73 20 74 68 65 20 41 53 20 6e 75 6d 62 65 72 20 66 6f 72 20 64 65 74 65 63 74 69 | l.uses.the.AS.number.for.detecti |
3ffa0 | 6e 67 20 77 68 65 74 68 65 72 20 74 68 65 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 | ng.whether.the.BGP.connection.is |
3ffc0 | 20 69 6e 74 65 72 6e 61 6c 20 6f 72 20 65 78 74 65 72 6e 61 6c 2e 20 56 79 4f 53 20 64 6f 65 73 | .internal.or.external..VyOS.does |
3ffe0 | 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | .not.have.a.special.command.to.s |
40000 | 74 61 72 74 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 47 50 20 70 72 | tart.the.BGP.process..The.BGP.pr |
40020 | 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6e 65 69 67 | ocess.starts.when.the.first.neig |
40040 | 68 62 6f 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 46 69 72 73 74 20 6f 66 20 61 6c 6c | hbor.is.configured..First.of.all |
40060 | 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 43 41 20 72 6f 6f 74 20 63 65 | ,.we.need.to.create.a.CA.root.ce |
40080 | 72 74 69 66 69 63 61 74 65 20 61 6e 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 | rtificate.and.server.certificate |
400a0 | 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 69 64 65 2e 00 46 69 72 73 74 20 73 63 65 6e 61 | .on.the.server.side..First.scena |
400c0 | 72 69 6f 3a 20 61 70 70 6c 79 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 66 6f 72 20 61 | rio:.apply.destination.NAT.for.a |
400e0 | 6c 6c 20 48 54 54 50 20 74 72 61 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 74 68 72 6f 75 67 68 20 | ll.HTTP.traffic.comming.through. |
40100 | 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 61 6e 64 20 75 73 65 72 20 34 20 62 61 63 6b 65 | interface.eth0,.and.user.4.backe |
40120 | 6e 64 73 2e 20 46 69 72 73 74 20 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 72 65 63 65 69 76 | nds..First.backend.should.receiv |
40140 | 65 64 20 33 30 25 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 2c 20 73 65 63 6f 6e 64 20 62 61 | ed.30%.of.the.request,.second.ba |
40160 | 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 67 65 74 20 32 30 25 2c 20 74 68 69 72 64 20 31 35 25 20 | ckend.should.get.20%,.third.15%. |
40180 | 61 6e 64 20 74 68 65 20 66 6f 75 72 74 68 20 33 35 25 20 57 65 20 77 69 6c 6c 20 75 73 65 20 73 | and.the.fourth.35%.We.will.use.s |
401a0 | 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 66 6f | ource.and.destination.address.fo |
401c0 | 72 20 68 61 73 68 20 67 65 6e 65 72 61 74 69 6f 6e 2e 00 46 69 72 73 74 20 73 74 65 70 73 00 46 | r.hash.generation..First.steps.F |
401e0 | 69 72 73 74 20 74 68 65 20 4f 54 50 20 6b 65 79 73 20 6d 75 73 74 20 62 65 20 67 65 6e 65 72 61 | irst.the.OTP.keys.must.be.genera |
40200 | 74 65 64 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 74 6f 20 | ted.and.sent.to.the.user.and.to. |
40220 | 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 46 69 72 73 74 20 77 65 20 6e 65 65 64 | the.configuration:.First.we.need |
40240 | 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 62 61 73 69 63 20 73 65 74 74 69 6e 67 73 2e 20 | .to.specify.the.basic.settings.. |
40260 | 31 31 39 34 2f 55 44 50 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 2e 20 54 68 65 20 60 60 70 | 1194/UDP.is.the.default..The.``p |
40280 | 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 6c 60 60 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 63 | ersistent-tunnel``.option.is.rec |
402a0 | 6f 6d 6d 65 6e 64 65 64 2c 20 69 74 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 54 55 4e 2f 54 41 | ommended,.it.prevents.the.TUN/TA |
402c0 | 50 20 64 65 76 69 63 65 20 66 72 6f 6d 20 63 6c 6f 73 69 6e 67 20 6f 6e 20 63 6f 6e 6e 65 63 74 | P.device.from.closing.on.connect |
402e0 | 69 6f 6e 20 72 65 73 65 74 73 20 6f 72 20 64 61 65 6d 6f 6e 20 72 65 6c 6f 61 64 73 2e 00 46 69 | ion.resets.or.daemon.reloads..Fi |
40300 | 72 73 74 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 64 65 70 6c 6f 79 20 61 6e 20 52 | rst.you.will.need.to.deploy.an.R |
40320 | 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 20 66 6f 72 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 74 | PKI.validator.for.your.routers.t |
40340 | 6f 20 75 73 65 2e 20 4e 4c 6e 65 74 20 4c 61 62 73 20 70 72 6f 76 69 64 65 73 20 61 20 63 6f 6c | o.use..NLnet.Labs.provides.a.col |
40360 | 6c 65 63 74 69 6f 6e 20 6f 66 20 73 6f 66 74 77 61 72 65 5f 20 79 6f 75 20 63 61 6e 20 63 6f 6d | lection.of.software_.you.can.com |
40380 | 70 61 72 65 20 61 6e 64 20 73 65 74 74 6c 65 20 6f 6e 20 6f 6e 65 2e 20 4f 6e 63 65 20 79 6f 75 | pare.and.settle.on.one..Once.you |
403a0 | 72 20 73 65 72 76 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 79 6f 75 20 63 61 6e 20 73 74 61 72 | r.server.is.running.you.can.star |
403c0 | 74 20 76 61 6c 69 64 61 74 69 6e 67 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 46 69 72 73 | t.validating.announcements..Firs |
403e0 | 74 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 64 65 70 6c 6f 79 20 61 6e 20 52 50 4b | t.you.will.need.to.deploy.an.RPK |
40400 | 49 20 76 61 6c 69 64 61 74 6f 72 20 66 6f 72 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 74 6f 20 | I.validator.for.your.routers.to. |
40420 | 75 73 65 2e 20 54 68 65 20 52 49 50 45 20 4e 43 43 20 68 65 6c 70 66 75 6c 6c 79 20 70 72 6f 76 | use..The.RIPE.NCC.helpfully.prov |
40440 | 69 64 65 20 60 73 6f 6d 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 60 5f 20 74 6f 20 67 65 74 20 | ide.`some.instructions`_.to.get. |
40460 | 79 6f 75 20 73 74 61 72 74 65 64 20 77 69 74 68 20 73 65 76 65 72 61 6c 20 64 69 66 66 65 72 65 | you.started.with.several.differe |
40480 | 6e 74 20 6f 70 74 69 6f 6e 73 2e 20 20 4f 6e 63 65 20 79 6f 75 72 20 73 65 72 76 65 72 20 69 73 | nt.options...Once.your.server.is |
404a0 | 20 72 75 6e 6e 69 6e 67 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 76 61 6c 69 64 61 74 69 6e | .running.you.can.start.validatin |
404c0 | 67 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 | g.announcements..First,.on.both. |
404e0 | 72 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d | routers.run.the.operational.comm |
40500 | 61 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 | and."generate.pki.key-pair.insta |
40520 | 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 3e 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f | ll.<key-pair.nam>>"..You.may.cho |
40540 | 6f 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f | ose.different.length.than.2048.o |
40560 | 66 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 | f.course..First,.on.both.routers |
40580 | 20 72 75 6e 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 | .run.the.operational.command."ge |
405a0 | 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 | nerate.pki.key-pair.install.<key |
405c0 | 2d 70 61 69 72 20 6e 61 6d 65 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 20 64 69 66 | -pair.name>"..You.may.choose.dif |
405e0 | 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f 66 20 63 6f 75 72 73 | ferent.length.than.2048.of.cours |
40600 | 65 2e 00 46 69 72 73 74 2c 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 73 20 67 65 6e | e..First,.one.of.the.systems.gen |
40620 | 65 72 61 74 65 20 74 68 65 20 6b 65 79 20 75 73 69 6e 67 20 74 68 65 20 3a 72 65 66 3a 60 67 65 | erate.the.key.using.the.:ref:`ge |
40640 | 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 | nerate.pki.openvpn.shared-secret |
40660 | 3c 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 3e 60 20 63 | <configuration/pki/index:pki>`.c |
40680 | 6f 6d 6d 61 6e 64 2e 20 4f 6e 63 65 20 67 65 6e 65 72 61 74 65 64 2c 20 79 6f 75 20 77 69 6c 6c | ommand..Once.generated,.you.will |
406a0 | 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 6f 6e 20 74 68 65 | .need.to.install.this.key.on.the |
406c0 | 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2c 20 74 68 65 6e 20 63 6f 70 79 20 61 6e 64 20 69 6e 73 | .local.system,.then.copy.and.ins |
406e0 | 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 | tall.this.key.to.the.remote.rout |
40700 | 65 72 2e 00 46 69 72 73 74 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 | er..First,.you.need.to.generate. |
40720 | 61 20 6b 65 79 20 62 79 20 72 75 6e 6e 69 6e 67 20 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 | a.key.by.running.``run.generate. |
40740 | 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 69 6e 73 74 61 6c | pki.openvpn.shared-secret.instal |
40760 | 6c 20 3c 6e 61 6d 65 3e 60 60 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f | l.<name>``.from.configuration.mo |
40780 | 64 65 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 61 6e 79 20 6e 61 6d 65 2c 20 77 65 20 77 69 6c | de..You.can.use.any.name,.we.wil |
407a0 | 6c 20 75 73 65 20 60 60 73 32 73 60 60 2e 00 46 6c 61 73 68 00 46 6c 61 73 68 20 4f 76 65 72 72 | l.use.``s2s``..Flash.Flash.Overr |
407c0 | 69 64 65 00 46 6c 6f 77 20 41 63 63 6f 75 6e 74 69 6e 67 00 46 6c 6f 77 20 45 78 70 6f 72 74 00 | ide.Flow.Accounting.Flow.Export. |
407e0 | 46 6c 6f 77 20 61 6e 64 20 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 00 | Flow.and.packet-based.balancing. |
40800 | 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 62 79 20 73 6f 75 72 63 65 2d 64 65 73 74 | Flows.are.defined.by.source-dest |
40820 | 69 6e 61 74 69 6f 6e 20 68 6f 73 74 20 70 61 69 72 73 2e 00 46 6c 6f 77 73 20 61 72 65 20 64 65 | ination.host.pairs..Flows.are.de |
40840 | 66 69 6e 65 64 20 62 79 20 74 68 65 20 35 2d 74 75 70 6c 65 2e 20 46 61 69 72 6e 65 73 73 20 69 | fined.by.the.5-tuple..Fairness.i |
40860 | 73 20 61 70 70 6c 69 65 64 20 66 69 72 73 74 20 6f 76 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e | s.applied.first.over.destination |
40880 | 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 6e 20 6f 76 65 72 20 69 6e 64 69 76 69 64 75 61 6c | .addresses,.then.over.individual |
408a0 | 20 66 6c 6f 77 73 2e 00 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 | .flows..Flows.are.defined.by.the |
408c0 | 20 35 2d 74 75 70 6c 65 2e 20 46 61 69 72 6e 65 73 73 20 69 73 20 61 70 70 6c 69 65 64 20 66 69 | .5-tuple..Fairness.is.applied.fi |
408e0 | 72 73 74 20 6f 76 65 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 6e 20 | rst.over.source.addresses,.then. |
40900 | 6f 76 65 72 20 69 6e 64 69 76 69 64 75 61 6c 20 66 6c 6f 77 73 2e 00 46 6c 6f 77 73 20 61 72 65 | over.individual.flows..Flows.are |
40920 | 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 65 6e 74 69 72 65 20 35 2d 74 75 70 6c 65 20 28 | .defined.by.the.entire.5-tuple.( |
40940 | 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 | source.IP.address,.source.port,. |
40960 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 | destination.IP.address,.destinat |
40980 | 69 6f 6e 20 70 6f 72 74 2c 20 74 72 61 6e 73 70 6f 72 74 20 70 72 6f 74 6f 63 6f 6c 29 2e 00 46 | ion.port,.transport.protocol)..F |
409a0 | 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 6f 6e 6c 79 20 62 79 20 64 65 73 74 69 6e 61 | lows.are.defined.only.by.destina |
409c0 | 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 | tion.address..Flows.are.defined. |
409e0 | 6f 6e 6c 79 20 62 79 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 00 46 6c 6f 77 73 20 63 61 | only.by.source.address..Flows.ca |
40a00 | 6e 20 62 65 20 65 78 70 6f 72 74 65 64 20 76 69 61 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 | n.be.exported.via.two.different. |
40a20 | 70 72 6f 74 6f 63 6f 6c 73 3a 20 4e 65 74 46 6c 6f 77 20 28 76 65 72 73 69 6f 6e 73 20 35 2c 20 | protocols:.NetFlow.(versions.5,. |
40a40 | 39 20 61 6e 64 20 31 30 2f 49 50 46 49 58 29 20 61 6e 64 20 73 46 6c 6f 77 2e 20 41 64 64 69 74 | 9.and.10/IPFIX).and.sFlow..Addit |
40a60 | 69 6f 6e 61 6c 6c 79 2c 20 79 6f 75 20 6d 61 79 20 73 61 76 65 20 66 6c 6f 77 73 20 74 6f 20 61 | ionally,.you.may.save.flows.to.a |
40a80 | 6e 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 20 | n.in-memory.table.internally.in. |
40aa0 | 61 20 72 6f 75 74 65 72 2e 00 46 6c 6f 77 74 61 62 6c 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | a.router..Flowtable.Configuratio |
40ac0 | 6e 00 46 6c 6f 77 74 61 62 6c 65 73 20 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 66 69 | n.Flowtables..allows.you.to.defi |
40ae0 | 6e 65 20 61 20 66 61 73 74 70 61 74 68 20 74 68 72 6f 75 67 68 20 74 68 65 20 66 6c 6f 77 74 61 | ne.a.fastpath.through.the.flowta |
40b00 | 62 6c 65 20 64 61 74 61 70 61 74 68 2e 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 73 75 70 70 | ble.datapath..The.flowtable.supp |
40b20 | 6f 72 74 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 20 33 20 49 50 76 34 20 61 6e 64 20 49 50 | orts.for.the.layer.3.IPv4.and.IP |
40b40 | 76 36 20 61 6e 64 20 74 68 65 20 6c 61 79 65 72 20 34 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 | v6.and.the.layer.4.TCP.and.UDP.p |
40b60 | 72 6f 74 6f 63 6f 6c 73 2e 00 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f | rotocols..Flowtables.Firewall.Co |
40b80 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 75 73 68 69 6e 67 20 74 68 65 20 73 65 73 73 69 6f 6e | nfiguration.Flushing.the.session |
40ba0 | 20 74 61 62 6c 65 20 77 69 6c 6c 20 63 61 75 73 65 20 6f 74 68 65 72 20 63 6f 6e 6e 65 63 74 69 | .table.will.cause.other.connecti |
40bc0 | 6f 6e 73 20 74 6f 20 66 61 6c 6c 20 62 61 63 6b 20 66 72 6f 6d 20 66 6c 6f 77 2d 62 61 73 65 64 | ons.to.fall.back.from.flow-based |
40be0 | 20 74 6f 20 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 75 6e 74 69 6c | .to.packet-based.balancing.until |
40c00 | 20 65 61 63 68 20 66 6c 6f 77 20 69 73 20 72 65 65 73 74 61 62 6c 69 73 68 65 64 2e 00 46 6f 6c | .each.flow.is.reestablished..Fol |
40c20 | 6c 6f 77 20 74 68 65 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c | low.the.SSH.dynamic-protection.l |
40c40 | 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 46 | og..Follow.the.SSH.server.log..F |
40c60 | 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 | ollow.the.instructions.to.genera |
40c80 | 74 65 20 43 41 20 63 65 72 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 | te.CA.cert.(in.configuration.mod |
40ca0 | 65 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 | e):.Follow.the.instructions.to.g |
40cc0 | 65 6e 65 72 61 74 65 20 73 65 72 76 65 72 20 63 65 72 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 | enerate.server.cert.(in.configur |
40ce0 | 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 65 20 6c 6f 67 73 20 66 6f 72 | ation.mode):.Follow.the.logs.for |
40d00 | 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 46 6f 72 20 3a 72 65 66 | .mDNS.repeater.service..For.:ref |
40d20 | 3a 60 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 2d 6e 61 74 60 20 61 20 72 75 6c 65 20 66 6f 72 20 | :`bidirectional-nat`.a.rule.for. |
40d40 | 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a | both.:ref:`source-nat`.and.:ref: |
40d60 | 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 | `destination-nat`.needs.to.be.cr |
40d80 | 65 61 74 65 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 | eated..For.:ref:`destination-nat |
40da0 | 60 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | `.rules.the.packets.destination. |
40dc0 | 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 | address.will.be.replaced.by.the. |
40de0 | 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c | specified.address.in.the.`transl |
40e00 | 61 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d 6d 61 6e 64 2e 00 46 6f 72 20 3a 72 65 66 | ation.address`.command..For.:ref |
40e20 | 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 | :`source-nat`.rules.the.packets. |
40e40 | 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 | source.address.will.be.replaced. |
40e60 | 77 69 74 68 20 74 68 65 20 61 64 64 72 65 73 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 | with.the.address.specified.in.th |
40e80 | 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 2e 20 41 20 70 6f 72 74 20 74 72 | e.translation.command..A.port.tr |
40ea0 | 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 20 | anslation.can.also.be.specified. |
40ec0 | 61 6e 64 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 | and.is.part.of.the.translation.a |
40ee0 | 64 64 72 65 73 73 2e 00 46 6f 72 20 45 6e 63 72 79 70 74 69 6f 6e 3a 00 46 6f 72 20 48 61 73 68 | ddress..For.Encryption:.For.Hash |
40f00 | 69 6e 67 3a 00 46 6f 72 20 49 53 2d 49 53 20 74 6f 70 20 6f 70 65 72 61 74 65 20 63 6f 72 72 65 | ing:.For.IS-IS.top.operate.corre |
40f20 | 63 74 6c 79 2c 20 6f 6e 65 20 6d 75 73 74 20 64 6f 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 | ctly,.one.must.do.the.equivalent |
40f40 | 20 6f 66 20 61 20 52 6f 75 74 65 72 20 49 44 20 69 6e 20 43 4c 4e 53 2e 20 54 68 69 73 20 52 6f | .of.a.Router.ID.in.CLNS..This.Ro |
40f60 | 75 74 65 72 20 49 44 20 69 73 20 63 61 6c 6c 65 64 20 74 68 65 20 3a 61 62 62 72 3a 60 4e 45 54 | uter.ID.is.called.the.:abbr:`NET |
40f80 | 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 2e 20 54 68 69 73 20 6d | .(Network.Entity.Title)`..This.m |
40fa0 | 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 | ust.be.unique.for.each.and.every |
40fc0 | 20 72 6f 75 74 65 72 20 74 68 61 74 20 69 73 20 6f 70 65 72 61 74 69 6e 67 20 69 6e 20 49 53 2d | .router.that.is.operating.in.IS- |
40fe0 | 49 53 2e 20 49 74 20 61 6c 73 6f 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 64 75 70 6c 69 63 61 74 | IS..It.also.must.not.be.duplicat |
41000 | 65 64 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 73 61 6d 65 20 69 73 73 75 65 73 20 74 68 61 | ed.otherwise.the.same.issues.tha |
41020 | 74 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 4f 53 50 46 20 77 69 6c 6c 20 6f 63 63 75 72 20 77 | t.occur.within.OSPF.will.occur.w |
41040 | 69 74 68 69 6e 20 49 53 2d 49 53 20 77 68 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 73 61 69 | ithin.IS-IS.when.it.comes.to.sai |
41060 | 64 20 64 75 70 6c 69 63 61 74 69 6f 6e 2e 00 46 6f 72 20 49 6e 63 6f 6d 69 6e 67 20 61 6e 64 20 | d.duplication..For.Incoming.and. |
41080 | 49 6d 70 6f 72 74 20 52 6f 75 74 65 2d 6d 61 70 73 20 69 66 20 77 65 20 72 65 63 65 69 76 65 20 | Import.Route-maps.if.we.receive. |
410a0 | 61 20 76 36 20 67 6c 6f 62 61 6c 20 61 6e 64 20 76 36 20 4c 4c 20 61 64 64 72 65 73 73 20 66 6f | a.v6.global.and.v6.LL.address.fo |
410c0 | 72 20 74 68 65 20 72 6f 75 74 65 2c 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 6f 20 75 73 65 20 | r.the.route,.then.prefer.to.use. |
410e0 | 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 6e 65 78 74 68 6f | the.global.address.as.the.nextho |
41100 | 70 2e 00 46 6f 72 20 4c 6f 63 61 6c 20 55 73 65 72 73 00 46 6f 72 20 52 41 44 49 55 53 20 75 73 | p..For.Local.Users.For.RADIUS.us |
41120 | 65 72 73 00 46 6f 72 20 55 53 42 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 | ers.For.USB.port.information.ple |
41140 | 61 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 | ase.refor.to:.:ref:`hardware_usb |
41160 | 60 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 | `..For.a.headstart.you.can.use.t |
41180 | 68 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 | he.below.example.on.how.to.build |
411a0 | 20 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d | .a.bond.with.two.interfaces.from |
411c0 | 20 56 79 4f 53 20 74 6f 20 61 20 4a 75 6e 69 70 65 72 20 45 58 20 53 77 69 74 63 68 20 73 79 73 | .VyOS.to.a.Juniper.EX.Switch.sys |
411e0 | 74 65 6d 2e 00 46 6f 72 20 61 20 68 65 61 64 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 | tem..For.a.headstart.you.can.use |
41200 | 20 74 68 65 20 62 65 6c 6f 77 20 65 78 61 6d 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 | .the.below.example.on.how.to.bui |
41220 | 6c 64 20 61 20 62 6f 6e 64 2c 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 69 74 68 20 74 77 6f 20 | ld.a.bond,port-channel.with.two. |
41240 | 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 4f 53 20 74 6f 20 61 20 41 72 75 62 61 2f | interfaces.from.VyOS.to.a.Aruba/ |
41260 | 48 50 20 32 35 31 30 47 20 73 77 69 74 63 68 2e 00 46 6f 72 20 61 20 6c 61 72 67 65 20 61 6d 6f | HP.2510G.switch..For.a.large.amo |
41280 | 75 6e 74 20 6f 66 20 70 72 69 76 61 74 65 20 6d 61 63 68 69 6e 65 73 20 62 65 68 69 6e 64 20 74 | unt.of.private.machines.behind.t |
412a0 | 68 65 20 4e 41 54 20 79 6f 75 72 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6d 69 67 68 74 20 74 | he.NAT.your.address.pool.might.t |
412c0 | 6f 20 62 65 20 62 69 67 67 65 72 2e 20 55 73 65 20 61 6e 79 20 61 64 64 72 65 73 73 20 69 6e 20 | o.be.bigger..Use.any.address.in. |
412e0 | 74 68 65 20 72 61 6e 67 65 20 31 30 30 2e 36 34 2e 30 2e 31 30 20 2d 20 31 30 30 2e 36 34 2e 30 | the.range.100.64.0.10.-.100.64.0 |
41300 | 2e 32 30 20 6f 6e 20 53 4e 41 54 20 72 75 6c 65 20 34 30 20 77 68 65 6e 20 64 6f 69 6e 67 20 74 | .20.on.SNAT.rule.40.when.doing.t |
41320 | 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 00 46 6f 72 20 61 20 73 69 6d 70 6c 65 20 68 6f 6d 65 | he.translation.For.a.simple.home |
41340 | 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 6a 75 73 74 20 74 68 65 20 49 53 50 27 73 20 65 71 | .network.using.just.the.ISP's.eq |
41360 | 75 69 70 6d 65 6e 74 2c 20 74 68 69 73 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 69 72 61 62 | uipment,.this.is.usually.desirab |
41380 | 6c 65 2e 20 42 75 74 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 75 6e 20 56 79 4f 53 20 | le..But.if.you.want.to.run.VyOS. |
413a0 | 61 73 20 79 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 61 6e 64 20 72 6f 75 74 65 72 2c 20 74 68 69 | as.your.firewall.and.router,.thi |
413c0 | 73 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 68 61 76 69 6e 67 20 61 20 64 6f 75 62 6c 65 | s.will.result.in.having.a.double |
413e0 | 20 4e 41 54 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 73 65 74 75 70 2e 20 54 68 69 73 20 72 65 | .NAT.and.firewall.setup..This.re |
41400 | 73 75 6c 74 73 20 69 6e 20 61 20 66 65 77 20 65 78 74 72 61 20 6c 61 79 65 72 73 20 6f 66 20 63 | sults.in.a.few.extra.layers.of.c |
41420 | 6f 6d 70 6c 65 78 69 74 79 2c 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 69 66 20 79 6f 75 20 75 | omplexity,.particularly.if.you.u |
41440 | 73 65 20 73 6f 6d 65 20 4e 41 54 20 6f 72 20 74 75 6e 6e 65 6c 20 66 65 61 74 75 72 65 73 2e 00 | se.some.NAT.or.tunnel.features.. |
41460 | 46 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 20 70 72 6f 74 6f 63 6f 6c 73 20 61 73 20 | For.connectionless.protocols.as. |
41480 | 6c 69 6b 65 20 49 43 4d 50 20 61 6e 64 20 55 44 50 2c 20 61 20 66 6c 6f 77 20 69 73 20 63 6f 6e | like.ICMP.and.UDP,.a.flow.is.con |
414a0 | 73 69 64 65 72 65 64 20 63 6f 6d 70 6c 65 74 65 20 6f 6e 63 65 20 6e 6f 20 6d 6f 72 65 20 70 61 | sidered.complete.once.no.more.pa |
414c0 | 63 6b 65 74 73 20 66 6f 72 20 74 68 69 73 20 66 6c 6f 77 20 61 70 70 65 61 72 20 61 66 74 65 72 | ckets.for.this.flow.appear.after |
414e0 | 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 74 69 6d 65 6f 75 74 2e 00 46 6f 72 20 65 78 61 6d 70 | .configurable.timeout..For.examp |
41500 | 6c 65 2c 20 69 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 70 6f 6f 72 20 74 69 6d 65 20 73 | le,.if.problems.with.poor.time.s |
41520 | 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 72 65 20 65 78 70 65 72 69 65 6e 63 65 64 2c 20 | ynchronization.are.experienced,. |
41540 | 74 68 65 20 77 69 6e 64 6f 77 20 63 61 6e 20 62 65 20 69 6e 63 72 65 61 73 65 64 20 66 72 6f 6d | the.window.can.be.increased.from |
41560 | 20 69 74 73 20 64 65 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 20 33 20 70 65 72 6d 69 74 74 65 64 | .its.default.size.of.3.permitted |
41580 | 20 63 6f 64 65 73 20 28 6f 6e 65 20 70 72 65 76 69 6f 75 73 20 63 6f 64 65 2c 20 74 68 65 20 63 | .codes.(one.previous.code,.the.c |
415a0 | 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 74 68 65 20 6e 65 78 74 20 63 6f 64 65 29 20 74 6f 20 31 | urrent.code,.the.next.code).to.1 |
415c0 | 37 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 28 74 68 65 20 38 20 70 72 65 76 69 6f 75 | 7.permitted.codes.(the.8.previou |
415e0 | 73 20 63 6f 64 65 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 61 6e 64 20 74 | s.codes,.the.current.code,.and.t |
41600 | 68 65 20 38 20 6e 65 78 74 20 63 6f 64 65 73 29 2e 20 54 68 69 73 20 77 69 6c 6c 20 70 65 72 6d | he.8.next.codes)..This.will.perm |
41620 | 69 74 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 20 6f 66 20 75 70 20 74 6f 20 34 20 6d 69 | it.for.a.time.skew.of.up.to.4.mi |
41640 | 6e 75 74 65 73 20 62 65 74 77 65 65 6e 20 63 6c 69 65 6e 74 20 61 6e 64 20 73 65 72 76 65 72 2e | nutes.between.client.and.server. |
41660 | 00 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 46 6f 72 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 | .For.example:.For.firewall.filte |
41680 | 72 69 6e 67 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 64 6f | ring,.configuration.should.be.do |
416a0 | 6e 65 20 69 6e 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 | ne.in.``set.firewall.[ipv4.|.ipv |
416c0 | 36 5d 20 2e 2e 2e 60 60 00 46 6f 72 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c | 6]....``.For.firewall.filtering, |
416e0 | 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 | .firewall.rules.needs.to.be.crea |
41700 | 74 65 64 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 | ted..Each.rule.is.numbered,.has. |
41720 | 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 | an.action.to.apply.if.the.rule.i |
41740 | 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 | s.matched,.and.the.ability.to.sp |
41760 | 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 | ecify.multiple.criteria.matchers |
41780 | 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 | ..Data.packets.go.through.the.ru |
417a0 | 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 73 6f 20 6f 72 64 65 72 20 69 73 | les.from.1.-.999999,.so.order.is |
417c0 | 20 63 72 75 63 69 61 6c 2e 20 41 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 | .crucial..At.the.first.match.the |
417e0 | 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 | .action.of.the.rule.will.be.exec |
41800 | 75 74 65 64 2e 00 46 6f 72 20 66 72 61 67 6d 65 6e 74 65 64 20 54 43 50 20 6f 72 20 55 44 50 20 | uted..For.fragmented.TCP.or.UDP. |
41820 | 70 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 6c 20 6f 74 68 65 72 20 49 50 76 34 20 61 6e 64 20 49 | packets.and.all.other.IPv4.and.I |
41840 | 50 76 36 20 70 72 6f 74 6f 63 6f 6c 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 73 6f 75 72 63 65 | Pv6.protocol.traffic,.the.source |
41860 | 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f | .and.destination.port.informatio |
41880 | 6e 20 69 73 20 6f 6d 69 74 74 65 64 2e 20 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 | n.is.omitted..For.non-IP.traffic |
418a0 | 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 | ,.the.formula.is.the.same.as.for |
418c0 | 20 74 68 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 | .the.layer2.transmit.hash.policy |
418e0 | 2e 00 46 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 61 6e 20 4f 54 50 20 6b 65 79 20 69 6e 20 56 | ..For.generating.an.OTP.key.in.V |
41900 | 79 4f 53 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 | yOS,.you.can.use.the.CLI.command |
41920 | 20 28 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 29 3a 00 46 6f 72 20 69 6e 62 6f 75 6e 64 | .(operational.mode):.For.inbound |
41940 | 20 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 | .updates.the.order.of.preference |
41960 | 20 69 73 3a 00 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 77 69 74 68 20 3a 63 6f 64 65 3a 60 73 | .is:.For.instance,.with.:code:`s |
41980 | 65 74 20 71 6f 73 20 70 6f 6c 69 63 79 20 73 68 61 70 65 72 20 4d 59 2d 53 48 41 50 45 52 20 63 | et.qos.policy.shaper.MY-SHAPER.c |
419a0 | 6c 61 73 73 20 33 30 20 73 65 74 2d 64 73 63 70 20 45 46 60 20 79 6f 75 20 77 6f 75 6c 64 20 62 | lass.30.set-dscp.EF`.you.would.b |
419c0 | 65 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 44 53 43 50 20 66 69 65 6c 64 20 76 61 6c 75 65 | e.modifying.the.DSCP.field.value |
419e0 | 20 6f 66 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 61 74 20 63 6c 61 73 73 20 74 6f 20 45 78 70 | .of.packets.in.that.class.to.Exp |
41a00 | 65 64 69 74 65 20 46 6f 72 77 61 72 64 69 6e 67 2e 00 46 6f 72 20 69 70 76 34 3a 00 46 6f 72 20 | edite.Forwarding..For.ipv4:.For. |
41a20 | 6c 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 69 72 65 | latest.releases,.refer.the.`fire |
41a40 | 77 61 6c 6c 20 28 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 29 20 3c 68 74 74 70 73 3a 2f | wall.(interface-groups).<https:/ |
41a60 | 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 | /docs.vyos.io/en/latest/configur |
41a80 | 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 | ation/firewall/general.html#inte |
41aa0 | 72 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 6d 61 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e | rface-groups>`_.main.page.to.con |
41ac0 | 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 64 20 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e | figure.zone.based.rules..New.syn |
41ae0 | 74 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a | tax.was.introduced.here.:vytask: |
41b00 | 60 54 35 31 36 30 60 00 46 6f 72 20 6c 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 | `T5160`.For.latest.releases,.ref |
41b20 | 65 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 | er.the.`firewall.<https://docs.v |
41b40 | 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 | yos.io/en/latest/configuration/f |
41b60 | 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 | irewall/general.html#interface-g |
41b80 | 72 6f 75 70 73 3e 60 5f 20 6d 61 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | roups>`_.main.page.to.configure. |
41ba0 | 7a 6f 6e 65 20 62 61 73 65 64 20 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 | zone.based.rules..New.syntax.was |
41bc0 | 20 69 6e 74 72 6f 64 75 63 65 64 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 | .introduced.here.:vytask:`T5160` |
41be0 | 00 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 68 6f 77 20 4d 50 4c | .For.more.information.on.how.MPL |
41c00 | 53 20 6c 61 62 65 6c 20 73 77 69 74 63 68 69 6e 67 20 77 6f 72 6b 73 2c 20 70 6c 65 61 73 65 20 | S.label.switching.works,.please. |
41c20 | 67 6f 20 76 69 73 69 74 20 60 57 69 6b 69 70 65 64 69 61 20 28 4d 50 4c 53 29 60 5f 2e 00 46 6f | go.visit.`Wikipedia.(MPLS)`_..Fo |
41c40 | 72 20 6d 75 6c 74 69 20 68 6f 70 20 73 65 73 73 69 6f 6e 73 20 6f 6e 6c 79 2e 20 43 6f 6e 66 69 | r.multi.hop.sessions.only..Confi |
41c60 | 67 75 72 65 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 65 78 70 65 63 74 65 64 20 54 54 4c 20 66 6f | gure.the.minimum.expected.TTL.fo |
41c80 | 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 | r.an.incoming.BFD.control.packet |
41ca0 | 2e 00 46 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2c 20 69 74 27 73 20 | ..For.network.maintenance,.it's. |
41cc0 | 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 64 69 72 65 63 74 20 75 73 65 72 73 20 74 6f 20 61 | a.good.idea.to.direct.users.to.a |
41ce0 | 20 62 61 63 6b 75 70 20 73 65 72 76 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 70 72 69 6d 61 | .backup.server.so.that.the.prima |
41d00 | 72 79 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 73 61 66 65 6c 79 20 74 61 6b 65 6e 20 6f 75 | ry.server.can.be.safely.taken.ou |
41d20 | 74 20 6f 66 20 73 65 72 76 69 63 65 2e 20 49 74 27 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 | t.of.service..It's.possible.to.s |
41d40 | 77 69 74 63 68 20 79 6f 75 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 74 6f 20 6d 61 69 6e 74 | witch.your.PPPoE.server.to.maint |
41d60 | 65 6e 61 6e 63 65 20 6d 6f 64 65 20 77 68 65 72 65 20 69 74 20 6d 61 69 6e 74 61 69 6e 73 20 61 | enance.mode.where.it.maintains.a |
41d80 | 6c 72 65 61 64 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 | lready.established.connections,. |
41da0 | 62 75 74 20 72 65 66 75 73 65 73 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d | but.refuses.new.connection.attem |
41dc0 | 70 74 73 2e 00 46 6f 72 20 6f 70 74 69 6d 61 6c 20 73 63 61 6c 61 62 69 6c 69 74 79 2c 20 4d 75 | pts..For.optimal.scalability,.Mu |
41de0 | 6c 74 69 63 61 73 74 20 73 68 6f 75 6c 64 6e 27 74 20 62 65 20 75 73 65 64 20 61 74 20 61 6c 6c | lticast.shouldn't.be.used.at.all |
41e00 | 2c 20 62 75 74 20 69 6e 73 74 65 61 64 20 75 73 65 20 42 47 50 20 74 6f 20 73 69 67 6e 61 6c 20 | ,.but.instead.use.BGP.to.signal. |
41e20 | 61 6c 6c 20 63 6f 6e 6e 65 63 74 65 64 20 64 65 76 69 63 65 73 20 62 65 74 77 65 65 6e 20 6c 65 | all.connected.devices.between.le |
41e40 | 61 76 65 73 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e | aves..Unfortunately,.VyOS.does.n |
41e60 | 6f 74 20 79 65 74 20 73 75 70 70 6f 72 74 20 74 68 69 73 2e 00 46 6f 72 20 6f 75 74 62 6f 75 6e | ot.yet.support.this..For.outboun |
41e80 | 64 20 75 70 64 61 74 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 | d.updates.the.order.of.preferenc |
41ea0 | 65 20 69 73 3a 00 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 | e.is:.For.reference,.a.descripti |
41ec0 | 6f 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 | on.can.be.defined.for.every.defi |
41ee0 | 6e 65 64 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c | ned.custom.chain..For.reference, |
41f00 | 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f | .a.description.can.be.defined.fo |
41f20 | 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 72 75 6c 65 2c 20 61 6e 64 20 66 6f 72 20 65 76 65 | r.every.single.rule,.and.for.eve |
41f40 | 72 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 46 6f 72 20 73 65 63 | ry.defined.custom.chain..For.sec |
41f60 | 75 72 69 74 79 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 73 68 6f 75 6c 64 | urity,.the.listen.address.should |
41f80 | 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 69 6e 74 65 72 6e 61 6c 2f 74 72 75 73 74 65 | .only.be.used.on.internal/truste |
41fa0 | 64 20 6e 65 74 77 6f 72 6b 73 21 00 46 6f 72 20 73 65 72 69 61 6c 20 76 69 61 20 55 53 42 20 70 | d.networks!.For.serial.via.USB.p |
41fc0 | 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a | ort.information.please.refor.to: |
41fe0 | 20 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 73 69 6d 70 6c 69 | .:ref:`hardware_usb`..For.simpli |
42000 | 63 69 74 79 20 77 65 27 6c 6c 20 61 73 73 75 6d 65 20 74 68 61 74 20 74 68 65 20 70 72 6f 74 6f | city.we'll.assume.that.the.proto |
42020 | 63 6f 6c 20 69 73 20 47 52 45 2c 20 69 74 27 73 20 6e 6f 74 20 68 61 72 64 20 74 6f 20 67 75 65 | col.is.GRE,.it's.not.hard.to.gue |
42040 | 73 73 20 77 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 74 6f 20 6d | ss.what.needs.to.be.changed.to.m |
42060 | 61 6b 65 20 69 74 20 77 6f 72 6b 20 77 69 74 68 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f | ake.it.work.with.a.different.pro |
42080 | 74 6f 63 6f 6c 2e 20 57 65 20 61 73 73 75 6d 65 20 74 68 61 74 20 49 50 73 65 63 20 77 69 6c 6c | tocol..We.assume.that.IPsec.will |
420a0 | 20 75 73 65 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 | .use.pre-shared.secret.authentic |
420c0 | 61 74 69 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 41 45 53 31 32 38 2f 53 48 41 31 20 66 | ation.and.will.use.AES128/SHA1.f |
420e0 | 6f 72 20 74 68 65 20 63 69 70 68 65 72 20 61 6e 64 20 68 61 73 68 2e 20 41 64 6a 75 73 74 20 74 | or.the.cipher.and.hash..Adjust.t |
42100 | 68 69 73 20 61 73 20 6e 65 63 65 73 73 61 72 79 2e 00 46 6f 72 20 74 68 65 20 3a 72 65 66 3a 60 | his.as.necessary..For.the.:ref:` |
42120 | 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 36 36 60 20 72 75 6c 65 2c 20 74 68 65 20 64 65 73 | destination-nat66`.rule,.the.des |
42140 | 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 | tination.address.of.the.packet.i |
42160 | 73 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 61 64 64 72 65 73 73 20 63 61 6c 63 75 6c 61 | sreplaced.by.the.address.calcula |
42180 | 74 65 64 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 6f | ted.from.the.specified.address.o |
421a0 | 72 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 | r.prefix.in.the.`translation.add |
421c0 | 72 65 73 73 60 20 63 6f 6d 6d 61 6e 64 00 46 6f 72 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 74 72 | ress`.command.For.the.OpenVPN.tr |
421e0 | 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e | affic.to.pass.through.the.WAN.in |
42200 | 74 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 | terface,.you.must.create.a.firew |
42220 | 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 46 6f 72 20 74 68 65 20 57 69 72 65 47 75 61 72 64 | all.exception..For.the.WireGuard |
42240 | 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e | .traffic.to.pass.through.the.WAN |
42260 | 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 | .interface,.you.must.create.a.fi |
42280 | 72 65 77 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e 2e 00 46 6f 72 20 74 68 65 20 61 76 65 72 61 67 | rewall.exception..For.the.averag |
422a0 | 65 20 75 73 65 72 20 61 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 20 68 61 73 20 6e 6f 20 61 | e.user.a.serial.console.has.no.a |
422c0 | 64 76 61 6e 74 61 67 65 20 6f 76 65 72 20 61 20 63 6f 6e 73 6f 6c 65 20 6f 66 66 65 72 65 64 20 | dvantage.over.a.console.offered. |
422e0 | 62 79 20 61 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 6b 65 79 62 6f 61 72 64 20 | by.a.directly.attached.keyboard. |
42300 | 61 6e 64 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 | and.screen..Serial.consoles.are. |
42320 | 6d 75 63 68 20 73 6c 6f 77 65 72 2c 20 74 61 6b 69 6e 67 20 75 70 20 74 6f 20 61 20 73 65 63 6f | much.slower,.taking.up.to.a.seco |
42340 | 6e 64 20 74 6f 20 66 69 6c 6c 20 61 20 38 30 20 63 6f 6c 75 6d 6e 20 62 79 20 32 34 20 6c 69 6e | nd.to.fill.a.80.column.by.24.lin |
42360 | 65 20 73 63 72 65 65 6e 2e 20 53 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 67 65 6e 65 72 61 | e.screen..Serial.consoles.genera |
42380 | 6c 6c 79 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 6e 6f 6e 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 | lly.only.support.non-proportiona |
423a0 | 6c 20 41 53 43 49 49 20 74 65 78 74 2c 20 77 69 74 68 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f | l.ASCII.text,.with.limited.suppo |
423c0 | 72 74 20 66 6f 72 20 6c 61 6e 67 75 61 67 65 73 20 6f 74 68 65 72 20 74 68 61 6e 20 45 6e 67 6c | rt.for.languages.other.than.Engl |
423e0 | 69 73 68 2e 00 46 6f 72 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 | ish..For.the.ingress.traffic.of. |
42400 | 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 | an.interface,.there.is.only.one. |
42420 | 70 6f 6c 69 63 79 20 79 6f 75 20 63 61 6e 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 79 2c 20 61 | policy.you.can.directly.apply,.a |
42440 | 20 2a 2a 4c 69 6d 69 74 65 72 2a 2a 20 70 6f 6c 69 63 79 2e 20 59 6f 75 20 63 61 6e 6e 6f 74 20 | .**Limiter**.policy..You.cannot. |
42460 | 61 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 64 69 72 65 63 74 6c 79 20 | apply.a.shaping.policy.directly. |
42480 | 74 6f 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 79 20 69 6e | to.the.ingress.traffic.of.any.in |
424a0 | 74 65 72 66 61 63 65 20 62 65 63 61 75 73 65 20 73 68 61 70 69 6e 67 20 6f 6e 6c 79 20 77 6f 72 | terface.because.shaping.only.wor |
424c0 | 6b 73 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 46 6f 72 20 74 68 65 | ks.for.outbound.traffic..For.the |
424e0 | 20 73 61 6b 65 20 6f 66 20 64 65 6d 6f 6e 73 74 72 61 74 69 6f 6e 2c 20 60 65 78 61 6d 70 6c 65 | .sake.of.demonstration,.`example |
42500 | 20 23 31 20 69 6e 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f | .#1.in.the.official.documentatio |
42520 | 6e 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 7a 61 62 62 69 78 2e 63 6f 6d 2f 64 6f 63 75 6d 65 | n.<https://www.zabbix.com/docume |
42540 | 6e 74 61 74 69 6f 6e 2f 63 75 72 72 65 6e 74 2f 6d 61 6e 75 61 6c 2f 69 6e 73 74 61 6c 6c 61 74 | ntation/current/manual/installat |
42560 | 69 6f 6e 2f 63 6f 6e 74 61 69 6e 65 72 73 3e 60 5f 20 74 6f 20 74 68 65 20 64 65 63 6c 61 72 61 | ion/containers>`_.to.the.declara |
42580 | 74 69 76 65 20 56 79 4f 53 20 43 4c 49 20 73 79 6e 74 61 78 2e 00 46 6f 72 20 74 72 61 66 66 69 | tive.VyOS.CLI.syntax..For.traffi |
425a0 | 63 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 | c.originated.by.the.router,.base |
425c0 | 20 63 68 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 | .chain.is.**output.filter**:.``s |
425e0 | 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 6f 75 74 70 75 74 | et.firewall.[ipv4.|.ipv6].output |
42600 | 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e | .filter....``.For.traffic.that.n |
42620 | 65 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 | eeds.to.be.forwared.internally.b |
42640 | 79 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a | y.the.bridge,.base.chain.is.is.* |
42660 | 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e | *forward**,.and.it's.base.comman |
42680 | 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c | d.for.filtering.is.``set.firewal |
426a0 | 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f | l.bridge.forward.filter....``.Fo |
426c0 | 72 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 | r.traffic.that.needs.to.be.forwa |
426e0 | 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 | red.internally.by.the.bridge,.ba |
42700 | 73 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 | se.chain.is.is.**forward**,.and. |
42720 | 69 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 | it's.base.command.for.filtering. |
42740 | 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 | is.``set.firewall.bridge.forward |
42760 | 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 | .filter....``,.which.happens.in. |
42780 | 73 74 61 67 65 20 34 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 | stage.4,.highlightened.with.red. |
427a0 | 63 6f 6c 6f 72 2e 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 | color..For.traffic.towards.the.r |
427c0 | 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e | outer.itself,.base.chain.is.**in |
427e0 | 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 | put.filter**:.``set.firewall.[ip |
42800 | 76 34 20 7c 20 69 70 76 36 5d 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f | v4.|.ipv6].input.filter....``.Fo |
42820 | 72 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 | r.traffic.towards.the.router.its |
42840 | 65 6c 66 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 2a 2a 2c 20 77 68 | elf,.base.chain.is.**input**,.wh |
42860 | 69 6c 65 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f | ile.traffic.originated.by.the.ro |
42880 | 75 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 2a 2a 2e 20 | uter,.base.chain.is.**output**.. |
428a0 | 41 20 6e 65 77 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 | A.new.simplified.packet.flow.dia |
428c0 | 67 72 61 6d 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 77 68 69 63 68 20 73 68 6f 77 73 20 | gram.is.shown.next,.which.shows. |
428e0 | 74 68 65 20 70 61 74 68 20 66 6f 72 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 | the.path.for.traffic.destinated. |
42900 | 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 72 61 66 66 69 | to.the.router.itself,.and.traffi |
42920 | 63 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 28 73 74 61 72 74 | c.generated.by.the.router.(start |
42940 | 69 6e 67 20 66 72 6f 6d 20 63 69 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 3a 00 46 6f 72 20 74 | ing.from.circle.number.6):.For.t |
42960 | 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 | ransit.traffic,.which.is.receive |
42980 | 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 | d.by.the.router.and.forwarded,.b |
429a0 | 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 2a 2a 3a | ase.chain.is.**forward.filter**: |
429c0 | 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 66 6f | .``set.firewall.[ipv4.|.ipv6].fo |
429e0 | 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 | rward.filter....``.For.transit.t |
42a00 | 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 | raffic,.which.is.received.by.the |
42a20 | 20 72 6f 75 74 65 72 20 61 6e 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 | .router.and.forwarded,.base.chai |
42a40 | 6e 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 | n.is.**forward**..A.simplified.p |
42a60 | 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 | acket.flow.diagram.for.transit.t |
42a80 | 72 61 66 66 69 63 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 46 6f 72 20 77 65 62 20 61 70 | raffic.is.shown.next:.For.web.ap |
42aa0 | 70 6c 69 63 61 74 69 6f 6e 20 70 72 6f 76 69 64 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | plication.providing.information. |
42ac0 | 61 62 6f 75 74 20 74 68 65 69 72 20 73 74 61 74 65 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 | about.their.state.HTTP.health.ch |
42ae0 | 65 63 6b 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 | ecks.can.be.used.to.determine.th |
42b00 | 65 69 72 20 61 76 61 69 6c 61 62 69 6c 69 74 79 2e 00 46 6f 72 6d 61 6c 6c 79 2c 20 61 20 76 69 | eir.availability..Formally,.a.vi |
42b20 | 72 74 75 61 6c 20 6c 69 6e 6b 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 61 20 70 6f 69 6e 74 2d 74 6f | rtual.link.looks.like.a.point-to |
42b40 | 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 77 6f 20 41 42 | -point.network.connecting.two.AB |
42b60 | 52 20 66 72 6f 6d 20 6f 6e 65 20 61 72 65 61 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 70 68 79 | R.from.one.area.one.of.which.phy |
42b80 | 73 69 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 | sically.connected.to.a.backbone. |
42ba0 | 61 72 65 61 2e 20 54 68 69 73 20 70 73 65 75 64 6f 2d 6e 65 74 77 6f 72 6b 20 69 73 20 63 6f 6e | area..This.pseudo-network.is.con |
42bc0 | 73 69 64 65 72 65 64 20 74 6f 20 62 65 6c 6f 6e 67 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 | sidered.to.belong.to.a.backbone. |
42be0 | 61 72 65 61 2e 00 46 6f 72 77 61 72 64 20 69 6e 63 6f 6d 69 6e 67 20 44 4e 53 20 71 75 65 72 69 | area..Forward.incoming.DNS.queri |
42c00 | 65 73 20 74 6f 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 | es.to.the.DNS.servers.configured |
42c20 | 20 75 6e 64 65 72 20 74 68 65 20 60 60 73 79 73 74 65 6d 20 6e 61 6d 65 2d 73 65 72 76 65 72 60 | .under.the.``system.name-server` |
42c40 | 60 20 6e 6f 64 65 73 2e 00 46 6f 72 77 61 72 64 20 6d 65 74 68 6f 64 00 46 6f 72 77 61 72 64 20 | `.nodes..Forward.method.Forward. |
42c60 | 72 65 63 65 69 76 65 64 20 71 75 65 72 69 65 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 | received.queries.for.a.particula |
42c80 | 72 20 64 6f 6d 61 69 6e 20 28 73 70 65 63 69 66 69 65 64 20 76 69 61 20 60 64 6f 6d 61 69 6e 2d | r.domain.(specified.via.`domain- |
42ca0 | 6e 61 6d 65 60 29 20 74 6f 20 61 20 67 69 76 65 6e 20 6e 61 6d 65 73 65 72 76 65 72 2e 20 4d 75 | name`).to.a.given.nameserver..Mu |
42cc0 | 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 | ltiple.nameservers.can.be.specif |
42ce0 | 69 65 64 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 6f | ied..You.can.use.this.feature.fo |
42d00 | 72 20 61 20 44 4e 53 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 | r.a.DNS.split-horizon.configurat |
42d20 | 69 6f 6e 2e 00 46 6f 75 72 20 70 6f 6c 69 63 69 65 73 20 66 6f 72 20 72 65 66 6f 72 77 61 72 64 | ion..Four.policies.for.reforward |
42d40 | 69 6e 67 20 44 48 43 50 20 70 61 63 6b 65 74 73 20 65 78 69 73 74 3a 00 46 72 6f 6d 20 3a 72 66 | ing.DHCP.packets.exist:.From.:rf |
42d60 | 63 3a 60 31 39 33 30 60 3a 00 46 72 6f 6d 20 61 20 73 65 63 75 72 69 74 79 20 70 65 72 73 70 65 | c:`1930`:.From.a.security.perspe |
42d80 | 63 74 69 76 65 2c 20 69 74 20 69 73 20 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 | ctive,.it.is.not.recommended.to. |
42da0 | 6c 65 74 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 63 72 65 61 74 65 20 61 6e 64 20 73 68 61 | let.a.third.party.create.and.sha |
42dc0 | 72 65 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 66 6f 72 20 61 20 73 65 63 75 72 65 64 | re.the.private.key.for.a.secured |
42de0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 59 6f 75 20 73 68 6f 75 6c 64 20 63 72 65 61 74 65 20 74 | .connection..You.should.create.t |
42e00 | 68 65 20 70 72 69 76 61 74 65 20 70 6f 72 74 69 6f 6e 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 61 | he.private.portion.on.your.own.a |
42e20 | 6e 64 20 6f 6e 6c 79 20 68 61 6e 64 20 6f 75 74 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2e | nd.only.hand.out.the.public.key. |
42e40 | 20 50 6c 65 61 73 65 20 6b 65 65 70 20 74 68 69 73 20 69 6e 20 6d 69 6e 64 20 77 68 65 6e 20 75 | .Please.keep.this.in.mind.when.u |
42e60 | 73 69 6e 67 20 74 68 69 73 20 63 6f 6e 76 65 6e 69 65 6e 63 65 20 66 65 61 74 75 72 65 2e 00 46 | sing.this.convenience.feature..F |
42e80 | 72 6f 6d 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 64 | rom.main.structure.defined.in.:d |
42ea0 | 6f 63 3a 60 46 69 72 65 77 61 6c 6c 20 4f 76 65 72 76 69 65 77 3c 2f 63 6f 6e 66 69 67 75 72 61 | oc:`Firewall.Overview</configura |
42ec0 | 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 69 6e 64 65 78 3e 60 20 69 6e 20 74 68 69 73 20 73 65 | tion/firewall/index>`.in.this.se |
42ee0 | 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f | ction.you.can.find.detailed.info |
42f00 | 72 6d 61 74 69 6f 6e 20 6f 6e 6c 79 20 66 6f 72 20 74 68 65 20 6e 65 78 74 20 70 61 72 74 20 6f | rmation.only.for.the.next.part.o |
42f20 | 66 20 74 68 65 20 67 65 6e 65 72 61 6c 20 73 74 72 75 63 74 75 72 65 3a 00 46 77 6d 61 72 6b 00 | f.the.general.structure:.Fwmark. |
42f40 | 47 45 4e 45 56 45 00 47 45 4e 45 56 45 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 75 70 | GENEVE.GENEVE.is.designed.to.sup |
42f60 | 70 6f 72 74 20 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 65 20 | port.network.virtualization.use. |
42f80 | 63 61 73 65 73 2c 20 77 68 65 72 65 20 74 75 6e 6e 65 6c 73 20 61 72 65 20 74 79 70 69 63 61 6c | cases,.where.tunnels.are.typical |
42fa0 | 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 74 6f 20 61 63 74 20 61 73 20 61 20 62 61 63 6b 70 | ly.established.to.act.as.a.backp |
42fc0 | 6c 61 6e 65 20 62 65 74 77 65 65 6e 20 74 68 65 20 76 69 72 74 75 61 6c 20 73 77 69 74 63 68 65 | lane.between.the.virtual.switche |
42fe0 | 73 20 72 65 73 69 64 69 6e 67 20 69 6e 20 68 79 70 65 72 76 69 73 6f 72 73 2c 20 70 68 79 73 69 | s.residing.in.hypervisors,.physi |
43000 | 63 61 6c 20 73 77 69 74 63 68 65 73 2c 20 6f 72 20 6d 69 64 64 6c 65 62 6f 78 65 73 20 6f 72 20 | cal.switches,.or.middleboxes.or. |
43020 | 6f 74 68 65 72 20 61 70 70 6c 69 61 6e 63 65 73 2e 20 41 6e 20 61 72 62 69 74 72 61 72 79 20 49 | other.appliances..An.arbitrary.I |
43040 | 50 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 75 6e 64 65 | P.network.can.be.used.as.an.unde |
43060 | 72 6c 61 79 20 61 6c 74 68 6f 75 67 68 20 43 6c 6f 73 20 6e 65 74 77 6f 72 6b 73 20 2d 20 41 20 | rlay.although.Clos.networks.-.A. |
43080 | 74 65 63 68 6e 69 71 75 65 20 66 6f 72 20 63 6f 6d 70 6f 73 69 6e 67 20 6e 65 74 77 6f 72 6b 20 | technique.for.composing.network. |
430a0 | 66 61 62 72 69 63 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 61 20 73 69 6e 67 6c 65 20 73 77 69 | fabrics.larger.than.a.single.swi |
430c0 | 74 63 68 20 77 68 69 6c 65 20 6d 61 69 6e 74 61 69 6e 69 6e 67 20 6e 6f 6e 2d 62 6c 6f 63 6b 69 | tch.while.maintaining.non-blocki |
430e0 | 6e 67 20 62 61 6e 64 77 69 64 74 68 20 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 | ng.bandwidth.across.connection.p |
43100 | 6f 69 6e 74 73 2e 20 45 43 4d 50 20 69 73 20 75 73 65 64 20 74 6f 20 64 69 76 69 64 65 20 74 72 | oints..ECMP.is.used.to.divide.tr |
43120 | 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 65 20 6c 69 6e 6b 73 20 | affic.across.the.multiple.links. |
43140 | 61 6e 64 20 73 77 69 74 63 68 65 73 20 74 68 61 74 20 63 6f 6e 73 74 69 74 75 74 65 20 74 68 65 | and.switches.that.constitute.the |
43160 | 20 66 61 62 72 69 63 2e 20 53 6f 6d 65 74 69 6d 65 73 20 74 65 72 6d 65 64 20 22 6c 65 61 66 20 | .fabric..Sometimes.termed."leaf. |
43180 | 61 6e 64 20 73 70 69 6e 65 22 20 6f 72 20 22 66 61 74 20 74 72 65 65 22 20 74 6f 70 6f 6c 6f 67 | and.spine".or."fat.tree".topolog |
431a0 | 69 65 73 2e 00 47 45 4e 45 56 45 20 6f 70 74 69 6f 6e 73 00 47 52 45 20 69 73 20 61 20 77 65 6c | ies..GENEVE.options.GRE.is.a.wel |
431c0 | 6c 20 64 65 66 69 6e 65 64 20 73 74 61 6e 64 61 72 64 20 74 68 61 74 20 69 73 20 63 6f 6d 6d 6f | l.defined.standard.that.is.commo |
431e0 | 6e 20 69 6e 20 6d 6f 73 74 20 6e 65 74 77 6f 72 6b 73 2e 20 57 68 69 6c 65 20 6e 6f 74 20 69 6e | n.in.most.networks..While.not.in |
43200 | 68 65 72 65 6e 74 6c 79 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | herently.difficult.to.configure. |
43220 | 74 68 65 72 65 20 61 72 65 20 61 20 63 6f 75 70 6c 65 20 6f 66 20 74 68 69 6e 67 73 20 74 6f 20 | there.are.a.couple.of.things.to. |
43240 | 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 63 6f | keep.in.mind.to.make.sure.the.co |
43260 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 65 72 66 6f 72 6d 73 20 61 73 20 65 78 70 65 63 74 65 64 | nfiguration.performs.as.expected |
43280 | 2e 20 41 20 63 6f 6d 6d 6f 6e 20 63 61 75 73 65 20 66 6f 72 20 47 52 45 20 74 75 6e 6e 65 6c 73 | ..A.common.cause.for.GRE.tunnels |
432a0 | 20 74 6f 20 66 61 69 6c 20 74 6f 20 63 6f 6d 65 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 69 6e | .to.fail.to.come.up.correctly.in |
432c0 | 63 6c 75 64 65 20 41 43 4c 20 6f 72 20 46 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 | clude.ACL.or.Firewall.configurat |
432e0 | 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 64 69 73 63 61 72 64 69 6e 67 20 49 50 20 70 72 6f 74 | ions.that.are.discarding.IP.prot |
43300 | 6f 63 6f 6c 20 34 37 20 6f 72 20 62 6c 6f 63 6b 69 6e 67 20 79 6f 75 72 20 73 6f 75 72 63 65 2f | ocol.47.or.blocking.your.source/ |
43320 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 74 72 61 66 66 69 63 2e 00 47 52 45 20 69 73 20 61 6c 73 6f | destination.traffic..GRE.is.also |
43340 | 20 74 68 65 20 6f 6e 6c 79 20 63 6c 61 73 73 69 63 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 | .the.only.classic.protocol.that. |
43360 | 61 6c 6c 6f 77 73 20 63 72 65 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 | allows.creating.multiple.tunnels |
43380 | 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e | .with.the.same.source.and.destin |
433a0 | 61 74 69 6f 6e 20 64 75 65 20 74 6f 20 69 74 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 75 6e | ation.due.to.its.support.for.tun |
433c0 | 6e 65 6c 20 6b 65 79 73 2e 20 44 65 73 70 69 74 65 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 69 73 | nel.keys..Despite.its.name,.this |
433e0 | 20 66 65 61 74 75 72 65 20 68 61 73 20 6e 6f 74 68 69 6e 67 20 74 6f 20 64 6f 20 77 69 74 68 20 | .feature.has.nothing.to.do.with. |
43400 | 73 65 63 75 72 69 74 79 3a 20 69 74 27 73 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 | security:.it's.simply.an.identif |
43420 | 69 65 72 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 72 6f 75 74 65 72 73 20 74 6f 20 74 65 6c 6c 20 | ier.that.allows.routers.to.tell. |
43440 | 6f 6e 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 2e 00 47 52 45 20 69 73 20 | one.tunnel.from.another..GRE.is. |
43460 | 6f 66 74 65 6e 20 73 65 65 6e 20 61 73 20 61 20 6f 6e 65 20 73 69 7a 65 20 66 69 74 73 20 61 6c | often.seen.as.a.one.size.fits.al |
43480 | 6c 20 73 6f 6c 75 74 69 6f 6e 20 77 68 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 63 6c 61 73 | l.solution.when.it.comes.to.clas |
434a0 | 73 69 63 20 49 50 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 61 6e 64 20 | sic.IP.tunneling.protocols,.and. |
434c0 | 66 6f 72 20 61 20 67 6f 6f 64 20 72 65 61 73 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 | for.a.good.reason..However,.ther |
434e0 | 65 20 61 72 65 20 6d 6f 72 65 20 73 70 65 63 69 61 6c 69 7a 65 64 20 6f 70 74 69 6f 6e 73 2c 20 | e.are.more.specialized.options,. |
43500 | 61 6e 64 20 6d 61 6e 79 20 6f 66 20 74 68 65 6d 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 20 62 | and.many.of.them.are.supported.b |
43520 | 79 20 56 79 4f 53 2e 20 54 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 72 61 74 68 65 72 20 6f 62 | y.VyOS..There.are.also.rather.ob |
43540 | 73 63 75 72 65 20 47 52 45 20 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 | scure.GRE.options.that.can.be.us |
43560 | 65 66 75 6c 2e 00 47 52 45 2f 49 50 49 50 2f 53 49 54 20 61 6e 64 20 49 50 73 65 63 20 61 72 65 | eful..GRE/IPIP/SIT.and.IPsec.are |
43580 | 20 77 69 64 65 6c 79 20 61 63 63 65 70 74 65 64 20 73 74 61 6e 64 61 72 64 73 2c 20 77 68 69 63 | .widely.accepted.standards,.whic |
435a0 | 68 20 6d 61 6b 65 20 74 68 69 73 20 73 63 68 65 6d 65 20 65 61 73 79 20 74 6f 20 69 6d 70 6c 65 | h.make.this.scheme.easy.to.imple |
435c0 | 6d 65 6e 74 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 76 69 72 74 75 61 6c 6c 79 20 | ment.between.VyOS.and.virtually. |
435e0 | 61 6e 79 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 47 52 45 54 41 50 00 47 65 6e 65 61 72 61 | any.other.router..GRETAP.Geneara |
43600 | 74 65 20 61 20 6e 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 | te.a.new.OpenVPN.shared.secret.. |
43620 | 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 73 65 63 72 65 64 20 69 73 20 74 68 65 20 6f 75 74 70 | The.generated.secred.is.the.outp |
43640 | 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e | ut.to.the.console..Genearate.a.n |
43660 | 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 | ew.OpenVPN.shared.secret..The.ge |
43680 | 6e 65 72 61 74 65 64 20 73 65 63 72 65 74 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 | nerated.secret.is.the.output.to. |
436a0 | 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 72 61 6c 00 47 65 6e 65 72 61 6c 20 43 6f 6e | the.console..General.General.Con |
436c0 | 66 69 67 75 72 61 74 69 6f 6e 00 47 65 6e 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 | figuration.General.commands.for. |
436e0 | 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 63 6f 75 6e 74 65 72 20 | firewall.configuration,.counter. |
43700 | 61 6e 64 20 73 74 61 74 69 73 63 69 74 73 3a 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 | and.statiscits:.Generate.:abbr:` |
43720 | 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 | MKA.(MACsec.Key.Agreement.protoc |
43740 | 6f 6c 29 60 20 43 41 4b 20 6b 65 79 20 31 32 38 20 6f 72 20 32 35 36 20 62 69 74 73 2e 00 47 65 | ol)`.CAK.key.128.or.256.bits..Ge |
43760 | 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 | nerate.:abbr:`MKA.(MACsec.Key.Ag |
43780 | 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 2e 00 47 65 6e 65 | reement.protocol)`.CAK.key..Gene |
437a0 | 72 61 74 65 20 4b 65 79 70 61 69 72 00 47 65 6e 65 72 61 74 65 20 61 20 57 69 72 65 47 75 61 72 | rate.Keypair.Generate.a.WireGuar |
437c0 | 64 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 75 73 65 64 20 66 6f 72 20 70 65 65 | d.pre-shared.secret.used.for.pee |
437e0 | 72 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 | rs.to.communicate..Generate.a.ne |
43800 | 77 20 57 69 72 65 47 75 61 72 64 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 20 70 | w.WireGuard.public/private.key.p |
43820 | 6f 72 74 69 6f 6e 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 72 65 73 75 6c 74 20 74 6f 20 | ortion.and.output.the.result.to. |
43840 | 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 73 65 74 20 | the.console..Generate.a.new.set. |
43860 | 6f 66 20 3a 61 62 62 72 3a 60 44 48 20 28 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 29 60 20 70 | of.:abbr:`DH.(Diffie-Hellman)`.p |
43880 | 61 72 61 6d 65 74 65 72 73 2e 20 54 68 65 20 6b 65 79 20 73 69 7a 65 20 69 73 20 72 65 71 75 65 | arameters..The.key.size.is.reque |
438a0 | 73 74 65 64 20 62 79 20 74 68 65 20 43 4c 49 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 | sted.by.the.CLI.and.defaults.to. |
438c0 | 32 30 34 38 20 62 69 74 2e 00 47 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | 2048.bit..Generate.the.configura |
438e0 | 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 61 64 64 20 61 20 70 75 62 6c | tion.mode.commands.to.add.a.publ |
43900 | 69 63 20 6b 65 79 20 66 6f 72 20 3a 72 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 | ic.key.for.:ref:`ssh_key_based_a |
43920 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 2e 20 60 60 3c 6c 6f 63 61 74 69 6f 6e 3e 60 60 20 63 | uthentication`..``<location>``.c |
43940 | 61 6e 20 62 65 20 61 20 6c 6f 63 61 6c 20 70 61 74 68 20 6f 72 20 61 20 55 52 4c 20 70 6f 69 6e | an.be.a.local.path.or.a.URL.poin |
43960 | 74 69 6e 67 20 61 74 20 61 20 72 65 6d 6f 74 65 20 66 69 6c 65 2e 00 47 65 6e 65 72 61 74 65 73 | ting.at.a.remote.file..Generates |
43980 | 20 61 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 | .a.keypair,.which.includes.the.p |
439a0 | 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2c 20 61 6e 64 20 62 75 69 | ublic.and.private.parts,.and.bui |
439c0 | 6c 64 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e | ld.a.configuration.command.to.in |
439e0 | 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 2e | stall.this.key.to.``interface``. |
43a00 | 00 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 28 | .Generic.Routing.Encapsulation.( |
43a20 | 47 52 45 29 00 47 65 6e 65 76 65 20 48 65 61 64 65 72 3a 00 47 65 74 20 61 20 6c 69 73 74 20 6f | GRE).Geneve.Header:.Get.a.list.o |
43a40 | 66 20 61 6c 6c 20 77 69 72 65 67 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 00 47 65 74 20 61 | f.all.wireguard.interfaces.Get.a |
43a60 | 6e 20 6f 76 65 72 76 69 65 77 20 6f 76 65 72 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 | n.overview.over.the.encryption.c |
43a80 | 6f 75 6e 74 65 72 73 2e 00 47 65 74 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f | ounters..Get.detailed.informatio |
43aa0 | 6e 20 61 62 6f 75 74 20 4c 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 2e 00 47 65 74 20 74 68 65 20 | n.about.LLDP.neighbors..Get.the. |
43ac0 | 44 48 43 50 76 36 2d 50 44 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 62 6f 74 68 20 72 6f 75 | DHCPv6-PD.prefixes.from.both.rou |
43ae0 | 74 65 72 73 3a 00 47 65 74 74 69 6e 67 20 73 74 61 72 74 65 64 00 47 69 76 65 6e 20 74 68 65 20 | ters:.Getting.started.Given.the. |
43b00 | 66 61 63 74 20 74 68 61 74 20 6f 70 65 6e 20 44 4e 53 20 72 65 63 75 72 73 6f 72 73 20 63 6f 75 | fact.that.open.DNS.recursors.cou |
43b20 | 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 20 44 44 6f 53 20 61 6d 70 6c 69 66 69 63 61 74 69 6f 6e | ld.be.used.on.DDoS.amplification |
43b40 | 20 61 74 74 61 63 6b 73 2c 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | .attacks,.you.must.configure.the |
43b60 | 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 63 68 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 | .networks.which.are.allowed.to.u |
43b80 | 73 65 20 74 68 69 73 20 72 65 63 75 72 73 6f 72 2e 20 41 20 6e 65 74 77 6f 72 6b 20 6f 66 20 60 | se.this.recursor..A.network.of.` |
43ba0 | 60 30 2e 30 2e 30 2e 30 2f 30 60 60 20 6f 72 20 60 60 3a 3a 2f 30 60 60 20 77 6f 75 6c 64 20 61 | `0.0.0.0/0``.or.``::/0``.would.a |
43bc0 | 6c 6c 6f 77 20 61 6c 6c 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 | llow.all.IPv4.and.IPv6.networks. |
43be0 | 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 69 73 20 67 65 | to.query.this.server..This.is.ge |
43c00 | 6e 65 72 61 6c 6c 79 20 61 20 62 61 64 20 69 64 65 61 2e 00 47 69 76 65 6e 20 74 68 65 20 66 6f | nerally.a.bad.idea..Given.the.fo |
43c20 | 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 65 20 68 61 76 65 20 6f 6e 65 20 56 79 4f 53 | llowing.example.we.have.one.VyOS |
43c40 | 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 | .router.acting.as.OpenVPN.server |
43c60 | 20 61 6e 64 20 61 6e 6f 74 68 65 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 | .and.another.VyOS.router.acting. |
43c80 | 61 73 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 73 65 72 76 65 72 20 61 6c | as.OpenVPN.client..The.server.al |
43ca0 | 73 6f 20 70 75 73 68 65 73 20 61 20 73 74 61 74 69 63 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 | so.pushes.a.static.client.IP.add |
43cc0 | 72 65 73 73 20 74 6f 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 52 65 6d 65 | ress.to.the.OpenVPN.client..Reme |
43ce0 | 6d 62 65 72 2c 20 63 6c 69 65 6e 74 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 75 73 69 | mber,.clients.are.identified.usi |
43d00 | 6e 67 20 74 68 65 69 72 20 43 4e 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 74 68 65 20 53 53 4c | ng.their.CN.attribute.in.the.SSL |
43d20 | 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 47 6c 6f 61 62 61 6c 00 47 6c 6f 62 61 6c 00 47 6c 6f | .certificate..Gloabal.Global.Glo |
43d40 | 62 61 6c 20 41 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 74 69 | bal.Advanced.options.Global.Opti |
43d60 | 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 | ons.Global.Options.Firewall.Conf |
43d80 | 69 67 75 72 61 74 69 6f 6e 00 47 6c 6f 62 61 6c 20 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 | iguration.Global.options.Global. |
43da0 | 70 61 72 61 6d 65 74 65 72 73 00 47 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 73 00 47 72 61 63 65 | parameters.Global.settings.Grace |
43dc0 | 66 75 6c 20 52 65 73 74 61 72 74 00 47 72 61 70 68 51 4c 00 47 72 61 74 75 69 74 6f 75 73 20 41 | ful.Restart.GraphQL.Gratuitous.A |
43de0 | 52 50 00 47 72 6f 75 70 73 00 47 72 6f 75 70 73 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 6e | RP.Groups.Groups.need.to.have.un |
43e00 | 69 71 75 65 20 6e 61 6d 65 73 2e 20 45 76 65 6e 20 74 68 6f 75 67 68 20 73 6f 6d 65 20 63 6f 6e | ique.names..Even.though.some.con |
43e20 | 74 61 69 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6f 74 68 65 72 73 20 63 | tain.IPv4.addresses.and.others.c |
43e40 | 6f 6e 74 61 69 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 79 20 73 74 69 6c | ontain.IPv6.addresses,.they.stil |
43e60 | 6c 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2c 20 73 6f 20 | l.need.to.have.unique.names,.so. |
43e80 | 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 61 70 70 65 6e 64 20 22 2d 76 34 22 20 6f 72 20 | you.may.want.to.append."-v4".or. |
43ea0 | 22 2d 76 36 22 20 74 6f 20 79 6f 75 72 20 67 72 6f 75 70 20 6e 61 6d 65 73 2e 00 48 51 27 73 20 | "-v6".to.your.group.names..HQ's. |
43ec0 | 72 6f 75 74 65 72 20 72 65 71 75 69 72 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 | router.requires.the.following.st |
43ee0 | 65 70 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 63 72 79 70 74 6f 20 6d 61 74 65 72 69 61 6c 73 | eps.to.generate.crypto.materials |
43f00 | 20 66 6f 72 20 74 68 65 20 42 72 61 6e 63 68 20 31 3a 00 48 54 20 28 48 69 67 68 20 54 68 72 6f | .for.the.Branch.1:.HT.(High.Thro |
43f20 | 75 67 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 6e 29 00 48 | ughput).capabilities.(802.11n).H |
43f40 | 54 54 50 20 41 50 49 00 48 54 54 50 20 62 61 73 65 64 20 73 65 72 76 69 63 65 73 00 48 54 54 50 | TTP.API.HTTP.based.services.HTTP |
43f60 | 20 62 61 73 69 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 75 73 65 72 6e 61 6d 65 00 48 | .basic.authentication.username.H |
43f80 | 54 54 50 20 63 6c 69 65 6e 74 00 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 00 48 54 54 | TTP.client.HTTP.health.check.HTT |
43fa0 | 50 2d 41 50 49 00 48 61 69 72 70 69 6e 20 4e 41 54 2f 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e | P-API.Hairpin.NAT/NAT.Reflection |
43fc0 | 00 48 61 6e 64 20 6f 75 74 20 70 72 65 66 69 78 65 73 20 6f 66 20 73 69 7a 65 20 60 3c 6c 65 6e | .Hand.out.prefixes.of.size.`<len |
43fe0 | 67 74 68 3e 60 20 74 6f 20 63 6c 69 65 6e 74 73 20 69 6e 20 73 75 62 6e 65 74 20 60 3c 70 72 65 | gth>`.to.clients.in.subnet.`<pre |
44000 | 66 69 78 3e 60 20 77 68 65 6e 20 74 68 65 79 20 72 65 71 75 65 73 74 20 66 6f 72 20 70 72 65 66 | fix>`.when.they.request.for.pref |
44020 | 69 78 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 48 61 6e 64 6c 69 6e 67 20 61 6e 64 20 6d 6f 6e 69 | ix.delegation..Handling.and.moni |
44040 | 74 6f 72 69 6e 67 00 48 61 76 69 6e 67 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 74 68 65 20 6d | toring.Having.control.over.the.m |
44060 | 61 74 63 68 69 6e 67 20 6f 66 20 49 4e 56 41 4c 49 44 20 73 74 61 74 65 20 74 72 61 66 66 69 63 | atching.of.INVALID.state.traffic |
44080 | 2c 20 65 2e 67 2e 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c | ,.e.g..the.ability.to.selectivel |
440a0 | 79 20 6c 6f 67 2c 20 69 73 20 61 6e 20 69 6d 70 6f 72 74 61 6e 74 20 74 72 6f 75 62 6c 65 73 68 | y.log,.is.an.important.troublesh |
440c0 | 6f 6f 74 69 6e 67 20 74 6f 6f 6c 20 66 6f 72 20 6f 62 73 65 72 76 69 6e 67 20 62 72 6f 6b 65 6e | ooting.tool.for.observing.broken |
440e0 | 20 70 72 6f 74 6f 63 6f 6c 20 62 65 68 61 76 69 6f 72 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 | .protocol.behavior..For.this.rea |
44100 | 73 6f 6e 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 67 6c 6f 62 61 6c 6c 79 20 64 72 6f 70 | son,.VyOS.does.not.globally.drop |
44120 | 20 69 6e 76 61 6c 69 64 20 73 74 61 74 65 20 74 72 61 66 66 69 63 2c 20 69 6e 73 74 65 61 64 20 | .invalid.state.traffic,.instead. |
44140 | 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 74 6f 20 6d 61 6b 65 20 74 68 | allowing.the.operator.to.make.th |
44160 | 65 20 64 65 74 65 72 6d 69 6e 61 74 69 6f 6e 20 6f 6e 20 68 6f 77 20 74 68 65 20 74 72 61 66 66 | e.determination.on.how.the.traff |
44180 | 69 63 20 69 73 20 68 61 6e 64 6c 65 64 2e 00 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 | ic.is.handled..Health.check.scri |
441a0 | 70 74 73 00 48 65 61 6c 74 68 20 63 68 65 63 6b 73 00 48 65 61 6c 74 68 2d 63 68 65 63 6b 00 48 | pts.Health.checks.Health-check.H |
441c0 | 65 72 65 20 61 72 65 20 73 6f 6d 65 20 65 78 61 6d 70 6c 65 73 20 66 6f 72 20 61 70 70 6c 79 69 | ere.are.some.examples.for.applyi |
441e0 | 6e 67 20 61 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 48 65 | ng.a.rule-set.to.an.interface.He |
44200 | 72 65 20 69 73 20 61 20 73 65 63 6f 6e 64 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 64 75 61 6c | re.is.a.second.example.of.a.dual |
44220 | 2d 73 74 61 63 6b 20 74 75 6e 6e 65 6c 20 6f 76 65 72 20 49 50 76 36 20 62 65 74 77 65 65 6e 20 | -stack.tunnel.over.IPv6.between. |
44240 | 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 6e 64 20 61 20 4c 69 6e 75 78 20 68 6f 73 74 20 75 | a.VyOS.router.and.a.Linux.host.u |
44260 | 73 69 6e 67 20 73 79 73 74 65 6d 64 2d 6e 65 74 77 6f 72 6b 64 2e 00 48 65 72 65 20 69 73 20 61 | sing.systemd-networkd..Here.is.a |
44280 | 6e 20 65 78 61 6d 70 6c 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e | n.example.:abbr:`NET.(Network.En |
442a0 | 74 69 74 79 20 54 69 74 6c 65 29 60 20 76 61 6c 75 65 3a 00 48 65 72 65 20 69 73 20 61 6e 20 65 | tity.Title)`.value:.Here.is.an.e |
442c0 | 78 61 6d 70 6c 65 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 72 6f 75 | xample.route-map.to.apply.to.rou |
442e0 | 74 65 73 20 6c 65 61 72 6e 65 64 20 61 74 20 69 6d 70 6f 72 74 2e 20 49 6e 20 74 68 69 73 20 66 | tes.learned.at.import..In.this.f |
44300 | 69 6c 74 65 72 20 77 65 20 72 65 6a 65 63 74 20 70 72 65 66 69 78 65 73 20 77 69 74 68 20 74 68 | ilter.we.reject.prefixes.with.th |
44320 | 65 20 73 74 61 74 65 20 60 69 6e 76 61 6c 69 64 60 2c 20 61 6e 64 20 73 65 74 20 61 20 68 69 67 | e.state.`invalid`,.and.set.a.hig |
44340 | 68 65 72 20 60 6c 6f 63 61 6c 2d 70 72 65 66 65 72 65 6e 63 65 60 20 69 66 20 74 68 65 20 70 72 | her.`local-preference`.if.the.pr |
44360 | 65 66 69 78 20 69 73 20 52 50 4b 49 20 60 76 61 6c 69 64 60 20 72 61 74 68 65 72 20 74 68 61 6e | efix.is.RPKI.`valid`.rather.than |
44380 | 20 6d 65 72 65 6c 79 20 60 6e 6f 74 66 6f 75 6e 64 60 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 | .merely.`notfound`..Here.is.an.e |
443a0 | 78 61 6d 70 6c 65 20 77 65 72 65 20 6d 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 20 61 72 65 20 | xample.were.multiple.groups.are. |
443c0 | 63 72 65 61 74 65 64 3a 00 48 65 72 65 20 69 73 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 | created:.Here.is.the.routing.tab |
443e0 | 6c 65 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 | les.showing.the.MPLS.segment.rou |
44400 | 74 69 6e 67 20 6c 61 62 65 6c 20 6f 70 65 72 61 74 69 6f 6e 73 3a 00 48 65 72 65 20 77 65 20 70 | ting.label.operations:.Here.we.p |
44420 | 72 6f 76 69 64 65 20 74 77 6f 20 65 78 61 6d 70 6c 65 73 20 6f 6e 20 68 6f 77 20 74 6f 20 61 70 | rovide.two.examples.on.how.to.ap |
44440 | 70 6c 79 20 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 2e 00 48 65 72 65 27 73 20 61 6e 20 | ply.NAT.Load.Balance..Here's.an. |
44460 | 65 78 74 72 61 63 74 20 6f 66 20 61 20 73 69 6d 70 6c 65 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 | extract.of.a.simple.1-to-1.NAT.c |
44480 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 74 68 20 6f 6e 65 20 69 6e 74 65 72 6e 61 6c 20 61 | onfiguration.with.one.internal.a |
444a0 | 6e 64 20 6f 6e 65 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 3a 00 48 65 72 65 27 | nd.one.external.interface:.Here' |
444c0 | 73 20 6f 6e 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 | s.one.example.of.a.network.envir |
444e0 | 6f 6e 6d 65 6e 74 20 66 6f 72 20 61 6e 20 41 53 50 2e 20 54 68 65 20 41 53 50 20 72 65 71 75 65 | onment.for.an.ASP..The.ASP.reque |
44500 | 73 74 73 20 74 68 61 74 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 | sts.that.all.connections.from.th |
44520 | 69 73 20 63 6f 6d 70 61 6e 79 20 73 68 6f 75 6c 64 20 63 6f 6d 65 20 66 72 6f 6d 20 31 37 32 2e | is.company.should.come.from.172. |
44540 | 32 39 2e 34 31 2e 38 39 20 2d 20 61 6e 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 61 73 | 29.41.89.-.an.address.that.is.as |
44560 | 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 41 53 50 20 61 6e 64 20 6e 6f 74 20 69 6e 20 75 73 65 | signed.by.the.ASP.and.not.in.use |
44580 | 20 61 74 20 74 68 65 20 63 75 73 74 6f 6d 65 72 20 73 69 74 65 2e 00 48 65 72 65 27 73 20 74 68 | .at.the.customer.site..Here's.th |
445a0 | 65 20 49 50 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 70 6f 70 75 6c 61 74 65 64 2e 20 | e.IP.routes.that.are.populated.. |
445c0 | 4a 75 73 74 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 3a 00 48 65 72 65 27 73 20 74 68 65 20 6e 65 | Just.the.loopback:.Here's.the.ne |
445e0 | 69 67 68 62 6f 72 73 20 75 70 3a 00 48 65 72 65 27 73 20 74 68 65 20 72 6f 75 74 65 73 3a 00 48 | ighbors.up:.Here's.the.routes:.H |
44600 | 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 64 20 63 61 6c 6c 20 69 74 20 53 6f 75 72 63 65 2d 50 6f | ewlett-Packard.call.it.Source-Po |
44620 | 72 74 20 66 69 6c 74 65 72 69 6e 67 20 6f 72 20 70 6f 72 74 2d 69 73 6f 6c 61 74 69 6f 6e 00 48 | rt.filtering.or.port-isolation.H |
44640 | 69 67 68 00 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 00 48 69 67 68 20 61 76 61 69 6c | igh.High.Availability.High.avail |
44660 | 61 62 69 6c 69 74 79 00 48 6f 6d 65 20 55 73 65 72 73 00 48 6f 70 20 63 6f 75 6e 74 20 66 69 65 | ability.Home.Users.Hop.count.fie |
44680 | 6c 64 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 52 41 20 70 61 63 6b 65 74 73 00 48 6f | ld.of.the.outgoing.RA.packets.Ho |
446a0 | 73 74 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 48 6f 73 74 20 6e 61 6d 65 00 48 6f 73 74 20 73 70 | st.Information.Host.name.Host.sp |
446c0 | 65 63 69 66 69 63 20 6d 61 70 70 69 6e 67 20 73 68 61 6c 6c 20 62 65 20 6e 61 6d 65 64 20 60 60 | ecific.mapping.shall.be.named.`` |
446e0 | 63 6c 69 65 6e 74 31 60 60 00 48 6f 73 74 6e 61 6d 65 00 48 6f 77 20 61 6e 20 49 50 20 61 64 64 | client1``.Hostname.How.an.IP.add |
44700 | 72 65 73 73 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | ress.is.assigned.to.an.interface |
44720 | 20 69 6e 20 3a 72 65 66 3a 60 65 74 68 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2e 20 54 | .in.:ref:`ethernet-interface`..T |
44740 | 68 69 73 20 73 65 63 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 73 74 61 74 69 63 61 | his.section.shows.how.to.statica |
44760 | 6c 6c 79 20 6d 61 70 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 68 6f 73 74 6e | lly.map.an.IP.address.to.a.hostn |
44780 | 61 6d 65 20 66 6f 72 20 6c 6f 63 61 6c 20 28 6d 65 61 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 56 | ame.for.local.(meaning.on.this.V |
447a0 | 79 4f 53 20 69 6e 73 74 61 6e 63 65 29 20 6e 61 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 54 | yOS.instance).name.resolution..T |
447c0 | 68 69 73 20 69 73 20 74 68 65 20 56 79 4f 53 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 20 60 2f | his.is.the.VyOS.equivalent.to.`/ |
447e0 | 65 74 63 2f 68 6f 73 74 73 60 20 66 69 6c 65 20 65 6e 74 72 69 65 73 2e 00 48 6f 77 20 74 6f 20 | etc/hosts`.file.entries..How.to. |
44800 | 63 6f 6e 66 69 67 75 72 65 20 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 00 48 6f 77 20 74 6f 20 6d | configure.Event.Handler.How.to.m |
44820 | 61 6b 65 20 69 74 20 77 6f 72 6b 00 48 6f 77 65 76 65 72 2c 20 6e 6f 77 20 79 6f 75 20 6e 65 65 | ake.it.work.However,.now.you.nee |
44840 | 64 20 74 6f 20 6d 61 6b 65 20 49 50 73 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 | d.to.make.IPsec.work.with.dynami |
44860 | 63 20 61 64 64 72 65 73 73 20 6f 6e 20 6f 6e 65 20 73 69 64 65 2e 20 54 68 65 20 74 72 69 63 6b | c.address.on.one.side..The.trick |
44880 | 79 20 70 61 72 74 20 69 73 20 74 68 61 74 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 | y.part.is.that.pre-shared.secret |
448a0 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 69 74 | .authentication.doesn't.work.wit |
448c0 | 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 2c 20 73 6f 20 77 65 27 6c 6c 20 68 61 76 65 | h.dynamic.address,.so.we'll.have |
448e0 | 20 74 6f 20 75 73 65 20 52 53 41 20 6b 65 79 73 2e 00 48 6f 77 65 76 65 72 2c 20 73 69 6e 63 65 | .to.use.RSA.keys..However,.since |
44900 | 20 56 79 4f 53 20 31 2e 34 2c 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 76 65 72 | .VyOS.1.4,.it.is.possible.to.ver |
44920 | 69 66 79 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 | ify.self-signed.certificates.usi |
44940 | 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 48 6f 77 | ng.certificate.fingerprints..How |
44960 | 65 76 65 72 2c 20 73 70 6c 69 74 2d 74 75 6e 6e 65 6c 69 6e 67 20 63 61 6e 20 62 65 20 61 63 68 | ever,.split-tunneling.can.be.ach |
44980 | 69 65 76 65 64 20 62 79 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 | ieved.by.specifying.the.remote.s |
449a0 | 75 62 6e 65 74 73 2e 20 54 68 69 73 20 65 6e 73 75 72 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 74 | ubnets..This.ensures.that.only.t |
449c0 | 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 73 | raffic.destined.for.the.remote.s |
449e0 | 69 74 65 20 69 73 20 73 65 6e 74 20 6f 76 65 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 41 6c 6c | ite.is.sent.over.the.tunnel..All |
44a00 | 20 6f 74 68 65 72 20 74 72 61 66 66 69 63 20 69 73 20 75 6e 61 66 66 65 63 74 65 64 2e 00 48 75 | .other.traffic.is.unaffected..Hu |
44a20 | 61 77 65 69 20 4d 45 39 30 39 73 2d 31 32 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c | awei.ME909s-120.miniPCIe.card.(L |
44a40 | 54 45 29 00 48 75 61 77 65 69 20 4d 45 39 30 39 75 2d 35 32 31 20 6d 69 6e 69 50 43 49 65 20 63 | TE).Huawei.ME909u-521.miniPCIe.c |
44a60 | 61 72 64 20 28 4c 54 45 29 00 48 75 62 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 | ard.(LTE).Hub.IEEE.802.1X/MACsec |
44a80 | 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 | .pre-shared.key.mode..This.allow |
44aa0 | 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 4d 41 43 73 65 63 20 77 69 74 68 20 61 20 70 72 65 2d | s.configuring.MACsec.with.a.pre- |
44ac0 | 73 68 61 72 65 64 20 6b 65 79 20 75 73 69 6e 67 20 61 20 3a 61 62 62 72 3a 60 43 41 4b 20 28 4d | shared.key.using.a.:abbr:`CAK.(M |
44ae0 | 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6b | ACsec.connectivity.association.k |
44b00 | 65 79 29 60 20 61 6e 64 20 3a 61 62 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e | ey)`.and.:abbr:`CKN.(MACsec.conn |
44b20 | 65 63 74 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 20 70 61 69 72 | ectivity.association.name)`.pair |
44b40 | 2e 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 | ..IEEE.802.1X/MACsec.replay.prot |
44b60 | 65 63 74 69 6f 6e 20 77 69 6e 64 6f 77 2e 20 54 68 69 73 20 64 65 74 65 72 6d 69 6e 65 73 20 61 | ection.window..This.determines.a |
44b80 | 20 77 69 6e 64 6f 77 20 69 6e 20 77 68 69 63 68 20 72 65 70 6c 61 79 20 69 73 20 74 6f 6c 65 72 | .window.in.which.replay.is.toler |
44ba0 | 61 74 65 64 2c 20 74 6f 20 61 6c 6c 6f 77 20 72 65 63 65 69 70 74 20 6f 66 20 66 72 61 6d 65 73 | ated,.to.allow.receipt.of.frames |
44bc0 | 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 6d 69 73 6f 72 64 65 72 65 64 20 62 79 20 74 68 | .that.have.been.misordered.by.th |
44be0 | 65 20 6e 65 74 77 6f 72 6b 2e 00 49 45 45 45 20 38 30 32 2e 31 61 64 5f 20 77 61 73 20 61 6e 20 | e.network..IEEE.802.1ad_.was.an. |
44c00 | 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 69 6e 66 | Ethernet.networking.standard.inf |
44c20 | 6f 72 6d 61 6c 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 51 69 6e 51 20 61 73 20 61 6e 20 61 6d 65 6e | ormally.known.as.QinQ.as.an.amen |
44c40 | 64 6d 65 6e 74 20 74 6f 20 49 45 45 45 20 73 74 61 6e 64 61 72 64 20 38 30 32 2e 31 71 20 56 4c | dment.to.IEEE.standard.802.1q.VL |
44c60 | 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 | AN.interfaces.as.described.above |
44c80 | 2e 20 38 30 32 2e 31 61 64 20 77 61 73 20 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 | ..802.1ad.was.incorporated.into. |
44ca0 | 74 68 65 20 62 61 73 65 20 38 30 32 2e 31 71 5f 20 73 74 61 6e 64 61 72 64 20 69 6e 20 32 30 31 | the.base.802.1q_.standard.in.201 |
44cc0 | 31 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 | 1..The.technique.is.also.known.a |
44ce0 | 73 20 70 72 6f 76 69 64 65 72 20 62 72 69 64 67 69 6e 67 2c 20 53 74 61 63 6b 65 64 20 56 4c 41 | s.provider.bridging,.Stacked.VLA |
44d00 | 4e 73 2c 20 6f 72 20 73 69 6d 70 6c 79 20 51 69 6e 51 20 6f 72 20 51 2d 69 6e 2d 51 2e 20 22 51 | Ns,.or.simply.QinQ.or.Q-in-Q.."Q |
44d20 | 2d 69 6e 2d 51 22 20 63 61 6e 20 66 6f 72 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 73 | -in-Q".can.for.supported.devices |
44d40 | 20 61 70 70 6c 79 20 74 6f 20 43 2d 74 61 67 20 73 74 61 63 6b 69 6e 67 20 6f 6e 20 43 2d 74 61 | .apply.to.C-tag.stacking.on.C-ta |
44d60 | 67 20 28 45 74 68 65 72 6e 65 74 20 54 79 70 65 20 3d 20 30 78 38 31 30 30 29 2e 00 49 45 45 45 | g.(Ethernet.Type.=.0x8100)..IEEE |
44d80 | 20 38 30 32 2e 31 71 5f 2c 20 6f 66 74 65 6e 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 44 | .802.1q_,.often.referred.to.as.D |
44da0 | 6f 74 31 71 2c 20 69 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 | ot1q,.is.the.networking.standard |
44dc0 | 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 76 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 | .that.supports.virtual.LANs.(VLA |
44de0 | 4e 73 29 20 6f 6e 20 61 6e 20 49 45 45 45 20 38 30 32 2e 33 20 45 74 68 65 72 6e 65 74 20 6e 65 | Ns).on.an.IEEE.802.3.Ethernet.ne |
44e00 | 74 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 64 65 66 69 6e 65 73 20 61 20 73 79 | twork..The.standard.defines.a.sy |
44e20 | 73 74 65 6d 20 6f 66 20 56 4c 41 4e 20 74 61 67 67 69 6e 67 20 66 6f 72 20 45 74 68 65 72 6e 65 | stem.of.VLAN.tagging.for.Etherne |
44e40 | 74 20 66 72 61 6d 65 73 20 61 6e 64 20 74 68 65 20 61 63 63 6f 6d 70 61 6e 79 69 6e 67 20 70 72 | t.frames.and.the.accompanying.pr |
44e60 | 6f 63 65 64 75 72 65 73 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 62 72 69 64 67 65 73 20 61 | ocedures.to.be.used.by.bridges.a |
44e80 | 6e 64 20 73 77 69 74 63 68 65 73 20 69 6e 20 68 61 6e 64 6c 69 6e 67 20 73 75 63 68 20 66 72 61 | nd.switches.in.handling.such.fra |
44ea0 | 6d 65 73 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 61 6c 73 6f 20 63 6f 6e 74 61 69 6e 73 20 | mes..The.standard.also.contains. |
44ec0 | 70 72 6f 76 69 73 69 6f 6e 73 20 66 6f 72 20 61 20 71 75 61 6c 69 74 79 2d 6f 66 2d 73 65 72 76 | provisions.for.a.quality-of-serv |
44ee0 | 69 63 65 20 70 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 63 6f 6d 6d 6f 6e | ice.prioritization.scheme.common |
44f00 | 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 49 45 45 45 20 38 30 32 2e 31 70 20 61 6e 64 20 64 65 66 69 | ly.known.as.IEEE.802.1p.and.defi |
44f20 | 6e 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 41 74 74 72 69 62 75 74 65 20 52 65 67 69 73 74 | nes.the.Generic.Attribute.Regist |
44f40 | 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 2e 00 49 45 54 46 20 70 75 62 6c 69 73 68 65 64 20 | ration.Protocol..IETF.published. |
44f60 | 3a 72 66 63 3a 60 36 35 39 38 60 2c 20 64 65 74 61 69 6c 69 6e 67 20 61 20 73 68 61 72 65 64 20 | :rfc:`6598`,.detailing.a.shared. |
44f80 | 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 75 73 65 20 69 6e 20 49 53 50 20 43 47 4e | address.space.for.use.in.ISP.CGN |
44fa0 | 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 74 68 61 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 74 68 65 | .deployments.that.can.handle.the |
44fc0 | 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 65 73 20 6f 63 63 75 72 72 69 6e 67 | .same.network.prefixes.occurring |
44fe0 | 20 62 6f 74 68 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 69 6e | .both.on.inbound.and.outbound.in |
45000 | 74 65 72 66 61 63 65 73 2e 20 41 52 49 4e 20 72 65 74 75 72 6e 65 64 20 61 64 64 72 65 73 73 20 | terfaces..ARIN.returned.address. |
45020 | 73 70 61 63 65 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e | space.to.the.:abbr:`IANA.(Intern |
45040 | 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 | et.Assigned.Numbers.Authority)`. |
45060 | 66 6f 72 20 74 68 69 73 20 61 6c 6c 6f 63 61 74 69 6f 6e 2e 00 49 47 4d 50 20 2d 20 49 6e 74 65 | for.this.allocation..IGMP.-.Inte |
45080 | 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 00 | rnet.Group.Management.Protocol). |
450a0 | 49 47 4d 50 20 50 72 6f 78 79 00 49 4b 45 20 28 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 | IGMP.Proxy.IKE.(Internet.Key.Exc |
450c0 | 68 61 6e 67 65 29 20 41 74 74 72 69 62 75 74 65 73 00 49 4b 45 20 50 68 61 73 65 3a 00 49 4b 45 | hange).Attributes.IKE.Phase:.IKE |
450e0 | 20 70 65 72 66 6f 72 6d 73 20 6d 75 74 75 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | .performs.mutual.authentication. |
45100 | 62 65 74 77 65 65 6e 20 74 77 6f 20 70 61 72 74 69 65 73 20 61 6e 64 20 65 73 74 61 62 6c 69 73 | between.two.parties.and.establis |
45120 | 68 65 73 20 61 6e 20 49 4b 45 20 73 65 63 75 72 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 | hes.an.IKE.security.association. |
45140 | 28 53 41 29 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 73 68 61 72 65 64 20 73 65 63 72 65 74 | (SA).that.includes.shared.secret |
45160 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f | .information.that.can.be.used.to |
45180 | 20 65 66 66 69 63 69 65 6e 74 6c 79 20 65 73 74 61 62 6c 69 73 68 20 53 41 73 20 66 6f 72 20 45 | .efficiently.establish.SAs.for.E |
451a0 | 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 20 28 45 | ncapsulating.Security.Payload.(E |
451c0 | 53 50 29 20 6f 72 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 48 65 61 64 65 72 20 28 41 48 | SP).or.Authentication.Header.(AH |
451e0 | 29 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 61 6c 67 | ).and.a.set.of.cryptographic.alg |
45200 | 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 53 41 73 20 74 6f | orithms.to.be.used.by.the.SAs.to |
45220 | 20 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 65 79 20 63 | .protect.the.traffic.that.they.c |
45240 | 61 72 72 79 2e 20 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f | arry..https://datatracker.ietf.o |
45260 | 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 66 63 35 39 39 36 00 49 4b 45 76 31 00 49 4b 45 76 32 00 | rg/doc/html/rfc5996.IKEv1.IKEv2. |
45280 | 49 4b 45 76 32 20 49 50 53 65 63 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 73 20 72 65 6d 6f 74 65 | IKEv2.IPSec.road-warriors.remote |
452a0 | 2d 61 63 63 65 73 73 20 56 50 4e 00 49 50 00 49 50 20 61 64 64 72 65 73 73 00 49 50 20 61 64 64 | -access.VPN.IP.IP.address.IP.add |
452c0 | 72 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 31 30 30 60 60 20 73 68 61 6c 6c 20 62 65 20 | ress.``192.168.1.100``.shall.be. |
452e0 | 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 20 74 6f 20 63 6c 69 65 6e 74 20 6e 61 6d 65 | statically.mapped.to.client.name |
45300 | 64 20 60 60 63 6c 69 65 6e 74 31 60 60 00 49 50 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 | d.``client1``.IP.address.``192.1 |
45320 | 36 38 2e 32 2e 31 2f 32 34 60 60 00 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 20 | 68.2.1/24``.IP.address.for.DHCP. |
45340 | 73 65 72 76 65 72 20 69 64 65 6e 74 69 66 69 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | server.identifier.IP.address.of. |
45360 | 4e 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 50 4f 50 33 20 73 65 | NTP.server.IP.address.of.POP3.se |
45380 | 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 53 4d 54 50 20 73 65 72 76 65 72 00 49 | rver.IP.address.of.SMTP.server.I |
453a0 | 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 | P.address.of.route.to.match,.bas |
453c0 | 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 | ed.on.access-list..IP.address.of |
453e0 | 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 | .route.to.match,.based.on.prefix |
45400 | 2d 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 | -list..IP.address.of.route.to.ma |
45420 | 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c | tch,.based.on.specified.prefix-l |
45440 | 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 | ength..Note.that.this.can.be.use |
45460 | 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 | d.for.kernel.routes.only..Do.not |
45480 | 20 61 70 70 6c 79 20 74 6f 20 74 68 65 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 | .apply.to.the.routes.of.dynamic. |
454a0 | 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 | routing.protocols.(e.g..BGP,.RIP |
454c0 | 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 | ,.OSFP),.as.this.can.lead.to.une |
454e0 | 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 73 2e 2e 00 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 | xpected.results...IP.address.to. |
45500 | 65 78 63 6c 75 64 65 20 66 72 6f 6d 20 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 49 50 | exclude.from.DHCP.lease.range.IP |
45520 | 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 66 6f 72 20 77 68 69 63 68 | .addresses.or.networks.for.which |
45540 | 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 6e 6f | .local.conntrack.entries.will.no |
45560 | 74 20 62 65 20 73 79 6e 63 65 64 00 49 50 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 | t.be.synced.IP.management.addres |
45580 | 73 00 49 50 20 6d 61 73 71 75 65 72 61 64 69 6e 67 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 | s.IP.masquerading.is.a.technique |
455a0 | 20 74 68 61 74 20 68 69 64 65 73 20 61 6e 20 65 6e 74 69 72 65 20 49 50 20 61 64 64 72 65 73 73 | .that.hides.an.entire.IP.address |
455c0 | 20 73 70 61 63 65 2c 20 75 73 75 61 6c 6c 79 20 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 70 72 | .space,.usually.consisting.of.pr |
455e0 | 69 76 61 74 65 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 62 65 68 69 6e 64 20 61 20 73 69 6e | ivate.IP.addresses,.behind.a.sin |
45600 | 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 20 61 6e 6f 74 68 65 72 2c 20 75 73 75 61 6c | gle.IP.address.in.another,.usual |
45620 | 6c 79 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 20 54 68 65 20 68 69 64 | ly.public.address.space..The.hid |
45640 | 64 65 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 63 68 61 6e 67 65 64 20 69 6e 74 6f 20 61 | den.addresses.are.changed.into.a |
45660 | 20 73 69 6e 67 6c 65 20 28 70 75 62 6c 69 63 29 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 | .single.(public).IP.address.as.t |
45680 | 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e | he.source.address.of.the.outgoin |
456a0 | 67 20 49 50 20 70 61 63 6b 65 74 73 20 73 6f 20 74 68 65 79 20 61 70 70 65 61 72 20 61 73 20 6f | g.IP.packets.so.they.appear.as.o |
456c0 | 72 69 67 69 6e 61 74 69 6e 67 20 6e 6f 74 20 66 72 6f 6d 20 74 68 65 20 68 69 64 64 65 6e 20 68 | riginating.not.from.the.hidden.h |
456e0 | 6f 73 74 20 62 75 74 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 | ost.but.from.the.routing.device. |
45700 | 69 74 73 65 6c 66 2e 20 42 65 63 61 75 73 65 20 6f 66 20 74 68 65 20 70 6f 70 75 6c 61 72 69 74 | itself..Because.of.the.popularit |
45720 | 79 20 6f 66 20 74 68 69 73 20 74 65 63 68 6e 69 71 75 65 20 74 6f 20 63 6f 6e 73 65 72 76 65 20 | y.of.this.technique.to.conserve. |
45740 | 49 50 76 34 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2c 20 74 68 65 20 74 65 72 6d 20 4e 41 54 | IPv4.address.space,.the.term.NAT |
45760 | 20 68 61 73 20 62 65 63 6f 6d 65 20 76 69 72 74 75 61 6c 6c 79 20 73 79 6e 6f 6e 79 6d 6f 75 73 | .has.become.virtually.synonymous |
45780 | 20 77 69 74 68 20 49 50 20 6d 61 73 71 75 65 72 61 64 69 6e 67 2e 00 49 50 20 6e 65 78 74 2d 68 | .with.IP.masquerading..IP.next-h |
457a0 | 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 | op.of.route.to.match,.based.on.a |
457c0 | 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 | ccess-list..IP.next-hop.of.route |
457e0 | 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 69 70 20 61 64 64 72 65 73 73 2e 00 | .to.match,.based.on.ip.address.. |
45800 | 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 | IP.next-hop.of.route.to.match,.b |
45820 | 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 2e 00 49 50 20 6e 65 78 74 2d 68 | ased.on.prefix.length..IP.next-h |
45840 | 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 | op.of.route.to.match,.based.on.p |
45860 | 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 | refix-list..IP.next-hop.of.route |
45880 | 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 74 79 70 65 2e 00 49 50 20 70 72 65 | .to.match,.based.on.type..IP.pre |
458a0 | 63 65 64 65 6e 63 65 20 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 37 39 31 60 | cedence.as.defined.in.:rfc:`791` |
458c0 | 3a 00 49 50 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 35 30 20 28 45 53 50 29 00 49 50 | :.IP.protocol.number.50.(ESP).IP |
458e0 | 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c | .route.source.of.route.to.match, |
45900 | 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 72 6f 75 74 65 20 | .based.on.access-list..IP.route. |
45920 | 73 6f 75 72 63 65 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 | source.of.route.to.match,.based. |
45940 | 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 36 49 50 36 00 49 50 49 50 00 49 50 49 50 | on.prefix-list..IP6IP6.IPIP.IPIP |
45960 | 36 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 45 53 50 00 49 50 53 65 63 20 49 4b 45 20 61 6e | 6.IPSec.IKE.and.ESP.IPSec.IKE.an |
45980 | 64 20 45 53 50 20 47 72 6f 75 70 73 3b 00 49 50 53 65 63 20 49 4b 45 76 32 20 52 65 6d 6f 74 65 | d.ESP.Groups;.IPSec.IKEv2.Remote |
459a0 | 20 41 63 63 65 73 73 20 56 50 4e 00 49 50 53 65 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 | .Access.VPN.IPSec.IKEv2.site2sit |
459c0 | 65 20 56 50 4e 00 49 50 53 65 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 20 | e.VPN.IPSec.IKEv2.site2site.VPN. |
459e0 | 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 6f 2f 76 70 6e 5f 73 32 73 5f 69 6b 65 76 32 2e | (source../draw.io/vpn_s2s_ikev2. |
45a00 | 64 72 61 77 69 6f 29 00 49 50 53 65 63 20 56 50 4e 20 54 75 6e 6e 65 6c 73 00 49 50 53 65 63 20 | drawio).IPSec.VPN.Tunnels.IPSec. |
45a20 | 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 00 49 50 53 65 63 3a 00 49 50 6f 45 20 53 65 72 76 65 72 00 | VPN.tunnels..IPSec:.IPoE.Server. |
45a40 | 49 50 6f 45 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 20 6f 6e 20 64 69 66 66 65 72 65 | IPoE.can.be.configure.on.differe |
45a60 | 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e | nt.interfaces,.it.will.depend.on |
45a80 | 20 65 61 63 68 20 73 70 65 63 69 66 69 63 20 73 69 74 75 61 74 69 6f 6e 20 77 68 69 63 68 20 69 | .each.specific.situation.which.i |
45aa0 | 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 49 50 6f 45 20 74 6f 20 63 6c | nterface.will.provide.IPoE.to.cl |
45ac0 | 69 65 6e 74 73 2e 20 54 68 65 20 63 6c 69 65 6e 74 73 20 6d 61 63 20 61 64 64 72 65 73 73 20 61 | ients..The.clients.mac.address.a |
45ae0 | 6e 64 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 62 65 69 | nd.the.incoming.interface.is.bei |
45b00 | 6e 67 20 75 73 65 64 20 61 73 20 63 6f 6e 74 72 6f 6c 20 70 61 72 61 6d 65 74 65 72 2c 20 74 6f | ng.used.as.control.parameter,.to |
45b20 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 20 63 6c 69 65 6e 74 2e 00 49 50 6f 45 20 69 73 20 | .authenticate.a.client..IPoE.is. |
45b40 | 61 20 6d 65 74 68 6f 64 20 6f 66 20 64 65 6c 69 76 65 72 69 6e 67 20 61 6e 20 49 50 20 70 61 79 | a.method.of.delivering.an.IP.pay |
45b60 | 6c 6f 61 64 20 6f 76 65 72 20 61 6e 20 45 74 68 65 72 6e 65 74 2d 62 61 73 65 64 20 61 63 63 65 | load.over.an.Ethernet-based.acce |
45b80 | 73 73 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 6e 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 | ss.network.or.an.access.network. |
45ba0 | 75 73 69 6e 67 20 62 72 69 64 67 65 64 20 45 74 68 65 72 6e 65 74 20 6f 76 65 72 20 41 73 79 6e | using.bridged.Ethernet.over.Asyn |
45bc0 | 63 68 72 6f 6e 6f 75 73 20 54 72 61 6e 73 66 65 72 20 4d 6f 64 65 20 28 41 54 4d 29 20 77 69 74 | chronous.Transfer.Mode.(ATM).wit |
45be0 | 68 6f 75 74 20 75 73 69 6e 67 20 50 50 50 6f 45 2e 20 49 74 20 64 69 72 65 63 74 6c 79 20 65 6e | hout.using.PPPoE..It.directly.en |
45c00 | 63 61 70 73 75 6c 61 74 65 73 20 74 68 65 20 49 50 20 64 61 74 61 67 72 61 6d 73 20 69 6e 20 45 | capsulates.the.IP.datagrams.in.E |
45c20 | 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 75 73 69 6e 67 20 74 68 65 20 73 74 61 6e 64 61 | thernet.frames,.using.the.standa |
45c40 | 72 64 20 3a 72 66 63 3a 60 38 39 34 60 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2e 00 49 50 6f | rd.:rfc:`894`.encapsulation..IPo |
45c60 | 45 20 73 65 72 76 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 | E.server.will.listen.on.interfac |
45c80 | 65 73 20 65 74 68 31 2e 35 30 20 61 6e 64 20 65 74 68 31 2e 35 31 00 49 50 73 65 63 00 49 50 73 | es.eth1.50.and.eth1.51.IPsec.IPs |
45ca0 | 65 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 69 6e 67 20 47 52 45 00 49 50 76 34 00 49 50 76 34 | ec.policy.matching.GRE.IPv4.IPv4 |
45cc0 | 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 34 20 61 64 64 | .Firewall.Configuration.IPv4.add |
45ce0 | 72 65 73 73 20 6f 66 20 6e 65 78 74 20 62 6f 6f 74 73 74 72 61 70 20 73 65 72 76 65 72 00 49 50 | ress.of.next.bootstrap.server.IP |
45d00 | 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 65 20 63 6c 69 65 | v4.address.of.router.on.the.clie |
45d20 | 6e 74 27 73 20 73 75 62 6e 65 74 00 49 50 76 34 20 6f 72 20 49 50 76 36 20 73 6f 75 72 63 65 20 | nt's.subnet.IPv4.or.IPv6.source. |
45d40 | 61 64 64 72 65 73 73 20 6f 66 20 4e 65 74 46 6c 6f 77 20 70 61 63 6b 65 74 73 00 49 50 76 34 20 | address.of.NetFlow.packets.IPv4. |
45d60 | 70 65 65 72 69 6e 67 00 49 50 76 34 20 72 65 6c 61 79 00 49 50 76 34 20 72 6f 75 74 65 20 61 6e | peering.IPv4.relay.IPv4.route.an |
45d80 | 64 20 49 50 76 36 20 72 6f 75 74 65 20 70 6f 6c 69 63 69 65 73 20 61 72 65 20 64 65 66 69 6e 65 | d.IPv6.route.policies.are.define |
45da0 | 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 20 72 6f 75 74 65 20 70 | d.in.this.section..These.route.p |
45dc0 | 6f 6c 69 63 69 65 73 20 63 61 6e 20 74 68 65 6e 20 62 65 20 61 73 73 6f 63 69 61 74 65 64 20 74 | olicies.can.then.be.associated.t |
45de0 | 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 00 49 50 76 34 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a | o.interfaces..IPv4.route.source: |
45e00 | 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 | .bgp,.connected,.eigrp,.isis,.ke |
45e20 | 72 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 49 | rnel,.nhrp,.ospf,.rip,.static..I |
45e40 | 50 76 34 20 73 65 72 76 65 72 00 49 50 76 34 2f 49 50 76 36 20 72 65 6d 6f 74 65 20 61 64 64 72 | Pv4.server.IPv4/IPv6.remote.addr |
45e60 | 65 73 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 2e 20 41 6c 74 65 72 6e 61 | ess.of.the.VXLAN.tunnel..Alterna |
45e80 | 74 69 76 65 20 74 6f 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 | tive.to.multicast,.the.remote.IP |
45ea0 | 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 63 61 6e 20 73 65 74 20 64 69 72 65 63 74 6c 79 | v4/IPv6.address.can.set.directly |
45ec0 | 2e 00 49 50 76 36 00 49 50 76 36 20 41 63 63 65 73 73 20 4c 69 73 74 00 49 50 76 36 20 41 64 76 | ..IPv6.IPv6.Access.List.IPv6.Adv |
45ee0 | 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 49 50 76 36 20 44 48 43 50 76 36 2d 50 44 20 45 78 61 | anced.Options.IPv6.DHCPv6-PD.Exa |
45f00 | 6d 70 6c 65 00 49 50 76 36 20 44 4e 53 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 70 74 69 | mple.IPv6.DNS.addresses.are.opti |
45f20 | 6f 6e 61 6c 2e 00 49 50 76 36 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | onal..IPv6.Firewall.Configuratio |
45f40 | 6e 00 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 00 49 50 76 36 20 50 72 65 66 69 78 20 44 65 6c | n.IPv6.Multicast.IPv6.Prefix.Del |
45f60 | 65 67 61 74 69 6f 6e 00 49 50 76 36 20 50 72 65 66 69 78 20 4c 69 73 74 73 00 49 50 76 36 20 53 | egation.IPv6.Prefix.Lists.IPv6.S |
45f80 | 4c 41 41 43 20 61 6e 64 20 49 41 2d 50 44 00 49 50 76 36 20 54 43 50 20 66 69 6c 74 65 72 73 20 | LAAC.and.IA-PD.IPv6.TCP.filters. |
45fa0 | 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 77 69 74 | will.only.match.IPv6.packets.wit |
45fc0 | 68 20 6e 6f 20 68 65 61 64 65 72 20 65 78 74 65 6e 73 69 6f 6e 2c 20 73 65 65 20 68 74 74 70 73 | h.no.header.extension,.see.https |
45fe0 | 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 49 50 76 36 5f 70 61 | ://en.wikipedia.org/wiki/IPv6_pa |
46000 | 63 6b 65 74 23 45 78 74 65 6e 73 69 6f 6e 5f 68 65 61 64 65 72 73 00 49 50 76 36 20 61 64 64 72 | cket#Extension_headers.IPv6.addr |
46020 | 65 73 73 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 30 31 60 60 20 73 68 61 6c 6c 20 62 65 20 73 | ess.``2001:db8::101``.shall.be.s |
46040 | 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 | tatically.mapped.IPv6.address.of |
46060 | 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 61 | .route.to.match,.based.on.IPv6.a |
46080 | 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 | ccess-list..IPv6.address.of.rout |
460a0 | 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 70 72 65 66 69 78 | e.to.match,.based.on.IPv6.prefix |
460c0 | 2d 6c 69 73 74 2e 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 | -list..IPv6.address.of.route.to. |
460e0 | 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 | match,.based.on.specified.prefix |
46100 | 2d 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 | -length..Note.that.this.can.be.u |
46120 | 73 65 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e | sed.for.kernel.routes.only..Do.n |
46140 | 6f 74 20 61 70 70 6c 79 20 74 6f 20 74 68 65 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 | ot.apply.to.the.routes.of.dynami |
46160 | 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 | c.routing.protocols.(e.g..BGP,.R |
46180 | 49 50 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 | IP,.OSFP),.as.this.can.lead.to.u |
461a0 | 6e 65 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 73 2e 2e 00 49 50 76 36 20 63 6c 69 65 6e 74 27 | nexpected.results...IPv6.client' |
461c0 | 73 20 70 72 65 66 69 78 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 69 78 20 61 73 | s.prefix.IPv6.client's.prefix.as |
461e0 | 73 69 67 6e 6d 65 6e 74 00 49 50 76 36 20 64 65 66 61 75 6c 74 20 63 6c 69 65 6e 74 27 73 20 70 | signment.IPv6.default.client's.p |
46200 | 6f 6f 6c 20 61 73 73 69 67 6e 6d 65 6e 74 00 49 50 76 36 20 70 65 65 72 69 6e 67 00 49 50 76 36 | ool.assignment.IPv6.peering.IPv6 |
46220 | 20 70 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 38 3a 30 3a 31 30 31 3a 3a 2f 36 34 60 60 20 | .prefix.``2001:db8:0:101::/64``. |
46240 | 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 | shall.be.statically.mapped.IPv6. |
46260 | 70 72 65 66 69 78 2e 00 49 50 76 36 20 72 65 6c 61 79 00 49 50 76 36 20 72 6f 75 74 65 20 73 6f | prefix..IPv6.relay.IPv6.route.so |
46280 | 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 | urce:.bgp,.connected,.eigrp,.isi |
462a0 | 73 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 | s,.kernel,.nhrp,.ospfv3,.ripng,. |
462c0 | 73 74 61 74 69 63 2e 00 49 50 76 36 20 73 65 72 76 65 72 00 49 50 76 36 20 73 75 70 70 6f 72 74 | static..IPv6.server.IPv6.support |
462e0 | 00 49 53 2d 49 53 00 49 53 2d 49 53 20 47 6c 6f 62 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | .IS-IS.IS-IS.Global.Configuratio |
46300 | 6e 00 49 53 2d 49 53 20 53 52 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 43 2d 44 48 43 | n.IS-IS.SR.Configuration.ISC-DHC |
46320 | 50 20 4f 70 74 69 6f 6e 20 6e 61 6d 65 00 49 64 65 6e 74 69 74 79 20 42 61 73 65 64 20 43 6f 6e | P.Option.name.Identity.Based.Con |
46340 | 66 69 67 75 72 61 74 69 6f 6e 00 49 66 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 | figuration.If.**max-threshold**. |
46360 | 69 73 20 73 65 74 20 62 75 74 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 20 69 73 20 6e 6f | is.set.but.**min-threshold.is.no |
46380 | 74 2c 20 74 68 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 63 61 | t,.then.**min-threshold**.is.sca |
463a0 | 6c 65 64 20 74 6f 20 35 30 25 20 6f 66 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2e | led.to.50%.of.**max-threshold**. |
463c0 | 00 49 66 20 3a 63 66 67 63 6d 64 3a 60 73 74 72 69 63 74 60 20 69 73 20 73 65 74 20 74 68 65 20 | .If.:cfgcmd:`strict`.is.set.the. |
463e0 | 42 47 50 20 73 65 73 73 69 6f 6e 20 77 6f 6e e2 80 99 74 20 62 65 63 6f 6d 65 20 65 73 74 61 62 | BGP.session.won...t.become.estab |
46400 | 6c 69 73 68 65 64 20 75 6e 74 69 6c 20 74 68 65 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 73 65 | lished.until.the.BGP.neighbor.se |
46420 | 74 73 20 6c 6f 63 61 6c 20 52 6f 6c 65 20 6f 6e 20 69 74 73 20 73 69 64 65 2e 20 54 68 69 73 20 | ts.local.Role.on.its.side..This. |
46440 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 64 65 66 69 6e | configuration.parameter.is.defin |
46460 | 65 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 69 73 20 75 73 65 | ed.in.RFC.:rfc:`9234`.and.is.use |
46480 | 64 20 74 6f 20 65 6e 66 6f 72 63 65 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 | d.to.enforce.the.corresponding.c |
464a0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 79 6f 75 72 20 63 6f 75 6e 74 65 72 2d 70 61 72 | onfiguration.at.your.counter-par |
464c0 | 74 73 20 73 69 64 65 2e 00 49 66 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 73 20 75 73 | ts.side..If.ARP.monitoring.is.us |
464e0 | 65 64 20 69 6e 20 61 6e 20 65 74 68 65 72 63 68 61 6e 6e 65 6c 20 63 6f 6d 70 61 74 69 62 6c 65 | ed.in.an.etherchannel.compatible |
46500 | 20 6d 6f 64 65 20 28 6d 6f 64 65 73 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 61 6e 64 20 78 6f 72 | .mode.(modes.round-robin.and.xor |
46520 | 2d 68 61 73 68 29 2c 20 74 68 65 20 73 77 69 74 63 68 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e | -hash),.the.switch.should.be.con |
46540 | 66 69 67 75 72 65 64 20 69 6e 20 61 20 6d 6f 64 65 20 74 68 61 74 20 65 76 65 6e 6c 79 20 64 69 | figured.in.a.mode.that.evenly.di |
46560 | 73 74 72 69 62 75 74 65 73 20 70 61 63 6b 65 74 73 20 61 63 72 6f 73 73 20 61 6c 6c 20 6c 69 6e | stributes.packets.across.all.lin |
46580 | 6b 73 2e 20 49 66 20 74 68 65 20 73 77 69 74 63 68 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 | ks..If.the.switch.is.configured. |
465a0 | 74 6f 20 64 69 73 74 72 69 62 75 74 65 20 74 68 65 20 70 61 63 6b 65 74 73 20 69 6e 20 61 6e 20 | to.distribute.the.packets.in.an. |
465c0 | 58 4f 52 20 66 61 73 68 69 6f 6e 2c 20 61 6c 6c 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 74 68 | XOR.fashion,.all.replies.from.th |
465e0 | 65 20 41 52 50 20 74 61 72 67 65 74 73 20 77 69 6c 6c 20 62 65 20 72 65 63 65 69 76 65 64 20 6f | e.ARP.targets.will.be.received.o |
46600 | 6e 20 74 68 65 20 73 61 6d 65 20 6c 69 6e 6b 20 77 68 69 63 68 20 63 6f 75 6c 64 20 63 61 75 73 | n.the.same.link.which.could.caus |
46620 | 65 20 74 68 65 20 6f 74 68 65 72 20 74 65 61 6d 20 6d 65 6d 62 65 72 73 20 74 6f 20 66 61 69 6c | e.the.other.team.members.to.fail |
46640 | 2e 00 49 66 20 43 41 20 69 73 20 70 72 65 73 65 6e 74 2c 20 74 68 69 73 20 63 65 72 74 69 66 69 | ..If.CA.is.present,.this.certifi |
46660 | 63 61 74 65 20 77 69 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 67 65 6e 65 72 61 74 | cate.will.be.included.in.generat |
46680 | 65 64 20 43 52 4c 73 00 49 66 20 43 4c 49 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 70 65 | ed.CRLs.If.CLI.option.is.not.spe |
466a0 | 63 69 66 69 65 64 2c 20 74 68 69 73 20 66 65 61 74 75 72 65 20 69 73 20 64 69 73 61 62 6c 65 64 | cified,.this.feature.is.disabled |
466c0 | 2e 00 49 66 20 50 49 4d 20 68 61 73 20 74 68 65 20 61 20 63 68 6f 69 63 65 20 6f 66 20 45 43 4d | ..If.PIM.has.the.a.choice.of.ECM |
466e0 | 50 20 6e 65 78 74 68 6f 70 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 3a 61 62 62 | P.nexthops.for.a.particular.:abb |
46700 | 72 3a 60 52 50 46 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 | r:`RPF.(Reverse.Path.Forwarding) |
46720 | 60 2c 20 50 49 4d 20 77 69 6c 6c 20 63 61 75 73 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 6f 20 62 | `,.PIM.will.cause.S,G.flows.to.b |
46740 | 65 20 73 70 72 65 61 64 20 6f 75 74 20 61 6d 6f 6e 67 73 74 20 74 68 65 20 6e 65 78 74 68 6f 70 | e.spread.out.amongst.the.nexthop |
46760 | 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 | s..If.this.command.is.not.specif |
46780 | 69 65 64 20 74 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6e 65 78 74 68 6f 70 20 66 6f 75 6e 64 | ied.then.the.first.nexthop.found |
467a0 | 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 49 66 20 50 49 4d 20 69 73 20 75 73 69 6e 67 20 45 | .will.be.used..If.PIM.is.using.E |
467c0 | 43 4d 50 20 61 6e 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 6f 65 73 20 64 6f 77 6e 2c 20 | CMP.and.an.interface.goes.down,. |
467e0 | 63 61 75 73 65 20 50 49 4d 20 74 6f 20 72 65 62 61 6c 61 6e 63 65 20 61 6c 6c 20 53 2c 47 20 66 | cause.PIM.to.rebalance.all.S,G.f |
46800 | 6c 6f 77 73 20 61 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 69 6e 69 6e 67 20 6e 65 78 74 68 6f | lows.across.the.remaining.nextho |
46820 | 70 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 63 6f 6e 66 69 | ps..If.this.command.is.not.confi |
46840 | 67 75 72 65 64 20 50 49 4d 20 6f 6e 6c 79 20 6d 6f 64 69 66 69 65 73 20 74 68 6f 73 65 20 53 2c | gured.PIM.only.modifies.those.S, |
46860 | 47 20 66 6c 6f 77 73 20 74 68 61 74 20 77 65 72 65 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 | G.flows.that.were.using.the.inte |
46880 | 72 66 61 63 65 20 74 68 61 74 20 77 65 6e 74 20 64 6f 77 6e 2e 00 49 66 20 60 60 61 6c 69 61 73 | rface.that.went.down..If.``alias |
468a0 | 60 60 20 69 73 20 73 65 74 2c 20 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 | ``.is.set,.it.can.be.used.instea |
468c0 | 64 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e | d.of.the.device.when.connecting. |
468e0 | 00 49 66 20 60 60 61 6c 6c 60 60 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 72 65 6d 6f 76 65 | .If.``all``.is.specified,.remove |
46900 | 20 61 6c 6c 20 41 53 20 6e 75 6d 62 65 72 73 20 66 72 6f 6d 20 74 68 65 20 41 53 5f 50 41 54 48 | .all.AS.numbers.from.the.AS_PATH |
46920 | 20 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 68 27 73 20 4e 4c 52 49 2e 00 49 66 20 61 20 6c 6f | .of.the.BGP.path's.NLRI..If.a.lo |
46940 | 63 61 6c 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 69 73 20 69 6e 20 70 6c 61 63 65 20 | cal.firewall.policy.is.in.place. |
46960 | 6f 6e 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 77 | on.your.external.interface.you.w |
46980 | 69 6c 6c 20 6e 65 65 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 70 6f 72 74 73 20 62 65 6c 6f | ill.need.to.allow.the.ports.belo |
469a0 | 77 3a 00 49 66 20 61 20 72 65 67 69 73 74 72 79 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 | w:.If.a.registry.is.not.specifie |
469c0 | 64 2c 20 44 6f 63 6b 65 72 2e 69 6f 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 | d,.Docker.io.will.be.used.as.the |
469e0 | 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 75 6e 6c 65 73 73 20 61 6e 20 61 6c | .container.registry.unless.an.al |
46a00 | 74 65 72 6e 61 74 69 76 65 20 72 65 67 69 73 74 72 79 20 69 73 20 73 70 65 63 69 66 69 65 64 20 | ternative.registry.is.specified. |
46a20 | 75 73 69 6e 67 20 2a 2a 73 65 74 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 3c | using.**set.container.registry.< |
46a40 | 6e 61 6d 65 3e 2a 2a 20 6f 72 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 73 20 69 6e 63 6c 75 | name>**.or.the.registry.is.inclu |
46a60 | 64 65 64 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 00 49 66 20 61 20 72 65 73 70 6f | ded.in.the.image.name.If.a.respo |
46a80 | 6e 73 65 20 69 73 20 68 65 61 72 64 2c 20 74 68 65 20 6c 65 61 73 65 20 69 73 20 61 62 61 6e 64 | nse.is.heard,.the.lease.is.aband |
46aa0 | 6f 6e 65 64 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 | oned,.and.the.server.does.not.re |
46ac0 | 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 6c 65 61 73 65 20 77 | spond.to.the.client..The.lease.w |
46ae0 | 69 6c 6c 20 72 65 6d 61 69 6e 20 61 62 61 6e 64 6f 6e 65 64 20 66 6f 72 20 61 20 6d 69 6e 69 6d | ill.remain.abandoned.for.a.minim |
46b00 | 75 6d 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 20 73 65 63 6f 6e 64 73 | um.of.abandon-lease-time.seconds |
46b20 | 20 28 64 65 66 61 75 6c 74 73 20 74 6f 20 32 34 20 68 6f 75 72 73 29 2e 00 49 66 20 61 20 72 6f | .(defaults.to.24.hours)..If.a.ro |
46b40 | 75 74 65 20 68 61 73 20 61 6e 20 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 20 61 74 74 72 69 62 75 | ute.has.an.ORIGINATOR_ID.attribu |
46b60 | 74 65 20 62 65 63 61 75 73 65 20 69 74 20 68 61 73 20 62 65 65 6e 20 72 65 66 6c 65 63 74 65 64 | te.because.it.has.been.reflected |
46b80 | 2c 20 74 68 61 74 20 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 20 77 69 6c 6c 20 62 65 20 75 73 65 | ,.that.ORIGINATOR_ID.will.be.use |
46ba0 | 64 2e 20 4f 74 68 65 72 77 69 73 65 2c 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 | d..Otherwise,.the.router-ID.of.t |
46bc0 | 68 65 20 70 65 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 | he.peer.the.route.was.received.f |
46be0 | 72 6f 6d 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 49 66 20 61 20 72 75 6c 65 20 69 73 20 64 | rom.will.be.used..If.a.rule.is.d |
46c00 | 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 61 6e 20 61 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 64 | efined,.then.an.action.must.be.d |
46c20 | 65 66 69 6e 65 64 20 66 6f 72 20 69 74 2e 20 54 68 69 73 20 74 65 6c 6c 73 20 74 68 65 20 66 69 | efined.for.it..This.tells.the.fi |
46c40 | 72 65 77 61 6c 6c 20 77 68 61 74 20 74 6f 20 64 6f 20 69 66 20 61 6c 6c 20 63 72 69 74 65 72 69 | rewall.what.to.do.if.all.criteri |
46c60 | 61 20 6d 61 74 63 68 65 72 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 73 75 63 68 20 72 75 6c 65 | a.matchers.defined.for.such.rule |
46c80 | 20 64 6f 20 6d 61 74 63 68 2e 00 49 66 20 61 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 | .do.match..If.a.there.are.no.fre |
46ca0 | 65 20 61 64 64 72 65 73 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f | e.addresses.but.there.are.abando |
46cc0 | 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 | ned.IP.addresses,.the.DHCP.serve |
46ce0 | 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 | r.will.attempt.to.reclaim.an.aba |
46d00 | 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 | ndoned.IP.address.regardless.of. |
46d20 | 74 68 65 20 76 61 6c 75 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e | the.value.of.abandon-lease-time. |
46d40 | 00 49 66 20 61 6e 20 49 53 50 20 64 65 70 6c 6f 79 73 20 61 20 3a 61 62 62 72 3a 60 43 47 4e 20 | .If.an.ISP.deploys.a.:abbr:`CGN. |
46d60 | 28 43 61 72 72 69 65 72 2d 67 72 61 64 65 20 4e 41 54 29 60 2c 20 61 6e 64 20 75 73 65 73 20 3a | (Carrier-grade.NAT)`,.and.uses.: |
46d80 | 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 74 6f 20 6e 75 6d 62 | rfc:`1918`.address.space.to.numb |
46da0 | 65 72 20 63 75 73 74 6f 6d 65 72 20 67 61 74 65 77 61 79 73 2c 20 74 68 65 20 72 69 73 6b 20 6f | er.customer.gateways,.the.risk.o |
46dc0 | 66 20 61 64 64 72 65 73 73 20 63 6f 6c 6c 69 73 69 6f 6e 2c 20 61 6e 64 20 74 68 65 72 65 66 6f | f.address.collision,.and.therefo |
46de0 | 72 65 20 72 6f 75 74 69 6e 67 20 66 61 69 6c 75 72 65 73 2c 20 61 72 69 73 65 73 20 77 68 65 6e | re.routing.failures,.arises.when |
46e00 | 20 74 68 65 20 63 75 73 74 6f 6d 65 72 20 6e 65 74 77 6f 72 6b 20 61 6c 72 65 61 64 79 20 75 73 | .the.customer.network.already.us |
46e20 | 65 73 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e | es.an.:rfc:`1918`.address.space. |
46e40 | 00 49 66 20 61 6e 20 61 6e 6f 74 68 65 72 20 62 72 69 64 67 65 20 69 6e 20 74 68 65 20 73 70 61 | .If.an.another.bridge.in.the.spa |
46e60 | 6e 6e 69 6e 67 20 74 72 65 65 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 6f 75 74 20 61 20 68 | nning.tree.does.not.send.out.a.h |
46e80 | 65 6c 6c 6f 20 70 61 63 6b 65 74 20 66 6f 72 20 61 20 6c 6f 6e 67 20 70 65 72 69 6f 64 20 6f 66 | ello.packet.for.a.long.period.of |
46ea0 | 20 74 69 6d 65 2c 20 69 74 20 69 73 20 61 73 73 75 6d 65 64 20 74 6f 20 62 65 20 64 65 61 64 2e | .time,.it.is.assumed.to.be.dead. |
46ec0 | 00 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 | .If.choosing.a.value.below.31.se |
46ee0 | 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 | conds.be.aware.that.some.hardwar |
46f00 | 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 | e.platforms.cannot.see.data.flow |
46f20 | 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 | ing.in.better.than.30.second.chu |
46f40 | 6e 6b 73 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 | nks..If.configured,.incoming.IP. |
46f60 | 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 | directed.broadcast.packets.on.th |
46f80 | 69 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 | is.interface.will.be.forwarded.. |
46fa0 | 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 72 65 70 6c 79 20 6f 6e 6c 79 20 69 66 20 74 68 65 | If.configured,.reply.only.if.the |
46fc0 | 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6c 6f 63 61 6c 20 61 64 64 72 | .target.IP.address.is.local.addr |
46fe0 | 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 | ess.configured.on.the.incoming.i |
47000 | 6e 74 65 72 66 61 63 65 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 72 79 20 74 6f 20 | nterface..If.configured,.try.to. |
47020 | 61 76 6f 69 64 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 74 68 61 74 20 61 72 65 20 6e | avoid.local.addresses.that.are.n |
47040 | 6f 74 20 69 6e 20 74 68 65 20 74 61 72 67 65 74 27 73 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 | ot.in.the.target's.subnet.for.th |
47060 | 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 6d 6f 64 65 20 69 73 20 75 73 65 66 75 | is.interface..This.mode.is.usefu |
47080 | 6c 20 77 68 65 6e 20 74 61 72 67 65 74 20 68 6f 73 74 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 | l.when.target.hosts.reachable.vi |
470a0 | 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 72 65 71 75 69 72 65 20 74 68 65 20 73 6f 75 | a.this.interface.require.the.sou |
470c0 | 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 | rce.IP.address.in.ARP.requests.t |
470e0 | 6f 20 62 65 20 70 61 72 74 20 6f 66 20 74 68 65 69 72 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f | o.be.part.of.their.logical.netwo |
47100 | 72 6b 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 69 | rk.configured.on.the.receiving.i |
47120 | 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 77 65 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 72 | nterface..When.we.generate.the.r |
47140 | 65 71 75 65 73 74 20 77 65 20 77 69 6c 6c 20 63 68 65 63 6b 20 61 6c 6c 20 6f 75 72 20 73 75 62 | equest.we.will.check.all.our.sub |
47160 | 6e 65 74 73 20 74 68 61 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 | nets.that.include.the.target.IP. |
47180 | 61 6e 64 20 77 69 6c 6c 20 70 72 65 73 65 72 76 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 | and.will.preserve.the.source.add |
471a0 | 72 65 73 73 20 69 66 20 69 74 20 69 73 20 66 72 6f 6d 20 73 75 63 68 20 73 75 62 6e 65 74 2e 20 | ress.if.it.is.from.such.subnet.. |
471c0 | 49 66 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 75 63 68 20 73 75 62 6e 65 74 20 77 65 20 73 65 | If.there.is.no.such.subnet.we.se |
471e0 | 6c 65 63 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f | lect.source.address.according.to |
47200 | 20 74 68 65 20 72 75 6c 65 73 20 66 6f 72 20 6c 65 76 65 6c 20 32 2e 00 49 66 20 63 6f 6e 66 69 | .the.rules.for.level.2..If.confi |
47220 | 67 75 72 69 6e 67 20 56 58 4c 41 4e 20 69 6e 20 61 20 56 79 4f 53 20 76 69 72 74 75 61 6c 20 6d | guring.VXLAN.in.a.VyOS.virtual.m |
47240 | 61 63 68 69 6e 65 2c 20 65 6e 73 75 72 65 20 74 68 61 74 20 4d 41 43 20 73 70 6f 6f 66 69 6e 67 | achine,.ensure.that.MAC.spoofing |
47260 | 20 28 48 79 70 65 72 2d 56 29 20 6f 72 20 46 6f 72 67 65 64 20 54 72 61 6e 73 6d 69 74 73 20 28 | .(Hyper-V).or.Forged.Transmits.( |
47280 | 45 53 58 29 20 61 72 65 20 70 65 72 6d 69 74 74 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 66 6f | ESX).are.permitted,.otherwise.fo |
472a0 | 72 77 61 72 64 65 64 20 66 72 61 6d 65 73 20 6d 61 79 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 | rwarded.frames.may.be.blocked.by |
472c0 | 20 74 68 65 20 68 79 70 65 72 76 69 73 6f 72 2e 00 49 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 | .the.hypervisor..If.forwarding.t |
472e0 | 72 61 66 66 69 63 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 20 74 68 61 6e 20 | raffic.to.a.different.port.than. |
47300 | 69 74 20 69 73 20 61 72 72 69 76 69 6e 67 20 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 | it.is.arriving.on,.you.may.also. |
47320 | 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 20 75 | configure.the.translation.port.u |
47340 | 73 69 6e 67 20 60 73 65 74 20 6e 61 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 72 75 6c 65 20 5b | sing.`set.nat.destination.rule.[ |
47360 | 6e 5d 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 60 2e 00 49 66 20 67 75 61 72 61 6e 74 | n].translation.port`..If.guarant |
47380 | 65 65 64 20 74 72 61 66 66 69 63 20 66 6f 72 20 61 20 63 6c 61 73 73 20 69 73 20 6d 65 74 20 61 | eed.traffic.for.a.class.is.met.a |
473a0 | 6e 64 20 74 68 65 72 65 20 69 73 20 72 6f 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 74 72 61 66 66 69 | nd.there.is.room.for.more.traffi |
473c0 | 63 2c 20 74 68 65 20 63 65 69 6c 69 6e 67 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 | c,.the.ceiling.parameter.can.be. |
473e0 | 75 73 65 64 20 74 6f 20 73 65 74 20 68 6f 77 20 6d 75 63 68 20 6d 6f 72 65 20 62 61 6e 64 77 69 | used.to.set.how.much.more.bandwi |
47400 | 64 74 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 20 49 66 20 67 75 61 72 61 6e 74 65 65 64 | dth.could.be.used..If.guaranteed |
47420 | 20 74 72 61 66 66 69 63 20 69 73 20 6d 65 74 20 61 6e 64 20 74 68 65 72 65 20 61 72 65 20 73 65 | .traffic.is.met.and.there.are.se |
47440 | 76 65 72 61 6c 20 63 6c 61 73 73 65 73 20 77 69 6c 6c 69 6e 67 20 74 6f 20 75 73 65 20 74 68 65 | veral.classes.willing.to.use.the |
47460 | 69 72 20 63 65 69 6c 69 6e 67 73 2c 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 70 61 72 61 6d 65 | ir.ceilings,.the.priority.parame |
47480 | 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 6f 72 64 65 72 20 69 6e 20 | ter.will.establish.the.order.in. |
474a0 | 77 68 69 63 68 20 74 68 61 74 20 61 64 64 69 74 69 6f 6e 61 6c 20 74 72 61 66 66 69 63 20 77 69 | which.that.additional.traffic.wi |
474c0 | 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 2e 20 50 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 | ll.be.allocated..Priority.can.be |
474e0 | 20 61 6e 79 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 30 20 74 6f 20 37 2e 20 54 68 65 20 6c 6f 77 | .any.number.from.0.to.7..The.low |
47500 | 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 | er.the.number,.the.higher.the.pr |
47520 | 69 6f 72 69 74 79 2e 00 49 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 | iority..If.interface.were.the.pa |
47540 | 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 | cket.was.received.is.part.of.a.b |
47560 | 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 | ridge,.then.packet.is.processed. |
47580 | 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 | at.the.**Bridge.Layer**,.which.c |
475a0 | 6f 6e 74 61 69 6e 73 20 61 20 76 65 72 20 62 61 73 69 63 20 73 65 74 75 70 20 77 68 65 72 65 20 | ontains.a.ver.basic.setup.where. |
475c0 | 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 69 6e 74 65 72 66 61 | for.bridge.filtering:.If.interfa |
475e0 | 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 | ce.were.the.packet.was.received. |
47600 | 69 73 6e 27 74 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 | isn't.part.of.a.bridge,.then.pac |
47620 | 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 | ket.is.processed.at.the.**IP.Lay |
47640 | 65 72 2a 2a 3a 00 49 66 20 69 74 27 73 20 76 69 74 61 6c 20 74 68 61 74 20 74 68 65 20 64 61 65 | er**:.If.it's.vital.that.the.dae |
47660 | 6d 6f 6e 20 73 68 6f 75 6c 64 20 61 63 74 20 65 78 61 63 74 6c 79 20 6c 69 6b 65 20 61 20 72 65 | mon.should.act.exactly.like.a.re |
47680 | 61 6c 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 75 70 73 74 72 | al.multicast.client.on.the.upstr |
476a0 | 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f | eam.interface,.this.function.sho |
476c0 | 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 49 66 20 6b 6e 6f 77 6e 2c 20 74 68 65 20 49 50 | uld.be.enabled..If.known,.the.IP |
476e0 | 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e | .of.the.remote.router.can.be.con |
47700 | 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 60 72 65 6d 6f 74 65 2d 68 6f 73 74 60 | figured.using.the.``remote-host` |
47720 | 60 20 64 69 72 65 63 74 69 76 65 3b 20 69 66 20 75 6e 6b 6e 6f 77 6e 2c 20 69 74 20 63 61 6e 20 | `.directive;.if.unknown,.it.can. |
47740 | 62 65 20 6f 6d 69 74 74 65 64 2e 20 57 65 20 77 69 6c 6c 20 61 73 73 75 6d 65 20 61 20 64 79 6e | be.omitted..We.will.assume.a.dyn |
47760 | 61 6d 69 63 20 49 50 20 66 6f 72 20 6f 75 72 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 49 | amic.IP.for.our.remote.router..I |
47780 | 66 20 6c 6f 67 67 69 6e 67 20 74 6f 20 61 20 6c 6f 63 61 6c 20 75 73 65 72 20 61 63 63 6f 75 6e | f.logging.to.a.local.user.accoun |
477a0 | 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 61 6c 6c 20 64 65 66 69 6e 65 64 20 6c 6f 67 | t.is.configured,.all.defined.log |
477c0 | 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 64 69 73 70 6c 61 79 20 6f 6e 20 74 68 65 20 63 6f 6e | .messages.are.display.on.the.con |
477e0 | 73 6f 6c 65 20 69 66 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 | sole.if.the.local.user.is.logged |
47800 | 20 69 6e 2c 20 69 66 20 74 68 65 20 75 73 65 72 20 69 73 20 6e 6f 74 20 6c 6f 67 67 65 64 20 69 | .in,.if.the.user.is.not.logged.i |
47820 | 6e 2c 20 6e 6f 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 62 65 69 6e 67 20 64 69 73 70 6c 61 79 | n,.no.messages.are.being.display |
47840 | 65 64 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 | ed..For.an.explanation.on.:ref:` |
47860 | 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 | syslog_facilities`.keywords.and. |
47880 | 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 | :ref:`syslog_severity_level`.key |
478a0 | 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 49 66 20 6d 61 6b 69 6e | words.see.tables.below..If.makin |
478c0 | 67 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 2c 20 4f 70 65 6e 56 | g.use.of.multiple.tunnels,.OpenV |
478e0 | 50 4e 20 6d 75 73 74 20 68 61 76 65 20 61 20 77 61 79 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 | PN.must.have.a.way.to.distinguis |
47900 | 68 20 62 65 74 77 65 65 6e 20 64 69 66 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 20 61 73 69 64 | h.between.different.tunnels.asid |
47920 | 65 20 66 72 6f 6d 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 6b 65 79 2e 20 54 68 69 73 20 | e.from.the.pre-shared-key..This. |
47940 | 69 73 20 65 69 74 68 65 72 20 62 79 20 72 65 66 65 72 65 6e 63 69 6e 67 20 49 50 20 61 64 64 72 | is.either.by.referencing.IP.addr |
47960 | 65 73 73 20 6f 72 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 4f 6e 65 20 6f 70 74 69 6f 6e 20 69 | ess.or.port.number..One.option.i |
47980 | 73 20 74 6f 20 64 65 64 69 63 61 74 65 20 61 20 70 75 62 6c 69 63 20 49 50 20 74 6f 20 65 61 63 | s.to.dedicate.a.public.IP.to.eac |
479a0 | 68 20 74 75 6e 6e 65 6c 2e 20 41 6e 6f 74 68 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 | h.tunnel..Another.option.is.to.d |
479c0 | 65 64 69 63 61 74 65 20 61 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 74 6f 20 65 61 63 68 20 74 75 | edicate.a.port.number.to.each.tu |
479e0 | 6e 6e 65 6c 20 28 65 2e 67 2e 20 31 31 39 35 2c 31 31 39 36 2c 31 31 39 37 2e 2e 2e 29 2e 00 49 | nnel.(e.g..1195,1196,1197...)..I |
47a00 | 66 20 6d 75 6c 74 69 2d 70 61 74 68 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e | f.multi-pathing.is.enabled,.then |
47a20 | 20 63 68 65 63 6b 20 77 68 65 74 68 65 72 20 74 68 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 79 65 | .check.whether.the.routes.not.ye |
47a40 | 74 20 64 69 73 74 69 6e 67 75 69 73 68 65 64 20 69 6e 20 70 72 65 66 65 72 65 6e 63 65 20 6d 61 | t.distinguished.in.preference.ma |
47a60 | 79 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 20 49 66 20 3a 63 66 67 63 6d | y.be.considered.equal..If.:cfgcm |
47a80 | 64 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 61 73 2d 70 61 74 68 20 6d 75 6c 74 69 70 61 74 | d:`bgp.bestpath.as-path.multipat |
47aa0 | 68 2d 72 65 6c 61 78 60 20 69 73 20 73 65 74 2c 20 61 6c 6c 20 73 75 63 68 20 72 6f 75 74 65 73 | h-relax`.is.set,.all.such.routes |
47ac0 | 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2c 20 6f 74 68 65 72 77 69 73 65 | .are.considered.equal,.otherwise |
47ae0 | 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 76 69 61 20 69 42 47 50 20 77 69 74 68 20 69 | .routes.received.via.iBGP.with.i |
47b00 | 64 65 6e 74 69 63 61 6c 20 41 53 5f 50 41 54 48 73 20 6f 72 20 72 6f 75 74 65 73 20 72 65 63 65 | dentical.AS_PATHs.or.routes.rece |
47b20 | 69 76 65 64 20 66 72 6f 6d 20 65 42 47 50 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 | ived.from.eBGP.neighbours.in.the |
47b40 | 20 73 61 6d 65 20 41 53 20 61 72 65 20 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 00 49 | .same.AS.are.considered.equal..I |
47b60 | 66 20 6e 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 | f.no.connection.to.an.RPKI.cache |
47b80 | 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 66 74 65 72 | .server.can.be.established.after |
47ba0 | 20 61 20 70 72 65 2d 64 65 66 69 6e 65 64 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 | .a.pre-defined.timeout,.the.rout |
47bc0 | 65 72 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 72 6f 75 74 65 73 20 77 69 74 68 6f 75 74 20 70 | er.will.process.routes.without.p |
47be0 | 72 65 66 69 78 20 6f 72 69 67 69 6e 20 76 61 6c 69 64 61 74 69 6f 6e 2e 20 49 74 20 73 74 69 6c | refix.origin.validation..It.stil |
47c00 | 6c 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 | l.will.try.to.establish.a.connec |
47c20 | 74 69 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 20 69 6e 20 | tion.to.an.RPKI.cache.server.in. |
47c40 | 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 2e 00 49 66 20 6e 6f 20 64 65 73 74 69 6e 61 74 69 6f | the.background..If.no.destinatio |
47c60 | 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 6d 61 74 | n.is.specified.the.rule.will.mat |
47c80 | 63 68 20 6f 6e 20 61 6e 79 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e | ch.on.any.destination.address.an |
47ca0 | 64 20 70 6f 72 74 2e 00 49 66 20 6e 6f 20 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 | d.port..If.no.ip.prefix.list.is. |
47cc0 | 73 70 65 63 69 66 69 65 64 2c 20 69 74 20 61 63 74 73 20 61 73 20 70 65 72 6d 69 74 2e 20 49 66 | specified,.it.acts.as.permit..If |
47ce0 | 20 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 | .ip.prefix.list.is.defined,.and. |
47d00 | 6e 6f 20 6d 61 74 63 68 20 69 73 20 66 6f 75 6e 64 2c 20 64 65 66 61 75 6c 74 20 64 65 6e 79 20 | no.match.is.found,.default.deny. |
47d20 | 69 73 20 61 70 70 6c 69 65 64 2e 00 49 66 20 6e 6f 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 | is.applied..If.no.option.is.spec |
47d40 | 69 66 69 65 64 2c 20 74 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 60 61 6c 6c 60 2e 00 49 | ified,.this.defaults.to.`all`..I |
47d60 | 66 20 6e 6f 74 20 73 65 74 20 28 64 65 66 61 75 6c 74 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 | f.not.set.(default).allows.you.t |
47d80 | 6f 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 | o.have.multiple.network.interfac |
47da0 | 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 75 62 6e 65 74 2c 20 61 6e 64 20 68 61 76 65 20 | es.on.the.same.subnet,.and.have. |
47dc0 | 74 68 65 20 41 52 50 73 20 66 6f 72 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 62 65 20 61 | the.ARPs.for.each.interface.be.a |
47de0 | 6e 73 77 65 72 65 64 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 | nswered.based.on.whether.or.not. |
47e00 | 74 68 65 20 6b 65 72 6e 65 6c 20 77 6f 75 6c 64 20 72 6f 75 74 65 20 61 20 70 61 63 6b 65 74 20 | the.kernel.would.route.a.packet. |
47e20 | 66 72 6f 6d 20 74 68 65 20 41 52 50 27 64 20 49 50 20 6f 75 74 20 74 68 61 74 20 69 6e 74 65 72 | from.the.ARP'd.IP.out.that.inter |
47e40 | 66 61 63 65 20 28 74 68 65 72 65 66 6f 72 65 20 79 6f 75 20 6d 75 73 74 20 75 73 65 20 73 6f 75 | face.(therefore.you.must.use.sou |
47e60 | 72 63 65 20 62 61 73 65 64 20 72 6f 75 74 69 6e 67 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f | rce.based.routing.for.this.to.wo |
47e80 | 72 6b 29 2e 00 49 66 20 6f 70 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 20 70 61 72 61 6d 65 74 | rk)..If.optional.profile.paramet |
47ea0 | 65 72 20 69 73 20 75 73 65 64 2c 20 73 65 6c 65 63 74 20 61 20 42 46 44 20 70 72 6f 66 69 6c 65 | er.is.used,.select.a.BFD.profile |
47ec0 | 20 66 6f 72 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 73 20 63 72 65 61 74 65 64 20 76 69 | .for.the.BFD.sessions.created.vi |
47ee0 | 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 73 65 74 20 74 68 65 20 6b 65 72 | a.this.interface..If.set.the.ker |
47f00 | 6e 65 6c 20 63 61 6e 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 72 70 20 72 65 71 75 65 73 74 73 20 | nel.can.respond.to.arp.requests. |
47f20 | 77 69 74 68 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 69 6e 74 65 72 66 | with.addresses.from.other.interf |
47f40 | 61 63 65 73 2e 20 54 68 69 73 20 6d 61 79 20 73 65 65 6d 20 77 72 6f 6e 67 20 62 75 74 20 69 74 | aces..This.may.seem.wrong.but.it |
47f60 | 20 75 73 75 61 6c 6c 79 20 6d 61 6b 65 73 20 73 65 6e 73 65 2c 20 62 65 63 61 75 73 65 20 69 74 | .usually.makes.sense,.because.it |
47f80 | 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 63 68 61 6e 63 65 20 6f 66 20 73 75 63 63 65 73 73 | .increases.the.chance.of.success |
47fa0 | 66 75 6c 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | ful.communication..IP.addresses. |
47fc0 | 61 72 65 20 6f 77 6e 65 64 20 62 79 20 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 68 6f 73 74 20 6f | are.owned.by.the.complete.host.o |
47fe0 | 6e 20 4c 69 6e 75 78 2c 20 6e 6f 74 20 62 79 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 | n.Linux,.not.by.particular.inter |
48000 | 66 61 63 65 73 2e 20 4f 6e 6c 79 20 66 6f 72 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 73 65 74 | faces..Only.for.more.complex.set |
48020 | 75 70 73 20 6c 69 6b 65 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 2c 20 64 6f 65 73 20 74 68 | ups.like.load-balancing,.does.th |
48040 | 69 73 20 62 65 68 61 76 69 6f 75 72 20 63 61 75 73 65 20 70 72 6f 62 6c 65 6d 73 2e 00 49 66 20 | is.behaviour.cause.problems..If. |
48060 | 73 65 74 2c 20 49 50 76 34 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 | set,.IPv4.directed.broadcast.for |
48080 | 77 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 6c 65 74 65 6c 79 20 64 69 73 61 62 | warding.will.be.completely.disab |
480a0 | 6c 65 64 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 77 68 65 74 68 65 72 20 70 65 72 2d 69 6e | led.regardless.of.whether.per-in |
480c0 | 74 65 72 66 61 63 65 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 | terface.directed.broadcast.forwa |
480e0 | 72 64 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 20 6f 72 20 6e 6f 74 2e 00 49 66 20 73 75 66 66 | rding.is.enabled.or.not..If.suff |
48100 | 69 78 20 69 73 20 6f 6d 69 74 74 65 64 2c 20 6d 69 6e 75 74 65 73 20 61 72 65 20 69 6d 70 6c 69 | ix.is.omitted,.minutes.are.impli |
48120 | 65 64 2e 00 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6e 6f 2d 70 72 65 70 65 6e 64 60 20 | ed..If.the.:cfgcmd:`no-prepend`. |
48140 | 61 74 74 72 69 62 75 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 | attribute.is.specified,.then.the |
48160 | 20 73 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 6e 6f 74 20 70 72 65 70 65 6e | .supplied.local-as.is.not.prepen |
48180 | 64 65 64 20 74 6f 20 74 68 65 20 72 65 63 65 69 76 65 64 20 41 53 5f 50 41 54 48 2e 00 49 66 20 | ded.to.the.received.AS_PATH..If. |
481a0 | 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 70 6c 61 63 65 2d 61 73 60 20 61 74 74 72 69 62 75 | the.:cfgcmd:`replace-as`.attribu |
481c0 | 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 6f 6e 6c 79 20 74 68 65 20 73 | te.is.specified,.then.only.the.s |
481e0 | 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f | upplied.local-as.is.prepended.to |
48200 | 20 74 68 65 20 41 53 5f 50 41 54 48 20 77 68 65 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c | .the.AS_PATH.when.transmitting.l |
48220 | 6f 63 61 6c 2d 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e | ocal-route.updates.to.this.peer. |
48240 | 00 49 66 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 | .If.the.ARP.table.already.contai |
48260 | 6e 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 67 72 61 74 75 69 74 | ns.the.IP.address.of.the.gratuit |
48280 | 6f 75 73 20 61 72 70 20 66 72 61 6d 65 2c 20 74 68 65 20 61 72 70 20 74 61 62 6c 65 20 77 69 6c | ous.arp.frame,.the.arp.table.wil |
482a0 | 6c 20 62 65 20 75 70 64 61 74 65 64 20 72 65 67 61 72 64 6c 65 73 73 20 69 66 20 74 68 69 73 20 | l.be.updated.regardless.if.this. |
482c0 | 73 65 74 74 69 6e 67 20 69 73 20 6f 6e 20 6f 72 20 6f 66 66 2e 00 49 66 20 74 68 65 20 41 53 2d | setting.is.on.or.off..If.the.AS- |
482e0 | 50 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 61 20 70 72 69 76 61 74 65 | Path.for.the.route.has.a.private |
48300 | 20 41 53 4e 20 62 65 74 77 65 65 6e 20 70 75 62 6c 69 63 20 41 53 4e 73 2c 20 69 74 20 69 73 20 | .ASN.between.public.ASNs,.it.is. |
48320 | 61 73 73 75 6d 65 64 20 74 68 61 74 20 74 68 69 73 20 69 73 20 61 20 64 65 73 69 67 6e 20 63 68 | assumed.that.this.is.a.design.ch |
48340 | 6f 69 63 65 2c 20 61 6e 64 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 20 69 73 20 6e 6f 74 | oice,.and.the.private.ASN.is.not |
48360 | 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 | .removed..If.the.AS-Path.for.the |
48380 | 20 72 6f 75 74 65 20 68 61 73 20 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 41 53 4e 73 2c 20 74 68 | .route.has.only.private.ASNs,.th |
483a0 | 65 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 61 72 65 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 | e.private.ASNs.are.removed..If.t |
483c0 | 68 65 20 49 50 20 70 72 65 66 69 78 20 6d 61 73 6b 20 69 73 20 70 72 65 73 65 6e 74 2c 20 69 74 | he.IP.prefix.mask.is.present,.it |
483e0 | 20 64 69 72 65 63 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 6f 20 75 73 65 20 74 68 69 73 20 70 65 | .directs.opennhrp.to.use.this.pe |
48400 | 65 72 20 61 73 20 61 20 6e 65 78 74 20 68 6f 70 20 73 65 72 76 65 72 20 77 68 65 6e 20 73 65 6e | er.as.a.next.hop.server.when.sen |
48420 | 64 69 6e 67 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 6d 61 74 63 68 69 6e | ding.Resolution.Requests.matchin |
48440 | 67 20 74 68 69 73 20 73 75 62 6e 65 74 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 | g.this.subnet..If.the.RADIUS.ser |
48460 | 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 44 65 6c 65 67 61 | ver.sends.the.attribute.``Delega |
48480 | 74 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 64 65 6c | ted-IPv6-Prefix-Pool``,.IPv6.del |
484a0 | 65 67 61 74 69 6f 6e 20 70 65 66 69 78 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 | egation.pefix.will.be.allocated. |
484c0 | 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 64 65 | from.a.predefined.IPv6.pool.``de |
484e0 | 6c 65 67 61 74 65 60 60 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 | legate``.whose.name.equals.the.a |
48500 | 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 | ttribute.value..If.the.RADIUS.se |
48520 | 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 | rver.sends.the.attribute.``Frame |
48540 | 64 2d 49 50 2d 41 64 64 72 65 73 73 60 60 20 74 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 | d-IP-Address``.then.this.IP.addr |
48560 | 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 | ess.will.be.allocated.to.the.cli |
48580 | 65 6e 74 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 60 60 64 65 66 61 75 6c 74 2d 70 6f 6f | ent.and.the.option.``default-poo |
485a0 | 6c 60 60 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 | l``.within.the.CLI.config.is.bei |
485c0 | 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | ng.ignored..If.the.RADIUS.server |
485e0 | 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 | .sends.the.attribute.``Framed-IP |
48600 | 2d 41 64 64 72 65 73 73 60 60 20 74 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 | -Address``.then.this.IP.address. |
48620 | 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 | will.be.allocated.to.the.client. |
48640 | 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 70 2d 70 6f 6f 6c 20 77 69 74 68 69 6e 20 74 68 | and.the.option.ip-pool.within.th |
48660 | 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 | e.CLI.config.is.being.ignored..I |
48680 | 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 | f.the.RADIUS.server.sends.the.at |
486a0 | 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 50 6f 6f 6c 60 60 2c 20 49 50 20 61 64 64 72 | tribute.``Framed-Pool``,.IP.addr |
486c0 | 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 | ess.will.be.allocated.from.a.pre |
486e0 | 64 65 66 69 6e 65 64 20 49 50 20 70 6f 6f 6c 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c | defined.IP.pool.whose.name.equal |
48700 | 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 | s.the.attribute.value..If.the.RA |
48720 | 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 | DIUS.server.sends.the.attribute. |
48740 | 60 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 2c 20 | ``Stateful-IPv6-Address-Pool``,. |
48760 | 49 50 76 36 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 | IPv6.address.will.be.allocated.f |
48780 | 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 70 72 65 | rom.a.predefined.IPv6.pool.``pre |
487a0 | 66 69 78 60 60 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 | fix``.whose.name.equals.the.attr |
487c0 | 69 62 75 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 | ibute.value..If.the.RADIUS.serve |
487e0 | 72 20 75 73 65 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d | r.uses.the.attribute.``NAS-Port- |
48800 | 49 64 60 60 2c 20 70 70 70 20 74 75 6e 6e 65 6c 73 20 77 69 6c 6c 20 62 65 20 72 65 6e 61 6d 65 | Id``,.ppp.tunnels.will.be.rename |
48820 | 64 2e 00 49 66 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 | d..If.the.average.queue.size.is. |
48840 | 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a | lower.than.the.**min-threshold** |
48860 | 2c 20 61 6e 20 61 72 72 69 76 69 6e 67 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 | ,.an.arriving.packet.will.be.pla |
48880 | 63 65 64 20 69 6e 20 74 68 65 20 71 75 65 75 65 2e 00 49 66 20 74 68 65 20 63 75 72 72 65 6e 74 | ced.in.the.queue..If.the.current |
488a0 | 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 2a 2a 71 75 65 | .queue.size.is.larger.than.**que |
488c0 | 75 65 2d 6c 69 6d 69 74 2a 2a 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 | ue-limit**,.then.packets.will.be |
488e0 | 20 64 72 6f 70 70 65 64 2e 20 54 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 | .dropped..The.average.queue.size |
48900 | 20 64 65 70 65 6e 64 73 20 6f 6e 20 69 74 73 20 66 6f 72 6d 65 72 20 61 76 65 72 61 67 65 20 73 | .depends.on.its.former.average.s |
48920 | 69 7a 65 20 61 6e 64 20 69 74 73 20 63 75 72 72 65 6e 74 20 6f 6e 65 2e 00 49 66 20 74 68 65 20 | ize.and.its.current.one..If.the. |
48940 | 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 | interface.where.the.packet.was.r |
48960 | 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 | eceived.is.part.of.a.bridge,.the |
48980 | 6e 20 70 61 63 6b 65 74 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 | n.packetis.processed.at.the.**Br |
489a0 | 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 | idge.Layer**,.which.contains.a.b |
489c0 | 61 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a | asic.setup.for.bridge.filtering: |
489e0 | 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b | .If.the.interface.where.the.pack |
48a00 | 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 | et.was.received.is.part.of.a.bri |
48a20 | 64 67 65 2c 20 74 68 65 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 | dge,.then.the.packet.is.processe |
48a40 | 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 | d.at.the.**Bridge.Layer**,.which |
48a60 | 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 | .contains.a.basic.setup.for.brid |
48a80 | 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 | ge.filtering:.If.the.interface.w |
48aa0 | 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e | here.the.packet.was.received.isn |
48ac0 | 27 74 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 | 't.part.of.a.bridge,.then.packet |
48ae0 | 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a | is.processed.at.the.**IP.Layer** |
48b00 | 3a 00 49 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 49 50 76 36 20 74 68 65 6e 20 74 | :.If.the.protocol.is.IPv6.then.t |
48b20 | 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 | he.source.and.destination.addres |
48b40 | 73 65 73 20 61 72 65 20 66 69 72 73 74 20 68 61 73 68 65 64 20 75 73 69 6e 67 20 69 70 76 36 5f | ses.are.first.hashed.using.ipv6_ |
48b60 | 61 64 64 72 5f 68 61 73 68 2e 00 49 66 20 74 68 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 | addr_hash..If.the.statically.map |
48b80 | 70 65 64 20 70 65 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 43 69 73 63 6f 20 49 4f 53 2c 20 73 | ped.peer.is.running.Cisco.IOS,.s |
48ba0 | 70 65 63 69 66 79 20 74 68 65 20 63 69 73 63 6f 20 6b 65 79 77 6f 72 64 2e 20 49 74 20 69 73 20 | pecify.the.cisco.keyword..It.is. |
48bc0 | 75 73 65 64 20 74 6f 20 66 69 78 20 73 74 61 74 69 63 61 6c 6c 79 20 74 68 65 20 52 65 67 69 73 | used.to.fix.statically.the.Regis |
48be0 | 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 49 44 20 73 6f 20 74 68 61 74 20 61 20 6d 61 74 | tration.Request.ID.so.that.a.mat |
48c00 | 63 68 69 6e 67 20 50 75 72 67 65 20 52 65 71 75 65 73 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 | ching.Purge.Request.can.be.sent. |
48c20 | 69 66 20 4e 42 4d 41 20 61 64 64 72 65 73 73 20 68 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 69 | if.NBMA.address.has.changed..Thi |
48c40 | 73 20 69 73 20 74 6f 20 77 6f 72 6b 20 61 72 6f 75 6e 64 20 62 72 6f 6b 65 6e 20 49 4f 53 20 77 | s.is.to.work.around.broken.IOS.w |
48c60 | 68 69 63 68 20 72 65 71 75 69 72 65 73 20 50 75 72 67 65 20 52 65 71 75 65 73 74 20 49 44 20 74 | hich.requires.Purge.Request.ID.t |
48c80 | 6f 20 6d 61 74 63 68 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 52 65 67 69 73 74 72 61 74 69 6f | o.match.the.original.Registratio |
48ca0 | 6e 20 52 65 71 75 65 73 74 20 49 44 2e 00 49 66 20 74 68 65 20 73 79 73 74 65 6d 20 64 65 74 65 | n.Request.ID..If.the.system.dete |
48cc0 | 63 74 73 20 61 6e 20 75 6e 63 6f 6e 66 69 67 75 72 65 64 20 77 69 72 65 6c 65 73 73 20 64 65 76 | cts.an.unconfigured.wireless.dev |
48ce0 | 69 63 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 | ice,.it.will.be.automatically.ad |
48d00 | 64 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 72 65 65 2c 20 73 70 65 63 | ded.the.configuration.tree,.spec |
48d20 | 69 66 79 69 6e 67 20 61 6e 79 20 64 65 74 65 63 74 65 64 20 73 65 74 74 69 6e 67 73 20 28 66 6f | ifying.any.detected.settings.(fo |
48d40 | 72 20 65 78 61 6d 70 6c 65 2c 20 69 74 73 20 4d 41 43 20 61 64 64 72 65 73 73 29 20 61 6e 64 20 | r.example,.its.MAC.address).and. |
48d60 | 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 75 6e 20 69 6e 20 6d 6f 6e 69 74 6f 72 20 6d 6f 64 | configured.to.run.in.monitor.mod |
48d80 | 65 2e 00 49 66 20 74 68 65 20 74 61 62 6c 65 20 69 73 20 65 6d 70 74 79 20 61 6e 64 20 79 6f 75 | e..If.the.table.is.empty.and.you |
48da0 | 20 68 61 76 65 20 61 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 2c 20 69 74 20 6d 65 61 6e | .have.a.warning.message,.it.mean |
48dc0 | 73 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 20 54 6f 20 65 | s.conntrack.is.not.enabled..To.e |
48de0 | 6e 61 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 2c 20 6a 75 73 74 20 63 72 65 61 74 65 20 61 20 4e | nable.conntrack,.just.create.a.N |
48e00 | 41 54 20 6f 72 20 61 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 3a 63 66 67 63 6d 64 3a 60 | AT.or.a.firewall.rule..:cfgcmd:` |
48e20 | 73 65 74 20 66 69 72 65 77 61 6c 6c 20 73 74 61 74 65 2d 70 6f 6c 69 63 79 20 65 73 74 61 62 6c | set.firewall.state-policy.establ |
48e40 | 69 73 68 65 64 20 61 63 74 69 6f 6e 20 61 63 63 65 70 74 60 00 49 66 20 74 68 65 72 65 20 61 72 | ished.action.accept`.If.there.ar |
48e60 | 65 20 6e 6f 20 66 72 65 65 20 61 64 64 72 65 73 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 | e.no.free.addresses.but.there.ar |
48e80 | 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 | e.abandoned.IP.addresses,.the.DH |
48ea0 | 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 | CP.server.will.attempt.to.reclai |
48ec0 | 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 | m.an.abandoned.IP.address.regard |
48ee0 | 6c 65 73 73 20 6f 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 | less.of.the.value.of.abandon-lea |
48f00 | 73 65 2d 74 69 6d 65 2e 00 49 66 20 74 68 65 72 65 20 69 73 20 53 4e 41 54 20 72 75 6c 65 73 20 | se-time..If.there.is.SNAT.rules. |
48f20 | 6f 6e 20 65 74 68 31 2c 20 6e 65 65 64 20 74 6f 20 61 64 64 20 65 78 63 6c 75 64 65 20 72 75 6c | on.eth1,.need.to.add.exclude.rul |
48f40 | 65 00 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 69 6e 76 6f 6b 65 64 20 66 72 6f | e.If.this.command.is.invoked.fro |
48f60 | 6d 20 63 6f 6e 66 69 67 75 72 65 20 6d 6f 64 65 20 77 69 74 68 20 74 68 65 20 60 60 72 75 6e 60 | m.configure.mode.with.the.``run` |
48f80 | 60 20 70 72 65 66 69 78 20 74 68 65 20 6b 65 79 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c | `.prefix.the.key.is.automaticall |
48fa0 | 79 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 69 | y.installed.to.the.appropriate.i |
48fc0 | 6e 74 65 72 66 61 63 65 3a 00 49 66 20 74 68 69 73 20 69 73 20 73 65 74 20 74 68 65 20 72 65 6c | nterface:.If.this.is.set.the.rel |
48fe0 | 61 79 20 61 67 65 6e 74 20 77 69 6c 6c 20 69 6e 73 65 72 74 20 74 68 65 20 69 6e 74 65 72 66 61 | ay.agent.will.insert.the.interfa |
49000 | 63 65 20 49 44 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 61 75 74 6f 6d 61 | ce.ID..This.option.is.set.automa |
49020 | 74 69 63 61 6c 6c 79 20 69 66 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 6c 69 73 74 65 6e 69 | tically.if.more.than.one.listeni |
49040 | 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 69 6e 20 75 73 65 2e 00 49 66 20 74 68 69 | ng.interfaces.are.in.use..If.thi |
49060 | 73 20 6f 70 74 69 6f 6e 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 74 68 65 20 61 6c | s.option.is.enabled,.then.the.al |
49080 | 72 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 63 68 65 63 6b 2c 20 77 68 65 72 65 20 61 6c 72 65 | ready-selected.check,.where.alre |
490a0 | 61 64 79 20 73 65 6c 65 63 74 65 64 20 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 20 70 72 65 | ady.selected.eBGP.routes.are.pre |
490c0 | 66 65 72 72 65 64 2c 20 69 73 20 73 6b 69 70 70 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 | ferred,.is.skipped..If.this.opti |
490e0 | 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 | on.is.specified.and.is.greater.t |
49100 | 68 61 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 | han.0,.then.the.PPP.module.will. |
49120 | 73 65 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 | send.LCP.pings.of.the.echo.reque |
49140 | 73 74 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 00 49 | st.every.`<interval>`.seconds..I |
49160 | 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 | f.this.option.is.specified.and.i |
49180 | 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d | s.greater.than.0,.then.the.PPP.m |
491a0 | 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 | odule.will.send.LCP.pings.of.the |
491c0 | 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 | .echo.request.every.`<interval>` |
491e0 | 20 73 65 63 6f 6e 64 73 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 30 2a | .seconds..Default.value.is.**30* |
49200 | 2a 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 | *..If.this.option.is.unset.(defa |
49220 | 75 6c 74 29 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 | ult),.incoming.IP.directed.broad |
49240 | 63 61 73 74 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 66 6f 72 77 61 72 64 | cast.packets.will.not.be.forward |
49260 | 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 | ed..If.this.option.is.unset.(def |
49280 | 61 75 6c 74 29 2c 20 72 65 70 6c 79 20 66 6f 72 20 61 6e 79 20 6c 6f 63 61 6c 20 74 61 72 67 65 | ault),.reply.for.any.local.targe |
492a0 | 74 20 49 50 20 61 64 64 72 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 | t.IP.address,.configured.on.any. |
492c0 | 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 | interface..If.this.parameter.is. |
492e0 | 6e 6f 74 20 73 65 74 20 6f 72 20 30 2c 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 6c 69 6e 6b 20 | not.set.or.0,.an.on-demand.link. |
49300 | 77 69 6c 6c 20 6e 6f 74 20 62 65 20 74 61 6b 65 6e 20 64 6f 77 6e 20 77 68 65 6e 20 69 74 20 69 | will.not.be.taken.down.when.it.i |
49320 | 73 20 69 64 6c 65 20 61 6e 64 20 61 66 74 65 72 20 74 68 65 20 69 6e 69 74 69 61 6c 20 65 73 74 | s.idle.and.after.the.initial.est |
49340 | 61 62 6c 69 73 68 6d 65 6e 74 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 74 | ablishment.of.the.connection..It |
49360 | 20 77 69 6c 6c 20 73 74 61 79 20 75 70 20 66 6f 72 65 76 65 72 2e 00 49 66 20 74 68 69 73 20 70 | .will.stay.up.forever..If.this.p |
49380 | 61 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 73 65 74 2c 20 74 68 65 20 64 65 66 61 75 6c 74 | arameter.is.not.set,.the.default |
493a0 | 20 68 6f 6c 64 6f 66 66 20 74 69 6d 65 20 69 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 | .holdoff.time.is.30.seconds..If. |
493c0 | 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 | unset,.incoming.connections.to.t |
493e0 | 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 | he.RADIUS.server.will.use.the.ne |
49400 | 61 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 | arest.interface.address.pointing |
49420 | 20 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 | .towards.the.server.-.making.it. |
49440 | 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b | error.prone.on.e.g..OSPF.network |
49460 | 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 | s.when.a.link.fails.and.a.backup |
49480 | 20 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d | .route.is.taken..If.unset,.incom |
494a0 | 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 | ing.connections.to.the.TACACS.se |
494c0 | 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 | rver.will.use.the.nearest.interf |
494e0 | 61 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 | ace.address.pointing.towards.the |
49500 | 20 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 | .server.-.making.it.error.prone. |
49520 | 6f 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e | on.e.g..OSPF.networks.when.a.lin |
49540 | 6b 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 | k.fails.and.a.backup.route.is.ta |
49560 | 6b 65 6e 2e 00 49 66 20 79 6f 75 20 61 70 70 6c 79 20 61 20 70 61 72 61 6d 65 74 65 72 20 74 6f | ken..If.you.apply.a.parameter.to |
49580 | 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 6e 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 | .an.individual.neighbor.IP.addre |
495a0 | 73 73 2c 20 79 6f 75 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 61 63 74 69 6f 6e 20 64 65 66 69 | ss,.you.override.the.action.defi |
495c0 | 6e 65 64 20 66 6f 72 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 74 68 61 74 20 69 6e 63 6c 75 64 | ned.for.a.peer.group.that.includ |
495e0 | 65 73 20 74 68 61 74 20 49 50 20 61 64 64 72 65 73 73 2e 00 49 66 20 79 6f 75 20 61 72 65 20 61 | es.that.IP.address..If.you.are.a |
49600 | 20 68 61 63 6b 65 72 20 6f 72 20 77 61 6e 74 20 74 6f 20 74 72 79 20 6f 6e 20 79 6f 75 72 20 6f | .hacker.or.want.to.try.on.your.o |
49620 | 77 6e 20 77 65 20 73 75 70 70 6f 72 74 20 70 61 73 73 69 6e 67 20 72 61 77 20 4f 70 65 6e 56 50 | wn.we.support.passing.raw.OpenVP |
49640 | 4e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 4f 70 65 6e 56 50 4e 2e 00 49 66 20 79 6f 75 20 61 72 65 | N.options.to.OpenVPN..If.you.are |
49660 | 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 56 52 46 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e | .configuring.a.VRF.for.managemen |
49680 | 74 20 70 75 72 70 6f 73 65 73 2c 20 74 68 65 72 65 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e | t.purposes,.there.is.currently.n |
496a0 | 6f 20 77 61 79 20 74 6f 20 66 6f 72 63 65 20 73 79 73 74 65 6d 20 44 4e 53 20 74 72 61 66 66 69 | o.way.to.force.system.DNS.traffi |
496c0 | 63 20 76 69 61 20 61 20 73 70 65 63 69 66 69 63 20 56 52 46 2e 00 49 66 20 79 6f 75 20 61 72 65 | c.via.a.specific.VRF..If.you.are |
496e0 | 20 6e 65 77 20 74 6f 20 74 68 65 73 65 20 72 6f 75 74 69 6e 67 20 73 65 63 75 72 69 74 79 20 74 | .new.to.these.routing.security.t |
49700 | 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 68 65 6e 20 74 68 65 72 65 20 69 73 20 61 6e 20 60 65 78 | echnologies.then.there.is.an.`ex |
49720 | 63 65 6c 6c 65 6e 74 20 67 75 69 64 65 20 74 6f 20 52 50 4b 49 60 5f 20 62 79 20 4e 4c 6e 65 74 | cellent.guide.to.RPKI`_.by.NLnet |
49740 | 20 4c 61 62 73 20 77 68 69 63 68 20 77 69 6c 6c 20 67 65 74 20 79 6f 75 20 75 70 20 74 6f 20 73 | .Labs.which.will.get.you.up.to.s |
49760 | 70 65 65 64 20 76 65 72 79 20 71 75 69 63 6b 6c 79 2e 20 54 68 65 69 72 20 64 6f 63 75 6d 65 6e | peed.very.quickly..Their.documen |
49780 | 74 61 74 69 6f 6e 20 65 78 70 6c 61 69 6e 73 20 65 76 65 72 79 74 68 69 6e 67 20 66 72 6f 6d 20 | tation.explains.everything.from. |
497a0 | 77 68 61 74 20 52 50 4b 49 20 69 73 20 74 6f 20 64 65 70 6c 6f 79 69 6e 67 20 69 74 20 69 6e 20 | what.RPKI.is.to.deploying.it.in. |
497c0 | 70 72 6f 64 75 63 74 69 6f 6e 2e 20 49 74 20 61 6c 73 6f 20 68 61 73 20 73 6f 6d 65 20 60 68 65 | production..It.also.has.some.`he |
497e0 | 6c 70 20 61 6e 64 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 67 75 69 64 61 6e 63 65 60 5f 20 69 6e | lp.and.operational.guidance`_.in |
49800 | 63 6c 75 64 69 6e 67 20 22 57 68 61 74 20 63 61 6e 20 49 20 64 6f 20 61 62 6f 75 74 20 6d 79 20 | cluding."What.can.I.do.about.my. |
49820 | 72 6f 75 74 65 20 68 61 76 69 6e 67 20 61 6e 20 49 6e 76 61 6c 69 64 20 73 74 61 74 65 3f 22 00 | route.having.an.Invalid.state?". |
49840 | 49 66 20 79 6f 75 20 61 72 65 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 | If.you.are.responsible.for.the.g |
49860 | 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 | lobal.addresses.assigned.to.your |
49880 | 20 6e 65 74 77 6f 72 6b 2c 20 70 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 | .network,.please.make.sure.that. |
498a0 | 79 6f 75 72 20 70 72 65 66 69 78 65 73 20 68 61 76 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 | your.prefixes.have.ROAs.associat |
498c0 | 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 | ed.with.them.to.avoid.being.`not |
498e0 | 66 6f 75 6e 64 60 20 62 79 20 52 50 4b 49 2e 20 46 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 | found`.by.RPKI..For.most.ASNs.th |
49900 | 69 73 20 77 69 6c 6c 20 69 6e 76 6f 6c 76 65 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 | is.will.involve.publishing.ROAs. |
49920 | 76 69 61 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 52 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e | via.your.:abbr:`RIR.(Regional.In |
49940 | 74 65 72 6e 65 74 20 52 65 67 69 73 74 72 79 29 60 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e | ternet.Registry)`.(RIPE.NCC,.APN |
49960 | 49 43 2c 20 41 52 49 4e 2c 20 4c 41 43 4e 49 43 20 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e | IC,.ARIN,.LACNIC.or.AFRINIC),.an |
49980 | 64 20 69 73 20 73 6f 6d 65 74 68 69 6e 67 20 79 6f 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 | d.is.something.you.are.encourage |
499a0 | 64 20 74 6f 20 64 6f 20 77 68 65 6e 65 76 65 72 20 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e | d.to.do.whenever.you.plan.to.ann |
499c0 | 6f 75 6e 63 65 20 61 64 64 72 65 73 73 65 73 20 69 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 | ounce.addresses.into.the.DFZ..If |
499e0 | 20 79 6f 75 20 61 72 65 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 6c 6f | .you.are.responsible.for.the.glo |
49a00 | 62 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 20 6e | bal.addresses.assigned.to.your.n |
49a20 | 65 74 77 6f 72 6b 2c 20 70 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f | etwork,.please.make.sure.that.yo |
49a40 | 75 72 20 70 72 65 66 69 78 65 73 20 68 61 76 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 65 64 | ur.prefixes.have.ROAs.associated |
49a60 | 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 66 6f | .with.them.to.avoid.being.`notfo |
49a80 | 75 6e 64 60 20 62 79 20 52 50 4b 49 2e 20 46 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 69 73 | und`.by.RPKI..For.most.ASNs.this |
49aa0 | 20 77 69 6c 6c 20 69 6e 76 6f 6c 76 65 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 | .will.involve.publishing.ROAs.vi |
49ac0 | 61 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 52 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e 74 65 | a.your.:abbr:`RIR.(Regional.Inte |
49ae0 | 72 6e 65 74 20 52 65 67 69 73 74 72 79 29 60 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e 49 43 | rnet.Registry)`.(RIPE.NCC,.APNIC |
49b00 | 2c 20 41 52 49 4e 2c 20 4c 41 43 4e 49 43 2c 20 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e 64 | ,.ARIN,.LACNIC,.or.AFRINIC),.and |
49b20 | 20 69 73 20 73 6f 6d 65 74 68 69 6e 67 20 79 6f 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 64 | .is.something.you.are.encouraged |
49b40 | 20 74 6f 20 64 6f 20 77 68 65 6e 65 76 65 72 20 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e 6f | .to.do.whenever.you.plan.to.anno |
49b60 | 75 6e 63 65 20 61 64 64 72 65 73 73 65 73 20 69 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 20 | unce.addresses.into.the.DFZ..If. |
49b80 | 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 46 51 2d 43 6f 44 65 6c 20 65 6d 62 65 64 64 65 64 20 | you.are.using.FQ-CoDel.embedded. |
49ba0 | 69 6e 74 6f 20 53 68 61 70 65 72 5f 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 6c 61 72 67 65 20 | into.Shaper_.and.you.have.large. |
49bc0 | 72 61 74 65 73 20 28 31 30 30 4d 62 69 74 20 61 6e 64 20 61 62 6f 76 65 29 2c 20 79 6f 75 20 6d | rates.(100Mbit.and.above),.you.m |
49be0 | 61 79 20 63 6f 6e 73 69 64 65 72 20 69 6e 63 72 65 61 73 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 | ay.consider.increasing.`quantum` |
49c00 | 20 74 6f 20 38 30 30 30 20 6f 72 20 68 69 67 68 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 | .to.8000.or.higher.so.that.the.s |
49c20 | 63 68 65 64 75 6c 65 72 20 73 61 76 65 73 20 43 50 55 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 | cheduler.saves.CPU..If.you.are.u |
49c40 | 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f | sing.OSPF.as.IGP,.always.the.clo |
49c60 | 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 | sest.interface.connected.to.the. |
49c80 | 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 73 65 64 2e 20 57 69 74 68 20 56 79 4f 53 | RADIUS.server.is.used..With.VyOS |
49ca0 | 20 31 2e 32 20 79 6f 75 20 63 61 6e 20 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 | .1.2.you.can.bind.all.outgoing.R |
49cc0 | 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 | ADIUS.requests.to.a.single.sourc |
49ce0 | 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 | e.IP.e.g..the.loopback.interface |
49d00 | 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 | ..If.you.are.using.OSPF.as.IGP,. |
49d20 | 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e | always.the.closest.interface.con |
49d40 | 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 | nected.to.the.RADIUS.server.is.u |
49d60 | 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 | sed..You.can.bind.all.outgoing.R |
49d80 | 41 44 49 55 53 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 | ADIUS.requests.to.a.single.sourc |
49da0 | 65 20 49 50 20 65 2e 67 2e 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 | e.IP.e.g..the.loopback.interface |
49dc0 | 2e 00 49 66 20 79 6f 75 20 63 68 61 6e 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 65 6e 63 72 | ..If.you.change.the.default.encr |
49de0 | 79 70 74 69 6f 6e 20 61 6e 64 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 2c 20 62 | yption.and.hashing.algorithms,.b |
49e00 | 65 20 73 75 72 65 20 74 68 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 | e.sure.that.the.local.and.remote |
49e20 | 20 65 6e 64 73 20 68 61 76 65 20 6d 61 74 63 68 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .ends.have.matching.configuratio |
49e40 | 6e 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 6e 6f | ns,.otherwise.the.tunnel.will.no |
49e60 | 74 20 63 6f 6d 65 20 75 70 2e 00 49 66 20 79 6f 75 20 63 68 6f 6f 73 65 20 61 6e 79 20 61 73 20 | t.come.up..If.you.choose.any.as. |
49e80 | 74 68 65 20 6f 70 74 69 6f 6e 20 74 68 61 74 20 77 69 6c 6c 20 63 61 75 73 65 20 61 6c 6c 20 70 | the.option.that.will.cause.all.p |
49ea0 | 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 20 61 72 65 20 73 65 6e 64 69 6e 67 20 72 6f 75 74 65 73 | rotocols.that.are.sending.routes |
49ec0 | 20 74 6f 20 7a 65 62 72 61 2e 00 49 66 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 63 6c | .to.zebra..If.you.configure.a.cl |
49ee0 | 61 73 73 20 66 6f 72 20 2a 2a 56 6f 49 50 20 74 72 61 66 66 69 63 2a 2a 2c 20 64 6f 6e 27 74 20 | ass.for.**VoIP.traffic**,.don't. |
49f00 | 67 69 76 65 20 69 74 20 61 6e 79 20 2a 63 65 69 6c 69 6e 67 2a 2c 20 6f 74 68 65 72 77 69 73 65 | give.it.any.*ceiling*,.otherwise |
49f20 | 20 6e 65 77 20 56 6f 49 50 20 63 61 6c 6c 73 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 68 65 6e | .new.VoIP.calls.could.start.when |
49f40 | 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 61 6e 64 20 67 65 74 20 73 | .the.link.is.available.and.get.s |
49f60 | 75 64 64 65 6e 6c 79 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 6f 74 68 65 72 20 63 6c 61 73 73 | uddenly.dropped.when.other.class |
49f80 | 65 73 20 73 74 61 72 74 20 75 73 69 6e 67 20 74 68 65 69 72 20 61 73 73 69 67 6e 65 64 20 2a 62 | es.start.using.their.assigned.*b |
49fa0 | 61 6e 64 77 69 64 74 68 2a 20 73 68 61 72 65 2e 00 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 74 | andwidth*.share..If.you.enable.t |
49fc0 | 68 69 73 2c 20 79 6f 75 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 | his,.you.will.probably.want.to.s |
49fe0 | 65 74 20 64 69 76 65 72 73 69 74 79 2d 66 61 63 74 6f 72 20 61 6e 64 20 63 68 61 6e 6e 65 6c 20 | et.diversity-factor.and.channel. |
4a000 | 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 73 6d 61 6c | below..If.you.enter.a.value.smal |
4a020 | 6c 65 72 20 74 68 61 6e 20 36 30 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 | ler.than.60.seconds.be.aware.tha |
4a040 | 74 20 74 68 69 73 20 63 61 6e 20 61 6e 64 20 77 69 6c 6c 20 61 66 66 65 63 74 20 63 6f 6e 76 65 | t.this.can.and.will.affect.conve |
4a060 | 72 67 65 6e 63 65 20 61 74 20 73 63 61 6c 65 2e 00 49 66 20 79 6f 75 20 66 65 65 6c 20 62 65 74 | rgence.at.scale..If.you.feel.bet |
4a080 | 74 65 72 20 66 6f 72 77 61 72 64 69 6e 67 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | ter.forwarding.all.authenticatio |
4a0a0 | 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 79 6f 75 72 20 65 6e 74 65 72 70 72 69 73 65 73 20 52 | n.requests.to.your.enterprises.R |
4a0c0 | 41 44 49 55 53 20 73 65 72 76 65 72 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 62 | ADIUS.server,.use.the.commands.b |
4a0e0 | 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 20 74 6f 20 72 75 6e 20 74 68 69 73 20 | elow..If.you.happen.to.run.this. |
4a100 | 69 6e 20 61 20 76 69 72 74 75 61 6c 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 6c 69 6b 65 20 62 79 | in.a.virtual.environment.like.by |
4a120 | 20 45 56 45 2d 4e 47 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 | .EVE-NG.you.need.to.ensure.your. |
4a140 | 56 79 4f 53 20 4e 49 43 20 69 73 20 73 65 74 20 74 6f 20 75 73 65 20 74 68 65 20 65 31 30 30 30 | VyOS.NIC.is.set.to.use.the.e1000 |
4a160 | 20 64 72 69 76 65 72 2e 20 55 73 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 76 69 72 | .driver..Using.the.default.``vir |
4a180 | 74 69 6f 2d 6e 65 74 2d 70 63 69 60 60 20 6f 72 20 74 68 65 20 60 60 76 6d 78 6e 65 74 33 60 60 | tio-net-pci``.or.the.``vmxnet3`` |
4a1a0 | 20 64 72 69 76 65 72 20 77 69 6c 6c 20 6e 6f 74 20 77 6f 72 6b 2e 20 49 43 4d 50 20 6d 65 73 73 | .driver.will.not.work..ICMP.mess |
4a1c0 | 61 67 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 70 72 6f 70 65 72 6c 79 20 70 72 6f 63 65 73 | ages.will.not.be.properly.proces |
4a1e0 | 73 65 64 2e 20 54 68 65 79 20 61 72 65 20 76 69 73 69 62 6c 65 20 6f 6e 20 74 68 65 20 76 69 72 | sed..They.are.visible.on.the.vir |
4a200 | 74 75 61 6c 20 77 69 72 65 20 62 75 74 20 77 69 6c 6c 20 6e 6f 74 20 6d 61 6b 65 20 69 74 20 66 | tual.wire.but.will.not.make.it.f |
4a220 | 75 6c 6c 79 20 75 70 20 74 68 65 20 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 63 6b 2e 00 49 66 | ully.up.the.networking.stack..If |
4a240 | 20 79 6f 75 20 68 61 70 70 65 6e 20 74 6f 20 75 73 65 20 53 6f 6c 61 72 57 69 6e 64 73 20 4f 72 | .you.happen.to.use.SolarWinds.Or |
4a260 | 69 6f 6e 20 61 73 20 4e 4d 53 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 | ion.as.NMS.you.can.also.use.the. |
4a280 | 44 65 76 69 63 65 20 54 65 6d 70 6c 61 74 65 73 20 4d 61 6e 61 67 65 6d 65 6e 74 2e 20 41 20 74 | Device.Templates.Management..A.t |
4a2a0 | 65 6d 70 6c 61 74 65 20 66 6f 72 20 56 79 4f 53 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 69 | emplate.for.VyOS.can.be.easily.i |
4a2c0 | 6d 70 6f 72 74 65 64 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 65 64 20 74 6f 20 75 73 65 20 | mported..If.you.happened.to.use. |
4a2e0 | 61 20 43 69 73 63 6f 20 4e 4d 2d 31 36 41 20 2d 20 53 69 78 74 65 65 6e 20 50 6f 72 74 20 41 73 | a.Cisco.NM-16A.-.Sixteen.Port.As |
4a300 | 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 75 6c 65 20 6f 72 20 4e 4d 2d 33 32 41 20 2d 20 54 | ync.Network.Module.or.NM-32A.-.T |
4a320 | 68 69 72 74 79 2d 74 77 6f 20 50 6f 72 74 20 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 | hirty-two.Port.Async.Network.Mod |
4a340 | 75 6c 65 20 2d 20 74 68 69 73 20 69 73 20 79 6f 75 72 20 56 79 4f 53 20 72 65 70 6c 61 63 65 6d | ule.-.this.is.your.VyOS.replacem |
4a360 | 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 61 20 6c 6f 74 20 6f 66 20 69 6e 74 65 72 66 | ent..If.you.have.a.lot.of.interf |
4a380 | 61 63 65 73 2c 20 61 6e 64 2f 6f 72 20 61 20 6c 6f 74 20 6f 66 20 73 75 62 6e 65 74 73 2c 20 74 | aces,.and/or.a.lot.of.subnets,.t |
4a3a0 | 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 4f 53 50 46 20 76 69 61 20 74 68 69 73 20 63 6f 6d 6d 61 | hen.enabling.OSPF.via.this.comma |
4a3c0 | 6e 64 20 6d 61 79 20 72 65 73 75 6c 74 20 69 6e 20 61 20 73 6c 69 67 68 74 20 70 65 72 66 6f 72 | nd.may.result.in.a.slight.perfor |
4a3e0 | 6d 61 6e 63 65 20 69 6d 70 72 6f 76 65 6d 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 63 | mance.improvement..If.you.have.c |
4a400 | 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 60 49 4e 53 49 44 45 2d 4f 55 54 60 20 70 6f 6c 69 63 | onfigured.the.`INSIDE-OUT`.polic |
4a420 | 79 2c 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 61 64 64 20 61 64 64 69 74 69 6f 6e | y,.you.will.need.to.add.addition |
4a440 | 61 6c 20 72 75 6c 65 73 20 74 6f 20 70 65 72 6d 69 74 20 69 6e 62 6f 75 6e 64 20 4e 41 54 20 74 | al.rules.to.permit.inbound.NAT.t |
4a460 | 72 61 66 66 69 63 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 | raffic..If.you.have.multiple.add |
4a480 | 72 65 73 73 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 61 72 74 69 63 75 6c 61 | resses.configured.on.a.particula |
4a4a0 | 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 77 6f 75 6c 64 20 6c 69 6b 65 20 50 49 4d 20 74 | r.interface.and.would.like.PIM.t |
4a4c0 | 6f 20 75 73 65 20 61 20 73 70 65 63 69 66 69 63 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 | o.use.a.specific.source.address. |
4a4e0 | 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 | associated.with.that.interface.. |
4a500 | 49 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 61 6d 70 6c 65 20 61 6c 73 6f 20 65 67 72 65 73 | If.you.need.to.sample.also.egres |
4a520 | 73 20 74 72 61 66 66 69 63 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 | s.traffic,.you.may.want.to.confi |
4a540 | 67 75 72 65 20 65 67 72 65 73 73 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 3a 00 49 66 20 | gure.egress.flow-accounting:.If. |
4a560 | 79 6f 75 20 6f 6e 6c 79 20 77 61 6e 74 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 20 75 73 | you.only.want.to.check.if.the.us |
4a580 | 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 63 61 6e 20 61 75 | er.account.is.enabled.and.can.au |
4a5a0 | 74 68 65 6e 74 69 63 61 74 65 20 28 61 67 61 69 6e 73 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 | thenticate.(against.the.primary. |
4a5c0 | 67 72 6f 75 70 29 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 6e 69 70 70 65 64 20 69 73 20 | group).the.following.snipped.is. |
4a5e0 | 73 75 66 66 69 63 69 65 6e 74 3a 00 49 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 | sufficient:.If.you.set.a.custom. |
4a600 | 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 | RADIUS.attribute.you.must.define |
4a620 | 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 | .it.on.both.dictionaries.at.RADI |
4a640 | 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2c 20 77 68 69 63 68 20 69 73 20 74 | US.server.and.client,.which.is.t |
4a660 | 68 65 20 76 79 6f 73 20 72 6f 75 74 65 72 20 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2e 00 49 | he.vyos.router.in.our.example..I |
4a680 | 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 | f.you.set.a.custom.RADIUS.attrib |
4a6a0 | 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 | ute.you.must.define.it.on.both.d |
4a6c0 | 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 | ictionaries.at.RADIUS.server.and |
4a6e0 | 20 63 6c 69 65 6e 74 2e 00 49 66 20 79 6f 75 20 75 73 65 20 55 53 42 20 74 6f 20 73 65 72 69 61 | .client..If.you.use.USB.to.seria |
4a700 | 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 79 | l.converters.for.connecting.to.y |
4a720 | 6f 75 72 20 56 79 4f 53 20 61 70 70 6c 69 61 6e 63 65 20 70 6c 65 61 73 65 20 6e 6f 74 65 20 74 | our.VyOS.appliance.please.note.t |
4a740 | 68 61 74 20 6d 6f 73 74 20 6f 66 20 74 68 65 6d 20 75 73 65 20 73 6f 66 74 77 61 72 65 20 65 6d | hat.most.of.them.use.software.em |
4a760 | 75 6c 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2e 20 54 68 | ulation.without.flow.control..Th |
4a780 | 69 73 20 6d 65 61 6e 73 20 79 6f 75 20 73 68 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 61 | is.means.you.should.start.with.a |
4a7a0 | 20 63 6f 6d 6d 6f 6e 20 62 61 75 64 20 72 61 74 65 20 28 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 39 | .common.baud.rate.(most.likely.9 |
4a7c0 | 36 30 30 20 62 61 75 64 29 20 61 73 20 6f 74 68 65 72 77 69 73 65 20 79 6f 75 20 70 72 6f 62 61 | 600.baud).as.otherwise.you.proba |
4a7e0 | 62 6c 79 20 63 61 6e 20 6e 6f 74 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 | bly.can.not.connect.to.the.devic |
4a800 | 65 20 75 73 69 6e 67 20 68 69 67 68 20 73 70 65 65 64 20 62 61 75 64 20 72 61 74 65 73 20 61 73 | e.using.high.speed.baud.rates.as |
4a820 | 20 79 6f 75 72 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 73 69 6d 70 6c 79 20 63 61 | .your.serial.converter.simply.ca |
4a840 | 6e 20 6e 6f 74 20 70 72 6f 63 65 73 73 20 74 68 69 73 20 64 61 74 61 20 72 61 74 65 2e 00 49 66 | n.not.process.this.data.rate..If |
4a860 | 20 79 6f 75 20 75 73 65 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 | .you.use.a.self-signed.certifica |
4a880 | 74 65 2c 20 64 6f 20 6e 6f 74 20 66 6f 72 67 65 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 43 41 20 | te,.do.not.forget.to.install.CA. |
4a8a0 | 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 | on.the.client.side..If.you.want. |
4a8c0 | 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 | to.change.the.maximum.number.of. |
4a8e0 | 66 6c 6f 77 73 2c 20 77 68 69 63 68 20 61 72 65 20 74 72 61 63 6b 69 6e 67 20 73 69 6d 75 6c 74 | flows,.which.are.tracking.simult |
4a900 | 61 6e 65 6f 75 73 6c 79 2c 20 79 6f 75 20 6d 61 79 20 64 6f 20 74 68 69 73 20 77 69 74 68 20 74 | aneously,.you.may.do.this.with.t |
4a920 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 28 64 65 66 61 75 6c 74 20 38 31 39 32 29 2e 00 49 66 20 79 | his.command.(default.8192)..If.y |
4a940 | 6f 75 20 77 61 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 61 20 72 75 6c 65 20 62 75 74 20 6c 65 | ou.want.to.disable.a.rule.but.le |
4a960 | 74 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 66 20 79 6f | t.it.in.the.configuration..If.yo |
4a980 | 75 20 77 61 6e 74 20 74 6f 20 68 61 76 65 20 61 64 6d 69 6e 20 75 73 65 72 73 20 74 6f 20 61 75 | u.want.to.have.admin.users.to.au |
4a9a0 | 74 68 65 6e 74 69 63 61 74 65 20 76 69 61 20 52 41 44 49 55 53 20 69 74 20 69 73 20 65 73 73 65 | thenticate.via.RADIUS.it.is.esse |
4a9c0 | 6e 74 69 61 6c 20 74 6f 20 73 65 6e 74 20 74 68 65 20 60 60 43 69 73 63 6f 2d 41 56 2d 50 61 69 | ntial.to.sent.the.``Cisco-AV-Pai |
4a9e0 | 72 20 73 68 65 6c 6c 3a 70 72 69 76 2d 6c 76 6c 3d 31 35 60 60 20 61 74 74 72 69 62 75 74 65 2e | r.shell:priv-lvl=15``.attribute. |
4aa00 | 20 57 69 74 68 6f 75 74 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 77 69 6c 6c 20 | .Without.the.attribute.you.will. |
4aa20 | 6f 6e 6c 79 20 67 65 74 20 72 65 67 75 6c 61 72 2c 20 6e 6f 6e 20 70 72 69 76 69 6c 65 67 75 65 | only.get.regular,.non.privilegue |
4aa40 | 64 2c 20 73 79 73 74 65 6d 20 75 73 65 72 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 | d,.system.users..If.you.want.to. |
4aa60 | 75 73 65 20 65 78 69 73 74 69 6e 67 20 62 6c 61 63 6b 6c 69 73 74 73 20 79 6f 75 20 68 61 76 65 | use.existing.blacklists.you.have |
4aa80 | 20 74 6f 20 63 72 65 61 74 65 2f 64 6f 77 6e 6c 6f 61 64 20 61 20 64 61 74 61 62 61 73 65 20 66 | .to.create/download.a.database.f |
4aaa0 | 69 72 73 74 2e 20 4f 74 68 65 72 77 69 73 65 20 79 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 | irst..Otherwise.you.will.not.be. |
4aac0 | 61 62 6c 65 20 74 6f 20 63 6f 6d 6d 69 74 20 74 68 65 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 | able.to.commit.the.config.change |
4aae0 | 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 79 6f 75 72 20 72 6f 75 74 65 72 20 74 6f 20 66 6f | s..If.you.want.your.router.to.fo |
4ab00 | 72 77 61 72 64 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 61 6e 20 65 78 74 65 72 6e | rward.DHCP.requests.to.an.extern |
4ab20 | 61 6c 20 44 48 43 50 20 73 65 72 76 65 72 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 | al.DHCP.server.you.can.configure |
4ab40 | 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 61 63 74 20 61 73 20 61 20 44 48 43 50 20 72 65 6c | .the.system.to.act.as.a.DHCP.rel |
4ab60 | 61 79 20 61 67 65 6e 74 2e 20 54 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 | ay.agent..The.DHCP.relay.agent.w |
4ab80 | 6f 72 6b 73 20 77 69 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | orks.with.IPv4.and.IPv6.addresse |
4aba0 | 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 2c 20 6e 65 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 | s..If.you.want,.need,.and.should |
4abc0 | 20 75 73 65 20 6d 6f 72 65 20 61 64 76 61 6e 63 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 | .use.more.advanced.encryption.ci |
4abe0 | 70 68 65 72 73 20 28 64 65 66 61 75 6c 74 20 69 73 20 73 74 69 6c 6c 20 33 44 45 53 29 20 79 6f | phers.(default.is.still.3DES).yo |
4ac00 | 75 20 6e 65 65 64 20 74 6f 20 70 72 6f 76 69 73 69 6f 6e 20 79 6f 75 72 20 64 65 76 69 63 65 20 | u.need.to.provision.your.device. |
4ac20 | 75 73 69 6e 67 20 61 20 73 6f 2d 63 61 6c 6c 65 64 20 22 44 65 76 69 63 65 20 50 72 6f 66 69 6c | using.a.so-called."Device.Profil |
4ac40 | 65 22 2e 20 41 20 70 72 6f 66 69 6c 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 74 65 78 74 20 66 | e"..A.profile.is.a.simple.text.f |
4ac60 | 69 6c 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 58 4d 4c 20 6e 6f 64 65 73 20 77 69 74 68 20 61 20 | ile.containing.XML.nodes.with.a. |
4ac80 | 60 60 2e 6d 6f 62 69 6c 65 63 6f 6e 66 69 67 60 60 20 66 69 6c 65 20 65 78 74 65 6e 73 69 6f 6e | ``.mobileconfig``.file.extension |
4aca0 | 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 61 6e 64 20 6f 70 65 6e 65 64 20 6f 6e 20 | .that.can.be.sent.and.opened.on. |
4acc0 | 61 6e 79 20 64 65 76 69 63 65 20 66 72 6f 6d 20 61 6e 20 45 2d 4d 61 69 6c 2e 00 49 66 20 79 6f | any.device.from.an.E-Mail..If.yo |
4ace0 | 75 27 76 65 20 63 6f 6d 70 6c 65 74 65 64 20 61 6c 6c 20 74 68 65 20 61 62 6f 76 65 20 73 74 65 | u've.completed.all.the.above.ste |
4ad00 | 70 73 20 79 6f 75 20 6e 6f 20 64 6f 75 62 74 20 77 61 6e 74 20 74 6f 20 73 65 65 20 69 66 20 69 | ps.you.no.doubt.want.to.see.if.i |
4ad20 | 74 27 73 20 61 6c 6c 20 77 6f 72 6b 69 6e 67 2e 00 49 67 6e 6f 72 65 20 41 53 5f 50 41 54 48 20 | t's.all.working..Ignore.AS_PATH. |
4ad40 | 6c 65 6e 67 74 68 20 77 68 65 6e 20 73 65 6c 65 63 74 69 6e 67 20 61 20 72 6f 75 74 65 00 49 67 | length.when.selecting.a.route.Ig |
4ad60 | 6e 6f 72 65 20 56 52 52 50 20 6d 61 69 6e 20 69 6e 74 65 72 66 61 63 65 20 66 61 75 6c 74 73 00 | nore.VRRP.main.interface.faults. |
4ad80 | 49 6d 61 67 65 20 74 68 61 6e 6b 66 75 6c 6c 79 20 62 6f 72 72 6f 77 65 64 20 66 72 6f 6d 20 68 | Image.thankfully.borrowed.from.h |
4ada0 | 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 46 69 6c | ttps://en.wikipedia.org/wiki/Fil |
4adc0 | 65 3a 53 4e 4d 50 5f 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5f 70 72 69 6e 63 69 70 6c 65 73 5f | e:SNMP_communication_principles_ |
4ade0 | 64 69 61 67 72 61 6d 2e 50 4e 47 20 77 68 69 63 68 20 69 73 20 75 6e 64 65 72 20 74 68 65 20 47 | diagram.PNG.which.is.under.the.G |
4ae00 | 4e 55 20 46 72 65 65 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 4c 69 63 65 6e 73 65 00 49 6d | NU.Free.Documentation.License.Im |
4ae20 | 61 67 69 6e 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 00 49 6d 6d | agine.the.following.topology.Imm |
4ae40 | 65 64 69 61 74 65 00 49 6d 70 6f 72 74 20 66 69 6c 65 73 20 74 6f 20 50 4b 49 20 66 6f 72 6d 61 | ediate.Import.files.to.PKI.forma |
4ae60 | 74 00 49 6d 70 6f 72 74 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 | t.Import.the.CAs.private.key.por |
4ae80 | 74 69 6f 6e 20 74 6f 20 74 68 65 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 | tion.to.the.CLI..This.should.nev |
4aea0 | 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 | er.leave.the.system.as.it.is.use |
4aec0 | 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e 20 54 68 65 20 6b 65 79 20 69 | d.to.decrypt.the.data..The.key.i |
4aee0 | 73 20 72 65 71 75 69 72 65 64 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f | s.required.if.you.use.VyOS.as.yo |
4af00 | 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 2e 00 49 6d 70 6f 72 74 | ur.certificate.generator..Import |
4af20 | 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 73 74 6f 72 65 | .the.OpenVPN.shared.secret.store |
4af40 | 64 20 69 6e 20 66 69 6c 65 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 | d.in.file.to.the.VyOS.CLI..Impor |
4af60 | 74 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 20 | t.the.certificate.from.the.file. |
4af80 | 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 70 72 69 76 61 74 65 20 | to.VyOS.CLI..Import.the.private. |
4afa0 | 6b 65 79 20 6f 66 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 56 79 | key.of.the.certificate.to.the.Vy |
4afc0 | 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 | OS.CLI..This.should.never.leave. |
4afe0 | 74 68 65 20 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 | the.system.as.it.is.used.to.decr |
4b000 | 79 70 74 20 74 68 65 20 64 61 74 61 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 70 75 62 6c 69 63 20 | ypt.the.data..Import.the.public. |
4b020 | 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 | CA.certificate.from.the.defined. |
4b040 | 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 65 64 20 70 72 65 66 69 | file.to.VyOS.CLI..Imported.prefi |
4b060 | 78 65 73 20 64 75 72 69 6e 67 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 61 79 20 68 61 | xes.during.the.validation.may.ha |
4b080 | 76 65 20 76 61 6c 75 65 73 3a 00 49 6e 20 3a 72 66 63 3a 60 33 30 36 39 60 20 69 74 20 69 73 20 | ve.values:.In.:rfc:`3069`.it.is. |
4b0a0 | 63 61 6c 6c 65 64 20 56 4c 41 4e 20 41 67 67 72 65 67 61 74 69 6f 6e 00 49 6e 20 3a 76 79 74 61 | called.VLAN.Aggregation.In.:vyta |
4b0c0 | 73 6b 3a 60 54 32 31 39 39 60 20 74 68 65 20 73 79 6e 74 61 78 20 6f 66 20 74 68 65 20 7a 6f 6e | sk:`T2199`.the.syntax.of.the.zon |
4b0e0 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 65 | e.configuration.was.changed..The |
4b100 | 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 76 65 64 20 66 72 6f 6d 20 60 | .zone.configuration.moved.from.` |
4b120 | 60 7a 6f 6e 65 2d 70 6f 6c 69 63 79 20 7a 6f 6e 65 20 3c 6e 61 6d 65 3e 60 60 20 74 6f 20 60 60 | `zone-policy.zone.<name>``.to.`` |
4b140 | 66 69 72 65 77 61 6c 6c 20 7a 6f 6e 65 20 3c 6e 61 6d 65 3e 60 60 2e 00 49 6e 20 49 6e 74 65 72 | firewall.zone.<name>``..In.Inter |
4b160 | 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 20 36 20 28 49 50 76 36 29 20 6e 65 | net.Protocol.Version.6.(IPv6).ne |
4b180 | 74 77 6f 72 6b 73 2c 20 74 68 65 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 41 52 50 | tworks,.the.functionality.of.ARP |
4b1a0 | 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 | .is.provided.by.the.Neighbor.Dis |
4b1c0 | 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 28 4e 44 50 29 2e 00 49 6e 20 50 72 69 6f 72 69 | covery.Protocol.(NDP)..In.Priori |
4b1e0 | 74 79 20 51 75 65 75 65 20 77 65 20 64 6f 20 6e 6f 74 20 64 65 66 69 6e 65 20 63 6c 61 73 65 73 | ty.Queue.we.do.not.define.clases |
4b200 | 20 77 69 74 68 20 61 20 6d 65 61 6e 69 6e 67 6c 65 73 73 20 63 6c 61 73 73 20 49 44 20 6e 75 6d | .with.a.meaningless.class.ID.num |
4b220 | 62 65 72 20 62 75 74 20 77 69 74 68 20 61 20 63 6c 61 73 73 20 70 72 69 6f 72 69 74 79 20 6e 75 | ber.but.with.a.class.priority.nu |
4b240 | 6d 62 65 72 20 28 31 2d 37 29 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 | mber.(1-7)..The.lower.the.number |
4b260 | 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 00 49 6e 20 56 79 | ,.the.higher.the.priority..In.Vy |
4b280 | 4f 53 20 74 68 65 20 74 65 72 6d 73 20 60 60 76 69 66 2d 73 60 60 20 61 6e 64 20 60 60 76 69 66 | OS.the.terms.``vif-s``.and.``vif |
4b2a0 | 2d 63 60 60 20 73 74 61 6e 64 20 66 6f 72 20 74 68 65 20 65 74 68 65 72 74 79 70 65 20 74 61 67 | -c``.stand.for.the.ethertype.tag |
4b2c0 | 73 20 74 68 61 74 20 61 72 65 20 75 73 65 64 2e 00 49 6e 20 56 79 4f 53 2c 20 45 53 50 20 61 74 | s.that.are.used..In.VyOS,.ESP.at |
4b2e0 | 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 45 | tributes.are.specified.through.E |
4b300 | 53 50 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 | SP.groups..Multiple.proposals.ca |
4b320 | 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 | n.be.specified.in.a.single.group |
4b340 | 2e 00 49 6e 20 56 79 4f 53 2c 20 49 4b 45 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 | ..In.VyOS,.IKE.attributes.are.sp |
4b360 | 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 49 4b 45 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 | ecified.through.IKE.groups..Mult |
4b380 | 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 | iple.proposals.can.be.specified. |
4b3a0 | 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 61 20 63 6c | in.a.single.group..In.VyOS,.a.cl |
4b3c0 | 61 73 73 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 6e 75 6d 62 65 72 20 79 6f | ass.is.identified.by.a.number.yo |
4b3e0 | 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 69 74 | u.can.choose.when.configuring.it |
4b400 | 2e 00 49 6e 20 61 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 | ..In.a.minimal.configuration,.th |
4b420 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 3a 00 49 6e | e.following.must.be.provided:.In |
4b440 | 20 61 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 68 65 61 64 65 72 20 63 6f 6e 74 65 78 74 2c | .a.multiple.VLAN.header.context, |
4b460 | 20 6f 75 74 20 6f 66 20 63 6f 6e 76 65 6e 69 65 6e 63 65 20 74 68 65 20 74 65 72 6d 20 22 56 4c | .out.of.convenience.the.term."VL |
4b480 | 41 4e 20 74 61 67 22 20 6f 72 20 6a 75 73 74 20 22 74 61 67 22 20 66 6f 72 20 73 68 6f 72 74 20 | AN.tag".or.just."tag".for.short. |
4b4a0 | 69 73 20 6f 66 74 65 6e 20 75 73 65 64 20 69 6e 20 70 6c 61 63 65 20 6f 66 20 22 38 30 32 2e 31 | is.often.used.in.place.of."802.1 |
4b4c0 | 71 5f 20 56 4c 41 4e 20 68 65 61 64 65 72 22 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c | q_.VLAN.header"..QinQ.allows.mul |
4b4e0 | 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 73 20 69 6e 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 | tiple.VLAN.tags.in.an.Ethernet.f |
4b500 | 72 61 6d 65 3b 20 74 6f 67 65 74 68 65 72 20 74 68 65 73 65 20 74 61 67 73 20 63 6f 6e 73 74 69 | rame;.together.these.tags.consti |
4b520 | 74 75 74 65 20 61 20 74 61 67 20 73 74 61 63 6b 2e 20 57 68 65 6e 20 75 73 65 64 20 69 6e 20 74 | tute.a.tag.stack..When.used.in.t |
4b540 | 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2c | he.context.of.an.Ethernet.frame, |
4b560 | 20 61 20 51 69 6e 51 20 66 72 61 6d 65 20 69 73 20 61 20 66 72 61 6d 65 20 74 68 61 74 20 68 61 | .a.QinQ.frame.is.a.frame.that.ha |
4b580 | 73 20 32 20 56 4c 41 4e 20 38 30 32 2e 31 71 5f 20 68 65 61 64 65 72 73 20 28 64 6f 75 62 6c 65 | s.2.VLAN.802.1q_.headers.(double |
4b5a0 | 2d 74 61 67 67 65 64 29 2e 00 49 6e 20 61 20 6e 75 74 73 68 65 6c 6c 2c 20 74 68 65 20 63 75 72 | -tagged)..In.a.nutshell,.the.cur |
4b5c0 | 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 70 72 6f 76 69 64 65 73 20 74 68 65 | rent.implementation.provides.the |
4b5e0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 65 61 74 75 72 65 73 3a 00 49 6e 20 61 64 64 69 74 69 6f 6e | .following.features:.In.addition |
4b600 | 20 74 6f 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e | .to.:abbr:`RADIUS.(Remote.Authen |
4b620 | 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 2c | tication.Dial-In.User.Service)`, |
4b640 | 20 3a 61 62 62 72 3a 60 54 41 43 41 43 53 20 28 54 65 72 6d 69 6e 61 6c 20 41 63 63 65 73 73 20 | .:abbr:`TACACS.(Terminal.Access. |
4b660 | 43 6f 6e 74 72 6f 6c 6c 65 72 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 53 79 73 74 65 6d | Controller.Access.Control.System |
4b680 | 29 60 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 6c 61 72 67 65 20 64 65 | )`.can.also.be.found.in.large.de |
4b6a0 | 70 6c 6f 79 6d 65 6e 74 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 64 69 73 70 6c 61 | ployments..In.addition.to.displa |
4b6c0 | 79 69 6e 67 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | ying.flow.accounting.information |
4b6e0 | 20 6c 6f 63 61 6c 6c 79 2c 20 6f 6e 65 20 63 61 6e 20 61 6c 73 6f 20 65 78 70 6f 72 74 65 64 20 | .locally,.one.can.also.exported. |
4b700 | 74 68 65 6d 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 73 65 72 76 65 72 2e 00 49 6e 20 | them.to.a.collection.server..In. |
4b720 | 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 74 | addition.to.the.command.above,.t |
4b740 | 68 65 20 6f 75 74 70 75 74 20 69 73 20 69 6e 20 61 20 66 6f 72 6d 61 74 20 77 68 69 63 68 20 63 | he.output.is.in.a.format.which.c |
4b760 | 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 72 65 63 74 6c 79 20 69 6d 70 6f 72 74 20 74 68 | an.be.used.to.directly.import.th |
4b780 | 65 20 6b 65 79 20 69 6e 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 62 79 20 73 69 6d 70 6c | e.key.into.the.VyOS.CLI.by.simpl |
4b7a0 | 79 20 63 6f 70 79 2d 70 61 73 74 69 6e 67 20 74 68 65 20 6f 75 74 70 75 74 20 66 72 6f 6d 20 6f | y.copy-pasting.the.output.from.o |
4b7c0 | 70 2d 6d 6f 64 65 20 69 6e 74 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 | p-mode.into.configuration.mode.. |
4b7e0 | 49 6e 20 61 64 64 69 74 69 6f 6e 20 77 65 20 73 65 74 75 70 20 49 50 76 36 20 3a 61 62 62 72 3a | In.addition.we.setup.IPv6.:abbr: |
4b800 | 60 52 41 20 28 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 74 6f 20 | `RA.(Router.Advertisements)`.to. |
4b820 | 6d 61 6b 65 20 74 68 65 20 70 72 65 66 69 78 20 6b 6e 6f 77 6e 20 6f 6e 20 74 68 65 20 65 74 68 | make.the.prefix.known.on.the.eth |
4b840 | 30 20 6c 69 6e 6b 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f | 0.link..In.addition.you.can.also |
4b860 | 20 64 69 73 61 62 6c 65 20 74 68 65 20 77 68 6f 6c 65 20 73 65 72 76 69 63 65 20 77 69 74 68 6f | .disable.the.whole.service.witho |
4b880 | 75 74 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 | ut.the.need.to.remove.it.from.th |
4b8a0 | 65 20 63 75 72 72 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 61 64 64 69 | e.current.configuration..In.addi |
4b8c0 | 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 70 65 63 69 66 69 79 20 74 68 65 20 49 50 20 61 64 | tion.you.will.specifiy.the.IP.ad |
4b8e0 | 64 72 65 73 73 20 6f 72 20 46 51 44 4e 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 | dress.or.FQDN.for.the.client.whe |
4b900 | 72 65 20 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 | re.it.will.connect.to..The.addre |
4b920 | 73 73 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 | ss.parameter.can.be.used.up.to.t |
4b940 | 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 | wo.times.and.is.used.to.assign.t |
4b960 | 68 65 20 63 6c 69 65 6e 74 73 20 73 70 65 63 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f | he.clients.specific.IPv4.(/32).o |
4b980 | 72 20 49 50 76 36 20 28 2f 31 32 38 29 20 61 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 | r.IPv6.(/128).address..In.additi |
4b9a0 | 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 70 65 63 69 66 79 20 74 68 65 20 49 50 20 61 64 64 72 65 | on.you.will.specify.the.IP.addre |
4b9c0 | 73 73 20 6f 72 20 46 51 44 4e 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 | ss.or.FQDN.for.the.client.where. |
4b9e0 | 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 | it.will.connect.to..The.address. |
4ba00 | 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 | parameter.can.be.used.up.to.two. |
4ba20 | 74 69 6d 65 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 | times.and.is.used.to.assign.the. |
4ba40 | 63 6c 69 65 6e 74 73 20 73 70 65 63 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 | clients.specific.IPv4.(/32).or.I |
4ba60 | 50 76 36 20 28 2f 31 32 38 29 20 61 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 2c | Pv6.(/128).address..In.addition, |
4ba80 | 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 6d 61 6e 79 20 6f 74 68 65 72 20 70 61 72 61 | .you.can.specify.many.other.para |
4baa0 | 6d 65 74 65 72 73 20 74 6f 20 67 65 74 20 42 47 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 49 | meters.to.get.BGP.information:.I |
4bac0 | 6e 20 61 6e 20 2a 2a 61 64 64 72 65 73 73 20 67 72 6f 75 70 2a 2a 20 61 20 73 69 6e 67 6c 65 20 | n.an.**address.group**.a.single. |
4bae0 | 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 | IP.address.or.IP.address.ranges. |
4bb00 | 61 72 65 20 64 65 66 69 6e 65 64 2e 00 49 6e 20 62 6f 74 68 20 63 61 73 65 73 2c 20 77 65 20 77 | are.defined..In.both.cases,.we.w |
4bb20 | 69 6c 6c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 3a 00 | ill.use.the.following.settings:. |
4bb40 | 49 6e 20 63 61 73 65 20 6f 66 20 70 65 65 72 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 | In.case.of.peer-peer.relationshi |
4bb60 | 70 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 | p.routes.can.be.received.only.if |
4bb80 | 20 4f 54 43 20 76 61 6c 75 65 20 69 73 20 65 71 75 61 6c 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 | .OTC.value.is.equal.to.your.neig |
4bba0 | 68 62 6f 72 20 41 53 20 6e 75 6d 62 65 72 2e 00 49 6e 20 63 61 73 65 2c 20 69 66 20 79 6f 75 20 | hbor.AS.number..In.case,.if.you. |
4bbc0 | 6e 65 65 64 20 74 6f 20 63 61 74 63 68 20 73 6f 6d 65 20 6c 6f 67 73 20 66 72 6f 6d 20 66 6c 6f | need.to.catch.some.logs.from.flo |
4bbe0 | 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 64 61 65 6d 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e | w-accounting.daemon,.you.may.con |
4bc00 | 66 69 67 75 72 65 20 6c 6f 67 67 69 6e 67 20 66 61 63 69 6c 69 74 79 3a 00 49 6e 20 63 6f 6e 74 | figure.logging.facility:.In.cont |
4bc20 | 72 61 73 74 20 74 6f 20 73 69 6d 70 6c 65 20 52 45 44 2c 20 56 79 4f 53 27 20 52 61 6e 64 6f 6d | rast.to.simple.RED,.VyOS'.Random |
4bc40 | 2d 44 65 74 65 63 74 20 75 73 65 73 20 61 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f | -Detect.uses.a.Generalized.Rando |
4bc60 | 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 74 68 61 74 20 70 72 6f 76 69 | m.Early.Detect.policy.that.provi |
4bc80 | 64 65 73 20 64 69 66 66 65 72 65 6e 74 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 62 61 73 | des.different.virtual.queues.bas |
4bca0 | 65 64 20 6f 6e 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 76 61 6c 75 65 20 73 6f | ed.on.the.IP.Precedence.value.so |
4bcc0 | 20 74 68 61 74 20 73 6f 6d 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 63 61 6e 20 64 72 | .that.some.virtual.queues.can.dr |
4bce0 | 6f 70 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 20 74 68 61 6e 20 6f 74 68 65 72 73 2e 00 49 6e 20 | op.more.packets.than.others..In. |
4bd00 | 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 2c 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 | failover.mode,.one.interface.is. |
4bd20 | 73 65 74 20 74 6f 20 62 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 | set.to.be.the.primary.interface. |
4bd40 | 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 73 65 63 6f 6e 64 61 | and.other.interfaces.are.seconda |
4bd60 | 72 79 20 6f 72 20 73 70 61 72 65 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 62 61 6c 61 6e 63 69 6e | ry.or.spare..Instead.of.balancin |
4bd80 | 67 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 61 6c 6c 20 68 65 61 6c 74 68 79 20 69 6e 74 | g.traffic.across.all.healthy.int |
4bda0 | 65 72 66 61 63 65 73 2c 20 6f 6e 6c 79 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 | erfaces,.only.the.primary.interf |
4bdc0 | 61 63 65 20 69 73 20 75 73 65 64 20 61 6e 64 20 69 6e 20 63 61 73 65 20 6f 66 20 66 61 69 6c 75 | ace.is.used.and.in.case.of.failu |
4bde0 | 72 65 2c 20 61 20 73 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 73 65 6c 65 63 74 | re,.a.secondary.interface.select |
4be00 | 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f 6c 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 69 6e | ed.from.the.pool.of.available.in |
4be20 | 74 65 72 66 61 63 65 73 20 74 61 6b 65 73 20 6f 76 65 72 2e 20 54 68 65 20 70 72 69 6d 61 72 79 | terfaces.takes.over..The.primary |
4be40 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 | .interface.is.selected.based.on. |
4be60 | 69 74 73 20 77 65 69 67 68 74 20 61 6e 64 20 68 65 61 6c 74 68 2c 20 6f 74 68 65 72 73 20 62 65 | its.weight.and.health,.others.be |
4be80 | 63 6f 6d 65 20 73 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 73 2e 20 53 65 63 6f 6e | come.secondary.interfaces..Secon |
4bea0 | 64 61 72 79 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 61 20 66 | dary.interfaces.to.take.over.a.f |
4bec0 | 61 69 6c 65 64 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 63 68 6f 73 | ailed.primary.interface.are.chos |
4bee0 | 65 6e 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 20 69 6e 74 65 | en.from.the.load.balancer's.inte |
4bf00 | 72 66 61 63 65 20 70 6f 6f 6c 2c 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 77 | rface.pool,.depending.on.their.w |
4bf20 | 65 69 67 68 74 20 61 6e 64 20 68 65 61 6c 74 68 2e 20 49 6e 74 65 72 66 61 63 65 20 72 6f 6c 65 | eight.and.health..Interface.role |
4bf40 | 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 | s.can.also.be.selected.based.on. |
4bf60 | 72 75 6c 65 20 6f 72 64 65 72 20 62 79 20 69 6e 63 6c 75 64 69 6e 67 20 69 6e 74 65 72 66 61 63 | rule.order.by.including.interfac |
4bf80 | 65 73 20 69 6e 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 73 20 61 6e 64 20 6f 72 64 65 72 69 | es.in.balancing.rules.and.orderi |
4bfa0 | 6e 67 20 74 68 6f 73 65 20 72 75 6c 65 73 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 54 6f 20 70 | ng.those.rules.accordingly..To.p |
4bfc0 | 75 74 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 20 66 61 69 6c 6f 76 65 72 | ut.the.load.balancer.in.failover |
4bfe0 | 20 6d 6f 64 65 2c 20 63 72 65 61 74 65 20 61 20 66 61 69 6c 6f 76 65 72 20 72 75 6c 65 3a 00 49 | .mode,.create.a.failover.rule:.I |
4c000 | 6e 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 72 75 6c 65 73 2c 20 74 68 65 20 61 63 74 | n.firewall.bridge.rules,.the.act |
4c020 | 69 6f 6e 20 63 61 6e 20 62 65 3a 00 49 6e 20 67 65 6e 65 72 61 6c 2c 20 4f 53 50 46 20 70 72 6f | ion.can.be:.In.general,.OSPF.pro |
4c040 | 74 6f 63 6f 6c 20 72 65 71 75 69 72 65 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 28 | tocol.requires.a.backbone.area.( |
4c060 | 61 72 65 61 20 30 29 20 74 6f 20 62 65 20 63 6f 68 65 72 65 6e 74 20 61 6e 64 20 66 75 6c 6c 79 | area.0).to.be.coherent.and.fully |
4c080 | 20 63 6f 6e 6e 65 63 74 65 64 2e 20 49 2e 65 2e 20 61 6e 79 20 62 61 63 6b 62 6f 6e 65 20 61 72 | .connected..I.e..any.backbone.ar |
4c0a0 | 65 61 20 72 6f 75 74 65 72 20 6d 75 73 74 20 68 61 76 65 20 61 20 72 6f 75 74 65 20 74 6f 20 61 | ea.router.must.have.a.route.to.a |
4c0c0 | 6e 79 20 6f 74 68 65 72 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 2e 20 4d | ny.other.backbone.area.router..M |
4c0e0 | 6f 72 65 6f 76 65 72 2c 20 65 76 65 72 79 20 41 42 52 20 6d 75 73 74 20 68 61 76 65 20 61 20 6c | oreover,.every.ABR.must.have.a.l |
4c100 | 69 6e 6b 20 74 6f 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 48 6f 77 65 76 65 72 2c 20 69 | ink.to.backbone.area..However,.i |
4c120 | 74 20 69 73 20 6e 6f 74 20 61 6c 77 61 79 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 68 61 76 65 | t.is.not.always.possible.to.have |
4c140 | 20 61 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 | .a.physical.link.to.a.backbone.a |
4c160 | 72 65 61 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 41 42 | rea..In.this.case.between.two.AB |
4c180 | 52 20 28 6f 6e 65 20 6f 66 20 74 68 65 6d 20 68 61 73 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 | R.(one.of.them.has.a.link.to.the |
4c1a0 | 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 29 20 69 6e 20 74 68 65 20 61 72 65 61 20 28 6e 6f 74 | .backbone.area).in.the.area.(not |
4c1c0 | 20 73 74 75 62 20 61 72 65 61 29 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 6f 72 | .stub.area).a.virtual.link.is.or |
4c1e0 | 67 61 6e 69 7a 65 64 2e 00 49 6e 20 6c 61 72 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 69 74 | ganized..In.large.deployments.it |
4c200 | 20 69 73 20 6e 6f 74 20 72 65 61 73 6f 6e 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | .is.not.reasonable.to.configure. |
4c220 | 65 61 63 68 20 75 73 65 72 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 6f 6e 20 65 76 65 72 79 20 | each.user.individually.on.every. |
4c240 | 73 79 73 74 65 6d 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 75 73 69 6e 67 20 3a 61 62 62 | system..VyOS.supports.using.:abb |
4c260 | 72 3a 60 52 41 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | r:`RADIUS.(Remote.Authentication |
4c280 | 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 20 73 65 72 76 65 72 73 20 | .Dial-In.User.Service)`.servers. |
4c2a0 | 61 73 20 62 61 63 6b 65 6e 64 20 66 6f 72 20 75 73 65 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 | as.backend.for.user.authenticati |
4c2c0 | 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 | on..In.order.for.flow.accounting |
4c2e0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 61 6e 64 | .information.to.be.collected.and |
4c300 | 20 64 69 73 70 6c 61 79 65 64 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 | .displayed.for.an.interface,.the |
4c320 | 20 69 6e 74 65 72 66 61 63 65 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f | .interface.must.be.configured.fo |
4c340 | 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 | r.flow.accounting..In.order.for. |
4c360 | 74 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 | the.primary.and.the.secondary.DH |
4c380 | 43 50 20 73 65 72 76 65 72 20 74 6f 20 6b 65 65 70 20 74 68 65 69 72 20 6c 65 61 73 65 20 74 61 | CP.server.to.keep.their.lease.ta |
4c3a0 | 62 6c 65 73 20 69 6e 20 73 79 6e 63 2c 20 74 68 65 79 20 6d 75 73 74 20 62 65 20 61 62 6c 65 20 | bles.in.sync,.they.must.be.able. |
4c3c0 | 74 6f 20 72 65 61 63 68 20 65 61 63 68 20 6f 74 68 65 72 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 | to.reach.each.other.on.TCP.port. |
4c3e0 | 36 34 37 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 | 647..If.you.have.firewall.rules. |
4c400 | 69 6e 20 65 66 66 65 63 74 2c 20 61 64 6a 75 73 74 20 74 68 65 6d 20 61 63 63 6f 72 64 69 6e 67 | in.effect,.adjust.them.according |
4c420 | 6c 79 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 75 | ly..In.order.for.the.system.to.u |
4c440 | 73 65 20 61 6e 64 20 63 6f 6d 70 6c 65 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 | se.and.complete.unqualified.host |
4c460 | 20 6e 61 6d 65 73 2c 20 61 20 6c 69 73 74 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 77 68 | .names,.a.list.can.be.defined.wh |
4c480 | 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 64 6f 6d 61 69 6e 20 73 65 61 72 | ich.will.be.used.for.domain.sear |
4c4a0 | 63 68 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 4c 44 50 20 | ches..In.order.to.allow.for.LDP. |
4c4c0 | 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 65 78 63 68 61 6e 67 65 20 | on.the.local.router.to.exchange. |
4c4e0 | 6c 61 62 65 6c 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 77 69 74 68 20 6f 74 68 65 72 20 | label.advertisements.with.other. |
4c500 | 72 6f 75 74 65 72 73 2c 20 61 20 54 43 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 | routers,.a.TCP.session.will.be.e |
4c520 | 73 74 61 62 6c 69 73 68 65 64 20 62 65 74 77 65 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 | stablished.between.automatically |
4c540 | 20 64 69 73 63 6f 76 65 72 65 64 20 61 6e 64 20 73 74 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 | .discovered.and.statically.assig |
4c560 | 6e 65 64 20 72 6f 75 74 65 72 73 2e 20 4c 44 50 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 | ned.routers..LDP.will.try.to.est |
4c580 | 61 62 6c 69 73 68 20 61 20 54 43 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 2a 2a 74 72 | ablish.a.TCP.session.to.the.**tr |
4c5a0 | 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 2a 2a 20 6f 66 20 6f 74 68 65 72 20 72 6f 75 74 65 | ansport.address**.of.other.route |
4c5c0 | 72 73 2e 20 54 68 65 72 65 66 6f 72 65 20 66 6f 72 20 4c 44 50 20 74 6f 20 66 75 6e 63 74 69 6f | rs..Therefore.for.LDP.to.functio |
4c5e0 | 6e 20 70 72 6f 70 65 72 6c 79 20 70 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 | n.properly.please.make.sure.the. |
4c600 | 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 | transport.address.is.shown.in.th |
4c620 | 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 72 65 61 63 68 61 62 6c 65 20 74 6f | e.routing.table.and.reachable.to |
4c640 | 20 74 72 61 66 66 69 63 20 61 74 20 61 6c 6c 20 74 69 6d 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 | .traffic.at.all.times..In.order. |
4c660 | 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e | to.control.and.modify.routing.in |
4c680 | 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 | formation.that.is.exchanged.betw |
4c6a0 | 65 65 6e 20 70 65 65 72 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 72 6f 75 74 65 2d 6d 61 70 2c | een.peers.you.can.use.route-map, |
4c6c0 | 20 66 69 6c 74 65 72 2d 6c 69 73 74 2c 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 | .filter-list,.prefix-list,.distr |
4c6e0 | 69 62 75 74 65 2d 6c 69 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 64 65 66 69 6e 65 20 77 | ibute-list..In.order.to.define.w |
4c700 | 68 69 63 68 20 74 72 61 66 66 69 63 20 67 6f 65 73 20 69 6e 74 6f 20 77 68 69 63 68 20 63 6c 61 | hich.traffic.goes.into.which.cla |
4c720 | 73 73 2c 20 79 6f 75 20 64 65 66 69 6e 65 20 66 69 6c 74 65 72 73 20 28 74 68 61 74 20 69 73 2c | ss,.you.define.filters.(that.is, |
4c740 | 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 29 2e 20 50 61 63 6b 65 74 73 | .the.matching.criteria)..Packets |
4c760 | 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 | .go.through.these.matching.rules |
4c780 | 20 28 61 73 20 69 6e 20 74 68 65 20 72 75 6c 65 73 20 6f 66 20 61 20 66 69 72 65 77 61 6c 6c 29 | .(as.in.the.rules.of.a.firewall) |
4c7a0 | 20 61 6e 64 2c 20 69 66 20 61 20 70 61 63 6b 65 74 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 | .and,.if.a.packet.matches.the.fi |
4c7c0 | 6c 74 65 72 2c 20 69 74 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 61 74 20 63 6c 61 | lter,.it.is.assigned.to.that.cla |
4c7e0 | 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 56 79 4f 53 20 54 72 61 66 66 69 | ss..In.order.to.have.VyOS.Traffi |
4c800 | 63 20 43 6f 6e 74 72 6f 6c 20 77 6f 72 6b 69 6e 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 66 6f | c.Control.working.you.need.to.fo |
4c820 | 6c 6c 6f 77 20 32 20 73 74 65 70 73 3a 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 66 | llow.2.steps:.In.order.to.have.f |
4c840 | 75 6c 6c 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 61 6b 65 20 75 73 65 20 6f 66 20 6d 75 6c 74 | ull.control.and.make.use.of.mult |
4c860 | 69 70 6c 65 20 73 74 61 74 69 63 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 2c | iple.static.public.IP.addresses, |
4c880 | 20 79 6f 75 72 20 56 79 4f 53 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 69 6e 69 74 69 61 74 65 | .your.VyOS.will.have.to.initiate |
4c8a0 | 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 6f | .the.PPPoE.connection.and.contro |
4c8c0 | 6c 20 69 74 2e 20 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 69 73 20 6d 65 74 68 6f 64 20 74 | l.it..In.order.for.this.method.t |
4c8e0 | 6f 20 77 6f 72 6b 2c 20 79 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 66 69 67 75 72 65 20 | o.work,.you.will.have.to.figure. |
4c900 | 6f 75 74 20 68 6f 77 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 | out.how.to.make.your.DSL.Modem/R |
4c920 | 6f 75 74 65 72 20 73 77 69 74 63 68 20 69 6e 74 6f 20 61 20 42 72 69 64 67 65 64 20 4d 6f 64 65 | outer.switch.into.a.Bridged.Mode |
4c940 | 20 73 6f 20 69 74 20 6f 6e 6c 79 20 61 63 74 73 20 61 73 20 61 20 44 53 4c 20 54 72 61 6e 73 63 | .so.it.only.acts.as.a.DSL.Transc |
4c960 | 65 69 76 65 72 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 62 65 74 77 65 65 6e 20 | eiver.device.to.connect.between. |
4c980 | 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 69 6e 6b 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 61 | the.Ethernet.link.of.your.VyOS.a |
4c9a0 | 6e 64 20 74 68 65 20 70 68 6f 6e 65 20 63 61 62 6c 65 2e 20 4f 6e 63 65 20 79 6f 75 72 20 44 53 | nd.the.phone.cable..Once.your.DS |
4c9c0 | 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 69 73 20 69 6e 20 42 72 69 64 67 65 20 4d 6f 64 65 2c | L.Transceiver.is.in.Bridge.Mode, |
4c9e0 | 20 79 6f 75 20 73 68 6f 75 6c 64 20 67 65 74 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 20 66 72 | .you.should.get.no.IP.address.fr |
4ca00 | 6f 6d 20 69 74 2e 20 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 63 6f 6e 6e | om.it..Please.make.sure.you.conn |
4ca20 | 65 63 74 20 74 6f 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 50 6f 72 74 20 31 20 69 66 20 79 6f | ect.to.the.Ethernet.Port.1.if.yo |
4ca40 | 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 68 61 73 20 61 20 73 77 69 74 63 68 2c | ur.DSL.Transceiver.has.a.switch, |
4ca60 | 20 61 73 20 73 6f 6d 65 20 6f 66 20 74 68 65 6d 20 6f 6e 6c 79 20 77 6f 72 6b 20 74 68 69 73 20 | .as.some.of.them.only.work.this. |
4ca80 | 77 61 79 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 70 20 73 70 65 63 69 66 69 63 20 49 50 | way..In.order.to.map.specific.IP |
4caa0 | 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 73 20 73 | v6.addresses.to.specific.hosts.s |
4cac0 | 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 20 54 | tatic.mappings.can.be.created..T |
4cae0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 65 78 70 6c 61 69 6e 73 20 74 68 | he.following.example.explains.th |
4cb00 | 65 20 70 72 6f 63 65 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 | e.process..In.order.to.minimize. |
4cb20 | 74 68 65 20 66 6c 6f 6f 64 69 6e 67 20 6f 66 20 41 52 50 20 61 6e 64 20 4e 44 20 6d 65 73 73 61 | the.flooding.of.ARP.and.ND.messa |
4cb40 | 67 65 73 20 69 6e 20 74 68 65 20 56 58 4c 41 4e 20 6e 65 74 77 6f 72 6b 2c 20 45 56 50 4e 20 69 | ges.in.the.VXLAN.network,.EVPN.i |
4cb60 | 6e 63 6c 75 64 65 73 20 70 72 6f 76 69 73 69 6f 6e 73 20 3a 72 66 63 3a 60 37 34 33 32 23 73 65 | ncludes.provisions.:rfc:`7432#se |
4cb80 | 63 74 69 6f 6e 2d 31 30 60 20 74 68 61 74 20 61 6c 6c 6f 77 20 70 61 72 74 69 63 69 70 61 74 69 | ction-10`.that.allow.participati |
4cba0 | 6e 67 20 56 54 45 50 73 20 74 6f 20 73 75 70 70 72 65 73 73 20 73 75 63 68 20 6d 65 73 73 61 67 | ng.VTEPs.to.suppress.such.messag |
4cbc0 | 65 73 20 69 6e 20 63 61 73 65 20 74 68 65 79 20 6b 6e 6f 77 20 74 68 65 20 4d 41 43 2d 49 50 20 | es.in.case.they.know.the.MAC-IP. |
4cbe0 | 62 69 6e 64 69 6e 67 20 61 6e 64 20 63 61 6e 20 72 65 70 6c 79 20 6f 6e 20 62 65 68 61 6c 66 20 | binding.and.can.reply.on.behalf. |
4cc00 | 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 | of.the.remote.host..In.order.to. |
4cc20 | 73 65 70 61 72 61 74 65 20 74 72 61 66 66 69 63 2c 20 46 61 69 72 20 51 75 65 75 65 20 75 73 65 | separate.traffic,.Fair.Queue.use |
4cc40 | 73 20 61 20 63 6c 61 73 73 69 66 69 65 72 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 | s.a.classifier.based.on.source.a |
4cc60 | 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 | ddress,.destination.address.and. |
4cc80 | 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 54 68 65 20 61 6c 67 6f 72 69 74 68 6d 20 65 6e 71 75 65 | source.port..The.algorithm.enque |
4cca0 | 75 65 73 20 70 61 63 6b 65 74 73 20 74 6f 20 68 61 73 68 20 62 75 63 6b 65 74 73 20 62 61 73 65 | ues.packets.to.hash.buckets.base |
4ccc0 | 64 20 6f 6e 20 74 68 6f 73 65 20 74 72 65 65 20 70 61 72 61 6d 65 74 65 72 73 2e 20 45 61 63 68 | d.on.those.tree.parameters..Each |
4cce0 | 20 6f 66 20 74 68 65 73 65 20 62 75 63 6b 65 74 73 20 73 68 6f 75 6c 64 20 72 65 70 72 65 73 65 | .of.these.buckets.should.represe |
4cd00 | 6e 74 20 61 20 75 6e 69 71 75 65 20 66 6c 6f 77 2e 20 42 65 63 61 75 73 65 20 6d 75 6c 74 69 70 | nt.a.unique.flow..Because.multip |
4cd20 | 6c 65 20 66 6c 6f 77 73 20 6d 61 79 20 67 65 74 20 68 61 73 68 65 64 20 74 6f 20 74 68 65 20 73 | le.flows.may.get.hashed.to.the.s |
4cd40 | 61 6d 65 20 62 75 63 6b 65 74 2c 20 74 68 65 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 | ame.bucket,.the.hashing.algorith |
4cd60 | 6d 20 69 73 20 70 65 72 74 75 72 62 65 64 20 61 74 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 69 | m.is.perturbed.at.configurable.i |
4cd80 | 6e 74 65 72 76 61 6c 73 20 73 6f 20 74 68 61 74 20 74 68 65 20 75 6e 66 61 69 72 6e 65 73 73 20 | ntervals.so.that.the.unfairness. |
4cda0 | 6c 61 73 74 73 20 6f 6e 6c 79 20 66 6f 72 20 61 20 73 68 6f 72 74 20 77 68 69 6c 65 2e 20 50 65 | lasts.only.for.a.short.while..Pe |
4cdc0 | 72 74 75 72 62 61 74 69 6f 6e 20 6d 61 79 20 68 6f 77 65 76 65 72 20 63 61 75 73 65 20 73 6f 6d | rturbation.may.however.cause.som |
4cde0 | 65 20 69 6e 61 64 76 65 72 74 65 6e 74 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 20 | e.inadvertent.packet.reordering. |
4ce00 | 74 6f 20 6f 63 63 75 72 2e 20 41 6e 20 61 64 76 69 73 61 62 6c 65 20 76 61 6c 75 65 20 63 6f 75 | to.occur..An.advisable.value.cou |
4ce20 | 6c 64 20 62 65 20 31 30 20 73 65 63 6f 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 | ld.be.10.seconds..In.order.to.us |
4ce40 | 65 20 50 49 4d 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 | e.PIM,.it.is.necessary.to.config |
4ce60 | 75 72 65 20 61 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e | ure.a.:abbr:`RP.(Rendezvous.Poin |
4ce80 | 74 29 60 20 66 6f 72 20 6a 6f 69 6e 20 6d 65 73 73 61 67 65 73 20 74 6f 20 62 65 20 73 65 6e 74 | t)`.for.join.messages.to.be.sent |
4cea0 | 20 74 6f 2e 20 43 75 72 72 65 6e 74 6c 79 20 74 68 65 20 6f 6e 6c 79 20 6d 65 74 68 6f 64 6f 6c | .to..Currently.the.only.methodol |
4cec0 | 6f 67 79 20 74 6f 20 64 6f 20 74 68 69 73 20 69 73 20 76 69 61 20 73 74 61 74 69 63 20 72 65 6e | ogy.to.do.this.is.via.static.ren |
4cee0 | 64 65 7a 76 6f 75 73 20 70 6f 69 6e 74 20 63 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 | dezvous.point.commands..In.order |
4cf00 | 20 74 6f 20 75 73 65 20 54 53 4f 2f 4c 52 4f 20 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 | .to.use.TSO/LRO.with.VMXNET3.ada |
4cf20 | 70 74 65 72 73 2c 20 74 68 65 20 53 47 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 70 74 69 6f 6e 20 | pters,.the.SG.offloading.option. |
4cf40 | 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 49 6e 20 6f 72 64 65 72 20 74 | must.also.be.enabled..In.order.t |
4cf60 | 6f 20 75 73 65 20 54 53 4f 2f 4c 52 4f 20 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 74 65 | o.use.TSO/LRO.with.VMXNET3.adate |
4cf80 | 72 73 20 6f 6e 65 20 6d 75 73 74 20 61 6c 73 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 53 47 20 6f | rs.one.must.also.enable.the.SG.o |
4cfa0 | 66 66 6c 6f 61 64 69 6e 67 20 6f 70 74 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 | ffloading.option..In.order.to.us |
4cfc0 | 65 20 66 6c 6f 77 74 61 62 6c 65 73 2c 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 | e.flowtables,.the.minimal.config |
4cfe0 | 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 69 6e 63 6c 75 64 65 73 3a 00 49 6e 20 6f 74 68 65 | uration.needed.includes:.In.othe |
4d000 | 72 20 77 6f 72 64 73 20 69 74 20 61 6c 6c 6f 77 73 20 63 6f 6e 74 72 6f 6c 20 6f 66 20 77 68 69 | r.words.it.allows.control.of.whi |
4d020 | 63 68 20 63 61 72 64 73 20 28 75 73 75 61 6c 6c 79 20 31 29 20 77 69 6c 6c 20 72 65 73 70 6f 6e | ch.cards.(usually.1).will.respon |
4d040 | 64 20 74 6f 20 61 6e 20 61 72 70 20 72 65 71 75 65 73 74 2e 00 49 6e 20 6f 74 68 65 72 20 77 6f | d.to.an.arp.request..In.other.wo |
4d060 | 72 64 73 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 20 61 6c 72 | rds,.connection.tracking.has.alr |
4d080 | 65 61 64 79 20 6f 62 73 65 72 76 65 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 20 | eady.observed.the.connection.be. |
4d0a0 | 63 6c 6f 73 65 64 20 61 6e 64 20 68 61 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 66 6c | closed.and.has.transition.the.fl |
4d0c0 | 6f 77 20 74 6f 20 49 4e 56 41 4c 49 44 20 74 6f 20 70 72 65 76 65 6e 74 20 61 74 74 61 63 6b 73 | ow.to.INVALID.to.prevent.attacks |
4d0e0 | 20 66 72 6f 6d 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 72 65 75 73 65 20 74 68 65 20 63 6f | .from.attempting.to.reuse.the.co |
4d100 | 6e 6e 65 63 74 69 6f 6e 2e 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 68 65 20 63 65 72 | nnection..In.our.example.the.cer |
4d120 | 74 69 66 69 63 61 74 65 20 6e 61 6d 65 20 69 73 20 63 61 6c 6c 65 64 20 76 79 6f 73 3a 00 49 6e | tificate.name.is.called.vyos:.In |
4d140 | 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 75 73 65 64 20 74 68 65 20 6b 65 79 20 6e 61 | .our.example,.we.used.the.key.na |
4d160 | 6d 65 20 60 60 6f 70 65 6e 76 70 6e 2d 31 60 60 20 77 68 69 63 68 20 77 65 20 77 69 6c 6c 20 72 | me.``openvpn-1``.which.we.will.r |
4d180 | 65 66 65 72 65 6e 63 65 20 69 6e 20 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 | eference.in.our.configuration..I |
4d1a0 | 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 | n.our.example,.we.will.be.forwar |
4d1c0 | 64 69 6e 67 20 77 65 62 20 73 65 72 76 65 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 69 6e | ding.web.server.traffic.to.an.in |
4d1e0 | 74 65 72 6e 61 6c 20 77 65 62 20 73 65 72 76 65 72 20 6f 6e 20 31 39 32 2e 31 36 38 2e 30 2e 31 | ternal.web.server.on.192.168.0.1 |
4d200 | 30 30 2e 20 48 54 54 50 20 74 72 61 66 66 69 63 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 | 00..HTTP.traffic.makes.use.of.th |
4d220 | 65 20 54 43 50 20 70 72 6f 74 6f 63 6f 6c 20 6f 6e 20 70 6f 72 74 20 38 30 2e 20 46 6f 72 20 6f | e.TCP.protocol.on.port.80..For.o |
4d240 | 74 68 65 72 20 63 6f 6d 6d 6f 6e 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 73 65 65 3a 20 68 | ther.common.port.numbers,.see:.h |
4d260 | 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4c 69 73 | ttps://en.wikipedia.org/wiki/Lis |
4d280 | 74 5f 6f 66 5f 54 43 50 5f 61 6e 64 5f 55 44 50 5f 70 6f 72 74 5f 6e 75 6d 62 65 72 73 00 49 6e | t_of_TCP_and_UDP_port_numbers.In |
4d2a0 | 20 70 72 69 6e 63 69 70 6c 65 2c 20 76 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 3a 63 6f 64 65 | .principle,.values.must.be.:code |
4d2c0 | 3a 60 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 6d 61 78 2d 74 68 | :`min-threshold`.<.:code:`max-th |
4d2e0 | 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 2e 00 | reshold`.<.:code:`queue-limit`.. |
4d300 | 49 6e 20 73 68 6f 72 74 2c 20 44 4d 56 50 4e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 63 61 70 | In.short,.DMVPN.provides.the.cap |
4d320 | 61 62 69 6c 69 74 79 20 66 6f 72 20 63 72 65 61 74 69 6e 67 20 61 20 64 79 6e 61 6d 69 63 2d 6d | ability.for.creating.a.dynamic-m |
4d340 | 65 73 68 20 56 50 4e 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 | esh.VPN.network.without.having.t |
4d360 | 6f 20 70 72 65 2d 63 6f 6e 66 69 67 75 72 65 20 28 73 74 61 74 69 63 29 20 61 6c 6c 20 70 6f 73 | o.pre-configure.(static).all.pos |
4d380 | 73 69 62 6c 65 20 74 75 6e 6e 65 6c 20 65 6e 64 2d 70 6f 69 6e 74 20 70 65 65 72 73 2e 00 49 6e | sible.tunnel.end-point.peers..In |
4d3a0 | 20 73 6f 6d 65 20 63 61 73 65 73 20 69 74 20 6d 61 79 20 62 65 20 6d 6f 72 65 20 63 6f 6e 76 65 | .some.cases.it.may.be.more.conve |
4d3c0 | 6e 69 65 6e 74 20 74 6f 20 65 6e 61 62 6c 65 20 4f 53 50 46 20 6f 6e 20 61 20 70 65 72 20 69 6e | nient.to.enable.OSPF.on.a.per.in |
4d3e0 | 74 65 72 66 61 63 65 2f 73 75 62 6e 65 74 20 62 61 73 69 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 | terface/subnet.basis.:cfgcmd:`se |
4d400 | 74 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 | t.protocols.ospf.interface.<inte |
4d420 | 72 66 61 63 65 3e 20 61 72 65 61 20 3c 78 2e 78 2e 78 2e 78 20 7c 20 78 3e 60 00 49 6e 20 74 68 | rface>.area.<x.x.x.x.|.x>`.In.th |
4d440 | 65 20 3a 72 65 66 3a 60 63 72 65 61 74 69 6e 67 5f 61 5f 74 72 61 66 66 69 63 5f 70 6f 6c 69 63 | e.:ref:`creating_a_traffic_polic |
4d460 | 79 60 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 65 65 20 74 68 61 74 20 73 6f 6d | y`.section.you.will.see.that.som |
4d480 | 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 69 65 73 20 75 73 65 20 2a 63 6c 61 73 73 65 73 2a 2e | e.of.the.policies.use.*classes*. |
4d4a0 | 20 54 68 6f 73 65 20 70 6f 6c 69 63 69 65 73 20 6c 65 74 20 79 6f 75 20 64 69 73 74 72 69 62 75 | .Those.policies.let.you.distribu |
4d4c0 | 74 65 20 74 72 61 66 66 69 63 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 | te.traffic.into.different.classe |
4d4e0 | 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 | s.according.to.different.paramet |
4d500 | 65 72 73 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 2e 20 53 6f 2c 20 61 20 63 6c 61 73 73 20 | ers.you.can.choose..So,.a.class. |
4d520 | 69 73 20 6a 75 73 74 20 61 20 73 70 65 63 69 66 69 63 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 | is.just.a.specific.type.of.traff |
4d540 | 69 63 20 79 6f 75 20 73 65 6c 65 63 74 2e 00 49 6e 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2c 20 | ic.you.select..In.the.VyOS.CLI,. |
4d560 | 61 20 6b 65 79 20 70 6f 69 6e 74 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 69 73 20 | a.key.point.often.overlooked.is. |
4d580 | 74 68 61 74 20 72 61 74 68 65 72 20 74 68 61 6e 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 | that.rather.than.being.configure |
4d5a0 | 64 20 75 73 69 6e 67 20 74 68 65 20 60 73 65 74 20 76 70 6e 60 20 73 74 61 6e 7a 61 2c 20 4f 70 | d.using.the.`set.vpn`.stanza,.Op |
4d5c0 | 65 6e 56 50 4e 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 6e 65 74 77 6f 72 6b | enVPN.is.configured.as.a.network |
4d5e0 | 20 69 6e 74 65 72 66 61 63 65 20 75 73 69 6e 67 20 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 73 | .interface.using.`set.interfaces |
4d600 | 20 6f 70 65 6e 76 70 6e 60 2e 00 49 6e 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2c | .openvpn`..In.the.above.example, |
4d620 | 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 6f 66 20 31 39 32 2e 30 2e 32 2e 32 20 69 73 20 | .an.external.IP.of.192.0.2.2.is. |
4d640 | 61 73 73 75 6d 65 64 2e 00 49 6e 20 74 68 65 20 61 67 65 20 6f 66 20 76 65 72 79 20 66 61 73 74 | assumed..In.the.age.of.very.fast |
4d660 | 20 6e 65 74 77 6f 72 6b 73 2c 20 61 20 73 65 63 6f 6e 64 20 6f 66 20 75 6e 72 65 61 63 68 61 62 | .networks,.a.second.of.unreachab |
4d680 | 69 6c 69 74 79 20 6d 61 79 20 65 71 75 61 6c 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 6c 6f 73 74 | ility.may.equal.millions.of.lost |
4d6a0 | 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 69 64 65 61 20 62 65 68 69 6e 64 20 42 46 44 20 69 73 | .packets..The.idea.behind.BFD.is |
4d6c0 | 20 74 6f 20 64 65 74 65 63 74 20 76 65 72 79 20 71 75 69 63 6b 6c 79 20 77 68 65 6e 20 61 20 70 | .to.detect.very.quickly.when.a.p |
4d6e0 | 65 65 72 20 69 73 20 64 6f 77 6e 20 61 6e 64 20 74 61 6b 65 20 61 63 74 69 6f 6e 20 65 78 74 72 | eer.is.down.and.take.action.extr |
4d700 | 65 6d 65 6c 79 20 66 61 73 74 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 4c 32 54 50 76 | emely.fast..In.the.case.of.L2TPv |
4d720 | 33 2c 20 74 68 65 20 66 65 61 74 75 72 65 73 20 6c 6f 73 74 20 61 72 65 20 74 65 6c 65 74 72 61 | 3,.the.features.lost.are.teletra |
4d740 | 66 66 69 63 20 65 6e 67 69 6e 65 65 72 69 6e 67 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 | ffic.engineering.features.consid |
4d760 | 65 72 65 64 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 4d 50 4c 53 2e 20 48 6f 77 65 76 65 72 2c | ered.important.in.MPLS..However, |
4d780 | 20 74 68 65 72 65 20 69 73 20 6e 6f 20 72 65 61 73 6f 6e 20 74 68 65 73 65 20 66 65 61 74 75 72 | .there.is.no.reason.these.featur |
4d7a0 | 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 2d 65 6e 67 69 6e 65 65 72 65 64 20 69 6e | es.could.not.be.re-engineered.in |
4d7c0 | 20 6f 72 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 32 54 50 76 33 20 69 6e 20 6c 61 74 65 72 20 70 72 | .or.on.top.of.L2TPv3.in.later.pr |
4d7e0 | 6f 64 75 63 74 73 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 74 68 65 20 61 76 65 72 61 67 65 20 | oducts..In.the.case.the.average. |
4d800 | 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 62 65 74 77 65 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 | queue.size.is.between.**min-thre |
4d820 | 73 68 6f 6c 64 2a 2a 20 61 6e 64 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 74 | shold**.and.**max-threshold**,.t |
4d840 | 68 65 6e 20 61 6e 20 61 72 72 69 76 69 6e 67 20 70 61 63 6b 65 74 20 77 6f 75 6c 64 20 62 65 20 | hen.an.arriving.packet.would.be. |
4d860 | 65 69 74 68 65 72 20 64 72 6f 70 70 65 64 20 6f 72 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 | either.dropped.or.placed.in.the. |
4d880 | 71 75 65 75 65 2c 20 69 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 74 68 65 20 64 65 66 | queue,.it.will.depend.on.the.def |
4d8a0 | 69 6e 65 64 20 2a 2a 6d 61 72 6b 2d 70 72 6f 62 61 62 69 6c 69 74 79 2a 2a 2e 00 49 6e 20 74 68 | ined.**mark-probability**..In.th |
4d8c0 | 65 20 63 61 73 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 70 70 6c 79 20 73 6f 6d 65 20 6b 69 | e.case.you.want.to.apply.some.ki |
4d8e0 | 6e 64 20 6f 66 20 2a 2a 73 68 61 70 69 6e 67 2a 2a 20 74 6f 20 79 6f 75 72 20 2a 2a 69 6e 62 6f | nd.of.**shaping**.to.your.**inbo |
4d900 | 75 6e 64 2a 2a 20 74 72 61 66 66 69 63 2c 20 63 68 65 63 6b 20 74 68 65 20 69 6e 67 72 65 73 73 | und**.traffic,.check.the.ingress |
4d920 | 2d 73 68 61 70 69 6e 67 5f 20 73 65 63 74 69 6f 6e 2e 00 49 6e 20 74 68 65 20 63 6f 6d 6d 61 6e | -shaping_.section..In.the.comman |
4d940 | 64 20 61 62 6f 76 65 2c 20 77 65 20 73 65 74 20 74 68 65 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 | d.above,.we.set.the.type.of.poli |
4d960 | 63 79 20 77 65 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 61 6e 64 | cy.we.are.going.to.work.with.and |
4d980 | 20 74 68 65 20 6e 61 6d 65 20 77 65 20 63 68 6f 6f 73 65 20 66 6f 72 20 69 74 3b 20 61 20 63 6c | .the.name.we.choose.for.it;.a.cl |
4d9a0 | 61 73 73 20 28 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 64 69 66 66 65 72 65 6e 74 69 61 74 | ass.(so.that.we.can.differentiat |
4d9c0 | 65 20 73 6f 6d 65 20 74 72 61 66 66 69 63 29 20 61 6e 64 20 61 6e 20 69 64 65 6e 74 69 66 69 61 | e.some.traffic).and.an.identifia |
4d9e0 | 62 6c 65 20 6e 75 6d 62 65 72 20 66 6f 72 20 74 68 61 74 20 63 6c 61 73 73 3b 20 74 68 65 6e 20 | ble.number.for.that.class;.then. |
4da00 | 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 28 6f 72 | we.configure.a.matching.rule.(or |
4da20 | 20 66 69 6c 74 65 72 29 20 61 6e 64 20 61 20 6e 61 6d 65 20 66 6f 72 20 69 74 2e 00 49 6e 20 74 | .filter).and.a.name.for.it..In.t |
4da40 | 68 65 20 65 6e 64 2c 20 61 6e 20 58 4d 4c 20 73 74 72 75 63 74 75 72 65 20 69 73 20 67 65 6e 65 | he.end,.an.XML.structure.is.gene |
4da60 | 72 61 74 65 64 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 61 76 65 64 20 61 73 20 60 60 76 79 | rated.which.can.be.saved.as.``vy |
4da80 | 6f 73 2e 6d 6f 62 69 6c 65 63 6f 6e 66 69 67 60 60 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 | os.mobileconfig``.and.sent.to.th |
4daa0 | 65 20 64 65 76 69 63 65 20 62 79 20 45 2d 4d 61 69 6c 20 77 68 65 72 65 20 69 74 20 6c 61 74 65 | e.device.by.E-Mail.where.it.late |
4dac0 | 72 20 63 61 6e 20 62 65 20 69 6d 70 6f 72 74 65 64 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 6c | r.can.be.imported..In.the.exampl |
4dae0 | 65 20 61 62 6f 76 65 2c 20 74 68 65 20 66 69 72 73 74 20 34 39 39 20 73 65 73 73 69 6f 6e 73 20 | e.above,.the.first.499.sessions. |
4db00 | 63 6f 6e 6e 65 63 74 20 77 69 74 68 6f 75 74 20 64 65 6c 61 79 2e 20 50 41 44 4f 20 70 61 63 6b | connect.without.delay..PADO.pack |
4db20 | 65 74 73 20 77 69 6c 6c 20 62 65 20 64 65 6c 61 79 65 64 20 35 30 20 6d 73 20 66 6f 72 20 63 6f | ets.will.be.delayed.50.ms.for.co |
4db40 | 6e 6e 65 63 74 69 6f 6e 20 66 72 6f 6d 20 35 30 30 20 74 6f 20 39 39 39 2c 20 74 68 69 73 20 74 | nnection.from.500.to.999,.this.t |
4db60 | 72 69 63 6b 20 61 6c 6c 6f 77 73 20 6f 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 20 | rick.allows.other.PPPoE.servers. |
4db80 | 73 65 6e 64 20 50 41 44 4f 20 66 61 73 74 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 73 20 77 69 6c | send.PADO.faster.and.clients.wil |
4dba0 | 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 74 68 65 72 20 73 65 72 76 65 72 73 2e 20 4c 61 73 74 | l.connect.to.other.servers..Last |
4dbc0 | 20 63 6f 6d 6d 61 6e 64 20 73 61 79 73 20 74 68 61 74 20 74 68 69 73 20 50 50 50 6f 45 20 73 65 | .command.says.that.this.PPPoE.se |
4dbe0 | 72 76 65 72 20 63 61 6e 20 73 65 72 76 65 20 6f 6e 6c 79 20 33 30 30 30 20 63 6c 69 65 6e 74 73 | rver.can.serve.only.3000.clients |
4dc00 | 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 51 75 | ..In.the.example.used.for.the.Qu |
4dc20 | 69 63 6b 20 53 74 61 72 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 2c 20 77 | ick.Start.configuration.above,.w |
4dc40 | 65 20 64 65 6d 6f 6e 73 74 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 | e.demonstrate.the.following.conf |
4dc60 | 69 67 75 72 61 74 69 6f 6e 3a 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d | iguration:.In.the.following.exam |
4dc80 | 70 6c 65 20 77 65 20 63 61 6e 20 73 65 65 20 61 20 62 61 73 69 63 20 6d 75 6c 74 69 63 61 73 74 | ple.we.can.see.a.basic.multicast |
4dca0 | 20 73 65 74 75 70 3a 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 | .setup:.In.the.following.example |
4dcc0 | 2c 20 62 6f 74 68 20 60 55 73 65 72 31 60 20 61 6e 64 20 60 55 73 65 72 32 60 20 77 69 6c 6c 20 | ,.both.`User1`.and.`User2`.will. |
4dce0 | 62 65 20 61 62 6c 65 20 74 6f 20 53 53 48 20 69 6e 74 6f 20 56 79 4f 53 20 61 73 20 75 73 65 72 | be.able.to.SSH.into.VyOS.as.user |
4dd00 | 20 60 60 76 79 6f 73 60 60 20 75 73 69 6e 67 20 74 68 65 69 72 20 76 65 72 79 20 6f 77 6e 20 6b | .``vyos``.using.their.very.own.k |
4dd20 | 65 79 73 2e 20 60 55 73 65 72 31 60 20 69 73 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 6f 6e | eys..`User1`.is.restricted.to.on |
4dd40 | 6c 79 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 61 20 73 69 6e | ly.be.able.to.connect.from.a.sin |
4dd60 | 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 69 66 20 70 | gle.IP.address..In.addition.if.p |
4dd80 | 61 73 73 77 6f 72 64 20 62 61 73 65 20 6c 6f 67 69 6e 20 69 73 20 77 61 6e 74 65 64 20 66 6f 72 | assword.base.login.is.wanted.for |
4dda0 | 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 75 73 65 72 20 61 20 32 46 41 2f 4d 46 41 20 6b 65 79 | .the.``vyos``.user.a.2FA/MFA.key |
4ddc0 | 63 6f 64 65 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 | code.is.required.in.addition.to. |
4dde0 | 74 68 65 20 70 61 73 73 77 6f 72 64 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 | the.password..In.the.following.e |
4de00 | 78 61 6d 70 6c 65 2c 20 74 68 65 20 49 50 73 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 63 | xample,.the.IPs.for.the.remote.c |
4de20 | 6c 69 65 6e 74 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 70 65 65 72 73 2e | lients.are.defined.in.the.peers. |
4de40 | 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 70 65 65 72 73 20 74 6f 20 69 6e 74 65 72 61 | .This.allows.the.peers.to.intera |
4de60 | 63 74 20 77 69 74 68 20 6f 6e 65 20 61 6e 6f 74 68 65 72 2e 20 49 6e 20 63 6f 6d 70 61 72 69 73 | ct.with.one.another..In.comparis |
4de80 | 6f 6e 20 74 6f 20 74 68 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 65 78 61 6d 70 6c 65 20 74 | on.to.the.site-to-site.example.t |
4dea0 | 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 65 70 61 6c 69 76 65 60 60 20 66 6c 61 67 | he.``persistent-keepalive``.flag |
4dec0 | 20 69 73 20 73 65 74 20 74 6f 20 31 35 20 73 65 63 6f 6e 64 73 20 74 6f 20 61 73 73 75 72 65 20 | .is.set.to.15.seconds.to.assure. |
4dee0 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6b 65 70 74 20 61 6c 69 76 65 2e 20 54 68 | the.connection.is.kept.alive..Th |
4df00 | 69 73 20 69 73 20 6d 61 69 6e 6c 79 20 72 65 6c 65 76 61 6e 74 20 69 66 20 6f 6e 65 20 6f 66 20 | is.is.mainly.relevant.if.one.of. |
4df20 | 74 68 65 20 70 65 65 72 73 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 20 61 6e 64 20 63 61 6e 27 | the.peers.is.behind.NAT.and.can' |
4df40 | 74 20 62 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 | t.be.connected.to.if.the.connect |
4df60 | 69 6f 6e 20 69 73 20 6c 6f 73 74 2e 20 54 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 20 74 68 69 | ion.is.lost..To.be.effective.thi |
4df80 | 73 20 76 61 6c 75 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 | s.value.needs.to.be.lower.than.t |
4dfa0 | 68 65 20 55 44 50 20 74 69 6d 65 6f 75 74 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | he.UDP.timeout..In.the.following |
4dfc0 | 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 6e 20 56 4c 41 4e 39 20 74 72 61 6e 73 69 74 69 6f 6e 73 | .example,.when.VLAN9.transitions |
4dfe0 | 2c 20 56 4c 41 4e 32 30 20 77 69 6c 6c 20 61 6c 73 6f 20 74 72 61 6e 73 69 74 69 6f 6e 3a 00 49 | ,.VLAN20.will.also.transition:.I |
4e000 | 6e 20 74 68 65 20 66 75 74 75 72 65 20 74 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f | n.the.future.this.is.expected.to |
4e020 | 20 62 65 20 61 20 76 65 72 79 20 75 73 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 74 68 6f 75 | .be.a.very.useful.protocol.(thou |
4e040 | 67 68 20 74 68 65 72 65 20 61 72 65 20 60 6f 74 68 65 72 20 70 72 6f 70 6f 73 61 6c 73 60 5f 29 | gh.there.are.`other.proposals`_) |
4e060 | 2e 00 49 6e 20 74 68 65 20 6e 65 78 74 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 | ..In.the.next.example.all.traffi |
4e080 | 63 20 64 65 73 74 69 6e 65 64 20 74 6f 20 60 60 32 30 33 2e 30 2e 31 31 33 2e 31 60 60 20 61 6e | c.destined.to.``203.0.113.1``.an |
4e0a0 | 64 20 70 6f 72 74 20 60 60 38 32 38 30 60 60 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 69 73 20 | d.port.``8280``.protocol.TCP.is. |
4e0c0 | 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 | balanced.between.2.real.servers. |
4e0e0 | 60 60 31 39 32 2e 30 2e 32 2e 31 31 60 60 20 61 6e 64 20 60 60 31 39 32 2e 30 2e 32 2e 31 32 60 | ``192.0.2.11``.and.``192.0.2.12` |
4e100 | 60 20 74 6f 20 70 6f 72 74 20 60 60 38 30 60 60 00 49 6e 20 74 68 65 20 70 61 73 74 20 28 56 79 | `.to.port.``80``.In.the.past.(Vy |
4e120 | 4f 53 20 31 2e 31 29 20 75 73 65 64 20 61 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 63 | OS.1.1).used.a.gateway-address.c |
4e140 | 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 72 65 65 20 | onfigured.under.the.system.tree. |
4e160 | 28 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 67 61 74 65 77 61 79 2d 61 64 64 | (:cfgcmd:`set.system.gateway-add |
4e180 | 72 65 73 73 20 3c 61 64 64 72 65 73 73 3e 60 29 2c 20 74 68 69 73 20 69 73 20 6e 6f 20 6c 6f 6e | ress.<address>`),.this.is.no.lon |
4e1a0 | 67 65 72 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 66 69 | ger.supported.and.existing.confi |
4e1c0 | 67 75 72 61 74 69 6f 6e 73 20 61 72 65 20 6d 69 67 72 61 74 65 64 20 74 6f 20 74 68 65 20 6e 65 | gurations.are.migrated.to.the.ne |
4e1e0 | 77 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 2e 00 49 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | w.CLI.command..In.this.command.t |
4e200 | 72 65 65 2c 20 61 6c 6c 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 6f | ree,.all.hardware.acceleration.o |
4e220 | 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 6c 65 64 2e 20 41 74 20 74 68 65 20 6d | ptions.will.be.handled..At.the.m |
4e240 | 6f 6d 65 6e 74 20 6f 6e 6c 79 20 60 49 6e 74 65 6c c2 ae 20 51 41 54 60 5f 20 69 73 20 73 75 70 | oment.only.`Intel...QAT`_.is.sup |
4e260 | 70 6f 72 74 65 64 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 | ported.In.this.example.all.traff |
4e280 | 69 63 20 64 65 73 74 69 6e 65 64 20 74 6f 20 70 6f 72 74 73 20 22 38 30 2c 20 32 32 32 32 2c 20 | ic.destined.to.ports."80,.2222,. |
4e2a0 | 38 38 38 38 22 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 6d 61 72 6b 73 20 74 6f 20 66 77 6d 61 | 8888".protocol.TCP.marks.to.fwma |
4e2c0 | 72 6b 20 22 31 31 31 22 20 61 6e 64 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 | rk."111".and.balanced.between.2. |
4e2e0 | 72 65 61 6c 20 73 65 72 76 65 72 73 2e 20 50 6f 72 74 20 22 30 22 20 69 73 20 72 65 71 75 69 72 | real.servers..Port."0".is.requir |
4e300 | 65 64 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 70 6f 72 74 73 20 61 72 65 20 75 73 65 64 2e 00 49 | ed.if.multiple.ports.are.used..I |
4e320 | 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 2c 20 61 20 73 69 6d 70 6c 69 66 65 | n.this.example.image,.a.simplife |
4e340 | 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 69 73 20 73 68 6f 77 6e 20 74 6f 20 68 65 6c 70 20 | d.traffic.flow.is.shown.to.help. |
4e360 | 70 72 6f 76 69 64 65 20 63 6f 6e 74 65 78 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 | provide.context.to.the.terms.of. |
4e380 | 60 66 6f 72 77 61 72 64 60 2c 20 60 69 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 | `forward`,.`input`,.and.`output` |
4e3a0 | 20 66 6f 72 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 66 6f 72 6d 61 74 | .for.the.new.firewall.CLI.format |
4e3c0 | 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 | ..In.this.example.we.will.use.th |
4e3e0 | 65 20 6d 6f 73 74 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 63 61 73 65 3a 20 61 20 73 65 74 75 70 | e.most.complicated.case:.a.setup |
4e400 | 20 77 68 65 72 65 20 65 61 63 68 20 63 6c 69 65 6e 74 20 69 73 20 61 20 72 6f 75 74 65 72 20 74 | .where.each.client.is.a.router.t |
4e420 | 68 61 74 20 68 61 73 20 69 74 73 20 6f 77 6e 20 73 75 62 6e 65 74 20 28 74 68 69 6e 6b 20 48 51 | hat.has.its.own.subnet.(think.HQ |
4e440 | 20 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 29 2c 20 73 69 6e 63 65 20 73 69 6d 70 | .and.branch.offices),.since.simp |
4e460 | 6c 65 72 20 73 65 74 75 70 73 20 61 72 65 20 73 75 62 73 65 74 73 20 6f 66 20 69 74 2e 00 49 6e | ler.setups.are.subsets.of.it..In |
4e480 | 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 73 6f 6d 65 20 2a 4f 70 65 6e 4e 49 43 2a 20 73 65 | .this.example,.some.*OpenNIC*.se |
4e4a0 | 72 76 65 72 73 20 61 72 65 20 75 73 65 64 2c 20 74 77 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 | rvers.are.used,.two.IPv4.address |
4e4c0 | 65 73 20 61 6e 64 20 74 77 6f 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 3a 00 49 6e 20 74 68 | es.and.two.IPv6.addresses:.In.th |
4e4e0 | 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 75 73 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a | is.example,.we.use.**masquerade* |
4e500 | 2a 20 61 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 6e 73 | *.as.the.translation.address.ins |
4e520 | 74 65 61 64 20 6f 66 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 2a 2a 6d 61 73 | tead.of.an.IP.address..The.**mas |
4e540 | 71 75 65 72 61 64 65 2a 2a 20 74 61 72 67 65 74 20 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 | querade**.target.is.effectively. |
4e560 | 61 6e 20 61 6c 69 61 73 20 74 6f 20 73 61 79 20 22 75 73 65 20 77 68 61 74 65 76 65 72 20 49 50 | an.alias.to.say."use.whatever.IP |
4e580 | 20 61 64 64 72 65 73 73 20 69 73 20 6f 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 | .address.is.on.the.outgoing.inte |
4e5a0 | 72 66 61 63 65 22 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 20 73 74 61 74 69 63 61 6c 6c 79 | rface",.rather.than.a.statically |
4e5c0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 | .configured.IP.address..This.is. |
4e5e0 | 75 73 65 66 75 6c 20 69 66 20 79 6f 75 20 75 73 65 20 44 48 43 50 20 66 6f 72 20 79 6f 75 72 20 | useful.if.you.use.DHCP.for.your. |
4e600 | 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 6f 20 6e 6f 74 20 6b 6e | outgoing.interface.and.do.not.kn |
4e620 | 6f 77 20 77 68 61 74 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 69 6c | ow.what.the.external.address.wil |
4e640 | 6c 20 62 65 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 | l.be..In.this.example,.we.will.b |
4e660 | 65 20 75 73 69 6e 67 20 74 68 65 20 65 78 61 6d 70 6c 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 | e.using.the.example.Quick.Start. |
4e680 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 20 61 73 20 61 20 73 74 61 72 74 69 6e | configuration.above.as.a.startin |
4e6a0 | 67 20 70 6f 69 6e 74 2e 00 49 6e 20 74 68 69 73 20 6d 65 74 68 6f 64 2c 20 74 68 65 20 44 53 4c | g.point..In.this.method,.the.DSL |
4e6c0 | 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 74 68 65 20 49 53 | .Modem/Router.connects.to.the.IS |
4e6e0 | 50 20 66 6f 72 20 79 6f 75 20 77 69 74 68 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 20 | P.for.you.with.your.credentials. |
4e700 | 70 72 65 70 72 6f 67 72 61 6d 6d 65 64 20 69 6e 74 6f 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 | preprogrammed.into.the.device..T |
4e720 | 68 69 73 20 67 69 76 65 73 20 79 6f 75 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 | his.gives.you.an.:rfc:`1918`.add |
4e740 | 72 65 73 73 2c 20 73 75 63 68 20 61 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 60 60 | ress,.such.as.``192.168.1.0/24`` |
4e760 | 20 62 79 20 64 65 66 61 75 6c 74 2e 00 49 6e 20 74 68 69 73 20 73 63 65 6e 61 72 69 6f 3a 00 49 | .by.default..In.this.scenario:.I |
4e780 | 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e | n.this.section.there's.useful.in |
4e7a0 | 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 | formation.of.all.firewall.config |
4e7c0 | 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 | uration.that.can.be.done.regardi |
4e7e0 | 6e 67 20 49 50 76 34 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 | ng.IPv4,.and.appropiate.op-mode. |
4e800 | 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 | commands..Configuration.commands |
4e820 | 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 | .covered.in.this.section:.In.thi |
4e840 | 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 | s.section.there's.useful.informa |
4e860 | 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | tion.of.all.firewall.configurati |
4e880 | 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 | on.that.can.be.done.regarding.IP |
4e8a0 | 76 36 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 | v6,.and.appropiate.op-mode.comma |
4e8c0 | 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 | nds..Configuration.commands.cove |
4e8e0 | 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 | red.in.this.section:.In.this.sec |
4e900 | 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | tion.there's.useful.information. |
4e920 | 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 | of.all.firewall.configuration.th |
4e940 | 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 62 72 69 64 67 65 2c | at.can.be.done.regarding.bridge, |
4e960 | 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 | .and.appropiate.op-mode.commands |
4e980 | 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 | ..Configuration.commands.covered |
4e9a0 | 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f | .in.this.section:.In.this.sectio |
4e9c0 | 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 | n.there's.useful.information.of. |
4e9e0 | 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 | all.firewall.configuration.that. |
4ea00 | 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 73 | can.be.done.regarding.flowtables |
4ea20 | 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 | .In.this.section.there's.useful. |
4ea40 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 | information.of.all.firewall.conf |
4ea60 | 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 | iguration.that.can.be.done.regar |
4ea80 | 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 73 2e 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e | ding.flowtables..In.this.section |
4eaa0 | 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 | .there's.useful.information.of.a |
4eac0 | 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 69 | ll.firewall.configuration.that.i |
4eae0 | 73 20 6e 65 65 64 65 64 20 66 6f 72 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c | s.needed.for.zone-based.firewall |
4eb00 | 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 | ..Configuration.commands.covered |
4eb20 | 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f | .in.this.section:.In.this.sectio |
4eb40 | 6e 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 61 6c 6c 20 75 73 65 66 75 6c 20 66 69 72 65 77 61 | n.you.can.find.all.useful.firewa |
4eb60 | 6c 6c 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 74 72 61 6e 73 70 61 72 | ll.op-mode.commands..In.transpar |
4eb80 | 65 6e 74 20 70 72 6f 78 79 20 6d 6f 64 65 2c 20 61 6c 6c 20 74 72 61 66 66 69 63 20 61 72 72 69 | ent.proxy.mode,.all.traffic.arri |
4eba0 | 76 69 6e 67 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 66 6f 72 | ving.on.port.80.and.destined.for |
4ebc0 | 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 66 | .the.Internet.is.automatically.f |
4ebe0 | 6f 72 77 61 72 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 70 72 6f 78 79 2e 20 54 68 69 73 | orwarded.through.the.proxy..This |
4ec00 | 20 61 6c 6c 6f 77 73 20 69 6d 6d 65 64 69 61 74 65 20 70 72 6f 78 79 20 66 6f 72 77 61 72 64 69 | .allows.immediate.proxy.forwardi |
4ec20 | 6e 67 20 77 69 74 68 6f 75 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 63 6c 69 65 6e 74 20 62 72 | ng.without.configuring.client.br |
4ec40 | 6f 77 73 65 72 73 2e 00 49 6e 20 74 79 70 69 63 61 6c 20 75 73 65 73 20 6f 66 20 53 4e 4d 50 2c | owsers..In.typical.uses.of.SNMP, |
4ec60 | 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 63 6f 6d 70 | .one.or.more.administrative.comp |
4ec80 | 75 74 65 72 73 20 63 61 6c 6c 65 64 20 6d 61 6e 61 67 65 72 73 20 68 61 76 65 20 74 68 65 20 74 | uters.called.managers.have.the.t |
4eca0 | 61 73 6b 20 6f 66 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6f 72 20 6d 61 6e 61 67 69 6e 67 20 61 20 | ask.of.monitoring.or.managing.a. |
4ecc0 | 67 72 6f 75 70 20 6f 66 20 68 6f 73 74 73 20 6f 72 20 64 65 76 69 63 65 73 20 6f 6e 20 61 20 63 | group.of.hosts.or.devices.on.a.c |
4ece0 | 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 2e 20 45 61 63 68 20 6d 61 6e 61 67 65 64 20 73 79 | omputer.network..Each.managed.sy |
4ed00 | 73 74 65 6d 20 65 78 65 63 75 74 65 73 20 61 20 73 6f 66 74 77 61 72 65 20 63 6f 6d 70 6f 6e 65 | stem.executes.a.software.compone |
4ed20 | 6e 74 20 63 61 6c 6c 65 64 20 61 6e 20 61 67 65 6e 74 20 77 68 69 63 68 20 72 65 70 6f 72 74 73 | nt.called.an.agent.which.reports |
4ed40 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 76 69 61 20 53 4e 4d 50 20 74 6f 20 74 68 65 20 6d 61 6e | .information.via.SNMP.to.the.man |
4ed60 | 61 67 65 72 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 | ager..In.zone-based.policy,.inte |
4ed80 | 72 66 61 63 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e | rfaces.are.assigned.to.zones,.an |
4eda0 | 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 | d.inspection.policy.is.applied.t |
4edc0 | 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e | o.traffic.moving.between.the.zon |
4ede0 | 65 73 20 61 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 | es.and.acted.on.according.to.fir |
4ee00 | 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 41 20 5a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f | ewall.rules..A.Zone.is.a.group.o |
4ee20 | 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 | f.interfaces.that.have.similar.f |
4ee40 | 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 | unctions.or.features..It.establi |
4ee60 | 73 68 65 73 20 74 68 65 20 73 65 63 75 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e | shes.the.security.borders.of.a.n |
4ee80 | 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 | etwork..A.zone.defines.a.boundar |
4eea0 | 79 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 | y.where.traffic.is.subjected.to. |
4eec0 | 70 6f 6c 69 63 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 | policy.restrictions.as.it.crosse |
4eee0 | 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b | s.to.another.region.of.a.network |
4ef00 | 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 | ..In.zone-based.policy,.interfac |
4ef20 | 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e | es.are.assigned.to.zones,.and.in |
4ef40 | 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 | spection.policy.is.applied.to.tr |
4ef60 | 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 | affic.moving.between.the.zones.a |
4ef80 | 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c | nd.acted.on.according.to.firewal |
4efa0 | 6c 20 72 75 6c 65 73 2e 20 41 20 7a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e | l.rules..A.zone.is.a.group.of.in |
4efc0 | 74 65 72 66 61 63 65 73 20 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 | terfaces.that.have.similar.funct |
4efe0 | 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 | ions.or.features..It.establishes |
4f000 | 20 74 68 65 20 73 65 63 75 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f | .the.security.borders.of.a.netwo |
4f020 | 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 | rk..A.zone.defines.a.boundary.wh |
4f040 | 65 72 65 20 74 72 61 66 66 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 | ere.traffic.is.subjected.to.poli |
4f060 | 63 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f | cy.restrictions.as.it.crosses.to |
4f080 | 20 61 6e 6f 74 68 65 72 20 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e | .another.region.of.a.network..In |
4f0a0 | 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 61 20 57 41 4e 20 69 6e 74 65 72 | bound.connections.to.a.WAN.inter |
4f0c0 | 66 61 63 65 20 63 61 6e 20 62 65 20 69 6d 70 72 6f 70 65 72 6c 79 20 68 61 6e 64 6c 65 64 20 77 | face.can.be.improperly.handled.w |
4f0e0 | 68 65 6e 20 74 68 65 20 72 65 70 6c 79 20 69 73 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 | hen.the.reply.is.sent.back.to.th |
4f100 | 65 20 63 6c 69 65 6e 74 2e 00 49 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 72 65 | e.client..Incoming.traffic.is.re |
4f120 | 63 65 69 76 65 64 20 62 79 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 49 66 20 | ceived.by.the.current.slave..If. |
4f140 | 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 65 20 66 61 69 6c 73 2c 20 61 6e 6f 74 68 | the.receiving.slave.fails,.anoth |
4f160 | 65 72 20 73 6c 61 76 65 20 74 61 6b 65 73 20 6f 76 65 72 20 74 68 65 20 4d 41 43 20 61 64 64 72 | er.slave.takes.over.the.MAC.addr |
4f180 | 65 73 73 20 6f 66 20 74 68 65 20 66 61 69 6c 65 64 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 | ess.of.the.failed.receiving.slav |
4f1a0 | 65 2e 00 49 6e 63 72 65 61 73 65 20 4d 61 78 69 6d 75 6d 20 4d 50 44 55 20 6c 65 6e 67 74 68 20 | e..Increase.Maximum.MPDU.length. |
4f1c0 | 74 6f 20 37 39 39 31 20 6f 72 20 31 31 34 35 34 20 6f 63 74 65 74 73 20 28 64 65 66 61 75 6c 74 | to.7991.or.11454.octets.(default |
4f1e0 | 20 33 38 39 35 20 6f 63 74 65 74 73 29 00 49 6e 64 69 63 61 74 69 6f 6e 00 49 6e 64 69 76 69 64 | .3895.octets).Indication.Individ |
4f200 | 75 61 6c 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 00 49 6e 66 6f 72 6d 20 63 6c 69 65 6e 74 20 | ual.Client.Subnet.Inform.client. |
4f220 | 74 68 61 74 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 | that.the.DNS.server.can.be.found |
4f240 | 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 67 61 74 | .at.`<address>`..Information.gat |
4f260 | 68 65 72 65 64 20 77 69 74 68 20 4c 4c 44 50 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 | hered.with.LLDP.is.stored.in.the |
4f280 | 20 64 65 76 69 63 65 20 61 73 20 61 20 3a 61 62 62 72 3a 60 4d 49 42 20 28 4d 61 6e 61 67 65 6d | .device.as.a.:abbr:`MIB.(Managem |
4f2a0 | 65 6e 74 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 44 61 74 61 62 61 73 65 29 60 20 61 6e 64 20 63 | ent.Information.Database)`.and.c |
4f2c0 | 61 6e 20 62 65 20 71 75 65 72 69 65 64 20 77 69 74 68 20 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 | an.be.queried.with.:abbr:`SNMP.( |
4f2e0 | 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 | Simple.Network.Management.Protoc |
4f300 | 6f 6c 29 60 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 39 32 32 60 | ol)`.as.specified.in.:rfc:`2922` |
4f320 | 2e 20 54 68 65 20 74 6f 70 6f 6c 6f 67 79 20 6f 66 20 61 6e 20 4c 4c 44 50 2d 65 6e 61 62 6c 65 | ..The.topology.of.an.LLDP-enable |
4f340 | 64 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 62 65 20 64 69 73 63 6f 76 65 72 65 64 20 62 79 20 63 | d.network.can.be.discovered.by.c |
4f360 | 72 61 77 6c 69 6e 67 20 74 68 65 20 68 6f 73 74 73 20 61 6e 64 20 71 75 65 72 79 69 6e 67 20 74 | rawling.the.hosts.and.querying.t |
4f380 | 68 69 73 20 64 61 74 61 62 61 73 65 2e 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 6d | his.database..Information.that.m |
4f3a0 | 61 79 20 62 65 20 72 65 74 72 69 65 76 65 64 20 69 6e 63 6c 75 64 65 3a 00 49 6e 66 6f 72 6d 61 | ay.be.retrieved.include:.Informa |
4f3c0 | 74 69 6f 6e 61 6c 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 6d 65 73 73 61 67 65 73 00 49 6e | tional.Informational.messages.In |
4f3e0 | 70 75 74 20 66 72 6f 6d 20 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 | put.from.`eth0`.network.interfac |
4f400 | 65 00 49 6e 73 70 65 63 74 20 6c 6f 67 73 3a 00 49 6e 73 74 61 6c 6c 20 74 68 65 20 63 6c 69 65 | e.Inspect.logs:.Install.the.clie |
4f420 | 6e 74 20 73 6f 66 74 77 61 72 65 20 76 69 61 20 61 70 74 20 61 6e 64 20 65 78 65 63 75 74 65 20 | nt.software.via.apt.and.execute. |
4f440 | 70 70 74 70 73 65 74 75 70 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 | pptpsetup.to.generate.the.config |
4f460 | 75 72 61 74 69 6f 6e 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 61 20 6e 75 6d 65 72 69 63 61 6c 20 | uration..Instead.of.a.numerical. |
4f480 | 4d 53 53 20 76 61 6c 75 65 20 60 63 6c 61 6d 70 2d 6d 73 73 2d 74 6f 2d 70 6d 74 75 60 20 63 61 | MSS.value.`clamp-mss-to-pmtu`.ca |
4f4a0 | 6e 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 65 74 20 74 | n.be.used.to.automatically.set.t |
4f4c0 | 68 65 20 70 72 6f 70 65 72 20 76 61 6c 75 65 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 70 61 73 73 | he.proper.value..Instead.of.pass |
4f4e0 | 77 6f 72 64 20 6f 6e 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 32 46 41 20 70 61 | word.only.authentication,.2FA.pa |
4f500 | 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 2b 20 4f 54 50 20 6b 65 79 20 | ssword.authentication.+.OTP.key. |
4f520 | 63 61 6e 20 62 65 20 75 73 65 64 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 4f 54 50 20 | can.be.used..Alternatively,.OTP. |
4f540 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 6c 79 2c 20 77 69 74 68 6f 75 74 20 61 20 70 | authentication.only,.without.a.p |
4f560 | 61 73 73 77 6f 72 64 2c 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 54 6f 20 64 6f 20 74 68 69 73 | assword,.can.be.used..To.do.this |
4f580 | 2c 20 61 6e 20 4f 54 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 61 | ,.an.OTP.configuration.must.be.a |
4f5a0 | 64 64 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 3a | dded.to.the.configuration.above: |
4f5c0 | 00 49 6e 73 74 65 61 64 20 6f 66 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 61 6c 20 73 79 73 | .Instead.of.sending.the.real.sys |
4f5e0 | 74 65 6d 20 68 6f 73 74 6e 61 6d 65 20 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2c | tem.hostname.to.the.DHCP.server, |
4f600 | 20 6f 76 65 72 77 72 69 74 65 20 74 68 65 20 68 6f 73 74 2d 6e 61 6d 65 20 77 69 74 68 20 74 68 | .overwrite.the.host-name.with.th |
4f620 | 69 73 20 67 69 76 65 6e 2d 76 61 6c 75 65 2e 00 49 6e 74 65 67 72 69 74 79 20 e2 80 93 20 4d 65 | is.given-value..Integrity.....Me |
4f640 | 73 73 61 67 65 20 69 6e 74 65 67 72 69 74 79 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 | ssage.integrity.to.ensure.that.a |
4f660 | 20 70 61 63 6b 65 74 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 74 61 6d 70 65 72 65 64 20 77 68 | .packet.has.not.been.tampered.wh |
4f680 | 69 6c 65 20 69 6e 20 74 72 61 6e 73 69 74 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 6f 70 74 69 | ile.in.transit.including.an.opti |
4f6a0 | 6f 6e 61 6c 20 70 61 63 6b 65 74 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 6d 65 | onal.packet.replay.protection.me |
4f6c0 | 63 68 61 6e 69 73 6d 2e 00 49 6e 74 65 6c 20 41 58 32 30 30 00 49 6e 74 65 6c c2 ae 20 51 41 54 | chanism..Intel.AX200.Intel...QAT |
4f6e0 | 00 49 6e 74 65 72 63 6f 6e 6e 65 63 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 56 52 46 20 77 69 74 | .Interconnect.the.global.VRF.wit |
4f700 | 68 20 76 72 66 20 22 72 65 64 22 20 75 73 69 6e 67 20 74 68 65 20 76 65 74 68 31 30 20 3c 2d 3e | h.vrf."red".using.the.veth10.<-> |
4f720 | 20 76 65 74 68 20 31 31 20 70 61 69 72 00 49 6e 74 65 72 66 61 63 65 20 2a 2a 65 74 68 30 2a 2a | .veth.11.pair.Interface.**eth0** |
4f740 | 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 75 70 73 74 72 65 61 6d 2e 00 49 6e | .used.to.connect.to.upstream..In |
4f760 | 74 65 72 66 61 63 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 | terface.Configuration.Interface. |
4f780 | 47 72 6f 75 70 73 00 49 6e 74 65 72 66 61 63 65 20 52 6f 75 74 65 73 00 49 6e 74 65 72 66 61 63 | Groups.Interface.Routes.Interfac |
4f7a0 | 65 20 60 65 74 68 31 60 20 4c 41 4e 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2e 20 49 6e 20 6f | e.`eth1`.LAN.is.behind.NAT..In.o |
4f7c0 | 72 64 65 72 20 74 6f 20 73 75 62 73 63 72 69 62 65 20 60 31 30 2e 30 2e 30 2e 30 2f 32 33 60 20 | rder.to.subscribe.`10.0.0.0/23`. |
4f7e0 | 73 75 62 6e 65 74 20 6d 75 6c 74 69 63 61 73 74 20 77 68 69 63 68 20 69 73 20 69 6e 20 60 65 74 | subnet.multicast.which.is.in.`et |
4f800 | 68 30 60 20 57 41 4e 20 77 65 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 67 6d | h0`.WAN.we.need.to.configure.igm |
4f820 | 70 2d 70 72 6f 78 79 2e 00 49 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | p-proxy..Interface.configuration |
4f840 | 00 49 6e 74 65 72 66 61 63 65 20 66 6f 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 | .Interface.for.DHCP.Relay.Agent. |
4f860 | 74 6f 20 66 6f 72 77 61 72 64 20 72 65 71 75 65 73 74 73 20 6f 75 74 2e 00 49 6e 74 65 72 66 61 | to.forward.requests.out..Interfa |
4f880 | 63 65 20 66 6f 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 6c 69 73 74 65 | ce.for.DHCP.Relay.Agent.to.liste |
4f8a0 | 6e 20 66 6f 72 20 72 65 71 75 65 73 74 73 2e 00 49 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 | n.for.requests..Interface.specif |
4f8c0 | 69 63 20 63 6f 6d 6d 61 6e 64 73 00 49 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 | ic.commands.Interface.to.use.for |
4f8e0 | 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 49 6e 74 65 | .syncing.conntrack.entries..Inte |
4f900 | 72 66 61 63 65 20 75 73 65 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 | rface.used.for.VXLAN.underlay..T |
4f920 | 68 69 73 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 | his.is.mandatory.when.using.VXLA |
4f940 | 4e 20 76 69 61 20 61 20 6d 75 6c 74 69 63 61 73 74 20 6e 65 74 77 6f 72 6b 2e 20 56 58 4c 41 4e | N.via.a.multicast.network..VXLAN |
4f960 | 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 65 6e 74 65 72 20 61 6e 64 20 65 | .traffic.will.always.enter.and.e |
4f980 | 78 69 74 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 49 6e 74 65 72 66 61 63 65 20 77 65 | xit.this.interface..Interface.we |
4f9a0 | 69 67 68 74 00 49 6e 74 65 72 66 61 63 65 73 00 49 6e 74 65 72 66 61 63 65 73 20 43 6f 6e 66 69 | ight.Interfaces.Interfaces.Confi |
4f9c0 | 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 70 61 72 74 69 63 69 | guration.Interfaces.that.partici |
4f9e0 | 70 61 74 65 20 69 6e 20 74 68 65 20 44 48 43 50 20 72 65 6c 61 79 20 70 72 6f 63 65 73 73 2e 20 | pate.in.the.DHCP.relay.process.. |
4fa00 | 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 2c 20 61 74 20 6c 65 61 73 | If.this.command.is.used,.at.leas |
4fa20 | 74 20 74 77 6f 20 65 6e 74 72 69 65 73 20 6f 66 20 69 74 20 61 72 65 20 72 65 71 75 69 72 65 64 | t.two.entries.of.it.are.required |
4fa40 | 3a 20 6f 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 63 61 70 | :.one.for.the.interface.that.cap |
4fa60 | 74 75 72 65 73 20 74 68 65 20 64 68 63 70 2d 72 65 71 75 65 73 74 73 2c 20 61 6e 64 20 6f 6e 65 | tures.the.dhcp-requests,.and.one |
4fa80 | 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 6f 72 77 61 72 64 20 73 75 | .for.the.interface.to.forward.su |
4faa0 | 63 68 20 72 65 71 75 65 73 74 73 2e 20 41 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 20 77 | ch.requests..A.warning.message.w |
4fac0 | 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 69 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 | ill.be.shown.if.this.command.is. |
4fae0 | 75 73 65 64 2c 20 73 69 6e 63 65 20 6e 65 77 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 | used,.since.new.implementations. |
4fb00 | 73 68 6f 75 6c 64 20 75 73 65 20 60 60 6c 69 73 74 65 6e 2d 69 6e 74 65 72 66 61 63 65 60 60 20 | should.use.``listen-interface``. |
4fb20 | 61 6e 64 20 60 60 75 70 73 74 72 65 61 6d 2d 69 6e 74 65 72 66 61 63 65 60 60 2e 00 49 6e 74 65 | and.``upstream-interface``..Inte |
4fb40 | 72 66 61 63 65 73 20 77 68 6f 73 65 20 44 48 43 50 20 63 6c 69 65 6e 74 20 6e 61 6d 65 73 65 72 | rfaces.whose.DHCP.client.nameser |
4fb60 | 76 65 72 73 20 74 6f 20 66 6f 72 77 61 72 64 20 72 65 71 75 65 73 74 73 20 74 6f 2e 00 49 6e 74 | vers.to.forward.requests.to..Int |
4fb80 | 65 72 66 61 63 65 73 2c 20 74 68 65 69 72 20 77 65 69 67 68 74 20 61 6e 64 20 74 68 65 20 74 79 | erfaces,.their.weight.and.the.ty |
4fba0 | 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 20 62 61 6c 61 6e 63 65 64 20 61 72 65 | pe.of.traffic.to.be.balanced.are |
4fbc0 | 20 64 65 66 69 6e 65 64 20 69 6e 20 6e 75 6d 62 65 72 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 | .defined.in.numbered.balancing.r |
4fbe0 | 75 6c 65 20 73 65 74 73 2e 20 54 68 65 20 72 75 6c 65 20 73 65 74 73 20 61 72 65 20 65 78 65 63 | ule.sets..The.rule.sets.are.exec |
4fc00 | 75 74 65 64 20 69 6e 20 6e 75 6d 65 72 69 63 61 6c 20 6f 72 64 65 72 20 61 67 61 69 6e 73 74 20 | uted.in.numerical.order.against. |
4fc20 | 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d | outgoing.packets..In.case.of.a.m |
4fc40 | 61 74 63 68 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 | atch.the.packet.is.sent.through. |
4fc60 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 6d 61 | an.interface.specified.in.the.ma |
4fc80 | 74 63 68 69 6e 67 20 72 75 6c 65 2e 20 49 66 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 6e 27 74 | tching.rule..If.a.packet.doesn't |
4fca0 | 20 6d 61 74 63 68 20 61 6e 79 20 72 75 6c 65 20 69 74 20 69 73 20 73 65 6e 74 20 62 79 20 75 73 | .match.any.rule.it.is.sent.by.us |
4fcc0 | 69 6e 67 20 74 68 65 20 73 79 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 52 75 | ing.the.system.routing.table..Ru |
4fce0 | 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e 27 74 20 62 65 20 63 68 61 6e 67 65 64 2e 00 49 6e 74 | le.numbers.can't.be.changed..Int |
4fd00 | 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 | ernal.attack:.an.attack.from.the |
4fd20 | 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 28 67 65 6e 65 72 61 74 65 64 20 62 79 20 | .internal.network.(generated.by. |
4fd40 | 61 20 63 75 73 74 6f 6d 65 72 29 20 74 6f 77 61 72 64 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 | a.customer).towards.the.internet |
4fd60 | 20 69 73 20 69 64 65 6e 74 69 66 79 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 | .is.identify..In.this.case,.all. |
4fd80 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 70 61 72 74 69 63 75 6c 61 72 | connections.from.this.particular |
4fda0 | 20 49 50 2f 43 75 73 74 6f 6d 65 72 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 49 6e | .IP/Customer.will.be.blocked..In |
4fdc0 | 74 65 72 6e 61 6c 6c 79 2c 20 69 6e 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 70 72 6f | ternally,.in.flow-accounting.pro |
4fde0 | 63 65 73 73 65 73 20 65 78 69 73 74 20 61 20 62 75 66 66 65 72 20 66 6f 72 20 64 61 74 61 20 65 | cesses.exist.a.buffer.for.data.e |
4fe00 | 78 63 68 61 6e 67 69 6e 67 20 62 65 74 77 65 65 6e 20 63 6f 72 65 20 70 72 6f 63 65 73 73 20 61 | xchanging.between.core.process.a |
4fe20 | 6e 64 20 70 6c 75 67 69 6e 73 20 28 65 61 63 68 20 65 78 70 6f 72 74 20 74 61 72 67 65 74 20 69 | nd.plugins.(each.export.target.i |
4fe40 | 73 20 61 20 73 65 70 61 72 61 74 65 64 20 70 6c 75 67 69 6e 29 2e 20 49 66 20 79 6f 75 20 68 61 | s.a.separated.plugin)..If.you.ha |
4fe60 | 76 65 20 68 69 67 68 20 74 72 61 66 66 69 63 20 6c 65 76 65 6c 73 20 6f 72 20 6e 6f 74 65 64 20 | ve.high.traffic.levels.or.noted. |
4fe80 | 73 6f 6d 65 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 6d 69 73 73 65 64 20 72 65 63 6f 72 64 | some.problems.with.missed.record |
4fea0 | 73 20 6f 72 20 73 74 6f 70 70 69 6e 67 20 65 78 70 6f 72 74 69 6e 67 2c 20 79 6f 75 20 6d 61 79 | s.or.stopping.exporting,.you.may |
4fec0 | 20 74 72 79 20 74 6f 20 69 6e 63 72 65 61 73 65 20 61 20 64 65 66 61 75 6c 74 20 62 75 66 66 65 | .try.to.increase.a.default.buffe |
4fee0 | 72 20 73 69 7a 65 20 28 31 30 20 4d 69 42 29 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 63 6f | r.size.(10.MiB).with.the.next.co |
4ff00 | 6d 6d 61 6e 64 3a 00 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 | mmand:.Internet.Key.Exchange.ver |
4ff20 | 73 69 6f 6e 20 32 20 28 49 4b 45 76 32 29 20 69 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 | sion.2.(IKEv2).is.a.tunneling.pr |
4ff40 | 6f 74 6f 63 6f 6c 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 73 65 63 2c 20 74 68 61 74 20 65 73 74 | otocol,.based.on.IPsec,.that.est |
4ff60 | 61 62 6c 69 73 68 65 73 20 61 20 73 65 63 75 72 65 20 56 50 4e 20 63 6f 6d 6d 75 6e 69 63 61 74 | ablishes.a.secure.VPN.communicat |
4ff80 | 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 50 4e 20 64 65 76 69 63 65 73 2c 20 20 61 6e 64 20 64 65 | ion.between.VPN.devices,..and.de |
4ffa0 | 66 69 6e 65 73 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 63 61 | fines.negotiation.and.authentica |
4ffc0 | 74 69 6f 6e 20 70 72 6f 63 65 73 73 65 73 20 66 6f 72 20 49 50 73 65 63 20 73 65 63 75 72 69 74 | tion.processes.for.IPsec.securit |
4ffe0 | 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 73 20 28 53 41 73 29 2e 20 49 74 20 69 73 20 6f 66 74 65 | y.associations.(SAs)..It.is.ofte |
50000 | 6e 20 6b 6e 6f 77 6e 20 61 73 20 49 4b 45 76 32 2f 49 50 53 65 63 20 6f 72 20 49 50 53 65 63 20 | n.known.as.IKEv2/IPSec.or.IPSec. |
50020 | 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 e2 80 94 20 6f 72 20 72 6f 61 64 2d | IKEv2.remote-access.....or.road- |
50040 | 77 61 72 72 69 6f 72 73 20 61 73 20 6f 74 68 65 72 73 20 63 61 6c 6c 20 69 74 2e 00 49 6e 74 65 | warriors.as.others.call.it..Inte |
50060 | 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 2c 20 49 4b 45 | rnet.Key.Exchange.version.2,.IKE |
50080 | 76 32 20 66 6f 72 20 73 68 6f 72 74 2c 20 69 73 20 61 20 72 65 71 75 65 73 74 2f 72 65 73 70 6f | v2.for.short,.is.a.request/respo |
500a0 | 6e 73 65 20 70 72 6f 74 6f 63 6f 6c 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 62 6f 74 68 20 43 | nse.protocol.developed.by.both.C |
500c0 | 69 73 63 6f 20 61 6e 64 20 4d 69 63 72 6f 73 6f 66 74 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 | isco.and.Microsoft..It.is.used.t |
500e0 | 6f 20 65 73 74 61 62 6c 69 73 68 20 61 6e 64 20 73 65 63 75 72 65 20 49 50 76 34 2f 49 50 76 36 | o.establish.and.secure.IPv4/IPv6 |
50100 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 65 20 69 74 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 | .connections,.be.it.a.site-to-si |
50120 | 74 65 20 56 50 4e 20 6f 72 20 66 72 6f 6d 20 61 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 63 6f | te.VPN.or.from.a.road-warrior.co |
50140 | 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 20 68 75 62 20 73 69 74 65 2e 20 49 4b 45 76 32 2c 20 77 | nnecting.to.a.hub.site..IKEv2,.w |
50160 | 68 65 6e 20 72 75 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2c 20 | hen.run.in.point-to-multipoint,. |
50180 | 6f 72 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 2f 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 6d 6f | or.remote-access/road-warrior.mo |
501a0 | 64 65 2c 20 73 65 63 75 72 65 73 20 74 68 65 20 73 65 72 76 65 72 2d 73 69 64 65 20 77 69 74 68 | de,.secures.the.server-side.with |
501c0 | 20 61 6e 6f 74 68 65 72 20 6c 61 79 65 72 20 62 79 20 75 73 69 6e 67 20 61 6e 20 78 35 30 39 20 | .another.layer.by.using.an.x509. |
501e0 | 73 69 67 6e 65 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 49 6e 74 65 72 | signed.server.certificate..Inter |
50200 | 6e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 49 6e 74 65 72 76 61 6c 00 49 6e 74 65 72 76 61 | network.Control.Interval.Interva |
50220 | 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 | l.in.milliseconds.Interval.in.mi |
50240 | 6e 75 74 65 73 20 62 65 74 77 65 65 6e 20 75 70 64 61 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 | nutes.between.updates.(default:. |
50260 | 36 30 29 00 49 6e 74 72 6f 64 75 63 69 6e 67 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 | 60).Introducing.route.reflectors |
50280 | 20 72 65 6d 6f 76 65 73 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 2d 6d | .removes.the.need.for.the.full-m |
502a0 | 65 73 68 2e 20 57 68 65 6e 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 72 6f 75 74 65 20 | esh..When.you.configure.a.route. |
502c0 | 72 65 66 6c 65 63 74 6f 72 20 79 6f 75 20 68 61 76 65 20 74 6f 20 74 65 6c 6c 20 74 68 65 20 72 | reflector.you.have.to.tell.the.r |
502e0 | 6f 75 74 65 72 20 77 68 65 74 68 65 72 20 74 68 65 20 6f 74 68 65 72 20 49 42 47 50 20 72 6f 75 | outer.whether.the.other.IBGP.rou |
50300 | 74 65 72 20 69 73 20 61 20 63 6c 69 65 6e 74 20 6f 72 20 6e 6f 6e 2d 63 6c 69 65 6e 74 2e 20 41 | ter.is.a.client.or.non-client..A |
50320 | 20 63 6c 69 65 6e 74 20 69 73 20 61 6e 20 49 42 47 50 20 72 6f 75 74 65 72 20 74 68 61 74 20 74 | .client.is.an.IBGP.router.that.t |
50340 | 68 65 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 77 69 6c 6c 20 e2 80 9c 72 65 66 6c 65 | he.route.reflector.will....refle |
50360 | 63 74 e2 80 9d 20 72 6f 75 74 65 73 20 74 6f 2c 20 74 68 65 20 6e 6f 6e 2d 63 6c 69 65 6e 74 20 | ct....routes.to,.the.non-client. |
50380 | 69 73 20 6a 75 73 74 20 61 20 72 65 67 75 6c 61 72 20 49 42 47 50 20 6e 65 69 67 68 62 6f 72 2e | is.just.a.regular.IBGP.neighbor. |
503a0 | 20 52 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 | .Route.reflectors.mechanism.is.d |
503c0 | 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 34 35 36 60 20 61 6e 64 20 75 70 64 61 | escribed.in.:rfc:`4456`.and.upda |
503e0 | 74 65 64 20 62 79 20 3a 72 66 63 3a 60 37 36 30 36 60 2e 00 49 74 20 64 69 73 61 62 6c 65 73 20 | ted.by.:rfc:`7606`..It.disables. |
50400 | 74 72 61 6e 73 70 61 72 65 6e 74 20 68 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 61 75 74 6f | transparent.huge.pages,.and.auto |
50420 | 6d 61 74 69 63 20 4e 55 4d 41 20 62 61 6c 61 6e 63 69 6e 67 2e 20 49 74 20 61 6c 73 6f 20 75 73 | matic.NUMA.balancing..It.also.us |
50440 | 65 73 20 63 70 75 70 6f 77 65 72 20 74 6f 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e | es.cpupower.to.set.the.performan |
50460 | 63 65 20 63 70 75 66 72 65 71 20 67 6f 76 65 72 6e 6f 72 2c 20 61 6e 64 20 72 65 71 75 65 73 74 | ce.cpufreq.governor,.and.request |
50480 | 73 20 61 20 63 70 75 5f 64 6d 61 5f 6c 61 74 65 6e 63 79 20 76 61 6c 75 65 20 6f 66 20 31 2e 20 | s.a.cpu_dma_latency.value.of.1.. |
504a0 | 49 74 20 61 6c 73 6f 20 73 65 74 73 20 62 75 73 79 5f 72 65 61 64 20 61 6e 64 20 62 75 73 79 5f | It.also.sets.busy_read.and.busy_ |
504c0 | 70 6f 6c 6c 20 74 69 6d 65 73 20 74 6f 20 35 30 20 75 73 2c 20 61 6e 64 20 74 63 70 5f 66 61 73 | poll.times.to.50.us,.and.tcp_fas |
504e0 | 74 6f 70 65 6e 20 74 6f 20 33 2e 00 49 74 20 65 6e 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 | topen.to.3..It.enables.transpare |
50500 | 6e 74 20 68 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 | nt.huge.pages,.and.uses.cpupower |
50520 | 20 74 6f 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 | .to.set.the.performance.cpufreq. |
50540 | 67 6f 76 65 72 6e 6f 72 2e 20 49 74 20 61 6c 73 6f 20 73 65 74 73 20 60 60 6b 65 72 6e 65 6c 2e | governor..It.also.sets.``kernel. |
50560 | 73 63 68 65 64 5f 6d 69 6e 5f 67 72 61 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 30 | sched_min_granularity_ns``.to.10 |
50580 | 20 75 73 2c 20 60 60 6b 65 72 6e 65 6c 2e 73 63 68 65 64 5f 77 61 6b 65 75 70 5f 67 72 61 6e 75 | .us,.``kernel.sched_wakeup_granu |
505a0 | 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 35 20 75 73 73 2c 20 61 6e 64 20 60 60 76 6d 2e | larity_ns``.to.15.uss,.and.``vm. |
505c0 | 64 69 72 74 79 5f 72 61 74 69 6f 60 60 20 74 6f 20 34 30 25 2e 00 49 74 20 67 65 6e 65 72 61 74 | dirty_ratio``.to.40%..It.generat |
505e0 | 65 73 20 74 68 65 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 | es.the.keypair,.which.includes.t |
50600 | 68 65 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2e 20 54 68 65 | he.public.and.private.parts..The |
50620 | 20 6b 65 79 20 69 73 20 6e 6f 74 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d | .key.is.not.stored.on.the.system |
50640 | 20 2d 20 6f 6e 6c 79 20 61 20 6b 65 79 70 61 69 72 20 69 73 20 67 65 6e 65 72 61 74 65 64 2e 00 | .-.only.a.keypair.is.generated.. |
50660 | 49 74 20 68 65 6c 70 73 20 74 6f 20 73 75 70 70 6f 72 74 20 61 73 20 48 45 4c 50 45 52 20 6f 6e | It.helps.to.support.as.HELPER.on |
50680 | 6c 79 20 66 6f 72 20 70 6c 61 6e 6e 65 64 20 72 65 73 74 61 72 74 73 2e 00 49 74 20 68 65 6c 70 | ly.for.planned.restarts..It.help |
506a0 | 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 74 68 65 20 73 79 6e 74 61 78 20 61 73 3a 20 28 73 65 | s.to.think.of.the.syntax.as:.(se |
506c0 | 65 20 62 65 6c 6f 77 29 2e 20 54 68 65 20 27 72 75 6c 65 2d 73 65 74 27 20 73 68 6f 75 6c 64 20 | e.below)..The.'rule-set'.should. |
506e0 | 62 65 20 77 72 69 74 74 65 6e 20 66 72 6f 6d 20 74 68 65 20 70 65 72 73 70 65 63 74 69 76 65 20 | be.written.from.the.perspective. |
50700 | 6f 66 3a 20 2a 53 6f 75 72 63 65 20 5a 6f 6e 65 2a 2d 74 6f 2d 3e 2a 44 65 73 74 69 6e 61 74 69 | of:.*Source.Zone*-to->*Destinati |
50720 | 6f 6e 20 5a 6f 6e 65 2a 00 49 74 20 69 73 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 43 | on.Zone*.It.is.compatible.with.C |
50740 | 69 73 63 6f 20 28 52 29 20 41 6e 79 43 6f 6e 6e 65 63 74 20 28 52 29 20 63 6c 69 65 6e 74 73 2e | isco.(R).AnyConnect.(R).clients. |
50760 | 00 49 74 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 60 60 65 74 68 31 60 60 00 49 74 20 | .It.is.connected.to.``eth1``.It. |
50780 | 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 53 53 48 | is.highly.recommended.to.use.SSH |
507a0 | 20 6b 65 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c 74 20 | .key.authentication..By.default. |
507c0 | 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 75 73 65 72 20 28 60 60 76 79 6f 73 60 60 | there.is.only.one.user.(``vyos`` |
507e0 | 29 2c 20 61 6e 64 20 79 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 61 6e 79 20 6e 75 6d 62 65 72 | ),.and.you.can.assign.any.number |
50800 | 20 6f 66 20 6b 65 79 73 20 74 6f 20 74 68 61 74 20 75 73 65 72 2e 20 59 6f 75 20 63 61 6e 20 67 | .of.keys.to.that.user..You.can.g |
50820 | 65 6e 65 72 61 74 65 20 61 20 73 73 68 20 6b 65 79 20 77 69 74 68 20 74 68 65 20 60 60 73 73 68 | enerate.a.ssh.key.with.the.``ssh |
50840 | 2d 6b 65 79 67 65 6e 60 60 20 63 6f 6d 6d 61 6e 64 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 | -keygen``.command.on.your.local. |
50860 | 6d 61 63 68 69 6e 65 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 28 62 79 20 64 65 66 61 75 6c 74 29 | machine,.which.will.(by.default) |
50880 | 20 73 61 76 65 20 69 74 20 61 73 20 60 60 7e 2f 2e 73 73 68 2f 69 64 5f 72 73 61 2e 70 75 62 60 | .save.it.as.``~/.ssh/id_rsa.pub` |
508a0 | 60 2e 00 49 74 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 | `..It.is.highly.recommended.to.u |
508c0 | 73 65 20 74 68 65 20 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 62 6f 74 68 20 74 68 65 | se.the.same.address.for.both.the |
508e0 | 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 64 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 | .LDP.router-id.and.the.discovery |
50900 | 20 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 66 6f 72 20 56 79 4f 53 | .transport.address,.but.for.VyOS |
50920 | 20 4d 50 4c 53 20 4c 44 50 20 74 6f 20 77 6f 72 6b 20 62 6f 74 68 20 70 61 72 61 6d 65 74 65 72 | .MPLS.LDP.to.work.both.parameter |
50940 | 73 20 6d 75 73 74 20 62 65 20 65 78 70 6c 69 63 69 74 6c 79 20 73 65 74 20 69 6e 20 74 68 65 20 | s.must.be.explicitly.set.in.the. |
50960 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 | configuration..It.is.important.t |
50980 | 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 | o.note.that.when.creating.firewa |
509a0 | 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 | ll.rules.that.the.DNAT.translati |
509c0 | 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 | on.occurs.**before**.traffic.tra |
509e0 | 76 65 72 73 65 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f | verses.the.firewall..In.other.wo |
50a00 | 72 64 73 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 | rds,.the.destination.address.has |
50a20 | 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e | .already.been.translated.to.192. |
50a40 | 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f | 168.0.100..It.is.important.to.no |
50a60 | 74 65 20 74 68 61 74 20 77 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 | te.that.when.creating.firewall.r |
50a80 | 75 6c 65 73 2c 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 | ules,.the.DNAT.translation.occur |
50aa0 | 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 | s.**before**.traffic.traverses.t |
50ac0 | 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 | he.firewall..In.other.words,.the |
50ae0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 | .destination.address.has.already |
50b00 | 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 | .been.translated.to.192.168.0.10 |
50b20 | 30 2e 00 49 74 20 69 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 | 0..It.is.not.sufficient.to.only. |
50b40 | 63 6f 6e 66 69 67 75 72 65 20 61 20 4c 33 56 50 4e 20 56 52 46 73 20 62 75 74 20 4c 33 56 50 4e | configure.a.L3VPN.VRFs.but.L3VPN |
50b60 | 20 56 52 46 73 20 6d 75 73 74 20 62 65 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 46 6f | .VRFs.must.be.maintained,.too.Fo |
50b80 | 72 20 4c 33 56 50 4e 20 56 52 46 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c | r.L3VPN.VRF.maintenance.the.foll |
50ba0 | 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 | owing.operational.commands.are.i |
50bc0 | 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f | n.place..It.is.not.sufficient.to |
50be0 | 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 56 52 46 20 62 75 74 20 56 52 46 73 20 6d | .only.configure.a.VRF.but.VRFs.m |
50c00 | 75 73 74 20 62 65 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 20 46 6f 72 20 56 52 46 20 | ust.be.maintained,.too..For.VRF. |
50c20 | 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 | maintenance.the.following.operat |
50c40 | 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 | ional.commands.are.in.place..It. |
50c60 | 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 74 6f 20 75 73 65 20 74 68 65 20 60 76 69 66 20 31 60 20 | is.not.valid.to.use.the.`vif.1`. |
50c80 | 6f 70 74 69 6f 6e 20 66 6f 72 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 62 65 | option.for.VLAN.aware.bridges.be |
50ca0 | 63 61 75 73 65 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 61 73 73 75 6d 65 20 | cause.VLAN.aware.bridges.assume. |
50cc0 | 74 68 61 74 20 61 6c 6c 20 75 6e 6c 61 62 65 6c 65 64 20 70 61 63 6b 65 74 73 20 62 65 6c 6f 6e | that.all.unlabeled.packets.belon |
50ce0 | 67 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 4c 41 4e 20 31 20 6d 65 6d 62 65 72 20 61 | g.to.the.default.VLAN.1.member.a |
50d00 | 6e 64 20 74 68 61 74 20 74 68 65 20 56 4c 41 4e 20 49 44 20 6f 66 20 74 68 65 20 62 72 69 64 67 | nd.that.the.VLAN.ID.of.the.bridg |
50d20 | 65 27 73 20 70 61 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 31 | e's.parent.interface.is.always.1 |
50d40 | 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 65 6e 68 61 6e 63 65 20 61 75 74 68 65 | .It.is.possible.to.enhance.authe |
50d60 | 6e 74 69 63 61 74 69 6f 6e 20 73 65 63 75 72 69 74 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 | ntication.security.by.using.the. |
50d80 | 3a 61 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 | :abbr:`2FA.(Two-factor.authentic |
50da0 | 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 | ation)`/:abbr:`MFA.(Multi-factor |
50dc0 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 66 65 61 74 75 72 65 20 74 6f 67 65 74 68 | .authentication)`.feature.togeth |
50de0 | 65 72 20 77 69 74 68 20 3a 61 62 62 72 3a 60 4f 54 50 20 28 4f 6e 65 2d 54 69 6d 65 2d 50 61 64 | er.with.:abbr:`OTP.(One-Time-Pad |
50e00 | 29 60 20 6f 6e 20 56 79 4f 53 2e 20 3a 61 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 | )`.on.VyOS..:abbr:`2FA.(Two-fact |
50e20 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 | or.authentication)`/:abbr:`MFA.( |
50e40 | 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 69 73 | Multi-factor.authentication)`.is |
50e60 | 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 20 70 65 72 20 65 61 | .configured.independently.per.ea |
50e80 | 63 68 20 75 73 65 72 2e 20 49 66 20 61 6e 20 4f 54 50 20 6b 65 79 20 69 73 20 63 6f 6e 66 69 67 | ch.user..If.an.OTP.key.is.config |
50ea0 | 75 72 65 64 20 66 6f 72 20 61 20 75 73 65 72 2c 20 32 46 41 2f 4d 46 41 20 69 73 20 61 75 74 6f | ured.for.a.user,.2FA/MFA.is.auto |
50ec0 | 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 61 74 20 70 61 72 74 69 | matically.enabled.for.that.parti |
50ee0 | 63 75 6c 61 72 20 75 73 65 72 2e 20 49 66 20 61 20 75 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 | cular.user..If.a.user.does.not.h |
50f00 | 61 76 65 20 61 6e 20 4f 54 50 20 6b 65 79 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 68 65 72 65 | ave.an.OTP.key.configured,.there |
50f20 | 20 69 73 20 6e 6f 20 32 46 41 2f 4d 46 41 20 63 68 65 63 6b 20 66 6f 72 20 74 68 61 74 20 75 73 | .is.no.2FA/MFA.check.for.that.us |
50f40 | 65 72 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 70 65 72 6d 69 74 20 42 47 50 | er..It.is.possible.to.permit.BGP |
50f60 | 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 77 69 74 68 6f 75 74 20 74 72 | .install.VPN.prefixes.without.tr |
50f80 | 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 | ansport.labels..This.configurati |
50fa0 | 6f 6e 20 77 69 6c 6c 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 6f 72 69 | on.will.install.VPN.prefixes.ori |
50fc0 | 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 61 6e 20 65 2d 62 67 70 20 73 65 73 73 69 6f 6e 2c 20 61 | ginated.from.an.e-bgp.session,.a |
50fe0 | 6e 64 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 64 69 72 65 63 74 6c 79 20 63 6f | nd.with.the.next-hop.directly.co |
51000 | 6e 6e 65 63 74 65 64 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 70 65 63 69 | nnected..It.is.possible.to.speci |
51020 | 66 79 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 66 6f 72 20 69 70 76 36 20 70 72 65 66 69 | fy.a.static.route.for.ipv6.prefi |
51040 | 78 65 73 20 75 73 69 6e 67 20 61 6e 20 53 52 76 36 20 73 65 67 6d 65 6e 74 73 20 69 6e 73 74 72 | xes.using.an.SRv6.segments.instr |
51060 | 75 63 74 69 6f 6e 2e 20 54 68 65 20 60 2f 60 20 73 65 70 61 72 61 74 6f 72 20 63 61 6e 20 62 65 | uction..The.`/`.separator.can.be |
51080 | 20 75 73 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 65 67 6d 65 6e | .used.to.specify.multiple.segmen |
510a0 | 74 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 | t.instructions..It.is.possible.t |
510c0 | 6f 20 75 73 65 20 65 69 74 68 65 72 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 55 6e 69 63 61 73 | o.use.either.Multicast.or.Unicas |
510e0 | 74 20 74 6f 20 73 79 6e 63 20 63 6f 6e 6e 74 72 61 63 6b 20 74 72 61 66 66 69 63 2e 20 4d 6f 73 | t.to.sync.conntrack.traffic..Mos |
51100 | 74 20 65 78 61 6d 70 6c 65 73 20 62 65 6c 6f 77 20 73 68 6f 77 20 4d 75 6c 74 69 63 61 73 74 2c | t.examples.below.show.Multicast, |
51120 | 20 62 75 74 20 75 6e 69 63 61 73 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 | .but.unicast.can.be.specified.by |
51140 | 20 75 73 69 6e 67 20 74 68 65 20 22 70 65 65 72 22 20 6b 65 79 77 6f 72 6b 20 61 66 74 65 72 20 | .using.the."peer".keywork.after. |
51160 | 74 68 65 20 73 70 65 63 69 66 69 63 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 61 73 20 69 6e 20 | the.specificed.interface,.as.in. |
51180 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 3a 00 49 74 20 69 73 20 76 65 72 | the.following.example:.It.is.ver |
511a0 | 79 20 65 61 73 79 20 74 6f 20 6d 69 73 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 63 61 73 74 | y.easy.to.misconfigure.multicast |
511c0 | 20 72 65 70 65 61 74 69 6e 67 20 69 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 | .repeating.if.you.have.multiple. |
511e0 | 4e 48 53 65 73 2e 00 49 74 20 75 73 65 73 20 61 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 | NHSes..It.uses.a.single.TCP.or.U |
51200 | 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 6c 79 20 | DP.connection.and.does.not.rely. |
51220 | 6f 6e 20 70 61 63 6b 65 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 69 | on.packet.source.addresses,.so.i |
51240 | 74 20 77 69 6c 6c 20 77 6f 72 6b 20 65 76 65 6e 20 74 68 72 6f 75 67 68 20 61 20 64 6f 75 62 6c | t.will.work.even.through.a.doubl |
51260 | 65 20 4e 41 54 3a 20 70 65 72 66 65 63 74 20 66 6f 72 20 70 75 62 6c 69 63 20 68 6f 74 73 70 6f | e.NAT:.perfect.for.public.hotspo |
51280 | 74 73 20 61 6e 64 20 73 75 63 68 00 49 74 20 75 73 65 73 20 61 20 73 74 6f 63 68 61 73 74 69 63 | ts.and.such.It.uses.a.stochastic |
512a0 | 20 6d 6f 64 65 6c 20 74 6f 20 63 6c 61 73 73 69 66 79 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b | .model.to.classify.incoming.pack |
512c0 | 65 74 73 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 66 6c 6f 77 73 20 61 6e 64 20 69 73 20 | ets.into.different.flows.and.is. |
512e0 | 75 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 66 61 69 72 20 73 68 61 72 65 20 6f 66 20 | used.to.provide.a.fair.share.of. |
51300 | 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 74 6f 20 61 6c 6c 20 74 68 65 20 66 6c 6f 77 73 20 75 | the.bandwidth.to.all.the.flows.u |
51320 | 73 69 6e 67 20 74 68 65 20 71 75 65 75 65 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 6d 61 6e | sing.the.queue..Each.flow.is.man |
51340 | 61 67 65 64 20 62 79 20 74 68 65 20 43 6f 44 65 6c 20 71 75 65 75 69 6e 67 20 20 64 69 73 63 69 | aged.by.the.CoDel.queuing..disci |
51360 | 70 6c 69 6e 65 2e 20 52 65 6f 72 64 65 72 69 6e 67 20 77 69 74 68 69 6e 20 61 20 66 6c 6f 77 20 | pline..Reordering.within.a.flow. |
51380 | 69 73 20 61 76 6f 69 64 65 64 20 73 69 6e 63 65 20 43 6f 64 65 6c 20 69 6e 74 65 72 6e 61 6c 6c | is.avoided.since.Codel.internall |
513a0 | 79 20 75 73 65 73 20 61 20 46 49 46 4f 20 71 75 65 75 65 2e 00 49 74 20 77 69 6c 6c 20 62 65 20 | y.uses.a.FIFO.queue..It.will.be. |
513c0 | 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 74 68 65 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 | combined.with.the.delegated.pref |
513e0 | 69 78 20 61 6e 64 20 74 68 65 20 73 6c 61 2d 69 64 20 74 6f 20 66 6f 72 6d 20 61 20 63 6f 6d 70 | ix.and.the.sla-id.to.form.a.comp |
51400 | 6c 65 74 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 64 65 66 61 | lete.interface.address..The.defa |
51420 | 75 6c 74 20 69 73 20 74 6f 20 75 73 65 20 74 68 65 20 45 55 49 2d 36 34 20 61 64 64 72 65 73 73 | ult.is.to.use.the.EUI-64.address |
51440 | 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 49 74 27 73 20 65 61 73 79 20 74 6f 20 | .of.the.interface..It's.easy.to. |
51460 | 73 65 74 75 70 20 61 6e 64 20 6f 66 66 65 72 73 20 76 65 72 79 20 66 6c 65 78 69 62 6c 65 20 73 | setup.and.offers.very.flexible.s |
51480 | 70 6c 69 74 20 74 75 6e 6e 65 6c 69 6e 67 00 49 74 27 73 20 6e 6f 74 20 6c 69 6b 65 6c 79 20 74 | plit.tunneling.It's.not.likely.t |
514a0 | 68 61 74 20 61 6e 79 6f 6e 65 20 77 69 6c 6c 20 6e 65 65 64 20 69 74 20 61 6e 79 20 74 69 6d 65 | hat.anyone.will.need.it.any.time |
514c0 | 20 73 6f 6f 6e 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 65 78 69 73 74 2e 00 49 74 27 73 20 73 | .soon,.but.it.does.exist..It's.s |
514e0 | 6c 6f 77 65 72 20 74 68 61 6e 20 49 50 73 65 63 20 64 75 65 20 74 6f 20 68 69 67 68 65 72 20 70 | lower.than.IPsec.due.to.higher.p |
51500 | 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 65 61 64 20 61 6e 64 20 74 68 65 20 66 61 63 74 20 69 74 | rotocol.overhead.and.the.fact.it |
51520 | 20 72 75 6e 73 20 69 6e 20 75 73 65 72 20 6d 6f 64 65 20 77 68 69 6c 65 20 49 50 73 65 63 2c 20 | .runs.in.user.mode.while.IPsec,. |
51540 | 6f 6e 20 4c 69 6e 75 78 2c 20 69 73 20 69 6e 20 6b 65 72 6e 65 6c 20 6d 6f 64 65 00 49 74 27 73 | on.Linux,.is.in.kernel.mode.It's |
51560 | 20 74 69 6d 65 20 74 6f 20 63 68 65 63 6b 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 2c 20 | .time.to.check.conntrack.table,. |
51580 | 74 6f 20 73 65 65 20 69 66 20 61 6e 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 61 63 63 | to.see.if.any.connection.was.acc |
515a0 | 65 70 74 65 64 2c 20 61 6e 64 20 69 66 20 77 61 73 20 70 72 6f 70 65 72 6c 79 20 6f 66 66 6c 6f | epted,.and.if.was.properly.offlo |
515c0 | 61 64 65 64 00 4a 6f 69 6e 20 61 20 67 69 76 65 6e 20 56 52 46 2e 20 54 68 69 73 20 77 69 6c 6c | aded.Join.a.given.VRF..This.will |
515e0 | 20 6f 70 65 6e 20 61 20 6e 65 77 20 73 75 62 73 68 65 6c 6c 20 77 69 74 68 69 6e 20 74 68 65 20 | .open.a.new.subshell.within.the. |
51600 | 73 70 65 63 69 66 69 65 64 20 56 52 46 2e 00 4a 75 6d 70 20 74 6f 20 61 20 64 69 66 66 65 72 65 | specified.VRF..Jump.to.a.differe |
51620 | 6e 74 20 72 75 6c 65 20 69 6e 20 74 68 69 73 20 72 6f 75 74 65 2d 6d 61 70 20 6f 6e 20 61 20 6d | nt.rule.in.this.route-map.on.a.m |
51640 | 61 74 63 68 2e 00 4a 75 6e 69 70 65 72 20 45 58 20 53 77 69 74 63 68 00 4b 65 72 6e 65 6c 00 4b | atch..Juniper.EX.Switch.Kernel.K |
51660 | 65 72 6e 65 6c 20 6d 65 73 73 61 67 65 73 00 4b 65 79 20 42 61 73 65 64 20 41 75 74 68 65 6e 74 | ernel.messages.Key.Based.Authent |
51680 | 69 63 61 74 69 6f 6e 00 4b 65 79 20 47 65 6e 65 72 61 74 69 6f 6e 00 4b 65 79 20 4d 61 6e 61 67 | ication.Key.Generation.Key.Manag |
516a0 | 65 6d 65 6e 74 00 4b 65 79 20 50 61 72 61 6d 65 74 65 72 73 3a 00 4b 65 79 20 50 6f 69 6e 74 73 | ement.Key.Parameters:.Key.Points |
516c0 | 3a 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 | :.Key.exchange.and.payload.encry |
516e0 | 70 74 69 6f 6e 20 69 73 20 64 6f 6e 65 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 | ption.is.done.using.IKE.and.ESP. |
51700 | 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 | proposals.as.known.from.IKEv1.bu |
51720 | 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 | t.the.connections.are.faster.to. |
51740 | 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c | establish,.more.reliable,.and.al |
51760 | 73 6f 20 73 75 70 70 6f 72 74 20 72 6f 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 | so.support.roaming.from.IP.to.IP |
51780 | 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 | .(called.MOBIKE.which.makes.sure |
517a0 | 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 | .your.connection.does.not.drop.w |
517c0 | 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 | hen.changing.networks.from.e.g.. |
517e0 | 57 49 46 49 20 74 6f 20 4c 54 45 20 61 6e 64 20 62 61 63 6b 29 2e 20 41 75 74 68 65 6e 74 69 63 | WIFI.to.LTE.and.back)..Authentic |
51800 | 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 77 69 74 68 20 58 2e 35 30 39 | ation.can.be.achieved.with.X.509 |
51820 | 20 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 | .certificates..Key.exchange.and. |
51840 | 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 64 6f 6e 65 | payload.encryption.is.still.done |
51860 | 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 | .using.IKE.and.ESP.proposals.as. |
51880 | 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 | known.from.IKEv1.but.the.connect |
518a0 | 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f | ions.are.faster.to.establish,.mo |
518c0 | 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f | re.reliable,.and.also.support.ro |
518e0 | 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 | aming.from.IP.to.IP.(called.MOBI |
51900 | 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 | KE.which.makes.sure.your.connect |
51920 | 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 | ion.does.not.drop.when.changing. |
51940 | 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 | networks.from.e.g..WIFI.to.LTE.a |
51960 | 6e 64 20 62 61 63 6b 29 2e 00 4b 65 79 20 75 73 61 67 65 20 28 43 4c 49 29 00 4b 65 79 62 6f 61 | nd.back)..Key.usage.(CLI).Keyboa |
51980 | 72 64 20 4c 61 79 6f 75 74 00 4b 65 79 70 61 69 72 73 00 4b 65 79 77 6f 72 64 00 4c 32 54 50 00 | rd.Layout.Keypairs.Keyword.L2TP. |
519a0 | 4c 32 54 50 20 6f 76 65 72 20 49 50 73 65 63 00 4c 32 54 50 76 33 00 4c 32 54 50 76 33 20 63 61 | L2TP.over.IPsec.L2TPv3.L2TPv3.ca |
519c0 | 6e 20 62 65 20 72 65 67 61 72 64 65 64 20 61 73 20 62 65 69 6e 67 20 74 6f 20 4d 50 4c 53 20 77 | n.be.regarded.as.being.to.MPLS.w |
519e0 | 68 61 74 20 49 50 20 69 73 20 74 6f 20 41 54 4d 3a 20 61 20 73 69 6d 70 6c 69 66 69 65 64 20 76 | hat.IP.is.to.ATM:.a.simplified.v |
51a00 | 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 63 65 70 74 2c 20 77 69 74 68 | ersion.of.the.same.concept,.with |
51a20 | 20 6d 75 63 68 20 6f 66 20 74 68 65 20 73 61 6d 65 20 62 65 6e 65 66 69 74 20 61 63 68 69 65 76 | .much.of.the.same.benefit.achiev |
51a40 | 65 64 20 61 74 20 61 20 66 72 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 65 66 66 6f 72 74 2c 20 | ed.at.a.fraction.of.the.effort,. |
51a60 | 61 74 20 74 68 65 20 63 6f 73 74 20 6f 66 20 6c 6f 73 69 6e 67 20 73 6f 6d 65 20 74 65 63 68 6e | at.the.cost.of.losing.some.techn |
51a80 | 69 63 61 6c 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 65 72 65 64 20 6c 65 73 73 20 69 6d | ical.features.considered.less.im |
51aa0 | 70 6f 72 74 61 6e 74 20 69 6e 20 74 68 65 20 6d 61 72 6b 65 74 2e 00 4c 32 54 50 76 33 20 69 73 | portant.in.the.market..L2TPv3.is |
51ac0 | 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 32 31 60 2e 00 4c 32 54 50 76 | .described.in.:rfc:`3921`..L2TPv |
51ae0 | 33 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 33 31 60 2e 00 4c | 3.is.described.in.:rfc:`3931`..L |
51b00 | 32 54 50 76 33 20 6f 70 74 69 6f 6e 73 00 4c 32 54 50 76 33 3a 00 4c 33 56 50 4e 20 56 52 46 73 | 2TPv3.options.L2TPv3:.L3VPN.VRFs |
51b20 | 00 4c 44 41 50 00 4c 44 41 50 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 2e 20 44 65 66 | .LDAP.LDAP.protocol.version..Def |
51b40 | 61 75 6c 74 73 20 74 6f 20 33 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2e 00 4c 44 41 | aults.to.3.if.not.specified..LDA |
51b60 | 50 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 75 73 | P.search.filter.to.locate.the.us |
51b80 | 65 72 20 44 4e 2e 20 52 65 71 75 69 72 65 64 20 69 66 20 74 68 65 20 75 73 65 72 73 20 61 72 65 | er.DN..Required.if.the.users.are |
51ba0 | 20 69 6e 20 61 20 68 69 65 72 61 72 63 68 79 20 62 65 6c 6f 77 20 74 68 65 20 62 61 73 65 20 44 | .in.a.hierarchy.below.the.base.D |
51bc0 | 4e 2c 20 6f 72 20 69 66 20 74 68 65 20 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 6e 6f 74 20 77 | N,.or.if.the.login.name.is.not.w |
51be0 | 68 61 74 20 62 75 69 6c 64 73 20 74 68 65 20 75 73 65 72 20 73 70 65 63 69 66 69 63 20 70 61 72 | hat.builds.the.user.specific.par |
51c00 | 74 20 6f 66 20 74 68 65 20 75 73 65 72 73 20 44 4e 2e 00 4c 4c 44 50 00 4c 4c 44 50 20 70 65 72 | t.of.the.users.DN..LLDP.LLDP.per |
51c20 | 66 6f 72 6d 73 20 66 75 6e 63 74 69 6f 6e 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 65 76 65 72 | forms.functions.similar.to.sever |
51c40 | 61 6c 20 70 72 6f 70 72 69 65 74 61 72 79 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 73 75 63 68 20 61 | al.proprietary.protocols,.such.a |
51c60 | 73 20 3a 61 62 62 72 3a 60 43 44 50 20 28 43 69 73 63 6f 20 44 69 73 63 6f 76 65 72 79 20 50 72 | s.:abbr:`CDP.(Cisco.Discovery.Pr |
51c80 | 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 46 44 50 20 28 46 6f 75 6e 64 72 79 20 44 69 | otocol)`,.:abbr:`FDP.(Foundry.Di |
51ca0 | 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 4e 44 50 20 28 | scovery.Protocol)`,.:abbr:`NDP.( |
51cc0 | 4e 6f 72 74 65 6c 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 6e 64 20 | Nortel.Discovery.Protocol)`.and. |
51ce0 | 3a 61 62 62 72 3a 60 4c 4c 54 44 20 28 4c 69 6e 6b 20 4c 61 79 65 72 20 54 6f 70 6f 6c 6f 67 79 | :abbr:`LLTD.(Link.Layer.Topology |
51d00 | 20 44 69 73 63 6f 76 65 72 79 29 60 2e 00 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 | .Discovery)`..LNS.(L2TP.Network. |
51d20 | 53 65 72 76 65 72 29 00 4c 4e 53 20 61 72 65 20 6f 66 74 65 6e 20 75 73 65 64 20 74 6f 20 63 6f | Server).LNS.are.often.used.to.co |
51d40 | 6e 6e 65 63 74 20 74 6f 20 61 20 4c 41 43 20 28 4c 32 54 50 20 41 63 63 65 73 73 20 43 6f 6e 63 | nnect.to.a.LAC.(L2TP.Access.Conc |
51d60 | 65 6e 74 72 61 74 6f 72 29 2e 00 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 | entrator)..Label.Distribution.Pr |
51d80 | 6f 74 6f 63 6f 6c 00 4c 61 79 65 72 20 32 20 54 75 6e 6e 65 6c 6c 69 6e 67 20 50 72 6f 74 6f 63 | otocol.Layer.2.Tunnelling.Protoc |
51da0 | 6f 6c 20 56 65 72 73 69 6f 6e 20 33 20 69 73 20 61 6e 20 49 45 54 46 20 73 74 61 6e 64 61 72 64 | ol.Version.3.is.an.IETF.standard |
51dc0 | 20 72 65 6c 61 74 65 64 20 74 6f 20 4c 32 54 50 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 | .related.to.L2TP.that.can.be.use |
51de0 | 64 20 61 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 | d.as.an.alternative.protocol.to. |
51e00 | 3a 72 65 66 3a 60 6d 70 6c 73 60 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 | :ref:`mpls`.for.encapsulation.of |
51e20 | 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 4c 61 79 65 72 20 32 20 63 6f 6d 6d 75 6e 69 63 61 | .multiprotocol.Layer.2.communica |
51e40 | 74 69 6f 6e 73 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 | tions.traffic.over.IP.networks.. |
51e60 | 4c 69 6b 65 20 4c 32 54 50 2c 20 4c 32 54 50 76 33 20 70 72 6f 76 69 64 65 73 20 61 20 70 73 65 | Like.L2TP,.L2TPv3.provides.a.pse |
51e80 | 75 64 6f 2d 77 69 72 65 20 73 65 72 76 69 63 65 20 62 75 74 20 69 73 20 73 63 61 6c 65 64 20 74 | udo-wire.service.but.is.scaled.t |
51ea0 | 6f 20 66 69 74 20 63 61 72 72 69 65 72 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2e 00 4c 65 61 73 | o.fit.carrier.requirements..Leas |
51ec0 | 65 20 74 69 6d 65 20 77 69 6c 6c 20 62 65 20 6c 65 66 74 20 61 74 20 74 68 65 20 64 65 66 61 75 | e.time.will.be.left.at.the.defau |
51ee0 | 6c 74 20 76 61 6c 75 65 20 77 68 69 63 68 20 69 73 20 32 34 20 68 6f 75 72 73 00 4c 65 61 73 65 | lt.value.which.is.24.hours.Lease |
51f00 | 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 38 36 | .timeout.in.seconds.(default:.86 |
51f20 | 34 30 30 29 00 4c 65 67 61 63 79 20 46 69 72 65 77 61 6c 6c 00 4c 65 74 20 53 4e 4d 50 20 64 61 | 400).Legacy.Firewall.Let.SNMP.da |
51f40 | 65 6d 6f 6e 20 6c 69 73 74 65 6e 20 6f 6e 6c 79 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 | emon.listen.only.on.IP.address.1 |
51f60 | 39 32 2e 30 2e 32 2e 31 00 4c 65 74 27 73 20 61 73 73 75 6d 65 20 50 43 34 20 6f 6e 20 4c 65 61 | 92.0.2.1.Let's.assume.PC4.on.Lea |
51f80 | 66 32 20 77 61 6e 74 73 20 74 6f 20 70 69 6e 67 20 50 43 35 20 6f 6e 20 4c 65 61 66 33 2e 20 49 | f2.wants.to.ping.PC5.on.Leaf3..I |
51fa0 | 6e 73 74 65 61 64 20 6f 66 20 73 65 74 74 69 6e 67 20 4c 65 61 66 33 20 61 73 20 6f 75 72 20 72 | nstead.of.setting.Leaf3.as.our.r |
51fc0 | 65 6d 6f 74 65 20 65 6e 64 20 6d 61 6e 75 61 6c 6c 79 2c 20 4c 65 61 66 32 20 65 6e 63 61 70 73 | emote.end.manually,.Leaf2.encaps |
51fe0 | 75 6c 61 74 65 73 20 74 68 65 20 70 61 63 6b 65 74 20 69 6e 74 6f 20 61 20 55 44 50 2d 70 61 63 | ulates.the.packet.into.a.UDP-pac |
52000 | 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 20 69 74 20 74 6f 20 69 74 73 20 64 65 73 69 67 6e 61 74 | ket.and.sends.it.to.its.designat |
52020 | 65 64 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 20 76 69 61 20 53 70 69 6e 65 31 2e | ed.multicast-address.via.Spine1. |
52040 | 20 57 68 65 6e 20 53 70 69 6e 65 31 20 72 65 63 65 69 76 65 73 20 74 68 69 73 20 70 61 63 6b 65 | .When.Spine1.receives.this.packe |
52060 | 74 20 69 74 20 66 6f 72 77 61 72 64 73 20 69 74 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 6c 65 | t.it.forwards.it.to.all.other.le |
52080 | 61 76 65 73 20 77 68 6f 20 68 61 73 20 6a 6f 69 6e 65 64 20 74 68 65 20 73 61 6d 65 20 6d 75 6c | aves.who.has.joined.the.same.mul |
520a0 | 74 69 63 61 73 74 2d 67 72 6f 75 70 2c 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 4c 65 61 66 33 | ticast-group,.in.this.case.Leaf3 |
520c0 | 2e 20 57 68 65 6e 20 4c 65 61 66 33 20 72 65 63 65 69 76 65 73 20 74 68 65 20 70 61 63 6b 65 74 | ..When.Leaf3.receives.the.packet |
520e0 | 20 69 74 20 66 6f 72 77 61 72 64 73 20 69 74 2c 20 77 68 69 6c 65 20 61 74 20 74 68 65 20 73 61 | .it.forwards.it,.while.at.the.sa |
52100 | 6d 65 20 74 69 6d 65 20 6c 65 61 72 6e 69 6e 67 20 74 68 61 74 20 50 43 34 20 69 73 20 72 65 61 | me.time.learning.that.PC4.is.rea |
52120 | 63 68 61 62 6c 65 20 62 65 68 69 6e 64 20 4c 65 61 66 32 2c 20 62 65 63 61 75 73 65 20 74 68 65 | chable.behind.Leaf2,.because.the |
52140 | 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 20 68 61 64 20 4c 65 61 66 32 27 73 | .encapsulated.packet.had.Leaf2's |
52160 | 20 49 50 20 61 64 64 72 65 73 73 20 73 65 74 20 61 73 20 73 6f 75 72 63 65 20 49 50 2e 00 4c 65 | .IP.address.set.as.source.IP..Le |
52180 | 74 27 73 20 61 73 73 75 6d 65 20 77 65 20 68 61 76 65 20 74 77 6f 20 44 48 43 50 20 57 41 4e 20 | t's.assume.we.have.two.DHCP.WAN. |
521a0 | 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 6f 6e 65 20 4c 41 4e 20 28 65 74 68 32 29 3a 00 4c | interfaces.and.one.LAN.(eth2):.L |
521c0 | 65 74 27 73 20 62 75 69 6c 64 20 61 20 73 69 6d 70 6c 65 20 56 50 4e 20 62 65 74 77 65 65 6e 20 | et's.build.a.simple.VPN.between. |
521e0 | 32 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 72 65 61 64 79 20 64 65 76 69 63 65 73 2e 00 4c 65 74 | 2.Intel...QAT.ready.devices..Let |
52200 | 27 73 20 65 78 70 61 6e 64 20 74 68 65 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 | 's.expand.the.example.from.above |
52220 | 20 61 6e 64 20 61 64 64 20 77 65 69 67 68 74 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | .and.add.weight.to.the.interface |
52240 | 73 2e 20 54 68 65 20 62 61 6e 64 77 69 64 74 68 20 66 72 6f 6d 20 65 74 68 30 20 69 73 20 6c 61 | s..The.bandwidth.from.eth0.is.la |
52260 | 72 67 65 72 20 74 68 61 6e 20 65 74 68 31 2e 20 50 65 72 20 64 65 66 61 75 6c 74 2c 20 6f 75 74 | rger.than.eth1..Per.default,.out |
52280 | 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 72 61 6e | bound.traffic.is.distributed.ran |
522a0 | 64 6f 6d 6c 79 20 61 63 72 6f 73 73 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 | domly.across.available.interface |
522c0 | 73 2e 20 57 65 69 67 68 74 73 20 63 61 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 6e | s..Weights.can.be.assigned.to.in |
522e0 | 74 65 72 66 61 63 65 73 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 74 68 65 20 62 61 6c 61 6e 63 | terfaces.to.influence.the.balanc |
52300 | 69 6e 67 2e 00 4c 65 74 73 20 61 73 73 75 6d 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 | ing..Lets.assume.the.following.t |
52320 | 6f 70 6f 6c 6f 67 79 3a 00 4c 65 76 65 6c 20 34 20 62 61 6c 61 6e 63 69 6e 67 00 4c 69 66 65 74 | opology:.Level.4.balancing.Lifet |
52340 | 69 6d 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 | ime.associated.with.the.default. |
52360 | 72 6f 75 74 65 72 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 73 65 63 6f 6e 64 73 00 4c 69 66 65 74 | router.in.units.of.seconds.Lifet |
52380 | 69 6d 65 20 69 6e 20 64 61 79 73 3b 20 64 65 66 61 75 6c 74 20 69 73 20 33 36 35 00 4c 69 66 65 | ime.in.days;.default.is.365.Life |
523a0 | 74 69 6d 65 20 69 73 20 64 65 63 72 65 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 6e 75 6d 62 65 | time.is.decremented.by.the.numbe |
523c0 | 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 52 41 20 2d | r.of.seconds.since.the.last.RA.- |
523e0 | 20 75 73 65 20 69 6e 20 63 6f 6e 6a 75 6e 63 74 69 6f 6e 20 77 69 74 68 20 61 20 44 48 43 50 76 | .use.in.conjunction.with.a.DHCPv |
52400 | 36 2d 50 44 20 70 72 65 66 69 78 00 4c 69 6b 65 20 6f 6e 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 | 6-PD.prefix.Like.on.Microsoft.Wi |
52420 | 6e 64 6f 77 73 2c 20 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 6f 75 74 20 6f 66 20 74 | ndows,.Apple.iOS/iPadOS.out.of.t |
52440 | 68 65 20 62 6f 78 20 64 6f 65 73 20 6e 6f 74 20 65 78 70 6f 73 65 20 61 6c 6c 20 61 76 61 69 6c | he.box.does.not.expose.all.avail |
52460 | 61 62 6c 65 20 56 50 4e 20 6f 70 74 69 6f 6e 73 20 76 69 61 20 74 68 65 20 64 65 76 69 63 65 20 | able.VPN.options.via.the.device. |
52480 | 47 55 49 2e 00 4c 69 6d 69 74 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 20 61 6c 67 6f 72 69 | GUI..Limit.allowed.cipher.algori |
524a0 | 74 68 6d 73 20 75 73 65 64 20 64 75 72 69 6e 67 20 53 53 4c 2f 54 4c 53 20 68 61 6e 64 73 68 61 | thms.used.during.SSL/TLS.handsha |
524c0 | 6b 65 00 4c 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 3c 6c 69 6d 69 74 3e 60 20 70 65 72 | ke.Limit.logins.to.`<limit>`.per |
524e0 | 20 65 76 65 72 79 20 60 60 72 61 74 65 2d 74 69 6d 65 60 60 20 73 65 63 6f 6e 64 73 2e 20 52 61 | .every.``rate-time``.seconds..Ra |
52500 | 74 65 20 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 31 | te.limit.must.be.between.1.and.1 |
52520 | 30 20 61 74 74 65 6d 70 74 73 2e 00 4c 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 60 72 61 | 0.attempts..Limit.logins.to.``ra |
52540 | 74 65 2d 6c 69 6d 69 74 60 60 20 61 74 74 65 6d 70 73 20 70 65 72 20 65 76 65 72 79 20 60 3c 73 | te-limit``.attemps.per.every.`<s |
52560 | 65 63 6f 6e 64 73 3e 60 2e 20 52 61 74 65 20 74 69 6d 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 | econds>`..Rate.time.must.be.betw |
52580 | 65 65 6e 20 31 35 20 61 6e 64 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 4c 69 6d 69 74 20 6d 61 | een.15.and.600.seconds..Limit.ma |
525a0 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 4c 69 6d 69 | ximum.number.of.connections.Limi |
525c0 | 74 65 72 00 4c 69 6d 69 74 65 72 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 70 6f 6c 69 | ter.Limiter.is.one.of.those.poli |
525e0 | 63 69 65 73 20 74 68 61 74 20 75 73 65 73 20 63 6c 61 73 73 65 73 5f 20 28 49 6e 67 72 65 73 73 | cies.that.uses.classes_.(Ingress |
52600 | 20 71 64 69 73 63 20 69 73 20 61 63 74 75 61 6c 6c 79 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 | .qdisc.is.actually.a.classless.p |
52620 | 6f 6c 69 63 79 20 62 75 74 20 66 69 6c 74 65 72 73 20 64 6f 20 77 6f 72 6b 20 69 6e 20 69 74 29 | olicy.but.filters.do.work.in.it) |
52640 | 2e 00 4c 69 6d 69 74 73 00 4c 69 6e 65 20 70 72 69 6e 74 65 72 20 73 75 62 73 79 73 74 65 6d 00 | ..Limits.Line.printer.subsystem. |
52660 | 4c 69 6e 6b 20 4d 54 55 20 76 61 6c 75 65 20 70 6c 61 63 65 64 20 69 6e 20 52 41 73 2c 20 65 78 | Link.MTU.value.placed.in.RAs,.ex |
52680 | 6c 75 64 65 64 20 69 6e 20 52 41 73 20 69 66 20 75 6e 73 65 74 00 4c 69 6e 6b 20 61 67 67 72 65 | luded.in.RAs.if.unset.Link.aggre |
526a0 | 67 61 74 69 6f 6e 00 4c 69 6e 75 78 20 6e 65 74 66 69 6c 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 | gation.Linux.netfilter.will.not. |
526c0 | 4e 41 54 20 74 72 61 66 66 69 63 20 6d 61 72 6b 65 64 20 61 73 20 49 4e 56 41 4c 49 44 2e 20 54 | NAT.traffic.marked.as.INVALID..T |
526e0 | 68 69 73 20 6f 66 74 65 6e 20 63 6f 6e 66 75 73 65 73 20 70 65 6f 70 6c 65 20 69 6e 74 6f 20 74 | his.often.confuses.people.into.t |
52700 | 68 69 6e 6b 69 6e 67 20 74 68 61 74 20 4c 69 6e 75 78 20 28 6f 72 20 73 70 65 63 69 66 69 63 61 | hinking.that.Linux.(or.specifica |
52720 | 6c 6c 79 20 56 79 4f 53 29 20 68 61 73 20 61 20 62 72 6f 6b 65 6e 20 4e 41 54 20 69 6d 70 6c 65 | lly.VyOS).has.a.broken.NAT.imple |
52740 | 6d 65 6e 74 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 6e 6f 6e 2d 4e 41 54 65 64 20 74 72 61 66 | mentation.because.non-NATed.traf |
52760 | 66 69 63 20 69 73 20 73 65 65 6e 20 6c 65 61 76 69 6e 67 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 | fic.is.seen.leaving.an.external. |
52780 | 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 73 20 61 63 74 75 61 6c 6c 79 20 77 6f 72 6b | interface..This.is.actually.work |
527a0 | 69 6e 67 20 61 73 20 69 6e 74 65 6e 64 65 64 2c 20 61 6e 64 20 61 20 70 61 63 6b 65 74 20 63 61 | ing.as.intended,.and.a.packet.ca |
527c0 | 70 74 75 72 65 20 6f 66 20 74 68 65 20 22 6c 65 61 6b 79 22 20 74 72 61 66 66 69 63 20 73 68 6f | pture.of.the."leaky".traffic.sho |
527e0 | 75 6c 64 20 72 65 76 65 61 6c 20 74 68 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 65 | uld.reveal.that.the.traffic.is.e |
52800 | 69 74 68 65 72 20 61 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 54 43 50 20 22 52 53 54 22 2c 20 22 | ither.an.additional.TCP."RST",." |
52820 | 46 49 4e 2c 41 43 4b 22 2c 20 6f 72 20 22 52 53 54 2c 41 43 4b 22 20 73 65 6e 74 20 62 79 20 63 | FIN,ACK",.or."RST,ACK".sent.by.c |
52840 | 6c 69 65 6e 74 20 73 79 73 74 65 6d 73 20 61 66 74 65 72 20 4c 69 6e 75 78 20 6e 65 74 66 69 6c | lient.systems.after.Linux.netfil |
52860 | 74 65 72 20 63 6f 6e 73 69 64 65 72 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 6c 6f | ter.considers.the.connection.clo |
52880 | 73 65 64 2e 20 54 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 69 73 20 74 68 65 20 61 64 64 69 | sed..The.most.common.is.the.addi |
528a0 | 74 69 6f 6e 61 6c 20 54 43 50 20 52 53 54 20 73 6f 6d 65 20 68 6f 73 74 20 69 6d 70 6c 65 6d 65 | tional.TCP.RST.some.host.impleme |
528c0 | 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 20 61 66 74 65 72 20 74 65 72 6d 69 6e 61 74 69 6e 67 20 | ntations.send.after.terminating. |
528e0 | 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 77 68 69 63 68 20 69 73 20 69 6d 70 6c 65 6d 65 6e 74 | a.connection.(which.is.implement |
52900 | 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 63 29 2e 00 4c 69 73 74 20 61 6c 6c 20 4d 41 43 73 65 63 | ation-specific)..List.all.MACsec |
52920 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4c 69 73 74 20 6f 66 20 66 61 63 69 6c 69 74 69 65 73 20 | .interfaces..List.of.facilities. |
52940 | 75 73 65 64 20 62 79 20 73 79 73 6c 6f 67 2e 20 4d 6f 73 74 20 66 61 63 69 6c 69 74 69 65 73 20 | used.by.syslog..Most.facilities. |
52960 | 6e 61 6d 65 73 20 61 72 65 20 73 65 6c 66 20 65 78 70 6c 61 6e 61 74 6f 72 79 2e 20 46 61 63 69 | names.are.self.explanatory..Faci |
52980 | 6c 69 74 69 65 73 20 6c 6f 63 61 6c 30 20 2d 20 6c 6f 63 61 6c 37 20 63 6f 6d 6d 6f 6e 20 75 73 | lities.local0.-.local7.common.us |
529a0 | 61 67 65 20 69 73 20 66 2e 65 2e 20 61 73 20 6e 65 74 77 6f 72 6b 20 6c 6f 67 73 20 66 61 63 69 | age.is.f.e..as.network.logs.faci |
529c0 | 6c 69 74 69 65 73 20 66 6f 72 20 6e 6f 64 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 65 71 75 | lities.for.nodes.and.network.equ |
529e0 | 69 70 6d 65 6e 74 2e 20 47 65 6e 65 72 61 6c 6c 79 20 69 74 20 64 65 70 65 6e 64 73 20 6f 6e 20 | ipment..Generally.it.depends.on. |
52a00 | 74 68 65 20 73 69 74 75 61 74 69 6f 6e 20 68 6f 77 20 74 6f 20 63 6c 61 73 73 69 66 79 20 6c 6f | the.situation.how.to.classify.lo |
52a20 | 67 73 20 61 6e 64 20 70 75 74 20 74 68 65 6d 20 74 6f 20 66 61 63 69 6c 69 74 69 65 73 2e 20 53 | gs.and.put.them.to.facilities..S |
52a40 | 65 65 20 66 61 63 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 61 73 20 61 20 74 6f 6f 6c 20 72 61 74 | ee.facilities.more.as.a.tool.rat |
52a60 | 68 65 72 20 74 68 61 6e 20 61 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 66 6f 6c 6c 6f 77 2e 00 | her.than.a.directive.to.follow.. |
52a80 | 4c 69 73 74 20 6f 66 20 6e 65 74 77 6f 72 6b 73 20 6f 72 20 63 6c 69 65 6e 74 20 61 64 64 72 65 | List.of.networks.or.client.addre |
52aa0 | 73 73 65 73 20 70 65 72 6d 69 74 74 65 64 20 74 6f 20 63 6f 6e 74 61 63 74 20 74 68 69 73 20 4e | sses.permitted.to.contact.this.N |
52ac0 | 54 50 20 73 65 72 76 65 72 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 4d 41 43 | TP.server..List.of.supported.MAC |
52ae0 | 73 3a 20 60 60 68 6d 61 63 2d 6d 64 35 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 60 60 | s:.``hmac-md5``,.``hmac-md5-96`` |
52b00 | 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 | ,.``hmac-ripemd160``,.``hmac-sha |
52b20 | 31 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 | 1``,.``hmac-sha1-96``,.``hmac-sh |
52b40 | 61 32 2d 32 35 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 60 60 2c 20 60 60 75 | a2-256``,.``hmac-sha2-512``,.``u |
52b60 | 6d 61 63 2d 36 34 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 | mac-64@openssh.com``,.``umac-128 |
52b80 | 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 65 74 6d 40 6f | @openssh.com``,.``hmac-md5-etm@o |
52ba0 | 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 2d 65 74 6d 40 | penssh.com``,.``hmac-md5-96-etm@ |
52bc0 | 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 2d | openssh.com``,.``hmac-ripemd160- |
52be0 | 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 65 | etm@openssh.com``,.``hmac-sha1-e |
52c00 | 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 | tm@openssh.com``,.``hmac-sha1-96 |
52c20 | 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d | -etm@openssh.com``,.``hmac-sha2- |
52c40 | 32 35 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 | 256-etm@openssh.com``,.``hmac-sh |
52c60 | 61 32 2d 35 31 32 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 | a2-512-etm@openssh.com``,.``umac |
52c80 | 2d 36 34 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 | -64-etm@openssh.com``,.``umac-12 |
52ca0 | 38 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 00 4c 69 73 74 20 6f 66 20 73 75 70 70 | 8-etm@openssh.com``.List.of.supp |
52cc0 | 6f 72 74 65 64 20 61 6c 67 6f 72 69 74 68 6d 73 3a 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d | orted.algorithms:.``diffie-hellm |
52ce0 | 61 6e 2d 67 72 6f 75 70 31 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d | an-group1-sha1``,.``diffie-hellm |
52d00 | 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c | an-group14-sha1``,.``diffie-hell |
52d20 | 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 61 32 35 36 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 | man-group14-sha256``,.``diffie-h |
52d40 | 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 36 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 | ellman-group16-sha512``,.``diffi |
52d60 | 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 38 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 | e-hellman-group18-sha512``,.``di |
52d80 | 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 31 | ffie-hellman-group-exchange-sha1 |
52da0 | 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 | ``,.``diffie-hellman-group-excha |
52dc0 | 6e 67 65 2d 73 68 61 32 35 36 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 32 | nge-sha256``,.``ecdh-sha2-nistp2 |
52de0 | 35 36 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 2c 20 60 60 | 56``,.``ecdh-sha2-nistp384``,.`` |
52e00 | 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 2c 20 60 60 63 75 72 76 65 32 35 35 | ecdh-sha2-nistp521``,.``curve255 |
52e20 | 31 39 2d 73 68 61 32 35 36 60 60 20 61 6e 64 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 | 19-sha256``.and.``curve25519-sha |
52e40 | 32 35 36 40 6c 69 62 73 73 68 2e 6f 72 67 60 60 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 | 256@libssh.org``..List.of.suppor |
52e60 | 74 65 64 20 63 69 70 68 65 72 73 3a 20 60 60 33 64 65 73 2d 63 62 63 60 60 2c 20 60 60 61 65 73 | ted.ciphers:.``3des-cbc``,.``aes |
52e80 | 31 32 38 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 39 32 2d 63 62 63 60 60 2c 20 60 60 61 65 73 | 128-cbc``,.``aes192-cbc``,.``aes |
52ea0 | 32 35 36 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 32 38 2d 63 74 72 60 60 2c 20 60 60 61 65 73 | 256-cbc``,.``aes128-ctr``,.``aes |
52ec0 | 31 39 32 2d 63 74 72 60 60 2c 20 60 60 61 65 73 32 35 36 2d 63 74 72 60 60 2c 20 60 60 61 72 63 | 192-ctr``,.``aes256-ctr``,.``arc |
52ee0 | 66 6f 75 72 31 32 38 60 60 2c 20 60 60 61 72 63 66 6f 75 72 32 35 36 60 60 2c 20 60 60 61 72 63 | four128``,.``arcfour256``,.``arc |
52f00 | 66 6f 75 72 60 60 2c 20 60 60 62 6c 6f 77 66 69 73 68 2d 63 62 63 60 60 2c 20 60 60 63 61 73 74 | four``,.``blowfish-cbc``,.``cast |
52f20 | 31 32 38 2d 63 62 63 60 60 00 4c 69 73 74 20 6f 66 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d | 128-cbc``.List.of.well-known.com |
52f40 | 6d 75 6e 69 74 69 65 73 00 4c 69 73 74 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 | munities.Listen.for.DHCP.request |
52f60 | 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 60 65 74 68 31 60 60 2e 00 4c 69 73 74 73 20 56 | s.on.interface.``eth1``..Lists.V |
52f80 | 52 46 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 63 72 65 61 74 65 64 00 4c 6f 61 64 20 | RFs.that.have.been.created.Load. |
52fa0 | 42 61 6c 61 6e 63 65 00 4c 6f 61 64 20 42 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 20 74 68 65 20 | Balance.Load.Balancing.Load.the. |
52fc0 | 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 69 6e 20 6f 70 2d 6d 6f 64 65 2e 00 4c 6f 61 64 | container.image.in.op-mode..Load |
52fe0 | 2d 62 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 | -balancing.Load-balancing.algori |
53000 | 74 68 6d 73 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 64 69 73 74 72 69 62 75 74 65 64 20 | thms.to.be.used.for.distributed. |
53020 | 72 65 71 75 65 73 74 73 20 61 6d 6f 6e 67 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 73 65 72 | requests.among.the.available.ser |
53040 | 76 65 72 73 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 | vers.Load-balancing.algorithms.t |
53060 | 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 64 69 73 74 72 69 62 75 74 69 6e 64 20 72 65 71 75 65 | o.be.used.for.distributind.reque |
53080 | 73 74 73 20 61 6d 6f 6e 67 20 74 68 65 20 76 61 69 6c 61 62 6c 65 20 73 65 72 76 65 72 73 00 4c | sts.among.the.vailable.servers.L |
530a0 | 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 73 63 68 65 64 75 6c 65 20 61 6c 67 6f 72 69 74 68 6d | oad-balancing.schedule.algorithm |
530c0 | 3a 00 4c 6f 63 61 6c 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e | :.Local.Local.Configuration.-.An |
530e0 | 6e 6f 74 61 74 65 64 3a 00 4c 6f 63 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4c 6f | notated:.Local.Configuration:.Lo |
53100 | 63 61 6c 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d | cal.IP.`<address>`.used.when.com |
53120 | 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 48 41 20 70 65 65 72 2e 00 4c 6f 63 61 6c | municating.to.the.HA.peer..Local |
53140 | 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 6d 75 6e | .IP.`<address>`.used.when.commun |
53160 | 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 2e 00 4c 6f | icating.to.the.failover.peer..Lo |
53180 | 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 00 4c 6f | cal.IP.addresses.to.listen.on.Lo |
531a0 | 63 61 6c 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 73 65 72 76 69 63 65 20 74 | cal.IPv4.addresses.for.service.t |
531c0 | 6f 20 6c 69 73 74 65 6e 20 6f 6e 2e 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 34 00 4c 6f | o.listen.on..Local.Route.IPv4.Lo |
531e0 | 63 61 6c 20 52 6f 75 74 65 20 49 50 76 36 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 50 6f 6c 69 63 | cal.Route.IPv6.Local.Route.Polic |
53200 | 79 00 4c 6f 63 61 6c 20 55 73 65 72 20 41 63 63 6f 75 6e 74 00 4c 6f 63 61 6c 20 70 61 74 68 20 | y.Local.User.Account.Local.path. |
53220 | 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 6b 6e 6f 77 6e 20 68 6f 73 74 73 20 66 69 | that.includes.the.known.hosts.fi |
53240 | 6c 65 2e 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 | le..Local.path.that.includes.the |
53260 | 20 70 72 69 76 61 74 65 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e | .private.key.file.of.the.router. |
53280 | 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 | .Local.path.that.includes.the.pu |
532a0 | 62 6c 69 63 20 6b 65 79 20 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 | blic.key.file.of.the.router..Loc |
532c0 | 61 6c 20 72 6f 75 74 65 00 4c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 20 74 6f 20 73 65 72 69 | al.route.Locally.connect.to.seri |
532e0 | 61 6c 20 70 6f 72 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 76 69 63 65 3e 60 | al.port.identified.by.`<device>` |
53300 | 2e 00 4c 6f 63 61 6c 6c 79 20 73 69 67 6e 69 66 69 63 61 6e 74 20 61 64 6d 69 6e 69 73 74 72 61 | ..Locally.significant.administra |
53320 | 74 69 76 65 20 64 69 73 74 61 6e 63 65 2e 00 4c 6f 67 20 61 6c 65 72 74 00 4c 6f 67 20 61 75 64 | tive.distance..Log.alert.Log.aud |
53340 | 69 74 00 4c 6f 67 20 65 76 65 72 79 74 68 69 6e 67 00 4c 6f 67 20 6d 65 73 73 61 67 65 73 20 66 | it.Log.everything.Log.messages.f |
53360 | 72 6f 6d 20 61 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 20 63 61 6e 20 62 65 20 64 69 73 | rom.a.specified.image.can.be.dis |
53380 | 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 44 65 74 61 69 6c 73 20 6f | played.on.the.console..Details.o |
533a0 | 66 20 61 6c 6c 6f 77 65 64 20 70 61 72 61 6d 65 74 65 72 73 3a 00 4c 6f 67 20 73 79 73 6c 6f 67 | f.allowed.parameters:.Log.syslog |
533c0 | 20 6d 65 73 73 61 67 65 73 20 74 6f 20 60 60 2f 64 65 76 2f 63 6f 6e 73 6f 6c 65 60 60 2c 20 66 | .messages.to.``/dev/console``,.f |
533e0 | 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f | or.an.explanation.on.:ref:`syslo |
53400 | 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a | g_facilities`.keywords.and.:ref: |
53420 | 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 | `syslog_severity_level`.keywords |
53440 | 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 | .see.tables.below..Log.syslog.me |
53460 | 73 73 61 67 65 73 20 74 6f 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 76 69 61 20 60 3c 66 | ssages.to.file.specified.via.`<f |
53480 | 69 6c 65 6e 61 6d 65 3e 60 2c 20 66 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e | ilename>`,.for.an.explanation.on |
534a0 | 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 | .:ref:`syslog_facilities`.keywor |
534c0 | 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 | ds.and.:ref:`syslog_severity_lev |
534e0 | 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c | el`.keywords.see.tables.below..L |
53500 | 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 68 6f 73 | og.syslog.messages.to.remote.hos |
53520 | 74 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 20 54 68 65 20 | t.specified.by.`<address>`..The. |
53540 | 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 65 69 74 68 | address.can.be.specified.by.eith |
53560 | 65 72 20 46 51 44 4e 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 46 6f 72 20 61 6e 20 65 78 | er.FQDN.or.IP.address..For.an.ex |
53580 | 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 | planation.on.:ref:`syslog_facili |
535a0 | 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f | ties`.keywords.and.:ref:`syslog_ |
535c0 | 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 | severity_level`.keywords.see.tab |
535e0 | 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 | les.below..Log.the.connection.tr |
53600 | 61 63 6b 69 6e 67 20 65 76 65 6e 74 73 20 70 65 72 20 70 72 6f 74 6f 63 6f 6c 2e 00 4c 6f 67 67 | acking.events.per.protocol..Logg |
53620 | 69 6e 67 00 4c 6f 67 67 69 6e 67 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 20 66 6f 72 20 65 76 | ing.Logging.can.be.enable.for.ev |
53640 | 65 72 79 20 73 69 6e 67 6c 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 49 66 20 65 6e 61 | ery.single.firewall.rule..If.ena |
53660 | 62 6c 65 64 2c 20 6f 74 68 65 72 20 6c 6f 67 20 6f 70 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 | bled,.other.log.options.can.be.d |
53680 | 65 66 69 6e 65 64 2e 00 4c 6f 67 67 69 6e 67 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 | efined..Logging.to.a.remote.host |
536a0 | 20 6c 65 61 76 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 6c 6f 67 67 69 6e 67 20 63 6f 6e 66 69 67 | .leaves.the.local.logging.config |
536c0 | 75 72 61 74 69 6f 6e 20 69 6e 74 61 63 74 2c 20 69 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | uration.intact,.it.can.be.config |
536e0 | 75 72 65 64 20 69 6e 20 70 61 72 61 6c 6c 65 6c 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 6c | ured.in.parallel.to.a.custom.fil |
53700 | 65 20 6f 72 20 63 6f 6e 73 6f 6c 65 20 6c 6f 67 67 69 6e 67 2e 20 59 6f 75 20 63 61 6e 20 6c 6f | e.or.console.logging..You.can.lo |
53720 | 67 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 | g.to.multiple.hosts.at.the.same. |
53740 | 74 69 6d 65 2c 20 75 73 69 6e 67 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 54 | time,.using.either.TCP.or.UDP..T |
53760 | 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 73 65 6e 64 69 6e 67 20 74 68 65 20 6d 65 73 73 61 67 | he.default.is.sending.the.messag |
53780 | 65 73 20 76 69 61 20 70 6f 72 74 20 35 31 34 2f 55 44 50 2e 00 4c 6f 67 69 6e 20 42 61 6e 6e 65 | es.via.port.514/UDP..Login.Banne |
537a0 | 72 00 4c 6f 67 69 6e 20 6c 69 6d 69 74 73 00 4c 6f 67 69 6e 2f 55 73 65 72 20 4d 61 6e 61 67 65 | r.Login.limits.Login/User.Manage |
537c0 | 6d 65 6e 74 00 4c 6f 6f 70 20 46 72 65 65 20 41 6c 74 65 72 6e 61 74 65 20 28 4c 46 41 29 00 4c | ment.Loop.Free.Alternate.(LFA).L |
537e0 | 6f 6f 70 62 61 63 6b 00 4c 6f 6f 70 62 61 63 6b 73 20 6f 63 63 75 72 73 20 61 74 20 74 68 65 20 | oopback.Loopbacks.occurs.at.the. |
53800 | 49 50 20 6c 65 76 65 6c 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 61 73 20 66 6f 72 20 6f 74 68 | IP.level.the.same.way.as.for.oth |
53820 | 65 72 20 69 6e 74 65 72 66 61 63 65 73 2c 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 61 | er.interfaces,.ethernet.frames.a |
53840 | 72 65 20 6e 6f 74 20 66 6f 72 77 61 72 64 65 64 20 62 65 74 77 65 65 6e 20 50 73 65 75 64 6f 2d | re.not.forwarded.between.Pseudo- |
53860 | 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4c 6f 77 00 4d 41 43 20 47 72 6f | Ethernet.interfaces..Low.MAC.Gro |
53880 | 75 70 73 00 4d 41 43 20 61 64 64 72 65 73 73 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 60 3e 20 69 | ups.MAC.address.aging.`<time`>.i |
538a0 | 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 30 30 29 2e 00 4d 41 43 2f 50 48 | n.seconds.(default:.300)..MAC/PH |
538c0 | 59 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 4d 41 43 56 4c 41 4e 20 2d 20 50 73 65 75 64 6f 20 45 | Y.information.MACVLAN.-.Pseudo.E |
538e0 | 74 68 65 72 6e 65 74 00 4d 41 43 73 65 63 00 4d 41 43 73 65 63 20 69 73 20 61 6e 20 49 45 45 45 | thernet.MACsec.MACsec.is.an.IEEE |
53900 | 20 73 74 61 6e 64 61 72 64 20 28 49 45 45 45 20 38 30 32 2e 31 41 45 29 20 66 6f 72 20 4d 41 43 | .standard.(IEEE.802.1AE).for.MAC |
53920 | 20 73 65 63 75 72 69 74 79 2c 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 32 30 30 36 2e 20 49 | .security,.introduced.in.2006..I |
53940 | 74 20 64 65 66 69 6e 65 73 20 61 20 77 61 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 70 | t.defines.a.way.to.establish.a.p |
53960 | 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 | rotocol.independent.connection.b |
53980 | 65 74 77 65 65 6e 20 74 77 6f 20 68 6f 73 74 73 20 77 69 74 68 20 64 61 74 61 20 63 6f 6e 66 69 | etween.two.hosts.with.data.confi |
539a0 | 64 65 6e 74 69 61 6c 69 74 79 2c 20 61 75 74 68 65 6e 74 69 63 69 74 79 20 61 6e 64 2f 6f 72 20 | dentiality,.authenticity.and/or. |
539c0 | 69 6e 74 65 67 72 69 74 79 2c 20 75 73 69 6e 67 20 47 43 4d 2d 41 45 53 2d 31 32 38 2e 20 4d 41 | integrity,.using.GCM-AES-128..MA |
539e0 | 43 73 65 63 20 6f 70 65 72 61 74 65 73 20 6f 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 61 | Csec.operates.on.the.Ethernet.la |
53a00 | 79 65 72 20 61 6e 64 20 61 73 20 73 75 63 68 20 69 73 20 61 20 6c 61 79 65 72 20 32 20 70 72 6f | yer.and.as.such.is.a.layer.2.pro |
53a20 | 74 6f 63 6f 6c 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 69 74 27 73 20 64 65 73 69 67 6e 65 64 | tocol,.which.means.it's.designed |
53a40 | 20 74 6f 20 73 65 63 75 72 65 20 74 72 61 66 66 69 63 20 77 69 74 68 69 6e 20 61 20 6c 61 79 65 | .to.secure.traffic.within.a.laye |
53a60 | 72 20 32 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 63 6c 75 64 69 6e 67 20 44 48 43 50 20 6f 72 20 41 | r.2.network,.including.DHCP.or.A |
53a80 | 52 50 20 72 65 71 75 65 73 74 73 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6d 70 65 74 65 | RP.requests..It.does.not.compete |
53aa0 | 20 77 69 74 68 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 73 20 73 | .with.other.security.solutions.s |
53ac0 | 75 63 68 20 61 73 20 49 50 73 65 63 20 28 6c 61 79 65 72 20 33 29 20 6f 72 20 54 4c 53 20 28 6c | uch.as.IPsec.(layer.3).or.TLS.(l |
53ae0 | 61 79 65 72 20 34 29 2c 20 61 73 20 61 6c 6c 20 74 68 6f 73 65 20 73 6f 6c 75 74 69 6f 6e 73 20 | ayer.4),.as.all.those.solutions. |
53b00 | 61 72 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 69 72 20 6f 77 6e 20 73 70 65 63 69 66 69 63 20 | are.used.for.their.own.specific. |
53b20 | 75 73 65 20 63 61 73 65 73 2e 00 4d 41 43 73 65 63 20 6f 6e 6c 79 20 70 72 6f 76 69 64 65 73 20 | use.cases..MACsec.only.provides. |
53b40 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 79 20 64 65 66 61 75 6c 74 2c 20 65 6e 63 72 79 | authentication.by.default,.encry |
53b60 | 70 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ption.is.optional..This.command. |
53b80 | 77 69 6c 6c 20 65 6e 61 62 6c 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6f | will.enable.encryption.for.all.o |
53ba0 | 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 73 2e 00 4d 41 43 73 65 63 20 6f 70 74 69 6f 6e 73 00 | utgoing.packets..MACsec.options. |
53bc0 | 4d 44 49 20 70 6f 77 65 72 00 4d 46 41 2f 32 46 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | MDI.power.MFA/2FA.authentication |
53be0 | 20 75 73 69 6e 67 20 4f 54 50 20 28 6f 6e 65 20 74 69 6d 65 20 70 61 73 73 77 6f 72 64 73 29 00 | .using.OTP.(one.time.passwords). |
53c00 | 4d 50 4c 53 00 4d 50 4c 53 20 73 75 70 70 6f 72 74 20 69 6e 20 56 79 4f 53 20 69 73 20 6e 6f 74 | MPLS.MPLS.support.in.VyOS.is.not |
53c20 | 20 66 69 6e 69 73 68 65 64 20 79 65 74 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 69 74 73 | .finished.yet,.and.therefore.its |
53c40 | 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 6c 69 6d 69 74 65 64 2e 20 43 75 72 72 65 | .functionality.is.limited..Curre |
53c60 | 6e 74 6c 79 20 74 68 65 72 65 20 69 73 20 6e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c | ntly.there.is.no.support.for.MPL |
53c80 | 53 20 65 6e 61 62 6c 65 64 20 56 50 4e 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 4c | S.enabled.VPN.services.such.as.L |
53ca0 | 32 56 50 4e 73 20 61 6e 64 20 6d 56 50 4e 73 2e 20 52 53 56 50 20 73 75 70 70 6f 72 74 20 69 73 | 2VPNs.and.mVPNs..RSVP.support.is |
53cc0 | 20 61 6c 73 6f 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 61 73 20 74 68 65 20 75 6e 64 65 72 6c 79 | .also.not.present.as.the.underly |
53ce0 | 69 6e 67 20 72 6f 75 74 69 6e 67 20 73 74 61 63 6b 20 28 46 52 52 29 20 64 6f 65 73 20 6e 6f 74 | ing.routing.stack.(FRR).does.not |
53d00 | 20 69 6d 70 6c 65 6d 65 6e 74 20 69 74 2e 20 43 75 72 72 65 6e 74 6c 79 20 56 79 4f 53 20 69 6d | .implement.it..Currently.VyOS.im |
53d20 | 70 6c 65 6d 65 6e 74 73 20 4c 44 50 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 52 46 43 | plements.LDP.as.described.in.RFC |
53d40 | 20 35 30 33 36 3b 20 6f 74 68 65 72 20 4c 44 50 20 73 74 61 6e 64 61 72 64 20 61 72 65 20 74 68 | .5036;.other.LDP.standard.are.th |
53d60 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 6e 65 73 3a 20 52 46 43 20 36 37 32 30 2c 20 52 46 43 20 | e.following.ones:.RFC.6720,.RFC. |
53d80 | 36 36 36 37 2c 20 52 46 43 20 35 39 31 39 2c 20 52 46 43 20 35 35 36 31 2c 20 52 46 43 20 37 35 | 6667,.RFC.5919,.RFC.5561,.RFC.75 |
53da0 | 35 32 2c 20 52 46 43 20 34 34 34 37 2e 20 42 65 63 61 75 73 65 20 4d 50 4c 53 20 69 73 20 61 6c | 52,.RFC.4447..Because.MPLS.is.al |
53dc0 | 72 65 61 64 79 20 61 76 61 69 6c 61 62 6c 65 20 28 46 52 52 20 61 6c 73 6f 20 73 75 70 70 6f 72 | ready.available.(FRR.also.suppor |
53de0 | 74 73 20 52 46 43 20 33 30 33 31 29 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 | ts.RFC.3031)..MSS.value.=.MTU.-. |
53e00 | 32 30 20 28 49 50 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 72 29 | 20.(IP.header).-.20.(TCP.header) |
53e20 | 2c 20 72 65 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 35 32 20 62 79 74 65 73 20 6f 6e 20 61 20 31 | ,.resulting.in.1452.bytes.on.a.1 |
53e40 | 34 39 32 20 62 79 74 65 20 4d 54 55 2e 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 | 492.byte.MTU..MSS.value.=.MTU.-. |
53e60 | 34 30 20 28 49 50 76 36 20 68 65 61 64 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 | 40.(IPv6.header).-.20.(TCP.heade |
53e80 | 72 29 2c 20 72 65 73 75 6c 74 69 6e 67 20 69 6e 20 31 34 33 32 20 62 79 74 65 73 20 6f 6e 20 61 | r),.resulting.in.1432.bytes.on.a |
53ea0 | 20 31 34 39 32 20 62 79 74 65 20 4d 54 55 2e 00 4d 54 55 00 4d 61 69 6c 20 73 79 73 74 65 6d 00 | .1492.byte.MTU..MTU.Mail.system. |
53ec0 | 4d 61 69 6e 20 6e 6f 74 65 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 74 | Main.notes.regarding.this.packet |
53ee0 | 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 79 | .flow.and.terminology.used.in.Vy |
53f00 | 4f 53 20 66 69 72 65 77 61 6c 6c 3a 00 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 | OS.firewall:.Main.structure.VyOS |
53f20 | 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 | .firewall.cli.is.shown.next:.Mai |
53f40 | 6e 20 73 74 72 75 63 74 75 72 65 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 74 | n.structure.is.shown.next:.Maint |
53f60 | 65 6e 61 6e 63 65 20 6d 6f 64 65 00 4d 61 6b 65 20 73 75 72 65 20 63 6f 6e 6e 74 72 61 63 6b 20 | enance.mode.Make.sure.conntrack. |
53f80 | 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 72 75 6e 6e 69 6e 67 20 61 6e 64 20 73 68 6f 77 20 63 | is.enabled.by.running.and.show.c |
53fa0 | 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 4d 61 6e 61 67 65 | onnection.tracking.table..Manage |
53fc0 | 64 20 64 65 76 69 63 65 73 00 4d 61 6e 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 20 50 72 6f 74 65 | d.devices.Management.Frame.Prote |
53fe0 | 63 74 69 6f 6e 20 28 4d 46 50 29 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 49 45 45 45 20 38 30 | ction.(MFP).according.to.IEEE.80 |
54000 | 32 2e 31 31 77 00 4d 61 6e 64 61 74 6f 72 79 20 53 65 74 74 69 6e 67 73 00 4d 61 6e 75 61 6c 20 | 2.11w.Mandatory.Settings.Manual. |
54020 | 4e 65 69 67 68 62 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4d 61 6e 75 61 6c 6c 79 20 | Neighbor.Configuration.Manually. |
54040 | 74 72 69 67 67 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 72 65 6e 65 77 61 6c 2e 20 54 68 69 | trigger.certificate.renewal..Thi |
54060 | 73 20 77 69 6c 6c 20 62 65 20 64 6f 6e 65 20 74 77 69 63 65 20 61 20 64 61 79 2e 00 4d 61 70 73 | s.will.be.done.twice.a.day..Maps |
54080 | 20 74 68 65 20 56 4e 49 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 56 4c 41 4e 20 69 | .the.VNI.to.the.specified.VLAN.i |
540a0 | 64 2e 20 54 68 65 20 56 4c 41 4e 20 63 61 6e 20 74 68 65 6e 20 62 65 20 63 6f 6e 73 75 6d 65 64 | d..The.VLAN.can.then.be.consumed |
540c0 | 20 62 79 20 61 20 62 72 69 64 67 65 2e 00 4d 61 72 6b 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | .by.a.bridge..Mark.RADIUS.server |
540e0 | 20 61 73 20 6f 66 66 6c 69 6e 65 20 66 6f 72 20 74 68 69 73 20 67 69 76 65 6e 20 60 3c 74 69 6d | .as.offline.for.this.given.`<tim |
54100 | 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 4d 61 72 6b 20 74 68 65 20 43 41 73 20 70 72 69 | e>`.in.seconds..Mark.the.CAs.pri |
54120 | 76 61 74 65 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 2e 20 | vate.key.as.password.protected.. |
54140 | 55 73 65 72 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 77 | User.is.asked.for.the.password.w |
54160 | 68 65 6e 20 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 72 6b 20 | hen.the.key.is.referenced..Mark. |
54180 | 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 | the.private.key.as.password.prot |
541a0 | 65 63 74 65 64 2e 20 55 73 65 72 20 69 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 | ected..User.is.asked.for.the.pas |
541c0 | 73 77 6f 72 64 20 77 68 65 6e 20 74 68 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 | sword.when.the.key.is.referenced |
541e0 | 2e 00 4d 61 74 63 68 20 42 47 50 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 4d | ..Match.BGP.large.communities..M |
54200 | 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 67 | atch.IP.addresses.based.on.its.g |
54220 | 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d 61 | eolocation..More.info:.`geoip.ma |
54240 | 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 | tching.<https://wiki.nftables.or |
54260 | 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 5f | g/wiki-nftables/index.php/GeoIP_ |
54280 | 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 00 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | matching>`_..Match.IP.addresses. |
542a0 | 62 61 73 65 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 | based.on.its.geolocation..More.i |
542c0 | 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 | nfo:.`geoip.matching.<https://wi |
542e0 | 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e | ki.nftables.org/wiki-nftables/in |
54300 | 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 20 55 73 65 20 69 | dex.php/GeoIP_matching>`_..Use.i |
54320 | 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e 67 20 65 | nverse-match.to.match.anything.e |
54340 | 78 63 65 70 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 2e 00 4d | xcept.the.given.country-codes..M |
54360 | 61 74 63 68 20 52 50 4b 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 00 4d 61 74 | atch.RPKI.validation.result..Mat |
54380 | 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 | ch.a.protocol.criteria..A.protoc |
543a0 | 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 64 65 66 | ol.number.or.a.name.which.is.def |
543c0 | 69 6e 65 64 20 69 6e 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 70 65 | ined.in:.``/etc/protocols``..Spe |
543e0 | 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c 20 70 | cial.names.are.``all``.for.all.p |
54400 | 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 63 70 | rotocols.and.``tcp_udp``.for.tcp |
54420 | 20 61 6e 64 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 21 60 | .and.udp.based.packets..The.``!` |
54440 | 60 20 6e 65 67 61 74 65 73 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e | `.negates.the.selected.protocol. |
54460 | 00 4d 61 74 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 | .Match.a.protocol.criteria..A.pr |
54480 | 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 | otocol.number.or.a.name.which.is |
544a0 | 20 68 65 72 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 | .here.defined:.``/etc/protocols` |
544c0 | 60 2e 20 53 70 65 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 | `..Special.names.are.``all``.for |
544e0 | 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 | .all.protocols.and.``tcp_udp``.f |
54500 | 6f 72 20 74 63 70 20 61 6e 64 20 75 64 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 | or.tcp.and.udp.based.packets..Th |
54520 | 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 | e.``!``.negate.the.selected.prot |
54540 | 6f 63 6f 6c 2e 00 4d 61 74 63 68 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 74 61 74 65 20 6f 66 | ocol..Match.against.the.state.of |
54560 | 20 61 20 70 61 63 6b 65 74 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 | .a.packet..Match.based.on.connec |
54580 | 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f | tion.tracking.protocol.helper.mo |
545a0 | 64 75 6c 65 20 74 6f 20 73 65 63 75 72 65 20 75 73 65 20 6f 66 20 74 68 61 74 20 68 65 6c 70 65 | dule.to.secure.use.of.that.helpe |
545c0 | 72 20 6d 6f 64 75 6c 65 2e 20 53 65 65 20 62 65 6c 6f 77 20 66 6f 72 20 70 6f 73 73 69 62 6c 65 | r.module..See.below.for.possible |
545e0 | 20 63 6f 6d 70 6c 65 74 69 6f 6e 73 20 60 3c 6d 6f 64 75 6c 65 3e 60 2e 00 4d 61 74 63 68 20 62 | .completions.`<module>`..Match.b |
54600 | 61 73 65 64 20 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 20 63 72 69 74 65 72 69 61 2e 20 4d 75 6c | ased.on.dscp.value.criteria..Mul |
54620 | 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 30 20 74 6f 20 36 33 20 61 6e 64 20 72 61 | tiple.values.from.0.to.63.and.ra |
54640 | 6e 67 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 | nges.are.supported..Match.based. |
54660 | 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 66 72 | on.dscp.value..Match.based.on.fr |
54680 | 61 67 6d 65 6e 74 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 | agment.criteria..Match.based.on. |
546a0 | 69 63 6d 70 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 | icmp.code.and.type..Match.based. |
546c0 | 6f 6e 20 69 63 6d 70 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 | on.icmp.type-name.criteria..Use. |
546e0 | 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a | tab.for.information.about.what.* |
54700 | 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 | *type-name**.criteria.are.suppor |
54720 | 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 76 36 20 74 79 70 65 2d | ted..Match.based.on.icmpv6.type- |
54740 | 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 | name.criteria..Use.tab.for.infor |
54760 | 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 | mation.about.what.**type-name**. |
54780 | 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 | criteria.are.supported..Match.ba |
547a0 | 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 | sed.on.icmp|icmpv6.code.and.type |
547c0 | 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 | ..Match.based.on.icmp|icmpv6.typ |
547e0 | 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 | e-name.criteria..Use.tab.for.inf |
54800 | 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a | ormation.about.what.**type-name* |
54820 | 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 | *.criteria.are.supported..Match. |
54840 | 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 | based.on.icmp|icmpv6.type-name.c |
54860 | 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | riteria..Use.tab.for.information |
54880 | 20 61 62 6f 75 74 20 77 68 61 74 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 20 61 | .about.what.type-name.criteria.a |
548a0 | 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 | re.supported..Match.based.on.inb |
548c0 | 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 | ound.interface.group..Prepending |
548e0 | 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 | .character.``!``.for.inverted.ma |
54900 | 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 | tching.criteria.is.also.supportd |
54920 | 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d | ..For.example.``!IFACE_GROUP``.M |
54940 | 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e | atch.based.on.inbound.interface. |
54960 | 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 | .Wilcard.``*``.can.be.used..For. |
54980 | 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f | example:.``eth2*``.Match.based.o |
549a0 | 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a | n.inbound.interface..Wilcard.``* |
549c0 | 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 | ``.can.be.used..For.example:.``e |
549e0 | 74 68 32 2a 60 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 | th2*``..Prepending.character.``! |
54a00 | 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 | ``.for.inverted.matching.criteri |
54a20 | 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 | a.is.also.supportd..For.example. |
54a40 | 60 60 21 65 74 68 32 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 | ``!eth2``.Match.based.on.inbound |
54a60 | 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a | /outbound.interface..Wilcard.``* |
54a80 | 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 | ``.can.be.used..For.example:.``e |
54aa0 | 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 70 73 65 63 20 63 72 69 74 | th2*``.Match.based.on.ipsec.crit |
54ac0 | 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e | eria..Match.based.on.outbound.in |
54ae0 | 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 | terface.group..Prepending.charac |
54b00 | 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 | ter.``!``.for.inverted.matching. |
54b20 | 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 | criteria.is.also.supportd..For.e |
54b40 | 78 61 6d 70 6c 65 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 20 62 61 | xample.``!IFACE_GROUP``.Match.ba |
54b60 | 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 | sed.on.outbound.interface..Wilca |
54b80 | 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c | rd.``*``.can.be.used..For.exampl |
54ba0 | 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 | e:.``eth2*``.Match.based.on.outb |
54bc0 | 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 | ound.interface..Wilcard.``*``.ca |
54be0 | 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 | n.be.used..For.example:.``eth2*` |
54c00 | 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f | `..Prepending.character.``!``.fo |
54c20 | 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 | r.inverted.matching.criteria.is. |
54c40 | 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 74 | also.supportd..For.example.``!et |
54c60 | 68 32 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 | h2``.Match.based.on.packet.lengt |
54c80 | 68 20 63 72 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 72 6f 6d | h.criteria..Multiple.values.from |
54ca0 | 20 31 20 74 6f 20 36 35 35 33 35 20 61 6e 64 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 70 70 6f | .1.to.65535.and.ranges.are.suppo |
54cc0 | 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 74 79 70 65 | rted..Match.based.on.packet.type |
54ce0 | 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 | .criteria..Match.based.on.the.ma |
54d00 | 78 69 6d 75 6d 20 61 76 65 72 61 67 65 20 72 61 74 65 2c 20 73 70 65 63 69 66 69 65 64 20 61 73 | ximum.average.rate,.specified.as |
54d20 | 20 2a 2a 69 6e 74 65 67 65 72 2f 75 6e 69 74 2a 2a 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 2a | .**integer/unit**..For.example.* |
54d40 | 2a 35 2f 6d 69 6e 75 74 65 73 2a 2a 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 | *5/minutes**.Match.based.on.the. |
54d60 | 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6c | maximum.number.of.packets.to.all |
54d80 | 6f 77 20 69 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e 00 4d 61 74 63 68 20 62 61 73 65 | ow.in.excess.of.rate..Match.base |
54da0 | 64 20 6f 6e 20 76 6c 61 6e 20 49 44 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 | d.on.vlan.ID..Range.is.also.supp |
54dc0 | 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 70 72 69 6f 72 | orted..Match.based.on.vlan.prior |
54de0 | 69 74 79 28 70 63 70 29 2e 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 | ity(pcp)..Range.is.also.supporte |
54e00 | 64 2e 00 4d 61 74 63 68 20 62 61 73 65 73 20 6f 6e 20 72 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 | d..Match.bases.on.recently.seen. |
54e20 | 73 6f 75 72 63 65 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e | sources..Match.criteria.based.on |
54e40 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 | .connection.mark..Match.criteria |
54e60 | 20 62 61 73 65 64 20 6f 6e 20 6e 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 2e | .based.on.nat.connection.status. |
54e80 | 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 | .Match.criteria.based.on.source. |
54ea0 | 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 | and/or.destination.address..This |
54ec0 | 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 | .is.similar.to.the.network.group |
54ee0 | 73 20 70 61 72 74 2c 20 62 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f | s.part,.but.here.you.are.able.to |
54f00 | 20 6e 65 67 61 74 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 | .negate.the.matching.addresses.. |
54f20 | 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 | Match.criteria.based.on.source.a |
54f40 | 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4d | nd/or.destination.mac-address..M |
54f60 | 61 74 63 68 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 4d 61 74 63 68 20 66 69 72 65 77 61 6c 6c 20 | atch.domain.name.Match.firewall. |
54f80 | 6d 61 72 6b 20 76 61 6c 75 65 00 4d 61 74 63 68 20 68 6f 70 2d 6c 69 6d 69 74 20 70 61 72 61 6d | mark.value.Match.hop-limit.param |
54fa0 | 65 74 65 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 65 71 75 | eter,.where.'eq'.stands.for.'equ |
54fc0 | 61 6c 27 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 20 74 68 | al';.'gt'.stands.for.'greater.th |
54fe0 | 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 73 20 74 | an',.and.'lt'.stands.for.'less.t |
55000 | 68 61 6e 27 2e 00 4d 61 74 63 68 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 2e 00 4d 61 | han'..Match.local.preference..Ma |
55020 | 74 63 68 20 72 6f 75 74 65 20 6d 65 74 72 69 63 2e 00 4d 61 74 63 68 20 74 69 6d 65 20 74 6f 20 | tch.route.metric..Match.time.to. |
55040 | 6c 69 76 65 20 70 61 72 61 6d 65 74 65 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 | live.parameter,.where.'eq'.stand |
55060 | 73 20 66 6f 72 20 27 65 71 75 61 6c 27 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 | s.for.'equal';.'gt'.stands.for.' |
55080 | 67 72 65 61 74 65 72 20 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 | greater.than',.and.'lt'.stands.f |
550a0 | 6f 72 20 27 6c 65 73 73 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 20 77 68 65 6e 20 27 63 6f 75 6e | or.'less.than'..Match.when.'coun |
550c0 | 74 27 20 61 6d 6f 75 6e 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 73 65 65 | t'.amount.of.connections.are.see |
550e0 | 6e 20 77 69 74 68 69 6e 20 27 74 69 6d 65 27 2e 20 54 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 | n.within.'time'..These.matching. |
55100 | 63 72 69 74 65 72 69 61 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 62 72 | criteria.can.be.used.to.block.br |
55120 | 75 74 65 2d 66 6f 72 63 65 20 61 74 74 65 6d 70 74 73 2e 00 4d 61 74 63 68 69 6e 67 20 63 72 69 | ute-force.attempts..Matching.cri |
55140 | 74 65 72 69 61 00 4d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 00 4d 61 78 69 6d 75 6d 20 41 | teria.Matching.traffic.Maximum.A |
55160 | 2d 4d 53 44 55 20 6c 65 6e 67 74 68 20 33 38 33 39 20 28 64 65 66 61 75 6c 74 29 20 6f 72 20 37 | -MSDU.length.3839.(default).or.7 |
55180 | 39 33 35 20 6f 63 74 65 74 73 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 | 935.octets.Maximum.Transmission. |
551a0 | 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 33 36 2a 2a 29 00 4d | Unit.(MTU).(default:.**1436**).M |
551c0 | 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 | aximum.Transmission.Unit.(MTU).( |
551e0 | 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 39 32 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 | default:.**1492**).Maximum.Trans |
55200 | 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 | mission.Unit.(MTU).(default:.**1 |
55220 | 35 30 30 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 44 4e 53 20 63 61 63 | 500**).Maximum.number.of.DNS.cac |
55240 | 68 65 20 65 6e 74 72 69 65 73 2e 20 31 20 6d 69 6c 6c 69 6f 6e 20 70 65 72 20 43 50 55 20 63 6f | he.entries..1.million.per.CPU.co |
55260 | 72 65 20 77 69 6c 6c 20 67 65 6e 65 72 61 6c 6c 79 20 73 75 66 66 69 63 65 20 66 6f 72 20 6d 6f | re.will.generally.suffice.for.mo |
55280 | 73 74 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 | st.installations..Maximum.number |
552a0 | 20 6f 66 20 49 50 76 34 20 6e 61 6d 65 73 65 72 76 65 72 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d | .of.IPv4.nameservers.Maximum.num |
552c0 | 62 65 72 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 20 74 | ber.of.authenticator.processes.t |
552e0 | 6f 20 73 70 61 77 6e 2e 20 49 66 20 79 6f 75 20 73 74 61 72 74 20 74 6f 6f 20 66 65 77 20 53 71 | o.spawn..If.you.start.too.few.Sq |
55300 | 75 69 64 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 77 61 69 74 20 66 6f 72 20 74 68 65 6d 20 74 | uid.will.have.to.wait.for.them.t |
55320 | 6f 20 70 72 6f 63 65 73 73 20 61 20 62 61 63 6b 6c 6f 67 20 6f 66 20 63 72 65 64 65 6e 74 69 61 | o.process.a.backlog.of.credentia |
55340 | 6c 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 2c 20 73 6c 6f 77 69 6e 67 20 69 74 20 64 6f 77 6e | l.verifications,.slowing.it.down |
55360 | 2e 20 57 68 65 6e 20 70 61 73 73 77 6f 72 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 20 61 72 | ..When.password.verifications.ar |
55380 | 65 20 64 6f 6e 65 20 76 69 61 20 61 20 28 73 6c 6f 77 29 20 6e 65 74 77 6f 72 6b 20 79 6f 75 20 | e.done.via.a.(slow).network.you. |
553a0 | 61 72 65 20 6c 69 6b 65 6c 79 20 74 6f 20 6e 65 65 64 20 6c 6f 74 73 20 6f 66 20 61 75 74 68 65 | are.likely.to.need.lots.of.authe |
553c0 | 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 | nticator.processes..Maximum.numb |
553e0 | 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 73 65 73 73 69 6f 6e 20 73 74 61 72 74 20 61 | er.of.concurrent.session.start.a |
55400 | 74 74 65 6d 70 74 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 73 74 61 74 69 6f | ttempts.Maximum.number.of.statio |
55420 | 6e 73 20 61 6c 6c 6f 77 65 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 2e 20 4e 65 77 | ns.allowed.in.station.table..New |
55440 | 20 73 74 61 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 72 65 6a 65 63 74 65 64 20 61 66 74 65 72 | .stations.will.be.rejected.after |
55460 | 20 74 68 65 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 20 69 73 20 66 75 6c 6c 2e 20 49 45 45 45 | .the.station.table.is.full..IEEE |
55480 | 20 38 30 32 2e 31 31 20 68 61 73 20 61 20 6c 69 6d 69 74 20 6f 66 20 32 30 30 37 20 64 69 66 66 | .802.11.has.a.limit.of.2007.diff |
554a0 | 65 72 65 6e 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 49 44 73 2c 20 73 6f 20 74 68 69 73 20 6e | erent.association.IDs,.so.this.n |
554c0 | 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 61 72 67 65 72 20 74 68 61 6e 20 | umber.should.not.be.larger.than. |
554e0 | 74 68 61 74 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 20 61 6e | that..Maximum.number.of.times.an |
55500 | 20 65 78 70 69 72 65 64 20 72 65 63 6f 72 64 e2 80 99 73 20 54 54 4c 20 69 73 20 65 78 74 65 6e | .expired.record...s.TTL.is.exten |
55520 | 64 65 64 20 62 79 20 33 30 73 20 77 68 65 6e 20 73 65 72 76 69 6e 67 20 73 74 61 6c 65 2e 20 45 | ded.by.30s.when.serving.stale..E |
55540 | 78 74 65 6e 73 69 6f 6e 20 6f 6e 6c 79 20 6f 63 63 75 72 73 20 69 66 20 61 20 72 65 63 6f 72 64 | xtension.only.occurs.if.a.record |
55560 | 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 66 72 65 73 68 65 64 2e 20 41 20 76 61 6c 75 65 20 6f 66 | .cannot.be.refreshed..A.value.of |
55580 | 20 30 20 6d 65 61 6e 73 20 74 68 65 20 53 65 72 76 65 20 53 74 61 6c 65 20 6d 65 63 68 61 6e 69 | .0.means.the.Serve.Stale.mechani |
555a0 | 73 6d 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 20 54 6f 20 61 6c 6c 6f 77 20 72 65 63 6f 72 64 73 | sm.is.not.used..To.allow.records |
555c0 | 20 62 65 63 6f 6d 69 6e 67 20 73 74 61 6c 65 20 74 6f 20 62 65 20 73 65 72 76 65 64 20 66 6f 72 | .becoming.stale.to.be.served.for |
555e0 | 20 61 6e 20 68 6f 75 72 2c 20 75 73 65 20 61 20 76 61 6c 75 65 20 6f 66 20 31 32 30 2e 00 4d 61 | .an.hour,.use.a.value.of.120..Ma |
55600 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 72 69 65 73 20 74 6f 20 73 65 6e 64 20 41 63 | ximum.number.of.tries.to.send.Ac |
55620 | 63 65 73 73 2d 52 65 71 75 65 73 74 2f 41 63 63 6f 75 6e 74 69 6e 67 2d 52 65 71 75 65 73 74 20 | cess-Request/Accounting-Request. |
55640 | 71 75 65 72 69 65 73 00 4d 65 64 69 75 6d 00 4d 65 6d 62 65 72 20 49 6e 74 65 72 66 61 63 65 73 | queries.Medium.Member.Interfaces |
55660 | 00 4d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 31 60 20 61 6e 64 20 56 4c | .Member.interfaces.`eth1`.and.VL |
55680 | 41 4e 20 31 30 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 32 60 00 4d 65 73 73 61 67 | AN.10.on.interface.`eth2`.Messag |
556a0 | 65 73 20 67 65 6e 65 72 61 74 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 73 79 73 6c 6f | es.generated.internally.by.syslo |
556c0 | 67 64 00 4d 65 74 72 69 73 20 76 65 72 73 69 6f 6e 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 | gd.Metris.version,.the.default.i |
556e0 | 73 20 60 60 32 60 60 00 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 65 78 70 65 63 74 | s.``2``.Microsoft.Windows.expect |
55700 | 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 | s.the.server.name.to.be.also.use |
55720 | 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f | d.in.the.server's.certificate.co |
55740 | 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 | mmon.name,.so.it's.best.to.use.t |
55760 | 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 | his.DNS.name.for.your.VPN.connec |
55780 | 74 69 6f 6e 2e 00 4d 69 6e 20 61 6e 64 20 6d 61 78 20 69 6e 74 65 72 76 61 6c 73 20 62 65 74 77 | tion..Min.and.max.intervals.betw |
557a0 | 65 65 6e 20 75 6e 73 6f 6c 69 63 69 74 65 64 20 6d 75 6c 74 69 63 61 73 74 20 52 41 73 00 4d 69 | een.unsolicited.multicast.RAs.Mi |
557c0 | 6e 75 6d 75 6d 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 20 69 73 20 70 72 6f 76 69 64 | numum.firewall.ruleset.is.provid |
557e0 | 65 64 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 73 6f 6d 65 20 66 69 6c 74 65 72 69 6e | ed,.which.includes.some.filterin |
55800 | 67 20 72 75 6c 65 73 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 74 65 20 72 75 6c 65 73 20 66 6f | g.rules,.and.appropiate.rules.fo |
55820 | 72 20 75 73 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 20 6f 66 66 6c 6f 61 64 20 63 61 70 61 62 69 | r.using.flowtable.offload.capabi |
55840 | 6c 69 74 69 65 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 6a 6f 69 6e 2f 70 72 75 6e 65 20 69 6e | lities..Modify.the.join/prune.in |
55860 | 74 65 72 76 61 6c 20 74 68 61 74 20 50 49 4d 20 75 73 65 73 20 74 6f 20 74 68 65 20 6e 65 77 20 | terval.that.PIM.uses.to.the.new. |
55880 | 76 61 6c 75 65 2e 20 54 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 63 6f | value..Time.is.specified.in.seco |
558a0 | 6e 64 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 66 | nds..Modify.the.time.out.value.f |
558c0 | 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 63 6f 6e | or.a.S,G.flow.from.1-65535.secon |
558e0 | 64 73 20 61 74 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e | ds.at.:abbr:`RP.(Rendezvous.Poin |
55900 | 74 29 60 2e 20 54 68 65 20 6e 6f 72 6d 61 6c 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 69 6f 64 | t)`..The.normal.keepalive.period |
55920 | 20 66 6f 72 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 31 | .for.the.KAT(S,G).defaults.to.21 |
55940 | 30 20 73 65 63 6f 6e 64 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 74 20 74 68 65 20 3a 61 62 62 72 | 0.seconds..However,.at.the.:abbr |
55960 | 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2c 20 74 68 65 20 6b 65 | :`RP.(Rendezvous.Point)`,.the.ke |
55980 | 65 70 61 6c 69 76 65 20 70 65 72 69 6f 64 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 | epalive.period.must.be.at.least. |
559a0 | 74 68 65 20 52 65 67 69 73 74 65 72 5f 53 75 70 70 72 65 73 73 69 6f 6e 5f 54 69 6d 65 2c 20 6f | the.Register_Suppression_Time,.o |
559c0 | 72 20 74 68 65 20 52 50 20 6d 61 79 20 74 69 6d 65 20 6f 75 74 20 74 68 65 20 28 53 2c 47 29 20 | r.the.RP.may.time.out.the.(S,G). |
559e0 | 73 74 61 74 65 20 62 65 66 6f 72 65 20 74 68 65 20 6e 65 78 74 20 4e 75 6c 6c 2d 52 65 67 69 73 | state.before.the.next.Null-Regis |
55a00 | 74 65 72 20 61 72 72 69 76 65 73 2e 20 54 68 75 73 2c 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 | ter.arrives..Thus,.the.KAT(S,G). |
55a20 | 69 73 20 73 65 74 20 74 6f 20 6d 61 78 28 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 2c 20 | is.set.to.max(Keepalive_Period,. |
55a40 | 52 50 5f 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 29 20 77 68 65 6e 20 61 20 52 65 67 69 | RP_Keepalive_Period).when.a.Regi |
55a60 | 73 74 65 72 2d 53 74 6f 70 20 69 73 20 73 65 6e 74 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 | ster-Stop.is.sent..Modify.the.ti |
55a80 | 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d | me.out.value.for.a.S,G.flow.from |
55aa0 | 20 31 2d 36 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 | .1-65535.seconds..If.choosing.a. |
55ac0 | 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 | value.below.31.seconds.be.aware. |
55ae0 | 74 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e | that.some.hardware.platforms.can |
55b00 | 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 | not.see.data.flowing.in.better.t |
55b20 | 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 | han.30.second.chunks..Modify.the |
55b40 | 20 74 69 6d 65 20 74 68 61 74 20 70 69 6d 20 77 69 6c 6c 20 72 65 67 69 73 74 65 72 20 73 75 70 | .time.that.pim.will.register.sup |
55b60 | 70 72 65 73 73 20 61 20 46 48 52 20 77 69 6c 6c 20 73 65 6e 64 20 72 65 67 69 73 74 65 72 20 6e | press.a.FHR.will.send.register.n |
55b80 | 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 4d 6f 6e 69 | otifications.to.the.kernel..Moni |
55ba0 | 74 6f 72 2c 20 74 68 65 20 73 79 73 74 65 6d 20 70 61 73 73 69 76 65 6c 79 20 6d 6f 6e 69 74 6f | tor,.the.system.passively.monito |
55bc0 | 72 73 20 61 6e 79 20 6b 69 6e 64 20 6f 66 20 77 69 72 65 6c 65 73 73 20 74 72 61 66 66 69 63 00 | rs.any.kind.of.wireless.traffic. |
55be0 | 4d 6f 6e 69 74 6f 72 69 6e 67 00 4d 6f 6e 69 74 6f 72 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c | Monitoring.Monitoring.functional |
55c00 | 69 74 79 20 77 69 74 68 20 60 60 74 65 6c 65 67 72 61 66 60 60 20 61 6e 64 20 60 60 49 6e 66 6c | ity.with.``telegraf``.and.``Infl |
55c20 | 75 78 44 42 20 32 60 60 20 69 73 20 70 72 6f 76 69 64 65 64 2e 20 54 65 6c 65 67 72 61 66 20 69 | uxDB.2``.is.provided..Telegraf.i |
55c40 | 73 20 74 68 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 65 72 76 65 72 20 61 67 65 6e 74 20 74 | s.the.open.source.server.agent.t |
55c60 | 6f 20 68 65 6c 70 20 79 6f 75 20 63 6f 6c 6c 65 63 74 20 6d 65 74 72 69 63 73 2c 20 65 76 65 6e | o.help.you.collect.metrics,.even |
55c80 | 74 73 20 61 6e 64 20 6c 6f 67 73 20 66 72 6f 6d 20 79 6f 75 72 20 72 6f 75 74 65 72 73 2e 00 4d | ts.and.logs.from.your.routers..M |
55ca0 | 6f 72 65 20 64 65 74 61 69 6c 73 20 61 62 6f 75 74 20 74 68 65 20 49 50 73 65 63 20 61 6e 64 20 | ore.details.about.the.IPsec.and. |
55cc0 | 56 54 49 20 69 73 73 75 65 20 61 6e 64 20 6f 70 74 69 6f 6e 20 64 69 73 61 62 6c 65 2d 72 6f 75 | VTI.issue.and.option.disable-rou |
55ce0 | 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 20 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 76 79 6f 73 | te-autoinstall.https://blog.vyos |
55d00 | 2e 69 6f 2f 76 79 6f 73 2d 31 2d 64 6f 74 2d 32 2d 30 2d 64 65 76 65 6c 6f 70 6d 65 6e 74 2d 6e | .io/vyos-1-dot-2-0-development-n |
55d20 | 65 77 73 2d 69 6e 2d 6a 75 6c 79 00 4d 6f 73 74 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 | ews-in-july.Most.operating.syste |
55d40 | 6d 73 20 69 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6f 72 74 | ms.include.native.client.support |
55d60 | 20 66 6f 72 20 49 50 73 65 63 20 49 4b 45 76 32 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | .for.IPsec.IKEv2.VPN.connections |
55d80 | 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 74 79 70 69 63 61 6c 6c 79 20 68 61 76 65 20 61 6e 20 61 | ,.and.others.typically.have.an.a |
55da0 | 70 70 20 6f 72 20 61 64 64 2d 6f 6e 20 70 61 63 6b 61 67 65 20 77 68 69 63 68 20 61 64 64 73 20 | pp.or.add-on.package.which.adds. |
55dc0 | 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 63 6f 76 | the.capability..This.section.cov |
55de0 | 65 72 73 20 49 50 73 65 63 20 49 4b 45 76 32 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 | ers.IPsec.IKEv2.client.configura |
55e00 | 74 69 6f 6e 20 66 6f 72 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 4d 6f 75 6e 74 20 61 20 76 6f 6c | tion.for.Windows.10..Mount.a.vol |
55e20 | 75 6d 65 20 69 6e 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 00 4d 75 6c 74 69 00 4d 75 6c | ume.into.the.container.Multi.Mul |
55e40 | 74 69 2d 63 6c 69 65 6e 74 20 73 65 72 76 65 72 20 69 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 | ti-client.server.is.the.most.pop |
55e60 | 75 6c 61 72 20 4f 70 65 6e 56 50 4e 20 6d 6f 64 65 20 6f 6e 20 72 6f 75 74 65 72 73 2e 20 49 74 | ular.OpenVPN.mode.on.routers..It |
55e80 | 20 61 6c 77 61 79 73 20 75 73 65 73 20 78 2e 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | .always.uses.x.509.authenticatio |
55ea0 | 6e 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 65 71 75 69 72 65 73 20 61 20 50 4b 49 20 73 | n.and.therefore.requires.a.PKI.s |
55ec0 | 65 74 75 70 2e 20 52 65 66 65 72 20 74 68 69 73 20 74 6f 70 69 63 20 3a 72 65 66 3a 60 63 6f 6e | etup..Refer.this.topic.:ref:`con |
55ee0 | 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 60 20 74 6f 20 67 65 6e | figuration/pki/index:pki`.to.gen |
55f00 | 65 72 61 74 65 20 61 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 61 20 73 65 72 76 65 72 | erate.a.CA.certificate,.a.server |
55f20 | 20 63 65 72 74 69 66 69 63 61 74 65 20 61 6e 64 20 6b 65 79 2c 20 61 20 63 65 72 74 69 66 69 63 | .certificate.and.key,.a.certific |
55f40 | 61 74 65 20 72 65 76 6f 63 61 74 69 6f 6e 20 6c 69 73 74 2c 20 61 20 44 69 66 66 69 65 2d 48 65 | ate.revocation.list,.a.Diffie-He |
55f60 | 6c 6c 6d 61 6e 20 6b 65 79 20 65 78 63 68 61 6e 67 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 69 | llman.key.exchange.parameters.fi |
55f80 | 6c 65 2e 20 59 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 63 6c 69 65 6e 74 20 63 65 72 74 69 | le..You.do.not.need.client.certi |
55fa0 | 66 69 63 61 74 65 73 20 61 6e 64 20 6b 65 79 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 20 | ficates.and.keys.for.the.server. |
55fc0 | 73 65 74 75 70 2e 00 4d 75 6c 74 69 2d 68 6f 6d 65 64 2e 20 49 6e 20 61 20 6d 75 6c 74 69 2d 68 | setup..Multi-homed..In.a.multi-h |
55fe0 | 6f 6d 65 64 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2c 20 74 68 65 20 4e 41 | omed.network.environment,.the.NA |
56000 | 54 36 36 20 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e | T66.device.connects.to.an.intern |
56020 | 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 20 63 6f | al.network.and.simultaneously.co |
56040 | 6e 6e 65 63 74 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 | nnects.to.different.external.net |
56060 | 77 6f 72 6b 73 2e 20 41 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 62 | works..Address.translation.can.b |
56080 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 65 61 63 68 20 65 78 74 65 72 6e 61 6c 20 6e 65 | e.configured.on.each.external.ne |
560a0 | 74 77 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 | twork.side.interface.of.the.NAT6 |
560c0 | 36 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 76 65 72 74 20 74 68 65 20 73 61 6d 65 20 69 6e 74 | 6.device.to.convert.the.same.int |
560e0 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 69 6e 74 6f 20 64 69 66 66 65 | ernal.network.address.into.diffe |
56100 | 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 65 73 2c | rent.external.network.addresses, |
56120 | 20 61 6e 64 20 72 65 61 6c 69 7a 65 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 74 68 65 20 | .and.realize.the.mapping.of.the. |
56140 | 73 61 6d 65 20 69 6e 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 6d 75 6c 74 69 70 6c | same.internal.address.to.multipl |
56160 | 65 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 4d 75 6c 74 69 3a 20 63 61 6e | e.external.addresses..Multi:.can |
56180 | 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 4d 75 | .be.specified.multiple.times..Mu |
561a0 | 6c 74 69 63 61 73 74 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 32 | lticast.Multicast.DNS.uses.the.2 |
561c0 | 32 34 2e 30 2e 30 2e 32 35 31 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 69 73 20 22 61 64 | 24.0.0.251.address,.which.is."ad |
561e0 | 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 22 20 61 6e 64 20 64 6f 65 73 20 | ministratively.scoped".and.does. |
56200 | 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 2e 20 49 74 20 72 65 74 72 61 6e 73 | not.leave.the.subnet..It.retrans |
56220 | 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 | mits.mDNS.packets.from.one.inter |
56240 | 66 61 63 65 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 | face.to.other.interfaces..This.e |
56260 | 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 65 2e 67 2e 20 41 70 70 6c 65 20 41 69 | nables.support.for.e.g..Apple.Ai |
56280 | 72 70 6c 61 79 20 64 65 76 69 63 65 73 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c | rplay.devices.across.multiple.VL |
562a0 | 41 4e 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 72 65 73 65 | ANs..Multicast.DNS.uses.the.rese |
562c0 | 72 76 65 64 20 61 64 64 72 65 73 73 20 60 60 32 32 34 2e 30 2e 30 2e 32 35 31 60 60 2c 20 77 68 | rved.address.``224.0.0.251``,.wh |
562e0 | 69 63 68 20 69 73 20 60 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 | ich.is.`"administratively.scoped |
56300 | 22 60 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 | "`.and.does.not.leave.the.subnet |
56320 | 2e 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d 44 4e 53 | ..mDNS.repeater.retransmits.mDNS |
56340 | 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6f | .packets.from.one.interface.to.o |
56360 | 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 75 | ther.interfaces..This.enables.su |
56380 | 70 70 6f 72 74 20 66 6f 72 20 64 65 76 69 63 65 73 20 75 73 69 6e 67 20 6d 44 4e 53 20 64 69 73 | pport.for.devices.using.mDNS.dis |
563a0 | 63 6f 76 65 72 79 20 28 6c 69 6b 65 20 6e 65 74 77 6f 72 6b 20 70 72 69 6e 74 65 72 73 2c 20 41 | covery.(like.network.printers,.A |
563c0 | 70 70 6c 65 20 41 69 72 70 6c 61 79 2c 20 43 68 72 6f 6d 65 63 61 73 74 2c 20 76 61 72 69 6f 75 | pple.Airplay,.Chromecast,.variou |
563e0 | 73 20 49 50 20 62 61 73 65 64 20 68 6f 6d 65 2d 61 75 74 6f 6d 61 74 69 6f 6e 20 64 65 76 69 63 | s.IP.based.home-automation.devic |
56400 | 65 73 20 65 74 63 29 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e 00 4d | es.etc).across.multiple.VLANs..M |
56420 | 75 6c 74 69 63 61 73 74 20 56 58 4c 41 4e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 61 | ulticast.VXLAN.Multicast.group.a |
56440 | 64 64 72 65 73 73 20 66 6f 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 56 58 4c 41 | ddress.for.VXLAN.interface..VXLA |
56460 | 4e 20 74 75 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 62 75 69 6c 74 20 65 69 74 68 65 72 20 76 69 | N.tunnels.can.be.built.either.vi |
56480 | 61 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 76 69 61 20 55 6e 69 63 61 73 74 2e 00 4d 75 6c 74 | a.Multicast.or.via.Unicast..Mult |
564a0 | 69 63 61 73 74 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 | icast.group.to.use.for.syncing.c |
564c0 | 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 | onntrack.entries..Multicast.rece |
564e0 | 69 76 65 72 73 20 77 69 6c 6c 20 74 61 6c 6b 20 49 47 4d 50 20 74 6f 20 74 68 65 69 72 20 6c 6f | ivers.will.talk.IGMP.to.their.lo |
56500 | 63 61 6c 20 72 6f 75 74 65 72 2c 20 73 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 | cal.router,.so,.besides.having.P |
56520 | 49 4d 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 49 | IM.configured.in.every.router,.I |
56540 | 47 4d 50 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 | GMP.must.also.be.configured.in.a |
56560 | 6e 79 20 72 6f 75 74 65 72 20 77 68 65 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 | ny.router.where.there.could.be.a |
56580 | 20 6d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e | .multicast.receiver.locally.conn |
565a0 | 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 | ected..Multicast.receivers.will. |
565c0 | 74 61 6c 6b 20 4d 4c 44 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 | talk.MLD.to.their.local.router,. |
565e0 | 73 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 49 4d 76 36 20 63 6f 6e 66 69 67 75 | so,.besides.having.PIMv6.configu |
56600 | 72 65 64 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 4d 4c 44 20 6d 75 73 74 20 61 6c | red.in.every.router,.MLD.must.al |
56620 | 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 72 20 77 | so.be.configured.in.any.router.w |
56640 | 68 65 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 73 74 20 | here.there.could.be.a.multicast. |
56660 | 72 65 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d 75 6c 74 | receiver.locally.connected..Mult |
56680 | 69 63 61 73 74 2d 72 6f 75 74 69 6e 67 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 | icast-routing.is.required.for.th |
566a0 | 65 20 6c 65 61 76 65 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 62 65 74 77 | e.leaves.to.forward.traffic.betw |
566c0 | 65 65 6e 20 65 61 63 68 20 6f 74 68 65 72 20 69 6e 20 61 20 6d 6f 72 65 20 73 63 61 6c 61 62 6c | een.each.other.in.a.more.scalabl |
566e0 | 65 20 77 61 79 2e 20 54 68 69 73 20 61 6c 73 6f 20 72 65 71 75 69 72 65 73 20 50 49 4d 20 74 6f | e.way..This.also.requires.PIM.to |
56700 | 20 62 65 20 65 6e 61 62 6c 65 64 20 74 6f 77 61 72 64 73 20 74 68 65 20 6c 65 61 76 65 73 20 73 | .be.enabled.towards.the.leaves.s |
56720 | 6f 20 74 68 61 74 20 74 68 65 20 53 70 69 6e 65 20 63 61 6e 20 6c 65 61 72 6e 20 77 68 61 74 20 | o.that.the.Spine.can.learn.what. |
56740 | 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 73 20 65 61 63 68 20 4c 65 61 66 20 65 78 70 65 63 | multicast.groups.each.Leaf.expec |
56760 | 74 73 20 74 72 61 66 66 69 63 20 66 72 6f 6d 2e 00 4d 75 6c 74 69 70 6c 65 20 44 4e 53 20 73 65 | ts.traffic.from..Multiple.DNS.se |
56780 | 72 76 65 72 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 52 | rvers.can.be.defined..Multiple.R |
567a0 | 50 4b 49 20 63 61 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 73 20 63 61 6e 20 62 65 20 73 75 70 | PKI.caching.instances.can.be.sup |
567c0 | 70 6c 69 65 64 20 61 6e 64 20 74 68 65 79 20 6e 65 65 64 20 61 20 70 72 65 66 65 72 65 6e 63 65 | plied.and.they.need.a.preference |
567e0 | 20 69 6e 20 77 68 69 63 68 20 74 68 65 69 72 20 72 65 73 75 6c 74 20 73 65 74 73 20 61 72 65 20 | .in.which.their.result.sets.are. |
56800 | 75 73 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 55 70 6c 69 6e 6b 73 00 4d 75 6c 74 69 70 6c 65 20 | used..Multiple.Uplinks.Multiple. |
56820 | 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 | VLAN.to.VNI.mappings.can.be.conf |
56840 | 69 67 75 72 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 73 61 6d 65 20 53 56 44 2e 20 54 68 69 | igured.against.the.same.SVD..Thi |
56860 | 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 20 73 69 67 6e 69 66 69 63 61 6e 74 20 73 63 61 6c 69 | s.allows.for.a.significant.scali |
56880 | 6e 67 20 6f 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 56 4e 49 73 20 73 69 6e 63 65 20 61 | ng.of.the.number.of.VNIs.since.a |
568a0 | 20 73 65 70 61 72 61 74 65 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6e 6f 20 | .separate.VXLAN.interface.is.no. |
568c0 | 6c 6f 6e 67 65 72 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 65 61 63 68 20 56 4e 49 2e 00 4d 75 | longer.required.for.each.VNI..Mu |
568e0 | 6c 74 69 70 6c 65 20 61 6c 69 61 73 65 73 20 63 61 6e 20 70 65 20 73 70 65 63 69 66 69 65 64 20 | ltiple.aliases.can.pe.specified. |
56900 | 70 65 72 20 68 6f 73 74 2d 6e 61 6d 65 2e 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 | per.host-name..Multiple.destinat |
56920 | 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 | ion.ports.can.be.specified.as.a. |
56940 | 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 | comma-separated.list..The.whole. |
56960 | 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 | list.can.also.be."negated".using |
56980 | 20 27 21 27 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 27 21 32 32 2c 74 65 6c 6e 65 74 2c 68 | .'!'..For.example:.'!22,telnet,h |
569a0 | 74 74 70 2c 31 32 33 2c 31 30 30 31 2d 31 30 30 35 27 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 | ttp,123,1001-1005'.Multiple.dest |
569c0 | 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 | ination.ports.can.be.specified.a |
569e0 | 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 | s.a.comma-separated.list..The.wh |
56a00 | 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 | ole.list.can.also.be."negated".u |
56a20 | 73 69 6e 67 20 27 21 27 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 21 32 32 2c 74 65 6c 6e | sing.'!'..For.example:.`!22,teln |
56a40 | 65 74 2c 68 74 74 70 2c 31 32 33 2c 31 30 30 31 2d 31 30 30 35 60 60 00 4d 75 6c 74 69 70 6c 65 | et,http,123,1001-1005``.Multiple |
56a60 | 20 69 6e 74 65 72 66 61 63 65 73 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 | .interfaces.may.be.specified..Mu |
56a80 | 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 73 2f 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 | ltiple.networks/client.IP.addres |
56aa0 | 73 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 | ses.can.be.configured..Multiple. |
56ac0 | 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 | servers.can.be.specified..Multip |
56ae0 | 6c 65 20 73 65 72 76 69 63 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 69 6e 74 65 | le.services.can.be.used.per.inte |
56b00 | 72 66 61 63 65 2e 20 4a 75 73 74 20 73 70 65 63 69 66 79 20 61 73 20 6d 61 6e 79 20 73 65 72 76 | rface..Just.specify.as.many.serv |
56b20 | 69 63 65 73 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 79 6f 75 20 6c 69 6b 65 21 00 | ices.per.interface.as.you.like!. |
56b40 | 4d 75 6c 74 69 70 6c 65 20 73 6f 75 72 63 65 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 | Multiple.source.ports.can.be.spe |
56b60 | 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 | cified.as.a.comma-separated.list |
56b80 | 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 | ..The.whole.list.can.also.be."ne |
56ba0 | 67 61 74 65 64 22 20 75 73 69 6e 67 20 60 60 21 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a | gated".using.``!``..For.example: |
56bc0 | 00 4d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 | .Multiple.target.IP.addresses.ca |
56be0 | 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 41 74 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 20 | n.be.specified..At.least.one.IP. |
56c00 | 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 67 69 76 65 6e 20 66 6f 72 20 41 52 50 20 6d 6f | address.must.be.given.for.ARP.mo |
56c20 | 6e 69 74 6f 72 69 6e 67 20 74 6f 20 66 75 6e 63 74 69 6f 6e 2e 00 4d 75 6c 74 69 70 6c 65 20 75 | nitoring.to.function..Multiple.u |
56c40 | 73 65 72 73 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 72 | sers.can.connect.to.the.same.ser |
56c60 | 69 61 6c 20 64 65 76 69 63 65 20 62 75 74 20 6f 6e 6c 79 20 6f 6e 65 20 69 73 20 61 6c 6c 6f 77 | ial.device.but.only.one.is.allow |
56c80 | 65 64 20 74 6f 20 77 72 69 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 70 6f 72 74 2e | ed.to.write.to.the.console.port. |
56ca0 | 00 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 65 6e 61 62 6c 65 | .Multiprotocol.extensions.enable |
56cc0 | 20 42 47 50 20 74 6f 20 63 61 72 72 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f | .BGP.to.carry.routing.informatio |
56ce0 | 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 70 72 6f | n.for.multiple.network.layer.pro |
56d00 | 74 6f 63 6f 6c 73 2e 20 42 47 50 20 73 75 70 70 6f 72 74 73 20 61 6e 20 41 64 64 72 65 73 73 20 | tocols..BGP.supports.an.Address. |
56d20 | 46 61 6d 69 6c 79 20 49 64 65 6e 74 69 66 69 65 72 20 28 41 46 49 29 20 66 6f 72 20 49 50 76 34 | Family.Identifier.(AFI).for.IPv4 |
56d40 | 20 61 6e 64 20 49 50 76 36 2e 00 4e 00 4e 41 54 00 4e 41 54 20 28 73 70 65 63 69 66 69 63 61 6c | .and.IPv6..N.NAT.NAT.(specifical |
56d60 | 6c 79 2c 20 53 6f 75 72 63 65 20 4e 41 54 29 3b 00 4e 41 54 20 43 6f 6e 66 69 67 75 72 61 74 69 | ly,.Source.NAT);.NAT.Configurati |
56d80 | 6f 6e 00 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 00 4e 41 54 20 4c 6f 61 64 20 42 61 6c | on.NAT.Load.Balance.NAT.Load.Bal |
56da0 | 61 6e 63 65 20 75 73 65 73 20 61 6e 20 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 67 65 6e 65 | ance.uses.an.algorithm.that.gene |
56dc0 | 72 61 74 65 73 20 61 20 68 61 73 68 20 61 6e 64 20 62 61 73 65 64 20 6f 6e 20 69 74 2c 20 74 68 | rates.a.hash.and.based.on.it,.th |
56de0 | 65 6e 20 69 74 20 61 70 70 6c 69 65 73 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 74 72 61 6e | en.it.applies.corresponding.tran |
56e00 | 73 6c 61 74 69 6f 6e 2e 20 54 68 69 73 20 68 61 73 68 20 63 61 6e 20 62 65 20 67 65 6e 65 72 61 | slation..This.hash.can.be.genera |
56e20 | 74 65 64 20 72 61 6e 64 6f 6d 6c 79 2c 20 6f 72 20 63 61 6e 20 75 73 65 20 64 61 74 61 20 66 72 | ted.randomly,.or.can.use.data.fr |
56e40 | 6f 6d 20 74 68 65 20 69 70 20 68 65 61 64 65 72 3a 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 | om.the.ip.header:.source-address |
56e60 | 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 2d 70 6f | ,.destination-address,.source-po |
56e80 | 72 74 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 70 6f 72 74 2e 20 42 79 20 64 | rt.and/or.destination-port..By.d |
56ea0 | 65 66 61 75 6c 74 2c 20 69 74 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 | efault,.it.will.generate.the.has |
56ec0 | 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 4e 41 54 20 52 75 6c 65 73 65 74 00 4e 41 54 20 62 65 66 6f | h.randomly..NAT.Ruleset.NAT.befo |
56ee0 | 72 65 20 56 50 4e 00 4e 41 54 20 62 65 66 6f 72 65 20 56 50 4e 20 54 6f 70 6f 6c 6f 67 79 00 4e | re.VPN.NAT.before.VPN.Topology.N |
56f00 | 41 54 2c 20 52 6f 75 74 69 6e 67 2c 20 46 69 72 65 77 61 6c 6c 20 49 6e 74 65 72 61 63 74 69 6f | AT,.Routing,.Firewall.Interactio |
56f20 | 6e 00 4e 41 54 34 34 00 4e 41 54 36 34 00 4e 41 54 36 34 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 | n.NAT44.NAT64.NAT64.client.confi |
56f40 | 67 75 72 61 74 69 6f 6e 3a 00 4e 41 54 36 34 20 70 72 65 66 69 78 20 6d 61 73 6b 20 6d 75 73 74 | guration:.NAT64.prefix.mask.must |
56f60 | 20 62 65 20 6f 6e 65 20 6f 66 3a 20 2f 33 32 2c 20 2f 34 30 2c 20 2f 34 38 2c 20 2f 35 36 2c 20 | .be.one.of:./32,./40,./48,./56,. |
56f80 | 2f 36 34 20 6f 72 20 39 36 2e 00 4e 41 54 36 34 20 73 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 | /64.or.96..NAT64.server.configur |
56fa0 | 61 74 69 6f 6e 3a 00 4e 41 54 36 36 28 4e 50 54 76 36 29 00 4e 48 52 50 20 70 72 6f 76 69 64 65 | ation:.NAT66(NPTv6).NHRP.provide |
56fc0 | 73 20 74 68 65 20 64 79 6e 61 6d 69 63 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 | s.the.dynamic.tunnel.endpoint.di |
56fe0 | 73 63 6f 76 65 72 79 20 6d 65 63 68 61 6e 69 73 6d 20 28 65 6e 64 70 6f 69 6e 74 20 72 65 67 69 | scovery.mechanism.(endpoint.regi |
57000 | 73 74 72 61 74 69 6f 6e 2c 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 | stration,.and.endpoint.discovery |
57020 | 2f 6c 6f 6f 6b 75 70 29 2c 20 6d 47 52 45 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 74 75 6e 6e | /lookup),.mGRE.provides.the.tunn |
57040 | 65 6c 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 | el.encapsulation.itself,.and.the |
57060 | 20 49 50 53 65 63 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 6e 64 6c 65 20 74 68 65 20 6b 65 79 20 | .IPSec.protocols.handle.the.key. |
57080 | 65 78 63 68 61 6e 67 65 2c 20 61 6e 64 20 63 72 79 70 74 6f 20 6d 65 63 68 61 6e 69 73 6d 2e 00 | exchange,.and.crypto.mechanism.. |
570a0 | 4e 54 50 00 4e 54 50 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 | NTP.NTP.is.intended.to.synchroni |
570c0 | 7a 65 20 61 6c 6c 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 63 6f 6d 70 75 74 65 72 73 20 74 | ze.all.participating.computers.t |
570e0 | 6f 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 66 20 3a | o.within.a.few.milliseconds.of.: |
57100 | 61 62 62 72 3a 60 55 54 43 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c | abbr:`UTC.(Coordinated.Universal |
57120 | 20 54 69 6d 65 29 60 2e 20 49 74 20 75 73 65 73 20 74 68 65 20 69 6e 74 65 72 73 65 63 74 69 6f | .Time)`..It.uses.the.intersectio |
57140 | 6e 20 61 6c 67 6f 72 69 74 68 6d 2c 20 61 20 6d 6f 64 69 66 69 65 64 20 76 65 72 73 69 6f 6e 20 | n.algorithm,.a.modified.version. |
57160 | 6f 66 20 4d 61 72 7a 75 6c 6c 6f 27 73 20 61 6c 67 6f 72 69 74 68 6d 2c 20 74 6f 20 73 65 6c 65 | of.Marzullo's.algorithm,.to.sele |
57180 | 63 74 20 61 63 63 75 72 61 74 65 20 74 69 6d 65 20 73 65 72 76 65 72 73 20 61 6e 64 20 69 73 20 | ct.accurate.time.servers.and.is. |
571a0 | 64 65 73 69 67 6e 65 64 20 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 65 66 66 65 63 74 73 | designed.to.mitigate.the.effects |
571c0 | 20 6f 66 20 76 61 72 69 61 62 6c 65 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 4e 54 | .of.variable.network.latency..NT |
571e0 | 50 20 63 61 6e 20 75 73 75 61 6c 6c 79 20 6d 61 69 6e 74 61 69 6e 20 74 69 6d 65 20 74 6f 20 77 | P.can.usually.maintain.time.to.w |
57200 | 69 74 68 69 6e 20 74 65 6e 73 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 76 65 72 20 | ithin.tens.of.milliseconds.over. |
57220 | 74 68 65 20 70 75 62 6c 69 63 20 49 6e 74 65 72 6e 65 74 2c 20 61 6e 64 20 63 61 6e 20 61 63 68 | the.public.Internet,.and.can.ach |
57240 | 69 65 76 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 6f 6e 65 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 | ieve.better.than.one.millisecond |
57260 | 20 61 63 63 75 72 61 63 79 20 69 6e 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 73 | .accuracy.in.local.area.networks |
57280 | 20 75 6e 64 65 72 20 69 64 65 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 41 73 79 6d 6d 65 74 | .under.ideal.conditions..Asymmet |
572a0 | 72 69 63 20 72 6f 75 74 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 69 6f | ric.routes.and.network.congestio |
572c0 | 6e 20 63 61 6e 20 63 61 75 73 65 20 65 72 72 6f 72 73 20 6f 66 20 31 30 30 20 6d 73 20 6f 72 20 | n.can.cause.errors.of.100.ms.or. |
572e0 | 6d 6f 72 65 2e 00 4e 54 50 20 70 72 6f 63 65 73 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 | more..NTP.process.will.only.list |
57300 | 65 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 | en.on.the.specified.IP.address.. |
57320 | 59 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 74 68 65 20 60 3c 61 64 64 72 65 73 73 3e 60 | You.must.specify.the.`<address>` |
57340 | 20 61 6e 64 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 74 68 65 20 70 65 72 6d 69 74 74 65 64 20 63 6c | .and.optionally.the.permitted.cl |
57360 | 69 65 6e 74 73 2e 20 4d 75 6c 74 69 70 6c 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 65 73 | ients..Multiple.listen.addresses |
57380 | 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4e 54 50 20 73 75 62 73 79 73 74 65 | .can.be.configured..NTP.subsyste |
573a0 | 6d 00 4e 54 50 20 73 75 70 70 6c 69 65 73 20 61 20 77 61 72 6e 69 6e 67 20 6f 66 20 61 6e 79 20 | m.NTP.supplies.a.warning.of.any. |
573c0 | 69 6d 70 65 6e 64 69 6e 67 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 64 6a 75 73 74 6d 65 6e 74 | impending.leap.second.adjustment |
573e0 | 2c 20 62 75 74 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6c 6f 63 61 6c | ,.but.no.information.about.local |
57400 | 20 74 69 6d 65 20 7a 6f 6e 65 73 20 6f 72 20 64 61 79 6c 69 67 68 74 20 73 61 76 69 6e 67 20 74 | .time.zones.or.daylight.saving.t |
57420 | 69 6d 65 20 69 73 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 4e 61 6d 65 20 53 65 72 76 65 72 00 | ime.is.transmitted..Name.Server. |
57440 | 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 | Name.of.installed.certificate.au |
57460 | 74 68 6f 72 69 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 69 6e 73 | thority.certificate..Name.of.ins |
57480 | 74 61 6c 6c 65 64 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 | talled.server.certificate..Name. |
574a0 | 6f 66 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 00 4e 61 6d 65 20 6f 66 20 74 68 65 20 73 69 | of.static.mapping.Name.of.the.si |
574c0 | 6e 67 6c 65 20 74 61 62 6c 65 20 4f 6e 6c 79 20 69 66 20 73 65 74 20 67 72 6f 75 70 2d 6d 65 74 | ngle.table.Only.if.set.group-met |
574e0 | 72 69 63 73 20 73 69 6e 67 6c 65 2d 74 61 62 6c 65 2e 00 4e 61 6d 65 20 6f 72 20 49 50 76 34 20 | rics.single-table..Name.or.IPv4. |
57500 | 61 64 64 72 65 73 73 20 6f 66 20 54 46 54 50 20 73 65 72 76 65 72 00 4e 65 74 42 49 4f 53 20 6f | address.of.TFTP.server.NetBIOS.o |
57520 | 76 65 72 20 54 43 50 2f 49 50 20 6e 61 6d 65 20 73 65 72 76 65 72 00 4e 65 74 46 6c 6f 77 00 4e | ver.TCP/IP.name.server.NetFlow.N |
57540 | 65 74 46 6c 6f 77 20 2f 20 49 50 46 49 58 00 4e 65 74 46 6c 6f 77 20 65 6e 67 69 6e 65 2d 69 64 | etFlow./.IPFIX.NetFlow.engine-id |
57560 | 20 77 68 69 63 68 20 77 69 6c 6c 20 61 70 70 65 61 72 20 69 6e 20 4e 65 74 46 6c 6f 77 20 64 61 | .which.will.appear.in.NetFlow.da |
57580 | 74 61 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 4e 65 74 46 6c | ta..The.range.is.0.to.255..NetFl |
575a0 | 6f 77 20 69 73 20 61 20 66 65 61 74 75 72 65 20 74 68 61 74 20 77 61 73 20 69 6e 74 72 6f 64 75 | ow.is.a.feature.that.was.introdu |
575c0 | 63 65 64 20 6f 6e 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 20 61 72 6f 75 6e 64 20 31 39 39 36 | ced.on.Cisco.routers.around.1996 |
575e0 | 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 6f | .that.provides.the.ability.to.co |
57600 | 6c 6c 65 63 74 20 49 50 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 61 73 20 69 74 20 65 | llect.IP.network.traffic.as.it.e |
57620 | 6e 74 65 72 73 20 6f 72 20 65 78 69 74 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 | nters.or.exits.an.interface..By. |
57640 | 61 6e 61 6c 79 7a 69 6e 67 20 74 68 65 20 64 61 74 61 20 70 72 6f 76 69 64 65 64 20 62 79 20 4e | analyzing.the.data.provided.by.N |
57660 | 65 74 46 6c 6f 77 2c 20 61 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 | etFlow,.a.network.administrator. |
57680 | 63 61 6e 20 64 65 74 65 72 6d 69 6e 65 20 74 68 69 6e 67 73 20 73 75 63 68 20 61 73 20 74 68 65 | can.determine.things.such.as.the |
576a0 | 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 74 72 61 66 66 | .source.and.destination.of.traff |
576c0 | 69 63 2c 20 63 6c 61 73 73 20 6f 66 20 73 65 72 76 69 63 65 2c 20 61 6e 64 20 74 68 65 20 63 61 | ic,.class.of.service,.and.the.ca |
576e0 | 75 73 65 73 20 6f 66 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 41 20 74 79 70 69 63 61 6c 20 66 6c | uses.of.congestion..A.typical.fl |
57700 | 6f 77 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 73 65 74 75 70 20 28 75 73 69 6e 67 20 4e 65 74 46 6c | ow.monitoring.setup.(using.NetFl |
57720 | 6f 77 29 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 72 65 65 20 6d 61 69 6e 20 63 6f 6d 70 6f | ow).consists.of.three.main.compo |
57740 | 6e 65 6e 74 73 3a 00 4e 65 74 46 6c 6f 77 20 69 73 20 75 73 75 61 6c 6c 79 20 65 6e 61 62 6c 65 | nents:.NetFlow.is.usually.enable |
57760 | 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 6c 69 | d.on.a.per-interface.basis.to.li |
57780 | 6d 69 74 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6d 70 6f 6e 65 6e 74 | mit.load.on.the.router.component |
577a0 | 73 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 4e 65 74 46 6c 6f 77 2c 20 6f 72 20 74 6f 20 6c 69 6d | s.involved.in.NetFlow,.or.to.lim |
577c0 | 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 4e 65 74 46 6c 6f 77 20 72 65 63 6f 72 64 73 | it.the.amount.of.NetFlow.records |
577e0 | 20 65 78 70 6f 72 74 65 64 2e 00 4e 65 74 46 6c 6f 77 20 76 35 20 65 78 61 6d 70 6c 65 3a 00 4e | .exported..NetFlow.v5.example:.N |
57800 | 65 74 66 69 6c 74 65 72 20 62 61 73 65 64 00 4e 65 74 6d 61 73 6b 20 67 72 65 61 74 65 72 20 74 | etfilter.based.Netmask.greater.t |
57820 | 68 61 6e 20 6c 65 6e 67 74 68 2e 00 4e 65 74 6d 61 73 6b 20 6c 65 73 73 20 74 68 61 6e 20 6c 65 | han.length..Netmask.less.than.le |
57840 | 6e 67 74 68 00 4e 65 74 77 6f 72 6b 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 20 43 6f 6e 66 69 | ngth.Network.Advertisement.Confi |
57860 | 67 75 72 61 74 69 6f 6e 00 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 4e 65 74 77 6f 72 6b | guration.Network.Control.Network |
57880 | 20 45 6d 75 6c 61 74 6f 72 00 4e 65 74 77 6f 72 6b 20 47 72 6f 75 70 73 00 4e 65 74 77 6f 72 6b | .Emulator.Network.Groups.Network |
578a0 | 20 49 44 20 28 53 53 49 44 29 20 60 60 45 6e 74 65 72 70 72 69 73 65 2d 54 45 53 54 60 60 00 4e | .ID.(SSID).``Enterprise-TEST``.N |
578c0 | 65 74 77 6f 72 6b 20 49 44 20 28 53 53 49 44 29 20 60 60 54 45 53 54 60 60 00 4e 65 74 77 6f 72 | etwork.ID.(SSID).``TEST``.Networ |
578e0 | 6b 20 54 6f 70 6f 6c 6f 67 79 20 44 69 61 67 72 61 6d 00 4e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 | k.Topology.Diagram.Network.manag |
57900 | 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 28 4e 4d 53 29 20 2d 20 73 6f 66 74 77 61 72 65 20 77 | ement.station.(NMS).-.software.w |
57920 | 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 67 65 72 00 4e 65 74 77 6f 72 6b | hich.runs.on.the.manager.Network |
57940 | 20 6e 65 77 73 20 73 75 62 73 79 73 74 65 6d 00 4e 65 74 77 6f 72 6b 20 74 6f 20 62 65 20 70 72 | .news.subsystem.Network.to.be.pr |
57960 | 6f 74 65 63 74 65 64 3a 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 28 70 75 62 6c 69 63 20 49 50 | otected:.192.0.2.0/24.(public.IP |
57980 | 73 20 75 73 65 20 62 79 20 63 75 73 74 6f 6d 65 72 73 29 00 4e 65 74 77 6f 72 6b 73 20 61 6c 6c | s.use.by.customers).Networks.all |
579a0 | 6f 77 65 64 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 20 73 65 72 76 65 72 00 4e 65 77 20 75 73 | owed.to.query.this.server.New.us |
579c0 | 65 72 20 77 69 6c 6c 20 75 73 65 20 53 48 41 2f 41 45 53 20 66 6f 72 20 61 75 74 68 65 6e 74 69 | er.will.use.SHA/AES.for.authenti |
579e0 | 63 61 74 69 6f 6e 20 61 6e 64 20 70 72 69 76 61 63 79 00 4e 65 78 74 20 69 74 20 69 73 20 6e 65 | cation.and.privacy.Next.it.is.ne |
57a00 | 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 32 46 41 20 66 6f 72 20 4f 70 65 | cessary.to.configure.2FA.for.Ope |
57a20 | 6e 43 6f 6e 6e 65 63 74 3a 00 4e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 | nConnect:.Next-hop.interface.for |
57a40 | 20 74 68 65 20 72 6f 75 74 65 00 4e 65 78 74 68 6f 70 20 49 50 20 61 64 64 72 65 73 73 2e 00 4e | .the.route.Nexthop.IP.address..N |
57a60 | 65 78 74 68 6f 70 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 4e 65 | exthop.IPv6.address.to.match..Ne |
57a80 | 78 74 68 6f 70 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 54 72 61 63 | xthop.IPv6.address..Nexthop.Trac |
57aa0 | 6b 69 6e 67 00 4e 65 78 74 68 6f 70 20 74 72 61 63 6b 69 6e 67 20 72 65 73 6f 6c 76 65 20 6e 65 | king.Nexthop.tracking.resolve.ne |
57ac0 | 78 74 68 6f 70 73 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 62 79 20 | xthops.via.the.default.route.by. |
57ae0 | 64 65 66 61 75 6c 74 2e 20 54 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 | default..This.is.enabled.by.defa |
57b00 | 75 6c 74 20 66 6f 72 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 20 6f 66 | ult.for.a.traditional.profile.of |
57b20 | 20 46 52 52 20 77 68 69 63 68 20 77 65 20 75 73 65 2e 20 49 74 20 61 6e 64 20 63 61 6e 20 62 65 | .FRR.which.we.use..It.and.can.be |
57b40 | 20 64 69 73 61 62 6c 65 64 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 77 61 6e 27 74 20 74 6f | .disabled.if.you.do.not.wan't.to |
57b60 | 20 65 2e 67 2e 20 61 6c 6c 6f 77 20 42 47 50 20 74 6f 20 70 65 65 72 20 61 63 72 6f 73 73 20 74 | .e.g..allow.BGP.to.peer.across.t |
57b80 | 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4e 6f 20 52 4f 41 20 65 78 69 73 74 73 20 | he.default.route..No.ROA.exists. |
57ba0 | 77 68 69 63 68 20 63 6f 76 65 72 73 20 74 68 61 74 20 70 72 65 66 69 78 2e 20 55 6e 66 6f 72 74 | which.covers.that.prefix..Unfort |
57bc0 | 75 6e 61 74 65 6c 79 20 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 20 66 6f 72 20 61 62 6f | unately.this.is.the.case.for.abo |
57be0 | 75 74 20 34 30 25 2d 35 30 25 20 6f 66 20 74 68 65 20 70 72 65 66 69 78 65 73 20 77 68 69 63 68 | ut.40%-50%.of.the.prefixes.which |
57c00 | 20 77 65 72 65 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 44 46 | .were.announced.to.the.:abbr:`DF |
57c20 | 5a 20 28 64 65 66 61 75 6c 74 2d 66 72 65 65 20 7a 6f 6e 65 29 60 20 61 74 20 74 68 65 20 73 74 | Z.(default-free.zone)`.at.the.st |
57c40 | 61 72 74 20 6f 66 20 32 30 32 34 2e 00 4e 6f 20 52 4f 41 20 65 78 69 73 74 73 20 77 68 69 63 68 | art.of.2024..No.ROA.exists.which |
57c60 | 20 63 6f 76 65 72 73 20 74 68 61 74 20 70 72 65 66 69 78 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 | .covers.that.prefix..Unfortunate |
57c80 | 6c 79 20 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 20 66 6f 72 20 61 62 6f 75 74 20 38 30 | ly.this.is.the.case.for.about.80 |
57ca0 | 25 20 6f 66 20 74 68 65 20 49 50 76 34 20 70 72 65 66 69 78 65 73 20 77 68 69 63 68 20 77 65 72 | %.of.the.IPv4.prefixes.which.wer |
57cc0 | 65 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 44 46 5a 20 28 64 | e.announced.to.the.:abbr:`DFZ.(d |
57ce0 | 65 66 61 75 6c 74 2d 66 72 65 65 20 7a 6f 6e 65 29 60 20 61 74 20 74 68 65 20 73 74 61 72 74 20 | efault-free.zone)`.at.the.start. |
57d00 | 6f 66 20 32 30 32 30 00 4e 6f 20 56 4c 41 4e 20 74 61 67 67 69 6e 67 20 72 65 71 75 69 72 65 64 | of.2020.No.VLAN.tagging.required |
57d20 | 20 62 79 20 79 6f 75 72 20 49 53 50 2e 00 4e 6f 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 | .by.your.ISP..No.route.is.suppre |
57d40 | 73 73 65 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 20 4d 61 78 69 6d 75 6d 2d 73 75 70 70 72 | ssed.indefinitely..Maximum-suppr |
57d60 | 65 73 73 2d 74 69 6d 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d | ess-time.defines.the.maximum.tim |
57d80 | 65 20 61 20 72 6f 75 74 65 20 63 61 6e 20 62 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f | e.a.route.can.be.suppressed.befo |
57da0 | 72 65 20 69 74 20 69 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 2e 00 4e 6f 20 73 75 70 70 6f | re.it.is.re-advertised..No.suppo |
57dc0 | 72 74 20 66 6f 72 20 53 52 4c 42 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 62 69 6e 64 69 | rt.for.SRLB.No.support.for.bindi |
57de0 | 6e 67 20 53 49 44 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 65 76 65 6c 20 72 65 64 69 | ng.SID.No.support.for.level.redi |
57e00 | 73 74 72 69 62 75 74 69 6f 6e 20 28 4c 31 20 74 6f 20 4c 32 20 6f 72 20 4c 32 20 74 6f 20 4c 31 | stribution.(L1.to.L2.or.L2.to.L1 |
57e20 | 29 00 4e 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 69 6e 67 20 72 65 71 75 69 | ).Non-transparent.proxying.requi |
57e40 | 72 65 73 20 74 68 61 74 20 74 68 65 20 63 6c 69 65 6e 74 20 62 72 6f 77 73 65 72 73 20 62 65 20 | res.that.the.client.browsers.be. |
57e60 | 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e | configured.with.the.proxy.settin |
57e80 | 67 73 20 62 65 66 6f 72 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 65 64 69 72 65 63 74 65 | gs.before.requests.are.redirecte |
57ea0 | 64 2e 20 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 | d..The.advantage.of.this.is.that |
57ec0 | 20 74 68 65 20 63 6c 69 65 6e 74 20 77 65 62 20 62 72 6f 77 73 65 72 20 63 61 6e 20 64 65 74 65 | .the.client.web.browser.can.dete |
57ee0 | 63 74 20 74 68 61 74 20 61 20 70 72 6f 78 79 20 69 73 20 69 6e 20 75 73 65 20 61 6e 64 20 63 61 | ct.that.a.proxy.is.in.use.and.ca |
57f00 | 6e 20 62 65 68 61 76 65 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 49 6e 20 61 64 64 69 74 69 6f | n.behave.accordingly..In.additio |
57f20 | 6e 2c 20 77 65 62 2d 74 72 61 6e 73 6d 69 74 74 65 64 20 6d 61 6c 77 61 72 65 20 63 61 6e 20 73 | n,.web-transmitted.malware.can.s |
57f40 | 6f 6d 65 74 69 6d 65 73 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 61 20 6e 6f 6e 2d 74 72 61 | ometimes.be.blocked.by.a.non-tra |
57f60 | 6e 73 70 61 72 65 6e 74 20 77 65 62 20 70 72 6f 78 79 2c 20 73 69 6e 63 65 20 74 68 65 79 20 61 | nsparent.web.proxy,.since.they.a |
57f80 | 72 65 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e | re.not.aware.of.the.proxy.settin |
57fa0 | 67 73 2e 00 4e 6f 6e 65 20 6f 66 20 74 68 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d | gs..None.of.the.operating.system |
57fc0 | 73 20 68 61 76 65 20 63 6c 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 69 6e 73 74 61 6c 6c 65 64 | s.have.client.software.installed |
57fe0 | 20 62 79 20 64 65 66 61 75 6c 74 00 4e 6f 72 6d 61 6c 20 62 75 74 20 73 69 67 6e 69 66 69 63 61 | .by.default.Normal.but.significa |
58000 | 6e 74 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 61 74 20 | nt.conditions.-.conditions.that. |
58020 | 61 72 65 20 6e 6f 74 20 65 72 72 6f 72 20 63 6f 6e 64 69 74 69 6f 6e 73 2c 20 62 75 74 20 74 68 | are.not.error.conditions,.but.th |
58040 | 61 74 20 6d 61 79 20 72 65 71 75 69 72 65 20 73 70 65 63 69 61 6c 20 68 61 6e 64 6c 69 6e 67 2e | at.may.require.special.handling. |
58060 | 00 4e 6f 74 20 61 6c 6c 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 62 | .Not.all.transmit.policies.may.b |
58080 | 65 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2c 20 70 61 72 74 69 63 75 6c 61 72 6c | e.802.3ad.compliant,.particularl |
580a0 | 79 20 69 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 6d 69 73 6f 72 | y.in.regards.to.the.packet.misor |
580c0 | 64 65 72 69 6e 67 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 6f 66 20 73 65 63 74 69 6f 6e 20 34 | dering.requirements.of.section.4 |
580e0 | 33 2e 32 2e 34 20 6f 66 20 74 68 65 20 38 30 32 2e 33 61 64 20 73 74 61 6e 64 61 72 64 2e 00 4e | 3.2.4.of.the.802.3ad.standard..N |
58100 | 6f 74 65 20 74 68 61 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 6c 6f 67 20 66 69 6c 65 20 64 | ote.that.deleting.the.log.file.d |
58120 | 6f 65 73 20 6e 6f 74 20 73 74 6f 70 20 74 68 65 20 73 79 73 74 65 6d 20 66 72 6f 6d 20 6c 6f 67 | oes.not.stop.the.system.from.log |
58140 | 67 69 6e 67 20 65 76 65 6e 74 73 2e 20 49 66 20 79 6f 75 20 75 73 65 20 74 68 69 73 20 63 6f 6d | ging.events..If.you.use.this.com |
58160 | 6d 61 6e 64 20 77 68 69 6c 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 73 20 6c 6f 67 67 69 6e 67 | mand.while.the.system.is.logging |
58180 | 20 65 76 65 6e 74 73 2c 20 6f 6c 64 20 6c 6f 67 20 65 76 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 | .events,.old.log.events.will.be. |
581a0 | 64 65 6c 65 74 65 64 2c 20 62 75 74 20 65 76 65 6e 74 73 20 61 66 74 65 72 20 74 68 65 20 64 65 | deleted,.but.events.after.the.de |
581c0 | 6c 65 74 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 | lete.operation.will.be.recorded. |
581e0 | 69 6e 20 74 68 65 20 6e 65 77 20 66 69 6c 65 2e 20 54 6f 20 64 65 6c 65 74 65 20 74 68 65 20 66 | in.the.new.file..To.delete.the.f |
58200 | 69 6c 65 20 61 6c 74 6f 67 65 74 68 65 72 2c 20 66 69 72 73 74 20 64 65 6c 65 74 65 20 6c 6f 67 | ile.altogether,.first.delete.log |
58220 | 67 69 6e 67 20 74 6f 20 74 68 65 20 66 69 6c 65 20 75 73 69 6e 67 20 73 79 73 74 65 6d 20 73 79 | ging.to.the.file.using.system.sy |
58240 | 73 6c 6f 67 20 3a 72 65 66 3a 60 63 75 73 74 6f 6d 2d 66 69 6c 65 60 20 63 6f 6d 6d 61 6e 64 2c | slog.:ref:`custom-file`.command, |
58260 | 20 61 6e 64 20 74 68 65 6e 20 64 65 6c 65 74 65 20 74 68 65 20 66 69 6c 65 2e 00 4e 6f 74 65 20 | .and.then.delete.the.file..Note. |
58280 | 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 | the.command.with.the.public.key. |
582a0 | 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 52 49 47 48 54 20 70 75 | (set.pki.key-pair.ipsec-RIGHT.pu |
582c0 | 62 6c 69 63 20 6b 65 79 20 27 46 41 41 4f 43 41 51 38 41 4d 49 49 2e 2e 2e 27 29 2e 00 4e 6f 74 | blic.key.'FAAOCAQ8AMII...')..Not |
582e0 | 65 3a 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 73 20 64 6f 6e 27 74 20 6d 61 74 74 65 | e:.certificate.names.don't.matte |
58300 | 72 2c 20 77 65 20 75 73 65 20 27 6f 70 65 6e 76 70 6e 2d 6c 6f 63 61 6c 27 20 61 6e 64 20 27 6f | r,.we.use.'openvpn-local'.and.'o |
58320 | 70 65 6e 76 70 6e 2d 72 65 6d 6f 74 65 27 20 62 75 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 | penvpn-remote'.but.they.can.be.a |
58340 | 72 62 69 74 72 61 72 79 2e 00 4e 6f 74 69 63 65 00 4e 6f 77 20 63 6f 6e 66 69 67 75 72 65 20 63 | rbitrary..Notice.Now.configure.c |
58360 | 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 73 65 72 76 69 63 65 20 6f 6e 20 60 60 72 6f 75 74 65 | onntrack-sync.service.on.``route |
58380 | 72 31 60 60 20 2a 2a 61 6e 64 2a 2a 20 60 60 72 6f 75 74 65 72 32 60 60 00 4e 6f 77 20 74 68 65 | r1``.**and**.``router2``.Now.the |
583a0 | 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 74 | .noted.public.keys.should.be.ent |
583c0 | 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 2e 00 4e 6f | ered.on.the.opposite.routers..No |
583e0 | 77 20 77 65 20 61 64 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 63 6f 70 65 | w.we.add.the.option.to.the.scope |
58400 | 2c 20 61 64 61 70 74 20 74 6f 20 79 6f 75 72 20 73 65 74 75 70 00 4e 6f 77 20 77 65 20 6e 65 65 | ,.adapt.to.your.setup.Now.we.nee |
58420 | 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 65 72 76 65 72 20 6e 65 74 77 6f 72 6b 20 | d.to.specify.the.server.network. |
58440 | 73 65 74 74 69 6e 67 73 2e 20 49 6e 20 61 6c 6c 20 63 61 73 65 73 20 77 65 20 6e 65 65 64 20 74 | settings..In.all.cases.we.need.t |
58460 | 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 73 75 62 6e 65 74 20 66 6f 72 20 63 6c 69 65 6e 74 20 | o.specify.the.subnet.for.client. |
58480 | 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 2e 20 53 69 6e 63 65 20 77 65 20 77 61 6e 74 20 | tunnel.endpoints..Since.we.want. |
584a0 | 63 6c 69 65 6e 74 73 20 74 6f 20 61 63 63 65 73 73 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 74 | clients.to.access.a.specific.net |
584c0 | 77 6f 72 6b 20 62 65 68 69 6e 64 20 6f 75 72 20 72 6f 75 74 65 72 2c 20 77 65 20 77 69 6c 6c 20 | work.behind.our.router,.we.will. |
584e0 | 75 73 65 20 61 20 70 75 73 68 2d 72 6f 75 74 65 20 6f 70 74 69 6f 6e 20 66 6f 72 20 69 6e 73 74 | use.a.push-route.option.for.inst |
58500 | 61 6c 6c 69 6e 67 20 74 68 61 74 20 72 6f 75 74 65 20 6f 6e 20 63 6c 69 65 6e 74 73 2e 00 4e 6f | alling.that.route.on.clients..No |
58520 | 77 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 | w.when.connecting.the.user.will. |
58540 | 66 69 72 73 74 20 62 65 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 | first.be.asked.for.the.password. |
58560 | 61 6e 64 20 74 68 65 6e 20 74 68 65 20 4f 54 50 20 6b 65 79 2e 00 4e 6f 77 20 79 6f 75 20 61 72 | and.then.the.OTP.key..Now.you.ar |
58580 | 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 75 70 20 49 50 73 65 63 2e 20 54 68 65 20 6b 65 79 20 | e.ready.to.setup.IPsec..The.key. |
585a0 | 70 6f 69 6e 74 73 3a 00 4e 6f 77 20 79 6f 75 20 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 | points:.Now.you.are.ready.to.set |
585c0 | 75 70 20 49 50 73 65 63 2e 20 59 6f 75 27 6c 6c 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 6e 20 | up.IPsec..You'll.need.to.use.an. |
585e0 | 49 44 20 69 6e 73 74 65 61 64 20 6f 66 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 70 65 | ID.instead.of.address.for.the.pe |
58600 | 65 72 2e 00 4e 75 6d 62 65 72 20 6f 66 20 61 6e 74 65 6e 6e 61 73 20 6f 6e 20 74 68 69 73 20 63 | er..Number.of.antennas.on.this.c |
58620 | 61 72 64 00 4e 75 6d 62 65 72 20 6f 66 20 62 69 74 73 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 76 | ard.Number.of.bits.of.client.IPv |
58640 | 34 20 61 64 64 72 65 73 73 20 74 6f 20 70 61 73 73 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 45 | 4.address.to.pass.when.sending.E |
58660 | 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d | DNS.Client.Subnet.address.inform |
58680 | 61 74 69 6f 6e 2e 00 4e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 65 73 20 74 6f 20 62 65 20 64 69 73 | ation..Number.of.lines.to.be.dis |
586a0 | 70 6c 61 79 65 64 2c 20 64 65 66 61 75 6c 74 20 31 30 00 4f 53 50 46 00 4f 53 50 46 20 53 52 20 | played,.default.10.OSPF.OSPF.SR. |
586c0 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 53 50 46 20 69 73 20 61 20 77 69 64 65 6c 79 20 | .Configuration.OSPF.is.a.widely. |
586e0 | 75 73 65 64 20 49 47 50 20 69 6e 20 6c 61 72 67 65 20 65 6e 74 65 72 70 72 69 73 65 20 6e 65 74 | used.IGP.in.large.enterprise.net |
58700 | 77 6f 72 6b 73 2e 00 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 20 6e 6f 72 6d | works..OSPF.routing.devices.norm |
58720 | 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 20 74 68 65 69 72 20 6e 65 69 67 68 62 6f 72 73 20 64 79 | ally.discover.their.neighbors.dy |
58740 | 6e 61 6d 69 63 61 6c 6c 79 20 62 79 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 74 68 65 20 62 72 | namically.by.listening.to.the.br |
58760 | 6f 61 64 63 61 73 74 20 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 68 65 6c 6c 6f 20 70 61 63 6b 65 | oadcast.or.multicast.hello.packe |
58780 | 74 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 42 65 63 61 75 73 65 20 61 6e 20 4e 42 | ts.on.the.network..Because.an.NB |
587a0 | 4d 41 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 62 72 6f 61 | MA.network.does.not.support.broa |
587c0 | 64 63 61 73 74 20 28 6f 72 20 6d 75 6c 74 69 63 61 73 74 29 2c 20 74 68 65 20 64 65 76 69 63 65 | dcast.(or.multicast),.the.device |
587e0 | 20 63 61 6e 6e 6f 74 20 64 69 73 63 6f 76 65 72 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 64 | .cannot.discover.its.neighbors.d |
58800 | 79 6e 61 6d 69 63 61 6c 6c 79 2c 20 73 6f 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 | ynamically,.so.you.must.configur |
58820 | 65 20 61 6c 6c 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 69 63 61 6c 6c 79 2e 00 | e.all.the.neighbors.statically.. |
58840 | 4f 53 50 46 76 32 20 28 49 50 76 34 29 00 4f 53 50 46 76 33 20 28 49 50 76 36 29 00 4f 54 50 2d | OSPFv2.(IPv4).OSPFv3.(IPv6).OTP- |
58860 | 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 00 4f 66 66 6c 6f 61 64 69 6e 67 00 4f 66 66 73 65 74 | key.generation.Offloading.Offset |
58880 | 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 75 62 6e 65 74 20 69 6e 20 73 65 63 6f 6e | .of.the.client's.subnet.in.secon |
588a0 | 64 73 20 66 72 6f 6d 20 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 | ds.from.Coordinated.Universal.Ti |
588c0 | 6d 65 20 28 55 54 43 29 00 4f 66 74 65 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 | me.(UTC).Often.we.need.to.embed. |
588e0 | 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 2e 20 49 74 20 | one.policy.into.another.one..It. |
58900 | 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f 20 73 6f 20 6f 6e 20 63 6c 61 73 73 66 75 6c | is.possible.to.do.so.on.classful |
58920 | 20 70 6f 6c 69 63 69 65 73 2c 20 62 79 20 61 74 74 61 63 68 69 6e 67 20 61 20 6e 65 77 20 70 6f | .policies,.by.attaching.a.new.po |
58940 | 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c | licy.into.a.class..For.instance, |
58960 | 20 79 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 65 | .you.might.want.to.apply.differe |
58980 | 6e 74 20 70 6f 6c 69 63 69 65 73 20 74 6f 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 | nt.policies.to.the.different.cla |
589a0 | 73 73 65 73 20 6f 66 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 79 6f 75 | sses.of.a.Round-Robin.policy.you |
589c0 | 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 4f 66 74 65 6e 20 79 6f 75 20 77 69 6c 6c | .have.configured..Often.you.will |
589e0 | 20 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 2a 64 65 | .also.have.to.configure.your.*de |
58a00 | 66 61 75 6c 74 2a 20 74 72 61 66 66 69 63 20 69 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 79 | fault*.traffic.in.the.same.way.y |
58a20 | 6f 75 20 64 6f 20 77 69 74 68 20 61 20 63 6c 61 73 73 2e 20 2a 44 65 66 61 75 6c 74 2a 20 63 61 | ou.do.with.a.class..*Default*.ca |
58a40 | 6e 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 6c 61 73 73 20 61 73 20 69 74 20 62 65 | n.be.considered.a.class.as.it.be |
58a60 | 68 61 76 65 73 20 6c 69 6b 65 20 74 68 61 74 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e 79 | haves.like.that..It.contains.any |
58a80 | 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 69 64 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 | .traffic.that.did.not.match.any. |
58aa0 | 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 63 6c 61 73 73 65 73 2c 20 73 6f 20 69 74 20 69 73 | of.the.defined.classes,.so.it.is |
58ac0 | 20 6c 69 6b 65 20 61 6e 20 6f 70 65 6e 20 63 6c 61 73 73 2c 20 61 20 63 6c 61 73 73 20 77 69 74 | .like.an.open.class,.a.class.wit |
58ae0 | 68 6f 75 74 20 6d 61 74 63 68 69 6e 67 20 66 69 6c 74 65 72 73 2e 00 4f 6e 20 61 63 74 69 76 65 | hout.matching.filters..On.active |
58b00 | 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 62 6f 74 68 20 73 69 64 65 73 2c 20 79 6f 75 20 | .router.run:.On.both.sides,.you. |
58b20 | 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 | need.to.generate.a.self-signed.c |
58b40 | 65 72 74 69 66 69 63 61 74 65 2c 20 70 72 65 66 65 72 72 61 62 6c 79 20 75 73 69 6e 67 20 74 68 | ertificate,.preferrably.using.th |
58b60 | 65 20 22 65 63 22 20 28 65 6c 6c 69 70 74 69 63 20 63 75 72 76 65 29 20 74 79 70 65 2e 20 59 6f | e."ec".(elliptic.curve).type..Yo |
58b80 | 75 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 74 68 65 6d 20 62 79 20 65 78 65 63 75 74 69 6e 67 | u.can.generate.them.by.executing |
58ba0 | 20 63 6f 6d 6d 61 6e 64 20 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 70 6b 69 20 63 65 72 74 | .command.``run.generate.pki.cert |
58bc0 | 69 66 69 63 61 74 65 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d | ificate.self-signed.install.<nam |
58be0 | 65 3e 60 60 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 | e>``.in.the.configuration.mode.. |
58c00 | 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 2c 20 69 74 | Once.the.command.is.complete,.it |
58c20 | 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 | .will.add.the.certificate.to.the |
58c40 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 60 | .configuration.session,.to.the.` |
58c60 | 60 70 6b 69 60 60 20 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 72 65 76 | `pki``.subtree..You.can.then.rev |
58c80 | 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 61 6e 64 20 63 6f 6d | iew.the.proposed.changes.and.com |
58ca0 | 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 20 6c 6f 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 34 30 | mit.them..On.low.rates.(below.40 |
58cc0 | 4d 62 69 74 29 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 60 71 75 61 6e | Mbit).you.may.want.to.tune.`quan |
58ce0 | 74 75 6d 60 20 64 6f 77 6e 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 33 30 30 20 | tum`.down.to.something.like.300. |
58d00 | 62 79 74 65 73 2e 00 4f 6e 20 6d 6f 73 74 20 73 63 65 6e 61 72 69 6f 73 2c 20 74 68 65 72 65 27 | bytes..On.most.scenarios,.there' |
58d20 | 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 65 20 73 70 65 63 69 66 69 63 20 70 61 72 | s.no.need.to.change.specific.par |
58d40 | 61 6d 65 74 65 72 73 2c 20 61 6e 64 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 | ameters,.and.using.default.confi |
58d60 | 67 75 72 61 74 69 6f 6e 20 69 73 20 65 6e 6f 75 67 68 2e 20 42 75 74 20 74 68 65 72 65 20 61 72 | guration.is.enough..But.there.ar |
58d80 | 65 20 63 61 73 65 73 20 77 65 72 65 20 65 78 74 72 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | e.cases.were.extra.configuration |
58da0 | 20 69 73 20 6e 65 65 64 65 64 2e 00 4f 6e 20 73 74 61 6e 64 62 79 20 72 6f 75 74 65 72 20 72 75 | .is.needed..On.standby.router.ru |
58dc0 | 6e 3a 00 4f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 72 65 64 75 | n:.On.systems.with.multiple.redu |
58de0 | 6e 64 61 6e 74 20 75 70 6c 69 6e 6b 73 20 61 6e 64 20 72 6f 75 74 65 73 2c 20 69 74 27 73 20 61 | ndant.uplinks.and.routes,.it's.a |
58e00 | 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 75 73 65 20 61 20 64 65 64 69 63 61 74 65 64 20 61 64 | .good.idea.to.use.a.dedicated.ad |
58e20 | 64 72 65 73 73 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 6e 64 20 64 79 6e 61 6d 69 63 | dress.for.management.and.dynamic |
58e40 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 73 73 | .routing.protocols..However,.ass |
58e60 | 69 67 6e 69 6e 67 20 74 68 61 74 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 70 68 79 73 69 63 61 | igning.that.address.to.a.physica |
58e80 | 6c 20 6c 69 6e 6b 20 69 73 20 72 69 73 6b 79 3a 20 69 66 20 74 68 61 74 20 6c 69 6e 6b 20 67 6f | l.link.is.risky:.if.that.link.go |
58ea0 | 65 73 20 64 6f 77 6e 2c 20 74 68 61 74 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 63 6f 6d | es.down,.that.address.will.becom |
58ec0 | 65 20 69 6e 61 63 63 65 73 73 69 62 6c 65 2e 20 41 20 63 6f 6d 6d 6f 6e 20 73 6f 6c 75 74 69 6f | e.inaccessible..A.common.solutio |
58ee0 | 6e 20 69 73 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 | n.is.to.assign.the.management.ad |
58f00 | 64 72 65 73 73 20 74 6f 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 61 20 64 75 6d 6d 79 20 69 | dress.to.a.loopback.or.a.dummy.i |
58f20 | 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 64 76 65 72 74 69 73 65 20 74 68 61 74 20 61 64 64 72 | nterface.and.advertise.that.addr |
58f40 | 65 73 73 20 76 69 61 20 61 6c 6c 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 2c 20 73 6f 20 74 | ess.via.all.physical.links,.so.t |
58f60 | 68 61 74 20 69 74 27 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 67 68 20 61 6e 79 20 6f | hat.it's.reachable.through.any.o |
58f80 | 66 20 74 68 65 6d 2e 20 53 69 6e 63 65 20 69 6e 20 4c 69 6e 75 78 2d 62 61 73 65 64 20 73 79 73 | f.them..Since.in.Linux-based.sys |
58fa0 | 74 65 6d 73 2c 20 74 68 65 72 65 20 63 61 6e 20 62 65 20 6f 6e 6c 79 20 6f 6e 65 20 6c 6f 6f 70 | tems,.there.can.be.only.one.loop |
58fc0 | 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2c 20 69 74 27 73 20 62 65 74 74 65 72 20 74 6f 20 75 | back.interface,.it's.better.to.u |
58fe0 | 73 65 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 61 74 20 70 75 | se.a.dummy.interface.for.that.pu |
59000 | 72 70 6f 73 65 2c 20 73 69 6e 63 65 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 | rpose,.since.they.can.be.added,. |
59020 | 72 65 6d 6f 76 65 64 2c 20 61 6e 64 20 74 61 6b 65 6e 20 75 70 20 61 6e 64 20 64 6f 77 6e 20 69 | removed,.and.taken.up.and.down.i |
59040 | 6e 64 65 70 65 6e 64 65 6e 74 6c 79 2e 00 4f 6e 20 74 68 65 20 4c 45 46 54 20 28 73 74 61 74 69 | ndependently..On.the.LEFT.(stati |
59060 | 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 4c 45 46 54 3a 00 4f 6e 20 74 68 65 20 | c.address):.On.the.LEFT:.On.the. |
59080 | 52 49 47 48 54 20 28 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 | RIGHT.(dynamic.address):.On.the. |
590a0 | 52 49 47 48 54 2c 20 73 65 74 75 70 20 62 79 20 61 6e 61 6c 6f 67 79 20 61 6e 64 20 73 77 61 70 | RIGHT,.setup.by.analogy.and.swap |
590c0 | 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 65 73 2e 00 4f 6e 20 | .local.and.remote.addresses..On. |
590e0 | 74 68 65 20 52 49 47 48 54 3a 00 4f 6e 20 74 68 65 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 2c | the.RIGHT:.On.the.active.router, |
59100 | 20 79 6f 75 20 73 68 6f 75 6c 64 20 68 61 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 | .you.should.have.information.in. |
59120 | 74 68 65 20 69 6e 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d | the.internal-cache.of.conntrack- |
59140 | 73 79 6e 63 2e 20 54 68 65 20 73 61 6d 65 20 63 75 72 72 65 6e 74 20 61 63 74 69 76 65 20 63 6f | sync..The.same.current.active.co |
59160 | 6e 6e 65 63 74 69 6f 6e 73 20 6e 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e | nnections.number.should.be.shown |
59180 | 20 69 6e 20 74 68 65 20 65 78 74 65 72 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 74 68 65 20 73 74 | .in.the.external-cache.of.the.st |
591a0 | 61 6e 64 62 79 20 72 6f 75 74 65 72 00 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 | andby.router.On.the.initiator,.w |
591c0 | 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 20 6f 70 74 69 | e.need.to.set.the.remote-id.opti |
591e0 | 6f 6e 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 49 4b 45 20 74 | on.so.that.it.can.identify.IKE.t |
59200 | 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 20 63 6f 72 72 65 63 | raffic.from.the.responder.correc |
59220 | 74 6c 79 2e 00 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 65 20 73 65 74 20 74 68 | tly..On.the.initiator,.we.set.th |
59240 | 65 20 70 65 65 72 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 20 70 75 62 6c 69 63 20 61 64 64 | e.peer.address.to.its.public.add |
59260 | 72 65 73 73 2c 20 62 75 74 20 6f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 20 77 65 20 6f 6e | ress,.but.on.the.responder.we.on |
59280 | 6c 79 20 73 65 74 20 74 68 65 20 69 64 2e 00 4f 6e 20 74 68 65 20 6c 61 73 74 20 68 6f 70 20 72 | ly.set.the.id..On.the.last.hop.r |
592a0 | 6f 75 74 65 72 20 69 66 20 69 74 20 69 73 20 64 65 73 69 72 65 64 20 74 6f 20 6e 6f 74 20 73 77 | outer.if.it.is.desired.to.not.sw |
592c0 | 69 74 63 68 20 6f 76 65 72 20 74 6f 20 74 68 65 20 53 50 54 20 74 72 65 65 20 63 6f 6e 66 69 67 | itch.over.to.the.SPT.tree.config |
592e0 | 75 72 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 4f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 | ure.this.command..On.the.respond |
59300 | 65 72 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 20 69 64 20 | er,.we.need.to.set.the.local.id. |
59320 | 73 6f 20 74 68 61 74 20 69 6e 69 74 69 61 74 6f 72 20 63 61 6e 20 6b 6e 6f 77 20 77 68 6f 27 73 | so.that.initiator.can.know.who's |
59340 | 20 74 61 6c 6b 69 6e 67 20 74 6f 20 69 74 20 66 6f 72 20 74 68 65 20 70 6f 69 6e 74 20 23 33 20 | .talking.to.it.for.the.point.#3. |
59360 | 74 6f 20 77 6f 72 6b 2e 00 4f 6e 63 65 20 61 20 63 6c 61 73 73 20 68 61 73 20 61 20 66 69 6c 74 | to.work..Once.a.class.has.a.filt |
59380 | 65 72 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 76 | er.configured,.you.will.also.hav |
593a0 | 65 20 74 6f 20 64 65 66 69 6e 65 20 77 68 61 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 20 | e.to.define.what.you.want.to.do. |
593c0 | 77 69 74 68 20 74 68 65 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 61 74 20 63 6c 61 73 73 2c 20 | with.the.traffic.of.that.class,. |
593e0 | 77 68 61 74 20 73 70 65 63 69 66 69 63 20 54 72 61 66 66 69 63 2d 43 6f 6e 74 72 6f 6c 20 74 72 | what.specific.Traffic-Control.tr |
59400 | 65 61 74 6d 65 6e 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 69 76 65 20 69 74 2e 20 59 6f 75 | eatment.you.want.to.give.it..You |
59420 | 20 77 69 6c 6c 20 68 61 76 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 73 73 69 62 69 6c 69 74 69 | .will.have.different.possibiliti |
59440 | 65 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 20 54 72 61 66 66 69 63 20 50 6f 6c 69 | es.depending.on.the.Traffic.Poli |
59460 | 63 79 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 2e 00 4f 6e 63 65 20 61 20 6e | cy.you.are.configuring..Once.a.n |
59480 | 65 69 67 68 62 6f 72 20 68 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2c 20 74 68 65 20 65 6e 74 72 | eighbor.has.been.found,.the.entr |
594a0 | 79 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 76 61 6c 69 64 20 66 6f 72 20 | y.is.considered.to.be.valid.for. |
594c0 | 61 74 20 6c 65 61 73 74 20 66 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 69 63 20 74 69 6d 65 2e | at.least.for.this.specific.time. |
594e0 | 20 41 6e 20 65 6e 74 72 79 27 73 20 76 61 6c 69 64 69 74 79 20 77 69 6c 6c 20 62 65 20 65 78 74 | .An.entry's.validity.will.be.ext |
59500 | 65 6e 64 65 64 20 69 66 20 69 74 20 72 65 63 65 69 76 65 73 20 70 6f 73 69 74 69 76 65 20 66 65 | ended.if.it.receives.positive.fe |
59520 | 65 64 62 61 63 6b 20 66 72 6f 6d 20 68 69 67 68 65 72 20 6c 65 76 65 6c 20 70 72 6f 74 6f 63 6f | edback.from.higher.level.protoco |
59540 | 6c 73 2e 00 4f 6e 63 65 20 61 20 72 6f 75 74 65 20 69 73 20 61 73 73 65 73 73 65 64 20 61 20 70 | ls..Once.a.route.is.assessed.a.p |
59560 | 65 6e 61 6c 74 79 2c 20 74 68 65 20 70 65 6e 61 6c 74 79 20 69 73 20 64 65 63 72 65 61 73 65 64 | enalty,.the.penalty.is.decreased |
59580 | 20 62 79 20 68 61 6c 66 20 65 61 63 68 20 74 69 6d 65 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 | .by.half.each.time.a.predefined. |
595a0 | 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 65 6c 61 70 73 65 73 20 28 68 61 6c 66 2d 6c 69 66 | amount.of.time.elapses.(half-lif |
595c0 | 65 2d 74 69 6d 65 29 2e 20 57 68 65 6e 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 | e-time)..When.the.accumulated.pe |
595e0 | 6e 61 6c 74 69 65 73 20 66 61 6c 6c 20 62 65 6c 6f 77 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 | nalties.fall.below.a.predefined. |
59600 | 74 68 72 65 73 68 6f 6c 64 20 28 72 65 75 73 65 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f 75 | threshold.(reuse-value),.the.rou |
59620 | 74 65 20 69 73 20 75 6e 73 75 70 70 72 65 73 73 65 64 20 61 6e 64 20 61 64 64 65 64 20 62 61 63 | te.is.unsuppressed.and.added.bac |
59640 | 6b 20 69 6e 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 4f 6e | k.into.the.BGP.routing.table..On |
59660 | 63 65 20 61 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 20 69 73 20 63 72 65 61 74 65 64 2c 20 | ce.a.traffic-policy.is.created,. |
59680 | 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 69 74 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | you.can.apply.it.to.an.interface |
596a0 | 3a 00 4f 6e 63 65 20 63 72 65 61 74 65 64 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 2c 20 50 73 | :.Once.created.in.the.system,.Ps |
596c0 | 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 | eudo-Ethernet.interfaces.can.be. |
596e0 | 72 65 66 65 72 65 6e 63 65 64 20 69 6e 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 77 61 79 | referenced.in.the.exact.same.way |
59700 | 20 61 73 20 6f 74 68 65 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4e | .as.other.Ethernet.interfaces..N |
59720 | 6f 74 65 73 20 61 62 6f 75 74 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 | otes.about.using.Pseudo-.Etherne |
59740 | 74 20 69 6e 74 65 72 66 61 63 65 73 3a 00 4f 6e 63 65 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 | t.interfaces:.Once.flow.accounti |
59760 | 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | ng.is.configured.on.an.interface |
59780 | 73 20 69 74 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 64 69 73 | s.it.provides.the.ability.to.dis |
597a0 | 70 6c 61 79 20 63 61 70 74 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 69 6e | play.captured.network.traffic.in |
597c0 | 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 | formation.for.all.configured.int |
597e0 | 65 72 66 61 63 65 73 2e 00 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d | erfaces..Once.the.command.is.com |
59800 | 70 6c 65 74 65 64 2c 20 69 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 | pleted,.it.will.add.the.certific |
59820 | 61 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e | ate.to.the.configuration.session |
59840 | 2c 20 74 6f 20 74 68 65 20 70 6b 69 20 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 | ,.to.the.pki.subtree..You.can.th |
59860 | 65 6e 20 72 65 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 61 | en.review.the.proposed.changes.a |
59880 | 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 63 65 20 74 68 65 20 66 69 72 73 74 20 70 | nd.commit.them..Once.the.first.p |
598a0 | 61 63 6b 65 74 20 6f 66 20 74 68 65 20 66 6c 6f 77 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 67 | acket.of.the.flow.successfully.g |
598c0 | 6f 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 | oes.through.the.IP.forwarding.pa |
598e0 | 74 68 20 28 62 6c 61 63 6b 20 63 69 72 63 6c 65 73 20 70 61 74 68 29 2c 20 66 72 6f 6d 20 74 68 | th.(black.circles.path),.from.th |
59900 | 65 20 73 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 6f 6e 2c 20 79 6f 75 20 6d 69 67 68 74 20 64 65 | e.second.packet.on,.you.might.de |
59920 | 63 69 64 65 20 74 6f 20 6f 66 66 6c 6f 61 64 20 74 68 65 20 66 6c 6f 77 20 74 6f 20 74 68 65 20 | cide.to.offload.the.flow.to.the. |
59940 | 66 6c 6f 77 74 61 62 6c 65 20 74 68 72 6f 75 67 68 20 79 6f 75 72 20 72 75 6c 65 73 65 74 2e 20 | flowtable.through.your.ruleset.. |
59960 | 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 70 72 6f | The.flowtable.infrastructure.pro |
59980 | 76 69 64 65 73 20 61 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 | vides.a.rule.action.that.allows. |
599a0 | 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 77 68 65 6e 20 74 6f 20 61 64 64 20 61 20 66 6c 6f | you.to.specify.when.to.add.a.flo |
599c0 | 77 20 74 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 4f 6e 20 66 6f 72 77 61 72 64 20 66 | w.to.the.flowtable.(On.forward.f |
599e0 | 69 6c 74 65 72 69 6e 67 2c 20 72 65 64 20 63 69 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 00 4f | iltering,.red.circle.number.6).O |
59a00 | 6e 63 65 20 74 68 65 20 6c 6f 63 61 6c 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 60 60 | nce.the.local.tunnel.endpoint.`` |
59a20 | 73 65 74 20 73 65 72 76 69 63 65 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 67 61 74 65 77 61 79 | set.service.pppoe-server.gateway |
59a40 | 2d 61 64 64 72 65 73 73 20 27 31 30 2e 31 2e 31 2e 32 27 60 60 20 68 61 73 20 62 65 65 6e 20 64 | -address.'10.1.1.2'``.has.been.d |
59a60 | 65 66 69 6e 65 64 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 63 61 6e 20 62 | efined,.the.client.IP.pool.can.b |
59a80 | 65 20 65 69 74 68 65 72 20 64 65 66 69 6e 65 64 20 61 73 20 61 20 72 61 6e 67 65 20 6f 72 20 61 | e.either.defined.as.a.range.or.a |
59aa0 | 73 20 73 75 62 6e 65 74 20 75 73 69 6e 67 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 20 49 66 | s.subnet.using.CIDR.notation..If |
59ac0 | 20 74 68 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 20 69 73 20 75 73 65 64 2c 20 6d 75 6c 74 | .the.CIDR.notation.is.used,.mult |
59ae0 | 69 70 6c 65 20 73 75 62 6e 65 74 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 68 69 63 68 20 | iple.subnets.can.be.setup.which. |
59b00 | 61 72 65 20 75 73 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 00 4f 6e 63 65 20 74 68 65 20 | are.used.sequentially..Once.the. |
59b20 | 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 61 72 65 20 73 65 74 20 66 6f 72 20 61 20 63 6c 61 | matching.rules.are.set.for.a.cla |
59b40 | 73 73 2c 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 68 6f | ss,.you.can.start.configuring.ho |
59b60 | 77 20 79 6f 75 20 77 61 6e 74 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 62 | w.you.want.matching.traffic.to.b |
59b80 | 65 68 61 76 65 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 | ehave..Once.the.user.is.connecte |
59ba0 | 64 2c 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 | d,.the.user.session.is.using.the |
59bc0 | 20 73 65 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 | .set.limits.and.can.be.displayed |
59be0 | 20 76 69 61 20 27 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 | .via.'show.pppoe-server.sessions |
59c00 | 27 2e 00 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 74 | '..Once.the.user.is.connected,.t |
59c20 | 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 74 | he.user.session.is.using.the.set |
59c40 | 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 61 | .limits.and.can.be.displayed.via |
59c60 | 20 60 60 73 68 6f 77 20 70 70 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 2e | .``show.pppoe-server.sessions``. |
59c80 | 00 4f 6e 63 65 20 79 6f 75 20 63 6f 6d 6d 69 74 20 74 68 65 20 61 62 6f 76 65 20 63 68 61 6e 67 | .Once.you.commit.the.above.chang |
59ca0 | 65 73 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 61 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 | es.you.can.create.a.config.file. |
59cc0 | 69 6e 20 74 68 65 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 6f 63 73 65 72 76 2f 63 6f 6e 66 69 | in.the./config/auth/ocserv/confi |
59ce0 | 67 2d 70 65 72 2d 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 20 74 68 61 74 20 6d 61 74 63 68 65 | g-per-user.directory.that.matche |
59d00 | 73 20 61 20 75 73 65 72 6e 61 6d 65 20 6f 66 20 61 20 75 73 65 72 20 79 6f 75 20 68 61 76 65 20 | s.a.username.of.a.user.you.have. |
59d20 | 63 72 65 61 74 65 64 20 65 2e 67 2e 20 22 74 73 74 22 2e 20 4e 6f 77 20 77 68 65 6e 20 6c 6f 67 | created.e.g.."tst"..Now.when.log |
59d40 | 67 69 6e 67 20 69 6e 20 77 69 74 68 20 74 68 65 20 22 74 73 74 22 20 75 73 65 72 20 74 68 65 20 | ging.in.with.the."tst".user.the. |
59d60 | 63 6f 6e 66 69 67 20 6f 70 74 69 6f 6e 73 20 79 6f 75 20 73 65 74 20 69 6e 20 74 68 69 73 20 66 | config.options.you.set.in.this.f |
59d80 | 69 6c 65 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 65 64 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 76 | ile.will.be.loaded..Once.you.hav |
59da0 | 65 20 61 6e 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | e.an.Ethernet.device.connected,. |
59dc0 | 69 2e 65 2e 20 60 65 74 68 30 60 2c 20 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 | i.e..`eth0`,.then.you.can.config |
59de0 | 75 72 65 20 69 74 20 74 6f 20 6f 70 65 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e | ure.it.to.open.the.PPPoE.session |
59e00 | 20 66 6f 72 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 | .for.you.and.your.DSL.Transceive |
59e20 | 72 20 28 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 29 20 6a 75 73 74 20 61 63 74 73 20 74 6f 20 74 72 | r.(Modem/Router).just.acts.to.tr |
59e40 | 61 6e 73 6c 61 74 65 20 79 6f 75 72 20 6d 65 73 73 61 67 65 73 20 69 6e 20 61 20 77 61 79 20 74 | anslate.your.messages.in.a.way.t |
59e60 | 68 61 74 20 76 44 53 4c 2f 61 44 53 4c 20 75 6e 64 65 72 73 74 61 6e 64 73 2e 00 4f 6e 63 65 20 | hat.vDSL/aDSL.understands..Once. |
59e80 | 79 6f 75 20 68 61 76 65 20 73 65 74 75 70 20 79 6f 75 72 20 53 53 54 50 20 73 65 72 76 65 72 20 | you.have.setup.your.SSTP.server. |
59ea0 | 74 68 65 72 65 20 63 6f 6d 65 73 20 74 68 65 20 74 69 6d 65 20 74 6f 20 64 6f 20 73 6f 6d 65 20 | there.comes.the.time.to.do.some. |
59ec0 | 62 61 73 69 63 20 74 65 73 74 69 6e 67 2e 20 54 68 65 20 4c 69 6e 75 78 20 63 6c 69 65 6e 74 20 | basic.testing..The.Linux.client. |
59ee0 | 75 73 65 64 20 66 6f 72 20 74 65 73 74 69 6e 67 20 69 73 20 63 61 6c 6c 65 64 20 73 73 74 70 63 | used.for.testing.is.called.sstpc |
59f00 | 5f 2e 20 73 73 74 70 63 5f 20 72 65 71 75 69 72 65 73 20 61 20 50 50 50 20 63 6f 6e 66 69 67 75 | _..sstpc_.requires.a.PPP.configu |
59f20 | 72 61 74 69 6f 6e 2f 70 65 65 72 20 66 69 6c 65 2e 00 4f 6e 63 65 20 79 6f 75 72 20 72 6f 75 74 | ration/peer.file..Once.your.rout |
59f40 | 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 6a 65 63 74 20 52 50 4b | ers.are.configured.to.reject.RPK |
59f60 | 49 2d 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2c 20 79 6f 75 20 63 61 6e 20 74 65 73 74 | I-invalid.prefixes,.you.can.test |
59f80 | 20 77 68 65 74 68 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 77 6f | .whether.the.configuration.is.wo |
59fa0 | 72 6b 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 75 73 69 6e 67 20 43 6c 6f 75 64 66 6c 61 72 65 | rking.correctly.using.Cloudflare |
59fc0 | 27 73 20 74 65 73 74 5f 20 77 65 62 73 69 74 65 2e 20 4b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 | 's.test_.website..Keep.in.mind.t |
59fe0 | 68 61 74 20 69 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 2c 20 79 | hat.in.order.for.this.to.work,.y |
5a000 | 6f 75 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 6e 6f 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 | ou.need.to.have.no.default.route |
5a020 | 73 20 6f 72 20 61 6e 79 74 68 69 6e 67 20 65 6c 73 65 20 74 68 61 74 20 77 6f 75 6c 64 20 73 74 | s.or.anything.else.that.would.st |
5a040 | 69 6c 6c 20 73 65 6e 64 20 74 72 61 66 66 69 63 20 74 6f 20 52 50 4b 49 2d 69 6e 76 61 6c 69 64 | ill.send.traffic.to.RPKI-invalid |
5a060 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 00 4f 6e 63 65 20 79 6f 75 72 20 72 6f 75 74 65 72 73 | .destinations..Once.your.routers |
5a080 | 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 6a 65 63 74 20 52 50 4b 49 2d 69 | .are.configured.to.reject.RPKI-i |
5a0a0 | 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2c 20 79 6f 75 20 63 61 6e 20 74 65 73 74 20 77 68 | nvalid.prefixes,.you.can.test.wh |
5a0c0 | 65 74 68 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 77 6f 72 6b 69 | ether.the.configuration.is.worki |
5a0e0 | 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 75 73 69 6e 67 20 74 68 65 20 60 52 49 50 45 20 4c 61 62 | ng.correctly.using.the.`RIPE.Lab |
5a100 | 73 20 52 50 4b 49 20 54 65 73 74 60 5f 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 20 74 6f 6f 6c 2e | s.RPKI.Test`_.experimental.tool. |
5a120 | 00 4f 6e 65 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 20 77 69 74 68 20 72 6f 75 | .One.Type-3.summary-LSA.with.rou |
5a140 | 74 69 6e 67 20 69 6e 66 6f 20 3c 45 2e 46 2e 47 2e 48 2f 4d 3e 20 69 73 20 61 6e 6e 6f 75 6e 63 | ting.info.<E.F.G.H/M>.is.announc |
5a160 | 65 64 20 69 6e 74 6f 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 69 66 20 64 65 66 69 6e 65 64 | ed.into.backbone.area.if.defined |
5a180 | 20 61 72 65 61 20 63 6f 6e 74 61 69 6e 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 69 6e 74 72 | .area.contains.at.least.one.intr |
5a1a0 | 61 2d 61 72 65 61 20 6e 65 74 77 6f 72 6b 20 28 69 2e 65 2e 20 64 65 73 63 72 69 62 65 64 20 77 | a-area.network.(i.e..described.w |
5a1c0 | 69 74 68 20 72 6f 75 74 65 72 2d 4c 53 41 20 6f 72 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 29 20 66 | ith.router-LSA.or.network-LSA).f |
5a1e0 | 72 6f 6d 20 72 61 6e 67 65 20 3c 41 2e 42 2e 43 2e 44 2f 4d 3e 2e 20 54 68 69 73 20 63 6f 6d 6d | rom.range.<A.B.C.D/M>..This.comm |
5a200 | 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 4f 6e 65 | and.makes.sense.in.ABR.only..One |
5a220 | 20 69 6d 70 6c 69 63 69 74 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 65 78 69 73 74 73 2e 00 4f 6e | .implicit.environment.exists..On |
5a240 | 65 20 6f 66 20 74 68 65 20 69 6d 70 6f 72 74 61 6e 74 20 66 65 61 74 75 72 65 73 20 62 75 69 6c | e.of.the.important.features.buil |
5a260 | 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 66 72 61 6d 65 77 | t.on.top.of.the.Netfilter.framew |
5a280 | 6f 72 6b 20 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 2e 20 43 6f 6e 6e | ork.is.connection.tracking..Conn |
5a2a0 | 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 20 6b 65 72 6e 65 | ection.tracking.allows.the.kerne |
5a2c0 | 6c 20 74 6f 20 6b 65 65 70 20 74 72 61 63 6b 20 6f 66 20 61 6c 6c 20 6c 6f 67 69 63 61 6c 20 6e | l.to.keep.track.of.all.logical.n |
5a2e0 | 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 72 20 73 65 73 73 69 6f 6e 73 2c 20 | etwork.connections.or.sessions,. |
5a300 | 61 6e 64 20 74 68 65 72 65 62 79 20 72 65 6c 61 74 65 20 61 6c 6c 20 6f 66 20 74 68 65 20 70 61 | and.thereby.relate.all.of.the.pa |
5a320 | 63 6b 65 74 73 20 77 68 69 63 68 20 6d 61 79 20 6d 61 6b 65 20 75 70 20 74 68 61 74 20 63 6f 6e | ckets.which.may.make.up.that.con |
5a340 | 6e 65 63 74 69 6f 6e 2e 20 4e 41 54 20 72 65 6c 69 65 73 20 6f 6e 20 74 68 69 73 20 69 6e 66 6f | nection..NAT.relies.on.this.info |
5a360 | 72 6d 61 74 69 6f 6e 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 61 6c 6c 20 72 65 6c 61 74 65 64 | rmation.to.translate.all.related |
5a380 | 20 70 61 63 6b 65 74 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 2c 20 61 6e 64 20 69 70 | .packets.in.the.same.way,.and.ip |
5a3a0 | 74 61 62 6c 65 73 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | tables.can.use.this.information. |
5a3c0 | 74 6f 20 61 63 74 20 61 73 20 61 20 73 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 2e 00 4f | to.act.as.a.stateful.firewall..O |
5a3e0 | 6e 65 20 6f 66 20 74 68 65 20 75 73 65 73 20 6f 66 20 46 61 69 72 20 51 75 65 75 65 20 6d 69 67 | ne.of.the.uses.of.Fair.Queue.mig |
5a400 | 68 74 20 62 65 20 74 68 65 20 6d 69 74 69 67 61 74 69 6f 6e 20 6f 66 20 44 65 6e 69 61 6c 20 6f | ht.be.the.mitigation.of.Denial.o |
5a420 | 66 20 53 65 72 76 69 63 65 20 61 74 74 61 63 6b 73 2e 00 4f 6e 6c 79 20 38 30 32 2e 31 51 2d 74 | f.Service.attacks..Only.802.1Q-t |
5a440 | 61 67 67 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 63 63 65 70 74 65 64 20 6f 6e 20 45 74 | agged.packets.are.accepted.on.Et |
5a460 | 68 65 72 6e 65 74 20 76 69 66 73 2e 00 4f 6e 6c 79 20 56 52 52 50 20 69 73 20 73 75 70 70 6f 72 | hernet.vifs..Only.VRRP.is.suppor |
5a480 | 74 65 64 2e 20 52 65 71 75 69 72 65 64 20 6f 70 74 69 6f 6e 2e 00 4f 6e 6c 79 20 61 6c 6c 6f 77 | ted..Required.option..Only.allow |
5a4a0 | 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 | .certain.IP.addresses.or.prefixe |
5a4c0 | 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 68 74 74 70 73 20 77 65 62 73 65 72 76 65 72 2e | s.to.access.the.https.webserver. |
5a4e0 | 00 4f 6e 6c 79 20 69 6e 20 74 68 65 20 73 6f 75 72 63 65 20 63 72 69 74 65 72 69 61 2c 20 79 6f | .Only.in.the.source.criteria,.yo |
5a500 | 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 61 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4f 6e 6c | u.can.specify.a.mac-address..Onl |
5a520 | 79 20 6f 6e 65 20 53 52 47 42 20 61 6e 64 20 64 65 66 61 75 6c 74 20 53 50 46 20 41 6c 67 6f 72 | y.one.SRGB.and.default.SPF.Algor |
5a540 | 69 74 68 6d 20 69 73 20 73 75 70 70 6f 72 74 65 64 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 | ithm.is.supported.Only.request.a |
5a560 | 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 62 | n.address.from.the.DHCP.server.b |
5a580 | 75 74 20 64 6f 20 6e 6f 74 20 72 65 71 75 65 73 74 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 65 | ut.do.not.request.a.default.gate |
5a5a0 | 77 61 79 2e 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f | way..Only.request.an.address.fro |
5a5c0 | 6d 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e | m.the.PPPoE.server.but.do.not.in |
5a5e0 | 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 72 65 | stall.any.default.route..Only.re |
5a600 | 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 53 53 54 50 20 73 | quest.an.address.from.the.SSTP.s |
5a620 | 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 | erver.but.do.not.install.any.def |
5a640 | 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 74 68 65 20 74 79 70 65 20 28 60 60 73 73 68 | ault.route..Only.the.type.(``ssh |
5a660 | 2d 72 73 61 60 60 29 20 61 6e 64 20 74 68 65 20 6b 65 79 20 28 60 60 41 41 41 42 33 4e 2e 2e 2e | -rsa``).and.the.key.(``AAAB3N... |
5a680 | 60 60 29 20 61 72 65 20 75 73 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 6b 65 79 20 | ``).are.used..Note.that.the.key. |
5a6a0 | 77 69 6c 6c 20 75 73 75 61 6c 6c 79 20 62 65 20 73 65 76 65 72 61 6c 20 68 75 6e 64 72 65 64 20 | will.usually.be.several.hundred. |
5a6c0 | 63 68 61 72 61 63 74 65 72 73 20 6c 6f 6e 67 2c 20 61 6e 64 20 79 6f 75 20 77 69 6c 6c 20 6e 65 | characters.long,.and.you.will.ne |
5a6e0 | 65 64 20 74 6f 20 63 6f 70 79 20 61 6e 64 20 70 61 73 74 65 20 69 74 2e 20 53 6f 6d 65 20 74 65 | ed.to.copy.and.paste.it..Some.te |
5a700 | 72 6d 69 6e 61 6c 20 65 6d 75 6c 61 74 6f 72 73 20 6d 61 79 20 61 63 63 69 64 65 6e 74 61 6c 6c | rminal.emulators.may.accidentall |
5a720 | 79 20 73 70 6c 69 74 20 74 68 69 73 20 6f 76 65 72 20 73 65 76 65 72 61 6c 20 6c 69 6e 65 73 2e | y.split.this.over.several.lines. |
5a740 | 20 42 65 20 61 74 74 65 6e 74 69 76 65 20 77 68 65 6e 20 79 6f 75 20 70 61 73 74 65 20 69 74 20 | .Be.attentive.when.you.paste.it. |
5a760 | 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 70 61 73 74 65 73 20 61 73 20 61 20 73 69 6e 67 6c 65 20 | that.it.only.pastes.as.a.single. |
5a780 | 6c 69 6e 65 2e 20 54 68 65 20 74 68 69 72 64 20 70 61 72 74 20 69 73 20 73 69 6d 70 6c 79 20 61 | line..The.third.part.is.simply.a |
5a7a0 | 6e 20 69 64 65 6e 74 69 66 69 65 72 2c 20 61 6e 64 20 69 73 20 66 6f 72 20 79 6f 75 72 20 6f 77 | n.identifier,.and.is.for.your.ow |
5a7c0 | 6e 20 72 65 66 65 72 65 6e 63 65 2e 00 4f 6e 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 20 61 20 56 | n.reference..Only.works.with.a.V |
5a7e0 | 58 4c 41 4e 20 64 65 76 69 63 65 20 77 69 74 68 20 65 78 74 65 72 6e 61 6c 20 66 6c 61 67 20 73 | XLAN.device.with.external.flag.s |
5a800 | 65 74 2e 00 4f 70 2d 6d 6f 64 65 20 63 68 65 63 6b 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 | et..Op-mode.check.virtual-server |
5a820 | 20 73 74 61 74 75 73 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 | .status.OpenConnect.OpenConnect. |
5a840 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 73 65 6e 64 20 61 63 63 6f 75 6e | can.be.configured.to.send.accoun |
5a860 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 20 52 41 44 49 55 53 20 73 65 72 | ting.information.to.a.RADIUS.ser |
5a880 | 76 65 72 20 74 6f 20 63 61 70 74 75 72 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 64 61 74 61 | ver.to.capture.user.session.data |
5a8a0 | 20 73 75 63 68 20 61 73 20 74 69 6d 65 20 6f 66 20 63 6f 6e 6e 65 63 74 2f 64 69 73 63 6f 6e 6e | .such.as.time.of.connect/disconn |
5a8c0 | 65 63 74 2c 20 64 61 74 61 20 74 72 61 6e 73 66 65 72 72 65 64 2c 20 61 6e 64 20 73 6f 20 6f 6e | ect,.data.transferred,.and.so.on |
5a8e0 | 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 73 65 72 76 65 72 20 6d 61 74 63 68 65 73 20 74 68 65 | ..OpenConnect.server.matches.the |
5a900 | 20 66 69 6c 65 6e 61 6d 65 20 69 6e 20 61 20 63 61 73 65 20 73 65 6e 73 69 74 69 76 65 20 6d 61 | .filename.in.a.case.sensitive.ma |
5a920 | 6e 6e 65 72 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2f 67 72 6f | nner,.make.sure.the.username/gro |
5a940 | 75 70 20 6e 61 6d 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 6d 61 74 63 68 65 73 20 74 68 | up.name.you.configure.matches.th |
5a960 | 65 20 66 69 6c 65 6e 61 6d 65 20 65 78 61 63 74 6c 79 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 | e.filename.exactly..OpenConnect. |
5a980 | 73 75 70 70 6f 72 74 73 20 61 20 73 75 62 73 65 74 20 6f 66 20 69 74 27 73 20 63 6f 6e 66 69 67 | supports.a.subset.of.it's.config |
5a9a0 | 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 6f 6e | uration.options.to.be.applied.on |
5a9c0 | 20 61 20 70 65 72 20 75 73 65 72 2f 67 72 6f 75 70 20 62 61 73 69 73 2c 20 66 6f 72 20 63 6f 6e | .a.per.user/group.basis,.for.con |
5a9e0 | 66 69 67 75 72 61 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 20 77 65 20 72 65 66 65 72 20 74 6f 20 | figuration.purposes.we.refer.to. |
5aa00 | 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 73 20 22 49 64 65 6e 74 69 74 79 20 | this.functionality.as."Identity. |
5aa20 | 62 61 73 65 64 20 63 6f 6e 66 69 67 22 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 60 4f 70 | based.config"..The.following.`Op |
5aa40 | 65 6e 43 6f 6e 6e 65 63 74 20 53 65 72 76 65 72 20 4d 61 6e 75 61 6c 20 3c 68 74 74 70 73 3a 2f | enConnect.Server.Manual.<https:/ |
5aa60 | 2f 6f 63 73 65 72 76 2e 67 69 74 6c 61 62 2e 69 6f 2f 77 77 77 2f 6d 61 6e 75 61 6c 2e 68 74 6d | /ocserv.gitlab.io/www/manual.htm |
5aa80 | 6c 23 3a 7e 3a 74 65 78 74 3d 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 25 32 30 66 69 6c 65 73 25 | l#:~:text=Configuration%20files% |
5aaa0 | 32 30 74 68 61 74 25 20 32 30 77 69 6c 6c 25 32 30 62 65 25 32 30 61 70 70 6c 69 65 64 25 32 30 | 20that%.20will%20be%20applied%20 |
5aac0 | 70 65 72 25 32 30 75 73 65 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 6f 72 25 30 41 25 | per%20user%20connection%20or%0A% |
5aae0 | 32 33 25 32 30 70 65 72 25 32 30 67 72 6f 75 70 3e 60 5f 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 | 23%20per%20group>`_.outlines.the |
5ab00 | 20 73 65 74 20 6f 66 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 68 | .set.of.configuration.options.th |
5ab20 | 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 6c 65 76 65 | at.are.allowed..This.can.be.leve |
5ab40 | 72 61 67 65 64 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 73 20 6f 66 | raged.to.apply.different.sets.of |
5ab60 | 20 63 6f 6e 66 69 67 73 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 75 73 65 72 73 20 6f 72 20 67 | .configs.to.different.users.or.g |
5ab80 | 72 6f 75 70 73 20 6f 66 20 75 73 65 72 73 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 2d 63 6f 6d 70 | roups.of.users..OpenConnect-comp |
5aba0 | 61 74 69 62 6c 65 20 73 65 72 76 65 72 20 66 65 61 74 75 72 65 20 69 73 20 61 76 61 69 6c 61 62 | atible.server.feature.is.availab |
5abc0 | 6c 65 20 66 72 6f 6d 20 74 68 69 73 20 72 65 6c 65 61 73 65 2e 20 4f 70 65 6e 63 6f 6e 6e 65 63 | le.from.this.release..Openconnec |
5abe0 | 74 20 56 50 4e 20 73 75 70 70 6f 72 74 73 20 53 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e | t.VPN.supports.SSL.connection.an |
5ac00 | 64 20 6f 66 66 65 72 73 20 66 75 6c 6c 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 2e 20 53 53 | d.offers.full.network.access..SS |
5ac20 | 4c 20 56 50 4e 20 6e 65 74 77 6f 72 6b 20 65 78 74 65 6e 73 69 6f 6e 20 63 6f 6e 6e 65 63 74 73 | L.VPN.network.extension.connects |
5ac40 | 20 74 68 65 20 65 6e 64 2d 75 73 65 72 20 73 79 73 74 65 6d 20 74 6f 20 74 68 65 20 63 6f 72 70 | .the.end-user.system.to.the.corp |
5ac60 | 6f 72 61 74 65 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f | orate.network.with.access.contro |
5ac80 | 6c 73 20 62 61 73 65 64 20 6f 6e 6c 79 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 69 | ls.based.only.on.network.layer.i |
5aca0 | 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | nformation,.such.as.destination. |
5acc0 | 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 53 6f 2c 20 | IP.address.and.port.number..So,. |
5ace0 | 69 74 20 70 72 6f 76 69 64 65 73 20 73 61 66 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 66 | it.provides.safe.communication.f |
5ad00 | 6f 72 20 61 6c 6c 20 74 79 70 65 73 20 6f 66 20 64 65 76 69 63 65 20 74 72 61 66 66 69 63 20 61 | or.all.types.of.device.traffic.a |
5ad20 | 63 72 6f 73 73 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 72 69 76 61 74 | cross.public.networks.and.privat |
5ad40 | 65 20 6e 65 74 77 6f 72 6b 73 2c 20 61 6c 73 6f 20 65 6e 63 72 79 70 74 73 20 74 68 65 20 74 72 | e.networks,.also.encrypts.the.tr |
5ad60 | 61 66 66 69 63 20 77 69 74 68 20 53 53 4c 20 70 72 6f 74 6f 63 6f 6c 2e 00 4f 70 65 6e 56 50 4e | affic.with.SSL.protocol..OpenVPN |
5ad80 | 00 4f 70 65 6e 56 50 4e 20 2a 2a 77 69 6c 6c 20 6e 6f 74 2a 2a 20 61 75 74 6f 6d 61 74 69 63 61 | .OpenVPN.**will.not**.automatica |
5ada0 | 6c 6c 79 20 63 72 65 61 74 65 20 72 6f 75 74 65 73 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 20 | lly.create.routes.in.the.kernel. |
5adc0 | 66 6f 72 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 77 68 65 6e 20 74 68 65 79 20 63 6f 6e | for.client.subnets.when.they.con |
5ade0 | 6e 65 63 74 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 75 73 65 20 63 6c 69 65 6e 74 2d 73 75 | nect.and.will.only.use.client-su |
5ae00 | 62 6e 65 74 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 73 6f 20 | bnet.association.internally,.so. |
5ae20 | 77 65 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 | we.need.to.create.a.route.to.the |
5ae40 | 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 20 6e 65 74 77 6f 72 6b 20 6f 75 72 73 65 6c 76 65 73 3a | .10.23.0.0/20.network.ourselves: |
5ae60 | 00 4f 70 65 6e 56 50 4e 20 44 43 4f 20 69 73 20 6e 6f 74 20 66 75 6c 6c 20 4f 70 65 6e 56 50 4e | .OpenVPN.DCO.is.not.full.OpenVPN |
5ae80 | 20 66 65 61 74 75 72 65 73 20 73 75 70 70 6f 72 74 65 64 20 2c 20 69 73 20 63 75 72 72 65 6e 74 | .features.supported.,.is.current |
5aea0 | 6c 79 20 63 6f 6e 73 69 64 65 72 65 64 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 2e 20 46 75 72 74 | ly.considered.experimental..Furt |
5aec0 | 68 65 72 6d 6f 72 65 2c 20 74 68 65 72 65 20 61 72 65 20 63 65 72 74 61 69 6e 20 4f 70 65 6e 56 | hermore,.there.are.certain.OpenV |
5aee0 | 50 4e 20 66 65 61 74 75 72 65 73 20 61 6e 64 20 75 73 65 20 63 61 73 65 73 20 74 68 61 74 20 72 | PN.features.and.use.cases.that.r |
5af00 | 65 6d 61 69 6e 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 44 43 4f 2e 20 54 6f 20 | emain.incompatible.with.DCO..To. |
5af20 | 67 65 74 20 61 20 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 20 75 6e 64 65 72 73 74 61 6e 64 69 6e | get.a.comprehensive.understandin |
5af40 | 67 20 6f 66 20 74 68 65 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 61 73 73 6f 63 69 61 74 65 64 20 | g.of.the.limitations.associated. |
5af60 | 77 69 74 68 20 44 43 4f 2c 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 6c 69 73 74 20 6f 66 20 6b | with.DCO,.refer.to.the.list.of.k |
5af80 | 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 | nown.limitations.in.the.document |
5afa0 | 61 74 69 6f 6e 2e 00 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c | ation..OpenVPN.Data.Channel.Offl |
5afc0 | 6f 61 64 20 28 44 43 4f 29 00 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f | oad.(DCO).OpenVPN.Data.Channel.O |
5afe0 | 66 66 6c 6f 61 64 20 28 44 43 4f 29 20 65 6e 61 62 6c 65 73 20 73 69 67 6e 69 66 69 63 61 6e 74 | ffload.(DCO).enables.significant |
5b000 | 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 65 6e 68 61 6e 63 65 6d 65 6e 74 20 69 6e 20 65 6e 63 72 | .performance.enhancement.in.encr |
5b020 | 79 70 74 65 64 20 4f 70 65 6e 56 50 4e 20 64 61 74 61 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 42 | ypted.OpenVPN.data.processing..B |
5b040 | 79 20 6d 69 6e 69 6d 69 7a 69 6e 67 20 63 6f 6e 74 65 78 74 20 73 77 69 74 63 68 69 6e 67 20 66 | y.minimizing.context.switching.f |
5b060 | 6f 72 20 65 61 63 68 20 70 61 63 6b 65 74 2c 20 44 43 4f 20 65 66 66 65 63 74 69 76 65 6c 79 20 | or.each.packet,.DCO.effectively. |
5b080 | 72 65 64 75 63 65 73 20 6f 76 65 72 68 65 61 64 2e 20 54 68 69 73 20 6f 70 74 69 6d 69 7a 61 74 | reduces.overhead..This.optimizat |
5b0a0 | 69 6f 6e 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 6b 65 65 70 69 6e 67 20 6d 6f 73 74 20 | ion.is.achieved.by.keeping.most. |
5b0c0 | 64 61 74 61 20 68 61 6e 64 6c 69 6e 67 20 74 61 73 6b 73 20 77 69 74 68 69 6e 20 74 68 65 20 6b | data.handling.tasks.within.the.k |
5b0e0 | 65 72 6e 65 6c 2c 20 61 76 6f 69 64 69 6e 67 20 66 72 65 71 75 65 6e 74 20 73 77 69 74 63 68 65 | ernel,.avoiding.frequent.switche |
5b100 | 73 20 62 65 74 77 65 65 6e 20 6b 65 72 6e 65 6c 20 61 6e 64 20 75 73 65 72 20 73 70 61 63 65 20 | s.between.kernel.and.user.space. |
5b120 | 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 70 61 63 6b 65 74 20 68 61 6e 64 6c 69 | for.encryption.and.packet.handli |
5b140 | 6e 67 2e 00 4f 70 65 6e 56 50 4e 20 61 6c 6c 6f 77 73 20 66 6f 72 20 65 69 74 68 65 72 20 54 43 | ng..OpenVPN.allows.for.either.TC |
5b160 | 50 20 6f 72 20 55 44 50 2e 20 55 44 50 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 74 68 65 20 6c | P.or.UDP..UDP.will.provide.the.l |
5b180 | 6f 77 65 73 74 20 6c 61 74 65 6e 63 79 2c 20 77 68 69 6c 65 20 54 43 50 20 77 69 6c 6c 20 77 6f | owest.latency,.while.TCP.will.wo |
5b1a0 | 72 6b 20 62 65 74 74 65 72 20 66 6f 72 20 6c 6f 73 73 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 3b | rk.better.for.lossy.connections; |
5b1c0 | 20 67 65 6e 65 72 61 6c 6c 79 20 55 44 50 20 69 73 20 70 72 65 66 65 72 72 65 64 20 77 68 65 6e | .generally.UDP.is.preferred.when |
5b1e0 | 20 70 6f 73 73 69 62 6c 65 2e 00 4f 70 65 6e 56 50 4e 20 69 73 20 70 6f 70 75 6c 61 72 20 66 6f | .possible..OpenVPN.is.popular.fo |
5b200 | 72 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 73 65 74 75 70 73 2c 20 62 75 74 20 69 74 73 20 | r.client-server.setups,.but.its. |
5b220 | 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 72 65 6d 61 69 6e 73 20 61 20 72 65 6c 61 | site-to-site.mode.remains.a.rela |
5b240 | 74 69 76 65 6c 79 20 6f 62 73 63 75 72 65 20 66 65 61 74 75 72 65 2c 20 61 6e 64 20 6d 61 6e 79 | tively.obscure.feature,.and.many |
5b260 | 20 72 6f 75 74 65 72 20 61 70 70 6c 69 61 6e 63 65 73 20 73 74 69 6c 6c 20 64 6f 6e 27 74 20 73 | .router.appliances.still.don't.s |
5b280 | 75 70 70 6f 72 74 20 69 74 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 27 73 20 76 65 72 79 20 75 73 | upport.it..However,.it's.very.us |
5b2a0 | 65 66 75 6c 20 66 6f 72 20 71 75 69 63 6b 6c 79 20 73 65 74 74 69 6e 67 20 75 70 20 74 75 6e 6e | eful.for.quickly.setting.up.tunn |
5b2c0 | 65 6c 73 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 4f 70 65 6e 56 50 4e 20 73 74 61 | els.between.routers..OpenVPN.sta |
5b2e0 | 74 75 73 20 63 61 6e 20 62 65 20 76 65 72 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 73 | tus.can.be.verified.using.the.`s |
5b300 | 68 6f 77 20 6f 70 65 6e 76 70 6e 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 | how.openvpn`.operational.command |
5b320 | 73 2e 20 53 65 65 20 74 68 65 20 62 75 69 6c 74 2d 69 6e 20 68 65 6c 70 20 66 6f 72 20 61 20 63 | s..See.the.built-in.help.for.a.c |
5b340 | 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 6f 66 20 6f 70 74 69 6f 6e 73 2e 00 4f 70 65 6e 63 6f 6e | omplete.list.of.options..Opencon |
5b360 | 6e 65 63 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6e 67 20 4d 6f 64 | nect.Configuration.Operating.Mod |
5b380 | 65 73 00 4f 70 65 72 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6f 6e 20 43 6f 6d 6d 61 6e 64 73 00 | es.Operation.Operation.Commands. |
5b3a0 | 4f 70 65 72 61 74 69 6f 6e 20 4d 6f 64 65 00 4f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 6f 66 | Operation.Mode.Operation.mode.of |
5b3c0 | 20 77 69 72 65 6c 65 73 73 20 72 61 64 69 6f 2e 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 00 | .wireless.radio..Operation-mode. |
5b3e0 | 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 20 46 69 72 65 77 61 6c 6c 00 4f 70 65 72 61 74 69 6f | Operation-mode.Firewall.Operatio |
5b400 | 6e 61 6c 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 4d 6f 64 65 20 43 6f | nal.Commands.Operational.Mode.Co |
5b420 | 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 00 4f 70 74 69 | mmands.Operational.commands.Opti |
5b440 | 6f 6e 00 4f 70 74 69 6f 6e 20 34 33 20 66 6f 72 20 55 6e 69 46 49 00 4f 70 74 69 6f 6e 20 64 65 | on.Option.43.for.UniFI.Option.de |
5b460 | 73 63 72 69 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 6e 75 6d 62 65 72 00 4f 70 74 69 6f 6e 20 73 | scription.Option.number.Option.s |
5b480 | 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 72 61 74 65 20 69 6e 20 77 68 69 63 68 20 77 65 27 6c | pecifying.the.rate.in.which.we'l |
5b4a0 | 6c 20 61 73 6b 20 6f 75 72 20 6c 69 6e 6b 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d | l.ask.our.link.partner.to.transm |
5b4c0 | 69 74 20 4c 41 43 50 44 55 20 70 61 63 6b 65 74 73 20 69 6e 20 38 30 32 2e 33 61 64 20 6d 6f 64 | it.LACPDU.packets.in.802.3ad.mod |
5b4e0 | 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 64 69 73 61 62 6c 65 20 72 75 6c 65 2e 00 4f 70 74 69 6f | e..Option.to.disable.rule..Optio |
5b500 | 6e 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 20 6d 61 74 63 68 | n.to.enable.or.disable.log.match |
5b520 | 69 6e 67 20 72 75 6c 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 6c 6f 67 20 70 61 63 6b 65 74 73 20 | ing.rule..Option.to.log.packets. |
5b540 | 68 69 74 74 69 6e 67 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2e 00 4f 70 74 69 6f 6e 61 6c | hitting.default-action..Optional |
5b560 | 00 4f 70 74 69 6f 6e 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 74 69 6f 6e 61 6c | .Optional.Configuration.Optional |
5b580 | 20 70 61 72 61 6d 65 74 65 72 20 70 72 65 66 69 78 2d 6c 69 73 74 20 63 61 6e 20 62 65 20 75 73 | .parameter.prefix-list.can.be.us |
5b5a0 | 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 69 63 68 20 67 72 6f 75 70 73 20 74 6f 20 73 77 69 | e.to.control.which.groups.to.swi |
5b5c0 | 74 63 68 20 6f 72 20 6e 6f 74 20 73 77 69 74 63 68 2e 20 49 66 20 61 20 67 72 6f 75 70 20 69 73 | tch.or.not.switch..If.a.group.is |
5b5e0 | 20 50 45 52 4d 49 54 20 61 73 20 70 65 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 | .PERMIT.as.per.the.prefix-list,. |
5b600 | 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 6f 76 65 72 20 64 6f 65 73 20 6e 6f 74 | then.the.SPT.switchover.does.not |
5b620 | 20 68 61 70 70 65 6e 20 66 6f 72 20 69 74 20 61 6e 64 20 69 66 20 69 74 20 69 73 20 44 45 4e 59 | .happen.for.it.and.if.it.is.DENY |
5b640 | 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 73 77 69 74 63 68 6f 76 65 72 20 68 61 70 70 65 6e | ,.then.the.SPT.switchover.happen |
5b660 | 73 2e 00 4f 70 74 69 6f 6e 61 6c 2c 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 65 6e 61 62 | s..Optional,.if.you.want.to.enab |
5b680 | 6c 65 20 75 70 6c 6f 61 64 73 2c 20 65 6c 73 65 20 54 46 54 50 20 73 65 72 76 65 72 20 77 69 6c | le.uploads,.else.TFTP.server.wil |
5b6a0 | 6c 20 61 63 74 20 61 73 20 61 20 72 65 61 64 2d 6f 6e 6c 79 20 73 65 72 76 65 72 2e 00 4f 70 74 | l.act.as.a.read-only.server..Opt |
5b6c0 | 69 6f 6e 61 6c 2f 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 00 4f 70 74 69 6f 6e 61 6c 6c | ional/default.settings.Optionall |
5b6e0 | 79 20 73 65 74 20 61 20 73 70 65 63 69 66 69 63 20 73 74 61 74 69 63 20 49 50 76 34 20 6f 72 20 | y.set.a.specific.static.IPv4.or. |
5b700 | 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 20 | IPv6.address.for.the.container.. |
5b720 | 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 74 68 65 20 | This.address.must.be.within.the. |
5b740 | 6e 61 6d 65 64 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 2e 00 4f 70 74 69 6f 6e 73 00 4f 70 | named.network.prefix..Options.Op |
5b760 | 74 69 6f 6e 73 20 28 47 6c 6f 62 61 6c 20 49 50 73 65 63 20 73 65 74 74 69 6e 67 73 29 20 41 74 | tions.(Global.IPsec.settings).At |
5b780 | 74 72 69 62 75 74 65 73 00 4f 70 74 69 6f 6e 73 20 75 73 65 64 20 66 6f 72 20 71 75 65 75 65 20 | tributes.Options.used.for.queue. |
5b7a0 | 74 61 72 67 65 74 2e 20 41 63 74 69 6f 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 | target..Action.queue.must.be.def |
5b7c0 | 69 6e 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 00 4f 72 20 2a 2a 62 69 | ined.to.use.this.setting.Or.**bi |
5b7e0 | 6e 61 72 79 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 4f 72 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 | nary**.prefixes..Or,.for.example |
5b800 | 20 66 74 70 2c 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d | .ftp,.`delete.system.conntrack.m |
5b820 | 6f 64 75 6c 65 73 20 66 74 70 60 2e 00 4f 72 64 65 72 20 63 6f 6e 6e 74 72 61 63 6b 64 20 74 6f | odules.ftp`..Order.conntrackd.to |
5b840 | 20 72 65 71 75 65 73 74 20 61 20 63 6f 6d 70 6c 65 74 65 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 | .request.a.complete.conntrack.ta |
5b860 | 62 6c 65 20 72 65 73 79 6e 63 20 61 67 61 69 6e 73 74 20 74 68 65 20 6f 74 68 65 72 20 6e 6f 64 | ble.resync.against.the.other.nod |
5b880 | 65 20 61 74 20 73 74 61 72 74 75 70 2e 00 4f 72 69 67 69 6e 61 74 65 20 61 6e 20 41 53 2d 45 78 | e.at.startup..Originate.an.AS-Ex |
5b8a0 | 74 65 72 6e 61 6c 20 28 74 79 70 65 2d 35 29 20 4c 53 41 20 64 65 73 63 72 69 62 69 6e 67 20 61 | ternal.(type-5).LSA.describing.a |
5b8c0 | 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c | .default.route.into.all.external |
5b8e0 | 2d 72 6f 75 74 69 6e 67 20 63 61 70 61 62 6c 65 20 61 72 65 61 73 2c 20 6f 66 20 74 68 65 20 73 | -routing.capable.areas,.of.the.s |
5b900 | 70 65 63 69 66 69 65 64 20 6d 65 74 72 69 63 20 61 6e 64 20 6d 65 74 72 69 63 20 74 79 70 65 2e | pecified.metric.and.metric.type. |
5b920 | 20 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 6c 77 61 79 73 60 20 6b 65 79 77 6f 72 64 | .If.the.:cfgcmd:`always`.keyword |
5b940 | 20 69 73 20 67 69 76 65 6e 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 61 6c | .is.given.then.the.default.is.al |
5b960 | 77 61 79 73 20 61 64 76 65 72 74 69 73 65 64 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 68 65 72 65 | ways.advertised,.even.when.there |
5b980 | 20 69 73 20 6e 6f 20 64 65 66 61 75 6c 74 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 72 6f | .is.no.default.present.in.the.ro |
5b9a0 | 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d | uting.table..The.argument.:cfgcm |
5b9c0 | 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 73 70 65 63 69 66 69 65 73 20 74 6f 20 61 64 76 65 72 | d:`route-map`.specifies.to.adver |
5b9e0 | 74 69 73 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 66 20 74 68 65 20 72 6f | tise.the.default.route.if.the.ro |
5ba00 | 75 74 65 20 6d 61 70 20 69 73 20 73 61 74 69 73 66 69 65 64 2e 00 4f 74 68 65 72 20 61 74 74 72 | ute.map.is.satisfied..Other.attr |
5ba20 | 69 62 75 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 2c 20 62 75 74 20 74 68 65 79 20 68 61 76 | ibutes.can.be.used,.but.they.hav |
5ba40 | 65 20 74 6f 20 62 65 20 69 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 64 69 63 74 69 6f 6e 61 72 69 | e.to.be.in.one.of.the.dictionari |
5ba60 | 65 73 20 69 6e 20 2a 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 | es.in.*/usr/share/accel-ppp/radi |
5ba80 | 75 73 2a 2e 00 4f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 | us*..Our.configuration.commands. |
5baa0 | 77 6f 75 6c 64 20 62 65 3a 00 4f 75 72 20 72 65 6d 6f 74 65 20 65 6e 64 20 6f 66 20 74 68 65 20 | would.be:.Our.remote.end.of.the. |
5bac0 | 74 75 6e 6e 65 6c 20 66 6f 72 20 70 65 65 72 20 60 74 6f 2d 77 67 30 32 60 20 69 73 20 72 65 61 | tunnel.for.peer.`to-wg02`.is.rea |
5bae0 | 63 68 61 62 6c 65 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 20 70 6f 72 74 20 35 31 38 32 30 00 4f | chable.at.192.0.2.1.port.51820.O |
5bb00 | 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 62 61 6c 61 6e 63 65 64 20 | utbound.traffic.can.be.balanced. |
5bb20 | 62 65 74 77 65 65 6e 20 74 77 6f 20 6f 72 20 6d 6f 72 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 | between.two.or.more.outbound.int |
5bb40 | 65 72 66 61 63 65 73 2e 20 49 66 20 61 20 70 61 74 68 20 66 61 69 6c 73 2c 20 74 72 61 66 66 69 | erfaces..If.a.path.fails,.traffi |
5bb60 | 63 20 69 73 20 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 69 6e 69 | c.is.balanced.across.the.remaini |
5bb80 | 6e 67 20 68 65 61 6c 74 68 79 20 70 61 74 68 73 2c 20 61 20 72 65 63 6f 76 65 72 65 64 20 70 61 | ng.healthy.paths,.a.recovered.pa |
5bba0 | 74 68 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 65 64 20 62 61 63 6b 20 74 | th.is.automatically.added.back.t |
5bbc0 | 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 75 73 65 64 20 62 79 20 | o.the.routing.table.and.used.by. |
5bbe0 | 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 2e 20 54 68 65 20 6c 6f 61 64 20 62 61 6c 61 | the.load.balancer..The.load.bala |
5bc00 | 6e 63 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 73 20 72 6f 75 74 65 73 20 66 | ncer.automatically.adds.routes.f |
5bc20 | 6f 72 20 65 61 63 68 20 70 61 74 68 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | or.each.path.to.the.routing.tabl |
5bc40 | 65 20 61 6e 64 20 62 61 6c 61 6e 63 65 73 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 68 | e.and.balances.traffic.across.th |
5bc60 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 64 65 74 65 72 6d 69 | e.configured.interfaces,.determi |
5bc80 | 6e 65 64 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 68 65 61 6c 74 68 20 61 6e 64 20 77 65 69 67 | ned.by.interface.health.and.weig |
5bca0 | 68 74 2e 00 4f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 | ht..Outgoing.traffic.is.balanced |
5bcc0 | 20 69 6e 20 61 20 66 6c 6f 77 2d 62 61 73 65 64 20 6d 61 6e 6e 65 72 2e 20 41 20 63 6f 6e 6e 65 | .in.a.flow-based.manner..A.conne |
5bce0 | 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 69 73 20 75 73 65 64 20 74 6f 20 | ction.tracking.table.is.used.to. |
5bd00 | 74 72 61 63 6b 20 66 6c 6f 77 73 20 62 79 20 74 68 65 69 72 20 73 6f 75 72 63 65 20 61 64 64 72 | track.flows.by.their.source.addr |
5bd20 | 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 | ess,.destination.address.and.por |
5bd40 | 74 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 | t..Each.flow.is.assigned.to.an.i |
5bd60 | 6e 74 65 72 66 61 63 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 64 65 66 69 6e 65 | nterface.according.to.the.define |
5bd80 | 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 73 20 61 6e 64 20 73 75 62 73 65 71 75 65 6e 74 | d.balancing.rules.and.subsequent |
5bda0 | 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 61 | .packets.are.sent.through.the.sa |
5bdc0 | 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 68 61 73 20 74 68 65 20 61 64 76 61 6e | me.interface..This.has.the.advan |
5bde0 | 74 61 67 65 20 74 68 61 74 20 70 61 63 6b 65 74 73 20 61 6c 77 61 79 73 20 61 72 72 69 76 65 20 | tage.that.packets.always.arrive. |
5be00 | 69 6e 20 6f 72 64 65 72 20 69 66 20 6c 69 6e 6b 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 | in.order.if.links.with.different |
5be20 | 20 73 70 65 65 64 73 20 61 72 65 20 69 6e 20 75 73 65 2e 00 4f 75 74 70 75 74 20 66 72 6f 6d 20 | .speeds.are.in.use..Output.from. |
5be40 | 60 65 74 68 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 00 4f 75 74 70 75 74 20 | `eth0`.network.interface.Output. |
5be60 | 70 6c 75 67 69 6e 20 50 72 6f 6d 65 74 68 65 75 73 20 63 6c 69 65 6e 74 00 4f 76 65 72 20 49 50 | plugin.Prometheus.client.Over.IP |
5be80 | 00 4f 76 65 72 20 49 50 53 65 63 2c 20 4c 32 20 56 50 4e 20 28 62 72 69 64 67 65 29 00 4f 76 65 | .Over.IPSec,.L2.VPN.(bridge).Ove |
5bea0 | 72 20 55 44 50 00 4f 76 65 72 72 69 64 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 27 73 20 | r.UDP.Override.static-mapping's. |
5bec0 | 6e 61 6d 65 2d 73 65 72 76 65 72 20 77 69 74 68 20 61 20 63 75 73 74 6f 6d 20 6f 6e 65 20 74 68 | name-server.with.a.custom.one.th |
5bee0 | 61 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 6f 6e 6c 79 20 74 6f 20 74 68 69 73 20 68 6f 73 | at.will.be.sent.only.to.this.hos |
5bf00 | 74 2e 00 4f 76 65 72 76 69 65 77 00 4f 76 65 72 76 69 65 77 20 61 6e 64 20 62 61 73 69 63 20 63 | t..Overview.Overview.and.basic.c |
5bf20 | 6f 6e 63 65 70 74 73 00 4f 76 65 72 76 69 65 77 20 6f 66 20 64 65 66 69 6e 65 64 20 67 72 6f 75 | oncepts.Overview.of.defined.grou |
5bf40 | 70 73 2e 20 59 6f 75 20 73 65 65 20 74 68 65 20 74 79 70 65 2c 20 74 68 65 20 6d 65 6d 62 65 72 | ps..You.see.the.type,.the.member |
5bf60 | 73 2c 20 61 6e 64 20 77 68 65 72 65 20 74 68 65 20 67 72 6f 75 70 20 69 73 20 75 73 65 64 2e 00 | s,.and.where.the.group.is.used.. |
5bf80 | 50 42 52 20 6d 75 6c 74 69 70 6c 65 20 75 70 6c 69 6e 6b 73 00 50 43 31 20 69 73 20 69 6e 20 74 | PBR.multiple.uplinks.PC1.is.in.t |
5bfa0 | 68 65 20 60 60 64 65 66 61 75 6c 74 60 60 20 56 52 46 20 61 6e 64 20 61 63 74 69 6e 67 20 61 73 | he.``default``.VRF.and.acting.as |
5bfc0 | 20 65 2e 67 2e 20 61 20 22 66 69 6c 65 73 65 72 76 65 72 22 00 50 43 32 20 69 73 20 69 6e 20 56 | .e.g..a."fileserver".PC2.is.in.V |
5bfe0 | 52 46 20 60 60 62 6c 75 65 60 60 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 76 65 6c 6f 70 | RF.``blue``.which.is.the.develop |
5c000 | 6d 65 6e 74 20 64 65 70 61 72 74 6d 65 6e 74 00 50 43 33 20 61 6e 64 20 50 43 34 20 61 72 65 20 | ment.department.PC3.and.PC4.are. |
5c020 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 62 72 69 64 67 65 20 64 65 76 69 63 65 20 6f 6e 20 | connected.to.a.bridge.device.on. |
5c040 | 72 6f 75 74 65 72 20 60 60 52 31 60 60 20 77 68 69 63 68 20 69 73 20 69 6e 20 56 52 46 20 60 60 | router.``R1``.which.is.in.VRF.`` |
5c060 | 72 65 64 60 60 2e 20 53 61 79 20 74 68 69 73 20 69 73 20 74 68 65 20 48 52 20 64 65 70 61 72 74 | red``..Say.this.is.the.HR.depart |
5c080 | 6d 65 6e 74 2e 00 50 43 34 20 68 61 73 20 49 50 20 31 30 2e 30 2e 30 2e 34 2f 32 34 20 61 6e 64 | ment..PC4.has.IP.10.0.0.4/24.and |
5c0a0 | 20 50 43 35 20 68 61 73 20 49 50 20 31 30 2e 30 2e 30 2e 35 2f 32 34 2c 20 73 6f 20 74 68 65 79 | .PC5.has.IP.10.0.0.5/24,.so.they |
5c0c0 | 20 62 65 6c 69 65 76 65 20 74 68 65 79 20 61 72 65 20 69 6e 20 74 68 65 20 73 61 6d 65 20 62 72 | .believe.they.are.in.the.same.br |
5c0e0 | 6f 61 64 63 61 73 74 20 64 6f 6d 61 69 6e 2e 00 50 43 35 20 72 65 63 65 69 76 65 73 20 74 68 65 | oadcast.domain..PC5.receives.the |
5c100 | 20 70 69 6e 67 20 65 63 68 6f 2c 20 72 65 73 70 6f 6e 64 73 20 77 69 74 68 20 61 6e 20 65 63 68 | .ping.echo,.responds.with.an.ech |
5c120 | 6f 20 72 65 70 6c 79 20 74 68 61 74 20 4c 65 61 66 33 20 72 65 63 65 69 76 65 73 20 61 6e 64 20 | o.reply.that.Leaf3.receives.and. |
5c140 | 74 68 69 73 20 74 69 6d 65 20 66 6f 72 77 61 72 64 73 20 74 6f 20 4c 65 61 66 32 27 73 20 75 6e | this.time.forwards.to.Leaf2's.un |
5c160 | 69 63 61 73 74 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 62 65 63 61 75 73 65 20 69 | icast.address.directly.because.i |
5c180 | 74 20 6c 65 61 72 6e 65 64 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 50 43 34 20 61 62 | t.learned.the.location.of.PC4.ab |
5c1a0 | 6f 76 65 2e 20 57 68 65 6e 20 4c 65 61 66 32 20 72 65 63 65 69 76 65 73 20 74 68 65 20 65 63 68 | ove..When.Leaf2.receives.the.ech |
5c1c0 | 6f 20 72 65 70 6c 79 20 66 72 6f 6d 20 50 43 35 20 69 74 20 73 65 65 73 20 74 68 61 74 20 69 74 | o.reply.from.PC5.it.sees.that.it |
5c1e0 | 20 63 61 6d 65 20 66 72 6f 6d 20 4c 65 61 66 33 20 61 6e 64 20 73 6f 20 72 65 6d 65 6d 62 65 72 | .came.from.Leaf3.and.so.remember |
5c200 | 73 20 74 68 61 74 20 50 43 35 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 4c 65 61 66 | s.that.PC5.is.reachable.via.Leaf |
5c220 | 33 2e 00 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c | 3..PIM.(Protocol.Independent.Mul |
5c240 | 74 69 63 61 73 74 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 | ticast).must.be.configured.in.ev |
5c260 | 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 | ery.interface.of.every.participa |
5c280 | 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 | ting.router..Every.router.must.a |
5c2a0 | 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e | lso.have.the.location.of.the.Ren |
5c2c0 | 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 | devouz.Point.manually.configured |
5c2e0 | 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 | ..Then,.unidirectional.shared.tr |
5c300 | 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e | ees.rooted.at.the.Rendevouz.Poin |
5c320 | 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f | t.will.automatically.be.built.fo |
5c340 | 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 49 4d 20 61 6e | r.multicast.distribution..PIM.an |
5c360 | 64 20 49 47 4d 50 00 50 49 4d 20 e2 80 93 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 | d.IGMP.PIM.....Protocol.Independ |
5c380 | 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 00 50 49 4d 2d 53 4d 20 2d 20 50 49 4d 20 53 70 61 72 73 | ent.Multicast.PIM-SM.-.PIM.Spars |
5c3a0 | 65 20 4d 6f 64 65 00 50 49 4d 36 20 2d 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 | e.Mode.PIM6.-.Protocol.Independe |
5c3c0 | 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 49 50 76 36 00 50 49 4d 76 36 20 28 50 72 6f | nt.Multicast.for.IPv6.PIMv6.(Pro |
5c3e0 | 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 | tocol.Independent.Multicast.for. |
5c400 | 49 50 76 36 29 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 | IPv6).must.be.configured.in.ever |
5c420 | 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 | y.interface.of.every.participati |
5c440 | 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 | ng.router..Every.router.must.als |
5c460 | 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 | o.have.the.location.of.the.Rende |
5c480 | 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 | vouz.Point.manually.configured.. |
5c4a0 | 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 | Then,.unidirectional.shared.tree |
5c4c0 | 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 | s.rooted.at.the.Rendevouz.Point. |
5c4e0 | 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 | will.automatically.be.built.for. |
5c500 | 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 4b 49 00 50 50 44 55 | multicast.distribution..PKI.PPDU |
5c520 | 00 50 50 50 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 50 50 50 20 53 65 74 74 69 6e | .PPP.Advanced.Options.PPP.Settin |
5c540 | 67 73 00 50 50 50 6f 45 00 50 50 50 6f 45 20 53 65 72 76 65 72 00 50 50 50 6f 45 20 6f 70 74 69 | gs.PPPoE.PPPoE.Server.PPPoE.opti |
5c560 | 6f 6e 73 00 50 50 54 50 2d 53 65 72 76 65 72 00 50 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c | ons.PPTP-Server.Packet-based.bal |
5c580 | 61 6e 63 69 6e 67 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 62 65 74 74 65 72 20 62 61 6c 61 | ancing.can.lead.to.a.better.bala |
5c5a0 | 6e 63 65 20 61 63 72 6f 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 65 6e 20 6f 75 74 20 6f | nce.across.interfaces.when.out.o |
5c5c0 | 66 20 6f 72 64 65 72 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 20 69 73 73 75 65 2e 20 50 65 | f.order.packets.are.no.issue..Pe |
5c5e0 | 72 2d 70 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 62 65 20 | r-packet-based.balancing.can.be. |
5c600 | 73 65 74 20 66 6f 72 20 61 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 20 77 69 74 68 3a 00 50 | set.for.a.balancing.rule.with:.P |
5c620 | 61 72 74 69 63 75 6c 61 72 6c 79 20 6c 61 72 67 65 20 6e 65 74 77 6f 72 6b 73 20 6d 61 79 20 77 | articularly.large.networks.may.w |
5c640 | 69 73 68 20 74 6f 20 72 75 6e 20 74 68 65 69 72 20 6f 77 6e 20 52 50 4b 49 20 63 65 72 74 69 66 | ish.to.run.their.own.RPKI.certif |
5c660 | 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 61 6e 64 20 70 75 62 6c 69 63 61 74 69 6f 6e 20 | icate.authority.and.publication. |
5c680 | 73 65 72 76 65 72 20 69 6e 73 74 65 61 64 20 6f 66 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 | server.instead.of.publishing.ROA |
5c6a0 | 73 20 76 69 61 20 74 68 65 69 72 20 52 49 52 2e 20 54 68 69 73 20 69 73 20 61 20 73 75 62 6a 65 | s.via.their.RIR..This.is.a.subje |
5c6c0 | 63 74 20 66 61 72 20 62 65 79 6f 6e 64 20 74 68 65 20 73 63 6f 70 65 20 6f 66 20 56 79 4f 53 27 | ct.far.beyond.the.scope.of.VyOS' |
5c6e0 | 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 72 65 61 64 69 6e 67 | .documentation..Consider.reading |
5c700 | 20 61 62 6f 75 74 20 4b 72 69 6c 6c 5f 20 69 66 20 74 68 69 73 20 69 73 20 61 20 72 61 62 62 69 | .about.Krill_.if.this.is.a.rabbi |
5c720 | 74 20 68 6f 6c 65 20 79 6f 75 20 6e 65 65 64 20 6f 72 20 65 73 70 65 63 69 61 6c 6c 79 20 77 61 | t.hole.you.need.or.especially.wa |
5c740 | 6e 74 20 74 6f 20 64 69 76 65 20 64 6f 77 6e 2e 00 50 61 73 73 20 61 64 64 72 65 73 73 20 6f 66 | nt.to.dive.down..Pass.address.of |
5c760 | 20 55 6e 69 66 69 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 61 74 20 60 60 31 37 32 2e 31 36 2e 31 30 | .Unifi.controller.at.``172.16.10 |
5c780 | 30 2e 31 60 60 20 74 6f 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 6f 66 20 60 60 4e 45 54 31 60 60 | 0.1``.to.all.clients.of.``NET1`` |
5c7a0 | 00 50 61 74 68 20 60 3c 63 6f 73 74 3e 60 20 76 61 6c 75 65 20 66 6f 72 20 53 70 61 6e 6e 69 6e | .Path.`<cost>`.value.for.Spannin |
5c7c0 | 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 | g.Tree.Protocol..Each.interface. |
5c7e0 | 69 6e 20 61 20 62 72 69 64 67 65 20 63 6f 75 6c 64 20 68 61 76 65 20 61 20 64 69 66 66 65 72 65 | in.a.bridge.could.have.a.differe |
5c800 | 6e 74 20 73 70 65 65 64 20 61 6e 64 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 | nt.speed.and.this.value.is.used. |
5c820 | 77 68 65 6e 20 64 65 63 69 64 69 6e 67 20 77 68 69 63 68 20 6c 69 6e 6b 20 74 6f 20 75 73 65 2e | when.deciding.which.link.to.use. |
5c840 | 20 46 61 73 74 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 73 68 6f 75 6c 64 20 68 61 76 65 20 6c | .Faster.interfaces.should.have.l |
5c860 | 6f 77 65 72 20 63 6f 73 74 73 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 6f 69 | ower.costs..Path.to.`<file>`.poi |
5c880 | 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 | nting.to.the.certificate.authori |
5c8a0 | 74 79 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 | ty.certificate..Path.to.`<file>` |
5c8c0 | 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 73 20 63 65 72 74 69 66 69 | .pointing.to.the.servers.certifi |
5c8e0 | 63 61 74 65 20 28 70 75 62 6c 69 63 20 70 6f 72 74 69 6f 6e 29 2e 00 50 65 65 72 20 2d 20 50 65 | cate.(public.portion)..Peer.-.Pe |
5c900 | 65 72 00 50 65 65 72 20 47 72 6f 75 70 73 00 50 65 65 72 20 49 50 20 61 64 64 72 65 73 73 20 74 | er.Peer.Groups.Peer.IP.address.t |
5c920 | 6f 20 6d 61 74 63 68 2e 00 50 65 65 72 20 50 61 72 61 6d 65 74 65 72 73 00 50 65 65 72 20 67 72 | o.match..Peer.Parameters.Peer.gr |
5c940 | 6f 75 70 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 68 65 6c 70 20 69 6d 70 72 6f 76 65 20 73 63 | oups.are.used.to.help.improve.sc |
5c960 | 61 6c 69 6e 67 20 62 79 20 67 65 6e 65 72 61 74 69 6e 67 20 74 68 65 20 73 61 6d 65 20 75 70 64 | aling.by.generating.the.same.upd |
5c980 | 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 6c 6c 20 6d 65 6d 62 65 72 73 20 6f | ate.information.to.all.members.o |
5c9a0 | 66 20 61 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 6d | f.a.peer.group..Note.that.this.m |
5c9c0 | 65 61 6e 73 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 73 20 67 65 6e 65 72 61 74 65 64 20 62 | eans.that.the.routes.generated.b |
5c9e0 | 79 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 6c 6c 20 | y.a.member.of.a.peer.group.will. |
5ca00 | 62 65 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 | be.sent.back.to.that.originating |
5ca20 | 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 | .peer.with.the.originator.identi |
5ca40 | 66 69 65 72 20 61 74 74 72 69 62 75 74 65 20 73 65 74 20 74 6f 20 69 6e 64 69 63 61 74 65 64 20 | fier.attribute.set.to.indicated. |
5ca60 | 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 70 65 65 72 2e 20 41 6c 6c 20 70 65 65 72 73 20 | the.originating.peer..All.peers. |
5ca80 | 6e 6f 74 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 73 70 65 63 69 66 69 63 20 70 | not.associated.with.a.specific.p |
5caa0 | 65 65 72 20 67 72 6f 75 70 20 61 72 65 20 74 72 65 61 74 65 64 20 61 73 20 62 65 6c 6f 6e 67 69 | eer.group.are.treated.as.belongi |
5cac0 | 6e 67 20 74 6f 20 61 20 64 65 66 61 75 6c 74 20 70 65 65 72 20 67 72 6f 75 70 2c 20 61 6e 64 20 | ng.to.a.default.peer.group,.and. |
5cae0 | 77 69 6c 6c 20 73 68 61 72 65 20 75 70 64 61 74 65 73 2e 00 50 65 65 72 20 74 6f 20 73 65 6e 64 | will.share.updates..Peer.to.send |
5cb00 | 20 75 6e 69 63 61 73 74 20 55 44 50 20 63 6f 6e 6e 74 72 61 63 6b 20 73 79 6e 63 20 65 6e 74 69 | .unicast.UDP.conntrack.sync.enti |
5cb20 | 72 65 73 20 74 6f 2c 20 69 66 20 6e 6f 74 20 75 73 69 6e 67 20 4d 75 6c 74 69 63 61 73 74 20 63 | res.to,.if.not.using.Multicast.c |
5cb40 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 61 62 6f 76 65 20 61 62 6f 76 65 2e 00 50 | onfiguration.from.above.above..P |
5cb60 | 65 65 72 73 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 65 72 20 64 65 66 61 75 6c 74 20 56 | eers.Configuration.Per.default.V |
5cb80 | 79 4f 53 73 20 68 61 73 20 6d 69 6e 69 6d 61 6c 20 73 79 73 6c 6f 67 20 6c 6f 67 67 69 6e 67 20 | yOSs.has.minimal.syslog.logging. |
5cba0 | 65 6e 61 62 6c 65 64 20 77 68 69 63 68 20 69 73 20 73 74 6f 72 65 64 20 61 6e 64 20 72 6f 74 61 | enabled.which.is.stored.and.rota |
5cbc0 | 74 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 45 72 72 6f 72 73 20 77 69 6c 6c 20 62 65 20 61 6c 77 61 | ted.locally..Errors.will.be.alwa |
5cbe0 | 79 73 20 6c 6f 67 67 65 64 20 74 6f 20 61 20 6c 6f 63 61 6c 20 66 69 6c 65 2c 20 77 68 69 63 68 | ys.logged.to.a.local.file,.which |
5cc00 | 20 69 6e 63 6c 75 64 65 73 20 60 6c 6f 63 61 6c 37 60 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 | .includes.`local7`.error.message |
5cc20 | 73 2c 20 65 6d 65 72 67 65 6e 63 79 20 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 62 65 20 73 65 | s,.emergency.messages.will.be.se |
5cc40 | 6e 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2c 20 74 6f 6f 2e 00 50 65 72 20 64 65 66 61 | nt.to.the.console,.too..Per.defa |
5cc60 | 75 6c 74 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 73 61 6d 70 6c 65 64 20 28 74 68 61 | ult.every.packet.is.sampled.(tha |
5cc80 | 74 20 69 73 2c 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 69 73 20 31 29 2e 00 50 | t.is,.the.sampling.rate.is.1)..P |
5cca0 | 65 72 20 64 65 66 61 75 6c 74 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 62 | er.default.the.user.session.is.b |
5ccc0 | 65 69 6e 67 20 72 65 70 6c 61 63 65 64 20 69 66 20 61 20 73 65 63 6f 6e 64 20 61 75 74 68 65 6e | eing.replaced.if.a.second.authen |
5cce0 | 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 73 75 63 63 65 65 64 73 2e 20 53 75 63 68 20 | tication.request.succeeds..Such. |
5cd00 | 73 65 73 73 69 6f 6e 20 72 65 71 75 65 73 74 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 64 | session.requests.can.be.either.d |
5cd20 | 65 6e 69 65 64 20 6f 72 20 61 6c 6c 6f 77 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 77 68 69 63 68 | enied.or.allowed.entirely,.which |
5cd40 | 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 20 73 65 73 73 69 6f 6e 73 20 66 | .would.allow.multiple.sessions.f |
5cd60 | 6f 72 20 61 20 75 73 65 72 20 69 6e 20 74 68 65 20 6c 61 74 74 65 72 20 63 61 73 65 2e 20 49 66 | or.a.user.in.the.latter.case..If |
5cd80 | 20 69 74 20 69 73 20 64 65 6e 69 65 64 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f | .it.is.denied,.the.second.sessio |
5cda0 | 6e 20 69 73 20 62 65 69 6e 67 20 72 65 6a 65 63 74 65 64 20 65 76 65 6e 20 69 66 20 74 68 65 20 | n.is.being.rejected.even.if.the. |
5cdc0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 75 63 63 65 65 64 73 2c 20 74 68 65 20 75 73 65 | authentication.succeeds,.the.use |
5cde0 | 72 20 68 61 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 69 74 73 20 66 69 72 73 74 20 73 65 73 | r.has.to.terminate.its.first.ses |
5ce00 | 73 69 6f 6e 20 61 6e 64 20 63 61 6e 20 74 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | sion.and.can.then.authentication |
5ce20 | 20 61 67 61 69 6e 2e 00 50 65 72 20 64 65 66 61 75 6c 74 2c 20 69 6e 74 65 72 66 61 63 65 73 20 | .again..Per.default,.interfaces. |
5ce40 | 75 73 65 64 20 69 6e 20 61 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 70 6f 6f 6c 20 72 65 | used.in.a.load.balancing.pool.re |
5ce60 | 70 6c 61 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 6f 66 20 65 61 63 68 20 6f 75 74 67 | place.the.source.IP.of.each.outg |
5ce80 | 6f 69 6e 67 20 70 61 63 6b 65 74 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 | oing.packet.with.its.own.address |
5cea0 | 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 65 70 6c 69 65 73 20 61 72 72 69 76 65 20 6f | .to.ensure.that.replies.arrive.o |
5cec0 | 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 77 6f 72 6b 73 | n.the.same.interface..This.works |
5cee0 | 20 74 68 72 6f 75 67 68 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 | .through.automatically.generated |
5cf00 | 20 73 6f 75 72 63 65 20 4e 41 54 20 28 53 4e 41 54 29 20 72 75 6c 65 73 2c 20 74 68 65 73 65 20 | .source.NAT.(SNAT).rules,.these. |
5cf20 | 72 75 6c 65 73 20 61 72 65 20 6f 6e 6c 79 20 61 70 70 6c 69 65 64 20 74 6f 20 62 61 6c 61 6e 63 | rules.are.only.applied.to.balanc |
5cf40 | 65 64 20 74 72 61 66 66 69 63 2e 20 49 6e 20 63 61 73 65 73 20 77 68 65 72 65 20 74 68 69 73 20 | ed.traffic..In.cases.where.this. |
5cf60 | 62 65 68 61 76 69 6f 75 72 20 69 73 20 6e 6f 74 20 64 65 73 69 72 65 64 2c 20 74 68 65 20 61 75 | behaviour.is.not.desired,.the.au |
5cf80 | 74 6f 6d 61 74 69 63 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 53 4e 41 54 20 72 75 6c 65 73 | tomatic.generation.of.SNAT.rules |
5cfa0 | 20 63 61 6e 20 62 65 20 64 69 73 61 62 6c 65 64 3a 00 50 65 72 66 6f 72 6d 20 4e 41 54 20 6c 6f | .can.be.disabled:.Perform.NAT.lo |
5cfc0 | 6f 6b 75 70 20 62 65 66 6f 72 65 20 61 70 70 6c 79 69 6e 67 20 66 6c 6f 77 2d 69 73 6f 6c 61 74 | okup.before.applying.flow-isolat |
5cfe0 | 69 6f 6e 20 72 75 6c 65 73 2e 00 50 65 72 66 6f 72 6d 61 6e 63 65 00 50 65 72 69 6f 64 69 63 61 | ion.rules..Performance.Periodica |
5d000 | 6c 6c 79 2c 20 61 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 20 69 73 20 73 65 6e 74 20 6f 75 74 20 | lly,.a.hello.packet.is.sent.out. |
5d020 | 62 79 20 74 68 65 20 52 6f 6f 74 20 42 72 69 64 67 65 20 61 6e 64 20 74 68 65 20 44 65 73 69 67 | by.the.Root.Bridge.and.the.Desig |
5d040 | 6e 61 74 65 64 20 42 72 69 64 67 65 73 2e 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 65 | nated.Bridges..Hello.packets.are |
5d060 | 20 75 73 65 64 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .used.to.communicate.information |
5d080 | 20 61 62 6f 75 74 20 74 68 65 20 74 6f 70 6f 6c 6f 67 79 20 74 68 72 6f 75 67 68 6f 75 74 20 74 | .about.the.topology.throughout.t |
5d0a0 | 68 65 20 65 6e 74 69 72 65 20 42 72 69 64 67 65 64 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e 65 74 | he.entire.Bridged.Local.Area.Net |
5d0c0 | 77 6f 72 6b 2e 00 50 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 69 6e 74 65 72 72 | work..Ping.command.can.be.interr |
5d0e0 | 75 70 74 65 64 20 61 74 20 61 6e 79 20 67 69 76 65 6e 20 74 69 6d 65 20 75 73 69 6e 67 20 60 60 | upted.at.any.given.time.using.`` |
5d100 | 3c 43 74 72 6c 3e 2b 63 60 60 2e 20 41 20 62 72 69 65 66 20 73 74 61 74 69 73 74 69 63 20 69 73 | <Ctrl>+c``..A.brief.statistic.is |
5d120 | 20 73 68 6f 77 6e 20 61 66 74 65 72 77 61 72 64 73 2e 00 50 69 6e 67 20 75 73 65 73 20 49 43 4d | .shown.afterwards..Ping.uses.ICM |
5d140 | 50 20 70 72 6f 74 6f 63 6f 6c 27 73 20 6d 61 6e 64 61 74 6f 72 79 20 45 43 48 4f 5f 52 45 51 55 | P.protocol's.mandatory.ECHO_REQU |
5d160 | 45 53 54 20 64 61 74 61 67 72 61 6d 20 74 6f 20 65 6c 69 63 69 74 20 61 6e 20 49 43 4d 50 20 45 | EST.datagram.to.elicit.an.ICMP.E |
5d180 | 43 48 4f 5f 52 45 53 50 4f 4e 53 45 20 66 72 6f 6d 20 61 20 68 6f 73 74 20 6f 72 20 67 61 74 65 | CHO_RESPONSE.from.a.host.or.gate |
5d1a0 | 77 61 79 2e 20 45 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 72 61 6d 73 20 28 70 69 6e | way..ECHO_REQUEST.datagrams.(pin |
5d1c0 | 67 73 29 20 77 69 6c 6c 20 68 61 76 65 20 61 6e 20 49 50 20 61 6e 64 20 49 43 4d 50 20 68 65 61 | gs).will.have.an.IP.and.ICMP.hea |
5d1e0 | 64 65 72 2c 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 22 73 74 72 75 63 74 20 74 69 6d 65 76 61 6c | der,.followed.by."struct.timeval |
5d200 | 22 20 61 6e 64 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 64 | ".and.an.arbitrary.number.of.pad |
5d220 | 20 62 79 74 65 73 20 75 73 65 64 20 74 6f 20 66 69 6c 6c 20 6f 75 74 20 74 68 65 20 70 61 63 6b | .bytes.used.to.fill.out.the.pack |
5d240 | 65 74 2e 00 50 69 6e 67 69 6e 67 20 28 49 50 76 36 29 20 74 68 65 20 6f 74 68 65 72 20 68 6f 73 | et..Pinging.(IPv6).the.other.hos |
5d260 | 74 20 61 6e 64 20 69 6e 74 65 72 63 65 70 74 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 | t.and.intercepting.the.traffic.i |
5d280 | 6e 20 60 60 65 74 68 31 60 60 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 63 6f 6e | n.``eth1``.will.show.you.the.con |
5d2a0 | 74 65 6e 74 20 69 73 20 65 6e 63 72 79 70 74 65 64 2e 00 50 6c 61 63 65 20 69 6e 74 65 72 66 61 | tent.is.encrypted..Place.interfa |
5d2c0 | 63 65 20 69 6e 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 50 6c 61 79 20 61 | ce.in.given.VRF.instance..Play.a |
5d2e0 | 6e 20 61 75 64 69 62 6c 65 20 62 65 65 70 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 20 73 70 65 | n.audible.beep.to.the.system.spe |
5d300 | 61 6b 65 72 20 77 68 65 6e 20 73 79 73 74 65 6d 20 69 73 20 72 65 61 64 79 2e 00 50 6c 65 61 73 | aker.when.system.is.ready..Pleas |
5d320 | 65 20 62 65 20 61 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 62 | e.be.aware,.due.to.an.upstream.b |
5d340 | 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c 20 | ug,.config.changes/commits.will. |
5d360 | 72 65 73 74 61 72 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 | restart.the.ppp.daemon.and.will. |
5d380 | 72 65 73 65 74 20 65 78 69 73 74 69 6e 67 20 49 50 6f 45 20 73 65 73 73 69 6f 6e 73 2c 20 69 6e | reset.existing.IPoE.sessions,.in |
5d3a0 | 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 6c 65 61 | .order.to.become.effective..Plea |
5d3c0 | 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 75 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 | se.be.aware,.due.to.an.upstream. |
5d3e0 | 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c | bug,.config.changes/commits.will |
5d400 | 20 72 65 73 74 61 72 74 20 74 68 65 20 70 70 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c | .restart.the.ppp.daemon.and.will |
5d420 | 20 72 65 73 65 74 20 65 78 69 73 74 69 6e 67 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e | .reset.existing.PPPoE.connection |
5d440 | 73 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 2c 20 69 6e 20 6f 72 64 65 72 | s.from.connected.users,.in.order |
5d460 | 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 6c 65 61 73 65 20 72 65 66 | .to.become.effective..Please.ref |
5d480 | 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 3a 60 69 70 73 65 63 60 20 64 6f 63 75 6d 65 6e 74 61 | er.to.the.:ref:`ipsec`.documenta |
5d4a0 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 49 50 53 65 63 20 72 65 | tion.for.the.individual.IPSec.re |
5d4c0 | 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 | lated.options..Please.refer.to.t |
5d4e0 | 68 65 20 3a 72 65 66 3a 60 74 75 6e 6e 65 6c 2d 69 6e 74 65 72 66 61 63 65 60 20 64 6f 63 75 6d | he.:ref:`tunnel-interface`.docum |
5d500 | 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 74 75 6e 6e | entation.for.the.individual.tunn |
5d520 | 65 6c 20 72 65 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 73 65 65 20 74 | el.related.options..Please.see.t |
5d540 | 68 65 20 3a 72 65 66 3a 60 64 68 63 70 2d 64 6e 73 2d 71 75 69 63 6b 2d 73 74 61 72 74 60 20 63 | he.:ref:`dhcp-dns-quick-start`.c |
5d560 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b | onfiguration..Please.take.a.look |
5d580 | 20 61 74 20 74 68 65 20 3a 72 65 66 3a 60 76 79 6f 73 61 70 69 60 20 70 61 67 65 20 66 6f 72 20 | .at.the.:ref:`vyosapi`.page.for. |
5d5a0 | 61 6e 20 64 65 74 61 69 6c 65 64 20 68 6f 77 2d 74 6f 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 | an.detailed.how-to..Please.take. |
5d5c0 | 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 47 75 69 64 65 | a.look.at.the.Contributing.Guide |
5d5e0 | 20 66 6f 72 20 6f 75 72 20 3a 72 65 66 3a 60 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 60 2e 00 50 | .for.our.:ref:`documentation`..P |
5d600 | 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 69 6e 20 74 68 65 20 41 75 74 6f 6d 61 74 | lease.take.a.look.in.the.Automat |
5d620 | 69 6f 6e 20 73 65 63 74 69 6f 6e 20 74 6f 20 66 69 6e 64 20 73 6f 6d 65 20 75 73 65 66 75 6c 6c | ion.section.to.find.some.usefull |
5d640 | 20 45 78 61 6d 70 6c 65 73 2e 00 50 6c 65 61 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 | .Examples..Please,.refer.to.appr |
5d660 | 6f 70 69 61 74 65 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 | opiate.section.for.more.informat |
5d680 | 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ion.about.firewall.configuration |
5d6a0 | 3a 00 50 6c 65 61 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 6f 70 72 69 61 74 65 20 73 | :.Please,.refer.to.appropriate.s |
5d6c0 | 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | ection.for.more.information.abou |
5d6e0 | 74 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 50 6f 6c 69 63 69 | t.firewall.configuration:.Polici |
5d700 | 65 73 20 61 72 65 20 75 73 65 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 74 72 | es.are.used.for.filtering.and.tr |
5d720 | 61 66 66 69 63 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 57 69 74 68 20 70 6f 6c 69 63 69 65 73 2c | affic.management..With.policies, |
5d740 | 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 20 63 6f 75 6c 64 20 66 69 | .network.administrators.could.fi |
5d760 | 6c 74 65 72 20 61 6e 64 20 74 72 65 61 74 20 74 72 61 66 66 69 63 20 61 63 63 6f 72 64 69 6e 67 | lter.and.treat.traffic.according |
5d780 | 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 73 2e 00 50 6f 6c 69 63 69 65 73 20 66 6f 72 20 6c 6f | .to.their.needs..Policies.for.lo |
5d7a0 | 63 61 6c 20 74 72 61 66 66 69 63 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 69 73 20 | cal.traffic.are.defined.in.this. |
5d7c0 | 73 65 63 74 69 6f 6e 2e 00 50 6f 6c 69 63 69 65 73 2c 20 69 6e 20 56 79 4f 53 2c 20 61 72 65 20 | section..Policies,.in.VyOS,.are. |
5d7e0 | 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 69 6e 67 20 46 52 52 20 66 69 6c 74 65 72 69 6e 67 20 | implemented.using.FRR.filtering. |
5d800 | 61 6e 64 20 72 6f 75 74 65 20 6d 61 70 73 2e 20 44 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 | and.route.maps..Detailed.informa |
5d820 | 74 69 6f 6e 20 6f 66 20 46 52 52 20 63 6f 75 6c 64 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 68 74 | tion.of.FRR.could.be.found.in.ht |
5d840 | 74 70 3a 2f 2f 64 6f 63 73 2e 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 00 50 6f 6c 69 63 79 00 | tp://docs.frrouting.org/.Policy. |
5d860 | 50 6f 6c 69 63 79 20 53 65 63 74 69 6f 6e 73 00 50 6f 6c 69 63 79 20 66 6f 72 20 63 68 65 63 6b | Policy.Sections.Policy.for.check |
5d880 | 69 6e 67 20 74 61 72 67 65 74 73 00 50 6f 6c 69 63 79 20 74 6f 20 74 72 61 63 6b 20 70 72 65 76 | ing.targets.Policy.to.track.prev |
5d8a0 | 69 6f 75 73 6c 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 | iously.established.connections.. |
5d8c0 | 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 77 69 74 68 20 6d 75 6c 74 69 70 | Policy-Based.Routing.with.multip |
5d8e0 | 6c 65 20 49 53 50 20 75 70 6c 69 6e 6b 73 20 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 6f | le.ISP.uplinks.(source../draw.io |
5d900 | 2f 70 62 72 5f 65 78 61 6d 70 6c 65 5f 31 2e 64 72 61 77 69 6f 29 00 50 6f 72 74 20 47 72 6f 75 | /pbr_example_1.drawio).Port.Grou |
5d920 | 70 73 00 50 6f 72 74 20 4d 69 72 72 6f 72 20 28 53 50 41 4e 29 00 50 6f 72 74 20 66 6f 72 20 44 | ps.Port.Mirror.(SPAN).Port.for.D |
5d940 | 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 | ynamic.Authorization.Extension.s |
5d960 | 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 50 6f 72 74 20 6e 61 6d 65 20 61 6e 64 20 64 65 73 | erver.(DM/CoA).Port.name.and.des |
5d980 | 63 72 69 70 74 69 6f 6e 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e | cription.Port.number.used.by.con |
5d9a0 | 6e 65 63 74 69 6f 6e 2c 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 39 32 37 33 60 60 00 50 6f 72 | nection,.default.is.``9273``.Por |
5d9c0 | 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 50 6f 72 | t.number.used.by.connection..Por |
5d9e0 | 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 3b 20 | t.to.listen.for.HTTPS.requests;. |
5da00 | 64 65 66 61 75 6c 74 20 34 34 33 00 50 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 | default.443.Portions.of.the.netw |
5da20 | 6f 72 6b 20 77 68 69 63 68 20 61 72 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 28 69 2e 65 2e 2c 20 | ork.which.are.VLAN-aware.(i.e.,. |
5da40 | 49 45 45 45 20 38 30 32 2e 31 71 5f 20 63 6f 6e 66 6f 72 6d 61 6e 74 29 20 63 61 6e 20 69 6e 63 | IEEE.802.1q_.conformant).can.inc |
5da60 | 6c 75 64 65 20 56 4c 41 4e 20 74 61 67 73 2e 20 57 68 65 6e 20 61 20 66 72 61 6d 65 20 65 6e 74 | lude.VLAN.tags..When.a.frame.ent |
5da80 | 65 72 73 20 74 68 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 | ers.the.VLAN-aware.portion.of.th |
5daa0 | 65 20 6e 65 74 77 6f 72 6b 2c 20 61 20 74 61 67 20 69 73 20 61 64 64 65 64 20 74 6f 20 72 65 70 | e.network,.a.tag.is.added.to.rep |
5dac0 | 72 65 73 65 6e 74 20 74 68 65 20 56 4c 41 4e 20 6d 65 6d 62 65 72 73 68 69 70 2e 20 45 61 63 68 | resent.the.VLAN.membership..Each |
5dae0 | 20 66 72 61 6d 65 20 6d 75 73 74 20 62 65 20 64 69 73 74 69 6e 67 75 69 73 68 61 62 6c 65 20 61 | .frame.must.be.distinguishable.a |
5db00 | 73 20 62 65 69 6e 67 20 77 69 74 68 69 6e 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 56 4c 41 4e 2e | s.being.within.exactly.one.VLAN. |
5db20 | 20 41 20 66 72 61 6d 65 20 69 6e 20 74 68 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 69 | .A.frame.in.the.VLAN-aware.porti |
5db40 | 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 | on.of.the.network.that.does.not. |
5db60 | 63 6f 6e 74 61 69 6e 20 61 20 56 4c 41 4e 20 74 61 67 20 69 73 20 61 73 73 75 6d 65 64 20 74 6f | contain.a.VLAN.tag.is.assumed.to |
5db80 | 20 62 65 20 66 6c 6f 77 69 6e 67 20 6f 6e 20 74 68 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 2e 00 | .be.flowing.on.the.native.VLAN.. |
5dba0 | 50 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 00 50 72 65 63 65 64 65 6e 63 65 00 50 72 65 65 6d | Pre-shared.keys.Precedence.Preem |
5dbc0 | 70 74 69 6f 6e 00 50 72 65 66 65 72 20 61 20 73 70 65 63 69 66 69 63 20 72 6f 75 74 69 6e 67 20 | ption.Prefer.a.specific.routing. |
5dbe0 | 70 72 6f 74 6f 63 6f 6c 20 72 6f 75 74 65 73 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 20 72 6f 75 | protocol.routes.over.another.rou |
5dc00 | 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 65 20 73 61 6d | ting.protocol.running.on.the.sam |
5dc20 | 65 20 72 6f 75 74 65 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 70 72 | e.router..Prefer.higher.local.pr |
5dc40 | 65 66 65 72 65 6e 63 65 20 72 6f 75 74 65 73 20 74 6f 20 6c 6f 77 65 72 2e 00 50 72 65 66 65 72 | eference.routes.to.lower..Prefer |
5dc60 | 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 77 65 69 67 68 74 20 72 6f 75 74 65 73 20 74 6f 20 6c | .higher.local.weight.routes.to.l |
5dc80 | 6f 77 65 72 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 | ower.routes..Prefer.local.routes |
5dca0 | 20 28 73 74 61 74 69 63 73 2c 20 61 67 67 72 65 67 61 74 65 73 2c 20 72 65 64 69 73 74 72 69 62 | .(statics,.aggregates,.redistrib |
5dcc0 | 75 74 65 64 29 20 74 6f 20 72 65 63 65 69 76 65 64 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 | uted).to.received.routes..Prefer |
5dce0 | 20 73 68 6f 72 74 65 73 74 20 68 6f 70 2d 63 6f 75 6e 74 20 41 53 5f 50 41 54 48 73 2e 00 50 72 | .shortest.hop-count.AS_PATHs..Pr |
5dd00 | 65 66 65 72 20 74 68 65 20 6c 6f 77 65 73 74 20 6f 72 69 67 69 6e 20 74 79 70 65 20 72 6f 75 74 | efer.the.lowest.origin.type.rout |
5dd20 | 65 2e 20 54 68 61 74 20 69 73 2c 20 70 72 65 66 65 72 20 49 47 50 20 6f 72 69 67 69 6e 20 72 6f | e..That.is,.prefer.IGP.origin.ro |
5dd40 | 75 74 65 73 20 74 6f 20 45 47 50 2c 20 74 6f 20 49 6e 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 65 | utes.to.EGP,.to.Incomplete.route |
5dd60 | 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f | s..Prefer.the.route.received.fro |
5dd80 | 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c 2c 20 65 42 47 50 20 70 65 65 72 20 6f 76 65 72 20 72 6f | m.an.external,.eBGP.peer.over.ro |
5dda0 | 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 6f 74 68 65 72 20 74 79 70 65 73 20 6f | utes.received.from.other.types.o |
5ddc0 | 66 20 70 65 65 72 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 65 69 76 | f.peers..Prefer.the.route.receiv |
5dde0 | 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 72 | ed.from.the.peer.with.the.higher |
5de00 | 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c 20 61 73 20 61 20 6c | .transport.layer.address,.as.a.l |
5de20 | 61 73 74 2d 72 65 73 6f 72 74 20 74 69 65 2d 62 72 65 61 6b 65 72 2e 00 50 72 65 66 65 72 20 74 | ast-resort.tie-breaker..Prefer.t |
5de40 | 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 72 20 49 47 50 20 63 6f 73 74 | he.route.with.the.lower.IGP.cost |
5de60 | 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 | ..Prefer.the.route.with.the.lowe |
5de80 | 73 74 20 60 72 6f 75 74 65 72 2d 49 44 60 2e 20 49 66 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 | st.`router-ID`..If.the.route.has |
5dea0 | 20 61 6e 20 60 4f 52 49 47 49 4e 41 54 4f 52 5f 49 44 60 20 61 74 74 72 69 62 75 74 65 2c 20 74 | .an.`ORIGINATOR_ID`.attribute,.t |
5dec0 | 68 72 6f 75 67 68 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 6f 6e 2c 20 74 68 65 6e 20 74 68 61 | hrough.iBGP.reflection,.then.tha |
5dee0 | 74 20 72 6f 75 74 65 72 20 49 44 20 69 73 20 75 73 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 74 | t.router.ID.is.used,.otherwise.t |
5df00 | 68 65 20 60 72 6f 75 74 65 72 2d 49 44 60 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 68 65 20 72 | he.`router-ID`.of.the.peer.the.r |
5df20 | 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 69 73 20 75 73 65 64 2e 00 | oute.was.received.from.is.used.. |
5df40 | 50 72 65 66 65 72 65 6e 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 64 | Preference.associated.with.the.d |
5df60 | 65 66 61 75 6c 74 20 72 6f 75 74 65 72 00 50 72 65 66 69 78 20 43 6f 6e 76 65 72 73 69 6f 6e 00 | efault.router.Prefix.Conversion. |
5df80 | 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 50 72 65 66 69 78 20 4c 69 73 74 20 50 6f | Prefix.Delegation.Prefix.List.Po |
5dfa0 | 6c 69 63 79 00 50 72 65 66 69 78 20 4c 69 73 74 73 00 50 72 65 66 69 78 20 63 61 6e 20 6e 6f 74 | licy.Prefix.Lists.Prefix.can.not |
5dfc0 | 20 62 65 20 75 73 65 64 20 66 6f 72 20 6f 6e 2d 6c 69 6e 6b 20 64 65 74 65 72 6d 69 6e 61 74 69 | .be.used.for.on-link.determinati |
5dfe0 | 6f 6e 00 50 72 65 66 69 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 74 | on.Prefix.can.not.be.used.for.st |
5e000 | 61 74 65 6c 65 73 73 20 61 64 64 72 65 73 73 20 61 75 74 6f 2d 63 6f 6e 66 69 67 75 72 61 74 69 | ateless.address.auto-configurati |
5e020 | 6f 6e 00 50 72 65 66 69 78 20 66 69 6c 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 | on.Prefix.filtering.can.be.done. |
5e040 | 75 73 69 6e 67 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 70 72 65 66 69 78 2d 6c 69 73 | using.prefix-list.and.prefix-lis |
5e060 | 74 36 2e 00 50 72 65 66 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 69 6e 74 65 72 66 61 63 65 20 6d | t6..Prefix.length.in.interface.m |
5e080 | 75 73 74 20 62 65 20 65 71 75 61 6c 20 6f 72 20 62 69 67 67 65 72 20 28 69 2e 65 2e 20 73 6d 61 | ust.be.equal.or.bigger.(i.e..sma |
5e0a0 | 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 29 20 74 68 61 6e 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 | ller.network).than.prefix.length |
5e0c0 | 20 69 6e 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 46 6f 72 20 65 78 61 6d 70 | .in.network.statement..For.examp |
5e0e0 | 6c 65 20 73 74 61 74 65 6d 65 6e 74 20 61 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 65 6e 61 62 6c | le.statement.above.doesn't.enabl |
5e100 | 65 20 6f 73 70 66 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 | e.ospf.on.interface.with.address |
5e120 | 20 31 39 32 2e 31 36 38 2e 31 2e 31 2f 32 33 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6f 6e 20 | .192.168.1.1/23,.but.it.does.on. |
5e140 | 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 | interface.with.address.192.168.1 |
5e160 | 2e 31 32 39 2f 32 35 2e 00 50 72 65 66 69 78 20 6c 69 73 74 73 20 70 72 6f 76 69 64 65 73 20 74 | .129/25..Prefix.lists.provides.t |
5e180 | 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 66 75 6c 20 70 72 65 66 69 78 20 62 61 73 65 64 20 66 69 | he.most.powerful.prefix.based.fi |
5e1a0 | 6c 74 65 72 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 | ltering.mechanism..In.addition.t |
5e1c0 | 6f 20 61 63 63 65 73 73 2d 6c 69 73 74 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 69 70 20 | o.access-list.functionality,.ip. |
5e1e0 | 70 72 65 66 69 78 2d 6c 69 73 74 20 68 61 73 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 72 61 | prefix-list.has.prefix.length.ra |
5e200 | 6e 67 65 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 50 72 65 66 69 78 20 74 6f 20 6d 61 74 | nge.specification..Prefix.to.mat |
5e220 | 63 68 20 61 67 61 69 6e 73 74 2e 00 50 72 65 66 69 78 65 73 00 50 72 65 70 65 6e 64 20 74 68 65 | ch.against..Prefixes.Prepend.the |
5e240 | 20 65 78 69 73 74 69 6e 67 20 6c 61 73 74 20 41 53 20 6e 75 6d 62 65 72 20 28 74 68 65 20 6c 65 | .existing.last.AS.number.(the.le |
5e260 | 66 74 6d 6f 73 74 20 41 53 4e 29 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 2e 00 50 72 65 70 | ftmost.ASN).to.the.AS_PATH..Prep |
5e280 | 65 6e 64 20 74 68 65 20 67 69 76 65 6e 20 73 74 72 69 6e 67 20 6f 66 20 41 53 20 6e 75 6d 62 65 | end.the.given.string.of.AS.numbe |
5e2a0 | 72 73 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 | rs.to.the.AS_PATH.of.the.BGP.pat |
5e2c0 | 68 27 73 20 4e 4c 52 49 2e 00 50 72 69 6e 63 69 70 6c 65 20 6f 66 20 53 4e 4d 50 20 43 6f 6d 6d | h's.NLRI..Principle.of.SNMP.Comm |
5e2e0 | 75 6e 69 63 61 74 69 6f 6e 00 50 72 69 6e 74 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 6e 65 69 | unication.Print.a.summary.of.nei |
5e300 | 67 68 62 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 | ghbor.connections.for.the.specif |
5e320 | 69 65 64 20 41 46 49 2f 53 41 46 49 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 2e 00 50 72 69 6e 74 20 | ied.AFI/SAFI.combination..Print. |
5e340 | 61 63 74 69 76 65 20 49 50 56 34 20 6f 72 20 49 50 56 36 20 72 6f 75 74 65 73 20 61 64 76 65 72 | active.IPV4.or.IPV6.routes.adver |
5e360 | 74 69 73 65 64 20 76 69 61 20 74 68 65 20 56 50 4e 20 53 41 46 49 2e 00 50 72 69 6f 72 69 74 79 | tised.via.the.VPN.SAFI..Priority |
5e380 | 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 2c 20 | .Priority.Queue.Priority.Queue,. |
5e3a0 | 61 73 20 6f 74 68 65 72 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 69 65 73 2c 20 69 | as.other.non-shaping.policies,.i |
5e3c0 | 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 | s.only.useful.if.your.outgoing.i |
5e3e0 | 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 | nterface.is.really.full..If.it.i |
5e400 | 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 | s.not,.VyOS.will.not.own.the.que |
5e420 | 75 65 20 61 6e 64 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 | ue.and.Priority.Queue.will.have. |
5e440 | 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 | no.effect..If.there.is.bandwidth |
5e460 | 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c | .available.on.the.physical.link, |
5e480 | 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 | .you.can.embed_.Priority.Queue.i |
5e4a0 | 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f | nto.a.classful.shaping.policy.to |
5e4c0 | 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 6e | .make.sure.it.owns.the.queue..In |
5e4e0 | 20 74 68 61 74 20 63 61 73 65 20 70 61 63 6b 65 74 73 20 63 61 6e 20 62 65 20 70 72 69 6f 72 69 | .that.case.packets.can.be.priori |
5e500 | 74 69 7a 65 64 20 62 61 73 65 64 20 6f 6e 20 44 53 43 50 2e 00 50 72 69 76 61 74 65 20 56 4c 41 | tized.based.on.DSCP..Private.VLA |
5e520 | 4e 20 70 72 6f 78 79 20 61 72 70 2e 20 42 61 73 69 63 61 6c 6c 79 20 61 6c 6c 6f 77 20 70 72 6f | N.proxy.arp..Basically.allow.pro |
5e540 | 78 79 20 61 72 70 20 72 65 70 6c 69 65 73 20 62 61 63 6b 20 74 6f 20 74 68 65 20 73 61 6d 65 20 | xy.arp.replies.back.to.the.same. |
5e560 | 69 6e 74 65 72 66 61 63 65 20 28 66 72 6f 6d 20 77 68 69 63 68 20 74 68 65 20 41 52 50 20 72 65 | interface.(from.which.the.ARP.re |
5e580 | 71 75 65 73 74 2f 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 77 61 73 20 72 65 63 65 69 76 65 64 29 | quest/solicitation.was.received) |
5e5a0 | 2e 00 50 72 6f 66 69 6c 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 66 72 6f | ..Profile.generation.happens.fro |
5e5c0 | 6d 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 61 6e 64 20 69 73 20 61 | m.the.operational.level.and.is.a |
5e5e0 | 73 20 73 69 6d 70 6c 65 20 61 73 20 69 73 73 75 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | s.simple.as.issuing.the.followin |
5e600 | 67 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 70 72 6f 66 69 6c 65 20 74 6f | g.command.to.create.a.profile.to |
5e620 | 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 4b 45 76 32 20 61 63 63 65 73 73 20 73 65 72 | .connect.to.the.IKEv2.access.ser |
5e640 | 76 65 72 20 61 74 20 60 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 60 20 77 69 74 68 20 74 68 65 | ver.at.``vpn.vyos.net``.with.the |
5e660 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 60 60 72 77 60 60 20 72 65 | .configuration.for.the.``rw``.re |
5e680 | 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 67 72 6f 75 70 2e 00 50 72 | mote-access.connection.group..Pr |
5e6a0 | 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e 74 00 50 72 6f 74 65 63 74 73 20 68 6f 73 74 20 66 72 | ometheus-client.Protects.host.fr |
5e6c0 | 6f 6d 20 62 72 75 74 65 2d 66 6f 72 63 65 20 61 74 74 61 63 6b 73 20 61 67 61 69 6e 73 74 20 53 | om.brute-force.attacks.against.S |
5e6e0 | 53 48 2e 20 4c 6f 67 20 6d 65 73 73 61 67 65 73 20 61 72 65 20 70 61 72 73 65 64 2c 20 6c 69 6e | SH..Log.messages.are.parsed,.lin |
5e700 | 65 2d 62 79 2d 6c 69 6e 65 2c 20 66 6f 72 20 72 65 63 6f 67 6e 69 7a 65 64 20 70 61 74 74 65 72 | e-by-line,.for.recognized.patter |
5e720 | 6e 73 2e 20 49 66 20 61 6e 20 61 74 74 61 63 6b 2c 20 73 75 63 68 20 61 73 20 73 65 76 65 72 61 | ns..If.an.attack,.such.as.severa |
5e740 | 6c 20 6c 6f 67 69 6e 20 66 61 69 6c 75 72 65 73 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 73 65 | l.login.failures.within.a.few.se |
5e760 | 63 6f 6e 64 73 2c 20 69 73 20 64 65 74 65 63 74 65 64 2c 20 74 68 65 20 6f 66 66 65 6e 64 69 6e | conds,.is.detected,.the.offendin |
5e780 | 67 20 49 50 20 69 73 20 62 6c 6f 63 6b 65 64 2e 20 4f 66 66 65 6e 64 65 72 73 20 61 72 65 20 75 | g.IP.is.blocked..Offenders.are.u |
5e7a0 | 6e 62 6c 6f 63 6b 65 64 20 61 66 74 65 72 20 61 20 73 65 74 20 69 6e 74 65 72 76 61 6c 2e 00 50 | nblocked.after.a.set.interval..P |
5e7c0 | 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 77 68 69 63 68 20 65 78 70 65 63 74 20 65 6e 74 72 69 65 73 | rotocol.for.which.expect.entries |
5e7e0 | 20 6e 65 65 64 20 74 6f 20 62 65 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 2e 00 50 72 6f 74 6f 63 | .need.to.be.synchronized..Protoc |
5e800 | 6f 6c 73 00 50 72 6f 74 6f 63 6f 6c 73 20 61 72 65 3a 20 74 63 70 2c 20 73 63 74 70 2c 20 64 63 | ols.Protocols.are:.tcp,.sctp,.dc |
5e820 | 63 70 2c 20 75 64 70 2c 20 69 63 6d 70 20 61 6e 64 20 69 70 76 36 2d 69 63 6d 70 2e 00 50 72 6f | cp,.udp,.icmp.and.ipv6-icmp..Pro |
5e840 | 76 69 64 65 20 54 46 54 50 20 73 65 72 76 65 72 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 62 6f | vide.TFTP.server.listening.on.bo |
5e860 | 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 60 60 31 39 32 | th.IPv4.and.IPv6.addresses.``192 |
5e880 | 2e 30 2e 32 2e 31 60 60 20 61 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 60 60 20 73 65 72 | .0.2.1``.and.``2001:db8::1``.ser |
5e8a0 | 76 69 6e 67 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 66 72 6f 6d 20 60 60 2f 63 6f 6e 66 69 67 2f | ving.the.content.from.``/config/ |
5e8c0 | 74 66 74 70 62 6f 6f 74 60 60 2e 20 55 70 6c 6f 61 64 69 6e 67 20 76 69 61 20 54 46 54 50 20 74 | tftpboot``..Uploading.via.TFTP.t |
5e8e0 | 6f 20 74 68 69 73 20 73 65 72 76 65 72 20 69 73 20 64 69 73 61 62 6c 65 64 2e 00 50 72 6f 76 69 | o.this.server.is.disabled..Provi |
5e900 | 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 20 | de.a.IPv4.or.IPv6.address.group. |
5e920 | 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 | description.Provide.a.IPv4.or.IP |
5e940 | 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 | v6.network.group.description..Pr |
5e960 | 6f 76 69 64 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 72 75 6c | ovide.a.description.for.each.rul |
5e980 | 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 | e..Provide.a.description.to.the. |
5e9a0 | 66 6c 6f 77 20 74 61 62 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f | flow.table..Provide.a.domain.gro |
5e9c0 | 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 6d 61 63 20 67 72 | up.description..Provide.a.mac.gr |
5e9e0 | 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 70 6f 72 74 20 | oup.description..Provide.a.port. |
5ea00 | 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 72 75 6c | group.description..Provide.a.rul |
5ea20 | 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 | e-set.description.to.a.custom.fi |
5ea40 | 72 65 77 61 6c 6c 20 63 68 61 69 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 | rewall.chain..Provide.a.rule-set |
5ea60 | 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 6e 20 49 50 76 34 20 6f 72 | .description..Provide.an.IPv4.or |
5ea80 | 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e | .IPv6.network.group.description. |
5eaa0 | 00 50 72 6f 76 69 64 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 20 64 65 73 63 | .Provide.an.interface.group.desc |
5eac0 | 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 64 65 72 20 2d 20 43 75 73 74 6f 6d 65 72 00 50 72 6f 76 | ription.Provider.-.Customer.Prov |
5eae0 | 69 64 65 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 63 6f 68 65 72 65 6e 63 65 20 62 | ides.a.backbone.area.coherence.b |
5eb00 | 79 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 2e 00 50 72 | y.virtual.link.establishment..Pr |
5eb20 | 6f 76 69 64 65 73 20 61 20 70 65 72 2d 64 65 76 69 63 65 20 63 6f 6e 74 72 6f 6c 20 74 6f 20 65 | ovides.a.per-device.control.to.e |
5eb40 | 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 20 74 68 65 20 74 68 72 65 61 64 65 64 20 6d 6f 64 65 20 | nable/disable.the.threaded.mode. |
5eb60 | 66 6f 72 20 61 6c 6c 20 74 68 65 20 4e 41 50 49 20 69 6e 73 74 61 6e 63 65 73 20 6f 66 20 74 68 | for.all.the.NAPI.instances.of.th |
5eb80 | 65 20 67 69 76 65 6e 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 2c 20 77 69 74 68 6f 75 74 20 | e.given.network.device,.without. |
5eba0 | 74 68 65 20 6e 65 65 64 20 66 6f 72 20 61 20 64 65 76 69 63 65 20 75 70 2f 64 6f 77 6e 2e 00 50 | the.need.for.a.device.up/down..P |
5ebc0 | 72 6f 78 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 74 68 6f 64 2c 20 63 75 72 72 | roxy.authentication.method,.curr |
5ebe0 | 65 6e 74 6c 79 20 6f 6e 6c 79 20 4c 44 41 50 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 00 50 73 | ently.only.LDAP.is.supported..Ps |
5ec00 | 65 75 64 6f 20 45 74 68 65 72 6e 65 74 2f 4d 41 43 56 4c 41 4e 20 6f 70 74 69 6f 6e 73 00 50 73 | eudo.Ethernet/MACVLAN.options.Ps |
5ec20 | 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 6e 6f 74 | eudo-Ethernet.interfaces.can.not |
5ec40 | 20 62 65 20 72 65 61 63 68 65 64 20 66 72 6f 6d 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 68 | .be.reached.from.your.internal.h |
5ec60 | 6f 73 74 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 6e 6f 74 | ost..This.means.that.you.can.not |
5ec80 | 20 74 72 79 20 74 6f 20 70 69 6e 67 20 61 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 | .try.to.ping.a.Pseudo-Ethernet.i |
5eca0 | 6e 74 65 72 66 61 63 65 20 66 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 73 79 73 74 65 6d 20 6f 6e | nterface.from.the.host.system.on |
5ecc0 | 20 77 68 69 63 68 20 69 74 20 69 73 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 70 69 6e 67 20 77 | .which.it.is.defined..The.ping.w |
5ece0 | 69 6c 6c 20 62 65 20 6c 6f 73 74 2e 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 | ill.be.lost..Pseudo-Ethernet.int |
5ed00 | 65 72 66 61 63 65 73 20 6d 61 79 20 6e 6f 74 20 77 6f 72 6b 20 69 6e 20 65 6e 76 69 72 6f 6e 6d | erfaces.may.not.work.in.environm |
5ed20 | 65 6e 74 73 20 77 68 69 63 68 20 65 78 70 65 63 74 20 61 20 3a 61 62 62 72 3a 60 4e 49 43 20 28 | ents.which.expect.a.:abbr:`NIC.( |
5ed40 | 4e 65 74 77 6f 72 6b 20 49 6e 74 65 72 66 61 63 65 20 43 61 72 64 29 60 20 74 6f 20 6f 6e 6c 79 | Network.Interface.Card)`.to.only |
5ed60 | 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 61 70 70 | .have.a.single.address..This.app |
5ed80 | 6c 69 65 73 20 74 6f 3a 20 2d 20 56 4d 77 61 72 65 20 6d 61 63 68 69 6e 65 73 20 75 73 69 6e 67 | lies.to:.-.VMware.machines.using |
5eda0 | 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 20 2d 20 4e 65 74 77 6f 72 6b 20 73 77 69 74 | .default.settings.-.Network.swit |
5edc0 | 63 68 65 73 20 77 69 74 68 20 73 65 63 75 72 69 74 79 20 73 65 74 74 69 6e 67 73 20 61 6c 6c 6f | ches.with.security.settings.allo |
5ede0 | 77 69 6e 67 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 2d | wing.only.a.single.MAC.address.- |
5ee00 | 20 78 44 53 4c 20 6d 6f 64 65 6d 73 20 74 68 61 74 20 74 72 79 20 74 6f 20 6c 65 61 72 6e 20 74 | .xDSL.modems.that.try.to.learn.t |
5ee20 | 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4e 49 43 00 50 73 65 75 64 6f | he.MAC.address.of.the.NIC.Pseudo |
5ee40 | 2d 45 74 68 65 72 6e 65 74 20 6f 72 20 4d 41 43 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 | -Ethernet.or.MACVLAN.interfaces. |
5ee60 | 63 61 6e 20 62 65 20 73 65 65 6e 20 61 73 20 73 75 62 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 | can.be.seen.as.subinterfaces.to. |
5ee80 | 72 65 67 75 6c 61 72 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 45 61 63 | regular.ethernet.interfaces..Eac |
5eea0 | 68 20 61 6e 64 20 65 76 65 72 79 20 73 75 62 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 72 65 61 | h.and.every.subinterface.is.crea |
5eec0 | 74 65 64 20 61 20 64 69 66 66 65 72 65 6e 74 20 6d 65 64 69 61 20 61 63 63 65 73 73 20 63 6f 6e | ted.a.different.media.access.con |
5eee0 | 74 72 6f 6c 20 28 4d 41 43 29 20 61 64 64 72 65 73 73 2c 20 66 6f 72 20 61 20 73 69 6e 67 6c 65 | trol.(MAC).address,.for.a.single |
5ef00 | 20 70 68 79 73 69 63 61 6c 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2e 20 50 73 65 75 64 6f 2d | .physical.Ethernet.port..Pseudo- |
5ef20 | 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 68 61 76 65 20 6d 6f 73 74 20 6f | .Ethernet.interfaces.have.most.o |
5ef40 | 66 20 74 68 65 69 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 6e 20 76 69 72 74 75 61 6c 69 7a | f.their.application.in.virtualiz |
5ef60 | 65 64 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 2c 00 50 75 62 6c 69 73 68 20 61 20 70 6f 72 74 20 | ed.environments,.Publish.a.port. |
5ef80 | 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 50 75 6c 6c 20 61 20 6e 65 77 20 69 6d | for.the.container..Pull.a.new.im |
5efa0 | 61 67 65 20 66 6f 72 20 63 6f 6e 74 61 69 6e 65 72 00 51 69 6e 51 20 28 38 30 32 2e 31 61 64 29 | age.for.container.QinQ.(802.1ad) |
5efc0 | 00 51 6f 53 00 51 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f | .QoS.Queue.size.for.listening.to |
5efe0 | 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 61 63 6b 20 65 76 65 6e 74 73 20 69 6e 20 4d 42 2e 00 51 | .local.conntrack.events.in.MB..Q |
5f000 | 75 65 75 65 20 73 69 7a 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 | ueue.size.for.syncing.conntrack. |
5f020 | 65 6e 74 72 69 65 73 20 69 6e 20 4d 42 2e 00 51 75 6f 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 | entries.in.MB..Quotes.can.be.use |
5f040 | 64 20 69 6e 73 69 64 65 20 70 61 72 61 6d 65 74 65 72 20 76 61 6c 75 65 73 20 62 79 20 72 65 70 | d.inside.parameter.values.by.rep |
5f060 | 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 69 74 68 | lacing.all.quote.characters.with |
5f080 | 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 60 2e 20 54 68 65 79 20 77 69 6c | .the.string.``"``..They.wil |
5f0a0 | 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 6c 69 74 65 72 61 6c 20 71 75 6f 74 65 | l.be.replaced.with.literal.quote |
5f0c0 | 20 63 68 61 72 61 63 74 65 72 73 20 77 68 65 6e 20 67 65 6e 65 72 61 74 69 6e 67 20 64 68 63 70 | .characters.when.generating.dhcp |
5f0e0 | 64 2e 63 6f 6e 66 2e 00 52 31 20 68 61 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 26 20 32 30 | d.conf..R1.has.192.0.2.1/24.&.20 |
5f100 | 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 52 31 20 69 73 20 6d 61 6e 61 67 65 64 20 74 68 72 6f 75 | 01:db8::1/64.R1.is.managed.throu |
5f120 | 67 68 20 61 6e 20 6f 75 74 2d 6f 66 2d 62 61 6e 64 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 72 | gh.an.out-of-band.network.that.r |
5f140 | 65 73 69 64 65 73 20 69 6e 20 56 52 46 20 60 60 6d 67 6d 74 60 60 00 52 31 3a 00 52 32 20 68 61 | esides.in.VRF.``mgmt``.R1:.R2.ha |
5f160 | 73 20 31 39 32 2e 30 2e 32 2e 32 2f 32 34 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 32 2f 36 34 00 | s.192.0.2.2/24.&.2001:db8::2/64. |
5f180 | 52 32 3a 00 52 41 44 49 55 53 00 52 41 44 49 55 53 20 53 65 74 75 70 00 52 41 44 49 55 53 20 61 | R2:.RADIUS.RADIUS.Setup.RADIUS.a |
5f1a0 | 64 76 61 6e 63 65 64 20 66 65 61 74 75 72 65 73 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 | dvanced.features.RADIUS.advanced |
5f1c0 | 20 6f 70 74 69 6f 6e 73 00 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 52 | .options.RADIUS.authentication.R |
5f1e0 | 41 44 49 55 53 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 61 74 74 72 69 62 75 74 | ADIUS.bandwidth.shaping.attribut |
5f200 | 65 00 52 41 44 49 55 53 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | e.RADIUS.provides.the.IP.address |
5f220 | 65 73 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 20 76 69 61 20 46 72 61 6d | es.in.the.example.above.via.Fram |
5f240 | 65 64 2d 49 50 2d 41 64 64 72 65 73 73 2e 00 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 20 | ed-IP-Address..RADIUS.server.at. |
5f260 | 60 60 31 39 32 2e 31 36 38 2e 33 2e 31 30 60 60 20 77 69 74 68 20 73 68 61 72 65 64 2d 73 65 63 | ``192.168.3.10``.with.shared-sec |
5f280 | 72 65 74 20 60 60 56 79 4f 53 50 61 73 73 77 6f 72 64 60 60 00 52 41 44 49 55 53 20 73 65 72 76 | ret.``VyOSPassword``.RADIUS.serv |
5f2a0 | 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 61 72 64 65 6e 65 64 20 62 79 20 6f 6e 6c 79 20 61 6c | ers.could.be.hardened.by.only.al |
5f2c0 | 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 | lowing.certain.IP.addresses.to.c |
5f2e0 | 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 74 68 69 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | onnect..As.of.this.the.source.ad |
5f300 | 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 52 41 44 49 55 53 20 71 75 65 72 79 20 63 61 6e 20 62 | dress.of.each.RADIUS.query.can.b |
5f320 | 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 52 41 44 49 55 53 20 73 6f 75 72 63 65 20 61 64 64 72 | e.configured..RADIUS.source.addr |
5f340 | 65 73 73 00 52 46 43 20 33 37 36 38 20 64 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 4d | ess.RFC.3768.defines.a.virtual.M |
5f360 | 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 56 52 52 50 20 76 69 72 74 75 61 6c 20 | AC.address.to.each.VRRP.virtual. |
5f380 | 72 6f 75 74 65 72 2e 20 54 68 69 73 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 20 4d 41 43 20 | router..This.virtual.router.MAC. |
5f3a0 | 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 73 6f 75 72 | address.will.be.used.as.the.sour |
5f3c0 | 63 65 20 69 6e 20 61 6c 6c 20 70 65 72 69 6f 64 69 63 20 56 52 52 50 20 6d 65 73 73 61 67 65 73 | ce.in.all.periodic.VRRP.messages |
5f3e0 | 20 73 65 6e 74 20 62 79 20 74 68 65 20 61 63 74 69 76 65 20 6e 6f 64 65 2e 20 57 68 65 6e 20 74 | .sent.by.the.active.node..When.t |
5f400 | 68 65 20 72 66 63 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 20 | he.rfc3768-compatibility.option. |
5f420 | 69 73 20 73 65 74 2c 20 61 20 6e 65 77 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 | is.set,.a.new.VRRP.interface.is. |
5f440 | 63 72 65 61 74 65 64 2c 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 | created,.to.which.the.MAC.addres |
5f460 | 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 | s.and.the.virtual.IP.address.is. |
5f480 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 2e 00 52 46 43 20 38 36 38 20 | automatically.assigned..RFC.868. |
5f4a0 | 74 69 6d 65 20 73 65 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 00 52 49 50 00 52 49 50 | time.server.IPv4.address.RIP.RIP |
5f4c0 | 76 31 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 30 35 38 60 00 52 | v1.as.described.in.:rfc:`1058`.R |
5f4e0 | 49 50 76 32 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 34 35 33 60 | IPv2.as.described.in.:rfc:`2453` |
5f500 | 00 52 50 4b 49 00 52 53 2d 53 65 72 76 65 72 20 2d 20 52 53 2d 43 6c 69 65 6e 74 00 52 53 41 20 | .RPKI.RS-Server.-.RS-Client.RSA. |
5f520 | 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 | can.be.used.for.services.such.as |
5f540 | 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 20 61 6e 64 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f | .key.exchanges.and.for.encryptio |
5f560 | 6e 20 70 75 72 70 6f 73 65 73 2e 20 54 6f 20 6d 61 6b 65 20 49 50 53 65 63 20 77 6f 72 6b 20 77 | n.purposes..To.make.IPSec.work.w |
5f580 | 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 6f 6e 65 2f 62 6f 74 68 20 | ith.dynamic.address.on.one/both. |
5f5a0 | 73 69 64 65 73 2c 20 77 65 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 75 73 65 20 52 53 41 20 6b | sides,.we.will.have.to.use.RSA.k |
5f5c0 | 65 79 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 79 20 61 72 65 | eys.for.authentication..They.are |
5f5e0 | 20 76 65 72 79 20 66 61 73 74 20 61 6e 64 20 65 61 73 79 20 74 6f 20 73 65 74 75 70 2e 00 52 53 | .very.fast.and.easy.to.setup..RS |
5f600 | 41 2d 4b 65 79 73 00 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 00 52 61 6e 64 6f 6d 2d 44 65 74 65 | A-Keys.Random-Detect.Random-Dete |
5f620 | 63 74 20 63 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 68 65 61 76 79 20 74 72 61 | ct.could.be.useful.for.heavy.tra |
5f640 | 66 66 69 63 2e 20 4f 6e 65 20 75 73 65 20 6f 66 20 74 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 | ffic..One.use.of.this.algorithm. |
5f660 | 6d 69 67 68 74 20 62 65 20 74 6f 20 70 72 65 76 65 6e 74 20 61 20 62 61 63 6b 62 6f 6e 65 20 6f | might.be.to.prevent.a.backbone.o |
5f680 | 76 65 72 6c 6f 61 64 2e 20 42 75 74 20 6f 6e 6c 79 20 66 6f 72 20 54 43 50 20 28 62 65 63 61 75 | verload..But.only.for.TCP.(becau |
5f6a0 | 73 65 20 64 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 20 63 6f 75 6c 64 20 62 65 20 72 65 74 72 | se.dropped.packets.could.be.retr |
5f6c0 | 61 6e 73 6d 69 74 74 65 64 29 2c 20 6e 6f 74 20 66 6f 72 20 55 44 50 2e 00 52 61 6e 67 65 20 69 | ansmitted),.not.for.UDP..Range.i |
5f6e0 | 73 20 31 20 74 6f 20 32 35 35 2c 20 64 65 66 61 75 6c 74 20 69 73 20 31 2e 00 52 61 6e 67 65 20 | s.1.to.255,.default.is.1..Range. |
5f700 | 69 73 20 31 20 74 6f 20 33 30 30 2c 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 2e 00 52 61 74 65 | is.1.to.300,.default.is.10..Rate |
5f720 | 20 43 6f 6e 74 72 6f 6c 00 52 61 74 65 20 6c 69 6d 69 74 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c | .Control.Rate.limit.Rate-Control |
5f740 | 20 69 73 20 61 20 43 50 55 2d 66 72 69 65 6e 64 6c 79 20 70 6f 6c 69 63 79 2e 20 59 6f 75 20 6d | .is.a.CPU-friendly.policy..You.m |
5f760 | 69 67 68 74 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 69 74 20 77 68 65 6e 20 79 6f 75 20 | ight.consider.using.it.when.you. |
5f780 | 6a 75 73 74 20 73 69 6d 70 6c 79 20 77 61 6e 74 20 74 6f 20 73 6c 6f 77 20 74 72 61 66 66 69 63 | just.simply.want.to.slow.traffic |
5f7a0 | 20 64 6f 77 6e 2e 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 63 6c 61 73 73 6c 65 | .down..Rate-Control.is.a.classle |
5f7c0 | 73 73 20 70 6f 6c 69 63 79 20 74 68 61 74 20 6c 69 6d 69 74 73 20 74 68 65 20 70 61 63 6b 65 74 | ss.policy.that.limits.the.packet |
5f7e0 | 20 66 6c 6f 77 20 74 6f 20 61 20 73 65 74 20 72 61 74 65 2e 20 49 74 20 69 73 20 61 20 70 75 72 | .flow.to.a.set.rate..It.is.a.pur |
5f800 | 65 20 73 68 61 70 65 72 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 73 63 68 65 64 75 6c 65 20 74 | e.shaper,.it.does.not.schedule.t |
5f820 | 72 61 66 66 69 63 2e 20 54 72 61 66 66 69 63 20 69 73 20 66 69 6c 74 65 72 65 64 20 62 61 73 65 | raffic..Traffic.is.filtered.base |
5f840 | 64 20 6f 6e 20 74 68 65 20 65 78 70 65 6e 64 69 74 75 72 65 20 6f 66 20 74 6f 6b 65 6e 73 2e 20 | d.on.the.expenditure.of.tokens.. |
5f860 | 54 6f 6b 65 6e 73 20 72 6f 75 67 68 6c 79 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 62 79 74 | Tokens.roughly.correspond.to.byt |
5f880 | 65 73 2e 00 52 61 77 20 50 61 72 61 6d 65 74 65 72 73 00 52 61 77 20 70 61 72 61 6d 65 74 65 72 | es..Raw.Parameters.Raw.parameter |
5f8a0 | 73 20 63 61 6e 20 62 65 20 70 61 73 73 65 64 20 74 6f 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 | s.can.be.passed.to.shared-networ |
5f8c0 | 6b 2d 6e 61 6d 65 2c 20 73 75 62 6e 65 74 20 61 6e 64 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e | k-name,.subnet.and.static-mappin |
5f8e0 | 67 3a 00 52 65 2d 67 65 6e 65 72 61 74 65 64 20 61 20 6b 6e 6f 77 6e 20 70 75 62 2f 70 72 69 76 | g:.Re-generated.a.known.pub/priv |
5f900 | 61 74 65 20 6b 65 79 66 69 6c 65 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f | ate.keyfile.which.can.be.used.to |
5f920 | 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 74 68 65 72 20 73 65 72 76 69 63 65 73 20 28 65 2e 67 2e | .connect.to.other.services.(e.g. |
5f940 | 20 52 50 4b 49 20 63 61 63 68 65 29 2e 00 52 65 2d 67 65 6e 65 72 61 74 65 64 20 74 68 65 20 70 | .RPKI.cache)..Re-generated.the.p |
5f960 | 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 6f 72 74 69 6f 6e 20 77 68 69 63 68 20 53 | ublic/private.keyportion.which.S |
5f980 | 53 48 20 75 73 65 73 20 74 6f 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 52 | SH.uses.to.secure.connections..R |
5f9a0 | 65 61 63 68 61 62 6c 65 20 54 69 6d 65 00 52 65 61 6c 20 73 65 72 76 65 72 00 52 65 61 6c 20 73 | eachable.Time.Real.server.Real.s |
5f9c0 | 65 72 76 65 72 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 00 52 65 61 6c 20 73 | erver.IP.address.and.port.Real.s |
5f9e0 | 65 72 76 65 72 20 69 73 20 61 75 74 6f 2d 65 78 63 6c 75 64 65 64 20 69 66 20 70 6f 72 74 20 63 | erver.is.auto-excluded.if.port.c |
5fa00 | 68 65 63 6b 20 77 69 74 68 20 74 68 69 73 20 73 65 72 76 65 72 20 66 61 69 6c 2e 00 52 65 63 65 | heck.with.this.server.fail..Rece |
5fa20 | 69 76 65 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 63 72 65 | ive.traffic.from.connections.cre |
5fa40 | 61 74 65 64 20 62 79 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 61 6c 73 6f 20 62 61 6c 61 6e | ated.by.the.server.is.also.balan |
5fa60 | 63 65 64 2e 20 57 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 73 65 6e 64 73 | ced..When.the.local.system.sends |
5fa80 | 20 61 6e 20 41 52 50 20 52 65 71 75 65 73 74 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 | .an.ARP.Request.the.bonding.driv |
5faa0 | 65 72 20 63 6f 70 69 65 73 20 61 6e 64 20 73 61 76 65 73 20 74 68 65 20 70 65 65 72 27 73 20 49 | er.copies.and.saves.the.peer's.I |
5fac0 | 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 41 52 50 20 70 61 63 6b 65 | P.information.from.the.ARP.packe |
5fae0 | 74 2e 20 57 68 65 6e 20 74 68 65 20 41 52 50 20 52 65 70 6c 79 20 61 72 72 69 76 65 73 20 66 72 | t..When.the.ARP.Reply.arrives.fr |
5fb00 | 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 69 74 73 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 | om.the.peer,.its.hardware.addres |
5fb20 | 73 20 69 73 20 72 65 74 72 69 65 76 65 64 20 61 6e 64 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 | s.is.retrieved.and.the.bonding.d |
5fb40 | 72 69 76 65 72 20 69 6e 69 74 69 61 74 65 73 20 61 6e 20 41 52 50 20 72 65 70 6c 79 20 74 6f 20 | river.initiates.an.ARP.reply.to. |
5fb60 | 74 68 69 73 20 70 65 65 72 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 74 6f 20 6f 6e 65 20 6f 66 | this.peer.assigning.it.to.one.of |
5fb80 | 20 74 68 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 2e 20 41 20 70 72 6f 62 6c | .the.slaves.in.the.bond..A.probl |
5fba0 | 65 6d 61 74 69 63 20 6f 75 74 63 6f 6d 65 20 6f 66 20 75 73 69 6e 67 20 41 52 50 20 6e 65 67 6f | ematic.outcome.of.using.ARP.nego |
5fbc0 | 74 69 61 74 69 6f 6e 20 66 6f 72 20 62 61 6c 61 6e 63 69 6e 67 20 69 73 20 74 68 61 74 20 65 61 | tiation.for.balancing.is.that.ea |
5fbe0 | 63 68 20 74 69 6d 65 20 74 68 61 74 20 61 6e 20 41 52 50 20 72 65 71 75 65 73 74 20 69 73 20 62 | ch.time.that.an.ARP.request.is.b |
5fc00 | 72 6f 61 64 63 61 73 74 20 69 74 20 75 73 65 73 20 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 | roadcast.it.uses.the.hardware.ad |
5fc20 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 2e 20 48 65 6e 63 65 2c 20 70 65 65 72 73 20 | dress.of.the.bond..Hence,.peers. |
5fc40 | 6c 65 61 72 6e 20 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 | learn.the.hardware.address.of.th |
5fc60 | 65 20 62 6f 6e 64 20 61 6e 64 20 74 68 65 20 62 61 6c 61 6e 63 69 6e 67 20 6f 66 20 72 65 63 65 | e.bond.and.the.balancing.of.rece |
5fc80 | 69 76 65 20 74 72 61 66 66 69 63 20 63 6f 6c 6c 61 70 73 65 73 20 74 6f 20 74 68 65 20 63 75 72 | ive.traffic.collapses.to.the.cur |
5fca0 | 72 65 6e 74 20 73 6c 61 76 65 2e 20 54 68 69 73 20 69 73 20 68 61 6e 64 6c 65 64 20 62 79 20 73 | rent.slave..This.is.handled.by.s |
5fcc0 | 65 6e 64 69 6e 67 20 75 70 64 61 74 65 73 20 28 41 52 50 20 52 65 70 6c 69 65 73 29 20 74 6f 20 | ending.updates.(ARP.Replies).to. |
5fce0 | 61 6c 6c 20 74 68 65 20 70 65 65 72 73 20 77 69 74 68 20 74 68 65 69 72 20 69 6e 64 69 76 69 64 | all.the.peers.with.their.individ |
5fd00 | 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 | ually.assigned.hardware.address. |
5fd20 | 73 75 63 68 20 74 68 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 72 65 64 69 73 74 72 | such.that.the.traffic.is.redistr |
5fd40 | 69 62 75 74 65 64 2e 20 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 69 73 20 61 6c 73 6f 20 | ibuted..Receive.traffic.is.also. |
5fd60 | 72 65 64 69 73 74 72 69 62 75 74 65 64 20 77 68 65 6e 20 61 20 6e 65 77 20 73 6c 61 76 65 20 69 | redistributed.when.a.new.slave.i |
5fd80 | 73 20 61 64 64 65 64 20 74 6f 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 20 77 68 65 6e 20 61 6e 20 | s.added.to.the.bond.and.when.an. |
5fda0 | 69 6e 61 63 74 69 76 65 20 73 6c 61 76 65 20 69 73 20 72 65 2d 61 63 74 69 76 61 74 65 64 2e 20 | inactive.slave.is.re-activated.. |
5fdc0 | 54 68 65 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 | The.receive.load.is.distributed. |
5fde0 | 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 28 72 6f 75 6e 64 20 72 6f 62 69 6e 29 20 61 6d 6f 6e 67 | sequentially.(round.robin).among |
5fe00 | 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 68 69 67 68 65 73 74 20 73 70 65 65 64 20 73 6c 61 76 | .the.group.of.highest.speed.slav |
5fe20 | 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 2e 00 52 65 63 65 69 76 65 64 20 52 41 44 49 55 53 20 | es.in.the.bond..Received.RADIUS. |
5fe40 | 61 74 74 72 69 62 75 74 65 73 20 68 61 76 65 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 | attributes.have.a.higher.priorit |
5fe60 | 79 20 74 68 61 6e 20 70 61 72 61 6d 65 74 65 72 73 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e | y.than.parameters.defined.within |
5fe80 | 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 72 65 66 65 72 20 74 6f | .the.CLI.configuration,.refer.to |
5fea0 | 20 74 68 65 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 00 52 65 63 6f 6d 6d 65 6e | .the.explanation.below..Recommen |
5fec0 | 64 65 64 20 66 6f 72 20 6c 61 72 67 65 72 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 52 65 | ded.for.larger.installations..Re |
5fee0 | 63 6f 72 64 20 74 79 70 65 73 00 52 65 64 69 72 65 63 74 20 48 54 54 50 20 74 6f 20 48 54 54 50 | cord.types.Redirect.HTTP.to.HTTP |
5ff00 | 53 00 52 65 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 61 66 66 69 63 | S.Redirect.Microsoft.RDP.traffic |
5ff20 | 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 4c 41 4e 2c 20 70 72 69 76 61 74 65 | .from.the.internal.(LAN,.private |
5ff40 | 29 20 6e 65 74 77 6f 72 6b 20 76 69 61 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d | ).network.via.:ref:`destination- |
5ff60 | 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 31 31 30 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c | nat`.in.rule.110.to.the.internal |
5ff80 | 2c 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 20 57 65 20 61 6c | ,.private.host.192.0.2.40..We.al |
5ffa0 | 73 6f 20 6e 65 65 64 20 61 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 | so.need.a.:ref:`source-nat`.rule |
5ffc0 | 20 31 31 30 20 66 6f 72 20 74 68 65 20 72 65 76 65 72 73 65 20 70 61 74 68 20 6f 66 20 74 68 65 | .110.for.the.reverse.path.of.the |
5ffe0 | 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 31 | .traffic..The.internal.network.1 |
60000 | 39 32 2e 30 2e 32 2e 30 2f 32 34 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 69 6e 74 | 92.0.2.0/24.is.reachable.via.int |
60020 | 65 72 66 61 63 65 20 60 65 74 68 30 2e 31 30 60 2e 00 52 65 64 69 72 65 63 74 20 4d 69 63 72 6f | erface.`eth0.10`..Redirect.Micro |
60040 | 73 6f 66 74 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 6f 75 74 73 69 64 | soft.RDP.traffic.from.the.outsid |
60060 | 65 20 28 57 41 4e 2c 20 65 78 74 65 72 6e 61 6c 29 20 77 6f 72 6c 64 20 76 69 61 20 3a 72 65 66 | e.(WAN,.external).world.via.:ref |
60080 | 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 31 30 30 20 74 | :`destination-nat`.in.rule.100.t |
600a0 | 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 | o.the.internal,.private.host.192 |
600c0 | 2e 30 2e 32 2e 34 30 2e 00 52 65 64 69 72 65 63 74 20 55 52 4c 20 74 6f 20 61 20 6e 65 77 20 6c | .0.2.40..Redirect.URL.to.a.new.l |
600e0 | 6f 63 61 74 69 6f 6e 00 52 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 | ocation.Redistribution.Configura |
60100 | 74 69 6f 6e 00 52 65 64 75 6e 64 61 6e 63 79 20 61 6e 64 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 | tion.Redundancy.and.load.sharing |
60120 | 2e 20 54 68 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 4e 41 54 36 36 20 64 65 76 69 63 | ..There.are.multiple.NAT66.devic |
60140 | 65 73 20 61 74 20 74 68 65 20 65 64 67 65 20 6f 66 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 | es.at.the.edge.of.an.IPv6.networ |
60160 | 6b 20 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 70 | k.to.another.IPv6.network..The.p |
60180 | 61 74 68 20 74 68 72 6f 75 67 68 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 | ath.through.the.NAT66.device.to. |
601a0 | 61 6e 6f 74 68 65 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 66 6f 72 6d 73 20 61 6e 20 65 71 | another.IPv6.network.forms.an.eq |
601c0 | 75 69 76 61 6c 65 6e 74 20 72 6f 75 74 65 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 | uivalent.route,.and.traffic.can. |
601e0 | 62 65 20 6c 6f 61 64 2d 73 68 61 72 65 64 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 | be.load-shared.on.these.NAT66.de |
60200 | 76 69 63 65 73 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 79 6f 75 20 63 61 6e 20 63 6f 6e | vices..In.this.case,.you.can.con |
60220 | 66 69 67 75 72 65 20 74 68 65 20 73 61 6d 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 | figure.the.same.source.address.t |
60240 | 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 73 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 | ranslation.rules.on.these.NAT66. |
60260 | 64 65 76 69 63 65 73 2c 20 73 6f 20 74 68 61 74 20 61 6e 79 20 4e 41 54 36 36 20 64 65 76 69 63 | devices,.so.that.any.NAT66.devic |
60280 | 65 20 63 61 6e 20 68 61 6e 64 6c 65 20 49 50 76 36 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 | e.can.handle.IPv6.traffic.betwee |
602a0 | 6e 20 64 69 66 66 65 72 65 6e 74 20 73 69 74 65 73 2e 00 52 65 67 69 73 74 65 72 20 44 4e 53 20 | n.different.sites..Register.DNS. |
602c0 | 72 65 63 6f 72 64 20 60 60 65 78 61 6d 70 6c 65 2e 76 79 6f 73 2e 69 6f 60 60 20 6f 6e 20 44 4e | record.``example.vyos.io``.on.DN |
602e0 | 53 20 73 65 72 76 65 72 20 60 60 6e 73 31 2e 76 79 6f 73 2e 69 6f 60 60 00 52 65 67 75 6c 61 72 | S.server.``ns1.vyos.io``.Regular |
60300 | 20 56 4c 41 4e 73 20 28 38 30 32 2e 31 71 29 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 | .VLANs.(802.1q).Regular.expressi |
60320 | 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6d 6d 75 6e 69 74 79 2d | on.to.match.against.a.community- |
60340 | 6c 69 73 74 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 | list..Regular.expression.to.matc |
60360 | 68 20 61 67 61 69 6e 73 74 20 61 20 6c 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 | h.against.a.large.community.list |
60380 | 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 | ..Regular.expression.to.match.ag |
603a0 | 61 69 6e 73 74 20 61 6e 20 41 53 20 70 61 74 68 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 22 36 | ainst.an.AS.path..For.example."6 |
603c0 | 34 35 30 31 20 36 34 35 30 32 22 2e 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 | 4501.64502"..Regular.expression. |
603e0 | 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6d | to.match.against.an.extended.com |
60400 | 6d 75 6e 69 74 79 20 6c 69 73 74 2c 20 77 68 65 72 65 20 74 65 78 74 20 63 6f 75 6c 64 20 62 65 | munity.list,.where.text.could.be |
60420 | 3a 00 52 65 6a 65 63 74 20 44 48 43 50 20 6c 65 61 73 65 73 20 66 72 6f 6d 20 61 20 67 69 76 65 | :.Reject.DHCP.leases.from.a.give |
60440 | 6e 20 61 64 64 72 65 73 73 20 6f 72 20 72 61 6e 67 65 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 | n.address.or.range..This.is.usef |
60460 | 75 6c 20 77 68 65 6e 20 61 20 6d 6f 64 65 6d 20 67 69 76 65 73 20 61 20 6c 6f 63 61 6c 20 49 50 | ul.when.a.modem.gives.a.local.IP |
60480 | 20 77 68 65 6e 20 66 69 72 73 74 20 73 74 61 72 74 69 6e 67 2e 00 52 65 6d 65 6d 62 65 72 20 73 | .when.first.starting..Remember.s |
604a0 | 6f 75 72 63 65 20 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 72 65 73 65 74 | ource.IP.in.seconds.before.reset |
604c0 | 20 74 68 65 69 72 20 73 63 6f 72 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 | .their.score..The.default.is.180 |
604e0 | 30 2e 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 | 0..Remote.Access.Remote.Access." |
60500 | 52 6f 61 64 57 61 72 72 69 6f 72 22 20 45 78 61 6d 70 6c 65 00 52 65 6d 6f 74 65 20 41 63 63 65 | RoadWarrior".Example.Remote.Acce |
60520 | 73 73 20 22 52 6f 61 64 57 61 72 72 69 6f 72 22 20 63 6c 69 65 6e 74 73 00 52 65 6d 6f 74 65 20 | ss."RoadWarrior".clients.Remote. |
60540 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a 00 52 65 6d 6f 74 | Configuration.-.Annotated:.Remot |
60560 | 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 52 65 6d 6f 74 65 20 48 6f 73 74 00 52 65 6d | e.Configuration:.Remote.Host.Rem |
60580 | 6f 74 65 20 55 52 4c 00 52 65 6d 6f 74 65 20 55 52 4c 20 74 6f 20 53 70 6c 75 6e 6b 20 63 6f 6c | ote.URL.Remote.URL.to.Splunk.col |
605a0 | 6c 65 63 74 6f 72 00 52 65 6d 6f 74 65 20 55 52 4c 2e 00 52 65 6d 6f 74 65 20 60 60 49 6e 66 6c | lector.Remote.URL..Remote.``Infl |
605c0 | 75 78 44 42 60 60 20 62 75 63 6b 65 74 20 6e 61 6d 65 00 52 65 6d 6f 74 65 20 64 61 74 61 62 61 | uxDB``.bucket.name.Remote.databa |
605e0 | 73 65 20 6e 61 6d 65 2e 00 52 65 6d 6f 74 65 20 70 65 65 72 20 49 50 20 60 3c 61 64 64 72 65 73 | se.name..Remote.peer.IP.`<addres |
60600 | 73 3e 60 20 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 44 48 43 50 20 73 65 72 76 65 72 20 69 6e | s>`.of.the.second.DHCP.server.in |
60620 | 20 74 68 69 73 20 48 41 20 63 6c 75 73 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 65 65 72 20 49 50 | .this.HA.cluster..Remote.peer.IP |
60640 | 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 44 48 43 50 20 | .`<address>`.of.the.second.DHCP. |
60660 | 73 65 72 76 65 72 20 69 6e 20 74 68 69 73 20 66 61 69 6c 6f 76 65 72 20 63 6c 75 73 74 65 72 2e | server.in.this.failover.cluster. |
60680 | 00 52 65 6d 6f 74 65 20 70 6f 72 74 00 52 65 6d 6f 74 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e | .Remote.port.Remote.transmission |
606a0 | 20 69 6e 74 65 72 76 61 6c 20 77 69 6c 6c 20 62 65 20 6d 75 6c 74 69 70 6c 69 65 64 20 62 79 20 | .interval.will.be.multiplied.by. |
606c0 | 74 68 69 73 20 76 61 6c 75 65 00 52 65 6e 61 6d 69 6e 67 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 | this.value.Renaming.clients.inte |
606e0 | 72 66 61 63 65 73 20 62 79 20 52 41 44 49 55 53 00 52 65 70 65 61 74 20 74 68 65 20 70 72 6f 63 | rfaces.by.RADIUS.Repeat.the.proc |
60700 | 65 64 75 72 65 20 6f 6e 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 52 65 70 6c 61 | edure.on.the.other.router..Repla |
60720 | 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 52 65 71 75 65 73 74 20 6f 6e 6c 79 20 61 20 74 65 6d 70 | y.protection.Request.only.a.temp |
60740 | 6f 72 61 72 79 20 61 64 64 72 65 73 73 20 61 6e 64 20 6e 6f 74 20 66 6f 72 6d 20 61 6e 20 49 41 | orary.address.and.not.form.an.IA |
60760 | 5f 4e 41 20 28 49 64 65 6e 74 69 74 79 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 66 6f 72 20 4e 6f | _NA.(Identity.Association.for.No |
60780 | 6e 2d 74 65 6d 70 6f 72 61 72 79 20 41 64 64 72 65 73 73 65 73 29 20 70 61 72 74 6e 65 72 73 68 | n-temporary.Addresses).partnersh |
607a0 | 69 70 2e 00 52 65 71 75 65 73 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f 75 | ip..Requests.are.forwarded.throu |
607c0 | 67 68 20 60 60 65 74 68 32 60 60 20 61 73 20 74 68 65 20 60 75 70 73 74 72 65 61 6d 20 69 6e 74 | gh.``eth2``.as.the.`upstream.int |
607e0 | 65 72 66 61 63 65 60 00 52 65 71 75 69 72 65 20 74 68 65 20 70 65 65 72 20 74 6f 20 61 75 74 68 | erface`.Require.the.peer.to.auth |
60800 | 65 6e 74 69 63 61 74 65 20 69 74 73 65 6c 66 20 75 73 69 6e 67 20 6f 6e 65 20 6f 66 20 74 68 65 | enticate.itself.using.one.of.the |
60820 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 70 61 70 2c 20 63 68 61 70 2c | .following.protocols:.pap,.chap, |
60840 | 20 6d 73 63 68 61 70 2c 20 6d 73 63 68 61 70 2d 76 32 2e 00 52 65 71 75 69 72 65 6d 65 6e 74 73 | .mschap,.mschap-v2..Requirements |
60860 | 00 52 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 79 6e 70 72 6f 78 79 | .Requirements.to.enable.synproxy |
60880 | 3a 00 52 65 71 75 69 72 65 6d 65 6e 74 73 3a 00 52 65 73 65 74 00 52 65 73 65 74 20 4f 70 65 6e | :.Requirements:.Reset.Reset.Open |
608a0 | 56 50 4e 00 52 65 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 52 65 73 65 74 73 20 74 68 65 20 6c 6f | VPN.Reset.commands.Resets.the.lo |
608c0 | 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 20 64 61 74 61 62 61 73 | cal.DNS.forwarding.cache.databas |
608e0 | 65 2e 20 59 6f 75 20 63 61 6e 20 72 65 73 65 74 20 74 68 65 20 63 61 63 68 65 20 66 6f 72 20 61 | e..You.can.reset.the.cache.for.a |
60900 | 6c 6c 20 65 6e 74 72 69 65 73 20 6f 72 20 6f 6e 6c 79 20 66 6f 72 20 65 6e 74 72 69 65 73 20 74 | ll.entries.or.only.for.entries.t |
60920 | 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 2e 00 52 65 73 74 61 72 74 00 52 65 73 | o.a.specific.domain..Restart.Res |
60940 | 74 61 72 74 20 44 48 43 50 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 00 52 65 73 74 61 72 74 20 | tart.DHCP.relay.service.Restart. |
60960 | 44 48 43 50 76 36 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 | DHCPv6.relay.agent.immediately.. |
60980 | 52 65 73 74 61 72 74 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 52 65 73 74 61 72 | Restart.a.given.container.Restar |
609a0 | 74 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 52 65 73 74 61 72 74 | t.mDNS.repeater.service..Restart |
609c0 | 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 00 52 65 73 74 61 72 74 20 74 68 65 20 49 47 4d | .the.DHCP.server.Restart.the.IGM |
609e0 | 50 20 70 72 6f 78 79 20 70 72 6f 63 65 73 73 2e 00 52 65 73 74 61 72 74 20 74 68 65 20 53 53 48 | P.proxy.process..Restart.the.SSH |
60a00 | 20 64 61 65 6d 6f 6e 20 70 72 6f 63 65 73 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 65 73 | .daemon.process,.the.current.ses |
60a20 | 73 69 6f 6e 20 69 73 20 6e 6f 74 20 61 66 66 65 63 74 65 64 2c 20 6f 6e 6c 79 20 74 68 65 20 62 | sion.is.not.affected,.only.the.b |
60a40 | 61 63 6b 67 72 6f 75 6e 64 20 64 61 65 6d 6f 6e 20 69 73 20 72 65 73 74 61 72 74 65 64 2e 00 52 | ackground.daemon.is.restarted..R |
60a60 | 65 73 74 61 72 74 73 20 74 68 65 20 44 4e 53 20 72 65 63 75 72 73 6f 72 20 70 72 6f 63 65 73 73 | estarts.the.DNS.recursor.process |
60a80 | 2e 20 54 68 69 73 20 61 6c 73 6f 20 69 6e 76 61 6c 69 64 61 74 65 73 20 74 68 65 20 6c 6f 63 61 | ..This.also.invalidates.the.loca |
60aa0 | 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 69 6e 67 20 63 61 63 68 65 2e 00 52 65 73 75 6c 74 69 6e | l.DNS.forwarding.cache..Resultin |
60ac0 | 67 20 69 6e 00 52 65 73 75 6c 74 73 20 69 6e 3a 00 52 65 74 72 61 6e 73 6d 69 74 20 54 69 6d 65 | g.in.Results.in:.Retransmit.Time |
60ae0 | 72 00 52 65 74 72 69 65 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 69 73 74 69 63 73 20 6f 66 | r.Retrieve.current.statistics.of |
60b00 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 | .connection.tracking.subsystem.. |
60b20 | 52 65 74 72 69 65 76 65 20 63 75 72 72 65 6e 74 20 73 74 61 74 75 73 20 6f 66 20 63 6f 6e 6e 65 | Retrieve.current.status.of.conne |
60b40 | 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 74 72 69 65 | ction.tracking.subsystem..Retrie |
60b60 | 76 65 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 72 6f 6d 20 63 6f 6e 66 69 | ve.public.key.portion.from.confi |
60b80 | 67 75 72 65 64 20 57 49 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 2e 00 52 65 76 65 72 | gured.WIreGuard.interface..Rever |
60ba0 | 73 65 2d 70 72 6f 78 79 00 52 6f 75 6e 64 20 52 6f 62 69 6e 00 52 6f 75 74 65 20 41 67 67 72 65 | se-proxy.Round.Robin.Route.Aggre |
60bc0 | 67 61 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 44 61 6d 70 65 | gation.Configuration.Route.Dampe |
60be0 | 6e 69 6e 67 00 52 6f 75 74 65 20 46 69 6c 74 65 72 69 6e 67 00 52 6f 75 74 65 20 46 69 6c 74 65 | ning.Route.Filtering.Route.Filte |
60c00 | 72 69 6e 67 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 4d 61 70 00 52 6f 75 | ring.Configuration.Route.Map.Rou |
60c20 | 74 65 20 4d 61 70 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 52 65 64 69 73 74 72 69 62 75 74 69 | te.Map.Policy.Route.Redistributi |
60c40 | 6f 6e 00 52 6f 75 74 65 20 52 65 66 6c 65 63 74 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | on.Route.Reflector.Configuration |
60c60 | 00 52 6f 75 74 65 20 53 65 6c 65 63 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 69 6f 6e | .Route.Selection.Route.Selection |
60c80 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 61 6e 64 20 52 6f 75 74 65 36 20 | .Configuration.Route.and.Route6. |
60ca0 | 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 77 69 63 68 20 64 65 73 63 | Policy.Route.dampening.wich.desc |
60cc0 | 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 34 33 39 60 20 65 6e 61 62 6c 65 73 20 79 6f 75 | ribed.in.:rfc:`2439`.enables.you |
60ce0 | 20 74 6f 20 69 64 65 6e 74 69 66 79 20 72 6f 75 74 65 73 20 74 68 61 74 20 72 65 70 65 61 74 65 | .to.identify.routes.that.repeate |
60d00 | 64 6c 79 20 66 61 69 6c 20 61 6e 64 20 72 65 74 75 72 6e 2e 20 49 66 20 72 6f 75 74 65 20 64 61 | dly.fail.and.return..If.route.da |
60d20 | 6d 70 65 6e 69 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 61 6e 20 75 6e 73 74 61 62 6c 65 20 | mpening.is.enabled,.an.unstable. |
60d40 | 72 6f 75 74 65 20 61 63 63 75 6d 75 6c 61 74 65 73 20 70 65 6e 61 6c 74 69 65 73 20 65 61 63 68 | route.accumulates.penalties.each |
60d60 | 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e | .time.the.route.fails.and.return |
60d80 | 73 2e 20 49 66 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 69 65 73 20 | s..If.the.accumulated.penalties. |
60da0 | 65 78 63 65 65 64 20 61 20 74 68 72 65 73 68 6f 6c 64 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 | exceed.a.threshold,.the.route.is |
60dc0 | 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 69 73 20 69 73 20 72 | .no.longer.advertised..This.is.r |
60de0 | 6f 75 74 65 20 73 75 70 70 72 65 73 73 69 6f 6e 2e 20 52 6f 75 74 65 73 20 74 68 61 74 20 68 61 | oute.suppression..Routes.that.ha |
60e00 | 76 65 20 62 65 65 6e 20 73 75 70 70 72 65 73 73 65 64 20 61 72 65 20 72 65 2d 65 6e 74 65 72 65 | ve.been.suppressed.are.re-entere |
60e20 | 64 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 6f 6e 6c 79 20 77 68 | d.into.the.routing.table.only.wh |
60e40 | 65 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 68 65 69 72 20 70 65 6e 61 6c 74 79 20 66 | en.the.amount.of.their.penalty.f |
60e60 | 61 6c 6c 73 20 62 65 6c 6f 77 20 61 20 74 68 72 65 73 68 6f 6c 64 2e 00 52 6f 75 74 65 20 66 69 | alls.below.a.threshold..Route.fi |
60e80 | 6c 74 65 72 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 75 73 69 6e 67 20 61 20 72 6f 75 74 | lter.can.be.applied.using.a.rout |
60ea0 | 65 2d 6d 61 70 3a 00 52 6f 75 74 65 20 6d 61 70 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 6c 20 | e-map:.Route.map.is.a.powerfull. |
60ec0 | 63 6f 6d 6d 61 6e 64 2c 20 74 68 61 74 20 67 69 76 65 73 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 | command,.that.gives.network.admi |
60ee0 | 6e 69 73 74 72 61 74 6f 72 73 20 61 20 76 65 72 79 20 75 73 65 66 75 6c 20 61 6e 64 20 66 6c 65 | nistrators.a.very.useful.and.fle |
60f00 | 78 69 62 6c 65 20 74 6f 6f 6c 20 66 6f 72 20 74 72 61 66 66 69 63 20 6d 61 6e 69 70 75 6c 61 74 | xible.tool.for.traffic.manipulat |
60f20 | 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 61 70 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | ion..Route.maps.can.be.configure |
60f40 | 64 20 74 6f 20 6d 61 74 63 68 20 61 20 73 70 65 63 69 66 69 63 20 52 50 4b 49 20 76 61 6c 69 64 | d.to.match.a.specific.RPKI.valid |
60f60 | 61 74 69 6f 6e 20 73 74 61 74 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 63 72 65 | ation.state..This.allows.the.cre |
60f80 | 61 74 69 6f 6e 20 6f 66 20 6c 6f 63 61 6c 20 70 6f 6c 69 63 69 65 73 2c 20 77 68 69 63 68 20 68 | ation.of.local.policies,.which.h |
60fa0 | 61 6e 64 6c 65 20 42 47 50 20 72 6f 75 74 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6f 75 | andle.BGP.routes.based.on.the.ou |
60fc0 | 74 63 6f 6d 65 20 6f 66 20 74 68 65 20 50 72 65 66 69 78 20 4f 72 69 67 69 6e 20 56 61 6c 69 64 | tcome.of.the.Prefix.Origin.Valid |
60fe0 | 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 65 74 72 69 63 00 52 6f 75 74 65 20 74 61 67 20 74 6f | ation..Route.metric.Route.tag.to |
61000 | 20 6d 61 74 63 68 2e 00 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 00 52 6f | .match..Router.Advertisements.Ro |
61020 | 75 74 65 72 20 4c 69 66 65 74 69 6d 65 00 52 6f 75 74 65 72 20 72 65 63 65 69 76 65 73 20 44 48 | uter.Lifetime.Router.receives.DH |
61040 | 43 50 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 20 6f 6e 20 60 60 65 74 68 31 60 60 20 61 | CP.client.requests.on.``eth1``.a |
61060 | 6e 64 20 72 65 6c 61 79 73 20 74 68 65 6d 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 61 74 20 | nd.relays.them.to.the.server.at. |
61080 | 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e 00 52 6f 75 74 65 73 20 65 78 70 | 10.0.1.4.on.``eth2``..Routes.exp |
610a0 | 6f 72 74 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 74 68 65 20 | orted.from.a.unicast.VRF.to.the. |
610c0 | 56 50 4e 20 52 49 42 20 6d 75 73 74 20 62 65 20 61 75 67 6d 65 6e 74 65 64 20 62 79 20 74 77 6f | VPN.RIB.must.be.augmented.by.two |
610e0 | 20 70 61 72 61 6d 65 74 65 72 73 3a 00 52 6f 75 74 65 73 20 6f 6e 20 4e 6f 64 65 20 32 3a 00 52 | .parameters:.Routes.on.Node.2:.R |
61100 | 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 73 65 6e 74 20 66 72 6f 6d 20 70 72 6f 76 69 64 65 | outes.that.are.sent.from.provide |
61120 | 72 2c 20 72 73 2d 73 65 72 76 65 72 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d | r,.rs-server,.or.the.peer.local- |
61140 | 72 6f 6c 65 20 28 6f 72 20 69 66 20 72 65 63 65 69 76 65 64 20 62 79 20 63 75 73 74 6f 6d 65 72 | role.(or.if.received.by.customer |
61160 | 2c 20 72 73 2d 63 6c 69 65 6e 74 2c 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d 72 | ,.rs-client,.or.the.peer.local-r |
61180 | 6f 6c 65 29 20 77 69 6c 6c 20 62 65 20 6d 61 72 6b 65 64 20 77 69 74 68 20 61 20 6e 65 77 20 4f | ole).will.be.marked.with.a.new.O |
611a0 | 6e 6c 79 20 74 6f 20 43 75 73 74 6f 6d 65 72 20 28 4f 54 43 29 20 61 74 74 72 69 62 75 74 65 2e | nly.to.Customer.(OTC).attribute. |
611c0 | 00 52 6f 75 74 65 73 20 77 69 74 68 20 61 20 64 69 73 74 61 6e 63 65 20 6f 66 20 32 35 35 20 61 | .Routes.with.a.distance.of.255.a |
611e0 | 72 65 20 65 66 66 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 64 20 61 6e 64 20 6e 6f 74 20 | re.effectively.disabled.and.not. |
61200 | 69 6e 73 74 61 6c 6c 65 64 20 69 6e 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 52 6f 75 74 65 | installed.into.the.kernel..Route |
61220 | 73 20 77 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 63 61 6e 20 6f 6e 6c 79 20 62 | s.with.this.attribute.can.only.b |
61240 | 65 20 73 65 6e 74 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 69 66 20 79 6f 75 72 20 | e.sent.to.your.neighbor.if.your. |
61260 | 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 70 72 6f 76 69 64 65 72 20 6f 72 20 72 73 2d 73 65 72 | local-role.is.provider.or.rs-ser |
61280 | 76 65 72 2e 20 52 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 | ver..Routes.with.this.attribute. |
612a0 | 63 61 6e 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 79 6f 75 72 20 6c 6f 63 | can.be.received.only.if.your.loc |
612c0 | 61 6c 2d 72 6f 6c 65 20 69 73 20 63 75 73 74 6f 6d 65 72 20 6f 72 20 72 73 2d 63 6c 69 65 6e 74 | al-role.is.customer.or.rs-client |
612e0 | 2e 00 52 6f 75 74 69 6e 65 00 52 6f 75 74 69 6e 67 00 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 | ..Routine.Routing.Routing.tables |
61300 | 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 | .that.will.be.used.in.this.examp |
61320 | 6c 65 20 61 72 65 3a 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 | le.are:.Rule.10.matches.requests |
61340 | 20 77 69 74 68 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 31 2e 65 78 | .with.the.domain.name.``node1.ex |
61360 | 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b | ample.com``.forwards.to.the.back |
61380 | 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d 30 31 60 60 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 | end.``bk-api-01``.Rule.10.matche |
613a0 | 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 65 78 61 63 74 20 55 52 4c 20 70 61 | s.requests.with.the.exact.URL.pa |
613c0 | 74 68 20 60 60 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 78 78 78 60 60 20 61 6e 64 20 72 65 64 69 | th.``/.well-known/xxx``.and.redi |
613e0 | 72 65 63 74 73 20 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 63 65 72 74 73 2f 60 60 2e 00 52 | rects.to.location.``/certs/``..R |
61400 | 75 6c 65 20 31 31 30 20 69 73 20 68 69 74 2c 20 73 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 | ule.110.is.hit,.so.connection.is |
61420 | 20 61 63 63 65 70 74 65 64 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 | .accepted..Rule.20.matches.reque |
61440 | 73 74 73 20 77 69 74 68 20 55 52 4c 20 70 61 74 68 73 20 65 6e 64 69 6e 67 20 69 6e 20 60 60 2f | sts.with.URL.paths.ending.in.``/ |
61460 | 6d 61 69 6c 60 60 20 6f 72 20 65 78 61 63 74 20 70 61 74 68 20 60 60 2f 65 6d 61 69 6c 2f 62 61 | mail``.or.exact.path.``/email/ba |
61480 | 72 60 60 20 72 65 64 69 72 65 63 74 20 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 70 6f 73 74 | r``.redirect.to.location.``/post |
614a0 | 66 69 78 2f 60 60 2e 00 52 75 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 | fix/``..Rule.20.matches.requests |
614c0 | 20 77 69 74 68 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 32 2e 65 78 | .with.the.domain.name.``node2.ex |
614e0 | 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b | ample.com``.forwards.to.the.back |
61500 | 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d 30 32 60 60 00 52 75 6c 65 20 53 74 61 74 75 73 00 52 75 | end.``bk-api-02``.Rule.Status.Ru |
61520 | 6c 65 2d 53 65 74 73 00 52 75 6c 65 2d 73 65 74 20 6f 76 65 72 76 69 65 77 00 52 75 6c 65 73 00 | le-Sets.Rule-set.overview.Rules. |
61540 | 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 72 6f 75 74 65 | Rules.allow.to.control.and.route |
61560 | 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 62 61 | .incoming.traffic.to.specific.ba |
61580 | 63 6b 65 6e 64 20 62 61 73 65 64 20 6f 6e 20 70 72 65 64 65 66 69 6e 65 64 20 63 6f 6e 64 69 74 | ckend.based.on.predefined.condit |
615a0 | 69 6f 6e 73 2e 20 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 6f 20 64 65 66 69 6e 65 20 6d 61 74 63 | ions..Rules.allow.to.define.matc |
615c0 | 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 63 74 69 6f 6e | hing.criteria.and.perform.action |
615e0 | 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 00 52 75 6c 65 73 20 77 69 6c 6c 20 62 65 20 63 72 65 61 | .accordingly..Rules.will.be.crea |
61600 | 74 65 64 20 66 6f 72 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 | ted.for.both.:ref:`source-nat`.a |
61620 | 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 00 52 75 6e 6e 69 | nd.:ref:`destination-nat`..Runni |
61640 | 6e 67 20 42 65 68 69 6e 64 20 4e 41 54 00 53 4e 41 54 00 53 4e 41 54 36 34 00 53 4e 41 54 36 36 | ng.Behind.NAT.SNAT.SNAT64.SNAT66 |
61660 | 00 53 4e 4d 50 00 53 4e 4d 50 20 45 78 74 65 6e 73 69 6f 6e 73 00 53 4e 4d 50 20 50 72 6f 74 6f | .SNMP.SNMP.Extensions.SNMP.Proto |
61680 | 63 6f 6c 20 56 65 72 73 69 6f 6e 73 00 53 4e 4d 50 20 63 61 6e 20 77 6f 72 6b 20 73 79 6e 63 68 | col.Versions.SNMP.can.work.synch |
616a0 | 72 6f 6e 6f 75 73 6c 79 20 6f 72 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 2e 20 49 6e 20 73 | ronously.or.asynchronously..In.s |
616c0 | 79 6e 63 68 72 6f 6e 6f 75 73 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 6d 6f | ynchronous.communication,.the.mo |
616e0 | 6e 69 74 6f 72 69 6e 67 20 73 79 73 74 65 6d 20 71 75 65 72 69 65 73 20 74 68 65 20 72 6f 75 74 | nitoring.system.queries.the.rout |
61700 | 65 72 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 2e 20 49 6e 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 | er.periodically..In.asynchronous |
61720 | 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 65 6e 64 73 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 | ,.the.router.sends.notification. |
61740 | 74 6f 20 74 68 65 20 22 74 72 61 70 22 20 28 74 68 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 68 6f | to.the."trap".(the.monitoring.ho |
61760 | 73 74 29 2e 00 53 4e 4d 50 20 69 73 20 61 20 63 6f 6d 70 6f 6e 65 6e 74 20 6f 66 20 74 68 65 20 | st)..SNMP.is.a.component.of.the. |
61780 | 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 53 75 69 74 65 20 61 73 20 64 65 66 69 6e | Internet.Protocol.Suite.as.defin |
617a0 | 65 64 20 62 79 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 54 | ed.by.the.Internet.Engineering.T |
617c0 | 61 73 6b 20 46 6f 72 63 65 20 28 49 45 54 46 29 2e 20 49 74 20 63 6f 6e 73 69 73 74 73 20 6f 66 | ask.Force.(IETF)..It.consists.of |
617e0 | 20 61 20 73 65 74 20 6f 66 20 73 74 61 6e 64 61 72 64 73 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 | .a.set.of.standards.for.network. |
61800 | 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 61 70 70 6c 69 63 61 | management,.including.an.applica |
61820 | 74 69 6f 6e 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 20 64 61 74 61 62 61 73 65 20 | tion.layer.protocol,.a.database. |
61840 | 73 63 68 65 6d 61 2c 20 61 6e 64 20 61 20 73 65 74 20 6f 66 20 64 61 74 61 20 6f 62 6a 65 63 74 | schema,.and.a.set.of.data.object |
61860 | 73 2e 00 53 4e 4d 50 20 69 73 20 77 69 64 65 6c 79 20 75 73 65 64 20 69 6e 20 6e 65 74 77 6f 72 | s..SNMP.is.widely.used.in.networ |
61880 | 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 6f 6e 69 74 6f 72 | k.management.for.network.monitor |
618a0 | 69 6e 67 2e 20 53 4e 4d 50 20 65 78 70 6f 73 65 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 64 61 74 | ing..SNMP.exposes.management.dat |
618c0 | 61 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 76 61 72 69 61 62 6c 65 73 20 6f 6e 20 74 68 | a.in.the.form.of.variables.on.th |
618e0 | 65 20 6d 61 6e 61 67 65 64 20 73 79 73 74 65 6d 73 20 6f 72 67 61 6e 69 7a 65 64 20 69 6e 20 61 | e.managed.systems.organized.in.a |
61900 | 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 61 73 65 20 28 4d 49 | .management.information.base.(MI |
61920 | 42 5f 29 20 77 68 69 63 68 20 64 65 73 63 72 69 62 65 20 74 68 65 20 73 79 73 74 65 6d 20 73 74 | B_).which.describe.the.system.st |
61940 | 61 74 75 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 73 65 20 76 61 | atus.and.configuration..These.va |
61960 | 72 69 61 62 6c 65 73 20 63 61 6e 20 74 68 65 6e 20 62 65 20 72 65 6d 6f 74 65 6c 79 20 71 75 65 | riables.can.then.be.remotely.que |
61980 | 72 69 65 64 20 28 61 6e 64 2c 20 69 6e 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 | ried.(and,.in.some.circumstances |
619a0 | 2c 20 6d 61 6e 69 70 75 6c 61 74 65 64 29 20 62 79 20 6d 61 6e 61 67 69 6e 67 20 61 70 70 6c 69 | ,.manipulated).by.managing.appli |
619c0 | 63 61 74 69 6f 6e 73 2e 00 53 4e 4d 50 76 32 00 53 4e 4d 50 76 32 20 64 6f 65 73 20 6e 6f 74 20 | cations..SNMPv2.SNMPv2.does.not. |
619e0 | 73 75 70 70 6f 72 74 20 61 6e 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 63 68 61 | support.any.authentication.mecha |
61a00 | 6e 69 73 6d 73 2c 20 6f 74 68 65 72 20 74 68 61 6e 20 63 6c 69 65 6e 74 20 73 6f 75 72 63 65 20 | nisms,.other.than.client.source. |
61a20 | 61 64 64 72 65 73 73 2c 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 69 66 79 20 61 | address,.so.you.should.specify.a |
61a40 | 64 64 72 65 73 73 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6d | ddresses.of.clients.allowed.to.m |
61a60 | 6f 6e 69 74 6f 72 20 74 68 65 20 72 6f 75 74 65 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 53 4e 4d | onitor.the.router..Note.that.SNM |
61a80 | 50 76 32 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 6e 6f 20 65 6e 63 72 79 70 74 69 6f 6e 20 | Pv2.also.supports.no.encryption. |
61aa0 | 61 6e 64 20 61 6c 77 61 79 73 20 73 65 6e 64 73 20 64 61 74 61 20 69 6e 20 70 6c 61 69 6e 20 74 | and.always.sends.data.in.plain.t |
61ac0 | 65 78 74 2e 00 53 4e 4d 50 76 32 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 61 6e 64 20 | ext..SNMPv2.is.the.original.and. |
61ae0 | 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 76 65 72 73 69 6f 6e 2e 20 46 6f 72 20 | most.commonly.used.version..For. |
61b00 | 61 75 74 68 6f 72 69 7a 69 6e 67 20 63 6c 69 65 6e 74 73 2c 20 53 4e 4d 50 20 75 73 65 73 20 74 | authorizing.clients,.SNMP.uses.t |
61b20 | 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 43 6f 6d 6d 75 | he.concept.of.communities..Commu |
61b40 | 6e 69 74 69 65 73 20 6d 61 79 20 68 61 76 65 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 73 65 | nities.may.have.authorization.se |
61b60 | 74 20 74 6f 20 72 65 61 64 20 6f 6e 6c 79 20 28 74 68 69 73 20 69 73 20 6d 6f 73 74 20 63 6f 6d | t.to.read.only.(this.is.most.com |
61b80 | 6d 6f 6e 29 20 6f 72 20 74 6f 20 72 65 61 64 20 61 6e 64 20 77 72 69 74 65 20 28 74 68 69 73 20 | mon).or.to.read.and.write.(this. |
61ba0 | 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 61 63 74 69 76 65 6c 79 20 75 73 65 64 20 69 6e 20 56 | option.is.not.actively.used.in.V |
61bc0 | 79 4f 53 29 2e 00 53 4e 4d 50 76 33 00 53 4e 4d 50 76 33 20 28 76 65 72 73 69 6f 6e 20 33 20 6f | yOS)..SNMPv3.SNMPv3.(version.3.o |
61be0 | 66 20 74 68 65 20 53 4e 4d 50 20 70 72 6f 74 6f 63 6f 6c 29 20 69 6e 74 72 6f 64 75 63 65 64 20 | f.the.SNMP.protocol).introduced. |
61c00 | 61 20 77 68 6f 6c 65 20 73 6c 65 77 20 6f 66 20 6e 65 77 20 73 65 63 75 72 69 74 79 20 72 65 6c | a.whole.slew.of.new.security.rel |
61c20 | 61 74 65 64 20 66 65 61 74 75 72 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 6d 69 73 | ated.features.that.have.been.mis |
61c40 | 73 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 76 65 72 73 69 6f 6e 73 2e | sing.from.the.previous.versions. |
61c60 | 20 53 65 63 75 72 69 74 79 20 77 61 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 69 67 67 65 73 74 | .Security.was.one.of.the.biggest |
61c80 | 20 77 65 61 6b 6e 65 73 73 20 6f 66 20 53 4e 4d 50 20 75 6e 74 69 6c 20 76 33 2e 20 41 75 74 68 | .weakness.of.SNMP.until.v3..Auth |
61ca0 | 65 6e 74 69 63 61 74 69 6f 6e 20 69 6e 20 53 4e 4d 50 20 56 65 72 73 69 6f 6e 73 20 31 20 61 6e | entication.in.SNMP.Versions.1.an |
61cc0 | 64 20 32 20 61 6d 6f 75 6e 74 73 20 74 6f 20 6e 6f 74 68 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e | d.2.amounts.to.nothing.more.than |
61ce0 | 20 61 20 70 61 73 73 77 6f 72 64 20 28 63 6f 6d 6d 75 6e 69 74 79 20 73 74 72 69 6e 67 29 20 73 | .a.password.(community.string).s |
61d00 | 65 6e 74 20 69 6e 20 63 6c 65 61 72 20 74 65 78 74 20 62 65 74 77 65 65 6e 20 61 20 6d 61 6e 61 | ent.in.clear.text.between.a.mana |
61d20 | 67 65 72 20 61 6e 64 20 61 67 65 6e 74 2e 20 45 61 63 68 20 53 4e 4d 50 76 33 20 6d 65 73 73 61 | ger.and.agent..Each.SNMPv3.messa |
61d40 | 67 65 20 63 6f 6e 74 61 69 6e 73 20 73 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 73 20 | ge.contains.security.parameters. |
61d60 | 77 68 69 63 68 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 61 6e 20 6f 63 74 65 74 20 73 74 | which.are.encoded.as.an.octet.st |
61d80 | 72 69 6e 67 2e 20 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 73 65 20 73 65 63 75 72 | ring..The.meaning.of.these.secur |
61da0 | 69 74 79 20 70 61 72 61 6d 65 74 65 72 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 73 65 | ity.parameters.depends.on.the.se |
61dc0 | 63 75 72 69 74 79 20 6d 6f 64 65 6c 20 62 65 69 6e 67 20 75 73 65 64 2e 00 53 50 41 4e 20 70 6f | curity.model.being.used..SPAN.po |
61de0 | 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 63 61 6e 20 63 6f 70 79 20 74 68 65 20 69 6e 62 6f 75 6e | rt.mirroring.can.copy.the.inboun |
61e00 | 64 2f 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 | d/outbound.traffic.of.the.interf |
61e20 | 61 63 65 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 | ace.to.the.specified.interface,. |
61e40 | 75 73 75 61 6c 6c 79 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 63 6f 6e | usually.the.interface.can.be.con |
61e60 | 6e 65 63 74 65 64 20 74 6f 20 73 6f 6d 65 20 73 70 65 63 69 61 6c 20 65 71 75 69 70 6d 65 6e 74 | nected.to.some.special.equipment |
61e80 | 2c 20 73 75 63 68 20 61 73 20 62 65 68 61 76 69 6f 72 20 63 6f 6e 74 72 6f 6c 20 73 79 73 74 65 | ,.such.as.behavior.control.syste |
61ea0 | 6d 2c 20 69 6e 74 72 75 73 69 6f 6e 20 64 65 74 65 63 74 69 6f 6e 20 73 79 73 74 65 6d 20 61 6e | m,.intrusion.detection.system.an |
61ec0 | 64 20 74 72 61 66 66 69 63 20 63 6f 6c 6c 65 63 74 6f 72 2c 20 61 6e 64 20 63 61 6e 20 63 6f 70 | d.traffic.collector,.and.can.cop |
61ee0 | 79 20 61 6c 6c 20 72 65 6c 61 74 65 64 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 69 73 20 | y.all.related.traffic.from.this. |
61f00 | 70 6f 72 74 2e 20 54 68 65 20 62 65 6e 65 66 69 74 20 6f 66 20 6d 69 72 72 6f 72 69 6e 67 20 74 | port..The.benefit.of.mirroring.t |
61f20 | 68 65 20 74 72 61 66 66 69 63 20 69 73 20 74 68 61 74 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 | he.traffic.is.that.the.applicati |
61f40 | 6f 6e 20 69 73 20 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 73 6f 75 72 63 65 20 74 | on.is.isolated.from.the.source.t |
61f60 | 72 61 66 66 69 63 20 61 6e 64 20 73 6f 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 | raffic.and.so.application.proces |
61f80 | 73 69 6e 67 20 64 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 | sing.does.not.affect.the.traffic |
61fa0 | 20 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 53 53 48 00 | .or.the.system.performance..SSH. |
61fc0 | 53 53 48 20 3a 72 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e 74 69 | SSH.:ref:`ssh_key_based_authenti |
61fe0 | 63 61 74 69 6f 6e 60 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 5f 6f 70 65 72 61 74 69 6f 6e 60 | cation`.SSH.:ref:`ssh_operation` |
62000 | 00 53 53 48 20 63 6c 69 65 6e 74 00 53 53 48 20 70 72 6f 76 69 64 65 73 20 61 20 73 65 63 75 72 | .SSH.client.SSH.provides.a.secur |
62020 | 65 20 63 68 61 6e 6e 65 6c 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 | e.channel.over.an.unsecured.netw |
62040 | 6f 72 6b 20 69 6e 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 61 72 63 68 69 74 65 63 74 | ork.in.a.client-server.architect |
62060 | 75 72 65 2c 20 63 6f 6e 6e 65 63 74 69 6e 67 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 61 70 | ure,.connecting.an.SSH.client.ap |
62080 | 70 6c 69 63 61 74 69 6f 6e 20 77 69 74 68 20 61 6e 20 53 53 48 20 73 65 72 76 65 72 2e 20 43 6f | plication.with.an.SSH.server..Co |
620a0 | 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 69 6e 63 6c 75 64 65 20 72 65 6d 6f 74 65 | mmon.applications.include.remote |
620c0 | 20 63 6f 6d 6d 61 6e 64 2d 6c 69 6e 65 20 6c 6f 67 69 6e 20 61 6e 64 20 72 65 6d 6f 74 65 20 63 | .command-line.login.and.remote.c |
620e0 | 6f 6d 6d 61 6e 64 20 65 78 65 63 75 74 69 6f 6e 2c 20 62 75 74 20 61 6e 79 20 6e 65 74 77 6f 72 | ommand.execution,.but.any.networ |
62100 | 6b 20 73 65 72 76 69 63 65 20 63 61 6e 20 62 65 20 73 65 63 75 72 65 64 20 77 69 74 68 20 53 53 | k.service.can.be.secured.with.SS |
62120 | 48 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 64 69 | H..The.protocol.specification.di |
62140 | 73 74 69 6e 67 75 69 73 68 65 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 61 6a 6f 72 20 76 65 | stinguishes.between.two.major.ve |
62160 | 72 73 69 6f 6e 73 2c 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 53 53 48 2d 31 20 61 6e 64 | rsions,.referred.to.as.SSH-1.and |
62180 | 20 53 53 48 2d 32 2e 00 53 53 48 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 65 73 74 61 62 6c 69 73 | .SSH-2..SSH.username.to.establis |
621a0 | 68 20 61 6e 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 61 63 68 65 | h.an.SSH.connection.to.the.cache |
621c0 | 20 73 65 72 76 65 72 2e 00 53 53 48 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 61 73 20 61 20 72 | .server..SSH.was.designed.as.a.r |
621e0 | 65 70 6c 61 63 65 6d 65 6e 74 20 66 6f 72 20 54 65 6c 6e 65 74 20 61 6e 64 20 66 6f 72 20 75 6e | eplacement.for.Telnet.and.for.un |
62200 | 73 65 63 75 72 65 64 20 72 65 6d 6f 74 65 20 73 68 65 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 73 | secured.remote.shell.protocols.s |
62220 | 75 63 68 20 61 73 20 74 68 65 20 42 65 72 6b 65 6c 65 79 20 72 6c 6f 67 69 6e 2c 20 72 73 68 2c | uch.as.the.Berkeley.rlogin,.rsh, |
62240 | 20 61 6e 64 20 72 65 78 65 63 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 54 68 6f 73 65 20 70 72 6f 74 | .and.rexec.protocols..Those.prot |
62260 | 6f 63 6f 6c 73 20 73 65 6e 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 6e 6f 74 61 62 6c 79 20 | ocols.send.information,.notably. |
62280 | 70 61 73 73 77 6f 72 64 73 2c 20 69 6e 20 70 6c 61 69 6e 74 65 78 74 2c 20 72 65 6e 64 65 72 69 | passwords,.in.plaintext,.renderi |
622a0 | 6e 67 20 74 68 65 6d 20 73 75 73 63 65 70 74 69 62 6c 65 20 74 6f 20 69 6e 74 65 72 63 65 70 74 | ng.them.susceptible.to.intercept |
622c0 | 69 6f 6e 20 61 6e 64 20 64 69 73 63 6c 6f 73 75 72 65 20 75 73 69 6e 67 20 70 61 63 6b 65 74 20 | ion.and.disclosure.using.packet. |
622e0 | 61 6e 61 6c 79 73 69 73 2e 20 54 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 75 73 65 64 20 62 79 | analysis..The.encryption.used.by |
62300 | 20 53 53 48 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 | .SSH.is.intended.to.provide.conf |
62320 | 69 64 65 6e 74 69 61 6c 69 74 79 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 6f 66 20 64 61 74 | identiality.and.integrity.of.dat |
62340 | 61 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2c 20 73 75 63 | a.over.an.unsecured.network,.suc |
62360 | 68 20 61 73 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 00 53 53 49 44 20 74 6f 20 62 65 20 75 73 | h.as.the.Internet..SSID.to.be.us |
62380 | 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 31 20 6d 61 6e 61 67 65 6d 65 6e 74 20 66 72 61 | ed.in.IEEE.802.11.management.fra |
623a0 | 6d 65 73 00 53 53 4c 20 42 72 69 64 67 69 6e 67 00 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 | mes.SSL.Bridging.SSL.Certificate |
623c0 | 73 00 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 73 20 67 65 6e 65 72 61 74 69 6f 6e 00 53 53 | s.SSL.Certificates.generation.SS |
623e0 | 4c 20 6d 61 74 63 68 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 | L.match.Server.Name.Indication.( |
62400 | 53 4e 49 29 20 6f 70 74 69 6f 6e 3a 00 53 53 54 50 20 43 6c 69 65 6e 74 00 53 53 54 50 20 43 6c | SNI).option:.SSTP.Client.SSTP.Cl |
62420 | 69 65 6e 74 20 4f 70 74 69 6f 6e 73 00 53 53 54 50 20 53 65 72 76 65 72 00 53 53 54 50 20 69 73 | ient.Options.SSTP.Server.SSTP.is |
62440 | 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 4c 69 6e 75 78 2c 20 42 53 44 2c 20 61 6e 64 20 57 | .available.for.Linux,.BSD,.and.W |
62460 | 69 6e 64 6f 77 73 2e 00 53 53 54 50 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 20 74 6f 20 63 6f | indows..SSTP.remote.server.to.co |
62480 | 6e 6e 65 63 74 20 74 6f 2e 20 43 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 | nnect.to..Can.be.either.an.IP.ad |
624a0 | 64 72 65 73 73 20 6f 72 20 46 51 44 4e 2e 00 53 54 50 20 50 61 72 61 6d 65 74 65 72 00 53 61 6c | dress.or.FQDN..STP.Parameter.Sal |
624c0 | 74 2d 4d 69 6e 69 6f 6e 00 53 61 6c 74 53 74 61 63 6b 5f 20 69 73 20 50 79 74 68 6f 6e 2d 62 61 | t-Minion.SaltStack_.is.Python-ba |
624e0 | 73 65 64 2c 20 6f 70 65 6e 2d 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 65 76 | sed,.open-source.software.for.ev |
62500 | 65 6e 74 2d 64 72 69 76 65 6e 20 49 54 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 72 65 6d 6f 74 65 | ent-driven.IT.automation,.remote |
62520 | 20 74 61 73 6b 20 65 78 65 63 75 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 | .task.execution,.and.configurati |
62540 | 6f 6e 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 53 75 70 70 6f 72 74 69 6e 67 20 74 68 65 20 22 69 | on.management..Supporting.the."i |
62560 | 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 61 73 20 63 6f 64 65 22 20 61 70 70 72 6f 61 63 68 20 | nfrastructure.as.code".approach. |
62580 | 74 6f 20 64 61 74 61 20 63 65 6e 74 65 72 20 73 79 73 74 65 6d 20 61 6e 64 20 6e 65 74 77 6f 72 | to.data.center.system.and.networ |
625a0 | 6b 20 64 65 70 6c 6f 79 6d 65 6e 74 20 61 6e 64 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e | k.deployment.and.management,.con |
625c0 | 66 69 67 75 72 61 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 53 65 63 4f 70 73 20 6f 72 | figuration.automation,.SecOps.or |
625e0 | 63 68 65 73 74 72 61 74 69 6f 6e 2c 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 20 72 65 6d 65 64 | chestration,.vulnerability.remed |
62600 | 69 61 74 69 6f 6e 2c 20 61 6e 64 20 68 79 62 72 69 64 20 63 6c 6f 75 64 20 63 6f 6e 74 72 6f 6c | iation,.and.hybrid.cloud.control |
62620 | 2e 00 53 61 6d 65 20 61 73 20 65 78 70 6f 72 74 2d 6c 69 73 74 2c 20 62 75 74 20 69 74 20 61 70 | ..Same.as.export-list,.but.it.ap |
62640 | 70 6c 69 65 73 20 74 6f 20 70 61 74 68 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 6e 74 6f 20 73 70 | plies.to.paths.announced.into.sp |
62660 | 65 63 69 66 69 65 64 20 61 72 65 61 20 61 73 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c | ecified.area.as.Type-3.summary-L |
62680 | 53 41 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e | SAs..This.command.makes.sense.in |
626a0 | 20 41 42 52 20 6f 6e 6c 79 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | .ABR.only..Sample.configuration. |
626c0 | 6f 66 20 53 56 44 20 77 69 74 68 20 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 | of.SVD.with.VLAN.to.VNI.mappings |
626e0 | 20 69 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 | .is.shown.below..Sample.configur |
62700 | 61 74 69 6f 6e 20 74 6f 20 73 65 74 75 70 20 4c 44 50 20 6f 6e 20 56 79 4f 53 00 53 63 61 6e 6e | ation.to.setup.LDP.on.VyOS.Scann |
62720 | 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 61 6c 6c 20 77 69 72 65 | ing.is.not.supported.on.all.wire |
62740 | 6c 65 73 73 20 64 72 69 76 65 72 73 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 | less.drivers.and.wireless.hardwa |
62760 | 72 65 2e 20 52 65 66 65 72 20 74 6f 20 79 6f 75 72 20 64 72 69 76 65 72 20 61 6e 64 20 77 69 72 | re..Refer.to.your.driver.and.wir |
62780 | 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 | eless.hardware.documentation.for |
627a0 | 20 66 75 72 74 68 65 72 20 64 65 74 61 69 6c 73 2e 00 53 63 72 69 70 74 20 65 78 65 63 75 74 69 | .further.details..Script.executi |
627c0 | 6f 6e 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 62 65 66 6f 72 65 20 73 65 73 73 69 6f 6e 20 | on.Script.to.run.before.session. |
627e0 | 69 6e 74 65 72 66 61 63 65 20 63 6f 6d 65 73 20 75 70 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e | interface.comes.up.Script.to.run |
62800 | 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 68 61 6e 67 65 64 20 | .when.session.interface.changed. |
62820 | 62 79 20 52 41 44 49 55 53 20 43 6f 41 20 68 61 6e 64 6c 69 6e 67 00 53 63 72 69 70 74 20 74 6f | by.RADIUS.CoA.handling.Script.to |
62840 | 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 67 6f 69 6e | .run.when.session.interface.goin |
62860 | 67 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 | g.to.terminate.Script.to.run.whe |
62880 | 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c | n.session.interface.is.completel |
628a0 | 79 20 63 6f 6e 66 69 67 75 72 65 64 20 61 6e 64 20 73 74 61 72 74 65 64 00 53 63 72 69 70 74 69 | y.configured.and.started.Scripti |
628c0 | 6e 67 00 53 65 63 6f 6e 64 20 73 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 73 6f 75 72 63 65 | ng.Second.scenario:.apply.source |
628e0 | 20 4e 41 54 20 66 6f 72 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e | .NAT.for.all.outgoing.connection |
62900 | 73 20 66 72 6f 6d 20 4c 41 4e 20 31 30 2e 30 2e 30 2e 30 2f 38 2c 20 75 73 69 6e 67 20 33 20 70 | s.from.LAN.10.0.0.0/8,.using.3.p |
62920 | 75 62 6c 69 63 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 65 71 75 61 6c 20 64 69 73 74 72 69 | ublic.addresses.and.equal.distri |
62940 | 62 75 74 69 6f 6e 2e 20 57 65 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 | bution..We.will.generate.the.has |
62960 | 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 53 65 63 72 65 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 | h.randomly..Secret.for.Dynamic.A |
62980 | 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 | uthorization.Extension.server.(D |
629a0 | 4d 2f 43 6f 41 29 00 53 65 63 75 72 69 74 79 00 53 65 63 75 72 69 74 79 2f 61 75 74 68 65 6e 74 | M/CoA).Security.Security/authent |
629c0 | 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 00 53 65 65 20 3a 72 66 63 3a 60 37 37 36 31 23 | ication.messages.See.:rfc:`7761# |
629e0 | 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 00 53 65 65 20 62 65 | section-4.1`.for.details..See.be |
62a00 | 6c 6f 77 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 | low.the.different.parameters.ava |
62a20 | 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 49 50 76 34 20 2a 2a 73 68 6f 77 2a 2a 20 63 6f 6d | ilable.for.the.IPv4.**show**.com |
62a40 | 6d 61 6e 64 3a 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 00 53 65 67 6d 65 6e 74 20 52 6f | mand:.Segment.Routing.Segment.Ro |
62a60 | 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 | uting.(SR).is.a.network.architec |
62a80 | 74 75 72 65 20 74 68 61 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 6f 75 72 63 65 2d 72 | ture.that.is.similar.to.source-r |
62aa0 | 6f 75 74 69 6e 67 20 2e 20 49 6e 20 74 68 69 73 20 61 72 63 68 69 74 65 63 74 75 72 65 2c 20 74 | outing...In.this.architecture,.t |
62ac0 | 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 20 61 64 64 73 20 61 20 6c 69 73 74 20 6f 66 | he.ingress.router.adds.a.list.of |
62ae0 | 20 73 65 67 6d 65 6e 74 73 2c 20 6b 6e 6f 77 6e 20 61 73 20 53 49 44 73 2c 20 74 6f 20 74 68 65 | .segments,.known.as.SIDs,.to.the |
62b00 | 20 70 61 63 6b 65 74 20 61 73 20 69 74 20 65 6e 74 65 72 73 20 74 68 65 20 6e 65 74 77 6f 72 6b | .packet.as.it.enters.the.network |
62b20 | 2e 20 54 68 65 73 65 20 73 65 67 6d 65 6e 74 73 20 72 65 70 72 65 73 65 6e 74 20 64 69 66 66 65 | ..These.segments.represent.diffe |
62b40 | 72 65 6e 74 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 | rent.portions.of.the.network.pat |
62b60 | 68 20 74 68 61 74 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 74 61 6b 65 2e 00 53 65 67 | h.that.the.packet.will.take..Seg |
62b80 | 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 | ment.Routing.can.be.applied.to.a |
62ba0 | 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 4c 53 2d 62 61 73 65 64 20 64 61 74 61 20 70 6c 61 6e 65 | n.existing.MPLS-based.data.plane |
62bc0 | 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 | .and.defines.a.control.plane.net |
62be0 | 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 2e 20 49 6e 20 4d 50 4c 53 20 6e 65 74 77 6f | work.architecture..In.MPLS.netwo |
62c00 | 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c | rks,.segments.are.encoded.as.MPL |
62c20 | 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 61 72 65 20 61 64 64 65 64 20 61 74 20 74 68 65 20 69 6e | S.labels.and.are.added.at.the.in |
62c40 | 67 72 65 73 73 20 72 6f 75 74 65 72 2e 20 54 68 65 73 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 | gress.router..These.MPLS.labels. |
62c60 | 61 72 65 20 74 68 65 6e 20 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 | are.then.exchanged.and.populated |
62c80 | 20 62 79 20 49 6e 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 20 28 | .by.Interior.Gateway.Protocols.( |
62ca0 | 49 47 50 73 29 20 6c 69 6b 65 20 49 53 2d 49 53 20 6f 72 20 4f 53 50 46 20 77 68 69 63 68 20 61 | IGPs).like.IS-IS.or.OSPF.which.a |
62cc0 | 72 65 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 6d 6f 73 74 20 49 53 50 73 2e 00 53 65 67 6d 65 6e 74 | re.running.on.most.ISPs..Segment |
62ce0 | 20 72 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 | .routing.(SR).is.used.by.the.IGP |
62d00 | 20 70 72 6f 74 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f | .protocols.to.interconnect.netwo |
62d20 | 72 6b 20 64 65 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | rk.devices,.below.configuration. |
62d40 | 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 49 53 2d 49 53 3a | shows.how.to.enable.SR.on.IS-IS: |
62d60 | 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 | .Segment.routing.(SR).is.used.by |
62d80 | 20 74 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 | .the.IGP.protocols.to.interconne |
62da0 | 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 | ct.network.devices,.below.config |
62dc0 | 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f | uration.shows.how.to.enable.SR.o |
62de0 | 6e 20 4f 53 50 46 3a 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 64 65 66 69 6e 65 73 20 | n.OSPF:.Segment.routing.defines. |
62e00 | 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 | a.control.plane.network.architec |
62e20 | 74 75 72 65 20 61 6e 64 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 | ture.and.can.be.applied.to.an.ex |
62e40 | 69 73 74 69 6e 67 20 4d 50 4c 53 20 62 61 73 65 64 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 6e 20 | isting.MPLS.based.dataplane..In. |
62e60 | 74 68 65 20 4d 50 4c 53 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 | the.MPLS.networks,.segments.are. |
62e80 | 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 61 72 65 20 69 | encoded.as.MPLS.labels.and.are.i |
62ea0 | 6d 70 6f 73 65 64 20 61 74 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 2e 20 4d 50 | mposed.at.the.ingress.router..MP |
62ec0 | 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 | LS.labels.are.exchanged.and.popu |
62ee0 | 6c 61 74 65 64 20 62 79 20 49 47 50 73 20 6c 69 6b 65 20 49 53 2d 49 53 2e 53 65 67 6d 65 6e 74 | lated.by.IGPs.like.IS-IS.Segment |
62f00 | 20 52 6f 75 74 69 6e 67 20 61 73 20 70 65 72 20 52 46 43 38 36 36 37 20 66 6f 72 20 4d 50 4c 53 | .Routing.as.per.RFC8667.for.MPLS |
62f20 | 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 74 20 73 75 70 70 6f 72 74 73 20 49 50 76 34 2c 20 49 50 | .dataplane..It.supports.IPv4,.IP |
62f40 | 76 36 20 61 6e 64 20 45 43 4d 50 20 61 6e 64 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 | v6.and.ECMP.and.has.been.tested. |
62f60 | 61 67 61 69 6e 73 74 20 43 69 73 63 6f 20 26 20 4a 75 6e 69 70 65 72 20 72 6f 75 74 65 72 73 2e | against.Cisco.&.Juniper.routers. |
62f80 | 68 6f 77 65 76 65 72 2c 74 68 69 73 20 64 65 70 6c 6f 79 6d 65 6e 74 20 69 73 20 73 74 69 6c 6c | however,this.deployment.is.still |
62fa0 | 20 45 58 50 45 52 49 4d 45 4e 54 41 4c 20 66 6f 72 20 46 52 52 2e 00 53 65 6c 65 63 74 20 54 4c | .EXPERIMENTAL.for.FRR..Select.TL |
62fc0 | 53 20 76 65 72 73 69 6f 6e 20 75 73 65 64 2e 00 53 65 6c 65 63 74 20 63 69 70 68 65 72 20 73 75 | S.version.used..Select.cipher.su |
62fe0 | 69 74 65 20 75 73 65 64 20 66 6f 72 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6f 70 65 72 61 | ite.used.for.cryptographic.opera |
63000 | 74 69 6f 6e 73 2e 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 | tions..This.setting.is.mandatory |
63020 | 2e 00 53 65 6c 65 63 74 20 68 6f 77 20 6c 61 62 65 6c 73 20 61 72 65 20 61 6c 6c 6f 63 61 74 65 | ..Select.how.labels.are.allocate |
63040 | 64 20 69 6e 20 74 68 65 20 67 69 76 65 6e 20 56 52 46 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 | d.in.the.given.VRF..By.default,. |
63060 | 74 68 65 20 70 65 72 2d 76 72 66 20 6d 6f 64 65 20 69 73 20 73 65 6c 65 63 74 65 64 2c 20 61 6e | the.per-vrf.mode.is.selected,.an |
63080 | 64 20 6f 6e 65 20 6c 61 62 65 6c 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 | d.one.label.is.used.for.all.pref |
630a0 | 69 78 65 73 20 66 72 6f 6d 20 74 68 65 20 56 52 46 2e 20 54 68 65 20 70 65 72 2d 6e 65 78 74 68 | ixes.from.the.VRF..The.per-nexth |
630c0 | 6f 70 20 77 69 6c 6c 20 75 73 65 20 61 20 75 6e 69 71 75 65 20 6c 61 62 65 6c 20 66 6f 72 20 61 | op.will.use.a.unique.label.for.a |
630e0 | 6c 6c 20 70 72 65 66 69 78 65 73 20 74 68 61 74 20 61 72 65 20 72 65 61 63 68 61 62 6c 65 20 76 | ll.prefixes.that.are.reachable.v |
63100 | 69 61 20 74 68 65 20 73 61 6d 65 20 6e 65 78 74 68 6f 70 2e 00 53 65 6c 66 20 53 69 67 6e 65 64 | ia.the.same.nexthop..Self.Signed |
63120 | 20 43 41 00 53 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f | .CA.Send.a.Proxy.Protocol.versio |
63140 | 6e 20 31 20 68 65 61 64 65 72 20 28 74 65 78 74 20 66 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 20 | n.1.header.(text.format).Send.a. |
63160 | 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 32 20 68 65 61 64 65 72 20 | Proxy.Protocol.version.2.header. |
63180 | 28 62 69 6e 61 72 79 20 66 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 6c 6c 20 44 4e 53 20 71 75 65 | (binary.format).Send.all.DNS.que |
631a0 | 72 69 65 73 20 74 6f 20 74 68 65 20 49 50 76 34 2f 49 50 76 36 20 44 4e 53 20 73 65 72 76 65 72 | ries.to.the.IPv4/IPv6.DNS.server |
631c0 | 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 6e 20 | .specified.under.`<address>`.on. |
631e0 | 6f 70 74 69 6f 6e 61 6c 20 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c | optional.port.specified.under.`< |
63200 | 70 6f 72 74 3e 60 2e 20 54 68 65 20 70 6f 72 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 33 2e | port>`..The.port.defaults.to.53. |
63220 | 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 | .You.can.configure.multiple.name |
63240 | 73 65 72 76 65 72 73 20 68 65 72 65 2e 00 53 65 6e 64 20 65 6d 70 74 79 20 53 53 49 44 20 69 6e | servers.here..Send.empty.SSID.in |
63260 | 20 62 65 61 63 6f 6e 73 20 61 6e 64 20 69 67 6e 6f 72 65 20 70 72 6f 62 65 20 72 65 71 75 65 73 | .beacons.and.ignore.probe.reques |
63280 | 74 20 66 72 61 6d 65 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 66 75 6c | t.frames.that.do.not.specify.ful |
632a0 | 6c 20 53 53 49 44 2c 20 69 2e 65 2e 2c 20 72 65 71 75 69 72 65 20 73 74 61 74 69 6f 6e 73 20 74 | l.SSID,.i.e.,.require.stations.t |
632c0 | 6f 20 6b 6e 6f 77 20 53 53 49 44 2e 00 53 65 6e 74 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 | o.know.SSID..Sent.to.the.client. |
632e0 | 28 4c 41 43 29 20 69 6e 20 74 68 65 20 48 6f 73 74 2d 4e 61 6d 65 20 61 74 74 72 69 62 75 74 65 | (LAC).in.the.Host-Name.attribute |
63300 | 00 53 65 72 69 61 6c 20 43 6f 6e 73 6f 6c 65 00 53 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 | .Serial.Console.Serial.interface |
63320 | 73 20 63 61 6e 20 62 65 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 | s.can.be.any.interface.which.is. |
63340 | 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 43 50 55 20 6f 72 | directly.connected.to.the.CPU.or |
63360 | 20 63 68 69 70 73 65 74 20 28 6d 6f 73 74 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 61 20 74 74 79 53 | .chipset.(mostly.known.as.a.ttyS |
63380 | 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 6e 75 78 29 20 6f 72 20 61 6e 79 20 6f 74 68 65 | .interface.in.Linux).or.any.othe |
633a0 | 72 20 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 28 50 72 6f 6c 69 | r.USB.to.serial.converter.(Proli |
633c0 | 66 69 63 20 50 4c 32 33 30 33 20 6f 72 20 46 54 44 49 20 46 54 32 33 32 2f 46 54 34 32 33 32 20 | fic.PL2303.or.FTDI.FT232/FT4232. |
633e0 | 62 61 73 65 64 20 63 68 69 70 73 29 2e 00 53 65 72 76 65 72 00 53 65 72 76 65 72 20 43 65 72 74 | based.chips)..Server.Server.Cert |
63400 | 69 66 69 63 61 74 65 00 53 65 72 76 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 | ificate.Server.Configuration.Ser |
63420 | 76 65 72 20 53 69 64 65 00 53 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 | ver.Side.Server.configuration.Se |
63440 | 72 76 65 72 20 6e 61 6d 65 73 20 66 6f 72 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 20 69 74 20 | rver.names.for.virtual.hosts.it. |
63460 | 63 61 6e 20 62 65 20 65 78 61 63 74 2c 20 77 69 6c 64 63 61 72 64 20 6f 72 20 72 65 67 65 78 2e | can.be.exact,.wildcard.or.regex. |
63480 | 00 53 65 72 76 65 72 3a 00 53 65 72 76 69 63 65 00 53 65 72 76 69 63 65 20 63 6f 6e 66 69 67 75 | .Server:.Service.Service.configu |
634a0 | 72 61 74 69 6f 6e 20 69 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 62 69 6e 64 69 6e | ration.is.responsible.for.bindin |
634c0 | 67 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 2c 20 77 68 69 6c 65 20 74 68 65 20 | g.to.a.specific.port,.while.the. |
634e0 | 62 61 63 6b 65 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 65 74 65 72 6d 69 6e 65 73 | backend.configuration.determines |
63500 | 20 74 68 65 20 74 79 70 65 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 74 6f 20 62 | .the.type.of.load.balancing.to.b |
63520 | 65 20 61 70 70 6c 69 65 64 20 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 65 61 6c | e.applied.and.specifies.the.real |
63540 | 20 73 65 72 76 65 72 73 20 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 53 65 74 20 42 46 44 | .servers.to.be.utilized..Set.BFD |
63560 | 20 70 65 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 | .peer.IPv4.address.or.IPv6.addre |
63580 | 73 73 00 53 65 74 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 74 6f 20 65 78 61 | ss.Set.BGP.community-list.to.exa |
635a0 | 63 74 6c 79 20 6d 61 74 63 68 2e 00 53 65 74 20 42 47 50 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 | ctly.match..Set.BGP.local.prefer |
635c0 | 65 6e 63 65 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 74 20 42 47 50 20 6f 72 69 67 69 6e 20 63 | ence.attribute..Set.BGP.origin.c |
635e0 | 6f 64 65 2e 00 53 65 74 20 42 47 50 20 6f 72 69 67 69 6e 61 74 6f 72 20 49 44 20 61 74 74 72 69 | ode..Set.BGP.originator.ID.attri |
63600 | 62 75 74 65 2e 00 53 65 74 20 42 47 50 20 77 65 69 67 68 74 20 61 74 74 72 69 62 75 74 65 00 53 | bute..Set.BGP.weight.attribute.S |
63620 | 65 74 20 44 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 55 44 50 20 | et.DNAT.rule.20.to.only.NAT.UDP. |
63640 | 70 61 63 6b 65 74 73 00 53 65 74 20 49 50 20 66 72 61 67 6d 65 6e 74 20 6d 61 74 63 68 2c 20 77 | packets.Set.IP.fragment.match,.w |
63660 | 68 65 72 65 3a 00 53 65 74 20 49 50 53 65 63 20 69 6e 62 6f 75 6e 64 20 6d 61 74 63 68 20 63 72 | here:.Set.IPSec.inbound.match.cr |
63680 | 69 74 65 72 69 61 73 2c 20 77 68 65 72 65 3a 00 53 65 74 20 4f 53 50 46 20 65 78 74 65 72 6e 61 | iterias,.where:.Set.OSPF.externa |
636a0 | 6c 20 6d 65 74 72 69 63 2d 74 79 70 65 2e 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 32 30 20 | l.metric-type..Set.SNAT.rule.20. |
636c0 | 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 00 | to.only.NAT.TCP.and.UDP.packets. |
636e0 | 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 | Set.SNAT.rule.20.to.only.NAT.pac |
63700 | 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 30 | kets.arriving.from.the.192.0.2.0 |
63720 | 2f 32 34 20 6e 65 74 77 6f 72 6b 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 33 30 20 74 6f 20 | /24.network.Set.SNAT.rule.30.to. |
63740 | 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 66 72 6f 6d 20 74 | only.NAT.packets.arriving.from.t |
63760 | 68 65 20 32 30 33 2e 30 2e 31 31 33 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 | he.203.0.113.0/24.network.with.a |
63780 | 20 73 6f 75 72 63 65 20 70 6f 72 74 20 6f 66 20 38 30 20 61 6e 64 20 34 34 33 00 53 65 74 20 53 | .source.port.of.80.and.443.Set.S |
637a0 | 53 4c 20 63 65 72 74 65 66 69 63 61 74 65 20 3c 6e 61 6d 65 3e 20 66 6f 72 20 73 65 72 76 69 63 | SL.certeficate.<name>.for.servic |
637c0 | 65 20 3c 6e 61 6d 65 3e 00 53 65 74 20 53 53 4c 20 63 65 72 74 69 66 69 63 61 74 65 20 3c 6e 61 | e.<name>.Set.SSL.certificate.<na |
637e0 | 6d 65 3e 20 66 6f 72 20 73 65 72 76 69 63 65 20 3c 6e 61 6d 65 3e 00 53 65 74 20 54 43 50 2d 4d | me>.for.service.<name>.Set.TCP-M |
63800 | 53 53 20 28 6d 61 78 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a 65 29 20 66 6f 72 20 74 68 | SS.(maximum.segment.size).for.th |
63820 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 53 65 74 20 54 54 4c 20 74 6f 20 33 30 30 20 73 65 63 6f | e.connection.Set.TTL.to.300.seco |
63840 | 6e 64 73 00 53 65 74 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 63 65 | nds.Set.Virtual.Tunnel.Interface |
63860 | 00 53 65 74 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 64 65 73 63 72 69 70 74 69 6f 6e 00 53 65 74 | .Set.a.container.description.Set |
63880 | 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 73 68 61 70 65 72 2e 00 53 | .a.description.for.the.shaper..S |
638a0 | 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 | et.a.destination.and/or.source.a |
638c0 | 64 64 72 65 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 20 66 6f 72 20 69 70 76 34 3a | ddress..Accepted.input.for.ipv4: |
638e0 | 00 53 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 | .Set.a.destination.and/or.source |
63900 | 20 70 6f 72 74 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 53 65 74 20 61 20 68 75 6d | .port..Accepted.input:.Set.a.hum |
63920 | 61 6e 20 72 65 61 64 61 62 6c 65 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 61 6c 69 61 73 20 66 | an.readable,.descriptive.alias.f |
63940 | 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 6c 69 61 73 20 69 73 20 75 73 65 | or.this.connection..Alias.is.use |
63960 | 64 20 62 79 20 65 2e 67 2e 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 | d.by.e.g..the.:opcmd:`show.inter |
63980 | 66 61 63 65 73 60 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 53 4e 4d 50 20 62 61 73 65 64 20 6d 6f 6e | faces`.command.or.SNMP.based.mon |
639a0 | 69 74 6f 72 69 6e 67 20 74 6f 6f 6c 73 2e 00 53 65 74 20 61 20 6c 69 6d 69 74 20 6f 6e 20 74 68 | itoring.tools..Set.a.limit.on.th |
639c0 | 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 6c | e.maximum.number.of.concurrent.l |
639e0 | 6f 67 67 65 64 2d 69 6e 20 75 73 65 72 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 65 | ogged-in.users.on.the.system..Se |
63a00 | 74 20 61 20 6d 65 61 6e 69 6e 67 66 75 6c 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 | t.a.meaningful.description..Set. |
63a20 | 61 20 6e 61 6d 65 64 20 61 70 69 20 6b 65 79 2e 20 45 76 65 72 79 20 6b 65 79 20 68 61 73 20 74 | a.named.api.key..Every.key.has.t |
63a40 | 68 65 20 73 61 6d 65 2c 20 66 75 6c 6c 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 6f 6e 20 74 68 65 | he.same,.full.permissions.on.the |
63a60 | 20 73 79 73 74 65 6d 2e 00 53 65 74 20 61 20 72 75 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 2e | .system..Set.a.rule.description. |
63a80 | 00 53 65 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e | .Set.a.specific.connection.mark. |
63aa0 | 00 53 65 74 20 61 20 73 70 65 63 69 66 69 63 20 70 61 63 6b 65 74 20 6d 61 72 6b 2e 00 53 65 74 | .Set.a.specific.packet.mark..Set |
63ac0 | 20 61 63 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 | .action.for.the.route-map.policy |
63ae0 | 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 6f 6e 20 65 6e 74 72 69 65 73 20 | ..Set.action.to.take.on.entries. |
63b00 | 6d 61 74 63 68 69 6e 67 20 74 68 69 73 20 72 75 6c 65 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 | matching.this.rule..Set.an.:abbr |
63b20 | 3a 60 41 20 28 41 64 64 72 65 73 73 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 | :`A.(Address)`.record..Supports. |
63b40 | 60 60 40 60 60 20 61 6e 64 20 60 60 61 6e 79 60 60 20 6b 65 79 77 6f 72 64 73 2e 00 53 65 74 20 | ``@``.and.``any``.keywords..Set. |
63b60 | 61 6e 20 3a 61 62 62 72 3a 60 41 41 41 41 20 28 49 50 76 36 20 41 64 64 72 65 73 73 29 60 20 72 | an.:abbr:`AAAA.(IPv6.Address)`.r |
63b80 | 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 61 6e 64 20 60 60 61 6e 79 60 | ecord..Supports.``@``.and.``any` |
63ba0 | 60 20 6b 65 79 77 6f 72 64 73 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 43 4e 41 4d 45 20 | `.keywords..Set.an.:abbr:`CNAME. |
63bc0 | 28 43 61 6e 6f 6e 69 63 61 6c 20 6e 61 6d 65 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 | (Canonical.name)`.record..Suppor |
63be0 | 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 | ts.``@``.keyword..Set.an.:abbr:` |
63c00 | 4e 41 50 54 52 20 28 4e 61 6d 69 6e 67 20 61 75 74 68 6f 72 69 74 79 20 70 6f 69 6e 74 65 72 29 | NAPTR.(Naming.authority.pointer) |
63c20 | 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 | `.record..Supports.``@``.keyword |
63c40 | 2e 20 4e 41 50 54 52 20 72 65 63 6f 72 64 73 20 73 75 70 70 6f 72 74 20 74 68 65 20 66 6f 6c 6c | ..NAPTR.records.support.the.foll |
63c60 | 6f 77 69 6e 67 20 6f 70 74 69 6f 6e 73 3a 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 4e 53 20 | owing.options:.Set.an.:abbr:`NS. |
63c80 | 28 4e 61 6d 65 73 65 72 76 65 72 29 60 20 72 65 63 6f 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 62 | (Nameserver)`.record..Set.an.:ab |
63ca0 | 62 72 3a 60 50 54 52 20 28 50 6f 69 6e 74 65 72 20 72 65 63 6f 72 64 29 60 20 72 65 63 6f 72 64 | br:`PTR.(Pointer.record)`.record |
63cc0 | 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 2e 00 53 65 74 20 61 6e | ..Supports.``@``.keyword..Set.an |
63ce0 | 20 3a 61 62 62 72 3a 60 53 50 46 20 28 53 65 6e 64 65 72 20 70 6f 6c 69 63 79 20 66 72 61 6d 65 | .:abbr:`SPF.(Sender.policy.frame |
63d00 | 77 6f 72 6b 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 | work)`.record..Supports.``@``.ke |
63d20 | 79 77 6f 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 53 52 56 20 28 53 65 72 76 69 63 | yword..Set.an.:abbr:`SRV.(Servic |
63d40 | 65 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f | e)`.record..Supports.``@``.keywo |
63d60 | 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 54 58 54 20 28 54 65 78 74 29 60 20 72 65 | rd..Set.an.:abbr:`TXT.(Text)`.re |
63d80 | 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 2e 00 53 65 | cord..Supports.``@``.keyword..Se |
63da0 | 74 20 61 6e 20 41 50 49 2d 4b 45 59 20 69 73 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 | t.an.API-KEY.is.the.minimal.conf |
63dc0 | 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 77 6f 72 6b 69 6e 67 20 41 50 49 20 45 | iguration.to.get.a.working.API.E |
63de0 | 6e 64 70 6f 69 6e 74 2e 00 53 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b | ndpoint..Set.authentication.back |
63e00 | 65 6e 64 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 | end..The.configured.authenticati |
63e20 | 6f 6e 20 62 61 63 6b 65 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 71 75 65 72 69 | on.backend.is.used.for.all.queri |
63e40 | 65 73 2e 00 53 65 74 20 63 6f 6e 74 61 69 6e 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f | es..Set.container.capabilities.o |
63e60 | 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 2e 00 53 65 74 20 64 65 6c 61 79 20 62 65 74 77 65 65 6e | r.permissions..Set.delay.between |
63e80 | 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 6f 6e | .gratuitous.ARP.messages.sent.on |
63ea0 | 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 74 20 64 65 6c 61 79 20 66 6f 72 20 73 65 63 | .an.interface..Set.delay.for.sec |
63ec0 | 6f 6e 64 20 73 65 74 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 61 66 74 65 72 | ond.set.of.gratuitous.ARPs.after |
63ee0 | 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 64 65 73 63 72 | .transition.to.MASTER..Set.descr |
63f00 | 69 70 74 69 6f 6e 20 60 3c 74 65 78 74 3e 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 | iption.`<text>`.for.dynamic.DNS. |
63f20 | 73 65 72 76 69 63 65 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 65 74 20 64 65 | service.being.configured..Set.de |
63f40 | 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 20 70 6f 6c 69 63 | scription.for.as-path-list.polic |
63f60 | 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 74 79 | y..Set.description.for.community |
63f80 | 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f | -list.policy..Set.description.fo |
63fa0 | 72 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 | r.extcommunity-list.policy..Set. |
63fc0 | 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d | description.for.large-community- |
63fe0 | 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 | list.policy..Set.description.for |
64000 | 20 72 75 6c 65 20 69 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 | .rule.in.IPv6.prefix-list..Set.d |
64020 | 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 | escription.for.rule.in.the.prefi |
64040 | 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 | x-list..Set.description.for.rule |
64060 | 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 61 | ..Set.description.for.the.IPv6.a |
64080 | 63 63 65 73 73 20 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 | ccess.list..Set.description.for. |
640a0 | 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 | the.IPv6.prefix-list.policy..Set |
640c0 | 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 | .description.for.the.access.list |
640e0 | 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 70 72 65 66 69 78 | ..Set.description.for.the.prefix |
64100 | 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f | -list.policy..Set.description.fo |
64120 | 72 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 | r.the.route-map.policy..Set.desc |
64140 | 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 75 6c 65 20 69 6e 20 74 68 65 20 72 6f 75 74 | ription.for.the.rule.in.the.rout |
64160 | 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 | e-map.policy..Set.description.of |
64180 | 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 53 65 74 20 64 65 73 | .the.peer.or.peer.group..Set.des |
641a0 | 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 | cription..Set.destination.addres |
641c0 | 73 20 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 64 65 73 74 69 6e | s.or.prefix.to.match..Set.destin |
641e0 | 61 74 69 6f 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 6d 65 74 72 69 63 2e 20 41 | ation.routing.protocol.metric..A |
64200 | 64 64 20 6f 72 20 73 75 62 74 72 61 63 74 20 6d 65 74 72 69 63 2c 20 6f 72 20 73 65 74 20 6d 65 | dd.or.subtract.metric,.or.set.me |
64220 | 74 72 69 63 20 76 61 6c 75 65 2e 00 53 65 74 20 65 74 68 31 20 74 6f 20 62 65 20 74 68 65 20 6c | tric.value..Set.eth1.to.be.the.l |
64240 | 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 44 48 43 50 76 | istening.interface.for.the.DHCPv |
64260 | 36 20 72 65 6c 61 79 2e 00 53 65 74 20 65 78 65 63 75 74 69 6f 6e 20 74 69 6d 65 20 69 6e 20 63 | 6.relay..Set.execution.time.in.c |
64280 | 6f 6d 6d 6f 6e 20 63 72 6f 6e 5f 20 74 69 6d 65 20 66 6f 72 6d 61 74 2e 20 41 20 63 72 6f 6e 20 | ommon.cron_.time.format..A.cron. |
642a0 | 60 3c 73 70 65 63 3e 60 20 6f 66 20 60 60 33 30 20 2a 2f 36 20 2a 20 2a 20 2a 60 60 20 77 6f 75 | `<spec>`.of.``30.*/6.*.*.*``.wou |
642c0 | 6c 64 20 65 78 65 63 75 74 65 20 74 68 65 20 60 3c 74 61 73 6b 3e 60 20 61 74 20 6d 69 6e 75 74 | ld.execute.the.`<task>`.at.minut |
642e0 | 65 20 33 30 20 70 61 73 74 20 65 76 65 72 79 20 36 74 68 20 68 6f 75 72 2e 00 53 65 74 20 65 78 | e.30.past.every.6th.hour..Set.ex |
64300 | 74 63 6f 6d 6d 75 6e 69 74 79 20 62 61 6e 64 77 69 64 74 68 00 53 65 74 20 69 66 20 61 6e 74 65 | tcommunity.bandwidth.Set.if.ante |
64320 | 6e 6e 61 20 70 61 74 74 65 72 6e 20 64 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 64 75 72 69 | nna.pattern.does.not.change.duri |
64340 | 6e 67 20 74 68 65 20 6c 69 66 65 74 69 6d 65 20 6f 66 20 61 6e 20 61 73 73 6f 63 69 61 74 69 6f | ng.the.lifetime.of.an.associatio |
64360 | 6e 00 53 65 74 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6d 61 74 63 68 | n.Set.inbound.interface.to.match |
64380 | 2e 00 53 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 61 20 7a 6f 6e 65 2e 20 41 20 7a 6f | ..Set.interfaces.to.a.zone..A.zo |
643a0 | 6e 65 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e | ne.can.have.multiple.interfaces. |
643c0 | 20 42 75 74 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 61 20 | .But.an.interface.can.only.be.a. |
643e0 | 6d 65 6d 62 65 72 20 69 6e 20 6f 6e 65 20 7a 6f 6e 65 2e 00 53 65 74 20 6c 6f 63 61 6c 20 3a 61 | member.in.one.zone..Set.local.:a |
64400 | 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 | bbr:`ASN.(Autonomous.System.Numb |
64420 | 65 72 29 60 20 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 | er)`.that.this.router.represents |
64440 | 2e 20 54 68 69 73 20 69 73 20 61 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 | ..This.is.a.a.mandatory.option!. |
64460 | 53 65 74 20 6c 6f 63 61 6c 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 6e 75 6d 62 | Set.local.autonomous.system.numb |
64480 | 65 72 20 74 68 61 74 20 74 68 69 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 | er.that.this.router.represents.. |
644a0 | 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 | This.is.a.mandatory.option!.Set. |
644c0 | 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 | match.criteria.based.on.connecti |
644e0 | 6f 6e 20 6d 61 72 6b 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 | on.mark..Set.match.criteria.base |
64500 | 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 2c 20 77 68 65 72 65 20 3c 6d 61 | d.on.destination.port,.where.<ma |
64520 | 74 63 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 | tch_criteria>.could.be:.Set.matc |
64540 | 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 65 73 73 69 6f 6e 20 73 74 61 74 | h.criteria.based.on.session.stat |
64560 | 65 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 | e..Set.match.criteria.based.on.s |
64580 | 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 67 72 6f 75 70 73 2c 20 77 68 65 | ource.or.destination.groups,.whe |
645a0 | 72 65 20 3c 74 65 78 74 3e 20 77 6f 75 6c 64 20 62 65 20 74 68 65 20 67 72 6f 75 70 20 6e 61 6d | re.<text>.would.be.the.group.nam |
645c0 | 65 2f 69 64 65 6e 74 69 66 69 65 72 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 | e/identifier..Prepend.character. |
645e0 | 27 21 27 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 | '!'.for.inverted.matching.criter |
64600 | 69 61 2e 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 | ia..Set.match.criteria.based.on. |
64620 | 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 70 76 34 7c 69 70 76 36 20 | source.or.destination.ipv4|ipv6. |
64640 | 61 64 64 72 65 73 73 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e 20 | address,.where.<match_criteria>. |
64660 | 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 | could.be:.Set.match.criteria.bas |
64680 | 65 64 20 6f 6e 20 74 63 70 20 66 6c 61 67 73 2e 20 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 | ed.on.tcp.flags..Allowed.values. |
646a0 | 66 6f 72 20 54 43 50 20 66 6c 61 67 73 3a 20 53 59 4e 20 41 43 4b 20 46 49 4e 20 52 53 54 20 55 | for.TCP.flags:.SYN.ACK.FIN.RST.U |
646c0 | 52 47 20 50 53 48 20 41 4c 4c 2e 20 57 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 | RG.PSH.ALL..When.specifying.more |
646e0 | 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 | .than.one.flag,.flags.should.be. |
64700 | 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 3a 20 76 | comma-separated..For.example.:.v |
64720 | 61 6c 75 65 20 6f 66 20 27 53 59 4e 2c 21 41 43 4b 2c 21 46 49 4e 2c 21 52 53 54 27 20 77 69 6c | alue.of.'SYN,!ACK,!FIN,!RST'.wil |
64740 | 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 74 68 65 20 53 59 | l.only.match.packets.with.the.SY |
64760 | 4e 20 66 6c 61 67 20 73 65 74 2c 20 61 6e 64 20 74 68 65 20 41 43 4b 2c 20 46 49 4e 20 61 6e 64 | N.flag.set,.and.the.ACK,.FIN.and |
64780 | 20 52 53 54 20 66 6c 61 67 73 20 75 6e 73 65 74 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 60 3c | .RST.flags.unset..Set.maximum.`< |
647a0 | 73 69 7a 65 3e 60 20 6f 66 20 44 48 43 50 20 70 61 63 6b 65 74 73 20 69 6e 63 6c 75 64 69 6e 67 | size>`.of.DHCP.packets.including |
647c0 | 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 20 44 | .relay.agent.information..If.a.D |
647e0 | 48 43 50 20 70 61 63 6b 65 74 20 73 69 7a 65 20 73 75 72 70 61 73 73 65 73 20 74 68 69 73 20 76 | HCP.packet.size.surpasses.this.v |
64800 | 61 6c 75 65 20 69 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 20 77 69 74 68 6f 75 | alue.it.will.be.forwarded.withou |
64820 | 74 20 61 70 70 65 6e 64 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 | t.appending.relay.agent.informat |
64840 | 69 6f 6e 2e 20 52 61 6e 67 65 20 36 34 2e 2e 2e 31 34 30 30 2c 20 64 65 66 61 75 6c 74 20 35 37 | ion..Range.64...1400,.default.57 |
64860 | 36 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 61 76 65 72 61 67 65 20 6d 61 74 63 68 69 6e 67 20 | 6..Set.maximum.average.matching. |
64880 | 72 61 74 65 2e 20 46 6f 72 6d 61 74 20 66 6f 72 20 72 61 74 65 3a 20 69 6e 74 65 67 65 72 2f 74 | rate..Format.for.rate:.integer/t |
648a0 | 69 6d 65 5f 75 6e 69 74 2c 20 77 68 65 72 65 20 74 69 6d 65 5f 75 6e 69 74 20 63 6f 75 6c 64 20 | ime_unit,.where.time_unit.could. |
648c0 | 62 65 20 61 6e 79 20 6f 6e 65 20 6f 66 20 73 65 63 6f 6e 64 2c 20 6d 69 6e 75 74 65 2c 20 68 6f | be.any.one.of.second,.minute,.ho |
648e0 | 75 72 20 6f 72 20 64 61 79 2e 46 6f 72 20 65 78 61 6d 70 6c 65 20 31 2f 73 65 63 6f 6e 64 20 69 | ur.or.day.For.example.1/second.i |
64900 | 6d 70 6c 69 65 73 20 72 75 6c 65 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 61 74 20 61 6e 20 | mplies.rule.to.be.matched.at.an. |
64920 | 61 76 65 72 61 67 65 20 6f 66 20 6f 6e 63 65 20 70 65 72 20 73 65 63 6f 6e 64 2e 00 53 65 74 20 | average.of.once.per.second..Set. |
64940 | 6d 61 78 69 6d 75 6d 20 68 6f 70 20 63 6f 75 6e 74 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 | maximum.hop.count.before.packets |
64960 | 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 00 53 65 74 20 | .are.discarded,.default:.10.Set. |
64980 | 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6f | maximum.number.of.packets.to.alo |
649a0 | 77 20 69 6e 20 65 78 63 65 73 73 20 6f 66 20 72 61 74 65 2e 00 53 65 74 20 6d 69 6e 69 6d 75 6d | w.in.excess.of.rate..Set.minimum |
649c0 | 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 72 65 66 72 65 73 68 69 6e 67 20 67 72 | .time.interval.for.refreshing.gr |
649e0 | 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 | atuitous.ARPs.while.MASTER..Set. |
64a00 | 6d 6f 64 65 20 66 6f 72 20 49 50 73 65 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 | mode.for.IPsec.authentication.be |
64a20 | 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 4c 32 54 50 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 | tween.VyOS.and.L2TP.clients..Set |
64a40 | 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 | .number.of.gratuitous.ARP.messag |
64a60 | 65 73 20 74 6f 20 73 65 6e 64 20 61 74 20 61 20 74 69 6d 65 20 61 66 74 65 72 20 74 72 61 6e 73 | es.to.send.at.a.time.after.trans |
64a80 | 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 | ition.to.MASTER..Set.number.of.g |
64aa0 | 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 | ratuitous.ARP.messages.to.send.a |
64ac0 | 74 20 61 20 74 69 6d 65 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 | t.a.time.while.MASTER..Set.numbe |
64ae0 | 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 48 65 6c 6c 6f 20 49 6e 74 65 72 76 61 6c 20 | r.of.seconds.for.Hello.Interval. |
64b00 | 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 76 61 6c 75 65 2c | timer.value..Setting.this.value, |
64b20 | 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 | .Hello.packet.will.be.sent.every |
64b40 | 20 74 69 6d 65 72 20 76 61 6c 75 65 20 73 65 63 6f 6e 64 73 20 6f 6e 20 74 68 65 20 73 70 65 63 | .timer.value.seconds.on.the.spec |
64b60 | 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 | ified.interface..This.value.must |
64b80 | 20 62 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 | .be.the.same.for.all.routers.att |
64ba0 | 61 63 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 | ached.to.a.common.network..The.d |
64bc0 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 | efault.value.is.10.seconds..The. |
64be0 | 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 | interval.range.is.1.to.65535..Se |
64c00 | 74 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 72 6f 75 74 65 72 20 44 | t.number.of.seconds.for.router.D |
64c20 | 65 61 64 20 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 20 75 73 65 64 20 66 6f | ead.Interval.timer.value.used.fo |
64c40 | 72 20 57 61 69 74 20 54 69 6d 65 72 20 61 6e 64 20 49 6e 61 63 74 69 76 69 74 79 20 54 69 6d 65 | r.Wait.Timer.and.Inactivity.Time |
64c60 | 72 2e 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 66 | r..This.value.must.be.the.same.f |
64c80 | 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f 6d | or.all.routers.attached.to.a.com |
64ca0 | 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | mon.network..The.default.value.i |
64cc0 | 73 20 34 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 | s.40.seconds..The.interval.range |
64ce0 | 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 | .is.1.to.65535..Set.packet.modif |
64d00 | 69 63 61 74 69 6f 6e 73 3a 20 45 78 70 6c 69 63 69 74 6c 79 20 73 65 74 20 54 43 50 20 4d 61 78 | ications:.Explicitly.set.TCP.Max |
64d20 | 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 73 69 7a 65 20 76 61 6c 75 65 2e 00 53 65 74 20 70 61 63 | imum.segment.size.value..Set.pac |
64d40 | 6b 65 74 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 20 50 61 63 6b 65 74 20 44 69 66 66 65 72 | ket.modifications:.Packet.Differ |
64d60 | 65 6e 74 69 61 74 65 64 20 53 65 72 76 69 63 65 73 20 43 6f 64 65 70 6f 69 6e 74 20 28 44 53 43 | entiated.Services.Codepoint.(DSC |
64d80 | 50 29 00 53 65 74 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 72 | P).Set.parameters.for.matching.r |
64da0 | 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 63 65 73 2e 20 54 68 69 73 20 6d 61 74 63 68 | ecently.seen.sources..This.match |
64dc0 | 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 62 79 20 73 65 65 74 69 6e 67 20 63 6f 75 6e 74 20 | .could.be.used.by.seeting.count. |
64de0 | 28 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 73 65 65 6e 20 6d 6f 72 65 20 74 68 61 6e 20 3c | (source.address.seen.more.than.< |
64e00 | 31 2d 32 35 35 3e 20 74 69 6d 65 73 29 20 61 6e 64 2f 6f 72 20 74 69 6d 65 20 28 73 6f 75 72 63 | 1-255>.times).and/or.time.(sourc |
64e20 | 65 20 61 64 64 72 65 73 73 20 73 65 65 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 3c 30 2d 34 32 | e.address.seen.in.the.last.<0-42 |
64e40 | 39 34 39 36 37 32 39 35 3e 20 73 65 63 6f 6e 64 73 29 2e 00 53 65 74 20 70 72 65 64 65 66 69 6e | 94967295>.seconds)..Set.predefin |
64e60 | 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 61 73 65 2e 00 53 65 74 20 70 72 65 | ed.shared.secret.phrase..Set.pre |
64e80 | 66 69 78 65 73 20 74 6f 20 74 61 62 6c 65 2e 00 53 65 74 20 70 72 6f 78 79 20 66 6f 72 20 61 6c | fixes.to.table..Set.proxy.for.al |
64ea0 | 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 69 74 69 61 74 65 64 20 62 79 20 56 79 4f 53 2c | l.connections.initiated.by.VyOS, |
64ec0 | 20 69 6e 63 6c 75 64 69 6e 67 20 48 54 54 50 2c 20 48 54 54 50 53 2c 20 61 6e 64 20 46 54 50 20 | .including.HTTP,.HTTPS,.and.FTP. |
64ee0 | 28 61 6e 6f 6e 79 6d 6f 75 73 20 66 74 70 29 2e 00 53 65 74 20 72 6f 75 74 65 20 74 61 72 67 65 | (anonymous.ftp)..Set.route.targe |
64f00 | 74 20 76 61 6c 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 | t.value.in.format.``<0-65535:0-4 |
64f20 | 32 39 34 39 36 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 | 294967295>``.or.``<IP:0-65535>`` |
64f40 | 2e 00 53 65 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 70 | ..Set.routing.table.to.forward.p |
64f60 | 61 63 6b 65 74 20 74 6f 2e 00 53 65 74 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 64 72 6f | acket.to..Set.rule.action.to.dro |
64f80 | 70 2e 00 53 65 74 20 73 65 72 76 69 63 65 20 74 6f 20 62 69 6e 64 20 6f 6e 20 49 50 20 61 64 64 | p..Set.service.to.bind.on.IP.add |
64fa0 | 72 65 73 73 2c 20 62 79 20 64 65 66 61 75 6c 74 20 6c 69 73 74 65 6e 20 6f 6e 20 61 6e 79 20 49 | ress,.by.default.listen.on.any.I |
64fc0 | 50 76 34 20 61 6e 64 20 49 50 76 36 00 53 65 74 20 73 69 74 65 20 6f 66 20 6f 72 69 67 69 6e 20 | Pv4.and.IPv6.Set.site.of.origin. |
64fe0 | 76 61 6c 75 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 | value.in.format.``<0-65535:0-429 |
65000 | 34 39 36 37 32 39 35 3e 60 60 20 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 | 4967295>``.or.``<IP:0-65535>``.. |
65020 | 53 65 74 20 73 6f 6d 65 20 61 74 74 72 69 62 75 74 65 73 20 28 6c 69 6b 65 20 41 53 20 50 41 54 | Set.some.attributes.(like.AS.PAT |
65040 | 48 20 6f 72 20 43 6f 6d 6d 75 6e 69 74 79 20 76 61 6c 75 65 29 20 74 6f 20 61 64 76 65 72 74 69 | H.or.Community.value).to.adverti |
65060 | 73 65 64 20 72 6f 75 74 65 73 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 00 53 65 74 20 73 6f 6d | sed.routes.to.neighbors..Set.som |
65080 | 65 20 6d 65 74 72 69 63 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 | e.metric.to.routes.learned.from. |
650a0 | 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 73 6f 75 72 63 | a.particular.neighbor..Set.sourc |
650c0 | 65 20 49 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 20 72 6f 75 74 65 2e 00 53 65 74 | e.IP/IPv6.address.for.route..Set |
650e0 | 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 | .source.address.or.prefix.to.mat |
65100 | 63 68 2e 00 53 65 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 74 6f 20 79 6f 75 72 20 6c | ch..Set.source-address.to.your.l |
65120 | 6f 63 61 6c 20 49 50 20 28 4c 41 4e 29 2e 00 53 65 74 20 74 61 67 20 76 61 6c 75 65 20 66 6f 72 | ocal.IP.(LAN)..Set.tag.value.for |
65140 | 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 65 74 20 74 68 65 20 22 72 65 63 75 | .routing.protocol..Set.the."recu |
65160 | 72 73 69 6f 6e 20 64 65 73 69 72 65 64 22 20 62 69 74 20 69 6e 20 72 65 71 75 65 73 74 73 20 74 | rsion.desired".bit.in.requests.t |
65180 | 6f 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 6e 61 6d 65 73 65 72 76 65 72 2e 00 53 65 74 20 74 | o.the.upstream.nameserver..Set.t |
651a0 | 68 65 20 3a 61 62 62 72 3a 60 44 52 20 28 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 29 | he.:abbr:`DR.(Designated.Router) |
651c0 | 60 20 50 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 | `.Priority.for.the.interface..Th |
651e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 61 6c 6c 6f 77 20 74 68 | is.command.is.useful.to.allow.th |
65200 | 65 20 75 73 65 72 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 77 68 61 74 20 6e 6f 64 65 20 62 65 | e.user.to.influence.what.node.be |
65220 | 63 6f 6d 65 73 20 74 68 65 20 44 52 20 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 00 | comes.the.DR.for.a.LAN.segment.. |
65240 | 53 65 74 20 74 68 65 20 3a 61 62 62 72 3a 60 4d 52 55 20 28 4d 61 78 69 6d 75 6d 20 52 65 63 65 | Set.the.:abbr:`MRU.(Maximum.Rece |
65260 | 69 76 65 20 55 6e 69 74 29 60 20 74 6f 20 60 6d 72 75 60 2e 20 50 50 50 64 20 77 69 6c 6c 20 61 | ive.Unit)`.to.`mru`..PPPd.will.a |
65280 | 73 6b 20 74 68 65 20 70 65 65 72 20 74 6f 20 73 65 6e 64 20 70 61 63 6b 65 74 73 20 6f 66 20 6e | sk.the.peer.to.send.packets.of.n |
652a0 | 6f 20 6d 6f 72 65 20 74 68 61 6e 20 60 6d 72 75 60 20 62 79 74 65 73 2e 20 54 68 65 20 76 61 6c | o.more.than.`mru`.bytes..The.val |
652c0 | 75 65 20 6f 66 20 60 6d 72 75 60 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 32 38 20 | ue.of.`mru`.must.be.between.128. |
652e0 | 61 6e 64 20 31 36 33 38 34 2e 00 53 65 74 20 74 68 65 20 3a 61 62 62 72 3a 60 54 54 4c 20 28 54 | and.16384..Set.the.:abbr:`TTL.(T |
65300 | 69 6d 65 2d 74 6f 2d 6c 69 76 65 29 60 20 66 6f 72 20 74 68 65 20 72 65 63 6f 72 64 20 69 6e 20 | ime-to-live)`.for.the.record.in. |
65320 | 73 65 63 6f 6e 64 73 2e 20 44 65 66 61 75 6c 74 20 69 73 20 33 30 30 20 73 65 63 6f 6e 64 73 2e | seconds..Default.is.300.seconds. |
65340 | 00 53 65 74 20 74 68 65 20 42 47 50 20 6e 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 74 6f 20 | .Set.the.BGP.nexthop.address.to. |
65360 | 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 65 72 2e 20 46 6f 72 20 61 6e 20 | the.address.of.the.peer..For.an. |
65380 | 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 | incoming.route-map.this.means.th |
653a0 | 65 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 70 65 65 72 20 69 73 20 75 73 65 64 | e.ip.address.of.our.peer.is.used |
653c0 | 2e 20 46 6f 72 20 61 6e 20 6f 75 74 67 6f 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 | ..For.an.outgoing.route-map.this |
653e0 | 20 6d 65 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 73 65 6c | .means.the.ip.address.of.our.sel |
65400 | 66 20 69 73 20 75 73 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 70 65 65 72 69 | f.is.used.to.establish.the.peeri |
65420 | 6e 67 20 77 69 74 68 20 6f 75 72 20 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 74 68 65 20 49 50 | ng.with.our.neighbor..Set.the.IP |
65440 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 | .address.of.the.local.interface. |
65460 | 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 00 53 65 74 20 74 | to.be.used.for.the.tunnel..Set.t |
65480 | 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 | he.IP.address.of.the.remote.peer |
654a0 | 2e 20 49 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 | ..It.may.be.specified.as.an.IPv4 |
654c0 | 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 53 65 74 | .address.or.an.IPv6.address..Set |
654e0 | 20 74 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 6f 64 65 | .the.IPv4.source.validation.mode |
65500 | 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 | ..The.following.system.parameter |
65520 | 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 | .will.be.altered:.Set.the.MLD.la |
65540 | 73 74 20 6d 65 6d 62 65 72 20 71 75 65 72 79 20 63 6f 75 6e 74 2e 20 54 68 65 20 64 65 66 61 75 | st.member.query.count..The.defau |
65560 | 6c 74 20 76 61 6c 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 73 74 20 | lt.value.is.2..Set.the.MLD.last. |
65580 | 6d 65 6d 62 65 72 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 | member.query.interval.in.millise |
655a0 | 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | conds.(100-6553500)..The.default |
655c0 | 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 74 | .value.is.1000.milliseconds..Set |
655e0 | 20 74 68 65 20 4d 4c 44 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 | .the.MLD.query.response.timeout. |
65600 | 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 | in.milliseconds.(100-6553500)..T |
65620 | 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 20 6d 69 6c 6c 69 73 | he.default.value.is.10000.millis |
65640 | 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 76 65 72 73 69 6f 6e 20 75 73 65 64 | econds..Set.the.MLD.version.used |
65660 | 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | .on.this.interface..The.default. |
65680 | 76 61 6c 75 65 20 69 73 20 32 2e 00 53 65 74 20 74 68 65 20 4d 61 78 69 6d 75 6d 20 53 74 61 63 | value.is.2..Set.the.Maximum.Stac |
656a0 | 6b 20 44 65 70 74 68 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e | k.Depth.supported.by.the.router. |
656c0 | 20 54 68 65 20 76 61 6c 75 65 20 64 65 70 65 6e 64 20 6f 66 20 74 68 65 20 4d 50 4c 53 20 64 61 | .The.value.depend.of.the.MPLS.da |
656e0 | 74 61 70 6c 61 6e 65 2e 00 53 65 74 20 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 61 6e 64 20 68 | taplane..Set.the.PIM.hello.and.h |
65700 | 6f 6c 64 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 61 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 | old.interval.for.a.interface..Se |
65720 | 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 6c 20 42 6c 6f | t.the.Segment.Routing.Global.Blo |
65740 | 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 | ck.i.e..the.label.range.used.by. |
65760 | 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 | MPLS.to.store.label.in.the.MPLS. |
65780 | 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 | FIB.for.Prefix.SID..Note.that.th |
657a0 | 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 | e.block.size.may.not.exceed.6553 |
657c0 | 35 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 | 5..Set.the.Segment.Routing.Globa |
657e0 | 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 | l.Block.i.e..the.low.label.range |
65800 | 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 | .used.by.MPLS.to.store.label.in. |
65820 | 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 | the.MPLS.FIB.for.Prefix.SID..Not |
65840 | 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 | e.that.the.block.size.may.not.ex |
65860 | 63 65 65 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 | ceed.65535..Set.the.Segment.Rout |
65880 | 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 | ing.Local.Block.i.e..the.label.r |
658a0 | 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c | ange.used.by.MPLS.to.store.label |
658c0 | 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e | .in.the.MPLS.FIB.for.Prefix.SID. |
658e0 | 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f | .Note.that.the.block.size.may.no |
65900 | 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c | t.exceed.65535.Segment.Routing.L |
65920 | 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 | ocal.Block,.The.negative.command |
65940 | 20 61 6c 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 53 65 67 | .always.unsets.both..Set.the.Seg |
65960 | 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 | ment.Routing.Local.Block.i.e..th |
65980 | 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 | e.low.label.range.used.by.MPLS.t |
659a0 | 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f | o.store.label.in.the.MPLS.FIB.fo |
659c0 | 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 | r.Prefix.SID..Note.that.the.bloc |
659e0 | 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d | k.size.may.not.exceed.65535.Segm |
65a00 | 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 | ent.Routing.Local.Block,.The.neg |
65a20 | 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 | ative.command.always.unsets.both |
65a40 | 2e 00 53 65 74 20 74 68 65 20 55 73 65 72 20 49 44 20 6f 72 20 47 72 6f 75 70 20 49 44 20 6f 66 | ..Set.the.User.ID.or.Group.ID.of |
65a60 | 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 00 53 65 74 20 74 68 65 20 60 60 73 73 68 64 60 60 20 | .the.container.Set.the.``sshd``. |
65a80 | 6c 6f 67 20 6c 65 76 65 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 69 6e 66 6f | log.level..The.default.is.``info |
65aa0 | 60 60 2e 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 61 63 6b 65 | ``..Set.the.address.of.the.backe |
65ac0 | 6e 64 20 70 6f 72 74 00 53 65 74 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 | nd.port.Set.the.address.of.the.b |
65ae0 | 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 69 6e 63 6f 6d | ackend.server.to.which.the.incom |
65b00 | 69 6e 67 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 00 53 65 | ing.traffic.will.be.forwarded.Se |
65b20 | 74 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 74 79 70 65 20 66 6f 72 20 47 72 | t.the.authentication.type.for.Gr |
65b40 | 61 70 68 51 4c 2c 20 64 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 20 69 73 20 6b 65 79 2e 20 41 76 | aphQL,.default.option.is.key..Av |
65b60 | 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f 6e 73 20 61 72 65 3a 00 53 65 74 20 74 68 65 20 62 79 74 | ailable.options.are:.Set.the.byt |
65b80 | 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 4a 57 54 20 73 65 63 72 65 74 2e 20 44 65 66 61 | e.length.of.the.JWT.secret..Defa |
65ba0 | 75 6c 74 20 69 73 20 33 32 2e 00 53 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 | ult.is.32..Set.the.default.VRRP. |
65bc0 | 76 65 72 73 69 6f 6e 20 74 6f 20 75 73 65 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f | version.to.use..This.defaults.to |
65be0 | 20 32 2c 20 62 75 74 20 49 50 76 36 20 69 6e 73 74 61 6e 63 65 73 20 77 69 6c 6c 20 61 6c 77 61 | .2,.but.IPv6.instances.will.alwa |
65c00 | 79 73 20 75 73 65 20 76 65 72 73 69 6f 6e 20 33 2e 00 53 65 74 20 74 68 65 20 64 65 76 69 63 65 | ys.use.version.3..Set.the.device |
65c20 | 27 73 20 74 72 61 6e 73 6d 69 74 20 28 54 58 29 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 6d | 's.transmit.(TX).key..This.key.m |
65c40 | 75 73 74 20 62 65 20 61 20 68 65 78 20 73 74 72 69 6e 67 20 74 68 61 74 20 69 73 20 31 36 2d 62 | ust.be.a.hex.string.that.is.16-b |
65c60 | 79 74 65 73 20 28 47 43 4d 2d 41 45 53 2d 31 32 38 29 20 6f 72 20 33 32 2d 62 79 74 65 73 20 28 | ytes.(GCM-AES-128).or.32-bytes.( |
65c80 | 47 43 4d 2d 41 45 53 2d 32 35 36 29 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 | GCM-AES-256)..Set.the.distance.f |
65ca0 | 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 | or.the.default.gateway.sent.by.t |
65cc0 | 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 | he.DHCP.server..Set.the.distance |
65ce0 | 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 | .for.the.default.gateway.sent.by |
65d00 | 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 | .the.PPPoE.server..Set.the.dista |
65d20 | 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 | nce.for.the.default.gateway.sent |
65d40 | 20 62 79 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 65 6e 63 | .by.the.SSTP.server..Set.the.enc |
65d60 | 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 70 65 20 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 56 | apsulation.type.of.the.tunnel..V |
65d80 | 61 6c 69 64 20 76 61 6c 75 65 73 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 72 | alid.values.for.encapsulation.ar |
65da0 | 65 3a 20 75 64 70 2c 20 69 70 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 | e:.udp,.ip..Set.the.global.setti |
65dc0 | 6e 67 20 66 6f 72 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e | ng.for.an.established.connection |
65de0 | 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 69 6e 76 | ..Set.the.global.setting.for.inv |
65e00 | 61 6c 69 64 20 70 61 63 6b 65 74 73 2e 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 | alid.packets..Set.the.global.set |
65e20 | 74 69 6e 67 20 66 6f 72 20 72 65 6c 61 74 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 | ting.for.related.connections..Se |
65e40 | 74 20 74 68 65 20 6c 69 66 65 74 69 6d 65 20 66 6f 72 20 4a 57 54 20 74 6f 6b 65 6e 73 20 69 6e | t.the.lifetime.for.JWT.tokens.in |
65e60 | 20 73 65 63 6f 6e 64 73 2e 20 44 65 66 61 75 6c 74 20 69 73 20 33 36 30 30 20 73 65 63 6f 6e 64 | .seconds..Default.is.3600.second |
65e80 | 73 2e 00 53 65 74 20 74 68 65 20 6c 69 73 74 65 6e 20 70 6f 72 74 20 6f 66 20 74 68 65 20 6c 6f | s..Set.the.listen.port.of.the.lo |
65ea0 | 63 61 6c 20 41 50 49 2c 20 74 68 69 73 20 68 61 73 20 6e 6f 20 65 66 66 65 63 74 20 6f 6e 20 74 | cal.API,.this.has.no.effect.on.t |
65ec0 | 68 65 20 77 65 62 73 65 72 76 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 70 6f 72 | he.webserver..The.default.is.por |
65ee0 | 74 20 38 30 38 30 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 60 3c 63 6f 75 | t.8080.Set.the.maximum.hop.`<cou |
65f00 | 6e 74 3e 60 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 | nt>`.before.packets.are.discarde |
65f20 | 64 2e 20 52 61 6e 67 65 20 30 2e 2e 2e 32 35 35 2c 20 64 65 66 61 75 6c 74 20 31 30 2e 00 53 65 | d..Range.0...255,.default.10..Se |
65f40 | 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 20 6f 66 20 41 2d 4d 50 44 55 20 70 | t.the.maximum.length.of.A-MPDU.p |
65f60 | 72 65 2d 45 4f 46 20 70 61 64 64 69 6e 67 20 74 68 61 74 20 74 68 65 20 73 74 61 74 69 6f 6e 20 | re-EOF.padding.that.the.station. |
65f80 | 63 61 6e 20 72 65 63 65 69 76 65 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 | can.receive.Set.the.maximum.numb |
65fa0 | 65 72 20 6f 66 20 54 43 50 20 68 61 6c 66 2d 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e | er.of.TCP.half-open.connections. |
65fc0 | 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 73 69 | .Set.the.maximum.request.body.si |
65fe0 | 7a 65 20 69 6e 20 6d 65 67 61 62 79 74 65 73 2e 20 44 65 66 61 75 6c 74 20 69 73 20 31 4d 42 2e | ze.in.megabytes..Default.is.1MB. |
66000 | 00 53 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 53 53 4c 20 3a 61 62 62 72 3a 60 | .Set.the.name.of.the.SSL.:abbr:` |
66020 | 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 50 4b 49 20 | CA.(Certificate.Authority)`.PKI. |
66040 | 65 6e 74 72 79 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 66 | entry.used.for.authentication.of |
66060 | 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 6d 65 64 | .the.remote.side..If.an.intermed |
66080 | 69 61 74 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 | iate.CA.certificate.is.specified |
660a0 | 2c 20 74 68 65 6e 20 61 6c 6c 20 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 | ,.then.all.parent.CA.certificate |
660c0 | 73 20 74 68 61 74 20 65 78 69 73 74 20 69 6e 20 74 68 65 20 50 4b 49 2c 20 73 75 63 68 20 61 73 | s.that.exist.in.the.PKI,.such.as |
660e0 | 20 74 68 65 20 72 6f 6f 74 20 43 41 20 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 74 65 72 | .the.root.CA.or.additional.inter |
66100 | 6d 65 64 69 61 74 65 20 43 41 73 2c 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | mediate.CAs,.will.automatically. |
66120 | 62 65 20 75 73 65 64 20 64 75 72 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 20 76 61 6c 69 64 | be.used.during.certificate.valid |
66140 | 61 74 69 6f 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 75 6c 6c 20 63 68 | ation.to.ensure.that.the.full.ch |
66160 | 61 69 6e 20 6f 66 20 74 72 75 73 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 00 53 65 74 20 74 | ain.of.trust.is.available..Set.t |
66180 | 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 78 35 30 39 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 | he.name.of.the.x509.client.keypa |
661a0 | 69 72 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 61 67 61 69 6e 73 74 20 | ir.used.to.authenticate.against. |
661c0 | 74 68 65 20 38 30 32 2e 31 78 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 70 61 72 65 6e 74 20 43 41 | the.802.1x.system..All.parent.CA |
661e0 | 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 20 63 65 72 74 | .certificates.of.the.client.cert |
66200 | 69 66 69 63 61 74 65 2c 20 73 75 63 68 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 61 6e | ificate,.such.as.intermediate.an |
66220 | 64 20 72 6f 6f 74 20 43 41 73 2c 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 73 20 70 61 72 74 | d.root.CAs,.will.be.sent.as.part |
66240 | 20 6f 66 20 74 68 65 20 45 41 50 2d 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 65 74 20 74 | .of.the.EAP-TLS.handshake..Set.t |
66260 | 68 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 20 49 44 20 66 6c 61 67 20 6f 66 20 74 68 65 20 69 6e | he.native.VLAN.ID.flag.of.the.in |
66280 | 74 65 72 66 61 63 65 2e 20 57 68 65 6e 20 61 20 64 61 74 61 20 70 61 63 6b 65 74 20 77 69 74 68 | terface..When.a.data.packet.with |
662a0 | 6f 75 74 20 61 20 56 4c 41 4e 20 74 61 67 20 65 6e 74 65 72 73 20 74 68 65 20 70 6f 72 74 2c 20 | out.a.VLAN.tag.enters.the.port,. |
662c0 | 74 68 65 20 64 61 74 61 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 63 65 64 20 74 | the.data.packet.will.be.forced.t |
662e0 | 6f 20 61 64 64 20 61 20 74 61 67 20 6f 66 20 61 20 73 70 65 63 69 66 69 63 20 76 6c 61 6e 20 69 | o.add.a.tag.of.a.specific.vlan.i |
66300 | 64 2e 20 57 68 65 6e 20 74 68 65 20 76 6c 61 6e 20 69 64 20 66 6c 61 67 20 66 6c 6f 77 73 20 6f | d..When.the.vlan.id.flag.flows.o |
66320 | 75 74 2c 20 74 68 65 20 74 61 67 20 6f 66 20 74 68 65 20 76 6c 61 6e 20 69 64 20 77 69 6c 6c 20 | ut,.the.tag.of.the.vlan.id.will. |
66340 | 62 65 20 73 74 72 69 70 70 65 64 00 53 65 74 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 61 73 20 | be.stripped.Set.the.next-hop.as. |
66360 | 75 6e 63 68 61 6e 67 65 64 2e 20 50 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 | unchanged..Pass.through.the.rout |
66380 | 65 2d 6d 61 70 20 77 69 74 68 6f 75 74 20 63 68 61 6e 67 69 6e 67 20 69 74 73 20 76 61 6c 75 65 | e-map.without.changing.its.value |
663a0 | 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 54 43 50 20 6d 61 78 69 6d 75 6d 20 72 | .Set.the.number.of.TCP.maximum.r |
663c0 | 65 74 72 61 6e 73 6d 69 74 20 61 74 74 65 6d 70 74 73 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 | etransmit.attempts..Set.the.numb |
663e0 | 65 72 20 6f 66 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 66 61 69 6c 75 72 65 73 20 62 65 66 6f | er.of.health.check.failures.befo |
66400 | 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6d 61 72 6b 65 64 20 61 73 20 75 6e 61 | re.an.interface.is.marked.as.una |
66420 | 76 61 69 6c 61 62 6c 65 2c 20 72 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 31 20 | vailable,.range.for.number.is.1. |
66440 | 74 6f 20 31 30 2c 20 64 65 66 61 75 6c 74 20 31 2e 20 4f 72 20 73 65 74 20 74 68 65 20 6e 75 6d | to.10,.default.1..Or.set.the.num |
66460 | 62 65 72 20 6f 66 20 73 75 63 63 65 73 73 66 75 6c 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 20 | ber.of.successful.health.checks. |
66480 | 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 64 64 65 64 20 62 61 63 | before.an.interface.is.added.bac |
664a0 | 6b 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 70 6f 6f 6c 2c 20 72 61 6e 67 65 20 66 | k.to.the.interface.pool,.range.f |
664c0 | 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c 74 20 31 2e | or.number.is.1.to.10,.default.1. |
664e0 | 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 | .Set.the.number.of.seconds.the.r |
66500 | 6f 75 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 6c 20 72 65 74 72 79 69 6e 67 20 74 6f 20 63 6f | outer.waits.until.retrying.to.co |
66520 | 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 | nnect.to.the.cache.server..Set.t |
66540 | 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 | he.number.of.seconds.the.router. |
66560 | 77 61 69 74 73 20 75 6e 74 69 6c 20 74 68 65 20 72 6f 75 74 65 72 20 65 78 70 69 72 65 73 20 74 | waits.until.the.router.expires.t |
66580 | 68 65 20 63 61 63 68 65 2e 00 53 65 74 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 | he.cache..Set.the.options.for.th |
665a0 | 69 73 20 70 75 62 6c 69 63 20 6b 65 79 2e 20 53 65 65 20 74 68 65 20 73 73 68 20 60 60 61 75 74 | is.public.key..See.the.ssh.``aut |
665c0 | 68 6f 72 69 7a 65 64 5f 6b 65 79 73 60 60 20 6d 61 6e 20 70 61 67 65 20 66 6f 72 20 64 65 74 61 | horized_keys``.man.page.for.deta |
665e0 | 69 6c 73 20 6f 66 20 77 68 61 74 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 65 72 65 | ils.of.what.you.can.specify.here |
66600 | 2e 20 54 6f 20 70 6c 61 63 65 20 61 20 60 60 22 60 60 20 63 68 61 72 61 63 74 65 72 20 69 6e 20 | ..To.place.a.``"``.character.in. |
66620 | 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 69 65 6c 64 2c 20 75 73 65 20 60 60 26 71 75 6f 74 3b 60 | the.options.field,.use.``"` |
66640 | 60 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 66 72 6f 6d 3d 26 71 75 6f 74 3b 31 30 2e 30 | `,.for.example.``from="10.0 |
66660 | 2e 30 2e 30 2f 32 34 26 71 75 6f 74 3b 60 60 20 74 6f 20 72 65 73 74 72 69 63 74 20 77 68 65 72 | .0.0/24"``.to.restrict.wher |
66680 | 65 20 74 68 65 20 75 73 65 72 20 6d 61 79 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 77 68 65 6e | e.the.user.may.connect.from.when |
666a0 | 20 75 73 69 6e 67 20 74 68 69 73 20 6b 65 79 2e 00 53 65 74 20 74 68 65 20 70 61 72 69 74 79 20 | .using.this.key..Set.the.parity. |
666c0 | 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 20 49 66 20 75 6e 73 65 74 | option.for.the.console..If.unset |
666e0 | 20 74 68 69 73 20 77 69 6c 6c 20 64 65 66 61 75 6c 74 20 74 6f 20 6e 6f 6e 65 2e 00 53 65 74 20 | .this.will.default.to.none..Set. |
66700 | 74 68 65 20 70 65 65 72 27 73 20 4d 41 43 20 61 64 64 72 65 73 73 00 53 65 74 20 74 68 65 20 70 | the.peer's.MAC.address.Set.the.p |
66720 | 65 65 72 27 73 20 6b 65 79 20 75 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 28 52 58 29 20 74 | eer's.key.used.to.receive.(RX).t |
66740 | 72 61 66 66 69 63 00 53 65 74 20 74 68 65 20 70 65 65 72 2d 73 65 73 73 69 6f 6e 2d 69 64 2c 20 | raffic.Set.the.peer-session-id,. |
66760 | 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 20 | which.is.a.32-bit.integer.value. |
66780 | 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 79 20 74 68 65 20 70 | assigned.to.the.session.by.the.p |
667a0 | 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 20 74 | eer..The.value.used.must.match.t |
667c0 | 68 65 20 73 65 73 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 | he.session_id.value.being.used.a |
667e0 | 74 20 74 68 65 20 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 72 65 73 74 61 72 74 20 62 65 68 61 | t.the.peer..Set.the.restart.beha |
66800 | 76 69 6f 72 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 53 65 74 20 74 68 65 20 72 | vior.of.the.container..Set.the.r |
66820 | 6f 75 74 65 20 6d 65 74 72 69 63 2e 20 57 68 65 6e 20 75 73 65 64 20 77 69 74 68 20 42 47 50 2c | oute.metric..When.used.with.BGP, |
66840 | 20 73 65 74 20 74 68 65 20 42 47 50 20 61 74 74 72 69 62 75 74 65 20 4d 45 44 20 74 6f 20 61 20 | .set.the.BGP.attribute.MED.to.a. |
66860 | 73 70 65 63 69 66 69 63 20 76 61 6c 75 65 2e 20 55 73 65 20 60 60 2b 2f 2d 60 60 20 74 6f 20 61 | specific.value..Use.``+/-``.to.a |
66880 | 64 64 20 6f 72 20 73 75 62 74 72 61 63 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c | dd.or.subtract.the.specified.val |
668a0 | 75 65 20 74 6f 2f 66 72 6f 6d 20 74 68 65 20 65 78 69 73 74 69 6e 67 2f 4d 45 44 2e 20 55 73 65 | ue.to/from.the.existing/MED..Use |
668c0 | 20 60 60 72 74 74 60 60 20 74 6f 20 73 65 74 20 74 68 65 20 4d 45 44 20 74 6f 20 74 68 65 20 72 | .``rtt``.to.set.the.MED.to.the.r |
668e0 | 6f 75 6e 64 20 74 72 69 70 20 74 69 6d 65 20 6f 72 20 60 60 2b 72 74 74 2f 2d 72 74 74 60 60 20 | ound.trip.time.or.``+rtt/-rtt``. |
66900 | 74 6f 20 61 64 64 2f 73 75 62 74 72 61 63 74 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 | to.add/subtract.the.round.trip.t |
66920 | 69 6d 65 20 74 6f 2f 66 72 6f 6d 20 74 68 65 20 4d 45 44 2e 00 53 65 74 20 74 68 65 20 72 6f 75 | ime.to/from.the.MED..Set.the.rou |
66940 | 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 20 77 69 74 | ting.table.to.forward.packet.wit |
66960 | 68 2e 00 53 65 74 20 74 68 65 20 73 65 73 73 69 6f 6e 20 69 64 2c 20 77 68 69 63 68 20 69 73 20 | h..Set.the.session.id,.which.is. |
66980 | 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 6c 79 | a.32-bit.integer.value..Uniquely |
669a0 | 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 20 73 65 73 73 69 6f 6e 20 62 65 69 6e 67 20 63 72 | .identifies.the.session.being.cr |
669c0 | 65 61 74 65 64 2e 20 54 68 65 20 76 61 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 | eated..The.value.used.must.match |
669e0 | 20 74 68 65 20 70 65 65 72 5f 73 65 73 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 | .the.peer_session_id.value.being |
66a00 | 20 75 73 65 64 20 61 74 20 74 68 65 20 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 73 68 61 70 65 | .used.at.the.peer..Set.the.shape |
66a20 | 72 20 62 61 6e 64 77 69 64 74 68 2c 20 65 69 74 68 65 72 20 61 73 20 61 6e 20 65 78 70 6c 69 63 | r.bandwidth,.either.as.an.explic |
66a40 | 69 74 20 62 69 74 72 61 74 65 20 6f 72 20 61 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 74 68 | it.bitrate.or.a.percentage.of.th |
66a60 | 65 20 69 6e 74 65 72 66 61 63 65 20 62 61 6e 64 77 69 64 74 68 2e 00 53 65 74 20 74 68 65 20 73 | e.interface.bandwidth..Set.the.s |
66a80 | 69 7a 65 20 6f 66 20 74 68 65 20 68 61 73 68 20 74 61 62 6c 65 2e 20 54 68 65 20 63 6f 6e 6e 65 | ize.of.the.hash.table..The.conne |
66aa0 | 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 68 20 74 61 62 6c 65 20 6d 61 6b 65 73 20 | ction.tracking.hash.table.makes. |
66ac0 | 73 65 61 72 63 68 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e | searching.the.connection.trackin |
66ae0 | 67 20 74 61 62 6c 65 20 66 61 73 74 65 72 2e 20 54 68 65 20 68 61 73 68 20 74 61 62 6c 65 20 75 | g.table.faster..The.hash.table.u |
66b00 | 73 65 73 20 e2 80 9c 62 75 63 6b 65 74 73 e2 80 9d 20 74 6f 20 72 65 63 6f 72 64 20 65 6e 74 72 | ses....buckets....to.record.entr |
66b20 | 69 65 73 20 69 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 | ies.in.the.connection.tracking.t |
66b40 | 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 6f 66 20 66 6f 72 77 61 | able..Set.the.source.IP.of.forwa |
66b60 | 72 64 65 64 20 70 61 63 6b 65 74 73 2c 20 6f 74 68 65 72 77 69 73 65 20 6f 72 69 67 69 6e 61 6c | rded.packets,.otherwise.original |
66b80 | 20 73 65 6e 64 65 72 73 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 2e 00 53 65 74 20 74 68 | .senders.address.is.used..Set.th |
66ba0 | 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 | e.timeout.in.secounds.for.a.prot |
66bc0 | 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 20 69 6e 20 61 20 63 75 73 74 6f 6d 20 72 75 6c 65 2e 00 | ocol.or.state.in.a.custom.rule.. |
66be0 | 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 | Set.the.timeout.in.secounds.for. |
66c00 | 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 2e 00 53 65 74 20 74 68 65 20 74 75 6e | a.protocol.or.state..Set.the.tun |
66c20 | 6e 65 6c 20 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 | nel.id,.which.is.a.32-bit.intege |
66c40 | 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 | r.value..Uniquely.identifies.the |
66c60 | 20 74 75 6e 6e 65 6c 20 69 6e 74 6f 20 77 68 69 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 | .tunnel.into.which.the.session.w |
66c80 | 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 2e 00 53 65 74 20 74 68 65 20 77 69 6e 64 6f 77 20 73 | ill.be.created..Set.the.window.s |
66ca0 | 63 61 6c 65 20 66 61 63 74 6f 72 20 66 6f 72 20 54 43 50 20 77 69 6e 64 6f 77 20 73 63 61 6c 69 | cale.factor.for.TCP.window.scali |
66cc0 | 6e 67 00 53 65 74 20 77 69 6e 64 6f 77 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 6c 79 20 76 61 | ng.Set.window.of.concurrently.va |
66ce0 | 6c 69 64 20 63 6f 64 65 73 2e 00 53 65 74 73 20 74 68 65 20 48 54 54 50 20 6d 65 74 68 6f 64 20 | lid.codes..Sets.the.HTTP.method. |
66d00 | 74 6f 20 62 65 20 75 73 65 64 2c 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 3a 20 6f 70 74 69 6f | to.be.used,.can.be.either:.optio |
66d20 | 6e 2c 20 67 65 74 2c 20 70 6f 73 74 2c 20 70 75 74 00 53 65 74 73 20 74 68 65 20 65 6e 64 70 6f | n,.get,.post,.put.Sets.the.endpo |
66d40 | 69 6e 74 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 | int.to.be.used.for.health.checks |
66d60 | 00 53 65 74 73 20 74 68 65 20 65 78 70 65 63 74 65 64 20 72 65 73 75 6c 74 20 63 6f 6e 64 69 74 | .Sets.the.expected.result.condit |
66d80 | 69 6f 6e 20 66 6f 72 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 61 20 73 65 72 76 65 72 20 68 65 61 | ion.for.considering.a.server.hea |
66da0 | 6c 74 68 79 2e 20 53 6f 6d 65 20 70 6f 73 73 69 62 6c 65 20 65 78 61 6d 70 6c 65 73 20 61 72 65 | lthy..Some.possible.examples.are |
66dc0 | 3a 00 53 65 74 73 20 74 68 65 20 69 6d 61 67 65 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 68 75 62 | :.Sets.the.image.name.in.the.hub |
66de0 | 20 72 65 67 69 73 74 72 79 00 53 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 | .registry.Sets.the.interface.to. |
66e00 | 6c 69 73 74 65 6e 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 2e | listen.for.multicast.packets.on. |
66e20 | 20 43 6f 75 6c 64 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 2c 20 6e 6f 74 20 79 65 74 20 74 65 | .Could.be.a.loopback,.not.yet.te |
66e40 | 73 74 65 64 2e 00 53 65 74 73 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 70 6f 72 74 20 66 6f | sted..Sets.the.listening.port.fo |
66e60 | 72 20 61 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 6f 76 65 72 | r.a.listening.address..This.over |
66e80 | 72 69 64 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 33 31 32 38 20 6f | rides.the.default.port.of.3128.o |
66ea0 | 6e 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 2e 00 53 | n.the.specific.listen.address..S |
66ec0 | 65 74 73 20 74 68 65 20 75 6e 69 71 75 65 20 69 64 20 66 6f 72 20 74 68 69 73 20 76 78 6c 61 6e | ets.the.unique.id.for.this.vxlan |
66ee0 | 2d 69 6e 74 65 72 66 61 63 65 2e 20 4e 6f 74 20 73 75 72 65 20 68 6f 77 20 69 74 20 63 6f 72 72 | -interface..Not.sure.how.it.corr |
66f00 | 65 6c 61 74 65 73 20 77 69 74 68 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 2e 00 53 | elates.with.multicast-address..S |
66f20 | 65 74 74 69 6e 67 20 56 52 52 50 20 67 72 6f 75 70 20 70 72 69 6f 72 69 74 79 00 53 65 74 74 69 | etting.VRRP.group.priority.Setti |
66f40 | 6e 67 20 6e 61 6d 65 00 53 65 74 74 69 6e 67 20 74 68 69 73 20 75 70 20 6f 6e 20 41 57 53 20 77 | ng.name.Setting.this.up.on.AWS.w |
66f60 | 69 6c 6c 20 72 65 71 75 69 72 65 20 61 20 22 43 75 73 74 6f 6d 20 50 72 6f 74 6f 63 6f 6c 20 52 | ill.require.a."Custom.Protocol.R |
66f80 | 75 6c 65 22 20 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 22 34 37 22 20 28 47 | ule".for.protocol.number."47".(G |
66fa0 | 52 45 29 20 41 6c 6c 6f 77 20 52 75 6c 65 20 69 6e 20 54 57 4f 20 70 6c 61 63 65 73 2e 20 46 69 | RE).Allow.Rule.in.TWO.places..Fi |
66fc0 | 72 73 74 6c 79 20 6f 6e 20 74 68 65 20 56 50 43 20 4e 65 74 77 6f 72 6b 20 41 43 4c 2c 20 61 6e | rstly.on.the.VPC.Network.ACL,.an |
66fe0 | 64 20 73 65 63 6f 6e 64 6c 79 20 6f 6e 20 74 68 65 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 | d.secondly.on.the.security.group |
67000 | 20 6e 65 74 77 6f 72 6b 20 41 43 4c 20 61 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 20 45 43 32 | .network.ACL.attached.to.the.EC2 |
67020 | 20 69 6e 73 74 61 6e 63 65 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 | .instance..This.has.been.tested. |
67040 | 61 73 20 77 6f 72 6b 69 6e 67 20 66 6f 72 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 41 4d 49 20 | as.working.for.the.official.AMI. |
67060 | 69 6d 61 67 65 20 6f 6e 20 74 68 65 20 41 57 53 20 4d 61 72 6b 65 74 70 6c 61 63 65 2e 20 28 4c | image.on.the.AWS.Marketplace..(L |
67080 | 6f 63 61 74 65 20 74 68 65 20 63 6f 72 72 65 63 74 20 56 50 43 20 61 6e 64 20 73 65 63 75 72 69 | ocate.the.correct.VPC.and.securi |
670a0 | 74 79 20 67 72 6f 75 70 20 62 79 20 6e 61 76 69 67 61 74 69 6e 67 20 74 68 72 6f 75 67 68 20 74 | ty.group.by.navigating.through.t |
670c0 | 68 65 20 64 65 74 61 69 6c 73 20 70 61 6e 65 20 62 65 6c 6f 77 20 79 6f 75 72 20 45 43 32 20 69 | he.details.pane.below.your.EC2.i |
670e0 | 6e 73 74 61 6e 63 65 20 69 6e 20 74 68 65 20 41 57 53 20 63 6f 6e 73 6f 6c 65 29 2e 00 53 65 74 | nstance.in.the.AWS.console)..Set |
67100 | 74 69 6e 67 20 75 70 20 49 50 53 65 63 3a 00 53 65 74 74 69 6e 67 20 75 70 20 4f 70 65 6e 56 50 | ting.up.IPSec:.Setting.up.OpenVP |
67120 | 4e 00 53 65 74 74 69 6e 67 20 75 70 20 61 20 66 75 6c 6c 2d 62 6c 6f 77 6e 20 50 4b 49 20 77 69 | N.Setting.up.a.full-blown.PKI.wi |
67140 | 74 68 20 61 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 77 6f 75 6c 64 20 61 72 67 75 61 62 | th.a.CA.certificate.would.arguab |
67160 | 6c 79 20 64 65 66 65 61 74 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 73 69 74 65 2d 74 6f | ly.defeat.the.purpose.of.site-to |
67180 | 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 2c 20 73 69 6e 63 65 20 69 74 73 20 6d 61 69 6e 20 67 6f | -site.OpenVPN,.since.its.main.go |
671a0 | 61 6c 20 69 73 20 73 75 70 70 6f 73 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | al.is.supposed.to.be.configurati |
671c0 | 6f 6e 20 73 69 6d 70 6c 69 63 69 74 79 2c 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 73 65 72 76 65 | on.simplicity,.compared.to.serve |
671e0 | 72 20 73 65 74 75 70 73 20 74 68 61 74 20 6e 65 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6d 75 | r.setups.that.need.to.support.mu |
67200 | 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 | ltiple.clients..Setting.up.certi |
67220 | 66 69 63 61 74 65 73 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 3a | ficates.Setting.up.certificates: |
67240 | 00 53 65 74 74 69 6e 67 20 75 70 20 74 75 6e 6e 65 6c 3a 00 53 65 74 74 69 6e 67 20 77 69 6c 6c | .Setting.up.tunnel:.Setting.will |
67260 | 20 6f 6e 6c 79 20 62 65 63 6f 6d 65 20 61 63 74 69 76 65 20 77 69 74 68 20 74 68 65 20 6e 65 78 | .only.become.active.with.the.nex |
67280 | 74 20 72 65 62 6f 6f 74 21 00 53 65 74 75 70 20 44 48 43 50 20 48 41 20 66 6f 72 20 6e 65 74 77 | t.reboot!.Setup.DHCP.HA.for.netw |
672a0 | 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 00 53 65 74 75 70 20 44 48 43 50 20 66 61 69 6c | ork.192.0.2.0/24.Setup.DHCP.fail |
672c0 | 6f 76 65 72 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 00 53 65 | over.for.network.192.0.2.0/24.Se |
672e0 | 74 75 70 20 65 6e 63 72 79 70 74 65 64 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 67 69 76 65 6e | tup.encrypted.password.for.given |
67300 | 20 75 73 65 72 6e 61 6d 65 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 74 72 | .username..This.is.useful.for.tr |
67320 | 61 6e 73 66 65 72 72 69 6e 67 20 61 20 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 66 72 6f | ansferring.a.hashed.password.fro |
67340 | 6d 20 73 79 73 74 65 6d 20 74 6f 20 73 79 73 74 65 6d 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c | m.system.to.system..Setup.the.`< |
67360 | 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 | timeout>`.in.seconds.when.queryi |
67380 | 6e 67 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 | ng.the.RADIUS.server..Setup.the. |
673a0 | 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 | `<timeout>`.in.seconds.when.quer |
673c0 | 79 69 6e 67 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 | ying.the.TACACS.server..Setup.th |
673e0 | 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d | e.dynamic.DNS.hostname.`<hostnam |
67400 | 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 | e>`.associated.with.the.DynDNS.p |
67420 | 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d | rovider.identified.by.`<service- |
67440 | 6e 61 6d 65 3e 60 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f | name>`..Setup.the.dynamic.DNS.ho |
67460 | 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 | stname.`<hostname>`.associated.w |
67480 | 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 | ith.the.DynDNS.provider.identifi |
674a0 | 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 | ed.by.`<service>`.when.the.IP.ad |
674c0 | 64 72 65 73 73 20 6f 6e 20 61 64 64 72 65 73 73 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 | dress.on.address.`<interface>`.c |
674e0 | 68 61 6e 67 65 73 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f | hanges..Setup.the.dynamic.DNS.ho |
67500 | 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 | stname.`<hostname>`.associated.w |
67520 | 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 | ith.the.DynDNS.provider.identifi |
67540 | 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 | ed.by.`<service>`.when.the.IP.ad |
67560 | 64 72 65 73 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | dress.on.interface.`<interface>` |
67580 | 20 63 68 61 6e 67 65 73 2e 00 53 65 76 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 | .changes..Several.commands.utili |
675a0 | 7a 65 20 63 55 52 4c 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 | ze.cURL.to.initiate.transfers..C |
675c0 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 76 34 2f 49 | onfigure.the.local.source.IPv4/I |
675e0 | 50 76 36 20 61 64 64 72 65 73 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 63 55 52 4c 20 6f 70 | Pv6.address.used.for.all.cURL.op |
67600 | 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 | erations..Several.commands.utili |
67620 | 7a 65 20 63 75 72 6c 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 | ze.curl.to.initiate.transfers..C |
67640 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 69 6e 74 65 72 66 | onfigure.the.local.source.interf |
67660 | 61 63 65 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 43 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 | ace.used.for.all.CURL.operations |
67680 | 2e 00 53 65 76 65 72 69 74 79 00 53 65 76 65 72 69 74 79 20 4c 65 76 65 6c 00 53 68 61 70 65 72 | ..Severity.Severity.Level.Shaper |
676a0 | 00 53 68 6f 72 74 20 47 49 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 53 68 6f 72 74 20 47 49 20 | .Short.GI.capabilities.Short.GI. |
676c0 | 63 61 70 61 62 69 6c 69 74 69 65 73 20 66 6f 72 20 32 30 20 61 6e 64 20 34 30 20 4d 48 7a 00 53 | capabilities.for.20.and.40.MHz.S |
676e0 | 68 6f 72 74 20 62 75 72 73 74 73 20 63 61 6e 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 65 78 | hort.bursts.can.be.allowed.to.ex |
67700 | 63 65 65 64 20 74 68 65 20 6c 69 6d 69 74 2e 20 4f 6e 20 63 72 65 61 74 69 6f 6e 2c 20 74 68 65 | ceed.the.limit..On.creation,.the |
67720 | 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 74 72 61 66 66 69 63 20 69 73 20 73 74 6f 63 6b 65 64 | .Rate-Control.traffic.is.stocked |
67740 | 20 77 69 74 68 20 74 6f 6b 65 6e 73 20 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f | .with.tokens.which.correspond.to |
67760 | 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 72 61 66 66 69 63 20 74 68 61 74 20 63 61 6e 20 | .the.amount.of.traffic.that.can. |
67780 | 62 65 20 62 75 72 73 74 20 69 6e 20 6f 6e 65 20 67 6f 2e 20 54 6f 6b 65 6e 73 20 61 72 72 69 76 | be.burst.in.one.go..Tokens.arriv |
677a0 | 65 20 61 74 20 61 20 73 74 65 61 64 79 20 72 61 74 65 2c 20 75 6e 74 69 6c 20 74 68 65 20 62 75 | e.at.a.steady.rate,.until.the.bu |
677c0 | 63 6b 65 74 20 69 73 20 66 75 6c 6c 2e 00 53 68 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 66 6f | cket.is.full..Shortcut.syntax.fo |
677e0 | 72 20 73 70 65 63 69 66 79 69 6e 67 20 61 75 74 6f 6d 61 74 69 63 20 6c 65 61 6b 69 6e 67 20 66 | r.specifying.automatic.leaking.f |
67800 | 72 6f 6d 20 76 72 66 20 56 52 46 4e 41 4d 45 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 56 | rom.vrf.VRFNAME.to.the.current.V |
67820 | 52 46 20 75 73 69 6e 67 20 74 68 65 20 56 50 4e 20 52 49 42 20 61 73 20 69 6e 74 65 72 6d 65 64 | RF.using.the.VPN.RIB.as.intermed |
67840 | 69 61 72 79 2e 20 54 68 65 20 52 44 20 61 6e 64 20 52 54 20 61 72 65 20 61 75 74 6f 20 64 65 72 | iary..The.RD.and.RT.are.auto.der |
67860 | 69 76 65 64 20 61 6e 64 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 70 65 63 69 66 69 65 64 | ived.and.should.not.be.specified |
67880 | 20 65 78 70 6c 69 63 69 74 6c 79 20 66 6f 72 20 65 69 74 68 65 72 20 74 68 65 20 73 6f 75 72 63 | .explicitly.for.either.the.sourc |
678a0 | 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 56 52 46 e2 80 99 73 2e 00 53 68 6f 77 00 53 | e.or.destination.VRF...s..Show.S |
678c0 | 68 6f 77 20 44 48 43 50 20 73 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 | how.DHCP.server.daemon.log.file. |
678e0 | 53 68 6f 77 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 | Show.DHCPv6.server.daemon.log.fi |
67900 | 6c 65 00 53 68 6f 77 20 46 69 72 65 77 61 6c 6c 20 6c 6f 67 00 53 68 6f 77 20 4c 4c 44 50 20 6e | le.Show.Firewall.log.Show.LLDP.n |
67920 | 65 69 67 68 62 6f 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 | eighbors.connected.via.interface |
67940 | 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 53 53 48 20 64 79 6e 61 6d 69 63 | .`<interface>`..Show.SSH.dynamic |
67960 | 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 | -protection.log..Show.SSH.server |
67980 | 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 | .log..Show.SSH.server.public.key |
679a0 | 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 20 76 69 73 75 61 | .fingerprints,.including.a.visua |
679c0 | 6c 20 41 53 43 49 49 20 61 72 74 20 72 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 2e 00 53 68 6f 77 | l.ASCII.art.representation..Show |
679e0 | 20 53 53 48 20 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 | .SSH.server.public.key.fingerpri |
67a00 | 6e 74 73 2e 00 53 68 6f 77 20 57 41 4e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 66 6f | nts..Show.WAN.load.balancer.info |
67a20 | 72 6d 61 74 69 6f 6e 20 69 6e 63 6c 75 64 69 6e 67 20 74 65 73 74 20 74 79 70 65 73 20 61 6e 64 | rmation.including.test.types.and |
67a40 | 20 74 61 72 67 65 74 73 2e 20 41 20 63 68 61 72 61 63 74 65 72 20 61 74 20 74 68 65 20 73 74 61 | .targets..A.character.at.the.sta |
67a60 | 72 74 20 6f 66 20 65 61 63 68 20 6c 69 6e 65 20 64 65 70 69 63 74 73 20 74 68 65 20 73 74 61 74 | rt.of.each.line.depicts.the.stat |
67a80 | 65 20 6f 66 20 74 68 65 20 74 65 73 74 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 | e.of.the.test.Show.WWAN.module.I |
67aa0 | 4d 45 49 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 4d 53 49 2e 00 53 68 6f 77 | MEI..Show.WWAN.module.IMSI..Show |
67ac0 | 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 4d 53 49 53 44 4e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d | .WWAN.module.MSISDN..Show.WWAN.m |
67ae0 | 6f 64 75 6c 65 20 53 49 4d 20 63 61 72 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 | odule.SIM.card.information..Show |
67b00 | 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 66 69 72 6d 77 61 72 65 2e 00 53 68 6f 77 20 57 57 41 4e | .WWAN.module.firmware..Show.WWAN |
67b20 | 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 61 72 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 53 | .module.hardware.capabilities..S |
67b40 | 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 61 72 65 20 72 65 76 69 73 69 6f | how.WWAN.module.hardware.revisio |
67b60 | 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 6d 6f 64 65 6c 2e 00 53 68 6f 77 20 | n..Show.WWAN.module.model..Show. |
67b80 | 57 57 41 4e 20 6d 6f 64 75 6c 65 20 73 69 67 6e 61 6c 20 73 74 72 65 6e 67 74 68 2e 00 53 68 6f | WWAN.module.signal.strength..Sho |
67ba0 | 77 20 61 20 6c 69 73 74 20 61 76 61 69 6c 61 62 6c 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 | w.a.list.available.container.net |
67bc0 | 77 6f 72 6b 73 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a | works.Show.a.list.of.installed.: |
67be0 | 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 | abbr:`CA.(Certificate.Authority) |
67c00 | 60 20 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 | `.certificates..Show.a.list.of.i |
67c20 | 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 43 52 4c 73 20 28 43 65 72 74 69 66 69 63 61 74 | nstalled.:abbr:`CRLs.(Certificat |
67c40 | 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 4c 69 73 74 29 60 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 | e.Revocation.List)`..Show.a.list |
67c60 | 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 68 6f 77 20 | .of.installed.certificates.Show. |
67c80 | 61 6c 6c 20 42 46 44 20 70 65 65 72 73 00 53 68 6f 77 20 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 | all.BFD.peers.Show.available.off |
67ca0 | 6c 6f 61 64 69 6e 67 20 66 75 6e 63 74 69 6f 6e 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 | loading.functions.on.given.`<int |
67cc0 | 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 62 69 6e 64 65 64 20 71 61 74 20 64 65 76 69 63 65 20 | erface>`.Show.binded.qat.device. |
67ce0 | 69 6e 74 65 72 72 75 70 74 73 20 74 6f 20 63 65 72 74 61 69 6e 20 63 6f 72 65 2e 00 53 68 6f 77 | interrupts.to.certain.core..Show |
67d00 | 20 62 72 69 64 67 65 20 60 3c 6e 61 6d 65 3e 60 20 66 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 | .bridge.`<name>`.fdb.displays.th |
67d20 | 65 20 63 75 72 72 65 6e 74 20 66 6f 72 77 61 72 64 69 6e 67 20 74 61 62 6c 65 3a 00 53 68 6f 77 | e.current.forwarding.table:.Show |
67d40 | 20 62 72 69 64 67 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 | .bridge.`<name>`.mdb.displays.th |
67d60 | 65 20 63 75 72 72 65 6e 74 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 | e.current.multicast.group.member |
67d80 | 73 68 69 70 20 74 61 62 6c 65 2e 54 68 65 20 74 61 62 6c 65 20 69 73 20 70 6f 70 75 6c 61 74 65 | ship.table.The.table.is.populate |
67da0 | 64 20 62 79 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 20 69 6e 20 74 68 | d.by.IGMP.and.MLD.snooping.in.th |
67dc0 | 65 20 62 72 69 64 67 65 20 64 72 69 76 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 00 53 | e.bridge.driver.automatically..S |
67de0 | 68 6f 77 20 62 72 69 65 66 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e | how.brief.interface.information. |
67e00 | 00 53 68 6f 77 20 63 6f 6d 6d 61 6e 64 73 00 53 68 6f 77 20 63 6f 6e 66 69 67 75 72 65 64 20 73 | .Show.commands.Show.configured.s |
67e20 | 65 72 69 61 6c 20 70 6f 72 74 73 20 61 6e 64 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 | erial.ports.and.their.respective |
67e40 | 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 | .interface.configuration..Show.c |
67e60 | 6f 6e 6e 65 63 74 69 6f 6e 20 64 61 74 61 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 | onnection.data.of.load.balanced. |
67e80 | 74 72 61 66 66 69 63 3a 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 | traffic:.Show.connection.syncing |
67ea0 | 20 65 78 74 65 72 6e 61 6c 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 6f 6e | .external.cache.entries.Show.con |
67ec0 | 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 20 69 6e 74 65 72 6e 61 6c 20 63 61 63 68 65 20 65 | nection.syncing.internal.cache.e |
67ee0 | 6e 74 72 69 65 73 00 53 68 6f 77 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 | ntries.Show.currently.connected. |
67f00 | 75 73 65 72 73 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | users..Show.detailed.information |
67f20 | 20 61 62 6f 75 74 20 61 6c 6c 20 6c 65 61 72 6e 65 64 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 | .about.all.learned.Segment.Routi |
67f40 | 6e 67 20 4e 6f 64 65 73 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 | ng.Nodes.Show.detailed.informati |
67f60 | 6f 6e 20 61 62 6f 75 74 20 70 72 65 66 69 78 2d 73 69 64 20 61 6e 64 20 6c 61 62 65 6c 20 6c 65 | on.about.prefix-sid.and.label.le |
67f80 | 61 72 6e 65 64 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | arned.Show.detailed.information. |
67fa0 | 61 62 6f 75 74 20 74 68 65 20 75 6e 64 65 72 6c 61 79 69 6e 67 20 70 68 79 73 69 63 61 6c 20 6c | about.the.underlaying.physical.l |
67fc0 | 69 6e 6b 73 20 6f 6e 20 67 69 76 65 6e 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | inks.on.given.bond.`<interface>` |
67fe0 | 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 | ..Show.detailed.information.on.g |
68000 | 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 | iven.`<interface>`.Show.detailed |
68020 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 6c 6f 6f 70 62 61 | .information.on.the.given.loopba |
68040 | 63 6b 20 69 6e 74 65 72 66 61 63 65 20 60 6c 6f 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 | ck.interface.`lo`..Show.detailed |
68060 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 75 6d 6d 61 72 79 20 6f 6e 20 67 69 76 65 6e 20 60 3c | .information.summary.on.given.`< |
68080 | 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 | interface>`.Show.flow.accounting |
680a0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 | .information.for.given.`<interfa |
680c0 | 63 65 3e 60 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 20 6f 6e 6c 79 2e 00 53 | ce>`.for.a.specific.host.only..S |
680e0 | 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | how.flow.accounting.information. |
68100 | 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 67 65 | for.given.`<interface>`..Show.ge |
68120 | 6e 65 72 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 73 70 65 63 69 66 69 63 | neral.information.about.specific |
68140 | 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 00 53 68 6f 77 20 69 6e 66 6f 20 61 | .WireGuard.interface.Show.info.a |
68160 | 62 6f 75 74 20 74 68 65 20 57 69 72 65 67 75 61 72 64 20 73 65 72 76 69 63 65 2e 20 49 74 20 61 | bout.the.Wireguard.service..It.a |
68180 | 6c 73 6f 20 73 68 6f 77 73 20 74 68 65 20 6c 61 74 65 73 74 20 68 61 6e 64 73 68 61 6b 65 2e 00 | lso.shows.the.latest.handshake.. |
681a0 | 53 68 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 70 68 79 73 69 63 61 6c 20 | Show.information.about.physical. |
681c0 | 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 20 6c 69 73 74 20 6f 66 20 49 50 73 20 63 | `<interface>`.Show.list.of.IPs.c |
681e0 | 75 72 72 65 6e 74 6c 79 20 62 6c 6f 63 6b 65 64 20 62 79 20 53 53 48 20 64 79 6e 61 6d 69 63 2d | urrently.blocked.by.SSH.dynamic- |
68200 | 70 72 6f 74 65 63 74 69 6f 6e 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 | protection..Show.logs.for.mDNS.r |
68220 | 65 70 65 61 74 65 72 20 73 65 72 76 69 63 65 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 | epeater.service..Show.logs.from. |
68240 | 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d | a.given.container.Show.logs.from |
68260 | 20 61 6c 6c 20 44 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 | .all.DHCP.client.processes..Show |
68280 | 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f | .logs.from.all.DHCPv6.client.pro |
682a0 | 63 65 73 73 65 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 | cesses..Show.logs.from.specific. |
682c0 | 60 69 6e 74 65 72 66 61 63 65 60 20 44 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e | `interface`.DHCP.client.process. |
682e0 | 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 | .Show.logs.from.specific.`interf |
68300 | 61 63 65 60 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 | ace`.DHCPv6.client.process..Show |
68320 | 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 | .only.information.for.specified. |
68340 | 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 2e 00 53 68 6f 77 20 6f 6e 6c 79 | Certificate.Authority..Show.only |
68360 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 63 65 72 74 69 | .information.for.specified.certi |
68380 | 66 69 63 61 74 65 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 69 6e 20 74 68 65 20 | ficate..Show.only.leases.in.the. |
683a0 | 73 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 | specified.pool..Show.only.leases |
683c0 | 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 | .with.the.specified.state..Possi |
683e0 | 62 6c 65 20 73 74 61 74 65 73 3a 20 61 62 61 6e 64 6f 6e 65 64 2c 20 61 63 74 69 76 65 2c 20 61 | ble.states:.abandoned,.active,.a |
68400 | 6c 6c 2c 20 62 61 63 6b 75 70 2c 20 65 78 70 69 72 65 64 2c 20 66 72 65 65 2c 20 72 65 6c 65 61 | ll,.backup,.expired,.free,.relea |
68420 | 73 65 64 2c 20 72 65 73 65 74 20 28 64 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 | sed,.reset.(default.=.active).Sh |
68440 | 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 | ow.only.leases.with.the.specifie |
68460 | 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 6c 6c 2c 20 61 | d.state..Possible.states:.all,.a |
68480 | 63 74 69 76 65 2c 20 66 72 65 65 2c 20 65 78 70 69 72 65 64 2c 20 72 65 6c 65 61 73 65 64 2c 20 | ctive,.free,.expired,.released,. |
684a0 | 61 62 61 6e 64 6f 6e 65 64 2c 20 72 65 73 65 74 2c 20 62 61 63 6b 75 70 20 28 64 65 66 61 75 6c | abandoned,.reset,.backup.(defaul |
684c0 | 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 6f 77 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 65 | t.=.active).Show.routing.table.e |
684e0 | 6e 74 72 79 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 53 68 6f 77 | ntry.for.the.default.route..Show |
68500 | 20 73 70 65 63 69 66 69 63 20 4d 41 43 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 | .specific.MACsec.interface.infor |
68520 | 6d 61 74 69 6f 6e 00 53 68 6f 77 20 73 74 61 74 75 73 20 6f 66 20 6e 65 77 20 73 65 74 75 70 3a | mation.Show.status.of.new.setup: |
68540 | 00 53 68 6f 77 20 73 74 61 74 75 73 65 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 | .Show.statuses.of.all.active.lea |
68560 | 73 65 73 20 67 72 61 6e 74 65 64 20 62 79 20 6c 6f 63 61 6c 20 28 74 68 69 73 20 73 65 72 76 65 | ses.granted.by.local.(this.serve |
68580 | 72 29 20 6f 72 20 72 65 6d 6f 74 65 20 28 66 61 69 6c 6f 76 65 72 20 73 65 72 76 65 72 29 3a 00 | r).or.remote.(failover.server):. |
685a0 | 53 68 6f 77 20 73 74 61 74 75 73 65 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 | Show.statuses.of.all.active.leas |
685c0 | 65 73 3a 00 53 68 6f 77 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 | es:.Show.the.DHCP.server.statist |
685e0 | 69 63 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 | ics.for.the.specified.pool..Show |
68600 | 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 69 63 73 3a 00 53 68 6f | .the.DHCP.server.statistics:.Sho |
68620 | 77 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 74 | w.the.console.server.log..Show.t |
68640 | 68 65 20 66 75 6c 6c 20 63 6f 6e 66 69 67 20 75 70 6c 6f 61 64 65 64 20 74 6f 20 74 68 65 20 51 | he.full.config.uploaded.to.the.Q |
68660 | 41 54 20 64 65 76 69 63 65 2e 00 53 68 6f 77 20 74 68 65 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 | AT.device..Show.the.list.of.all. |
68680 | 61 63 74 69 76 65 20 63 6f 6e 74 61 69 6e 65 72 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 63 61 | active.containers..Show.the.loca |
686a0 | 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 | l.container.images..Show.the.log |
686c0 | 73 20 6f 66 20 61 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 | s.of.a.specific.Rule-Set..Show.t |
686e0 | 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c | he.logs.of.all.firewall;.show.al |
68700 | 6c 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c | l.bridge.firewall.logs;.show.all |
68720 | 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 77 61 72 64 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c | .logs.for.forward.hook;.show.all |
68740 | 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 77 61 72 64 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 | .logs.for.forward.hook.and.prior |
68760 | 69 74 79 20 66 69 6c 74 65 72 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 | ity.filter;.show.all.logs.for.pa |
68780 | 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 | rticular.custom.chain;.show.logs |
687a0 | 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 | .for.specific.Rule-Set..Show.the |
687c0 | 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 | .logs.of.all.firewall;.show.all. |
687e0 | 69 70 76 34 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 | ipv4.firewall.logs;.show.all.log |
68800 | 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 | s.for.particular.hook;.show.all. |
68820 | 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 | logs.for.particular.hook.and.pri |
68840 | 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 | ority;.show.all.logs.for.particu |
68860 | 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 | lar.custom.chain;.show.logs.for. |
68880 | 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 | specific.Rule-Set..Show.the.logs |
688a0 | 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 36 20 | .of.all.firewall;.show.all.ipv6. |
688c0 | 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 | firewall.logs;.show.all.logs.for |
688e0 | 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 | .particular.hook;.show.all.logs. |
68900 | 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 | for.particular.hook.and.priority |
68920 | 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 | ;.show.all.logs.for.particular.c |
68940 | 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 | ustom.chain;.show.logs.for.speci |
68960 | 66 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 72 6f 75 74 65 00 53 68 6f | fic.Rule-Set..Show.the.route.Sho |
68980 | 77 20 74 72 61 6e 73 63 65 69 76 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 70 | w.transceiver.information.from.p |
689a0 | 6c 75 67 69 6e 20 6d 6f 64 75 6c 65 73 2c 20 65 2e 67 20 53 46 50 2b 2c 20 51 53 46 50 00 53 68 | lugin.modules,.e.g.SFP+,.QSFP.Sh |
689c0 | 6f 77 69 6e 67 20 42 46 44 20 6d 6f 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 | owing.BFD.monitored.static.route |
689e0 | 73 00 53 68 6f 77 73 20 73 74 61 74 75 73 20 6f 66 20 61 6c 6c 20 61 73 73 69 67 6e 65 64 20 6c | s.Shows.status.of.all.assigned.l |
68a00 | 65 61 73 65 73 3a 00 53 69 64 65 20 41 3a 00 53 69 64 65 20 42 3a 00 53 69 65 72 72 61 20 57 69 | eases:.Side.A:.Side.B:.Sierra.Wi |
68a20 | 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 33 30 34 20 6d 69 6e 69 50 43 49 65 20 | reless.AirPrime.MC7304.miniPCIe. |
68a40 | 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 | card.(LTE).Sierra.Wireless.AirPr |
68a60 | 69 6d 65 20 4d 43 37 34 33 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 | ime.MC7430.miniPCIe.card.(LTE).S |
68a80 | 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 35 35 20 6d | ierra.Wireless.AirPrime.MC7455.m |
68aa0 | 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 | iniPCIe.card.(LTE).Sierra.Wirele |
68ac0 | 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 | ss.AirPrime.MC7710.miniPCIe.card |
68ae0 | 20 28 4c 54 45 29 00 53 69 6d 69 6c 61 72 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 20 61 72 65 20 | .(LTE).Similar.combinations.are. |
68b00 | 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 74 68 65 20 64 65 61 64 2d 70 65 65 72 2d 64 65 74 | applicable.for.the.dead-peer-det |
68b20 | 65 63 74 69 6f 6e 2e 00 53 69 6d 70 6c 65 20 42 61 62 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | ection..Simple.Babel.configurati |
68b40 | 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 | on.using.2.nodes.and.redistribut |
68b60 | 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 | ing.connected.interfaces..Simple |
68b80 | 20 52 49 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 | .RIP.configuration.using.2.nodes |
68ba0 | 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e | .and.redistributing.connected.in |
68bc0 | 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 20 73 65 74 75 70 20 77 69 74 68 20 6f 6e 65 20 | terfaces..Simple.setup.with.one. |
68be0 | 75 73 65 72 20 61 64 64 65 64 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 | user.added.and.password.authenti |
68c00 | 63 61 74 69 6f 6e 3a 00 53 69 6d 70 6c 65 20 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 61 75 74 | cation:.Simple.text.password.aut |
68c20 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 69 6e 73 65 63 75 72 65 20 61 6e 64 20 64 65 70 72 | hentication.is.insecure.and.depr |
68c40 | 65 63 61 74 65 64 20 69 6e 20 66 61 76 6f 75 72 20 6f 66 20 4d 44 35 20 48 4d 41 43 20 61 75 74 | ecated.in.favour.of.MD5.HMAC.aut |
68c60 | 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 53 69 6e 63 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 | hentication..Since.both.routers. |
68c80 | 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 69 72 20 65 66 66 65 63 74 69 76 65 20 70 75 62 6c | do.not.know.their.effective.publ |
68ca0 | 69 63 20 61 64 64 72 65 73 73 65 73 2c 20 77 65 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 2d 61 | ic.addresses,.we.set.the.local-a |
68cc0 | 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 6f 20 22 61 6e 79 22 2e 00 53 69 6e | ddress.of.the.peer.to."any"..Sin |
68ce0 | 63 65 20 69 74 27 73 20 61 20 48 51 20 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 20 | ce.it's.a.HQ.and.branch.offices. |
68d00 | 73 65 74 75 70 2c 20 77 65 20 77 69 6c 6c 20 77 61 6e 74 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 | setup,.we.will.want.all.clients. |
68d20 | 74 6f 20 68 61 76 65 20 66 69 78 65 64 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 77 65 20 77 | to.have.fixed.addresses.and.we.w |
68d40 | 69 6c 6c 20 72 6f 75 74 65 20 74 72 61 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 73 75 | ill.route.traffic.to.specific.su |
68d60 | 62 6e 65 74 73 20 74 68 72 6f 75 67 68 20 74 68 65 6d 2e 20 57 65 20 6e 65 65 64 20 63 6f 6e 66 | bnets.through.them..We.need.conf |
68d80 | 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 63 6c 69 65 6e 74 20 74 6f 20 61 63 68 | iguration.for.each.client.to.ach |
68da0 | 69 65 76 65 20 74 68 69 73 2e 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 | ieve.this..Since.the.RADIUS.serv |
68dc0 | 65 72 20 77 6f 75 6c 64 20 62 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 | er.would.be.a.single.point.of.fa |
68de0 | 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 | ilure,.multiple.RADIUS.servers.c |
68e00 | 61 6e 20 62 65 20 73 65 74 75 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 | an.be.setup.and.will.be.used.sub |
68e20 | 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 | sequentially..Since.the.RADIUS.s |
68e40 | 65 72 76 65 72 20 77 6f 75 6c 64 20 62 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 | erver.would.be.a.single.point.of |
68e60 | 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | .failure,.multiple.RADIUS.server |
68e80 | 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 | s.can.be.setup.and.will.be.used. |
68ea0 | 73 75 62 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 53 69 | subsequentially..For.example:.Si |
68ec0 | 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 | nce.the.mDNS.protocol.sends.the. |
68ee0 | 3a 61 62 62 72 3a 60 41 41 28 41 75 74 68 6f 72 69 74 61 74 69 76 65 20 41 6e 73 77 65 72 29 60 | :abbr:`AA(Authoritative.Answer)` |
68f00 | 20 72 65 63 6f 72 64 73 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 | .records.in.the.packet.itself,.t |
68f20 | 68 65 20 72 65 70 65 61 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 | he.repeater.does.not.need.to.for |
68f40 | 67 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 | ge.the.source.address..Instead,. |
68f60 | 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 | the.source.address.is.of.the.int |
68f80 | 65 72 66 61 63 65 20 74 68 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 | erface.that.repeats.the.packet.. |
68fa0 | 53 69 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 | Since.the.mDNS.protocol.sends.th |
68fc0 | 65 20 41 41 20 72 65 63 6f 72 64 73 20 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c | e.AA.records.in.the.packet.itsel |
68fe0 | 66 2c 20 74 68 65 20 72 65 70 65 61 74 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f | f,.the.repeater.does.not.need.to |
69000 | 20 66 6f 72 67 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 | .forge.the.source.address..Inste |
69020 | 61 64 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 | ad,.the.source.address.is.of.the |
69040 | 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b | .interface.that.repeats.the.pack |
69060 | 65 74 2e 00 53 69 6e 63 65 20 77 65 20 61 72 65 20 61 6e 61 6c 79 7a 69 6e 67 20 61 74 74 61 63 | et..Since.we.are.analyzing.attac |
69080 | 6b 73 20 74 6f 20 61 6e 64 20 66 72 6f 6d 20 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 | ks.to.and.from.our.internal.netw |
690a0 | 6f 72 6b 2c 20 74 77 6f 20 74 79 70 65 73 20 6f 66 20 61 74 74 61 63 6b 73 20 63 61 6e 20 62 65 | ork,.two.types.of.attacks.can.be |
690c0 | 20 69 64 65 6e 74 69 66 69 65 64 2c 20 61 6e 64 20 64 69 66 66 65 72 65 6e 74 73 20 61 63 74 69 | .identified,.and.differents.acti |
690e0 | 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 64 3a 00 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 | ons.are.needed:.Single.VXLAN.dev |
69100 | 69 63 65 20 28 53 56 44 29 00 53 69 74 65 20 74 6f 20 53 69 74 65 20 56 50 4e 00 53 69 74 65 2d | ice.(SVD).Site.to.Site.VPN.Site- |
69120 | 74 6f 2d 53 69 74 65 00 53 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 70 72 6f 76 69 64 | to-Site.Site-to-site.mode.provid |
69140 | 65 73 20 61 20 77 61 79 20 74 6f 20 61 64 64 20 72 65 6d 6f 74 65 20 70 65 65 72 73 2c 20 77 68 | es.a.way.to.add.remote.peers,.wh |
69160 | 69 63 68 20 63 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 65 78 63 68 61 | ich.could.be.configured.to.excha |
69180 | 6e 67 65 20 65 6e 63 72 79 70 74 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 74 77 65 65 | nge.encrypted.information.betwee |
691a0 | 6e 20 74 68 65 6d 20 61 6e 64 20 56 79 4f 53 20 69 74 73 65 6c 66 20 6f 72 20 63 6f 6e 6e 65 63 | n.them.and.VyOS.itself.or.connec |
691c0 | 74 65 64 2f 72 6f 75 74 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 53 69 74 65 2d 74 6f 2d 73 69 74 | ted/routed.networks..Site-to-sit |
691e0 | 65 20 6d 6f 64 65 20 73 75 70 70 6f 72 74 73 20 78 2e 35 30 39 20 62 75 74 20 64 6f 65 73 6e 27 | e.mode.supports.x.509.but.doesn' |
69200 | 74 20 72 65 71 75 69 72 65 20 69 74 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 77 6f 72 6b 20 77 | t.require.it.and.can.also.work.w |
69220 | 69 74 68 20 73 74 61 74 69 63 20 6b 65 79 73 2c 20 77 68 69 63 68 20 69 73 20 73 69 6d 70 6c 65 | ith.static.keys,.which.is.simple |
69240 | 72 20 69 6e 20 6d 61 6e 79 20 63 61 73 65 73 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 | r.in.many.cases..In.this.example |
69260 | 2c 20 77 65 27 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 69 6d 70 6c 65 20 73 69 74 65 2d | ,.we'll.configure.a.simple.site- |
69280 | 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 20 74 75 6e 6e 65 6c 20 75 73 69 6e 67 20 61 20 32 | to-site.OpenVPN.tunnel.using.a.2 |
692a0 | 30 34 38 2d 62 69 74 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 2e 00 53 69 7a 65 20 6f 66 20 | 048-bit.pre-shared.key..Size.of. |
692c0 | 74 68 65 20 52 53 41 20 6b 65 79 2e 00 53 6c 61 76 65 20 73 65 6c 65 63 74 69 6f 6e 20 66 6f 72 | the.RSA.key..Slave.selection.for |
692e0 | 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 64 6f 6e 65 20 61 63 63 6f 72 64 | .outgoing.traffic.is.done.accord |
69300 | 69 6e 67 20 74 6f 20 74 68 65 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2c | ing.to.the.transmit.hash.policy, |
69320 | 20 77 68 69 63 68 20 6d 61 79 20 62 65 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 68 65 20 64 | .which.may.be.changed.from.the.d |
69340 | 65 66 61 75 6c 74 20 73 69 6d 70 6c 65 20 58 4f 52 20 70 6f 6c 69 63 79 20 76 69 61 20 74 68 65 | efault.simple.XOR.policy.via.the |
69360 | 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 | .:cfgcmd:`hash-policy`.option,.d |
69380 | 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c 6f 77 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 | ocumented.below..So.in.our.firew |
693a0 | 61 6c 6c 20 70 6f 6c 69 63 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 | all.policy,.we.want.to.allow.tra |
693c0 | 66 66 69 63 20 63 6f 6d 69 6e 67 20 69 6e 20 6f 6e 20 74 68 65 20 6f 75 74 73 69 64 65 20 69 6e | ffic.coming.in.on.the.outside.in |
693e0 | 74 65 72 66 61 63 65 2c 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 54 43 50 20 70 6f 72 74 20 38 | terface,.destined.for.TCP.port.8 |
69400 | 30 20 61 6e 64 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 31 36 38 2e | 0.and.the.IP.address.of.192.168. |
69420 | 30 2e 31 30 30 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 | 0.100..So.in.our.firewall.rulese |
69440 | 74 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 77 68 69 63 | t,.we.want.to.allow.traffic.whic |
69460 | 68 20 70 72 65 76 69 6f 75 73 6c 79 20 6d 61 74 63 68 65 64 20 61 20 64 65 73 74 69 6e 61 74 69 | h.previously.matched.a.destinati |
69480 | 6f 6e 20 6e 61 74 20 72 75 6c 65 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 76 6f 69 64 20 63 | on.nat.rule..In.order.to.avoid.c |
694a0 | 72 65 61 74 69 6e 67 20 6d 61 6e 79 20 72 75 6c 65 73 2c 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 | reating.many.rules,.one.for.each |
694c0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 61 74 20 72 75 6c 65 2c 20 77 65 20 63 61 6e 20 61 63 | .destination.nat.rule,.we.can.ac |
694e0 | 63 65 70 74 20 61 6c 6c 20 2a 2a 27 64 6e 61 74 27 2a 2a 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 | cept.all.**'dnat'**.connections. |
69500 | 77 69 74 68 20 6f 6e 65 20 73 69 6d 70 6c 65 20 72 75 6c 65 2c 20 75 73 69 6e 67 20 60 60 63 6f | with.one.simple.rule,.using.``co |
69520 | 6e 6e 65 63 74 69 6f 6e 2d 73 74 61 74 75 73 60 60 20 6d 61 74 63 68 65 72 3a 00 53 6f 2c 20 66 | nnection-status``.matcher:.So,.f |
69540 | 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 66 6f 72 | irewall.configuration.needed.for |
69560 | 20 74 68 69 73 20 73 65 74 75 70 3a 00 53 6f 6c 61 72 57 69 6e 64 73 00 53 6f 6d 65 20 49 53 50 | .this.setup:.SolarWinds.Some.ISP |
69580 | 73 20 62 79 20 64 65 66 61 75 6c 74 20 6f 6e 6c 79 20 64 65 6c 65 67 61 74 65 20 61 20 2f 36 34 | s.by.default.only.delegate.a./64 |
695a0 | 20 70 72 65 66 69 78 2e 20 54 6f 20 72 65 71 75 65 73 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 | .prefix..To.request.for.a.specif |
695c0 | 69 63 20 70 72 65 66 69 78 20 73 69 7a 65 20 75 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 | ic.prefix.size.use.this.option.t |
695e0 | 6f 20 72 65 71 75 65 73 74 20 66 6f 72 20 61 20 62 69 67 67 65 72 20 64 65 6c 65 67 61 74 69 6f | o.request.for.a.bigger.delegatio |
69600 | 6e 20 66 6f 72 20 74 68 69 73 20 70 64 20 60 3c 69 64 3e 60 2e 20 54 68 69 73 20 76 61 6c 75 65 | n.for.this.pd.`<id>`..This.value |
69620 | 20 69 73 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 33 32 20 2d 20 36 34 20 73 6f | .is.in.the.range.from.32.-.64.so |
69640 | 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 71 75 65 73 74 20 75 70 20 74 6f 20 61 20 2f 33 32 20 70 | .you.could.request.up.to.a./32.p |
69660 | 72 65 66 69 78 20 28 69 66 20 79 6f 75 72 20 49 53 50 20 61 6c 6c 6f 77 73 20 74 68 69 73 29 20 | refix.(if.your.ISP.allows.this). |
69680 | 64 6f 77 6e 20 74 6f 20 61 20 2f 36 34 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 53 6f 6d 65 20 49 | down.to.a./64.delegation..Some.I |
696a0 | 54 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 72 65 71 75 69 72 65 20 74 68 65 20 75 73 65 20 6f | T.environments.require.the.use.o |
696c0 | 66 20 61 20 70 72 6f 78 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 6e 74 65 | f.a.proxy.to.connect.to.the.Inte |
696e0 | 72 6e 65 74 2e 20 57 69 74 68 6f 75 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | rnet..Without.this.configuration |
69700 | 20 56 79 4f 53 20 75 70 64 61 74 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 69 6e 73 74 61 | .VyOS.updates.could.not.be.insta |
69720 | 6c 6c 65 64 20 64 69 72 65 63 74 6c 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 6f 70 63 6d | lled.directly.by.using.the.:opcm |
69740 | 64 3a 60 61 64 64 20 73 79 73 74 65 6d 20 69 6d 61 67 65 60 20 63 6f 6d 6d 61 6e 64 20 28 3a 72 | d:`add.system.image`.command.(:r |
69760 | 65 66 3a 60 75 70 64 61 74 65 5f 76 79 6f 73 60 29 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 20 73 | ef:`update_vyos`)..Some.RADIUS.s |
69780 | 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 | evers.use.an.access.control.list |
697a0 | 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c | .which.allows.or.denies.queries, |
697c0 | 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 | .make.sure.to.add.your.VyOS.rout |
697e0 | 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 | er.to.the.allowed.client.list..S |
69800 | 6f 6d 65 20 52 41 44 49 55 53 5f 20 73 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 | ome.RADIUS_.severs.use.an.access |
69820 | 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 | .control.list.which.allows.or.de |
69840 | 6e 69 65 73 20 71 75 65 72 69 65 73 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 | nies.queries,.make.sure.to.add.y |
69860 | 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 | our.VyOS.router.to.the.allowed.c |
69880 | 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 6f 6d 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 65 72 | lient.list..Some.application.ser |
698a0 | 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 28 41 53 50 73 29 20 6f 70 65 72 61 74 65 20 61 20 | vice.providers.(ASPs).operate.a. |
698c0 | 56 50 4e 20 67 61 74 65 77 61 79 20 74 6f 20 70 72 6f 76 69 64 65 20 61 63 63 65 73 73 20 74 6f | VPN.gateway.to.provide.access.to |
698e0 | 20 74 68 65 69 72 20 69 6e 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 72 | .their.internal.resources,.and.r |
69900 | 65 71 75 69 72 65 20 74 68 61 74 20 61 20 63 6f 6e 6e 65 63 74 69 6e 67 20 6f 72 67 61 6e 69 73 | equire.that.a.connecting.organis |
69920 | 61 74 69 6f 6e 20 74 72 61 6e 73 6c 61 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 | ation.translate.all.traffic.to.t |
69940 | 68 65 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 | he.service.provider.network.to.a |
69960 | 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 | .source.address.provided.by.the. |
69980 | 41 53 50 2e 00 53 6f 6d 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 69 65 73 20 72 | ASP..Some.container.registries.r |
699a0 | 65 71 75 69 72 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 53 | equire.credentials.to.be.used..S |
699c0 | 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c | ome.firewall.settings.are.global |
699e0 | 20 61 6e 64 20 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 | .and.have.an.affect.on.the.whole |
69a00 | 20 73 79 73 74 65 6d 2e 00 53 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 | .system..Some.firewall.settings. |
69a20 | 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e 64 20 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e | are.global.and.have.an.affect.on |
69a40 | 20 74 68 65 20 77 68 6f 6c 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 69 73 20 73 65 63 74 69 | .the.whole.system..In.this.secti |
69a60 | 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 | on.there's.useful.information.ab |
69a80 | 6f 75 74 20 74 68 65 73 65 20 67 6c 6f 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 | out.these.global-options.that.ca |
69aa0 | 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 76 79 6f 73 20 63 6c 69 2e 00 | n.be.configured.using.vyos.cli.. |
69ac0 | 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 61 6c 72 65 61 64 79 20 69 6e 63 6c 75 64 65 20 6f 74 | Some.policies.already.include.ot |
69ae0 | 68 65 72 20 65 6d 62 65 64 64 65 64 20 70 6f 6c 69 63 69 65 73 20 69 6e 73 69 64 65 2e 20 54 68 | her.embedded.policies.inside..Th |
69b00 | 61 74 20 69 73 20 74 68 65 20 63 61 73 65 20 6f 66 20 53 68 61 70 65 72 5f 3a 20 65 61 63 68 20 | at.is.the.case.of.Shaper_:.each. |
69b20 | 6f 66 20 69 74 73 20 63 6c 61 73 73 65 73 20 75 73 65 20 66 61 69 72 2d 71 75 65 75 65 20 75 6e | of.its.classes.use.fair-queue.un |
69b40 | 6c 65 73 73 20 79 6f 75 20 63 68 61 6e 67 65 20 69 74 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 | less.you.change.it..Some.policie |
69b60 | 73 20 63 61 6e 20 62 65 20 63 6f 6d 62 69 6e 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 | s.can.be.combined,.you.will.be.a |
69b80 | 62 6c 65 20 74 6f 20 65 6d 62 65 64 5f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 79 | ble.to.embed_.a.different.policy |
69ba0 | 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 20 63 6c 61 73 73 | .that.will.be.applied.to.a.class |
69bc0 | 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 70 6f 6c 69 63 79 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 | .of.the.main.policy..Some.proxys |
69be0 | 20 72 65 71 75 69 72 65 2f 73 75 70 70 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 | .require/support.the."basic".HTT |
69c00 | 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a | P.authentication.scheme.as.per.: |
69c20 | 72 66 63 3a 60 37 36 31 37 60 2c 20 74 68 75 73 20 61 20 70 61 73 73 77 6f 72 64 20 63 61 6e 20 | rfc:`7617`,.thus.a.password.can. |
69c40 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 | be.configured..Some.proxys.requi |
69c60 | 72 65 2f 73 75 70 70 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 | re/support.the."basic".HTTP.auth |
69c80 | 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 | entication.scheme.as.per.:rfc:`7 |
69ca0 | 36 31 37 60 2c 20 74 68 75 73 20 61 20 75 73 65 72 6e 61 6d 65 20 63 61 6e 20 62 65 20 63 6f 6e | 617`,.thus.a.username.can.be.con |
69cc0 | 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 20 72 65 63 65 6e 74 20 49 53 50 73 20 72 65 71 75 69 72 | figured..Some.recent.ISPs.requir |
69ce0 | 65 20 79 6f 75 20 74 6f 20 62 75 69 6c 64 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 | e.you.to.build.the.PPPoE.connect |
69d00 | 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 4f 6e | ion.through.a.VLAN.interface..On |
69d20 | 65 20 6f 66 20 74 68 6f 73 65 20 49 53 50 73 20 69 73 20 65 2e 67 2e 20 44 65 75 74 73 63 68 65 | e.of.those.ISPs.is.e.g..Deutsche |
69d40 | 20 54 65 6c 65 6b 6f 6d 20 69 6e 20 47 65 72 6d 61 6e 79 2e 20 56 79 4f 53 20 63 61 6e 20 65 61 | .Telekom.in.Germany..VyOS.can.ea |
69d60 | 73 69 6c 79 20 63 72 65 61 74 65 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 74 68 72 6f | sily.create.a.PPPoE.session.thro |
69d80 | 75 67 68 20 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 | ugh.an.encapsulated.VLAN.interfa |
69da0 | 63 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | ce..The.following.configuration. |
69dc0 | 77 69 6c 6c 20 72 75 6e 20 79 6f 75 72 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | will.run.your.PPPoE.connection.t |
69de0 | 68 72 6f 75 67 68 20 56 4c 41 4e 37 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c | hrough.VLAN7.which.is.the.defaul |
69e00 | 74 20 56 4c 41 4e 20 66 6f 72 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 3a 00 53 6f 6d | t.VLAN.for.Deutsche.Telekom:.Som |
69e20 | 65 20 73 65 72 76 69 63 65 73 20 64 6f 6e 27 74 20 77 6f 72 6b 20 63 6f 72 72 65 63 74 6c 79 20 | e.services.don't.work.correctly. |
69e40 | 77 68 65 6e 20 62 65 69 6e 67 20 68 61 6e 64 6c 65 64 20 76 69 61 20 61 20 77 65 62 20 70 72 6f | when.being.handled.via.a.web.pro |
69e60 | 78 79 2e 20 53 6f 20 73 6f 6d 65 74 69 6d 65 73 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f | xy..So.sometimes.it.is.useful.to |
69e80 | 20 62 79 70 61 73 73 20 61 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 53 6f 6d | .bypass.a.transparent.proxy:.Som |
69ea0 | 65 20 75 73 65 72 73 20 74 65 6e 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 69 72 20 6d 6f | e.users.tend.to.connect.their.mo |
69ec0 | 62 69 6c 65 20 64 65 76 69 63 65 73 20 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 20 74 6f 20 | bile.devices.using.WireGuard.to. |
69ee0 | 74 68 65 69 72 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 54 6f 20 65 61 73 65 20 64 65 70 6c 6f | their.VyOS.router..To.ease.deplo |
69f00 | 79 6d 65 6e 74 20 6f 6e 65 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 61 20 22 70 65 72 20 6d 6f | yment.one.can.generate.a."per.mo |
69f20 | 62 69 6c 65 22 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 56 79 4f | bile".configuration.from.the.VyO |
69f40 | 53 20 43 4c 49 2e 00 53 6f 6d 65 74 69 6d 65 73 20 6f 70 74 69 6f 6e 20 6c 69 6e 65 73 20 69 6e | S.CLI..Sometimes.option.lines.in |
69f60 | 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 | .the.generated.OpenVPN.configura |
69f80 | 74 69 6f 6e 20 72 65 71 75 69 72 65 20 71 75 6f 74 65 73 2e 20 54 68 69 73 20 69 73 20 64 6f 6e | tion.require.quotes..This.is.don |
69fa0 | 65 20 74 68 72 6f 75 67 68 20 61 20 68 61 63 6b 20 6f 6e 20 6f 75 72 20 63 6f 6e 66 69 67 20 67 | e.through.a.hack.on.our.config.g |
69fc0 | 65 6e 65 72 61 74 6f 72 2e 20 59 6f 75 20 63 61 6e 20 70 61 73 73 20 71 75 6f 74 65 73 20 75 73 | enerator..You.can.pass.quotes.us |
69fe0 | 69 6e 67 20 74 68 65 20 60 60 26 71 75 6f 74 3b 60 60 20 73 74 61 74 65 6d 65 6e 74 2e 00 53 6f | ing.the.``"``.statement..So |
6a000 | 72 74 20 74 68 65 20 6f 75 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b | rt.the.output.by.the.specified.k |
6a020 | 65 79 2e 20 50 6f 73 73 69 62 6c 65 20 6b 65 79 73 3a 20 65 78 70 69 72 65 73 2c 20 69 61 69 64 | ey..Possible.keys:.expires,.iaid |
6a040 | 5f 64 75 69 64 2c 20 69 70 2c 20 6c 61 73 74 5f 63 6f 6d 6d 2c 20 70 6f 6f 6c 2c 20 72 65 6d 61 | _duid,.ip,.last_comm,.pool,.rema |
6a060 | 69 6e 69 6e 67 2c 20 73 74 61 74 65 2c 20 74 79 70 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 | ining,.state,.type.(default.=.ip |
6a080 | 29 00 53 6f 72 74 20 74 68 65 20 6f 75 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 | ).Sort.the.output.by.the.specifi |
6a0a0 | 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 62 6c 65 20 6b 65 79 73 3a 20 69 70 2c 20 68 61 72 64 77 | ed.key..Possible.keys:.ip,.hardw |
6a0c0 | 61 72 65 5f 61 64 64 72 65 73 73 2c 20 73 74 61 74 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 | are_address,.state,.start,.end,. |
6a0e0 | 72 65 6d 61 69 6e 69 6e 67 2c 20 70 6f 6f 6c 2c 20 68 6f 73 74 6e 61 6d 65 20 28 64 65 66 61 75 | remaining,.pool,.hostname.(defau |
6a100 | 6c 74 20 3d 20 69 70 29 00 53 6f 75 72 63 65 20 41 64 64 72 65 73 73 00 53 6f 75 72 63 65 20 49 | lt.=.ip).Source.Address.Source.I |
6a120 | 50 20 61 64 64 72 65 73 73 20 75 73 65 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 | P.address.used.for.VXLAN.underla |
6a140 | 79 2e 20 54 68 69 73 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 | y..This.is.mandatory.when.using. |
6a160 | 56 58 4c 41 4e 20 76 69 61 20 4c 32 56 50 4e 2f 45 56 50 4e 2e 00 53 6f 75 72 63 65 20 49 50 76 | VXLAN.via.L2VPN/EVPN..Source.IPv |
6a180 | 34 20 61 64 64 72 65 73 73 20 75 73 65 64 20 69 6e 20 61 6c 6c 20 52 41 44 49 55 53 20 73 65 72 | 4.address.used.in.all.RADIUS.ser |
6a1a0 | 76 65 72 20 71 75 65 69 72 65 73 2e 00 53 6f 75 72 63 65 20 4e 41 54 20 72 75 6c 65 73 00 53 6f | ver.queires..Source.NAT.rules.So |
6a1c0 | 75 72 63 65 20 50 72 65 66 69 78 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f | urce.Prefix.Source.all.connectio |
6a1e0 | 6e 73 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 | ns.to.the.RADIUS.servers.from.gi |
6a200 | 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e | ven.VRF.`<name>`..Source.all.con |
6a220 | 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 66 | nections.to.the.TACACS.servers.f |
6a240 | 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 70 | rom.given.VRF.`<name>`..Source.p |
6a260 | 72 6f 74 6f 63 6f 6c 20 74 6f 20 6d 61 74 63 68 2e 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 | rotocol.to.match..Source.tunnel. |
6a280 | 66 72 6f 6d 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 53 6f 75 72 63 65 20 74 75 6e 6e | from.dummy.interface.Source.tunn |
6a2a0 | 65 6c 20 66 72 6f 6d 20 6c 6f 6f 70 62 61 63 6b 73 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 | el.from.loopbacks.Spanning.Tree. |
6a2c0 | 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 77 61 72 64 69 6e 67 20 60 3c 64 65 6c 61 79 3e 60 20 69 6e | Protocol.forwarding.`<delay>`.in |
6a2e0 | 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 53 70 61 6e 6e 69 6e 67 | .seconds.(default:.15)..Spanning |
6a300 | 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 68 65 6c 6c 6f 20 61 64 76 65 72 74 69 73 65 6d 65 | .Tree.Protocol.hello.advertiseme |
6a320 | 6e 74 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 | nt.`<interval>`.in.seconds.(defa |
6a340 | 75 6c 74 3a 20 32 29 2e 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 | ult:.2)..Spanning.Tree.Protocol. |
6a360 | 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 56 79 4f | is.not.enabled.by.default.in.VyO |
6a380 | 53 2e 20 3a 72 65 66 3a 60 73 74 70 60 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 65 6e 61 62 | S..:ref:`stp`.can.be.easily.enab |
6a3a0 | 6c 65 64 20 69 66 20 6e 65 65 64 65 64 2e 00 53 70 61 74 69 61 6c 20 4d 75 6c 74 69 70 6c 65 78 | led.if.needed..Spatial.Multiplex |
6a3c0 | 69 6e 67 20 50 6f 77 65 72 20 53 61 76 65 20 28 53 4d 50 53 29 20 73 65 74 74 69 6e 67 73 00 53 | ing.Power.Save.(SMPS).settings.S |
6a3e0 | 70 65 63 66 79 69 6e 67 20 6e 68 73 20 6d 61 6b 65 73 20 61 6c 6c 20 6d 75 6c 74 69 63 61 73 74 | pecfying.nhs.makes.all.multicast |
6a400 | 20 70 61 63 6b 65 74 73 20 74 6f 20 62 65 20 72 65 70 65 61 74 65 64 20 74 6f 20 65 61 63 68 20 | .packets.to.be.repeated.to.each. |
6a420 | 73 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 78 74 20 68 6f 70 2e 00 | statically.configured.next.hop.. |
6a440 | 53 70 65 63 69 66 69 65 73 20 3a 61 62 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 | Specifies.:abbr:`MPPE.(Microsoft |
6a460 | 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 | .Point-to-Point.Encryption)`.neg |
6a480 | 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 3a | otiation.preference..Specifies.: |
6a4a0 | 61 62 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 | abbr:`MPPE.(Microsoft.Point-to-P |
6a4c0 | 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 6f 74 69 6f 61 74 69 6f 6e 20 70 | oint.Encryption)`.negotioation.p |
6a4e0 | 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 49 50 20 61 64 64 72 65 73 73 20 | reference..Specifies.IP.address. |
6a500 | 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 | for.Dynamic.Authorization.Extens |
6a520 | 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 70 65 63 69 66 69 65 73 20 49 50 | ion.server.(DM/CoA).Specifies.IP |
6a540 | 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 | v4.negotiation.preference..Speci |
6a560 | 66 69 65 73 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 | fies.IPv6.negotiation.preference |
6a580 | 2e 00 53 70 65 63 69 66 69 65 73 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 74 6f 20 72 65 73 70 | ..Specifies.Service-Name.to.resp |
6a5a0 | 6f 6e 64 2e 20 49 66 20 61 62 73 65 6e 74 20 61 6e 79 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 | ond..If.absent.any.Service-Name. |
6a5c0 | 69 73 20 61 63 63 65 70 74 61 62 6c 65 20 61 6e 64 20 63 6c 69 65 6e 74 e2 80 99 73 20 53 65 72 | is.acceptable.and.client...s.Ser |
6a5e0 | 76 69 63 65 2d 4e 61 6d 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 2e 20 41 6c 73 | vice-Name.will.be.sent.back..Als |
6a600 | 6f 20 70 6f 73 73 69 62 6c 65 20 73 65 74 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 65 2d | o.possible.set.multiple.service- |
6a620 | 6e 61 6d 65 73 3a 20 60 73 6e 31 2c 73 6e 32 2c 73 6e 33 60 00 53 70 65 63 69 66 69 65 73 20 61 | names:.`sn1,sn2,sn3`.Specifies.a |
6a640 | 64 64 72 65 73 73 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 65 72 76 65 72 20 69 70 20 61 | ddress.to.be.used.as.server.ip.a |
6a660 | 64 64 72 65 73 73 20 69 66 20 72 61 64 69 75 73 20 63 61 6e 20 61 73 73 69 67 6e 20 6f 6e 6c 79 | ddress.if.radius.can.assign.only |
6a680 | 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 2e 20 49 6e 20 73 75 63 68 20 63 61 73 65 20 69 66 | .client.address..In.such.case.if |
6a6a0 | 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 20 69 73 20 6d 61 74 63 68 65 64 20 6e 65 74 77 6f | .client.address.is.matched.netwo |
6a6c0 | 72 6b 20 61 6e 64 20 6d 61 73 6b 20 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 | rk.and.mask.then.specified.addre |
6a6e0 | 73 73 20 61 6e 64 20 6d 61 73 6b 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 59 6f 75 20 63 61 | ss.and.mask.will.be.used..You.ca |
6a700 | 6e 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 75 63 68 20 6f 70 74 69 6f 6e 73 2e | n.specify.multiple.such.options. |
6a720 | 00 53 70 65 63 69 66 69 65 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 72 6f 75 74 65 2d 6d 61 70 | .Specifies.an.optional.route-map |
6a740 | 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 72 6f 75 74 65 73 20 69 6d 70 6f 72 74 65 | .to.be.applied.to.routes.importe |
6a760 | 64 20 6f 72 20 65 78 70 6f 72 74 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e | d.or.exported.between.the.curren |
6a780 | 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 | t.unicast.VRF.and.VPN..Specifies |
6a7a0 | 20 61 6e 20 75 70 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 60 3c 69 6e 74 65 72 66 61 63 65 | .an.upstream.network.`<interface |
6a7c0 | 3e 60 20 66 72 6f 6d 20 77 68 69 63 68 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 60 3c 73 65 72 | >`.from.which.replies.from.`<ser |
6a7e0 | 76 65 72 3e 60 20 61 6e 64 20 6f 74 68 65 72 20 72 65 6c 61 79 20 61 67 65 6e 74 73 20 77 69 6c | ver>`.and.other.relay.agents.wil |
6a800 | 6c 20 62 65 20 61 63 63 65 70 74 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 66 69 78 65 64 20 6f | l.be.accepted..Specifies.fixed.o |
6a820 | 72 20 72 61 6e 64 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f | r.random.interface.identifier.fo |
6a840 | 72 20 49 50 76 36 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 | r.IPv6..By.default.is.fixed..Spe |
6a860 | 63 69 66 69 65 73 20 68 6f 77 20 6c 6f 6e 67 20 73 71 75 69 64 20 61 73 73 75 6d 65 73 20 61 6e | cifies.how.long.squid.assumes.an |
6a880 | 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 61 6c 69 64 61 74 65 64 20 75 73 65 72 6e 61 6d 65 3a 70 | .externally.validated.username:p |
6a8a0 | 61 73 73 77 6f 72 64 20 70 61 69 72 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 2d 20 69 6e 20 6f | assword.pair.is.valid.for.-.in.o |
6a8c0 | 74 68 65 72 20 77 6f 72 64 73 20 68 6f 77 20 6f 66 74 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 | ther.words.how.often.the.helper. |
6a8e0 | 70 72 6f 67 72 61 6d 20 69 73 20 63 61 6c 6c 65 64 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e | program.is.called.for.that.user. |
6a900 | 20 53 65 74 20 74 68 69 73 20 6c 6f 77 20 74 6f 20 66 6f 72 63 65 20 72 65 76 61 6c 69 64 61 74 | .Set.this.low.to.force.revalidat |
6a920 | 69 6f 6e 20 77 69 74 68 20 73 68 6f 72 74 20 6c 69 76 65 64 20 70 61 73 73 77 6f 72 64 73 2e 00 | ion.with.short.lived.passwords.. |
6a940 | 53 70 65 63 69 66 69 65 73 20 69 66 20 75 6e 6b 6e 6f 77 6e 20 73 6f 75 72 63 65 20 6c 69 6e 6b | Specifies.if.unknown.source.link |
6a960 | 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 | .layer.addresses.and.IP.addresse |
6a980 | 73 20 61 72 65 20 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 | s.are.entered.into.the.VXLAN.dev |
6a9a0 | 69 63 65 20 66 6f 72 77 61 72 64 69 6e 67 20 64 61 74 61 62 61 73 65 2e 00 53 70 65 63 69 66 69 | ice.forwarding.database..Specifi |
6a9c0 | 65 73 20 6e 75 6d 62 65 72 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 6b 65 65 70 20 | es.number.of.interfaces.to.keep. |
6a9e0 | 69 6e 20 63 61 63 68 65 2e 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 64 6f 6e e2 80 99 74 20 | in.cache..It.means.that.don...t. |
6aa00 | 64 65 73 74 72 6f 79 20 69 6e 74 65 72 66 61 63 65 20 61 66 74 65 72 20 63 6f 72 72 65 73 70 6f | destroy.interface.after.correspo |
6aa20 | 6e 64 69 6e 67 20 73 65 73 73 69 6f 6e 20 69 73 20 64 65 73 74 72 6f 79 65 64 2c 20 69 6e 73 74 | nding.session.is.destroyed,.inst |
6aa40 | 65 61 64 20 70 6c 61 63 65 20 69 74 20 74 6f 20 63 61 63 68 65 20 61 6e 64 20 75 73 65 20 69 74 | ead.place.it.to.cache.and.use.it |
6aa60 | 20 6c 61 74 65 72 20 66 6f 72 20 6e 65 77 20 73 65 73 73 69 6f 6e 73 20 72 65 70 65 61 74 65 64 | .later.for.new.sessions.repeated |
6aa80 | 6c 79 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 72 65 64 75 63 65 20 6b 65 72 6e 65 6c 2d 6c 65 | ly..This.should.reduce.kernel-le |
6aaa0 | 76 65 6c 20 69 6e 74 65 72 66 61 63 65 20 63 72 65 61 74 69 6f 6e 2f 64 65 6c 65 74 69 6f 6e 20 | vel.interface.creation/deletion. |
6aac0 | 72 61 74 65 20 6c 61 63 6b 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a | rate.lack..Default.value.is.**0* |
6aae0 | 2a 2e 00 53 70 65 63 69 66 69 65 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 | *..Specifies.one.of.the.bonding. |
6ab00 | 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 38 30 32 2e 33 61 64 | policies..The.default.is.802.3ad |
6ab20 | 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 73 20 61 72 65 3a 00 53 70 65 63 69 66 69 65 73 | ..Possible.values.are:.Specifies |
6ab40 | 20 70 65 65 72 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 | .peer.interface.identifier.for.I |
6ab60 | 50 76 36 2e 20 42 79 20 64 65 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 | Pv6..By.default.is.fixed..Specif |
6ab80 | 69 65 73 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 | ies.proxy.service.listening.addr |
6aba0 | 65 73 73 2e 20 54 68 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 49 | ess..The.listen.address.is.the.I |
6abc0 | 50 20 61 64 64 72 65 73 73 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 77 65 62 20 70 72 6f 78 79 | P.address.on.which.the.web.proxy |
6abe0 | 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 66 6f 72 20 63 6c 69 65 6e 74 20 72 65 71 75 | .service.listens.for.client.requ |
6ac00 | 65 73 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 72 65 6c 61 79 20 61 67 65 6e 74 20 49 50 20 61 | ests..Specifies.relay.agent.IP.a |
6ac20 | 64 64 72 65 00 53 70 65 63 69 66 69 65 73 20 73 69 6e 67 6c 65 20 60 3c 67 61 74 65 77 61 79 3e | ddre.Specifies.single.`<gateway> |
6ac40 | 60 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 6c 6f 63 61 6c | `.IP.address.to.be.used.as.local |
6ac60 | 20 61 64 64 72 65 73 73 20 6f 66 20 50 50 50 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 70 65 63 | .address.of.PPP.interfaces..Spec |
6ac80 | 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d | ifies.that.the.:abbr:`NBMA.(Non- |
6aca0 | 62 72 6f 61 64 63 61 73 74 20 6d 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 | broadcast.multiple-access.networ |
6acc0 | 6b 29 60 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 73 65 | k)`.addresses.of.the.next.hop.se |
6ace0 | 72 76 65 72 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 | rvers.are.defined.in.the.domain. |
6ad00 | 6e 61 6d 65 20 6e 62 6d 61 2d 64 6f 6d 61 69 6e 2d 6e 61 6d 65 2e 20 46 6f 72 20 65 61 63 68 20 | name.nbma-domain-name..For.each. |
6ad20 | 41 20 72 65 63 6f 72 64 20 6f 70 65 6e 6e 68 72 70 20 63 72 65 61 74 65 73 20 61 20 64 79 6e 61 | A.record.opennhrp.creates.a.dyna |
6ad40 | 6d 69 63 20 4e 48 53 20 65 6e 74 72 79 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 41 52 50 | mic.NHS.entry..Specifies.the.ARP |
6ad60 | 20 6c 69 6e 6b 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 | .link.monitoring.`<time>`.in.sec |
6ad80 | 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 | onds..Specifies.the.IP.addresses |
6ada0 | 20 74 6f 20 75 73 65 20 61 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 70 65 65 72 73 20 | .to.use.as.ARP.monitoring.peers. |
6adc0 | 77 68 65 6e 20 3a 63 66 67 63 6d 64 3a 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 69 6e 74 65 72 76 | when.:cfgcmd:`arp-monitor.interv |
6ade0 | 61 6c 60 20 6f 70 74 69 6f 6e 20 69 73 20 3e 20 30 2e 20 54 68 65 73 65 20 61 72 65 20 74 68 65 | al`.option.is.>.0..These.are.the |
6ae00 | 20 74 61 72 67 65 74 73 20 6f 66 20 74 68 65 20 41 52 50 20 72 65 71 75 65 73 74 20 73 65 6e 74 | .targets.of.the.ARP.request.sent |
6ae20 | 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 68 65 61 6c 74 68 20 6f 66 20 74 68 65 20 | .to.determine.the.health.of.the. |
6ae40 | 6c 69 6e 6b 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 | link.to.the.targets..Specifies.t |
6ae60 | 68 65 20 61 76 61 69 6c 61 62 6c 65 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 73 73 61 67 65 | he.available.:abbr:`MAC.(Message |
6ae80 | 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 43 6f 64 65 29 60 20 61 6c 67 6f 72 69 74 68 6d | .Authentication.Code)`.algorithm |
6aea0 | 73 2e 20 54 68 65 20 4d 41 43 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 75 73 65 64 20 69 6e 20 | s..The.MAC.algorithm.is.used.in. |
6aec0 | 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 32 20 66 6f 72 20 64 61 74 61 20 69 6e 74 65 | protocol.version.2.for.data.inte |
6aee0 | 67 72 69 74 79 20 70 72 6f 74 65 63 74 69 6f 6e 2e 20 4d 75 6c 74 69 70 6c 65 20 61 6c 67 6f 72 | grity.protection..Multiple.algor |
6af00 | 69 74 68 6d 73 20 63 61 6e 20 62 65 20 70 72 6f 76 69 64 65 64 2e 00 53 70 65 63 69 66 69 65 73 | ithms.can.be.provided..Specifies |
6af20 | 20 74 68 65 20 62 61 73 65 20 44 4e 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 | .the.base.DN.under.which.the.use |
6af40 | 72 73 20 61 72 65 20 6c 6f 63 61 74 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6c | rs.are.located..Specifies.the.cl |
6af60 | 69 65 6e 74 73 20 73 75 62 6e 65 74 20 6d 61 73 6b 20 61 73 20 70 65 72 20 52 46 43 20 39 35 30 | ients.subnet.mask.as.per.RFC.950 |
6af80 | 2e 20 49 66 20 75 6e 73 65 74 2c 20 73 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 69 | ..If.unset,.subnet.declaration.i |
6afa0 | 73 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 68 6f 6c 64 69 6e 67 20 74 69 | s.used..Specifies.the.holding.ti |
6afc0 | 6d 65 20 66 6f 72 20 4e 48 52 50 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 | me.for.NHRP.Registration.Request |
6afe0 | 73 20 61 6e 64 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 66 72 | s.and.Resolution.Replies.sent.fr |
6b000 | 6f 6d 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 73 68 6f 72 74 63 75 74 2d 74 61 | om.this.interface.or.shortcut-ta |
6b020 | 72 67 65 74 2e 20 54 68 65 20 68 6f 6c 64 74 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 | rget..The.holdtime.is.specified. |
6b040 | 69 6e 20 73 65 63 6f 6e 64 73 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 74 77 6f 20 68 | in.seconds.and.defaults.to.two.h |
6b060 | 6f 75 72 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 61 74 20 | ours..Specifies.the.interval.at. |
6b080 | 77 68 69 63 68 20 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 | which.Netflow.data.will.be.sent. |
6b0a0 | 74 6f 20 61 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 2c 20 | to.a.collector..As.per.default,. |
6b0c0 | 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 | Netflow.data.will.be.sent.every. |
6b0e0 | 36 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 | 60.seconds..Specifies.the.maximu |
6b100 | 6d 20 73 69 7a 65 20 6f 66 20 61 20 72 65 70 6c 79 20 62 6f 64 79 20 69 6e 20 4b 42 2c 20 75 73 | m.size.of.a.reply.body.in.KB,.us |
6b120 | 65 64 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 72 65 70 6c 79 20 73 69 7a 65 2e 00 53 70 65 63 | ed.to.limit.the.reply.size..Spec |
6b140 | 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 6b | ifies.the.minimum.number.of.link |
6b160 | 73 20 74 68 61 74 20 6d 75 73 74 20 62 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 61 73 73 | s.that.must.be.active.before.ass |
6b180 | 65 72 74 69 6e 67 20 63 61 72 72 69 65 72 2e 20 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f | erting.carrier..It.is.similar.to |
6b1a0 | 20 74 68 65 20 43 69 73 63 6f 20 45 74 68 65 72 43 68 61 6e 6e 65 6c 20 6d 69 6e 2d 6c 69 6e 6b | .the.Cisco.EtherChannel.min-link |
6b1c0 | 73 20 66 65 61 74 75 72 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 73 65 74 74 69 6e 67 20 74 | s.feature..This.allows.setting.t |
6b1e0 | 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6d 65 6d 62 65 72 20 70 6f 72 74 | he.minimum.number.of.member.port |
6b200 | 73 20 74 68 61 74 20 6d 75 73 74 20 62 65 20 75 70 20 28 6c 69 6e 6b 2d 75 70 20 73 74 61 74 65 | s.that.must.be.up.(link-up.state |
6b220 | 29 20 62 65 66 6f 72 65 20 6d 61 72 6b 69 6e 67 20 74 68 65 20 62 6f 6e 64 20 64 65 76 69 63 65 | ).before.marking.the.bond.device |
6b240 | 20 61 73 20 75 70 20 28 63 61 72 72 69 65 72 20 6f 6e 29 2e 20 54 68 69 73 20 69 73 20 75 73 65 | .as.up.(carrier.on)..This.is.use |
6b260 | 66 75 6c 20 66 6f 72 20 73 69 74 75 61 74 69 6f 6e 73 20 77 68 65 72 65 20 68 69 67 68 65 72 20 | ful.for.situations.where.higher. |
6b280 | 6c 65 76 65 6c 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 63 6c 75 73 74 65 72 69 6e | level.services.such.as.clusterin |
6b2a0 | 67 20 77 61 6e 74 20 74 6f 20 65 6e 73 75 72 65 20 61 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 | g.want.to.ensure.a.minimum.numbe |
6b2c0 | 72 20 6f 66 20 6c 6f 77 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6e 6b 73 20 61 72 65 20 61 63 74 | r.of.low.bandwidth.links.are.act |
6b2e0 | 69 76 65 20 62 65 66 6f 72 65 20 73 77 69 74 63 68 6f 76 65 72 2e 00 53 70 65 63 69 66 69 65 73 | ive.before.switchover..Specifies |
6b300 | 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 44 4e 20 61 74 74 72 69 62 75 74 65 20 74 68 | .the.name.of.the.DN.attribute.th |
6b320 | 61 74 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2f 6c 6f 67 69 6e 2e 20 | at.contains.the.username/login.. |
6b340 | 43 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 74 68 65 20 62 61 73 65 20 44 4e 20 74 6f 20 63 6f 6e | Combined.with.the.base.DN.to.con |
6b360 | 73 74 72 75 63 74 20 74 68 65 20 75 73 65 72 73 20 44 4e 20 77 68 65 6e 20 6e 6f 20 73 65 61 72 | struct.the.users.DN.when.no.sear |
6b380 | 63 68 20 66 69 6c 74 65 72 20 69 73 20 73 70 65 63 69 66 69 65 64 20 28 60 66 69 6c 74 65 72 2d | ch.filter.is.specified.(`filter- |
6b3a0 | 65 78 70 72 65 73 73 69 6f 6e 60 29 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 68 79 73 | expression`)..Specifies.the.phys |
6b3c0 | 69 63 61 6c 20 60 3c 65 74 68 58 3e 60 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 | ical.`<ethX>`.Ethernet.interface |
6b3e0 | 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e | .associated.with.a.Pseudo.Ethern |
6b400 | 65 74 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 | et.`<interface>`..Specifies.the. |
6b420 | 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 20 74 68 61 74 20 74 68 65 20 53 53 54 50 20 70 6f 72 74 | port.`<port>`.that.the.SSTP.port |
6b440 | 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 28 64 65 66 61 75 6c 74 20 34 34 33 29 2e 00 53 | .will.listen.on.(default.443)..S |
6b460 | 70 65 63 69 66 69 65 73 20 74 68 65 20 70 72 6f 74 65 63 74 69 6f 6e 20 73 63 6f 70 65 20 28 61 | pecifies.the.protection.scope.(a |
6b480 | 6b 61 20 72 65 61 6c 6d 20 6e 61 6d 65 29 20 77 68 69 63 68 20 69 73 20 74 6f 20 62 65 20 72 65 | ka.realm.name).which.is.to.be.re |
6b4a0 | 70 6f 72 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 66 6f 72 20 74 68 65 20 61 75 74 | ported.to.the.client.for.the.aut |
6b4c0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 68 65 6d 65 2e 20 49 74 20 69 73 20 63 6f 6d 6d 6f 6e | hentication.scheme..It.is.common |
6b4e0 | 6c 79 20 70 61 72 74 20 6f 66 20 74 68 65 20 74 65 78 74 20 74 68 65 20 75 73 65 72 20 77 69 6c | ly.part.of.the.text.the.user.wil |
6b500 | 6c 20 73 65 65 20 77 68 65 6e 20 70 72 6f 6d 70 74 65 64 20 66 6f 72 20 74 68 65 69 72 20 75 73 | l.see.when.prompted.for.their.us |
6b520 | 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 | ername.and.password..Specifies.t |
6b540 | 68 65 20 72 6f 75 74 65 20 64 69 73 74 69 6e 67 75 69 73 68 65 72 20 74 6f 20 62 65 20 61 64 64 | he.route.distinguisher.to.be.add |
6b560 | 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 | ed.to.a.route.exported.from.the. |
6b580 | 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 00 53 70 65 63 | current.unicast.VRF.to.VPN..Spec |
6b5a0 | 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 62 | ifies.the.route-target.list.to.b |
6b5c0 | 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 28 65 78 70 6f 72 74 29 20 6f | e.attached.to.a.route.(export).o |
6b5e0 | 72 20 74 68 65 20 72 6f 75 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 | r.the.route-target.list.to.match |
6b600 | 20 61 67 61 69 6e 73 74 20 28 69 6d 70 6f 72 74 29 20 77 68 65 6e 20 65 78 70 6f 72 74 69 6e 67 | .against.(import).when.exporting |
6b620 | 2f 69 6d 70 6f 72 74 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 | /importing.between.the.current.u |
6b640 | 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 54 68 65 20 52 54 4c 49 53 54 20 69 73 | nicast.VRF.and.VPN.The.RTLIST.is |
6b660 | 20 61 20 73 70 61 63 65 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 72 6f 75 74 65 | .a.space-separated.list.of.route |
6b680 | 2d 74 61 72 67 65 74 73 2c 20 77 68 69 63 68 20 61 72 65 20 42 47 50 20 65 78 74 65 6e 64 65 64 | -targets,.which.are.BGP.extended |
6b6a0 | 20 63 6f 6d 6d 75 6e 69 74 79 20 76 61 6c 75 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 | .community.values.as.described.i |
6b6c0 | 6e 20 45 78 74 65 6e 64 65 64 20 43 6f 6d 6d 75 6e 69 74 69 65 73 20 41 74 74 72 69 62 75 74 65 | n.Extended.Communities.Attribute |
6b6e0 | 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 76 65 6e 64 6f 72 20 64 69 63 74 69 6f 6e 61 72 | ..Specifies.the.vendor.dictionar |
6b700 | 79 2c 20 64 69 63 74 69 6f 6e 61 72 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 6e 20 2f 75 73 | y,.dictionary.needs.to.be.in./us |
6b720 | 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2e 00 53 70 65 63 69 66 | r/share/accel-ppp/radius..Specif |
6b740 | 69 65 73 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 | ies.timeout.in.seconds.to.wait.f |
6b760 | 6f 72 20 61 6e 79 20 70 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 | or.any.peer.activity..If.this.op |
6b780 | 74 69 6f 6e 20 73 70 65 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 | tion.specified.it.turns.on.adapt |
6b7a0 | 69 76 65 20 6c 63 70 20 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 | ive.lcp.echo.functionality.and." |
6b7c0 | 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 00 53 | lcp-echo-failure".is.not.used..S |
6b7e0 | 70 65 63 69 66 69 65 73 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 | pecifies.timeout.in.seconds.to.w |
6b800 | 61 69 74 20 66 6f 72 20 61 6e 79 20 70 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 | ait.for.any.peer.activity..If.th |
6b820 | 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 | is.option.specified.it.turns.on. |
6b840 | 61 64 61 70 74 69 76 65 20 6c 63 70 20 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 | adaptive.lcp.echo.functionality. |
6b860 | 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 | and."lcp-echo-failure".is.not.us |
6b880 | 65 64 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 | ed..Default.value.is.**0**..Spec |
6b8a0 | 69 66 69 65 73 20 77 68 65 74 68 65 72 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 63 6f 6e 74 72 6f | ifies.whether.an.external.contro |
6b8c0 | 6c 20 70 6c 61 6e 65 20 28 65 2e 67 2e 20 42 47 50 20 4c 32 56 50 4e 2f 45 56 50 4e 29 20 6f 72 | l.plane.(e.g..BGP.L2VPN/EVPN).or |
6b8e0 | 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 46 44 42 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 | .the.internal.FDB.should.be.used |
6b900 | 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 68 65 20 56 58 4c 41 4e 20 64 65 | ..Specifies.whether.the.VXLAN.de |
6b920 | 76 69 63 65 20 69 73 20 63 61 70 61 62 6c 65 20 6f 66 20 76 6e 69 20 66 69 6c 74 65 72 69 6e 67 | vice.is.capable.of.vni.filtering |
6b940 | 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 68 69 73 20 4e 53 53 41 20 62 6f | ..Specifies.whether.this.NSSA.bo |
6b960 | 72 64 65 72 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 75 6e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 | rder.router.will.unconditionally |
6b980 | 20 74 72 61 6e 73 6c 61 74 65 20 54 79 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 | .translate.Type-7.LSAs.into.Type |
6b9a0 | 2d 35 20 4c 53 41 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 41 6c 77 61 79 73 2c 20 54 79 | -5.LSAs..When.role.is.Always,.Ty |
6b9c0 | 70 65 2d 37 20 4c 53 41 73 20 61 72 65 20 74 72 61 6e 73 6c 61 74 65 64 20 69 6e 74 6f 20 54 79 | pe-7.LSAs.are.translated.into.Ty |
6b9e0 | 70 65 2d 35 20 4c 53 41 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 74 72 61 6e | pe-5.LSAs.regardless.of.the.tran |
6ba00 | 73 6c 61 74 6f 72 20 73 74 61 74 65 20 6f 66 20 6f 74 68 65 72 20 4e 53 53 41 20 62 6f 72 64 65 | slator.state.of.other.NSSA.borde |
6ba20 | 72 20 72 6f 75 74 65 72 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 43 61 6e 64 69 64 61 74 | r.routers..When.role.is.Candidat |
6ba40 | 65 2c 20 74 68 69 73 20 72 6f 75 74 65 72 20 70 61 72 74 69 63 69 70 61 74 65 73 20 69 6e 20 74 | e,.this.router.participates.in.t |
6ba60 | 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 20 65 6c 65 63 74 69 6f 6e 20 74 6f 20 64 65 74 65 72 6d | he.translator.election.to.determ |
6ba80 | 69 6e 65 20 69 66 20 69 74 20 77 69 6c 6c 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 | ine.if.it.will.perform.the.trans |
6baa0 | 6c 61 74 69 6f 6e 73 20 64 75 74 69 65 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 4e 65 76 | lations.duties..When.role.is.Nev |
6bac0 | 65 72 2c 20 74 68 69 73 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 6e 65 76 65 72 20 74 72 61 6e 73 | er,.this.router.will.never.trans |
6bae0 | 6c 61 74 65 20 54 79 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 | late.Type-7.LSAs.into.Type-5.LSA |
6bb00 | 73 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | s..Specifies.which.RADIUS.server |
6bb20 | 20 61 74 74 72 69 62 75 74 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d | .attribute.contains.the.rate.lim |
6bb40 | 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 | it.information..The.default.attr |
6bb60 | 69 62 75 74 65 20 69 73 20 60 46 69 6c 74 65 72 2d 49 64 60 2e 00 53 70 65 63 69 66 69 65 73 20 | ibute.is.`Filter-Id`..Specifies. |
6bb80 | 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f | which.RADIUS.server.attribute.co |
6bba0 | 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f | ntains.the.rate.limit.informatio |
6bbc0 | 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 60 46 69 | n..The.default.attribute.is.``Fi |
6bbe0 | 6c 74 65 72 2d 49 64 60 60 2e 00 53 70 65 63 69 66 79 20 44 48 43 50 76 34 20 72 65 6c 61 79 20 | lter-Id``..Specify.DHCPv4.relay. |
6bc00 | 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 70 61 73 73 20 72 65 71 75 65 73 74 73 20 74 6f 2e 20 | IP.address.to.pass.requests.to.. |
6bc20 | 49 66 20 73 70 65 63 69 66 69 65 64 20 67 69 61 64 64 72 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 | If.specified.giaddr.is.also.need |
6bc40 | 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 | ed..Specify.IPv4.and/or.IPv6.net |
6bc60 | 77 6f 72 6b 73 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 70 72 6f 74 65 63 74 65 64 2f 6d | works.that.should.be.protected/m |
6bc80 | 6f 6e 69 74 6f 72 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 | onitored..Specify.IPv4.and/or.IP |
6bca0 | 76 36 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 63 68 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 | v6.networks.which.are.going.to.b |
6bcc0 | 65 20 65 78 63 6c 75 64 65 64 2e 00 53 70 65 63 69 66 79 20 49 50 76 34 2f 49 50 76 36 20 6c 69 | e.excluded..Specify.IPv4/IPv6.li |
6bce0 | 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f 66 20 53 53 48 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 | sten.address.of.SSH.server..Mult |
6bd00 | 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 53 | iple.addresses.can.be.defined..S |
6bd20 | 70 65 63 69 66 79 20 61 20 3a 61 62 62 72 3a 60 53 49 50 20 28 53 65 73 73 69 6f 6e 20 49 6e 69 | pecify.a.:abbr:`SIP.(Session.Ini |
6bd40 | 74 69 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 73 65 72 76 65 72 20 62 79 20 49 50 76 | tiation.Protocol)`.server.by.IPv |
6bd60 | 36 20 61 64 64 72 65 73 73 20 6f 66 20 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d | 6.address.of.Fully.Qualified.Dom |
6bd80 | 61 69 6e 20 4e 61 6d 65 20 66 6f 72 20 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e | ain.Name.for.all.DHCPv6.clients. |
6bda0 | 00 53 70 65 63 69 66 79 20 61 20 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 | .Specify.a.Fully.Qualified.Domai |
6bdc0 | 6e 20 4e 61 6d 65 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 | n.Name.as.source/destination.mat |
6bde0 | 63 68 65 72 2e 20 45 6e 73 75 72 65 20 72 6f 75 74 65 72 20 69 73 20 61 62 6c 65 20 74 6f 20 72 | cher..Ensure.router.is.able.to.r |
6be00 | 65 73 6f 6c 76 65 20 73 75 63 68 20 64 6e 73 20 71 75 65 72 79 2e 00 53 70 65 63 69 66 79 20 61 | esolve.such.dns.query..Specify.a |
6be20 | 20 4e 49 53 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 20 63 | .NIS.server.address.for.DHCPv6.c |
6be40 | 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 4e 49 53 2b 20 73 65 72 76 65 72 20 61 64 | lients..Specify.a.NIS+.server.ad |
6be60 | 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 | dress.for.DHCPv6.clients..Specif |
6be80 | 79 20 61 20 72 61 6e 67 65 20 6f 66 20 67 72 6f 75 70 20 61 64 64 72 65 73 73 65 73 20 76 69 61 | y.a.range.of.group.addresses.via |
6bea0 | 20 61 20 70 72 65 66 69 78 2d 6c 69 73 74 20 74 68 61 74 20 66 6f 72 63 65 73 20 50 49 4d 20 74 | .a.prefix-list.that.forces.PIM.t |
6bec0 | 6f 20 6e 65 76 65 72 20 64 6f 20 3a 61 62 62 72 3a 60 53 53 4d 20 28 53 6f 75 72 63 65 2d 53 70 | o.never.do.:abbr:`SSM.(Source-Sp |
6bee0 | 65 63 69 66 69 63 20 4d 75 6c 74 69 63 61 73 74 29 60 20 6f 76 65 72 2e 00 53 70 65 63 69 66 79 | ecific.Multicast)`.over..Specify |
6bf00 | 20 61 62 73 6f 6c 75 74 65 20 60 3c 70 61 74 68 3e 60 20 74 6f 20 73 63 72 69 70 74 20 77 68 69 | .absolute.`<path>`.to.script.whi |
6bf20 | 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 69 73 20 | ch.will.be.run.when.`<task>`.is. |
6bf40 | 65 78 65 63 75 74 65 64 2e 00 53 70 65 63 69 66 79 20 61 6c 6c 6f 77 65 64 20 3a 61 62 62 72 3a | executed..Specify.allowed.:abbr: |
6bf60 | 60 4b 45 58 20 28 4b 65 79 20 45 78 63 68 61 6e 67 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e | `KEX.(Key.Exchange)`.algorithms. |
6bf80 | 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 65 72 6e 61 74 65 20 41 53 20 66 6f 72 20 74 68 69 | .Specify.an.alternate.AS.for.thi |
6bfa0 | 73 20 42 47 50 20 70 72 6f 63 65 73 73 20 77 68 65 6e 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 | s.BGP.process.when.interacting.w |
6bfc0 | 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 | ith.the.specified.peer.or.peer.g |
6bfe0 | 72 6f 75 70 2e 20 57 69 74 68 20 6e 6f 20 6d 6f 64 69 66 69 65 72 73 2c 20 74 68 65 20 73 70 65 | roup..With.no.modifiers,.the.spe |
6c000 | 63 69 66 69 65 64 20 6c 6f 63 61 6c 2d 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 | cified.local-as.is.prepended.to. |
6c020 | 74 68 65 20 72 65 63 65 69 76 65 64 20 41 53 5f 50 41 54 48 20 77 68 65 6e 20 72 65 63 65 69 76 | the.received.AS_PATH.when.receiv |
6c040 | 69 6e 67 20 72 6f 75 74 69 6e 67 20 75 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 | ing.routing.updates.from.the.pee |
6c060 | 72 2c 20 61 6e 64 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 | r,.and.prepended.to.the.outgoing |
6c080 | 20 41 53 5f 50 41 54 48 20 28 61 66 74 65 72 20 74 68 65 20 70 72 6f 63 65 73 73 20 6c 6f 63 61 | .AS_PATH.(after.the.process.loca |
6c0a0 | 6c 20 41 53 29 20 77 68 65 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f | l.AS).when.transmitting.local.ro |
6c0c0 | 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 65 72 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 | utes.to.the.peer..Specify.an.alt |
6c0e0 | 65 72 6e 61 74 65 20 54 43 50 20 70 6f 72 74 20 77 68 65 72 65 20 74 68 65 20 6c 64 61 70 20 73 | ernate.TCP.port.where.the.ldap.s |
6c100 | 65 72 76 65 72 20 69 73 20 6c 69 73 74 65 6e 69 6e 67 20 69 66 20 6f 74 68 65 72 20 74 68 61 6e | erver.is.listening.if.other.than |
6c120 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 4c 44 41 50 20 70 6f 72 74 20 33 38 39 2e 00 53 70 65 63 | .the.default.LDAP.port.389..Spec |
6c140 | 69 66 79 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 | ify.interval.in.seconds.to.wait. |
6c160 | 62 65 74 77 65 65 6e 20 44 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 64 61 74 65 73 2e 20 54 68 65 | between.Dynamic.DNS.updates..The |
6c180 | 20 64 65 66 61 75 6c 74 20 69 73 20 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 | .default.is..300.seconds..Specif |
6c1a0 | 79 20 6c 6f 63 61 6c 20 72 61 6e 67 65 20 6f 66 20 69 70 20 61 64 64 72 65 73 73 20 74 6f 20 67 | y.local.range.of.ip.address.to.g |
6c1c0 | 69 76 65 20 74 6f 20 64 68 63 70 20 63 6c 69 65 6e 74 73 2e 20 46 69 72 73 74 20 49 50 20 69 6e | ive.to.dhcp.clients..First.IP.in |
6c1e0 | 20 72 61 6e 67 65 20 69 73 20 72 6f 75 74 65 72 20 49 50 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 | .range.is.router.IP..If.you.need |
6c200 | 20 6d 6f 72 65 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 20 75 73 65 20 60 63 6c 69 65 6e 74 2d | .more.customization.use.`client- |
6c220 | 69 70 2d 70 6f 6f 6c 60 00 53 70 65 63 69 66 79 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 3a 61 62 | ip-pool`.Specify.name.of.the.:ab |
6c240 | 62 72 3a 60 56 52 46 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 | br:`VRF.(Virtual.Routing.and.For |
6c260 | 77 61 72 64 69 6e 67 29 60 20 69 6e 73 74 61 6e 63 65 2e 00 53 70 65 63 69 66 79 20 6e 65 78 74 | warding)`.instance..Specify.next |
6c280 | 68 6f 70 20 6f 6e 20 74 68 65 20 70 61 74 68 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 | hop.on.the.path.to.the.destinati |
6c2a0 | 6f 6e 2c 20 60 60 69 70 76 34 2d 61 64 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 73 65 74 20 | on,.``ipv4-address``.can.be.set. |
6c2c0 | 74 6f 20 60 60 64 68 63 70 60 60 00 53 70 65 63 69 66 79 20 73 74 61 74 69 63 20 72 6f 75 74 65 | to.``dhcp``.Specify.static.route |
6c2e0 | 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 | .into.the.routing.table.sending. |
6c300 | 61 6c 6c 20 6e 6f 6e 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 6e 65 78 | all.non.local.traffic.to.the.nex |
6c320 | 74 68 6f 70 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 53 70 65 63 69 66 | thop.address.`<address>`..Specif |
6c340 | 79 20 74 68 65 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 52 41 44 49 | y.the.IP.`<address>`.of.the.RADI |
6c360 | 55 53 20 73 65 72 76 65 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 | US.server.user.with.the.pre-shar |
6c380 | 65 64 2d 73 65 63 72 65 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 | ed-secret.given.in.`<secret>`..S |
6c3a0 | 70 65 63 69 66 79 20 74 68 65 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 | pecify.the.IP.`<address>`.of.the |
6c3c0 | 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 | .TACACS.server.user.with.the.pre |
6c3e0 | 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 | -shared-secret.given.in.`<secret |
6c400 | 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 61 64 64 72 | >`..Specify.the.IPv4.source.addr |
6c420 | 65 73 73 20 74 6f 20 75 73 65 20 66 6f 72 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 74 | ess.to.use.for.the.BGP.session.t |
6c440 | 6f 20 74 68 69 73 20 6e 65 69 67 68 62 6f 72 2c 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 | o.this.neighbor,.may.be.specifie |
6c460 | 64 20 61 73 20 65 69 74 68 65 72 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 64 69 72 65 | d.as.either.an.IPv4.address.dire |
6c480 | 63 74 6c 79 20 6f 72 20 61 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 00 53 70 | ctly.or.as.an.interface.name..Sp |
6c4a0 | 65 63 69 66 79 20 74 68 65 20 4c 44 41 50 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 | ecify.the.LDAP.server.to.connect |
6c4c0 | 20 74 6f 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 76 61 6c 75 | .to..Specify.the.identifier.valu |
6c4e0 | 65 20 6f 66 20 74 68 65 20 73 69 74 65 2d 6c 65 76 65 6c 20 61 67 67 72 65 67 61 74 6f 72 20 28 | e.of.the.site-level.aggregator.( |
6c500 | 53 4c 41 29 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 44 20 6d 75 73 74 20 62 | SLA).on.the.interface..ID.must.b |
6c520 | 65 20 61 20 64 65 63 69 6d 61 6c 20 6e 75 6d 62 65 72 20 67 72 65 61 74 65 72 20 74 68 65 6e 20 | e.a.decimal.number.greater.then. |
6c540 | 30 20 77 68 69 63 68 20 66 69 74 73 20 69 6e 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 53 4c | 0.which.fits.in.the.length.of.SL |
6c560 | 41 20 49 44 73 20 28 73 65 65 20 62 65 6c 6f 77 29 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 69 | A.IDs.(see.below)..Specify.the.i |
6c580 | 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 75 73 65 64 20 6c 6f 63 61 6c 6c 79 20 6f 6e | nterface.address.used.locally.on |
6c5a0 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 72 65 66 69 78 20 | .the.interface.where.the.prefix. |
6c5c0 | 68 61 73 20 62 65 65 6e 20 64 65 6c 65 67 61 74 65 64 20 74 6f 2e 20 49 44 20 6d 75 73 74 20 62 | has.been.delegated.to..ID.must.b |
6c5e0 | 65 20 61 20 64 65 63 69 6d 61 6c 20 69 6e 74 65 67 65 72 2e 00 53 70 65 63 69 66 79 20 74 68 65 | e.a.decimal.integer..Specify.the |
6c600 | 20 6d 69 6e 69 6d 75 6d 20 72 65 71 75 69 72 65 64 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 31 2e | .minimum.required.TLS.version.1. |
6c620 | 32 20 6f 72 20 31 2e 33 00 53 70 65 63 69 66 79 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 | 2.or.1.3.Specify.the.plaintext.p |
6c640 | 61 73 73 77 6f 72 64 20 75 73 65 72 20 62 79 20 75 73 65 72 20 60 3c 6e 61 6d 65 3e 60 20 6f 6e | assword.user.by.user.`<name>`.on |
6c660 | 20 74 68 69 73 20 73 79 73 74 65 6d 2e 20 54 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 | .this.system..The.plaintext.pass |
6c680 | 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 72 61 6e 73 | word.will.be.automatically.trans |
6c6a0 | 66 65 72 72 65 64 20 69 6e 74 6f 20 61 20 73 65 63 75 72 65 20 68 61 73 68 65 64 20 70 61 73 73 | ferred.into.a.secure.hashed.pass |
6c6c0 | 77 6f 72 64 20 61 6e 64 20 6e 6f 74 20 73 61 76 65 64 20 61 6e 79 77 68 65 72 65 20 69 6e 20 70 | word.and.not.saved.anywhere.in.p |
6c6e0 | 6c 61 69 6e 74 65 78 74 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 75 73 65 64 20 | laintext..Specify.the.port.used. |
6c700 | 6f 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 73 20 6c 69 | on.which.the.proxy.service.is.li |
6c720 | 73 74 65 6e 69 6e 67 20 66 6f 72 20 72 65 71 75 65 73 74 73 2e 20 54 68 69 73 20 70 6f 72 74 20 | stening.for.requests..This.port. |
6c740 | 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 74 68 65 | is.the.default.port.used.for.the |
6c760 | 20 73 70 65 63 69 66 69 65 64 20 6c 69 73 74 65 6e 2d 61 64 64 72 65 73 73 2e 00 53 70 65 63 69 | .specified.listen-address..Speci |
6c780 | 66 79 20 74 68 65 20 73 79 73 74 65 6d 73 20 60 3c 74 69 6d 65 7a 6f 6e 65 3e 60 20 61 73 20 74 | fy.the.systems.`<timezone>`.as.t |
6c7a0 | 68 65 20 52 65 67 69 6f 6e 2f 4c 6f 63 61 74 69 6f 6e 20 74 68 61 74 20 62 65 73 74 20 64 65 66 | he.Region/Location.that.best.def |
6c7c0 | 69 6e 65 73 20 79 6f 75 72 20 6c 6f 63 61 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c | ines.your.location..For.example, |
6c7e0 | 20 73 70 65 63 69 66 79 69 6e 67 20 55 53 2f 50 61 63 69 66 69 63 20 73 65 74 73 20 74 68 65 20 | .specifying.US/Pacific.sets.the. |
6c800 | 74 69 6d 65 20 7a 6f 6e 65 20 74 6f 20 55 53 20 50 61 63 69 66 69 63 20 74 69 6d 65 2e 00 53 70 | time.zone.to.US.Pacific.time..Sp |
6c820 | 65 63 69 66 79 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 77 68 65 6e 20 60 3c 74 | ecify.the.time.interval.when.`<t |
6c840 | 61 73 6b 3e 60 20 73 68 6f 75 6c 64 20 62 65 20 65 78 65 63 75 74 65 64 2e 20 54 68 65 20 69 6e | ask>`.should.be.executed..The.in |
6c860 | 74 65 72 76 61 6c 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 6e 75 6d 62 65 72 20 77 69 | terval.is.specified.as.number.wi |
6c880 | 74 68 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 75 66 66 69 78 65 73 | th.one.of.the.following.suffixes |
6c8a0 | 3a 00 53 70 65 63 69 66 79 20 74 69 6d 65 6f 75 74 20 2f 20 75 70 64 61 74 65 20 69 6e 74 65 72 | :.Specify.timeout./.update.inter |
6c8c0 | 76 61 6c 20 74 6f 20 63 68 65 63 6b 20 69 66 20 49 50 20 61 64 64 72 65 73 73 20 63 68 61 6e 67 | val.to.check.if.IP.address.chang |
6c8e0 | 65 64 2e 00 53 70 65 63 69 66 79 20 74 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 | ed..Specify.timeout.interval.for |
6c900 | 20 6b 65 65 70 61 6c 69 76 65 20 6d 65 73 73 61 67 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 | .keepalive.message.in.seconds..S |
6c920 | 70 65 63 69 66 79 20 77 68 65 72 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 68 61 72 65 64 | pecify.where.interface.is.shared |
6c940 | 20 62 79 20 6d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 20 6f 72 20 69 74 20 69 73 20 76 6c 61 6e | .by.multiple.users.or.it.is.vlan |
6c960 | 2d 70 65 72 2d 75 73 65 72 2e 00 53 70 69 6e 65 31 20 69 73 20 61 20 43 69 73 63 6f 20 49 4f 53 | -per-user..Spine1.is.a.Cisco.IOS |
6c980 | 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 6e 67 20 76 65 72 73 69 6f 6e 20 31 35 2e 34 2c 20 4c 65 | .router.running.version.15.4,.Le |
6c9a0 | 61 66 32 20 61 6e 64 20 4c 65 61 66 33 20 69 73 20 65 61 63 68 20 61 20 56 79 4f 53 20 72 6f 75 | af2.and.Leaf3.is.each.a.VyOS.rou |
6c9c0 | 74 65 72 20 72 75 6e 6e 69 6e 67 20 31 2e 32 2e 00 53 70 6c 75 6e 6b 00 53 70 6f 6b 65 00 53 71 | ter.running.1.2..Splunk.Spoke.Sq |
6c9e0 | 75 69 64 5f 20 69 73 20 61 20 63 61 63 68 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 | uid_.is.a.caching.and.forwarding |
6ca00 | 20 48 54 54 50 20 77 65 62 20 70 72 6f 78 79 2e 20 49 74 20 68 61 73 20 61 20 77 69 64 65 20 76 | .HTTP.web.proxy..It.has.a.wide.v |
6ca20 | 61 72 69 65 74 79 20 6f 66 20 75 73 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 70 65 65 64 69 | ariety.of.uses,.including.speedi |
6ca40 | 6e 67 20 75 70 20 61 20 77 65 62 20 73 65 72 76 65 72 20 62 79 20 63 61 63 68 69 6e 67 20 72 65 | ng.up.a.web.server.by.caching.re |
6ca60 | 70 65 61 74 65 64 20 72 65 71 75 65 73 74 73 2c 20 63 61 63 68 69 6e 67 20 77 65 62 2c 20 44 4e | peated.requests,.caching.web,.DN |
6ca80 | 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 6c 6f 6f | S.and.other.computer.network.loo |
6caa0 | 6b 75 70 73 20 66 6f 72 20 61 20 67 72 6f 75 70 20 6f 66 20 70 65 6f 70 6c 65 20 73 68 61 72 69 | kups.for.a.group.of.people.shari |
6cac0 | 6e 67 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 61 69 64 69 6e 67 | ng.network.resources,.and.aiding |
6cae0 | 20 73 65 63 75 72 69 74 79 20 62 79 20 66 69 6c 74 65 72 69 6e 67 20 74 72 61 66 66 69 63 2e 20 | .security.by.filtering.traffic.. |
6cb00 | 41 6c 74 68 6f 75 67 68 20 70 72 69 6d 61 72 69 6c 79 20 75 73 65 64 20 66 6f 72 20 48 54 54 50 | Although.primarily.used.for.HTTP |
6cb20 | 20 61 6e 64 20 46 54 50 2c 20 53 71 75 69 64 20 69 6e 63 6c 75 64 65 73 20 6c 69 6d 69 74 65 64 | .and.FTP,.Squid.includes.limited |
6cb40 | 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 76 65 72 61 6c 20 6f 74 68 65 72 20 70 72 6f 74 6f | .support.for.several.other.proto |
6cb60 | 63 6f 6c 73 20 69 6e 63 6c 75 64 69 6e 67 20 49 6e 74 65 72 6e 65 74 20 47 6f 70 68 65 72 2c 20 | cols.including.Internet.Gopher,. |
6cb80 | 53 53 4c 2c 5b 36 5d 20 54 4c 53 20 61 6e 64 20 48 54 54 50 53 2e 20 53 71 75 69 64 20 64 6f 65 | SSL,[6].TLS.and.HTTPS..Squid.doe |
6cba0 | 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 53 4f 43 4b 53 20 70 72 6f 74 6f 63 6f 6c | s.not.support.the.SOCKS.protocol |
6cbc0 | 2e 00 53 74 61 72 74 20 57 65 62 73 65 72 76 65 72 20 69 6e 20 67 69 76 65 6e 20 20 56 52 46 2e | ..Start.Webserver.in.given..VRF. |
6cbe0 | 00 53 74 61 72 74 20 57 65 62 73 65 72 76 65 72 20 69 6e 20 67 69 76 65 6e 20 56 52 46 2e 00 53 | .Start.Webserver.in.given.VRF..S |
6cc00 | 74 61 72 74 20 62 79 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 49 50 53 65 63 20 53 41 73 20 28 | tart.by.checking.for.IPSec.SAs.( |
6cc20 | 53 65 63 75 72 69 74 79 20 41 73 73 6f 63 69 61 74 69 6f 6e 73 29 20 77 69 74 68 3a 00 53 74 61 | Security.Associations).with:.Sta |
6cc40 | 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 | rting.from.VyOS.1.4-rolling-2023 |
6cc60 | 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 | 08040557,.a.new.firewall.structu |
6cc80 | 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 | re.can.be.found.on.all.vyos.inst |
6cca0 | 61 6c 61 74 69 6f 6e 73 2c 20 61 6e 64 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c | alations,.and.zone.based.firewal |
6ccc0 | 6c 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 2e 20 44 6f 63 75 6d 65 | l.is.no.longer.supported..Docume |
6cce0 | 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 | ntation.for.most.of.the.new.fire |
6cd00 | 77 61 6c 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 | wall.CLI.can.be.found.in.the.`fi |
6cd20 | 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f | rewall.<https://docs.vyos.io/en/ |
6cd40 | 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 | latest/configuration/firewall/ge |
6cd60 | 6e 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 | neral.html>`_.chapter..The.legac |
6cd80 | 79 20 66 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f | y.firewall.is.still.available.fo |
6cda0 | 72 20 76 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 | r.versions.before.1.4-rolling-20 |
6cdc0 | 32 33 30 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 | 2308040557.and.can.be.found.in.t |
6cde0 | 68 65 20 3a 72 65 66 3a 60 66 69 72 65 77 61 6c 6c 2d 6c 65 67 61 63 79 60 20 63 68 61 70 74 65 | he.:ref:`firewall-legacy`.chapte |
6ce00 | 72 2e 20 54 68 65 20 65 78 61 6d 70 6c 65 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 | r..The.examples.in.this.section. |
6ce20 | 75 73 65 20 74 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 | use.the.legacy.firewall.configur |
6ce40 | 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 2c 20 73 69 6e 63 65 20 74 68 69 73 20 66 65 61 74 75 | ation.commands,.since.this.featu |
6ce60 | 72 65 20 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 20 69 6e 20 65 61 72 6c 69 65 72 20 72 | re.has.been.removed.in.earlier.r |
6ce80 | 65 6c 65 61 73 65 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d | eleases..Starting.from.VyOS.1.4- |
6cea0 | 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 | rolling-202308040557,.a.new.fire |
6cec0 | 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 | wall.structure.can.be.found.on.a |
6cee0 | 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 61 74 69 6f 6e 73 2e 20 5a 6f 6e 65 20 62 61 73 65 64 | ll.vyos.instalations..Zone.based |
6cf00 | 20 66 69 72 65 77 61 6c 6c 20 77 61 73 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 61 74 20 76 65 | .firewall.was.removed.in.that.ve |
6cf20 | 72 73 69 6f 6e 2c 20 62 75 74 20 72 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 | rsion,.but.re.introduced.in.VyOS |
6cf40 | 20 31 2e 34 20 61 6e 64 20 31 2e 35 2e 20 41 6c 6c 20 76 65 72 73 69 6f 6e 73 20 62 75 69 6c 74 | .1.4.and.1.5..All.versions.built |
6cf60 | 20 61 66 74 65 72 20 32 30 32 33 2d 31 30 2d 32 32 20 68 61 73 20 74 68 69 73 20 66 65 61 74 75 | .after.2023-10-22.has.this.featu |
6cf80 | 72 65 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 | re..Documentation.for.most.of.th |
6cfa0 | 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 | e.new.firewall.CLI.can.be.found. |
6cfc0 | 69 6e 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 | in.the.`firewall.<https://docs.v |
6cfe0 | 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 | yos.io/en/latest/configuration/f |
6d000 | 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e | irewall/general.html>`_.chapter. |
6d020 | 20 54 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 | .The.legacy.firewall.is.still.av |
6d040 | 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d | ailable.for.versions.before.1.4- |
6d060 | 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 | rolling-202308040557.and.can.be. |
6d080 | 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 | found.in.the.:doc:`legacy.firewa |
6d0a0 | 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | ll.configuration.</configuration |
6d0c0 | 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 20 63 68 61 70 74 | /firewall/general-legacy>`.chapt |
6d0e0 | 65 72 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 | er..Starting.from.VyOS.1.4-rolli |
6d100 | 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 | ng-202308040557,.a.new.firewall. |
6d120 | 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 | structure.can.be.found.on.all.vy |
6d140 | 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 | os.installations..Starting.from. |
6d160 | 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 | VyOS.1.4-rolling-202308040557,.a |
6d180 | 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 | .new.firewall.structure.can.be.f |
6d1a0 | 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 20 | ound.on.all.vyos.installations.. |
6d1c0 | 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6e 65 77 20 66 69 72 65 77 | Documentation.for.most.new.firew |
6d1e0 | 61 6c 6c 20 63 6c 69 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 68 65 72 65 3a 00 53 74 61 72 74 | all.cli.can.be.found.here:.Start |
6d200 | 69 6e 67 20 6f 66 20 77 69 74 68 20 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 | ing.of.with.VyOS.1.3.(equuleus). |
6d220 | 77 65 20 61 64 64 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 72 75 6e 6e 69 6e 67 20 56 79 4f | we.added.support.for.running.VyO |
6d240 | 53 20 61 73 20 61 6e 20 4f 75 74 2d 6f 66 2d 42 61 6e 64 20 4d 61 6e 61 67 65 6d 65 6e 74 20 64 | S.as.an.Out-of-Band.Management.d |
6d260 | 65 76 69 63 65 20 77 68 69 63 68 20 70 72 6f 76 69 64 65 73 20 72 65 6d 6f 74 65 20 61 63 63 65 | evice.which.provides.remote.acce |
6d280 | 73 73 20 62 79 20 6d 65 61 6e 73 20 6f 66 20 53 53 48 20 74 6f 20 64 69 72 65 63 74 6c 79 20 61 | ss.by.means.of.SSH.to.directly.a |
6d2a0 | 74 74 61 63 68 65 64 20 73 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 74 61 72 74 | ttached.serial.interfaces..Start |
6d2c0 | 69 6e 67 20 77 69 74 68 20 56 79 4f 53 20 31 2e 32 20 61 20 3a 61 62 62 72 3a 60 6d 44 4e 53 20 | ing.with.VyOS.1.2.a.:abbr:`mDNS. |
6d2e0 | 28 4d 75 6c 74 69 63 61 73 74 20 44 4e 53 29 60 20 72 65 70 65 61 74 65 72 20 66 75 6e 63 74 69 | (Multicast.DNS)`.repeater.functi |
6d300 | 6f 6e 61 6c 69 74 79 20 69 73 20 70 72 6f 76 69 64 65 64 2e 20 41 64 64 69 74 69 6f 6e 61 6c 20 | onality.is.provided..Additional. |
6d320 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 6f 62 74 61 69 6e 65 64 20 66 72 6f 6d | information.can.be.obtained.from |
6d340 | 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4d | .https://en.wikipedia.org/wiki/M |
6d360 | 75 6c 74 69 63 61 73 74 5f 44 4e 53 2e 00 53 74 61 74 69 63 00 53 74 61 74 69 63 20 3a 61 62 62 | ulticast_DNS..Static.Static.:abb |
6d380 | 72 3a 60 53 41 4b 20 28 53 65 63 75 72 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 4b 65 | r:`SAK.(Secure.Authentication.Ke |
6d3a0 | 79 29 60 20 6d 6f 64 65 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 61 6e 75 61 | y)`.mode.can.be.configured.manua |
6d3c0 | 6c 6c 79 20 6f 6e 20 65 61 63 68 20 64 65 76 69 63 65 20 77 69 73 68 69 6e 67 20 74 6f 20 75 73 | lly.on.each.device.wishing.to.us |
6d3e0 | 65 20 4d 41 43 73 65 63 2e 20 4b 65 79 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 73 74 61 74 69 | e.MACsec..Keys.must.be.set.stati |
6d400 | 63 61 6c 6c 79 20 6f 6e 20 61 6c 6c 20 64 65 76 69 63 65 73 20 66 6f 72 20 74 72 61 66 66 69 63 | cally.on.all.devices.for.traffic |
6d420 | 20 74 6f 20 66 6c 6f 77 20 70 72 6f 70 65 72 6c 79 2e 20 4b 65 79 20 72 6f 74 61 74 69 6f 6e 20 | .to.flow.properly..Key.rotation. |
6d440 | 69 73 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 6f | is.dependent.on.the.administrato |
6d460 | 72 20 75 70 64 61 74 69 6e 67 20 61 6c 6c 20 6b 65 79 73 20 6d 61 6e 75 61 6c 6c 79 20 61 63 72 | r.updating.all.keys.manually.acr |
6d480 | 6f 73 73 20 63 6f 6e 6e 65 63 74 65 64 20 64 65 76 69 63 65 73 2e 20 53 74 61 74 69 63 20 53 41 | oss.connected.devices..Static.SA |
6d4a0 | 4b 20 6d 6f 64 65 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 4d 4b 41 2e | K.mode.can.not.be.used.with.MKA. |
6d4c0 | 00 53 74 61 74 69 63 20 44 48 43 50 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 20 74 | .Static.DHCP.IP.address.assign.t |
6d4e0 | 6f 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 64 65 73 63 72 69 70 74 69 | o.host.identified.by.`<descripti |
6d500 | 6f 6e 3e 60 2e 20 49 50 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 | on>`..IP.address.must.be.inside. |
6d520 | 74 68 65 20 60 3c 73 75 62 6e 65 74 3e 60 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 | the.`<subnet>`.which.is.defined. |
6d540 | 62 75 74 20 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 74 68 65 20 64 79 6e 61 6d 69 63 20 72 | but.can.be.outside.the.dynamic.r |
6d560 | 61 6e 67 65 20 63 72 65 61 74 65 64 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 | ange.created.with.:cfgcmd:`set.s |
6d580 | 65 72 76 69 63 65 20 64 68 63 70 2d 73 65 72 76 65 72 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 | ervice.dhcp-server.shared-networ |
6d5a0 | 6b 2d 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 73 75 62 6e 65 74 20 3c 73 75 62 6e 65 74 3e 20 72 61 | k-name.<name>.subnet.<subnet>.ra |
6d5c0 | 6e 67 65 20 3c 6e 3e 60 2e 20 49 66 20 6e 6f 20 69 70 2d 61 64 64 72 65 73 73 20 69 73 20 73 70 | nge.<n>`..If.no.ip-address.is.sp |
6d5e0 | 65 63 69 66 69 65 64 2c 20 61 6e 20 49 50 20 66 72 6f 6d 20 74 68 65 20 64 79 6e 61 6d 69 63 20 | ecified,.an.IP.from.the.dynamic. |
6d600 | 70 6f 6f 6c 20 69 73 20 75 73 65 64 2e 00 53 74 61 74 69 63 20 48 6f 73 74 6e 61 6d 65 20 4d 61 | pool.is.used..Static.Hostname.Ma |
6d620 | 70 70 69 6e 67 00 53 74 61 74 69 63 20 4b 65 79 73 00 53 74 61 74 69 63 20 52 6f 75 74 65 73 00 | pping.Static.Keys.Static.Routes. |
6d640 | 53 74 61 74 69 63 20 52 6f 75 74 69 6e 67 20 6f 72 20 6f 74 68 65 72 20 64 79 6e 61 6d 69 63 20 | Static.Routing.or.other.dynamic. |
6d660 | 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 76 | routing.protocols.can.be.used.ov |
6d680 | 65 72 20 74 68 65 20 76 74 75 6e 20 69 6e 74 65 72 66 61 63 65 00 53 74 61 74 69 63 20 52 6f 75 | er.the.vtun.interface.Static.Rou |
6d6a0 | 74 69 6e 67 3a 00 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 00 53 74 61 74 69 63 20 6d 61 70 | ting:.Static.mappings.Static.map |
6d6c0 | 70 69 6e 67 73 20 61 72 65 6e 27 74 20 73 68 6f 77 6e 2e 20 54 6f 20 73 68 6f 77 20 61 6c 6c 20 | pings.aren't.shown..To.show.all. |
6d6e0 | 73 74 61 74 65 73 2c 20 75 73 65 20 60 60 73 68 6f 77 20 64 68 63 70 20 73 65 72 76 65 72 20 6c | states,.use.``show.dhcp.server.l |
6d700 | 65 61 73 65 73 20 73 74 61 74 65 20 61 6c 6c 60 60 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 | eases.state.all``..Static.routes |
6d720 | 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c | .are.manually.configured.routes, |
6d740 | 20 77 68 69 63 68 2c 20 69 6e 20 67 65 6e 65 72 61 6c 2c 20 63 61 6e 6e 6f 74 20 62 65 20 75 70 | .which,.in.general,.cannot.be.up |
6d760 | 64 61 74 65 64 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 66 72 6f 6d 20 69 6e 66 6f 72 6d 61 74 69 | dated.dynamically.from.informati |
6d780 | 6f 6e 20 56 79 4f 53 20 6c 65 61 72 6e 73 20 61 62 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b | on.VyOS.learns.about.the.network |
6d7a0 | 20 74 6f 70 6f 6c 6f 67 79 20 66 72 6f 6d 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f | .topology.from.other.routing.pro |
6d7c0 | 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 | tocols..However,.if.a.link.fails |
6d7e0 | 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 72 6f 75 74 65 73 2c | ,.the.router.will.remove.routes, |
6d800 | 20 69 6e 63 6c 75 64 69 6e 67 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 2c 20 66 72 6f 6d 20 74 | .including.static.routes,.from.t |
6d820 | 68 65 20 3a 61 62 62 72 3a 60 52 49 50 42 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 | he.:abbr:`RIPB.(Routing.Informat |
6d840 | 69 6f 6e 20 42 61 73 65 29 60 20 74 68 61 74 20 75 73 65 64 20 74 68 69 73 20 69 6e 74 65 72 66 | ion.Base)`.that.used.this.interf |
6d860 | 61 63 65 20 74 6f 20 72 65 61 63 68 20 74 68 65 20 6e 65 78 74 20 68 6f 70 2e 20 49 6e 20 67 65 | ace.to.reach.the.next.hop..In.ge |
6d880 | 6e 65 72 61 6c 2c 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 | neral,.static.routes.should.only |
6d8a0 | 20 62 65 20 75 73 65 64 20 66 6f 72 20 76 65 72 79 20 73 69 6d 70 6c 65 20 6e 65 74 77 6f 72 6b | .be.used.for.very.simple.network |
6d8c0 | 20 74 6f 70 6f 6c 6f 67 69 65 73 2c 20 6f 72 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 | .topologies,.or.to.override.the. |
6d8e0 | 62 65 68 61 76 69 6f 72 20 6f 66 20 61 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 | behavior.of.a.dynamic.routing.pr |
6d900 | 6f 74 6f 63 6f 6c 20 66 6f 72 20 61 20 73 6d 61 6c 6c 20 6e 75 6d 62 65 72 20 6f 66 20 72 6f 75 | otocol.for.a.small.number.of.rou |
6d920 | 74 65 73 2e 20 54 68 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 72 6f 75 74 65 | tes..The.collection.of.all.route |
6d940 | 73 20 74 68 65 20 72 6f 75 74 65 72 20 68 61 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 69 74 | s.the.router.has.learned.from.it |
6d960 | 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 72 20 66 72 6f 6d 20 69 74 73 20 64 79 6e 61 | s.configuration.or.from.its.dyna |
6d980 | 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 73 74 6f 72 65 64 20 | mic.routing.protocols.is.stored. |
6d9a0 | 69 6e 20 74 68 65 20 52 49 42 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 61 72 65 20 64 | in.the.RIB..Unicast.routes.are.d |
6d9c0 | 69 72 65 63 74 6c 79 20 75 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 66 6f | irectly.used.to.determine.the.fo |
6d9e0 | 72 77 61 72 64 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 75 6e 69 63 61 73 74 20 | rwarding.table.used.for.unicast. |
6da00 | 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 | packet.forwarding..Static.routes |
6da20 | 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 | .can.be.configured.referencing.t |
6da40 | 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 3b 20 66 6f 72 20 65 78 61 6d 70 6c 65 | he.tunnel.interface;.for.example |
6da60 | 2c 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 75 73 65 20 61 20 6e 65 | ,.the.local.router.will.use.a.ne |
6da80 | 74 77 6f 72 6b 20 6f 66 20 31 30 2e 30 2e 30 2e 30 2f 31 36 2c 20 77 68 69 6c 65 20 74 68 65 20 | twork.of.10.0.0.0/16,.while.the. |
6daa0 | 72 65 6d 6f 74 65 20 68 61 73 20 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 31 2e 30 2e 30 | remote.has.a.network.of.10.1.0.0 |
6dac0 | 2f 31 36 3a 00 53 74 61 74 69 6f 6e 20 73 75 70 70 6f 72 74 73 20 72 65 63 65 69 76 69 6e 67 20 | /16:.Station.supports.receiving. |
6dae0 | 56 48 54 20 76 61 72 69 61 6e 74 20 48 54 20 43 6f 6e 74 72 6f 6c 20 66 69 65 6c 64 00 53 74 61 | VHT.variant.HT.Control.field.Sta |
6db00 | 74 75 73 00 53 74 69 63 6b 79 20 43 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 74 6f 72 61 67 65 20 6f | tus.Sticky.Connections.Storage.o |
6db20 | 66 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 75 73 65 73 20 6d 65 6d 6f 72 79 2e 20 49 66 20 | f.route.updates.uses.memory..If. |
6db40 | 79 6f 75 20 65 6e 61 62 6c 65 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | you.enable.soft.reconfiguration. |
6db60 | 69 6e 62 6f 75 6e 64 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6e 65 69 67 68 62 6f 72 73 2c 20 | inbound.for.multiple.neighbors,. |
6db80 | 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 6d 65 6d 6f 72 79 20 75 73 65 64 20 63 61 6e 20 62 65 | the.amount.of.memory.used.can.be |
6dba0 | 63 6f 6d 65 20 73 69 67 6e 69 66 69 63 61 6e 74 2e 00 53 75 66 66 69 78 65 73 00 53 75 6d 6d 61 | come.significant..Suffixes.Summa |
6dbc0 | 72 69 73 61 74 69 6f 6e 20 73 74 61 72 74 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 74 68 69 73 20 | risation.starts.only.after.this. |
6dbe0 | 64 65 6c 61 79 20 74 69 6d 65 72 20 65 78 70 69 72 79 2e 00 53 75 70 70 6f 72 74 65 64 20 4d 6f | delay.timer.expiry..Supported.Mo |
6dc00 | 64 75 6c 65 73 00 53 75 70 70 6f 72 74 65 64 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 73 65 | dules.Supported.channel.width.se |
6dc20 | 74 2e 00 53 75 70 70 6f 72 74 65 64 20 64 61 65 6d 6f 6e 73 3a 00 53 75 70 70 6f 72 74 65 64 20 | t..Supported.daemons:.Supported. |
6dc40 | 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 73 3a 00 53 75 70 70 6f 72 74 65 64 20 72 65 6d 6f 74 | interface.types:.Supported.remot |
6dc60 | 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 46 54 50 2c 20 46 54 50 53 2c 20 48 54 54 50 2c | e.protocols.are.FTP,.FTPS,.HTTP, |
6dc80 | 20 48 54 54 50 53 2c 20 53 43 50 2f 53 46 54 50 20 61 6e 64 20 54 46 54 50 2e 00 53 75 70 70 6f | .HTTPS,.SCP/SFTP.and.TFTP..Suppo |
6dca0 | 72 74 65 64 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 52 49 50 20 61 72 65 3a 00 53 75 70 70 6f 72 | rted.versions.of.RIP.are:.Suppor |
6dcc0 | 74 73 20 61 73 20 48 45 4c 50 45 52 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 61 63 | ts.as.HELPER.for.configured.grac |
6dce0 | 65 20 70 65 72 69 6f 64 2e 00 53 75 70 70 6f 73 65 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 | e.period..Suppose.the.LEFT.route |
6dd00 | 72 20 68 61 73 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 | r.has.external.address.192.0.2.1 |
6dd20 | 30 20 6f 6e 20 69 74 73 20 65 74 68 30 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 74 68 65 | 0.on.its.eth0.interface,.and.the |
6dd40 | 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 69 73 20 32 30 33 2e 30 2e 31 31 33 2e 34 35 00 53 75 | .RIGHT.router.is.203.0.113.45.Su |
6dd60 | 70 70 6f 73 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 31 30 2e 32 33 2e 31 2e 30 2f | ppose.you.want.to.use.10.23.1.0/ |
6dd80 | 32 34 20 6e 65 74 77 6f 72 6b 20 66 6f 72 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 | 24.network.for.client.tunnel.end |
6dda0 | 70 6f 69 6e 74 73 20 61 6e 64 20 61 6c 6c 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 62 65 | points.and.all.client.subnets.be |
6ddc0 | 6c 6f 6e 67 20 74 6f 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 2e 20 41 6c 6c 20 63 6c 69 65 6e 74 | long.to.10.23.0.0/20..All.client |
6dde0 | 73 20 6e 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 31 39 32 2e 31 36 38 2e 30 2e 30 | s.need.access.to.the.192.168.0.0 |
6de00 | 2f 31 36 20 6e 65 74 77 6f 72 6b 2e 00 53 75 70 70 72 65 73 73 20 73 65 6e 64 69 6e 67 20 43 61 | /16.network..Suppress.sending.Ca |
6de20 | 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 61 73 20 4f 50 45 4e 20 6d 65 73 | pability.Negotiation.as.OPEN.mes |
6de40 | 73 61 67 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 | sage.optional.parameter.to.the.p |
6de60 | 65 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 74 | eer..This.command.only.affects.t |
6de80 | 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 74 68 65 72 20 74 68 61 6e | he.peer.is.configured.other.than |
6dea0 | 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 79 6e | .IPv4.unicast.configuration..Syn |
6dec0 | 61 6d 69 63 20 69 6e 73 74 72 75 63 74 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 6f 20 61 6c 6c | amic.instructs.to.forward.to.all |
6dee0 | 20 70 65 65 72 73 20 77 68 69 63 68 20 77 65 20 68 61 76 65 20 61 20 64 69 72 65 63 74 20 63 6f | .peers.which.we.have.a.direct.co |
6df00 | 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 79 6f | nnection.with..Alternatively,.yo |
6df20 | 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 76 65 20 6d 75 6c 74 | u.can.specify.the.directive.mult |
6df40 | 69 70 6c 65 20 74 69 6d 65 73 20 66 6f 72 20 65 61 63 68 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 | iple.times.for.each.protocol-add |
6df60 | 72 65 73 73 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c | ress.the.multicast.traffic.shoul |
6df80 | 64 20 62 65 20 73 65 6e 74 20 74 6f 2e 00 53 79 6e 63 20 67 72 6f 75 70 73 00 53 79 6e 70 72 6f | d.be.sent.to..Sync.groups.Synpro |
6dfa0 | 78 79 00 53 79 6e 70 72 6f 78 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 79 6e 70 72 6f 78 79 | xy.Synproxy.connections.Synproxy |
6dfc0 | 20 72 65 6c 69 65 73 20 6f 6e 20 73 79 6e 63 6f 6f 6b 69 65 73 20 61 6e 64 20 54 43 50 20 74 69 | .relies.on.syncookies.and.TCP.ti |
6dfe0 | 6d 65 73 74 61 6d 70 73 2c 20 65 6e 73 75 72 65 20 74 68 65 73 65 20 61 72 65 20 65 6e 61 62 6c | mestamps,.ensure.these.are.enabl |
6e000 | 65 64 00 53 79 6e 74 61 78 20 68 61 73 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 56 79 4f 53 20 | ed.Syntax.has.changed.from.VyOS. |
6e020 | 31 2e 32 20 28 63 72 75 78 29 20 61 6e 64 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 | 1.2.(crux).and.it.will.be.automa |
6e040 | 74 69 63 61 6c 6c 79 20 6d 69 67 72 61 74 65 64 20 64 75 72 69 6e 67 20 61 6e 20 75 70 67 72 61 | tically.migrated.during.an.upgra |
6e060 | 64 65 2e 00 53 79 73 63 74 6c 00 53 79 73 6c 6f 67 00 53 79 73 6c 6f 67 20 73 75 70 70 6f 72 74 | de..Sysctl.Syslog.Syslog.support |
6e080 | 73 20 6c 6f 67 67 69 6e 67 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 73 2c 20 74 | s.logging.to.multiple.targets,.t |
6e0a0 | 68 6f 73 65 20 74 61 72 67 65 74 73 20 63 6f 75 6c 64 20 62 65 20 61 20 70 6c 61 69 6e 20 66 69 | hose.targets.could.be.a.plain.fi |
6e0c0 | 6c 65 20 6f 6e 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 69 74 73 | le.on.your.VyOS.installation.its |
6e0e0 | 65 6c 66 2c 20 61 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 20 6f 72 20 61 20 72 65 6d 6f 74 | elf,.a.serial.console.or.a.remot |
6e100 | 65 20 73 79 73 6c 6f 67 20 73 65 72 76 65 72 20 77 68 69 63 68 20 69 73 20 72 65 61 63 68 65 64 | e.syslog.server.which.is.reached |
6e120 | 20 76 69 61 20 3a 61 62 62 72 3a 60 49 50 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f | .via.:abbr:`IP.(Internet.Protoco |
6e140 | 6c 29 60 20 55 44 50 2f 54 43 50 2e 00 53 79 73 6c 6f 67 20 75 73 65 73 20 6c 6f 67 72 6f 74 61 | l)`.UDP/TCP..Syslog.uses.logrota |
6e160 | 74 65 20 74 6f 20 72 6f 74 61 74 65 20 6c 6f 67 69 6c 65 73 20 61 66 74 65 72 20 61 20 6e 75 6d | te.to.rotate.logiles.after.a.num |
6e180 | 62 65 72 20 6f 66 20 67 69 76 65 73 20 62 79 74 65 73 2e 20 57 65 20 6b 65 65 70 20 61 73 20 6d | ber.of.gives.bytes..We.keep.as.m |
6e1a0 | 61 6e 79 20 61 73 20 60 3c 6e 75 6d 62 65 72 3e 60 20 72 6f 74 61 74 65 64 20 66 69 6c 65 20 62 | any.as.`<number>`.rotated.file.b |
6e1c0 | 65 66 6f 72 65 20 74 68 65 79 20 61 72 65 20 64 65 6c 65 74 65 64 20 6f 6e 20 74 68 65 20 73 79 | efore.they.are.deleted.on.the.sy |
6e1e0 | 73 74 65 6d 2e 00 53 79 73 6c 6f 67 20 77 69 6c 6c 20 77 72 69 74 65 20 60 3c 73 69 7a 65 3e 60 | stem..Syslog.will.write.`<size>` |
6e200 | 20 6b 69 6c 6f 62 79 74 65 73 20 69 6e 74 6f 20 74 68 65 20 66 69 6c 65 20 73 70 65 63 69 66 69 | .kilobytes.into.the.file.specifi |
6e220 | 65 64 20 62 79 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 2e 20 41 66 74 65 72 20 74 68 69 73 20 6c | ed.by.`<filename>`..After.this.l |
6e240 | 69 6d 69 74 20 68 61 73 20 62 65 65 6e 20 72 65 61 63 68 65 64 2c 20 74 68 65 20 63 75 73 74 6f | imit.has.been.reached,.the.custo |
6e260 | 6d 20 66 69 6c 65 20 69 73 20 22 72 6f 74 61 74 65 64 22 20 62 79 20 6c 6f 67 72 6f 74 61 74 65 | m.file.is."rotated".by.logrotate |
6e280 | 20 61 6e 64 20 61 20 6e 65 77 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 63 72 65 61 74 65 | .and.a.new.custom.file.is.create |
6e2a0 | 64 2e 00 53 79 73 74 65 6d 00 53 79 73 74 65 6d 20 44 4e 53 00 53 79 73 74 65 6d 20 44 69 73 70 | d..System.System.DNS.System.Disp |
6e2c0 | 6c 61 79 20 28 4c 43 44 29 00 53 79 73 74 65 6d 20 4e 61 6d 65 20 61 6e 64 20 44 65 73 63 72 69 | lay.(LCD).System.Name.and.Descri |
6e2e0 | 70 74 69 6f 6e 00 53 79 73 74 65 6d 20 50 72 6f 78 79 00 53 79 73 74 65 6d 20 63 61 70 61 62 69 | ption.System.Proxy.System.capabi |
6e300 | 6c 69 74 69 65 73 20 28 73 77 69 74 63 68 69 6e 67 2c 20 72 6f 75 74 69 6e 67 2c 20 65 74 63 2e | lities.(switching,.routing,.etc. |
6e320 | 29 00 53 79 73 74 65 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 00 | ).System.configuration.commands. |
6e340 | 53 79 73 74 65 6d 20 64 61 65 6d 6f 6e 73 00 53 79 73 74 65 6d 20 69 64 65 6e 74 69 66 69 65 72 | System.daemons.System.identifier |
6e360 | 3a 20 60 60 31 39 32 31 2e 36 38 30 30 2e 31 30 30 32 60 60 20 2d 20 66 6f 72 20 73 79 73 74 65 | :.``1921.6800.1002``.-.for.syste |
6e380 | 6d 20 69 64 65 74 69 66 69 65 72 73 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 6f 20 75 73 65 | m.idetifiers.we.recommend.to.use |
6e3a0 | 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 | .IP.address.or.MAC.address.of.th |
6e3c0 | 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 54 68 65 20 77 61 79 20 74 6f 20 63 6f 6e 73 | e.router.itself..The.way.to.cons |
6e3e0 | 74 72 75 63 74 20 74 68 69 73 20 69 73 20 74 6f 20 6b 65 65 70 20 61 6c 6c 20 6f 66 20 74 68 65 | truct.this.is.to.keep.all.of.the |
6e400 | 20 7a 65 72 6f 65 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 49 50 20 61 64 64 72 65 73 73 | .zeroes.of.the.router.IP.address |
6e420 | 2c 20 61 6e 64 20 74 68 65 6e 20 63 68 61 6e 67 65 20 74 68 65 20 70 65 72 69 6f 64 73 20 66 72 | ,.and.then.change.the.periods.fr |
6e440 | 6f 6d 20 62 65 69 6e 67 20 65 76 65 72 79 20 74 68 72 65 65 20 6e 75 6d 62 65 72 73 20 74 6f 20 | om.being.every.three.numbers.to. |
6e460 | 65 76 65 72 79 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 | every.four.numbers..The.address. |
6e480 | 74 68 61 74 20 69 73 20 6c 69 73 74 65 64 20 68 65 72 65 20 69 73 20 60 60 31 39 32 2e 31 36 38 | that.is.listed.here.is.``192.168 |
6e4a0 | 2e 31 2e 32 60 60 2c 20 77 68 69 63 68 20 69 66 20 65 78 70 61 6e 64 65 64 20 77 69 6c 6c 20 74 | .1.2``,.which.if.expanded.will.t |
6e4c0 | 75 72 6e 20 69 6e 74 6f 20 60 60 31 39 32 2e 31 36 38 2e 30 30 31 2e 30 30 32 60 60 2e 20 54 68 | urn.into.``192.168.001.002``..Th |
6e4e0 | 65 6e 20 61 6c 6c 20 6f 6e 65 20 68 61 73 20 74 6f 20 64 6f 20 69 73 20 6d 6f 76 65 20 74 68 65 | en.all.one.has.to.do.is.move.the |
6e500 | 20 64 6f 74 73 20 74 6f 20 68 61 76 65 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 20 69 6e 73 74 65 | .dots.to.have.four.numbers.inste |
6e520 | 61 64 20 6f 66 20 74 68 72 65 65 2e 20 54 68 69 73 20 67 69 76 65 73 20 75 73 20 60 60 31 39 32 | ad.of.three..This.gives.us.``192 |
6e540 | 31 2e 36 38 30 30 2e 31 30 30 32 60 60 2e 00 53 79 73 74 65 6d 20 69 73 20 75 6e 75 73 61 62 6c | 1.6800.1002``..System.is.unusabl |
6e560 | 65 20 2d 20 61 20 70 61 6e 69 63 20 63 6f 6e 64 69 74 69 6f 6e 00 54 41 43 41 43 53 20 45 78 61 | e.-.a.panic.condition.TACACS.Exa |
6e580 | 6d 70 6c 65 00 54 41 43 41 43 53 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 | mple.TACACS.is.defined.in.:rfc:` |
6e5a0 | 38 39 30 37 60 2e 00 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 | 8907`..TACACS.servers.could.be.h |
6e5c0 | 61 72 64 65 6e 65 64 20 62 79 20 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e | ardened.by.only.allowing.certain |
6e5e0 | 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 | .IP.addresses.to.connect..As.of. |
6e600 | 74 68 69 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 | this.the.source.address.of.each. |
6e620 | 54 41 43 41 43 53 20 71 75 65 72 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 | TACACS.query.can.be.configured.. |
6e640 | 54 41 43 41 43 53 2b 00 54 42 44 00 54 43 50 20 26 20 55 44 50 20 73 65 72 76 69 63 65 73 20 72 | TACACS+.TBD.TCP.&.UDP.services.r |
6e660 | 75 6e 6e 69 6e 67 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 63 6f 6e 74 65 78 | unning.in.the.default.VRF.contex |
6e680 | 74 20 28 69 65 2e 2c 20 6e 6f 74 20 62 6f 75 6e 64 20 74 6f 20 61 6e 79 20 56 52 46 20 64 65 76 | t.(ie.,.not.bound.to.any.VRF.dev |
6e6a0 | 69 63 65 29 20 63 61 6e 20 77 6f 72 6b 20 61 63 72 6f 73 73 20 61 6c 6c 20 56 52 46 20 64 6f 6d | ice).can.work.across.all.VRF.dom |
6e6c0 | 61 69 6e 73 20 62 79 20 65 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 2e 00 54 46 | ains.by.enabling.this.option..TF |
6e6e0 | 54 50 20 53 65 72 76 65 72 00 54 61 67 20 69 73 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 | TP.Server.Tag.is.the.optional.pa |
6e700 | 72 61 6d 65 74 65 72 2e 20 49 66 20 74 61 67 20 63 6f 6e 66 69 67 75 72 65 64 20 53 75 6d 6d 61 | rameter..If.tag.configured.Summa |
6e720 | 72 79 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 77 69 74 68 | ry.route.will.be.originated.with |
6e740 | 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 61 67 2e 00 54 61 73 6b 20 53 63 68 65 64 75 | .the.configured.tag..Task.Schedu |
6e760 | 6c 65 72 00 54 65 6c 65 67 72 61 66 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 | ler.Telegraf.Telegraf.output.plu |
6e780 | 67 69 6e 20 61 7a 75 72 65 2d 64 61 74 61 2d 65 78 70 6c 6f 72 65 72 5f 00 54 65 6c 65 67 72 61 | gin.azure-data-explorer_.Telegra |
6e7a0 | 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 70 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e | f.output.plugin.prometheus-clien |
6e7c0 | 74 5f 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 73 70 6c 75 6e 6b | t_.Telegraf.output.plugin.splunk |
6e7e0 | 5f 2e 20 48 54 54 50 20 45 76 65 6e 74 20 43 6f 6c 6c 65 63 74 6f 72 2e 00 54 65 6c 6c 20 50 49 | _..HTTP.Event.Collector..Tell.PI |
6e800 | 4d 20 74 68 61 74 20 77 65 20 77 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 | M.that.we.would.not.like.to.use. |
6e820 | 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 72 6f 63 65 73 73 20 62 6f 6f 74 73 74 | this.interface.to.process.bootst |
6e840 | 72 61 70 20 6d 65 73 73 61 67 65 73 2e 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 | rap.messages..Tell.PIM.that.we.w |
6e860 | 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 | ould.not.like.to.use.this.interf |
6e880 | 61 63 65 20 74 6f 20 70 72 6f 63 65 73 73 20 75 6e 69 63 61 73 74 20 62 6f 6f 74 73 74 72 61 70 | ace.to.process.unicast.bootstrap |
6e8a0 | 20 6d 65 73 73 61 67 65 73 2e 00 54 65 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 | .messages..Tell.hosts.to.use.the |
6e8c0 | 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 28 73 74 61 74 65 66 75 6c 29 20 70 72 6f 74 6f 63 6f | .administered.(stateful).protoco |
6e8e0 | 6c 20 28 69 2e 65 2e 20 44 48 43 50 29 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 | l.(i.e..DHCP).for.autoconfigurat |
6e900 | 69 6f 6e 20 6f 66 20 6f 74 68 65 72 20 28 6e 6f 6e 2d 61 64 64 72 65 73 73 29 20 69 6e 66 6f 72 | ion.of.other.(non-address).infor |
6e920 | 6d 61 74 69 6f 6e 00 54 65 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d | mation.Tell.hosts.to.use.the.adm |
6e940 | 69 6e 69 73 74 65 72 65 64 20 73 74 61 74 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 | inistered.stateful.protocol.(i.e |
6e960 | 2e 20 44 48 43 50 29 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 65 | ..DHCP).for.autoconfiguration.Te |
6e980 | 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 | mporary.disable.this.RADIUS.serv |
6e9a0 | 65 72 2e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 | er..Temporary.disable.this.RADIU |
6e9c0 | 53 20 73 65 72 76 65 72 2e 20 49 74 20 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 | S.server..It.won't.be.queried..T |
6e9e0 | 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 54 41 43 41 43 53 20 73 65 72 | emporary.disable.this.TACACS.ser |
6ea00 | 76 65 72 2e 20 49 74 20 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 72 6d 69 6e | ver..It.won't.be.queried..Termin |
6ea20 | 61 74 65 20 53 53 4c 00 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f | ate.SSL.Test.connecting.given.co |
6ea40 | 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 | nnection-oriented.interface..`<i |
6ea60 | 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 | nterface>`.can.be.``pppoe0``.as. |
6ea80 | 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 | the.example..Test.connecting.giv |
6eaa0 | 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 | en.connection-oriented.interface |
6eac0 | 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 30 60 | ..`<interface>`.can.be.``sstpc0` |
6eae0 | 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 | `.as.the.example..Test.disconnec |
6eb00 | 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 | ting.given.connection-oriented.i |
6eb20 | 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 | nterface..`<interface>`.can.be.` |
6eb40 | 60 70 70 70 6f 65 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 | `pppoe0``.as.the.example..Test.d |
6eb60 | 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 | isconnecting.given.connection-or |
6eb80 | 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 | iented.interface..`<interface>`. |
6eba0 | 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 | can.be.``sstpc0``.as.the.example |
6ebc0 | 2e 00 54 65 73 74 20 66 72 6f 6d 20 74 68 65 20 49 50 76 36 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 | ..Test.from.the.IPv6.only.client |
6ebe0 | 3a 00 54 65 73 74 69 6e 67 20 53 53 54 50 00 54 65 73 74 69 6e 67 20 61 6e 64 20 56 61 6c 69 64 | :.Testing.SSTP.Testing.and.Valid |
6ec00 | 61 74 69 6f 6e 00 54 68 61 6e 6b 73 20 74 6f 20 74 68 69 73 20 64 69 73 63 6f 76 65 72 79 2c 20 | ation.Thanks.to.this.discovery,. |
6ec20 | 61 6e 79 20 73 75 62 73 65 71 75 65 6e 74 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 50 | any.subsequent.traffic.between.P |
6ec40 | 43 34 20 61 6e 64 20 50 43 35 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 75 73 69 6e 67 20 74 68 65 | C4.and.PC5.will.not.be.using.the |
6ec60 | 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 6c | .multicast-address.between.the.l |
6ec80 | 65 61 76 65 73 20 61 73 20 74 68 65 79 20 62 6f 74 68 20 6b 6e 6f 77 20 62 65 68 69 6e 64 20 77 | eaves.as.they.both.know.behind.w |
6eca0 | 68 69 63 68 20 4c 65 61 66 20 74 68 65 20 50 43 73 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 2e | hich.Leaf.the.PCs.are.connected. |
6ecc0 | 20 54 68 69 73 20 73 61 76 65 73 20 74 72 61 66 66 69 63 20 61 73 20 6c 65 73 73 20 6d 75 6c 74 | .This.saves.traffic.as.less.mult |
6ece0 | 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 73 65 6e 74 20 72 65 64 75 63 65 73 20 74 68 65 20 6c | icast.packets.sent.reduces.the.l |
6ed00 | 6f 61 64 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 77 68 69 63 68 20 69 6d 70 72 6f 76 | oad.on.the.network,.which.improv |
6ed20 | 65 73 20 73 63 61 6c 61 62 69 6c 69 74 79 20 77 68 65 6e 20 6d 6f 72 65 20 6c 65 61 76 65 73 20 | es.scalability.when.more.leaves. |
6ed40 | 61 72 65 20 61 64 64 65 64 2e 00 54 68 61 74 20 69 73 20 68 6f 77 20 69 74 20 69 73 20 70 6f 73 | are.added..That.is.how.it.is.pos |
6ed60 | 73 69 62 6c 65 20 74 6f 20 64 6f 20 74 68 65 20 73 6f 2d 63 61 6c 6c 65 64 20 22 69 6e 67 72 65 | sible.to.do.the.so-called."ingre |
6ed80 | 73 73 20 73 68 61 70 69 6e 67 22 2e 00 54 68 61 74 20 6c 6f 6f 6b 73 20 67 6f 6f 64 20 2d 20 77 | ss.shaping"..That.looks.good.-.w |
6eda0 | 65 20 64 65 66 69 6e 65 64 20 32 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 74 68 65 79 27 72 65 20 | e.defined.2.tunnels.and.they're. |
6edc0 | 62 6f 74 68 20 75 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 | both.up.and.running..The.:abbr:` |
6ede0 | 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 | ASN.(Autonomous.System.Number)`. |
6ee00 | 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 65 73 73 65 6e 74 69 61 6c 20 65 6c 65 6d 65 6e 74 73 | is.one.of.the.essential.elements |
6ee20 | 20 6f 66 20 42 47 50 2e 20 42 47 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f | .of.BGP..BGP.is.a.distance.vecto |
6ee40 | 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 61 6e 64 20 74 68 65 20 41 53 2d 50 | r.routing.protocol,.and.the.AS-P |
6ee60 | 61 74 68 20 66 72 61 6d 65 77 6f 72 6b 20 70 72 6f 76 69 64 65 73 20 64 69 73 74 61 6e 63 65 20 | ath.framework.provides.distance. |
6ee80 | 76 65 63 74 6f 72 20 6d 65 74 72 69 63 20 61 6e 64 20 6c 6f 6f 70 20 64 65 74 65 63 74 69 6f 6e | vector.metric.and.loop.detection |
6eea0 | 20 74 6f 20 42 47 50 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 44 4e 50 54 76 36 20 28 44 65 73 74 | .to.BGP..The.:abbr:`DNPTv6.(Dest |
6eec0 | 69 6e 61 74 69 6f 6e 20 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 | ination.IPv6-to-IPv6.Network.Pre |
6eee0 | 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 | fix.Translation)`.destination.ad |
6ef00 | 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 75 73 | dress.translation.function.is.us |
6ef20 | 65 64 20 69 6e 20 73 63 65 6e 61 72 69 6f 73 20 77 68 65 72 65 20 74 68 65 20 73 65 72 76 65 72 | ed.in.scenarios.where.the.server |
6ef40 | 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 70 72 6f 76 69 64 65 | .in.the.internal.network.provide |
6ef60 | 73 20 73 65 72 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f | s.services.to.the.external.netwo |
6ef80 | 72 6b 2c 20 73 75 63 68 20 61 73 20 70 72 6f 76 69 64 69 6e 67 20 57 65 62 20 73 65 72 76 69 63 | rk,.such.as.providing.Web.servic |
6efa0 | 65 73 20 6f 72 20 46 54 50 20 73 65 72 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e | es.or.FTP.services.to.the.extern |
6efc0 | 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 42 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 6d | al.network..By.configuring.the.m |
6efe0 | 61 70 70 69 6e 67 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 20 62 65 74 77 65 65 6e 20 74 68 65 20 | apping.relationship.between.the. |
6f000 | 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 | internal.server.address.and.the. |
6f020 | 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 | external.network.address.on.the. |
6f040 | 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 | external.network.side.interface. |
6f060 | 6f 66 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 2c 20 65 78 74 65 72 6e 61 6c 20 6e 65 | of.the.NAT66.device,.external.ne |
6f080 | 74 77 6f 72 6b 20 75 73 65 72 73 20 63 61 6e 20 61 63 63 65 73 73 20 74 68 65 20 69 6e 74 65 72 | twork.users.can.access.the.inter |
6f0a0 | 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 | nal.network.server.through.the.d |
6f0c0 | 65 73 69 67 6e 61 74 65 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 | esignated.external.network.addre |
6f0e0 | 73 73 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f | ss..The.:abbr:`MPLS.(Multi-Proto |
6f100 | 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 74 63 68 69 6e 67 29 60 20 61 72 63 68 69 74 65 63 74 75 | col.Label.Switching)`.architectu |
6f120 | 72 65 20 64 6f 65 73 20 6e 6f 74 20 61 73 73 75 6d 65 20 61 20 73 69 6e 67 6c 65 20 70 72 6f 74 | re.does.not.assume.a.single.prot |
6f140 | 6f 63 6f 6c 20 74 6f 20 63 72 65 61 74 65 20 4d 50 4c 53 20 70 61 74 68 73 2e 20 56 79 4f 53 20 | ocol.to.create.MPLS.paths..VyOS. |
6f160 | 73 75 70 70 6f 72 74 73 20 74 68 65 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 | supports.the.Label.Distribution. |
6f180 | 50 72 6f 74 6f 63 6f 6c 20 28 4c 44 50 29 20 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 | Protocol.(LDP).as.implemented.by |
6f1a0 | 20 46 52 52 2c 20 62 61 73 65 64 20 6f 6e 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 54 68 65 20 | .FRR,.based.on.:rfc:`5036`..The. |
6f1c0 | 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 36 36 60 20 72 75 6c 65 20 72 65 70 6c 61 63 65 | :ref:`source-nat66`.rule.replace |
6f1e0 | 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b | s.the.source.address.of.the.pack |
6f200 | 65 74 20 61 6e 64 20 63 61 6c 63 75 6c 61 74 65 73 20 74 68 65 20 63 6f 6e 76 65 72 74 65 64 20 | et.and.calculates.the.converted. |
6f220 | 61 64 64 72 65 73 73 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 20 73 70 65 63 69 66 69 | address.using.the.prefix.specifi |
6f240 | 65 64 20 69 6e 20 74 68 65 20 72 75 6c 65 2e 00 54 68 65 20 41 52 50 20 6d 6f 6e 69 74 6f 72 20 | ed.in.the.rule..The.ARP.monitor. |
6f260 | 77 6f 72 6b 73 20 62 79 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 69 6e 67 20 74 | works.by.periodically.checking.t |
6f280 | 68 65 20 73 6c 61 76 65 20 64 65 76 69 63 65 73 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 | he.slave.devices.to.determine.wh |
6f2a0 | 65 74 68 65 72 20 74 68 65 79 20 68 61 76 65 20 73 65 6e 74 20 6f 72 20 72 65 63 65 69 76 65 64 | ether.they.have.sent.or.received |
6f2c0 | 20 74 72 61 66 66 69 63 20 72 65 63 65 6e 74 6c 79 20 28 74 68 65 20 70 72 65 63 69 73 65 20 63 | .traffic.recently.(the.precise.c |
6f2e0 | 72 69 74 65 72 69 61 20 64 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 20 62 6f 6e 64 69 6e 67 | riteria.depends.upon.the.bonding |
6f300 | 20 6d 6f 64 65 2c 20 61 6e 64 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 73 6c 61 76 | .mode,.and.the.state.of.the.slav |
6f320 | 65 29 2e 20 52 65 67 75 6c 61 72 20 74 72 61 66 66 69 63 20 69 73 20 67 65 6e 65 72 61 74 65 64 | e)..Regular.traffic.is.generated |
6f340 | 20 76 69 61 20 41 52 50 20 70 72 6f 62 65 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 61 | .via.ARP.probes.issued.for.the.a |
6f360 | 64 64 72 65 73 73 65 73 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 3a 63 66 67 63 6d | ddresses.specified.by.the.:cfgcm |
6f380 | 64 3a 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 74 61 72 67 65 74 60 20 6f 70 74 69 6f 6e 2e 00 54 | d:`arp-monitor.target`.option..T |
6f3a0 | 68 65 20 41 53 50 20 68 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 74 68 65 69 72 20 49 50 53 65 | he.ASP.has.documented.their.IPSe |
6f3c0 | 63 20 72 65 71 75 69 72 65 6d 65 6e 74 73 3a 00 54 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 63 | c.requirements:.The.BGP.router.c |
6f3e0 | 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 52 50 4b 49 20 63 | an.connect.to.one.or.more.RPKI.c |
6f400 | 61 63 68 65 20 73 65 72 76 65 72 73 20 74 6f 20 72 65 63 65 69 76 65 20 76 61 6c 69 64 61 74 65 | ache.servers.to.receive.validate |
6f420 | 64 20 70 72 65 66 69 78 20 74 6f 20 6f 72 69 67 69 6e 20 41 53 20 6d 61 70 70 69 6e 67 73 2e 20 | d.prefix.to.origin.AS.mappings.. |
6f440 | 41 64 76 61 6e 63 65 64 20 66 61 69 6c 6f 76 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6c 65 6d 65 | Advanced.failover.can.be.impleme |
6f460 | 6e 74 65 64 20 62 79 20 73 65 72 76 65 72 20 73 6f 63 6b 65 74 73 20 77 69 74 68 20 64 69 66 66 | nted.by.server.sockets.with.diff |
6f480 | 65 72 65 6e 74 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 73 2e 00 54 68 65 20 43 4c 49 | erent.preference.values..The.CLI |
6f4a0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 73 61 6d 65 20 61 73 20 6d 65 6e 74 69 6f | .configuration.is.same.as.mentio |
6f4c0 | 6e 65 64 20 69 6e 20 61 62 6f 76 65 20 61 72 74 69 63 6c 65 73 2e 20 54 68 65 20 6f 6e 6c 79 20 | ned.in.above.articles..The.only. |
6f4e0 | 64 69 66 66 65 72 65 6e 63 65 20 69 73 2c 20 74 68 61 74 20 65 61 63 68 20 72 6f 75 74 69 6e 67 | difference.is,.that.each.routing |
6f500 | 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 2c 20 6d 75 73 74 20 62 65 20 70 72 65 66 69 78 65 64 | .protocol.used,.must.be.prefixed |
6f520 | 20 77 69 74 68 20 74 68 65 20 60 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 60 20 63 6f 6d 6d | .with.the.`vrf.name.<name>`.comm |
6f540 | 61 6e 64 2e 00 54 68 65 20 43 4c 4e 53 20 61 64 64 72 65 73 73 20 63 6f 6e 73 69 73 74 73 20 6f | and..The.CLNS.address.consists.o |
6f560 | 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 61 72 74 73 3a 00 54 68 65 20 44 48 43 50 20 | f.the.following.parts:.The.DHCP. |
6f580 | 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 28 44 55 49 44 29 20 69 73 20 75 73 65 64 | unique.identifier.(DUID).is.used |
6f5a0 | 20 62 79 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 65 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 | .by.a.client.to.get.an.IP.addres |
6f5c0 | 73 20 66 72 6f 6d 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2e 20 49 74 20 68 61 73 20 61 | s.from.a.DHCPv6.server..It.has.a |
6f5e0 | 20 32 2d 62 79 74 65 20 44 55 49 44 20 74 79 70 65 20 66 69 65 6c 64 2c 20 61 6e 64 20 61 20 76 | .2-byte.DUID.type.field,.and.a.v |
6f600 | 61 72 69 61 62 6c 65 2d 6c 65 6e 67 74 68 20 69 64 65 6e 74 69 66 69 65 72 20 66 69 65 6c 64 20 | ariable-length.identifier.field. |
6f620 | 75 70 20 74 6f 20 31 32 38 20 62 79 74 65 73 2e 20 49 74 73 20 61 63 74 75 61 6c 20 6c 65 6e 67 | up.to.128.bytes..Its.actual.leng |
6f640 | 74 68 20 64 65 70 65 6e 64 73 20 6f 6e 20 69 74 73 20 74 79 70 65 2e 20 54 68 65 20 73 65 72 76 | th.depends.on.its.type..The.serv |
6f660 | 65 72 20 63 6f 6d 70 61 72 65 73 20 74 68 65 20 44 55 49 44 20 77 69 74 68 20 69 74 73 20 64 61 | er.compares.the.DUID.with.its.da |
6f680 | 74 61 62 61 73 65 20 61 6e 64 20 64 65 6c 69 76 65 72 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | tabase.and.delivers.configuratio |
6f6a0 | 6e 20 64 61 74 61 20 28 61 64 64 72 65 73 73 2c 20 6c 65 61 73 65 20 74 69 6d 65 73 2c 20 44 4e | n.data.(address,.lease.times,.DN |
6f6c0 | 53 20 73 65 72 76 65 72 73 2c 20 65 74 63 2e 29 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 | S.servers,.etc.).to.the.client.. |
6f6e0 | 54 68 65 20 44 4e 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 | The.DN.and.password.to.bind.as.w |
6f700 | 68 69 6c 65 20 70 65 72 66 6f 72 6d 69 6e 67 20 73 65 61 72 63 68 65 73 2e 00 54 68 65 20 44 4e | hile.performing.searches..The.DN |
6f720 | 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 | .and.password.to.bind.as.while.p |
6f740 | 65 72 66 6f 72 6d 69 6e 67 20 73 65 61 72 63 68 65 73 2e 20 41 73 20 74 68 65 20 70 61 73 73 77 | erforming.searches..As.the.passw |
6f760 | 6f 72 64 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 69 6e 74 65 64 20 69 6e 20 70 6c 61 69 6e | ord.needs.to.be.printed.in.plain |
6f780 | 20 74 65 78 74 20 69 6e 20 79 6f 75 72 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .text.in.your.Squid.configuratio |
6f7a0 | 6e 20 69 74 20 69 73 20 73 74 72 6f 6e 67 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 | n.it.is.strongly.recommended.to. |
6f7c0 | 75 73 65 20 61 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 61 73 73 6f 63 | use.a.account.with.minimal.assoc |
6f7e0 | 69 61 74 65 64 20 70 72 69 76 69 6c 65 67 65 73 2e 20 54 68 69 73 20 74 6f 20 6c 69 6d 69 74 20 | iated.privileges..This.to.limit. |
6f800 | 74 68 65 20 64 61 6d 61 67 65 20 69 6e 20 63 61 73 65 20 73 6f 6d 65 6f 6e 65 20 63 6f 75 6c 64 | the.damage.in.case.someone.could |
6f820 | 20 67 65 74 20 68 6f 6c 64 20 6f 66 20 61 20 63 6f 70 79 20 6f 66 20 79 6f 75 72 20 53 71 75 69 | .get.hold.of.a.copy.of.your.Squi |
6f840 | 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 2e 00 54 68 65 20 46 51 2d 43 6f 44 | d.configuration.file..The.FQ-CoD |
6f860 | 65 6c 20 70 6f 6c 69 63 79 20 64 69 73 74 72 69 62 75 74 65 73 20 74 68 65 20 74 72 61 66 66 69 | el.policy.distributes.the.traffi |
6f880 | 63 20 69 6e 74 6f 20 31 30 32 34 20 46 49 46 4f 20 71 75 65 75 65 73 20 61 6e 64 20 74 72 69 65 | c.into.1024.FIFO.queues.and.trie |
6f8a0 | 73 20 74 6f 20 70 72 6f 76 69 64 65 20 67 6f 6f 64 20 73 65 72 76 69 63 65 20 62 65 74 77 65 65 | s.to.provide.good.service.betwee |
6f8c0 | 6e 20 61 6c 6c 20 6f 66 20 74 68 65 6d 2e 20 49 74 20 61 6c 73 6f 20 74 72 69 65 73 20 74 6f 20 | n.all.of.them..It.also.tries.to. |
6f8e0 | 6b 65 65 70 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 61 6c 6c 20 74 68 65 20 71 75 65 75 65 | keep.the.length.of.all.the.queue |
6f900 | 73 20 73 68 6f 72 74 2e 00 54 68 65 20 48 54 54 50 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e | s.short..The.HTTP.service.listen |
6f920 | 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 38 30 2e 00 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 | .on.TCP.port.80..The.IP.address. |
6f940 | 6f 66 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 20 77 65 20 77 69 73 68 20 74 | of.the.internal.system.we.wish.t |
6f960 | 6f 20 66 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 74 6f 2e 00 54 68 65 20 49 6e 74 65 6c 20 | o.forward.traffic.to..The.Intel. |
6f980 | 41 58 32 30 30 20 63 61 72 64 20 64 6f 65 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 75 74 20 6f 66 20 | AX200.card.does.not.work.out.of. |
6f9a0 | 74 68 65 20 62 6f 78 20 69 6e 20 41 50 20 6d 6f 64 65 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f | the.box.in.AP.mode,.see.https:// |
6f9c0 | 75 6e 69 78 2e 73 74 61 63 6b 65 78 63 68 61 6e 67 65 2e 63 6f 6d 2f 71 75 65 73 74 69 6f 6e 73 | unix.stackexchange.com/questions |
6f9e0 | 2f 35 39 38 32 37 35 2f 69 6e 74 65 6c 2d 61 78 32 30 30 2d 61 70 2d 6d 6f 64 65 2e 20 59 6f 75 | /598275/intel-ax200-ap-mode..You |
6fa00 | 20 63 61 6e 20 73 74 69 6c 6c 20 70 75 74 20 74 68 69 73 20 63 61 72 64 20 69 6e 74 6f 20 41 50 | .can.still.put.this.card.into.AP |
6fa20 | 20 6d 6f 64 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 | .mode.using.the.following.config |
6fa40 | 75 72 61 74 69 6f 6e 3a 00 54 68 65 20 4f 49 44 20 60 60 2e 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e | uration:.The.OID.``.1.3.6.1.4.1. |
6fa60 | 38 30 37 32 2e 31 2e 33 2e 32 2e 33 2e 31 2e 31 2e 34 2e 31 31 36 2e 31 30 31 2e 31 31 35 2e 31 | 8072.1.3.2.3.1.1.4.116.101.115.1 |
6fa80 | 31 36 60 60 2c 20 6f 6e 63 65 20 63 61 6c 6c 65 64 2c 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 | 16``,.once.called,.will.contain. |
6faa0 | 74 68 65 20 6f 75 74 70 75 74 20 6f 66 20 74 68 65 20 65 78 74 65 6e 73 69 6f 6e 2e 00 54 68 65 | the.output.of.the.extension..The |
6fac0 | 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 | .Point-to-Point.Tunneling.Protoc |
6fae0 | 6f 6c 20 28 50 50 54 50 5f 29 20 68 61 73 20 62 65 65 6e 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 | ol.(PPTP_).has.been.implemented. |
6fb00 | 69 6e 20 56 79 4f 53 20 6f 6e 6c 79 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 | in.VyOS.only.for.backwards.compa |
6fb20 | 74 69 62 69 6c 69 74 79 2e 20 50 50 54 50 20 68 61 73 20 6d 61 6e 79 20 77 65 6c 6c 20 6b 6e 6f | tibility..PPTP.has.many.well.kno |
6fb40 | 77 6e 20 73 65 63 75 72 69 74 79 20 69 73 73 75 65 73 20 61 6e 64 20 79 6f 75 20 73 68 6f 75 6c | wn.security.issues.and.you.shoul |
6fb60 | 64 20 75 73 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 6e 65 77 20 | d.use.one.of.the.many.other.new. |
6fb80 | 56 50 4e 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 00 54 68 65 20 50 6f 77 65 72 44 4e | VPN.implementations..The.PowerDN |
6fba0 | 53 20 72 65 63 75 72 73 6f 72 20 68 61 73 20 35 20 64 69 66 66 65 72 65 6e 74 20 6c 65 76 65 6c | S.recursor.has.5.different.level |
6fbc0 | 73 20 6f 66 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 77 68 69 63 68 20 63 61 | s.of.DNSSEC.processing,.which.ca |
6fbe0 | 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 74 68 65 20 64 6e 73 73 65 63 20 73 65 74 74 69 6e 67 | n.be.set.with.the.dnssec.setting |
6fc00 | 2e 20 49 6e 20 6f 72 64 65 72 20 66 72 6f 6d 20 6c 65 61 73 74 20 74 6f 20 6d 6f 73 74 20 70 72 | ..In.order.from.least.to.most.pr |
6fc20 | 6f 63 65 73 73 69 6e 67 2c 20 74 68 65 73 65 20 61 72 65 3a 00 54 68 65 20 50 72 69 6f 72 69 74 | ocessing,.these.are:.The.Priorit |
6fc40 | 79 20 51 75 65 75 65 20 69 73 20 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 69 6e 67 | y.Queue.is.a.classful.scheduling |
6fc60 | 20 70 6f 6c 69 63 79 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 64 65 6c 61 79 20 70 61 63 6b 65 | .policy..It.does.not.delay.packe |
6fc80 | 74 73 20 28 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 | ts.(Priority.Queue.is.not.a.shap |
6fca0 | 69 6e 67 20 70 6f 6c 69 63 79 29 2c 20 69 74 20 73 69 6d 70 6c 79 20 64 65 71 75 65 75 65 73 20 | ing.policy),.it.simply.dequeues. |
6fcc0 | 70 61 63 6b 65 74 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 70 72 69 6f 72 | packets.according.to.their.prior |
6fce0 | 69 74 79 2e 00 54 68 65 20 52 41 44 49 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 65 61 74 75 | ity..The.RADIUS.accounting.featu |
6fd00 | 72 65 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 74 68 65 20 4f 70 65 6e 43 6f 6e | re.must.be.used.with.the.OpenCon |
6fd20 | 6e 65 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 2e | nect.authentication.mode.RADIUS. |
6fd40 | 20 49 74 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 | .It.cannot.be.used.with.local.au |
6fd60 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 59 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 | thentication..You.must.configure |
6fd80 | 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | .the.OpenConnect.authentication. |
6fda0 | 6d 6f 64 65 20 74 6f 20 22 72 61 64 69 75 73 22 2e 00 54 68 65 20 52 41 44 49 55 53 20 64 69 63 | mode.to."radius"..The.RADIUS.dic |
6fdc0 | 74 69 6f 6e 61 72 69 65 73 20 69 6e 20 56 79 4f 53 20 61 72 65 20 6c 6f 63 61 74 65 64 20 61 74 | tionaries.in.VyOS.are.located.at |
6fde0 | 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2f 60 | .``/usr/share/accel-ppp/radius/` |
6fe00 | 60 00 54 68 65 20 53 52 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 70 6f 72 74 69 6f 6e 73 20 6f | `.The.SR.segments.are.portions.o |
6fe20 | 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 68 20 74 61 6b 65 6e 20 62 79 20 74 68 65 20 | f.the.network.path.taken.by.the. |
6fe40 | 70 61 63 6b 65 74 2c 20 61 6e 64 20 61 72 65 20 63 61 6c 6c 65 64 20 53 49 44 73 2e 20 41 74 20 | packet,.and.are.called.SIDs..At. |
6fe60 | 65 61 63 68 20 6e 6f 64 65 2c 20 74 68 65 20 66 69 72 73 74 20 53 49 44 20 6f 66 20 74 68 65 20 | each.node,.the.first.SID.of.the. |
6fe80 | 6c 69 73 74 20 69 73 20 72 65 61 64 2c 20 65 78 65 63 75 74 65 64 20 61 73 20 61 20 66 6f 72 77 | list.is.read,.executed.as.a.forw |
6fea0 | 61 72 64 69 6e 67 20 66 75 6e 63 74 69 6f 6e 2c 20 61 6e 64 20 6d 61 79 20 62 65 20 70 6f 70 70 | arding.function,.and.may.be.popp |
6fec0 | 65 64 20 74 6f 20 6c 65 74 20 74 68 65 20 6e 65 78 74 20 6e 6f 64 65 20 72 65 61 64 20 74 68 65 | ed.to.let.the.next.node.read.the |
6fee0 | 20 6e 65 78 74 20 53 49 44 20 6f 66 20 74 68 65 20 6c 69 73 74 2e 20 54 68 65 20 53 49 44 20 6c | .next.SID.of.the.list..The.SID.l |
6ff00 | 69 73 74 20 63 6f 6d 70 6c 65 74 65 6c 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 70 61 | ist.completely.determines.the.pa |
6ff20 | 74 68 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 20 66 6f 72 77 61 72 64 65 64 | th.where.the.packet.is.forwarded |
6ff40 | 2e 00 54 68 65 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 67 75 61 | ..The.Shaper.policy.does.not.gua |
6ff60 | 72 61 6e 74 65 65 20 61 20 6c 6f 77 20 64 65 6c 61 79 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 | rantee.a.low.delay,.but.it.does. |
6ff80 | 67 75 61 72 61 6e 74 65 65 20 62 61 6e 64 77 69 64 74 68 20 74 6f 20 64 69 66 66 65 72 65 6e 74 | guarantee.bandwidth.to.different |
6ffa0 | 20 74 72 61 66 66 69 63 20 63 6c 61 73 73 65 73 20 61 6e 64 20 61 6c 73 6f 20 6c 65 74 73 20 79 | .traffic.classes.and.also.lets.y |
6ffc0 | 6f 75 20 64 65 63 69 64 65 20 68 6f 77 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6d 6f 72 65 20 74 | ou.decide.how.to.allocate.more.t |
6ffe0 | 72 61 66 66 69 63 20 6f 6e 63 65 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 73 20 61 72 65 20 6d | raffic.once.the.guarantees.are.m |
70000 | 65 74 2e 00 54 68 65 20 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 | et..The.UDP.port.number.used.by. |
70020 | 79 6f 75 72 20 61 70 6c 6c 69 63 61 74 69 6f 6e 2e 20 49 74 20 69 73 20 6d 61 6e 64 61 74 6f 72 | your.apllication..It.is.mandator |
70040 | 79 20 66 6f 72 20 74 68 69 73 20 6b 69 6e 64 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 2e 00 54 68 | y.for.this.kind.of.operation..Th |
70060 | 65 20 56 58 4c 41 4e 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 77 61 73 20 6f 72 69 67 69 6e | e.VXLAN.specification.was.origin |
70080 | 61 6c 6c 79 20 63 72 65 61 74 65 64 20 62 79 20 56 4d 77 61 72 65 2c 20 41 72 69 73 74 61 20 4e | ally.created.by.VMware,.Arista.N |
700a0 | 65 74 77 6f 72 6b 73 20 61 6e 64 20 43 69 73 63 6f 2e 20 4f 74 68 65 72 20 62 61 63 6b 65 72 73 | etworks.and.Cisco..Other.backers |
700c0 | 20 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 6e 63 6c 75 64 65 | .of.the.VXLAN.technology.include |
700e0 | 20 48 75 61 77 65 69 2c 20 42 72 6f 61 64 63 6f 6d 2c 20 43 69 74 72 69 78 2c 20 50 69 63 61 38 | .Huawei,.Broadcom,.Citrix,.Pica8 |
70100 | 2c 20 42 69 67 20 53 77 69 74 63 68 20 4e 65 74 77 6f 72 6b 73 2c 20 43 75 6d 75 6c 75 73 20 4e | ,.Big.Switch.Networks,.Cumulus.N |
70120 | 65 74 77 6f 72 6b 73 2c 20 44 65 6c 6c 20 45 4d 43 2c 20 45 72 69 63 73 73 6f 6e 2c 20 4d 65 6c | etworks,.Dell.EMC,.Ericsson,.Mel |
70140 | 6c 61 6e 6f 78 2c 20 46 72 65 65 42 53 44 2c 20 4f 70 65 6e 42 53 44 2c 20 52 65 64 20 48 61 74 | lanox,.FreeBSD,.OpenBSD,.Red.Hat |
70160 | 2c 20 4a 6f 79 65 6e 74 2c 20 61 6e 64 20 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 2e 00 | ,.Joyent,.and.Juniper.Networks.. |
70180 | 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 63 61 6e 20 61 6c 73 6f 20 | The.VyOS.DNS.forwarder.can.also. |
701a0 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 68 6f 73 74 20 61 75 74 68 6f 72 69 74 61 74 | be.configured.to.host.authoritat |
701c0 | 69 76 65 20 72 65 63 6f 72 64 73 20 66 6f 72 20 61 20 64 6f 6d 61 69 6e 2e 00 54 68 65 20 56 79 | ive.records.for.a.domain..The.Vy |
701e0 | 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 | OS.DNS.forwarder.does.not.requir |
70200 | 65 20 61 6e 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 20 49 74 20 63 61 6e | e.an.upstream.DNS.server..It.can |
70220 | 20 73 65 72 76 65 20 61 73 20 61 20 66 75 6c 6c 20 72 65 63 75 72 73 69 76 65 20 44 4e 53 20 73 | .serve.as.a.full.recursive.DNS.s |
70240 | 65 72 76 65 72 20 2d 20 62 75 74 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 66 6f 72 77 61 72 64 20 | erver.-.but.it.can.also.forward. |
70260 | 71 75 65 72 69 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 75 70 73 74 72 65 61 6d | queries.to.configurable.upstream |
70280 | 20 44 4e 53 20 73 65 72 76 65 72 73 2e 20 42 79 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 | .DNS.servers..By.not.configuring |
702a0 | 20 61 6e 79 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 73 20 79 6f 75 20 61 6c | .any.upstream.DNS.servers.you.al |
702c0 | 73 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 20 70 72 | so.avoid.being.tracked.by.the.pr |
702e0 | 6f 76 69 64 65 72 20 6f 66 20 79 6f 75 72 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 | ovider.of.your.upstream.DNS.serv |
70300 | 65 72 2e 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 | er..The.VyOS.DNS.forwarder.will. |
70320 | 6f 6e 6c 79 20 61 63 63 65 70 74 20 6c 6f 6f 6b 75 70 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d | only.accept.lookup.requests.from |
70340 | 20 74 68 65 20 4c 41 4e 20 73 75 62 6e 65 74 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 | .the.LAN.subnets.-.192.168.1.0/2 |
70360 | 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 2f 36 34 00 54 68 65 20 56 79 4f 53 20 44 4e 53 | 4.and.2001:db8::/64.The.VyOS.DNS |
70380 | 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 66 6f 72 20 | .forwarder.will.only.listen.for. |
703a0 | 72 65 71 75 65 73 74 73 20 6f 6e 20 74 68 65 20 65 74 68 31 20 28 4c 41 4e 29 20 69 6e 74 65 72 | requests.on.the.eth1.(LAN).inter |
703c0 | 66 61 63 65 20 61 64 64 72 65 73 73 65 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 32 35 34 20 66 | face.addresses.-.192.168.1.254.f |
703e0 | 6f 72 20 49 50 76 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 20 66 6f 72 20 49 | or.IPv4.and.2001:db8::ffff.for.I |
70400 | 50 76 36 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 | Pv6.The.VyOS.DNS.forwarder.will. |
70420 | 70 61 73 73 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 20 31 30 2e 69 6e 2d | pass.reverse.lookups.for..10.in- |
70440 | 61 64 64 72 2e 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c | addr.arpa,.168.192.in-addr.arpa, |
70460 | 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 20 7a 6f 6e 65 73 20 74 6f | .16-31.172.in-addr.arpa.zones.to |
70480 | 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 50 4b 49 20 73 | .upstream.server..The.VyOS.PKI.s |
704a0 | 75 62 73 79 73 74 65 6d 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 | ubsystem.can.also.be.used.to.aut |
704c0 | 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 74 72 69 65 76 65 20 43 65 72 74 69 66 69 63 61 74 65 73 | omatically.retrieve.Certificates |
704e0 | 20 75 73 69 6e 67 20 74 68 65 20 3a 61 62 62 72 3a 60 41 43 4d 45 20 28 41 75 74 6f 6d 61 74 69 | .using.the.:abbr:`ACME.(Automati |
70500 | 63 20 43 65 72 74 69 66 69 63 61 74 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 45 6e 76 69 72 6f 6e | c.Certificate.Management.Environ |
70520 | 6d 65 6e 74 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 00 54 68 65 20 56 79 4f 53 20 63 6f 6e 74 61 69 | ment)`.protocol..The.VyOS.contai |
70540 | 6e 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 62 61 73 65 64 20 6f 6e 20 60 | ner.implementation.is.based.on.` |
70560 | 50 6f 64 6d 61 6e 3c 68 74 74 70 73 3a 2f 2f 70 6f 64 6d 61 6e 2e 69 6f 2f 3e 60 20 61 73 20 61 | Podman<https://podman.io/>`.as.a |
70580 | 20 64 65 61 6d 6f 6e 6c 65 73 73 20 63 6f 6e 74 61 69 6e 65 72 20 65 6e 67 69 6e 65 2e 00 54 68 | .deamonless.container.engine..Th |
705a0 | 65 20 57 41 50 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 68 61 73 20 74 68 65 20 66 6f | e.WAP.in.this.example.has.the.fo |
705c0 | 6c 6c 6f 77 69 6e 67 20 63 68 61 72 61 63 74 65 72 69 73 74 69 63 73 3a 00 54 68 65 20 57 69 72 | llowing.characteristics:.The.Wir |
705e0 | 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 | eless.Wide-Area-Network.interfac |
70600 | 65 20 70 72 6f 76 69 64 65 73 20 61 63 63 65 73 73 20 28 74 68 72 6f 75 67 68 20 61 20 77 69 72 | e.provides.access.(through.a.wir |
70620 | 65 6c 65 73 73 20 6d 6f 64 65 6d 2f 77 77 61 6e 29 20 74 6f 20 77 69 72 65 6c 65 73 73 20 6e 65 | eless.modem/wwan).to.wireless.ne |
70640 | 74 77 6f 72 6b 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 76 61 72 69 6f 75 73 20 63 65 6c 6c 75 | tworks.provided.by.various.cellu |
70660 | 6c 61 72 20 70 72 6f 76 69 64 65 72 73 2e 00 54 68 65 20 60 60 43 44 60 60 2d 62 69 74 20 69 73 | lar.providers..The.``CD``-bit.is |
70680 | 20 68 6f 6e 6f 72 65 64 20 63 6f 72 72 65 63 74 6c 79 20 66 6f 72 20 70 72 6f 63 65 73 73 20 61 | .honored.correctly.for.process.a |
706a0 | 6e 64 20 76 61 6c 69 64 61 74 65 2e 20 46 6f 72 20 6c 6f 67 2d 66 61 69 6c 2c 20 66 61 69 6c 75 | nd.validate..For.log-fail,.failu |
706c0 | 72 65 73 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 64 20 74 6f 6f 2e 00 54 68 65 20 60 60 61 64 | res.will.be.logged.too..The.``ad |
706e0 | 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 69 74 68 65 72 | dress``.can.be.configured.either |
70700 | 20 6f 6e 20 74 68 65 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 6f 6e 20 6e 6f 74 | .on.the.VRRP.interface.or.on.not |
70720 | 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 60 60 | .VRRP.interface..The.``address`` |
70740 | 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 76 34 | .parameter.can.be.either.an.IPv4 |
70760 | 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e 20 6e 6f | .or.IPv6.address,.but.you.can.no |
70780 | 74 20 6d 69 78 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 69 6e 20 74 68 65 20 73 61 6d 65 20 | t.mix.IPv4.and.IPv6.in.the.same. |
707a0 | 67 72 6f 75 70 2c 20 61 6e 64 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 67 | group,.and.will.need.to.create.g |
707c0 | 72 6f 75 70 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 56 52 49 44 73 20 73 70 65 63 69 | roups.with.different.VRIDs.speci |
707e0 | 61 6c 6c 79 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 20 49 66 20 79 6f 75 20 77 | ally.for.IPv4.and.IPv6..If.you.w |
70800 | 61 6e 74 20 74 6f 20 75 73 65 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 20 79 | ant.to.use.IPv4.+.IPv6.address.y |
70820 | 6f 75 20 63 61 6e 20 75 73 65 20 6f 70 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 2d 61 64 64 | ou.can.use.option.``excluded-add |
70840 | 72 65 73 73 60 60 00 54 68 65 20 60 60 62 6b 2d 62 72 69 64 67 65 2d 73 73 6c 60 60 20 62 61 63 | ress``.The.``bk-bridge-ssl``.bac |
70860 | 6b 65 6e 64 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 73 72 30 31 20 73 65 72 76 65 72 20 6f 6e 20 | kend.connects.to.sr01.server.on. |
70880 | 70 6f 72 74 20 34 34 33 20 76 69 61 20 48 54 54 50 53 20 61 6e 64 20 63 68 65 63 6b 73 20 62 61 | port.443.via.HTTPS.and.checks.ba |
708a0 | 63 6b 65 6e 64 20 73 65 72 76 65 72 20 68 61 73 20 61 20 76 61 6c 69 64 20 63 65 72 74 69 66 69 | ckend.server.has.a.valid.certifi |
708c0 | 63 61 74 65 20 74 72 75 73 74 65 64 20 62 79 20 43 41 20 60 60 63 61 63 65 72 74 60 60 00 54 68 | cate.trusted.by.CA.``cacert``.Th |
708e0 | 65 20 60 60 68 74 74 70 60 60 20 73 65 72 76 69 63 65 20 69 73 20 6c 65 73 74 65 6e 73 20 6f 6e | e.``http``.service.is.lestens.on |
70900 | 20 70 6f 72 74 20 38 30 20 61 6e 64 20 66 6f 72 63 65 20 72 65 64 69 72 65 63 74 73 20 66 72 6f | .port.80.and.force.redirects.fro |
70920 | 6d 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 2e 00 54 68 65 20 60 60 68 74 74 70 60 60 20 73 65 | m.HTTP.to.HTTPS..The.``http``.se |
70940 | 72 76 69 63 65 20 69 73 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 | rvice.is.listens.on.port.80.and. |
70960 | 66 6f 72 63 65 20 72 65 64 69 72 65 63 74 73 20 66 72 6f 6d 20 48 54 54 50 20 74 6f 20 48 54 54 | force.redirects.from.HTTP.to.HTT |
70980 | 50 53 2e 00 54 68 65 20 60 60 68 74 74 70 73 60 60 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e | PS..The.``https``.service.listen |
709a0 | 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 77 69 74 68 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d | s.on.port.443.with.backend.``bk- |
709c0 | 62 72 69 64 67 65 2d 73 73 6c 60 60 20 74 6f 20 68 61 6e 64 6c 65 20 48 54 54 50 53 20 74 72 61 | bridge-ssl``.to.handle.HTTPS.tra |
709e0 | 66 66 69 63 2e 20 49 74 20 75 73 65 73 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 | ffic..It.uses.certificate.named. |
70a00 | 60 60 63 65 72 74 60 60 20 66 6f 72 20 53 53 4c 20 74 65 72 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 | ``cert``.for.SSL.termination..Th |
70a20 | 65 20 60 60 68 74 74 70 73 60 60 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 | e.``https``.service.listens.on.p |
70a40 | 6f 72 74 20 34 34 33 20 77 69 74 68 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 64 65 66 61 75 6c | ort.443.with.backend.``bk-defaul |
70a60 | 74 60 60 20 74 6f 20 68 61 6e 64 6c 65 20 48 54 54 50 53 20 74 72 61 66 66 69 63 2e 20 49 74 20 | t``.to.handle.HTTPS.traffic..It. |
70a80 | 75 73 65 73 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 74 60 60 20 | uses.certificate.named.``cert``. |
70aa0 | 66 6f 72 20 53 53 4c 20 74 65 72 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 68 74 74 70 73 | for.SSL.termination..The.``https |
70ac0 | 60 60 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 77 | ``.service.listens.on.port.443.w |
70ae0 | 69 74 68 20 62 61 63 6b 65 6e 64 20 60 62 6b 2d 64 65 66 61 75 6c 74 60 20 74 6f 20 68 61 6e 64 | ith.backend.`bk-default`.to.hand |
70b00 | 6c 65 20 48 54 54 50 53 20 74 72 61 66 66 69 63 2e 20 49 74 20 75 73 65 73 20 63 65 72 74 69 66 | le.HTTPS.traffic..It.uses.certif |
70b20 | 69 63 61 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 74 60 60 20 66 6f 72 20 53 53 4c 20 74 65 72 | icate.named.``cert``.for.SSL.ter |
70b40 | 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 | mination..The.``persistent-tunne |
70b60 | 6c 60 60 20 64 69 72 65 63 74 69 76 65 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 | l``.directive.will.allow.us.to.c |
70b80 | 6f 6e 66 69 67 75 72 65 20 74 75 6e 6e 65 6c 2d 72 65 6c 61 74 65 64 20 61 74 74 72 69 62 75 74 | onfigure.tunnel-related.attribut |
70ba0 | 65 73 2c 20 73 75 63 68 20 61 73 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 61 73 20 77 | es,.such.as.firewall.policy.as.w |
70bc0 | 65 20 77 6f 75 6c 64 20 6f 6e 20 61 6e 79 20 6e 6f 72 6d 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e | e.would.on.any.normal.network.in |
70be0 | 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 | terface..The.``source-address``. |
70c00 | 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 6f 6e 65 20 6f 66 20 56 79 4f | must.be.configured.on.one.of.VyO |
70c20 | 53 20 69 6e 74 65 72 66 61 63 65 2e 20 42 65 73 74 20 70 72 61 63 74 69 63 65 20 77 6f 75 6c 64 | S.interface..Best.practice.would |
70c40 | 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6f 72 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 | .be.a.loopback.or.dummy.interfac |
70c60 | 65 2e 00 54 68 65 20 60 73 68 6f 77 20 62 72 69 64 67 65 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c | e..The.`show.bridge`.operational |
70c80 | 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 69 73 70 6c 61 79 20 | .command.can.be.used.to.display. |
70ca0 | 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 73 3a 00 54 68 65 20 61 62 6f 76 65 20 64 69 | configured.bridges:.The.above.di |
70cc0 | 72 65 63 74 6f 72 79 20 61 6e 64 20 64 65 66 61 75 6c 74 2d 63 6f 6e 66 69 67 20 6d 75 73 74 20 | rectory.and.default-config.must. |
70ce0 | 62 65 20 61 20 63 68 69 6c 64 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 2f 63 6f 6e 66 69 67 2f | be.a.child.directory.of./config/ |
70d00 | 61 75 74 68 2c 20 73 69 6e 63 65 20 66 69 6c 65 73 20 6f 75 74 73 69 64 65 20 74 68 69 73 20 64 | auth,.since.files.outside.this.d |
70d20 | 69 72 65 63 74 6f 72 79 20 61 72 65 20 6e 6f 74 20 70 65 72 73 69 73 74 65 64 20 61 66 74 65 72 | irectory.are.not.persisted.after |
70d40 | 20 61 6e 20 69 6d 61 67 65 20 75 70 67 72 61 64 65 2e 00 54 68 65 20 61 63 74 69 6f 6e 20 63 61 | .an.image.upgrade..The.action.ca |
70d60 | 6e 20 62 65 20 3a 00 54 68 65 20 61 64 64 72 65 73 73 20 74 68 65 20 73 65 72 76 65 72 20 6c 69 | n.be.:.The.address.the.server.li |
70d80 | 73 74 65 6e 73 20 74 6f 20 64 75 72 69 6e 67 20 68 74 74 70 2d 30 31 20 63 68 61 6c 6c 65 6e 67 | stens.to.during.http-01.challeng |
70da0 | 65 00 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 | e.The.advantage.of.this.is.that. |
70dc0 | 74 68 65 20 72 6f 75 74 65 2d 73 65 6c 65 63 74 69 6f 6e 20 28 61 74 20 74 68 69 73 20 70 6f 69 | the.route-selection.(at.this.poi |
70de0 | 6e 74 29 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 64 65 74 65 72 6d 69 6e 69 73 74 69 63 2e 20 | nt).will.be.more.deterministic.. |
70e00 | 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 69 73 20 74 68 61 74 20 61 20 66 65 77 20 6f | The.disadvantage.is.that.a.few.o |
70e20 | 72 20 65 76 65 6e 20 6f 6e 65 20 6c 6f 77 65 73 74 2d 49 44 20 72 6f 75 74 65 72 20 6d 61 79 20 | r.even.one.lowest-ID.router.may. |
70e40 | 61 74 74 72 61 63 74 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 6f 74 68 65 72 77 69 73 65 | attract.all.traffic.to.otherwise |
70e60 | 2d 65 71 75 61 6c 20 70 61 74 68 73 20 62 65 63 61 75 73 65 20 6f 66 20 74 68 69 73 20 63 68 65 | -equal.paths.because.of.this.che |
70e80 | 63 6b 2e 20 49 74 20 6d 61 79 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c | ck..It.may.increase.the.possibil |
70ea0 | 69 74 79 20 6f 66 20 4d 45 44 20 6f 72 20 49 47 50 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2c 20 75 | ity.of.MED.or.IGP.oscillation,.u |
70ec0 | 6e 6c 65 73 73 20 6f 74 68 65 72 20 6d 65 61 73 75 72 65 73 20 77 65 72 65 20 74 61 6b 65 6e 20 | nless.other.measures.were.taken. |
70ee0 | 74 6f 20 61 76 6f 69 64 20 74 68 65 73 65 2e 20 54 68 65 20 65 78 61 63 74 20 62 65 68 61 76 69 | to.avoid.these..The.exact.behavi |
70f00 | 6f 75 72 20 77 69 6c 6c 20 62 65 20 73 65 6e 73 69 74 69 76 65 20 74 6f 20 74 68 65 20 69 42 47 | our.will.be.sensitive.to.the.iBG |
70f20 | 50 20 61 6e 64 20 72 65 66 6c 65 63 74 69 6f 6e 20 74 6f 70 6f 6c 6f 67 79 2e 00 54 68 65 20 61 | P.and.reflection.topology..The.a |
70f40 | 6c 6c 6f 63 61 74 65 64 20 61 64 64 72 65 73 73 20 62 6c 6f 63 6b 20 69 73 20 31 30 30 2e 36 34 | llocated.address.block.is.100.64 |
70f60 | 2e 30 2e 30 2f 31 30 2e 00 54 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 44 75 70 6c 69 63 61 74 65 | .0.0/10..The.amount.of.Duplicate |
70f80 | 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 20 70 72 6f 62 65 73 20 74 6f 20 73 65 6e | .Address.Detection.probes.to.sen |
70fa0 | 64 2e 00 54 68 65 20 61 74 74 72 69 62 75 74 65 73 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 | d..The.attributes.:cfgcmd:`prefi |
70fc0 | 78 2d 6c 69 73 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 74 72 69 62 75 74 65 2d | x-list`.and.:cfgcmd:`distribute- |
70fe0 | 6c 69 73 74 60 20 61 72 65 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 2c 20 61 6e | list`.are.mutually.exclusive,.an |
71000 | 64 20 6f 6e 6c 79 20 6f 6e 65 20 63 6f 6d 6d 61 6e 64 20 28 64 69 73 74 72 69 62 75 74 65 2d 6c | d.only.one.command.(distribute-l |
71020 | 69 73 74 20 6f 72 20 70 72 65 66 69 78 2d 6c 69 73 74 29 20 63 61 6e 20 62 65 20 61 70 70 6c 69 | ist.or.prefix-list).can.be.appli |
71040 | 65 64 20 74 6f 20 65 61 63 68 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 64 | ed.to.each.inbound.or.outbound.d |
71060 | 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 | irection.for.a.particular.neighb |
71080 | 6f 72 2e 00 54 68 65 20 61 76 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 3c 6d | or..The.available.options.for.<m |
710a0 | 61 74 63 68 3e 20 61 72 65 3a 00 54 68 65 20 62 65 6c 6f 77 20 72 65 66 65 72 65 6e 63 65 64 20 | atch>.are:.The.below.referenced. |
710c0 | 49 50 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 30 2e 32 2e 31 60 20 69 73 20 75 73 65 64 20 61 | IP.address.`192.0.2.1`.is.used.a |
710e0 | 73 20 65 78 61 6d 70 6c 65 20 61 64 64 72 65 73 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 61 | s.example.address.representing.a |
71100 | 20 67 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 20 75 6e 64 65 72 20 77 68 | .global.unicast.address.under.wh |
71120 | 69 63 68 20 74 68 65 20 48 55 42 20 63 61 6e 20 62 65 20 63 6f 6e 74 61 63 74 65 64 20 62 79 20 | ich.the.HUB.can.be.contacted.by. |
71140 | 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 2e | each.and.every.individual.spoke. |
71160 | 00 54 68 65 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 | .The.bonding.interface.provides. |
71180 | 61 20 6d 65 74 68 6f 64 20 66 6f 72 20 61 67 67 72 65 67 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c | a.method.for.aggregating.multipl |
711a0 | 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 | e.network.interfaces.into.a.sing |
711c0 | 6c 65 20 6c 6f 67 69 63 61 6c 20 22 62 6f 6e 64 65 64 22 20 69 6e 74 65 72 66 61 63 65 2c 20 6f | le.logical."bonded".interface,.o |
711e0 | 72 20 4c 41 47 2c 20 6f 72 20 65 74 68 65 72 2d 63 68 61 6e 6e 65 6c 2c 20 6f 72 20 70 6f 72 74 | r.LAG,.or.ether-channel,.or.port |
71200 | 2d 63 68 61 6e 6e 65 6c 2e 20 54 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 62 6f | -channel..The.behavior.of.the.bo |
71220 | 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 64 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 | nded.interfaces.depends.upon.the |
71240 | 20 6d 6f 64 65 3b 20 67 65 6e 65 72 61 6c 6c 79 20 73 70 65 61 6b 69 6e 67 2c 20 6d 6f 64 65 73 | .mode;.generally.speaking,.modes |
71260 | 20 70 72 6f 76 69 64 65 20 65 69 74 68 65 72 20 68 6f 74 20 73 74 61 6e 64 62 79 20 6f 72 20 6c | .provide.either.hot.standby.or.l |
71280 | 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 73 65 72 76 69 63 65 73 2e 20 41 64 64 69 74 69 6f 6e | oad.balancing.services..Addition |
712a0 | 61 6c 6c 79 2c 20 6c 69 6e 6b 20 69 6e 74 65 67 72 69 74 79 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 | ally,.link.integrity.monitoring. |
712c0 | 6d 61 79 20 62 65 20 70 65 72 66 6f 72 6d 65 64 2e 00 54 68 65 20 63 61 73 65 20 6f 66 20 69 6e | may.be.performed..The.case.of.in |
712e0 | 67 72 65 73 73 20 73 68 61 70 69 6e 67 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 | gress.shaping.The.client,.once.s |
71300 | 75 63 63 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 | uccessfully.authenticated,.will. |
71320 | 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 | receive.an.IPv4.and.an.IPv6./64. |
71340 | 61 64 64 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 | address.to.terminate.the.PPPoE.e |
71360 | 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 | ndpoint.on.the.client.side.and.a |
71380 | 20 2f 35 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 | ./56.subnet.for.the.clients.inte |
713a0 | 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 65 | rnal.use..The.client,.once.succe |
713c0 | 73 73 66 75 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 65 | ssfully.authenticated,.will.rece |
713e0 | 69 76 65 20 61 6e 20 49 50 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 72 | ive.an.IPv4.and.an.IPv6./64.addr |
71400 | 65 73 73 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 70 70 70 6f 65 20 65 6e 64 70 6f | ess.to.terminate.the.pppoe.endpo |
71420 | 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 36 | int.on.the.client.side.and.a./56 |
71440 | 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 6c | .subnet.for.the.clients.internal |
71460 | 20 75 73 65 2e 00 54 68 65 20 63 6c 69 65 6e 74 73 20 3a 61 62 62 72 3a 60 43 50 45 20 28 43 75 | .use..The.clients.:abbr:`CPE.(Cu |
71480 | 73 74 6f 6d 65 72 20 50 72 65 6d 69 73 65 73 20 45 71 75 69 70 6d 65 6e 74 29 60 20 63 61 6e 20 | stomer.Premises.Equipment)`.can. |
714a0 | 6e 6f 77 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 76 69 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 | now.communicate.via.IPv4.or.IPv6 |
714c0 | 2e 20 41 6c 6c 20 64 65 76 69 63 65 73 20 62 65 68 69 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a | ..All.devices.behind.``2001:db8: |
714e0 | 3a 61 30 30 3a 32 37 66 66 3a 66 65 32 66 3a 64 38 30 36 2f 36 34 60 60 20 63 61 6e 20 75 73 65 | :a00:27ff:fe2f:d806/64``.can.use |
71500 | 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 60 32 30 30 31 3a 64 62 38 3a 31 3a 3a 2f 35 | .addresses.from.``2001:db8:1::/5 |
71520 | 36 60 60 20 61 6e 64 20 63 61 6e 20 67 6c 6f 62 61 6c 6c 79 20 63 6f 6d 6d 75 6e 69 63 61 74 65 | 6``.and.can.globally.communicate |
71540 | 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 61 6e 79 20 4e 41 54 20 72 75 6c | .without.the.need.of.any.NAT.rul |
71560 | 65 73 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 | es..The.command.:opcmd:`show.int |
71580 | 65 72 66 61 63 65 73 20 77 69 72 65 67 75 61 72 64 20 77 67 30 31 20 70 75 62 6c 69 63 2d 6b 65 | erfaces.wireguard.wg01.public-ke |
715a0 | 79 60 20 77 69 6c 6c 20 74 68 65 6e 20 73 68 6f 77 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 | y`.will.then.show.the.public.key |
715c0 | 2c 20 77 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 | ,.which.needs.to.be.shared.with. |
715e0 | 74 68 65 20 70 65 65 72 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 67 65 6e 65 72 | the.peer..The.command.also.gener |
71600 | 61 74 65 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 6e 69 70 70 65 64 20 77 68 69 | ates.a.configuration.snipped.whi |
71620 | 63 68 20 63 61 6e 20 62 65 20 63 6f 70 79 2f 70 61 73 74 65 64 20 69 6e 74 6f 20 74 68 65 20 56 | ch.can.be.copy/pasted.into.the.V |
71640 | 79 4f 53 20 43 4c 49 20 69 66 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 75 70 70 6c 69 65 64 20 | yOS.CLI.if.needed..The.supplied. |
71660 | 60 60 3c 6e 61 6d 65 3e 60 60 20 6f 6e 20 74 68 65 20 43 4c 49 20 77 69 6c 6c 20 62 65 63 6f 6d | ``<name>``.on.the.CLI.will.becom |
71680 | 65 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 73 6e 69 70 70 65 74 2e 00 | e.the.peer.name.in.the.snippet.. |
716a0 | 54 68 65 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 20 65 6e 61 62 6c 65 73 20 69 74 2c 20 61 73 | The.command.below.enables.it,.as |
716c0 | 73 75 6d 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 68 61 73 | suming.the.RADIUS.connection.has |
716e0 | 20 62 65 65 6e 20 73 65 74 75 70 20 61 6e 64 20 69 73 20 77 6f 72 6b 69 6e 67 2e 00 54 68 65 20 | .been.setup.and.is.working..The. |
71700 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 63 75 72 72 65 6e 74 20 52 49 50 20 73 74 61 | command.displays.current.RIP.sta |
71720 | 74 75 73 2e 20 49 74 20 69 6e 63 6c 75 64 65 73 20 52 49 50 20 74 69 6d 65 72 2c 20 66 69 6c 74 | tus..It.includes.RIP.timer,.filt |
71740 | 65 72 69 6e 67 2c 20 76 65 72 73 69 6f 6e 2c 20 52 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 | ering,.version,.RIP.enabled.inte |
71760 | 72 66 61 63 65 20 61 6e 64 20 52 49 50 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 | rface.and.RIP.peer.information.. |
71780 | 54 68 65 20 63 6f 6d 6d 61 6e 64 20 70 6f 6e 20 54 45 53 54 55 4e 4e 45 4c 20 65 73 74 61 62 6c | The.command.pon.TESTUNNEL.establ |
717a0 | 69 73 68 65 73 20 74 68 65 20 50 50 54 50 20 74 75 6e 6e 65 6c 20 74 6f 20 74 68 65 20 72 65 6d | ishes.the.PPTP.tunnel.to.the.rem |
717c0 | 6f 74 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 6f 6d 70 75 74 65 72 73 20 6f 6e 20 61 6e 20 | ote.system..The.computers.on.an. |
717e0 | 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 63 61 6e 20 75 73 65 20 61 6e 79 20 6f 66 20 | internal.network.can.use.any.of. |
71800 | 74 68 65 20 61 64 64 72 65 73 73 65 73 20 73 65 74 20 61 73 69 64 65 20 62 79 20 74 68 65 20 3a | the.addresses.set.aside.by.the.: |
71820 | 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 | abbr:`IANA.(Internet.Assigned.Nu |
71840 | 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 | mbers.Authority)`.for.private.ad |
71860 | 64 72 65 73 73 69 6e 67 20 28 73 65 65 20 3a 72 66 63 3a 60 31 39 31 38 60 29 2e 20 54 68 65 73 | dressing.(see.:rfc:`1918`)..Thes |
71880 | 65 20 72 65 73 65 72 76 65 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6e 6f 74 20 | e.reserved.IP.addresses.are.not. |
718a0 | 69 6e 20 75 73 65 20 6f 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 73 6f 20 61 6e 20 65 78 | in.use.on.the.Internet,.so.an.ex |
718c0 | 74 65 72 6e 61 6c 20 6d 61 63 68 69 6e 65 20 77 69 6c 6c 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 | ternal.machine.will.not.directly |
718e0 | 20 72 6f 75 74 65 20 74 6f 20 74 68 65 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 64 | .route.to.them..The.following.ad |
71900 | 64 72 65 73 73 65 73 20 61 72 65 20 72 65 73 65 72 76 65 64 20 66 6f 72 20 70 72 69 76 61 74 65 | dresses.are.reserved.for.private |
71920 | 20 75 73 65 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f | .use:.The.configuration.will.loo |
71940 | 6b 20 61 73 20 66 6f 6c 6c 6f 77 73 3a 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 | k.as.follows:.The.configurations |
71960 | 20 61 62 6f 76 65 20 77 69 6c 6c 20 64 65 66 61 75 6c 74 20 74 6f 20 75 73 69 6e 67 20 32 35 36 | .above.will.default.to.using.256 |
71980 | 2d 62 69 74 20 41 45 53 20 69 6e 20 47 43 4d 20 6d 6f 64 65 20 66 6f 72 20 65 6e 63 72 79 70 74 | -bit.AES.in.GCM.mode.for.encrypt |
719a0 | 69 6f 6e 20 28 69 66 20 62 6f 74 68 20 73 69 64 65 73 20 73 75 70 70 6f 72 74 20 4e 43 50 29 20 | ion.(if.both.sides.support.NCP). |
719c0 | 61 6e 64 20 53 48 41 2d 31 20 66 6f 72 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | and.SHA-1.for.HMAC.authenticatio |
719e0 | 6e 2e 20 53 48 41 2d 31 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 77 65 61 6b 2c 20 62 75 74 | n..SHA-1.is.considered.weak,.but |
71a00 | 20 6f 74 68 65 72 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 61 72 65 20 61 76 | .other.hashing.algorithms.are.av |
71a20 | 61 69 6c 61 62 6c 65 2c 20 61 73 20 61 72 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 | ailable,.as.are.encryption.algor |
71a40 | 69 74 68 6d 73 3a 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 68 6f 77 65 | ithms:.The.connection.state.howe |
71a60 | 76 65 72 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6f 66 | ver.is.completely.independent.of |
71a80 | 20 61 6e 79 20 75 70 70 65 72 2d 6c 65 76 65 6c 20 73 74 61 74 65 2c 20 73 75 63 68 20 61 73 20 | .any.upper-level.state,.such.as. |
71aa0 | 54 43 50 27 73 20 6f 72 20 53 43 54 50 27 73 20 73 74 61 74 65 2e 20 50 61 72 74 20 6f 66 20 74 | TCP's.or.SCTP's.state..Part.of.t |
71ac0 | 68 65 20 72 65 61 73 6f 6e 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 68 61 74 20 77 68 65 6e 20 | he.reason.for.this.is.that.when. |
71ae0 | 6d 65 72 65 6c 79 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 69 2e 65 2e 20 | merely.forwarding.packets,.i.e.. |
71b00 | 6e 6f 20 6c 6f 63 61 6c 20 64 65 6c 69 76 65 72 79 2c 20 74 68 65 20 54 43 50 20 65 6e 67 69 6e | no.local.delivery,.the.TCP.engin |
71b20 | 65 20 6d 61 79 20 6e 6f 74 20 6e 65 63 65 73 73 61 72 69 6c 79 20 62 65 20 69 6e 76 6f 6b 65 64 | e.may.not.necessarily.be.invoked |
71b40 | 20 61 74 20 61 6c 6c 2e 20 45 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 2d 6d 6f 64 | .at.all..Even.connectionless-mod |
71b60 | 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 73 75 63 68 20 61 73 20 55 44 50 2c 20 49 50 73 | e.transmissions.such.as.UDP,.IPs |
71b80 | 65 63 20 28 41 48 2f 45 53 50 29 2c 20 47 52 45 20 61 6e 64 20 6f 74 68 65 72 20 74 75 6e 6e 65 | ec.(AH/ESP),.GRE.and.other.tunne |
71ba0 | 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 68 61 76 65 2c 20 61 74 20 6c 65 61 73 74 2c 20 61 | ling.protocols.have,.at.least,.a |
71bc0 | 20 70 73 65 75 64 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 2e 20 54 68 65 20 68 65 | .pseudo.connection.state..The.he |
71be0 | 75 72 69 73 74 69 63 20 66 6f 72 20 73 75 63 68 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 6f 66 | uristic.for.such.protocols.is.of |
71c00 | 74 65 6e 20 62 61 73 65 64 20 75 70 6f 6e 20 61 20 70 72 65 73 65 74 20 74 69 6d 65 6f 75 74 20 | ten.based.upon.a.preset.timeout. |
71c20 | 76 61 6c 75 65 20 66 6f 72 20 69 6e 61 63 74 69 76 69 74 79 2c 20 61 66 74 65 72 20 77 68 6f 73 | value.for.inactivity,.after.whos |
71c40 | 65 20 65 78 70 69 72 61 74 69 6f 6e 20 61 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 | e.expiration.a.Netfilter.connect |
71c60 | 69 6f 6e 20 69 73 20 64 72 6f 70 70 65 64 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | ion.is.dropped..The.connection.t |
71c80 | 72 61 63 6b 69 6e 67 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e | racking.expect.table.contains.on |
71ca0 | 65 20 65 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 65 78 70 65 63 74 65 64 20 63 6f 6e 6e 65 63 | e.entry.for.each.expected.connec |
71cc0 | 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 6e | tion.related.to.an.existing.conn |
71ce0 | 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 75 73 65 64 | ection..These.are.generally.used |
71d00 | 20 62 79 20 e2 80 9c 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 65 6c 70 65 | .by....connection.tracking.helpe |
71d20 | 72 e2 80 9d 20 6d 6f 64 75 6c 65 73 20 73 75 63 68 20 61 73 20 46 54 50 2e 20 54 68 65 20 64 65 | r....modules.such.as.FTP..The.de |
71d40 | 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 69 | fault.size.of.the.expect.table.i |
71d60 | 73 20 32 30 34 38 20 65 6e 74 72 69 65 73 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | s.2048.entries..The.connection.t |
71d80 | 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 | racking.table.contains.one.entry |
71da0 | 20 66 6f 72 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 69 6e 67 20 74 72 61 63 6b | .for.each.connection.being.track |
71dc0 | 65 64 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 | ed.by.the.system..The.current.at |
71de0 | 74 72 69 62 75 74 65 20 27 46 69 6c 74 65 72 2d 49 64 27 20 69 73 20 62 65 69 6e 67 20 75 73 65 | tribute.'Filter-Id'.is.being.use |
71e00 | 64 20 61 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 | d.as.default.and.can.be.setup.wi |
71e20 | 74 68 69 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 74 72 69 62 75 | thin.RADIUS:.The.current.attribu |
71e40 | 74 65 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 | te.``Filter-Id``.is.being.used.a |
71e60 | 73 20 64 65 66 61 75 6c 74 20 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 | s.default.and.can.be.setup.withi |
71e80 | 6e 20 52 41 44 49 55 53 3a 00 54 68 65 20 63 75 72 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 20 69 | n.RADIUS:.The.current.protocol.i |
71ea0 | 73 20 76 65 72 73 69 6f 6e 20 34 20 28 4e 54 50 76 34 29 2c 20 77 68 69 63 68 20 69 73 20 61 20 | s.version.4.(NTPv4),.which.is.a. |
71ec0 | 70 72 6f 70 6f 73 65 64 20 73 74 61 6e 64 61 72 64 20 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 | proposed.standard.as.documented. |
71ee0 | 69 6e 20 3a 72 66 63 3a 60 35 39 30 35 60 2e 20 49 74 20 69 73 20 62 61 63 6b 77 61 72 64 20 63 | in.:rfc:`5905`..It.is.backward.c |
71f00 | 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 76 65 72 73 69 6f 6e 20 33 2c 20 73 70 65 63 69 66 | ompatible.with.version.3,.specif |
71f20 | 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 33 30 35 60 2e 00 54 68 65 20 64 61 65 6d 6f 6e 20 64 | ied.in.:rfc:`1305`..The.daemon.d |
71f40 | 6f 75 62 6c 65 73 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6e 65 74 6c 69 6e 6b 20 65 | oubles.the.size.of.the.netlink.e |
71f60 | 76 65 6e 74 20 73 6f 63 6b 65 74 20 62 75 66 66 65 72 20 73 69 7a 65 20 69 66 20 69 74 20 64 65 | vent.socket.buffer.size.if.it.de |
71f80 | 74 65 63 74 73 20 6e 65 74 6c 69 6e 6b 20 65 76 65 6e 74 20 6d 65 73 73 61 67 65 20 64 72 6f 70 | tects.netlink.event.message.drop |
71fa0 | 70 69 6e 67 2e 20 54 68 69 73 20 63 6c 61 75 73 65 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d | ping..This.clause.sets.the.maxim |
71fc0 | 75 6d 20 62 75 66 66 65 72 20 73 69 7a 65 20 67 72 6f 77 74 68 20 74 68 61 74 20 63 61 6e 20 62 | um.buffer.size.growth.that.can.b |
71fe0 | 65 20 72 65 61 63 68 65 64 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 52 41 44 49 55 53 20 61 74 | e.reached..The.default.RADIUS.at |
72000 | 74 72 69 62 75 74 65 20 66 6f 72 20 72 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 69 73 20 60 60 46 | tribute.for.rate.limiting.is.``F |
72020 | 69 6c 74 65 72 2d 49 64 60 60 2c 20 62 75 74 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 72 65 64 | ilter-Id``,.but.you.may.also.red |
72040 | 65 66 69 6e 65 20 69 74 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 56 79 4f 53 20 75 73 65 72 20 | efine.it..The.default.VyOS.user. |
72060 | 61 63 63 6f 75 6e 74 20 28 60 76 79 6f 73 60 29 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 6e 65 77 | account.(`vyos`),.as.well.as.new |
72080 | 6c 79 20 63 72 65 61 74 65 64 20 75 73 65 72 20 61 63 63 6f 75 6e 74 73 2c 20 68 61 76 65 20 61 | ly.created.user.accounts,.have.a |
720a0 | 6c 6c 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | ll.capabilities.to.configure.the |
720c0 | 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 61 63 63 6f 75 6e 74 73 20 68 61 76 65 20 73 75 64 6f 20 | .system..All.accounts.have.sudo. |
720e0 | 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 63 61 6e 20 6f | capabilities.and.therefore.can.o |
72100 | 70 65 72 61 74 65 20 61 73 20 72 6f 6f 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 | perate.as.root.on.the.system..Th |
72120 | 65 20 64 65 66 61 75 6c 74 20 68 6f 73 74 6e 61 6d 65 20 75 73 65 64 20 69 73 20 60 76 79 6f 73 | e.default.hostname.used.is.`vyos |
72140 | 60 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 34 39 32 2e 00 54 68 65 20 64 65 66 61 | `..The.default.is.1492..The.defa |
72160 | 75 6c 74 20 69 73 20 60 60 38 30 32 2e 31 71 60 60 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 6c | ult.is.``802.1q``..The.default.l |
72180 | 65 61 73 65 20 74 69 6d 65 20 66 6f 72 20 44 48 43 50 76 36 20 6c 65 61 73 65 73 20 69 73 20 32 | ease.time.for.DHCPv6.leases.is.2 |
721a0 | 34 20 68 6f 75 72 73 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 20 62 79 20 | 4.hours..This.can.be.changed.by. |
721c0 | 73 75 70 70 6c 79 69 6e 67 20 61 20 60 60 64 65 66 61 75 6c 74 2d 74 69 6d 65 60 60 2c 20 60 60 | supplying.a.``default-time``,.`` |
721e0 | 6d 61 78 69 6d 75 6d 2d 74 69 6d 65 60 60 20 61 6e 64 20 60 60 6d 69 6e 69 6d 75 6d 2d 74 69 6d | maximum-time``.and.``minimum-tim |
72200 | 65 60 60 2e 20 41 6c 6c 20 76 61 6c 75 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 75 70 70 6c | e``..All.values.need.to.be.suppl |
72220 | 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 | ied.in.seconds..The.default.port |
72240 | 20 75 64 70 20 69 73 20 73 65 74 20 74 6f 20 38 34 37 32 2e 20 49 74 20 63 61 6e 20 62 65 20 63 | .udp.is.set.to.8472..It.can.be.c |
72260 | 68 61 6e 67 65 64 20 77 69 74 68 20 60 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 20 76 78 6c 61 | hanged.with.``set.interface.vxla |
72280 | 6e 20 3c 76 78 6c 61 6e 4e 3e 20 70 6f 72 74 20 3c 70 6f 72 74 3e 60 60 00 54 68 65 20 64 65 66 | n.<vxlanN>.port.<port>``.The.def |
722a0 | 61 75 6c 74 20 74 69 6d 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 | ault.time.is.60.seconds..The.def |
722c0 | 61 75 6c 74 20 76 61 6c 75 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 36 34 2e 00 54 68 | ault.value.corresponds.to.64..Th |
722e0 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e 20 54 68 69 73 20 77 69 6c 6c 20 | e.default.value.is.0..This.will. |
72300 | 63 61 75 73 65 20 74 68 65 20 63 61 72 72 69 65 72 20 74 6f 20 62 65 20 61 73 73 65 72 74 65 64 | cause.the.carrier.to.be.asserted |
72320 | 20 28 66 6f 72 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 29 20 77 68 65 6e 65 76 65 72 20 74 68 65 | .(for.802.3ad.mode).whenever.the |
72340 | 72 65 20 69 73 20 61 6e 20 61 63 74 69 76 65 20 61 67 67 72 65 67 61 74 6f 72 2c 20 72 65 67 61 | re.is.an.active.aggregator,.rega |
72360 | 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 61 76 61 69 6c 61 62 6c | rdless.of.the.number.of.availabl |
72380 | 65 20 6c 69 6e 6b 73 20 69 6e 20 74 68 61 74 20 61 67 67 72 65 67 61 74 6f 72 2e 00 54 68 65 20 | e.links.in.that.aggregator..The. |
723a0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 20 70 61 63 6b 65 74 73 2e 00 54 68 65 20 | default.value.is.3.packets..The. |
723c0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 | default.value.is.3..The.default. |
723e0 | 76 61 6c 75 65 20 69 73 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c | value.is.300.seconds..The.defaul |
72400 | 74 20 76 61 6c 75 65 20 69 73 20 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 | t.value.is.600.seconds..The.defa |
72420 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 37 32 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 | ult.value.is.7200.seconds..The.d |
72440 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 38 36 34 30 30 20 73 65 63 6f 6e 64 73 20 77 68 | efault.value.is.86400.seconds.wh |
72460 | 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 6f 6e 65 20 64 61 79 2e 00 54 68 65 20 | ich.corresponds.to.one.day..The. |
72480 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 73 6c 6f 77 2e 00 54 68 65 20 64 65 66 61 75 | default.value.is.slow..The.defau |
724a0 | 6c 74 20 76 61 6c 75 65 73 20 66 6f 72 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2d 74 68 72 65 73 68 | lt.values.for.the.minimum-thresh |
724c0 | 6f 6c 64 20 64 65 70 65 6e 64 20 6f 6e 20 49 50 20 70 72 65 63 65 64 65 6e 63 65 3a 00 54 68 65 | old.depend.on.IP.precedence:.The |
724e0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 63 72 65 61 74 | .destination.port.used.for.creat |
72500 | 69 6e 67 20 61 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 6e 75 78 20 64 | ing.a.VXLAN.interface.in.Linux.d |
72520 | 65 66 61 75 6c 74 73 20 74 6f 20 69 74 73 20 70 72 65 2d 73 74 61 6e 64 61 72 64 20 76 61 6c 75 | efaults.to.its.pre-standard.valu |
72540 | 65 20 6f 66 20 38 34 37 32 20 74 6f 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 20 63 | e.of.8472.to.preserve.backward.c |
72560 | 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 41 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 69 | ompatibility..A.configuration.di |
72580 | 72 65 63 74 69 76 65 20 74 6f 20 73 75 70 70 6f 72 74 20 61 20 75 73 65 72 2d 73 70 65 63 69 66 | rective.to.support.a.user-specif |
725a0 | 69 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 74 6f 20 6f 76 65 72 72 69 64 65 | ied.destination.port.to.override |
725c0 | 20 74 68 61 74 20 62 65 68 61 76 69 6f 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 75 73 69 6e | .that.behavior.is.available.usin |
725e0 | 67 20 74 68 65 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 64 65 76 69 63 65 20 | g.the.above.command..The.device. |
72600 | 63 61 6e 20 6f 6e 6c 79 20 72 65 63 65 69 76 65 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 56 4e | can.only.receive.packets.with.VN |
72620 | 49 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 74 68 65 20 56 4e 49 20 66 69 6c 74 65 72 69 | Is.configured.in.the.VNI.filteri |
72640 | 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 65 65 6e 20 48 | ng.table..The.dialogue.between.H |
72660 | 41 20 70 61 72 74 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 20 65 6e 63 72 79 70 74 65 64 20 | A.partners.is.neither.encrypted. |
72680 | 6e 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 6e 63 65 20 6d 6f 73 74 20 44 48 | nor.authenticated..Since.most.DH |
726a0 | 43 50 20 73 65 72 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 69 6e 20 61 6e 20 6f 72 67 61 6e | CP.servers.exist.within.an.organ |
726c0 | 69 73 61 74 69 6f 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 49 6e 74 72 61 6e 65 74 2c 20 74 | isation's.own.secure.Intranet,.t |
726e0 | 68 69 73 20 77 6f 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 65 73 73 61 72 79 20 6f 76 65 72 | his.would.be.an.unnecessary.over |
72700 | 68 65 61 64 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 68 61 76 65 20 44 48 43 50 20 | head..However,.if.you.have.DHCP. |
72720 | 48 41 20 70 65 65 72 73 20 77 68 6f 73 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 | HA.peers.whose.communications.tr |
72740 | 61 76 65 72 73 65 20 69 6e 73 65 63 75 72 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 | averse.insecure.networks,.then.w |
72760 | 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 61 74 20 79 6f 75 20 63 6f 6e 73 69 64 65 72 20 74 68 | e.recommend.that.you.consider.th |
72780 | 65 20 75 73 65 20 6f 66 20 56 50 4e 20 74 75 6e 6e 65 6c 69 6e 67 20 62 65 74 77 65 65 6e 20 74 | e.use.of.VPN.tunneling.between.t |
727a0 | 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 48 41 20 70 61 72 74 6e 65 | hem.to.ensure.that.the.HA.partne |
727c0 | 72 73 68 69 70 20 69 73 20 69 6d 6d 75 6e 65 20 74 6f 20 64 69 73 72 75 70 74 69 6f 6e 20 28 61 | rship.is.immune.to.disruption.(a |
727e0 | 63 63 69 64 65 6e 74 61 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 29 20 76 69 61 20 74 68 69 72 | ccidental.or.otherwise).via.thir |
72800 | 64 20 70 61 72 74 69 65 73 2e 00 54 68 65 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 65 65 6e 20 | d.parties..The.dialogue.between. |
72820 | 66 61 69 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 20 65 6e 63 | failover.partners.is.neither.enc |
72840 | 72 79 70 74 65 64 20 6e 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 6e 63 65 20 | rypted.nor.authenticated..Since. |
72860 | 6d 6f 73 74 20 44 48 43 50 20 73 65 72 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 69 6e 20 61 | most.DHCP.servers.exist.within.a |
72880 | 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 49 6e 74 72 | n.organisation's.own.secure.Intr |
728a0 | 61 6e 65 74 2c 20 74 68 69 73 20 77 6f 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 65 73 73 61 | anet,.this.would.be.an.unnecessa |
728c0 | 72 79 20 6f 76 65 72 68 65 61 64 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 68 61 76 | ry.overhead..However,.if.you.hav |
728e0 | 65 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 73 20 77 68 6f 73 65 20 63 6f 6d 6d | e.DHCP.failover.peers.whose.comm |
72900 | 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 76 65 72 73 65 20 69 6e 73 65 63 75 72 65 20 6e 65 74 | unications.traverse.insecure.net |
72920 | 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 61 74 20 79 6f | works,.then.we.recommend.that.yo |
72940 | 75 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 75 73 65 20 6f 66 20 56 50 4e 20 74 75 6e 6e 65 6c | u.consider.the.use.of.VPN.tunnel |
72960 | 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 | ing.between.them.to.ensure.that. |
72980 | 74 68 65 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 6e 65 72 73 68 69 70 20 69 73 20 69 6d 6d 75 | the.failover.partnership.is.immu |
729a0 | 6e 65 20 74 6f 20 64 69 73 72 75 70 74 69 6f 6e 20 28 61 63 63 69 64 65 6e 74 61 6c 20 6f 72 20 | ne.to.disruption.(accidental.or. |
729c0 | 6f 74 68 65 72 77 69 73 65 29 20 76 69 61 20 74 68 69 72 64 20 70 61 72 74 69 65 73 2e 00 54 68 | otherwise).via.third.parties..Th |
729e0 | 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c 64 20 62 | e.domain-name.parameter.should.b |
72a00 | 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 | e.the.domain.name.that.will.be.a |
72a20 | 70 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 68 6f 73 74 6e 61 6d 65 | ppended.to.the.client's.hostname |
72a40 | 20 74 6f 20 66 6f 72 6d 20 61 20 66 75 6c 6c 79 2d 71 75 61 6c 69 66 69 65 64 20 64 6f 6d 61 69 | .to.form.a.fully-qualified.domai |
72a60 | 6e 2d 6e 61 6d 65 20 28 46 51 44 4e 29 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 30 31 35 29 2e | n-name.(FQDN).(DHCP.Option.015). |
72a80 | 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c | .The.domain-name.parameter.shoul |
72aa0 | 64 20 62 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 75 73 65 64 20 77 68 65 6e 20 63 | d.be.the.domain.name.used.when.c |
72ac0 | 6f 6d 70 6c 65 74 69 6e 67 20 44 4e 53 20 72 65 71 75 65 73 74 20 77 68 65 72 65 20 6e 6f 20 66 | ompleting.DNS.request.where.no.f |
72ae0 | 75 6c 6c 20 46 51 44 4e 20 69 73 20 70 61 73 73 65 64 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 | ull.FQDN.is.passed..This.option. |
72b00 | 63 61 6e 20 62 65 20 67 69 76 65 6e 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 69 66 20 79 | can.be.given.multiple.times.if.y |
72b20 | 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 73 65 61 72 63 68 20 64 6f 6d 61 69 6e 73 20 | ou.need.multiple.search.domains. |
72b40 | 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 31 31 39 29 2e 00 54 68 65 20 64 75 6d 6d 79 20 69 6e 74 | (DHCP.Option.119)..The.dummy.int |
72b60 | 65 72 66 61 63 65 20 61 6c 6c 6f 77 73 20 75 73 20 74 6f 20 68 61 76 65 20 61 6e 20 65 71 75 69 | erface.allows.us.to.have.an.equi |
72b80 | 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 20 43 69 73 63 6f 20 49 4f 53 20 4c 6f 6f 70 62 61 63 6b | valent.of.the.Cisco.IOS.Loopback |
72ba0 | 20 69 6e 74 65 72 66 61 63 65 20 2d 20 61 20 72 6f 75 74 65 72 2d 69 6e 74 65 72 6e 61 6c 20 69 | .interface.-.a.router-internal.i |
72bc0 | 6e 74 65 72 66 61 63 65 20 77 65 20 63 61 6e 20 75 73 65 20 66 6f 72 20 49 50 20 61 64 64 72 65 | nterface.we.can.use.for.IP.addre |
72be0 | 73 73 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 6d 75 73 74 20 6b 6e 6f 77 20 61 62 6f 75 74 2c | sses.the.router.must.know.about, |
72c00 | 20 62 75 74 20 77 68 69 63 68 20 61 72 65 20 6e 6f 74 20 61 63 74 75 61 6c 6c 79 20 61 73 73 69 | .but.which.are.not.actually.assi |
72c20 | 67 6e 65 64 20 74 6f 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 64 75 6d 6d | gned.to.a.real.network..The.dumm |
72c40 | 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 61 20 6c 69 74 74 6c 65 20 65 | y.interface.is.really.a.little.e |
72c60 | 78 6f 74 69 63 2c 20 62 75 74 20 72 61 74 68 65 72 20 75 73 65 66 75 6c 20 6e 65 76 65 72 74 68 | xotic,.but.rather.useful.neverth |
72c80 | 65 6c 65 73 73 2e 20 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 6d 75 63 68 | eless..Dummy.interfaces.are.much |
72ca0 | 20 6c 69 6b 65 20 74 68 65 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 | .like.the.:ref:`loopback-interfa |
72cc0 | 63 65 60 20 69 6e 74 65 72 66 61 63 65 2c 20 65 78 63 65 70 74 20 79 6f 75 20 63 61 6e 20 68 61 | ce`.interface,.except.you.can.ha |
72ce0 | 76 65 20 61 73 20 6d 61 6e 79 20 61 73 20 79 6f 75 20 77 61 6e 74 2e 00 54 68 65 20 65 6d 62 65 | ve.as.many.as.you.want..The.embe |
72d00 | 64 64 65 64 20 53 71 75 69 64 20 70 72 6f 78 79 20 63 61 6e 20 75 73 65 20 4c 44 41 50 20 74 6f | dded.Squid.proxy.can.use.LDAP.to |
72d20 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 61 67 61 69 6e 73 74 20 61 20 63 6f | .authenticate.users.against.a.co |
72d40 | 6d 70 61 6e 79 20 77 69 64 65 20 64 69 72 65 63 74 6f 72 79 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 | mpany.wide.directory..The.follow |
72d60 | 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 | ing.configuration.is.an.example. |
72d80 | 6f 66 20 68 6f 77 20 74 6f 20 75 73 65 20 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 79 20 61 | of.how.to.use.Active.Directory.a |
72da0 | 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 51 75 65 72 69 65 | s.authentication.backend..Querie |
72dc0 | 73 20 61 72 65 20 64 6f 6e 65 20 76 69 61 20 4c 44 41 50 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 | s.are.done.via.LDAP..The.example |
72de0 | 20 61 62 6f 76 65 20 75 73 65 73 20 31 39 32 2e 30 2e 32 2e 32 20 61 73 20 65 78 74 65 72 6e 61 | .above.uses.192.0.2.2.as.externa |
72e00 | 6c 20 49 50 20 61 64 64 72 65 73 73 2e 20 41 20 4c 41 43 20 6e 6f 72 6d 61 6c 6c 79 20 72 65 71 | l.IP.address..A.LAC.normally.req |
72e20 | 75 69 72 65 73 20 61 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 | uires.an.authentication.password |
72e40 | 2c 20 77 68 69 63 68 20 69 73 20 73 65 74 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 63 6f | ,.which.is.set.in.the.example.co |
72e60 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 60 60 6c 6e 73 20 73 68 61 72 65 64 2d 73 65 63 72 | nfiguration.to.``lns.shared-secr |
72e80 | 65 74 20 27 73 65 63 72 65 74 27 60 60 2e 20 54 68 69 73 20 73 65 74 75 70 20 72 65 71 75 69 72 | et.'secret'``..This.setup.requir |
72ea0 | 65 73 20 74 68 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 72 6f 74 6f | es.the.Compression.Control.Proto |
72ec0 | 63 6f 6c 20 28 43 43 50 29 20 62 65 69 6e 67 20 64 69 73 61 62 6c 65 64 2c 20 74 68 65 20 63 6f | col.(CCP).being.disabled,.the.co |
72ee0 | 6d 6d 61 6e 64 20 60 60 73 65 74 20 76 70 6e 20 6c 32 74 70 20 72 65 6d 6f 74 65 2d 61 63 63 65 | mmand.``set.vpn.l2tp.remote-acce |
72f00 | 73 73 20 63 63 70 2d 64 69 73 61 62 6c 65 60 60 20 61 63 63 6f 6d 70 6c 69 73 68 65 73 20 74 68 | ss.ccp-disable``.accomplishes.th |
72f20 | 61 74 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 20 61 20 64 | at..The.example.below.covers.a.d |
72f40 | 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 76 69 61 20 70 70 70 6f | ual-stack.configuration.via.pppo |
72f60 | 65 2d 73 65 72 76 65 72 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 | e-server..The.example.below.cove |
72f80 | 72 73 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 | rs.a.dual-stack.configuration..T |
72fa0 | 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 75 73 65 73 20 41 43 4e 20 61 73 20 61 63 63 | he.example.below.uses.ACN.as.acc |
72fc0 | 65 73 73 2d 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 6e 61 6d 65 2c 20 61 73 73 69 67 6e 73 20 61 | ess-concentrator.name,.assigns.a |
72fe0 | 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 70 6f 6f 6c 20 31 30 2e 31 2e 31 2e 31 | n.address.from.the.pool.10.1.1.1 |
73000 | 30 30 2d 31 31 31 2c 20 74 65 72 6d 69 6e 61 74 65 73 20 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 | 00-111,.terminates.at.the.local. |
73020 | 65 6e 64 70 6f 69 6e 74 20 31 30 2e 31 2e 31 2e 31 20 61 6e 64 20 73 65 72 76 65 73 20 72 65 71 | endpoint.10.1.1.1.and.serves.req |
73040 | 75 65 73 74 73 20 6f 6e 6c 79 20 6f 6e 20 65 74 68 31 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 | uests.only.on.eth1..The.example. |
73060 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f 77 20 77 69 6c 6c 20 61 73 73 69 67 6e 20 | configuration.below.will.assign. |
73080 | 61 6e 20 49 50 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d | an.IP.to.the.client.on.the.incom |
730a0 | 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 32 20 77 69 74 68 20 74 68 65 20 63 6c 69 65 | ing.interface.eth2.with.the.clie |
730c0 | 6e 74 20 6d 61 63 20 61 64 64 72 65 73 73 20 30 38 3a 30 30 3a 32 37 3a 32 66 3a 64 38 3a 30 36 | nt.mac.address.08:00:27:2f:d8:06 |
730e0 | 2e 20 4f 74 68 65 72 20 44 48 43 50 20 64 69 73 63 6f 76 65 72 79 20 72 65 71 75 65 73 74 73 20 | ..Other.DHCP.discovery.requests. |
73100 | 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 65 64 2c 20 75 6e 6c 65 73 73 20 74 68 65 20 63 6c 69 65 | will.be.ignored,.unless.the.clie |
73120 | 6e 74 20 6d 61 63 20 68 61 73 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 65 20 63 | nt.mac.has.been.enabled.in.the.c |
73140 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 65 | onfiguration..The.example.create |
73160 | 73 20 61 20 77 69 72 65 6c 65 73 73 20 73 74 61 74 69 6f 6e 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 | s.a.wireless.station.(commonly.r |
73180 | 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 29 20 74 68 61 74 | eferred.to.as.Wi-Fi.client).that |
731a0 | 20 61 63 63 65 73 73 65 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 20 74 68 | .accesses.the.network.through.th |
731c0 | 65 20 57 41 50 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 | e.WAP.defined.in.the.above.examp |
731e0 | 6c 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 63 65 20 | le..The.default.physical.device. |
73200 | 28 60 60 70 68 79 30 60 60 29 20 69 73 20 75 73 65 64 2e 00 54 68 65 20 65 78 74 65 72 6e 61 6c | (``phy0``).is.used..The.external |
73220 | 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 00 54 68 65 20 | .IP.address.to.translate.to.The. |
73240 | 66 69 72 65 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f | firewall.supports.the.creation.o |
73260 | 66 20 67 72 6f 75 70 73 20 66 6f 72 20 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 2c | f.groups.for.addresses,.domains, |
73280 | 20 69 6e 74 65 72 66 61 63 65 73 2c 20 6d 61 63 2d 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 | .interfaces,.mac-addresses,.netw |
732a0 | 6f 72 6b 73 20 61 6e 64 20 70 6f 72 74 20 67 72 6f 75 70 73 2e 20 54 68 69 73 20 67 72 6f 75 70 | orks.and.port.groups..This.group |
732c0 | 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6c 61 74 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 20 | s.can.be.used.later.in.firewall. |
732e0 | 72 75 6c 65 73 65 74 20 61 73 20 64 65 73 69 72 65 64 2e 00 54 68 65 20 66 69 72 65 77 61 6c 6c | ruleset.as.desired..The.firewall |
73300 | 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 72 6f 75 70 73 | .supports.the.creation.of.groups |
73320 | 20 66 6f 72 20 70 6f 72 74 73 2c 20 61 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 6e 65 74 77 6f | .for.ports,.addresses,.and.netwo |
73340 | 72 6b 73 20 28 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 73 69 6e 67 20 6e 65 74 66 69 6c 74 65 72 | rks.(implemented.using.netfilter |
73360 | 20 69 70 73 65 74 29 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 69 6e 74 65 72 66 | .ipset).and.the.option.of.interf |
73380 | 61 63 65 20 6f 72 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 | ace.or.zone.based.firewall.polic |
733a0 | 79 2e 00 54 68 65 20 66 69 72 73 74 20 49 50 20 69 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 | y..The.first.IP.in.the.container |
733c0 | 20 6e 65 74 77 6f 72 6b 20 69 73 20 72 65 73 65 72 76 65 64 20 62 79 20 74 68 65 20 65 6e 67 69 | .network.is.reserved.by.the.engi |
733e0 | 6e 65 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 00 54 68 65 20 66 69 72 73 74 20 | ne.and.cannot.be.used.The.first. |
73400 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 20 60 60 63 6c 69 65 6e | address.of.the.parameter.``clien |
73420 | 74 2d 73 75 62 6e 65 74 60 60 2c 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 | t-subnet``,.will.be.used.as.the. |
73440 | 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 2e 20 43 6f 6e 6e 65 63 74 65 64 20 73 65 73 73 69 | default.gateway..Connected.sessi |
73460 | 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 64 20 76 69 61 20 74 68 65 20 60 60 73 68 6f | ons.can.be.checked.via.the.``sho |
73480 | 77 20 69 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 20 63 6f 6d 6d 61 6e 64 | w.ipoe-server.sessions``.command |
734a0 | 2e 00 54 68 65 20 66 69 72 73 74 20 61 6e 64 20 61 72 67 75 61 62 6c 79 20 63 6c 65 61 6e 65 72 | ..The.first.and.arguably.cleaner |
734c0 | 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 6d 61 6b 65 20 79 6f 75 72 20 49 50 73 65 63 20 70 6f | .option.is.to.make.your.IPsec.po |
734e0 | 6c 69 63 79 20 6d 61 74 63 68 20 47 52 45 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 65 | licy.match.GRE.packets.between.e |
73500 | 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 79 6f 75 72 20 72 6f 75 74 65 72 | xternal.addresses.of.your.router |
73520 | 73 2e 20 54 68 69 73 20 69 73 20 74 68 65 20 62 65 73 74 20 6f 70 74 69 6f 6e 20 69 66 20 62 6f | s..This.is.the.best.option.if.bo |
73540 | 74 68 20 72 6f 75 74 65 72 73 20 68 61 76 65 20 73 74 61 74 69 63 20 65 78 74 65 72 6e 61 6c 20 | th.routers.have.static.external. |
73560 | 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 66 69 72 73 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f | addresses..The.first.flow.contro |
73580 | 6c 20 6d 65 63 68 61 6e 69 73 6d 2c 20 74 68 65 20 70 61 75 73 65 20 66 72 61 6d 65 2c 20 77 61 | l.mechanism,.the.pause.frame,.wa |
735a0 | 73 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 45 45 45 20 38 30 32 2e 33 78 20 73 74 61 | s.defined.by.the.IEEE.802.3x.sta |
735c0 | 6e 64 61 72 64 2e 00 54 68 65 20 66 69 72 73 74 20 69 70 20 61 64 64 72 65 73 73 20 69 73 20 74 | ndard..The.first.ip.address.is.t |
735e0 | 68 65 20 52 50 27 73 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 76 | he.RP's.address.and.the.second.v |
73600 | 61 6c 75 65 20 69 73 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 20 67 | alue.is.the.matching.prefix.of.g |
73620 | 72 6f 75 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 00 54 68 65 20 66 69 72 73 74 20 72 | roup.ranges.covered..The.first.r |
73640 | 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 71 75 65 73 74 20 69 73 20 73 65 6e 74 20 74 6f 20 74 | egistration.request.is.sent.to.t |
73660 | 68 65 20 70 72 6f 74 6f 63 6f 6c 20 62 72 6f 61 64 63 61 73 74 20 61 64 64 72 65 73 73 2c 20 61 | he.protocol.broadcast.address,.a |
73680 | 6e 64 20 74 68 65 20 73 65 72 76 65 72 27 73 20 72 65 61 6c 20 70 72 6f 74 6f 63 6f 6c 20 61 64 | nd.the.server's.real.protocol.ad |
736a0 | 64 72 65 73 73 20 69 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 64 65 74 65 63 74 65 64 20 66 72 | dress.is.dynamically.detected.fr |
736c0 | 6f 6d 20 74 68 65 20 66 69 72 73 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 70 6c 79 2e | om.the.first.registration.reply. |
736e0 | 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .The.following.PPP.configuration |
73700 | 20 74 65 73 74 73 20 4d 53 43 48 41 50 2d 76 32 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .tests.MSCHAP-v2:.The.following. |
73720 | 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 | command.can.be.used.to.generate. |
73740 | 74 68 65 20 4f 54 50 20 6b 65 79 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 43 4c 49 20 63 | the.OTP.key.as.well.as.the.CLI.c |
73760 | 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 3a 00 54 68 65 20 66 | ommands.to.configure.them:.The.f |
73780 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 68 65 20 65 78 70 6c 69 63 | ollowing.command.uses.the.explic |
737a0 | 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c 20 76 61 6c 75 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 | it-null.label.value.for.all.the. |
737c0 | 42 47 50 20 69 6e 73 74 61 6e 63 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d | BGP.instances..The.following.com |
737e0 | 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 20 63 68 65 63 6b 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 | mands.let.you.check.tunnel.statu |
73800 | 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f | s..The.following.commands.let.yo |
73820 | 75 20 72 65 73 65 74 20 4f 70 65 6e 56 50 4e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | u.reset.OpenVPN..The.following.c |
73840 | 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 2d 6e 65 74 20 68 6f 73 74 | ommands.translate.to."--net.host |
73860 | 22 20 77 68 65 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 00 | ".when.the.container.is.created. |
73880 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 20 62 65 20 | The.following.commands.would.be. |
738a0 | 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 74 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 61 20 67 69 | required.to.set.options.for.a.gi |
738c0 | 76 65 6e 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 73 | ven.dynamic.routing.protocol.ins |
738e0 | 69 64 65 20 61 20 67 69 76 65 6e 20 76 72 66 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | ide.a.given.vrf:.The.following.c |
73900 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 65 6d 6f 6e 73 74 72 61 74 65 73 20 68 6f 77 20 74 6f | onfiguration.demonstrates.how.to |
73920 | 20 75 73 65 20 56 79 4f 53 20 74 6f 20 61 63 68 69 65 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 | .use.VyOS.to.achieve.load.balanc |
73940 | 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2e 00 54 68 | ing.based.on.the.domain.name..Th |
73960 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 70 6c 69 63 | e.following.configuration.explic |
73980 | 69 74 6c 79 20 6a 6f 69 6e 73 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 66 66 31 35 | itly.joins.multicast.group.`ff15 |
739a0 | 3a 3a 31 32 33 34 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 61 6e 64 20 | ::1234`.on.interface.`eth1`.and. |
739c0 | 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 | source-specific.multicast.group. |
739e0 | 60 66 66 31 35 3a 3a 35 36 37 38 60 20 77 69 74 68 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 | `ff15::5678`.with.source.address |
73a00 | 20 60 32 30 30 31 3a 64 62 38 3a 3a 31 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 | .`2001:db8::1`.on.interface.`eth |
73a20 | 31 60 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | 1`:.The.following.configuration. |
73a40 | 6f 6e 20 56 79 4f 53 20 61 70 70 6c 69 65 73 20 74 6f 20 61 6c 6c 20 66 6f 6c 6c 6f 77 69 6e 67 | on.VyOS.applies.to.all.following |
73a60 | 20 33 72 64 20 70 61 72 74 79 20 76 65 6e 64 6f 72 73 2e 20 49 74 20 63 72 65 61 74 65 73 20 61 | .3rd.party.vendors..It.creates.a |
73a80 | 20 62 6f 6e 64 20 77 69 74 68 20 74 77 6f 20 6c 69 6e 6b 73 20 61 6e 64 20 56 4c 41 4e 20 31 30 | .bond.with.two.links.and.VLAN.10 |
73aa0 | 2c 20 31 30 30 20 6f 6e 20 74 68 65 20 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 | ,.100.on.the.bonded.interfaces.w |
73ac0 | 69 74 68 20 61 20 70 65 72 20 56 49 46 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 | ith.a.per.VIF.IPv4.address..The. |
73ae0 | 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 76 65 72 73 65 2d | following.configuration.reverse- |
73b00 | 70 72 6f 78 79 20 74 65 72 6d 69 6e 61 74 65 20 53 53 4c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 | proxy.terminate.SSL..The.followi |
73b20 | 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 65 72 6d 69 6e 61 74 65 73 20 53 53 4c 20 | ng.configuration.terminates.SSL. |
73b40 | 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e | on.the.router..The.following.con |
73b60 | 66 69 67 75 72 61 74 69 6f 6e 20 74 65 72 6d 69 6e 61 74 65 73 20 69 6e 63 6f 6d 69 6e 67 20 48 | figuration.terminates.incoming.H |
73b80 | 54 54 50 53 20 74 72 61 66 66 69 63 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2c 20 74 68 65 6e | TTPS.traffic.on.the.router,.then |
73ba0 | 20 72 65 2d 65 6e 63 72 79 70 74 73 20 74 68 65 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 65 6e | .re-encrypts.the.traffic.and.sen |
73bc0 | 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 76 69 61 20 48 54 54 | ds.to.the.backend.server.via.HTT |
73be0 | 50 53 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 69 66 20 65 6e 63 72 79 70 74 69 6f 6e | PS..This.is.useful.if.encryption |
73c00 | 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 62 6f 74 68 20 6c 65 67 73 2c 20 62 75 74 20 | .is.required.for.both.legs,.but. |
73c20 | 79 6f 75 20 64 6f 20 6e 6f 74 20 77 61 6e 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 70 75 62 6c 69 | you.do.not.want.to.install.publi |
73c40 | 63 6c 79 20 74 72 75 73 74 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 6e 20 65 61 63 68 | cly.trusted.certificates.on.each |
73c60 | 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | .backend.server..The.following.c |
73c80 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 70 | onfiguration.will.assign.a./64.p |
73ca0 | 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 74 6f | refix.out.of.a./56.delegation.to |
73cc0 | 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 | .eth0..The.IPv6.address.assigned |
73ce0 | 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 2f | .to.eth0.will.be.<prefix>::ffff/ |
73d00 | 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 69 | 64..If.you.do.not.know.the.prefi |
73d20 | 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 77 | x.size.delegated.to.you,.start.w |
73d40 | 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e | ith.sla-len.0..The.following.con |
73d60 | 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 73 65 74 75 70 20 61 20 50 50 50 6f 45 20 73 65 | figuration.will.setup.a.PPPoE.se |
73d80 | 73 73 69 6f 6e 20 73 6f 75 72 63 65 20 66 72 6f 6d 20 65 74 68 31 20 61 6e 64 20 61 73 73 69 67 | ssion.source.from.eth1.and.assig |
73da0 | 6e 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 65 6c 65 | n.a./64.prefix.out.of.a./56.dele |
73dc0 | 67 61 74 69 6f 6e 20 28 72 65 71 75 65 73 74 65 64 20 66 72 6f 6d 20 74 68 65 20 49 53 50 29 20 | gation.(requested.from.the.ISP). |
73de0 | 74 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e | to.eth0..The.IPv6.address.assign |
73e00 | 65 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 31 2f 36 | ed.to.eth0.will.be.<prefix>::1/6 |
73e20 | 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 69 78 | 4..If.you.do.not.know.the.prefix |
73e40 | 20 73 69 7a 65 20 64 65 6c 65 67 61 74 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 77 69 | .size.delegated.to.you,.start.wi |
73e60 | 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d | th.sla-len.0..The.following.exam |
73e80 | 70 6c 65 20 61 6c 6c 6f 77 73 20 56 79 4f 53 20 74 6f 20 75 73 65 20 3a 61 62 62 72 3a 60 50 42 | ple.allows.VyOS.to.use.:abbr:`PB |
73ea0 | 52 20 28 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 29 60 20 66 6f 72 20 74 72 | R.(Policy-Based.Routing)`.for.tr |
73ec0 | 61 66 66 69 63 2c 20 77 68 69 63 68 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 74 68 65 | affic,.which.originated.from.the |
73ee0 | 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 54 68 61 74 20 73 6f 6c 75 74 69 6f 6e 20 66 6f | .router.itself..That.solution.fo |
73f00 | 72 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 27 73 20 61 6e 64 20 56 79 4f 53 20 72 6f 75 74 65 72 | r.multiple.ISP's.and.VyOS.router |
73f20 | 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 | .will.respond.from.the.same.inte |
73f40 | 72 66 61 63 65 20 74 68 61 74 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 | rface.that.the.packet.was.receiv |
73f60 | 65 64 2e 20 41 6c 73 6f 2c 20 69 74 20 75 73 65 64 2c 20 69 66 20 77 65 20 77 61 6e 74 20 74 68 | ed..Also,.it.used,.if.we.want.th |
73f80 | 61 74 20 6f 6e 65 20 56 50 4e 20 74 75 6e 6e 65 6c 20 74 6f 20 62 65 20 74 68 72 6f 75 67 68 20 | at.one.VPN.tunnel.to.be.through. |
73fa0 | 6f 6e 65 20 70 72 6f 76 69 64 65 72 2c 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 74 68 72 | one.provider,.and.the.second.thr |
73fc0 | 6f 75 67 68 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d | ough.another..The.following.exam |
73fe0 | 70 6c 65 20 63 72 65 61 74 65 73 20 61 20 57 41 50 2e 20 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 | ple.creates.a.WAP..When.configur |
74000 | 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 57 41 50 20 69 6e 74 65 72 66 61 63 65 73 2c 20 79 6f 75 | ing.multiple.WAP.interfaces,.you |
74020 | 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 75 6e 69 71 75 65 20 49 50 20 61 64 64 72 65 73 73 65 | .must.specify.unique.IP.addresse |
74040 | 73 2c 20 63 68 61 6e 6e 65 6c 73 2c 20 4e 65 74 77 6f 72 6b 20 49 44 73 20 63 6f 6d 6d 6f 6e 6c | s,.channels,.Network.IDs.commonl |
74060 | 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 53 53 49 44 20 28 53 65 | y.referred.to.as.:abbr:`SSID.(Se |
74080 | 72 76 69 63 65 20 53 65 74 20 49 64 65 6e 74 69 66 69 65 72 29 60 2c 20 61 6e 64 20 4d 41 43 20 | rvice.Set.Identifier)`,.and.MAC. |
740a0 | 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 | addresses..The.following.example |
740c0 | 20 69 73 20 62 61 73 65 64 20 6f 6e 20 61 20 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 4d | .is.based.on.a.Sierra.Wireless.M |
740e0 | 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 6f 6e 6c 79 20 74 68 65 20 66 6f | C7710.miniPCIe.card.(only.the.fo |
74100 | 72 6d 20 66 61 63 74 6f 72 20 69 6e 20 72 65 61 6c 69 74 79 20 69 74 20 72 75 6e 73 20 55 42 53 | rm.factor.in.reality.it.runs.UBS |
74120 | 29 20 61 6e 64 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 20 61 73 20 49 53 50 2e 20 54 | ).and.Deutsche.Telekom.as.ISP..T |
74140 | 68 65 20 63 61 72 64 20 69 73 20 61 73 73 65 6d 62 6c 65 64 20 69 6e 74 6f 20 61 20 3a 72 65 66 | he.card.is.assembled.into.a.:ref |
74160 | 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | :`pc-engines-apu4`..The.followin |
74180 | 67 20 65 78 61 6d 70 6c 65 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 69 | g.example.topology.was.built.usi |
741a0 | 6e 67 20 45 56 45 2d 4e 47 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 | ng.EVE-NG..The.following.example |
741c0 | 20 77 69 6c 6c 20 73 68 6f 77 20 68 6f 77 20 56 79 4f 53 20 63 61 6e 20 62 65 20 75 73 65 64 20 | .will.show.how.VyOS.can.be.used. |
741e0 | 74 6f 20 72 65 64 69 72 65 63 74 20 77 65 62 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 65 78 | to.redirect.web.traffic.to.an.ex |
74200 | 74 65 72 6e 61 6c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 54 68 65 20 66 6f | ternal.transparent.proxy:.The.fo |
74220 | 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 73 20 73 68 6f 77 20 68 6f 77 20 74 6f 20 63 6f 6e | llowing.examples.show.how.to.con |
74240 | 66 69 67 75 72 65 20 4e 41 54 36 34 20 6f 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 54 | figure.NAT64.on.a.VyOS.router..T |
74260 | 68 65 20 31 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 61 73 | he.192.0.2.10.address.is.used.as |
74280 | 20 74 68 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c | .the.IPv4.address.for.the.transl |
742a0 | 61 74 69 6f 6e 20 70 6f 6f 6c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 68 61 72 64 77 61 | ation.pool..The.following.hardwa |
742c0 | 72 65 20 6d 6f 64 75 6c 65 73 20 68 61 76 65 20 62 65 65 6e 20 74 65 73 74 65 64 20 73 75 63 63 | re.modules.have.been.tested.succ |
742e0 | 65 73 73 66 75 6c 6c 79 20 69 6e 20 61 6e 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d | essfully.in.an.:ref:`pc-engines- |
74300 | 61 70 75 34 60 20 62 6f 61 72 64 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 68 | apu4`.board:.The.following.is.th |
74320 | 65 20 63 6f 6e 66 69 67 20 66 6f 72 20 74 68 65 20 69 50 68 6f 6e 65 20 70 65 65 72 20 61 62 6f | e.config.for.the.iPhone.peer.abo |
74340 | 76 65 2e 20 49 74 27 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 | ve..It's.important.to.note.that. |
74360 | 74 68 65 20 60 60 41 6c 6c 6f 77 65 64 49 50 73 60 60 20 77 69 6c 64 63 61 72 64 20 73 65 74 74 | the.``AllowedIPs``.wildcard.sett |
74380 | 69 6e 67 20 64 69 72 65 63 74 73 20 61 6c 6c 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 | ing.directs.all.IPv4.and.IPv6.tr |
743a0 | 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 | affic.through.the.connection..Th |
743c0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 | e.following.protocols.can.be.use |
743e0 | 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 | d:.any,.babel,.bgp,.connected,.e |
74400 | 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 | igrp,.isis,.kernel,.ospf,.rip,.s |
74420 | 74 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f | tatic,.table.The.following.proto |
74440 | 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 | cols.can.be.used:.any,.babel,.bg |
74460 | 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 | p,.connected,.isis,.kernel,.ospf |
74480 | 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f 6c | v3,.ripng,.static,.table.The.fol |
744a0 | 6c 6f 77 69 6e 67 20 73 74 72 75 63 74 75 72 65 20 72 65 73 70 72 65 73 65 6e 74 20 74 68 65 20 | lowing.structure.respresent.the. |
744c0 | 63 6c 69 20 73 74 72 75 63 74 75 72 65 2e 00 54 68 65 20 66 6f 72 6d 75 6c 61 20 66 6f 72 20 75 | cli.structure..The.formula.for.u |
744e0 | 6e 66 72 61 67 6d 65 6e 74 65 64 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 20 | nfragmented.TCP.and.UDP.packets. |
74500 | 69 73 00 54 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 74 69 6d 65 20 69 73 20 | is.The.forwarding.delay.time.is. |
74520 | 74 68 65 20 74 69 6d 65 20 73 70 65 6e 74 20 69 6e 20 65 61 63 68 20 6f 66 20 74 68 65 20 6c 69 | the.time.spent.in.each.of.the.li |
74540 | 73 74 65 6e 69 6e 67 20 61 6e 64 20 6c 65 61 72 6e 69 6e 67 20 73 74 61 74 65 73 20 62 65 66 6f | stening.and.learning.states.befo |
74560 | 72 65 20 74 68 65 20 46 6f 72 77 61 72 64 69 6e 67 20 73 74 61 74 65 20 69 73 20 65 6e 74 65 72 | re.the.Forwarding.state.is.enter |
74580 | 65 64 2e 20 54 68 69 73 20 64 65 6c 61 79 20 69 73 20 73 6f 20 74 68 61 74 20 77 68 65 6e 20 61 | ed..This.delay.is.so.that.when.a |
745a0 | 20 6e 65 77 20 62 72 69 64 67 65 20 63 6f 6d 65 73 20 6f 6e 74 6f 20 61 20 62 75 73 79 20 6e 65 | .new.bridge.comes.onto.a.busy.ne |
745c0 | 74 77 6f 72 6b 20 69 74 20 6c 6f 6f 6b 73 20 61 74 20 73 6f 6d 65 20 74 72 61 66 66 69 63 20 62 | twork.it.looks.at.some.traffic.b |
745e0 | 65 66 6f 72 65 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 2e 00 54 68 65 20 67 65 6e 65 72 61 74 | efore.participating..The.generat |
74600 | 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a | ed.configuration.will.look.like: |
74620 | 00 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 74 68 | .The.generated.parameters.are.th |
74640 | 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 54 68 65 20 67 65 | en.output.to.the.console..The.ge |
74660 | 6e 65 72 69 63 20 6e 61 6d 65 20 6f 66 20 51 75 61 6c 69 74 79 20 6f 66 20 53 65 72 76 69 63 65 | neric.name.of.Quality.of.Service |
74680 | 20 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 69 6e 76 6f 6c 76 65 73 20 74 68 69 | .or.Traffic.Control.involves.thi |
746a0 | 6e 67 73 20 6c 69 6b 65 20 73 68 61 70 69 6e 67 20 74 72 61 66 66 69 63 2c 20 73 63 68 65 64 75 | ngs.like.shaping.traffic,.schedu |
746c0 | 6c 69 6e 67 20 6f 72 20 64 72 6f 70 70 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 | ling.or.dropping.packets,.which. |
746e0 | 61 72 65 20 74 68 65 20 6b 69 6e 64 20 6f 66 20 74 68 69 6e 67 73 20 79 6f 75 20 6d 61 79 20 77 | are.the.kind.of.things.you.may.w |
74700 | 61 6e 74 20 74 6f 20 70 6c 61 79 20 77 69 74 68 20 77 68 65 6e 20 79 6f 75 20 68 61 76 65 2c 20 | ant.to.play.with.when.you.have,. |
74720 | 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 62 61 6e 64 77 69 64 74 68 20 62 6f 74 74 6c 65 | for.instance,.a.bandwidth.bottle |
74740 | 6e 65 63 6b 20 69 6e 20 61 20 6c 69 6e 6b 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 | neck.in.a.link.and.you.want.to.s |
74760 | 6f 6d 65 68 6f 77 20 70 72 69 6f 72 69 74 69 7a 65 20 73 6f 6d 65 20 74 79 70 65 20 6f 66 20 74 | omehow.prioritize.some.type.of.t |
74780 | 72 61 66 66 69 63 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 2e 00 54 68 65 20 68 61 73 68 20 74 79 | raffic.over.another..The.hash.ty |
747a0 | 70 65 20 75 73 65 64 20 77 68 65 6e 20 64 69 73 63 6f 76 65 72 69 6e 67 20 66 69 6c 65 20 6f 6e | pe.used.when.discovering.file.on |
747c0 | 20 6d 61 73 74 65 72 20 73 65 72 76 65 72 20 28 64 65 66 61 75 6c 74 3a 20 73 68 61 32 35 36 29 | .master.server.(default:.sha256) |
747e0 | 00 54 68 65 20 68 65 61 6c 74 68 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 70 61 | .The.health.of.interfaces.and.pa |
74800 | 74 68 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 | ths.assigned.to.the.load.balance |
74820 | 72 20 69 73 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 65 64 20 62 79 20 73 65 6e | r.is.periodically.checked.by.sen |
74840 | 64 69 6e 67 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 28 70 69 6e 67 29 20 74 6f 20 72 65 6d 6f | ding.ICMP.packets.(ping).to.remo |
74860 | 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2c 20 61 20 54 54 4c 20 74 65 73 74 20 6f 72 20 74 | te.destinations,.a.TTL.test.or.t |
74880 | 68 65 20 65 78 65 63 75 74 69 6f 6e 20 6f 66 20 61 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 | he.execution.of.a.user.defined.s |
748a0 | 63 72 69 70 74 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 66 61 69 6c 73 20 74 68 65 | cript..If.an.interface.fails.the |
748c0 | 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 69 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d | .health.check.it.is.removed.from |
748e0 | 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 20 70 6f 6f 6c 20 6f 66 20 69 6e 74 | .the.load.balancer's.pool.of.int |
74900 | 65 72 66 61 63 65 73 2e 20 54 6f 20 65 6e 61 62 6c 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 | erfaces..To.enable.health.checki |
74920 | 6e 67 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 20 68 65 6c 6c 6f 2d 6d | ng.for.an.interface:.The.hello-m |
74940 | 75 6c 74 69 70 6c 69 65 72 20 73 70 65 63 69 66 69 65 73 20 68 6f 77 20 6d 61 6e 79 20 48 65 6c | ultiplier.specifies.how.many.Hel |
74960 | 6c 6f 73 20 74 6f 20 73 65 6e 64 20 70 65 72 20 73 65 63 6f 6e 64 2c 20 66 72 6f 6d 20 31 20 28 | los.to.send.per.second,.from.1.( |
74980 | 65 76 65 72 79 20 73 65 63 6f 6e 64 29 20 74 6f 20 31 30 20 28 65 76 65 72 79 20 31 30 30 6d 73 | every.second).to.10.(every.100ms |
749a0 | 29 2e 20 54 68 75 73 20 6f 6e 65 20 63 61 6e 20 68 61 76 65 20 31 73 20 63 6f 6e 76 65 72 67 65 | )..Thus.one.can.have.1s.converge |
749c0 | 6e 63 65 20 74 69 6d 65 20 66 6f 72 20 4f 53 50 46 2e 20 49 66 20 74 68 69 73 20 66 6f 72 6d 20 | nce.time.for.OSPF..If.this.form. |
749e0 | 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 | is.specified,.then.the.hello-int |
74a00 | 65 72 76 61 6c 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 | erval.advertised.in.Hello.packet |
74a20 | 73 20 69 73 20 73 65 74 20 74 6f 20 30 20 61 6e 64 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 65 | s.is.set.to.0.and.the.hello-inte |
74a40 | 72 76 61 6c 20 6f 6e 20 72 65 63 65 69 76 65 64 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 69 | rval.on.received.Hello.packets.i |
74a60 | 73 20 6e 6f 74 20 63 68 65 63 6b 65 64 2c 20 74 68 75 73 20 74 68 65 20 68 65 6c 6c 6f 2d 6d 75 | s.not.checked,.thus.the.hello-mu |
74a80 | 6c 74 69 70 6c 69 65 72 20 6e 65 65 64 20 4e 4f 54 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 63 | ltiplier.need.NOT.be.the.same.ac |
74aa0 | 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 20 63 6f 6d 6d 6f | ross.multiple.routers.on.a.commo |
74ac0 | 6e 20 6c 69 6e 6b 2e 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 20 63 61 6e 20 62 65 20 75 70 20 74 | n.link..The.hostname.can.be.up.t |
74ae0 | 6f 20 36 33 20 63 68 61 72 61 63 74 65 72 73 2e 20 41 20 68 6f 73 74 6e 61 6d 65 20 6d 75 73 74 | o.63.characters..A.hostname.must |
74b00 | 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 20 6f 72 20 | .start.and.end.with.a.letter.or. |
74b20 | 64 69 67 69 74 2c 20 61 6e 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 63 68 61 72 | digit,.and.have.as.interior.char |
74b40 | 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c 20 6f 72 20 | acters.only.letters,.digits,.or. |
74b60 | 61 20 68 79 70 68 65 6e 2e 00 54 68 65 20 68 6f 73 74 6e 61 6d 65 20 6f 72 20 49 50 20 61 64 64 | a.hyphen..The.hostname.or.IP.add |
74b80 | 72 65 73 73 20 6f 66 20 74 68 65 20 6d 61 73 74 65 72 00 54 68 65 20 69 64 65 6e 74 69 66 69 65 | ress.of.the.master.The.identifie |
74ba0 | 72 20 69 73 20 74 68 65 20 64 65 76 69 63 65 27 73 20 44 55 49 44 3a 20 63 6f 6c 6f 6e 2d 73 65 | r.is.the.device's.DUID:.colon-se |
74bc0 | 70 61 72 61 74 65 64 20 68 65 78 20 6c 69 73 74 20 28 61 73 20 75 73 65 64 20 62 79 20 69 73 63 | parated.hex.list.(as.used.by.isc |
74be0 | 2d 64 68 63 70 20 6f 70 74 69 6f 6e 20 64 68 63 70 76 36 2e 63 6c 69 65 6e 74 2d 69 64 29 2e 20 | -dhcp.option.dhcpv6.client-id).. |
74c00 | 49 66 20 74 68 65 20 64 65 76 69 63 65 20 61 6c 72 65 61 64 79 20 68 61 73 20 61 20 64 79 6e 61 | If.the.device.already.has.a.dyna |
74c20 | 6d 69 63 20 6c 65 61 73 65 20 66 72 6f 6d 20 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 72 | mic.lease.from.the.DHCPv6.server |
74c40 | 2c 20 69 74 73 20 44 55 49 44 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 77 69 74 68 20 60 60 73 | ,.its.DUID.can.be.found.with.``s |
74c60 | 68 6f 77 20 73 65 72 76 69 63 65 20 64 68 63 70 76 36 20 73 65 72 76 65 72 20 6c 65 61 73 65 73 | how.service.dhcpv6.server.leases |
74c80 | 60 60 2e 20 54 68 65 20 44 55 49 44 20 62 65 67 69 6e 73 20 61 74 20 74 68 65 20 35 74 68 20 6f | ``..The.DUID.begins.at.the.5th.o |
74ca0 | 63 74 65 74 20 28 61 66 74 65 72 20 74 68 65 20 34 74 68 20 63 6f 6c 6f 6e 29 20 6f 66 20 49 41 | ctet.(after.the.4th.colon).of.IA |
74cc0 | 49 44 5f 44 55 49 44 2e 00 54 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 20 63 6f | ID_DUID..The.individual.spoke.co |
74ce0 | 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 6f 6e 6c 79 20 64 69 66 66 65 72 20 69 6e 20 74 68 65 20 | nfigurations.only.differ.in.the. |
74d00 | 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 60 60 74 75 6e 31 30 60 | local.IP.address.on.the.``tun10` |
74d20 | 60 20 69 6e 74 65 72 66 61 63 65 2e 20 53 65 65 20 74 68 65 20 61 62 6f 76 65 20 64 69 61 67 72 | `.interface..See.the.above.diagr |
74d40 | 61 6d 20 66 6f 72 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 | am.for.the.individual.IP.address |
74d60 | 65 73 2e 00 54 68 65 20 69 6e 6e 65 72 20 74 61 67 20 69 73 20 74 68 65 20 74 61 67 20 77 68 69 | es..The.inner.tag.is.the.tag.whi |
74d80 | 63 68 20 69 73 20 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 20 70 61 79 6c 6f 61 64 20 70 6f 72 | ch.is.closest.to.the.payload.por |
74da0 | 74 69 6f 6e 20 6f 66 20 74 68 65 20 66 72 61 6d 65 2e 20 49 74 20 69 73 20 6f 66 66 69 63 69 61 | tion.of.the.frame..It.is.officia |
74dc0 | 6c 6c 79 20 63 61 6c 6c 65 64 20 43 2d 54 41 47 20 28 63 75 73 74 6f 6d 65 72 20 74 61 67 2c 20 | lly.called.C-TAG.(customer.tag,. |
74de0 | 77 69 74 68 20 65 74 68 65 72 74 79 70 65 20 30 78 38 31 30 30 29 2e 20 54 68 65 20 6f 75 74 65 | with.ethertype.0x8100)..The.oute |
74e00 | 72 20 74 61 67 20 69 73 20 74 68 65 20 6f 6e 65 20 63 6c 6f 73 65 72 2f 63 6c 6f 73 65 73 74 20 | r.tag.is.the.one.closer/closest. |
74e20 | 74 6f 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 68 65 61 64 65 72 2c 20 69 74 73 20 6e 61 6d 65 | to.the.Ethernet.header,.its.name |
74e40 | 20 69 73 20 53 2d 54 41 47 20 28 73 65 72 76 69 63 65 20 74 61 67 20 77 69 74 68 20 45 74 68 65 | .is.S-TAG.(service.tag.with.Ethe |
74e60 | 72 6e 65 74 20 54 79 70 65 20 3d 20 30 78 38 38 61 38 29 2e 00 54 68 65 20 69 6e 74 65 72 66 61 | rnet.Type.=.0x88a8)..The.interfa |
74e80 | 63 65 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 63 6f 6d 69 6e 67 20 69 6e 20 6f 6e 3b | ce.traffic.will.be.coming.in.on; |
74ea0 | 00 54 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 61 | .The.interface.used.to.receive.a |
74ec0 | 6e 64 20 72 65 6c 61 79 20 69 6e 64 69 76 69 64 75 61 6c 20 62 72 6f 61 64 63 61 73 74 20 70 61 | nd.relay.individual.broadcast.pa |
74ee0 | 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 63 65 69 76 65 2f 72 65 | ckets..If.you.want.to.receive/re |
74f00 | 6c 61 79 20 70 61 63 6b 65 74 73 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 31 60 20 61 6e 64 20 60 | lay.packets.on.both.`eth1`.and.` |
74f20 | 65 74 68 32 60 20 62 6f 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 65 64 20 74 6f 20 62 65 | eth2`.both.interfaces.need.to.be |
74f40 | 20 61 64 64 65 64 2e 00 54 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 | .added..The.internal.IP.addresse |
74f60 | 73 20 77 65 20 77 61 6e 74 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 00 54 68 65 20 69 6e 76 65 72 | s.we.want.to.translate.The.inver |
74f80 | 73 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 68 61 73 20 74 6f 20 62 65 20 61 70 70 6c 69 | se.configuration.has.to.be.appli |
74fa0 | 65 64 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 54 68 65 20 6c 61 72 67 65 | ed.to.the.remote.side..The.large |
74fc0 | 73 74 20 4d 54 55 20 73 69 7a 65 20 79 6f 75 20 63 61 6e 20 75 73 65 20 77 69 74 68 20 44 53 4c | st.MTU.size.you.can.use.with.DSL |
74fe0 | 20 69 73 20 31 34 39 32 20 64 75 65 20 74 6f 20 50 50 50 6f 45 20 6f 76 65 72 68 65 61 64 2e 20 | .is.1492.due.to.PPPoE.overhead.. |
75000 | 49 66 20 79 6f 75 20 61 72 65 20 73 77 69 74 63 68 69 6e 67 20 66 72 6f 6d 20 61 20 44 48 43 50 | If.you.are.switching.from.a.DHCP |
75020 | 20 62 61 73 65 64 20 49 53 50 20 6c 69 6b 65 20 63 61 62 6c 65 20 74 68 65 6e 20 62 65 20 61 77 | .based.ISP.like.cable.then.be.aw |
75040 | 61 72 65 20 74 68 61 74 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 56 50 4e 20 6c 69 6e 6b 73 20 6d | are.that.things.like.VPN.links.m |
75060 | 61 79 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 74 68 65 69 72 20 4d 54 55 20 73 69 7a 65 73 20 | ay.need.to.have.their.MTU.sizes. |
75080 | 61 64 6a 75 73 74 65 64 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 69 6e 20 74 68 69 73 20 6c 69 6d | adjusted.to.work.within.this.lim |
750a0 | 69 74 2e 00 54 68 65 20 6c 61 73 74 20 73 74 65 70 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 | it..The.last.step.is.to.define.a |
750c0 | 6e 20 69 6e 74 65 72 66 61 63 65 20 72 6f 75 74 65 20 66 6f 72 20 31 39 32 2e 31 36 38 2e 32 2e | n.interface.route.for.192.168.2. |
750e0 | 30 2f 32 34 20 74 6f 20 67 65 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 69 72 65 47 75 61 72 | 0/24.to.get.through.the.WireGuar |
75100 | 64 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 73 | d.interface.`wg01`..Multiple.IPs |
75120 | 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 | .or.networks.can.be.defined.and. |
75140 | 72 6f 75 74 65 64 2e 20 54 68 65 20 6c 61 73 74 20 63 68 65 63 6b 20 69 73 20 61 6c 6c 6f 77 65 | routed..The.last.check.is.allowe |
75160 | 64 2d 69 70 73 20 77 68 69 63 68 20 65 69 74 68 65 72 20 70 72 65 76 65 6e 74 73 20 6f 72 20 61 | d-ips.which.either.prevents.or.a |
75180 | 6c 6c 6f 77 73 20 74 68 65 20 74 72 61 66 66 69 63 2e 00 54 68 65 20 6c 65 67 61 63 79 20 61 6e | llows.the.traffic..The.legacy.an |
751a0 | 64 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 | d.zone-based.firewall.configurat |
751c0 | 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 69 73 20 6e 6f 74 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 | ion.options.is.not.longer.suppor |
751e0 | 74 65 64 2e 20 54 68 65 79 20 61 72 65 20 68 65 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 | ted..They.are.here.for.reference |
75200 | 20 70 75 72 70 6f 73 65 73 20 6f 6e 6c 79 2e 00 54 68 65 20 6c 69 6d 69 74 65 72 20 70 65 72 66 | .purposes.only..The.limiter.perf |
75220 | 6f 72 6d 73 20 62 61 73 69 63 20 69 6e 67 72 65 73 73 20 70 6f 6c 69 63 69 6e 67 20 6f 66 20 74 | orms.basic.ingress.policing.of.t |
75240 | 72 61 66 66 69 63 20 66 6c 6f 77 73 2e 20 4d 75 6c 74 69 70 6c 65 20 63 6c 61 73 73 65 73 20 6f | raffic.flows..Multiple.classes.o |
75260 | 66 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 74 72 61 | f.traffic.can.be.defined.and.tra |
75280 | 66 66 69 63 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 61 | ffic.limits.can.be.applied.to.ea |
752a0 | 63 68 20 63 6c 61 73 73 2e 20 41 6c 74 68 6f 75 67 68 20 74 68 65 20 70 6f 6c 69 63 65 72 20 75 | ch.class..Although.the.policer.u |
752c0 | 73 65 73 20 61 20 74 6f 6b 65 6e 20 62 75 63 6b 65 74 20 6d 65 63 68 61 6e 69 73 6d 20 69 6e 74 | ses.a.token.bucket.mechanism.int |
752e0 | 65 72 6e 61 6c 6c 79 2c 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 63 61 | ernally,.it.does.not.have.the.ca |
75300 | 70 61 62 69 6c 69 74 79 20 74 6f 20 64 65 6c 61 79 20 61 20 70 61 63 6b 65 74 20 61 73 20 61 20 | pability.to.delay.a.packet.as.a. |
75320 | 73 68 61 70 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 64 6f 65 73 2e 20 54 72 61 66 66 69 63 20 | shaping.mechanism.does..Traffic. |
75340 | 65 78 63 65 65 64 69 6e 67 20 74 68 65 20 64 65 66 69 6e 65 64 20 62 61 6e 64 77 69 64 74 68 20 | exceeding.the.defined.bandwidth. |
75360 | 6c 69 6d 69 74 73 20 69 73 20 64 69 72 65 63 74 6c 79 20 64 72 6f 70 70 65 64 2e 20 41 20 6d 61 | limits.is.directly.dropped..A.ma |
75380 | 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 75 72 73 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 | ximum.allowed.burst.can.be.confi |
753a0 | 67 75 72 65 64 20 74 6f 6f 2e 00 54 68 65 20 6c 69 6e 6b 20 62 61 6e 64 77 69 64 74 68 20 65 78 | gured.too..The.link.bandwidth.ex |
753c0 | 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 69 73 20 65 6e 63 6f 64 65 64 20 61 73 20 6e | tended.community.is.encoded.as.n |
753e0 | 6f 6e 2d 74 72 61 6e 73 69 74 69 76 65 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 6f 72 20 | on-transitive.The.local.IPv4.or. |
75400 | 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 69 6e 64 20 74 68 65 20 44 4e 53 20 66 | IPv6.addresses.to.bind.the.DNS.f |
75420 | 6f 72 77 61 72 64 65 72 20 74 6f 2e 20 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 | orwarder.to..The.forwarder.will. |
75440 | 6c 69 73 74 65 6e 20 6f 6e 20 74 68 69 73 20 61 64 64 72 65 73 73 20 66 6f 72 20 69 6e 63 6f 6d | listen.on.this.address.for.incom |
75460 | 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 | ing.connections..The.local.IPv4. |
75480 | 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 75 73 65 20 61 73 20 61 20 73 6f | or.IPv6.addresses.to.use.as.a.so |
754a0 | 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 71 75 65 72 69 65 73 | urce.address.for.sending.queries |
754c0 | 2e 20 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 73 65 6e 64 20 66 6f 72 77 61 72 | ..The.forwarder.will.send.forwar |
754e0 | 64 65 64 20 6f 75 74 62 6f 75 6e 64 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 74 | ded.outbound.DNS.requests.from.t |
75500 | 68 69 73 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 73 69 74 65 20 77 69 6c 6c | his.address..The.local.site.will |
75520 | 20 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 31 30 2e 30 2e 30 2e 30 2f 31 36 2e 00 54 | .have.a.subnet.of.10.0.0.0/16..T |
75540 | 68 65 20 6c 6f 6f 70 62 61 63 6b 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 6e 74 65 72 66 61 63 65 | he.loopback.networking.interface |
75560 | 20 69 73 20 61 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6d 70 | .is.a.virtual.network.device.imp |
75580 | 6c 65 6d 65 6e 74 65 64 20 65 6e 74 69 72 65 6c 79 20 69 6e 20 73 6f 66 74 77 61 72 65 2e 20 41 | lemented.entirely.in.software..A |
755a0 | 6c 6c 20 74 72 61 66 66 69 63 20 73 65 6e 74 20 74 6f 20 69 74 20 22 6c 6f 6f 70 73 20 62 61 63 | ll.traffic.sent.to.it."loops.bac |
755c0 | 6b 22 20 61 6e 64 20 6a 75 73 74 20 74 61 72 67 65 74 73 20 73 65 72 76 69 63 65 73 20 6f 6e 20 | k".and.just.targets.services.on. |
755e0 | 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 2e 00 54 68 65 20 6d 61 69 6e 20 70 6f 69 | your.local.machine..The.main.poi |
75600 | 6e 74 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 61 | nts.regarding.this.packet.flow.a |
75620 | 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 69 72 65 | nd.terminology.used.in.VyOS.fire |
75640 | 77 61 6c 6c 20 61 72 65 20 63 6f 76 65 72 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 20 6d 61 69 6e | wall.are.covered.below:.The.main |
75660 | 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 69 73 20 | .structure.VyOS.firewall.cli.is. |
75680 | 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 6f | shown.next:.The.main.structure.o |
756a0 | 66 20 74 68 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 69 73 20 73 68 6f 77 6e | f.the.VyOS.firewall.CLI.is.shown |
756c0 | 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 61 72 | .next:.The.maximum.number.of.tar |
756e0 | 67 65 74 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 73 20 31 36 | gets.that.can.be.specified.is.16 |
75700 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 6e 6f 20 49 50 20 61 64 64 | ..The.default.value.is.no.IP.add |
75720 | 72 65 73 73 2e 00 54 68 65 20 6d 65 61 6e 69 6e 67 20 6f 66 20 74 68 65 20 43 6c 61 73 73 20 49 | ress..The.meaning.of.the.Class.I |
75740 | 44 20 69 73 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 65 76 65 72 79 20 74 79 70 65 | D.is.not.the.same.for.every.type |
75760 | 20 6f 66 20 70 6f 6c 69 63 79 2e 20 4e 6f 72 6d 61 6c 6c 79 20 70 6f 6c 69 63 69 65 73 20 6a 75 | .of.policy..Normally.policies.ju |
75780 | 73 74 20 6e 65 65 64 20 61 20 6d 65 61 6e 69 6e 67 6c 65 73 73 20 6e 75 6d 62 65 72 20 74 6f 20 | st.need.a.meaningless.number.to. |
757a0 | 69 64 65 6e 74 69 66 79 20 61 20 63 6c 61 73 73 20 28 43 6c 61 73 73 20 49 44 29 2c 20 62 75 74 | identify.a.class.(Class.ID),.but |
757c0 | 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 65 76 65 72 79 20 70 6f | .that.does.not.apply.to.every.po |
757e0 | 6c 69 63 79 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 61 20 63 6c 61 73 73 20 69 6e 20 61 | licy..The.number.of.a.class.in.a |
75800 | 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 6e 6c 79 | .Priority.Queue.it.does.not.only |
75820 | 20 69 64 65 6e 74 69 66 79 20 69 74 2c 20 69 74 20 61 6c 73 6f 20 64 65 66 69 6e 65 73 20 69 74 | .identify.it,.it.also.defines.it |
75840 | 73 20 70 72 69 6f 72 69 74 79 2e 00 54 68 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 | s.priority..The.member.interface |
75860 | 20 60 65 74 68 31 60 20 69 73 20 61 20 74 72 75 6e 6b 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 56 | .`eth1`.is.a.trunk.that.allows.V |
75880 | 4c 41 4e 20 31 30 20 74 6f 20 70 61 73 73 00 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 | LAN.10.to.pass.The.metric.range. |
758a0 | 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 20 28 4d 61 78 20 76 61 6c 75 65 20 64 65 70 65 | is.1.to.16777215.(Max.value.depe |
758c0 | 6e 64 20 69 66 20 6d 65 74 72 69 63 20 73 75 70 70 6f 72 74 20 6e 61 72 72 6f 77 20 6f 72 20 77 | nd.if.metric.support.narrow.or.w |
758e0 | 69 64 65 20 76 61 6c 75 65 29 2e 00 54 68 65 20 6d 69 6e 69 6d 61 6c 20 65 63 68 6f 20 72 65 63 | ide.value)..The.minimal.echo.rec |
75900 | 65 69 76 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 74 68 61 74 20 | eive.transmission.interval.that. |
75920 | 74 68 69 73 20 73 79 73 74 65 6d 20 69 73 20 63 61 70 61 62 6c 65 20 6f 66 20 68 61 6e 64 6c 69 | this.system.is.capable.of.handli |
75940 | 6e 67 00 54 68 65 20 6d 6f 73 74 20 76 69 73 69 62 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 | ng.The.most.visible.application. |
75960 | 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 66 6f 72 20 61 63 63 65 73 73 20 74 6f | of.the.protocol.is.for.access.to |
75980 | 20 73 68 65 6c 6c 20 61 63 63 6f 75 6e 74 73 20 6f 6e 20 55 6e 69 78 2d 6c 69 6b 65 20 6f 70 65 | .shell.accounts.on.Unix-like.ope |
759a0 | 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 2c 20 62 75 74 20 69 74 20 73 65 65 73 20 73 6f 6d 65 | rating.systems,.but.it.sees.some |
759c0 | 20 6c 69 6d 69 74 65 64 20 75 73 65 20 6f 6e 20 57 69 6e 64 6f 77 73 20 61 73 20 77 65 6c 6c 2e | .limited.use.on.Windows.as.well. |
759e0 | 20 49 6e 20 32 30 31 35 2c 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 6e 6f 75 6e 63 65 64 20 74 68 | .In.2015,.Microsoft.announced.th |
75a00 | 61 74 20 74 68 65 79 20 77 6f 75 6c 64 20 69 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 73 75 70 | at.they.would.include.native.sup |
75a20 | 70 6f 72 74 20 66 6f 72 20 53 53 48 20 69 6e 20 61 20 66 75 74 75 72 65 20 72 65 6c 65 61 73 65 | port.for.SSH.in.a.future.release |
75a40 | 2e 00 54 68 65 20 6d 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 70 20 75 73 65 64 20 62 79 20 61 6c | ..The.multicast-group.used.by.al |
75a60 | 6c 20 6c 65 61 76 65 73 20 66 6f 72 20 74 68 69 73 20 76 6c 61 6e 20 65 78 74 65 6e 73 69 6f 6e | l.leaves.for.this.vlan.extension |
75a80 | 2e 20 48 61 73 20 74 6f 20 62 65 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 61 6c 6c 20 6c 65 61 76 | ..Has.to.be.the.same.on.all.leav |
75aa0 | 65 73 20 74 68 61 74 20 68 61 73 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 | es.that.has.this.interface..The. |
75ac0 | 6e 61 6d 65 20 6f 66 20 74 68 65 20 73 65 72 76 69 63 65 20 63 61 6e 20 62 65 20 64 69 66 66 65 | name.of.the.service.can.be.diffe |
75ae0 | 72 65 6e 74 2c 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 69 74 20 69 73 20 6f 6e 6c 79 | rent,.in.this.example.it.is.only |
75b00 | 20 66 6f 72 20 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 00 54 68 65 20 6e 65 74 6d 61 73 6b 20 6f 72 | .for.convenience..The.netmask.or |
75b20 | 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 | .domain.that.EDNS.Client.Subnet. |
75b40 | 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 69 6e 20 6f 75 74 67 6f 69 6e | should.be.enabled.for.in.outgoin |
75b60 | 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 | g.queries..The.network.topology. |
75b80 | 69 73 20 64 65 63 6c 61 72 65 64 20 62 79 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 | is.declared.by.shared-network-na |
75ba0 | 6d 65 20 61 6e 64 20 74 68 65 20 73 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 73 2e 20 | me.and.the.subnet.declarations.. |
75bc0 | 54 68 65 20 44 48 43 50 20 73 65 72 76 69 63 65 20 63 61 6e 20 73 65 72 76 65 20 6d 75 6c 74 69 | The.DHCP.service.can.serve.multi |
75be0 | 70 6c 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 73 2c 20 77 69 74 68 20 65 61 63 68 20 73 | ple.shared.networks,.with.each.s |
75c00 | 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 68 61 76 69 6e 67 20 31 20 6f 72 20 6d 6f 72 65 20 73 | hared.network.having.1.or.more.s |
75c20 | 75 62 6e 65 74 73 2e 20 45 61 63 68 20 73 75 62 6e 65 74 20 6d 75 73 74 20 62 65 20 70 72 65 73 | ubnets..Each.subnet.must.be.pres |
75c40 | 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 41 20 72 61 6e 67 65 20 63 61 6e | ent.on.an.interface..A.range.can |
75c60 | 20 62 65 20 64 65 63 6c 61 72 65 64 20 69 6e 73 69 64 65 20 61 20 73 75 62 6e 65 74 20 74 6f 20 | .be.declared.inside.a.subnet.to. |
75c80 | 64 65 66 69 6e 65 20 61 20 70 6f 6f 6c 20 6f 66 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 | define.a.pool.of.dynamic.address |
75ca0 | 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 72 61 6e 67 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e | es..Multiple.ranges.can.be.defin |
75cc0 | 65 64 20 61 6e 64 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 68 6f 6c 65 73 2e 20 53 74 61 74 69 63 | ed.and.can.contain.holes..Static |
75ce0 | 20 6d 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 61 73 73 69 67 6e 20 22 | .mappings.can.be.set.to.assign." |
75d00 | 73 74 61 74 69 63 22 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 20 62 61 73 | static".addresses.to.clients.bas |
75d20 | 65 64 20 6f 6e 20 74 68 65 69 72 20 4d 41 43 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6e 65 78 | ed.on.their.MAC.address..The.nex |
75d40 | 74 20 65 78 61 6d 70 6c 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 | t.example.is.a.simple.configurat |
75d60 | 69 6f 6e 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 54 68 65 20 6e 65 78 74 20 | ion.of.conntrack-sync..The.next. |
75d80 | 73 74 65 70 20 69 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6c 6f 63 61 6c 20 | step.is.to.configure.your.local. |
75da0 | 73 69 64 65 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 70 6f 6c 69 63 79 20 62 61 73 65 64 | side.as.well.as.the.policy.based |
75dc0 | 20 74 72 75 73 74 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 2e 20 | .trusted.destination.addresses.. |
75de0 | 49 66 20 79 6f 75 20 6f 6e 6c 79 20 69 6e 69 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f | If.you.only.initiate.a.connectio |
75e00 | 6e 2c 20 74 68 65 20 6c 69 73 74 65 6e 20 70 6f 72 74 20 61 6e 64 20 61 64 64 72 65 73 73 2f 70 | n,.the.listen.port.and.address/p |
75e20 | 6f 72 74 20 69 73 20 6f 70 74 69 6f 6e 61 6c 3b 20 68 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 | ort.is.optional;.however,.if.you |
75e40 | 20 61 63 74 20 6c 69 6b 65 20 61 20 73 65 72 76 65 72 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 73 | .act.like.a.server.and.endpoints |
75e60 | 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 79 6f 75 | .initiate.the.connections.to.you |
75e80 | 72 20 73 79 73 74 65 6d 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 70 | r.system,.you.need.to.define.a.p |
75ea0 | 6f 72 74 20 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 2c | ort.your.clients.can.connect.to, |
75ec0 | 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 70 6f 72 74 20 69 73 20 72 61 6e 64 6f 6d 6c 79 20 | .otherwise.the.port.is.randomly. |
75ee0 | 63 68 6f 73 65 6e 20 61 6e 64 20 6d 61 79 20 6d 61 6b 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 | chosen.and.may.make.connection.d |
75f00 | 69 66 66 69 63 75 6c 74 20 77 69 74 68 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 73 69 | ifficult.with.firewall.rules,.si |
75f20 | 6e 63 65 20 74 68 65 20 70 6f 72 74 20 6d 61 79 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 65 61 | nce.the.port.may.be.different.ea |
75f40 | 63 68 20 74 69 6d 65 20 74 68 65 20 73 79 73 74 65 6d 20 69 73 20 72 65 62 6f 6f 74 65 64 2e 00 | ch.time.the.system.is.rebooted.. |
75f60 | 54 68 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 20 | The.noted.public.keys.should.be. |
75f80 | 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 2e | entered.on.the.opposite.routers. |
75fa0 | 00 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 74 6f 20 77 | .The.number.of.milliseconds.to.w |
75fc0 | 61 69 74 20 66 6f 72 20 61 20 72 65 6d 6f 74 65 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 | ait.for.a.remote.authoritative.s |
75fe0 | 65 72 76 65 72 20 74 6f 20 72 65 73 70 6f 6e 64 20 62 65 66 6f 72 65 20 74 69 6d 69 6e 67 20 6f | erver.to.respond.before.timing.o |
76000 | 75 74 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 20 77 69 74 68 20 53 45 52 56 46 41 49 4c 2e | ut.and.responding.with.SERVFAIL. |
76020 | 00 54 68 65 20 6e 75 6d 62 65 72 20 70 61 72 61 6d 65 74 65 72 20 28 31 2d 31 30 29 20 63 6f 6e | .The.number.parameter.(1-10).con |
76040 | 66 69 67 75 72 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 61 63 63 65 70 74 65 64 20 6f | figures.the.amount.of.accepted.o |
76060 | 63 63 75 72 65 6e 63 65 73 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 41 53 20 6e 75 6d 62 65 | ccurences.of.the.system.AS.numbe |
76080 | 72 20 69 6e 20 41 53 20 70 61 74 68 2e 00 54 68 65 20 6f 66 66 69 63 69 61 6c 20 70 6f 72 74 20 | r.in.AS.path..The.official.port. |
760a0 | 66 6f 72 20 4f 70 65 6e 56 50 4e 20 69 73 20 31 31 39 34 2c 20 77 68 69 63 68 20 77 65 20 72 65 | for.OpenVPN.is.1194,.which.we.re |
760c0 | 73 65 72 76 65 20 66 6f 72 20 63 6c 69 65 6e 74 20 56 50 4e 3b 20 77 65 20 77 69 6c 6c 20 75 73 | serve.for.client.VPN;.we.will.us |
760e0 | 65 20 31 31 39 35 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 2e 00 54 68 65 | e.1195.for.site-to-site.VPN..The |
76100 | 20 6f 6e 6c 79 20 73 74 61 67 65 73 20 56 79 4f 53 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 61 | .only.stages.VyOS.will.process.a |
76120 | 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 | s.part.of.the.firewall.configura |
76140 | 74 69 6f 6e 20 69 73 20 74 68 65 20 60 66 6f 72 77 61 72 64 60 20 28 46 34 20 73 74 61 67 65 29 | tion.is.the.`forward`.(F4.stage) |
76160 | 2c 20 60 69 6e 70 75 74 60 20 28 4c 34 20 73 74 61 67 65 29 2c 20 61 6e 64 20 60 6f 75 74 70 75 | ,.`input`.(L4.stage),.and.`outpu |
76180 | 74 60 20 28 4c 35 20 73 74 61 67 65 29 2e 20 41 6c 6c 20 74 68 65 20 6f 74 68 65 72 20 73 74 61 | t`.(L5.stage)..All.the.other.sta |
761a0 | 67 65 73 20 61 6e 64 20 73 74 65 70 73 20 61 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 20 | ges.and.steps.are.for.reference. |
761c0 | 61 6e 64 20 63 61 6e 74 20 62 65 20 6d 61 6e 69 70 75 6c 61 74 65 64 20 74 68 72 6f 75 67 68 20 | and.cant.be.manipulated.through. |
761e0 | 56 79 4f 53 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 60 64 69 73 61 62 6c 65 60 20 6f 70 74 | VyOS..The.optional.`disable`.opt |
76200 | 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f 20 65 78 63 6c 75 64 65 20 69 6e 74 65 72 66 61 63 65 20 | ion.allows.to.exclude.interface. |
76220 | 66 72 6f 6d 20 70 61 73 73 69 76 65 20 73 74 61 74 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | from.passive.state..This.command |
76240 | 20 69 73 20 75 73 65 64 20 69 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 63 66 67 63 6d 64 3a | .is.used.if.the.command.:cfgcmd: |
76260 | 60 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 20 64 65 66 61 75 6c 74 60 20 77 61 73 20 | `passive-interface.default`.was. |
76280 | 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 | configured..The.optional.paramet |
762a0 | 65 72 20 72 65 67 69 73 74 65 72 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 52 65 67 69 73 | er.register.specifies.that.Regis |
762c0 | 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 74 | tration.Request.should.be.sent.t |
762e0 | 6f 20 74 68 69 73 20 70 65 65 72 20 6f 6e 20 73 74 61 72 74 75 70 2e 00 54 68 65 20 6f 72 69 67 | o.this.peer.on.startup..The.orig |
76300 | 69 6e 61 6c 20 38 30 32 2e 31 71 5f 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 61 6c 6c 6f 77 | inal.802.1q_.specification.allow |
76320 | 73 20 61 20 73 69 6e 67 6c 65 20 56 69 72 74 75 61 6c 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e 65 | s.a.single.Virtual.Local.Area.Ne |
76340 | 74 77 6f 72 6b 20 28 56 4c 41 4e 29 20 68 65 61 64 65 72 20 74 6f 20 62 65 20 69 6e 73 65 72 74 | twork.(VLAN).header.to.be.insert |
76360 | 65 64 20 69 6e 74 6f 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2e 20 51 69 6e 51 20 | ed.into.an.Ethernet.frame..QinQ. |
76380 | 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 67 73 20 74 6f 20 62 65 20 | allows.multiple.VLAN.tags.to.be. |
763a0 | 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 66 72 61 6d 65 2c 20 61 6e | inserted.into.a.single.frame,.an |
763c0 | 20 65 73 73 65 6e 74 69 61 6c 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 69 6d 70 6c 65 6d | .essential.capability.for.implem |
763e0 | 65 6e 74 69 6e 67 20 4d 65 74 72 6f 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 20 74 6f | enting.Metro.Ethernet.network.to |
76400 | 70 6f 6c 6f 67 69 65 73 2e 20 4a 75 73 74 20 61 73 20 51 69 6e 51 20 65 78 74 65 6e 64 73 20 38 | pologies..Just.as.QinQ.extends.8 |
76420 | 30 32 2e 31 51 2c 20 51 69 6e 51 20 69 74 73 65 6c 66 20 69 73 20 65 78 74 65 6e 64 65 64 20 62 | 02.1Q,.QinQ.itself.is.extended.b |
76440 | 79 20 6f 74 68 65 72 20 4d 65 74 72 6f 20 45 74 68 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 73 | y.other.Metro.Ethernet.protocols |
76460 | 2e 00 54 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 65 72 66 | ..The.outgoing.interface.to.perf |
76480 | 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 6e 00 54 68 65 20 70 65 65 72 20 | orm.the.translation.on.The.peer. |
764a0 | 6e 61 6d 65 20 6d 75 73 74 20 62 65 20 61 6e 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 61 6e 64 | name.must.be.an.alphanumeric.and |
764c0 | 20 63 61 6e 20 68 61 76 65 20 68 79 70 65 6e 20 6f 72 20 75 6e 64 65 72 73 63 6f 72 65 20 61 73 | .can.have.hypen.or.underscore.as |
764e0 | 20 73 70 65 63 69 61 6c 20 63 68 61 72 61 63 74 65 72 73 2e 20 49 74 20 69 73 20 70 75 72 65 6c | .special.characters..It.is.purel |
76500 | 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 2e 00 54 68 65 20 70 65 65 72 20 6e 61 6d 65 73 20 | y.informational..The.peer.names. |
76520 | 52 49 47 48 54 20 61 6e 64 20 4c 45 46 54 20 61 72 65 20 75 73 65 64 20 61 73 20 69 6e 66 6f 72 | RIGHT.and.LEFT.are.used.as.infor |
76540 | 6d 61 74 69 6f 6e 61 6c 20 74 65 78 74 2e 00 54 68 65 20 70 65 65 72 20 77 69 74 68 20 6c 6f 77 | mational.text..The.peer.with.low |
76560 | 65 72 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 74 68 65 20 6b 65 79 20 | er.priority.will.become.the.key. |
76580 | 73 65 72 76 65 72 20 61 6e 64 20 73 74 61 72 74 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 53 41 | server.and.start.distributing.SA |
765a0 | 4b 73 2e 00 54 68 65 20 70 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 | Ks..The.ping.command.is.used.to. |
765c0 | 74 65 73 74 20 77 68 65 74 68 65 72 20 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 69 73 20 72 | test.whether.a.network.host.is.r |
765e0 | 65 61 63 68 61 62 6c 65 20 6f 72 20 6e 6f 74 2e 00 54 68 65 20 70 6f 70 75 6c 61 72 20 55 6e 69 | eachable.or.not..The.popular.Uni |
76600 | 78 2f 4c 69 6e 75 78 20 60 60 64 69 67 60 60 20 74 6f 6f 6c 20 73 65 74 73 20 74 68 65 20 41 44 | x/Linux.``dig``.tool.sets.the.AD |
76620 | 2d 62 69 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c 65 | -bit.in.the.query..This.might.le |
76640 | 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 71 75 65 72 79 20 72 65 73 75 6c 74 73 20 77 | ad.to.unexpected.query.results.w |
76660 | 68 65 6e 20 74 65 73 74 69 6e 67 2e 20 53 65 74 20 60 60 2b 6e 6f 61 64 60 60 20 6f 6e 20 74 68 | hen.testing..Set.``+noad``.on.th |
76680 | 65 20 60 60 64 69 67 60 60 20 63 6f 6d 6d 61 6e 64 20 6c 69 6e 65 20 77 68 65 6e 20 74 68 69 73 | e.``dig``.command.line.when.this |
766a0 | 20 69 73 20 74 68 65 20 63 61 73 65 2e 00 54 68 65 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 | .is.the.case..The.pre-shared.key |
766c0 | 20 6d 6f 64 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 | .mode.is.deprecated.and.will.be. |
766e0 | 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 66 75 74 75 72 65 20 4f 70 65 6e 56 50 4e 20 76 65 72 73 | removed.from.future.OpenVPN.vers |
76700 | 69 6f 6e 73 2c 20 73 6f 20 56 79 4f 53 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 72 65 6d 6f 76 | ions,.so.VyOS.will.have.to.remov |
76720 | 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 61 74 20 6f 70 74 69 6f 6e 20 61 73 20 77 65 6c | e.support.for.that.option.as.wel |
76740 | 6c 2e 20 54 68 65 20 72 65 61 73 6f 6e 20 69 73 20 74 68 61 74 20 75 73 69 6e 67 20 70 72 65 2d | l..The.reason.is.that.using.pre- |
76760 | 73 68 61 72 65 64 20 6b 65 79 73 20 69 73 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 6c 65 73 | shared.keys.is.significantly.les |
76780 | 73 20 73 65 63 75 72 65 20 74 68 61 6e 20 75 73 69 6e 67 20 54 4c 53 2e 00 54 68 65 20 70 72 65 | s.secure.than.using.TLS..The.pre |
767a0 | 66 69 78 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 6d | fix.and.ASN.that.originated.it.m |
767c0 | 61 74 63 68 20 61 20 73 69 67 6e 65 64 20 52 4f 41 2e 20 54 68 65 73 65 20 61 72 65 20 70 72 6f | atch.a.signed.ROA..These.are.pro |
767e0 | 62 61 62 6c 79 20 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 | bably.trustworthy.route.announce |
76800 | 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 65 66 69 78 20 6f 72 20 70 72 65 66 69 78 20 6c 65 6e 67 | ments..The.prefix.or.prefix.leng |
76820 | 74 68 20 61 6e 64 20 41 53 4e 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 64 6f | th.and.ASN.that.originated.it.do |
76840 | 65 73 6e 27 74 20 6d 61 74 63 68 20 61 6e 79 20 65 78 69 73 74 69 6e 67 20 52 4f 41 2e 20 54 68 | esn't.match.any.existing.ROA..Th |
76860 | 69 73 20 63 6f 75 6c 64 20 62 65 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 61 20 70 72 65 66 | is.could.be.the.result.of.a.pref |
76880 | 69 78 20 68 69 6a 61 63 6b 2c 20 6f 72 20 6d 65 72 65 6c 79 20 61 20 6d 69 73 63 6f 6e 66 69 67 | ix.hijack,.or.merely.a.misconfig |
768a0 | 75 72 61 74 69 6f 6e 2c 20 62 75 74 20 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 62 65 20 | uration,.but.should.probably.be. |
768c0 | 74 72 65 61 74 65 64 20 61 73 20 75 6e 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 61 | treated.as.untrustworthy.route.a |
768e0 | 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 69 6d 61 72 79 20 44 48 43 50 20 73 | nnouncements..The.primary.DHCP.s |
76900 | 65 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e | erver.uses.address.`192.168.189. |
76920 | 32 35 32 60 00 54 68 65 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 73 | 252`.The.primary.and.secondary.s |
76940 | 74 61 74 65 6d 65 6e 74 73 20 64 65 74 65 72 6d 69 6e 65 73 20 77 68 65 74 68 65 72 20 74 68 65 | tatements.determines.whether.the |
76960 | 20 73 65 72 76 65 72 20 69 73 20 70 72 69 6d 61 72 79 20 6f 72 20 73 65 63 6f 6e 64 61 72 79 2e | .server.is.primary.or.secondary. |
76980 | 00 54 68 65 20 70 72 69 6d 61 72 79 20 6f 70 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 76 61 6c 69 | .The.primary.option.is.only.vali |
769a0 | 64 20 66 6f 72 20 61 63 74 69 76 65 2d 62 61 63 6b 75 70 2c 20 74 72 61 6e 73 6d 69 74 2d 6c 6f | d.for.active-backup,.transmit-lo |
769c0 | 61 64 2d 62 61 6c 61 6e 63 65 2c 20 61 6e 64 20 61 64 61 70 74 69 76 65 2d 6c 6f 61 64 2d 62 61 | ad-balance,.and.adaptive-load-ba |
769e0 | 6c 61 6e 63 65 20 6d 6f 64 65 2e 00 54 68 65 20 70 72 69 6f 72 69 74 79 20 6d 75 73 74 20 62 65 | lance.mode..The.priority.must.be |
76a00 | 20 61 6e 20 69 6e 74 65 67 65 72 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 35 35 | .an.integer.number.from.1.to.255 |
76a20 | 2e 20 48 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 6e 63 72 65 61 73 65 | ..Higher.priority.value.increase |
76a40 | 73 20 72 6f 75 74 65 72 27 73 20 70 72 65 63 65 64 65 6e 63 65 20 69 6e 20 74 68 65 20 6d 61 73 | s.router's.precedence.in.the.mas |
76a60 | 74 65 72 20 65 6c 65 63 74 69 6f 6e 73 2e 00 54 68 65 20 70 72 6f 63 65 64 75 72 65 20 74 6f 20 | ter.elections..The.procedure.to. |
76a80 | 73 70 65 63 69 66 79 20 61 20 3a 61 62 62 72 3a 60 4e 49 53 2b 20 28 4e 65 74 77 6f 72 6b 20 49 | specify.a.:abbr:`NIS+.(Network.I |
76aa0 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 20 50 6c 75 73 29 60 20 64 6f 6d 61 69 6e | nformation.Service.Plus)`.domain |
76ac0 | 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 4e 49 53 20 64 6f 6d 61 69 6e 20 6f 6e | .is.similar.to.the.NIS.domain.on |
76ae0 | 65 3a 00 54 68 65 20 70 72 6f 6d 70 74 20 69 73 20 61 64 6a 75 73 74 65 64 20 74 6f 20 72 65 66 | e:.The.prompt.is.adjusted.to.ref |
76b00 | 6c 65 63 74 20 74 68 69 73 20 63 68 61 6e 67 65 20 69 6e 20 62 6f 74 68 20 63 6f 6e 66 69 67 20 | lect.this.change.in.both.config. |
76b20 | 61 6e 64 20 6f 70 2d 6d 6f 64 65 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 70 6f | and.op-mode..The.protocol.and.po |
76b40 | 72 74 20 77 65 20 77 69 73 68 20 74 6f 20 66 6f 72 77 61 72 64 3b 00 54 68 65 20 70 72 6f 74 6f | rt.we.wish.to.forward;.The.proto |
76b60 | 63 6f 6c 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 74 65 72 6d | col.is.usually.described.in.term |
76b80 | 73 20 6f 66 20 61 20 63 6c 69 65 6e 74 2d 73 65 72 76 65 72 20 6d 6f 64 65 6c 2c 20 62 75 74 20 | s.of.a.client-server.model,.but. |
76ba0 | 63 61 6e 20 61 73 20 65 61 73 69 6c 79 20 62 65 20 75 73 65 64 20 69 6e 20 70 65 65 72 2d 74 6f | can.as.easily.be.used.in.peer-to |
76bc0 | 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 20 77 68 65 72 65 20 62 6f 74 68 20 70 | -peer.relationships.where.both.p |
76be0 | 65 65 72 73 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 6f 74 68 65 72 20 74 6f 20 62 65 20 61 20 | eers.consider.the.other.to.be.a. |
76c00 | 70 6f 74 65 6e 74 69 61 6c 20 74 69 6d 65 20 73 6f 75 72 63 65 2e 20 49 6d 70 6c 65 6d 65 6e 74 | potential.time.source..Implement |
76c20 | 61 74 69 6f 6e 73 20 73 65 6e 64 20 61 6e 64 20 72 65 63 65 69 76 65 20 74 69 6d 65 73 74 61 6d | ations.send.and.receive.timestam |
76c40 | 70 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 55 44 50 20 28 55 73 65 72 20 44 61 74 61 67 72 | ps.using.:abbr:`UDP.(User.Datagr |
76c60 | 61 6d 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6f 6e 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 31 32 33 | am.Protocol)`.on.port.number.123 |
76c80 | 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 65 61 64 20 6f 66 20 4c 32 54 50 76 | ..The.protocol.overhead.of.L2TPv |
76ca0 | 33 20 69 73 20 61 6c 73 6f 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 62 69 67 67 65 72 20 74 | 3.is.also.significantly.bigger.t |
76cc0 | 68 61 6e 20 4d 50 4c 53 2e 00 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 6e 20 56 | han.MPLS..The.proxy.service.in.V |
76ce0 | 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 53 71 75 69 64 5f 20 61 6e 64 20 73 6f 6d 65 20 | yOS.is.based.on.Squid_.and.some. |
76d00 | 72 65 6c 61 74 65 64 20 6d 6f 64 75 6c 65 73 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 61 | related.modules..The.public.IP.a |
76d20 | 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 73 69 64 65 20 6f 66 20 74 68 65 20 | ddress.of.the.local.side.of.the. |
76d40 | 56 50 4e 20 77 69 6c 6c 20 62 65 20 31 39 38 2e 35 31 2e 31 30 30 2e 31 30 2e 00 54 68 65 20 70 | VPN.will.be.198.51.100.10..The.p |
76d60 | 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 73 | ublic.IP.address.of.the.remote.s |
76d80 | 69 64 65 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 32 30 33 2e 30 2e 31 31 33 | ide.of.the.VPN.will.be.203.0.113 |
76da0 | 2e 31 31 2e 00 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 20 69 6e 20 6b 62 | .11..The.rate-limit.is.set.in.kb |
76dc0 | 69 74 2f 73 65 63 2e 00 54 68 65 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d | it/sec..The.regular.expression.m |
76de0 | 61 74 63 68 65 73 20 69 66 20 61 6e 64 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 65 6e 74 69 72 65 | atches.if.and.only.if.the.entire |
76e00 | 20 73 74 72 69 6e 67 20 6d 61 74 63 68 65 73 20 74 68 65 20 70 61 74 74 65 72 6e 2e 00 54 68 65 | .string.matches.the.pattern..The |
76e20 | 20 72 65 6d 6f 74 65 20 70 65 65 72 20 60 74 6f 2d 77 67 30 32 60 20 75 73 65 73 20 58 4d 72 6c | .remote.peer.`to-wg02`.uses.XMrl |
76e40 | 50 79 6b 61 78 68 64 41 41 69 53 6a 68 74 50 6c 76 69 33 30 4e 56 6b 76 4c 51 6c 69 51 75 4b 50 | PykaxhdAAiSjhtPlvi30NVkvLQliQuKP |
76e60 | 37 41 49 37 43 79 49 3d 20 61 73 20 69 74 73 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 | 7AI7CyI=.as.its.public.key.porti |
76e80 | 6f 6e 00 54 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 73 | on.The.remote.site.will.have.a.s |
76ea0 | 75 62 6e 65 74 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 2e 00 54 68 65 20 72 65 6d 6f 74 65 | ubnet.of.10.1.0.0/16..The.remote |
76ec0 | 20 75 73 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6f 70 65 6e 63 6f 6e 6e 65 63 74 20 63 | .user.will.use.the.openconnect.c |
76ee0 | 6c 69 65 6e 74 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 61 | lient.to.connect.to.the.router.a |
76f00 | 6e 64 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 | nd.will.receive.an.IP.address.fr |
76f20 | 6f 6d 20 61 20 56 50 4e 20 70 6f 6f 6c 2c 20 61 6c 6c 6f 77 69 6e 67 20 66 75 6c 6c 20 61 63 63 | om.a.VPN.pool,.allowing.full.acc |
76f40 | 65 73 73 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 72 65 71 75 65 73 74 6f | ess.to.the.network..The.requesto |
76f60 | 72 20 6e 65 74 6d 61 73 6b 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 72 65 71 75 65 73 74 6f | r.netmask.for.which.the.requesto |
76f80 | 72 20 49 50 20 41 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 61 73 20 74 | r.IP.Address.should.be.used.as.t |
76fa0 | 68 65 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 66 6f 72 20 6f 75 74 67 6f 69 | he.EDNS.Client.Subnet.for.outgoi |
76fc0 | 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e 66 69 67 20 | ng.queries..The.required.config. |
76fe0 | 66 69 6c 65 20 6d 61 79 20 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 69 73 3a 00 54 68 65 20 72 65 71 | file.may.look.like.this:.The.req |
77000 | 75 69 72 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 62 72 6f 6b 65 | uired.configuration.can.be.broke |
77020 | 6e 20 64 6f 77 6e 20 69 6e 74 6f 20 34 20 6d 61 6a 6f 72 20 70 69 65 63 65 73 3a 00 54 68 65 20 | n.down.into.4.major.pieces:.The. |
77040 | 72 65 73 75 6c 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f | resulting.configuration.will.loo |
77060 | 6b 20 6c 69 6b 65 3a 00 54 68 65 20 72 6f 6f 74 20 63 61 75 73 65 20 6f 66 20 74 68 65 20 70 72 | k.like:.The.root.cause.of.the.pr |
77080 | 6f 62 6c 65 6d 20 69 73 20 74 68 61 74 20 66 6f 72 20 56 54 49 20 74 75 6e 6e 65 6c 73 20 74 6f | oblem.is.that.for.VTI.tunnels.to |
770a0 | 20 77 6f 72 6b 2c 20 74 68 65 69 72 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 73 20 68 | .work,.their.traffic.selectors.h |
770c0 | 61 76 65 20 74 6f 20 62 65 20 73 65 74 20 74 6f 20 30 2e 30 2e 30 2e 30 2f 30 20 66 6f 72 20 74 | ave.to.be.set.to.0.0.0.0/0.for.t |
770e0 | 72 61 66 66 69 63 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 74 75 6e 6e 65 6c 2c 20 65 76 65 6e | raffic.to.match.the.tunnel,.even |
77100 | 20 74 68 6f 75 67 68 20 61 63 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 | .though.actual.routing.decision. |
77120 | 69 73 20 6d 61 64 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 6e 65 74 66 69 6c 74 65 72 20 6d | is.made.according.to.netfilter.m |
77140 | 61 72 6b 73 2e 20 55 6e 6c 65 73 73 20 72 6f 75 74 65 20 69 6e 73 65 72 74 69 6f 6e 20 69 73 20 | arks..Unless.route.insertion.is. |
77160 | 64 69 73 61 62 6c 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 53 74 72 6f 6e 67 53 57 41 4e 20 74 68 | disabled.entirely,.StrongSWAN.th |
77180 | 75 73 20 6d 69 73 74 61 6b 65 6e 6c 79 20 69 6e 73 65 72 74 73 20 61 20 64 65 66 61 75 6c 74 20 | us.mistakenly.inserts.a.default. |
771a0 | 72 6f 75 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 56 54 49 20 70 65 65 72 20 61 64 64 72 65 | route.through.the.VTI.peer.addre |
771c0 | 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 73 20 61 6c 6c 20 74 72 61 66 66 69 63 20 72 6f 75 74 | ss,.which.makes.all.traffic.rout |
771e0 | 65 64 20 74 6f 20 6e 6f 77 68 65 72 65 2e 00 54 68 65 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 70 | ed.to.nowhere..The.round-robin.p |
77200 | 6f 6c 69 63 79 20 69 73 20 61 20 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 65 72 20 74 68 | olicy.is.a.classful.scheduler.th |
77220 | 61 74 20 64 69 76 69 64 65 73 20 74 72 61 66 66 69 63 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 | at.divides.traffic.in.different. |
77240 | 63 6c 61 73 73 65 73 5f 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 28 75 70 20 74 | classes_.you.can.configure.(up.t |
77260 | 6f 20 34 30 39 36 29 2e 20 59 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 61 20 6e 65 77 20 70 6f | o.4096)..You.can.embed_.a.new.po |
77280 | 6c 69 63 79 20 69 6e 74 6f 20 65 61 63 68 20 6f 66 20 74 68 6f 73 65 20 63 6c 61 73 73 65 73 20 | licy.into.each.of.those.classes. |
772a0 | 28 64 65 66 61 75 6c 74 20 69 6e 63 6c 75 64 65 64 29 2e 00 54 68 65 20 72 6f 75 74 65 20 73 65 | (default.included)..The.route.se |
772c0 | 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 20 75 73 65 64 20 62 79 20 46 52 52 27 73 20 42 47 | lection.process.used.by.FRR's.BG |
772e0 | 50 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 75 73 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 | P.implementation.uses.the.follow |
77300 | 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 63 72 69 74 65 72 69 6f 6e 2c 20 73 74 61 72 74 69 6e 67 | ing.decision.criterion,.starting |
77320 | 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 6c 69 73 74 20 61 6e 64 20 67 6f 69 6e | .at.the.top.of.the.list.and.goin |
77340 | 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 62 6f 74 74 6f 6d 20 75 6e 74 69 6c 20 6f 6e 65 20 6f | g.towards.the.bottom.until.one.o |
77360 | 66 20 74 68 65 20 66 61 63 74 6f 72 73 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 68 65 20 72 | f.the.factors.can.be.used..The.r |
77380 | 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 73 68 6f 72 74 65 73 74 20 63 6c 75 73 74 65 72 2d 6c | oute.with.the.shortest.cluster-l |
773a0 | 69 73 74 20 6c 65 6e 67 74 68 20 69 73 20 75 73 65 64 2e 20 54 68 65 20 63 6c 75 73 74 65 72 2d | ist.length.is.used..The.cluster- |
773c0 | 6c 69 73 74 20 72 65 66 6c 65 63 74 73 20 74 68 65 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 6f | list.reflects.the.iBGP.reflectio |
773e0 | 6e 20 70 61 74 68 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 74 61 6b 65 6e 2e 00 54 68 65 20 | n.path.the.route.has.taken..The. |
77400 | 72 6f 75 74 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 73 20 6c 69 6e | router.automatically.updates.lin |
77420 | 6b 2d 73 74 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 69 74 73 20 6e 65 69 | k-state.information.with.its.nei |
77440 | 67 68 62 6f 72 73 2e 20 4f 6e 6c 79 20 61 6e 20 6f 62 73 6f 6c 65 74 65 20 69 6e 66 6f 72 6d 61 | ghbors..Only.an.obsolete.informa |
77460 | 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 77 68 69 63 68 20 61 67 65 20 68 61 73 20 65 78 | tion.is.updated.which.age.has.ex |
77480 | 63 65 65 64 65 64 20 61 20 73 70 65 63 69 66 69 63 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 68 69 | ceeded.a.specific.threshold..Thi |
774a0 | 73 20 70 61 72 61 6d 65 74 65 72 20 63 68 61 6e 67 65 73 20 61 20 74 68 72 65 73 68 6f 6c 64 20 | s.parameter.changes.a.threshold. |
774c0 | 76 61 6c 75 65 2c 20 77 68 69 63 68 20 62 79 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 20 | value,.which.by.default.is.1800. |
774e0 | 73 65 63 6f 6e 64 73 20 28 68 61 6c 66 20 61 6e 20 68 6f 75 72 29 2e 20 54 68 65 20 76 61 6c 75 | seconds.(half.an.hour)..The.valu |
77500 | 65 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 77 68 6f 6c 65 20 4f 53 50 46 20 72 | e.is.applied.to.the.whole.OSPF.r |
77520 | 6f 75 74 65 72 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f 20 | outer..The.timer.range.is.10.to. |
77540 | 31 38 30 30 2e 00 54 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 64 69 73 63 61 72 64 20 | 1800..The.router.should.discard. |
77560 | 44 48 43 50 20 70 61 63 6b 61 67 65 73 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 69 6e 67 | DHCP.packages.already.containing |
77580 | 20 72 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 65 6e 73 75 | .relay.agent.information.to.ensu |
775a0 | 72 65 20 74 68 61 74 20 6f 6e 6c 79 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 44 48 43 50 20 | re.that.only.requests.from.DHCP. |
775c0 | 63 6c 69 65 6e 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 2e 00 54 68 65 20 73 46 6c 6f 77 | clients.are.forwarded..The.sFlow |
775e0 | 20 61 63 63 6f 75 6e 74 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 68 73 66 6c 6f 77 64 20 68 74 74 | .accounting.based.on.hsflowd.htt |
77600 | 70 73 3a 2f 2f 73 66 6c 6f 77 2e 6e 65 74 2f 00 54 68 65 20 73 61 6d 65 20 63 6f 6e 66 69 67 75 | ps://sflow.net/.The.same.configu |
77620 | 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 61 70 70 6c 79 20 77 68 65 6e 20 49 64 65 6e 74 69 | ration.options.apply.when.Identi |
77640 | 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e | ty.based.config.is.configured.in |
77660 | 20 67 72 6f 75 70 20 6d 6f 64 65 20 65 78 63 65 70 74 20 74 68 61 74 20 67 72 6f 75 70 20 6d 6f | .group.mode.except.that.group.mo |
77680 | 64 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 77 69 74 68 20 52 41 44 49 55 53 20 | de.can.only.be.used.with.RADIUS. |
776a0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 54 68 65 20 73 63 68 65 6d 65 20 61 62 6f 76 65 | authentication..The.scheme.above |
776c0 | 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 68 65 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 6f | .doesn't.work.when.one.of.the.ro |
776e0 | 75 74 65 72 73 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 65 78 74 65 72 6e 61 6c 20 61 64 64 | uters.has.a.dynamic.external.add |
77700 | 72 65 73 73 20 74 68 6f 75 67 68 2e 20 54 68 65 20 63 6c 61 73 73 69 63 20 77 6f 72 6b 61 72 6f | ress.though..The.classic.workaro |
77720 | 75 6e 64 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 6f 20 73 65 74 75 70 20 61 6e 20 61 64 64 72 | und.for.this.is.to.setup.an.addr |
77740 | 65 73 73 20 6f 6e 20 61 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 | ess.on.a.loopback.interface.and. |
77760 | 75 73 65 20 69 74 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 | use.it.as.a.source.address.for.t |
77780 | 68 65 20 47 52 45 20 74 75 6e 6e 65 6c 2c 20 74 68 65 6e 20 73 65 74 75 70 20 61 6e 20 49 50 73 | he.GRE.tunnel,.then.setup.an.IPs |
777a0 | 65 63 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 74 63 68 20 74 68 6f 73 65 20 6c 6f 6f 70 62 61 63 | ec.policy.to.match.those.loopbac |
777c0 | 6b 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 63 | k.addresses..The.search.filter.c |
777e0 | 61 6e 20 63 6f 6e 74 61 69 6e 20 75 70 20 74 6f 20 31 35 20 6f 63 63 75 72 72 65 6e 63 65 73 20 | an.contain.up.to.15.occurrences. |
77800 | 6f 66 20 25 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 | of.%s.which.will.be.replaced.by. |
77820 | 74 68 65 20 75 73 65 72 6e 61 6d 65 2c 20 61 73 20 69 6e 20 22 75 69 64 3d 25 73 22 20 66 6f 72 | the.username,.as.in."uid=%s".for |
77840 | 20 3a 72 66 63 3a 60 32 30 33 37 60 20 64 69 72 65 63 74 6f 72 69 65 73 2e 20 46 6f 72 20 61 20 | .:rfc:`2037`.directories..For.a. |
77860 | 64 65 74 61 69 6c 65 64 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 4c 44 41 50 20 73 65 61 | detailed.description.of.LDAP.sea |
77880 | 72 63 68 20 66 69 6c 74 65 72 20 73 79 6e 74 61 78 20 73 65 65 20 3a 72 66 63 3a 60 32 32 35 34 | rch.filter.syntax.see.:rfc:`2254 |
778a0 | 60 2e 00 54 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 65 | `..The.secondary.DHCP.server.use |
778c0 | 73 20 61 64 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 33 60 00 54 68 65 20 | s.address.`192.168.189.253`.The. |
778e0 | 73 65 63 75 72 69 74 79 20 61 70 70 72 6f 61 63 68 20 69 6e 20 53 4e 4d 50 76 33 20 74 61 72 67 | security.approach.in.SNMPv3.targ |
77900 | 65 74 73 3a 00 54 68 65 20 73 65 71 75 65 6e 63 65 20 60 60 5e 45 63 3f 60 60 20 74 72 61 6e 73 | ets:.The.sequence.``^Ec?``.trans |
77920 | 6c 61 74 65 73 20 74 6f 3a 20 60 60 43 74 72 6c 2b 45 20 63 20 3f 60 60 2e 20 54 6f 20 71 75 69 | lates.to:.``Ctrl+E.c.?``..To.qui |
77940 | 74 20 74 68 65 20 73 65 73 73 69 6f 6e 20 75 73 65 3a 20 60 60 43 74 72 6c 2b 45 20 63 20 2e 60 | t.the.session.use:.``Ctrl+E.c..` |
77960 | 60 00 54 68 65 20 73 65 74 75 70 20 69 73 20 74 68 69 73 3a 20 4c 65 61 66 32 20 2d 20 53 70 69 | `.The.setup.is.this:.Leaf2.-.Spi |
77980 | 6e 65 31 20 2d 20 4c 65 61 66 33 00 54 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6f 6e 2d 64 | ne1.-.Leaf3.The.size.of.the.on-d |
779a0 | 69 73 6b 20 50 72 6f 78 79 20 63 61 63 68 65 20 69 73 20 75 73 65 72 20 63 6f 6e 66 69 67 75 72 | isk.Proxy.cache.is.user.configur |
779c0 | 61 62 6c 65 2e 20 54 68 65 20 50 72 6f 78 69 65 73 20 64 65 66 61 75 6c 74 20 63 61 63 68 65 2d | able..The.Proxies.default.cache- |
779e0 | 73 69 7a 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 31 30 30 20 4d 42 2e 00 54 68 | size.is.configured.to.100.MB..Th |
77a00 | 65 20 73 70 65 65 64 20 28 62 61 75 64 72 61 74 65 29 20 6f 66 20 74 68 65 20 63 6f 6e 73 6f 6c | e.speed.(baudrate).of.the.consol |
77a20 | 65 20 64 65 76 69 63 65 2e 20 53 75 70 70 6f 72 74 65 64 20 76 61 6c 75 65 73 20 61 72 65 3a 00 | e.device..Supported.values.are:. |
77a40 | 54 68 65 20 73 74 61 6e 64 61 72 64 20 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 49 45 | The.standard.was.developed.by.IE |
77a60 | 45 45 20 38 30 32 2e 31 2c 20 61 20 77 6f 72 6b 69 6e 67 20 67 72 6f 75 70 20 6f 66 20 74 68 65 | EE.802.1,.a.working.group.of.the |
77a80 | 20 49 45 45 45 20 38 30 32 20 73 74 61 6e 64 61 72 64 73 20 63 6f 6d 6d 69 74 74 65 65 2c 20 61 | .IEEE.802.standards.committee,.a |
77aa0 | 6e 64 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 62 65 20 61 63 74 69 76 65 6c 79 20 72 65 76 69 | nd.continues.to.be.actively.revi |
77ac0 | 73 65 64 2e 20 4f 6e 65 20 6f 66 20 74 68 65 20 6e 6f 74 61 62 6c 65 20 72 65 76 69 73 69 6f 6e | sed..One.of.the.notable.revision |
77ae0 | 73 20 69 73 20 38 30 32 2e 31 51 2d 32 30 31 34 20 77 68 69 63 68 20 69 6e 63 6f 72 70 6f 72 61 | s.is.802.1Q-2014.which.incorpora |
77b00 | 74 65 64 20 49 45 45 45 20 38 30 32 2e 31 61 71 20 28 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 | ted.IEEE.802.1aq.(Shortest.Path. |
77b20 | 42 72 69 64 67 69 6e 67 29 20 61 6e 64 20 6d 75 63 68 20 6f 66 20 74 68 65 20 49 45 45 45 20 38 | Bridging).and.much.of.the.IEEE.8 |
77b40 | 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 73 79 73 74 65 6d 20 4c 43 44 20 3a | 02.1d.standard..The.system.LCD.: |
77b60 | 61 62 62 72 3a 60 4c 43 44 20 28 4c 69 71 75 69 64 2d 63 72 79 73 74 61 6c 20 64 69 73 70 6c 61 | abbr:`LCD.(Liquid-crystal.displa |
77b80 | 79 29 60 20 6f 70 74 69 6f 6e 20 69 73 20 66 6f 72 20 75 73 65 72 73 20 72 75 6e 6e 69 6e 67 20 | y)`.option.is.for.users.running. |
77ba0 | 56 79 4f 53 20 6f 6e 20 68 61 72 64 77 61 72 65 20 74 68 61 74 20 66 65 61 74 75 72 65 73 20 61 | VyOS.on.hardware.that.features.a |
77bc0 | 6e 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 68 69 73 20 69 73 20 74 79 70 69 63 61 6c 6c 79 | n.LCD.display..This.is.typically |
77be0 | 20 61 20 73 6d 61 6c 6c 20 64 69 73 70 6c 61 79 20 62 75 69 6c 74 20 69 6e 20 61 6e 20 31 39 20 | .a.small.display.built.in.an.19. |
77c00 | 69 6e 63 68 20 72 61 63 6b 2d 6d 6f 75 6e 74 61 62 6c 65 20 61 70 70 6c 69 61 6e 63 65 2e 20 54 | inch.rack-mountable.appliance..T |
77c20 | 68 6f 73 65 20 64 69 73 70 6c 61 79 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 68 6f 77 20 72 | hose.displays.are.used.to.show.r |
77c40 | 75 6e 74 69 6d 65 20 64 61 74 61 2e 00 54 68 65 20 73 79 73 74 65 6d 20 69 73 20 63 6f 6e 66 69 | untime.data..The.system.is.confi |
77c60 | 67 75 72 65 64 20 74 6f 20 61 74 74 65 6d 70 74 20 64 6f 6d 61 69 6e 20 63 6f 6d 70 6c 65 74 69 | gured.to.attempt.domain.completi |
77c80 | 6f 6e 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 64 65 72 3a 20 76 79 6f 73 2e | on.in.the.following.order:.vyos. |
77ca0 | 69 6f 20 28 66 69 72 73 74 29 2c 20 76 79 6f 73 2e 6e 65 74 20 28 73 65 63 6f 6e 64 29 20 61 6e | io.(first),.vyos.net.(second).an |
77cc0 | 64 20 76 79 6f 73 2e 6e 65 74 77 6f 72 6b 20 28 6c 61 73 74 29 3a 00 54 68 65 20 74 61 62 6c 65 | d.vyos.network.(last):.The.table |
77ce0 | 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 61 74 61 3a 00 54 68 65 | .consists.of.following.data:.The |
77d00 | 20 74 61 73 6b 20 73 63 68 65 64 75 6c 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 78 | .task.scheduler.allows.you.to.ex |
77d20 | 65 63 75 74 65 20 74 61 73 6b 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 73 63 68 65 64 75 6c 65 2e | ecute.tasks.on.a.given.schedule. |
77d40 | 20 49 74 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 55 4e 49 58 20 63 72 6f 6e 5f 2e 00 54 68 65 | .It.makes.use.of.UNIX.cron_..The |
77d60 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 73 65 74 | .translation.address.must.be.set |
77d80 | 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 61 64 64 72 65 73 73 | .to.one.of.the.available.address |
77da0 | 65 73 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 60 6f 75 74 62 6f 75 6e 64 2d 69 | es.on.the.configured.`outbound-i |
77dc0 | 6e 74 65 72 66 61 63 65 60 20 6f 72 20 69 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 60 | nterface`.or.it.must.be.set.to.` |
77de0 | 6d 61 73 71 75 65 72 61 64 65 60 20 77 68 69 63 68 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 70 | masquerade`.which.will.use.the.p |
77e00 | 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 60 6f 75 74 62 6f 75 | rimary.IP.address.of.the.`outbou |
77e20 | 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 20 61 73 20 69 74 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e | nd-interface`.as.its.translation |
77e40 | 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 75 73 65 20 31 30 | .address..The.tunnel.will.use.10 |
77e60 | 2e 32 35 35 2e 31 2e 31 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 61 6e 64 20 31 30 | .255.1.1.for.the.local.IP.and.10 |
77e80 | 2e 32 35 35 2e 31 2e 32 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 2e 00 54 68 65 20 74 79 70 | .255.1.2.for.the.remote..The.typ |
77ea0 | 65 20 63 61 6e 20 62 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 61 73 62 72 2d 73 75 6d | e.can.be.the.following:.asbr-sum |
77ec0 | 6d 61 72 79 2c 20 65 78 74 65 72 6e 61 6c 2c 20 6e 65 74 77 6f 72 6b 2c 20 6e 73 73 61 2d 65 78 | mary,.external,.network,.nssa-ex |
77ee0 | 74 65 72 6e 61 6c 2c 20 6f 70 61 71 75 65 2d 61 72 65 61 2c 20 6f 70 61 71 75 65 2d 61 73 2c 20 | ternal,.opaque-area,.opaque-as,. |
77f00 | 6f 70 61 71 75 65 2d 6c 69 6e 6b 2c 20 72 6f 75 74 65 72 2c 20 73 75 6d 6d 61 72 79 2e 00 54 68 | opaque-link,.router,.summary..Th |
77f20 | 65 20 75 6c 74 69 6d 61 74 65 20 67 6f 61 6c 20 6f 66 20 63 6c 61 73 73 69 66 79 69 6e 67 20 74 | e.ultimate.goal.of.classifying.t |
77f40 | 72 61 66 66 69 63 20 69 73 20 74 6f 20 67 69 76 65 20 65 61 63 68 20 63 6c 61 73 73 20 61 20 64 | raffic.is.to.give.each.class.a.d |
77f60 | 69 66 66 65 72 65 6e 74 20 74 72 65 61 74 6d 65 6e 74 2e 00 54 68 65 20 75 73 65 20 6f 66 20 49 | ifferent.treatment..The.use.of.I |
77f80 | 50 6f 45 20 61 64 64 72 65 73 73 65 73 20 74 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 74 | PoE.addresses.the.disadvantage.t |
77fa0 | 68 61 74 20 50 50 50 20 69 73 20 75 6e 73 75 69 74 65 64 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 | hat.PPP.is.unsuited.for.multicas |
77fc0 | 74 20 64 65 6c 69 76 65 72 79 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 2e 20 54 79 | t.delivery.to.multiple.users..Ty |
77fe0 | 70 69 63 61 6c 6c 79 2c 20 49 50 6f 45 20 75 73 65 73 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 20 | pically,.IPoE.uses.Dynamic.Host. |
78000 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 45 78 74 65 6e | Configuration.Protocol.and.Exten |
78020 | 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 74 6f | sible.Authentication.Protocol.to |
78040 | 20 70 72 6f 76 69 64 65 20 74 68 65 20 73 61 6d 65 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 | .provide.the.same.functionality. |
78060 | 61 73 20 50 50 50 6f 45 2c 20 62 75 74 20 69 6e 20 61 20 6c 65 73 73 20 72 6f 62 75 73 74 20 6d | as.PPPoE,.but.in.a.less.robust.m |
78080 | 61 6e 6e 65 72 2e 00 54 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 61 74 74 72 69 62 75 74 | anner..The.value.of.the.attribut |
780a0 | 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 20 6d 75 73 74 20 62 65 20 6c 65 73 73 20 74 | e.``NAS-Port-Id``.must.be.less.t |
780c0 | 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 | han.16.characters,.otherwise.the |
780e0 | 20 69 6e 74 65 72 66 61 63 65 20 77 6f 6e 27 74 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 54 68 65 | .interface.won't.be.renamed..The |
78100 | 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 | .vendor-class-id.option.can.be.u |
78120 | 73 65 64 20 74 6f 20 72 65 71 75 65 73 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6c 61 73 73 20 | sed.to.request.a.specific.class. |
78140 | 6f 66 20 76 65 6e 64 6f 72 20 6f 70 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 65 | of.vendor.options.from.the.serve |
78160 | 72 2e 00 54 68 65 20 76 65 74 68 20 64 65 76 69 63 65 73 20 61 72 65 20 76 69 72 74 75 61 6c 20 | r..The.veth.devices.are.virtual. |
78180 | 45 74 68 65 72 6e 65 74 20 64 65 76 69 63 65 73 2e 20 54 68 65 79 20 63 61 6e 20 61 63 74 20 61 | Ethernet.devices..They.can.act.a |
781a0 | 73 20 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 73 70 | s.tunnels.between.network.namesp |
781c0 | 61 63 65 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 62 72 69 64 67 65 20 74 6f 20 61 20 70 68 79 | aces.to.create.a.bridge.to.a.phy |
781e0 | 73 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6e 20 61 6e 6f 74 68 65 72 20 | sical.network.device.in.another. |
78200 | 6e 61 6d 65 73 70 61 63 65 20 6f 72 20 56 52 46 2c 20 62 75 74 20 63 61 6e 20 61 6c 73 6f 20 62 | namespace.or.VRF,.but.can.also.b |
78220 | 65 20 75 73 65 64 20 61 73 20 73 74 61 6e 64 61 6c 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 64 65 76 | e.used.as.standalone.network.dev |
78240 | 69 63 65 73 2e 00 54 68 65 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 4e 41 54 36 34 20 70 72 65 66 69 | ices..The.well.known.NAT64.prefi |
78260 | 78 20 69 73 20 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 60 60 00 54 68 65 20 77 69 6e 64 6f 77 | x.is.``64:ff9b::/96``.The.window |
78280 | 20 73 69 7a 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 32 31 2e 00 | .size.must.be.between.1.and.21.. |
782a0 | 54 68 65 20 77 69 72 65 6c 65 73 73 20 63 6c 69 65 6e 74 20 28 73 75 70 70 6c 69 63 61 6e 74 29 | The.wireless.client.(supplicant) |
782c0 | 20 61 75 74 68 65 6e 74 69 63 61 74 65 73 20 61 67 61 69 6e 73 74 20 74 68 65 20 52 41 44 49 55 | .authenticates.against.the.RADIU |
782e0 | 53 20 73 65 72 76 65 72 20 28 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 29 | S.server.(authentication.server) |
78300 | 20 75 73 69 6e 67 20 61 6e 20 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e 73 69 62 6c 65 | .using.an.:abbr:`EAP.(Extensible |
78320 | 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 20 6d 65 74 68 | .Authentication.Protocol)`..meth |
78340 | 6f 64 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 | od.configured.on.the.RADIUS.serv |
78360 | 65 72 2e 20 54 68 65 20 57 41 50 20 28 61 6c 73 6f 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 | er..The.WAP.(also.referred.to.as |
78380 | 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 29 20 72 6f 6c 65 20 69 73 20 74 6f 20 73 65 6e 64 20 | .authenticator).role.is.to.send. |
783a0 | 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 62 65 74 77 | all.authentication.messages.betw |
783c0 | 65 65 6e 20 74 68 65 20 73 75 70 70 6c 69 63 61 6e 74 20 61 6e 64 20 74 68 65 20 63 6f 6e 66 69 | een.the.supplicant.and.the.confi |
783e0 | 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 2c 20 74 68 75 | gured.authentication.server,.thu |
78400 | 73 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 72 65 73 70 6f 6e 73 69 62 | s.the.RADIUS.server.is.responsib |
78420 | 6c 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 73 2e | le.for.authenticating.the.users. |
78440 | 00 54 68 65 6e 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 53 4e 41 54 20 72 75 6c 65 20 | .Then.a.corresponding.SNAT.rule. |
78460 | 69 73 20 63 72 65 61 74 65 64 20 74 6f 20 4e 41 54 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 | is.created.to.NAT.outgoing.traff |
78480 | 69 63 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 74 6f 20 61 20 72 65 73 65 | ic.for.the.internal.IP.to.a.rese |
784a0 | 72 76 65 64 20 65 78 74 65 72 6e 61 6c 20 49 50 2e 20 54 68 69 73 20 64 65 64 69 63 61 74 65 73 | rved.external.IP..This.dedicates |
784c0 | 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 6e | .an.external.IP.address.to.an.in |
784e0 | 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 | ternal.IP.address.and.is.useful. |
78500 | 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 73 20 77 68 69 63 68 20 64 6f 6e 27 74 20 68 61 76 65 20 74 | for.protocols.which.don't.have.t |
78520 | 68 65 20 6e 6f 74 69 6f 6e 20 6f 66 20 70 6f 72 74 73 2c 20 73 75 63 68 20 61 73 20 47 52 45 2e | he.notion.of.ports,.such.as.GRE. |
78540 | 00 54 68 65 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 2c 20 61 64 64 20 61 | .Then.we.need.to.generate,.add.a |
78560 | 6e 64 20 73 70 65 63 69 66 79 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 63 72 79 70 | nd.specify.the.names.of.the.cryp |
78580 | 74 6f 67 72 61 70 68 69 63 20 6d 61 74 65 72 69 61 6c 73 2e 20 45 61 63 68 20 6f 66 20 74 68 65 | tographic.materials..Each.of.the |
785a0 | 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 | .install.command.should.be.appli |
785c0 | 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d | ed.to.the.configuration.and.comm |
785e0 | 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 6e | ited.before.using.under.the.open |
78600 | 76 70 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 | vpn.interface.configuration..The |
78620 | 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 65 20 6b 65 79 20 6f 6e | n.you.need.to.install.the.key.on |
78640 | 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 3a 00 54 68 65 6e 20 79 6f 75 20 6e 65 65 | .the.remote.router:.Then.you.nee |
78660 | 64 20 74 6f 20 73 65 74 20 74 68 65 20 6b 65 79 20 69 6e 20 79 6f 75 72 20 4f 70 65 6e 56 50 4e | d.to.set.the.key.in.your.OpenVPN |
78680 | 20 69 6e 74 65 72 66 61 63 65 20 73 65 74 74 69 6e 67 73 3a 00 54 68 65 6e 2c 20 46 61 73 74 4e | .interface.settings:.Then,.FastN |
786a0 | 65 74 4d 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 33 | etMon.configuration:.There.are.3 |
786c0 | 20 64 65 66 61 75 6c 74 20 4e 54 50 20 73 65 72 76 65 72 20 73 65 74 2e 20 59 6f 75 20 61 72 65 | .default.NTP.server.set..You.are |
786e0 | 20 61 62 6c 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 6d 2e 00 54 68 65 72 65 20 61 72 65 20 | .able.to.change.them..There.are. |
78700 | 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 67 61 69 6e | a.lot.of.matching.criteria.again |
78720 | 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b 61 67 65 20 63 61 6e 20 62 65 20 74 65 73 74 | st.which.the.package.can.be.test |
78740 | 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 | ed..There.are.a.lot.of.matching. |
78760 | 63 72 69 74 65 72 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b 65 | criteria.against.which.the.packe |
78780 | 74 20 63 61 6e 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 | t.can.be.tested..There.are.a.lot |
787a0 | 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 6f 70 74 69 6f 6e 73 20 61 76 | .of.matching.criteria.options.av |
787c0 | 61 69 6c 61 62 6c 65 2c 20 62 6f 74 68 20 66 6f 72 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 65 | ailable,.both.for.``policy.route |
787e0 | 60 60 20 61 6e 64 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 65 36 60 60 2e 20 54 68 65 73 65 20 | ``.and.``policy.route6``..These. |
78800 | 6f 70 74 69 6f 6e 73 20 61 72 65 20 6c 69 73 74 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 | options.are.listed.in.this.secti |
78820 | 6f 6e 2e 00 54 68 65 72 65 20 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 | on..There.are.different.paramete |
78840 | 72 73 20 66 6f 72 20 67 65 74 74 69 6e 67 20 70 72 65 66 69 78 2d 6c 69 73 74 20 69 6e 66 6f 72 | rs.for.getting.prefix-list.infor |
78860 | 6d 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 6c 69 6d 69 74 73 20 6f 6e 20 77 68 69 63 | mation:.There.are.limits.on.whic |
78880 | 68 20 63 68 61 6e 6e 65 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 48 54 34 30 | h.channels.can.be.used.with.HT40 |
788a0 | 2d 20 61 6e 64 20 48 54 34 30 2b 2e 20 46 6f 6c 6c 6f 77 69 6e 67 20 74 61 62 6c 65 20 73 68 6f | -.and.HT40+..Following.table.sho |
788c0 | 77 73 20 74 68 65 20 63 68 61 6e 6e 65 6c 73 20 74 68 61 74 20 6d 61 79 20 62 65 20 61 76 61 69 | ws.the.channels.that.may.be.avai |
788e0 | 6c 61 62 6c 65 20 66 6f 72 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 30 2b 20 75 73 65 20 70 65 | lable.for.HT40-.and.HT40+.use.pe |
78900 | 72 20 49 45 45 45 20 38 30 32 2e 31 31 6e 20 41 6e 6e 65 78 20 4a 3a 00 54 68 65 72 65 20 61 72 | r.IEEE.802.11n.Annex.J:.There.ar |
78920 | 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 | e.many.parameters.you.will.be.ab |
78940 | 6c 65 20 74 6f 20 75 73 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 | le.to.use.in.order.to.match.the. |
78960 | 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 66 6f 72 20 61 20 63 6c 61 73 73 3a 00 54 68 | traffic.you.want.for.a.class:.Th |
78980 | 65 72 65 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 76 65 72 73 69 6f 6e 73 20 61 76 61 69 6c 61 | ere.are.multiple.versions.availa |
789a0 | 62 6c 65 20 66 6f 72 20 74 68 65 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 54 68 65 20 60 3c | ble.for.the.NetFlow.data..The.`< |
789c0 | 76 65 72 73 69 6f 6e 3e 60 20 75 73 65 64 20 69 6e 20 74 68 65 20 65 78 70 6f 72 74 65 64 20 66 | version>`.used.in.the.exported.f |
789e0 | 6c 6f 77 20 64 61 74 61 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 2e | low.data.can.be.configured.here. |
78a00 | 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 76 65 72 73 69 6f 6e 73 20 61 72 65 20 73 75 70 70 | .The.following.versions.are.supp |
78a20 | 6f 72 74 65 64 3a 00 54 68 65 72 65 20 61 72 65 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 61 6e | orted:.There.are.rate-limited.an |
78a40 | 64 20 6e 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 75 73 65 72 73 20 28 4d 41 43 73 29 00 | d.non.rate-limited.users.(MACs). |
78a60 | 54 68 65 72 65 20 61 72 65 20 73 6f 6d 65 20 73 63 65 6e 61 72 69 6f 73 20 77 68 65 72 65 20 73 | There.are.some.scenarios.where.s |
78a80 | 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 75 73 65 66 75 6c 2e 20 53 79 73 74 65 | erial.consoles.are.useful..Syste |
78aa0 | 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 20 6f 66 20 72 65 6d 6f 74 65 20 63 6f 6d 70 75 | m.administration.of.remote.compu |
78ac0 | 74 65 72 73 20 69 73 20 75 73 75 61 6c 6c 79 20 64 6f 6e 65 20 75 73 69 6e 67 20 3a 72 65 66 3a | ters.is.usually.done.using.:ref: |
78ae0 | 60 73 73 68 60 2c 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 74 69 6d 65 73 20 77 68 65 6e 20 | `ssh`,.but.there.are.times.when. |
78b00 | 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 73 20 74 68 65 20 6f 6e 6c | access.to.the.console.is.the.onl |
78b20 | 79 20 77 61 79 20 74 6f 20 64 69 61 67 6e 6f 73 65 20 61 6e 64 20 63 6f 72 72 65 63 74 20 73 6f | y.way.to.diagnose.and.correct.so |
78b40 | 66 74 77 61 72 65 20 66 61 69 6c 75 72 65 73 2e 20 4d 61 6a 6f 72 20 75 70 67 72 61 64 65 73 20 | ftware.failures..Major.upgrades. |
78b60 | 74 6f 20 74 68 65 20 69 6e 73 74 61 6c 6c 65 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6d 61 | to.the.installed.distribution.ma |
78b80 | 79 20 61 6c 73 6f 20 72 65 71 75 69 72 65 20 63 6f 6e 73 6f 6c 65 20 61 63 63 65 73 73 2e 00 54 | y.also.require.console.access..T |
78ba0 | 68 65 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 20 6f 66 20 6f 70 65 72 61 74 69 6f | here.are.three.modes.of.operatio |
78bc0 | 6e 20 66 6f 72 20 61 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 72 | n.for.a.wireless.interface:.Ther |
78be0 | 65 20 61 72 65 20 74 77 6f 20 74 79 70 65 73 20 6f 66 20 4e 65 74 77 6f 72 6b 20 41 64 6d 69 6e | e.are.two.types.of.Network.Admin |
78c00 | 73 20 77 68 6f 20 64 65 61 6c 20 77 69 74 68 20 42 47 50 2c 20 74 68 6f 73 65 20 77 68 6f 20 68 | s.who.deal.with.BGP,.those.who.h |
78c20 | 61 76 65 20 63 72 65 61 74 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 69 6e 63 | ave.created.an.international.inc |
78c40 | 69 64 65 6e 74 20 61 6e 64 2f 6f 72 20 6f 75 74 61 67 65 2c 20 61 6e 64 20 74 68 6f 73 65 20 77 | ident.and/or.outage,.and.those.w |
78c60 | 68 6f 20 61 72 65 20 6c 79 69 6e 67 00 54 68 65 72 65 20 61 72 65 20 74 77 6f 20 77 61 79 73 20 | ho.are.lying.There.are.two.ways. |
78c80 | 74 68 61 74 20 68 65 6c 70 20 75 73 20 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 42 47 50 | that.help.us.to.mitigate.the.BGP |
78ca0 | 73 20 66 75 6c 6c 2d 6d 65 73 68 20 72 65 71 75 69 72 65 6d 65 6e 74 20 69 6e 20 61 20 6e 65 74 | s.full-mesh.requirement.in.a.net |
78cc0 | 77 6f 72 6b 3a 00 54 68 65 72 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 6c 6f 6f 70 | work:.There.can.only.be.one.loop |
78ce0 | 62 61 63 6b 20 60 60 6c 6f 60 60 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 73 79 73 | back.``lo``.interface.on.the.sys |
78d00 | 74 65 6d 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 | tem..If.you.need.multiple.interf |
78d20 | 61 63 65 73 2c 20 70 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 3a 72 65 66 3a 60 64 75 6d 6d 79 | aces,.please.use.the.:ref:`dummy |
78d40 | 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 2e 00 54 68 65 72 | -interface`.interface.type..Ther |
78d60 | 65 20 63 6f 75 6c 64 20 62 65 20 61 20 77 69 64 65 20 72 61 6e 67 65 20 6f 66 20 72 6f 75 74 69 | e.could.be.a.wide.range.of.routi |
78d80 | 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 53 6f 6d 65 20 65 78 61 6d 70 6c 65 73 20 61 72 65 20 6c | ng.policies..Some.examples.are.l |
78da0 | 69 73 74 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 72 65 20 69 73 20 61 20 76 65 72 79 20 6e 69 63 | isted.below:.There.is.a.very.nic |
78dc0 | 65 20 70 69 63 74 75 72 65 2f 65 78 70 6c 61 6e 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 56 79 61 | e.picture/explanation.in.the.Vya |
78de0 | 74 74 61 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 | tta.documentation.which.should.b |
78e00 | 65 20 72 65 77 72 69 74 74 65 6e 20 68 65 72 65 2e 00 54 68 65 72 65 20 69 73 20 61 6c 73 6f 20 | e.rewritten.here..There.is.also. |
78e20 | 61 20 47 52 45 20 6f 76 65 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 76 | a.GRE.over.IPv6.encapsulation.av |
78e40 | 61 69 6c 61 62 6c 65 2c 20 69 74 20 69 73 20 63 61 6c 6c 65 64 3a 20 60 60 69 70 36 67 72 65 60 | ailable,.it.is.called:.``ip6gre` |
78e60 | 60 2e 00 54 68 65 72 65 20 69 73 20 61 6e 20 65 6e 74 69 72 65 20 63 68 61 70 74 65 72 20 61 62 | `..There.is.an.entire.chapter.ab |
78e80 | 6f 75 74 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 3a 72 65 66 3a 60 76 72 66 | out.how.to.configure.a.:ref:`vrf |
78ea0 | 60 2c 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 69 73 20 66 6f 72 20 61 64 64 69 74 69 6f | `,.please.check.this.for.additio |
78ec0 | 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 65 72 65 27 73 20 61 20 76 61 72 69 65 | nal.information..There's.a.varie |
78ee0 | 74 79 20 6f 66 20 63 6c 69 65 6e 74 20 47 55 49 20 66 72 6f 6e 74 65 6e 64 73 20 66 6f 72 20 61 | ty.of.client.GUI.frontends.for.a |
78f00 | 6e 79 20 70 6c 61 74 66 6f 72 6d 00 54 68 65 73 65 20 61 72 65 20 74 68 65 20 63 6f 6d 6d 61 6e | ny.platform.These.are.the.comman |
78f20 | 64 73 20 66 6f 72 20 61 20 62 61 73 69 63 20 73 65 74 75 70 2e 00 54 68 65 73 65 20 63 6f 6d 6d | ds.for.a.basic.setup..These.comm |
78f40 | 61 6e 64 73 20 61 6c 6c 6f 77 20 74 68 65 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 31 | ands.allow.the.VLAN10.and.VLAN11 |
78f60 | 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 20 | .hosts.to.communicate.with.each. |
78f80 | 6f 74 68 65 72 20 75 73 69 6e 67 20 74 68 65 20 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 74 61 62 | other.using.the.main.routing.tab |
78fa0 | 6c 65 2e 00 54 68 65 73 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 6d | le..These.configuration.is.not.m |
78fc0 | 61 6e 64 61 74 6f 72 79 20 61 6e 64 20 69 6e 20 6d 6f 73 74 20 63 61 73 65 73 20 74 68 65 72 65 | andatory.and.in.most.cases.there |
78fe0 | 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 20 42 75 74 20 | 's.no.need.to.configure.it..But. |
79000 | 69 66 20 6e 65 63 65 73 73 61 72 79 2c 20 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 63 61 6e | if.necessary,.Gratuitous.ARP.can |
79020 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 60 60 67 6c 6f 62 61 6c 2d 70 61 72 61 6d | .be.configured.in.``global-param |
79040 | 65 74 65 72 73 60 60 20 61 6e 64 2f 6f 72 20 69 6e 20 60 60 67 72 6f 75 70 60 60 20 73 65 63 74 | eters``.and/or.in.``group``.sect |
79060 | 69 6f 6e 2e 00 54 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 70 61 73 73 65 64 | ion..These.parameters.are.passed |
79080 | 20 61 73 2d 69 73 20 74 6f 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 20 | .as-is.to.isc-dhcp's.dhcpd.conf. |
790a0 | 75 6e 64 65 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 6f 64 65 20 74 68 65 | under.the.configuration.node.the |
790c0 | 79 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 2e 20 54 68 65 79 20 61 72 65 20 6e 6f 74 20 76 | y.are.defined.in..They.are.not.v |
790e0 | 61 6c 69 64 61 74 65 64 20 73 6f 20 61 6e 20 65 72 72 6f 72 20 69 6e 20 74 68 65 20 72 61 77 20 | alidated.so.an.error.in.the.raw. |
79100 | 70 61 72 61 6d 65 74 65 72 73 20 77 6f 6e 27 74 20 62 65 20 63 61 75 67 68 74 20 62 79 20 76 79 | parameters.won't.be.caught.by.vy |
79120 | 6f 73 27 73 20 73 63 72 69 70 74 73 20 61 6e 64 20 77 69 6c 6c 20 63 61 75 73 65 20 64 68 63 70 | os's.scripts.and.will.cause.dhcp |
79140 | 64 20 74 6f 20 66 61 69 6c 20 74 6f 20 73 74 61 72 74 2e 20 41 6c 77 61 79 73 20 76 65 72 69 66 | d.to.fail.to.start..Always.verif |
79160 | 79 20 74 68 61 74 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 63 6f 72 72 65 63 | y.that.the.parameters.are.correc |
79180 | 74 20 62 65 66 6f 72 65 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 | t.before.committing.the.configur |
791a0 | 61 74 69 6f 6e 2e 20 52 65 66 65 72 20 74 6f 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 70 64 | ation..Refer.to.isc-dhcp's.dhcpd |
791c0 | 2e 63 6f 6e 66 20 6d 61 6e 75 61 6c 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f | .conf.manual.for.more.informatio |
791e0 | 6e 3a 20 68 74 74 70 73 3a 2f 2f 6b 62 2e 69 73 63 2e 6f 72 67 2f 64 6f 63 73 2f 69 73 63 2d 64 | n:.https://kb.isc.org/docs/isc-d |
79200 | 68 63 70 2d 34 34 2d 6d 61 6e 75 61 6c 2d 70 61 67 65 73 2d 64 68 63 70 64 63 6f 6e 66 00 54 68 | hcp-44-manual-pages-dhcpdconf.Th |
79220 | 65 73 65 20 70 61 72 61 6d 65 74 65 72 73 20 6e 65 65 64 20 74 6f 20 62 65 20 70 61 72 74 20 6f | ese.parameters.need.to.be.part.o |
79240 | 66 20 74 68 65 20 44 48 43 50 20 67 6c 6f 62 61 6c 20 6f 70 74 69 6f 6e 73 2e 20 54 68 65 79 20 | f.the.DHCP.global.options..They. |
79260 | 73 74 61 79 20 75 6e 63 68 61 6e 67 65 64 2e 00 54 68 65 79 20 63 61 6e 20 62 65 20 2a 2a 64 65 | stay.unchanged..They.can.be.**de |
79280 | 63 69 6d 61 6c 2a 2a 20 70 72 65 66 69 78 65 73 2e 00 54 68 69 6e 67 73 20 74 6f 20 62 65 20 63 | cimal**.prefixes..Things.to.be.c |
792a0 | 6f 6e 73 69 64 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 74 75 70 3a 00 54 68 69 73 20 61 64 64 | onsidred.in.this.setup:.This.add |
792c0 | 72 65 73 73 20 6d 75 73 74 20 62 65 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 6c 6f | ress.must.be.the.address.of.a.lo |
792e0 | 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 | cal.interface..It.may.be.specifi |
79300 | 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 | ed.as.an.IPv4.address.or.an.IPv6 |
79320 | 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 38 30 32 2e | .address..This.algorithm.is.802. |
79340 | 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 | 3ad.compliant..This.algorithm.is |
79360 | 20 6e 6f 74 20 66 75 6c 6c 79 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 20 41 20 | .not.fully.802.3ad.compliant..A. |
79380 | 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 63 | single.TCP.or.UDP.conversation.c |
793a0 | 6f 6e 74 61 69 6e 69 6e 67 20 62 6f 74 68 20 66 72 61 67 6d 65 6e 74 65 64 20 61 6e 64 20 75 6e | ontaining.both.fragmented.and.un |
793c0 | 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 73 65 65 20 70 61 63 6b | fragmented.packets.will.see.pack |
793e0 | 65 74 73 20 73 74 72 69 70 65 64 20 61 63 72 6f 73 73 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 | ets.striped.across.two.interface |
79400 | 73 2e 20 54 68 69 73 20 6d 61 79 20 72 65 73 75 6c 74 20 69 6e 20 6f 75 74 20 6f 66 20 6f 72 64 | s..This.may.result.in.out.of.ord |
79420 | 65 72 20 64 65 6c 69 76 65 72 79 2e 20 4d 6f 73 74 20 74 72 61 66 66 69 63 20 74 79 70 65 73 20 | er.delivery..Most.traffic.types. |
79440 | 77 69 6c 6c 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 2c 20 61 73 | will.not.meet.these.criteria,.as |
79460 | 20 54 43 50 20 72 61 72 65 6c 79 20 66 72 61 67 6d 65 6e 74 73 20 74 72 61 66 66 69 63 2c 20 61 | .TCP.rarely.fragments.traffic,.a |
79480 | 6e 64 20 6d 6f 73 74 20 55 44 50 20 74 72 61 66 66 69 63 20 69 73 20 6e 6f 74 20 69 6e 76 6f 6c | nd.most.UDP.traffic.is.not.invol |
794a0 | 76 65 64 20 69 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2e 20 4f | ved.in.extended.conversations..O |
794c0 | 74 68 65 72 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 6f 66 20 38 30 32 2e 33 61 64 20 | ther.implementations.of.802.3ad. |
794e0 | 6d 61 79 20 6f 72 20 6d 61 79 20 6e 6f 74 20 74 6f 6c 65 72 61 74 65 20 74 68 69 73 20 6e 6f 6e | may.or.may.not.tolerate.this.non |
79500 | 63 6f 6d 70 6c 69 61 6e 63 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c 6c 20 | compliance..This.algorithm.will. |
79520 | 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 | place.all.traffic.to.a.particula |
79540 | 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 76 65 | r.network.peer.on.the.same.slave |
79560 | 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c 20 | ..This.algorithm.will.place.all. |
79580 | 74 72 61 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 | traffic.to.a.particular.network. |
795a0 | 70 65 65 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 76 65 2e 20 46 6f 72 20 6e 6f 6e 2d | peer.on.the.same.slave..For.non- |
795c0 | 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 68 65 20 73 | IP.traffic,.the.formula.is.the.s |
795e0 | 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d 69 74 20 68 | ame.as.for.the.layer2.transmit.h |
79600 | 61 73 68 20 70 6f 6c 69 63 79 2e 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 61 76 6f 69 64 69 6e 67 | ash.policy..This.allows.avoiding |
79620 | 20 74 68 65 20 74 69 6d 65 72 73 20 64 65 66 69 6e 65 64 20 69 6e 20 42 47 50 20 61 6e 64 20 4f | .the.timers.defined.in.BGP.and.O |
79640 | 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 65 78 70 69 72 65 73 2e 00 54 68 69 73 20 61 6c | SPF.protocol.to.expires..This.al |
79660 | 6c 6f 77 73 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 | lows.the.operator.to.control.the |
79680 | 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 66 69 6c 65 20 64 65 73 63 72 69 70 74 6f 72 73 | .number.of.open.file.descriptors |
796a0 | 20 65 61 63 68 20 64 61 65 6d 6f 6e 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 73 74 61 72 74 | .each.daemon.is.allowed.to.start |
796c0 | 20 77 69 74 68 2e 20 49 66 20 74 68 65 20 6f 70 65 72 61 74 6f 72 20 70 6c 61 6e 73 20 74 6f 20 | .with..If.the.operator.plans.to. |
796e0 | 72 75 6e 20 62 67 70 20 77 69 74 68 20 73 65 76 65 72 61 6c 20 74 68 6f 75 73 61 6e 64 73 20 6f | run.bgp.with.several.thousands.o |
79700 | 66 20 70 65 65 72 73 20 74 68 65 6e 20 74 68 69 73 20 69 73 20 77 68 65 72 65 20 77 65 20 77 6f | f.peers.then.this.is.where.we.wo |
79720 | 75 6c 64 20 6d 6f 64 69 66 79 20 46 52 52 20 74 6f 20 61 6c 6c 6f 77 20 74 68 69 73 20 74 6f 20 | uld.modify.FRR.to.allow.this.to. |
79740 | 68 61 70 70 65 6e 2e 00 54 68 69 73 20 61 6c 73 6f 20 77 6f 72 6b 73 20 66 6f 72 20 72 65 76 65 | happen..This.also.works.for.reve |
79760 | 72 73 65 2d 6c 6f 6f 6b 75 70 20 7a 6f 6e 65 73 20 28 60 60 31 38 2e 31 37 32 2e 69 6e 2d 61 64 | rse-lookup.zones.(``18.172.in-ad |
79780 | 64 72 2e 61 72 70 61 60 60 29 2e 00 54 68 69 73 20 61 72 74 69 63 6c 65 20 74 6f 75 63 68 65 73 | dr.arpa``)..This.article.touches |
797a0 | 20 6f 6e 20 27 63 6c 61 73 73 69 63 27 20 49 50 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f | .on.'classic'.IP.tunneling.proto |
797c0 | 63 6f 6c 73 2e 00 54 68 69 73 20 62 6c 75 65 70 72 69 6e 74 20 75 73 65 73 20 56 79 4f 53 20 61 | cols..This.blueprint.uses.VyOS.a |
797e0 | 73 20 74 68 65 20 44 4d 56 50 4e 20 48 75 62 20 61 6e 64 20 43 69 73 63 6f 20 28 37 32 30 36 56 | s.the.DMVPN.Hub.and.Cisco.(7206V |
79800 | 58 52 29 20 61 6e 64 20 56 79 4f 53 20 61 73 20 6d 75 6c 74 69 70 6c 65 20 73 70 6f 6b 65 20 73 | XR).and.VyOS.as.multiple.spoke.s |
79820 | 69 74 65 73 2e 20 54 68 65 20 6c 61 62 20 77 61 73 20 62 75 69 6c 64 20 75 73 69 6e 67 20 3a 61 | ites..The.lab.was.build.using.:a |
79840 | 62 62 72 3a 60 45 56 45 2d 4e 47 20 28 45 6d 75 6c 61 74 65 64 20 56 69 72 74 75 61 6c 20 45 6e | bbr:`EVE-NG.(Emulated.Virtual.En |
79860 | 76 69 72 6f 6e 6d 65 6e 74 20 4e 47 29 60 2e 00 54 68 69 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 | vironment.NG)`..This.can.be.conf |
79880 | 69 72 6d 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 60 73 68 6f 77 20 69 70 20 72 6f 75 74 65 20 | irmed.using.the.``show.ip.route. |
798a0 | 74 61 62 6c 65 20 31 30 30 60 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e | table.100``.operational.command. |
798c0 | 00 54 68 69 73 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 64 6f 6e 65 20 69 66 20 61 6c 6c 20 79 6f | .This.can.only.be.done.if.all.yo |
798e0 | 75 72 20 75 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 64 69 72 65 63 74 6c 79 20 75 6e | ur.users.are.located.directly.un |
79900 | 64 65 72 20 74 68 65 20 73 61 6d 65 20 70 6f 73 69 74 69 6f 6e 20 69 6e 20 74 68 65 20 4c 44 41 | der.the.same.position.in.the.LDA |
79920 | 50 20 74 72 65 65 20 61 6e 64 20 74 68 65 20 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 75 73 65 | P.tree.and.the.login.name.is.use |
79940 | 64 20 66 6f 72 20 6e 61 6d 69 6e 67 20 65 61 63 68 20 75 73 65 72 20 6f 62 6a 65 63 74 2e 20 49 | d.for.naming.each.user.object..I |
79960 | 66 20 79 6f 75 72 20 4c 44 41 50 20 74 72 65 65 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 | f.your.LDAP.tree.does.not.match. |
79980 | 74 68 65 73 65 20 63 72 69 74 65 72 69 61 73 20 6f 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 | these.criterias.or.if.you.want.t |
799a0 | 6f 20 66 69 6c 74 65 72 20 77 68 6f 20 61 72 65 20 76 61 6c 69 64 20 75 73 65 72 73 20 74 68 65 | o.filter.who.are.valid.users.the |
799c0 | 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 20 73 65 61 72 63 68 20 66 69 6c 74 65 | n.you.need.to.use.a.search.filte |
799e0 | 72 20 74 6f 20 73 65 61 72 63 68 20 66 6f 72 20 79 6f 75 72 20 75 73 65 72 73 20 44 4e 20 28 60 | r.to.search.for.your.users.DN.(` |
79a00 | 66 69 6c 74 65 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e 00 54 68 69 73 20 63 68 61 70 65 74 | filter-expression`)..This.chapet |
79a20 | 65 72 20 64 65 73 63 72 69 62 65 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 6b 65 | er.describes.how.to.configure.ke |
79a40 | 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 00 54 68 69 73 | rnel.parameters.at.runtime..This |
79a60 | 20 63 68 61 70 74 65 72 20 64 65 73 63 72 69 62 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 | .chapter.describe.the.possibilit |
79a80 | 69 65 73 20 6f 66 20 61 64 76 61 6e 63 65 64 20 73 79 73 74 65 6d 20 62 65 68 61 76 69 6f 72 2e | ies.of.advanced.system.behavior. |
79aa0 | 00 54 68 69 73 20 63 6f 6d 6d 61 64 20 73 65 74 73 20 6e 65 74 77 6f 72 6b 20 65 6e 74 69 74 79 | .This.commad.sets.network.entity |
79ac0 | 20 74 69 74 6c 65 20 28 4e 45 54 29 20 70 72 6f 76 69 64 65 64 20 69 6e 20 49 53 4f 20 66 6f 72 | .title.(NET).provided.in.ISO.for |
79ae0 | 6d 61 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 65 70 74 20 69 6e 63 6f 6d 69 6e | mat..This.command.accept.incomin |
79b00 | 67 20 72 6f 75 74 65 73 20 77 69 74 68 20 41 53 20 70 61 74 68 20 63 6f 6e 74 61 69 6e 69 6e 67 | g.routes.with.AS.path.containing |
79b20 | 20 41 53 20 6e 75 6d 62 65 72 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 76 61 6c 75 65 20 61 | .AS.number.with.the.same.value.a |
79b40 | 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 79 73 74 65 6d 20 41 53 2e 20 54 68 69 73 20 69 73 | s.the.current.system.AS..This.is |
79b60 | 20 75 73 65 64 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 74 68 65 20 73 | .used.when.you.want.to.use.the.s |
79b80 | 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 79 6f 75 72 20 73 69 74 65 73 2c 20 62 75 74 | ame.AS.number.in.your.sites,.but |
79ba0 | 20 79 6f 75 20 63 61 6e e2 80 99 74 20 63 6f 6e 6e 65 63 74 20 74 68 65 6d 20 64 69 72 65 63 74 | .you.can...t.connect.them.direct |
79bc0 | 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 20 6f 76 65 72 72 69 64 65 20 | ly..This.command.allow.override. |
79be0 | 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 | the.result.of.Capability.Negotia |
79c00 | 74 69 6f 6e 20 77 69 74 68 20 6c 6f 63 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 49 | tion.with.local.configuration..I |
79c20 | 67 6e 6f 72 65 20 72 65 6d 6f 74 65 20 70 65 65 72 e2 80 99 73 20 63 61 70 61 62 69 6c 69 74 79 | gnore.remote.peer...s.capability |
79c40 | 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 70 65 65 72 | .value..This.command.allows.peer |
79c60 | 69 6e 67 73 20 62 65 74 77 65 65 6e 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 | ings.between.directly.connected. |
79c80 | 65 42 47 50 20 70 65 65 72 73 20 75 73 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 | eBGP.peers.using.loopback.addres |
79ca0 | 73 65 73 20 77 69 74 68 6f 75 74 20 61 64 6a 75 73 74 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c | ses.without.adjusting.the.defaul |
79cc0 | 74 20 54 54 4c 20 6f 66 20 31 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 | t.TTL.of.1..This.command.allows. |
79ce0 | 73 65 73 73 69 6f 6e 73 20 74 6f 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 69 74 68 20 | sessions.to.be.established.with. |
79d00 | 65 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 77 68 65 6e 20 74 68 65 79 20 61 72 65 20 6d 75 6c | eBGP.neighbors.when.they.are.mul |
79d20 | 74 69 70 6c 65 20 68 6f 70 73 20 61 77 61 79 2e 20 57 68 65 6e 20 74 68 65 20 6e 65 69 67 68 62 | tiple.hops.away..When.the.neighb |
79d40 | 6f 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 61 6e 64 | or.is.not.directly.connected.and |
79d60 | 20 74 68 69 73 20 6b 6e 6f 62 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 73 | .this.knob.is.not.enabled,.the.s |
79d80 | 65 73 73 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 65 73 74 61 62 6c 69 73 68 2e 20 54 68 65 20 6e | ession.will.not.establish..The.n |
79da0 | 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e | umber.of.hops.range.is.1.to.255. |
79dc0 | 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 | .This.command.is.mutually.exclus |
79de0 | 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 74 74 6c 2d 73 65 63 75 72 69 74 79 20 68 | ive.with.:cfgcmd:`ttl-security.h |
79e00 | 6f 70 73 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 72 6f | ops`..This.command.allows.the.ro |
79e20 | 75 74 65 72 20 74 6f 20 70 72 65 66 65 72 20 72 6f 75 74 65 20 74 6f 20 73 70 65 63 69 66 69 65 | uter.to.prefer.route.to.specifie |
79e40 | 64 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 61 20 49 47 50 20 74 68 72 6f 75 67 68 | d.prefix.learned.via.IGP.through |
79e60 | 20 62 61 63 6b 64 6f 6f 72 20 6c 69 6e 6b 20 69 6e 73 74 65 61 64 20 6f 66 20 61 20 72 6f 75 74 | .backdoor.link.instead.of.a.rout |
79e80 | 65 20 74 6f 20 74 68 65 20 73 61 6d 65 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 61 | e.to.the.same.prefix.learned.via |
79ea0 | 20 45 42 47 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 6c 6f | .EBGP..This.command.allows.to.lo |
79ec0 | 67 20 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 2e 20 57 69 74 68 20 74 68 65 | g.changes.in.adjacency..With.the |
79ee0 | 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 67 75 6d | .optional.:cfgcmd:`detail`.argum |
79f00 | 65 6e 74 2c 20 61 6c 6c 20 63 68 61 6e 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 20 73 74 | ent,.all.changes.in.adjacency.st |
79f20 | 61 74 75 73 20 61 72 65 20 73 68 6f 77 6e 2e 20 57 69 74 68 6f 75 74 20 3a 63 66 67 63 6d 64 3a | atus.are.shown..Without.:cfgcmd: |
79f40 | 60 64 65 74 61 69 6c 60 2c 20 6f 6e 6c 79 20 63 68 61 6e 67 65 73 20 74 6f 20 66 75 6c 6c 20 6f | `detail`,.only.changes.to.full.o |
79f60 | 72 20 72 65 67 72 65 73 73 69 6f 6e 73 20 61 72 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 6f | r.regressions.are.shown..This.co |
79f80 | 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 73 74 | mmand.allows.to.specify.the.dist |
79fa0 | 72 69 62 75 74 69 6f 6e 20 74 79 70 65 20 66 6f 72 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 63 6f | ribution.type.for.the.network.co |
79fc0 | 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 20 | nnected.to.this.interface:.This. |
79fe0 | 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 | command.allows.to.use.route.map. |
7a000 | 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 | to.filter.redistributed.routes.f |
7a020 | 72 6f 6d 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 | rom.given.route.source..There.ar |
7a040 | 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 | e.five.modes.available.for.route |
7a060 | 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c | .source:.bgp,.connected,.kernel, |
7a080 | 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | .ripng,.static..This.command.all |
7a0a0 | 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 | ows.to.use.route.map.to.filter.r |
7a0c0 | 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 | edistributed.routes.from.the.giv |
7a0e0 | 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 | en.route.source..There.are.five. |
7a100 | 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | modes.available.for.route.source |
7a120 | 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 | :.bgp,.connected,.kernel,.ospf,. |
7a140 | 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 | static..This.command.allows.to.u |
7a160 | 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 | se.route.map.to.filter.redistrib |
7a180 | 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 | uted.routes.from.the.given.route |
7a1a0 | 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 | .source..There.are.five.modes.av |
7a1c0 | 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 | ailable.for.route.source:.bgp,.c |
7a1e0 | 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 | onnected,.kernel,.rip,.static..T |
7a200 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 | his.command.allows.to.use.route. |
7a220 | 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 | map.to.filter.redistributed.rout |
7a240 | 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 | es.from.the.given.route.source.. |
7a260 | 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f | There.are.six.modes.available.fo |
7a280 | 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | r.route.source:.bgp,.connected,. |
7a2a0 | 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 | kernel,.ospf,.rip,.static..This. |
7a2c0 | 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 | command.allows.to.use.route.map. |
7a2e0 | 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 | to.filter.redistributed.routes.. |
7a300 | 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f | There.are.six.modes.available.fo |
7a320 | 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 | r.route.source:.connected,.kerne |
7a340 | 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 | l,.ospf,.rip,.static,.table..Thi |
7a360 | 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 73 | s.command.allows.you.apply.acces |
7a380 | 73 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f | s.lists.to.a.chosen.interface.to |
7a3a0 | 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 | .filter.the.Babel.routes..This.c |
7a3c0 | 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 73 73 20 6c | ommand.allows.you.apply.access.l |
7a3e0 | 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 | ists.to.a.chosen.interface.to.fi |
7a400 | 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | lter.the.RIP.path..This.command. |
7a420 | 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 6f | allows.you.apply.prefix.lists.to |
7a440 | 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 | .a.chosen.interface.to.filter.th |
7a460 | 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | e.Babel.routes..This.command.all |
7a480 | 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 6f 20 61 20 | ows.you.apply.prefix.lists.to.a. |
7a4a0 | 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 | chosen.interface.to.filter.the.R |
7a4c0 | 49 50 20 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 | IP.path..This.command.allows.you |
7a4e0 | 20 74 6f 20 73 65 6c 65 63 74 20 61 20 73 70 65 63 69 66 69 63 20 61 63 63 65 73 73 20 63 6f 6e | .to.select.a.specific.access.con |
7a500 | 63 65 6e 74 72 61 74 6f 72 20 77 68 65 6e 20 79 6f 75 20 6b 6e 6f 77 20 74 68 65 20 61 63 63 65 | centrator.when.you.know.the.acce |
7a520 | 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 60 3c 6e 61 6d 65 3e 60 2e 00 54 68 69 73 20 | ss.concentrators.`<name>`..This. |
7a540 | 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 73 65 6c | command.applies.route-map.to.sel |
7a560 | 65 63 74 69 76 65 6c 79 20 75 6e 73 75 70 70 72 65 73 73 20 70 72 65 66 69 78 65 73 20 73 75 70 | ectively.unsuppress.prefixes.sup |
7a580 | 70 72 65 73 73 65 64 20 62 79 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 | pressed.by.summarisation..This.c |
7a5a0 | 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 73 | ommand.applies.the.AS.path.acces |
7a5c0 | 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 | s.list.filters.named.in.<name>.t |
7a5e0 | 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 | o.the.specified.BGP.neighbor.to. |
7a600 | 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | restrict.the.routing.information |
7a620 | 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 | .that.BGP.learns.and/or.advertis |
7a640 | 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 | es..The.arguments.:cfgcmd:`expor |
7a660 | 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 | t`.and.:cfgcmd:`import`.specify. |
7a680 | 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 41 53 20 70 61 | the.direction.in.which.the.AS.pa |
7a6a0 | 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 | th.access.list.are.applied..This |
7a6c0 | 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 | .command.applies.the.access.list |
7a6e0 | 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 75 6d 62 65 72 3e 20 74 6f 20 74 68 | .filters.named.in.<number>.to.th |
7a700 | 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 | e.specified.BGP.neighbor.to.rest |
7a720 | 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 | rict.the.routing.information.tha |
7a740 | 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 | t.BGP.learns.and/or.advertises.. |
7a760 | 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 | The.arguments.:cfgcmd:`export`.a |
7a780 | 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 | nd.:cfgcmd:`import`.specify.the. |
7a7a0 | 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 | direction.in.which.the.access.li |
7a7c0 | 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 | st.are.applied..This.command.app |
7a7e0 | 6c 69 65 73 20 74 68 65 20 70 72 66 65 66 69 78 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 | lies.the.prfefix.list.filters.na |
7a800 | 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 | med.in.<name>.to.the.specified.B |
7a820 | 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 | GP.neighbor.to.restrict.the.rout |
7a840 | 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 | ing.information.that.BGP.learns. |
7a860 | 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 | and/or.advertises..The.arguments |
7a880 | 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 | .:cfgcmd:`export`.and.:cfgcmd:`i |
7a8a0 | 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 | mport`.specify.the.direction.in. |
7a8c0 | 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 | which.the.prefix.list.are.applie |
7a8e0 | 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 72 6f 75 74 | d..This.command.applies.the.rout |
7a900 | 65 20 6d 61 70 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 | e.map.named.in.<name>.to.the.spe |
7a920 | 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 | cified.BGP.neighbor.to.control.a |
7a940 | 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 | nd.modify.routing.information.th |
7a960 | 61 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 70 65 65 72 73 2e 20 54 | at.is.exchanged.between.peers..T |
7a980 | 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e | he.arguments.:cfgcmd:`export`.an |
7a9a0 | 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 | d.:cfgcmd:`import`.specify.the.d |
7a9c0 | 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 | irection.in.which.the.route.map. |
7a9e0 | 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 62 69 6e 64 20 73 | are.applied..This.command.bind.s |
7aa00 | 70 65 63 69 66 69 63 20 70 65 65 72 20 74 6f 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 74 68 20 | pecific.peer.to.peer.group.with. |
7aa20 | 61 20 67 69 76 65 6e 20 6e 61 6d 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 | a.given.name..This.command.can.b |
7aa40 | 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 | e.used.to.filter.the.Babel.route |
7aa60 | 73 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 | s.using.access.lists..:cfgcmd:`i |
7aa80 | 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 | n`.and.:cfgcmd:`out`.this.is.the |
7aaa0 | 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c | .direction.in.which.the.access.l |
7aac0 | 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 | ists.are.applied..This.command.c |
7aae0 | 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 | an.be.used.to.filter.the.Babel.r |
7ab00 | 6f 75 74 65 73 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d | outes.using.prefix.lists..:cfgcm |
7ab20 | 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 | d:`in`.and.:cfgcmd:`out`.this.is |
7ab40 | 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 | .the.direction.in.which.the.pref |
7ab60 | 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | ix.lists.are.applied..This.comma |
7ab80 | 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 | nd.can.be.used.to.filter.the.RIP |
7aba0 | 20 70 61 74 68 20 75 73 69 6e 67 20 61 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d | .path.using.access.lists..:cfgcm |
7abc0 | 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 | d:`in`.and.:cfgcmd:`out`.this.is |
7abe0 | 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 | .the.direction.in.which.the.acce |
7ac00 | 73 73 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | ss.lists.are.applied..This.comma |
7ac20 | 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 | nd.can.be.used.to.filter.the.RIP |
7ac40 | 20 70 61 74 68 20 75 73 69 6e 67 20 70 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d | .path.using.prefix.lists..:cfgcm |
7ac60 | 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 | d:`in`.and.:cfgcmd:`out`.this.is |
7ac80 | 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 | .the.direction.in.which.the.pref |
7aca0 | 69 78 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | ix.lists.are.applied..This.comma |
7acc0 | 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 70 72 65 76 69 6f 75 73 20 63 6f 6d | nd.can.be.used.with.previous.com |
7ace0 | 6d 61 6e 64 20 74 6f 20 73 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 61 6e 63 | mand.to.sets.default.RIP.distanc |
7ad00 | 65 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 6f | e.to.specified.value.when.the.ro |
7ad20 | 75 74 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 74 68 | ute.source.IP.address.matches.th |
7ad40 | 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 70 65 63 69 | e.specified.prefix.and.the.speci |
7ad60 | 66 69 65 64 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 | fied.access-list..This.command.c |
7ad80 | 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 42 47 50 2e 20 54 68 65 | hange.distance.value.of.BGP..The |
7ada0 | 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 | .arguments.are.the.distance.valu |
7adc0 | 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 6e 61 6c | es.for.external.routes,.internal |
7ade0 | 20 72 6f 75 74 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 | .routes.and.local.routes.respect |
7ae00 | 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 | ively..The.distance.range.is.1.t |
7ae20 | 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 | o.255..This.command.change.dista |
7ae40 | 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 20 | nce.value.of.OSPF.globally..The. |
7ae60 | 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 | distance.range.is.1.to.255..This |
7ae80 | 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f | .command.change.distance.value.o |
7aea0 | 66 20 4f 53 50 46 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 | f.OSPF..The.arguments.are.the.di |
7aec0 | 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 | stance.values.for.external.route |
7aee0 | 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 | s,.inter-area.routes.and.intra-a |
7af00 | 72 65 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 | rea.routes.respectively..The.dis |
7af20 | 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f | tance.range.is.1.to.255..This.co |
7af40 | 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f | mmand.change.distance.value.of.O |
7af60 | 53 50 46 76 33 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e | SPFv3.globally..The.distance.ran |
7af80 | 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 | ge.is.1.to.255..This.command.cha |
7afa0 | 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 2e 20 54 68 | nge.distance.value.of.OSPFv3..Th |
7afc0 | 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c | e.arguments.are.the.distance.val |
7afe0 | 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d 61 | ues.for.external.routes,.inter-a |
7b000 | 72 65 61 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 73 | rea.routes.and.intra-area.routes |
7b020 | 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 | .respectively..The.distance.rang |
7b040 | 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e | e.is.1.to.255..This.command.chan |
7b060 | 67 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 52 49 50 2e 20 54 68 | ge.the.distance.value.of.RIP..Th |
7b080 | 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 | e.distance.range.is.1.to.255..Th |
7b0a0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 68 65 20 65 42 47 50 20 62 65 68 61 | is.command.changes.the.eBGP.beha |
7b0c0 | 76 69 6f 72 20 6f 66 20 46 52 52 2e 20 42 79 20 64 65 66 61 75 6c 74 20 46 52 52 20 65 6e 61 62 | vior.of.FRR..By.default.FRR.enab |
7b0e0 | 6c 65 73 20 3a 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 | les.:rfc:`8212`.functionality.wh |
7b100 | 69 63 68 20 61 66 66 65 63 74 73 20 68 6f 77 20 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 20 | ich.affects.how.eBGP.routes.are. |
7b120 | 61 64 76 65 72 74 69 73 65 64 2c 20 6e 61 6d 65 6c 79 20 6e 6f 20 72 6f 75 74 65 73 20 61 72 65 | advertised,.namely.no.routes.are |
7b140 | 20 61 64 76 65 72 74 69 73 65 64 20 61 63 72 6f 73 73 20 65 42 47 50 20 73 65 73 73 69 6f 6e 73 | .advertised.across.eBGP.sessions |
7b160 | 20 77 69 74 68 6f 75 74 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 65 67 72 65 73 73 20 72 6f 75 | .without.some.sort.of.egress.rou |
7b180 | 74 65 2d 6d 61 70 2f 70 6f 6c 69 63 79 20 69 6e 20 70 6c 61 63 65 2e 20 49 6e 20 56 79 4f 53 20 | te-map/policy.in.place..In.VyOS. |
7b1a0 | 68 6f 77 65 76 65 72 20 77 65 20 68 61 76 65 20 74 68 69 73 20 52 46 43 20 66 75 6e 63 74 69 6f | however.we.have.this.RFC.functio |
7b1c0 | 6e 61 6c 69 74 79 20 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 73 6f 20 74 68 | nality.disabled.by.default.so.th |
7b1e0 | 61 74 20 77 65 20 63 61 6e 20 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d | at.we.can.preserve.backwards.com |
7b200 | 70 61 74 69 62 69 6c 69 74 79 20 77 69 74 68 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 73 20 6f | patibility.with.older.versions.o |
7b220 | 66 20 56 79 4f 53 2e 20 57 69 74 68 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 6f 6e 65 20 63 61 6e | f.VyOS..With.this.option.one.can |
7b240 | 20 65 6e 61 62 6c 65 20 3a 72 66 63 3a 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 | .enable.:rfc:`8212`.functionalit |
7b260 | 79 20 74 6f 20 6f 70 65 72 61 74 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 | y.to.operate..This.command.confi |
7b280 | 67 75 72 65 73 20 70 61 64 64 69 6e 67 20 6f 6e 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 74 | gures.padding.on.hello.packets.t |
7b2a0 | 6f 20 61 63 63 6f 6d 6d 6f 64 61 74 65 20 61 73 79 6d 6d 65 74 72 69 63 61 6c 20 6d 61 78 69 6d | o.accommodate.asymmetrical.maxim |
7b2c0 | 75 6d 20 74 72 61 6e 73 66 65 72 20 75 6e 69 74 73 20 28 4d 54 55 73 29 20 66 72 6f 6d 20 64 69 | um.transfer.units.(MTUs).from.di |
7b2e0 | 66 66 65 72 65 6e 74 20 68 6f 73 74 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 | fferent.hosts.as.described.in.:r |
7b300 | 66 63 3a 60 33 37 31 39 60 2e 20 54 68 69 73 20 68 65 6c 70 73 20 74 6f 20 70 72 65 76 65 6e 74 | fc:`3719`..This.helps.to.prevent |
7b320 | 20 61 20 70 72 65 6d 61 74 75 72 65 20 61 64 6a 61 63 65 6e 63 79 20 55 70 20 73 74 61 74 65 20 | .a.premature.adjacency.Up.state. |
7b340 | 77 68 65 6e 20 6f 6e 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 20 4d 54 55 20 64 6f 65 | when.one.routing.devices.MTU.doe |
7b360 | 73 20 6e 6f 74 20 6d 65 65 74 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 65 | s.not.meet.the.requirements.to.e |
7b380 | 73 74 61 62 6c 69 73 68 20 74 68 65 20 61 64 6a 61 63 65 6e 63 79 2e 00 54 68 69 73 20 63 6f 6d | stablish.the.adjacency..This.com |
7b3a0 | 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 | mand.configures.the.authenticati |
7b3c0 | 6f 6e 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 54 | on.password.for.the.interface..T |
7b3e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 6d 61 78 69 6d | his.command.configures.the.maxim |
7b400 | 75 6d 20 73 69 7a 65 20 6f 66 20 67 65 6e 65 72 61 74 65 64 20 3a 61 62 62 72 3a 60 4c 53 50 73 | um.size.of.generated.:abbr:`LSPs |
7b420 | 20 28 4c 69 6e 6b 20 53 74 61 74 65 20 50 44 55 73 29 60 2c 20 69 6e 20 62 79 74 65 73 2e 20 54 | .(Link.State.PDUs)`,.in.bytes..T |
7b440 | 68 65 20 73 69 7a 65 20 72 61 6e 67 65 20 69 73 20 31 32 38 20 74 6f 20 34 33 35 32 2e 00 54 68 | he.size.range.is.128.to.4352..Th |
7b460 | 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 70 61 73 73 69 76 | is.command.configures.the.passiv |
7b480 | 65 20 6d 6f 64 65 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 | e.mode.for.this.interface..This. |
7b4a0 | 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 6e 65 69 67 68 62 6f 72 20 77 | command.creates.a.new.neighbor.w |
7b4c0 | 68 6f 73 65 20 72 65 6d 6f 74 65 2d 61 73 20 69 73 20 3c 6e 61 73 6e 3e 2e 20 54 68 65 20 6e 65 | hose.remote-as.is.<nasn>..The.ne |
7b4e0 | 69 67 68 62 6f 72 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 64 | ighbor.address.can.be.an.IPv4.ad |
7b500 | 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 69 | dress.or.an.IPv6.address.or.an.i |
7b520 | 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | nterface.to.use.for.the.connecti |
7b540 | 6f 6e 2e 20 54 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f | on..The.command.is.applicable.fo |
7b560 | 72 20 70 65 65 72 20 61 6e 64 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d 6d | r.peer.and.peer.group..This.comm |
7b580 | 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 | and.creates.a.new.route-map.poli |
7b5a0 | 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 | cy,.identified.by.<text>..This.c |
7b5c0 | 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 | ommand.creates.a.new.rule.in.the |
7b5e0 | 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e | .IPv6.access.list.and.defines.an |
7b600 | 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 | .action..This.command.creates.a. |
7b620 | 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 | new.rule.in.the.IPv6.prefix-list |
7b640 | 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d | .and.defines.an.action..This.com |
7b660 | 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 61 | mand.creates.a.new.rule.in.the.a |
7b680 | 63 63 65 73 73 20 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e | ccess.list.and.defines.an.action |
7b6a0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c | ..This.command.creates.a.new.rul |
7b6c0 | 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 | e.in.the.prefix-list.and.defines |
7b6e0 | 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 | .an.action..This.command.creates |
7b700 | 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 2c 20 69 64 65 6e 74 | .the.new.IPv6.access.list,.ident |
7b720 | 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 | ified.by.<text>.This.command.cre |
7b740 | 61 74 65 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f | ates.the.new.IPv6.prefix-list.po |
7b760 | 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 | licy,.identified.by.<text>..This |
7b780 | 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 61 63 63 65 73 73 20 | .command.creates.the.new.access. |
7b7a0 | 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 77 68 65 72 65 20 3c 61 63 6c 5f 6e 75 6d 62 65 72 3e 20 | list.policy,.where.<acl_number>. |
7b7c0 | 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 36 39 39 2e | must.be.a.number.from.1.to.2699. |
7b7e0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 70 72 | .This.command.creates.the.new.pr |
7b800 | 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 | efix-list.policy,.identified.by. |
7b820 | 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 6e | <text>..This.command.defines.a.n |
7b840 | 65 77 20 70 65 65 72 20 67 72 6f 75 70 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 74 | ew.peer.group..You.can.specify.t |
7b860 | 6f 20 74 68 65 20 67 72 6f 75 70 20 74 68 65 20 73 61 6d 65 20 70 61 72 61 6d 65 74 65 72 73 20 | o.the.group.the.same.parameters. |
7b880 | 74 68 61 74 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 66 6f 72 20 73 70 65 63 69 66 69 | that.you.can.specify.for.specifi |
7b8a0 | 63 20 6e 65 69 67 68 62 6f 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 | c.neighbors..This.command.define |
7b8c0 | 73 20 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 49 50 76 36 20 61 | s.matching.parameters.for.IPv6.a |
7b8e0 | 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 | ccess.list.rule..Matching.criter |
7b900 | 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 70 61 | ia.could.be.applied.to.source.pa |
7b920 | 72 61 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 6d | rameters:.This.command.defines.m |
7b940 | 61 74 63 68 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 61 63 63 65 73 73 20 6c 69 | atching.parameters.for.access.li |
7b960 | 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c 64 | st.rule..Matching.criteria.could |
7b980 | 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 72 20 73 6f | .be.applied.to.destination.or.so |
7b9a0 | 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 | urce.parameters:.This.command.de |
7b9c0 | 66 69 6e 65 73 20 74 68 65 20 49 53 2d 49 53 20 72 6f 75 74 65 72 20 62 65 68 61 76 69 6f 72 3a | fines.the.IS-IS.router.behavior: |
7b9e0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 6d 75 | .This.command.defines.the.accumu |
7ba00 | 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 74 68 | lated.penalty.amount.at.which.th |
7ba20 | 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 65 20 70 65 | e.route.is.re-advertised..The.pe |
7ba40 | 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 69 73 20 | nalty.range.is.1.to.20000..This. |
7ba60 | 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 | command.defines.the.accumulated. |
7ba80 | 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 | penalty.amount.at.which.the.rout |
7baa0 | 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 6e | e.is.suppressed..The.penalty.ran |
7bac0 | 67 65 20 69 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | ge.is.1.to.20000..This.command.d |
7bae0 | 65 66 69 6e 65 73 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 69 6e 20 6d 69 6e | efines.the.amount.of.time.in.min |
7bb00 | 75 74 65 73 20 61 66 74 65 72 20 77 68 69 63 68 20 61 20 70 65 6e 61 6c 74 79 20 69 73 20 72 65 | utes.after.which.a.penalty.is.re |
7bb20 | 64 75 63 65 64 20 62 79 20 68 61 6c 66 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 | duced.by.half..The.timer.range.i |
7bb40 | 73 20 31 30 20 74 6f 20 34 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | s.10.to.45.minutes..This.command |
7bb60 | 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 | .defines.the.maximum.number.of.p |
7bb80 | 61 72 61 6c 6c 65 6c 20 72 6f 75 74 65 73 20 74 68 61 74 20 74 68 65 20 42 47 50 20 63 61 6e 20 | arallel.routes.that.the.BGP.can. |
7bba0 | 73 75 70 70 6f 72 74 2e 20 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 42 47 50 20 74 6f 20 75 73 65 | support..In.order.for.BGP.to.use |
7bbc0 | 20 74 68 65 20 73 65 63 6f 6e 64 20 70 61 74 68 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .the.second.path,.the.following. |
7bbe0 | 61 74 74 72 69 62 75 74 65 73 20 68 61 76 65 20 74 6f 20 6d 61 74 63 68 3a 20 57 65 69 67 68 74 | attributes.have.to.match:.Weight |
7bc00 | 2c 20 4c 6f 63 61 6c 20 50 72 65 66 65 72 65 6e 63 65 2c 20 41 53 20 50 61 74 68 20 28 62 6f 74 | ,.Local.Preference,.AS.Path.(bot |
7bc20 | 68 20 41 53 20 6e 75 6d 62 65 72 20 61 6e 64 20 41 53 20 70 61 74 68 20 6c 65 6e 67 74 68 29 2c | h.AS.number.and.AS.path.length), |
7bc40 | 20 4f 72 69 67 69 6e 20 63 6f 64 65 2c 20 4d 45 44 2c 20 49 47 50 20 6d 65 74 72 69 63 2e 20 41 | .Origin.code,.MED,.IGP.metric..A |
7bc60 | 6c 73 6f 2c 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 61 | lso,.the.next.hop.address.for.ea |
7bc80 | 63 68 20 70 61 74 68 20 6d 75 73 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 2e 00 54 68 69 73 20 | ch.path.must.be.different..This. |
7bca0 | 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d 65 | command.defines.the.maximum.time |
7bcc0 | 20 69 6e 20 6d 69 6e 75 74 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 | .in.minutes.that.a.route.is.supp |
7bce0 | 72 65 73 73 65 64 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 | ressed..The.timer.range.is.1.to. |
7bd00 | 32 35 35 20 6d 69 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c | 255.minutes..This.command.disabl |
7bd20 | 65 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 20 54 6f 20 72 65 65 | e.the.peer.or.peer.group..To.ree |
7bd40 | 6e 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 75 73 65 20 74 68 65 20 64 65 6c 65 74 65 20 66 6f | nable.the.peer.use.the.delete.fo |
7bd60 | 72 6d 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | rm.of.this.command..This.command |
7bd80 | 20 64 69 73 61 62 6c 65 73 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 20 66 6f 72 20 74 68 69 73 20 | .disables.IGP-LDP.sync.for.this. |
7bda0 | 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | specific.interface..This.command |
7bdc0 | 20 64 69 73 61 62 6c 65 73 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 66 6f | .disables.Three-Way.Handshake.fo |
7bde0 | 72 20 50 32 50 20 61 64 6a 61 63 65 6e 63 69 65 73 20 77 68 69 63 68 20 64 65 73 63 72 69 62 65 | r.P2P.adjacencies.which.describe |
7be00 | 64 20 69 6e 20 3a 72 66 63 3a 60 35 33 30 33 60 2e 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e 64 | d.in.:rfc:`5303`..Three-Way.Hand |
7be20 | 73 68 61 6b 65 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 54 68 69 | shake.is.enabled.by.default..Thi |
7be40 | 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 63 68 65 63 6b 20 6f 66 20 74 68 65 20 | s.command.disables.check.of.the. |
7be60 | 4d 54 55 20 76 61 6c 75 65 20 69 6e 20 74 68 65 20 4f 53 50 46 20 44 42 44 20 70 61 63 6b 65 74 | MTU.value.in.the.OSPF.DBD.packet |
7be80 | 73 2e 20 54 68 75 73 2c 20 75 73 65 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | s..Thus,.use.of.this.command.all |
7bea0 | 6f 77 73 20 74 68 65 20 4f 53 50 46 20 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 72 65 61 63 68 20 | ows.the.OSPF.adjacency.to.reach. |
7bec0 | 74 68 65 20 46 55 4c 4c 20 73 74 61 74 65 20 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 65 | the.FULL.state.even.though.there |
7bee0 | 20 69 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 4d 54 55 20 6d 69 73 6d 61 74 63 68 20 62 65 | .is.an.interface.MTU.mismatch.be |
7bf00 | 74 77 65 65 6e 20 74 77 6f 20 4f 53 50 46 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d | tween.two.OSPF.routers..This.com |
7bf20 | 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | mand.disables.it..This.command.d |
7bf40 | 69 73 61 62 6c 65 73 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 69 6f 6e 20 62 65 74 77 65 65 6e | isables.route.reflection.between |
7bf60 | 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 6c 69 65 6e 74 73 2e 20 42 79 20 64 65 66 | .route.reflector.clients..By.def |
7bf80 | 61 75 6c 74 2c 20 74 68 65 20 63 6c 69 65 6e 74 73 20 6f 66 20 61 20 72 6f 75 74 65 20 72 65 66 | ault,.the.clients.of.a.route.ref |
7bfa0 | 6c 65 63 74 6f 72 20 61 72 65 20 6e 6f 74 20 72 65 71 75 69 72 65 64 20 74 6f 20 62 65 20 66 75 | lector.are.not.required.to.be.fu |
7bfc0 | 6c 6c 79 20 6d 65 73 68 65 64 20 61 6e 64 20 74 68 65 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 61 | lly.meshed.and.the.routes.from.a |
7bfe0 | 20 63 6c 69 65 6e 74 20 61 72 65 20 72 65 66 6c 65 63 74 65 64 20 74 6f 20 6f 74 68 65 72 20 63 | .client.are.reflected.to.other.c |
7c000 | 6c 69 65 6e 74 73 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 74 68 65 20 63 6c 69 65 6e 74 73 20 | lients..However,.if.the.clients. |
7c020 | 61 72 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 64 2c 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 69 | are.fully.meshed,.route.reflecti |
7c040 | 6f 6e 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 | on.is.not.required..In.this.case |
7c060 | 2c 20 75 73 65 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6e 6f 2d 63 6c 69 65 6e 74 2d 74 6f 2d | ,.use.the.:cfgcmd:`no-client-to- |
7c080 | 63 6c 69 65 6e 74 2d 72 65 66 6c 65 63 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 | client-reflection`.command.to.di |
7c0a0 | 73 61 62 6c 65 20 63 6c 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 20 72 65 66 6c 65 63 74 69 6f | sable.client-to-client.reflectio |
7c0c0 | 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 73 70 6c 69 74 2d 68 | n..This.command.disables.split-h |
7c0e0 | 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 65 66 61 | orizon.on.the.interface..By.defa |
7c100 | 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 52 49 50 | ult,.VyOS.does.not.advertise.RIP |
7c120 | 20 72 6f 75 74 65 73 20 6f 75 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 76 65 72 20 77 | .routes.out.the.interface.over.w |
7c140 | 68 69 63 68 20 74 68 65 79 20 77 65 72 65 20 6c 65 61 72 6e 65 64 20 28 73 70 6c 69 74 20 68 6f | hich.they.were.learned.(split.ho |
7c160 | 72 69 7a 6f 6e 29 2e 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 74 | rizon).3.This.command.disables.t |
7c180 | 68 65 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 | he.load.sharing.across.multiple. |
7c1a0 | 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 | LFA.backups..This.command.displa |
7c1c0 | 79 73 20 42 47 50 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d | ys.BGP.dampened.routes..This.com |
7c1e0 | 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 65 63 65 69 76 65 64 2d 72 6f 75 74 65 | mand.displays.BGP.received-route |
7c200 | 73 20 74 68 61 74 20 61 72 65 20 61 63 63 65 70 74 65 64 20 61 66 74 65 72 20 66 69 6c 74 65 72 | s.that.are.accepted.after.filter |
7c220 | 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 | ing..This.command.displays.BGP.r |
7c240 | 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e 00 | outes.advertised.to.a.neighbor.. |
7c260 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 | This.command.displays.BGP.routes |
7c280 | 20 61 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 41 53 20 50 61 74 | .allowed.by.the.specified.AS.Pat |
7c2a0 | 68 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 | h.access.list..This.command.disp |
7c2c0 | 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 66 72 6f 6d | lays.BGP.routes.originating.from |
7c2e0 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 62 65 66 6f | .the.specified.BGP.neighbor.befo |
7c300 | 72 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 2e 20 54 6f | re.inbound.policy.is.applied..To |
7c320 | 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 72 | .use.this.command.inbound.soft.r |
7c340 | 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 | econfiguration.must.be.enabled.. |
7c360 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 4c 53 41 73 20 69 6e 20 4d 61 | This.command.displays.LSAs.in.Ma |
7c380 | 78 41 67 65 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | xAge.list..This.command.displays |
7c3a0 | 20 52 49 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 | .RIP.routes..This.command.displa |
7c3c0 | 79 73 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 66 6f 72 20 61 20 73 70 65 | ys.a.database.contents.for.a.spe |
7c3e0 | 63 69 66 69 63 20 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 74 79 70 65 2e 00 54 | cific.link.advertisement.type..T |
7c400 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 73 75 6d 6d 61 72 79 20 74 | his.command.displays.a.summary.t |
7c420 | 61 62 6c 65 20 77 69 74 68 20 61 20 64 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 28 4c | able.with.a.database.contents.(L |
7c440 | 53 41 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 74 61 62 | SA)..This.command.displays.a.tab |
7c460 | 6c 65 20 6f 66 20 70 61 74 68 73 20 74 6f 20 61 72 65 61 20 62 6f 75 6e 64 61 72 79 20 61 6e 64 | le.of.paths.to.area.boundary.and |
7c480 | 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 62 6f 75 6e 64 61 72 79 20 72 6f 75 74 | .autonomous.system.boundary.rout |
7c4a0 | 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 6c 6c 20 65 | ers..This.command.displays.all.e |
7c4c0 | 6e 74 72 69 65 73 20 69 6e 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 | ntries.in.BGP.routing.table..Thi |
7c4e0 | 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 74 | s.command.displays.dampened.rout |
7c500 | 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 00 54 | es.received.from.BGP.neighbor..T |
7c520 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 65 78 74 65 72 6e 61 6c 20 69 6e | his.command.displays.external.in |
7c540 | 66 6f 72 6d 61 74 69 6f 6e 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 69 6e 74 6f 20 4f 53 50 | formation.redistributed.into.OSP |
7c560 | 46 76 33 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d | Fv3.This.command.displays.inform |
7c580 | 61 74 69 6f 6e 20 61 62 6f 75 74 20 42 47 50 20 72 6f 75 74 65 73 20 77 68 6f 73 65 20 41 53 20 | ation.about.BGP.routes.whose.AS. |
7c5a0 | 70 61 74 68 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 67 75 6c | path.matches.the.specified.regul |
7c5c0 | 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 | ar.expression..This.command.disp |
7c5e0 | 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 6c 61 70 70 69 6e 67 20 | lays.information.about.flapping. |
7c600 | 42 47 50 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 | BGP.routes..This.command.display |
7c620 | 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 70 61 72 74 69 63 75 6c | s.information.about.the.particul |
7c640 | 61 72 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | ar.entry.in.the.BGP.routing.tabl |
7c660 | 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 | e..This.command.displays.routes. |
7c680 | 74 68 61 74 20 61 72 65 20 70 65 72 6d 69 74 74 65 64 20 62 79 20 74 68 65 20 42 47 50 20 63 6f | that.are.permitted.by.the.BGP.co |
7c6a0 | 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c | mmunity.list..This.command.displ |
7c6c0 | 61 79 73 20 72 6f 75 74 65 73 20 74 68 61 74 20 62 65 6c 6f 6e 67 20 74 6f 20 73 70 65 63 69 66 | ays.routes.that.belong.to.specif |
7c6e0 | 69 65 64 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 56 61 6c 69 64 20 76 61 6c 75 65 | ied.BGP.communities..Valid.value |
7c700 | 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 20 69 6e 20 74 68 65 20 72 61 | .is.a.community.number.in.the.ra |
7c720 | 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 39 36 37 32 30 30 2c 20 6f 72 20 41 41 3a | nge.from.1.to.4294967200,.or.AA: |
7c740 | 4e 4e 20 28 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 2d 63 6f 6d 6d 75 6e 69 74 79 20 | NN.(autonomous.system-community. |
7c760 | 6e 75 6d 62 65 72 2f 32 2d 62 79 74 65 20 6e 75 6d 62 65 72 29 2c 20 6e 6f 2d 65 78 70 6f 72 74 | number/2-byte.number),.no-export |
7c780 | 2c 20 6c 6f 63 61 6c 2d 61 73 2c 20 6f 72 20 6e 6f 2d 61 64 76 65 72 74 69 73 65 2e 00 54 68 69 | ,.local-as,.or.no-advertise..Thi |
7c7a0 | 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 77 69 74 68 20 63 | s.command.displays.routes.with.c |
7c7c0 | 6c 61 73 73 6c 65 73 73 20 69 6e 74 65 72 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 28 43 49 | lassless.interdomain.routing.(CI |
7c7e0 | 44 52 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 61 74 65 | DR)..This.command.displays.state |
7c800 | 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 65 20 73 | .and.configuration.of.OSPF.the.s |
7c820 | 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 72 | pecified.interface,.or.all.inter |
7c840 | 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 6e 2e 00 | faces.if.no.interface.is.given.. |
7c860 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 61 74 65 20 61 6e 64 20 | This.command.displays.state.and. |
7c880 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 65 20 73 70 65 63 69 66 | configuration.of.OSPF.the.specif |
7c8a0 | 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 | ied.interface,.or.all.interfaces |
7c8c0 | 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 6e 2e 20 57 68 69 74 68 | .if.no.interface.is.given..Whith |
7c8e0 | 20 74 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 78 60 20 74 | .the.argument.:cfgcmd:`prefix`.t |
7c900 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 20 63 6f 6e 6e 65 63 74 65 64 20 70 72 65 66 | his.command.shows.connected.pref |
7c920 | 69 78 65 73 20 74 6f 20 61 64 76 65 72 74 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ixes.to.advertise..This.command. |
7c940 | 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2c | displays.the.OSPF.routing.table, |
7c960 | 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 6e | .as.determined.by.the.most.recen |
7c980 | 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | t.SPF.calculation..This.command. |
7c9a0 | 64 69 73 70 6c 61 79 73 20 74 68 65 20 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2c | displays.the.OSPF.routing.table, |
7c9c0 | 20 61 73 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 6e | .as.determined.by.the.most.recen |
7c9e0 | 74 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 57 69 74 68 20 74 68 65 20 6f 70 74 69 | t.SPF.calculation..With.the.opti |
7ca00 | 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 67 75 6d 65 6e 74 2c 20 | onal.:cfgcmd:`detail`.argument,. |
7ca20 | 65 61 63 68 20 72 6f 75 74 65 20 69 74 65 6d 27 73 20 61 64 76 65 72 74 69 73 65 72 20 72 6f 75 | each.route.item's.advertiser.rou |
7ca40 | 74 65 72 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 61 74 74 72 69 62 75 74 65 20 77 69 6c 6c 20 62 | ter.and.network.attribute.will.b |
7ca60 | 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 | e.shown..This.command.displays.t |
7ca80 | 68 65 20 6e 65 69 67 68 62 6f 72 20 44 52 20 63 68 6f 69 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f | he.neighbor.DR.choice.informatio |
7caa0 | 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 | n..This.command.displays.the.nei |
7cac0 | 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 64 | ghbors.information.in.a.detailed |
7cae0 | 20 66 6f 72 6d 20 66 6f 72 20 61 20 6e 65 69 67 68 62 6f 72 20 77 68 6f 73 65 20 49 50 20 61 64 | .form.for.a.neighbor.whose.IP.ad |
7cb00 | 64 72 65 73 73 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | dress.is.specified..This.command |
7cb20 | 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 74 | .displays.the.neighbors.informat |
7cb40 | 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 2c 20 6e 6f 74 20 6a 75 73 74 | ion.in.a.detailed.form,.not.just |
7cb60 | 20 61 20 73 75 6d 6d 61 72 79 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | .a.summary.table..This.command.d |
7cb80 | 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 20 66 6f 72 | isplays.the.neighbors.status.for |
7cba0 | 20 61 20 6e 65 69 67 68 62 6f 72 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 | .a.neighbor.on.the.specified.int |
7cbc0 | 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 | erface..This.command.displays.th |
7cbe0 | 65 20 6e 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.neighbors.status..This.command |
7cc00 | 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 20 61 6c 6c 20 42 47 50 20 | .displays.the.status.of.all.BGP. |
7cc20 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 | connections..This.command.enable |
7cc40 | 20 6c 6f 67 67 69 6e 67 20 6e 65 69 67 68 62 6f 72 20 75 70 2f 64 6f 77 6e 20 63 68 61 6e 67 65 | .logging.neighbor.up/down.change |
7cc60 | 73 20 61 6e 64 20 72 65 73 65 74 20 72 65 61 73 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | s.and.reset.reason..This.command |
7cc80 | 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 73 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 66 | .enable/disables.summarisation.f |
7cca0 | 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 2e | or.the.configured.address.range. |
7ccc0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 61 62 62 72 3a 60 42 46 44 | .This.command.enables.:abbr:`BFD |
7cce0 | 20 28 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 63 | .(Bidirectional.Forwarding.Detec |
7cd00 | 74 69 6f 6e 29 60 20 6f 6e 20 74 68 69 73 20 4f 53 50 46 20 6c 69 6e 6b 20 69 6e 74 65 72 66 61 | tion)`.on.this.OSPF.link.interfa |
7cd20 | 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 36 | ce..This.command.enables.:rfc:`6 |
7cd40 | 32 33 32 60 20 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 61 | 232`.purge.originator.identifica |
7cd60 | 74 69 6f 6e 2e 20 45 6e 61 62 6c 65 20 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 | tion..Enable.purge.originator.id |
7cd80 | 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 28 50 4f 49 29 20 62 79 20 61 64 64 69 6e 67 20 74 68 65 | entification.(POI).by.adding.the |
7cda0 | 20 74 79 70 65 2c 20 6c 65 6e 67 74 68 20 61 6e 64 20 76 61 6c 75 65 20 28 54 4c 56 29 20 77 69 | .type,.length.and.value.(TLV).wi |
7cdc0 | 74 68 20 74 68 65 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 29 20 | th.the.Intermediate.System.(IS). |
7cde0 | 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 4c 53 50 73 20 74 68 61 74 20 | identification.to.the.LSPs.that. |
7ce00 | 64 6f 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 50 4f 49 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 | do.not.contain.POI.information.. |
7ce20 | 49 66 20 61 6e 20 49 53 20 67 65 6e 65 72 61 74 65 73 20 61 20 70 75 72 67 65 2c 20 56 79 4f 53 | If.an.IS.generates.a.purge,.VyOS |
7ce40 | 20 61 64 64 73 20 74 68 69 73 20 54 4c 56 20 77 69 74 68 20 74 68 65 20 73 79 73 74 65 6d 20 49 | .adds.this.TLV.with.the.system.I |
7ce60 | 44 20 6f 66 20 74 68 65 20 49 53 20 74 6f 20 74 68 65 20 70 75 72 67 65 2e 00 54 68 69 73 20 63 | D.of.the.IS.to.the.purge..This.c |
7ce80 | 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 50 20 66 61 73 74 20 72 65 2d 72 6f 75 74 69 6e | ommand.enables.IP.fast.re-routin |
7cea0 | 67 20 74 68 61 74 20 69 73 20 70 61 72 74 20 6f 66 20 3a 72 66 63 3a 60 35 32 38 36 60 2e 20 53 | g.that.is.part.of.:rfc:`5286`..S |
7cec0 | 70 65 63 69 66 69 63 61 6c 6c 79 20 74 68 69 73 20 69 73 20 61 20 70 72 65 66 69 78 20 6c 69 73 | pecifically.this.is.a.prefix.lis |
7cee0 | 74 20 77 68 69 63 68 20 72 65 66 65 72 65 6e 63 65 73 20 61 20 70 72 65 66 69 78 20 69 6e 20 77 | t.which.references.a.prefix.in.w |
7cf00 | 68 69 63 68 20 77 69 6c 6c 20 73 65 6c 65 63 74 20 65 6c 69 67 69 62 6c 65 20 50 51 20 6e 6f 64 | hich.will.select.eligible.PQ.nod |
7cf20 | 65 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 20 | es.for.remote.LFA.backups..This. |
7cf40 | 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 49 53 2d 49 53 20 6f 6e 20 74 68 69 73 20 69 6e | command.enables.IS-IS.on.this.in |
7cf60 | 74 65 72 66 61 63 65 2c 20 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f 72 20 61 64 6a 61 63 65 6e 63 | terface,.and.allows.for.adjacenc |
7cf80 | 79 20 74 6f 20 6f 63 63 75 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 6e 61 6d 65 20 6f | y.to.occur..Note.that.the.name.o |
7cfa0 | 66 20 49 53 2d 49 53 20 69 6e 73 74 61 6e 63 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d | f.IS-IS.instance.must.be.the.sam |
7cfc0 | 65 20 61 73 20 74 68 65 20 6f 6e 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 | e.as.the.one.used.to.configure.t |
7cfe0 | 68 65 20 49 53 2d 49 53 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 | he.IS-IS.process..This.command.e |
7d000 | 6e 61 62 6c 65 73 20 52 49 50 20 61 6e 64 20 73 65 74 73 20 74 68 65 20 52 49 50 20 65 6e 61 62 | nables.RIP.and.sets.the.RIP.enab |
7d020 | 6c 65 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 4e 45 54 57 4f 52 4b 2e 20 54 68 65 20 69 6e 74 | le.interface.by.NETWORK..The.int |
7d040 | 65 72 66 61 63 65 73 20 77 68 69 63 68 20 68 61 76 65 20 61 64 64 72 65 73 73 65 73 20 6d 61 74 | erfaces.which.have.addresses.mat |
7d060 | 63 68 69 6e 67 20 77 69 74 68 20 4e 45 54 57 4f 52 4b 20 61 72 65 20 65 6e 61 62 6c 65 64 2e 00 | ching.with.NETWORK.are.enabled.. |
7d080 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 70 6f 69 73 6f 6e 2d 72 65 76 65 | This.command.enables.poison-reve |
7d0a0 | 72 73 65 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 62 6f 74 68 20 70 6f | rse.on.the.interface..If.both.po |
7d0c0 | 69 73 6f 6e 20 72 65 76 65 72 73 65 20 61 6e 64 20 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 20 61 | ison.reverse.and.split.horizon.a |
7d0e0 | 72 65 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 56 79 4f 53 20 61 64 76 65 72 74 69 73 65 73 | re.enabled,.then.VyOS.advertises |
7d100 | 20 74 68 65 20 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 61 73 20 75 6e 72 65 61 63 68 61 62 | .the.learned.routes.as.unreachab |
7d120 | 6c 65 20 6f 76 65 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 68 20 74 | le.over.the.interface.on.which.t |
7d140 | 68 65 20 72 6f 75 74 65 20 77 61 73 20 6c 65 61 72 6e 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | he.route.was.learned..This.comma |
7d160 | 6e 64 20 65 6e 61 62 6c 65 73 20 72 6f 75 74 69 6e 67 20 75 73 69 6e 67 20 72 61 64 69 6f 20 66 | nd.enables.routing.using.radio.f |
7d180 | 72 65 71 75 65 6e 63 79 20 64 69 76 65 72 73 69 74 79 2e 20 54 68 69 73 20 69 73 20 68 69 67 68 | requency.diversity..This.is.high |
7d1a0 | 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 69 6e 20 6e 65 74 77 6f 72 6b 73 20 77 69 74 68 20 | ly.recommended.in.networks.with. |
7d1c0 | 6d 61 6e 79 20 77 69 72 65 6c 65 73 73 20 6e 6f 64 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | many.wireless.nodes..This.comman |
7d1e0 | 64 20 65 6e 61 62 6c 65 73 20 73 65 6e 64 69 6e 67 20 74 69 6d 65 73 74 61 6d 70 73 20 77 69 74 | d.enables.sending.timestamps.wit |
7d200 | 68 20 65 61 63 68 20 48 65 6c 6c 6f 20 61 6e 64 20 49 48 55 20 6d 65 73 73 61 67 65 20 69 6e 20 | h.each.Hello.and.IHU.message.in. |
7d220 | 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 75 74 65 20 52 54 54 20 76 61 6c 75 65 73 2e 20 49 74 20 | order.to.compute.RTT.values..It. |
7d240 | 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 69 6d 65 73 74 61 | is.recommended.to.enable.timesta |
7d260 | 6d 70 73 20 6f 6e 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 63 | mps.on.tunnel.interfaces..This.c |
7d280 | 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 64 79 6e 61 6d | ommand.enables.support.for.dynam |
7d2a0 | 69 63 20 68 6f 73 74 6e 61 6d 65 20 54 4c 56 2e 20 44 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 6d | ic.hostname.TLV..Dynamic.hostnam |
7d2c0 | 65 20 6d 61 70 70 69 6e 67 20 64 65 74 65 72 6d 69 6e 65 64 20 61 73 20 64 65 73 63 72 69 62 65 | e.mapping.determined.as.describe |
7d2e0 | 64 20 69 6e 20 3a 72 66 63 3a 60 32 37 36 33 60 2c 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 6e 61 | d.in.:rfc:`2763`,.Dynamic.Hostna |
7d300 | 6d 65 20 45 78 63 68 61 6e 67 65 20 4d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 49 53 2d 49 53 2e | me.Exchange.Mechanism.for.IS-IS. |
7d320 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 74 68 65 20 4f 52 46 20 63 61 | .This.command.enables.the.ORF.ca |
7d340 | 70 61 62 69 6c 69 74 79 20 28 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 32 39 | pability.(described.in.:rfc:`529 |
7d360 | 31 60 29 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 61 6e 64 20 65 6e 61 | 1`).on.the.local.router,.and.ena |
7d380 | 62 6c 65 73 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 61 64 76 65 72 74 69 73 65 6d 65 6e | bles.ORF.capability.advertisemen |
7d3a0 | 74 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 65 65 72 2e 20 54 68 65 | t.to.the.specified.BGP.peer..The |
7d3c0 | 20 3a 63 66 67 63 6d 64 3a 60 72 65 63 65 69 76 65 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e 66 69 | .:cfgcmd:`receive`.keyword.confi |
7d3e0 | 67 75 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 46 20 | gures.a.router.to.advertise.ORF. |
7d400 | 72 65 63 65 69 76 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 54 68 65 20 3a 63 66 67 63 6d | receive.capabilities..The.:cfgcm |
7d420 | 64 3a 60 73 65 6e 64 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 6f | d:`send`.keyword.configures.a.ro |
7d440 | 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 46 20 73 65 6e 64 20 63 61 70 61 62 | uter.to.advertise.ORF.send.capab |
7d460 | 69 6c 69 74 69 65 73 2e 20 54 6f 20 61 64 76 65 72 74 69 73 65 20 61 20 66 69 6c 74 65 72 20 66 | ilities..To.advertise.a.filter.f |
7d480 | 72 6f 6d 20 61 20 73 65 6e 64 65 72 2c 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 6e | rom.a.sender,.you.must.create.an |
7d4a0 | 20 49 50 20 70 72 65 66 69 78 20 6c 69 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 | .IP.prefix.list.for.the.specifie |
7d4c0 | 64 20 42 47 50 20 70 65 65 72 20 61 70 70 6c 69 65 64 20 69 6e 20 69 6e 62 6f 75 6e 64 20 64 65 | d.BGP.peer.applied.in.inbound.de |
7d4e0 | 72 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 66 6f 72 63 65 73 20 47 | rection..This.command.enforces.G |
7d500 | 65 6e 65 72 61 6c 69 7a 65 64 20 54 54 4c 20 53 65 63 75 72 69 74 79 20 4d 65 63 68 61 6e 69 73 | eneralized.TTL.Security.Mechanis |
7d520 | 6d 20 28 47 54 53 4d 29 2c 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 | m.(GTSM),.as.specified.in.:rfc:` |
7d540 | 35 30 38 32 60 2e 20 57 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 6f 6e 6c 79 20 6e | 5082`..With.this.command,.only.n |
7d560 | 65 69 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 6e 75 6d 62 | eighbors.that.are.specified.numb |
7d580 | 65 72 20 6f 66 20 68 6f 70 73 20 61 77 61 79 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 77 65 64 20 | er.of.hops.away.will.be.allowed. |
7d5a0 | 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 | to.become.neighbors..The.number. |
7d5c0 | 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 34 2e 20 54 68 69 73 20 | of.hops.range.is.1.to.254..This. |
7d5e0 | 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 20 77 69 | command.is.mutually.exclusive.wi |
7d600 | 74 68 20 3a 63 66 67 63 6d 64 3a 60 65 62 67 70 2d 6d 75 6c 74 69 68 6f 70 60 2e 00 54 68 69 73 | th.:cfgcmd:`ebgp-multihop`..This |
7d620 | 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 20 73 74 72 69 63 74 6c 79 20 63 6f 6d 70 61 72 65 | .command.forces.strictly.compare |
7d640 | 20 72 65 6d 6f 74 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 63 | .remote.capabilities.and.local.c |
7d660 | 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 72 65 | apabilities..If.capabilities.are |
7d680 | 20 64 69 66 66 65 72 65 6e 74 2c 20 73 65 6e 64 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 | .different,.send.Unsupported.Cap |
7d6a0 | 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 74 68 65 6e 20 72 65 73 65 74 20 63 6f 6e 6e 65 63 74 | ability.error.then.reset.connect |
7d6c0 | 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 65 73 20 74 68 65 20 42 47 50 | ion..This.command.forces.the.BGP |
7d6e0 | 20 73 70 65 61 6b 65 72 20 74 6f 20 72 65 70 6f 72 74 20 69 74 73 65 6c 66 20 61 73 20 74 68 65 | .speaker.to.report.itself.as.the |
7d700 | 20 6e 65 78 74 20 68 6f 70 20 66 6f 72 20 61 6e 20 61 64 76 65 72 74 69 73 65 64 20 72 6f 75 74 | .next.hop.for.an.advertised.rout |
7d720 | 65 20 69 74 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e 00 54 | e.it.advertised.to.a.neighbor..T |
7d740 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 20 72 | his.command.generate.a.default.r |
7d760 | 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 20 52 49 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | oute.into.the.RIP..This.command. |
7d780 | 67 69 76 65 73 20 61 20 62 72 69 65 66 20 73 74 61 74 75 73 20 6f 76 65 72 76 69 65 77 20 6f 66 | gives.a.brief.status.overview.of |
7d7a0 | 20 61 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e | .a.specified.wireless.interface. |
7d7c0 | 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 | .The.wireless.interface.identifi |
7d7e0 | 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 | er.can.range.from.wlan0.to.wlan9 |
7d800 | 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 65 73 20 68 61 6e 64 20 69 6e 20 68 61 | 99..This.command.goes.hand.in.ha |
7d820 | 6e 64 20 77 69 74 68 20 74 68 65 20 6c 69 73 74 65 6e 20 72 61 6e 67 65 20 63 6f 6d 6d 61 6e 64 | nd.with.the.listen.range.command |
7d840 | 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 42 47 50 20 6e 65 69 67 | .to.limit.the.amount.of.BGP.neig |
7d860 | 68 62 6f 72 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6e 6e 65 63 | hbors.that.are.allowed.to.connec |
7d880 | 74 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6c 69 6d 69 74 | t.to.the.local.router..The.limit |
7d8a0 | 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 35 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .range.is.1.to.5000..This.comman |
7d8c0 | 64 20 67 6f 74 20 61 64 64 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 69 6e 76 65 | d.got.added.in.VyOS.1.4.and.inve |
7d8e0 | 72 74 73 20 74 68 65 20 6c 6f 67 69 63 20 66 72 6f 6d 20 74 68 65 20 6f 6c 64 20 60 60 64 65 66 | rts.the.logic.from.the.old.``def |
7d900 | 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f | ault-route``.CLI.option..This.co |
7d920 | 6d 6d 61 6e 64 20 69 6e 73 74 65 61 64 20 6f 66 20 73 75 6d 6d 61 72 69 7a 69 6e 67 20 69 6e 74 | mmand.instead.of.summarizing.int |
7d940 | 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 69 6c 74 65 72 20 74 68 65 6d 20 2d 20 69 2e 65 2e | ra.area.paths.filter.them.-.i.e. |
7d960 | 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 74 68 69 73 20 72 61 6e 67 | .intra.area.paths.from.this.rang |
7d980 | 65 20 61 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 64 20 69 6e 74 6f 20 6f 74 68 65 72 20 | e.are.not.advertised.into.other. |
7d9a0 | 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 | areas..This.command.makes.sense. |
7d9c0 | 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 | in.ABR.only..This.command.is.als |
7d9e0 | 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 | o.used.to.enable.the.OSPF.proces |
7da00 | 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 | s..The.area.number.can.be.specif |
7da20 | 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 72 | ied.in.decimal.notation.in.the.r |
7da40 | 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f 72 20 69 74 | ange.from.0.to.4294967295..Or.it |
7da60 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 64 65 63 69 | .can.be.specified.in.dotted.deci |
7da80 | 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 64 64 72 65 | mal.notation.similar.to.ip.addre |
7daa0 | 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 | ss..This.command.is.only.allowed |
7dac0 | 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 | .for.eBGP.peers..This.command.is |
7dae0 | 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 20 49 74 | .only.allowed.for.eBGP.peers..It |
7db00 | 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 67 72 6f 75 | .is.not.applicable.for.peer.grou |
7db20 | 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c 20 | ps..This.command.is.only.useful. |
7db40 | 61 74 20 73 63 61 6c 65 20 77 68 65 6e 20 79 6f 75 20 63 61 6e 20 70 6f 73 73 69 62 6c 79 20 68 | at.scale.when.you.can.possibly.h |
7db60 | 61 76 65 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 50 49 4d 20 63 6f 6e 74 72 6f | ave.a.large.number.of.PIM.contro |
7db80 | 6c 20 70 61 63 6b 65 74 73 20 66 6c 6f 77 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | l.packets.flowing..This.command. |
7dba0 | 69 73 20 73 70 65 63 69 66 69 63 20 74 6f 20 46 52 52 20 61 6e 64 20 56 79 4f 53 2e 20 54 68 65 | is.specific.to.FRR.and.VyOS..The |
7dbc0 | 20 72 6f 75 74 65 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 61 20 73 74 61 74 69 63 20 72 6f | .route.command.makes.a.static.ro |
7dbe0 | 75 74 65 20 6f 6e 6c 79 20 69 6e 73 69 64 65 20 52 49 50 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e | ute.only.inside.RIP..This.comman |
7dc00 | 64 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 62 79 20 61 64 76 61 6e 63 65 | d.should.be.used.only.by.advance |
7dc20 | 64 20 75 73 65 72 73 20 77 68 6f 20 61 72 65 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 6b 6e 6f | d.users.who.are.particularly.kno |
7dc40 | 77 6c 65 64 67 65 61 62 6c 65 20 61 62 6f 75 74 20 74 68 65 20 52 49 50 20 70 72 6f 74 6f 63 6f | wledgeable.about.the.RIP.protoco |
7dc60 | 6c 2e 20 49 6e 20 6d 6f 73 74 20 63 61 73 65 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 63 | l..In.most.cases,.we.recommend.c |
7dc80 | 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 6e 20 56 79 4f 53 20 61 | reating.a.static.route.in.VyOS.a |
7dca0 | 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 69 74 20 69 6e 20 52 49 50 20 75 73 69 6e | nd.redistributing.it.in.RIP.usin |
7dcc0 | 67 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 73 74 61 74 69 63 60 2e | g.:cfgcmd:`redistribute.static`. |
7dce0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 64 76 65 72 74 | .This.command.is.used.for.advert |
7dd00 | 69 73 69 6e 67 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 | ising.IPv4.or.IPv6.networks..Thi |
7dd20 | 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 6e | s.command.is.used.to.retrieve.in |
7dd40 | 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 57 41 50 20 77 69 74 68 69 6e 20 74 68 65 20 72 | formation.about.WAP.within.the.r |
7dd60 | 61 6e 67 65 20 6f 66 20 79 6f 75 72 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e | ange.of.your.wireless.interface. |
7dd80 | 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 6f 6e 20 77 69 72 65 6c | .This.command.is.useful.on.wirel |
7dda0 | 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 73 74 61 | ess.interfaces.configured.in.sta |
7ddc0 | 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 | tion.mode..This.command.is.usefu |
7dde0 | 6c 20 69 66 20 6f 6e 65 20 64 65 73 69 72 65 73 20 74 6f 20 6c 6f 6f 73 65 6e 20 74 68 65 20 72 | l.if.one.desires.to.loosen.the.r |
7de00 | 65 71 75 69 72 65 6d 65 6e 74 20 66 6f 72 20 42 47 50 20 74 6f 20 68 61 76 65 20 73 74 72 69 63 | equirement.for.BGP.to.have.stric |
7de20 | 74 6c 79 20 64 65 66 69 6e 65 64 20 6e 65 69 67 68 62 6f 72 73 2e 20 53 70 65 63 69 66 69 63 61 | tly.defined.neighbors..Specifica |
7de40 | 6c 6c 79 20 77 68 61 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 69 73 20 66 6f 72 20 74 68 65 20 6c | lly.what.is.allowed.is.for.the.l |
7de60 | 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6c 69 73 74 65 6e 20 74 6f 20 61 20 72 61 6e 67 65 | ocal.router.to.listen.to.a.range |
7de80 | 20 6f 66 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 64 65 66 69 6e | .of.IPv4.or.IPv6.addresses.defin |
7dea0 | 65 64 20 62 79 20 61 20 70 72 65 66 69 78 20 61 6e 64 20 74 6f 20 61 63 63 65 70 74 20 42 47 50 | ed.by.a.prefix.and.to.accept.BGP |
7dec0 | 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 73 2e 20 57 68 65 6e 20 61 20 54 43 50 20 63 6f 6e 6e 65 | .open.messages..When.a.TCP.conne |
7dee0 | 63 74 69 6f 6e 20 28 61 6e 64 20 73 75 62 73 65 71 75 65 6e 74 6c 79 20 61 20 42 47 50 20 6f 70 | ction.(and.subsequently.a.BGP.op |
7df00 | 65 6e 20 6d 65 73 73 61 67 65 29 20 66 72 6f 6d 20 77 69 74 68 69 6e 20 74 68 69 73 20 72 61 6e | en.message).from.within.this.ran |
7df20 | 67 65 20 74 72 69 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f | ge.tries.to.connect.the.local.ro |
7df40 | 75 74 65 72 20 74 68 65 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 | uter.then.the.local.router.will. |
7df60 | 72 65 73 70 6f 6e 64 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 74 68 65 20 70 61 72 | respond.and.connect.with.the.par |
7df80 | 61 6d 65 74 65 72 73 20 74 68 61 74 20 61 72 65 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e 20 | ameters.that.are.defined.within. |
7dfa0 | 74 68 65 20 70 65 65 72 20 67 72 6f 75 70 2e 20 4f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 | the.peer.group..One.must.define. |
7dfc0 | 61 20 70 65 65 72 2d 67 72 6f 75 70 20 66 6f 72 20 65 61 63 68 20 72 61 6e 67 65 20 74 68 61 74 | a.peer-group.for.each.range.that |
7dfe0 | 20 69 73 20 6c 69 73 74 65 64 2e 20 49 66 20 6e 6f 20 70 65 65 72 2d 67 72 6f 75 70 20 69 73 20 | .is.listed..If.no.peer-group.is. |
7e000 | 64 65 66 69 6e 65 64 20 74 68 65 6e 20 61 6e 20 65 72 72 6f 72 20 77 69 6c 6c 20 6b 65 65 70 20 | defined.then.an.error.will.keep. |
7e020 | 79 6f 75 20 66 72 6f 6d 20 63 6f 6d 6d 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 | you.from.committing.the.configur |
7e040 | 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 6f 64 69 66 69 65 73 20 74 68 65 | ation..This.command.modifies.the |
7e060 | 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 28 68 6f 70 20 63 6f 75 6e 74 29 20 76 61 6c 75 | .default.metric.(hop.count).valu |
7e080 | 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 | e.for.redistributed.routes..The. |
7e0a0 | 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e 20 54 68 65 20 64 65 66 | metric.range.is.1.to.16..The.def |
7e0c0 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 6f | ault.value.is.1..This.command.do |
7e0e0 | 65 73 20 6e 6f 74 20 61 66 66 65 63 74 20 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 20 65 76 | es.not.affect.connected.route.ev |
7e100 | 65 6e 20 69 66 20 69 74 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 3a 63 66 | en.if.it.is.redistributed.by.:cf |
7e120 | 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 60 2e 20 54 | gcmd:`redistribute.connected`..T |
7e140 | 6f 20 6d 6f 64 69 66 79 20 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 6d 65 74 72 69 63 | o.modify.connected.routes.metric |
7e160 | 20 76 61 6c 75 65 2c 20 70 6c 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 | .value,.please.use.:cfgcmd:`redi |
7e180 | 73 74 72 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 20 6d 65 74 72 69 63 60 2e 00 54 68 69 73 | stribute.connected.metric`..This |
7e1a0 | 20 63 6f 6d 6d 61 6e 64 20 6f 76 65 72 72 69 64 65 20 41 53 20 6e 75 6d 62 65 72 20 6f 66 20 74 | .command.override.AS.number.of.t |
7e1c0 | 68 65 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 6c | he.originating.router.with.the.l |
7e1e0 | 6f 63 61 6c 20 41 53 20 6e 75 6d 62 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 65 | ocal.AS.number..This.command.pre |
7e200 | 76 65 6e 74 73 20 66 72 6f 6d 20 73 65 6e 64 69 6e 67 20 62 61 63 6b 20 70 72 65 66 69 78 65 73 | vents.from.sending.back.prefixes |
7e220 | 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 74 68 65 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 | .learned.from.the.neighbor..This |
7e240 | 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 72 65 20 64 69 66 | .command.provides.to.compare.dif |
7e260 | 66 65 72 65 6e 74 20 4d 45 44 20 76 61 6c 75 65 73 20 74 68 61 74 20 61 64 76 65 72 74 69 73 65 | ferent.MED.values.that.advertise |
7e280 | 64 20 62 79 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 41 53 20 66 | d.by.neighbours.in.the.same.AS.f |
7e2a0 | 6f 72 20 72 6f 75 74 65 73 20 73 65 6c 65 63 74 69 6f 6e 2e 20 57 68 65 6e 20 74 68 69 73 20 63 | or.routes.selection..When.this.c |
7e2c0 | 6f 6d 6d 61 6e 64 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 | ommand.is.enabled,.routes.from.t |
7e2e0 | 68 65 20 73 61 6d 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 61 72 65 20 67 72 | he.same.autonomous.system.are.gr |
7e300 | 6f 75 70 65 64 20 74 6f 67 65 74 68 65 72 2c 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 6e 74 | ouped.together,.and.the.best.ent |
7e320 | 72 69 65 73 20 6f 66 20 65 61 63 68 20 67 72 6f 75 70 20 61 72 65 20 63 6f 6d 70 61 72 65 64 2e | ries.of.each.group.are.compared. |
7e340 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 72 | .This.command.provides.to.compar |
7e360 | 65 20 74 68 65 20 4d 45 44 20 6f 6e 20 72 6f 75 74 65 73 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 | e.the.MED.on.routes,.even.when.t |
7e380 | 68 65 79 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 | hey.were.received.from.different |
7e3a0 | 20 6e 65 69 67 68 62 6f 75 72 69 6e 67 20 41 53 65 73 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 | .neighbouring.ASes..Setting.this |
7e3c0 | 20 6f 70 74 69 6f 6e 20 6d 61 6b 65 73 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 | .option.makes.the.order.of.prefe |
7e3e0 | 72 65 6e 63 65 20 6f 66 20 72 6f 75 74 65 73 20 6d 6f 72 65 20 64 65 66 69 6e 65 64 2c 20 61 6e | rence.of.routes.more.defined,.an |
7e400 | 64 20 73 68 6f 75 6c 64 20 65 6c 69 6d 69 6e 61 74 65 20 4d 45 44 20 69 6e 64 75 63 65 64 20 6f | d.should.eliminate.MED.induced.o |
7e420 | 73 63 69 6c 6c 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 | scillations..This.command.redist |
7e440 | 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d | ributes.routing.information.from |
7e460 | 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 | .the.given.route.source.into.the |
7e480 | 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 76 65 6c 2d 31 2e 20 54 68 65 72 65 | .ISIS.database.as.Level-1..There |
7e4a0 | 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 | .are.six.modes.available.for.rou |
7e4c0 | 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 | te.source:.bgp,.connected,.kerne |
7e4e0 | 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | l,.ospf,.rip,.static..This.comma |
7e500 | 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 | nd.redistributes.routing.informa |
7e520 | 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | tion.from.the.given.route.source |
7e540 | 20 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 76 65 6c | .into.the.ISIS.database.as.Level |
7e560 | 2d 32 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c | -2..There.are.six.modes.availabl |
7e580 | 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 | e.for.route.source:.bgp,.connect |
7e5a0 | 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 | ed,.kernel,.ospf,.rip,.static..T |
7e5c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e | his.command.redistributes.routin |
7e5e0 | 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 | g.information.from.the.given.rou |
7e600 | 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 52 49 50 20 74 61 62 6c 65 73 2e 20 54 | te.source.into.the.RIP.tables..T |
7e620 | 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f | here.are.five.modes.available.fo |
7e640 | 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 | r.route.source:.bgp,.connected,. |
7e660 | 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | kernel,.ospf,.static..This.comma |
7e680 | 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 | nd.redistributes.routing.informa |
7e6a0 | 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | tion.from.the.given.route.source |
7e6c0 | 20 74 6f 20 74 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 73 | .to.the.BGP.process..There.are.s |
7e6e0 | 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 | ix.modes.available.for.route.sou |
7e700 | 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 | rce:.connected,.kernel,.ospf,.ri |
7e720 | 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 | p,.static,.table..This.command.r |
7e740 | 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | edistributes.routing.information |
7e760 | 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 | .from.the.given.route.source.to. |
7e780 | 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | the.Babel.process..This.command. |
7e7a0 | 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f | redistributes.routing.informatio |
7e7c0 | 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f | n.from.the.given.route.source.to |
7e7e0 | 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 | .the.OSPF.process..There.are.fiv |
7e800 | 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 | e.modes.available.for.route.sour |
7e820 | 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c | ce:.bgp,.connected,.kernel,.rip, |
7e840 | 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 | .static..This.command.redistribu |
7e860 | 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 | tes.routing.information.from.the |
7e880 | 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 76 | .given.route.source.to.the.OSPFv |
7e8a0 | 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 | 3.process..There.are.five.modes. |
7e8c0 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c | available.for.route.source:.bgp, |
7e8e0 | 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 | .connected,.kernel,.ripng,.stati |
7e900 | 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 6d 6f 76 65 73 20 74 68 65 20 70 72 69 76 | c..This.command.removes.the.priv |
7e920 | 61 74 65 20 41 53 4e 20 6f 66 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 61 64 76 65 72 | ate.ASN.of.routes.that.are.adver |
7e940 | 74 69 73 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 70 65 65 72 2e 20 49 74 | tised.to.the.configured.peer..It |
7e960 | 20 72 65 6d 6f 76 65 73 20 6f 6e 6c 79 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 6f 6e 20 72 6f | .removes.only.private.ASNs.on.ro |
7e980 | 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 45 42 47 50 20 70 65 65 72 73 2e 00 54 | utes.advertised.to.EBGP.peers..T |
7e9a0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f | his.command.resets.BGP.connectio |
7e9c0 | 6e 73 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6e 65 69 67 68 62 6f 72 20 49 50 20 | ns.to.the.specified.neighbor.IP. |
7e9e0 | 61 64 64 72 65 73 73 2e 20 57 69 74 68 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 | address..With.argument.:cfgcmd:` |
7ea00 | 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 61 20 73 | soft`.this.command.initiates.a.s |
7ea20 | 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 | oft.reset..If.you.do.not.specify |
7ea40 | 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a 60 6f 75 | .the.:cfgcmd:`in`.or.:cfgcmd:`ou |
7ea60 | 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 | t`.options,.both.inbound.and.out |
7ea80 | 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 74 | bound.soft.reconfiguration.are.t |
7eaa0 | 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 47 | riggered..This.command.resets.BG |
7eac0 | 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 | P.connections.to.the.specified.p |
7eae0 | 65 65 72 20 67 72 6f 75 70 2e 20 57 69 74 68 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 | eer.group..With.argument.:cfgcmd |
7eb00 | 3a 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 61 | :`soft`.this.command.initiates.a |
7eb20 | 20 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 | .soft.reset..If.you.do.not.speci |
7eb40 | 66 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a 60 | fy.the.:cfgcmd:`in`.or.:cfgcmd:` |
7eb60 | 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f | out`.options,.both.inbound.and.o |
7eb80 | 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 | utbound.soft.reconfiguration.are |
7eba0 | 20 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 | .triggered..This.command.resets. |
7ebc0 | 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 66 20 67 69 76 65 6e 20 72 6f 75 | all.BGP.connections.of.given.rou |
7ebe0 | 74 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 61 6c 6c 20 65 78 74 | ter..This.command.resets.all.ext |
7ec00 | 65 72 6e 61 6c 20 42 47 50 20 70 65 65 72 73 20 6f 66 20 67 69 76 65 6e 20 72 6f 75 74 65 72 2e | ernal.BGP.peers.of.given.router. |
7ec20 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 6c 65 63 74 73 20 41 42 52 20 6d 6f 64 65 6c 2e | .This.command.selects.ABR.model. |
7ec40 | 20 4f 53 50 46 20 72 6f 75 74 65 72 20 73 75 70 70 6f 72 74 73 20 66 6f 75 72 20 41 42 52 20 6d | .OSPF.router.supports.four.ABR.m |
7ec60 | 6f 64 65 6c 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 64 65 66 61 75 6c 74 20 | odels:.This.command.set.default. |
7ec80 | 6d 65 74 72 69 63 20 66 6f 72 20 63 69 72 63 75 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | metric.for.circuit..This.command |
7eca0 | 20 73 65 74 20 74 68 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 74 68 61 74 20 64 69 76 | .set.the.channel.number.that.div |
7ecc0 | 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 20 75 73 65 73 20 66 6f 72 20 74 68 69 73 20 69 6e 74 | ersity.routing.uses.for.this.int |
7ece0 | 65 72 66 61 63 65 20 28 73 65 65 20 64 69 76 65 72 73 69 74 79 20 6f 70 74 69 6f 6e 20 61 62 6f | erface.(see.diversity.option.abo |
7ed00 | 76 65 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 41 54 54 20 62 69 74 20 74 | ve)..This.command.sets.ATT.bit.t |
7ed20 | 6f 20 31 20 69 6e 20 4c 65 76 65 6c 31 20 4c 53 50 73 2e 20 49 74 20 69 73 20 64 65 73 63 72 69 | o.1.in.Level1.LSPs..It.is.descri |
7ed40 | 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | bed.in.:rfc:`3787`..This.command |
7ed60 | 20 73 65 74 73 20 4c 53 50 20 6d 61 78 69 6d 75 6d 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 69 | .sets.LSP.maximum.LSP.lifetime.i |
7ed80 | 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 | n.seconds..The.interval.range.is |
7eda0 | 20 33 35 30 20 74 6f 20 36 35 35 33 35 2e 20 4c 53 50 73 20 72 65 6d 61 69 6e 20 69 6e 20 61 20 | .350.to.65535..LSPs.remain.in.a. |
7edc0 | 64 61 74 61 62 61 73 65 20 66 6f 72 20 31 32 30 30 20 73 65 63 6f 6e 64 73 20 62 79 20 64 65 66 | database.for.1200.seconds.by.def |
7ede0 | 61 75 6c 74 2e 20 49 66 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 72 65 66 72 65 73 68 65 64 20 | ault..If.they.are.not.refreshed. |
7ee00 | 62 79 20 74 68 61 74 20 74 69 6d 65 2c 20 74 68 65 79 20 61 72 65 20 64 65 6c 65 74 65 64 2e 20 | by.that.time,.they.are.deleted.. |
7ee20 | 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 74 68 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 | You.can.change.the.LSP.refresh.i |
7ee40 | 6e 74 65 72 76 61 6c 20 6f 72 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 2e 20 54 68 65 | nterval.or.the.LSP.lifetime..The |
7ee60 | 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 73 68 6f 75 6c 64 20 62 65 20 | .LSP.refresh.interval.should.be. |
7ee80 | 6c 65 73 73 20 74 68 61 6e 20 74 68 65 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 6f 72 20 65 6c | less.than.the.LSP.lifetime.or.el |
7eea0 | 73 65 20 4c 53 50 73 20 77 69 6c 6c 20 74 69 6d 65 20 6f 75 74 20 62 65 66 6f 72 65 20 74 68 65 | se.LSPs.will.time.out.before.the |
7eec0 | 79 20 61 72 65 20 72 65 66 72 65 73 68 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | y.are.refreshed..This.command.se |
7eee0 | 74 73 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e | ts.LSP.refresh.interval.in.secon |
7ef00 | 64 73 2e 20 49 53 2d 49 53 20 67 65 6e 65 72 61 74 65 73 20 4c 53 50 73 20 77 68 65 6e 20 74 68 | ds..IS-IS.generates.LSPs.when.th |
7ef20 | 65 20 73 74 61 74 65 20 6f 66 20 61 20 6c 69 6e 6b 20 63 68 61 6e 67 65 73 2e 20 48 6f 77 65 76 | e.state.of.a.link.changes..Howev |
7ef40 | 65 72 2c 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 72 6f 75 74 69 6e 67 20 64 61 74 61 62 | er,.to.ensure.that.routing.datab |
7ef60 | 61 73 65 73 20 6f 6e 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 72 65 6d 61 69 6e 20 63 6f 6e 76 65 | ases.on.all.routers.remain.conve |
7ef80 | 72 67 65 64 2c 20 4c 53 50 73 20 69 6e 20 73 74 61 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 61 72 | rged,.LSPs.in.stable.networks.ar |
7efa0 | 65 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 61 20 72 65 67 75 6c 61 72 20 62 61 73 69 73 20 65 | e.generated.on.a.regular.basis.e |
7efc0 | 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 65 20 68 61 73 20 62 65 65 6e 20 6e 6f 20 63 68 61 | ven.though.there.has.been.no.cha |
7efe0 | 6e 67 65 20 74 6f 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 6c 69 6e 6b 73 2e 20 54 | nge.to.the.state.of.the.links..T |
7f000 | 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 32 33 35 2e | he.interval.range.is.1.to.65235. |
7f020 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 39 30 30 20 73 65 63 6f 6e 64 | .The.default.value.is.900.second |
7f040 | 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4f 53 50 46 20 61 75 74 68 65 6e | s..This.command.sets.OSPF.authen |
7f060 | 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 | tication.key.to.a.simple.passwor |
7f080 | 64 2e 20 41 66 74 65 72 20 73 65 74 74 69 6e 67 2c 20 61 6c 6c 20 4f 53 50 46 20 70 61 63 6b 65 | d..After.setting,.all.OSPF.packe |
7f0a0 | 74 73 20 61 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 20 4b 65 79 20 68 61 73 20 6c 65 | ts.are.authenticated..Key.has.le |
7f0c0 | 6e 67 74 68 20 75 70 20 74 6f 20 38 20 63 68 61 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | ngth.up.to.8.chars..This.command |
7f0e0 | 20 73 65 74 73 20 50 53 4e 50 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 | .sets.PSNP.interval.in.seconds.. |
7f100 | 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e 00 | The.interval.range.is.0.to.127.. |
7f120 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 52 6f 75 74 65 72 20 50 72 69 6f 72 69 74 | This.command.sets.Router.Priorit |
7f140 | 79 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 | y.integer.value..The.router.with |
7f160 | 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 20 6d 6f | .the.highest.priority.will.be.mo |
7f180 | 72 65 20 65 6c 69 67 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 64 | re.eligible.to.become.Designated |
7f1a0 | 20 52 6f 75 74 65 72 2e 20 53 65 74 74 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 74 6f 20 30 2c | .Router..Setting.the.value.to.0, |
7f1c0 | 20 6d 61 6b 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 6e 65 6c 69 67 69 62 6c 65 20 74 6f 20 | .makes.the.router.ineligible.to. |
7f1e0 | 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 2e 20 54 68 65 20 64 65 | become.Designated.Router..The.de |
7f200 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 | fault.value.is.1..The.interval.r |
7f220 | 61 6e 67 65 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ange.is.0.to.255..This.command.s |
7f240 | 65 74 73 20 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 61 6e 63 65 20 74 6f 20 61 20 73 70 | ets.default.RIP.distance.to.a.sp |
7f260 | 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 73 20 73 6f | ecified.value.when.the.routes.so |
7f280 | 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 | urce.IP.address.matches.the.spec |
7f2a0 | 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 | ified.prefix..This.command.sets. |
7f2c0 | 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 6f 6e 20 61 20 67 | hello.interval.in.seconds.on.a.g |
7f2e0 | 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 | iven.interface..The.range.is.1.t |
7f300 | 6f 20 36 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6c 69 6e 6b 20 63 6f | o.600..This.command.sets.link.co |
7f320 | 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 | st.for.the.specified.interface.. |
7f340 | 54 68 65 20 63 6f 73 74 20 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f 20 72 6f 75 74 65 72 2d | The.cost.value.is.set.to.router- |
7f360 | 4c 53 41 e2 80 99 73 20 6d 65 74 72 69 63 20 66 69 65 6c 64 20 61 6e 64 20 75 73 65 64 20 66 6f | LSA...s.metric.field.and.used.fo |
7f380 | 72 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 | r.SPF.calculation..The.cost.rang |
7f3a0 | 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | e.is.1.to.65535..This.command.se |
7f3c0 | 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 | ts.minimum.interval.between.cons |
7f3e0 | 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 73 65 63 6f | ecutive.SPF.calculations.in.seco |
7f400 | 6e 64 73 2e 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 | nds.The.interval.range.is.1.to.1 |
7f420 | 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e | 20..This.command.sets.minimum.in |
7f440 | 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 72 65 67 65 6e 65 | terval.in.seconds.between.regene |
7f460 | 72 61 74 69 6e 67 20 73 61 6d 65 20 4c 53 50 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 | rating.same.LSP..The.interval.ra |
7f480 | 6e 67 65 20 69 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 | nge.is.1.to.120..This.command.se |
7f4a0 | 74 73 20 6d 75 6c 74 69 70 6c 69 65 72 20 66 6f 72 20 68 65 6c 6c 6f 20 68 6f 6c 64 69 6e 67 20 | ts.multiplier.for.hello.holding. |
7f4c0 | 74 69 6d 65 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 | time.on.a.given.interface..The.r |
7f4e0 | 61 6e 67 65 20 69 73 20 32 20 74 6f 20 31 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ange.is.2.to.100..This.command.s |
7f500 | 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 49 6e 66 54 72 61 | ets.number.of.seconds.for.InfTra |
7f520 | 6e 73 44 65 6c 61 79 20 76 61 6c 75 65 2e 20 49 74 20 61 6c 6c 6f 77 73 20 74 6f 20 73 65 74 20 | nsDelay.value..It.allows.to.set. |
7f540 | 61 6e 64 20 61 64 6a 75 73 74 20 66 6f 72 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 74 68 | and.adjust.for.each.interface.th |
7f560 | 65 20 64 65 6c 61 79 20 69 6e 74 65 72 76 61 6c 20 62 65 66 6f 72 65 20 73 74 61 72 74 69 6e 67 | e.delay.interval.before.starting |
7f580 | 20 74 68 65 20 73 79 6e 63 68 72 6f 6e 69 7a 69 6e 67 20 70 72 6f 63 65 73 73 20 6f 66 20 74 68 | .the.synchronizing.process.of.th |
7f5a0 | 65 20 72 6f 75 74 65 72 27 73 20 64 61 74 61 62 61 73 65 20 77 69 74 68 20 61 6c 6c 20 6e 65 69 | e.router's.database.with.all.nei |
7f5c0 | 67 68 62 6f 72 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 20 73 | ghbors..The.default.value.is.1.s |
7f5e0 | 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 20 | econds..The.interval.range.is.3. |
7f600 | 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d 62 | to.65535..This.command.sets.numb |
7f620 | 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 52 78 6d 74 49 6e 74 65 72 76 61 6c 20 74 | er.of.seconds.for.RxmtInterval.t |
7f640 | 69 6d 65 72 20 76 61 6c 75 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 77 | imer.value..This.value.is.used.w |
7f660 | 68 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 44 61 74 61 62 61 73 65 20 44 65 73 63 | hen.retransmitting.Database.Desc |
7f680 | 72 69 70 74 69 6f 6e 20 61 6e 64 20 4c 69 6e 6b 20 53 74 61 74 65 20 52 65 71 75 65 73 74 20 70 | ription.and.Link.State.Request.p |
7f6a0 | 61 63 6b 65 74 73 20 69 66 20 61 63 6b 6e 6f 77 6c 65 64 67 65 20 77 61 73 20 6e 6f 74 20 72 65 | ackets.if.acknowledge.was.not.re |
7f6c0 | 63 65 69 76 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 35 20 73 | ceived..The.default.value.is.5.s |
7f6e0 | 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 20 | econds..The.interval.range.is.3. |
7f700 | 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 6c 64 2d | to.65535..This.command.sets.old- |
7f720 | 73 74 79 6c 65 20 28 49 53 4f 20 31 30 35 38 39 29 20 6f 72 20 6e 65 77 20 73 74 79 6c 65 20 70 | style.(ISO.10589).or.new.style.p |
7f740 | 61 63 6b 65 74 20 66 6f 72 6d 61 74 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 | acket.formats:.This.command.sets |
7f760 | 20 6f 74 68 65 72 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 73 20 3c 6e 73 75 62 61 73 6e 3e 20 | .other.confederations.<nsubasn>. |
7f780 | 61 73 20 6d 65 6d 62 65 72 73 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 | as.members.of.autonomous.system. |
7f7a0 | 73 70 65 63 69 66 69 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 63 6f 6e 66 65 64 65 72 61 74 | specified.by.:cfgcmd:`confederat |
7f7c0 | 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 20 3c 61 73 6e 3e 60 2e 00 54 68 69 73 20 63 6f 6d 6d | ion.identifier.<asn>`..This.comm |
7f7e0 | 61 6e 64 20 73 65 74 73 20 6f 76 65 72 6c 6f 61 64 20 62 69 74 20 74 6f 20 61 76 6f 69 64 20 61 | and.sets.overload.bit.to.avoid.a |
7f800 | 6e 79 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 69 73 20 | ny.transit.traffic.through.this. |
7f820 | 72 6f 75 74 65 72 2e 20 49 74 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a | router..It.is.described.in.:rfc: |
7f840 | 60 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 70 72 69 6f 72 69 | `3787`..This.command.sets.priori |
7f860 | 74 79 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 3a 61 62 62 72 3a 60 | ty.for.the.interface.for.:abbr:` |
7f880 | 44 49 53 20 28 44 65 73 69 67 6e 61 74 65 64 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 | DIS.(Designated.Intermediate.Sys |
7f8a0 | 74 65 6d 29 60 20 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 70 72 69 6f 72 69 74 79 20 72 61 6e | tem)`.election..The.priority.ran |
7f8c0 | 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 | ge.is.0.to.127..This.command.set |
7f8e0 | 73 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 66 6f | s.the.administrative.distance.fo |
7f900 | 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 72 6f 75 74 65 2e 20 54 68 65 20 64 69 73 74 61 6e | r.a.particular.route..The.distan |
7f920 | 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | ce.range.is.1.to.255..This.comma |
7f940 | 6e 64 20 73 65 74 73 20 74 68 65 20 63 6f 73 74 20 6f 66 20 64 65 66 61 75 6c 74 2d 73 75 6d 6d | nd.sets.the.cost.of.default-summ |
7f960 | 61 72 79 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 73 74 75 62 62 79 20 61 72 65 | ary.LSAs.announced.to.stubby.are |
7f980 | 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 | as..The.cost.range.is.0.to.16777 |
7f9a0 | 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 64 65 66 61 75 | 215..This.command.sets.the.defau |
7f9c0 | 6c 74 20 63 6f 73 74 20 6f 66 20 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 4e 53 53 | lt.cost.of.LSAs.announced.to.NSS |
7f9e0 | 41 20 61 72 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 | A.areas..The.cost.range.is.0.to. |
7fa00 | 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 | 16777215..This.command.sets.the. |
7fa20 | 69 6e 69 74 69 61 6c 20 64 65 6c 61 79 2c 20 74 68 65 20 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 74 | initial.delay,.the.initial-holdt |
7fa40 | 69 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 2d 68 6f 6c 64 74 69 6d 65 20 62 65 74 | ime.and.the.maximum-holdtime.bet |
7fa60 | 77 65 65 6e 20 77 68 65 6e 20 53 50 46 20 69 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 6e 64 20 | ween.when.SPF.is.calculated.and. |
7fa80 | 74 68 65 20 65 76 65 6e 74 20 77 68 69 63 68 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 63 61 | the.event.which.triggered.the.ca |
7faa0 | 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 65 20 74 69 6d 65 73 20 61 72 65 20 73 70 65 63 69 66 69 | lculation..The.times.are.specifi |
7fac0 | 65 64 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 61 6e 64 20 6d 75 73 74 20 62 65 20 69 | ed.in.milliseconds.and.must.be.i |
7fae0 | 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 30 20 74 6f 20 36 30 30 30 30 30 20 6d 69 6c 6c 69 | n.the.range.of.0.to.600000.milli |
7fb00 | 73 65 63 6f 6e 64 73 2e 20 3a 63 66 67 63 6d 64 3a 60 64 65 6c 61 79 60 20 73 65 74 73 20 74 68 | seconds..:cfgcmd:`delay`.sets.th |
7fb20 | 65 20 69 6e 69 74 69 61 6c 20 53 50 46 20 73 63 68 65 64 75 6c 65 20 64 65 6c 61 79 20 69 6e 20 | e.initial.SPF.schedule.delay.in. |
7fb40 | 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 | milliseconds..The.default.value. |
7fb60 | 69 73 20 32 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 | is.200.ms..:cfgcmd:`initial-hold |
7fb80 | 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 68 6f 6c 64 20 74 69 6d 65 | time`.sets.the.minimum.hold.time |
7fba0 | 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c | .between.two.consecutive.SPF.cal |
7fbc0 | 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 | culations..The.default.value.is. |
7fbe0 | 31 30 30 30 20 6d 73 2e 20 3a 63 66 67 63 6d 64 3a 60 6d 61 78 2d 68 6f 6c 64 74 69 6d 65 60 20 | 1000.ms..:cfgcmd:`max-holdtime`. |
7fc00 | 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 77 61 69 74 20 74 69 6d 65 20 62 65 74 77 65 | sets.the.maximum.wait.time.betwe |
7fc20 | 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 | en.two.consecutive.SPF.calculati |
7fc40 | 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 20 | ons..The.default.value.is.10000. |
7fc60 | 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 | ms..This.command.sets.the.interf |
7fc80 | 61 63 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 74 69 | ace.bandwidth.for.cost.calculati |
7fca0 | 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e 20 72 | ons,.where.bandwidth.can.be.in.r |
7fcc0 | 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 31 30 30 30 30 30 2c 20 73 70 65 63 69 66 69 65 64 | ange.from.1.to.100000,.specified |
7fce0 | 20 69 6e 20 4d 62 69 74 73 2f 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 | .in.Mbits/s..This.command.sets.t |
7fd00 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | he.interface.type:.This.command. |
7fd20 | 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 52 49 50 20 4d 44 35 20 | sets.the.interface.with.RIP.MD5. |
7fd40 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 | authentication..This.command.als |
7fd60 | 6f 20 73 65 74 73 20 4d 44 35 20 4b 65 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 | o.sets.MD5.Key..The.key.must.be. |
7fd80 | 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2e 00 54 68 69 73 | shorter.than.16.characters..This |
7fda0 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 | .command.sets.the.interface.with |
7fdc0 | 20 52 49 50 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 | .RIP.simple.password.authenticat |
7fde0 | 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 61 75 74 68 | ion..This.command.also.sets.auth |
7fe00 | 65 6e 74 69 63 61 74 69 6f 6e 20 73 74 72 69 6e 67 2e 20 54 68 65 20 73 74 72 69 6e 67 20 6d 75 | entication.string..The.string.mu |
7fe20 | 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 | st.be.shorter.than.16.characters |
7fe40 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 69 | ..This.command.sets.the.multipli |
7fe60 | 63 61 74 69 76 65 20 66 61 63 74 6f 72 20 75 73 65 64 20 66 6f 72 20 64 69 76 65 72 73 69 74 79 | cative.factor.used.for.diversity |
7fe80 | 20 72 6f 75 74 69 6e 67 2c 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 3b 20 6c 6f 77 | .routing,.in.units.of.1/256;.low |
7fea0 | 65 72 20 76 61 6c 75 65 73 20 63 61 75 73 65 20 64 69 76 65 72 73 69 74 79 20 74 6f 20 70 6c 61 | er.values.cause.diversity.to.pla |
7fec0 | 79 20 61 20 6d 6f 72 65 20 69 6d 70 6f 72 74 61 6e 74 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 65 | y.a.more.important.role.in.route |
7fee0 | 20 73 65 6c 65 63 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 74 20 32 35 36 2c 20 | .selection..The.default.it.256,. |
7ff00 | 77 68 69 63 68 20 6d 65 61 6e 73 20 74 68 61 74 20 64 69 76 65 72 73 69 74 79 20 70 6c 61 79 73 | which.means.that.diversity.plays |
7ff20 | 20 6e 6f 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 3b 20 79 6f 75 | .no.role.in.route.selection;.you |
7ff40 | 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 74 68 61 74 20 | .will.probably.want.to.set.that. |
7ff60 | 74 6f 20 31 32 38 20 6f 72 20 6c 65 73 73 20 6f 6e 20 6e 6f 64 65 73 20 77 69 74 68 20 6d 75 6c | to.128.or.less.on.nodes.with.mul |
7ff80 | 74 69 70 6c 65 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 72 61 64 69 6f 73 2e 00 54 68 69 73 20 63 | tiple.independent.radios..This.c |
7ffa0 | 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 65 66 65 72 65 6e 63 65 20 62 61 6e 64 77 69 | ommand.sets.the.reference.bandwi |
7ffc0 | 64 74 68 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 65 | dth.for.cost.calculations,.where |
7ffe0 | 20 62 61 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 | .bandwidth.can.be.in.range.from. |
80000 | 31 20 74 6f 20 34 32 39 34 39 36 37 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 73 | 1.to.4294967,.specified.in.Mbits |
80020 | 2f 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 30 4d 62 69 74 2f 73 20 28 69 2e | /s..The.default.is.100Mbit/s.(i. |
80040 | 65 2e 20 61 20 6c 69 6e 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 31 30 30 4d 62 69 74 2f 73 | e..a.link.of.bandwidth.100Mbit/s |
80060 | 20 6f 72 20 68 69 67 68 65 72 20 77 69 6c 6c 20 68 61 76 65 20 61 20 63 6f 73 74 20 6f 66 20 31 | .or.higher.will.have.a.cost.of.1 |
80080 | 2e 20 43 6f 73 74 20 6f 66 20 6c 6f 77 65 72 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6e 6b 73 20 | ..Cost.of.lower.bandwidth.links. |
800a0 | 77 69 6c 6c 20 62 65 20 73 63 61 6c 65 64 20 77 69 74 68 20 72 65 66 65 72 65 6e 63 65 20 74 6f | will.be.scaled.with.reference.to |
800c0 | 20 74 68 69 73 20 63 6f 73 74 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 | .this.cost)..This.command.sets.t |
800e0 | 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 | he.router-ID.of.the.OSPF.process |
80100 | 2e 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 61 64 64 | ..The.router-ID.may.be.an.IP.add |
80120 | 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 6e 6f 74 | ress.of.the.router,.but.need.not |
80140 | 20 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 72 79 20 | .be.....it.can.be.any.arbitrary. |
80160 | 33 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 20 62 65 | 32bit.number..However.it.MUST.be |
80180 | 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 46 20 64 | .unique.within.the.entire.OSPF.d |
801a0 | 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 61 | omain.to.the.OSPF.speaker.....ba |
801c0 | 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c 65 | d.things.will.happen.if.multiple |
801e0 | 20 4f 53 50 46 20 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 | .OSPF.speakers.are.configured.wi |
80200 | 74 68 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d 6d | th.the.same.router-ID!.This.comm |
80220 | 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 4f 53 | and.sets.the.router-ID.of.the.OS |
80240 | 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 20 | PFv3.process..The.router-ID.may. |
80260 | 62 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c 20 | be.an.IP.address.of.the.router,. |
80280 | 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 6e | but.need.not.be.....it.can.be.an |
802a0 | 79 20 61 72 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 65 | y.arbitrary.32bit.number..Howeve |
802c0 | 72 20 69 74 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 65 | r.it.MUST.be.unique.within.the.e |
802e0 | 6e 74 69 72 65 20 4f 53 50 46 76 33 20 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 76 | ntire.OSPFv3.domain.to.the.OSPFv |
80300 | 33 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 61 | 3.speaker.....bad.things.will.ha |
80320 | 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 73 | ppen.if.multiple.OSPFv3.speakers |
80340 | 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 6f | .are.configured.with.the.same.ro |
80360 | 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 73 | uter-ID!.This.command.sets.the.s |
80380 | 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 61 73 73 69 76 65 20 6d 6f | pecified.interface.to.passive.mo |
803a0 | 64 65 2e 20 4f 6e 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 69 6e 74 65 72 66 61 63 65 2c 20 61 | de..On.passive.mode.interface,.a |
803c0 | 6c 6c 20 72 65 63 65 69 76 69 6e 67 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 | ll.receiving.packets.are.process |
803e0 | 65 64 20 61 73 20 6e 6f 72 6d 61 6c 20 61 6e 64 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 73 | ed.as.normal.and.VyOS.does.not.s |
80400 | 65 6e 64 20 65 69 74 68 65 72 20 6d 75 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 63 61 73 74 20 | end.either.multicast.or.unicast. |
80420 | 52 49 50 20 70 61 63 6b 65 74 73 20 65 78 63 65 70 74 20 74 6f 20 52 49 50 20 6e 65 69 67 68 62 | RIP.packets.except.to.RIP.neighb |
80440 | 6f 72 73 20 73 70 65 63 69 66 69 65 64 20 77 69 74 68 20 6e 65 69 67 68 62 6f 72 20 63 6f 6d 6d | ors.specified.with.neighbor.comm |
80460 | 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 4e 4f 54 20 62 65 20 | and..This.command.should.NOT.be. |
80480 | 73 65 74 20 6e 6f 72 6d 61 6c 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 | set.normally..This.command.shows |
804a0 | 20 62 6f 74 68 20 73 74 61 74 75 73 20 61 6e 64 20 73 74 61 74 69 73 74 69 63 73 20 6f 6e 20 74 | .both.status.and.statistics.on.t |
804c0 | 68 65 20 73 70 65 63 69 66 69 65 64 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e | he.specified.wireless.interface. |
804e0 | 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 | .The.wireless.interface.identifi |
80500 | 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 | er.can.range.from.wlan0.to.wlan9 |
80520 | 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 42 47 50 | 99..This.command.specifies.a.BGP |
80540 | 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 72 2e 20 3c 61 73 6e 3e | .confederation.identifier..<asn> |
80560 | 20 69 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 | .is.the.number.of.the.autonomous |
80580 | 20 73 79 73 74 65 6d 20 74 68 61 74 20 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 63 6c 75 64 65 73 | .system.that.internally.includes |
805a0 | 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 2d 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 73 | .multiple.sub-autonomous.systems |
805c0 | 20 28 61 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | .(a.confederation)..This.command |
805e0 | 20 73 70 65 63 69 66 69 65 73 20 61 20 42 61 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 | .specifies.a.Babel.enabled.inter |
80600 | 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f 74 68 20 74 68 65 | face.by.interface.name..Both.the |
80620 | 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f 66 20 42 61 62 65 6c 20 | .sending.and.receiving.of.Babel. |
80640 | 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 68 65 20 69 | packets.will.be.enabled.on.the.i |
80660 | 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d 61 | nterface.specified.in.this.comma |
80680 | 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 4d 44 35 | nd..This.command.specifies.a.MD5 |
806a0 | 20 70 61 73 73 77 6f 72 64 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 74 68 65 20 74 63 | .password.to.be.used.with.the.tc |
806c0 | 70 20 73 6f 63 6b 65 74 20 74 68 61 74 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 74 6f 20 63 | p.socket.that.is.being.used.to.c |
806e0 | 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 00 54 68 69 73 20 | onnect.to.the.remote.peer..This. |
80700 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 65 6e 61 62 6c 65 64 20 | command.specifies.a.RIP.enabled. |
80720 | 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f 74 | interface.by.interface.name..Bot |
80740 | 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f 66 20 52 | h.the.sending.and.receiving.of.R |
80760 | 49 50 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 68 | IP.packets.will.be.enabled.on.th |
80780 | 65 20 70 6f 72 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.port.specified.in.this.command |
807a0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 6e | ..This.command.specifies.a.RIP.n |
807c0 | 65 69 67 68 62 6f 72 2e 20 57 68 65 6e 20 61 20 6e 65 69 67 68 62 6f 72 20 64 6f 65 73 6e e2 80 | eighbor..When.a.neighbor.doesn.. |
807e0 | 99 74 20 75 6e 64 65 72 73 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 69 73 20 63 6f | .t.understand.multicast,.this.co |
80800 | 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 6e 65 69 67 68 62 6f | mmand.is.used.to.specify.neighbo |
80820 | 72 73 2e 20 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 6e 6f 74 20 61 6c 6c 20 72 6f 75 74 65 | rs..In.some.cases,.not.all.route |
80840 | 72 73 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 6d 75 | rs.will.be.able.to.understand.mu |
80860 | 6c 74 69 63 61 73 74 69 6e 67 2c 20 77 68 65 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 65 | lticasting,.where.packets.are.se |
80880 | 6e 74 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 6f 72 20 61 20 67 72 6f 75 70 20 6f 66 20 61 64 | nt.to.a.network.or.a.group.of.ad |
808a0 | 64 72 65 73 73 65 73 2e 20 49 6e 20 61 20 73 69 74 75 61 74 69 6f 6e 20 77 68 65 72 65 20 61 20 | dresses..In.a.situation.where.a. |
808c0 | 6e 65 69 67 68 62 6f 72 20 63 61 6e 6e 6f 74 20 70 72 6f 63 65 73 73 20 6d 75 6c 74 69 63 61 73 | neighbor.cannot.process.multicas |
808e0 | 74 20 70 61 63 6b 65 74 73 2c 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 73 | t.packets,.it.is.necessary.to.es |
80900 | 74 61 62 6c 69 73 68 20 61 20 64 69 72 65 63 74 20 6c 69 6e 6b 20 62 65 74 77 65 65 6e 20 72 6f | tablish.a.direct.link.between.ro |
80920 | 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 | uters..This.command.specifies.a. |
80940 | 64 65 66 61 75 6c 74 20 77 65 69 67 68 74 20 76 61 6c 75 65 20 66 6f 72 20 74 68 65 20 6e 65 69 | default.weight.value.for.the.nei |
80960 | 67 68 62 6f 72 e2 80 99 73 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 6e | ghbor...s.routes..The.number.ran |
80980 | 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | ge.is.1.to.65535..This.command.s |
809a0 | 70 65 63 69 66 69 65 73 20 61 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 72 65 | pecifies.a.maximum.number.of.pre |
809c0 | 66 69 78 65 73 20 77 65 20 63 61 6e 20 72 65 63 65 69 76 65 20 66 72 6f 6d 20 61 20 67 69 76 65 | fixes.we.can.receive.from.a.give |
809e0 | 6e 20 70 65 65 72 2e 20 49 66 20 74 68 69 73 20 6e 75 6d 62 65 72 20 69 73 20 65 78 63 65 65 64 | n.peer..If.this.number.is.exceed |
80a00 | 65 64 2c 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 73 74 | ed,.the.BGP.session.will.be.dest |
80a20 | 72 6f 79 65 64 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 | royed..The.number.range.is.1.to. |
80a40 | 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | 4294967295..This.command.specifi |
80a60 | 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 61 73 20 70 61 73 73 69 76 65 20 62 79 20 | es.all.interfaces.as.passive.by. |
80a80 | 64 65 66 61 75 6c 74 2e 20 42 65 63 61 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 | default..Because.this.command.ch |
80aa0 | 61 6e 67 65 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 6f 67 69 63 20 74 6f | anges.the.configuration.logic.to |
80ac0 | 20 61 20 64 65 66 61 75 6c 74 20 70 61 73 73 69 76 65 3b 20 74 68 65 72 65 66 6f 72 65 2c 20 69 | .a.default.passive;.therefore,.i |
80ae0 | 6e 74 65 72 66 61 63 65 73 20 77 68 65 72 65 20 72 6f 75 74 65 72 20 61 64 6a 61 63 65 6e 63 69 | nterfaces.where.router.adjacenci |
80b00 | 65 73 20 61 72 65 20 65 78 70 65 63 74 65 64 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 | es.are.expected.need.to.be.confi |
80b20 | 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 2d | gured.with.the.:cfgcmd:`passive- |
80b40 | 69 6e 74 65 72 66 61 63 65 2d 65 78 63 6c 75 64 65 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 | interface-exclude`.command..This |
80b60 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 | .command.specifies.all.interface |
80b80 | 73 20 74 6f 20 70 61 73 73 69 76 65 20 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | s.to.passive.mode..This.command. |
80ba0 | 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 61 | specifies.an.aggregate.address.a |
80bc0 | 6e 64 20 70 72 6f 76 69 64 65 73 20 74 68 61 74 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 73 | nd.provides.that.longer-prefixes |
80be0 | 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 | .inside.of.the.aggregate.address |
80c00 | 20 61 72 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 42 | .are.suppressed.before.sending.B |
80c20 | 47 50 20 75 70 64 61 74 65 73 20 6f 75 74 20 74 6f 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f | GP.updates.out.to.peers..This.co |
80c40 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 | mmand.specifies.an.aggregate.add |
80c60 | 72 65 73 73 20 77 69 74 68 20 61 20 6d 61 74 68 65 6d 61 74 69 63 61 6c 20 73 65 74 20 6f 66 20 | ress.with.a.mathematical.set.of. |
80c80 | 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | autonomous.systems..This.command |
80ca0 | 20 73 75 6d 6d 61 72 69 7a 65 73 20 74 68 65 20 41 53 5f 50 41 54 48 20 61 74 74 72 69 62 75 74 | .summarizes.the.AS_PATH.attribut |
80cc0 | 65 73 20 6f 66 20 61 6c 6c 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 72 6f 75 74 65 73 2e | es.of.all.the.individual.routes. |
80ce0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 | .This.command.specifies.an.aggre |
80d00 | 67 61 74 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 6c | gate.address..The.router.will.al |
80d20 | 73 6f 20 61 6e 6e 6f 75 6e 63 65 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 73 20 69 6e 73 69 | so.announce.longer-prefixes.insi |
80d40 | 64 65 20 6f 66 20 74 68 65 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 2e 00 54 68 69 | de.of.the.aggregate.address..Thi |
80d60 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 74 74 72 69 62 75 74 65 73 20 74 | s.command.specifies.attributes.t |
80d80 | 6f 20 62 65 20 6c 65 66 74 20 75 6e 63 68 61 6e 67 65 64 20 66 6f 72 20 61 64 76 65 72 74 69 73 | o.be.left.unchanged.for.advertis |
80da0 | 65 6d 65 6e 74 73 20 73 65 6e 74 20 74 6f 20 61 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 | ements.sent.to.a.peer.or.peer.gr |
80dc0 | 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 69 72 63 | oup..This.command.specifies.circ |
80de0 | 75 69 74 20 74 79 70 65 20 66 6f 72 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 20 63 6f 6d | uit.type.for.interface:.This.com |
80e00 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 6c 75 73 74 65 72 20 49 44 20 77 68 69 63 68 20 | mand.specifies.cluster.ID.which. |
80e20 | 69 64 65 6e 74 69 66 69 65 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 | identifies.a.collection.of.route |
80e40 | 20 72 65 66 6c 65 63 74 6f 72 73 20 61 6e 64 20 74 68 65 69 72 20 63 6c 69 65 6e 74 73 2c 20 61 | .reflectors.and.their.clients,.a |
80e60 | 6e 64 20 69 73 20 75 73 65 64 20 62 79 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 74 | nd.is.used.by.route.reflectors.t |
80e80 | 6f 20 61 76 6f 69 64 20 6c 6f 6f 70 69 6e 67 2e 20 42 79 20 64 65 66 61 75 6c 74 20 63 6c 75 73 | o.avoid.looping..By.default.clus |
80ea0 | 74 65 72 20 49 44 20 69 73 20 73 65 74 20 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 | ter.ID.is.set.to.the.BGP.router. |
80ec0 | 69 64 20 76 61 6c 75 65 2c 20 62 75 74 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 61 6e 20 61 | id.value,.but.can.be.set.to.an.a |
80ee0 | 72 62 69 74 72 61 72 79 20 33 32 2d 62 69 74 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d 6d | rbitrary.32-bit.value..This.comm |
80f00 | 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 68 6f 6c 64 2d 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e | and.specifies.hold-time.in.secon |
80f20 | 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 34 20 74 6f 20 36 35 35 33 | ds..The.timer.range.is.4.to.6553 |
80f40 | 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 6f | 5..The.default.value.is.180.seco |
80f60 | 6e 64 2e 20 49 66 20 79 6f 75 20 73 65 74 20 76 61 6c 75 65 20 74 6f 20 30 20 56 79 4f 53 20 77 | nd..If.you.set.value.to.0.VyOS.w |
80f80 | 69 6c 6c 20 6e 6f 74 20 68 6f 6c 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ill.not.hold.routes..This.comman |
80fa0 | 64 20 73 70 65 63 69 66 69 65 73 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 70 61 73 73 69 76 65 | d.specifies.interface.as.passive |
80fc0 | 2e 20 50 61 73 73 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 76 65 72 74 69 73 65 73 20 69 | ..Passive.interface.advertises.i |
80fe0 | 74 73 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 72 75 6e 20 74 68 65 | ts.address,.but.does.not.run.the |
81000 | 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 28 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 | .OSPF.protocol.(adjacencies.are. |
81020 | 6e 6f 74 20 66 6f 72 6d 65 64 20 61 6e 64 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 65 | not.formed.and.hello.packets.are |
81040 | 20 6e 6f 74 20 67 65 6e 65 72 61 74 65 64 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | .not.generated)..This.command.sp |
81060 | 65 63 69 66 69 65 73 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e | ecifies.keep-alive.time.in.secon |
81080 | 64 73 2e 20 54 68 65 20 74 69 6d 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 34 20 74 | ds..The.timer.can.range.from.4.t |
810a0 | 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 | o.65535..The.default.value.is.60 |
810c0 | 20 73 65 63 6f 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | .second..This.command.specifies. |
810e0 | 6d 65 74 72 69 63 20 28 4d 45 44 29 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 | metric.(MED).for.redistributed.r |
81100 | 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 | outes..The.metric.range.is.0.to. |
81120 | 34 32 39 34 39 36 37 32 39 35 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 | 4294967295..There.are.six.modes. |
81140 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e | available.for.route.source:.conn |
81160 | 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 | ected,.kernel,.ospf,.rip,.static |
81180 | 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | ,.table..This.command.specifies. |
811a0 | 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 | metric.for.redistributed.routes. |
811c0 | 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 | from.the.given.route.source..The |
811e0 | 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 | re.are.five.modes.available.for. |
81200 | 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 | route.source:.bgp,.connected,.ke |
81220 | 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 | rnel,.ospf,.static..The.metric.r |
81240 | 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | ange.is.1.to.16..This.command.sp |
81260 | 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 | ecifies.metric.for.redistributed |
81280 | 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 | .routes.from.the.given.route.sou |
812a0 | 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 | rce..There.are.five.modes.availa |
812c0 | 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 | ble.for.route.source:.bgp,.conne |
812e0 | 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d | cted,.kernel,.rip,.static..The.m |
81300 | 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 34 2e 00 54 68 | etric.range.is.1.to.16777214..Th |
81320 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 | is.command.specifies.metric.for. |
81340 | 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 | redistributed.routes.from.the.gi |
81360 | 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 | ven.route.source..There.are.six. |
81380 | 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | modes.available.for.route.source |
813a0 | 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 | :.bgp,.connected,.kernel,.ospf,. |
813c0 | 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 | rip,.static..The.metric.range.is |
813e0 | 20 31 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | .1.to.16777215..This.command.spe |
81400 | 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 74 79 70 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 | cifies.metric.type.for.redistrib |
81420 | 75 74 65 64 20 72 6f 75 74 65 73 2e 20 44 69 66 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 | uted.routes..Difference.between. |
81440 | 74 77 6f 20 6d 65 74 72 69 63 20 74 79 70 65 73 20 74 68 61 74 20 6d 65 74 72 69 63 20 74 79 70 | two.metric.types.that.metric.typ |
81460 | 65 20 31 20 69 73 20 61 20 6d 65 74 72 69 63 20 77 68 69 63 68 20 69 73 20 22 63 6f 6d 6d 65 6e | e.1.is.a.metric.which.is."commen |
81480 | 73 75 72 61 62 6c 65 22 20 77 69 74 68 20 69 6e 6e 65 72 20 4f 53 50 46 20 6c 69 6e 6b 73 2e 20 | surable".with.inner.OSPF.links.. |
814a0 | 57 68 65 6e 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 61 20 6d 65 74 72 69 63 20 74 6f 20 74 68 65 | When.calculating.a.metric.to.the |
814c0 | 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 74 68 65 20 66 75 6c 6c 20 | .external.destination,.the.full. |
814e0 | 70 61 74 68 20 6d 65 74 72 69 63 20 69 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 73 20 61 20 6d | path.metric.is.calculated.as.a.m |
81500 | 65 74 72 69 63 20 73 75 6d 20 70 61 74 68 20 6f 66 20 61 20 72 6f 75 74 65 72 20 77 68 69 63 68 | etric.sum.path.of.a.router.which |
81520 | 20 68 61 64 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 70 6c 75 73 20 74 | .had.advertised.this.link.plus.t |
81540 | 68 65 20 6c 69 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 75 73 2c 20 61 20 72 6f 75 74 65 20 77 69 | he.link.metric..Thus,.a.route.wi |
81560 | 74 68 20 74 68 65 20 6c 65 61 73 74 20 73 75 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 77 69 6c 6c | th.the.least.summary.metric.will |
81580 | 20 62 65 20 73 65 6c 65 63 74 65 64 2e 20 49 66 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 69 | .be.selected..If.external.link.i |
815a0 | 73 20 61 64 76 65 72 74 69 73 65 64 20 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 20 | s.advertised.with.metric.type.2. |
815c0 | 74 68 65 20 70 61 74 68 20 69 73 20 73 65 6c 65 63 74 65 64 20 77 68 69 63 68 20 6c 69 65 73 20 | the.path.is.selected.which.lies. |
815e0 | 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 65 72 74 69 | through.the.router.which.adverti |
81600 | 73 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 77 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 6d 65 74 | sed.this.link.with.the.least.met |
81620 | 72 69 63 20 64 65 73 70 69 74 65 20 6f 66 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 69 6e 74 | ric.despite.of.the.fact.that.int |
81640 | 65 72 6e 61 6c 20 70 61 74 68 20 74 6f 20 74 68 69 73 20 72 6f 75 74 65 72 20 69 73 20 6c 6f 6e | ernal.path.to.this.router.is.lon |
81660 | 67 65 72 20 28 77 69 74 68 20 6d 6f 72 65 20 63 6f 73 74 29 2e 20 48 6f 77 65 76 65 72 2c 20 69 | ger.(with.more.cost)..However,.i |
81680 | 66 20 74 77 6f 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 74 69 73 65 64 20 61 6e 20 65 78 74 65 | f.two.routers.advertised.an.exte |
816a0 | 72 6e 61 6c 20 6c 69 6e 6b 20 61 6e 64 20 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 | rnal.link.and.with.metric.type.2 |
816c0 | 20 74 68 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 20 67 69 76 65 6e 20 74 6f 20 74 68 65 20 | .the.preference.is.given.to.the. |
816e0 | 70 61 74 68 20 77 68 69 63 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 | path.which.lies.through.the.rout |
81700 | 65 72 20 77 69 74 68 20 61 20 73 68 6f 72 74 65 72 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 68 2e | er.with.a.shorter.internal.path. |
81720 | 20 49 66 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 74 | .If.two.different.routers.advert |
81740 | 69 73 65 64 20 74 77 6f 20 6c 69 6e 6b 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 65 78 74 65 72 | ised.two.links.to.the.same.exter |
81760 | 6e 61 6c 20 64 65 73 74 69 6d 61 74 69 6f 6e 20 62 75 74 20 77 69 74 68 20 64 69 66 66 65 72 65 | nal.destimation.but.with.differe |
81780 | 6e 74 20 6d 65 74 72 69 63 20 74 79 70 65 2c 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 20 69 73 | nt.metric.type,.metric.type.1.is |
817a0 | 20 70 72 65 66 65 72 72 65 64 2e 20 49 66 20 74 79 70 65 20 6f 66 20 61 20 6d 65 74 72 69 63 20 | .preferred..If.type.of.a.metric. |
817c0 | 6c 65 66 74 20 75 6e 64 65 66 69 6e 65 64 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 63 | left.undefined.the.router.will.c |
817e0 | 6f 6e 73 69 64 65 72 20 74 68 65 73 65 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 73 20 74 6f 20 | onsider.these.external.links.to. |
81800 | 68 61 76 65 20 61 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 2e 00 54 68 | have.a.default.metric.type.2..Th |
81820 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6e 65 74 77 6f 72 6b 20 74 79 70 | is.command.specifies.network.typ |
81840 | 65 20 74 6f 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | e.to.Point-to-Point..The.default |
81860 | 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 20 69 73 20 62 72 6f 61 64 63 61 73 74 2e 00 54 68 69 73 | .network.type.is.broadcast..This |
81880 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 42 47 50 20 63 6f 6e 73 | .command.specifies.that.BGP.cons |
818a0 | 69 64 65 72 73 20 74 68 65 20 4d 45 44 20 77 68 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f 75 | iders.the.MED.when.comparing.rou |
818c0 | 74 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 75 | tes.originated.from.different.su |
818e0 | 62 2d 41 53 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 74 | b-ASs.within.the.confederation.t |
81900 | 6f 20 77 68 69 63 68 20 74 68 69 73 20 42 47 50 20 73 70 65 61 6b 65 72 20 62 65 6c 6f 6e 67 73 | o.which.this.BGP.speaker.belongs |
81920 | 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 4d | ..The.default.state,.where.the.M |
81940 | 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 2e 00 | ED.attribute.is.not.considered.. |
81960 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 42 47 50 20 | This.command.specifies.that.BGP. |
81980 | 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 20 73 68 6f 75 6c 64 20 63 6f 6e 73 69 64 65 72 | decision.process.should.consider |
819a0 | 20 70 61 74 68 73 20 6f 66 20 65 71 75 61 6c 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 20 63 | .paths.of.equal.AS_PATH.length.c |
819c0 | 61 6e 64 69 64 61 74 65 73 20 66 6f 72 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 61 74 | andidates.for.multipath.computat |
819e0 | 69 6f 6e 2e 20 57 69 74 68 6f 75 74 20 74 68 65 20 6b 6e 6f 62 2c 20 74 68 65 20 65 6e 74 69 72 | ion..Without.the.knob,.the.entir |
81a00 | 65 20 41 53 5f 50 41 54 48 20 6d 75 73 74 20 6d 61 74 63 68 20 66 6f 72 20 6d 75 6c 74 69 70 61 | e.AS_PATH.must.match.for.multipa |
81a20 | 74 68 20 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | th.computation..This.command.spe |
81a40 | 63 69 66 69 65 73 20 74 68 61 74 20 61 20 72 6f 75 74 65 20 77 69 74 68 20 61 20 4d 45 44 20 69 | cifies.that.a.route.with.a.MED.i |
81a60 | 73 20 61 6c 77 61 79 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 62 65 74 74 65 72 | s.always.considered.to.be.better |
81a80 | 20 74 68 61 6e 20 61 20 72 6f 75 74 65 20 77 69 74 68 6f 75 74 20 61 20 4d 45 44 20 62 79 20 63 | .than.a.route.without.a.MED.by.c |
81aa0 | 61 75 73 69 6e 67 20 74 68 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 | ausing.the.missing.MED.attribute |
81ac0 | 20 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 69 6e 66 69 6e 69 74 79 2e 20 54 68 | .to.have.a.value.of.infinity..Th |
81ae0 | 65 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 6d 69 73 73 69 | e.default.state,.where.the.missi |
81b00 | 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 | ng.MED.attribute.is.considered.t |
81b20 | 6f 20 68 61 76 65 20 61 20 76 61 6c 75 65 20 6f 66 20 7a 65 72 6f 2e 00 54 68 69 73 20 63 6f 6d | o.have.a.value.of.zero..This.com |
81b40 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 72 6f 75 74 65 20 75 70 64 61 74 65 | mand.specifies.that.route.update |
81b60 | 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 69 73 20 6e 65 69 67 68 62 6f 72 20 77 69 | s.received.from.this.neighbor.wi |
81b80 | 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 75 6e 6d 6f 64 69 66 69 65 64 2c 20 72 65 67 61 72 64 6c | ll.be.stored.unmodified,.regardl |
81ba0 | 65 73 73 20 6f 66 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 70 6f 6c 69 63 79 2e 20 57 68 65 6e 20 | ess.of.the.inbound.policy..When. |
81bc0 | 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 | inbound.soft.reconfiguration.is. |
81be0 | 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 73 74 6f 72 65 64 20 75 70 64 61 74 65 73 20 61 72 65 20 | enabled,.the.stored.updates.are. |
81c00 | 70 72 6f 63 65 73 73 65 64 20 62 79 20 74 68 65 20 6e 65 77 20 70 6f 6c 69 63 79 20 63 6f 6e 66 | processed.by.the.new.policy.conf |
81c20 | 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 63 72 65 61 74 65 20 6e 65 77 20 69 6e 62 6f 75 6e 64 20 | iguration.to.create.new.inbound. |
81c40 | 75 70 64 61 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | updates..This.command.specifies. |
81c60 | 74 68 61 74 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 | that.simple.password.authenticat |
81c80 | 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e | ion.should.be.used.for.the.given |
81ca0 | 20 61 72 65 61 2e 20 54 68 65 20 70 61 73 73 77 6f 72 64 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 | .area..The.password.must.also.be |
81cc0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 | .configured.on.a.per-interface.b |
81ce0 | 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 | asis..This.command.specifies.tha |
81d00 | 74 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 73 68 6f 75 6c 64 | t.the.community.attribute.should |
81d20 | 20 6e 6f 74 20 62 65 20 73 65 6e 74 20 69 6e 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 74 6f | .not.be.sent.in.route.updates.to |
81d40 | 20 61 20 70 65 65 72 2e 20 42 79 20 64 65 66 61 75 6c 74 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 | .a.peer..By.default.community.at |
81d60 | 74 72 69 62 75 74 65 20 69 73 20 73 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | tribute.is.sent..This.command.sp |
81d80 | 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 63 6f 6e 66 65 | ecifies.that.the.length.of.confe |
81da0 | 64 65 72 61 74 69 6f 6e 20 70 61 74 68 20 73 65 74 73 20 61 6e 64 20 73 65 71 75 65 6e 63 65 73 | deration.path.sets.and.sequences |
81dc0 | 20 73 68 6f 75 6c 64 20 62 65 20 74 61 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 64 75 | .should.be.taken.into.account.du |
81de0 | 72 69 6e 67 20 74 68 65 20 42 47 50 20 62 65 73 74 20 70 61 74 68 20 64 65 63 69 73 69 6f 6e 20 | ring.the.BGP.best.path.decision. |
81e00 | 70 72 6f 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 | process..This.command.specifies. |
81e20 | 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6e 65 69 67 68 62 6f 72 69 6e | the.IP.address.of.the.neighborin |
81e40 | 67 20 64 65 76 69 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | g.device..This.command.specifies |
81e60 | 20 74 68 65 20 4f 53 50 46 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 28 73 29 2e 20 | .the.OSPF.enabled.interface(s).. |
81e80 | 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 20 61 6e 20 61 64 64 72 65 73 73 20 | If.the.interface.has.an.address. |
81ea0 | 66 72 6f 6d 20 64 65 66 69 6e 65 64 20 72 61 6e 67 65 20 74 68 65 6e 20 74 68 65 20 63 6f 6d 6d | from.defined.range.then.the.comm |
81ec0 | 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 53 50 46 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 | and.enables.OSPF.on.this.interfa |
81ee0 | 63 65 20 73 6f 20 72 6f 75 74 65 72 20 63 61 6e 20 70 72 6f 76 69 64 65 20 6e 65 74 77 6f 72 6b | ce.so.router.can.provide.network |
81f00 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 6f 74 68 65 72 20 6f 73 70 66 20 72 | .information.to.the.other.ospf.r |
81f20 | 6f 75 74 65 72 73 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 | outers.via.this.interface..This. |
81f40 | 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 50 46 76 33 20 65 6e 61 | command.specifies.the.OSPFv3.ena |
81f60 | 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 | bled.interface..This.command.is. |
81f80 | 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f | also.used.to.enable.the.OSPF.pro |
81fa0 | 63 65 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 65 | cess..The.area.number.can.be.spe |
81fc0 | 63 69 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 68 | cified.in.decimal.notation.in.th |
81fe0 | 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f 72 | e.range.from.0.to.4294967295..Or |
82000 | 20 69 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 64 | .it.can.be.specified.in.dotted.d |
82020 | 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 64 | ecimal.notation.similar.to.ip.ad |
82040 | 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 | dress..This.command.specifies.th |
82060 | 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 53 53 41 20 54 6f 74 61 6c 6c 79 20 53 74 75 62 | e.area.to.be.a.NSSA.Totally.Stub |
82080 | 20 41 72 65 61 2e 20 41 42 52 73 20 66 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 64 6f 20 | .Area..ABRs.for.such.an.area.do. |
820a0 | 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 | not.need.to.pass.Network-Summary |
820c0 | 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 28 65 78 63 65 70 74 20 74 68 65 20 64 65 66 61 75 | .(type-3).LSAs.(except.the.defau |
820e0 | 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 29 2c 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 20 | lt.summary.route),.ASBR-Summary. |
82100 | 4c 53 41 73 20 28 74 79 70 65 2d 34 29 20 61 6e 64 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 4c 53 | LSAs.(type-4).and.AS-External.LS |
82120 | 41 73 20 28 74 79 70 65 2d 35 29 20 69 6e 74 6f 20 74 68 65 20 61 72 65 61 2e 20 42 75 74 20 54 | As.(type-5).into.the.area..But.T |
82140 | 79 70 65 2d 37 20 4c 53 41 73 20 74 68 61 74 20 63 6f 6e 76 65 72 74 20 74 6f 20 54 79 70 65 2d | ype-7.LSAs.that.convert.to.Type- |
82160 | 35 20 61 74 20 74 68 65 20 4e 53 53 41 20 41 42 52 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 00 54 | 5.at.the.NSSA.ABR.are.allowed..T |
82180 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 | his.command.specifies.the.area.t |
821a0 | 6f 20 62 65 20 61 20 4e 6f 74 20 53 6f 20 53 74 75 62 62 79 20 41 72 65 61 2e 20 45 78 74 65 72 | o.be.a.Not.So.Stubby.Area..Exter |
821c0 | 6e 61 6c 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 69 6d 70 6f 72 | nal.routing.information.is.impor |
821e0 | 74 65 64 20 69 6e 74 6f 20 61 6e 20 4e 53 53 41 20 69 6e 20 54 79 70 65 2d 37 20 4c 53 41 73 2e | ted.into.an.NSSA.in.Type-7.LSAs. |
82200 | 20 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 20 73 69 6d 69 6c 61 72 20 74 6f 20 54 79 70 65 | .Type-7.LSAs.are.similar.to.Type |
82220 | 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2c 20 65 78 63 65 70 74 20 74 68 61 74 | -5.AS-external.LSAs,.except.that |
82240 | 20 74 68 65 79 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 66 6c 6f 6f 64 65 64 20 69 6e 74 6f 20 74 | .they.can.only.be.flooded.into.t |
82260 | 68 65 20 4e 53 53 41 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 66 75 72 74 68 65 72 20 70 72 6f | he.NSSA..In.order.to.further.pro |
82280 | 70 61 67 61 74 65 20 74 68 65 20 4e 53 53 41 20 65 78 74 65 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 | pagate.the.NSSA.external.informa |
822a0 | 74 69 6f 6e 2c 20 74 68 65 20 54 79 70 65 2d 37 20 4c 53 41 20 6d 75 73 74 20 62 65 20 74 72 61 | tion,.the.Type-7.LSA.must.be.tra |
822c0 | 6e 73 6c 61 74 65 64 20 74 6f 20 61 20 54 79 70 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c 2d | nslated.to.a.Type-5.AS-external- |
822e0 | 4c 53 41 20 62 79 20 74 68 65 20 4e 53 53 41 20 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | LSA.by.the.NSSA.ABR..This.comman |
82300 | 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 53 74 75 | d.specifies.the.area.to.be.a.Stu |
82320 | 62 20 41 72 65 61 2e 20 54 68 61 74 20 69 73 2c 20 61 6e 20 61 72 65 61 20 77 68 65 72 65 20 6e | b.Area..That.is,.an.area.where.n |
82340 | 6f 20 72 6f 75 74 65 72 20 6f 72 69 67 69 6e 61 74 65 73 20 72 6f 75 74 65 73 20 65 78 74 65 72 | o.router.originates.routes.exter |
82360 | 6e 61 6c 20 74 6f 20 4f 53 50 46 20 61 6e 64 20 68 65 6e 63 65 20 61 6e 20 61 72 65 61 20 77 68 | nal.to.OSPF.and.hence.an.area.wh |
82380 | 65 72 65 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 61 72 65 20 76 69 61 20 | ere.all.external.routes.are.via. |
823a0 | 74 68 65 20 41 42 52 28 73 29 2e 20 48 65 6e 63 65 2c 20 41 42 52 73 20 66 6f 72 20 73 75 63 68 | the.ABR(s)..Hence,.ABRs.for.such |
823c0 | 20 61 6e 20 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 41 53 2d | .an.area.do.not.need.to.pass.AS- |
823e0 | 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d 35 29 20 6f 72 20 41 53 42 52 2d 53 | External.LSAs.(type-5).or.ASBR-S |
82400 | 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 20 69 6e 74 6f 20 74 68 65 20 61 72 | ummary.LSAs.(type-4).into.the.ar |
82420 | 65 61 2e 20 54 68 65 79 20 6e 65 65 64 20 6f 6e 6c 79 20 70 61 73 73 20 4e 65 74 77 6f 72 6b 2d | ea..They.need.only.pass.Network- |
82440 | 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 73 75 63 68 20 | Summary.(type-3).LSAs.into.such. |
82460 | 61 6e 20 61 72 65 61 2c 20 61 6c 6f 6e 67 20 77 69 74 68 20 61 20 64 65 66 61 75 6c 74 2d 72 6f | an.area,.along.with.a.default-ro |
82480 | 75 74 65 20 73 75 6d 6d 61 72 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | ute.summary..This.command.specif |
824a0 | 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 54 6f 74 61 6c 6c 79 20 53 74 75 | ies.the.area.to.be.a.Totally.Stu |
824c0 | 62 20 41 72 65 61 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 73 74 75 62 20 61 72 65 61 | b.Area..In.addition.to.stub.area |
824e0 | 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 74 68 69 73 20 61 72 65 61 20 74 79 70 65 20 70 72 65 76 | .limitations.this.area.type.prev |
82500 | 65 6e 74 73 20 61 6e 20 41 42 52 20 66 72 6f 6d 20 69 6e 6a 65 63 74 69 6e 67 20 4e 65 74 77 6f | ents.an.ABR.from.injecting.Netwo |
82520 | 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 74 68 | rk-Summary.(type-3).LSAs.into.th |
82540 | 65 20 73 70 65 63 69 66 69 65 64 20 73 74 75 62 20 61 72 65 61 2e 20 4f 6e 6c 79 20 64 65 66 61 | e.specified.stub.area..Only.defa |
82560 | 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 54 68 | ult.summary.route.is.allowed..Th |
82580 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 62 61 73 65 20 72 65 | is.command.specifies.the.base.re |
825a0 | 63 65 69 76 65 20 63 6f 73 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 46 | ceive.cost.for.this.interface..F |
825c0 | 6f 72 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 63 69 | or.wireless.interfaces,.it.speci |
825e0 | 66 69 65 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 69 65 72 20 75 73 65 64 20 66 6f 72 20 63 6f 6d | fies.the.multiplier.used.for.com |
82600 | 70 75 74 69 6e 67 20 74 68 65 20 45 54 58 20 72 65 63 65 70 74 69 6f 6e 20 63 6f 73 74 20 28 64 | puting.the.ETX.reception.cost.(d |
82620 | 65 66 61 75 6c 74 20 32 35 36 29 3b 20 66 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 | efault.256);.for.wired.interface |
82640 | 73 2c 20 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6f 73 74 20 74 68 61 74 20 77 69 | s,.it.specifies.the.cost.that.wi |
82660 | 6c 6c 20 62 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 6e 65 69 67 68 62 6f 75 72 73 2e 00 | ll.be.advertised.to.neighbours.. |
82680 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 63 61 79 | This.command.specifies.the.decay |
826a0 | 20 66 61 63 74 6f 72 20 66 6f 72 20 74 68 65 20 65 78 70 6f 6e 65 6e 74 69 61 6c 20 6d 6f 76 69 | .factor.for.the.exponential.movi |
826c0 | 6e 67 20 61 76 65 72 61 67 65 20 6f 66 20 52 54 54 20 73 61 6d 70 6c 65 73 2c 20 69 6e 20 75 6e | ng.average.of.RTT.samples,.in.un |
826e0 | 69 74 73 20 6f 66 20 31 2f 32 35 36 2e 20 48 69 67 68 65 72 20 76 61 6c 75 65 73 20 64 69 73 63 | its.of.1/256..Higher.values.disc |
82700 | 61 72 64 20 6f 6c 64 20 73 61 6d 70 6c 65 73 20 66 61 73 74 65 72 2e 20 54 68 65 20 64 65 66 61 | ard.old.samples.faster..The.defa |
82720 | 75 6c 74 20 69 73 20 34 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | ult.is.42..This.command.specifie |
82740 | 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 76 | s.the.default.local.preference.v |
82760 | 61 6c 75 65 2e 20 54 68 65 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 61 6e 67 65 | alue..The.local.preference.range |
82780 | 20 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .is.0.to.4294967295..This.comman |
827a0 | 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 76 | d.specifies.the.default.metric.v |
827c0 | 61 6c 75 65 20 6f 66 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 | alue.of.redistributed.routes..Th |
827e0 | 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 34 2e | e.metric.range.is.0.to.16777214. |
82800 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 61 72 62 | .This.command.specifies.the.garb |
82820 | 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 72 | age-collection.timer..Upon.expir |
82840 | 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 | ation.of.the.garbage-collection. |
82860 | 74 69 6d 65 72 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 66 69 6e 61 6c 6c 79 20 72 65 6d 6f | timer,.the.route.is.finally.remo |
82880 | 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 20 | ved.from.the.routing.table..The. |
828a0 | 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 | time.range.is.5.to.2147483647..T |
828c0 | 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 32 30 20 73 65 63 6f 6e 64 73 2e | he.default.value.is.120.seconds. |
828e0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 69 76 65 | .This.command.specifies.the.give |
82900 | 6e 20 6e 65 69 67 68 62 6f 72 20 61 73 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 6c | n.neighbor.as.route.reflector.cl |
82920 | 69 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | ient..This.command.specifies.the |
82940 | 20 6c 65 6e 67 74 68 20 6f 66 20 74 69 6d 65 2c 20 69 6e 20 73 65 63 6f 6e 64 73 2c 20 62 65 66 | .length.of.time,.in.seconds,.bef |
82960 | 6f 72 65 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 73 65 6e 64 73 20 68 65 6c | ore.the.routing.device.sends.hel |
82980 | 6c 6f 20 70 61 63 6b 65 74 73 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | lo.packets.out.of.the.interface. |
829a0 | 62 65 66 6f 72 65 20 69 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 64 6a 61 63 65 6e 63 79 20 | before.it.establishes.adjacency. |
829c0 | 77 69 74 68 20 61 20 6e 65 69 67 68 62 6f 72 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 20 | with.a.neighbor..The.range.is.1. |
829e0 | 74 6f 20 36 35 35 33 35 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | to.65535.seconds..The.default.va |
82a00 | 6c 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | lue.is.60.seconds..This.command. |
82a20 | 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d 69 | specifies.the.maximum.RTT,.in.mi |
82a40 | 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 61 62 6f 76 65 20 77 68 69 63 68 20 77 65 20 64 6f 6e 27 74 | lliseconds,.above.which.we.don't |
82a60 | 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 | .increase.the.cost.to.a.neighbou |
82a80 | 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 20 6d 73 2e 00 54 68 69 73 20 63 | r..The.default.is.120.ms..This.c |
82aa0 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 63 6f 73 | ommand.specifies.the.maximum.cos |
82ac0 | 74 20 61 64 64 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 20 62 65 63 61 75 73 65 20 6f | t.added.to.a.neighbour.because.o |
82ae0 | 66 20 52 54 54 2c 20 69 2e 65 2e 20 77 68 65 6e 20 74 68 65 20 52 54 54 20 69 73 20 68 69 67 68 | f.RTT,.i.e..when.the.RTT.is.high |
82b00 | 65 72 20 6f 72 20 65 71 75 61 6c 20 74 68 61 6e 20 72 74 74 2d 6d 61 78 2e 20 54 68 65 20 64 65 | er.or.equal.than.rtt-max..The.de |
82b20 | 66 61 75 6c 74 20 69 73 20 31 35 30 2e 20 53 65 74 74 69 6e 67 20 69 74 20 74 6f 20 30 20 65 66 | fault.is.150..Setting.it.to.0.ef |
82b40 | 66 65 63 74 69 76 65 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 | fectively.disables.the.use.of.a. |
82b60 | 52 54 54 2d 62 61 73 65 64 20 63 6f 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | RTT-based.cost..This.command.spe |
82b80 | 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d 69 6c 6c 69 | cifies.the.minimum.RTT,.in.milli |
82ba0 | 73 65 63 6f 6e 64 73 2c 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 77 68 69 63 68 20 77 65 20 | seconds,.starting.from.which.we. |
82bc0 | 69 6e 63 72 65 61 73 65 20 74 68 65 20 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 | increase.the.cost.to.a.neighbour |
82be0 | 2e 20 54 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 6f 73 74 20 69 73 20 6c 69 6e 65 61 72 20 | ..The.additional.cost.is.linear. |
82c00 | 69 6e 20 28 72 74 74 20 2d 20 72 74 74 2d 6d 69 6e 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | in.(rtt.-.rtt-min)..The.default. |
82c20 | 69 73 20 31 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | is.10.ms..This.command.specifies |
82c40 | 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 72 6f 75 74 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 | .the.minimum.route.advertisement |
82c60 | 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 69 6e 74 65 | .interval.for.the.peer..The.inte |
82c80 | 72 76 61 6c 20 76 61 6c 75 65 20 69 73 20 30 20 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 73 2c 20 | rval.value.is.0.to.600.seconds,. |
82ca0 | 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 69 | with.the.default.advertisement.i |
82cc0 | 6e 74 65 72 76 61 6c 20 62 65 69 6e 67 20 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | nterval.being.0..This.command.sp |
82ce0 | 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 | ecifies.the.router.priority.valu |
82d00 | 65 20 6f 66 20 74 68 65 20 6e 6f 6e 62 72 6f 61 64 63 61 73 74 20 6e 65 69 67 68 62 6f 72 20 61 | e.of.the.nonbroadcast.neighbor.a |
82d20 | 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 | ssociated.with.the.IP.address.sp |
82d40 | 65 63 69 66 69 65 64 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 30 2e 20 54 68 69 73 20 | ecified..The.default.is.0..This. |
82d60 | 6b 65 79 77 6f 72 64 20 64 6f 65 73 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 70 6f 69 6e 74 2d | keyword.does.not.apply.to.point- |
82d80 | 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 63 | to-multipoint.interfaces..This.c |
82da0 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 2e 20 | ommand.specifies.the.router-ID.. |
82dc0 | 49 66 20 72 6f 75 74 65 72 20 49 44 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 74 | If.router.ID.is.not.specified.it |
82de0 | 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 69 67 68 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 | .will.use.the.highest.interface. |
82e00 | 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | IP.address..This.command.specifi |
82e20 | 65 73 20 74 68 65 20 74 69 6d 65 20 63 6f 6e 73 74 61 6e 74 2c 20 69 6e 20 73 65 63 6f 6e 64 73 | es.the.time.constant,.in.seconds |
82e40 | 2c 20 6f 66 20 74 68 65 20 73 6d 6f 6f 74 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 75 73 65 | ,.of.the.smoothing.algorithm.use |
82e60 | 64 20 66 6f 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 68 79 73 74 65 72 65 73 69 73 2e 20 4c | d.for.implementing.hysteresis..L |
82e80 | 61 72 67 65 72 20 76 61 6c 75 65 73 20 72 65 64 75 63 65 20 72 6f 75 74 65 20 6f 73 63 69 6c 6c | arger.values.reduce.route.oscill |
82ea0 | 61 74 69 6f 6e 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f 66 20 76 65 72 79 20 73 6c 69 67 68 74 | ation.at.the.cost.of.very.slight |
82ec0 | 6c 79 20 69 6e 63 72 65 61 73 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 2e 20 | ly.increasing.convergence.time.. |
82ee0 | 54 68 65 20 76 61 6c 75 65 20 30 20 64 69 73 61 62 6c 65 73 20 68 79 73 74 65 72 65 73 69 73 2c | The.value.0.disables.hysteresis, |
82f00 | 20 61 6e 64 20 69 73 20 73 75 69 74 61 62 6c 65 20 66 6f 72 20 77 69 72 65 64 20 6e 65 74 77 6f | .and.is.suitable.for.wired.netwo |
82f20 | 72 6b 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 20 73 2e 00 54 68 69 73 20 63 6f | rks..The.default.is.4.s..This.co |
82f40 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c | mmand.specifies.the.time.in.mill |
82f60 | 69 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 77 68 69 63 68 20 61 6e 20 27 69 6d 70 6f 72 74 61 | iseconds.after.which.an.'importa |
82f80 | 6e 74 27 20 72 65 71 75 65 73 74 20 6f 72 20 75 70 64 61 74 65 20 77 69 6c 6c 20 62 65 20 72 65 | nt'.request.or.update.will.be.re |
82fa0 | 73 65 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 30 20 6d 73 2e 00 54 68 | sent..The.default.is.2000.ms..Th |
82fc0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e | is.command.specifies.the.time.in |
82fe0 | 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 64 75 | .milliseconds.between.two.schedu |
83000 | 6c 65 64 20 68 65 6c 6c 6f 73 2e 20 4f 6e 20 77 69 72 65 64 20 6c 69 6e 6b 73 2c 20 42 61 62 65 | led.hellos..On.wired.links,.Babe |
83020 | 6c 20 6e 6f 74 69 63 65 73 20 61 20 6c 69 6e 6b 20 66 61 69 6c 75 72 65 20 77 69 74 68 69 6e 20 | l.notices.a.link.failure.within. |
83040 | 74 77 6f 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 73 3b 20 6f 6e 20 77 69 72 65 6c 65 73 73 | two.hello.intervals;.on.wireless |
83060 | 20 6c 69 6e 6b 73 2c 20 74 68 65 20 6c 69 6e 6b 20 71 75 61 6c 69 74 79 20 76 61 6c 75 65 20 69 | .links,.the.link.quality.value.i |
83080 | 73 20 72 65 65 73 74 69 6d 61 74 65 64 20 61 74 20 65 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e 74 | s.reestimated.at.every.hello.int |
830a0 | 65 72 76 61 6c 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 30 30 30 20 6d 73 2e 00 54 | erval..The.default.is.4000.ms..T |
830c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 | his.command.specifies.the.time.i |
830e0 | 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 64 | n.milliseconds.between.two.sched |
83100 | 75 6c 65 64 20 75 70 64 61 74 65 73 2e 20 53 69 6e 63 65 20 42 61 62 65 6c 20 6d 61 6b 65 73 20 | uled.updates..Since.Babel.makes. |
83120 | 65 78 74 65 6e 73 69 76 65 20 75 73 65 20 6f 66 20 74 72 69 67 67 65 72 65 64 20 75 70 64 61 74 | extensive.use.of.triggered.updat |
83140 | 65 73 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 66 61 69 72 6c 79 20 68 69 | es,.this.can.be.set.to.fairly.hi |
83160 | 67 68 20 76 61 6c 75 65 73 20 6f 6e 20 6c 69 6e 6b 73 20 77 69 74 68 20 6c 69 74 74 6c 65 20 70 | gh.values.on.links.with.little.p |
83180 | 61 63 6b 65 74 20 6c 6f 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 30 30 | acket.loss..The.default.is.20000 |
831a0 | 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 | .ms..This.command.specifies.the. |
831c0 | 74 69 6d 65 6f 75 74 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 6f | timeout.timer..Upon.expiration.o |
831e0 | 66 20 74 68 65 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 6e 6f 20 6c | f.the.timeout,.the.route.is.no.l |
83200 | 6f 6e 67 65 72 20 76 61 6c 69 64 3b 20 68 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 72 65 74 61 | onger.valid;.however,.it.is.reta |
83220 | 69 6e 65 64 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 61 20 | ined.in.the.routing.table.for.a. |
83240 | 73 68 6f 72 74 20 74 69 6d 65 20 73 6f 20 74 68 61 74 20 6e 65 69 67 68 62 6f 72 73 20 63 61 6e | short.time.so.that.neighbors.can |
83260 | 20 62 65 20 6e 6f 74 69 66 69 65 64 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 | .be.notified.that.the.route.has. |
83280 | 62 65 65 6e 20 64 72 6f 70 70 65 64 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 | been.dropped..The.time.range.is. |
832a0 | 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | 5.to.2147483647..The.default.val |
832c0 | 75 65 20 69 73 20 31 38 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ue.is.180.seconds..This.command. |
832e0 | 73 70 65 63 69 66 69 65 73 20 74 68 65 20 75 70 64 61 74 65 20 74 69 6d 65 72 2e 20 45 76 65 72 | specifies.the.update.timer..Ever |
83300 | 79 20 75 70 64 61 74 65 20 74 69 6d 65 72 20 73 65 63 6f 6e 64 73 2c 20 74 68 65 20 52 49 50 20 | y.update.timer.seconds,.the.RIP. |
83320 | 70 72 6f 63 65 73 73 20 69 73 20 61 77 61 6b 65 6e 65 64 20 74 6f 20 73 65 6e 64 20 61 6e 20 75 | process.is.awakened.to.send.an.u |
83340 | 6e 73 6f 6c 69 63 69 74 65 64 20 72 65 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 20 63 6f 6e 74 | nsolicited.response.message.cont |
83360 | 61 69 6e 69 6e 67 20 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | aining.the.complete.routing.tabl |
83380 | 65 20 74 6f 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 52 49 50 20 72 6f 75 74 65 72 73 | e.to.all.neighboring.RIP.routers |
833a0 | 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 | ..The.time.range.is.5.to.2147483 |
833c0 | 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 20 73 65 63 | 647..The.default.value.is.30.sec |
833e0 | 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 77 68 65 | onds..This.command.specifies.whe |
83400 | 74 68 65 72 20 74 6f 20 70 65 72 66 6f 72 6d 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e | ther.to.perform.split-horizon.on |
83420 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 53 70 65 63 69 66 79 69 6e 67 20 6e 6f 20 62 61 | .the.interface..Specifying.no.ba |
83440 | 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 63 6f 72 72 | bel.split-horizon.is.always.corr |
83460 | 65 63 74 2c 20 77 68 69 6c 65 20 62 61 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 | ect,.while.babel.split-horizon.i |
83480 | 73 20 61 6e 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 6c 64 20 6f 6e | s.an.optimisation.that.should.on |
834a0 | 6c 79 20 62 65 20 75 73 65 64 20 6f 6e 20 73 79 6d 6d 65 74 72 69 63 20 61 6e 64 20 74 72 61 6e | ly.be.used.on.symmetric.and.tran |
834c0 | 73 69 74 69 76 65 20 28 77 69 72 65 64 29 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 63 6f | sitive.(wired).networks..This.co |
834e0 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 61 74 20 4f 53 50 46 20 70 61 63 6b 65 74 73 20 | mmand.specify.that.OSPF.packets. |
83500 | 6d 75 73 74 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 69 74 68 20 4d 44 35 20 48 | must.be.authenticated.with.MD5.H |
83520 | 4d 41 43 73 20 77 69 74 68 69 6e 20 74 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 4b 65 79 69 | MACs.within.the.given.area..Keyi |
83540 | 6e 67 20 6d 61 74 65 72 69 61 6c 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 | ng.material.must.also.be.configu |
83560 | 72 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 68 | red.on.a.per-interface.basis..Th |
83580 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 73 20 74 68 61 74 20 4d 44 35 20 48 4d 41 | is.command.specifys.that.MD5.HMA |
835a0 | 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 6f 6e | C.authentication.must.be.used.on |
835c0 | 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 73 65 74 73 20 4f 53 50 46 20 61 75 | .this.interface..It.sets.OSPF.au |
835e0 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 74 6f 20 61 20 63 72 79 70 74 6f 67 72 61 70 | thentication.key.to.a.cryptograp |
83600 | 68 69 63 20 70 61 73 73 77 6f 72 64 2e 20 4b 65 79 2d 69 64 20 69 64 65 6e 74 69 66 69 65 73 20 | hic.password..Key-id.identifies. |
83620 | 73 65 63 72 65 74 20 6b 65 79 20 75 73 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 6d 65 | secret.key.used.to.create.the.me |
83640 | 73 73 61 67 65 20 64 69 67 65 73 74 2e 20 54 68 69 73 20 49 44 20 69 73 20 70 61 72 74 20 6f 66 | ssage.digest..This.ID.is.part.of |
83660 | 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 69 73 | .the.protocol.and.must.be.consis |
83680 | 74 65 6e 74 20 61 63 72 6f 73 73 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 20 6c 69 6e 6b 2e 20 54 | tent.across.routers.on.a.link..T |
836a0 | 68 65 20 6b 65 79 20 63 61 6e 20 62 65 20 6c 6f 6e 67 20 75 70 20 74 6f 20 31 36 20 63 68 61 72 | he.key.can.be.long.up.to.16.char |
836c0 | 73 20 28 6c 61 72 67 65 72 20 73 74 72 69 6e 67 73 20 77 69 6c 6c 20 62 65 20 74 72 75 6e 63 61 | s.(larger.strings.will.be.trunca |
836e0 | 74 65 64 29 2c 20 61 6e 64 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 | ted),.and.is.associated.with.the |
83700 | 20 67 69 76 65 6e 20 6b 65 79 2d 69 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d | .given.key-id..This.command.summ |
83720 | 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 | arizes.intra.area.paths.from.spe |
83740 | 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 20 54 79 70 65 2d 33 20 49 6e 74 65 | cified.area.into.one.Type-3.Inte |
83760 | 72 2d 41 72 65 61 20 50 72 65 66 69 78 20 4c 53 41 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f | r-Area.Prefix.LSA.announced.to.o |
83780 | 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 | ther.areas..This.command.can.be. |
837a0 | 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | used.only.in.ABR..This.command.s |
837c0 | 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 | ummarizes.intra.area.paths.from. |
837e0 | 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 69 6e 74 6f 20 6f 6e 65 20 73 75 6d 6d 61 72 79 2d | specified.area.into.one.summary- |
83800 | 4c 53 41 20 28 54 79 70 65 2d 33 29 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 | LSA.(Type-3).announced.to.other. |
83820 | 61 72 65 61 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 | areas..This.command.can.be.used. |
83840 | 6f 6e 6c 79 20 69 6e 20 41 42 52 20 61 6e 64 20 4f 4e 4c 59 20 72 6f 75 74 65 72 2d 4c 53 41 73 | only.in.ABR.and.ONLY.router-LSAs |
83860 | 20 28 54 79 70 65 2d 31 29 20 61 6e 64 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 73 20 28 54 79 70 65 | .(Type-1).and.network-LSAs.(Type |
83880 | 2d 32 29 20 28 69 2e 65 2e 20 4c 53 41 73 20 77 69 74 68 20 73 63 6f 70 65 20 61 72 65 61 29 20 | -2).(i.e..LSAs.with.scope.area). |
838a0 | 63 61 6e 20 62 65 20 73 75 6d 6d 61 72 69 7a 65 64 2e 20 41 53 2d 65 78 74 65 72 6e 61 6c 2d 4c | can.be.summarized..AS-external-L |
838c0 | 53 41 73 20 28 54 79 70 65 2d 35 29 20 63 61 6e e2 80 99 74 20 62 65 20 73 75 6d 6d 61 72 69 7a | SAs.(Type-5).can...t.be.summariz |
838e0 | 65 64 20 2d 20 74 68 65 69 72 20 73 63 6f 70 65 20 69 73 20 41 53 2e 20 54 68 65 20 6f 70 74 69 | ed.-.their.scope.is.AS..The.opti |
83900 | 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 63 6f 73 74 60 20 73 70 65 | onal.argument.:cfgcmd:`cost`.spe |
83920 | 63 69 66 69 65 73 20 74 68 65 20 61 67 67 72 65 67 61 74 65 64 20 6c 69 6e 6b 20 6d 65 74 72 69 | cifies.the.aggregated.link.metri |
83940 | 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 | c..The.metric.range.is.0.to.1677 |
83960 | 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 73 75 72 65 20 6e 6f 74 | 7215..This.command.to.ensure.not |
83980 | 20 61 64 76 65 72 74 69 73 65 20 74 68 65 20 73 75 6d 6d 61 72 79 20 6c 73 61 20 66 6f 72 20 74 | .advertise.the.summary.lsa.for.t |
839a0 | 68 65 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 69 73 20 63 | he.matched.external.LSAs..This.c |
839c0 | 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 6f 20 63 6c 65 61 72 20 42 47 50 20 72 6f 75 74 65 20 64 | ommand.uses.to.clear.BGP.route.d |
839e0 | 61 6d 70 65 6e 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 6f 20 75 6e 73 75 | ampening.information.and.to.unsu |
83a00 | 70 70 72 65 73 73 20 73 75 70 70 72 65 73 73 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 | ppress.suppressed.routes..This.c |
83a20 | 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e | ommand.was.introduced.in.VyOS.1. |
83a40 | 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 60 60 | 4.-.it.was.previously.called:.`` |
83a60 | 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 20 3c | set.firewall.options.interface.< |
83a80 | 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 69 73 20 | name>.adjust-mss.<value>``.This. |
83aa0 | 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 | command.was.introduced.in.VyOS.1 |
83ac0 | 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 60 | .4.-.it.was.previously.called:.` |
83ae0 | 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 20 | `set.firewall.options.interface. |
83b00 | 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d 6d 73 73 36 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 69 | <name>.adjust-mss6.<value>``.Thi |
83b20 | 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 64 | s.command.will.change.the.hold.d |
83b40 | 6f 77 6e 20 76 61 6c 75 65 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a | own.value.for.IGP-LDP.synchroniz |
83b60 | 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 61 | ation.during.convergence/interfa |
83b80 | 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2c 20 62 75 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 | ce.flap.events,.but.for.this.int |
83ba0 | 65 72 66 61 63 65 20 6f 6e 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 | erface.only..This.command.will.c |
83bc0 | 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 65 20 67 6c 6f 62 61 6c | hange.the.hold.down.value.global |
83be0 | 6c 79 20 66 6f 72 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 | ly.for.IGP-LDP.synchronization.d |
83c00 | 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 70 | uring.convergence/interface.flap |
83c20 | 20 65 76 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 69 | .events..This.command.will.confi |
83c40 | 67 75 72 65 20 61 20 74 69 65 2d 62 72 65 61 6b 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 | gure.a.tie-breaker.for.multiple. |
83c60 | 6c 6f 63 61 6c 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 20 54 68 65 20 6c 6f 77 65 72 20 69 6e 64 | local.LFA.backups..The.lower.ind |
83c80 | 65 78 20 6e 75 6d 62 65 72 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 66 69 72 | ex.numbers.will.be.processed.fir |
83ca0 | 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 50 | st..This.command.will.enable.IGP |
83cc0 | 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 6f | -LDP.synchronization.globally.fo |
83ce0 | 72 20 49 53 49 53 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 6f | r.ISIS..This.requires.for.LDP.to |
83d00 | 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 65 | .be.functional..This.is.describe |
83d20 | 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c 6c | d.in.:rfc:`5443`..By.default.all |
83d40 | 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 49 53 2d 49 53 | .interfaces.operational.in.IS-IS |
83d60 | 20 61 72 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e | .are.enabled.for.synchronization |
83d80 | 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f 6d | ..Loopbacks.are.exempt..This.com |
83da0 | 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f | mand.will.enable.IGP-LDP.synchro |
83dc0 | 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 4f 53 50 46 2e 20 54 68 69 73 | nization.globally.for.OSPF..This |
83de0 | 20 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 69 6f 6e | .requires.for.LDP.to.be.function |
83e00 | 61 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 | al..This.is.described.in.:rfc:`5 |
83e20 | 34 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 | 443`..By.default.all.interfaces. |
83e40 | 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 4f 53 50 46 20 61 72 65 20 65 6e 61 62 6c 65 64 20 | operational.in.OSPF.are.enabled. |
83e60 | 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 | for.synchronization..Loopbacks.a |
83e80 | 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 6e | re.exempt..This.command.will.gen |
83ea0 | 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e 20 4c 31 20 64 61 74 61 | erate.a.default-route.in.L1.data |
83ec0 | 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 | base..This.command.will.generate |
83ee0 | 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 69 6e 20 4c 32 20 64 61 74 61 62 61 73 65 2e | .a.default-route.in.L2.database. |
83f00 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 | .This.command.will.give.an.overv |
83f20 | 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 | iew.of.a.rule.in.a.single.rule-s |
83f40 | 65 74 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 | et.This.command.will.give.an.ove |
83f60 | 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 | rview.of.a.rule.in.a.single.rule |
83f80 | 2d 73 65 74 2c 20 70 6c 75 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 64 65 66 61 75 | -set,.plus.information.for.defau |
83fa0 | 6c 74 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 | lt.action..This.command.will.giv |
83fc0 | 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e | e.an.overview.of.a.rule.in.a.sin |
83fe0 | 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 | gle.rule-set..This.command.will. |
84000 | 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 72 75 6c | give.an.overview.of.a.single.rul |
84020 | 65 2d 73 65 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6c 69 6d 69 74 20 4c | e-set..This.command.will.limit.L |
84040 | 46 41 20 62 61 63 6b 75 70 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 75 70 20 74 6f 20 74 68 65 20 | FA.backup.computation.up.to.the. |
84060 | 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 70 72 69 6f 72 69 74 79 2e 00 54 68 69 73 20 | specified.prefix.priority..This. |
84080 | 63 6f 6d 6d 61 6e 64 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 74 68 65 20 64 79 6e 61 6d 69 63 20 | command.would.allow.the.dynamic. |
840a0 | 75 70 64 61 74 65 20 6f 66 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 76 65 72 20 61 6e 20 65 | update.of.capabilities.over.an.e |
840c0 | 73 74 61 62 6c 69 73 68 65 64 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d | stablished.BGP.session..This.com |
840e0 | 6d 61 6e 64 73 20 63 72 65 61 74 65 73 20 61 20 62 72 69 64 67 65 20 74 68 61 74 20 69 73 20 75 | mands.creates.a.bridge.that.is.u |
84100 | 73 65 64 20 74 6f 20 62 69 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 65 74 68 31 20 76 6c 61 6e | sed.to.bind.traffic.on.eth1.vlan |
84120 | 20 32 34 31 20 77 69 74 68 20 74 68 65 20 76 78 6c 61 6e 32 34 31 2d 69 6e 74 65 72 66 61 63 65 | .241.with.the.vxlan241-interface |
84140 | 2e 20 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 | ..The.IP.address.is.not.required |
84160 | 2e 20 49 74 20 6d 61 79 20 68 6f 77 65 76 65 72 20 62 65 20 75 73 65 64 20 61 73 20 61 20 64 65 | ..It.may.however.be.used.as.a.de |
84180 | 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 66 6f 72 20 65 61 63 68 20 4c 65 61 66 20 77 68 69 63 | fault.gateway.for.each.Leaf.whic |
841a0 | 68 20 61 6c 6c 6f 77 73 20 64 65 76 69 63 65 73 20 6f 6e 20 74 68 65 20 76 6c 61 6e 20 74 6f 20 | h.allows.devices.on.the.vlan.to. |
841c0 | 72 65 61 63 68 20 6f 74 68 65 72 20 73 75 62 6e 65 74 73 2e 20 54 68 69 73 20 72 65 71 75 69 72 | reach.other.subnets..This.requir |
841e0 | 65 73 20 74 68 61 74 20 74 68 65 20 73 75 62 6e 65 74 73 20 61 72 65 20 72 65 64 69 73 74 72 69 | es.that.the.subnets.are.redistri |
84200 | 62 75 74 65 64 20 62 79 20 4f 53 50 46 20 73 6f 20 74 68 61 74 20 74 68 65 20 53 70 69 6e 65 20 | buted.by.OSPF.so.that.the.Spine. |
84220 | 77 69 6c 6c 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 72 65 61 63 68 20 69 74 2e 20 54 6f 20 64 | will.learn.how.to.reach.it..To.d |
84240 | 6f 20 74 68 69 73 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 4f 53 | o.this.you.need.to.change.the.OS |
84260 | 50 46 20 6e 65 74 77 6f 72 6b 20 66 72 6f 6d 20 27 31 30 2e 30 2e 30 2e 30 2f 38 27 20 74 6f 20 | PF.network.from.'10.0.0.0/8'.to. |
84280 | 27 30 2e 30 2e 30 2e 30 2f 30 27 20 74 6f 20 61 6c 6c 6f 77 20 31 37 32 2e 31 36 2f 31 32 2d 6e | '0.0.0.0/0'.to.allow.172.16/12-n |
842a0 | 65 74 77 6f 72 6b 73 20 74 6f 20 62 65 20 61 64 76 65 72 74 69 73 65 64 2e 00 54 68 69 73 20 63 | etworks.to.be.advertised..This.c |
842c0 | 6f 6d 6d 61 6e 64 73 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 46 69 6e 69 74 65 20 53 74 61 | ommands.specifies.the.Finite.Sta |
842e0 | 74 65 20 4d 61 63 68 69 6e 65 20 28 46 53 4d 29 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 63 6f 6e | te.Machine.(FSM).intended.to.con |
84300 | 74 72 6f 6c 20 74 68 65 20 74 69 6d 69 6e 67 20 6f 66 20 74 68 65 20 65 78 65 63 75 74 69 6f 6e | trol.the.timing.of.the.execution |
84320 | 20 6f 66 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 72 65 73 70 6f 6e 73 65 | .of.SPF.calculations.in.response |
84340 | 20 74 6f 20 49 47 50 20 65 76 65 6e 74 73 2e 20 54 68 65 20 70 72 6f 63 65 73 73 20 64 65 73 63 | .to.IGP.events..The.process.desc |
84360 | 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 34 30 35 60 2e 00 54 68 69 73 20 63 6f 6e 66 69 | ribed.in.:rfc:`8405`..This.confi |
84380 | 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 | guration.enables.HTTP.health.che |
843a0 | 63 6b 73 20 6f 6e 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 73 2e 00 54 68 69 73 20 63 6f 6e | cks.on.backend.servers..This.con |
843c0 | 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 74 68 65 20 54 43 50 20 72 65 76 65 72 | figuration.enables.the.TCP.rever |
843e0 | 73 65 20 70 72 6f 78 79 20 66 6f 72 20 74 68 65 20 22 6d 79 2d 74 63 70 2d 61 70 69 22 20 73 65 | se.proxy.for.the."my-tcp-api".se |
84400 | 72 76 69 63 65 2e 20 49 6e 63 6f 6d 69 6e 67 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 | rvice..Incoming.TCP.connections. |
84420 | 6f 6e 20 70 6f 72 74 20 38 38 38 38 20 77 69 6c 6c 20 62 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 | on.port.8888.will.be.load.balanc |
84440 | 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 73 20 28 73 | ed.across.the.backend.servers.(s |
84460 | 72 76 30 31 20 61 6e 64 20 73 72 76 30 32 29 20 75 73 69 6e 67 20 74 68 65 20 72 6f 75 6e 64 2d | rv01.and.srv02).using.the.round- |
84480 | 72 6f 62 69 6e 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 2e 00 | robin.load-balancing.algorithm.. |
844a0 | 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 | This.configuration.listen.on.por |
844c0 | 74 20 38 30 20 61 6e 64 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 20 72 65 71 75 65 | t.80.and.redirect.incoming.reque |
844e0 | 73 74 73 20 74 6f 20 48 54 54 50 53 3a 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | sts.to.HTTPS:.This.configuration |
84500 | 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 6e 65 | .modifies.the.behavior.of.the.ne |
84520 | 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e 74 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 74 68 69 | twork.statement..If.you.have.thi |
84540 | 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 6e 65 74 77 | s.configured.the.underlying.netw |
84560 | 6f 72 6b 20 6d 75 73 74 20 65 78 69 73 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 | ork.must.exist.in.the.routing.ta |
84580 | 62 6c 65 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 | ble..This.configuration.paramete |
845a0 | 72 20 69 73 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 | r.is.required.and.must.be.unique |
845c0 | 20 74 6f 20 65 61 63 68 20 73 75 62 6e 65 74 2e 20 49 74 20 69 73 20 72 65 71 75 69 72 65 64 20 | .to.each.subnet..It.is.required. |
845e0 | 74 6f 20 6d 61 70 20 73 75 62 6e 65 74 73 20 74 6f 20 6c 65 61 73 65 20 66 69 6c 65 20 65 6e 74 | to.map.subnets.to.lease.file.ent |
84600 | 72 69 65 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 | ries..This.configuration.paramet |
84620 | 65 72 20 6c 65 74 73 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 6c 69 73 74 65 | er.lets.the.DHCP.server.to.liste |
84640 | 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 | n.for.DHCP.requests.sent.to.the. |
84660 | 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2c 20 69 74 20 69 73 20 6f 6e 6c 79 20 72 65 | specified.address,.it.is.only.re |
84680 | 61 6c 69 73 74 69 63 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 20 61 20 73 65 72 76 65 72 20 | alistically.useful.for.a.server. |
846a0 | 77 68 6f 73 65 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 73 20 61 72 65 20 72 65 61 63 68 65 64 20 76 | whose.only.clients.are.reached.v |
846c0 | 69 61 20 75 6e 69 63 61 73 74 73 2c 20 73 75 63 68 20 61 73 20 76 69 61 20 44 48 43 50 20 72 65 | ia.unicasts,.such.as.via.DHCP.re |
846e0 | 6c 61 79 20 61 67 65 6e 74 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 | lay.agents..This.configuration.p |
84700 | 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 20 76 65 6e 64 | arameter.lets.you.specify.a.vend |
84720 | 6f 72 2d 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 | or-option.for.the.entire.shared. |
84740 | 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 | network.definition..All.subnets. |
84760 | 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | will.inherit.this.configuration. |
84780 | 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 41 | item.if.not.specified.locally..A |
847a0 | 6e 20 65 78 61 6d 70 6c 65 20 66 6f 72 20 55 62 69 71 75 69 74 69 20 69 73 20 73 68 6f 77 6e 20 | n.example.for.Ubiquiti.is.shown. |
847c0 | 62 65 6c 6f 77 3a 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 | below:.This.configuration.parame |
847e0 | 74 65 72 20 6c 65 74 73 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 20 76 65 6e 64 6f 72 2d 6f 70 | ter.lets.you.specify.a.vendor-op |
84800 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 73 75 62 6e 65 74 20 73 70 65 63 69 66 69 65 64 20 77 69 | tion.for.the.subnet.specified.wi |
84820 | 74 68 69 6e 20 74 68 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 | thin.the.shared.network.definiti |
84840 | 6f 6e 2e 20 41 6e 20 65 78 61 6d 70 6c 65 20 66 6f 72 20 55 62 69 71 75 69 74 69 20 69 73 20 73 | on..An.example.for.Ubiquiti.is.s |
84860 | 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 54 68 69 73 20 63 6f 75 6c 64 20 62 65 20 68 65 6c 70 66 75 | hown.below:.This.could.be.helpfu |
84880 | 6c 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 74 65 73 74 20 68 6f 77 20 61 6e 20 61 70 70 | l.if.you.want.to.test.how.an.app |
848a0 | 6c 69 63 61 74 69 6f 6e 20 62 65 68 61 76 65 73 20 75 6e 64 65 72 20 63 65 72 74 61 69 6e 20 6e | lication.behaves.under.certain.n |
848c0 | 65 74 77 6f 72 6b 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 00 54 68 69 73 20 63 72 65 61 74 65 73 20 | etwork.conditions..This.creates. |
848e0 | 61 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 20 63 61 6c 6c 65 64 20 46 49 4c 54 45 52 2d 57 45 42 | a.route.policy.called.FILTER-WEB |
84900 | 20 77 69 74 68 20 6f 6e 65 20 72 75 6c 65 20 74 6f 20 73 65 74 20 74 68 65 20 72 6f 75 74 69 6e | .with.one.rule.to.set.the.routin |
84920 | 67 20 74 61 62 6c 65 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 28 54 43 | g.table.for.matching.traffic.(TC |
84940 | 50 20 70 6f 72 74 20 38 30 29 20 74 6f 20 74 61 62 6c 65 20 49 44 20 31 30 30 20 69 6e 73 74 65 | P.port.80).to.table.ID.100.inste |
84960 | 61 64 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e | ad.of.the.default.routing.table. |
84980 | 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 30 30 30 30 2e 00 54 68 69 73 20 64 65 | .This.defaults.to.10000..This.de |
849a0 | 66 61 75 6c 74 73 20 74 6f 20 31 38 31 32 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f | faults.to.1812..This.defaults.to |
849c0 | 20 32 30 30 37 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 30 20 73 65 63 6f 6e | .2007..This.defaults.to.30.secon |
849e0 | 64 73 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 30 30 20 73 65 63 6f 6e 64 73 | ds..This.defaults.to.300.seconds |
84a00 | 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 34 39 2e 00 54 68 69 73 20 64 65 66 61 | ..This.defaults.to.49..This.defa |
84a20 | 75 6c 74 73 20 74 6f 20 35 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 55 44 50 00 | ults.to.5..This.defaults.to.UDP. |
84a40 | 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 62 6f 74 68 20 31 2e 32 20 61 6e 64 20 31 2e | This.defaults.to.both.1.2.and.1. |
84a60 | 33 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 68 74 74 70 73 3a 2f 2f 61 63 6d 65 | 3..This.defaults.to.https://acme |
84a80 | 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f | -v02.api.letsencrypt.org/directo |
84aa0 | 72 79 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 70 68 79 30 2e 00 54 68 69 73 20 64 | ry.This.defaults.to.phy0..This.d |
84ac0 | 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 64 72 69 76 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 | epends.on.the.driver.capabilitie |
84ae0 | 73 20 61 6e 64 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 77 69 74 68 20 | s.and.may.not.be.available.with. |
84b00 | 61 6c 6c 20 64 72 69 76 65 72 73 2e 00 54 68 69 73 20 64 69 61 62 6c 65 20 74 68 65 20 65 78 74 | all.drivers..This.diable.the.ext |
84b20 | 65 72 6e 61 6c 20 63 61 63 68 65 20 61 6e 64 20 64 69 72 65 63 74 6c 79 20 69 6e 6a 65 63 74 73 | ernal.cache.and.directly.injects |
84b40 | 20 74 68 65 20 66 6c 6f 77 2d 73 74 61 74 65 73 20 69 6e 74 6f 20 74 68 65 20 69 6e 2d 6b 65 72 | .the.flow-states.into.the.in-ker |
84b60 | 6e 65 6c 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 54 72 61 63 6b 69 6e 67 20 53 79 73 74 65 6d 20 6f | nel.Connection.Tracking.System.o |
84b80 | 66 20 74 68 65 20 62 61 63 6b 75 70 20 66 69 72 65 77 61 6c 6c 2e 00 54 68 69 73 20 64 69 61 67 | f.the.backup.firewall..This.diag |
84ba0 | 72 61 6d 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 77 69 74 68 20 74 68 65 20 65 78 61 6d 70 6c 65 | ram.corresponds.with.the.example |
84bc0 | 20 73 69 74 65 20 74 6f 20 73 69 74 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f | .site.to.site.configuration.belo |
84be0 | 77 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 33 31 33 37 60 20 73 75 70 70 | w..This.enables.:rfc:`3137`.supp |
84c00 | 6f 72 74 2c 20 77 68 65 72 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 20 64 65 73 63 | ort,.where.the.OSPF.process.desc |
84c20 | 72 69 62 65 73 20 69 74 73 20 74 72 61 6e 73 69 74 20 6c 69 6e 6b 73 20 69 6e 20 69 74 73 20 72 | ribes.its.transit.links.in.its.r |
84c40 | 6f 75 74 65 72 2d 4c 53 41 20 61 73 20 68 61 76 69 6e 67 20 69 6e 66 69 6e 69 74 65 20 64 69 73 | outer-LSA.as.having.infinite.dis |
84c60 | 74 61 6e 63 65 20 73 6f 20 74 68 61 74 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 77 69 6c 6c | tance.so.that.other.routers.will |
84c80 | 20 61 76 6f 69 64 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 72 61 6e 73 69 74 20 70 61 74 68 73 | .avoid.calculating.transit.paths |
84ca0 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 69 6c 65 20 73 74 69 6c 6c 20 | .through.the.router.while.still. |
84cc0 | 62 65 69 6e 67 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 6e 65 74 77 6f 72 6b 73 20 74 68 72 | being.able.to.reach.networks.thr |
84ce0 | 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 74 68 | ough.the.router..This.enables.th |
84d00 | 65 20 67 72 65 65 6e 66 69 65 6c 64 20 6f 70 74 69 6f 6e 20 77 68 69 63 68 20 73 65 74 73 20 74 | e.greenfield.option.which.sets.t |
84d20 | 68 65 20 60 60 5b 47 46 5d 60 60 20 6f 70 74 69 6f 6e 00 54 68 69 73 20 65 73 74 61 62 6c 69 73 | he.``[GF]``.option.This.establis |
84d40 | 68 65 73 20 6f 75 72 20 50 6f 72 74 20 46 6f 72 77 61 72 64 20 72 75 6c 65 2c 20 62 75 74 20 69 | hes.our.Port.Forward.rule,.but.i |
84d60 | 66 20 77 65 20 63 72 65 61 74 65 64 20 61 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 69 | f.we.created.a.firewall.policy.i |
84d80 | 74 20 77 69 6c 6c 20 6c 69 6b 65 6c 79 20 62 6c 6f 63 6b 20 74 68 65 20 74 72 61 66 66 69 63 2e | t.will.likely.block.the.traffic. |
84da0 | 00 54 68 69 73 20 65 78 61 6d 70 6c 65 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 74 61 72 67 65 | .This.example.shows.how.to.targe |
84dc0 | 74 20 61 6e 20 4d 53 53 20 63 6c 61 6d 70 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 | t.an.MSS.clamp.(in.our.example.t |
84de0 | 6f 20 31 33 36 30 20 62 79 74 65 73 29 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 | o.1360.bytes).to.a.specific.dest |
84e00 | 69 6e 61 74 69 6f 6e 20 49 50 2e 00 54 68 69 73 20 65 78 61 6d 70 6c 65 20 75 73 65 73 20 43 41 | ination.IP..This.example.uses.CA |
84e20 | 43 65 72 74 20 61 73 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 2e 00 54 | Cert.as.certificate.authority..T |
84e40 | 68 69 73 20 66 65 61 74 75 72 65 20 63 6c 6f 73 65 6c 79 20 77 6f 72 6b 73 20 74 6f 67 65 74 68 | his.feature.closely.works.togeth |
84e60 | 65 72 20 77 69 74 68 20 3a 72 65 66 3a 60 70 6b 69 60 20 73 75 62 73 79 73 74 65 6d 20 61 73 20 | er.with.:ref:`pki`.subsystem.as. |
84e80 | 79 6f 75 20 72 65 71 75 69 72 65 64 20 61 20 78 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 2e | you.required.a.x509.certificate. |
84ea0 | 00 54 68 69 73 20 66 65 61 74 75 72 65 20 73 65 72 76 65 73 20 74 68 65 20 70 75 72 70 6f 73 65 | .This.feature.serves.the.purpose |
84ec0 | 20 6f 66 20 74 68 69 67 68 74 65 6e 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 76 61 6c 69 64 | .of.thightening.the.packet.valid |
84ee0 | 61 74 69 6f 6e 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 61 76 6f 69 64 20 72 65 63 65 | ation.requirements.to.avoid.rece |
84f00 | 69 76 69 6e 67 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f | iving.BFD.control.packets.from.o |
84f20 | 74 68 65 72 20 73 65 73 73 69 6f 6e 73 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 73 75 6d 6d | ther.sessions..This.feature.summ |
84f40 | 61 72 69 73 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 | arises.originated.external.LSAs. |
84f60 | 28 54 79 70 65 2d 35 20 61 6e 64 20 54 79 70 65 2d 37 29 2e 20 53 75 6d 6d 61 72 79 20 52 6f 75 | (Type-5.and.Type-7)..Summary.Rou |
84f80 | 74 65 20 77 69 6c 6c 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 6f 6e 2d 62 65 68 61 6c 66 20 | te.will.be.originated.on-behalf. |
84fa0 | 6f 66 20 61 6c 6c 20 6d 61 74 63 68 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 | of.all.matched.external.LSAs..Th |
84fc0 | 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 | is.functionality.is.controlled.b |
84fe0 | 79 20 61 64 64 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 | y.adding.the.following.configura |
85000 | 74 69 6f 6e 3a 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 62 6f 74 68 20 69 6e | tion:.This.functions.for.both.in |
85020 | 64 69 76 69 64 75 61 6c 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 61 64 64 72 65 73 73 20 67 | dividual.addresses.and.address.g |
85040 | 72 6f 75 70 73 2e 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 49 47 50 2d 4c 44 50 20 73 79 6e | roups..This.gives.us.IGP-LDP.syn |
85060 | 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6e 6f 6e 2d 6c 6f 6f 70 62 61 63 | chronization.for.all.non-loopbac |
85080 | 6b 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 68 6f 6c 64 64 6f 77 6e 20 74 69 6d | k.interfaces.with.a.holddown.tim |
850a0 | 65 72 20 6f 66 20 7a 65 72 6f 20 73 65 63 6f 6e 64 73 3a 00 54 68 69 73 20 67 69 76 65 73 20 75 | er.of.zero.seconds:.This.gives.u |
850c0 | 73 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 65 6e 61 62 6c 65 64 20 61 | s.MPLS.segment.routing.enabled.a |
850e0 | 6e 64 20 6c 61 62 65 6c 73 20 66 6f 72 20 66 61 72 20 65 6e 64 20 6c 6f 6f 70 62 61 63 6b 73 3a | nd.labels.for.far.end.loopbacks: |
85100 | 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6e 65 69 | .This.gives.us.the.following.nei |
85120 | 67 68 62 6f 72 73 68 69 70 73 2c 20 4c 65 76 65 6c 20 31 20 61 6e 64 20 4c 65 76 65 6c 20 32 3a | ghborships,.Level.1.and.Level.2: |
85140 | 00 54 68 69 73 20 69 6e 73 74 72 75 63 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 6f 20 72 65 70 6c | .This.instructs.opennhrp.to.repl |
85160 | 79 20 77 69 74 68 20 61 75 74 68 6f 72 61 74 69 76 65 20 61 6e 73 77 65 72 73 20 6f 6e 20 4e 48 | y.with.authorative.answers.on.NH |
85180 | 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 64 65 73 74 69 6e 69 65 64 | RP.Resolution.Requests.destinied |
851a0 | 20 74 6f 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 | .to.addresses.in.this.interface. |
851c0 | 28 69 6e 73 74 65 61 64 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 70 61 63 6b 65 | (instead.of.forwarding.the.packe |
851e0 | 74 73 29 2e 20 54 68 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 61 6c 6c 6f 77 73 20 74 68 65 | ts)..This.effectively.allows.the |
85200 | 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 20 74 6f 20 | .creation.of.shortcut.routes.to. |
85220 | 73 75 62 6e 65 74 73 20 6c 6f 63 61 74 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 | subnets.located.on.the.interface |
85240 | 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 6f 20 77 68 65 72 | ..This.is.a.common.scenario.wher |
85260 | 65 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 | e.both.:ref:`source-nat`.and.:re |
85280 | 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 61 72 65 20 63 6f 6e 66 69 67 75 72 | f:`destination-nat`.are.configur |
852a0 | 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 20 49 74 27 73 20 63 6f 6d 6d 6f 6e | ed.at.the.same.time..It's.common |
852c0 | 6c 79 20 75 73 65 64 20 77 68 65 6e 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 | ly.used.when.internal.(private). |
852e0 | 68 6f 73 74 73 20 6e 65 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 | hosts.need.to.establish.a.connec |
85300 | 74 69 6f 6e 20 77 69 74 68 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 73 20 61 6e 64 | tion.with.external.resources.and |
85320 | 20 65 78 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 20 6e 65 65 64 20 74 6f 20 61 63 63 65 73 73 | .external.systems.need.to.access |
85340 | 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 72 65 73 6f 75 72 63 65 73 2e 00 54 | .internal.(private).resources..T |
85360 | 68 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 | his.is.a.configuration.parameter |
85380 | 20 66 6f 72 20 74 68 65 20 60 3c 73 75 62 6e 65 74 3e 60 2c 20 73 61 79 69 6e 67 20 74 68 61 74 | .for.the.`<subnet>`,.saying.that |
853a0 | 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 | .as.part.of.the.response,.tell.t |
853c0 | 68 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 | he.client.that.the.default.gatew |
853e0 | 61 79 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 | ay.can.be.reached.at.`<address>` |
85400 | 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 | ..This.is.a.configuration.parame |
85420 | 74 65 72 20 66 6f 72 20 74 68 65 20 73 75 62 6e 65 74 2c 20 73 61 79 69 6e 67 20 74 68 61 74 20 | ter.for.the.subnet,.saying.that. |
85440 | 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 68 | as.part.of.the.response,.tell.th |
85460 | 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e | e.client.that.the.DNS.server.can |
85480 | 20 62 65 20 66 6f 75 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 | .be.found.at.`<address>`..This.i |
854a0 | 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 72 65 67 75 | s.a.mandatory.command..Sets.regu |
854c0 | 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 | lar.expression.to.match.against. |
854e0 | 6c 6f 67 20 73 74 72 69 6e 67 20 6d 65 73 73 61 67 65 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 | log.string.message..This.is.a.ma |
85500 | 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 74 68 65 20 66 75 6c 6c 20 70 | ndatory.command..Sets.the.full.p |
85520 | 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 54 68 65 20 73 63 72 69 70 74 20 66 69 | ath.to.the.script..The.script.fi |
85540 | 6c 65 20 6d 75 73 74 20 62 65 20 65 78 65 63 75 74 61 62 6c 65 2e 00 54 68 69 73 20 69 73 20 61 | le.must.be.executable..This.is.a |
85560 | 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 | .mandatory.option.This.is.a.mand |
85580 | 61 74 6f 72 79 20 73 65 74 74 69 6e 67 2e 00 54 68 69 73 20 69 73 20 61 63 68 69 65 76 65 64 20 | atory.setting..This.is.achieved. |
855a0 | 62 79 20 75 73 69 6e 67 20 74 68 65 20 66 69 72 73 74 20 74 68 72 65 65 20 62 69 74 73 20 6f 66 | by.using.the.first.three.bits.of |
855c0 | 20 74 68 65 20 54 6f 53 20 28 54 79 70 65 20 6f 66 20 53 65 72 76 69 63 65 29 20 66 69 65 6c 64 | .the.ToS.(Type.of.Service).field |
855e0 | 20 74 6f 20 63 61 74 65 67 6f 72 69 7a 65 20 64 61 74 61 20 73 74 72 65 61 6d 73 20 61 6e 64 2c | .to.categorize.data.streams.and, |
85600 | 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 | .in.accordance.with.the.defined. |
85620 | 70 72 65 63 65 64 65 6e 63 65 20 70 61 72 61 6d 65 74 65 72 73 2c 20 61 20 64 65 63 69 73 69 6f | precedence.parameters,.a.decisio |
85640 | 6e 20 69 73 20 6d 61 64 65 2e 00 54 68 69 73 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 | n.is.made..This.is.also.known.as |
85660 | 20 74 68 65 20 48 55 42 73 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 2e 00 54 68 | .the.HUBs.IP.address.or.FQDN..Th |
85680 | 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 62 65 63 61 75 73 | is.is.an.optional.command.becaus |
856a0 | 65 20 74 68 65 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 77 69 6c 6c 20 62 65 20 61 75 74 6f | e.the.event.handler.will.be.auto |
856c0 | 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 64 20 61 66 74 65 72 20 61 6e 79 20 6f 66 20 74 | matically.created.after.any.of.t |
856e0 | 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 6e 64 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 | he.next.commands..This.is.an.opt |
85700 | 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 61 72 67 75 6d 65 6e 74 73 20 74 6f | ional.command..Adds.arguments.to |
85720 | 20 74 68 65 20 73 63 72 69 70 74 2e 20 41 72 67 75 6d 65 6e 74 73 20 6d 75 73 74 20 62 65 20 73 | .the.script..Arguments.must.be.s |
85740 | 65 70 61 72 61 74 65 64 20 62 79 20 73 70 61 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f | eparated.by.spaces..This.is.an.o |
85760 | 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 41 64 64 73 20 65 6e 76 69 72 6f 6e 6d 65 6e | ptional.command..Adds.environmen |
85780 | 74 20 61 6e 64 20 69 74 73 20 76 61 6c 75 65 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 55 | t.and.its.value.to.the.script..U |
857a0 | 73 65 20 73 65 70 61 72 61 74 65 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 65 61 63 68 20 65 6e | se.separate.commands.for.each.en |
857c0 | 76 69 72 6f 6e 6d 65 6e 74 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 | vironment..This.is.an.optional.c |
857e0 | 6f 6d 6d 61 6e 64 2e 20 46 69 6c 74 65 72 73 20 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 62 79 20 | ommand..Filters.log.messages.by. |
85800 | 73 79 73 6c 6f 67 2d 69 64 65 6e 74 69 66 69 65 72 2e 00 54 68 69 73 20 69 73 20 64 6f 6e 65 20 | syslog-identifier..This.is.done. |
85820 | 74 6f 20 73 75 70 70 6f 72 74 20 28 65 74 68 65 72 6e 65 74 29 20 73 77 69 74 63 68 20 66 65 61 | to.support.(ethernet).switch.fea |
85840 | 74 75 72 65 73 2c 20 6c 69 6b 65 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 77 68 65 72 65 20 74 | tures,.like.:rfc:`3069`,.where.t |
85860 | 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 70 6f 72 74 73 20 61 72 65 20 4e 4f 54 20 61 6c 6c 6f | he.individual.ports.are.NOT.allo |
85880 | 77 65 64 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 20 6f 74 68 | wed.to.communicate.with.each.oth |
858a0 | 65 72 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 74 61 6c 6b | er,.but.they.are.allowed.to.talk |
858c0 | 20 74 6f 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f 75 74 65 72 2e 20 41 73 20 64 65 73 63 | .to.the.upstream.router..As.desc |
858e0 | 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 30 36 39 60 2c 20 69 74 20 69 73 20 70 6f 73 73 | ribed.in.:rfc:`3069`,.it.is.poss |
85900 | 69 62 6c 65 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d | ible.to.allow.these.hosts.to.com |
85920 | 6d 75 6e 69 63 61 74 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f | municate.through.the.upstream.ro |
85940 | 75 74 65 72 20 62 79 20 70 72 6f 78 79 5f 61 72 70 27 69 6e 67 2e 00 54 68 69 73 20 69 73 20 65 | uter.by.proxy_arp'ing..This.is.e |
85960 | 73 70 65 63 69 61 6c 6c 79 20 75 73 65 66 75 6c 20 66 6f 72 20 74 68 65 20 75 70 73 74 72 65 61 | specially.useful.for.the.upstrea |
85980 | 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 73 69 6e 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 66 6f | m.interface,.since.the.source.fo |
859a0 | 72 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 69 73 20 6f 66 74 65 6e 20 66 72 6f | r.multicast.traffic.is.often.fro |
859c0 | 6d 20 61 20 72 65 6d 6f 74 65 20 6c 6f 63 61 74 69 6f 6e 2e 00 54 68 69 73 20 69 73 20 6f 6e 65 | m.a.remote.location..This.is.one |
859e0 | 20 6f 66 20 74 68 65 20 73 69 6d 70 6c 65 73 74 20 74 79 70 65 73 20 6f 66 20 74 75 6e 6e 65 6c | .of.the.simplest.types.of.tunnel |
85a00 | 73 2c 20 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 3a 72 66 63 3a 60 32 30 30 33 60 2e 20 49 74 | s,.as.defined.by.:rfc:`2003`..It |
85a20 | 20 74 61 6b 65 73 20 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 20 | .takes.an.IPv4.packet.and.sends. |
85a40 | 69 74 20 61 73 20 61 20 70 61 79 6c 6f 61 64 20 6f 66 20 61 6e 6f 74 68 65 72 20 49 50 76 34 20 | it.as.a.payload.of.another.IPv4. |
85a60 | 70 61 63 6b 65 74 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 74 68 65 72 65 20 61 | packet..For.this.reason,.there.a |
85a80 | 72 65 20 6e 6f 20 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e | re.no.other.configuration.option |
85aa0 | 73 20 66 6f 72 20 74 68 69 73 20 6b 69 6e 64 20 6f 66 20 74 75 6e 6e 65 6c 2e 00 54 68 69 73 20 | s.for.this.kind.of.tunnel..This. |
85ac0 | 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 54 68 69 73 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 | is.optional..This.is.similar.to. |
85ae0 | 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 72 74 2c 20 62 75 74 20 68 65 72 | the.network.groups.part,.but.her |
85b00 | 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 61 74 65 20 74 68 65 20 6d 61 74 | e.you.are.able.to.negate.the.mat |
85b20 | 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 49 50 76 | ching.addresses..This.is.the.IPv |
85b40 | 36 20 63 6f 75 6e 74 65 72 70 61 72 74 20 6f 66 20 49 50 49 50 2e 20 49 27 6d 20 6e 6f 74 20 61 | 6.counterpart.of.IPIP..I'm.not.a |
85b60 | 77 61 72 65 20 6f 66 20 61 6e 20 52 46 43 20 74 68 61 74 20 64 65 66 69 6e 65 73 20 74 68 69 73 | ware.of.an.RFC.that.defines.this |
85b80 | 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 62 75 74 | .encapsulation.specifically,.but |
85ba0 | 20 69 74 27 73 20 61 20 6e 61 74 75 72 61 6c 20 73 70 65 63 69 66 69 63 20 63 61 73 65 20 6f 66 | .it's.a.natural.specific.case.of |
85bc0 | 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 73 20 64 | .IPv6.encapsulation.mechanisms.d |
85be0 | 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 32 34 37 33 60 2e 00 54 68 69 73 20 69 73 20 | escribed.in.:rfc:2473`..This.is. |
85c00 | 74 68 65 20 4c 41 4e 20 65 78 74 65 6e 73 69 6f 6e 20 75 73 65 20 63 61 73 65 2e 20 54 68 65 20 | the.LAN.extension.use.case..The. |
85c20 | 65 74 68 30 20 70 6f 72 74 20 6f 66 20 74 68 65 20 64 69 73 74 61 6e 74 20 56 50 4e 20 70 65 65 | eth0.port.of.the.distant.VPN.pee |
85c40 | 72 73 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 | rs.will.be.directly.connected.li |
85c60 | 6b 65 20 69 66 20 74 68 65 72 65 20 77 61 73 20 61 20 73 77 69 74 63 68 20 62 65 74 77 65 65 6e | ke.if.there.was.a.switch.between |
85c80 | 20 74 68 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 4c 43 44 20 6d 6f 64 65 6c 20 75 73 65 | .them..This.is.the.LCD.model.use |
85ca0 | 64 20 69 6e 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 63 6f | d.in.your.system..This.is.the.co |
85cc0 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 65 6e | nfiguration.parameter.for.the.en |
85ce0 | 74 69 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 | tire.shared.network.definition.. |
85d00 | 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f | All.subnets.will.inherit.this.co |
85d20 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 | nfiguration.item.if.not.specifie |
85d40 | 64 20 6c 6f 63 61 6c 6c 79 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | d.locally..This.is.the.configura |
85d60 | 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 | tion.parameter.for.the.entire.sh |
85d80 | 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 | ared.network.definition..All.sub |
85da0 | 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 | nets.will.inherit.this.configura |
85dc0 | 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c | tion.item.if.not.specified.local |
85de0 | 6c 79 2e 20 4d 75 6c 74 69 70 6c 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 | ly..Multiple.DNS.servers.can.be. |
85e00 | 64 65 66 69 6e 65 64 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 | defined..This.is.the.equivalent. |
85e20 | 6f 66 20 74 68 65 20 68 6f 73 74 20 62 6c 6f 63 6b 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 | of.the.host.block.in.dhcpd.conf. |
85e40 | 6f 66 20 69 73 63 2d 64 68 63 70 64 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 6e 61 6d 65 20 6f | of.isc-dhcpd..This.is.the.name.o |
85e60 | 66 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 74 6f | f.the.physical.interface.used.to |
85e80 | 20 63 6f 6e 6e 65 63 74 20 74 6f 20 79 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 61 | .connect.to.your.LCD.display..Ta |
85ea0 | 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 69 74 | b.completion.is.supported.and.it |
85ec0 | 20 77 69 6c 6c 20 6c 69 73 74 20 79 6f 75 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 73 65 72 | .will.list.you.all.available.ser |
85ee0 | 69 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 70 6f 6c 69 63 | ial.interface..This.is.the.polic |
85f00 | 79 20 74 68 61 74 20 72 65 71 75 69 65 72 65 73 20 74 68 65 20 6c 6f 77 65 73 74 20 72 65 73 6f | y.that.requieres.the.lowest.reso |
85f20 | 75 72 63 65 73 20 66 6f 72 20 74 68 65 20 73 61 6d 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 72 61 | urces.for.the.same.amount.of.tra |
85f40 | 66 66 69 63 2e 20 42 75 74 20 2a 2a 76 65 72 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 64 6f 20 6e | ffic..But.**very.likely.you.do.n |
85f60 | 6f 74 20 6e 65 65 64 20 69 74 20 61 73 20 79 6f 75 20 63 61 6e 6e 6f 74 20 67 65 74 20 6d 75 63 | ot.need.it.as.you.cannot.get.muc |
85f80 | 68 20 66 72 6f 6d 20 69 74 2e 20 53 6f 6d 65 74 69 6d 65 73 20 69 74 20 69 73 20 75 73 65 64 20 | h.from.it..Sometimes.it.is.used. |
85fa0 | 6a 75 73 74 20 74 6f 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 2e 2a 2a 00 54 68 69 73 20 69 | just.to.enable.logging.**.This.i |
85fc0 | 73 20 75 73 65 66 75 6c 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 6e 20 63 6f 6d 62 69 6e | s.useful,.for.example,.in.combin |
85fe0 | 61 74 69 6f 6e 20 77 69 74 68 20 68 6f 73 74 66 69 6c 65 20 75 70 64 61 74 65 2e 00 54 68 69 73 | ation.with.hostfile.update..This |
86000 | 20 69 73 20 77 68 65 72 65 20 22 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 22 20 | .is.where."UDP.broadcast.relay". |
86020 | 63 6f 6d 65 73 20 69 6e 74 6f 20 70 6c 61 79 21 20 49 74 20 77 69 6c 6c 20 66 6f 72 77 61 72 64 | comes.into.play!.It.will.forward |
86040 | 20 72 65 63 65 69 76 65 64 20 62 72 6f 61 64 63 61 73 74 73 20 74 6f 20 6f 74 68 65 72 20 63 6f | .received.broadcasts.to.other.co |
86060 | 6e 66 69 67 75 72 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 6d 61 6b 65 73 20 74 68 | nfigured.networks..This.makes.th |
86080 | 65 20 73 65 72 76 65 72 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 20 6e 6f 74 20 61 77 61 | e.server.authoritatively.not.awa |
860a0 | 72 65 20 6f 66 3a 20 31 30 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e | re.of:.10.in-addr.arpa,.168.192. |
860c0 | 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e | in-addr.arpa,.16-31.172.in-addr. |
860e0 | 61 72 70 61 2c 20 77 68 69 63 68 20 65 6e 61 62 6c 69 6e 67 20 75 70 73 74 72 65 61 6d 20 44 4e | arpa,.which.enabling.upstream.DN |
86100 | 53 20 73 65 72 76 65 72 28 73 29 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 72 65 76 65 72 | S.server(s).to.be.used.for.rever |
86120 | 73 65 20 6c 6f 6f 6b 75 70 73 20 6f 66 20 74 68 65 73 65 20 7a 6f 6e 65 73 2e 00 54 68 69 73 20 | se.lookups.of.these.zones..This. |
86140 | 6d 65 74 68 6f 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 49 50 | method.automatically.disables.IP |
86160 | 76 36 20 74 72 61 66 66 69 63 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 | v6.traffic.forwarding.on.the.int |
86180 | 65 72 66 61 63 65 20 69 6e 20 71 75 65 73 74 69 6f 6e 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 | erface.in.question..This.mode.pr |
861a0 | 6f 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 73 20 6d 6f 64 | ovides.fault.tolerance..This.mod |
861c0 | 65 20 70 72 6f 76 69 64 65 73 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 20 54 68 65 20 | e.provides.fault.tolerance..The. |
861e0 | 3a 63 66 67 63 6d 64 3a 60 70 72 69 6d 61 72 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 | :cfgcmd:`primary`.option,.docume |
86200 | 6e 74 65 64 20 62 65 6c 6f 77 2c 20 61 66 66 65 63 74 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 | nted.below,.affects.the.behavior |
86220 | 20 6f 66 20 74 68 69 73 20 6d 6f 64 65 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 | .of.this.mode..This.mode.provide |
86240 | 73 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 66 61 75 6c 74 20 74 6f 6c 65 72 | s.load.balancing.and.fault.toler |
86260 | 61 6e 63 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 61 64 64 73 20 50 6f 77 65 72 20 43 6f 6e | ance..This.option.adds.Power.Con |
86280 | 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 77 68 65 6e 20 61 70 70 6c 69 63 61 62 6c 65 20 | straint.element.when.applicable. |
862a0 | 61 6e 64 20 43 6f 75 6e 74 72 79 20 65 6c 65 6d 65 6e 74 20 69 73 20 61 64 64 65 64 2e 20 50 6f | and.Country.element.is.added..Po |
862c0 | 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 72 65 71 75 69 72 | wer.Constraint.element.is.requir |
862e0 | 65 64 20 62 79 20 54 72 61 6e 73 6d 69 74 20 50 6f 77 65 72 20 43 6f 6e 74 72 6f 6c 2e 00 54 68 | ed.by.Transmit.Power.Control..Th |
86300 | 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 | is.option.can.be.specified.multi |
86320 | 70 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 75 | ple.times..This.option.can.be.su |
86340 | 70 70 6c 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 | pplied.multiple.times..This.opti |
86360 | 6f 6e 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 69 6e 20 41 63 63 65 73 73 2d 50 6f 69 6e 74 20 | on.is.mandatory.in.Access-Point. |
86380 | 6d 6f 64 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 77 68 | mode..This.option.is.required.wh |
863a0 | 65 6e 20 72 75 6e 6e 69 6e 67 20 61 20 44 4d 56 50 4e 20 73 70 6f 6b 65 2e 00 54 68 69 73 20 6f | en.running.a.DMVPN.spoke..This.o |
863c0 | 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e | ption.is.used.by.some.DHCP.clien |
863e0 | 74 73 20 61 73 20 61 20 77 61 79 20 66 6f 72 20 75 73 65 72 73 20 74 6f 20 73 70 65 63 69 66 79 | ts.as.a.way.for.users.to.specify |
86400 | 20 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 | .identifying.information.to.the. |
86420 | 63 6c 69 65 6e 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 61 20 73 69 | client..This.can.be.used.in.a.si |
86440 | 6d 69 6c 61 72 20 77 61 79 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 | milar.way.to.the.vendor-class-id |
86460 | 65 6e 74 69 66 69 65 72 20 6f 70 74 69 6f 6e 2c 20 62 75 74 20 74 68 65 20 76 61 6c 75 65 20 6f | entifier.option,.but.the.value.o |
86480 | 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 | f.the.option.is.specified.by.the |
864a0 | 20 75 73 65 72 2c 20 6e 6f 74 20 74 68 65 20 76 65 6e 64 6f 72 2e 00 54 68 69 73 20 6f 70 74 69 | .user,.not.the.vendor..This.opti |
864c0 | 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 | on.is.used.by.some.DHCP.clients. |
864e0 | 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 76 65 6e 64 6f 72 20 74 79 70 65 20 61 6e 64 20 | to.identify.the.vendor.type.and. |
86500 | 70 6f 73 73 69 62 6c 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 | possibly.the.configuration.of.a. |
86520 | 44 48 43 50 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 | DHCP.client..The.information.is. |
86540 | 61 20 73 74 72 69 6e 67 20 6f 66 20 62 79 74 65 73 20 77 68 6f 73 65 20 63 6f 6e 74 65 6e 74 73 | a.string.of.bytes.whose.contents |
86560 | 20 61 72 65 20 73 70 65 63 69 66 69 63 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 20 61 6e 64 20 | .are.specific.to.the.vendor.and. |
86580 | 61 72 65 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 74 61 6e 64 61 72 64 2e | are.not.specified.in.a.standard. |
865a0 | 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 60 | .This.option.must.be.used.with.` |
865c0 | 60 74 69 6d 65 6f 75 74 60 60 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 6f | `timeout``.option..This.option.o |
865e0 | 6e 6c 79 20 61 66 66 65 63 74 73 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 2e 00 54 68 69 73 20 6f | nly.affects.802.3ad.mode..This.o |
86600 | 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 73 20 61 20 64 65 6c 61 79 20 69 6e 20 73 65 63 6f 6e | ption.specifies.a.delay.in.secon |
86620 | 64 73 20 62 65 66 6f 72 65 20 76 72 72 70 20 69 6e 73 74 61 6e 63 65 73 20 73 74 61 72 74 20 75 | ds.before.vrrp.instances.start.u |
86640 | 70 20 61 66 74 65 72 20 6b 65 65 70 61 6c 69 76 65 64 20 73 74 61 72 74 73 2e 00 54 68 69 73 20 | p.after.keepalived.starts..This. |
86660 | 6f 70 74 69 6f 6e 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 00 54 68 69 73 20 70 61 | options.defaults.to.2048.This.pa |
86680 | 72 61 6d 65 74 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 22 73 68 6f 72 74 63 75 74 22 20 72 6f 75 | rameter.allows.to."shortcut".rou |
866a0 | 74 65 73 20 28 6e 6f 6e 2d 62 61 63 6b 62 6f 6e 65 29 20 66 6f 72 20 69 6e 74 65 72 2d 61 72 65 | tes.(non-backbone).for.inter-are |
866c0 | 61 20 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 20 | a.routes..There.are.three.modes. |
866e0 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e | available.for.routes.shortcuttin |
86700 | 67 3a 00 54 68 69 73 20 70 6f 6c 69 63 79 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 | g:.This.policy.is.intended.to.pr |
86720 | 6f 76 69 64 65 20 61 20 6d 6f 72 65 20 62 61 6c 61 6e 63 65 64 20 64 69 73 74 72 69 62 75 74 69 | ovide.a.more.balanced.distributi |
86740 | 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 20 74 68 61 6e 20 6c 61 79 65 72 32 20 61 6c 6f 6e 65 2c | on.of.traffic.than.layer2.alone, |
86760 | 20 65 73 70 65 63 69 61 6c 6c 79 20 69 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 65 72 | .especially.in.environments.wher |
86780 | 65 20 61 20 6c 61 79 65 72 33 20 67 61 74 65 77 61 79 20 64 65 76 69 63 65 20 69 73 20 72 65 71 | e.a.layer3.gateway.device.is.req |
867a0 | 75 69 72 65 64 20 74 6f 20 72 65 61 63 68 20 6d 6f 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 | uired.to.reach.most.destinations |
867c0 | 2e 00 54 68 69 73 20 70 72 6f 6d 70 74 65 64 20 73 6f 6d 65 20 49 53 50 73 20 74 6f 20 64 65 76 | ..This.prompted.some.ISPs.to.dev |
867e0 | 65 6c 6f 70 20 61 20 70 6f 6c 69 63 79 20 77 69 74 68 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 | elop.a.policy.within.the.:abbr:` |
86800 | 41 52 49 4e 20 28 41 6d 65 72 69 63 61 6e 20 52 65 67 69 73 74 72 79 20 66 6f 72 20 49 6e 74 65 | ARIN.(American.Registry.for.Inte |
86820 | 72 6e 65 74 20 4e 75 6d 62 65 72 73 29 60 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6e 65 77 20 70 | rnet.Numbers)`.to.allocate.new.p |
86840 | 72 69 76 61 74 65 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 66 6f 72 20 43 47 4e 73 2c 20 62 | rivate.address.space.for.CGNs,.b |
86860 | 75 74 20 41 52 49 4e 20 64 65 66 65 72 72 65 64 20 74 6f 20 74 68 65 20 49 45 54 46 20 62 65 66 | ut.ARIN.deferred.to.the.IETF.bef |
86880 | 6f 72 65 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 74 68 65 20 70 6f 6c 69 63 79 20 69 6e 64 69 | ore.implementing.the.policy.indi |
868a0 | 63 61 74 69 6e 67 20 74 68 61 74 20 74 68 65 20 6d 61 74 74 65 72 20 77 61 73 20 6e 6f 74 20 61 | cating.that.the.matter.was.not.a |
868c0 | 20 74 79 70 69 63 61 6c 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 69 73 73 75 65 20 62 75 74 20 61 20 | .typical.allocation.issue.but.a. |
868e0 | 72 65 73 65 72 76 61 74 69 6f 6e 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 65 63 | reservation.of.addresses.for.tec |
86900 | 68 6e 69 63 61 6c 20 70 75 72 70 6f 73 65 73 20 28 70 65 72 20 3a 72 66 63 3a 60 32 38 36 30 60 | hnical.purposes.(per.:rfc:`2860` |
86920 | 29 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 73 | )..This.required.setting.defines |
86940 | 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 2e | .the.action.of.the.current.rule. |
86960 | 20 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 | .If.action.is.set.to.``jump``,.t |
86980 | 68 65 6e 20 60 60 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 | hen.``jump-target``.is.also.need |
869a0 | 65 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 | ed..This.required.setting.define |
869c0 | 73 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 | s.the.action.of.the.current.rule |
869e0 | 2e 20 49 66 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 6d 70 2c 20 74 68 65 6e | ..If.action.is.set.to.jump,.then |
86a00 | 20 6a 75 6d 70 2d 74 61 72 67 65 74 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 | .jump-target.is.also.needed..Thi |
86a20 | 73 20 72 65 71 75 69 72 65 73 20 74 77 6f 20 66 69 6c 65 73 2c 20 6f 6e 65 20 74 6f 20 63 72 65 | s.requires.two.files,.one.to.cre |
86a40 | 61 74 65 20 74 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 64 65 76 29 20 61 6e 64 20 | ate.the.device.(XXX.netdev).and. |
86a60 | 6f 6e 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 6f 6e 20 | one.to.configure.the.network.on. |
86a80 | 74 68 65 20 64 65 76 69 63 65 20 28 58 58 58 2e 6e 65 74 77 6f 72 6b 29 00 54 68 69 73 20 72 65 | the.device.(XXX.network).This.re |
86aa0 | 73 75 6c 74 73 20 69 6e 20 74 68 65 20 61 63 74 69 76 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | sults.in.the.active.configuratio |
86ac0 | 6e 3a 00 54 68 69 73 20 73 61 79 73 20 74 68 61 74 20 74 68 69 73 20 64 65 76 69 63 65 20 69 73 | n:.This.says.that.this.device.is |
86ae0 | 20 74 68 65 20 6f 6e 6c 79 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 69 73 20 6e | .the.only.DHCP.server.for.this.n |
86b00 | 65 74 77 6f 72 6b 2e 20 49 66 20 6f 74 68 65 72 20 64 65 76 69 63 65 73 20 61 72 65 20 74 72 79 | etwork..If.other.devices.are.try |
86b20 | 69 6e 67 20 74 6f 20 6f 66 66 65 72 20 44 48 43 50 20 6c 65 61 73 65 73 2c 20 74 68 69 73 20 6d | ing.to.offer.DHCP.leases,.this.m |
86b40 | 61 63 68 69 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 27 44 48 43 50 4e 41 4b 27 20 74 6f 20 61 6e | achine.will.send.'DHCPNAK'.to.an |
86b60 | 79 20 64 65 76 69 63 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 71 75 65 73 74 20 61 6e 20 49 50 | y.device.trying.to.request.an.IP |
86b80 | 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 66 6f 72 20 74 | .address.that.is.not.valid.for.t |
86ba0 | 68 69 73 20 6e 65 74 77 6f 72 6b 2e 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 | his.network..This.section.descri |
86bc0 | 62 65 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 44 4e 53 20 6f 6e 20 74 68 65 20 73 79 73 74 65 | bes.configuring.DNS.on.the.syste |
86be0 | 6d 2c 20 6e 61 6d 65 6c 79 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 62 65 | m,.namely:.This.section.describe |
86c00 | 73 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 68 6f 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | s.the.system's.host.information. |
86c20 | 61 6e 64 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 2c 20 69 74 20 63 6f | and.how.to.configure.them,.it.co |
86c40 | 76 65 72 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 69 63 73 3a 00 54 68 69 73 20 | vers.the.following.topics:.This. |
86c60 | 73 65 63 74 69 6f 6e 20 6e 65 65 64 73 20 69 6d 70 72 6f 76 65 6d 65 6e 74 73 2c 20 65 78 61 6d | section.needs.improvements,.exam |
86c80 | 70 6c 65 73 20 61 6e 64 20 65 78 70 6c 61 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 73 65 74 20 | ples.and.explanations..This.set. |
86ca0 | 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 | the.default.action.of.the.rule-s |
86cc0 | 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 | et.if.no.rule.matched.a.packet.c |
86ce0 | 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 | riteria..If.defacult-action.is.s |
86d00 | 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a | et.to.``jump``,.then.``default-j |
86d20 | 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 | ump-target``.is.also.needed..Thi |
86d40 | 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 | s.set.the.default.action.of.the. |
86d60 | 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 | rule-set.if.no.rule.matched.a.pa |
86d80 | 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 69 6f | cket.criteria..If.defacult-actio |
86da0 | 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 | n.is.set.to.``jump``,.then.``def |
86dc0 | 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 | ault-jump-target``.is.also.neede |
86de0 | 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 64 65 | d..Note.that.for.base.chains,.de |
86e00 | 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 20 74 6f 20 | fault.action.can.only.be.set.to. |
86e20 | 60 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e | ``accept``.or.``drop``,.while.on |
86e40 | 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 | .custom.chain,.more.actions.are. |
86e60 | 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 | available..This.set.the.default. |
86e80 | 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c | action.of.the.rule-set.if.no.rul |
86ea0 | 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 | e.matched.a.packet.criteria..If. |
86ec0 | 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 | default-action.is.set.to.``jump` |
86ee0 | 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 | `,.then.``default-jump-target``. |
86f00 | 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 | is.also.needed..Note.that.for.ba |
86f20 | 73 65 20 63 68 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e | se.chains,.default.action.can.on |
86f40 | 6c 79 20 62 65 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f | ly.be.set.to.``accept``.or.``dro |
86f60 | 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 | p``,.while.on.custom.chain,.more |
86f80 | 20 61 63 74 69 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 | .actions.are.available..This.set |
86fa0 | 73 20 74 68 65 20 61 63 63 65 70 74 65 64 20 63 69 70 68 65 72 73 20 74 6f 20 75 73 65 20 77 68 | s.the.accepted.ciphers.to.use.wh |
86fc0 | 65 6e 20 76 65 72 73 69 6f 6e 20 3d 3e 20 32 2e 34 2e 30 20 61 6e 64 20 4e 43 50 20 69 73 20 65 | en.version.=>.2.4.0.and.NCP.is.e |
86fe0 | 6e 61 62 6c 65 64 20 28 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 29 2e 20 44 | nabled.(which.is.the.default)..D |
87000 | 65 66 61 75 6c 74 20 4e 43 50 20 63 69 70 68 65 72 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 3e | efault.NCP.cipher.for.versions.> |
87020 | 3d 20 32 2e 34 2e 30 20 69 73 20 61 65 73 32 35 36 67 63 6d 2e 20 54 68 65 20 66 69 72 73 74 20 | =.2.4.0.is.aes256gcm..The.first. |
87040 | 63 69 70 68 65 72 20 69 6e 20 74 68 69 73 20 6c 69 73 74 20 69 73 20 77 68 61 74 20 73 65 72 76 | cipher.in.this.list.is.what.serv |
87060 | 65 72 20 70 75 73 68 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 2e 00 54 68 69 73 20 73 65 74 73 20 | er.pushes.to.clients..This.sets. |
87080 | 74 68 65 20 63 69 70 68 65 72 20 77 68 65 6e 20 4e 43 50 20 28 4e 65 67 6f 74 69 61 62 6c 65 20 | the.cipher.when.NCP.(Negotiable. |
870a0 | 43 72 79 70 74 6f 20 50 61 72 61 6d 65 74 65 72 73 29 20 69 73 20 64 69 73 61 62 6c 65 64 20 6f | Crypto.Parameters).is.disabled.o |
870c0 | 72 20 4f 70 65 6e 56 50 4e 20 76 65 72 73 69 6f 6e 20 3c 20 32 2e 34 2e 30 2e 00 54 68 69 73 20 | r.OpenVPN.version.<.2.4.0..This. |
870e0 | 73 65 74 74 69 6e 67 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 35 30 30 20 61 6e 64 20 69 73 20 | setting.defaults.to.1500.and.is. |
87100 | 76 61 6c 69 64 20 62 65 74 77 65 65 6e 20 31 30 20 61 6e 64 20 36 30 30 30 30 2e 00 54 68 69 73 | valid.between.10.and.60000..This |
87120 | 20 73 65 74 74 69 6e 67 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 | .setting.enable.or.disable.the.r |
87140 | 65 73 70 6f 6e 73 65 20 6f 66 20 69 63 6d 70 20 62 72 6f 61 64 63 61 73 74 20 6d 65 73 73 61 67 | esponse.of.icmp.broadcast.messag |
87160 | 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 | es..The.following.system.paramet |
87180 | 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 | er.will.be.altered:.This.setting |
871a0 | 20 68 61 6e 64 6c 65 20 69 66 20 56 79 4f 53 20 61 63 63 65 70 74 20 70 61 63 6b 65 74 73 20 77 | .handle.if.VyOS.accept.packets.w |
871c0 | 69 74 68 20 61 20 73 6f 75 72 63 65 20 72 6f 75 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 66 | ith.a.source.route.option..The.f |
871e0 | 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 | ollowing.system.parameter.will.b |
87200 | 65 20 61 6c 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 2c 20 77 68 69 63 68 20 64 | e.altered:.This.setting,.which.d |
87220 | 65 66 61 75 6c 74 73 20 74 6f 20 33 36 30 30 20 73 65 63 6f 6e 64 73 2c 20 70 75 74 73 20 61 20 | efaults.to.3600.seconds,.puts.a. |
87240 | 6d 61 78 69 6d 75 6d 20 6f 6e 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 6e 65 | maximum.on.the.amount.of.time.ne |
87260 | 67 61 74 69 76 65 20 65 6e 74 72 69 65 73 20 61 72 65 20 63 61 63 68 65 64 2e 00 54 68 69 73 20 | gative.entries.are.cached..This. |
87280 | 73 65 74 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 | setup.will.make.the.VRRP.process |
872a0 | 20 65 78 65 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 | .execute.the.``/config/scripts/v |
872c0 | 72 72 70 2d 63 68 65 63 6b 2e 73 68 20 73 63 72 69 70 74 60 60 20 65 76 65 72 79 20 36 30 20 73 | rrp-check.sh.script``.every.60.s |
872e0 | 65 63 6f 6e 64 73 2c 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 67 72 6f 75 70 | econds,.and.transition.the.group |
87300 | 20 74 6f 20 74 68 65 20 66 61 75 6c 74 20 73 74 61 74 65 20 69 66 20 69 74 20 66 61 69 6c 73 20 | .to.the.fault.state.if.it.fails. |
87320 | 28 69 2e 65 2e 20 65 78 69 74 73 20 77 69 74 68 20 6e 6f 6e 2d 7a 65 72 6f 20 73 74 61 74 75 73 | (i.e..exits.with.non-zero.status |
87340 | 29 20 74 68 72 65 65 20 74 69 6d 65 73 3a 00 54 68 69 73 20 73 74 61 74 65 6d 65 6e 74 20 73 70 | ).three.times:.This.statement.sp |
87360 | 65 63 69 66 69 65 73 20 64 68 63 70 36 63 20 74 6f 20 6f 6e 6c 79 20 65 78 63 68 61 6e 67 65 20 | ecifies.dhcp6c.to.only.exchange. |
87380 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 | informational.configuration.para |
873a0 | 6d 65 74 65 72 73 20 77 69 74 68 20 73 65 72 76 65 72 73 2e 20 41 20 6c 69 73 74 20 6f 66 20 44 | meters.with.servers..A.list.of.D |
873c0 | 4e 53 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 65 73 20 69 73 20 61 6e 20 65 78 61 6d 70 6c | NS.server.addresses.is.an.exampl |
873e0 | 65 20 6f 66 20 73 75 63 68 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 69 73 20 73 74 61 74 65 | e.of.such.parameters..This.state |
87400 | 6d 65 6e 74 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 64 | ment.is.useful.when.the.client.d |
87420 | 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 73 74 61 74 65 66 75 6c 20 63 6f 6e 66 69 67 75 72 61 74 | oes.not.need.stateful.configurat |
87440 | 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 73 75 63 68 20 61 73 20 49 50 76 36 20 61 64 64 72 | ion.parameters.such.as.IPv6.addr |
87460 | 65 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 73 2e 00 54 68 69 73 20 73 75 70 70 6f 72 74 20 | esses.or.prefixes..This.support. |
87480 | 6d 61 79 20 62 65 20 65 6e 61 62 6c 65 64 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 | may.be.enabled.administratively. |
874a0 | 28 61 6e 64 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 29 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 | (and.indefinitely).with.the.:cfg |
874c0 | 63 6d 64 3a 60 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 60 20 63 6f 6d 6d 61 6e 64 2e 20 49 74 | cmd:`administrative`.command..It |
874e0 | 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 20 63 6f 6e 64 69 74 69 6f 6e 61 6c | .may.also.be.enabled.conditional |
87500 | 6c 79 2e 20 43 6f 6e 64 69 74 69 6f 6e 61 6c 20 65 6e 61 62 6c 69 6e 67 20 6f 66 20 6d 61 78 2d | ly..Conditional.enabling.of.max- |
87520 | 6d 65 74 72 69 63 20 72 6f 75 74 65 72 2d 6c 73 61 73 20 63 61 6e 20 62 65 20 66 6f 72 20 61 20 | metric.router-lsas.can.be.for.a. |
87540 | 70 65 72 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 66 74 65 72 20 73 74 61 72 74 75 70 20 | period.of.seconds.after.startup. |
87560 | 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 74 61 72 74 75 70 20 3c 73 65 | with.the.:cfgcmd:`on-startup.<se |
87580 | 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 20 61 6e 64 2f 6f 72 20 66 6f 72 20 61 20 70 65 72 | conds>`.command.and/or.for.a.per |
875a0 | 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 73 20 70 72 69 6f 72 20 74 6f 20 73 68 75 74 64 6f 77 6e | iod.of.seconds.prior.to.shutdown |
875c0 | 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 6f 6e 2d 73 68 75 74 64 6f 77 6e 20 3c | .with.the.:cfgcmd:`on-shutdown.< |
875e0 | 73 65 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 | seconds>`.command..The.time.rang |
87600 | 65 20 69 73 20 35 20 74 6f 20 38 36 34 30 30 2e 00 54 68 69 73 20 74 65 63 68 6e 69 71 75 65 20 | e.is.5.to.86400..This.technique. |
87620 | 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 4e 41 54 20 52 | is.commonly.referred.to.as.NAT.R |
87640 | 65 66 6c 65 63 74 69 6f 6e 20 6f 72 20 48 61 69 72 70 69 6e 20 4e 41 54 2e 00 54 68 69 73 20 74 | eflection.or.Hairpin.NAT..This.t |
87660 | 65 63 68 6e 6f 6c 6f 67 79 20 69 73 20 6b 6e 6f 77 6e 20 62 79 20 64 69 66 66 65 72 65 6e 74 20 | echnology.is.known.by.different. |
87680 | 6e 61 6d 65 73 3a 00 54 68 69 73 20 74 68 65 20 73 69 6d 70 6c 65 73 74 20 71 75 65 75 65 20 70 | names:.This.the.simplest.queue.p |
876a0 | 6f 73 73 69 62 6c 65 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 20 74 6f 20 79 6f 75 72 20 74 72 | ossible.you.can.apply.to.your.tr |
876c0 | 61 66 66 69 63 2e 20 54 72 61 66 66 69 63 20 6d 75 73 74 20 67 6f 20 74 68 72 6f 75 67 68 20 61 | affic..Traffic.must.go.through.a |
876e0 | 20 66 69 6e 69 74 65 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 69 73 20 61 63 74 75 61 | .finite.queue.before.it.is.actua |
87700 | 6c 6c 79 20 73 65 6e 74 2e 20 59 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 68 6f 77 20 6d 61 | lly.sent..You.must.define.how.ma |
87720 | 6e 79 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 71 75 65 75 65 20 63 61 6e 20 63 6f 6e 74 61 69 | ny.packets.that.queue.can.contai |
87740 | 6e 2e 00 54 68 69 73 20 74 6f 70 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 69 6e 67 | n..This.topology.was.built.using |
87760 | 20 47 4e 53 33 2e 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | .GNS3..This.will.add.the.followi |
87780 | 6e 67 20 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 6e 64 6c | ng.option.to.the.Kernel.commandl |
877a0 | 69 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ine:.This.will.add.the.following |
877c0 | 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 | .two.options.to.the.Kernel.comma |
877e0 | 6e 64 6c 69 6e 65 3a 00 54 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6d 6f 73 74 20 77 69 | ndline:.This.will.be.the.most.wi |
87800 | 64 65 6c 79 20 75 73 65 64 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 61 20 72 6f 75 74 65 72 20 | dely.used.interface.on.a.router. |
87820 | 63 61 72 72 79 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 72 65 61 6c 20 77 6f 72 | carrying.traffic.to.the.real.wor |
87840 | 6c 64 2e 00 54 68 69 73 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 | ld..This.will.configure.a.static |
87860 | 20 41 52 50 20 65 6e 74 72 79 20 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 69 6e 67 20 60 3c 61 64 | .ARP.entry.always.resolving.`<ad |
87880 | 64 72 65 73 73 3e 60 20 74 6f 20 60 3c 6d 61 63 3e 60 20 66 6f 72 20 69 6e 74 65 72 66 61 63 65 | dress>`.to.`<mac>`.for.interface |
878a0 | 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 54 68 69 73 20 77 69 6c 6c 20 6d 61 74 63 68 20 | .`<interface>`..This.will.match. |
878c0 | 54 43 50 20 74 72 61 66 66 69 63 20 77 69 74 68 20 73 6f 75 72 63 65 20 70 6f 72 74 20 38 30 2e | TCP.traffic.with.source.port.80. |
878e0 | 00 54 68 69 73 20 77 69 6c 6c 20 72 65 6e 64 65 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .This.will.render.the.following. |
87900 | 64 64 63 6c 69 65 6e 74 5f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 74 72 79 3a 00 54 | ddclient_.configuration.entry:.T |
87920 | 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 72 65 77 61 | his.will.show.you.a.basic.firewa |
87940 | 6c 6c 20 6f 76 65 72 76 69 65 77 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 | ll.overview.This.will.show.you.a |
87960 | 20 62 61 73 69 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 65 77 2c 20 66 6f 72 20 61 6c | .basic.firewall.overview,.for.al |
87980 | 6c 20 72 75 6c 65 73 65 74 2c 20 61 6e 64 20 6e 6f 74 20 6f 6e 6c 79 20 66 6f 72 20 69 70 76 34 | l.ruleset,.and.not.only.for.ipv4 |
879a0 | 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d 6d | .This.will.show.you.a.basic.summ |
879c0 | 61 72 79 20 6f 66 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 7a 6f 6e 65 2e 00 54 68 69 73 20 77 | ary.of.a.particular.zone..This.w |
879e0 | 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 | ill.show.you.a.basic.summary.of. |
87a00 | 7a 6f 6e 65 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 | zones.configuration..This.will.s |
87a20 | 68 6f 77 20 79 6f 75 20 61 20 72 75 6c 65 2d 73 65 74 20 73 74 61 74 69 73 74 69 63 20 73 69 6e | how.you.a.rule-set.statistic.sin |
87a40 | 63 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 | ce.the.last.boot..This.will.show |
87a60 | 20 79 6f 75 20 61 20 73 74 61 74 69 73 74 69 63 20 6f 66 20 61 6c 6c 20 72 75 6c 65 2d 73 65 74 | .you.a.statistic.of.all.rule-set |
87a80 | 73 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c | s.since.the.last.boot..This.will |
87aa0 | 20 73 68 6f 77 20 79 6f 75 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 72 75 6c 65 2d 73 65 74 73 | .show.you.a.summary.of.rule-sets |
87ac0 | 20 61 6e 64 20 67 72 6f 75 70 73 00 54 68 69 73 20 77 6f 72 6b 61 72 6f 75 6e 64 20 6c 65 74 73 | .and.groups.This.workaround.lets |
87ae0 | 20 79 6f 75 20 61 70 70 6c 79 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 74 | .you.apply.a.shaping.policy.to.t |
87b00 | 68 65 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 62 79 20 66 69 72 73 74 20 72 65 64 69 | he.ingress.traffic.by.first.redi |
87b20 | 72 65 63 74 69 6e 67 20 69 74 20 74 6f 20 61 6e 20 69 6e 2d 62 65 74 77 65 65 6e 20 76 69 72 74 | recting.it.to.an.in-between.virt |
87b40 | 75 61 6c 20 69 6e 74 65 72 66 61 63 65 20 28 60 49 6e 74 65 72 6d 65 64 69 61 74 65 20 46 75 6e | ual.interface.(`Intermediate.Fun |
87b60 | 63 74 69 6f 6e 61 6c 20 42 6c 6f 63 6b 60 5f 29 2e 20 54 68 65 72 65 2c 20 69 6e 20 74 68 61 74 | ctional.Block`_)..There,.in.that |
87b80 | 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 | .virtual.interface,.you.will.be. |
87ba0 | 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 61 6e 79 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 69 65 | able.to.apply.any.of.the.policie |
87bc0 | 73 20 74 68 61 74 20 77 6f 72 6b 20 66 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 | s.that.work.for.outbound.traffic |
87be0 | 2c 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 61 20 73 68 61 70 69 6e 67 20 6f 6e 65 2e 00 54 | ,.for.instance,.a.shaping.one..T |
87c00 | 68 69 73 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | his.would.generate.the.following |
87c20 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 72 65 65 20 73 69 67 6e 69 66 69 63 61 6e | .configuration:.Three.significan |
87c40 | 74 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 53 4e 4d 50 20 68 61 76 65 20 62 65 65 6e 20 64 65 76 | t.versions.of.SNMP.have.been.dev |
87c60 | 65 6c 6f 70 65 64 20 61 6e 64 20 64 65 70 6c 6f 79 65 64 2e 20 53 4e 4d 50 76 31 20 69 73 20 74 | eloped.and.deployed..SNMPv1.is.t |
87c80 | 68 65 20 6f 72 69 67 69 6e 61 6c 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 6f 74 6f | he.original.version.of.the.proto |
87ca0 | 63 6f 6c 2e 20 4d 6f 72 65 20 72 65 63 65 6e 74 20 76 65 72 73 69 6f 6e 73 2c 20 53 4e 4d 50 76 | col..More.recent.versions,.SNMPv |
87cc0 | 32 63 20 61 6e 64 20 53 4e 4d 50 76 33 2c 20 66 65 61 74 75 72 65 20 69 6d 70 72 6f 76 65 6d 65 | 2c.and.SNMPv3,.feature.improveme |
87ce0 | 6e 74 73 20 69 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 66 6c 65 78 69 62 69 6c 69 74 79 20 | nts.in.performance,.flexibility. |
87d00 | 61 6e 64 20 73 65 63 75 72 69 74 79 2e 00 54 69 6d 65 20 5a 6f 6e 65 00 54 69 6d 65 20 5a 6f 6e | and.security..Time.Zone.Time.Zon |
87d20 | 65 20 73 65 74 74 69 6e 67 20 69 73 20 76 65 72 79 20 69 6d 70 6f 72 74 61 6e 74 20 61 73 20 65 | e.setting.is.very.important.as.e |
87d40 | 2e 67 20 61 6c 6c 20 79 6f 75 72 20 6c 6f 67 66 69 6c 65 20 65 6e 74 72 69 65 73 20 77 69 6c 6c | .g.all.your.logfile.entries.will |
87d60 | 20 62 65 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 7a 6f 6e 65 | .be.based.on.the.configured.zone |
87d80 | 2e 20 57 69 74 68 6f 75 74 20 70 72 6f 70 65 72 20 74 69 6d 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 | ..Without.proper.time.zone.confi |
87da0 | 67 75 72 61 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 76 65 72 79 20 64 69 66 66 69 63 75 | guration.it.will.be.very.difficu |
87dc0 | 6c 74 20 74 6f 20 63 6f 6d 70 61 72 65 20 6c 6f 67 66 69 6c 65 73 20 66 72 6f 6d 20 64 69 66 66 | lt.to.compare.logfiles.from.diff |
87de0 | 65 72 65 6e 74 20 73 79 73 74 65 6d 73 2e 00 54 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f | erent.systems..Time.in.milliseco |
87e00 | 6e 64 73 20 62 65 74 77 65 65 6e 20 72 65 74 72 61 6e 73 6d 69 74 74 65 64 20 4e 65 69 67 68 62 | nds.between.retransmitted.Neighb |
87e20 | 6f 72 20 53 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 00 54 69 6d 65 20 69 6e | or.Solicitation.messages.Time.in |
87e40 | 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 | .seconds.that.the.prefix.will.re |
87e60 | 6d 61 69 6e 20 70 72 65 66 65 72 72 65 64 20 28 64 65 66 61 75 6c 74 20 34 20 68 6f 75 72 73 29 | main.preferred.(default.4.hours) |
87e80 | 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 | .Time.in.seconds.that.the.prefix |
87ea0 | 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 3a 20 33 30 20 | .will.remain.valid.(default:.30. |
87ec0 | 64 61 79 73 29 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 | days).Time.in.seconds.that.the.p |
87ee0 | 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 | refix.will.remain.valid.(default |
87f00 | 3a 20 36 35 35 32 38 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 20 69 73 20 69 6e 20 6d 69 6e 75 | :.65528.seconds).Time.is.in.minu |
87f20 | 74 65 73 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 36 30 2e 00 54 69 6d 65 20 74 6f 20 | tes.and.defaults.to.60..Time.to. |
87f40 | 6d 61 74 63 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 72 75 6c 65 2e 00 54 69 6d 65 2c 20 69 6e | match.the.defined.rule..Time,.in |
87f60 | 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 74 68 61 74 20 61 20 6e 6f 64 65 20 61 73 73 75 6d | .milliseconds,.that.a.node.assum |
87f80 | 65 73 20 61 20 6e 65 69 67 68 62 6f 72 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 61 66 74 65 72 | es.a.neighbor.is.reachable.after |
87fa0 | 20 68 61 76 69 6e 67 20 72 65 63 65 69 76 65 64 20 61 20 72 65 61 63 68 61 62 69 6c 69 74 79 20 | .having.received.a.reachability. |
87fc0 | 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 00 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 00 | confirmation.Timeout.in.seconds. |
87fe0 | 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 68 65 61 6c 74 | Timeout.in.seconds.between.healt |
88000 | 68 20 74 61 72 67 65 74 20 63 68 65 63 6b 73 2e 00 54 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 | h.target.checks..Timeout.to.wait |
88020 | 20 72 65 70 6c 79 20 66 6f 72 20 49 6e 74 65 72 69 6d 2d 55 70 64 61 74 65 20 70 61 63 6b 65 74 | .reply.for.Interim-Update.packet |
88040 | 73 2e 20 28 64 65 66 61 75 6c 74 20 33 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 6f 75 74 20 74 | s..(default.3.seconds).Timeout.t |
88060 | 6f 20 77 61 69 74 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 73 65 72 76 65 72 20 28 73 65 63 | o.wait.response.from.server.(sec |
88080 | 6f 6e 64 73 29 00 54 69 6d 65 72 73 00 54 6f 20 61 63 74 69 76 61 74 65 20 74 68 65 20 56 4c 41 | onds).Timers.To.activate.the.VLA |
880a0 | 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 2c 20 79 6f 75 20 6d 75 73 74 20 61 63 74 69 76 61 74 | N.aware.bridge,.you.must.activat |
880c0 | 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 74 6f 20 75 73 65 20 56 4c 41 4e 20 73 65 74 74 69 | e.this.setting.to.use.VLAN.setti |
880e0 | 6e 67 73 20 66 6f 72 20 74 68 65 20 62 72 69 64 67 65 00 54 6f 20 61 6c 6c 6f 77 20 56 50 4e 2d | ngs.for.the.bridge.To.allow.VPN- |
88100 | 63 6c 69 65 6e 74 73 20 61 63 63 65 73 73 20 76 69 61 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c | clients.access.via.your.external |
88120 | 20 61 64 64 72 65 73 73 2c 20 61 20 4e 41 54 20 72 75 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 | .address,.a.NAT.rule.is.required |
88140 | 3a 00 54 6f 20 61 6c 6c 6f 77 20 6c 69 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 | :.To.allow.listing.additional.cu |
88160 | 73 74 6f 6d 20 64 6f 6d 61 69 6e 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 6f 70 65 6e 74 | stom.domain,.for.example.``opent |
88180 | 68 72 65 61 64 2e 74 68 72 65 61 64 2e 68 6f 6d 65 2e 61 72 70 61 60 60 2c 20 73 6f 20 74 68 61 | hread.thread.home.arpa``,.so.tha |
881a0 | 74 20 69 74 20 63 61 6e 20 72 65 66 6c 65 63 74 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 | t.it.can.reflected.in.addition.t |
881c0 | 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 2c 20 75 73 65 20 74 68 65 | o.the.default.``local``,.use.the |
881e0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 6f 6e 6c | .following.command:.To.allow.onl |
88200 | 79 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 | y.specific.services,.for.example |
88220 | 20 60 60 5f 61 69 72 70 6c 61 79 2e 5f 74 63 70 60 60 20 6f 72 20 60 60 5f 69 70 70 2e 5f 74 63 | .``_airplay._tcp``.or.``_ipp._tc |
88240 | 70 60 60 2c 20 28 69 6e 73 74 65 61 64 20 6f 66 20 61 6c 6c 20 73 65 72 76 69 63 65 73 29 20 74 | p``,.(instead.of.all.services).t |
88260 | 6f 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 2c 20 75 73 65 20 74 68 65 20 66 6f 6c | o.be.re-broadcasted,.use.the.fol |
88280 | 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 | lowing.command:.To.allow.traffic |
882a0 | 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 74 6f 20 63 6c 69 65 6e 74 73 2c 20 79 6f 75 | .to.pass.through.to.clients,.you |
882c0 | 20 6e 65 65 64 20 74 6f 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 75 6c 65 73 | .need.to.add.the.following.rules |
882e0 | 2e 20 28 69 66 20 79 6f 75 20 75 73 65 64 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 | ..(if.you.used.the.default.confi |
88300 | 67 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 69 73 20 70 61 67 65 | guration.at.the.top.of.this.page |
88320 | 29 00 54 6f 20 61 70 70 6c 79 20 74 68 69 73 20 70 6f 6c 69 63 79 20 74 6f 20 74 68 65 20 63 6f | ).To.apply.this.policy.to.the.co |
88340 | 72 72 65 63 74 20 69 6e 74 65 72 66 61 63 65 2c 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 6f 6e | rrect.interface,.configure.it.on |
88360 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6c 6f 63 61 6c | .the.interface.the.inbound.local |
88380 | 20 68 6f 73 74 20 77 69 6c 6c 20 73 65 6e 64 20 74 68 72 6f 75 67 68 20 74 6f 20 72 65 61 63 68 | .host.will.send.through.to.reach |
883a0 | 20 6f 75 72 20 64 65 73 74 69 6e 65 64 20 74 61 72 67 65 74 20 68 6f 73 74 20 28 69 6e 20 6f 75 | .our.destined.target.host.(in.ou |
883c0 | 72 20 65 78 61 6d 70 6c 65 20 65 74 68 31 29 2e 00 54 6f 20 61 75 74 6f 20 75 70 64 61 74 65 20 | r.example.eth1)..To.auto.update. |
883e0 | 74 68 65 20 62 6c 61 63 6b 6c 69 73 74 20 66 69 6c 65 73 00 54 6f 20 61 75 74 6f 6d 61 74 69 63 | the.blacklist.files.To.automatic |
88400 | 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 64 64 | ally.assign.the.client.an.IP.add |
88420 | 72 65 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 65 6e | ress.as.tunnel.endpoint,.a.clien |
88440 | 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 65 20 | t.IP.pool.is.needed..The.source. |
88460 | 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 6f 72 20 61 20 6c 6f 63 61 6c 20 | can.be.either.RADIUS.or.a.local. |
88480 | 73 75 62 6e 65 74 20 6f 72 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f 6e 2e 00 54 | subnet.or.IP.range.definition..T |
884a0 | 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e | o.automatically.assign.the.clien |
884c0 | 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 | t.an.IP.address.as.tunnel.endpoi |
884e0 | 6e 74 2c 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 | nt,.a.client.IP.pool.is.needed.. |
88500 | 54 68 65 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 | The.source.can.be.either.RADIUS. |
88520 | 6f 72 20 61 20 6e 61 6d 65 64 20 70 6f 6f 6c 2e 20 54 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 | or.a.named.pool..There.is.possib |
88540 | 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 64 20 70 | ility.to.create.multiple.named.p |
88560 | 6f 6f 6c 73 2e 20 45 61 63 68 20 6e 61 6d 65 64 20 70 6f 6f 6c 20 63 61 6e 20 69 6e 63 6c 75 64 | ools..Each.named.pool.can.includ |
88580 | 65 20 6f 6e 6c 79 20 6f 6e 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 2e 20 54 6f 20 75 73 65 | e.only.one.address.range..To.use |
885a0 | 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 63 6f 6e 66 69 67 75 | .multiple.address.ranges.configu |
885c0 | 72 65 20 60 60 6e 65 78 74 2d 70 6f 6f 6c 60 60 20 6f 70 74 69 6f 6e 2e 00 54 6f 20 62 65 20 75 | re.``next-pool``.option..To.be.u |
885e0 | 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 61 63 74 69 6f 6e 60 60 20 69 73 20 73 65 74 20 | sed.only.when.``action``.is.set. |
88600 | 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | to.``jump``..Use.this.command.to |
88620 | 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 20 75 73 65 64 | .specify.jump.target..To.be.used |
88640 | 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 64 65 66 75 6c 74 2d 61 63 74 69 6f 6e 60 60 20 69 73 20 | .only.when.``defult-action``.is. |
88660 | 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | set.to.``jump``..Use.this.comman |
88680 | 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 20 66 6f 72 20 64 65 66 | d.to.specify.jump.target.for.def |
886a0 | 61 75 6c 74 20 72 75 6c 65 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 | ault.rule..To.be.used.only.when. |
886c0 | 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 | action.is.set.to.``jump``..Use.t |
886e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 | his.command.to.specify.jump.targ |
88700 | 65 74 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 | et..To.be.used.only.when.action. |
88720 | 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f | is.set.to.``queue``..Use.this.co |
88740 | 6d 6d 61 6e 64 20 74 6f 20 64 69 73 74 72 69 62 75 74 65 20 70 61 63 6b 65 74 73 20 62 65 74 77 | mmand.to.distribute.packets.betw |
88760 | 65 65 6e 20 73 65 76 65 72 61 6c 20 71 75 65 75 65 73 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f | een.several.queues..To.be.used.o |
88780 | 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 | nly.when.action.is.set.to.``queu |
887a0 | 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 65 74 20 70 61 63 | e``..Use.this.command.to.let.pac |
887c0 | 6b 65 74 20 67 6f 20 74 68 72 6f 75 67 68 20 66 69 72 65 77 61 6c 6c 20 77 68 65 6e 20 6e 6f 20 | ket.go.through.firewall.when.no. |
887e0 | 75 73 65 72 73 70 61 63 65 20 73 6f 66 74 77 61 72 65 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 | userspace.software.is.connected. |
88800 | 74 6f 20 74 68 65 20 71 75 65 75 65 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 | to.the.queue..To.be.used.only.wh |
88820 | 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 | en.action.is.set.to.``queue``..U |
88840 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 71 75 65 75 65 | se.this.command.to.specify.queue |
88860 | 20 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 51 75 65 75 65 20 72 61 6e 67 65 20 69 73 20 61 | .target.to.use..Queue.range.is.a |
88880 | 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 | lso.supported..To.be.used.only.w |
888a0 | 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 6a 75 6d 70 2e 20 55 73 65 20 74 | hen.action.is.set.to.jump..Use.t |
888c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 | his.command.to.specify.jump.targ |
888e0 | 65 74 2e 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 65 76 65 72 | et..To.bypass.the.proxy.for.ever |
88900 | 79 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 61 20 | y.request.that.is.coming.from.a. |
88920 | 73 70 65 63 69 66 69 63 20 73 6f 75 72 63 65 3a 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 | specific.source:.To.bypass.the.p |
88940 | 72 6f 78 79 20 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 64 | roxy.for.every.request.that.is.d |
88960 | 69 72 65 63 74 65 64 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f | irected.to.a.specific.destinatio |
88980 | 6e 3a 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 49 50 76 36 20 61 73 73 69 67 6e 6d 65 6e 74 73 | n:.To.configure.IPv6.assignments |
889a0 | 20 66 6f 72 20 63 6c 69 65 6e 74 73 2c 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 6e 65 65 64 20 74 | .for.clients,.two.options.need.t |
889c0 | 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 41 20 67 6c 6f 62 61 6c 20 70 72 65 66 69 78 | o.be.configured..A.global.prefix |
889e0 | 20 77 68 69 63 68 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 6f 6e 20 74 68 65 20 63 6c 69 65 | .which.is.terminated.on.the.clie |
88a00 | 6e 74 73 20 63 70 65 20 61 6e 64 20 61 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 2c 20 | nts.cpe.and.a.delegated.prefix,. |
88a20 | 74 68 65 20 63 6c 69 65 6e 74 20 63 61 6e 20 75 73 65 20 66 6f 72 20 64 65 76 69 63 65 73 20 72 | the.client.can.use.for.devices.r |
88a40 | 6f 75 74 65 64 20 76 69 61 20 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 65 2e 00 54 6f 20 63 6f | outed.via.the.clients.cpe..To.co |
88a60 | 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 6c 65 67 61 | nfigure.VyOS.with.the.:doc:`lega |
88a80 | 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 | cy.firewall.configuration.</conf |
88aa0 | 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2d 6c 65 67 61 63 | iguration/firewall/general-legac |
88ac0 | 79 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a | y>`.To.configure.VyOS.with.the.: |
88ae0 | 64 6f 63 3a 60 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 | doc:`zone-based.firewall.configu |
88b00 | 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f | ration.</configuration/firewall/ |
88b20 | 7a 6f 6e 65 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 | zone>`.To.configure.VyOS.with.th |
88b40 | 65 20 6e 65 77 20 3a 64 6f 63 3a 60 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 | e.new.:doc:`firewall.configurati |
88b60 | 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 | on.</configuration/firewall/gene |
88b80 | 72 61 6c 3e 60 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 62 6c 6f 63 6b 69 6e 67 20 61 64 64 20 | ral>`.To.configure.blocking.add. |
88ba0 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | the.following.to.the.configurati |
88bc0 | 6f 6e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e | on.To.configure.site-to-site.con |
88be0 | 6e 65 63 74 69 6f 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 70 65 65 72 73 20 77 69 | nection.you.need.to.add.peers.wi |
88c00 | 74 68 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 65 63 20 73 69 74 65 2d 74 6f 2d 73 | th.the.``set.vpn.ipsec.site-to-s |
88c20 | 69 74 65 20 70 65 65 72 20 3c 6e 61 6d 65 3e 60 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 6f 20 63 6f | ite.peer.<name>``.command..To.co |
88c40 | 6e 66 69 67 75 72 65 20 73 79 73 6c 6f 67 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 | nfigure.syslog,.you.need.to.swit |
88c60 | 63 68 20 69 6e 74 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 6f 20 63 | ch.into.configuration.mode..To.c |
88c80 | 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 79 20 79 6f 75 20 6d 75 | onfigure.your.LCD.display.you.mu |
88ca0 | 73 74 20 66 69 72 73 74 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 75 73 65 64 20 68 61 72 64 77 | st.first.identify.the.used.hardw |
88cc0 | 61 72 65 2c 20 61 6e 64 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 6f 66 20 74 68 65 20 64 69 73 | are,.and.connectivity.of.the.dis |
88ce0 | 70 6c 61 79 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 20 54 68 69 73 20 63 61 6e 20 62 65 | play.to.your.system..This.can.be |
88d00 | 20 61 6e 79 20 73 65 72 69 61 6c 20 70 6f 72 74 20 28 60 74 74 79 53 78 78 60 29 20 6f 72 20 73 | .any.serial.port.(`ttySxx`).or.s |
88d20 | 65 72 69 61 6c 20 76 69 61 20 55 53 42 20 6f 72 20 65 76 65 6e 20 6f 6c 64 20 70 61 72 61 6c 6c | erial.via.USB.or.even.old.parall |
88d40 | 65 6c 20 70 6f 72 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 6f 20 63 72 65 61 74 65 20 56 4c | el.port.interfaces..To.create.VL |
88d60 | 41 4e 73 20 70 65 72 20 75 73 65 72 20 64 75 72 69 6e 67 20 72 75 6e 74 69 6d 65 2c 20 74 68 65 | ANs.per.user.during.runtime,.the |
88d80 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 72 65 71 75 69 72 65 64 | .following.settings.are.required |
88da0 | 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 20 56 4c 41 4e 20 | .on.a.per.interface.basis..VLAN. |
88dc0 | 49 44 20 61 6e 64 20 56 4c 41 4e 20 72 61 6e 67 65 20 63 61 6e 20 62 65 20 70 72 65 73 65 6e 74 | ID.and.VLAN.range.can.be.present |
88de0 | 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 73 61 6d | .in.the.configuration.at.the.sam |
88e00 | 65 20 74 69 6d 65 2e 00 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 69 6e 65 20 69 6e 20 | e.time..To.create.a.new.line.in. |
88e20 | 79 6f 75 72 20 6c 6f 67 69 6e 20 6d 65 73 73 61 67 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 | your.login.message.you.need.to.e |
88e40 | 73 63 61 70 65 20 74 68 65 20 6e 65 77 20 6c 69 6e 65 20 63 68 61 72 61 63 74 65 72 20 62 79 20 | scape.the.new.line.character.by. |
88e60 | 75 73 69 6e 67 20 60 60 5c 5c 6e 60 60 2e 00 54 6f 20 63 72 65 61 74 65 20 6d 6f 72 65 20 74 68 | using.``\\n``..To.create.more.th |
88e80 | 61 6e 20 6f 6e 65 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 64 69 73 74 69 6e 63 74 20 55 44 50 20 | an.one.tunnel,.use.distinct.UDP. |
88ea0 | 70 6f 72 74 73 2e 00 54 6f 20 63 72 65 61 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 31 | ports..To.create.routing.table.1 |
88ec0 | 30 30 20 61 6e 64 20 61 64 64 20 61 20 6e 65 77 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 | 00.and.add.a.new.default.gateway |
88ee0 | 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 72 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 | .to.be.used.by.traffic.matching. |
88f00 | 6f 75 72 20 72 6f 75 74 65 20 70 6f 6c 69 63 79 3a 00 54 6f 20 64 65 66 69 6e 65 20 61 20 7a 6f | our.route.policy:.To.define.a.zo |
88f20 | 6e 65 20 73 65 74 75 70 20 65 69 74 68 65 72 20 6f 6e 65 20 77 69 74 68 20 69 6e 74 65 72 66 61 | ne.setup.either.one.with.interfa |
88f40 | 63 65 73 20 6f 72 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 00 54 6f 20 64 69 73 61 62 6c 65 20 | ces.or.a.local.zone..To.disable. |
88f60 | 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 | advertisements.without.deleting. |
88f80 | 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 68 | the.configuration:.To.display.th |
88fa0 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 6b 65 79 2c 20 75 73 65 20 74 | e.configured.OTP.user.key,.use.t |
88fc0 | 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 | he.command:.To.display.the.confi |
88fe0 | 67 75 72 65 64 20 4f 54 50 20 75 73 65 72 20 73 65 74 74 69 6e 67 73 2c 20 75 73 65 20 74 68 65 | gured.OTP.user.settings,.use.the |
89000 | 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 | .command:.To.enable.MLD.reports. |
89020 | 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 30 60 20 61 | and.query.on.interfaces.`eth0`.a |
89040 | 6e 64 20 60 65 74 68 31 60 3a 00 54 6f 20 65 6e 61 62 6c 65 20 52 41 44 49 55 53 20 62 61 73 65 | nd.`eth1`:.To.enable.RADIUS.base |
89060 | 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 | d.authentication,.the.authentica |
89080 | 74 69 6f 6e 20 6d 6f 64 65 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 | tion.mode.needs.to.be.changed.wi |
890a0 | 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 50 72 65 76 69 6f 75 73 | thin.the.configuration..Previous |
890c0 | 20 73 65 74 74 69 6e 67 73 20 6c 69 6b 65 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 73 2c 20 | .settings.like.the.local.users,. |
890e0 | 73 74 69 6c 6c 20 65 78 69 73 74 73 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 | still.exists.within.the.configur |
89100 | 61 74 69 6f 6e 2c 20 68 6f 77 65 76 65 72 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 75 73 65 64 | ation,.however.they.are.not.used |
89120 | 20 69 66 20 74 68 65 20 6d 6f 64 65 20 68 61 73 20 62 65 65 6e 20 63 68 61 6e 67 65 64 20 66 72 | .if.the.mode.has.been.changed.fr |
89140 | 6f 6d 20 6c 6f 63 61 6c 20 74 6f 20 72 61 64 69 75 73 2e 20 4f 6e 63 65 20 63 68 61 6e 67 65 64 | om.local.to.radius..Once.changed |
89160 | 20 62 61 63 6b 20 74 6f 20 6c 6f 63 61 6c 2c 20 69 74 20 77 69 6c 6c 20 75 73 65 20 61 6c 6c 20 | .back.to.local,.it.will.use.all. |
89180 | 6c 6f 63 61 6c 20 61 63 63 6f 75 6e 74 73 20 61 67 61 69 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 | local.accounts.again..To.enable. |
891a0 | 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2c 20 74 68 | bandwidth.shaping.via.RADIUS,.th |
891c0 | 65 20 6f 70 74 69 6f 6e 20 72 61 74 65 2d 6c 69 6d 69 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 | e.option.rate-limit.needs.to.be. |
891e0 | 65 6e 61 62 6c 65 64 2e 00 54 6f 20 65 6e 61 62 6c 65 20 64 65 62 75 67 20 6d 65 73 73 61 67 65 | enabled..To.enable.debug.message |
89200 | 73 2e 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 6c 6f | s..Available.via.:opcmd:`show.lo |
89220 | 67 60 20 6f 72 20 3a 6f 70 63 6d 64 3a 60 6d 6f 6e 69 74 6f 72 20 6c 6f 67 60 00 54 6f 20 65 6e | g`.or.:opcmd:`monitor.log`.To.en |
89240 | 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 | able.mDNS.repeater.you.need.to.c |
89260 | 6f 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 | onfigure.at.least.two.interfaces |
89280 | 20 73 6f 20 74 68 61 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 63 6b 65 | .so.that.all.incoming.mDNS.packe |
892a0 | 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 | ts.from.one.interface.configured |
892c0 | 20 68 65 72 65 20 63 61 6e 20 62 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 20 74 6f 20 61 | .here.can.be.re-broadcasted.to.a |
892e0 | 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 28 73 29 20 63 6f 6e 66 69 67 75 72 65 64 | ny.other.interface(s).configured |
89300 | 20 75 6e 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 6d | .under.this.section..To.enable.m |
89320 | 44 4e 53 20 72 65 70 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 | DNS.repeater.you.need.to.configu |
89340 | 72 65 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 6f 20 72 | re.at.least.two.interfaces..To.r |
89360 | 65 2d 62 72 6f 61 64 63 61 73 74 20 61 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 | e-broadcast.all.incoming.mDNS.pa |
89380 | 63 6b 65 74 73 20 66 72 6f 6d 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 | ckets.from.any.interface.configu |
893a0 | 72 65 64 20 68 65 72 65 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 20 | red.here.to.any.other.interface. |
893c0 | 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 | configured.under.this.section..T |
893e0 | 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 48 54 54 50 20 73 65 63 75 72 69 74 79 20 68 65 61 64 65 | o.enable.the.HTTP.security.heade |
89400 | 72 73 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 2c 20 75 73 | rs.in.the.configuration.file,.us |
89420 | 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 | e.the.command:.To.enable/disable |
89440 | 20 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6e | .helper.support.for.a.specific.n |
89460 | 65 69 67 68 62 6f 75 72 2c 20 74 68 65 20 72 6f 75 74 65 72 2d 69 64 20 28 41 2e 42 2e 43 2e 44 | eighbour,.the.router-id.(A.B.C.D |
89480 | 29 20 68 61 73 20 74 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 54 6f 20 65 78 63 6c 75 64 | ).has.to.be.specified..To.exclud |
894a0 | 65 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2c 20 74 | e.traffic.from.load.balancing,.t |
894c0 | 72 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 61 6e 20 65 78 63 6c 75 64 65 20 72 75 6c 65 20 | raffic.matching.an.exclude.rule. |
894e0 | 69 73 20 6e 6f 74 20 62 61 6c 61 6e 63 65 64 20 62 75 74 20 72 6f 75 74 65 64 20 74 68 72 6f 75 | is.not.balanced.but.routed.throu |
89500 | 67 68 20 74 68 65 20 73 79 73 74 65 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 6e 73 74 | gh.the.system.routing.table.inst |
89520 | 65 61 64 3a 00 54 6f 20 65 78 70 6c 61 69 6e 20 74 68 65 20 75 73 61 67 65 20 6f 66 20 4c 4e 53 | ead:.To.explain.the.usage.of.LNS |
89540 | 20 66 6f 6c 6c 6f 77 20 6f 75 72 20 62 6c 75 65 70 72 69 6e 74 20 3a 72 65 66 3a 60 65 78 61 6d | .follow.our.blueprint.:ref:`exam |
89560 | 70 6c 65 73 2d 6c 61 63 2d 6c 6e 73 60 2e 00 54 6f 20 65 78 74 65 6e 64 20 53 4e 4d 50 20 61 67 | ples-lac-lns`..To.extend.SNMP.ag |
89580 | 65 6e 74 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 | ent.functionality,.custom.script |
895a0 | 73 20 63 61 6e 20 62 65 20 65 78 65 63 75 74 65 64 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 65 | s.can.be.executed.every.time.the |
895c0 | 20 61 67 65 6e 74 20 69 73 20 62 65 69 6e 67 20 63 61 6c 6c 65 64 2e 20 54 68 69 73 20 63 61 6e | .agent.is.being.called..This.can |
895e0 | 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 60 60 61 72 62 69 74 72 61 72 | .be.achieved.by.using.``arbitrar |
89600 | 79 20 65 78 74 65 6e 73 69 6f 6e 63 6f 6d 6d 61 6e 64 73 60 60 2e 20 54 68 65 20 66 69 72 73 74 | y.extensioncommands``..The.first |
89620 | 20 73 74 65 70 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 66 75 6e 63 74 69 6f 6e 61 6c 20 | .step.is.to.create.a.functional. |
89640 | 73 63 72 69 70 74 20 6f 66 20 63 6f 75 72 73 65 2c 20 74 68 65 6e 20 75 70 6c 6f 61 64 20 69 74 | script.of.course,.then.upload.it |
89660 | 20 74 6f 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 20 76 69 61 20 74 68 65 20 63 | .to.your.VyOS.instance.via.the.c |
89680 | 6f 6d 6d 61 6e 64 20 60 60 73 63 70 20 79 6f 75 72 5f 73 63 72 69 70 74 2e 73 68 20 76 79 6f 73 | ommand.``scp.your_script.sh.vyos |
896a0 | 40 79 6f 75 72 5f 72 6f 75 74 65 72 3a 2f 63 6f 6e 66 69 67 2f 75 73 65 72 2d 64 61 74 61 60 60 | @your_router:/config/user-data`` |
896c0 | 2e 20 4f 6e 63 65 20 74 68 65 20 73 63 72 69 70 74 20 69 73 20 75 70 6c 6f 61 64 65 64 2c 20 69 | ..Once.the.script.is.uploaded,.i |
896e0 | 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 76 69 61 20 74 68 65 | t.needs.to.be.configured.via.the |
89700 | 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f 77 2e 00 54 6f 20 66 6f 72 77 61 72 64 20 61 6c 6c 20 62 | .command.below..To.forward.all.b |
89720 | 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 60 55 44 | roadcast.packets.received.on.`UD |
89740 | 50 20 70 6f 72 74 20 31 39 30 30 60 20 6f 6e 20 60 65 74 68 33 60 2c 20 60 65 74 68 34 60 20 6f | P.port.1900`.on.`eth3`,.`eth4`.o |
89760 | 72 20 60 65 74 68 35 60 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 | r.`eth5`.to.all.other.interfaces |
89780 | 20 69 6e 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 6f 20 67 65 6e 65 72 | .in.this.configuration..To.gener |
897a0 | 61 74 65 20 74 68 65 20 43 41 2c 20 74 68 65 20 73 65 72 76 65 72 20 70 72 69 76 61 74 65 20 6b | ate.the.CA,.the.server.private.k |
897c0 | 65 79 20 61 6e 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | ey.and.certificates.the.followin |
897e0 | 67 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 6f 20 67 65 74 20 69 | g.commands.can.be.used..To.get.i |
89800 | 74 20 74 6f 20 77 6f 72 6b 20 61 73 20 61 6e 20 61 63 63 65 73 73 20 70 6f 69 6e 74 20 77 69 74 | t.to.work.as.an.access.point.wit |
89820 | 68 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 6e 65 | h.this.configuration.you.will.ne |
89840 | 65 64 20 74 6f 20 73 65 74 20 75 70 20 61 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 77 6f | ed.to.set.up.a.DHCP.server.to.wo |
89860 | 72 6b 20 77 69 74 68 20 74 68 61 74 20 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 63 61 6e 20 2d 20 | rk.with.that.network..You.can.-. |
89880 | 6f 66 20 63 6f 75 72 73 65 20 2d 20 61 6c 73 6f 20 62 72 69 64 67 65 20 74 68 65 20 57 69 72 65 | of.course.-.also.bridge.the.Wire |
898a0 | 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 6e 79 20 63 6f 6e 66 69 67 75 72 | less.interface.with.any.configur |
898c0 | 65 64 20 62 72 69 64 67 65 20 28 3a 72 65 66 3a 60 62 72 69 64 67 65 2d 69 6e 74 65 72 66 61 63 | ed.bridge.(:ref:`bridge-interfac |
898e0 | 65 60 29 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 6f 20 68 61 6e 64 20 6f 75 74 20 69 | e`).on.the.system..To.hand.out.i |
89900 | 6e 64 69 76 69 64 75 61 6c 20 70 72 65 66 69 78 65 73 20 74 6f 20 79 6f 75 72 20 63 6c 69 65 6e | ndividual.prefixes.to.your.clien |
89920 | 74 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 | ts.the.following.configuration.i |
89940 | 73 20 75 73 65 64 3a 00 54 6f 20 69 6d 70 6f 72 74 20 69 74 20 66 72 6f 6d 20 74 68 65 20 66 69 | s.used:.To.import.it.from.the.fi |
89960 | 6c 65 73 79 73 74 65 6d 20 75 73 65 3a 00 54 6f 20 6b 6e 6f 77 20 6d 6f 72 65 20 61 62 6f 75 74 | lesystem.use:.To.know.more.about |
89980 | 20 73 63 72 69 70 74 69 6e 67 2c 20 63 68 65 63 6b 20 74 68 65 20 3a 72 65 66 3a 60 63 6f 6d 6d | .scripting,.check.the.:ref:`comm |
899a0 | 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 6c 69 73 74 65 | and-scripting`.section..To.liste |
899c0 | 6e 20 6f 6e 20 62 6f 74 68 20 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 20 6d 44 4e 53 | n.on.both.`eth0`.and.`eth1`.mDNS |
899e0 | 20 70 61 63 6b 65 74 73 20 61 6e 64 20 61 6c 73 6f 20 72 65 70 65 61 74 20 70 61 63 6b 65 74 73 | .packets.and.also.repeat.packets |
89a00 | 20 72 65 63 65 69 76 65 64 20 6f 6e 20 60 65 74 68 30 60 20 74 6f 20 60 65 74 68 31 60 20 28 61 | .received.on.`eth0`.to.`eth1`.(a |
89a20 | 6e 64 20 76 69 63 65 2d 76 65 72 73 61 29 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | nd.vice-versa).use.the.following |
89a40 | 20 63 6f 6d 6d 61 6e 64 73 3a 00 54 6f 20 6d 61 6e 69 70 75 6c 61 74 65 20 6f 72 20 64 69 73 70 | .commands:.To.manipulate.or.disp |
89a60 | 6c 61 79 20 41 52 50 5f 20 74 61 62 6c 65 20 65 6e 74 72 69 65 73 2c 20 74 68 65 20 66 6f 6c 6c | lay.ARP_.table.entries,.the.foll |
89a80 | 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2e 00 | owing.commands.are.implemented.. |
89aa0 | 54 6f 20 70 65 72 66 6f 72 6d 20 61 20 67 72 61 63 65 66 75 6c 20 73 68 75 74 64 6f 77 6e 2c 20 | To.perform.a.graceful.shutdown,. |
89ac0 | 74 68 65 20 46 52 52 20 60 60 67 72 61 63 65 66 75 6c 2d 72 65 73 74 61 72 74 20 70 72 65 70 61 | the.FRR.``graceful-restart.prepa |
89ae0 | 72 65 20 69 70 20 6f 73 70 66 60 60 20 45 58 45 43 2d 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e 64 20 | re.ip.ospf``.EXEC-level.command. |
89b00 | 6e 65 65 64 73 20 74 6f 20 62 65 20 69 73 73 75 65 64 20 62 65 66 6f 72 65 20 72 65 73 74 61 72 | needs.to.be.issued.before.restar |
89b20 | 74 69 6e 67 20 74 68 65 20 6f 73 70 66 64 20 64 61 65 6d 6f 6e 2e 00 54 6f 20 72 65 71 75 65 73 | ting.the.ospfd.daemon..To.reques |
89b40 | 74 20 61 20 2f 35 36 20 70 72 65 66 69 78 20 66 72 6f 6d 20 79 6f 75 72 20 49 53 50 20 75 73 65 | t.a./56.prefix.from.your.ISP.use |
89b60 | 3a 00 54 6f 20 72 65 73 74 61 72 74 20 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 72 00 54 | :.To.restart.the.DHCPv6.server.T |
89b80 | 6f 20 73 65 74 75 70 20 53 4e 41 54 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 3a 00 54 | o.setup.SNAT,.we.need.to.know:.T |
89ba0 | 6f 20 73 65 74 75 70 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 72 75 6c 65 20 77 | o.setup.a.destination.NAT.rule.w |
89bc0 | 65 20 6e 65 65 64 20 74 6f 20 67 61 74 68 65 72 3a 00 54 6f 20 75 70 64 61 74 65 20 74 68 65 20 | e.need.to.gather:.To.update.the. |
89be0 | 66 69 72 6d 77 61 72 65 2c 20 56 79 4f 53 20 61 6c 73 6f 20 73 68 69 70 73 20 74 68 65 20 60 71 | firmware,.VyOS.also.ships.the.`q |
89c00 | 6d 69 2d 66 69 72 6d 77 61 72 65 2d 75 70 64 61 74 65 60 20 62 69 6e 61 72 79 2e 20 54 6f 20 75 | mi-firmware-update`.binary..To.u |
89c20 | 70 67 72 61 64 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 6f 66 20 61 6e 20 65 2e 67 2e 20 53 | pgrade.the.firmware.of.an.e.g..S |
89c40 | 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 6f 64 75 6c 65 20 74 6f 20 | ierra.Wireless.MC7710.module.to. |
89c60 | 74 68 65 20 66 69 72 6d 77 61 72 65 20 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 66 69 6c | the.firmware.provided.in.the.fil |
89c80 | 65 20 60 60 39 39 39 39 39 39 39 5f 39 39 39 39 39 39 39 5f 39 32 30 30 5f 30 33 2e 30 35 2e 31 | e.``9999999_9999999_9200_03.05.1 |
89ca0 | 34 2e 30 30 5f 30 30 5f 67 65 6e 65 72 69 63 5f 30 30 30 2e 30 30 30 5f 30 30 31 5f 53 50 4b 47 | 4.00_00_generic_000.000_001_SPKG |
89cc0 | 5f 4d 43 2e 63 77 65 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d | _MC.cwe``.use.the.following.comm |
89ce0 | 61 6e 64 3a 00 54 6f 20 75 73 65 20 61 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 66 6f 72 20 | and:.To.use.a.RADIUS.server.for. |
89d00 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 62 61 6e 64 77 69 64 74 68 2d 73 68 61 | authentication.and.bandwidth-sha |
89d20 | 70 69 6e 67 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 | ping,.the.following.example.conf |
89d40 | 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 6f 20 75 73 65 20 61 20 | iguration.can.be.used..To.use.a. |
89d60 | 72 61 64 69 75 73 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 63 | radius.server,.you.need.to.switc |
89d80 | 68 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 20 | h.to.authentication.mode.RADIUS. |
89da0 | 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 00 54 6f 20 75 73 65 20 73 75 | and.then.configure.it..To.use.su |
89dc0 | 63 68 20 61 20 73 65 72 76 69 63 65 2c 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 61 20 | ch.a.service,.one.must.define.a. |
89de0 | 6c 6f 67 69 6e 2c 20 70 61 73 73 77 6f 72 64 2c 20 6f 6e 65 20 6f 72 20 6d 75 6c 74 69 70 6c 65 | login,.password,.one.or.multiple |
89e00 | 20 68 6f 73 74 6e 61 6d 65 73 2c 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 73 65 72 76 65 72 2e | .hostnames,.protocol.and.server. |
89e20 | 00 54 6f 20 75 73 65 20 74 68 65 20 53 61 6c 74 2d 4d 69 6e 69 6f 6e 2c 20 61 20 72 75 6e 6e 69 | .To.use.the.Salt-Minion,.a.runni |
89e40 | 6e 67 20 53 61 6c 74 2d 4d 61 73 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 59 6f 75 20 | ng.Salt-Master.is.required..You. |
89e60 | 63 61 6e 20 66 69 6e 64 20 6d 6f 72 65 20 69 6e 20 74 68 65 20 60 53 61 6c 74 20 50 6f 6a 65 63 | can.find.more.in.the.`Salt.Pojec |
89e80 | 74 20 44 6f 63 75 6d 65 6e 74 61 69 6f 6e 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 73 61 6c | t.Documentaion.<https://docs.sal |
89ea0 | 74 70 72 6f 6a 65 63 74 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 74 65 6e 74 73 2e 68 | tproject.io/en/latest/contents.h |
89ec0 | 74 6d 6c 3e 60 5f 00 54 6f 20 75 73 65 20 74 68 69 73 20 66 75 6c 6c 20 63 6f 6e 66 69 67 75 72 | tml>`_.To.use.this.full.configur |
89ee0 | 61 74 69 6f 6e 20 77 65 20 61 73 75 6d 65 20 61 20 70 75 62 6c 69 63 20 61 63 63 65 73 73 69 62 | ation.we.asume.a.public.accessib |
89f00 | 6c 65 20 68 6f 73 74 6e 61 6d 65 2e 00 54 6f 70 6f 6c 6f 67 79 3a 00 54 6f 70 6f 6c 6f 67 79 3a | le.hostname..Topology:.Topology: |
89f20 | 20 50 43 34 20 2d 20 4c 65 61 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 66 33 20 2d 20 | .PC4.-.Leaf2.-.Spine1.-.Leaf3.-. |
89f40 | 50 43 35 00 54 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 00 54 72 61 63 6b 00 54 72 61 63 6b 20 6f | PC5.Toubleshooting.Track.Track.o |
89f60 | 70 74 69 6f 6e 20 74 6f 20 74 72 61 63 6b 20 6e 6f 6e 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 | ption.to.track.non.VRRP.interfac |
89f80 | 65 20 73 74 61 74 65 73 2e 20 56 52 52 50 20 63 68 61 6e 67 65 73 20 73 74 61 74 75 73 20 74 6f | e.states..VRRP.changes.status.to |
89fa0 | 20 60 60 46 41 55 4c 54 60 60 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 74 72 61 63 6b 20 69 | .``FAULT``.if.one.of.the.track.i |
89fc0 | 6e 74 65 72 66 61 63 65 73 20 69 6e 20 73 74 61 74 65 20 60 60 64 6f 77 6e 60 60 2e 00 54 72 61 | nterfaces.in.state.``down``..Tra |
89fe0 | 64 69 74 69 6f 6e 61 6c 20 42 47 50 20 64 69 64 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 66 65 | ditional.BGP.did.not.have.the.fe |
8a000 | 61 74 75 72 65 20 74 6f 20 64 65 74 65 63 74 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 27 73 20 | ature.to.detect.a.remote.peer's. |
8a020 | 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 65 2e 67 2e 20 77 68 65 74 68 65 72 20 69 74 20 63 61 | capabilities,.e.g..whether.it.ca |
8a040 | 6e 20 68 61 6e 64 6c 65 20 70 72 65 66 69 78 20 74 79 70 65 73 20 6f 74 68 65 72 20 74 68 61 6e | n.handle.prefix.types.other.than |
8a060 | 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 72 6f 75 74 65 73 2e 20 54 68 69 73 20 77 61 73 20 61 | .IPv4.unicast.routes..This.was.a |
8a080 | 20 62 69 67 20 70 72 6f 62 6c 65 6d 20 75 73 69 6e 67 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c | .big.problem.using.Multiprotocol |
8a0a0 | 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 20 69 6e 20 61 6e 20 6f 70 65 72 61 74 69 | .Extension.for.BGP.in.an.operati |
8a0c0 | 6f 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 3a 72 66 63 3a 60 32 38 34 32 60 20 61 64 6f 70 74 65 | onal.network..:rfc:`2842`.adopte |
8a0e0 | 64 20 61 20 66 65 61 74 75 72 65 20 63 61 6c 6c 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 | d.a.feature.called.Capability.Ne |
8a100 | 67 6f 74 69 61 74 69 6f 6e 2e 20 2a 62 67 70 64 2a 20 75 73 65 20 74 68 69 73 20 43 61 70 61 62 | gotiation..*bgpd*.use.this.Capab |
8a120 | 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 74 68 65 20 | ility.Negotiation.to.detect.the. |
8a140 | 72 65 6d 6f 74 65 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 61 | remote.peer's.capabilities..If.a |
8a160 | 20 70 65 65 72 20 69 73 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 6e 20 49 | .peer.is.only.configured.as.an.I |
8a180 | 50 76 34 20 75 6e 69 63 61 73 74 20 6e 65 69 67 68 62 6f 72 2c 20 2a 62 67 70 64 2a 20 64 6f 65 | Pv4.unicast.neighbor,.*bgpd*.doe |
8a1a0 | 73 20 6e 6f 74 20 73 65 6e 64 20 74 68 65 73 65 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f | s.not.send.these.Capability.Nego |
8a1c0 | 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 73 20 28 61 74 20 6c 65 61 73 74 20 6e 6f 74 20 75 6e | tiation.packets.(at.least.not.un |
8a1e0 | 6c 65 73 73 20 6f 74 68 65 72 20 6f 70 74 69 6f 6e 61 6c 20 42 47 50 20 66 65 61 74 75 72 65 73 | less.other.optional.BGP.features |
8a200 | 20 72 65 71 75 69 72 65 20 63 61 70 61 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 29 | .require.capability.negotiation) |
8a220 | 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 66 69 72 65 77 61 6c 6c 73 20 77 65 65 72 65 20 | ..Traditionally.firewalls.weere. |
8a240 | 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 64 | configured.with.the.concept.of.d |
8a260 | 61 74 61 20 67 6f 69 6e 67 20 69 6e 20 61 6e 64 20 6f 75 74 20 6f 66 20 61 6e 20 69 6e 74 65 72 | ata.going.in.and.out.of.an.inter |
8a280 | 66 61 63 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 6a 75 73 74 20 6c 69 73 74 65 6e 65 64 20 74 | face..The.router.just.listened.t |
8a2a0 | 6f 20 74 68 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 74 68 72 6f 75 67 68 20 61 6e 64 20 72 | o.the.data.flowing.through.and.r |
8a2c0 | 65 73 70 6f 6e 64 69 6e 67 20 61 73 20 72 65 71 75 69 72 65 64 20 69 66 20 69 74 20 77 61 73 20 | esponding.as.required.if.it.was. |
8a2e0 | 64 69 72 65 63 74 65 64 20 61 74 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 54 | directed.at.the.router.itself..T |
8a300 | 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 68 61 72 64 77 61 72 65 20 72 6f 75 74 65 72 73 20 69 6d | raditionally.hardware.routers.im |
8a320 | 70 6c 65 6d 65 6e 74 20 49 50 73 65 63 20 65 78 63 6c 75 73 69 76 65 6c 79 20 64 75 65 20 74 6f | plement.IPsec.exclusively.due.to |
8a340 | 20 72 65 6c 61 74 69 76 65 20 65 61 73 65 20 6f 66 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 69 | .relative.ease.of.implementing.i |
8a360 | 74 20 69 6e 20 68 61 72 64 77 61 72 65 20 61 6e 64 20 69 6e 73 75 66 66 69 63 69 65 6e 74 20 43 | t.in.hardware.and.insufficient.C |
8a380 | 50 55 20 70 6f 77 65 72 20 66 6f 72 20 64 6f 69 6e 67 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 6e | PU.power.for.doing.encryption.in |
8a3a0 | 20 73 6f 66 74 77 61 72 65 2e 20 53 69 6e 63 65 20 56 79 4f 53 20 69 73 20 61 20 73 6f 66 74 77 | .software..Since.VyOS.is.a.softw |
8a3c0 | 61 72 65 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 69 73 20 6c 65 73 73 20 6f 66 20 61 20 63 6f | are.router,.this.is.less.of.a.co |
8a3e0 | 6e 63 65 72 6e 2e 20 4f 70 65 6e 56 50 4e 20 68 61 73 20 62 65 65 6e 20 77 69 64 65 6c 79 20 75 | ncern..OpenVPN.has.been.widely.u |
8a400 | 73 65 64 20 6f 6e 20 55 4e 49 58 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 20 61 20 6c 6f 6e 67 20 | sed.on.UNIX.platform.for.a.long. |
8a420 | 74 69 6d 65 20 61 6e 64 20 69 73 20 61 20 70 6f 70 75 6c 61 72 20 6f 70 74 69 6f 6e 20 66 6f 72 | time.and.is.a.popular.option.for |
8a440 | 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 56 50 4e 2c 20 74 68 6f 75 67 68 20 69 74 27 73 20 | .remote.access.VPN,.though.it's. |
8a460 | 61 6c 73 6f 20 63 61 70 61 62 6c 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e | also.capable.of.site-to-site.con |
8a480 | 6e 65 63 74 69 6f 6e 73 2e 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 73 00 54 72 61 66 66 69 | nections..Traffic.Filters.Traffi |
8a4a0 | 63 20 46 69 6c 74 65 72 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 | c.Filters.are.used.to.control.wh |
8a4c0 | 69 63 68 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 20 64 65 66 69 6e 65 | ich.packets.will.have.the.define |
8a4e0 | 64 20 4e 41 54 20 72 75 6c 65 73 20 61 70 70 6c 69 65 64 2e 20 46 69 76 65 20 64 69 66 66 65 72 | d.NAT.rules.applied..Five.differ |
8a500 | 65 6e 74 20 66 69 6c 74 65 72 73 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 77 69 74 68 69 | ent.filters.can.be.applied.withi |
8a520 | 6e 20 61 20 4e 41 54 20 72 75 6c 65 2e 00 54 72 61 66 66 69 63 20 50 6f 6c 69 63 79 00 54 72 61 | n.a.NAT.rule..Traffic.Policy.Tra |
8a540 | 66 66 69 63 20 63 61 6e 6e 6f 74 20 66 6c 6f 77 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 20 6d 65 | ffic.cannot.flow.between.zone.me |
8a560 | 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 | mber.interface.and.any.interface |
8a580 | 20 74 68 61 74 20 69 73 20 6e 6f 74 20 61 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 2e 00 54 72 61 66 | .that.is.not.a.zone.member..Traf |
8a5a0 | 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 | fic.from.multicast.sources.will. |
8a5c0 | 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 | go.to.the.Rendezvous.Point,.and. |
8a5e0 | 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 | receivers.will.pull.it.from.a.sh |
8a600 | 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 | ared.tree.using.:abbr:`IGMP.(Int |
8a620 | 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 | ernet.Group.Management.Protocol) |
8a640 | 60 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 | `..Traffic.from.multicast.source |
8a660 | 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e | s.will.go.to.the.Rendezvous.Poin |
8a680 | 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 | t,.and.receivers.will.pull.it.fr |
8a6a0 | 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 49 47 4d 50 20 28 49 6e 74 | om.a.shared.tree.using.IGMP.(Int |
8a6c0 | 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 | ernet.Group.Management.Protocol) |
8a6e0 | 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 | ..Traffic.from.multicast.sources |
8a700 | 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 | .will.go.to.the.Rendezvous.Point |
8a720 | 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f | ,.and.receivers.will.pull.it.fro |
8a740 | 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 6e 67 20 4d 4c 44 20 28 4d 75 6c 74 69 | m.a.shared.tree.using.MLD.(Multi |
8a760 | 63 61 73 74 20 4c 69 73 74 65 6e 65 72 20 44 69 73 63 6f 76 65 72 79 29 2e 00 54 72 61 66 66 69 | cast.Listener.Discovery)..Traffi |
8a780 | 63 20 6d 75 73 74 20 62 65 20 73 79 6d 6d 65 74 72 69 63 00 54 72 61 66 66 69 63 20 77 68 69 63 | c.must.be.symmetric.Traffic.whic |
8a7a0 | 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 6f 6e 20 61 | h.is.received.by.the.router.on.a |
8a7c0 | 6e 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 6d 65 6d 62 65 72 20 6f 66 20 61 | n.interface.which.is.member.of.a |
8a7e0 | 20 62 72 69 64 67 65 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 6f 6e 20 74 68 65 20 2a 2a 42 72 | .bridge.is.processed.on.the.**Br |
8a800 | 69 64 67 65 20 4c 61 79 65 72 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 | idge.Layer**..A.simplified.packe |
8a820 | 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 69 73 20 6c 61 79 65 72 20 69 73 | t.flow.diagram.for.this.layer.is |
8a840 | 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 00 | .shown.next:.Transition.scripts. |
8a860 | 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 | Transition.scripts.can.help.you. |
8a880 | 69 6d 70 6c 65 6d 65 6e 74 20 76 61 72 69 6f 75 73 20 66 69 78 75 70 73 2c 20 73 75 63 68 20 61 | implement.various.fixups,.such.a |
8a8a0 | 73 20 73 74 61 72 74 69 6e 67 20 61 6e 64 20 73 74 6f 70 70 69 6e 67 20 73 65 72 76 69 63 65 73 | s.starting.and.stopping.services |
8a8c0 | 2c 20 6f 72 20 65 76 65 6e 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 65 20 56 79 4f 53 20 63 6f 6e | ,.or.even.modifying.the.VyOS.con |
8a8e0 | 66 69 67 20 6f 6e 20 56 52 52 50 20 74 72 61 6e 73 69 74 69 6f 6e 2e 20 54 68 69 73 20 73 65 74 | fig.on.VRRP.transition..This.set |
8a900 | 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 65 78 | up.will.make.the.VRRP.process.ex |
8a920 | 65 63 75 74 65 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 | ecute.the.``/config/scripts/vrrp |
8a940 | 2d 66 61 69 6c 2e 73 68 60 60 20 77 69 74 68 20 61 72 67 75 6d 65 6e 74 20 60 60 46 6f 6f 60 60 | -fail.sh``.with.argument.``Foo`` |
8a960 | 20 77 68 65 6e 20 56 52 52 50 20 66 61 69 6c 73 2c 20 61 6e 64 20 74 68 65 20 60 60 2f 63 6f 6e | .when.VRRP.fails,.and.the.``/con |
8a980 | 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 6d 61 73 74 65 72 2e 73 68 60 60 20 77 68 65 | fig/scripts/vrrp-master.sh``.whe |
8a9a0 | 6e 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 3a | n.the.router.becomes.the.master: |
8a9c0 | 00 54 72 61 6e 73 70 61 72 65 6e 74 20 50 72 6f 78 79 00 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 | .Transparent.Proxy.Troubleshooti |
8a9e0 | 6e 67 00 54 75 6e 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 00 54 75 6e 6e 65 6c 00 54 75 6e 6e 65 6c | ng.Tuning.commands.Tunnel.Tunnel |
8aa00 | 20 6b 65 79 73 00 54 75 6e 6e 65 6c 20 70 61 73 73 77 6f 72 64 20 75 73 65 64 20 74 6f 20 61 75 | .keys.Tunnel.password.used.to.au |
8aa20 | 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 00 54 77 6f 20 | thenticate.the.client.(LAC).Two. |
8aa40 | 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 61 76 61 69 6c 61 | environment.variables.are.availa |
8aa60 | 62 6c 65 3a 00 54 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 67 6f 69 6e 67 20 74 6f | ble:.Two.interfaces.are.going.to |
8aa80 | 20 62 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 73 3a 20 65 74 68 30 | .be.used.in.the.flowtables:.eth0 |
8aaa0 | 20 61 6e 64 20 65 74 68 31 00 54 77 6f 20 6e 65 77 20 66 69 6c 65 73 20 60 60 2f 63 6f 6e 66 69 | .and.eth1.Two.new.files.``/confi |
8aac0 | 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 20 61 6e 64 20 60 60 2f 63 6f 6e 66 | g/auth/id_rsa_rpki``.and.``/conf |
8aae0 | 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 2e 70 75 62 60 60 20 77 69 6c 6c 20 62 | ig/auth/id_rsa_rpki.pub``.will.b |
8ab00 | 65 20 63 72 65 61 74 65 64 2e 00 54 77 6f 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 | e.created..Two.routers.connected |
8ab20 | 20 62 6f 74 68 20 76 69 61 20 65 74 68 31 20 74 68 72 6f 75 67 68 20 61 6e 20 75 6e 74 72 75 73 | .both.via.eth1.through.an.untrus |
8ab40 | 74 65 64 20 73 77 69 74 63 68 00 54 79 70 65 20 6f 66 20 6d 65 74 72 69 63 73 20 67 72 6f 75 70 | ted.switch.Type.of.metrics.group |
8ab60 | 69 6e 67 20 77 68 65 6e 20 70 75 73 68 20 74 6f 20 41 7a 75 72 65 20 44 61 74 61 20 45 78 70 6c | ing.when.push.to.Azure.Data.Expl |
8ab80 | 6f 72 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 74 61 62 6c 65 2d 70 65 72 | orer..The.default.is.``table-per |
8aba0 | 2d 6d 65 74 72 69 63 60 60 2e 00 54 79 70 69 63 61 6c 6c 79 2c 20 61 20 31 2d 74 6f 2d 31 20 4e | -metric``..Typically,.a.1-to-1.N |
8abc0 | 41 54 20 72 75 6c 65 20 6f 6d 69 74 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f | AT.rule.omits.the.destination.po |
8abe0 | 72 74 20 28 61 6c 6c 20 70 6f 72 74 73 29 20 61 6e 64 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 | rt.(all.ports).and.replaces.the. |
8ac00 | 70 72 6f 74 6f 63 6f 6c 20 77 69 74 68 20 65 69 74 68 65 72 20 2a 2a 61 6c 6c 2a 2a 20 6f 72 20 | protocol.with.either.**all**.or. |
8ac20 | 2a 2a 69 70 2a 2a 2e 00 55 44 50 20 42 72 6f 61 64 63 61 73 74 20 52 65 6c 61 79 00 55 44 50 20 | **ip**..UDP.Broadcast.Relay.UDP. |
8ac40 | 6d 6f 64 65 20 77 6f 72 6b 73 20 62 65 74 74 65 72 20 77 69 74 68 20 4e 41 54 3a 00 55 44 50 20 | mode.works.better.with.NAT:.UDP. |
8ac60 | 70 6f 72 74 20 31 37 30 31 20 66 6f 72 20 49 50 73 65 63 00 55 44 50 20 70 6f 72 74 20 34 35 30 | port.1701.for.IPsec.UDP.port.450 |
8ac80 | 30 20 28 4e 41 54 2d 54 29 00 55 44 50 20 70 6f 72 74 20 35 30 30 20 28 49 4b 45 29 00 55 52 4c | 0.(NAT-T).UDP.port.500.(IKE).URL |
8aca0 | 20 46 69 6c 74 65 72 69 6e 67 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 53 71 75 69 64 47 | .Filtering.is.provided.by.SquidG |
8acc0 | 75 61 72 64 5f 2e 00 55 52 4c 20 66 69 6c 74 65 72 69 6e 67 00 55 52 4c 20 77 69 74 68 20 73 69 | uard_..URL.filtering.URL.with.si |
8ace0 | 67 6e 61 74 75 72 65 20 6f 66 20 6d 61 73 74 65 72 20 66 6f 72 20 61 75 74 68 20 72 65 70 6c 79 | gnature.of.master.for.auth.reply |
8ad00 | 20 76 65 72 69 66 69 63 61 74 69 6f 6e 00 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 | .verification.USB.to.serial.conv |
8ad20 | 65 72 74 65 72 73 20 77 69 6c 6c 20 68 61 6e 64 6c 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 | erters.will.handle.most.of.their |
8ad40 | 20 77 6f 72 6b 20 69 6e 20 73 6f 66 74 77 61 72 65 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 | .work.in.software.so.you.should. |
8ad60 | 62 65 20 63 61 72 65 66 75 6c 6c 20 77 69 74 68 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 62 61 | be.carefull.with.the.selected.ba |
8ad80 | 75 64 72 61 74 65 20 61 73 20 73 6f 6d 65 20 74 69 6d 65 73 20 74 68 65 79 20 63 61 6e 27 74 20 | udrate.as.some.times.they.can't. |
8ada0 | 63 6f 70 65 20 77 69 74 68 20 74 68 65 20 65 78 70 65 63 74 65 64 20 73 70 65 65 64 2e 00 55 55 | cope.with.the.expected.speed..UU |
8adc0 | 43 50 20 73 75 62 73 79 73 74 65 6d 00 55 6e 64 65 72 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 | CP.subsystem.Under.some.circumst |
8ade0 | 61 6e 63 65 73 2c 20 4c 52 4f 20 69 73 20 6b 6e 6f 77 6e 20 74 6f 20 6d 6f 64 69 66 79 20 74 68 | ances,.LRO.is.known.to.modify.th |
8ae00 | 65 20 70 61 63 6b 65 74 20 68 65 61 64 65 72 73 20 6f 66 20 66 6f 72 77 61 72 64 65 64 20 74 72 | e.packet.headers.of.forwarded.tr |
8ae20 | 61 66 66 69 63 2c 20 77 68 69 63 68 20 62 72 65 61 6b 73 20 74 68 65 20 65 6e 64 2d 74 6f 2d 65 | affic,.which.breaks.the.end-to-e |
8ae40 | 6e 64 20 70 72 69 6e 63 69 70 6c 65 20 6f 66 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b | nd.principle.of.computer.network |
8ae60 | 69 6e 67 2e 20 4c 52 4f 20 69 73 20 61 6c 73 6f 20 6f 6e 6c 79 20 61 62 6c 65 20 74 6f 20 6f 66 | ing..LRO.is.also.only.able.to.of |
8ae80 | 66 6c 6f 61 64 20 54 43 50 20 73 65 67 6d 65 6e 74 73 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 | fload.TCP.segments.encapsulated. |
8aea0 | 69 6e 20 49 50 76 34 20 70 61 63 6b 65 74 73 2e 20 44 75 65 20 74 6f 20 74 68 65 73 65 20 6c 69 | in.IPv4.packets..Due.to.these.li |
8aec0 | 6d 69 74 61 74 69 6f 6e 73 2c 20 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 | mitations,.it.is.recommended.to. |
8aee0 | 75 73 65 20 47 52 4f 20 28 47 65 6e 65 72 69 63 20 52 65 63 65 69 76 65 20 4f 66 66 6c 6f 61 64 | use.GRO.(Generic.Receive.Offload |
8af00 | 29 20 77 68 65 72 65 20 70 6f 73 73 69 62 6c 65 2e 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 | ).where.possible..More.informati |
8af20 | 6f 6e 20 6f 6e 20 74 68 65 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 6f 66 20 4c 52 4f 20 63 61 6e | on.on.the.limitations.of.LRO.can |
8af40 | 20 62 65 20 66 6f 75 6e 64 20 68 65 72 65 3a 20 68 74 74 70 73 3a 2f 2f 6c 77 6e 2e 6e 65 74 2f | .be.found.here:.https://lwn.net/ |
8af60 | 41 72 74 69 63 6c 65 73 2f 33 35 38 39 31 30 2f 00 55 6e 69 63 61 73 74 00 55 6e 69 63 61 73 74 | Articles/358910/.Unicast.Unicast |
8af80 | 20 56 52 52 50 00 55 6e 69 63 61 73 74 20 56 58 4c 41 4e 00 55 6e 69 74 20 6f 66 20 74 68 69 73 | .VRRP.Unicast.VXLAN.Unit.of.this |
8afa0 | 20 63 6f 6d 6d 61 6e 64 20 69 73 20 4d 42 2e 00 55 6e 69 74 73 00 55 6e 74 69 6c 20 56 79 4f 53 | .command.is.MB..Units.Until.VyOS |
8afc0 | 20 31 2e 34 2c 20 74 68 65 20 6f 6e 6c 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 73 69 74 65 2d 74 | .1.4,.the.only.option.for.site-t |
8afe0 | 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e 20 77 69 74 68 6f 75 74 20 50 4b 49 20 77 61 73 20 74 | o-site.OpenVPN.without.PKI.was.t |
8b000 | 6f 20 75 73 65 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 2e 20 54 68 61 74 20 6f 70 74 69 | o.use.pre-shared.keys..That.opti |
8b020 | 6f 6e 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 62 75 74 20 69 74 20 69 73 20 | on.is.still.available.but.it.is. |
8b040 | 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 | deprecated.and.will.be.removed.i |
8b060 | 6e 20 74 68 65 20 66 75 74 75 72 65 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 6e 65 | n.the.future..However,.if.you.ne |
8b080 | 65 64 20 74 6f 20 73 65 74 20 75 70 20 61 20 74 75 6e 6e 65 6c 20 74 6f 20 61 6e 20 6f 6c 64 65 | ed.to.set.up.a.tunnel.to.an.olde |
8b0a0 | 72 20 56 79 4f 53 20 76 65 72 73 69 6f 6e 20 6f 72 20 61 20 73 79 73 74 65 6d 20 77 69 74 68 20 | r.VyOS.version.or.a.system.with. |
8b0c0 | 6f 6c 64 65 72 20 4f 70 65 6e 56 50 4e 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 74 69 6c 6c | older.OpenVPN,.you.need.to.still |
8b0e0 | 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 2e 00 55 70 20 | .need.to.know.how.to.use.it..Up. |
8b100 | 74 6f 20 73 65 76 65 6e 20 71 75 65 75 65 73 20 2d 64 65 66 69 6e 65 64 20 61 73 20 63 6c 61 73 | to.seven.queues.-defined.as.clas |
8b120 | 73 65 73 5f 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 70 72 69 6f 72 69 74 69 65 73 2d 20 | ses_.with.different.priorities-. |
8b140 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 70 | can.be.configured..Packets.are.p |
8b160 | 6c 61 63 65 64 20 69 6e 74 6f 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 61 73 73 6f 63 | laced.into.queues.based.on.assoc |
8b180 | 69 61 74 65 64 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 2e 20 50 61 63 6b 65 74 73 20 61 72 | iated.match.criteria..Packets.ar |
8b1a0 | 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 66 72 6f 6d 20 74 68 65 20 71 75 65 75 65 73 20 69 6e | e.transmitted.from.the.queues.in |
8b1c0 | 20 70 72 69 6f 72 69 74 79 20 6f 72 64 65 72 2e 20 49 66 20 63 6c 61 73 73 65 73 20 77 69 74 68 | .priority.order..If.classes.with |
8b1e0 | 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 61 72 65 20 62 65 69 6e 67 20 66 69 6c | .a.higher.priority.are.being.fil |
8b200 | 6c 65 64 20 77 69 74 68 20 70 61 63 6b 65 74 73 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 2c 20 70 | led.with.packets.continuously,.p |
8b220 | 61 63 6b 65 74 73 20 66 72 6f 6d 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 | ackets.from.lower.priority.class |
8b240 | 65 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 61 66 74 65 | es.will.only.be.transmitted.afte |
8b260 | 72 20 74 72 61 66 66 69 63 20 76 6f 6c 75 6d 65 20 66 72 6f 6d 20 68 69 67 68 65 72 20 70 72 69 | r.traffic.volume.from.higher.pri |
8b280 | 6f 72 69 74 79 20 63 6c 61 73 73 65 73 20 64 65 63 72 65 61 73 65 73 2e 00 55 70 64 61 74 65 00 | ority.classes.decreases..Update. |
8b2a0 | 55 70 64 61 74 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 00 55 70 64 61 74 65 20 67 65 | Update.container.image.Update.ge |
8b2c0 | 6f 69 70 20 64 61 74 61 62 61 73 65 00 55 70 64 61 74 65 73 00 55 70 64 61 74 65 73 20 66 72 6f | oip.database.Updates.Updates.fro |
8b2e0 | 6d 20 74 68 65 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 73 20 61 72 65 20 64 69 72 | m.the.RPKI.cache.servers.are.dir |
8b300 | 65 63 74 6c 79 20 61 70 70 6c 69 65 64 20 61 6e 64 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e | ectly.applied.and.path.selection |
8b320 | 20 69 73 20 75 70 64 61 74 65 64 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 28 53 6f 66 74 20 72 | .is.updated.accordingly..(Soft.r |
8b340 | 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 66 | econfiguration.must.be.enabled.f |
8b360 | 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 69 64 | or.this.to.work)..Upload.bandwid |
8b380 | 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e | th.limit.in.kbit/s.for.`<user>`. |
8b3a0 | 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f | .Upload.bandwidth.limit.in.kbit/ |
8b3c0 | 73 20 66 6f 72 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e | s.for.for.user.on.interface.`<in |
8b3e0 | 74 65 72 66 61 63 65 3e 60 2e 00 55 70 6f 6e 20 72 65 63 65 70 74 69 6f 6e 20 6f 66 20 61 6e 20 | terface>`..Upon.reception.of.an. |
8b400 | 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 2c 20 77 68 65 6e 20 61 20 72 65 73 70 6f 6e 73 65 | incoming.packet,.when.a.response |
8b420 | 20 69 73 20 73 65 6e 74 2c 20 69 74 20 6d 69 67 68 74 20 62 65 20 64 65 73 69 72 65 64 20 74 6f | .is.sent,.it.might.be.desired.to |
8b440 | 20 65 6e 73 75 72 65 20 74 68 61 74 20 69 74 20 6c 65 61 76 65 73 20 66 72 6f 6d 20 74 68 65 20 | .ensure.that.it.leaves.from.the. |
8b460 | 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6f 6e | same.interface.as.the.inbound.on |
8b480 | 65 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 65 6e 61 62 6c | e..This.can.be.achieved.by.enabl |
8b4a0 | 69 6e 67 20 73 74 69 63 6b 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 6c 6f | ing.sticky.connections.in.the.lo |
8b4c0 | 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 00 55 70 6f 6e 20 73 68 75 74 64 6f 77 6e 2c 20 74 68 69 | ad.balancing:.Upon.shutdown,.thi |
8b4e0 | 73 20 6f 70 74 69 6f 6e 20 77 69 6c 6c 20 64 65 70 72 65 63 61 74 65 20 74 68 65 20 70 72 65 66 | s.option.will.deprecate.the.pref |
8b500 | 69 78 20 62 79 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 69 74 20 69 6e 20 74 68 65 20 73 68 75 74 64 | ix.by.announcing.it.in.the.shutd |
8b520 | 6f 77 6e 20 52 41 00 55 73 65 20 38 30 32 2e 31 31 6e 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 | own.RA.Use.802.11n.protocol.Use. |
8b540 | 3a 61 62 62 72 3a 60 44 48 20 28 44 69 66 66 69 65 e2 80 93 48 65 6c 6c 6d 61 6e 29 60 20 70 61 | :abbr:`DH.(Diffie...Hellman)`.pa |
8b560 | 72 61 6d 65 74 65 72 73 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 2e 20 4d 75 73 | rameters.from.PKI.subsystem..Mus |
8b580 | 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 32 30 34 38 20 62 69 74 73 20 69 6e 20 6c 65 6e 67 74 | t.be.at.least.2048.bits.in.lengt |
8b5a0 | 68 2e 00 55 73 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 | h..Use.CA.certificate.from.PKI.s |
8b5c0 | 75 62 73 79 73 74 65 6d 00 55 73 65 20 44 79 6e 44 4e 53 20 61 73 20 79 6f 75 72 20 70 72 65 66 | ubsystem.Use.DynDNS.as.your.pref |
8b5e0 | 65 72 72 65 64 20 70 72 6f 76 69 64 65 72 3a 00 55 73 65 20 54 4c 53 20 62 75 74 20 73 6b 69 70 | erred.provider:.Use.TLS.but.skip |
8b600 | 20 68 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 00 55 73 65 20 54 4c 53 20 65 6e 63 72 79 70 74 | .host.validation.Use.TLS.encrypt |
8b620 | 69 6f 6e 2e 00 55 73 65 20 60 3c 73 75 62 6e 65 74 3e 60 20 61 73 20 74 68 65 20 49 50 20 70 6f | ion..Use.`<subnet>`.as.the.IP.po |
8b640 | 6f 6c 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6e 67 20 63 6c 69 65 6e 74 73 2e 00 55 | ol.for.all.connecting.clients..U |
8b660 | 73 65 20 60 60 73 68 6f 77 20 6c 6f 67 20 7c 20 73 74 72 69 70 2d 70 72 69 76 61 74 65 60 60 20 | se.``show.log.|.strip-private``. |
8b680 | 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 69 64 65 20 70 72 69 76 61 74 65 20 64 61 74 61 | if.you.want.to.hide.private.data |
8b6a0 | 20 77 68 65 6e 20 73 68 61 72 69 6e 67 20 79 6f 75 72 20 6c 6f 67 73 2e 00 55 73 65 20 60 64 65 | .when.sharing.your.logs..Use.`de |
8b6c0 | 6c 65 74 65 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 73 60 20 74 | lete.system.conntrack.modules`.t |
8b6e0 | 6f 20 64 65 61 63 74 69 76 65 20 61 6c 6c 20 6d 6f 64 75 6c 65 73 2e 00 55 73 65 20 61 20 70 65 | o.deactive.all.modules..Use.a.pe |
8b700 | 72 73 69 73 74 65 6e 74 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 6f 72 6d 61 6c | rsistent.LDAP.connection..Normal |
8b720 | 6c 79 20 74 68 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 6f | ly.the.LDAP.connection.is.only.o |
8b740 | 70 65 6e 20 77 68 69 6c 65 20 76 61 6c 69 64 61 74 69 6e 67 20 61 20 75 73 65 72 6e 61 6d 65 20 | pen.while.validating.a.username. |
8b760 | 74 6f 20 70 72 65 73 65 72 76 65 20 72 65 73 6f 75 72 63 65 73 20 61 74 20 74 68 65 20 4c 44 41 | to.preserve.resources.at.the.LDA |
8b780 | 50 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 75 73 65 73 20 74 68 65 | P.server..This.option.causes.the |
8b7a0 | 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 62 65 20 6b 65 70 74 20 6f 70 65 6e | .LDAP.connection.to.be.kept.open |
8b7c0 | 2c 20 61 6c 6c 6f 77 69 6e 67 20 69 74 20 74 6f 20 62 65 20 72 65 75 73 65 64 20 66 6f 72 20 66 | ,.allowing.it.to.be.reused.for.f |
8b7e0 | 75 72 74 68 65 72 20 75 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 73 2e 00 55 73 65 20 61 20 73 | urther.user.validations..Use.a.s |
8b800 | 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 | pecific.address-group..Prepend.c |
8b820 | 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 | haracter.``!``.for.inverted.matc |
8b840 | 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 64 6f | hing.criteria..Use.a.specific.do |
8b860 | 6d 61 69 6e 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 | main-group..Prepend.character.`` |
8b880 | 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 | !``.for.inverted.matching.criter |
8b8a0 | 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 6d 61 63 2d 67 72 6f 75 70 2e 20 50 72 | ia..Use.a.specific.mac-group..Pr |
8b8c0 | 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 | epend.character.``!``.for.invert |
8b8e0 | 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 | ed.matching.criteria..Use.a.spec |
8b900 | 69 66 69 63 20 6e 65 74 77 6f 72 6b 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 | ific.network-group..Prepend.char |
8b920 | 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e | acter.``!``.for.inverted.matchin |
8b940 | 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 2d | g.criteria..Use.a.specific.port- |
8b960 | 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 | group..Prepend.character.``!``.f |
8b980 | 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 | or.inverted.matching.criteria..U |
8b9a0 | 73 65 20 61 63 74 69 76 65 2d 61 63 74 69 76 65 20 48 41 20 6d 6f 64 65 2e 00 55 73 65 20 61 64 | se.active-active.HA.mode..Use.ad |
8b9c0 | 64 72 65 73 73 20 60 6d 61 73 71 75 65 72 61 64 65 60 20 28 74 68 65 20 69 6e 74 65 72 66 61 63 | dress.`masquerade`.(the.interfac |
8b9e0 | 65 73 20 70 72 69 6d 61 72 79 20 61 64 64 72 65 73 73 29 20 6f 6e 20 72 75 6c 65 20 33 30 00 55 | es.primary.address).on.rule.30.U |
8ba00 | 73 65 20 61 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 73 65 | se.an.automatically.generated.se |
8ba20 | 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 00 55 73 65 20 61 6e 79 20 6c 6f | lf-signed.certificate.Use.any.lo |
8ba40 | 63 61 6c 20 61 64 64 72 65 73 73 2c 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 | cal.address,.configured.on.any.i |
8ba60 | 6e 74 65 72 66 61 63 65 20 69 66 20 74 68 69 73 20 69 73 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 | nterface.if.this.is.not.set..Use |
8ba80 | 20 61 75 74 68 20 6b 65 79 20 66 69 6c 65 20 61 74 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 | .auth.key.file.at.``/config/auth |
8baa0 | 2f 6d 79 2e 6b 65 79 60 60 00 55 73 65 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 | /my.key``.Use.certificate.from.P |
8bac0 | 4b 49 20 73 75 62 73 79 73 74 65 6d 00 55 73 65 20 63 6f 6e 66 69 67 75 72 65 64 20 60 3c 75 72 | KI.subsystem.Use.configured.`<ur |
8bae0 | 6c 3e 60 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 | l>`.to.determine.your.IP.address |
8bb00 | 2e 20 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 6c 6f 61 64 20 60 3c 75 72 6c 3e 60 20 61 6e | ..ddclient_.will.load.`<url>`.an |
8bb20 | 64 20 74 72 69 65 73 20 74 6f 20 65 78 74 72 61 63 74 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 | d.tries.to.extract.your.IP.addre |
8bb40 | 73 73 20 66 72 6f 6d 20 74 68 65 20 72 65 73 70 6f 6e 73 65 2e 00 55 73 65 20 64 65 53 45 43 20 | ss.from.the.response..Use.deSEC. |
8bb60 | 28 64 65 64 79 6e 2e 69 6f 29 20 61 73 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 20 70 72 6f | (dedyn.io).as.your.preferred.pro |
8bb80 | 76 69 64 65 72 3a 00 55 73 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 | vider:.Use.inverse-match.to.matc |
8bba0 | 68 20 61 6e 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e | h.anything.except.the.given.coun |
8bbc0 | 74 72 79 2d 63 6f 64 65 73 2e 00 55 73 65 20 6c 6f 63 61 6c 20 73 6f 63 6b 65 74 20 66 6f 72 20 | try-codes..Use.local.socket.for. |
8bbe0 | 41 50 49 00 55 73 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 60 66 6f 6f 60 20 77 69 74 68 20 70 61 | API.Use.local.user.`foo`.with.pa |
8bc00 | 73 73 77 6f 72 64 20 60 62 61 72 60 00 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 | ssword.`bar`.Use.tab.completion. |
8bc20 | 74 6f 20 67 65 74 20 61 20 6c 69 73 74 20 6f 66 20 63 61 74 65 67 6f 72 69 65 73 2e 00 55 73 65 | to.get.a.list.of.categories..Use |
8bc40 | 20 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e | .the.address.of.the.specified.in |
8bc60 | 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 | terface.on.the.local.machine.as. |
8bc80 | 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 | the.source.address.of.the.connec |
8bca0 | 74 69 6f 6e 2e 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 | tion..Use.the.following.topology |
8bcc0 | 20 74 6f 20 62 75 69 6c 64 20 61 20 6e 61 74 36 36 20 62 61 73 65 64 20 69 73 6f 6c 61 74 65 64 | .to.build.a.nat66.based.isolated |
8bce0 | 20 6e 65 74 77 6f 72 6b 20 62 65 74 77 65 65 6e 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 65 78 | .network.between.internal.and.ex |
8bd00 | 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 73 20 28 64 79 6e 61 6d 69 63 20 70 72 65 66 69 78 20 | ternal.networks.(dynamic.prefix. |
8bd20 | 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 29 3a 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f | is.not.supported):.Use.the.follo |
8bd40 | 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 69 6e 74 65 72 | wing.topology.to.translate.inter |
8bd60 | 6e 61 6c 20 75 73 65 72 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 28 60 60 66 63 3a 3a | nal.user.local.addresses.(``fc:: |
8bd80 | 2f 37 60 60 29 20 74 6f 20 44 48 43 50 76 36 2d 50 44 20 70 72 6f 76 69 64 65 64 20 70 72 65 66 | /7``).to.DHCPv6-PD.provided.pref |
8bda0 | 69 78 65 73 20 66 72 6f 6d 20 61 6e 20 49 53 50 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 | ixes.from.an.ISP.connected.to.a. |
8bdc0 | 56 79 4f 53 20 48 41 20 70 61 69 72 2e 00 55 73 65 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | VyOS.HA.pair..Use.the.specified. |
8bde0 | 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 | address.on.the.local.machine.as. |
8be00 | 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 | the.source.address.of.the.connec |
8be20 | 74 69 6f 6e 2e 20 4f 6e 6c 79 20 75 73 65 66 75 6c 20 6f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 | tion..Only.useful.on.systems.wit |
8be40 | 68 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 65 | h.more.than.one.address..Use.the |
8be60 | 73 65 20 63 6f 6d 6d 61 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f | se.commands.if.you.would.like.to |
8be80 | 20 73 65 74 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c | .set.the.discovery.hello.and.hol |
8bea0 | 64 20 74 69 6d 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 74 68 65 20 74 61 72 67 65 74 | d.time.parameters.for.the.target |
8bec0 | 65 64 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d | ed.LDP.neighbors..Use.these.comm |
8bee0 | 61 6e 64 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 | ands.if.you.would.like.to.set.th |
8bf00 | 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 | e.discovery.hello.and.hold.time. |
8bf20 | 70 61 72 61 6d 65 74 65 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 | parameters..Use.these.commands.t |
8bf40 | 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 65 78 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 | o.control.the.exporting.of.forwa |
8bf60 | 72 64 69 6e 67 20 65 71 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 | rding.equivalence.classes.(FECs) |
8bf80 | 20 66 6f 72 20 4c 44 50 20 74 6f 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c | .for.LDP.to.neighbors..This.woul |
8bfa0 | 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 | d.be.useful.for.example.on.only. |
8bfc0 | 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 | announcing.the.labeled.routes.th |
8bfe0 | 61 74 20 61 72 65 20 6e 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 | at.are.needed.and.not.ones.that. |
8c000 | 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 6e 6e 6f 75 6e 63 69 | are.not.needed,.such.as.announci |
8c020 | 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 6e 6f 20 6f 74 | ng.loopback.interfaces.and.no.ot |
8c040 | 68 65 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 74 | hers..Use.these.commands.to.cont |
8c060 | 72 6f 6c 20 74 68 65 20 69 6d 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 | rol.the.importing.of.forwarding. |
8c080 | 65 71 75 69 76 61 6c 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 4c | equivalence.classes.(FECs).for.L |
8c0a0 | 44 50 20 66 72 6f 6d 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 62 65 | DP.from.neighbors..This.would.be |
8c0c0 | 20 75 73 65 66 75 6c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 61 63 63 65 | .useful.for.example.on.only.acce |
8c0e0 | 70 74 69 6e 67 20 74 68 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 | pting.the.labeled.routes.that.ar |
8c100 | 65 20 6e 65 65 64 65 64 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e | e.needed.and.not.ones.that.are.n |
8c120 | 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 63 68 20 61 73 20 61 63 63 65 70 74 69 6e 67 20 6c 6f 6f | ot.needed,.such.as.accepting.loo |
8c140 | 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 72 65 6a 65 63 74 69 6e 67 20 61 | pback.interfaces.and.rejecting.a |
8c160 | 6c 6c 20 6f 74 68 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 | ll.others..Use.this.PIM.command. |
8c180 | 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 73 65 74 | in.the.selected.interface.to.set |
8c1a0 | 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 28 31 2d 34 32 39 34 39 36 37 32 39 35 29 20 79 6f 75 | .the.priority.(1-4294967295).you |
8c1c0 | 20 77 61 6e 74 20 74 6f 20 69 6e 66 6c 75 65 6e 63 65 20 69 6e 20 74 68 65 20 65 6c 65 63 74 69 | .want.to.influence.in.the.electi |
8c1e0 | 6f 6e 20 6f 66 20 61 20 6e 6f 64 65 20 74 6f 20 62 65 63 6f 6d 65 20 74 68 65 20 44 65 73 69 67 | on.of.a.node.to.become.the.Desig |
8c200 | 6e 61 74 65 64 20 52 6f 75 74 65 72 20 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 20 | nated.Router.for.a.LAN.segment.. |
8c220 | 54 68 65 20 64 65 66 61 75 6c 74 20 70 72 69 6f 72 69 74 79 20 69 73 20 31 2c 20 73 65 74 20 61 | The.default.priority.is.1,.set.a |
8c240 | 20 20 68 69 67 68 65 72 20 76 61 6c 75 65 20 74 6f 20 67 69 76 65 20 74 68 65 20 72 6f 75 74 65 | ..higher.value.to.give.the.route |
8c260 | 72 20 6d 6f 72 65 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 74 68 65 20 44 52 20 65 6c 65 63 | r.more.preference.in.the.DR.elec |
8c280 | 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 | tion.process..Use.this.PIM.comma |
8c2a0 | 6e 64 20 74 6f 20 6d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 | nd.to.modify.the.time.out.value. |
8c2c0 | 28 33 31 2d 36 30 30 30 30 20 73 65 63 6f 6e 64 73 29 20 66 6f 72 20 61 6e 20 60 28 53 2c 47 29 | (31-60000.seconds).for.an.`(S,G) |
8c2e0 | 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 | .<https://tools.ietf.org/html/rf |
8c300 | 63 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 66 6c 6f 77 2e 20 33 31 20 73 65 | c7761#section-4.1>`_.flow..31.se |
8c320 | 63 6f 6e 64 73 20 69 73 20 63 68 6f 73 65 6e 20 66 6f 72 20 61 20 6c 6f 77 65 72 20 62 6f 75 6e | conds.is.chosen.for.a.lower.boun |
8c340 | 64 20 61 73 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e | d.as.some.hardware.platforms.can |
8c360 | 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 | not.see.data.flowing.in.better.t |
8c380 | 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 73 20 63 68 75 6e 6b 73 2e 00 55 73 65 20 74 68 69 73 20 | han.30.seconds.chunks..Use.this. |
8c3a0 | 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 | comand.to.set.the.IPv6.address.p |
8c3c0 | 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 | ool.from.which.a.PPPoE.client.wi |
8c3e0 | 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 | ll.get.an.IPv6.prefix.of.your.de |
8c400 | 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 | fined.length.(mask).to.terminate |
8c420 | 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 | .the.PPPoE.endpoint.at.their.sid |
8c440 | 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 | e..The.mask.length.can.be.set.fr |
8c460 | 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 | om.48.to.128.bit.long,.the.defau |
8c480 | 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 | lt.value.is.64..Use.this.comand. |
8c4a0 | 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f | to.set.the.IPv6.address.pool.fro |
8c4c0 | 6d 20 77 68 69 63 68 20 61 6e 20 49 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 | m.which.an.IPoE.client.will.get. |
8c4e0 | 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c | an.IPv6.prefix.of.your.defined.l |
8c500 | 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 49 50 | ength.(mask).to.terminate.the.IP |
8c520 | 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d | oE.endpoint.at.their.side..The.m |
8c540 | 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f | ask.length.can.be.set.from.48.to |
8c560 | 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | .128.bit.long,.the.default.value |
8c580 | 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 | .is.64..Use.this.comand.to.set.t |
8c5a0 | 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 | he.IPv6.address.pool.from.which. |
8c5c0 | 61 6e 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 | an.PPPoE.client.will.get.an.IPv6 |
8c5e0 | 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 | .prefix.of.your.defined.length.( |
8c600 | 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 | mask).to.terminate.the.PPPoE.end |
8c620 | 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 | point.at.their.side..The.mask.le |
8c640 | 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 | ngth.can.be.set.from.48.to.128.b |
8c660 | 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 | it.long,.the.default.value.is.64 |
8c680 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 | ..Use.this.comand.to.set.the.IPv |
8c6a0 | 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 54 | 6.address.pool.from.which.an.PPT |
8c6c0 | 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 | P.client.will.get.an.IPv6.prefix |
8c6e0 | 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 | .of.your.defined.length.(mask).t |
8c700 | 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 | o.terminate.the.PPTP.endpoint.at |
8c720 | 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e | .their.side..The.mask.length.can |
8c740 | 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c | .be.set.from.48.to.128.bit.long, |
8c760 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 | .the.default.value.is.64..Use.th |
8c780 | 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 | is.comand.to.set.the.IPv6.addres |
8c7a0 | 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 53 53 54 50 20 63 6c 69 65 6e 74 | s.pool.from.which.an.SSTP.client |
8c7c0 | 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 | .will.get.an.IPv6.prefix.of.your |
8c7e0 | 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e | .defined.length.(mask).to.termin |
8c800 | 61 74 65 20 74 68 65 20 53 53 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 | ate.the.SSTP.endpoint.at.their.s |
8c820 | 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 | ide..The.mask.length.can.be.set. |
8c840 | 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 | from.48.to.128.bit.long,.the.def |
8c860 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e | ault.value.is.64..Use.this.coman |
8c880 | 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 | d.to.set.the.IPv6.address.pool.f |
8c8a0 | 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 6c 32 74 70 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 | rom.which.an.l2tp.client.will.ge |
8c8c0 | 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 | t.an.IPv6.prefix.of.your.defined |
8c8e0 | 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 | .length.(mask).to.terminate.the. |
8c900 | 6c 32 74 70 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 | l2tp.endpoint.at.their.side..The |
8c920 | 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 | .mask.length.can.be.set.from.48. |
8c940 | 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | to.128.bit.long,.the.default.val |
8c960 | 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 | ue.is.64..Use.this.command.for.e |
8c980 | 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 | very.pool.of.client.IP.addresses |
8c9a0 | 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 | .you.want.to.define..The.address |
8c9c0 | 65 73 20 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f | es.of.this.pool.will.be.given.to |
8c9e0 | 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 | .PPPoE.clients..You.must.use.CID |
8ca00 | 52 20 6e 6f 74 61 74 69 6f 6e 20 61 6e 64 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e | R.notation.and.it.must.be.within |
8ca20 | 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | .a./24.subnet..Use.this.command. |
8ca40 | 66 6f 72 20 65 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 | for.every.pool.of.client.IP.addr |
8ca60 | 65 73 73 65 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 | esses.you.want.to.define..The.ad |
8ca80 | 64 72 65 73 73 65 73 20 6f 66 20 74 68 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 | dresses.of.this.pool.will.be.giv |
8caa0 | 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 | en.to.PPPoE.clients..You.must.us |
8cac0 | 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | e.CIDR.notation..Use.this.comman |
8cae0 | 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 66 6f 72 20 74 68 65 20 72 6f 75 74 | d.if.you.would.like.for.the.rout |
8cb00 | 65 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 46 45 43 73 20 77 69 74 68 20 61 20 6c 61 62 65 | er.to.advertise.FECs.with.a.labe |
8cb20 | 6c 20 6f 66 20 30 20 66 6f 72 20 65 78 70 6c 69 63 69 74 20 6e 75 6c 6c 20 6f 70 65 72 61 74 69 | l.of.0.for.explicit.null.operati |
8cb40 | 6f 6e 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 | ons..Use.this.command.if.you.wou |
8cb60 | 6c 64 20 6c 69 6b 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6c 6f 63 61 6c 20 46 45 43 | ld.like.to.control.the.local.FEC |
8cb80 | 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 20 66 6f 72 20 4c 44 50 2e 20 41 20 67 6f 6f 64 20 65 78 61 | .allocations.for.LDP..A.good.exa |
8cba0 | 6d 70 6c 65 20 77 6f 75 6c 64 20 62 65 20 66 6f 72 20 79 6f 75 72 20 6c 6f 63 61 6c 20 72 6f 75 | mple.would.be.for.your.local.rou |
8cbc0 | 74 65 72 20 74 6f 20 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 | ter.to.not.allocate.a.label.for. |
8cbe0 | 65 76 65 72 79 74 68 69 6e 67 2e 20 4a 75 73 74 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 77 68 61 | everything..Just.a.label.for.wha |
8cc00 | 74 20 69 74 27 73 20 75 73 65 66 75 6c 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f | t.it's.useful..A.good.example.wo |
8cc20 | 75 6c 64 20 62 65 20 6a 75 73 74 20 61 20 6c 6f 6f 70 62 61 63 6b 20 6c 61 62 65 6c 2e 00 55 73 | uld.be.just.a.loopback.label..Us |
8cc40 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 | e.this.command.if.you.would.like |
8cc60 | 20 74 6f 20 73 65 74 20 74 68 65 20 54 43 50 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d | .to.set.the.TCP.session.hold.tim |
8cc80 | 65 20 69 6e 74 65 72 76 61 6c 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | e.intervals..Use.this.command.to |
8cca0 | 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f | .allow.the.selected.interface.to |
8ccc0 | 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 64 65 66 69 6e 69 6e 67 | .join.a.multicast.group.defining |
8cce0 | 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 61 64 64 72 65 73 73 20 79 6f 75 20 77 61 6e 74 20 | .the.multicast.address.you.want. |
8cd00 | 74 6f 20 6a 6f 69 6e 20 61 6e 64 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 | to.join.and.the.source.IP.addres |
8cd20 | 73 20 74 6f 6f 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 | s.too..Use.this.command.to.allow |
8cd40 | 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 | .the.selected.interface.to.join. |
8cd60 | 61 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | a.multicast.group..Use.this.comm |
8cd80 | 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 | and.to.allow.the.selected.interf |
8cda0 | 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 | ace.to.join.a.source-specific.mu |
8cdc0 | 6c 74 69 63 61 73 74 20 67 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | lticast.group..Use.this.command. |
8cde0 | 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f | to.check.the.tunnel.status.for.O |
8ce00 | 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 | penVPN.client.interfaces..Use.th |
8ce20 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 | is.command.to.check.the.tunnel.s |
8ce40 | 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 | tatus.for.OpenVPN.server.interfa |
8ce60 | 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 | ces..Use.this.command.to.check.t |
8ce80 | 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 69 74 | he.tunnel.status.for.OpenVPN.sit |
8cea0 | 65 2d 74 6f 2d 73 69 74 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 | e-to-site.interfaces..Use.this.c |
8cec0 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6c 65 61 72 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 | ommand.to.clear.Border.Gateway.P |
8cee0 | 72 6f 74 6f 63 6f 6c 20 73 74 61 74 69 73 74 69 63 73 20 6f 72 20 73 74 61 74 75 73 2e 00 55 73 | rotocol.statistics.or.status..Us |
8cf00 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 | e.this.command.to.configure.DHCP |
8cf20 | 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f | v6.Prefix.Delegation.(RFC3633).o |
8cf40 | 6e 20 49 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 | n.IPoE..You.will.have.to.set.you |
8cf60 | 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 | r.IPv6.pool.and.the.length.of.th |
8cf80 | 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 | e.delegation.prefix..From.the.de |
8cfa0 | 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 | fined.IPv6.pool.you.will.be.hand |
8cfc0 | 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 | ing.out.networks.of.the.defined. |
8cfe0 | 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 | length.(delegation-prefix)..The. |
8d000 | 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 | length.of.the.delegation.prefix. |
8d020 | 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e | can.be.set.from.32.to.64.bit.lon |
8d040 | 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | g..Use.this.command.to.configure |
8d060 | 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 | .DHCPv6.Prefix.Delegation.(RFC36 |
8d080 | 33 33 29 20 6f 6e 20 50 50 50 6f 45 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 | 33).on.PPPoE..You.will.have.to.s |
8d0a0 | 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 | et.your.IPv6.pool.and.the.length |
8d0c0 | 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 | .of.the.delegation.prefix..From. |
8d0e0 | 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 | the.defined.IPv6.pool.you.will.b |
8d100 | 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 | e.handing.out.networks.of.the.de |
8d120 | 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 | fined.length.(delegation-prefix) |
8d140 | 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 | ..The.length.of.the.delegation.p |
8d160 | 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 | refix.can.be.set.from.32.to.64.b |
8d180 | 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | it.long..Use.this.command.to.con |
8d1a0 | 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 | figure.DHCPv6.Prefix.Delegation. |
8d1c0 | 28 52 46 43 33 36 33 33 29 20 6f 6e 20 50 50 54 50 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 | (RFC3633).on.PPTP..You.will.have |
8d1e0 | 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c | .to.set.your.IPv6.pool.and.the.l |
8d200 | 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 | ength.of.the.delegation.prefix.. |
8d220 | 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 | From.the.defined.IPv6.pool.you.w |
8d240 | 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 | ill.be.handing.out.networks.of.t |
8d260 | 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 | he.defined.length.(delegation-pr |
8d280 | 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 | efix)..The.length.of.the.delegat |
8d2a0 | 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f | ion.prefix.can.be.set.from.32.to |
8d2c0 | 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .64.bit.long..Use.this.command.t |
8d2e0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 | o.configure.DHCPv6.Prefix.Delega |
8d300 | 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 53 53 54 50 2e 20 59 6f 75 20 77 69 6c 6c | tion.(RFC3633).on.SSTP..You.will |
8d320 | 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 | .have.to.set.your.IPv6.pool.and. |
8d340 | 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 | the.length.of.the.delegation.pre |
8d360 | 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 | fix..From.the.defined.IPv6.pool. |
8d380 | 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 | you.will.be.handing.out.networks |
8d3a0 | 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 | .of.the.defined.length.(delegati |
8d3c0 | 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 | on-prefix)..The.length.of.the.de |
8d3e0 | 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 | legation.prefix.can.be.set.from. |
8d400 | 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | 32.to.64.bit.long..Use.this.comm |
8d420 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 | and.to.configure.DHCPv6.Prefix.D |
8d440 | 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 6c 32 74 70 2e 20 59 6f 75 | elegation.(RFC3633).on.l2tp..You |
8d460 | 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c | .will.have.to.set.your.IPv6.pool |
8d480 | 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f | .and.the.length.of.the.delegatio |
8d4a0 | 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 | n.prefix..From.the.defined.IPv6. |
8d4c0 | 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 | pool.you.will.be.handing.out.net |
8d4e0 | 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c | works.of.the.defined.length.(del |
8d500 | 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 | egation-prefix)..The.length.of.t |
8d520 | 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 | he.delegation.prefix.can.be.set. |
8d540 | 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 | from.32.to.64.bit.long..Use.this |
8d560 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 | .command.to.configure.DHCPv6.Pre |
8d580 | 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 2e 20 59 6f 75 20 77 69 | fix.Delegation.(RFC3633)..You.wi |
8d5a0 | 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e | ll.have.to.set.your.IPv6.pool.an |
8d5c0 | 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 | d.the.length.of.the.delegation.p |
8d5e0 | 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f | refix..From.the.defined.IPv6.poo |
8d600 | 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 | l.you.will.be.handing.out.networ |
8d620 | 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 | ks.of.the.defined.length.(delega |
8d640 | 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 | tion-prefix)..The.length.of.the. |
8d660 | 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f | delegation.prefix.can.be.set.fro |
8d680 | 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f | m.32.to.64.bit.long..Use.this.co |
8d6a0 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f | mmand.to.configure.Dynamic.Autho |
8d6c0 | 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 73 20 74 6f 20 52 41 44 49 55 53 20 73 6f | rization.Extensions.to.RADIUS.so |
8d6e0 | 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 72 65 6d 6f 74 65 6c 79 20 64 69 73 63 6f 6e 6e 65 63 | .that.you.can.remotely.disconnec |
8d700 | 74 20 73 65 73 73 69 6f 6e 73 20 61 6e 64 20 63 68 61 6e 67 65 20 73 6f 6d 65 20 61 75 74 68 65 | t.sessions.and.change.some.authe |
8d720 | 6e 74 69 63 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 | ntication.parameters..Use.this.c |
8d740 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 22 62 6c 61 63 6b 2d 68 6f 6c | ommand.to.configure.a."black-hol |
8d760 | 65 22 20 72 6f 75 74 65 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2e 20 41 20 62 6c 61 63 6b 2d | e".route.on.the.router..A.black- |
8d780 | 68 6f 6c 65 20 72 6f 75 74 65 20 69 73 20 61 20 72 6f 75 74 65 20 66 6f 72 20 77 68 69 63 68 20 | hole.route.is.a.route.for.which. |
8d7a0 | 74 68 65 20 73 79 73 74 65 6d 20 73 69 6c 65 6e 74 6c 79 20 64 69 73 63 61 72 64 20 70 61 63 6b | the.system.silently.discard.pack |
8d7c0 | 65 74 73 20 74 68 61 74 20 61 72 65 20 6d 61 74 63 68 65 64 2e 20 54 68 69 73 20 70 72 65 76 65 | ets.that.are.matched..This.preve |
8d7e0 | 6e 74 73 20 6e 65 74 77 6f 72 6b 73 20 6c 65 61 6b 69 6e 67 20 6f 75 74 20 70 75 62 6c 69 63 20 | nts.networks.leaking.out.public. |
8d800 | 69 6e 74 65 72 66 61 63 65 73 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 70 72 65 76 | interfaces,.but.it.does.not.prev |
8d820 | 65 6e 74 20 74 68 65 6d 20 66 72 6f 6d 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 61 20 6d 6f | ent.them.from.being.used.as.a.mo |
8d840 | 72 65 20 73 70 65 63 69 66 69 63 20 72 6f 75 74 65 20 69 6e 73 69 64 65 20 79 6f 75 72 20 6e 65 | re.specific.route.inside.your.ne |
8d860 | 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | twork..Use.this.command.to.confi |
8d880 | 67 75 72 65 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 64 | gure.a.Network.Emulator.policy.d |
8d8a0 | 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 66 69 78 65 64 20 61 | efining.its.name.and.the.fixed.a |
8d8c0 | 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 64 64 20 74 6f | mount.of.time.you.want.to.add.to |
8d8e0 | 20 61 6c 6c 20 70 61 63 6b 65 74 20 67 6f 69 6e 67 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e 74 | .all.packet.going.out.of.the.int |
8d900 | 65 72 66 61 63 65 2e 20 54 68 65 20 6c 61 74 65 6e 63 79 20 77 69 6c 6c 20 62 65 20 61 64 64 65 | erface..The.latency.will.be.adde |
8d920 | 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 | d.through.the.Token.Bucket.Filte |
8d940 | 72 20 71 64 69 73 63 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 | r.qdisc..It.will.only.take.effec |
8d960 | 74 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 74 73 20 62 61 6e | t.if.you.have.configured.its.ban |
8d980 | 64 77 69 64 74 68 20 74 6f 6f 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 73 65 63 73 2c 20 6d 73 | dwidth.too..You.can.use.secs,.ms |
8d9a0 | 20 61 6e 64 20 75 73 2e 20 44 65 66 61 75 6c 74 3a 20 35 30 6d 73 2e 00 55 73 65 20 74 68 69 73 | .and.us..Default:.50ms..Use.this |
8d9c0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 50 72 69 6f 72 69 74 79 | .command.to.configure.a.Priority |
8d9e0 | 20 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 | .Queue.policy,.set.its.name,.set |
8da00 | 20 61 20 63 6c 61 73 73 20 77 69 74 68 20 61 20 70 72 69 6f 72 69 74 79 20 66 72 6f 6d 20 31 20 | .a.class.with.a.priority.from.1. |
8da20 | 74 6f 20 37 20 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e 20 | to.7.and.define.a.hard.limit.on. |
8da40 | 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 6c | the.real.queue.size..When.this.l |
8da60 | 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 65 | imit.is.reached,.new.packets.are |
8da80 | 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | .dropped..Use.this.command.to.co |
8daa0 | 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 | nfigure.a.Random-Detect.policy.a |
8dac0 | 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 6e 61 6d 65 20 74 68 65 20 49 | nd.set.its.name,.then.name.the.I |
8dae0 | 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 | P.Precedence.for.the.virtual.que |
8db00 | 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 | ue.you.are.configuring.and.what. |
8db20 | 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 69 74 73 20 71 75 65 75 65 20 77 69 | the.maximum.size.of.its.queue.wi |
8db40 | 6c 6c 20 62 65 20 28 66 72 6f 6d 20 31 20 74 6f 20 31 2d 34 32 39 34 39 36 37 32 39 35 20 70 61 | ll.be.(from.1.to.1-4294967295.pa |
8db60 | 63 6b 65 74 73 29 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 20 77 68 65 6e | ckets)..Packets.are.dropped.when |
8db80 | 20 74 68 65 20 63 75 72 72 65 6e 74 20 71 75 65 75 65 20 6c 65 6e 67 74 68 20 72 65 61 63 68 65 | .the.current.queue.length.reache |
8dba0 | 73 20 74 68 69 73 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | s.this.value..Use.this.command.t |
8dbc0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 | o.configure.a.Random-Detect.poli |
8dbe0 | 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 | cy.and.set.its.name,.then.state. |
8dc00 | 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 | the.IP.Precedence.for.the.virtua |
8dc20 | 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 | l.queue.you.are.configuring.and. |
8dc40 | 77 68 61 74 20 69 74 73 20 6d 61 72 6b 20 28 64 72 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 | what.its.mark.(drop).probability |
8dc60 | 20 77 69 6c 6c 20 62 65 2e 20 53 65 74 20 74 68 65 20 70 72 6f 62 61 62 69 6c 69 74 79 20 62 79 | .will.be..Set.the.probability.by |
8dc80 | 20 67 69 76 69 6e 67 20 74 68 65 20 4e 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 66 72 61 63 74 | .giving.the.N.value.of.the.fract |
8dca0 | 69 6f 6e 20 31 2f 4e 20 28 64 65 66 61 75 6c 74 3a 20 31 30 29 2e 00 55 73 65 20 74 68 69 73 20 | ion.1/N.(default:.10)..Use.this. |
8dcc0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 | command.to.configure.a.Random-De |
8dce0 | 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 | tect.policy.and.set.its.name,.th |
8dd00 | 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 | en.state.the.IP.Precedence.for.t |
8dd20 | 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 | he.virtual.queue.you.are.configu |
8dd40 | 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 61 78 69 6d 75 6d 20 74 68 72 65 73 68 | ring.and.what.its.maximum.thresh |
8dd60 | 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 | old.for.random.detection.will.be |
8dd80 | 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 73 2c 20 64 65 66 61 75 6c | .(from.0.to.4096.packets,.defaul |
8dda0 | 74 3a 20 31 38 29 2e 20 41 74 20 74 68 69 73 20 73 69 7a 65 2c 20 74 68 65 20 6d 61 72 6b 69 6e | t:.18)..At.this.size,.the.markin |
8ddc0 | 67 20 28 64 72 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 20 69 73 20 6d 61 78 69 6d 61 6c 2e | g.(drop).probability.is.maximal. |
8dde0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
8de00 | 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 | .Random-Detect.policy.and.set.it |
8de20 | 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 | s.name,.then.state.the.IP.Preced |
8de40 | 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 | ence.for.the.virtual.queue.you.a |
8de60 | 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 69 6e 69 | re.configuring.and.what.its.mini |
8de80 | 6d 75 6d 20 74 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 | mum.threshold.for.random.detecti |
8dea0 | 6f 6e 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 | on.will.be.(from.0.to.4096.packe |
8dec0 | 74 73 29 2e 20 20 49 66 20 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 65 78 63 65 65 64 65 64 2c | ts)...If.this.value.is.exceeded, |
8dee0 | 20 70 61 63 6b 65 74 73 20 73 74 61 72 74 20 62 65 69 6e 67 20 65 6c 69 67 69 62 6c 65 20 66 6f | .packets.start.being.eligible.fo |
8df00 | 72 20 62 65 69 6e 67 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | r.being.dropped..Use.this.comman |
8df20 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 | d.to.configure.a.Random-Detect.p |
8df40 | 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 | olicy.and.set.its.name,.then.sta |
8df60 | 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 | te.the.IP.Precedence.for.the.vir |
8df80 | 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 | tual.queue.you.are.configuring.a |
8dfa0 | 6e 64 20 77 68 61 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 69 74 73 20 61 76 65 72 61 67 65 2d | nd.what.the.size.of.its.average- |
8dfc0 | 70 61 63 6b 65 74 20 73 68 6f 75 6c 64 20 62 65 20 28 69 6e 20 62 79 74 65 73 2c 20 64 65 66 61 | packet.should.be.(in.bytes,.defa |
8dfe0 | 75 6c 74 3a 20 31 30 32 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | ult:.1024)..Use.this.command.to. |
8e000 | 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 | configure.a.Random-Detect.policy |
8e020 | 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 73 65 74 20 74 68 65 20 61 76 61 69 6c | ,.set.its.name.and.set.the.avail |
8e040 | 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 2e 20 | able.bandwidth.for.this.policy.. |
8e060 | 49 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 61 | It.is.used.for.calculating.the.a |
8e080 | 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 61 66 74 65 72 20 73 6f 6d 65 20 69 64 6c | verage.queue.size.after.some.idl |
8e0a0 | 65 20 74 69 6d 65 2e 20 49 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 74 20 74 6f 20 74 68 65 20 | e.time..It.should.be.set.to.the. |
8e0c0 | 62 61 6e 64 77 69 64 74 68 20 6f 66 20 79 6f 75 72 20 69 6e 74 65 72 66 61 63 65 2e 20 52 61 6e | bandwidth.of.your.interface..Ran |
8e0e0 | 64 6f 6d 20 44 65 74 65 63 74 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 | dom.Detect.is.not.a.shaping.poli |
8e100 | 63 79 2c 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 73 68 61 70 65 2e | cy,.this.command.will.not.shape. |
8e120 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
8e140 | 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 | .Rate-Control.policy,.set.its.na |
8e160 | 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d | me.and.the.maximum.amount.of.tim |
8e180 | 65 20 61 20 70 61 63 6b 65 74 20 63 61 6e 20 62 65 20 71 75 65 75 65 64 20 28 64 65 66 61 75 6c | e.a.packet.can.be.queued.(defaul |
8e1a0 | 74 3a 20 35 30 20 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | t:.50.ms)..Use.this.command.to.c |
8e1c0 | 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 | onfigure.a.Rate-Control.policy,. |
8e1e0 | 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 | set.its.name.and.the.rate.limit. |
8e200 | 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 61 76 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | you.want.to.have..Use.this.comma |
8e220 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 | nd.to.configure.a.Rate-Control.p |
8e240 | 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 73 69 7a 65 | olicy,.set.its.name.and.the.size |
8e260 | 20 6f 66 20 74 68 65 20 62 75 63 6b 65 74 20 69 6e 20 62 79 74 65 73 20 77 68 69 63 68 20 77 69 | .of.the.bucket.in.bytes.which.wi |
8e280 | 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 62 75 72 73 74 2e 00 55 73 65 20 74 | ll.be.available.for.burst..Use.t |
8e2a0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e 64 | his.command.to.configure.a.Round |
8e2c0 | 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 | -Robin.policy,.set.its.name,.set |
8e2e0 | 20 61 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 61 6e 74 75 6d 20 66 6f 72 | .a.class.ID,.and.the.quantum.for |
8e300 | 20 74 68 61 74 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 | .that.class..The.deficit.counter |
8e320 | 20 77 69 6c 6c 20 61 64 64 20 74 68 61 74 20 76 61 6c 75 65 20 65 61 63 68 20 72 6f 75 6e 64 2e | .will.add.that.value.each.round. |
8e340 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
8e360 | 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d | .Round-Robin.policy,.set.its.nam |
8e380 | 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 65 75 65 | e,.set.a.class.ID,.and.the.queue |
8e3a0 | 20 73 69 7a 65 20 69 6e 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | .size.in.packets..Use.this.comma |
8e3c0 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c | nd.to.configure.a.Shaper.policy, |
8e3e0 | 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 62 61 | .set.its.name.and.the.maximum.ba |
8e400 | 6e 64 77 69 64 74 68 20 66 6f 72 20 61 6c 6c 20 63 6f 6d 62 69 6e 65 64 20 74 72 61 66 66 69 63 | ndwidth.for.all.combined.traffic |
8e420 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8e440 | 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 | a.Shaper.policy,.set.its.name,.d |
8e460 | 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 67 75 61 72 61 6e | efine.a.class.and.set.the.guaran |
8e480 | 74 65 65 64 20 74 72 61 66 66 69 63 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 63 61 74 | teed.traffic.you.want.to.allocat |
8e4a0 | 65 20 74 6f 20 74 68 61 74 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | e.to.that.class..Use.this.comman |
8e4c0 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 | d.to.configure.a.Shaper.policy,. |
8e4e0 | 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 | set.its.name,.define.a.class.and |
8e500 | 20 73 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 70 65 65 64 20 70 6f 73 73 69 62 6c 65 20 | .set.the.maximum.speed.possible. |
8e520 | 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 63 65 69 6c | for.this.class..The.default.ceil |
8e540 | 69 6e 67 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 76 61 6c 75 65 | ing.value.is.the.bandwidth.value |
8e560 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8e580 | 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 | a.Shaper.policy,.set.its.name,.d |
8e5a0 | 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 70 72 69 6f 72 69 | efine.a.class.and.set.the.priori |
8e5c0 | 74 79 20 66 6f 72 20 75 73 61 67 65 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e 64 77 69 | ty.for.usage.of.available.bandwi |
8e5e0 | 64 74 68 20 6f 6e 63 65 20 67 75 61 72 61 6e 74 65 65 73 20 68 61 76 65 20 62 65 65 6e 20 6d 65 | dth.once.guarantees.have.been.me |
8e600 | 74 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 | t..The.lower.the.priority.number |
8e620 | 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 20 54 68 65 20 64 | ,.the.higher.the.priority..The.d |
8e640 | 65 66 61 75 6c 74 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 69 73 20 30 2c 20 74 68 65 20 | efault.priority.value.is.0,.the. |
8e660 | 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | highest.priority..Use.this.comma |
8e680 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c | nd.to.configure.a.Shaper.policy, |
8e6a0 | 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e | .set.its.name,.define.a.class.an |
8e6c0 | 64 20 73 65 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 60 74 6f 63 6b 65 6e 20 62 75 | d.set.the.size.of.the.`tocken.bu |
8e6e0 | 63 6b 65 74 60 5f 20 69 6e 20 62 79 74 65 73 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 | cket`_.in.bytes,.which.will.be.a |
8e700 | 76 61 69 6c 61 62 6c 65 20 74 6f 20 62 65 20 73 65 6e 74 20 61 74 20 63 65 69 6c 69 6e 67 20 73 | vailable.to.be.sent.at.ceiling.s |
8e720 | 70 65 65 64 20 28 64 65 66 61 75 6c 74 3a 20 31 35 4b 62 29 2e 00 55 73 65 20 74 68 69 73 20 63 | peed.(default:.15Kb)..Use.this.c |
8e740 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 61 74 61 2d 72 61 74 65 20 | ommand.to.configure.a.data-rate. |
8e760 | 6c 69 6d 69 74 20 74 6f 20 50 50 50 4f 6f 45 20 63 6c 69 65 6e 74 73 20 66 6f 72 20 74 72 61 66 | limit.to.PPPOoE.clients.for.traf |
8e780 | 66 69 63 20 64 6f 77 6e 6c 6f 61 64 20 6f 72 20 75 70 6c 6f 61 64 2e 20 54 68 65 20 72 61 74 65 | fic.download.or.upload..The.rate |
8e7a0 | 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 55 73 65 20 74 | -limit.is.set.in.kbit/sec..Use.t |
8e7c0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 72 6f 70 2d | his.command.to.configure.a.drop- |
8e7e0 | 74 61 69 6c 20 70 6f 6c 69 63 79 20 28 50 46 49 46 4f 29 2e 20 43 68 6f 6f 73 65 20 61 20 75 6e | tail.policy.(PFIFO)..Choose.a.un |
8e800 | 69 71 75 65 20 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 20 61 6e 64 20 74 68 | ique.name.for.this.policy.and.th |
8e820 | 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 62 79 20 73 65 74 74 69 6e 67 20 74 | e.size.of.the.queue.by.setting.t |
8e840 | 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 74 20 63 61 6e 20 63 6f 6e 74 | he.number.of.packets.it.can.cont |
8e860 | 61 69 6e 20 28 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 | ain.(maximum.4294967295)..Use.th |
8e880 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 70 65 63 69 66 | is.command.to.configure.a.specif |
8e8a0 | 69 63 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 66 6f 72 20 4c 44 50 20 70 65 65 | ic.session.hold.time.for.LDP.pee |
8e8c0 | 72 73 2e 20 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c 44 | rs..Set.the.IP.address.of.the.LD |
8e8e0 | 50 20 70 65 65 72 20 61 6e 64 20 61 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 74 | P.peer.and.a.session.hold.time.t |
8e900 | 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 69 74 2e | hat.should.be.configured.for.it. |
8e920 | 20 59 6f 75 20 6d 61 79 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e 65 69 67 68 | .You.may.have.to.reset.the.neigh |
8e940 | 62 6f 72 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 | bor.for.this.to.work..Use.this.c |
8e960 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 | ommand.to.configure.an.Ingress.P |
8e980 | 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 | olicer,.defining.its.name.and.th |
8e9a0 | 65 20 62 75 72 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 | e.burst.size.in.bytes.(default:. |
8e9c0 | 31 35 29 20 66 6f 72 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 | 15).for.its.default.policy..Use. |
8e9e0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 | this.command.to.configure.an.Ing |
8ea00 | 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 | ress.Policer,.defining.its.name. |
8ea20 | 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 | and.the.maximum.allowed.bandwidt |
8ea40 | 68 20 66 6f 72 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 74 68 | h.for.its.default.policy..Use.th |
8ea60 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 | is.command.to.configure.an.Ingre |
8ea80 | 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 | ss.Policer,.defining.its.name,.a |
8eaa0 | 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 | .class.identifier.(1-4090).and.t |
8eac0 | 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 69 6e 20 62 79 74 65 73 20 66 6f 72 20 74 68 69 73 20 | he.burst.size.in.bytes.for.this. |
8eae0 | 63 6c 61 73 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f | class.(default:.15)..Use.this.co |
8eb00 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f | mmand.to.configure.an.Ingress.Po |
8eb20 | 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 | licer,.defining.its.name,.a.clas |
8eb40 | 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 68 65 20 6d 61 | s.identifier.(1-4090).and.the.ma |
8eb60 | 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 | ximum.allowed.bandwidth.for.this |
8eb80 | 20 63 6c 61 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | .class..Use.this.command.to.conf |
8eba0 | 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 | igure.an.Ingress.Policer,.defini |
8ebc0 | 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 | ng.its.name,.a.class.identifier. |
8ebe0 | 28 31 2d 34 30 39 30 29 2c 20 61 20 63 6c 61 73 73 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 | (1-4090),.a.class.matching.rule. |
8ec00 | 6e 61 6d 65 20 61 6e 64 20 69 74 73 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 55 73 65 20 74 68 | name.and.its.description..Use.th |
8ec20 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 | is.command.to.configure.an.Ingre |
8ec40 | 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 | ss.Policer,.defining.its.name,.a |
8ec60 | 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 2c 20 61 6e 64 20 | .class.identifier.(1-4090),.and. |
8ec80 | 74 68 65 20 70 72 69 6f 72 69 74 79 20 28 30 2d 32 30 2c 20 64 65 66 61 75 6c 74 20 32 30 29 20 | the.priority.(0-20,.default.20). |
8eca0 | 69 6e 20 77 68 69 63 68 20 74 68 65 20 72 75 6c 65 20 69 73 20 65 76 61 6c 75 61 74 65 64 20 28 | in.which.the.rule.is.evaluated.( |
8ecc0 | 74 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 | the.lower.the.number,.the.higher |
8ece0 | 20 74 68 65 20 70 72 69 6f 72 69 74 79 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | .the.priority)..Use.this.command |
8ed00 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 | .to.configure.an.fq-codel.policy |
8ed20 | 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e | ,.set.its.name.and.the.maximum.n |
8ed40 | 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 31 34 29 20 74 | umber.of.bytes.(default:.1514).t |
8ed60 | 6f 20 62 65 20 64 65 71 75 65 75 65 64 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 61 74 20 6f 6e | o.be.dequeued.from.a.queue.at.on |
8ed80 | 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ce..Use.this.command.to.configur |
8eda0 | 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 | e.an.fq-codel.policy,.set.its.na |
8edc0 | 6d 65 20 61 6e 64 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 62 2d 71 75 65 75 65 73 20 | me.and.the.number.of.sub-queues. |
8ede0 | 28 64 65 66 61 75 6c 74 3a 20 31 30 32 34 29 20 69 6e 74 6f 20 77 68 69 63 68 20 70 61 63 6b 65 | (default:.1024).into.which.packe |
8ee00 | 74 73 20 61 72 65 20 63 6c 61 73 73 69 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ts.are.classified..Use.this.comm |
8ee20 | 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c | and.to.configure.an.fq-codel.pol |
8ee40 | 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 74 69 6d 65 20 70 | icy,.set.its.name.and.the.time.p |
8ee60 | 65 72 69 6f 64 20 75 73 65 64 20 62 79 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 6c 6f 6f 70 20 6f | eriod.used.by.the.control.loop.o |
8ee80 | 66 20 43 6f 44 65 6c 20 74 6f 20 64 65 74 65 63 74 20 77 68 65 6e 20 61 20 70 65 72 73 69 73 74 | f.CoDel.to.detect.when.a.persist |
8eea0 | 65 6e 74 20 71 75 65 75 65 20 69 73 20 64 65 76 65 6c 6f 70 69 6e 67 2c 20 65 6e 73 75 72 69 6e | ent.queue.is.developing,.ensurin |
8eec0 | 67 20 74 68 61 74 20 74 68 65 20 6d 65 61 73 75 72 65 64 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 | g.that.the.measured.minimum.dela |
8eee0 | 79 20 64 6f 65 73 20 6e 6f 74 20 62 65 63 6f 6d 65 20 74 6f 6f 20 73 74 61 6c 65 20 28 64 65 66 | y.does.not.become.too.stale.(def |
8ef00 | 61 75 6c 74 3a 20 31 30 30 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | ault:.100ms)..Use.this.command.t |
8ef20 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 | o.configure.an.fq-codel.policy,. |
8ef40 | 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 | set.its.name,.and.define.a.hard. |
8ef60 | 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 | limit.on.the.real.queue.size..Wh |
8ef80 | 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 | en.this.limit.is.reached,.new.pa |
8efa0 | 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 20 28 64 65 66 61 75 6c 74 3a 20 31 30 32 34 | ckets.are.dropped.(default:.1024 |
8efc0 | 30 20 70 61 63 6b 65 74 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | 0.packets)..Use.this.command.to. |
8efe0 | 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 | configure.an.fq-codel.policy,.se |
8f000 | 74 20 69 74 73 20 6e 61 6d 65 2c 20 61 6e 64 20 64 65 66 69 6e 65 20 74 68 65 20 61 63 63 65 70 | t.its.name,.and.define.the.accep |
8f020 | 74 61 62 6c 65 20 6d 69 6e 69 6d 75 6d 20 73 74 61 6e 64 69 6e 67 2f 70 65 72 73 69 73 74 65 6e | table.minimum.standing/persisten |
8f040 | 74 20 71 75 65 75 65 20 64 65 6c 61 79 2e 20 54 68 69 73 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 | t.queue.delay..This.minimum.dela |
8f060 | 79 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 72 61 63 6b 69 6e 67 20 74 68 65 20 | y.is.identified.by.tracking.the. |
8f080 | 6c 6f 63 61 6c 20 6d 69 6e 69 6d 75 6d 20 71 75 65 75 65 20 64 65 6c 61 79 20 74 68 61 74 20 70 | local.minimum.queue.delay.that.p |
8f0a0 | 61 63 6b 65 74 73 20 65 78 70 65 72 69 65 6e 63 65 20 28 64 65 66 61 75 6c 74 3a 20 35 6d 73 29 | ackets.experience.(default:.5ms) |
8f0c0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8f0e0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 49 47 4d 50 20 73 6f 20 74 68 61 74 20 50 | an.interface.with.IGMP.so.that.P |
8f100 | 49 4d 20 63 61 6e 20 72 65 63 65 69 76 65 20 49 47 4d 50 20 72 65 70 6f 72 74 73 20 61 6e 64 20 | IM.can.receive.IGMP.reports.and. |
8f120 | 71 75 65 72 79 20 6f 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e | query.on.the.selected.interface. |
8f140 | 20 42 79 20 64 65 66 61 75 6c 74 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 33 20 77 69 6c 6c 20 | .By.default.IGMP.version.3.will. |
8f160 | 62 65 20 75 73 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | be.used..Use.this.command.to.con |
8f180 | 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 66 6f 72 20 4c 44 50 20 70 65 | figure.authentication.for.LDP.pe |
8f1a0 | 65 72 73 2e 20 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c | ers..Set.the.IP.address.of.the.L |
8f1c0 | 44 50 20 70 65 65 72 20 61 6e 64 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 73 68 6f 75 | DP.peer.and.a.password.that.shou |
8f1e0 | 6c 64 20 62 65 20 73 68 61 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 | ld.be.shared.in.order.to.become. |
8f200 | 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | neighbors..Use.this.command.to.c |
8f220 | 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 | onfigure.in.the.selected.interfa |
8f240 | 63 65 20 74 68 65 20 49 47 4d 50 20 68 6f 73 74 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 | ce.the.IGMP.host.query.interval. |
8f260 | 28 31 2d 31 38 30 30 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 50 49 4d 20 77 69 6c | (1-1800).in.seconds.that.PIM.wil |
8f280 | 6c 20 75 73 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | l.use..Use.this.command.to.confi |
8f2a0 | 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 | gure.in.the.selected.interface.t |
8f2c0 | 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 | he.IGMP.query.response.timeout.v |
8f2e0 | 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 | alue.(10-250).in.deciseconds..If |
8f300 | 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 | .a.report.is.not.returned.in.the |
8f320 | 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 | .specified.time,.it.will.be.assu |
8f340 | 6d 65 64 20 74 68 65 20 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 | med.the.(S,G).or.(*,G).state.:rf |
8f360 | 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f | c:`7761#section-4.1`.has.timed.o |
8f380 | 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ut..Use.this.command.to.configur |
8f3a0 | 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 | e.in.the.selected.interface.the. |
8f3c0 | 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 | IGMP.query.response.timeout.valu |
8f3e0 | 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 | e.(10-250).in.deciseconds..If.a. |
8f400 | 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 | report.is.not.returned.in.the.sp |
8f420 | 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 | ecified.time,.it.will.be.assumed |
8f440 | 20 74 68 65 20 28 53 2c 47 29 20 6f 72 20 28 5c 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 63 3a | .the.(S,G).or.(\*,G).state.:rfc: |
8f460 | 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 | `7761#section-4.1`.has.timed.out |
8f480 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 | ..Use.this.command.to.configure. |
8f4a0 | 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 | in.the.selected.interface.the.IG |
8f4c0 | 4d 50 20 71 75 65 72 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 | MP.query.response.timeout.value. |
8f4e0 | 28 31 30 2d 32 35 30 29 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 | (10-250).in.deciseconds..If.a.re |
8f500 | 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 | port.is.not.returned.in.the.spec |
8f520 | 69 66 69 65 64 20 74 69 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 | ified.time,.it.will.be.assumed.t |
8f540 | 68 65 20 60 28 53 2c 47 29 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3c 68 74 74 70 73 3a | he.`(S,G).or.(*,G).state.<https: |
8f560 | 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 | //tools.ietf.org/html/rfc7761#se |
8f580 | 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 | ction-4.1>`_.has.timed.out..Use. |
8f5a0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 | this.command.to.configure.in.the |
8f5c0 | 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 4d 4c 44 20 68 6f 73 74 | .selected.interface.the.MLD.host |
8f5e0 | 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 28 31 2d 36 35 35 33 35 29 20 69 6e 20 73 65 63 | .query.interval.(1-65535).in.sec |
8f600 | 6f 6e 64 73 20 74 68 61 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e 20 54 68 65 20 64 65 66 61 | onds.that.PIM.will.use..The.defa |
8f620 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 32 35 20 73 65 63 6f 6e 64 73 2e 00 55 73 65 20 74 68 | ult.value.is.125.seconds..Use.th |
8f640 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 20 73 61 6d | is.command.to.configure.the..sam |
8f660 | 70 6c 69 6e 67 20 72 61 74 65 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 | pling.rate.for.flow.accounting.. |
8f680 | 54 68 65 20 73 79 73 74 65 6d 20 73 61 6d 70 6c 65 73 20 6f 6e 65 20 69 6e 20 65 76 65 72 79 20 | The.system.samples.one.in.every. |
8f6a0 | 60 3c 72 61 74 65 3e 60 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 60 3c 72 61 74 65 3e 60 | `<rate>`.packets,.where.`<rate>` |
8f6c0 | 20 69 73 20 74 68 65 20 76 61 6c 75 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 | .is.the.value.configured.for.the |
8f6e0 | 20 73 61 6d 70 6c 69 6e 67 2d 72 61 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 61 64 76 61 6e | .sampling-rate.option..The.advan |
8f700 | 74 61 67 65 20 6f 66 20 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 6e 20 70 61 63 6b 65 74 73 | tage.of.sampling.every.n.packets |
8f720 | 2c 20 77 68 65 72 65 20 6e 20 3e 20 31 2c 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 63 | ,.where.n.>.1,.allows.you.to.dec |
8f740 | 72 65 61 73 65 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 6f 63 65 73 73 69 6e 67 20 72 | rease.the.amount.of.processing.r |
8f760 | 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 | esources.required.for.flow.accou |
8f780 | 6e 74 69 6e 67 2e 20 54 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 6f 66 20 6e 6f 74 20 73 | nting..The.disadvantage.of.not.s |
8f7a0 | 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 20 70 61 63 6b 65 74 20 69 73 20 74 68 61 74 20 74 68 65 | ampling.every.packet.is.that.the |
8f7c0 | 20 73 74 61 74 69 73 74 69 63 73 20 70 72 6f 64 75 63 65 64 20 61 72 65 20 65 73 74 69 6d 61 74 | .statistics.produced.are.estimat |
8f7e0 | 65 73 20 6f 66 20 61 63 74 75 61 6c 20 64 61 74 61 20 66 6c 6f 77 73 2e 00 55 73 65 20 74 68 69 | es.of.actual.data.flows..Use.thi |
8f800 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 | s.command.to.configure.the.IP.ad |
8f820 | 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 6b 65 79 20 | dress.and.the.shared.secret.key. |
8f840 | 6f 66 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 20 59 6f 75 20 63 61 6e 20 | of.your.RADIUS.server...You.can. |
8f860 | 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f 6e | have.multiple.RADIUS.servers.con |
8f880 | 66 69 67 75 72 65 64 20 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 61 63 68 69 65 76 65 20 72 | figured.if.you.wish.to.achieve.r |
8f8a0 | 65 64 75 6e 64 61 6e 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | edundancy..Use.this.command.to.c |
8f8c0 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 75 73 65 64 20 61 73 20 | onfigure.the.IP.address.used.as. |
8f8e0 | 74 68 65 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 64 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 64 | the.LDP.router-id.of.the.local.d |
8f900 | 65 76 69 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | evice..Use.this.command.to.confi |
8f920 | 67 75 72 65 20 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 | gure.the.PIM.hello.interval.in.s |
8f940 | 65 63 6f 6e 64 73 20 28 31 2d 31 38 30 29 20 66 6f 72 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 | econds.(1-180).for.the.selected. |
8f960 | 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | interface..Use.this.command.to.c |
8f980 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 74 | onfigure.the.burst.size.of.the.t |
8f9a0 | 72 61 66 66 69 63 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c | raffic.in.a.Network.Emulator.pol |
8f9c0 | 69 63 79 2e 20 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 4e 65 74 77 | icy..Define.the.name.of.the.Netw |
8f9e0 | 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 61 6e 64 20 69 74 73 20 74 72 61 66 | ork.Emulator.policy.and.its.traf |
8fa00 | 66 69 63 20 62 75 72 73 74 20 73 69 7a 65 20 28 69 74 20 77 69 6c 6c 20 62 65 20 63 6f 6e 66 69 | fic.burst.size.(it.will.be.confi |
8fa20 | 67 75 72 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 | gured.through.the.Token.Bucket.F |
8fa40 | 69 6c 74 65 72 20 71 64 69 73 63 29 2e 20 44 65 66 61 75 6c 74 3a 31 35 6b 62 2e 20 49 74 20 77 | ilter.qdisc)..Default:15kb..It.w |
8fa60 | 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 20 68 61 76 65 | ill.only.take.effect.if.you.have |
8fa80 | 20 63 6f 6e 66 69 67 75 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 6f 6f 2e 00 55 | .configured.its.bandwidth.too..U |
8faa0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | se.this.command.to.configure.the |
8fac0 | 20 6c 6f 63 61 6c 20 67 61 74 65 77 61 79 20 49 50 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 | .local.gateway.IP.address..Use.t |
8fae0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6d 61 78 | his.command.to.configure.the.max |
8fb00 | 69 6d 75 6d 20 72 61 74 65 20 61 74 20 77 68 69 63 68 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 | imum.rate.at.which.traffic.will. |
8fb20 | 62 65 20 73 68 61 70 65 64 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 | be.shaped.in.a.Network.Emulator. |
8fb40 | 70 6f 6c 69 63 79 2e 20 44 65 66 69 6e 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 | policy..Define.the.name.of.the.p |
8fb60 | 6f 6c 69 63 79 20 61 6e 64 20 74 68 65 20 72 61 74 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | olicy.and.the.rate..Use.this.com |
8fb80 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 | mand.to.configure.the.sampling.r |
8fba0 | 61 74 65 20 66 6f 72 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 28 64 65 66 61 75 6c | ate.for.sFlow.accounting.(defaul |
8fbc0 | 74 3a 20 31 30 30 30 29 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | t:.1000).Use.this.command.to.con |
8fbe0 | 66 69 67 75 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 61 73 73 | figure.the.username.and.the.pass |
8fc00 | 77 6f 72 64 20 6f 66 20 61 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 65 | word.of.a.locally.configured.use |
8fc20 | 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 | r..Use.this.command.to.control.t |
8fc40 | 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 71 75 61 6c 20 63 6f 73 74 20 | he.maximum.number.of.equal.cost. |
8fc60 | 70 61 74 68 73 20 74 6f 20 72 65 61 63 68 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e | paths.to.reach.a.specific.destin |
8fc80 | 61 74 69 6f 6e 2e 20 54 68 65 20 75 70 70 65 72 20 6c 69 6d 69 74 20 6d 61 79 20 64 69 66 66 65 | ation..The.upper.limit.may.diffe |
8fca0 | 72 20 69 66 20 79 6f 75 20 63 68 61 6e 67 65 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 4d 55 4c | r.if.you.change.the.value.of.MUL |
8fcc0 | 54 49 50 41 54 48 5f 4e 55 4d 20 64 75 72 69 6e 67 20 63 6f 6d 70 69 6c 61 74 69 6f 6e 2e 20 54 | TIPATH_NUM.during.compilation..T |
8fce0 | 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 4d 20 28 36 34 29 | he.default.is.MULTIPATH_NUM.(64) |
8fd00 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 46 | ..Use.this.command.to.create.a.F |
8fd20 | 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 67 69 76 65 20 69 74 20 61 20 6e | air-Queue.policy.and.give.it.a.n |
8fd40 | 61 6d 65 2e 20 49 74 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 | ame..It.is.based.on.the.Stochast |
8fd60 | 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 20 61 6e 64 20 63 61 6e 20 62 65 20 | ic.Fairness.Queueing.and.can.be. |
8fd80 | 61 70 70 6c 69 65 64 20 74 6f 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 | applied.to.outbound.traffic..Use |
8fda0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 49 50 73 65 63 20 69 6e | .this.command.to.define.IPsec.in |
8fdc0 | 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 | terface..Use.this.command.to.def |
8fde0 | 69 6e 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 6f | ine.a.Fair-Queue.policy,.based.o |
8fe00 | 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 | n.the.Stochastic.Fairness.Queuei |
8fe20 | 6e 67 2c 20 61 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 61 78 69 6d 75 | ng,.and.set.the.number.of.maximu |
8fe40 | 6d 20 70 61 63 6b 65 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 61 69 74 20 69 6e 20 74 68 65 | m.packets.allowed.to.wait.in.the |
8fe60 | 20 71 75 65 75 65 2e 20 41 6e 79 20 6f 74 68 65 72 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 | .queue..Any.other.packet.will.be |
8fe80 | 20 64 72 6f 70 70 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 | .dropped..Use.this.command.to.de |
8fea0 | 66 69 6e 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 | fine.a.Fair-Queue.policy,.based. |
8fec0 | 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 | on.the.Stochastic.Fairness.Queue |
8fee0 | 69 6e 67 2c 20 61 6e 64 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e | ing,.and.set.the.number.of.secon |
8ff00 | 64 73 20 61 74 20 77 68 69 63 68 20 61 20 6e 65 77 20 71 75 65 75 65 20 61 6c 67 6f 72 69 74 68 | ds.at.which.a.new.queue.algorith |
8ff20 | 6d 20 70 65 72 74 75 72 62 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 72 20 28 6d 61 78 69 6d | m.perturbation.will.occur.(maxim |
8ff40 | 75 6d 20 34 32 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | um.4294967295)..Use.this.command |
8ff60 | 20 74 6f 20 64 65 66 69 6e 65 20 64 65 66 61 75 6c 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | .to.define.default.IPv6.address. |
8ff80 | 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 | pool.name..Use.this.command.to.d |
8ffa0 | 65 66 69 6e 65 20 64 65 66 61 75 6c 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e | efine.default.address.pool.name. |
8ffc0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 6f 6d 61 | .Use.this.command.to.define.doma |
8ffe0 | 69 6e 73 2c 20 6f 6e 65 20 61 74 20 61 20 74 69 6d 65 2c 20 73 6f 20 74 68 61 74 20 74 68 65 20 | ins,.one.at.a.time,.so.that.the. |
90000 | 73 79 73 74 65 6d 20 75 73 65 73 20 74 68 65 6d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 75 6e 71 | system.uses.them.to.complete.unq |
90020 | 75 61 6c 69 66 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 73 2e 20 4d 61 78 69 6d 75 6d 3a 20 36 20 | ualified.host.names..Maximum:.6. |
90040 | 65 6e 74 72 69 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 | entries..Use.this.command.to.def |
90060 | 69 6e 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 | ine.in.the.selected.interface.wh |
90080 | 65 74 68 65 72 20 79 6f 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 | ether.you.choose.IGMP.version.2. |
900a0 | 6f 72 20 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 | or.3..Use.this.command.to.define |
900c0 | 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 74 68 | .in.the.selected.interface.wheth |
900e0 | 65 72 20 79 6f 75 20 63 68 6f 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 6f 72 20 | er.you.choose.IGMP.version.2.or. |
90100 | 33 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 55 73 65 20 74 | 3..The.default.value.is.3..Use.t |
90120 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 49 50 20 61 64 64 | his.command.to.define.the.IP.add |
90140 | 72 65 73 73 20 72 61 6e 67 65 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 | ress.range.to.be.given.to.PPPoE. |
90160 | 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 | clients..If.notation.``x.x.x.x-x |
90180 | 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 | .x.x.x``,.it.must.be.within.a./2 |
901a0 | 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f | 4.subnet..If.notation.``x.x.x.x/ |
901c0 | 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 | x``.is.used.there.is.possibility |
901e0 | 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 | .to.set.host/netmask..Use.this.c |
90200 | 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 | ommand.to.define.the.first.IP.ad |
90220 | 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 | dress.of.a.pool.of.addresses.to. |
90240 | 62 65 20 67 69 76 65 6e 20 74 6f 20 49 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 | be.given.to.IPoE.clients..If.not |
90260 | 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 | ation.``x.x.x.x-x.x.x.x``,.it.mu |
90280 | 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f | st.be.within.a./24.subnet..If.no |
902a0 | 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 | tation.``x.x.x.x/x``.is.used.the |
902c0 | 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 | re.is.possibility.to.set.host/ne |
902e0 | 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e | tmask..Use.this.command.to.defin |
90300 | 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c | e.the.first.IP.address.of.a.pool |
90320 | 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 | .of.addresses.to.be.given.to.PPP |
90340 | 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 | oE.clients..It.must.be.within.a. |
90360 | 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | /24.subnet..Use.this.command.to. |
90380 | 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 | define.the.first.IP.address.of.a |
903a0 | 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 | .pool.of.addresses.to.be.given.t |
903c0 | 6f 20 50 50 54 50 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e | o.PPTP.clients..If.notation.``x. |
903e0 | 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 | x.x.x-x.x.x.x``,.it.must.be.with |
90400 | 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 | in.a./24.subnet..If.notation.``x |
90420 | 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 | .x.x.x/x``.is.used.there.is.poss |
90440 | 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 | ibility.to.set.host/netmask..Use |
90460 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 | .this.command.to.define.the.firs |
90480 | 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 | t.IP.address.of.a.pool.of.addres |
904a0 | 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 53 53 54 50 20 63 6c 69 65 6e 74 73 2e | ses.to.be.given.to.SSTP.clients. |
904c0 | 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 | .If.notation.``x.x.x.x-x.x.x.x`` |
904e0 | 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 | ,.it.must.be.within.a./24.subnet |
90500 | 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 | ..If.notation.``x.x.x.x/x``.is.u |
90520 | 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 | sed.there.is.possibility.to.set. |
90540 | 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | host/netmask..Use.this.command.t |
90560 | 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 | o.define.the.first.IP.address.of |
90580 | 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e | .a.pool.of.addresses.to.be.given |
905a0 | 20 74 6f 20 6c 32 74 70 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 | .to.l2tp.clients..If.notation.`` |
905c0 | 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 | x.x.x.x-x.x.x.x``,.it.must.be.wi |
905e0 | 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 | thin.a./24.subnet..If.notation.` |
90600 | 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f | `x.x.x.x/x``.is.used.there.is.po |
90620 | 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 | ssibility.to.set.host/netmask..U |
90640 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 | se.this.command.to.define.the.fi |
90660 | 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 | rst.IP.address.of.a.pool.of.addr |
90680 | 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 70 70 70 6f 65 20 63 6c 69 65 6e | esses.to.be.given.to.pppoe.clien |
906a0 | 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e | ts..If.notation.``x.x.x.x-x.x.x. |
906c0 | 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 | x``,.it.must.be.within.a./24.sub |
906e0 | 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 | net..If.notation.``x.x.x.x/x``.i |
90700 | 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 | s.used.there.is.possibility.to.s |
90720 | 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | et.host/netmask..Use.this.comman |
90740 | 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 50 50 | d.to.define.the.interface.the.PP |
90760 | 50 6f 45 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f | PoE.server.will.use.to.listen.fo |
90780 | 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | r.PPPoE.clients..Use.this.comman |
907a0 | 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6c 61 73 74 20 49 50 20 61 64 64 72 65 73 73 20 | d.to.define.the.last.IP.address. |
907c0 | 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 | of.a.pool.of.addresses.to.be.giv |
907e0 | 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 | en.to.PPPoE.clients..It.must.be. |
90800 | 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f | within.a./24.subnet..Use.this.co |
90820 | 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 | mmand.to.define.the.length.of.th |
90840 | 65 20 71 75 65 75 65 20 6f 66 20 79 6f 75 72 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 | e.queue.of.your.Network.Emulator |
90860 | 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 | .policy..Set.the.policy.name.and |
90880 | 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 28 | .the.maximum.number.of.packets.( |
908a0 | 31 2d 34 32 39 34 39 36 37 32 39 35 29 20 74 68 65 20 71 75 65 75 65 20 6d 61 79 20 68 6f 6c 64 | 1-4294967295).the.queue.may.hold |
908c0 | 20 71 75 65 75 65 64 20 61 74 20 61 20 74 69 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | .queued.at.a.time..Use.this.comm |
908e0 | 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 | and.to.define.the.maximum.number |
90900 | 20 6f 66 20 65 6e 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 41 52 50 20 63 | .of.entries.to.keep.in.the.ARP.c |
90920 | 61 63 68 65 20 28 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 | ache.(1024,.2048,.4096,.8192,.16 |
90940 | 33 38 34 2c 20 33 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | 384,.32768)..Use.this.command.to |
90960 | 20 64 65 66 69 6e 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6e | .define.the.maximum.number.of.en |
90980 | 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 63 61 | tries.to.keep.in.the.Neighbor.ca |
909a0 | 63 68 65 20 28 31 30 32 34 2c 20 32 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 33 | che.(1024,.2048,.4096,.8192,.163 |
909c0 | 38 34 2c 20 33 32 37 36 38 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | 84,.32768)..Use.this.command.to. |
909e0 | 64 65 66 69 6e 65 20 74 68 65 20 6e 65 78 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d | define.the.next.address.pool.nam |
90a00 | 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 77 68 | e..Use.this.command.to.define.wh |
90a20 | 65 74 68 65 72 20 79 6f 75 72 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 6c 6f | ether.your.PPPoE.clients.will.lo |
90a40 | 63 61 6c 6c 79 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 6e 20 79 6f 75 72 20 56 79 4f 53 20 | cally.authenticate.in.your.VyOS. |
90a60 | 73 79 73 74 65 6d 20 6f 72 20 69 6e 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 20 | system.or.in.RADIUS.server..Use. |
90a80 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 72 65 63 74 20 61 6e 20 69 6e 74 65 72 66 | this.command.to.direct.an.interf |
90aa0 | 61 63 65 20 74 6f 20 6e 6f 74 20 64 65 74 65 63 74 20 61 6e 79 20 70 68 79 73 69 63 61 6c 20 73 | ace.to.not.detect.any.physical.s |
90ac0 | 74 61 74 65 20 63 68 61 6e 67 65 73 20 6f 6e 20 61 20 6c 69 6e 6b 2c 20 66 6f 72 20 65 78 61 6d | tate.changes.on.a.link,.for.exam |
90ae0 | 70 6c 65 2c 20 77 68 65 6e 20 74 68 65 20 63 61 62 6c 65 20 69 73 20 75 6e 70 6c 75 67 67 65 64 | ple,.when.the.cable.is.unplugged |
90b00 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 | ..Use.this.command.to.disable.IP |
90b20 | 76 34 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 | v4.directed.broadcast.forwarding |
90b40 | 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | .on.all.interfaces..Use.this.com |
90b60 | 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 34 20 66 6f 72 77 61 72 64 69 6e 67 20 | mand.to.disable.IPv4.forwarding. |
90b80 | 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | on.all.interfaces..Use.this.comm |
90ba0 | 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 6f | and.to.disable.IPv6.forwarding.o |
90bc0 | 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | n.all.interfaces..Use.this.comma |
90be0 | 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 6f 6e 20 | nd.to.disable.IPv6.operation.on. |
90c00 | 69 6e 74 65 72 66 61 63 65 20 77 68 65 6e 20 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 | interface.when.Duplicate.Address |
90c20 | 20 44 65 74 65 63 74 69 6f 6e 20 66 61 69 6c 73 20 6f 6e 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 | .Detection.fails.on.Link-Local.a |
90c40 | 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 | ddress..Use.this.command.to.disa |
90c60 | 62 6c 65 20 74 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 45 74 68 65 72 6e 65 74 20 66 | ble.the.generation.of.Ethernet.f |
90c80 | 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 28 70 61 75 73 65 20 66 72 61 6d 65 73 29 2e 00 55 73 65 20 | low.control.(pause.frames)..Use. |
90ca0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 6e 6f 69 73 65 20 69 6e | this.command.to.emulate.noise.in |
90cc0 | 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 | .a.Network.Emulator.policy..Set. |
90ce0 | 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 | the.policy.name.and.the.percenta |
90d00 | 67 65 20 6f 66 20 63 6f 72 72 75 70 74 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 20 77 61 6e 74 | ge.of.corrupted.packets.you.want |
90d20 | 2e 20 41 20 72 61 6e 64 6f 6d 20 65 72 72 6f 72 20 77 69 6c 6c 20 62 65 20 69 6e 74 72 6f 64 75 | ..A.random.error.will.be.introdu |
90d40 | 63 65 64 20 69 6e 20 61 20 72 61 6e 64 6f 6d 20 70 6f 73 69 74 69 6f 6e 20 66 6f 72 20 74 68 65 | ced.in.a.random.position.for.the |
90d60 | 20 63 68 6f 73 65 6e 20 70 65 72 63 65 6e 74 20 6f 66 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 | .chosen.percent.of.packets..Use. |
90d80 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 2d 6c | this.command.to.emulate.packet-l |
90da0 | 6f 73 73 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c | oss.conditions.in.a.Network.Emul |
90dc0 | 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 | ator.policy..Set.the.policy.name |
90de0 | 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 6c 6f 73 73 20 70 61 63 6b | .and.the.percentage.of.loss.pack |
90e00 | 65 74 73 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 | ets.your.traffic.will.suffer..Us |
90e20 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 | e.this.command.to.emulate.packet |
90e40 | 2d 72 65 6f 72 64 65 72 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 | -reordering.conditions.in.a.Netw |
90e60 | 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c | ork.Emulator.policy..Set.the.pol |
90e80 | 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 72 | icy.name.and.the.percentage.of.r |
90ea0 | 65 6f 72 64 65 72 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 | eordered.packets.your.traffic.wi |
90ec0 | 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 | ll.suffer..Use.this.command.to.e |
90ee0 | 6e 61 62 6c 65 20 4c 44 50 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 | nable.LDP.on.the.interface.you.d |
90f00 | 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c | efine..Use.this.command.to.enabl |
90f20 | 65 20 4d 50 4c 53 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 | e.MPLS.processing.on.the.interfa |
90f40 | 63 65 20 79 6f 75 20 64 65 66 69 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | ce.you.define..Use.this.command. |
90f60 | 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e | to.enable.PIM.in.the.selected.in |
90f80 | 74 65 72 66 61 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 63 61 | terface.so.that.it.can.communica |
90fa0 | 74 65 20 77 69 74 68 20 50 49 4d 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 | te.with.PIM.neighbors..Use.this. |
90fc0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d 76 36 20 69 6e 20 74 68 65 20 73 | command.to.enable.PIMv6.in.the.s |
90fe0 | 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e | elected.interface.so.that.it.can |
91000 | 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 50 49 4d 76 36 20 6e 65 69 67 68 62 6f 72 | .communicate.with.PIMv6.neighbor |
91020 | 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 65 6e 61 62 6c 65 73 20 4d 4c 44 | s..This.command.also.enables.MLD |
91040 | 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 | .reports.and.query.on.the.interf |
91060 | 61 63 65 20 75 6e 6c 65 73 73 20 3a 63 66 67 63 6d 64 3a 60 6d 6c 64 20 64 69 73 61 62 6c 65 60 | ace.unless.:cfgcmd:`mld.disable` |
91080 | 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | .is.configured..Use.this.command |
910a0 | 20 74 6f 20 65 6e 61 62 6c 65 20 61 63 71 75 69 73 69 74 69 6f 6e 20 6f 66 20 49 50 76 36 20 61 | .to.enable.acquisition.of.IPv6.a |
910c0 | 64 64 72 65 73 73 20 75 73 69 6e 67 20 73 74 61 74 65 6c 65 73 73 20 61 75 74 6f 63 6f 6e 66 69 | ddress.using.stateless.autoconfi |
910e0 | 67 20 28 53 4c 41 41 43 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 | g.(SLAAC)..Use.this.command.to.e |
91100 | 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 | nable.bandwidth.shaping.via.RADI |
91120 | 55 53 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 70 | US..Use.this.command.to.enable.p |
91140 | 72 6f 78 79 20 41 64 64 72 65 73 73 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c | roxy.Address.Resolution.Protocol |
91160 | 20 28 41 52 50 29 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 50 72 6f 78 79 20 | .(ARP).on.this.interface..Proxy. |
91180 | 41 52 50 20 61 6c 6c 6f 77 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 | ARP.allows.an.Ethernet.interface |
911a0 | 20 74 6f 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 3a 61 62 62 72 3a 60 | .to.respond.with.its.own.:abbr:` |
911c0 | 4d 41 43 20 28 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 | MAC.(Media.Access.Control)`.addr |
911e0 | 65 73 73 20 74 6f 20 41 52 50 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 64 65 73 74 69 6e 61 74 | ess.to.ARP.requests.for.destinat |
91200 | 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 73 75 62 6e 65 74 73 20 61 74 74 61 | ion.IP.addresses.on.subnets.atta |
91220 | 63 68 65 64 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 74 68 65 20 | ched.to.other.interfaces.on.the. |
91240 | 73 79 73 74 65 6d 2e 20 53 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b 65 74 73 20 73 65 6e 74 20 | system..Subsequent.packets.sent. |
91260 | 74 6f 20 74 68 6f 73 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 65 | to.those.destination.IP.addresse |
91280 | 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 61 70 70 72 6f 70 72 69 61 74 65 6c 79 20 62 79 | s.are.forwarded.appropriately.by |
912a0 | 20 74 68 65 20 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .the.system..Use.this.command.to |
912c0 | 20 65 6e 61 62 6c 65 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 73 73 69 6f 6e 73 20 74 6f | .enable.targeted.LDP.sessions.to |
912e0 | 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 | .the.local.router..The.router.wi |
91300 | 6c 6c 20 74 68 65 6e 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 79 20 73 65 73 73 69 6f 6e 73 20 | ll.then.respond.to.any.sessions. |
91320 | 74 68 61 74 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 69 74 | that.are.trying.to.connect.to.it |
91340 | 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 61 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 74 79 70 65 20 | .that.are.not.a.link.local.type. |
91360 | 6f 66 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | of.TCP.connection..Use.this.comm |
91380 | 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 64 65 6c 61 79 20 6f 66 20 50 41 44 4f 20 | and.to.enable.the.delay.of.PADO. |
913a0 | 28 50 50 50 6f 45 20 41 63 74 69 76 65 20 44 69 73 63 6f 76 65 72 79 20 4f 66 66 65 72 29 20 70 | (PPPoE.Active.Discovery.Offer).p |
913c0 | 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 20 73 | ackets,.which.can.be.used.as.a.s |
913e0 | 65 73 73 69 6f 6e 20 62 61 6c 61 6e 63 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 77 69 74 68 20 | ession.balancing.mechanism.with. |
91400 | 6f 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f | other.PPPoE.servers..Use.this.co |
91420 | 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 | mmand.to.enable.the.local.router |
91440 | 20 74 6f 20 74 72 79 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 61 20 74 61 72 67 65 | .to.try.and.connect.with.a.targe |
91460 | 74 65 64 20 4c 44 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 65 | ted.LDP.session.to.another.route |
91480 | 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 | r..Use.this.command.to.enable.th |
914a0 | 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 | e.logging.of.the.default.action. |
914c0 | 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | on.custom.chains..Use.this.comma |
914e0 | 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 | nd.to.enable.the.logging.of.the. |
91500 | 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | default.action.on.the.specified. |
91520 | 63 68 61 69 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c | chain..Use.this.command.to.enabl |
91540 | 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 | e.the.logging.of.the.default.act |
91560 | 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 2c | ion..Use.this.command.to.enable, |
91580 | 20 64 69 73 61 62 6c 65 2c 20 6f 72 20 73 70 65 63 69 66 79 20 68 6f 70 20 63 6f 75 6e 74 20 66 | .disable,.or.specify.hop.count.f |
915a0 | 6f 72 20 54 54 4c 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 42 | or.TTL.security.for.LDP.peers..B |
915c0 | 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f 20 32 35 | y.default.the.value.is.set.to.25 |
915e0 | 35 20 28 6f 72 20 6d 61 78 20 54 54 4c 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | 5.(or.max.TTL)..Use.this.command |
91600 | 20 74 6f 20 66 6c 75 73 68 20 74 68 65 20 6b 65 72 6e 65 6c 20 49 50 76 36 20 72 6f 75 74 65 20 | .to.flush.the.kernel.IPv6.route. |
91620 | 63 61 63 68 65 2e 20 41 6e 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 74 | cache..An.address.can.be.added.t |
91640 | 6f 20 66 6c 75 73 68 20 69 74 20 6f 6e 6c 79 20 66 6f 72 20 74 68 61 74 20 72 6f 75 74 65 2e 00 | o.flush.it.only.for.that.route.. |
91660 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 61 6e 20 6f 76 65 72 76 | Use.this.command.to.get.an.overv |
91680 | 69 65 77 20 6f 66 20 61 20 7a 6f 6e 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | iew.of.a.zone..Use.this.command. |
916a0 | 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 4f 53 50 46 76 33 2e | to.get.information.about.OSPFv3. |
916c0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d 61 | .Use.this.command.to.get.informa |
916e0 | 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 | tion.about.the.RIPNG.protocol.Us |
91700 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 72 75 63 74 20 74 68 65 20 73 | e.this.command.to.instruct.the.s |
91720 | 79 73 74 65 6d 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 50 50 50 6f 45 20 63 6f 6e 6e 65 | ystem.to.establish.a.PPPoE.conne |
91740 | 63 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 | ction.automatically.once.traffic |
91760 | 20 70 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 41 | .passes.through.the.interface..A |
91780 | 20 64 69 73 61 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 | .disabled.on-demand.connection.i |
917a0 | 73 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 74 20 62 6f 6f 74 20 74 69 6d 65 20 61 6e 64 20 72 | s.established.at.boot.time.and.r |
917c0 | 65 6d 61 69 6e 73 20 75 70 2e 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 | emains.up..If.the.link.fails.for |
917e0 | 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 | .any.reason,.the.link.is.brought |
91800 | 20 62 61 63 6b 20 75 70 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 55 73 65 20 74 68 69 73 20 63 | .back.up.immediately..Use.this.c |
91820 | 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6e 6b 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 | ommand.to.link.the.PPPoE.connect |
91840 | 69 6f 6e 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 | ion.to.a.physical.interface..Eac |
91860 | 68 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 73 74 61 62 | h.PPPoE.connection.must.be.estab |
91880 | 6c 69 73 68 65 64 20 6f 76 65 72 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 | lished.over.a.physical.interface |
918a0 | 2e 20 49 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 67 75 6c 61 72 20 45 74 68 65 | ..Interfaces.can.be.regular.Ethe |
918c0 | 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2c 20 56 49 46 73 20 6f 72 20 62 6f 6e 64 69 6e 67 | rnet.interfaces,.VIFs.or.bonding |
918e0 | 20 69 6e 74 65 72 66 61 63 65 73 2f 56 49 46 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | .interfaces/VIFs..Use.this.comma |
91900 | 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 | nd.to.locally.check.the.active.s |
91920 | 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 49 50 6f 45 20 73 65 72 76 65 72 2e 00 55 73 65 20 | essions.in.the.IPoE.server..Use. |
91940 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 | this.command.to.locally.check.th |
91960 | 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 50 50 6f 45 20 73 | e.active.sessions.in.the.PPPoE.s |
91980 | 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c | erver..Use.this.command.to.local |
919a0 | 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 | ly.check.the.active.sessions.in. |
919c0 | 74 68 65 20 50 50 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | the.PPTP.server..Use.this.comman |
919e0 | 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 | d.to.locally.check.the.active.se |
91a00 | 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 | ssions.in.the.SSTP.server..Use.t |
91a20 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 | his.command.to.manually.configur |
91a40 | 65 20 61 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 20 66 6f 72 20 50 49 4d 20 73 6f 20 | e.a.Rendezvous.Point.for.PIM.so. |
91a60 | 74 68 61 74 20 6a 6f 69 6e 20 6d 65 73 73 61 67 65 73 20 63 61 6e 20 62 65 20 73 65 6e 74 20 74 | that.join.messages.can.be.sent.t |
91a80 | 68 65 72 65 2e 20 53 65 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 61 64 | here..Set.the.Rendevouz.Point.ad |
91aa0 | 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 | dress.and.the.matching.prefix.of |
91ac0 | 20 67 72 6f 75 70 20 72 61 6e 67 65 73 20 63 6f 76 65 72 65 64 2e 20 54 68 65 73 65 20 76 61 6c | .group.ranges.covered..These.val |
91ae0 | 75 65 73 20 6d 75 73 74 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 65 76 65 72 79 20 72 6f | ues.must.be.shared.with.every.ro |
91b00 | 75 74 65 72 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 74 68 65 20 50 49 4d 20 6e 65 | uter.participating.in.the.PIM.ne |
91b20 | 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6e 6f 74 20 69 | twork..Use.this.command.to.not.i |
91b40 | 6e 73 74 61 6c 6c 20 61 64 76 65 72 74 69 73 65 64 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 | nstall.advertised.DNS.nameserver |
91b60 | 73 20 69 6e 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 | s.into.the.local.system..Use.thi |
91b80 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 70 72 65 66 65 72 20 49 50 76 34 20 66 6f 72 20 54 43 50 | s.command.to.prefer.IPv4.for.TCP |
91ba0 | 20 70 65 65 72 20 74 72 61 6e 73 70 6f 72 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 6f 72 20 4c | .peer.transport.connection.for.L |
91bc0 | 44 50 20 77 68 65 6e 20 62 6f 74 68 20 61 6e 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 4c 44 | DP.when.both.an.IPv4.and.IPv6.LD |
91be0 | 50 20 61 64 64 72 65 73 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 | P.address.are.configured.on.the. |
91c00 | 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | same.interface..Use.this.command |
91c20 | 20 74 6f 20 72 65 73 65 74 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 | .to.reset.IPv6.Neighbor.Discover |
91c40 | 79 20 50 72 6f 74 6f 63 6f 6c 20 63 61 63 68 65 20 66 6f 72 20 61 6e 20 61 64 64 72 65 73 73 20 | y.Protocol.cache.for.an.address. |
91c60 | 6f 72 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | or.interface..Use.this.command.t |
91c80 | 6f 20 72 65 73 65 74 20 61 6e 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 2f 54 43 50 20 73 65 73 73 | o.reset.an.LDP.neighbor/TCP.sess |
91ca0 | 69 6f 6e 20 74 68 61 74 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 00 55 73 65 20 74 68 69 73 | ion.that.is.established.Use.this |
91cc0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 70 72 | .command.to.reset.the.OpenVPN.pr |
91ce0 | 6f 63 65 73 73 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 55 | ocess.on.a.specific.interface..U |
91d00 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 73 70 65 | se.this.command.to.reset.the.spe |
91d20 | 63 69 66 69 65 64 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 00 55 73 65 20 74 68 69 73 20 | cified.OpenVPN.client..Use.this. |
91d40 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 50 50 50 6f 45 20 73 65 | command.to.restrict.the.PPPoE.se |
91d60 | 73 73 69 6f 6e 20 6f 6e 20 61 20 67 69 76 65 6e 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 | ssion.on.a.given.access.concentr |
91d80 | 61 74 6f 72 2e 20 4e 6f 72 6d 61 6c 6c 79 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 50 | ator..Normally,.a.host.sends.a.P |
91da0 | 50 50 6f 45 20 69 6e 69 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 74 20 74 6f 20 73 74 61 72 74 20 | PPoE.initiation.packet.to.start. |
91dc0 | 74 68 65 20 50 50 50 6f 45 20 64 69 73 63 6f 76 65 72 79 20 70 72 6f 63 65 73 73 2c 20 61 20 6e | the.PPPoE.discovery.process,.a.n |
91de0 | 75 6d 62 65 72 20 6f 66 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 72 65 | umber.of.access.concentrators.re |
91e00 | 73 70 6f 6e 64 20 77 69 74 68 20 6f 66 66 65 72 20 70 61 63 6b 65 74 73 20 61 6e 64 20 74 68 65 | spond.with.offer.packets.and.the |
91e20 | 20 68 6f 73 74 20 73 65 6c 65 63 74 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 64 | .host.selects.one.of.the.respond |
91e40 | 69 6e 67 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 73 65 72 76 | ing.access.concentrators.to.serv |
91e60 | 65 20 74 68 69 73 20 73 65 73 73 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.this.session..Use.this.command |
91e80 | 20 74 6f 20 73 65 65 20 4c 44 50 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f | .to.see.LDP.interface.informatio |
91ea0 | 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 4c 44 50 20 6e 65 | n.Use.this.command.to.see.LDP.ne |
91ec0 | 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ighbor.information.Use.this.comm |
91ee0 | 61 6e 64 20 74 6f 20 73 65 65 20 64 65 74 61 69 6c 65 64 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 | and.to.see.detailed.LDP.neighbor |
91f00 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .information.Use.this.command.to |
91f20 | 20 73 65 65 20 64 69 73 63 6f 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .see.discovery.hello.information |
91f40 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 74 68 65 20 4c 61 62 | .Use.this.command.to.see.the.Lab |
91f60 | 65 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 42 61 73 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f | el.Information.Base..Use.this.co |
91f80 | 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 61 20 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 50 50 50 | mmand.to.set.a.name.for.this.PPP |
91fa0 | 6f 45 2d 73 65 72 76 65 72 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e 00 55 | oE-server.access.concentrator..U |
91fc0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 72 65 2d 64 69 61 6c 20 64 | se.this.command.to.set.re-dial.d |
91fe0 | 65 6c 61 79 20 74 69 6d 65 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 70 65 72 73 69 73 | elay.time.to.be.used.with.persis |
92000 | 74 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 74 68 65 20 50 50 50 6f 45 | t.PPPoE.sessions..When.the.PPPoE |
92020 | 20 73 65 73 73 69 6f 6e 20 69 73 20 74 65 72 6d 69 6e 61 74 65 64 20 62 79 20 70 65 65 72 2c 20 | .session.is.terminated.by.peer,. |
92040 | 61 6e 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 2c | and.on-demand.option.is.not.set, |
92060 | 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 65 | .the.router.will.attempt.to.re-e |
92080 | 73 74 61 62 6c 69 73 68 20 74 68 65 20 50 50 50 6f 45 20 6c 69 6e 6b 2e 00 55 73 65 20 74 68 69 | stablish.the.PPPoE.link..Use.thi |
920a0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 | s.command.to.set.the.IP.address. |
920c0 | 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 | of.the.local.endpoint.of.a.PPPoE |
920e0 | 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 | .session..If.it.is.not.set.it.wi |
92100 | 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ll.be.negotiated..Use.this.comma |
92120 | 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 | nd.to.set.the.IP.address.of.the. |
92140 | 72 65 6d 6f 74 65 20 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 | remote.endpoint.of.a.PPPoE.sessi |
92160 | 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 20 | on..If.it.is.not.set.it.will.be. |
92180 | 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | negotiated..Use.this.command.to. |
921a0 | 73 65 74 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 | set.the.IPv4.or.IPv6.address.of. |
921c0 | 65 76 65 72 79 20 44 6f 6d 61 6e 20 4e 61 6d 65 20 53 65 72 76 65 72 20 79 6f 75 20 77 61 6e 74 | every.Doman.Name.Server.you.want |
921e0 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 70 72 6f 70 | .to.configure..They.will.be.prop |
92200 | 61 67 61 74 65 64 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 | agated.to.PPPoE.clients..Use.thi |
92220 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 | s.command.to.set.the.IPv4.or.IPv |
92240 | 36 20 74 72 61 6e 73 70 6f 72 74 2d 61 64 64 72 65 73 73 20 75 73 65 64 20 62 79 20 4c 44 50 2e | 6.transport-address.used.by.LDP. |
92260 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 69 64 6c | .Use.this.command.to.set.the.idl |
92280 | 65 20 74 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 | e.timeout.interval.to.be.used.wi |
922a0 | 74 68 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 | th.on-demand.PPPoE.sessions..Whe |
922c0 | 6e 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 | n.an.on-demand.connection.is.est |
922e0 | 61 62 6c 69 73 68 65 64 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 75 70 | ablished,.the.link.is.brought.up |
92300 | 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 61 6e 64 20 69 | .only.when.traffic.is.sent.and.i |
92320 | 73 20 64 69 73 61 62 6c 65 64 20 77 68 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 69 64 6c 65 | s.disabled.when.the.link.is.idle |
92340 | 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 73 70 65 63 69 66 69 65 64 2e 00 55 73 65 | .for.the.interval.specified..Use |
92360 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 70 61 73 73 77 6f 72 | .this.command.to.set.the.passwor |
92380 | 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f | d.for.authenticating.with.a.remo |
923a0 | 74 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f | te.PPPoE.endpoint..Authenticatio |
923c0 | 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 | n.is.optional.from.the.system's. |
923e0 | 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 | point.of.view.but.most.service.p |
92400 | 72 6f 76 69 64 65 72 73 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f | roviders.require.it..Use.this.co |
92420 | 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 | mmand.to.set.the.target.to.use.. |
92440 | 41 63 74 69 6f 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 74 6f 20 | Action.queue.must.be.defined.to. |
92460 | 75 73 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | use.this.setting.Use.this.comman |
92480 | 64 20 74 6f 20 73 65 74 20 74 68 65 20 75 73 65 72 6e 61 6d 65 20 66 6f 72 20 61 75 74 68 65 6e | d.to.set.the.username.for.authen |
924a0 | 74 69 63 61 74 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 20 65 6e 64 | ticating.with.a.remote.PPPoE.end |
924c0 | 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 | point..Authentication.is.optiona |
924e0 | 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 | l.from.the.system's.point.of.vie |
92500 | 77 20 62 75 74 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 72 65 71 | w.but.most.service.providers.req |
92520 | 75 69 72 65 20 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f | uire.it..Use.this.command.to.sho |
92540 | 77 20 49 50 76 36 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 69 | w.IPv6.Border.Gateway.Protocol.i |
92560 | 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | nformation..Use.this.command.to. |
92580 | 73 68 6f 77 20 49 50 76 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f | show.IPv6.Neighbor.Discovery.Pro |
925a0 | 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | tocol.information..Use.this.comm |
925c0 | 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 73 74 61 74 | and.to.show.IPv6.forwarding.stat |
925e0 | 75 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 | us..Use.this.command.to.show.IPv |
92600 | 36 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 2e 00 55 73 | 6.multicast.group.membership..Us |
92620 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 72 6f 75 74 | e.this.command.to.show.IPv6.rout |
92640 | 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 6c 6c | es..Use.this.command.to.show.all |
92660 | 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 73 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | .IPv6.access.lists.Use.this.comm |
92680 | 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 70 72 65 66 69 78 20 6c 69 73 74 | and.to.show.all.IPv6.prefix.list |
926a0 | 73 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 74 68 65 20 73 | s.Use.this.command.to.show.the.s |
926c0 | 74 61 74 75 73 20 6f 66 20 74 68 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 | tatus.of.the.RIPNG.protocol.Use. |
926e0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 44 4e 53 20 73 65 | this.command.to.specify.a.DNS.se |
92700 | 72 76 65 72 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 62 65 20 75 73 65 64 20 66 | rver.for.the.system.to.be.used.f |
92720 | 6f 72 20 44 4e 53 20 6c 6f 6f 6b 75 70 73 2e 20 4d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 44 4e | or.DNS.lookups..More.than.one.DN |
92740 | 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 63 6f 6e 66 69 67 75 72 69 | S.server.can.be.added,.configuri |
92760 | 6e 67 20 6f 6e 65 20 61 74 20 61 20 74 69 6d 65 2e 20 42 6f 74 68 20 49 50 76 34 20 61 6e 64 20 | ng.one.at.a.time..Both.IPv4.and. |
92780 | 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 55 73 | IPv6.addresses.are.supported..Us |
927a0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 64 6f 6d 61 | e.this.command.to.specify.a.doma |
927c0 | 69 6e 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 64 6f 6d 61 69 6e | in.name.to.be.appended.to.domain |
927e0 | 2d 6e 61 6d 65 73 20 77 69 74 68 69 6e 20 55 52 4c 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 69 | -names.within.URLs.that.do.not.i |
92800 | 6e 63 6c 75 64 65 20 61 20 64 6f 74 20 60 60 2e 60 60 20 74 68 65 20 64 6f 6d 61 69 6e 20 69 73 | nclude.a.dot.``.``.the.domain.is |
92820 | 20 61 70 70 65 6e 64 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 | .appended..Use.this.command.to.s |
92840 | 70 65 63 69 66 79 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 62 79 20 77 68 69 63 68 20 74 | pecify.a.service.name.by.which.t |
92860 | 68 65 20 6c 6f 63 61 6c 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 73 65 6c | he.local.PPPoE.interface.can.sel |
92880 | 65 63 74 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 63 6f 6e 6e | ect.access.concentrators.to.conn |
928a0 | 65 63 74 20 77 69 74 68 2e 20 49 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 6e 79 | ect.with..It.will.connect.to.any |
928c0 | 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 69 66 20 6e 6f 74 20 73 65 74 2e | .access.concentrator.if.not.set. |
928e0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 4c 61 79 65 72 20 34 | .Use.this.command.to.use.Layer.4 |
92900 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 49 50 76 34 20 45 43 4d 50 20 68 61 73 68 69 | .information.for.IPv4.ECMP.hashi |
92920 | 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 61 20 43 69 | ng..Use.this.command.to.use.a.Ci |
92940 | 73 63 6f 20 6e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 74 20 66 6f 72 6d 61 74 20 74 6f 20 73 65 6e 64 | sco.non-compliant.format.to.send |
92960 | 20 61 6e 64 20 69 6e 74 65 72 70 72 65 74 20 74 68 65 20 44 75 61 6c 2d 53 74 61 63 6b 20 63 61 | .and.interpret.the.Dual-Stack.ca |
92980 | 70 61 62 69 6c 69 74 79 20 54 4c 56 20 66 6f 72 20 49 50 76 36 20 4c 44 50 20 63 6f 6d 6d 75 6e | pability.TLV.for.IPv6.LDP.commun |
929a0 | 69 63 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 | ications..This.is.related.to.:rf |
929c0 | 63 3a 60 37 35 35 32 60 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 | c:`7552`..Use.this.command.to.us |
929e0 | 65 20 6f 72 64 65 72 65 64 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f 6e | e.ordered.label.distribution.con |
92a00 | 74 72 6f 6c 20 6d 6f 64 65 2e 20 46 52 52 20 62 79 20 64 65 66 61 75 6c 74 20 75 73 65 73 20 69 | trol.mode..FRR.by.default.uses.i |
92a20 | 6e 64 65 70 65 6e 64 65 6e 74 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f | ndependent.label.distribution.co |
92a40 | 6e 74 72 6f 6c 20 6d 6f 64 65 20 66 6f 72 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f | ntrol.mode.for.label.distributio |
92a60 | 6e 2e 20 20 54 68 69 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 63 3a 60 35 30 33 | n...This.is.related.to.:rfc:`503 |
92a80 | 36 60 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 72 20 4c 61 79 | 6`..Use.this.command.to.user.Lay |
92aa0 | 65 72 20 34 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 45 43 4d 50 20 68 61 73 68 69 6e | er.4.information.for.ECMP.hashin |
92ac0 | 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 | g..Use.this.command.to.view.oper |
92ae0 | 61 74 69 6f 6e 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 64 65 74 61 69 6c 73 20 77 69 72 65 6c | ational.status.and.details.wirel |
92b00 | 65 73 73 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 | ess-specific.information.about.a |
92b20 | 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 | ll.wireless.interfaces..Use.this |
92b40 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 73 74 61 | .command.to.view.operational.sta |
92b60 | 74 75 73 20 61 6e 64 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d | tus.and.wireless-specific.inform |
92b80 | 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 | ation.about.all.wireless.interfa |
92ba0 | 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 77 69 | ces..Use.this.command.to.view.wi |
92bc0 | 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 71 75 65 75 65 20 69 6e 66 6f 72 6d 61 74 69 | reless.interface.queue.informati |
92be0 | 6f 6e 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 | on..The.wireless.interface.ident |
92c00 | 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c | ifier.can.range.from.wlan0.to.wl |
92c20 | 61 6e 39 39 39 2e 00 55 73 65 64 20 66 6f 72 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 2e | an999..Used.for.troubleshooting. |
92c40 | 00 55 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 61 20 73 70 65 63 69 66 69 63 20 6d 69 6d 65 2d 74 | .Used.to.block.a.specific.mime-t |
92c60 | 79 70 65 2e 00 55 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 | ype..Used.to.block.specific.doma |
92c80 | 69 6e 73 20 62 79 20 74 68 65 20 50 72 6f 78 79 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 | ins.by.the.Proxy..Specifying."vy |
92ca0 | 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f | os.net".will.block.all.access.to |
92cc0 | 20 76 79 6f 73 2e 6e 65 74 2c 20 61 6e 64 20 73 70 65 63 69 66 79 69 6e 67 20 22 2e 78 78 78 22 | .vyos.net,.and.specifying.".xxx" |
92ce0 | 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 55 52 4c 73 20 68 | .will.block.all.access.to.URLs.h |
92d00 | 61 76 69 6e 67 20 61 6e 20 55 52 4c 20 65 6e 64 69 6e 67 20 6f 6e 20 2e 78 78 78 2e 00 55 73 65 | aving.an.URL.ending.on..xxx..Use |
92d20 | 72 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 70 75 74 20 74 6f 20 56 52 46 20 63 6f | r.interface.can.be.put.to.VRF.co |
92d40 | 6e 74 65 78 74 20 76 69 61 20 52 41 44 49 55 53 20 41 63 63 65 73 73 2d 41 63 63 65 70 74 20 70 | ntext.via.RADIUS.Access-Accept.p |
92d60 | 61 63 6b 65 74 2c 20 6f 72 20 63 68 61 6e 67 65 20 69 74 20 76 69 61 20 52 41 44 49 55 53 20 43 | acket,.or.change.it.via.RADIUS.C |
92d80 | 6f 41 2e 20 60 60 41 63 63 65 6c 2d 56 52 46 2d 4e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 66 | oA..``Accel-VRF-Name``.is.used.f |
92da0 | 72 6f 6d 20 74 68 65 73 65 20 70 75 72 70 6f 73 65 73 2e 20 49 74 20 69 73 20 63 75 73 74 6f 6d | rom.these.purposes..It.is.custom |
92dc0 | 20 60 41 43 43 45 4c 2d 50 50 50 20 61 74 74 72 69 62 75 74 65 60 5f 2e 20 44 65 66 69 6e 65 20 | .`ACCEL-PPP.attribute`_..Define. |
92de0 | 69 74 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 72 2d 6c | it.in.your.RADIUS.server..User-l |
92e00 | 65 76 65 6c 20 6d 65 73 73 61 67 65 73 00 55 73 69 6e 67 20 27 73 6f 66 74 2d 72 65 63 6f 6e 66 | evel.messages.Using.'soft-reconf |
92e20 | 69 67 75 72 61 74 69 6f 6e 27 20 77 65 20 67 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 75 70 64 | iguration'.we.get.the.policy.upd |
92e40 | 61 74 65 20 77 69 74 68 6f 75 74 20 62 6f 75 6e 63 69 6e 67 20 74 68 65 20 6e 65 69 67 68 62 6f | ate.without.bouncing.the.neighbo |
92e60 | 72 2e 00 55 73 69 6e 67 20 2a 2a 6f 70 65 6e 76 70 6e 2d 6f 70 74 69 6f 6e 20 2d 72 65 6e 65 67 | r..Using.**openvpn-option.-reneg |
92e80 | 2d 73 65 63 2a 2a 20 63 61 6e 20 62 65 20 74 72 69 63 6b 79 2e 20 54 68 69 73 20 6f 70 74 69 6f | -sec**.can.be.tricky..This.optio |
92ea0 | 6e 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 6e 65 67 6f 74 69 61 74 65 20 64 61 74 61 20 63 68 | n.is.used.to.renegotiate.data.ch |
92ec0 | 61 6e 6e 65 6c 20 61 66 74 65 72 20 6e 20 73 65 63 6f 6e 64 73 2e 20 57 68 65 6e 20 75 73 65 64 | annel.after.n.seconds..When.used |
92ee0 | 20 61 74 20 62 6f 74 68 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2c 20 74 68 65 20 | .at.both.server.and.client,.the. |
92f00 | 6c 6f 77 65 72 20 76 61 6c 75 65 20 77 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 72 65 6e | lower.value.will.trigger.the.ren |
92f20 | 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 73 65 74 20 69 74 20 74 6f 20 30 20 6f | egotiation..If.you.set.it.to.0.o |
92f40 | 6e 20 6f 6e 65 20 73 69 64 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 74 6f | n.one.side.of.the.connection.(to |
92f60 | 20 64 69 73 61 62 6c 65 20 69 74 29 2c 20 74 68 65 20 63 68 6f 73 65 6e 20 76 61 6c 75 65 20 6f | .disable.it),.the.chosen.value.o |
92f80 | 6e 20 74 68 65 20 6f 74 68 65 72 20 73 69 64 65 20 77 69 6c 6c 20 64 65 74 65 72 6d 69 6e 65 20 | n.the.other.side.will.determine. |
92fa0 | 77 68 65 6e 20 74 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 | when.the.renegotiation.will.occu |
92fc0 | 72 2e 00 55 73 69 6e 67 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 00 55 73 69 6e 67 | r..Using.BGP.confederation.Using |
92fe0 | 20 42 47 50 20 72 6f 75 74 65 2d 72 65 66 6c 65 63 74 6f 72 73 00 55 73 69 6e 67 20 56 4c 41 4e | .BGP.route-reflectors.Using.VLAN |
93000 | 20 61 77 61 72 65 20 42 72 69 64 67 65 00 55 73 69 6e 67 20 6f 75 72 20 64 6f 63 75 6d 65 6e 74 | .aware.Bridge.Using.our.document |
93020 | 61 74 69 6f 6e 20 63 68 61 70 74 65 72 20 2d 20 3a 72 65 66 3a 60 70 6b 69 60 20 67 65 6e 65 72 | ation.chapter.-.:ref:`pki`.gener |
93040 | 61 74 65 20 61 6e 64 20 69 6e 73 74 61 6c 6c 20 43 41 20 61 6e 64 20 53 65 72 76 65 72 20 63 65 | ate.and.install.CA.and.Server.ce |
93060 | 72 74 69 66 69 63 61 74 65 00 55 73 69 6e 67 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6d 6f | rtificate.Using.the.operation.mo |
93080 | 64 65 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 42 72 69 64 67 65 20 49 6e 66 6f 72 6d | de.command.to.view.Bridge.Inform |
930a0 | 61 74 69 6f 6e 00 55 73 69 6e 67 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 77 69 | ation.Using.this.command,.you.wi |
930c0 | 6c 6c 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 | ll.create.a.new.client.configura |
930e0 | 74 69 6f 6e 20 77 68 69 63 68 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 60 60 69 6e 74 65 | tion.which.can.connect.to.``inte |
93100 | 72 66 61 63 65 60 60 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 54 68 65 20 70 75 62 6c | rface``.on.this.router..The.publ |
93120 | 69 63 20 6b 65 79 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 | ic.key.from.the.specified.interf |
93140 | 61 63 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 78 74 72 61 63 74 65 64 20 61 | ace.is.automatically.extracted.a |
93160 | 6e 64 20 65 6d 62 65 64 64 65 64 20 69 6e 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | nd.embedded.into.the.configurati |
93180 | 6f 6e 2e 00 55 73 75 61 6c 6c 79 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 | on..Usually.this.configuration.i |
931a0 | 73 20 75 73 65 64 20 69 6e 20 50 45 73 20 28 50 72 6f 76 69 64 65 72 20 45 64 67 65 29 20 74 6f | s.used.in.PEs.(Provider.Edge).to |
931c0 | 20 72 65 70 6c 61 63 65 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 63 75 73 74 6f 6d 65 72 20 41 | .replace.the.incoming.customer.A |
931e0 | 53 20 6e 75 6d 62 65 72 20 73 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 43 45 20 28 20 43 | S.number.so.the.connected.CE.(.C |
93200 | 75 73 74 6f 6d 65 72 20 45 64 67 65 29 20 63 61 6e 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 | ustomer.Edge).can.use.the.same.A |
93220 | 53 20 6e 75 6d 62 65 72 20 61 73 20 74 68 65 20 6f 74 68 65 72 20 63 75 73 74 6f 6d 65 72 20 73 | S.number.as.the.other.customer.s |
93240 | 69 74 65 73 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 74 | ites..This.allows.customers.of.t |
93260 | 68 65 20 70 72 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 75 73 65 20 74 68 65 20 73 | he.provider.network.to.use.the.s |
93280 | 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 61 63 72 6f 73 73 20 74 68 65 69 72 20 73 69 74 65 73 | ame.AS.number.across.their.sites |
932a0 | 2e 00 56 48 54 20 28 56 65 72 79 20 48 69 67 68 20 54 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 | ..VHT.(Very.High.Throughput).cap |
932c0 | 61 62 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 61 63 29 00 56 48 54 20 6c 69 6e 6b 20 61 64 | abilities.(802.11ac).VHT.link.ad |
932e0 | 61 70 74 61 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 65 73 00 56 48 54 20 6f 70 65 72 61 74 | aptation.capabilities.VHT.operat |
93300 | 69 6e 67 20 63 68 61 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 | ing.channel.center.frequency.-.c |
93320 | 65 6e 74 65 72 20 66 72 65 71 20 31 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 38 30 2c 20 38 | enter.freq.1.(for.use.with.80,.8 |
93340 | 30 2b 38 30 20 61 6e 64 20 31 36 30 20 6d 6f 64 65 73 29 00 56 48 54 20 6f 70 65 72 61 74 69 6e | 0+80.and.160.modes).VHT.operatin |
93360 | 67 20 63 68 61 6e 6e 65 6c 20 63 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 65 6e | g.channel.center.frequency.-.cen |
93380 | 74 65 72 20 66 72 65 71 20 32 20 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 74 68 65 20 38 30 2b | ter.freq.2.(for.use.with.the.80+ |
933a0 | 38 30 20 6d 6f 64 65 29 00 56 4c 41 4e 00 56 4c 41 4e 20 31 30 20 6f 6e 20 6d 65 6d 62 65 72 20 | 80.mode).VLAN.VLAN.10.on.member. |
933c0 | 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 32 60 20 28 41 43 43 45 53 53 20 6d 6f 64 65 29 00 56 | interface.`eth2`.(ACCESS.mode).V |
933e0 | 4c 41 4e 20 45 78 61 6d 70 6c 65 00 56 4c 41 4e 20 4f 70 74 69 6f 6e 73 00 56 4c 41 4e 20 6d 6f | LAN.Example.VLAN.Options.VLAN.mo |
93400 | 6e 69 74 6f 72 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 63 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 | nitor.for.automatic.creation.of. |
93420 | 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 75 73 65 | VLAN.interfaces.for.specific.use |
93440 | 72 20 6f 6e 20 73 70 65 63 69 66 69 63 20 3c 69 6e 74 65 72 66 61 63 65 3e 00 56 4c 41 4e 20 6e | r.on.specific.<interface>.VLAN.n |
93460 | 61 6d 65 00 56 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 | ame.VLAN's.can.be.created.by.Acc |
93480 | 65 6c 2d 70 70 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 | el-ppp.on.the.fly.via.the.use.of |
934a0 | 20 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 60 60 76 6c 61 6e 5f 6d 6f | .a.Kernel.module.named.``vlan_mo |
934c0 | 6e 60 60 2c 20 77 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e | n``,.which.is.monitoring.incomin |
934e0 | 67 20 76 6c 61 6e 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 | g.vlans.and.creates.the.necessar |
93500 | 79 20 56 4c 41 4e 20 69 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 | y.VLAN.if.required.and.allowed.. |
93520 | 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 | VyOS.supports.the.use.of.either. |
93540 | 56 4c 41 4e 20 49 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 | VLAN.ID's.or.entire.ranges,.both |
93560 | 20 76 61 6c 75 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 | .values.can.be.defined.at.the.sa |
93580 | 6d 65 20 74 69 6d 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 56 4c 41 4e 27 73 | me.time.for.an.interface..VLAN's |
935a0 | 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f 6e 20 | .can.be.created.by.Accel-ppp.on. |
935c0 | 74 68 65 20 66 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 6c 20 | the.fly.via.the.use.of.a.Kernel. |
935e0 | 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 60 76 6c 61 6e 5f 6d 6f 6e 60 2c 20 77 68 69 63 68 20 69 | module.named.`vlan_mon`,.which.i |
93600 | 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 61 6e 64 20 | s.monitoring.incoming.vlans.and. |
93620 | 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 66 20 72 65 | creates.the.necessary.VLAN.if.re |
93640 | 71 75 69 72 65 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 | quired.and.allowed..VyOS.support |
93660 | 73 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 73 20 6f 72 | s.the.use.of.either.VLAN.ID's.or |
93680 | 20 65 6e 74 69 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 63 61 6e 20 | .entire.ranges,.both.values.can. |
936a0 | 62 65 20 64 65 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 66 6f 72 20 | be.defined.at.the.same.time.for. |
936c0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 56 4d 77 61 72 65 20 75 73 65 72 73 20 73 68 6f 75 6c | an.interface..VMware.users.shoul |
936e0 | 64 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 56 4d 58 4e 45 54 33 20 61 64 61 70 74 65 72 20 | d.ensure.that.a.VMXNET3.adapter. |
93700 | 69 73 20 75 73 65 64 2e 20 45 31 30 30 30 20 61 64 61 70 74 65 72 73 20 68 61 76 65 20 6b 6e 6f | is.used..E1000.adapters.have.kno |
93720 | 77 6e 20 69 73 73 75 65 73 20 77 69 74 68 20 47 52 45 20 70 72 6f 63 65 73 73 69 6e 67 2e 00 56 | wn.issues.with.GRE.processing..V |
93740 | 50 4e 00 56 50 4e 2d 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 71 75 65 73 74 20 63 6f 6e 66 | PN.VPN-clients.will.request.conf |
93760 | 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2c 20 6f 70 74 69 6f 6e 61 6c 6c 79 | iguration.parameters,.optionally |
93780 | 20 79 6f 75 20 63 61 6e 20 44 4e 53 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 63 6c | .you.can.DNS.parameter.to.the.cl |
937a0 | 69 65 6e 74 2e 00 56 52 46 00 56 52 46 20 52 6f 75 74 65 20 4c 65 61 6b 69 6e 67 00 56 52 46 20 | ient..VRF.VRF.Route.Leaking.VRF. |
937c0 | 61 6e 64 20 4e 41 54 00 56 52 46 20 62 6c 75 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 | and.NAT.VRF.blue.routing.table.V |
937e0 | 52 46 20 64 65 66 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 65 64 | RF.default.routing.table.VRF.red |
93800 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 | .routing.table.VRF.route.leaking |
93820 | 00 56 52 46 20 74 6f 70 6f 6c 6f 67 79 20 65 78 61 6d 70 6c 65 00 56 52 52 50 20 28 56 69 72 74 | .VRF.topology.example.VRRP.(Virt |
93840 | 75 61 6c 20 52 6f 75 74 65 72 20 52 65 64 75 6e 64 61 6e 63 79 20 50 72 6f 74 6f 63 6f 6c 29 20 | ual.Router.Redundancy.Protocol). |
93860 | 70 72 6f 76 69 64 65 73 20 61 63 74 69 76 65 2f 62 61 63 6b 75 70 20 72 65 64 75 6e 64 61 6e 63 | provides.active/backup.redundanc |
93880 | 79 20 66 6f 72 20 72 6f 75 74 65 72 73 2e 20 45 76 65 72 79 20 56 52 52 50 20 72 6f 75 74 65 72 | y.for.routers..Every.VRRP.router |
938a0 | 20 68 61 73 20 61 20 70 68 79 73 69 63 61 6c 20 49 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 2c | .has.a.physical.IP/IPv6.address, |
938c0 | 20 61 6e 64 20 61 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e 20 4f 6e 20 73 74 61 72 74 | .and.a.virtual.address..On.start |
938e0 | 75 70 2c 20 72 6f 75 74 65 72 73 20 65 6c 65 63 74 20 74 68 65 20 6d 61 73 74 65 72 2c 20 61 6e | up,.routers.elect.the.master,.an |
93900 | 64 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 | d.the.router.with.the.highest.pr |
93920 | 69 6f 72 69 74 79 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 20 61 6e 64 20 61 73 | iority.becomes.the.master.and.as |
93940 | 73 69 67 6e 73 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 | signs.the.virtual.address.to.its |
93960 | 20 69 6e 74 65 72 66 61 63 65 2e 20 41 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 | .interface..All.routers.with.low |
93980 | 65 72 20 70 72 69 6f 72 69 74 69 65 73 20 62 65 63 6f 6d 65 20 62 61 63 6b 75 70 20 72 6f 75 74 | er.priorities.become.backup.rout |
939a0 | 65 72 73 2e 20 54 68 65 20 6d 61 73 74 65 72 20 74 68 65 6e 20 73 74 61 72 74 73 20 73 65 6e 64 | ers..The.master.then.starts.send |
939c0 | 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 74 6f 20 6e 6f 74 69 66 79 20 | ing.keepalive.packets.to.notify. |
939e0 | 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 74 68 61 74 20 69 74 27 73 20 61 76 61 69 6c 61 62 6c | other.routers.that.it's.availabl |
93a00 | 65 2e 20 49 66 20 74 68 65 20 6d 61 73 74 65 72 20 66 61 69 6c 73 20 61 6e 64 20 73 74 6f 70 73 | e..If.the.master.fails.and.stops |
93a20 | 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 2c 20 74 68 65 20 | .sending.keepalive.packets,.the. |
93a40 | 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 68 69 67 68 65 73 74 20 70 72 69 | router.with.the.next.highest.pri |
93a60 | 6f 72 69 74 79 20 62 65 63 6f 6d 65 73 20 74 68 65 20 6e 65 77 20 6d 61 73 74 65 72 20 61 6e 64 | ority.becomes.the.new.master.and |
93a80 | 20 74 61 6b 65 73 20 6f 76 65 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e | .takes.over.the.virtual.address. |
93aa0 | 00 56 52 52 50 20 63 61 6e 20 75 73 65 20 74 77 6f 20 6d 6f 64 65 73 3a 20 70 72 65 65 6d 70 74 | .VRRP.can.use.two.modes:.preempt |
93ac0 | 69 76 65 20 61 6e 64 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 2e 20 49 6e 20 74 68 65 20 70 | ive.and.non-preemptive..In.the.p |
93ae0 | 72 65 65 6d 70 74 69 76 65 20 6d 6f 64 65 2c 20 69 66 20 61 20 72 6f 75 74 65 72 20 77 69 74 68 | reemptive.mode,.if.a.router.with |
93b00 | 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 66 61 69 6c 73 20 61 6e 64 20 74 68 65 | .a.higher.priority.fails.and.the |
93b20 | 6e 20 63 6f 6d 65 73 20 62 61 63 6b 2c 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 65 72 | n.comes.back,.routers.with.lower |
93b40 | 20 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 67 69 76 65 20 75 70 20 74 68 65 69 72 20 6d 61 73 | .priority.will.give.up.their.mas |
93b60 | 74 65 72 20 73 74 61 74 75 73 2e 20 49 6e 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 20 6d 6f | ter.status..In.non-preemptive.mo |
93b80 | 64 65 2c 20 74 68 65 20 6e 65 77 6c 79 20 65 6c 65 63 74 65 64 20 6d 61 73 74 65 72 20 77 69 6c | de,.the.newly.elected.master.wil |
93ba0 | 6c 20 6b 65 65 70 20 74 68 65 20 6d 61 73 74 65 72 20 73 74 61 74 75 73 20 61 6e 64 20 74 68 65 | l.keep.the.master.status.and.the |
93bc0 | 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 00 56 | .virtual.address.indefinitely..V |
93be0 | 52 52 50 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 63 61 6e 20 62 65 20 65 78 74 65 6e 64 65 | RRP.functionality.can.be.extende |
93c00 | 64 20 77 69 74 68 20 73 63 72 69 70 74 73 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 77 | d.with.scripts..VyOS.supports.tw |
93c20 | 6f 20 6b 69 6e 64 73 20 6f 66 20 73 63 72 69 70 74 73 3a 20 68 65 61 6c 74 68 20 63 68 65 63 6b | o.kinds.of.scripts:.health.check |
93c40 | 20 73 63 72 69 70 74 73 20 61 6e 64 20 74 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 2e | .scripts.and.transition.scripts. |
93c60 | 20 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 65 78 65 63 75 74 65 20 63 75 | .Health.check.scripts.execute.cu |
93c80 | 73 74 6f 6d 20 63 68 65 63 6b 73 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 6d | stom.checks.in.addition.to.the.m |
93ca0 | 61 73 74 65 72 20 72 6f 75 74 65 72 20 72 65 61 63 68 61 62 69 6c 69 74 79 2e 20 54 72 61 6e 73 | aster.router.reachability..Trans |
93cc0 | 69 74 69 6f 6e 20 73 63 72 69 70 74 73 20 61 72 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 | ition.scripts.are.executed.when. |
93ce0 | 56 52 52 50 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 20 66 72 6f 6d 20 6d 61 73 74 65 72 20 74 | VRRP.state.changes.from.master.t |
93d00 | 6f 20 62 61 63 6b 75 70 20 6f 72 20 66 61 75 6c 74 20 61 6e 64 20 76 69 63 65 20 76 65 72 73 61 | o.backup.or.fault.and.vice.versa |
93d20 | 20 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 | .and.can.be.used.to.enable.or.di |
93d40 | 73 61 62 6c 65 20 63 65 72 74 61 69 6e 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d | sable.certain.services,.for.exam |
93d60 | 70 6c 65 2e 00 56 52 52 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 20 77 69 74 | ple..VRRP.groups.are.created.wit |
93d80 | 68 20 74 68 65 20 60 60 73 65 74 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 72 | h.the.``set.high-availability.vr |
93da0 | 72 70 20 67 72 6f 75 70 20 24 47 52 4f 55 50 5f 4e 41 4d 45 60 60 20 63 6f 6d 6d 61 6e 64 73 2e | rp.group.$GROUP_NAME``.commands. |
93dc0 | 20 54 68 65 20 72 65 71 75 69 72 65 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 69 6e 74 | .The.required.parameters.are.int |
93de0 | 65 72 66 61 63 65 2c 20 76 72 69 64 2c 20 61 6e 64 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 20 | erface,.vrid,.and.address..VRRP. |
93e00 | 6b 65 65 70 61 6c 69 76 65 20 70 61 63 6b 65 74 73 20 75 73 65 20 6d 75 6c 74 69 63 61 73 74 2c | keepalive.packets.use.multicast, |
93e20 | 20 61 6e 64 20 56 52 52 50 20 73 65 74 75 70 73 20 61 72 65 20 6c 69 6d 69 74 65 64 20 74 6f 20 | .and.VRRP.setups.are.limited.to. |
93e40 | 61 20 73 69 6e 67 6c 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 2e | a.single.datalink.layer.segment. |
93e60 | 20 59 6f 75 20 63 61 6e 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 56 52 52 50 20 67 72 6f | .You.can.setup.multiple.VRRP.gro |
93e80 | 75 70 73 20 28 61 6c 73 6f 20 63 61 6c 6c 65 64 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 73 | ups.(also.called.virtual.routers |
93ea0 | 29 2e 20 56 69 72 74 75 61 6c 20 72 6f 75 74 65 72 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 | )..Virtual.routers.are.identifie |
93ec0 | 64 20 62 79 20 61 20 56 52 49 44 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 65 72 20 49 44 65 6e | d.by.a.VRID.(Virtual.Router.IDen |
93ee0 | 74 69 66 69 65 72 29 2e 20 49 66 20 79 6f 75 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 67 | tifier)..If.you.setup.multiple.g |
93f00 | 72 6f 75 70 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 | roups.on.the.same.interface,.the |
93f20 | 69 72 20 56 52 49 44 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 69 66 20 74 68 65 79 20 | ir.VRIDs.must.be.unique.if.they. |
93f40 | 75 73 65 20 74 68 65 20 73 61 6d 65 20 61 64 64 72 65 73 73 20 66 61 6d 69 6c 79 2c 20 62 75 74 | use.the.same.address.family,.but |
93f60 | 20 69 74 27 73 20 70 6f 73 73 69 62 6c 65 20 28 65 76 65 6e 20 69 66 20 6e 6f 74 20 72 65 63 6f | .it's.possible.(even.if.not.reco |
93f80 | 6d 6d 65 6e 64 65 64 20 66 6f 72 20 72 65 61 64 61 62 69 6c 69 74 79 20 72 65 61 73 6f 6e 73 29 | mmended.for.readability.reasons) |
93fa0 | 20 74 6f 20 75 73 65 20 64 75 70 6c 69 63 61 74 65 20 56 52 49 44 73 20 6f 6e 20 64 69 66 66 65 | .to.use.duplicate.VRIDs.on.diffe |
93fc0 | 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 56 52 52 50 20 70 72 69 6f 72 69 74 79 20 63 | rent.interfaces..VRRP.priority.c |
93fe0 | 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 20 60 60 70 72 69 6f 72 69 74 79 60 60 20 6f 70 74 69 | an.be.set.with.``priority``.opti |
94000 | 6f 6e 3a 00 56 54 49 20 2d 20 56 69 72 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 | on:.VTI.-.Virtual.Tunnel.Interfa |
94020 | 63 65 00 56 58 4c 41 4e 00 56 58 4c 41 4e 20 69 73 20 61 6e 20 65 76 6f 6c 75 74 69 6f 6e 20 6f | ce.VXLAN.VXLAN.is.an.evolution.o |
94040 | 66 20 65 66 66 6f 72 74 73 20 74 6f 20 73 74 61 6e 64 61 72 64 69 7a 65 20 61 6e 20 6f 76 65 72 | f.efforts.to.standardize.an.over |
94060 | 6c 61 79 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 74 20 69 | lay.encapsulation.protocol..It.i |
94080 | 6e 63 72 65 61 73 65 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 79 20 75 70 20 74 6f 20 31 | ncreases.the.scalability.up.to.1 |
940a0 | 36 20 6d 69 6c 6c 69 6f 6e 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 61 | 6.million.logical.networks.and.a |
940c0 | 6c 6c 6f 77 73 20 66 6f 72 20 6c 61 79 65 72 20 32 20 61 64 6a 61 63 65 6e 63 79 20 61 63 72 6f | llows.for.layer.2.adjacency.acro |
940e0 | 73 73 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 | ss.IP.networks..Multicast.or.uni |
94100 | 63 61 73 74 20 77 69 74 68 20 68 65 61 64 2d 65 6e 64 20 72 65 70 6c 69 63 61 74 69 6f 6e 20 28 | cast.with.head-end.replication.( |
94120 | 48 45 52 29 20 69 73 20 75 73 65 64 20 74 6f 20 66 6c 6f 6f 64 20 62 72 6f 61 64 63 61 73 74 2c | HER).is.used.to.flood.broadcast, |
94140 | 20 75 6e 6b 6e 6f 77 6e 20 75 6e 69 63 61 73 74 2c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 | .unknown.unicast,.and.multicast. |
94160 | 28 42 55 4d 29 20 74 72 61 66 66 69 63 2e 00 56 58 4c 41 4e 20 73 70 65 63 69 66 69 63 20 6f 70 | (BUM).traffic..VXLAN.specific.op |
94180 | 74 69 6f 6e 73 00 56 58 4c 41 4e 20 77 61 73 20 6f 66 66 69 63 69 61 6c 6c 79 20 64 6f 63 75 6d | tions.VXLAN.was.officially.docum |
941a0 | 65 6e 74 65 64 20 62 79 20 74 68 65 20 49 45 54 46 20 69 6e 20 3a 72 66 63 3a 60 37 33 34 38 60 | ented.by.the.IETF.in.:rfc:`7348` |
941c0 | 2e 00 56 61 6c 69 64 20 76 61 6c 75 65 73 20 61 72 65 20 30 2e 2e 32 35 35 2e 00 56 61 6c 75 65 | ..Valid.values.are.0..255..Value |
941e0 | 00 56 61 6c 75 65 20 74 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 | .Value.to.send.to.RADIUS.server. |
94200 | 69 6e 20 4e 41 53 2d 49 50 2d 41 64 64 72 65 73 73 20 61 74 74 72 69 62 75 74 65 20 61 6e 64 20 | in.NAS-IP-Address.attribute.and. |
94220 | 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 74 73 | to.be.matched.in.DM/CoA.requests |
94240 | 2e 20 41 6c 73 6f 20 44 4d 2f 43 6f 41 20 73 65 72 76 65 72 20 77 69 6c 6c 20 62 69 6e 64 20 74 | ..Also.DM/CoA.server.will.bind.t |
94260 | 6f 20 74 68 61 74 20 61 64 64 72 65 73 73 2e 00 56 61 6c 75 65 20 74 6f 20 73 65 6e 64 20 74 6f | o.that.address..Value.to.send.to |
94280 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 64 65 6e 74 69 66 69 65 72 | .RADIUS.server.in.NAS-Identifier |
942a0 | 20 61 74 74 72 69 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 69 6e 20 | .attribute.and.to.be.matched.in. |
942c0 | 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 74 73 2e 00 56 65 72 69 66 69 63 61 74 69 6f 6e 00 56 65 | DM/CoA.requests..Verification.Ve |
942e0 | 72 69 66 69 63 61 74 69 6f 6e 3a 00 56 65 72 69 66 79 20 74 68 61 74 20 63 6f 6e 6e 65 63 74 69 | rification:.Verify.that.connecti |
94300 | 6f 6e 73 20 61 72 65 20 68 69 74 74 69 6e 67 20 74 68 65 20 72 75 6c 65 20 6f 6e 20 62 6f 74 68 | ons.are.hitting.the.rule.on.both |
94320 | 20 73 69 64 65 73 3a 00 56 65 72 73 69 6f 6e 00 56 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 | .sides:.Version.Virtual.Ethernet |
94340 | 00 56 69 72 74 75 61 6c 20 53 65 72 76 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 4c 6f 61 64 2d 62 | .Virtual.Server.allows.to.Load-b |
94360 | 61 6c 61 6e 63 65 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 76 69 72 74 75 | alance.traffic.destination.virtu |
94380 | 61 6c 2d 61 64 64 72 65 73 73 3a 70 6f 72 74 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 61 6c 20 | al-address:port.between.several. |
943a0 | 72 65 61 6c 20 73 65 72 76 65 72 73 2e 00 56 69 72 74 75 61 6c 2d 73 65 72 76 65 72 00 56 69 72 | real.servers..Virtual-server.Vir |
943c0 | 74 75 61 6c 2d 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 | tual-server.can.be.configured.wi |
943e0 | 74 68 20 56 52 52 50 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 20 6f 72 20 77 69 74 68 6f | th.VRRP.virtual.address.or.witho |
94400 | 75 74 20 56 52 52 50 2e 00 56 6f 6c 75 6d 65 20 69 73 20 65 69 74 68 65 72 20 6d 6f 75 6e 74 65 | ut.VRRP..Volume.is.either.mounte |
94420 | 64 20 61 73 20 72 77 20 28 72 65 61 64 2d 77 72 69 74 65 20 2d 20 64 65 66 61 75 6c 74 29 20 6f | d.as.rw.(read-write.-.default).o |
94440 | 72 20 72 6f 20 28 72 65 61 64 2d 6f 6e 6c 79 29 00 56 79 4f 53 20 31 2e 31 20 73 75 70 70 6f 72 | r.ro.(read-only).VyOS.1.1.suppor |
94460 | 74 65 64 20 6c 6f 67 69 6e 20 61 73 20 75 73 65 72 20 60 60 72 6f 6f 74 60 60 2e 20 54 68 69 73 | ted.login.as.user.``root``..This |
94480 | 20 68 61 73 20 62 65 65 6e 20 72 65 6d 6f 76 65 64 20 64 75 65 20 74 6f 20 74 69 67 68 74 65 72 | .has.been.removed.due.to.tighter |
944a0 | 20 73 65 63 75 72 69 74 79 20 69 6e 20 56 79 4f 53 20 31 2e 32 2e 00 56 79 4f 53 20 31 2e 33 20 | .security.in.VyOS.1.2..VyOS.1.3. |
944c0 | 28 65 71 75 75 6c 65 75 73 29 20 73 75 70 70 6f 72 74 73 20 44 48 43 50 76 36 2d 50 44 20 28 3a | (equuleus).supports.DHCPv6-PD.(: |
944e0 | 72 66 63 3a 60 33 36 33 33 60 29 2e 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 | rfc:`3633`)..DHCPv6.Prefix.Deleg |
94500 | 61 74 69 6f 6e 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 6d 6f 73 74 20 49 53 50 73 20 | ation.is.supported.by.most.ISPs. |
94520 | 77 68 6f 20 70 72 6f 76 69 64 65 20 6e 61 74 69 76 65 20 49 50 76 36 20 66 6f 72 20 63 6f 6e 73 | who.provide.native.IPv6.for.cons |
94540 | 75 6d 65 72 73 20 6f 6e 20 66 69 78 65 64 20 6e 65 74 77 6f 72 6b 73 2e 00 56 79 4f 53 20 31 2e | umers.on.fixed.networks..VyOS.1. |
94560 | 34 20 28 73 61 67 69 74 74 61 29 20 69 6e 74 72 6f 64 75 63 65 64 20 64 79 6e 61 6d 69 63 20 72 | 4.(sagitta).introduced.dynamic.r |
94580 | 6f 75 74 69 6e 67 20 73 75 70 70 6f 72 74 20 66 6f 72 20 56 52 46 73 2e 00 56 79 4f 53 20 31 2e | outing.support.for.VRFs..VyOS.1. |
945a0 | 34 20 63 68 61 6e 67 65 64 20 74 68 65 20 77 61 79 20 69 6e 20 68 6f 77 20 65 6e 63 72 79 74 69 | 4.changed.the.way.in.how.encryti |
945c0 | 6f 6e 20 6b 65 79 73 20 6f 72 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 73 74 6f 72 | on.keys.or.certificates.are.stor |
945e0 | 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 6e 20 74 68 65 20 70 72 65 20 56 79 4f | ed.on.the.system..In.the.pre.VyO |
94600 | 53 20 31 2e 34 20 65 72 61 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 67 6f 74 20 73 74 6f 72 | S.1.4.era,.certificates.got.stor |
94620 | 65 64 20 75 6e 64 65 72 20 2f 63 6f 6e 66 69 67 20 61 6e 64 20 65 76 65 72 79 20 73 65 72 76 69 | ed.under./config.and.every.servi |
94640 | 63 65 20 72 65 66 65 72 65 6e 63 65 64 20 61 20 66 69 6c 65 2e 20 54 68 61 74 20 6d 61 64 65 20 | ce.referenced.a.file..That.made. |
94660 | 63 6f 70 79 69 6e 67 20 61 20 72 75 6e 6e 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | copying.a.running.configuration. |
94680 | 66 72 6f 6d 20 73 79 73 74 65 6d 20 41 20 74 6f 20 73 79 73 74 65 6d 20 42 20 61 20 62 69 74 20 | from.system.A.to.system.B.a.bit. |
946a0 | 68 61 72 64 65 72 2c 20 61 73 20 79 6f 75 20 68 61 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 66 | harder,.as.you.had.to.copy.the.f |
946c0 | 69 6c 65 73 20 61 6e 64 20 74 68 65 69 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 62 79 20 68 61 | iles.and.their.permissions.by.ha |
946e0 | 6e 64 2e 00 56 79 4f 53 20 31 2e 34 20 75 73 65 73 20 63 68 72 6f 6e 79 20 69 6e 73 74 65 61 64 | nd..VyOS.1.4.uses.chrony.instead |
94700 | 20 6f 66 20 6e 74 70 64 20 28 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 33 30 30 38 60 29 20 77 | .of.ntpd.(see.:vytask:`T3008`).w |
94720 | 68 69 63 68 20 77 69 6c 6c 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 63 63 65 70 74 20 61 6e 6f 6e 79 | hich.will.no.longer.accept.anony |
94740 | 6d 6f 75 73 20 4e 54 50 20 72 65 71 75 65 73 74 73 20 61 73 20 69 6e 20 56 79 4f 53 20 31 2e 33 | mous.NTP.requests.as.in.VyOS.1.3 |
94760 | 2e 20 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 | ..All.configurations.will.be.mig |
94780 | 72 61 74 65 64 20 74 6f 20 6b 65 65 70 20 74 68 65 20 61 6e 6f 6e 79 6d 6f 75 73 20 66 75 6e 63 | rated.to.keep.the.anonymous.func |
947a0 | 74 69 6f 6e 61 6c 69 74 79 2e 20 46 6f 72 20 6e 65 77 20 73 65 74 75 70 73 20 69 66 20 79 6f 75 | tionality..For.new.setups.if.you |
947c0 | 20 68 61 76 65 20 63 6c 69 65 6e 74 73 20 75 73 69 6e 67 20 79 6f 75 72 20 56 79 4f 53 20 69 6e | .have.clients.using.your.VyOS.in |
947e0 | 73 74 61 6c 6c 61 74 69 6f 6e 20 61 73 20 4e 54 50 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6d 75 | stallation.as.NTP.server,.you.mu |
94800 | 73 74 20 73 70 65 63 69 66 79 20 74 68 65 20 60 61 6c 6c 6f 77 2d 63 6c 69 65 6e 74 60 20 64 69 | st.specify.the.`allow-client`.di |
94820 | 72 65 63 74 69 76 65 2e 00 56 79 4f 53 20 41 72 69 73 74 61 20 45 4f 53 20 73 65 74 75 70 00 56 | rective..VyOS.Arista.EOS.setup.V |
94840 | 79 4f 53 20 45 53 50 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f | yOS.ESP.group.has.the.next.optio |
94860 | 6e 73 3a 00 56 79 4f 53 20 46 69 65 6c 64 00 56 79 4f 53 20 49 4b 45 20 67 72 6f 75 70 20 68 61 | ns:.VyOS.Field.VyOS.IKE.group.ha |
94880 | 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 20 4d 49 42 73 00 56 79 | s.the.next.options:.VyOS.MIBs.Vy |
948a0 | 4f 53 20 4e 41 54 36 36 20 44 48 43 50 76 36 20 75 73 69 6e 67 20 61 20 64 75 6d 6d 79 20 69 6e | OS.NAT66.DHCPv6.using.a.dummy.in |
948c0 | 74 65 72 66 61 63 65 00 56 79 4f 53 20 4e 41 54 36 36 20 53 69 6d 70 6c 65 20 43 6f 6e 66 69 67 | terface.VyOS.NAT66.Simple.Config |
948e0 | 75 72 65 00 56 79 4f 53 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 | ure.VyOS.Network.Emulator.policy |
94900 | 20 65 6d 75 6c 61 74 65 73 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 79 6f 75 20 63 61 6e | .emulates.the.conditions.you.can |
94920 | 20 73 75 66 66 65 72 20 69 6e 20 61 20 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 77 | .suffer.in.a.real.network..You.w |
94940 | 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 6e 67 73 20 | ill.be.able.to.configure.things. |
94960 | 6c 69 6b 65 20 72 61 74 65 2c 20 62 75 72 73 74 2c 20 64 65 6c 61 79 2c 20 70 61 63 6b 65 74 20 | like.rate,.burst,.delay,.packet. |
94980 | 6c 6f 73 73 2c 20 70 61 63 6b 65 74 20 63 6f 72 72 75 70 74 69 6f 6e 20 6f 72 20 70 61 63 6b 65 | loss,.packet.corruption.or.packe |
949a0 | 74 20 72 65 6f 72 64 65 72 69 6e 67 2e 00 56 79 4f 53 20 4f 70 74 69 6f 6e 00 56 79 4f 53 20 50 | t.reordering..VyOS.Option.VyOS.P |
949c0 | 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 6f 75 74 69 6e 67 20 28 50 42 52 29 20 77 6f 72 6b 73 20 | olicy-Based.Routing.(PBR).works. |
949e0 | 62 79 20 6d 61 74 63 68 69 6e 67 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 72 61 | by.matching.source.IP.address.ra |
94a00 | 6e 67 65 73 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 | nges.and.forwarding.the.traffic. |
94a20 | 75 73 69 6e 67 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 2e 00 | using.different.routing.tables.. |
94a40 | 56 79 4f 53 20 53 4e 4d 50 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 | VyOS.SNMP.supports.both.IPv4.and |
94a60 | 20 49 50 76 36 2e 00 56 79 4f 53 20 61 6c 73 6f 20 63 6f 6d 65 73 20 77 69 74 68 20 61 20 62 75 | .IPv6..VyOS.also.comes.with.a.bu |
94a80 | 69 6c 64 20 69 6e 20 53 53 54 50 20 73 65 72 76 65 72 2c 20 73 65 65 20 3a 72 65 66 3a 60 73 73 | ild.in.SSTP.server,.see.:ref:`ss |
94aa0 | 74 70 60 2e 00 56 79 4f 53 20 61 6c 73 6f 20 70 72 6f 76 69 64 65 73 20 44 48 43 50 76 36 20 73 | tp`..VyOS.also.provides.DHCPv6.s |
94ac0 | 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 63 68 20 69 73 20 64 65 73 | erver.functionality.which.is.des |
94ae0 | 63 72 69 62 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 56 79 4f 53 20 61 6c 73 | cribed.in.this.section..VyOS.als |
94b00 | 6f 20 73 75 70 70 6f 72 74 73 20 28 63 75 72 72 65 6e 74 6c 79 29 20 74 77 6f 20 64 69 66 66 65 | o.supports.(currently).two.diffe |
94b20 | 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c 6f | rent.modes.of.authentication,.lo |
94b40 | 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 | cal.and.RADIUS..To.create.a.new. |
94b60 | 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 60 60 76 79 6f 73 60 60 20 77 69 74 68 20 70 | local.user.named.``vyos``.with.p |
94b80 | 61 73 73 77 6f 72 64 20 60 60 76 79 6f 73 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | assword.``vyos``.use.the.followi |
94ba0 | 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 | ng.commands..VyOS.also.supports. |
94bc0 | 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 | two.different.modes.of.authentic |
94be0 | 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 | ation,.local.and.RADIUS..To.crea |
94c00 | 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 | te.a.new.local.user.named."vyos" |
94c20 | 20 77 69 74 68 20 61 20 70 61 73 73 77 6f 72 64 20 6f 66 20 22 76 79 6f 73 22 20 75 73 65 20 74 | .with.a.password.of."vyos".use.t |
94c40 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 63 61 6e 20 | he.following.commands..VyOS.can. |
94c60 | 61 6c 73 6f 20 72 75 6e 20 69 6e 20 44 4d 56 50 4e 20 73 70 6f 6b 65 20 6d 6f 64 65 2e 00 56 79 | also.run.in.DMVPN.spoke.mode..Vy |
94c80 | 4f 53 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 72 61 63 6b 20 63 6f | OS.can.be.configured.to.track.co |
94ca0 | 6e 6e 65 63 74 69 6f 6e 73 20 75 73 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | nnections.using.the.connection.t |
94cc0 | 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 | racking.subsystem..Connection.tr |
94ce0 | 61 63 6b 69 6e 67 20 62 65 63 6f 6d 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6f 6e 63 65 20 | acking.becomes.operational.once. |
94d00 | 65 69 74 68 65 72 20 73 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 20 | either.stateful.firewall.or.NAT. |
94d20 | 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 | is.configured..VyOS.can.not.only |
94d40 | 20 61 63 74 20 61 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | .act.as.an.OpenVPN.site-to-site. |
94d60 | 6f 72 20 73 65 72 76 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 2e 20 | or.server.for.multiple.clients.. |
94d80 | 59 6f 75 20 63 61 6e 20 69 6e 64 65 65 64 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e | You.can.indeed.also.configure.an |
94da0 | 79 20 56 79 4f 53 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 61 6e 20 4f | y.VyOS.OpenVPN.interface.as.an.O |
94dc0 | 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 20 56 79 | penVPN.client.connecting.to.a.Vy |
94de0 | 4f 53 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 4f | OS.OpenVPN.server.or.any.other.O |
94e00 | 70 65 6e 56 50 4e 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 64 65 66 61 75 6c 74 20 77 69 6c 6c | penVPN.server..VyOS.default.will |
94e20 | 20 62 65 20 60 61 75 74 6f 60 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 | .be.`auto`..VyOS.does.not.have.a |
94e40 | 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 61 | .special.command.to.start.the.Ba |
94e60 | 62 65 6c 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 20 73 | bel.process..The.Babel.process.s |
94e80 | 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 42 61 62 65 6c 20 65 6e 61 62 6c | tarts.when.the.first.Babel.enabl |
94ea0 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 | ed.interface.is.configured..VyOS |
94ec0 | 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 | .does.not.have.a.special.command |
94ee0 | 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 | .to.start.the.OSPF.process..The. |
94f00 | 4f 53 50 46 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 | OSPF.process.starts.when.the.fir |
94f20 | 73 74 20 6f 73 70 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e | st.ospf.enabled.interface.is.con |
94f40 | 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 | figured..VyOS.does.not.have.a.sp |
94f60 | 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 4f 53 50 46 76 | ecial.command.to.start.the.OSPFv |
94f80 | 33 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 20 73 74 | 3.process..The.OSPFv3.process.st |
94fa0 | 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 65 6e 61 62 6c 65 64 | arts.when.the.first.ospf.enabled |
94fc0 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 66 | .interface.is.configured..VyOS.f |
94fe0 | 61 63 69 6c 69 74 61 74 65 73 20 49 50 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f | acilitates.IP.Multicast.by.suppo |
95000 | 72 74 69 6e 67 20 2a 2a 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 2a 2a 2c 20 2a 2a 49 47 4d | rting.**PIM.Sparse.Mode**,.**IGM |
95020 | 50 2a 2a 20 61 6e 64 20 2a 2a 49 47 4d 50 2d 50 72 6f 78 79 2a 2a 2e 00 56 79 4f 53 20 66 61 63 | P**.and.**IGMP-Proxy**..VyOS.fac |
95040 | 69 6c 69 74 61 74 65 73 20 49 50 76 36 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f | ilitates.IPv6.Multicast.by.suppo |
95060 | 72 74 69 6e 67 20 2a 2a 50 49 4d 76 36 2a 2a 20 61 6e 64 20 2a 2a 4d 4c 44 2a 2a 2e 00 56 79 4f | rting.**PIMv6**.and.**MLD**..VyO |
95080 | 53 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 46 61 73 74 4e 65 74 4d 6f 6e 20 43 6f 6d 6d 75 6e | S.includes.the.FastNetMon.Commun |
950a0 | 69 74 79 20 45 64 69 74 69 6f 6e 2e 00 56 79 4f 53 20 69 73 20 61 62 6c 65 20 74 6f 20 75 70 64 | ity.Edition..VyOS.is.able.to.upd |
950c0 | 61 74 65 20 61 20 72 65 6d 6f 74 65 20 44 4e 53 20 72 65 63 6f 72 64 20 77 68 65 6e 20 61 6e 20 | ate.a.remote.DNS.record.when.an. |
950e0 | 69 6e 74 65 72 66 61 63 65 20 67 65 74 73 20 61 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e | interface.gets.a.new.IP.address. |
95100 | 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 64 6f 20 73 6f 2c 20 56 79 4f 53 20 69 6e 63 6c 75 64 65 | .In.order.to.do.so,.VyOS.include |
95120 | 73 20 64 64 63 6c 69 65 6e 74 5f 2c 20 61 20 50 65 72 6c 20 73 63 72 69 70 74 20 77 72 69 74 74 | s.ddclient_,.a.Perl.script.writt |
95140 | 65 6e 20 66 6f 72 20 74 68 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 75 72 70 6f 73 65 2e 00 56 79 | en.for.this.only.one.purpose..Vy |
95160 | 4f 53 20 69 73 20 61 6c 73 6f 20 61 62 6c 65 20 74 6f 20 75 73 65 20 61 6e 79 20 73 65 72 76 69 | OS.is.also.able.to.use.any.servi |
95180 | 63 65 20 72 65 6c 79 69 6e 67 20 6f 6e 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 70 70 6f 72 74 65 | ce.relying.on.protocols.supporte |
951a0 | 64 20 62 79 20 64 64 63 6c 69 65 6e 74 2e 00 56 79 4f 53 20 69 74 73 65 6c 66 20 73 75 70 70 6f | d.by.ddclient..VyOS.itself.suppo |
951c0 | 72 74 73 20 53 4e 4d 50 76 32 5f 20 28 76 65 72 73 69 6f 6e 20 32 29 20 61 6e 64 20 53 4e 4d 50 | rts.SNMPv2_.(version.2).and.SNMP |
951e0 | 76 33 5f 20 28 76 65 72 73 69 6f 6e 20 33 29 20 77 68 65 72 65 20 74 68 65 20 6c 61 74 65 72 20 | v3_.(version.3).where.the.later. |
95200 | 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 62 65 63 61 75 73 65 20 6f 66 20 69 6d 70 72 6f 76 | is.recommended.because.of.improv |
95220 | 65 64 20 73 65 63 75 72 69 74 79 20 28 6f 70 74 69 6f 6e 61 6c 20 61 75 74 68 65 6e 74 69 63 61 | ed.security.(optional.authentica |
95240 | 74 69 6f 6e 20 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 29 2e 00 56 79 4f 53 20 6c 65 74 73 20 | tion.and.encryption)..VyOS.lets. |
95260 | 79 6f 75 20 63 6f 6e 74 72 6f 6c 20 74 72 61 66 66 69 63 20 69 6e 20 6d 61 6e 79 20 64 69 66 66 | you.control.traffic.in.many.diff |
95280 | 65 72 65 6e 74 20 77 61 79 73 2c 20 68 65 72 65 20 77 65 20 77 69 6c 6c 20 63 6f 76 65 72 20 65 | erent.ways,.here.we.will.cover.e |
952a0 | 76 65 72 79 20 70 6f 73 73 69 62 69 6c 69 74 79 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 | very.possibility..You.can.config |
952c0 | 75 72 65 20 61 73 20 6d 61 6e 79 20 70 6f 6c 69 63 69 65 73 20 61 73 20 79 6f 75 20 77 61 6e 74 | ure.as.many.policies.as.you.want |
952e0 | 2c 20 62 75 74 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f 20 61 | ,.but.you.will.only.be.able.to.a |
95300 | 70 70 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e | pply.one.policy.per.interface.an |
95320 | 64 20 64 69 72 65 63 74 69 6f 6e 20 28 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 | d.direction.(inbound.or.outbound |
95340 | 29 2e 00 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 3a 61 62 62 72 3a 60 46 52 52 20 | )..VyOS.makes.use.of.:abbr:`FRR. |
95360 | 28 46 72 65 65 20 52 61 6e 67 65 20 52 6f 75 74 69 6e 67 29 60 20 61 6e 64 20 77 65 20 77 6f 75 | (Free.Range.Routing)`.and.we.wou |
95380 | 6c 64 20 6c 69 6b 65 20 74 6f 20 74 68 61 6e 6b 20 74 68 65 6d 20 66 6f 72 20 74 68 65 69 72 20 | ld.like.to.thank.them.for.their. |
953a0 | 65 66 66 6f 72 74 21 00 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 4c 69 6e 75 78 20 | effort!.VyOS.makes.use.of.Linux. |
953c0 | 60 6e 65 74 66 69 6c 74 65 72 20 3c 68 74 74 70 73 3a 2f 2f 6e 65 74 66 69 6c 74 65 72 2e 6f 72 | `netfilter.<https://netfilter.or |
953e0 | 67 2f 3e 60 5f 20 66 6f 72 20 70 61 63 6b 65 74 20 66 69 6c 74 65 72 69 6e 67 2e 00 56 79 4f 53 | g/>`_.for.packet.filtering..VyOS |
95400 | 20 6e 6f 74 20 6f 6e 6c 79 20 63 61 6e 20 6e 6f 77 20 6d 61 6e 61 67 65 20 63 65 72 74 69 66 69 | .not.only.can.now.manage.certifi |
95420 | 63 61 74 65 73 20 69 73 73 75 65 64 20 62 79 20 33 72 64 20 70 61 72 74 79 20 43 65 72 74 69 66 | cates.issued.by.3rd.party.Certif |
95440 | 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 69 65 73 2c 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 61 | icate.Authorities,.it.can.also.a |
95460 | 63 74 20 61 73 20 61 20 43 41 20 6f 6e 20 69 74 73 20 6f 77 6e 2e 20 59 6f 75 20 63 61 6e 20 63 | ct.as.a.CA.on.its.own..You.can.c |
95480 | 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 72 6f 6f 74 20 43 41 20 61 6e 64 20 73 69 67 6e 20 | reate.your.own.root.CA.and.sign. |
954a0 | 6b 65 79 73 20 77 69 74 68 20 69 74 20 62 79 20 6d 61 6b 69 6e 67 20 75 73 65 20 6f 66 20 73 6f | keys.with.it.by.making.use.of.so |
954c0 | 6d 65 20 73 69 6d 70 6c 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 | me.simple.op-mode.commands..VyOS |
954e0 | 20 6e 6f 77 20 61 6c 73 6f 20 68 61 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 | .now.also.has.the.ability.to.cre |
95500 | 61 74 65 20 43 41 73 2c 20 6b 65 79 73 2c 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 61 6e | ate.CAs,.keys,.Diffie-Hellman.an |
95520 | 64 20 6f 74 68 65 72 20 6b 65 79 70 61 69 72 73 20 66 72 6f 6d 20 61 6e 20 65 61 73 79 20 74 6f | d.other.keypairs.from.an.easy.to |
95540 | 20 61 63 63 65 73 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e | .access.operational.level.comman |
95560 | 64 2e 00 56 79 4f 53 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 | d..VyOS.operational.mode.command |
95580 | 73 20 61 72 65 20 6e 6f 74 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 67 65 6e | s.are.not.only.available.for.gen |
955a0 | 65 72 61 74 69 6e 67 20 6b 65 79 73 20 62 75 74 20 61 6c 73 6f 20 74 6f 20 64 69 73 70 6c 61 79 | erating.keys.but.also.to.display |
955c0 | 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 20 61 6e 20 48 54 54 50 20 41 50 49 2e | .them..VyOS.provide.an.HTTP.API. |
955e0 | 20 59 6f 75 20 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 65 78 65 63 75 74 65 20 6f 70 2d 6d 6f | .You.can.use.it.to.execute.op-mo |
95600 | 64 65 20 63 6f 6d 6d 61 6e 64 73 2c 20 75 70 64 61 74 65 20 56 79 4f 53 2c 20 73 65 74 20 6f 72 | de.commands,.update.VyOS,.set.or |
95620 | 20 64 65 6c 65 74 65 20 63 6f 6e 66 69 67 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 44 4e | .delete.config..VyOS.provides.DN |
95640 | 53 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 73 6d 61 6c 6c 20 6e 65 74 77 6f | S.infrastructure.for.small.netwo |
95660 | 72 6b 73 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 6c 69 67 68 74 77 | rks..It.is.designed.to.be.lightw |
95680 | 65 69 67 68 74 20 61 6e 64 20 68 61 76 65 20 61 20 73 6d 61 6c 6c 20 66 6f 6f 74 70 72 69 6e 74 | eight.and.have.a.small.footprint |
956a0 | 2c 20 73 75 69 74 61 62 6c 65 20 66 6f 72 20 72 65 73 6f 75 72 63 65 20 63 6f 6e 73 74 72 61 69 | ,.suitable.for.resource.constrai |
956c0 | 6e 65 64 20 72 6f 75 74 65 72 73 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 73 2e 20 46 6f 72 20 74 | ned.routers.and.firewalls..For.t |
956e0 | 68 69 73 20 77 65 20 75 74 69 6c 69 7a 65 20 50 6f 77 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 | his.we.utilize.PowerDNS.recursor |
95700 | 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 | ..VyOS.provides.High.Availabilit |
95720 | 79 20 73 75 70 70 6f 72 74 20 66 6f 72 20 44 48 43 50 20 73 65 72 76 65 72 2e 20 44 48 43 50 20 | y.support.for.DHCP.server..DHCP. |
95740 | 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 63 61 6e 20 61 63 74 20 69 6e 20 74 77 6f | High.Availability.can.act.in.two |
95760 | 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 3a 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 | .different.modes:.VyOS.provides. |
95780 | 61 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 | a.command.to.generate.a.connecti |
957a0 | 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e | on.profile.used.by.Windows.clien |
957c0 | 74 73 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 22 72 77 22 | ts.that.will.connect.to.the."rw" |
957e0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 76 65 72 2e 00 | .connection.on.our.VyOS.server.. |
95800 | 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 | VyOS.provides.policies.commands. |
95820 | 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 | exclusively.for.BGP.traffic.filt |
95840 | 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 61 73 2d 70 61 74 | ering.and.manipulation:.**as-pat |
95860 | 68 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 | h-list**.is.one.of.them..VyOS.pr |
95880 | 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 | ovides.policies.commands.exclusi |
958a0 | 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 | vely.for.BGP.traffic.filtering.a |
958c0 | 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 | nd.manipulation:.**community-lis |
958e0 | 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 | t**.is.one.of.them..VyOS.provide |
95900 | 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 | s.policies.commands.exclusively. |
95920 | 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 | for.BGP.traffic.filtering.and.ma |
95940 | 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a | nipulation:.**extcommunity-list* |
95960 | 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 | *.is.one.of.them..VyOS.provides. |
95980 | 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f | policies.commands.exclusively.fo |
959a0 | 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 | r.BGP.traffic.filtering.and.mani |
959c0 | 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 | pulation:.**large-community-list |
959e0 | 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 | **.is.one.of.them..VyOS.provides |
95a00 | 20 73 6f 6d 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 6f 6e 20 4f 70 | .some.operational.commands.on.Op |
95a20 | 65 6e 56 50 4e 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 | enVPN..VyOS.provides.support.for |
95a40 | 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 2e 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 6d 75 | .DHCP.failover..DHCP.failover.mu |
95a60 | 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 62 79 20 74 | st.be.configured.explicitly.by.t |
95a80 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 6e 74 73 2e 00 56 79 4f 53 20 70 72 | he.following.statements..VyOS.pr |
95aa0 | 6f 76 69 64 65 73 20 74 68 69 73 20 75 74 69 6c 69 74 79 20 74 6f 20 69 6d 70 6f 72 74 20 65 78 | ovides.this.utility.to.import.ex |
95ac0 | 69 73 74 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 65 73 2f 6b 65 79 20 66 69 6c 65 73 20 64 69 | isting.certificates/key.files.di |
95ae0 | 72 65 63 74 6c 79 20 69 6e 74 6f 20 50 4b 49 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 65 2e 20 50 72 | rectly.into.PKI.from.op-mode..Pr |
95b00 | 65 76 69 6f 75 73 20 74 6f 20 56 79 4f 53 20 31 2e 34 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 | evious.to.VyOS.1.4,.certificates |
95b20 | 20 77 65 72 65 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 2f 63 6f 6e 66 69 67 20 66 | .were.stored.under.the./config.f |
95b40 | 6f 6c 64 65 72 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 | older.permanently.and.will.be.re |
95b60 | 74 61 69 6e 65 64 20 70 6f 73 74 20 75 70 67 72 61 64 65 2e 00 56 79 4f 53 20 72 65 76 65 72 73 | tained.post.upgrade..VyOS.revers |
95b80 | 65 2d 70 72 6f 78 79 20 69 73 20 62 61 6c 61 6e 63 65 72 20 61 6e 64 20 70 72 6f 78 79 20 73 65 | e-proxy.is.balancer.and.proxy.se |
95ba0 | 72 76 65 72 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 | rver.that.provides.high-availabi |
95bc0 | 6c 69 74 79 2c 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 61 6e 64 20 70 72 6f 78 79 69 6e | lity,.load.balancing.and.proxyin |
95be0 | 67 20 66 6f 72 20 54 43 50 20 28 6c 65 76 65 6c 20 34 29 20 61 6e 64 20 48 54 54 50 2d 62 61 73 | g.for.TCP.(level.4).and.HTTP-bas |
95c00 | 65 64 20 28 6c 65 76 65 6c 20 37 29 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 56 79 4f 53 20 | ed.(level.7).applications..VyOS. |
95c20 | 73 75 70 70 6f 72 74 73 20 3a 61 62 62 72 3a 60 50 49 4d 2d 53 4d 20 28 50 49 4d 20 53 70 61 72 | supports.:abbr:`PIM-SM.(PIM.Spar |
95c40 | 73 65 20 4d 6f 64 65 29 60 20 61 73 20 77 65 6c 6c 20 61 73 20 3a 61 62 62 72 3a 60 49 47 4d 50 | se.Mode)`.as.well.as.:abbr:`IGMP |
95c60 | 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 | .(Internet.Group.Management.Prot |
95c80 | 6f 63 6f 6c 29 60 20 76 32 20 61 6e 64 20 76 33 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 | ocol)`.v2.and.v3.VyOS.supports.b |
95ca0 | 6f 74 68 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 33 | oth.IGMP.version.2.and.version.3 |
95cc0 | 20 28 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d | .(which.allows.source-specific.m |
95ce0 | 75 6c 74 69 63 61 73 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 4d 4c | ulticast)..VyOS.supports.both.ML |
95d00 | 44 20 76 65 72 73 69 6f 6e 20 31 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 32 20 28 77 68 69 63 68 | D.version.1.and.version.2.(which |
95d20 | 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 | .allows.source-specific.multicas |
95d40 | 74 29 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e | t)..VyOS.supports.flow-accountin |
95d60 | 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 | g.for.both.IPv4.and.IPv6.traffic |
95d80 | 2e 20 54 68 65 20 73 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f | ..The.system.acts.as.a.flow.expo |
95da0 | 72 74 65 72 2c 20 61 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 | rter,.and.you.are.free.to.use.it |
95dc0 | 20 77 69 74 68 20 61 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 | .with.any.compatible.collector.. |
95de0 | 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 49 4b 45 76 32 20 72 65 6d | VyOS.supports.multiple.IKEv2.rem |
95e00 | 6f 74 65 2d 61 63 63 65 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 45 76 65 72 79 20 63 6f | ote-access.connections..Every.co |
95e20 | 6e 6e 65 63 74 69 6f 6e 20 63 61 6e 20 68 61 76 65 20 69 74 73 20 64 65 64 69 63 61 74 65 64 20 | nnection.can.have.its.dedicated. |
95e40 | 49 4b 45 2f 45 53 50 20 63 69 70 68 65 72 73 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 72 | IKE/ESP.ciphers,.certificates.or |
95e60 | 20 6c 6f 63 61 6c 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 2e 67 2e 20 69 | .local.listen.address.for.e.g..i |
95e80 | 6e 62 6f 75 6e 64 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 00 56 79 4f 53 20 73 75 70 70 | nbound.load.balancing..VyOS.supp |
95ea0 | 6f 72 74 73 20 6f 6e 6c 69 6e 65 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 75 70 64 61 74 65 73 | orts.online.checking.for.updates |
95ec0 | 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 | .VyOS.supports.sFlow.accounting. |
95ee0 | 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 20 | for.both.IPv4.and.IPv6.traffic.. |
95f00 | 54 68 65 20 73 79 73 74 65 6d 20 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 | The.system.acts.as.a.flow.export |
95f20 | 65 72 2c 20 61 6e 64 20 79 6f 75 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 20 77 | er,.and.you.are.free.to.use.it.w |
95f40 | 69 74 68 20 61 6e 79 20 63 6f 6d 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 56 79 | ith.any.compatible.collector..Vy |
95f60 | 4f 53 20 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 74 69 6d 65 6f 75 74 73 20 66 6f 72 | OS.supports.setting.timeouts.for |
95f80 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 63 6f | .connections.according.to.the.co |
95fa0 | 6e 6e 65 63 74 69 6f 6e 20 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 20 74 69 6d 65 6f | nnection.type..You.can.set.timeo |
95fc0 | 75 74 20 76 61 6c 75 65 73 20 66 6f 72 20 67 65 6e 65 72 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e | ut.values.for.generic.connection |
95fe0 | 73 2c 20 66 6f 72 20 49 43 4d 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 55 44 50 20 63 6f 6e | s,.for.ICMP.connections,.UDP.con |
96000 | 6e 65 63 74 69 6f 6e 73 2c 20 6f 72 20 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | nections,.or.for.TCP.connections |
96020 | 20 69 6e 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 64 69 66 66 65 72 65 6e 74 20 73 74 61 74 65 73 | .in.a.number.of.different.states |
96040 | 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 65 74 74 69 6e 67 20 75 70 20 50 50 50 6f 45 | ..VyOS.supports.setting.up.PPPoE |
96060 | 20 69 6e 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 20 74 6f 20 61 20 50 50 50 6f | .in.two.different.ways.to.a.PPPo |
96080 | 45 20 69 6e 74 65 72 6e 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 | E.internet.connection..This.is.b |
960a0 | 65 63 61 75 73 65 20 6d 6f 73 74 20 49 53 50 73 20 70 72 6f 76 69 64 65 20 61 20 6d 6f 64 65 6d | ecause.most.ISPs.provide.a.modem |
960c0 | 20 74 68 61 74 20 69 73 20 61 6c 73 6f 20 61 20 77 69 72 65 6c 65 73 73 20 72 6f 75 74 65 72 2e | .that.is.also.a.wireless.router. |
960e0 | 00 56 79 4f 53 20 75 73 65 73 20 49 53 43 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 62 | .VyOS.uses.ISC.DHCP.server.for.b |
96100 | 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e | oth.IPv4.and.IPv6.address.assign |
96120 | 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 4b 65 61 20 44 48 43 50 20 73 65 72 76 65 72 20 | ment..VyOS.uses.Kea.DHCP.server. |
96140 | 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 | for.both.IPv4.and.IPv6.address.a |
96160 | 73 73 69 67 6e 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 65 73 20 5b 46 52 52 6f 75 74 69 6e 67 5d | ssignment..VyOS.uses.[FRRouting] |
96180 | 28 68 74 74 70 73 3a 2f 2f 66 72 72 6f 75 74 69 6e 67 2e 6f 72 67 2f 29 20 61 73 20 74 68 65 20 | (https://frrouting.org/).as.the. |
961a0 | 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 61 6e 64 20 73 74 | control.plane.for.dynamic.and.st |
961c0 | 61 74 69 63 20 72 6f 75 74 69 6e 67 2e 20 54 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e | atic.routing..The.routing.daemon |
961e0 | 20 62 65 68 61 76 69 6f 72 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 64 75 72 69 6e 67 | .behavior.can.be.adjusted.during |
96200 | 20 72 75 6e 74 69 6d 65 2c 20 62 75 74 20 72 65 71 75 69 72 65 20 65 69 74 68 65 72 20 61 20 72 | .runtime,.but.require.either.a.r |
96220 | 65 73 74 61 72 74 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2c 20 6f 72 | estart.of.the.routing.daemon,.or |
96240 | 20 61 20 72 65 62 6f 6f 74 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 2e 00 56 79 4f 53 20 75 73 | .a.reboot.of.the.system..VyOS.us |
96260 | 65 73 20 74 68 65 20 60 69 6e 74 65 72 66 61 63 65 73 20 77 77 61 6e 60 20 73 75 62 73 79 73 74 | es.the.`interfaces.wwan`.subsyst |
96280 | 65 6d 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 56 79 4f 53 20 75 73 65 73 20 | em.for.configuration..VyOS.uses. |
962a0 | 74 68 65 20 60 6d 69 72 72 6f 72 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | the.`mirror`.option.to.configure |
962c0 | 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | .port.mirroring..The.configurati |
962e0 | 6f 6e 20 69 73 20 64 69 76 69 64 65 64 20 69 6e 74 6f 20 32 20 64 69 66 66 65 72 65 6e 74 20 64 | on.is.divided.into.2.different.d |
96300 | 69 72 65 63 74 69 6f 6e 73 2e 20 44 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 73 68 6f | irections..Destination.ports.sho |
96320 | 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 | uld.be.configured.for.different. |
96340 | 74 72 61 66 66 69 63 20 64 69 72 65 63 74 69 6f 6e 73 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 | traffic.directions..VyOS.utilize |
96360 | 73 20 60 61 63 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 3a 61 62 62 72 3a | s.`accel-ppp`_.to.provide.:abbr: |
96380 | 60 49 50 6f 45 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 45 74 | `IPoE.(Internet.Protocol.over.Et |
963a0 | 68 65 72 6e 65 74 29 60 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 | hernet)`.server.functionality..I |
963c0 | 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 | t.can.be.used.with.local.authent |
963e0 | 69 63 61 74 69 6f 6e 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 20 6f 72 20 61 20 63 6f 6e 6e 65 | ication.(mac-address).or.a.conne |
96400 | 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 | cted.RADIUS.server..VyOS.utilize |
96420 | 73 20 60 61 63 63 65 6c 2d 70 70 70 60 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 50 50 50 6f 45 20 | s.`accel-ppp`_.to.provide.PPPoE. |
96440 | 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 | server.functionality..It.can.be. |
96460 | 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f | used.with.local.authentication.o |
96480 | 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f | r.a.connected.RADIUS.server..VyO |
964a0 | 53 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 65 | S.utilizes.accel-ppp_.to.provide |
964c0 | 20 4c 32 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 | .L2TP.server.functionality..It.c |
964e0 | 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 | an.be.used.with.local.authentica |
96500 | 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 | tion.or.a.connected.RADIUS.serve |
96520 | 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 | r..VyOS.utilizes.accel-ppp_.to.p |
96540 | 72 6f 76 69 64 65 20 53 53 54 50 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 | rovide.SSTP.server.functionality |
96560 | 2e 20 57 65 20 73 75 70 70 6f 72 74 20 62 6f 74 68 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 | ..We.support.both.local.and.RADI |
96580 | 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 57 41 4e 20 4c 6f 61 64 20 42 61 6c 61 | US.authentication..WAN.Load.Bala |
965a0 | 63 69 6e 67 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 64 79 6e | cing.should.not.be.used.when.dyn |
965c0 | 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 65 64 2f 6e 65 | amic.routing.protocol.is.used/ne |
965e0 | 65 64 65 64 2e 20 54 68 69 73 20 66 65 61 74 75 72 65 20 63 72 65 61 74 65 73 20 63 75 73 74 6f | eded..This.feature.creates.custo |
96600 | 6d 69 7a 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 6e 64 20 66 69 72 65 77 61 6c | mized.routing.tables.and.firewal |
96620 | 6c 20 72 75 6c 65 73 2c 20 74 68 61 74 20 6d 61 6b 65 73 20 69 74 20 69 6e 63 6f 6d 70 61 74 69 | l.rules,.that.makes.it.incompati |
96640 | 62 6c 65 20 74 6f 20 75 73 65 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | ble.to.use.with.routing.protocol |
96660 | 73 2e 00 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 31 60 00 57 41 4e 20 6c | s..WAN.interface.on.`eth1`.WAN.l |
96680 | 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 00 57 4c 41 4e 2f 57 49 46 49 20 2d 20 57 69 72 65 6c 65 | oad.balancing.WLAN/WIFI.-.Wirele |
966a0 | 73 73 20 4c 41 4e 00 57 4d 4d 2d 50 53 20 55 6e 73 63 68 65 64 75 6c 65 64 20 41 75 74 6f 6d 61 | ss.LAN.WMM-PS.Unscheduled.Automa |
966c0 | 74 69 63 20 50 6f 77 65 72 20 53 61 76 65 20 44 65 6c 69 76 65 72 79 20 5b 55 2d 41 50 53 44 5d | tic.Power.Save.Delivery.[U-APSD] |
966e0 | 00 57 50 41 20 70 61 73 73 70 68 72 61 73 65 20 60 60 31 32 33 34 35 36 37 38 60 60 00 57 57 41 | .WPA.passphrase.``12345678``.WWA |
96700 | 4e 20 2d 20 57 69 72 65 6c 65 73 73 20 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 00 57 | N.-.Wireless.Wide-Area-Network.W |
96720 | 61 72 6e 69 6e 67 00 57 61 72 6e 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 00 57 65 20 61 73 73 | arning.Warning.conditions.We.ass |
96740 | 75 6d 65 20 74 68 61 74 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 61 73 20 73 74 61 | ume.that.the.LEFT.router.has.sta |
96760 | 74 69 63 20 31 39 32 2e 30 2e 32 2e 31 30 20 61 64 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2c 20 | tic.192.0.2.10.address.on.eth0,. |
96780 | 61 6e 64 20 74 68 65 20 52 49 47 48 54 20 72 6f 75 74 65 72 20 68 61 73 20 61 20 64 79 6e 61 6d | and.the.RIGHT.router.has.a.dynam |
967a0 | 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2e 00 57 65 20 63 61 6e 20 61 6c 73 6f 20 | ic.address.on.eth0..We.can.also. |
967c0 | 63 72 65 61 74 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 43 65 | create.the.certificates.using.Ce |
967e0 | 72 62 6f 72 74 20 77 68 69 63 68 20 69 73 20 61 6e 20 65 61 73 79 2d 74 6f 2d 75 73 65 20 63 6c | rbort.which.is.an.easy-to-use.cl |
96800 | 69 65 6e 74 20 74 68 61 74 20 66 65 74 63 68 65 73 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 | ient.that.fetches.a.certificate. |
96820 | 66 72 6f 6d 20 4c 65 74 27 73 20 45 6e 63 72 79 70 74 20 61 6e 20 6f 70 65 6e 20 63 65 72 74 69 | from.Let's.Encrypt.an.open.certi |
96840 | 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 6c 61 75 6e 63 68 65 64 20 62 79 20 74 68 65 | ficate.authority.launched.by.the |
96860 | 20 45 46 46 2c 20 4d 6f 7a 69 6c 6c 61 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 61 6e 64 20 64 65 | .EFF,.Mozilla,.and.others.and.de |
96880 | 70 6c 6f 79 73 20 69 74 20 74 6f 20 61 20 77 65 62 20 73 65 72 76 65 72 2e 00 57 65 20 63 61 6e | ploys.it.to.a.web.server..We.can |
968a0 | 20 62 75 69 6c 64 20 72 6f 75 74 65 2d 6d 61 70 73 20 66 6f 72 20 69 6d 70 6f 72 74 20 62 61 73 | .build.route-maps.for.import.bas |
968c0 | 65 64 20 6f 6e 20 74 68 65 73 65 20 73 74 61 74 65 73 2e 20 48 65 72 65 20 69 73 20 61 20 73 69 | ed.on.these.states..Here.is.a.si |
968e0 | 6d 70 6c 65 20 52 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 65 72 65 20 60 | mple.RPKI.configuration,.where.` |
96900 | 72 6f 75 74 69 6e 61 74 6f 72 60 20 69 73 20 74 68 65 20 52 50 4b 49 2d 76 61 6c 69 64 61 74 69 | routinator`.is.the.RPKI-validati |
96920 | 6e 67 20 22 63 61 63 68 65 22 20 73 65 72 76 65 72 20 77 69 74 68 20 69 70 20 60 31 39 32 2e 30 | ng."cache".server.with.ip.`192.0 |
96940 | 2e 32 2e 31 60 3a 00 57 65 20 63 61 6e 27 74 20 73 75 70 70 6f 72 74 20 61 6c 6c 20 64 69 73 70 | .2.1`:.We.can't.support.all.disp |
96960 | 6c 61 79 73 20 66 72 6f 6d 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 2e 20 49 66 20 79 6f 75 72 | lays.from.the.beginning..If.your |
96980 | 20 64 69 73 70 6c 61 79 20 74 79 70 65 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 70 6c 65 61 73 65 | .display.type.is.missing,.please |
969a0 | 20 63 72 65 61 74 65 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 20 76 69 61 20 50 68 | .create.a.feature.request.via.Ph |
969c0 | 61 62 72 69 63 61 74 6f 72 5f 2e 00 57 65 20 63 6f 6e 66 69 67 75 72 65 20 61 20 6e 65 77 20 63 | abricator_..We.configure.a.new.c |
969e0 | 6f 6e 6e 65 63 74 69 6f 6e 20 6e 61 6d 65 64 20 60 60 72 77 60 60 20 66 6f 72 20 72 6f 61 64 2d | onnection.named.``rw``.for.road- |
96a00 | 77 61 72 72 69 6f 72 2c 20 74 68 61 74 20 69 64 65 6e 74 69 66 69 65 73 20 69 74 73 65 6c 66 20 | warrior,.that.identifies.itself. |
96a20 | 61 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 60 60 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 73 20 | as.``192.0.2.1``.to.the.clients. |
96a40 | 61 6e 64 20 75 73 65 73 20 74 68 65 20 60 60 76 79 6f 73 60 60 20 63 65 72 74 69 66 69 63 61 74 | and.uses.the.``vyos``.certificat |
96a60 | 65 20 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 60 43 41 63 65 72 74 5f 43 6c 61 73 73 33 5f 52 | e.signed.by.the.`CAcert_Class3_R |
96a80 | 6f 6f 74 60 60 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 2e 20 57 65 20 73 65 6c 65 63 74 | oot``.intermediate.CA..We.select |
96aa0 | 20 6f 75 72 20 70 72 65 76 69 6f 75 73 6c 79 20 73 70 65 63 69 66 69 65 64 20 49 4b 45 2f 45 53 | .our.previously.specified.IKE/ES |
96ac0 | 50 20 67 72 6f 75 70 73 20 61 6e 64 20 61 6c 73 6f 20 6c 69 6e 6b 20 74 68 65 20 49 50 20 61 64 | P.groups.and.also.link.the.IP.ad |
96ae0 | 64 72 65 73 73 20 70 6f 6f 6c 20 74 6f 20 64 72 61 77 20 61 64 64 72 65 73 73 65 73 20 66 72 6f | dress.pool.to.draw.addresses.fro |
96b00 | 6d 2e 00 57 65 20 63 6f 75 6c 64 20 65 78 70 61 6e 64 20 6f 6e 20 74 68 69 73 20 61 6e 64 20 61 | m..We.could.expand.on.this.and.a |
96b20 | 6c 73 6f 20 64 65 6e 79 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 | lso.deny.link.local.and.multicas |
96b40 | 74 20 69 6e 20 74 68 65 20 72 75 6c 65 20 32 30 20 61 63 74 69 6f 6e 20 64 65 6e 79 2e 00 57 65 | t.in.the.rule.20.action.deny..We |
96b60 | 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 43 4c 49 20 6e 6f 64 65 73 20 66 6f 72 20 65 76 65 72 79 | .do.not.have.CLI.nodes.for.every |
96b80 | 20 73 69 6e 67 6c 65 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 2e 20 49 66 20 61 6e 20 6f 70 | .single.OpenVPN.option..If.an.op |
96ba0 | 74 69 6f 6e 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 | tion.is.missing,.a.feature.reque |
96bc0 | 73 74 20 73 68 6f 75 6c 64 20 62 65 20 6f 70 65 6e 65 64 20 61 74 20 50 68 61 62 72 69 63 61 74 | st.should.be.opened.at.Phabricat |
96be0 | 6f 72 5f 20 73 6f 20 61 6c 6c 20 75 73 65 72 73 20 63 61 6e 20 62 65 6e 65 66 69 74 20 66 72 6f | or_.so.all.users.can.benefit.fro |
96c00 | 6d 20 69 74 20 28 73 65 65 20 3a 72 65 66 3a 60 69 73 73 75 65 73 5f 66 65 61 74 75 72 65 73 60 | m.it.(see.:ref:`issues_features` |
96c20 | 29 2e 00 57 65 20 64 6f 6e 27 74 20 72 65 63 6f 6d 65 6e 64 20 74 6f 20 75 73 65 20 61 72 67 75 | )..We.don't.recomend.to.use.argu |
96c40 | 6d 65 6e 74 73 2e 20 55 73 69 6e 67 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 69 73 20 6d 6f 72 | ments..Using.environments.is.mor |
96c60 | 65 20 70 72 65 66 66 65 72 65 62 6c 65 2e 00 57 65 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e | e.preffereble..We.generate.a.con |
96c80 | 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 | nection.profile.used.by.Windows. |
96ca0 | 63 6c 69 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 | clients.that.will.connect.to.the |
96cc0 | 20 22 72 77 22 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 | ."rw".connection.on.our.VyOS.ser |
96ce0 | 76 65 72 20 6f 6e 20 74 68 65 20 56 50 4e 20 73 65 72 76 65 72 73 20 49 50 20 61 64 64 72 65 73 | ver.on.the.VPN.servers.IP.addres |
96d00 | 73 2f 66 71 64 6e 20 60 76 70 6e 2e 76 79 6f 73 2e 6e 65 74 60 2e 00 57 65 20 6c 69 73 74 65 6e | s/fqdn.`vpn.vyos.net`..We.listen |
96d20 | 20 6f 6e 20 70 6f 72 74 20 35 31 38 32 30 00 57 65 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 | .on.port.51820.We.need.to.genera |
96d40 | 74 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 77 68 69 63 68 20 61 75 74 68 65 6e 74 | te.the.certificate.which.authent |
96d60 | 69 63 61 74 65 73 20 75 73 65 72 73 20 77 68 6f 20 61 74 74 65 6d 70 74 20 74 6f 20 61 63 63 65 | icates.users.who.attempt.to.acce |
96d80 | 73 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 20 74 68 72 6f 75 67 68 20 | ss.the.network.resource.through. |
96da0 | 74 68 65 20 53 53 4c 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 | the.SSL.VPN.tunnels..The.followi |
96dc0 | 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 73 65 6c 66 20 73 | ng.commands.will.create.a.self.s |
96de0 | 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 73 | igned.certificates.and.will.be.s |
96e00 | 74 6f 72 65 64 20 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 65 20 6e 6f 77 20 75 | tored.in.configuration:.We.now.u |
96e20 | 74 69 6c 69 7a 65 20 60 74 75 6e 65 64 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 72 65 73 6f 75 | tilize.`tuned`.for.dynamic.resou |
96e40 | 72 63 65 20 62 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 70 72 6f 66 69 6c 65 73 2e | rce.balancing.based.on.profiles. |
96e60 | 00 57 65 20 6f 6e 6c 79 20 61 6c 6c 6f 77 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 | .We.only.allow.the.192.168.2.0/2 |
96e80 | 34 20 73 75 62 6e 65 74 20 74 6f 20 74 72 61 76 65 6c 20 6f 76 65 72 20 74 68 65 20 74 75 6e 6e | 4.subnet.to.travel.over.the.tunn |
96ea0 | 65 6c 00 57 65 20 6f 6e 6c 79 20 6e 65 65 64 20 61 20 73 69 6e 67 6c 65 20 73 74 65 70 20 66 6f | el.We.only.need.a.single.step.fo |
96ec0 | 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 3a 00 57 65 20 72 6f 75 74 65 20 61 6c 6c 20 74 | r.this.interface:.We.route.all.t |
96ee0 | 72 61 66 66 69 63 20 66 6f 72 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 6e 65 | raffic.for.the.192.168.2.0/24.ne |
96f00 | 74 77 6f 72 6b 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 60 77 67 30 31 60 00 57 65 20 75 73 65 | twork.to.interface.`wg01`.We.use |
96f20 | 20 61 20 76 6f 6e 74 61 69 6e 65 72 20 70 72 6f 76 69 64 69 6e 67 20 74 68 65 20 54 41 43 41 43 | .a.vontainer.providing.the.TACAC |
96f40 | 53 20 73 65 72 76 65 20 72 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2e 00 57 65 20 77 69 6c | S.serve.rin.this.example..We.wil |
96f60 | 6c 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 74 72 61 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 66 72 | l.only.accept.traffic.comming.fr |
96f80 | 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 | om.interface.eth0,.protocol.tcp. |
96fa0 | 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 6c 6c 20 6f | and.destination.port.1122..All.o |
96fc0 | 74 68 65 72 20 74 72 61 66 66 69 63 20 74 72 61 73 70 61 73 73 69 6e 67 20 74 68 65 20 72 6f 75 | ther.traffic.traspassing.the.rou |
96fe0 | 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 57 65 27 6c 6c 20 63 6f 6e | ter.should.be.blocked..We'll.con |
97000 | 66 69 67 75 72 65 20 4f 70 65 6e 56 50 4e 20 75 73 69 6e 67 20 73 65 6c 66 2d 73 69 67 6e 65 64 | figure.OpenVPN.using.self-signed |
97020 | 20 63 65 72 74 69 66 69 63 61 74 65 73 2c 20 61 6e 64 20 74 68 65 6e 20 64 69 73 63 75 73 73 20 | .certificates,.and.then.discuss. |
97040 | 74 68 65 20 6c 65 67 61 63 79 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 2e 00 | the.legacy.pre-shared.key.mode.. |
97060 | 57 65 27 6c 6c 20 75 73 65 20 74 68 65 20 49 4b 45 20 61 6e 64 20 45 53 50 20 67 72 6f 75 70 73 | We'll.use.the.IKE.and.ESP.groups |
97080 | 20 63 72 65 61 74 65 64 20 61 62 6f 76 65 20 66 6f 72 20 74 68 69 73 20 56 50 4e 2e 20 42 65 63 | .created.above.for.this.VPN..Bec |
970a0 | 61 75 73 65 20 77 65 20 6e 65 65 64 20 61 63 63 65 73 73 20 74 6f 20 32 20 64 69 66 66 65 72 65 | ause.we.need.access.to.2.differe |
970c0 | 6e 74 20 73 75 62 6e 65 74 73 20 6f 6e 20 74 68 65 20 66 61 72 20 73 69 64 65 2c 20 77 65 20 77 | nt.subnets.on.the.far.side,.we.w |
970e0 | 69 6c 6c 20 6e 65 65 64 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 2e 20 | ill.need.two.different.tunnels.. |
97100 | 49 66 20 79 6f 75 20 63 68 61 6e 67 65 64 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 | If.you.changed.the.names.of.the. |
97120 | 45 53 50 20 67 72 6f 75 70 20 61 6e 64 20 49 4b 45 20 67 72 6f 75 70 20 69 6e 20 74 68 65 20 70 | ESP.group.and.IKE.group.in.the.p |
97140 | 72 65 76 69 6f 75 73 20 73 74 65 70 2c 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 75 73 65 20 | revious.step,.make.sure.you.use. |
97160 | 74 68 65 20 63 6f 72 72 65 63 74 20 6e 61 6d 65 73 20 68 65 72 65 20 74 6f 6f 2e 00 57 65 62 20 | the.correct.names.here.too..Web. |
97180 | 50 72 6f 78 79 20 41 75 74 6f 64 69 73 63 6f 76 65 72 79 20 28 57 50 41 44 29 20 55 52 4c 00 57 | Proxy.Autodiscovery.(WPAD).URL.W |
971a0 | 65 62 70 72 6f 78 79 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 20 6c 69 73 74 65 6e 20 | ebproxy.Webserver.should.listen. |
971c0 | 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 6f 72 74 2e 00 57 65 62 73 65 72 76 65 72 20 73 68 6f | on.specified.port..Webserver.sho |
971e0 | 75 6c 64 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 49 50 20 | uld.only.listen.on.specified.IP. |
97200 | 61 64 64 72 65 73 73 00 57 68 65 6e 20 4c 44 50 20 69 73 20 77 6f 72 6b 69 6e 67 2c 20 79 6f 75 | address.When.LDP.is.working,.you |
97220 | 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 73 65 65 20 6c 61 62 65 6c 20 69 6e 66 6f 72 | .will.be.able.to.see.label.infor |
97240 | 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 60 60 73 68 6f 77 20 | mation.in.the.outcome.of.``show. |
97260 | 69 70 20 72 6f 75 74 65 60 60 2e 20 42 65 73 69 64 65 73 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 | ip.route``..Besides.that.informa |
97280 | 74 69 6f 6e 2c 20 74 68 65 72 65 20 61 72 65 20 61 6c 73 6f 20 73 70 65 63 69 66 69 63 20 2a 73 | tion,.there.are.also.specific.*s |
972a0 | 68 6f 77 2a 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 4c 44 50 3a 00 57 68 65 6e 20 50 49 4d 20 | how*.commands.for.LDP:.When.PIM. |
972c0 | 72 65 63 65 69 76 65 73 20 61 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 74 68 65 20 73 | receives.a.register.packet.the.s |
972e0 | 6f 75 72 63 65 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 | ource.of.the.packet.will.be.comp |
97300 | 61 72 65 64 20 74 6f 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 73 70 65 63 69 66 69 65 | ared.to.the.prefix-list.specifie |
97320 | 64 2c 20 61 6e 64 20 69 66 20 61 20 70 65 72 6d 69 74 20 69 73 20 72 65 63 65 69 76 65 64 20 6e | d,.and.if.a.permit.is.received.n |
97340 | 6f 72 6d 61 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 63 6f 6e 74 69 6e 75 65 73 2e 20 49 66 20 61 | ormal.processing.continues..If.a |
97360 | 20 64 65 6e 79 20 69 73 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 74 68 65 20 73 6f 75 72 63 65 | .deny.is.returned.for.the.source |
97380 | 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 | .address.of.the.register.packet. |
973a0 | 61 20 72 65 67 69 73 74 65 72 20 73 74 6f 70 20 6d 65 73 73 61 67 65 20 69 73 20 73 65 6e 74 20 | a.register.stop.message.is.sent. |
973c0 | 74 6f 20 74 68 65 20 73 6f 75 72 63 65 2e 00 57 68 65 6e 20 56 52 46 73 20 61 72 65 20 75 73 65 | to.the.source..When.VRFs.are.use |
973e0 | 64 20 69 74 20 69 73 20 6e 6f 74 20 6f 6e 6c 79 20 6d 61 6e 64 61 74 6f 72 79 20 74 6f 20 63 72 | d.it.is.not.only.mandatory.to.cr |
97400 | 65 61 74 65 20 61 20 56 52 46 20 62 75 74 20 61 6c 73 6f 20 74 68 65 20 56 52 46 20 69 74 73 65 | eate.a.VRF.but.also.the.VRF.itse |
97420 | 6c 66 20 6e 65 65 64 73 20 74 6f 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e | lf.needs.to.be.assigned.to.an.in |
97440 | 74 65 72 66 61 63 65 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e | terface..When.a.``custom``.DynDN |
97460 | 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 60 3c 73 65 72 76 65 72 3e | S.provider.is.used.the.`<server> |
97480 | 60 20 77 68 65 72 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 62 65 69 6e | `.where.update.requests.are.bein |
974a0 | 67 20 73 65 6e 74 20 74 6f 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 57 68 65 | g.sent.to.must.be.specified..Whe |
974c0 | 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 | n.a.``custom``.DynDNS.provider.i |
974e0 | 73 20 75 73 65 64 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d | s.used.the.protocol.used.for.com |
97500 | 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 20 | municating.to.the.provider.must. |
97520 | 62 65 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 2e | be.specified.under.`<protocol>`. |
97540 | 20 53 65 65 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c | .See.the.embedded.completion.hel |
97560 | 70 65 72 20 66 6f 72 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 | per.for.available.protocols..Whe |
97580 | 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 | n.a.``custom``.DynDNS.provider.i |
975a0 | 73 20 75 73 65 64 2c 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f | s.used,.the.protocol.used.for.co |
975c0 | 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 | mmunicating.to.the.provider.must |
975e0 | 20 62 65 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 | .be.specified.under.`<protocol>` |
97600 | 2e 20 53 65 65 20 74 68 65 20 65 6d 62 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 | ..See.the.embedded.completion.he |
97620 | 6c 70 65 72 20 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 | lper.when.entering.above.command |
97640 | 20 66 6f 72 20 61 76 61 69 6c 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 6e 20 61 | .for.available.protocols..When.a |
97660 | 20 66 61 69 6c 6f 76 65 72 20 6f 63 63 75 72 73 20 69 6e 20 61 63 74 69 76 65 2d 62 61 63 6b 75 | .failover.occurs.in.active-backu |
97680 | 70 20 6d 6f 64 65 2c 20 62 6f 6e 64 69 6e 67 20 77 69 6c 6c 20 69 73 73 75 65 20 6f 6e 65 20 6f | p.mode,.bonding.will.issue.one.o |
976a0 | 72 20 6d 6f 72 65 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 6f 6e 20 74 68 65 20 6e 65 | r.more.gratuitous.ARPs.on.the.ne |
976c0 | 77 6c 79 20 61 63 74 69 76 65 20 73 6c 61 76 65 2e 20 4f 6e 65 20 67 72 61 74 75 69 74 6f 75 73 | wly.active.slave..One.gratuitous |
976e0 | 20 41 52 50 20 69 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d | .ARP.is.issued.for.the.bonding.m |
97700 | 61 73 74 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 65 61 63 68 20 56 4c 41 4e 20 69 6e | aster.interface.and.each.VLAN.in |
97720 | 74 65 72 66 61 63 65 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 62 6f 76 65 20 69 74 2c 20 70 72 | terfaces.configured.above.it,.pr |
97740 | 6f 76 69 64 65 64 20 74 68 61 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 20 61 74 | ovided.that.the.interface.has.at |
97760 | 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 | .least.one.IP.address.configured |
97780 | 2e 20 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 69 73 73 75 65 64 20 66 6f 72 20 56 4c 41 | ..Gratuitous.ARPs.issued.for.VLA |
977a0 | 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 74 61 67 67 65 64 20 77 69 74 68 20 74 68 65 | N.interfaces.are.tagged.with.the |
977c0 | 20 61 70 70 72 6f 70 72 69 61 74 65 20 56 4c 41 4e 20 69 64 2e 00 57 68 65 6e 20 61 20 6c 69 6e | .appropriate.VLAN.id..When.a.lin |
977e0 | 6b 20 69 73 20 72 65 63 6f 6e 6e 65 63 74 65 64 20 6f 72 20 61 20 6e 65 77 20 73 6c 61 76 65 20 | k.is.reconnected.or.a.new.slave. |
97800 | 6a 6f 69 6e 73 20 74 68 65 20 62 6f 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 20 74 72 61 66 66 | joins.the.bond.the.receive.traff |
97820 | 69 63 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 61 6d 6f 6e 67 20 61 6c 6c 20 61 63 | ic.is.redistributed.among.all.ac |
97840 | 74 69 76 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 62 79 20 69 6e 69 74 69 | tive.slaves.in.the.bond.by.initi |
97860 | 61 74 69 6e 67 20 41 52 50 20 52 65 70 6c 69 65 73 20 77 69 74 68 20 74 68 65 20 73 65 6c 65 63 | ating.ARP.Replies.with.the.selec |
97880 | 74 65 64 20 4d 41 43 20 61 64 64 72 65 73 73 20 74 6f 20 65 61 63 68 20 6f 66 20 74 68 65 20 63 | ted.MAC.address.to.each.of.the.c |
978a0 | 6c 69 65 6e 74 73 2e 20 54 68 65 20 75 70 64 65 6c 61 79 20 70 61 72 61 6d 65 74 65 72 20 28 64 | lients..The.updelay.parameter.(d |
978c0 | 65 74 61 69 6c 65 64 20 62 65 6c 6f 77 29 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 61 20 | etailed.below).must.be.set.to.a. |
978e0 | 76 61 6c 75 65 20 65 71 75 61 6c 20 6f 72 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 68 65 20 | value.equal.or.greater.than.the. |
97900 | 73 77 69 74 63 68 27 73 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 6c 61 79 20 73 6f 20 74 68 61 | switch's.forwarding.delay.so.tha |
97920 | 74 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 70 65 | t.the.ARP.Replies.sent.to.the.pe |
97940 | 65 72 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 73 | ers.will.not.be.blocked.by.the.s |
97960 | 77 69 74 63 68 2e 00 57 68 65 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 74 6f 20 62 65 20 73 65 | witch..When.a.packet.is.to.be.se |
97980 | 6e 74 2c 20 69 74 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 67 6f 20 74 68 72 6f 75 67 68 20 74 | nt,.it.will.have.to.go.through.t |
979a0 | 68 61 74 20 71 75 65 75 65 2c 20 73 6f 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 | hat.queue,.so.the.packet.will.be |
979c0 | 20 70 6c 61 63 65 64 20 61 74 20 74 68 65 20 74 61 69 6c 20 6f 66 20 69 74 2e 20 57 68 65 6e 20 | .placed.at.the.tail.of.it..When. |
979e0 | 74 68 65 20 70 61 63 6b 65 74 20 63 6f 6d 70 6c 65 74 65 6c 79 20 67 6f 65 73 20 74 68 72 6f 75 | the.packet.completely.goes.throu |
97a00 | 67 68 20 69 74 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 64 65 71 75 65 75 65 64 20 65 6d 70 74 79 | gh.it,.it.will.be.dequeued.empty |
97a20 | 69 6e 67 20 69 74 73 20 70 6c 61 63 65 20 69 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 62 | ing.its.place.in.the.queue.and.b |
97a40 | 65 69 6e 67 20 65 76 65 6e 74 75 61 6c 6c 79 20 68 61 6e 64 65 64 20 74 6f 20 74 68 65 20 4e 49 | eing.eventually.handed.to.the.NI |
97a60 | 43 20 74 6f 20 62 65 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 20 6f 75 74 2e 00 57 68 65 6e 20 | C.to.be.actually.sent.out..When. |
97a80 | 61 20 70 65 65 72 20 72 65 63 65 69 76 65 73 20 61 20 6d 61 72 74 69 61 6e 20 6e 65 78 74 68 6f | a.peer.receives.a.martian.nextho |
97aa0 | 70 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4e 4c 52 49 20 66 6f 72 20 61 20 72 6f 75 74 | p.as.part.of.the.NLRI.for.a.rout |
97ac0 | 65 20 70 65 72 6d 69 74 20 74 68 65 20 6e 65 78 74 68 6f 70 20 74 6f 20 62 65 20 75 73 65 64 20 | e.permit.the.nexthop.to.be.used. |
97ae0 | 61 73 20 73 75 63 68 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 72 65 6a 65 63 74 69 6e 67 20 61 6e | as.such,.instead.of.rejecting.an |
97b00 | 64 20 72 65 73 65 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 57 68 65 6e | d.resetting.the.connection..When |
97b20 | 20 61 20 72 6f 75 74 65 20 66 61 69 6c 73 2c 20 61 20 72 6f 75 74 69 6e 67 20 75 70 64 61 74 65 | .a.route.fails,.a.routing.update |
97b40 | 20 69 73 20 73 65 6e 74 20 74 6f 20 77 69 74 68 64 72 61 77 20 74 68 65 20 72 6f 75 74 65 20 66 | .is.sent.to.withdraw.the.route.f |
97b60 | 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 27 73 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 | rom.the.network's.routing.tables |
97b80 | 2e 20 57 68 65 6e 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 2d 65 6e 61 62 6c 65 64 2c 20 | ..When.the.route.is.re-enabled,. |
97ba0 | 74 68 65 20 63 68 61 6e 67 65 20 69 6e 20 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 73 20 61 6c | the.change.in.availability.is.al |
97bc0 | 73 6f 20 61 64 76 65 72 74 69 73 65 64 2e 20 41 20 72 6f 75 74 65 20 74 68 61 74 20 63 6f 6e 74 | so.advertised..A.route.that.cont |
97be0 | 69 6e 75 61 6c 6c 79 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e 73 20 72 65 71 75 69 72 | inually.fails.and.returns.requir |
97c00 | 65 73 20 61 20 67 72 65 61 74 20 64 65 61 6c 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 | es.a.great.deal.of.network.traff |
97c20 | 69 63 20 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 62 6f 75 74 20 74 | ic.to.update.the.network.about.t |
97c40 | 68 65 20 72 6f 75 74 65 27 73 20 73 74 61 74 75 73 2e 00 57 68 65 6e 20 61 64 64 69 6e 67 20 49 | he.route's.status..When.adding.I |
97c60 | 50 76 36 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 65 78 63 68 61 6e 67 65 | Pv6.routing.information.exchange |
97c80 | 20 66 65 61 74 75 72 65 20 74 6f 20 42 47 50 2e 20 54 68 65 72 65 20 77 65 72 65 20 73 6f 6d 65 | .feature.to.BGP..There.were.some |
97ca0 | 20 70 72 6f 70 6f 73 61 6c 73 2e 20 3a 61 62 62 72 3a 60 49 45 54 46 20 28 49 6e 74 65 72 6e 65 | .proposals..:abbr:`IETF.(Interne |
97cc0 | 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 29 60 20 3a 61 62 62 72 | t.Engineering.Task.Force)`.:abbr |
97ce0 | 3a 60 49 44 52 20 28 49 6e 74 65 72 20 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 | :`IDR.(Inter.Domain.Routing)`.ad |
97d00 | 6f 70 74 65 64 20 61 20 70 72 6f 70 6f 73 61 6c 20 63 61 6c 6c 65 64 20 4d 75 6c 74 69 70 72 6f | opted.a.proposal.called.Multipro |
97d20 | 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 54 68 65 20 73 70 65 | tocol.Extension.for.BGP..The.spe |
97d40 | 63 69 66 69 63 61 74 69 6f 6e 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a | cification.is.described.in.:rfc: |
97d60 | 60 32 32 38 33 60 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 64 6f 65 73 20 6e 6f 74 20 64 65 | `2283`..The.protocol.does.not.de |
97d80 | 66 69 6e 65 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 49 74 20 64 65 66 69 6e 65 73 20 6e | fine.new.protocols..It.defines.n |
97da0 | 65 77 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 65 78 69 73 74 69 6e 67 20 42 47 50 2e 20 57 | ew.attributes.to.existing.BGP..W |
97dc0 | 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 65 78 63 68 61 6e 67 69 6e 67 20 49 50 76 36 20 72 | hen.it.is.used.exchanging.IPv6.r |
97de0 | 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 | outing.information.it.is.called. |
97e00 | 42 47 50 2d 34 2b 2e 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 65 78 63 68 | BGP-4+..When.it.is.used.for.exch |
97e20 | 61 6e 67 69 6e 67 20 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 | anging.multicast.routing.informa |
97e40 | 74 69 6f 6e 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 4d 42 47 50 2e 00 57 68 65 6e 20 61 6e 20 | tion.it.is.called.MBGP..When.an. |
97e60 | 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 61 6e | authoritative.server.does.not.an |
97e80 | 73 77 65 72 20 61 20 71 75 65 72 79 20 6f 72 20 73 65 6e 64 73 20 61 20 72 65 70 6c 79 20 74 68 | swer.a.query.or.sends.a.reply.th |
97ea0 | 65 20 72 65 63 75 72 73 6f 72 20 64 6f 65 73 20 6e 6f 74 20 6c 69 6b 65 2c 20 69 74 20 69 73 20 | e.recursor.does.not.like,.it.is. |
97ec0 | 74 68 72 6f 74 74 6c 65 64 2e 20 41 6e 79 20 73 65 72 76 65 72 73 20 6d 61 74 63 68 69 6e 67 20 | throttled..Any.servers.matching. |
97ee0 | 74 68 65 20 73 75 70 70 6c 69 65 64 20 6e 65 74 6d 61 73 6b 73 20 77 69 6c 6c 20 6e 65 76 65 72 | the.supplied.netmasks.will.never |
97f00 | 20 62 65 20 74 68 72 6f 74 74 6c 65 64 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 | .be.throttled..When.configured,. |
97f20 | 50 50 50 6f 45 20 77 69 6c 6c 20 63 72 65 61 74 65 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 | PPPoE.will.create.the.necessary. |
97f40 | 56 4c 41 4e 73 20 77 68 65 6e 20 72 65 71 75 69 72 65 64 2e 20 4f 6e 63 65 20 74 68 65 20 75 73 | VLANs.when.required..Once.the.us |
97f60 | 65 72 20 73 65 73 73 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 63 61 6e 63 65 6c 6c 65 64 20 61 6e | er.session.has.been.cancelled.an |
97f80 | 64 20 74 68 65 20 56 4c 41 4e 20 69 73 20 6e 6f 74 20 6e 65 65 64 65 64 20 61 6e 79 6d 6f 72 65 | d.the.VLAN.is.not.needed.anymore |
97fa0 | 2c 20 56 79 4f 53 20 77 69 6c 6c 20 72 65 6d 6f 76 65 20 69 74 20 61 67 61 69 6e 2e 00 57 68 65 | ,.VyOS.will.remove.it.again..Whe |
97fc0 | 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f | n.configuring.a.Random-Detect.po |
97fe0 | 6c 69 63 79 3a 20 2a 2a 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 65 63 65 64 65 6e 63 | licy:.**the.higher.the.precedenc |
98000 | 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 | e.number,.the.higher.the.priorit |
98020 | 79 2a 2a 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f 75 72 20 66 69 6c 74 65 | y**..When.configuring.your.filte |
98040 | 72 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 60 60 54 61 62 60 60 20 6b 65 79 20 74 | r,.you.can.use.the.``Tab``.key.t |
98060 | 6f 20 73 65 65 20 74 68 65 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 | o.see.the.many.different.paramet |
98080 | 65 72 73 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 2e 00 57 68 65 6e 20 63 6f 6e 66 | ers.you.can.configure..When.conf |
980a0 | 69 67 75 72 69 6e 67 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 2c 20 79 6f 75 | iguring.your.traffic.policy,.you |
980c0 | 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 64 61 74 61 20 72 61 74 65 20 76 61 6c 75 | .will.have.to.set.data.rate.valu |
980e0 | 65 73 2c 20 77 61 74 63 68 20 6f 75 74 20 74 68 65 20 75 6e 69 74 73 20 79 6f 75 20 61 72 65 20 | es,.watch.out.the.units.you.are. |
98100 | 6d 61 6e 61 67 69 6e 67 2c 20 69 74 20 69 73 20 65 61 73 79 20 74 6f 20 67 65 74 20 63 6f 6e 66 | managing,.it.is.easy.to.get.conf |
98120 | 75 73 65 64 20 77 69 74 68 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 69 78 65 73 | used.with.the.different.prefixes |
98140 | 20 61 6e 64 20 73 75 66 66 69 78 65 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 20 56 79 4f 53 20 | .and.suffixes.you.can.use..VyOS. |
98160 | 77 69 6c 6c 20 61 6c 77 61 79 73 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 64 69 66 66 65 72 65 | will.always.show.you.the.differe |
98180 | 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 00 57 68 65 6e 20 64 65 66 69 6e | nt.units.you.can.use..When.defin |
981a0 | 69 6e 67 20 61 20 72 75 6c 65 2c 20 69 74 20 69 73 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 | ing.a.rule,.it.is.enable.by.defa |
981c0 | 75 6c 74 2e 20 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 2c 20 69 74 20 69 73 20 75 73 65 66 75 6c | ult..In.some.cases,.it.is.useful |
981e0 | 20 74 6f 20 6a 75 73 74 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 75 6c 65 2c 20 72 61 74 68 65 | .to.just.disable.the.rule,.rathe |
98200 | 72 20 74 68 61 6e 20 72 65 6d 6f 76 69 6e 67 20 69 74 2e 00 57 68 65 6e 20 64 65 66 69 6e 69 6e | r.than.removing.it..When.definin |
98220 | 67 20 74 68 65 20 74 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 2c 20 63 61 6c 6c 65 64 | g.the.translated.address,.called |
98240 | 20 60 60 62 61 63 6b 65 6e 64 73 60 60 2c 20 61 20 60 60 77 65 69 67 68 74 60 60 20 6d 75 73 74 | .``backends``,.a.``weight``.must |
98260 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 6c 65 74 73 20 74 68 65 20 75 73 | .be.configured..This.lets.the.us |
98280 | 65 72 20 64 65 66 69 6e 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 20 64 69 73 74 72 69 62 75 74 | er.define.load.balance.distribut |
982a0 | 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 73 2e 20 54 68 | ion.according.to.their.needs..Th |
982c0 | 65 6d 20 73 75 6d 20 6f 66 20 61 6c 6c 20 74 68 65 20 77 65 69 67 68 74 73 20 64 65 66 69 6e 65 | em.sum.of.all.the.weights.define |
982e0 | 64 20 66 6f 72 20 74 68 65 20 62 61 63 6b 65 6e 64 73 20 73 68 6f 75 6c 64 20 62 65 20 65 71 75 | d.for.the.backends.should.be.equ |
98300 | 61 6c 20 74 6f 20 31 30 30 2e 20 49 6e 20 6f 64 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 77 65 | al.to.100..In.oder.words,.the.we |
98320 | 69 67 68 74 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 6b 65 6e 64 20 69 73 20 | ight.defined.for.the.backend.is. |
98340 | 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | the.percentage.of.the.connection |
98360 | 73 20 74 68 61 74 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 73 75 63 68 20 62 61 63 6b 65 6e 64 | s.that.will.receive.such.backend |
98380 | 2e 00 57 68 65 6e 20 64 65 71 75 65 75 69 6e 67 2c 20 65 61 63 68 20 68 61 73 68 2d 62 75 63 6b | ..When.dequeuing,.each.hash-buck |
983a0 | 65 74 20 77 69 74 68 20 64 61 74 61 20 69 73 20 71 75 65 72 69 65 64 20 69 6e 20 61 20 72 6f 75 | et.with.data.is.queried.in.a.rou |
983c0 | 6e 64 20 72 6f 62 69 6e 20 66 61 73 68 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 | nd.robin.fashion..You.can.config |
983e0 | 75 72 65 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 75 65 2e 00 57 68 65 | ure.the.length.of.the.queue..Whe |
98400 | 6e 20 64 65 73 69 67 6e 69 6e 67 20 79 6f 75 72 20 4e 41 54 20 72 75 6c 65 73 65 74 20 6c 65 61 | n.designing.your.NAT.ruleset.lea |
98420 | 76 65 20 73 6f 6d 65 20 73 70 61 63 65 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 | ve.some.space.between.consecutiv |
98440 | 65 20 72 75 6c 65 73 20 66 6f 72 20 6c 61 74 65 72 20 65 78 74 65 6e 73 69 6f 6e 2e 20 59 6f 75 | e.rules.for.later.extension..You |
98460 | 72 20 72 75 6c 65 73 65 74 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 6e 75 6d 62 65 | r.ruleset.could.start.with.numbe |
98480 | 72 73 20 31 30 2c 20 32 30 2c 20 33 30 2e 20 59 6f 75 20 74 68 75 73 20 63 61 6e 20 6c 61 74 65 | rs.10,.20,.30..You.thus.can.late |
984a0 | 72 20 65 78 74 65 6e 64 20 74 68 65 20 72 75 6c 65 73 65 74 20 61 6e 64 20 70 6c 61 63 65 20 6e | r.extend.the.ruleset.and.place.n |
984c0 | 65 77 20 72 75 6c 65 73 20 62 65 74 77 65 65 6e 20 65 78 69 73 74 69 6e 67 20 6f 6e 65 73 2e 00 | ew.rules.between.existing.ones.. |
984e0 | 57 68 65 6e 20 64 6f 69 6e 67 20 66 61 75 6c 74 20 69 73 6f 6c 61 74 69 6f 6e 20 77 69 74 68 20 | When.doing.fault.isolation.with. |
98500 | 70 69 6e 67 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 66 69 72 73 74 20 72 75 6e 20 69 74 20 6f 6e | ping,.you.should.first.run.it.on |
98520 | 20 74 68 65 20 6c 6f 63 61 6c 20 68 6f 73 74 2c 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 | .the.local.host,.to.verify.that. |
98540 | 74 68 65 20 6c 6f 63 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 | the.local.network.interface.is.u |
98560 | 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 2e 20 54 68 65 6e 2c 20 63 6f 6e 74 69 6e 75 65 20 77 69 | p.and.running..Then,.continue.wi |
98580 | 74 68 20 68 6f 73 74 73 20 61 6e 64 20 67 61 74 65 77 61 79 73 20 66 75 72 74 68 65 72 20 64 6f | th.hosts.and.gateways.further.do |
985a0 | 77 6e 20 74 68 65 20 72 6f 61 64 20 74 6f 77 61 72 64 73 20 79 6f 75 72 20 64 65 73 74 69 6e 61 | wn.the.road.towards.your.destina |
985c0 | 74 69 6f 6e 2e 20 52 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 61 6e 64 20 70 61 63 6b 65 74 | tion..Round-trip.time.and.packet |
985e0 | 20 6c 6f 73 73 20 73 74 61 74 69 73 74 69 63 73 20 61 72 65 20 63 6f 6d 70 75 74 65 64 2e 00 57 | .loss.statistics.are.computed..W |
98600 | 68 65 6e 20 66 69 72 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 6e 65 77 20 | hen.first.connecting.to.the.new. |
98620 | 56 50 4e 20 74 68 65 20 75 73 65 72 20 69 73 20 70 72 6f 6d 70 74 65 64 20 74 6f 20 65 6e 74 65 | VPN.the.user.is.prompted.to.ente |
98640 | 72 20 70 72 6f 70 65 72 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 00 57 68 65 6e 20 6c 6f 61 64 69 | r.proper.credentials..When.loadi |
98660 | 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d | ng.the.certificate.you.need.to.m |
98680 | 61 6e 75 61 6c 6c 79 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 43 | anually.strip.the.``-----BEGIN.C |
986a0 | 45 52 54 49 46 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 | ERTIFICATE-----``.and.``-----END |
986c0 | 20 43 45 52 54 49 46 49 43 41 54 45 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 | .CERTIFICATE-----``.tags..Also,. |
986e0 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 | the.certificate/key.needs.to.be. |
98700 | 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f | presented.in.a.single.line.witho |
98720 | 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 63 61 | ut.line.breaks.(``\n``),.this.ca |
98740 | 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 | n.be.done.using.the.following.sh |
98760 | 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 65 | ell.command:.When.loading.the.ce |
98780 | 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 73 | rtificate.you.need.to.manually.s |
987a0 | 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d 2d 2d 2d 2d 60 60 | trip.the.``-----BEGIN.KEY-----`` |
987c0 | 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e | .and.``-----END.KEY-----``.tags. |
987e0 | 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 | .Also,.the.certificate/key.needs |
98800 | 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e | .to.be.presented.in.a.single.lin |
98820 | 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 | e.without.line.breaks.(``\n``),. |
98840 | 74 68 69 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f | this.can.be.done.using.the.follo |
98860 | 77 69 6e 67 20 73 68 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6d 61 74 68 63 69 6e | wing.shell.command:.When.mathcin |
98880 | 67 20 61 6c 6c 20 70 61 74 74 65 72 6e 73 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 72 75 6c 65 | g.all.patterns.defined.in.a.rule |
988a0 | 2c 20 74 68 65 6e 20 64 69 66 66 65 72 65 6e 74 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 | ,.then.different.actions.can.be. |
988c0 | 6d 61 64 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 64 72 6f 70 69 6e 67 20 74 68 65 20 | made..This.includes.droping.the. |
988e0 | 70 61 63 6b 65 74 2c 20 6d 6f 64 69 66 79 69 6e 67 20 63 65 72 74 61 69 6e 20 64 61 74 61 2c 20 | packet,.modifying.certain.data,. |
98900 | 6f 72 20 73 65 74 74 69 6e 67 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 | or.setting.a.different.routing.t |
98920 | 61 62 6c 65 2e 00 57 68 65 6e 20 6e 6f 20 6f 70 74 69 6f 6e 73 2f 70 61 72 61 6d 65 74 65 72 73 | able..When.no.options/parameters |
98940 | 20 61 72 65 20 75 73 65 64 2c 20 74 68 65 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 74 68 65 20 6d | .are.used,.the.contents.of.the.m |
98960 | 61 69 6e 20 73 79 73 6c 6f 67 20 66 69 6c 65 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 2e 00 57 | ain.syslog.file.are.displayed..W |
98980 | 68 65 6e 20 6e 6f 2d 72 65 6c 65 61 73 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 63 | hen.no-release.is.specified,.dhc |
989a0 | 70 36 63 20 77 69 6c 6c 20 73 65 6e 64 20 61 20 72 65 6c 65 61 73 65 20 6d 65 73 73 61 67 65 20 | p6c.will.send.a.release.message. |
989c0 | 6f 6e 20 63 6c 69 65 6e 74 20 65 78 69 74 20 74 6f 20 70 72 65 76 65 6e 74 20 6c 6f 73 69 6e 67 | on.client.exit.to.prevent.losing |
989e0 | 20 61 6e 20 61 73 73 69 67 6e 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 2e 00 | .an.assigned.address.or.prefix.. |
98a00 | 57 68 65 6e 20 70 72 6f 63 65 73 73 69 6e 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 20 6e | When.processing.packets.from.a.n |
98a20 | 65 69 67 68 62 6f 72 20 70 72 6f 63 65 73 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 | eighbor.process.the.number.of.pa |
98a40 | 63 6b 65 74 73 20 69 6e 63 6f 6d 69 6e 67 20 61 74 20 6f 6e 65 20 74 69 6d 65 20 62 65 66 6f 72 | ckets.incoming.at.one.time.befor |
98a60 | 65 20 6d 6f 76 69 6e 67 20 6f 6e 20 74 6f 20 74 68 65 20 6e 65 78 74 20 74 61 73 6b 2e 00 57 68 | e.moving.on.to.the.next.task..Wh |
98a80 | 65 6e 20 72 61 70 69 64 2d 63 6f 6d 6d 69 74 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 | en.rapid-commit.is.specified,.dh |
98aa0 | 63 70 36 63 20 77 69 6c 6c 20 69 6e 63 6c 75 64 65 20 61 20 72 61 70 69 64 2d 63 6f 6d 6d 69 74 | cp6c.will.include.a.rapid-commit |
98ac0 | 20 6f 70 74 69 6f 6e 20 69 6e 20 73 6f 6c 69 63 69 74 20 6d 65 73 73 61 67 65 73 20 61 6e 64 20 | .option.in.solicit.messages.and. |
98ae0 | 77 61 69 74 20 66 6f 72 20 61 6e 20 69 6d 6d 65 64 69 61 74 65 20 72 65 70 6c 79 20 69 6e 73 74 | wait.for.an.immediate.reply.inst |
98b00 | 65 61 64 20 6f 66 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 2e 00 57 68 65 6e 20 72 65 6d 6f | ead.of.advertisements..When.remo |
98b20 | 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 63 61 70 61 62 69 6c 69 74 79 | te.peer.does.not.have.capability |
98b40 | 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 66 65 61 74 75 72 65 2c 20 72 65 6d 6f 74 65 20 70 65 65 | .negotiation.feature,.remote.pee |
98b60 | 72 20 77 69 6c 6c 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 63 61 70 61 62 69 6c 69 74 69 65 73 | r.will.not.send.any.capabilities |
98b80 | 20 61 74 20 61 6c 6c 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 2c 20 62 67 70 20 63 6f 6e 66 69 | .at.all..In.that.case,.bgp.confi |
98ba0 | 67 75 72 65 73 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 63 | gures.the.peer.with.configured.c |
98bc0 | 61 70 61 62 69 6c 69 74 69 65 73 2e 00 57 68 65 6e 20 72 75 6e 6e 69 6e 67 20 69 74 20 61 74 20 | apabilities..When.running.it.at. |
98be0 | 31 47 62 69 74 20 61 6e 64 20 6c 6f 77 65 72 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f | 1Gbit.and.lower,.you.may.want.to |
98c00 | 20 72 65 64 75 63 65 20 74 68 65 20 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 20 74 6f 20 31 30 30 | .reduce.the.`queue-limit`.to.100 |
98c20 | 30 20 70 61 63 6b 65 74 73 20 6f 72 20 6c 65 73 73 2e 20 49 6e 20 72 61 74 65 73 20 6c 69 6b 65 | 0.packets.or.less..In.rates.like |
98c40 | 20 31 30 4d 62 69 74 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 69 74 20 | .10Mbit,.you.may.want.to.set.it. |
98c60 | 74 6f 20 36 30 30 20 70 61 63 6b 65 74 73 2e 00 57 68 65 6e 20 73 65 6e 64 69 6e 67 20 50 49 4d | to.600.packets..When.sending.PIM |
98c80 | 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 74 65 6c 6c 20 50 49 4d 20 74 6f 20 6e 6f 74 20 73 | .hello.packets.tell.PIM.to.not.s |
98ca0 | 65 6e 64 20 61 6e 79 20 76 36 20 73 65 63 6f 6e 64 61 72 79 20 61 64 64 72 65 73 73 65 73 20 6f | end.any.v6.secondary.addresses.o |
98cc0 | 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f | n.the.interface..This.informatio |
98ce0 | 6e 20 69 73 20 75 73 65 64 20 74 6f 20 61 6c 6c 6f 77 20 50 49 4d 20 74 6f 20 75 73 65 20 76 36 | n.is.used.to.allow.PIM.to.use.v6 |
98d00 | 20 6e 65 78 74 68 6f 70 73 20 69 6e 20 69 74 27 73 20 64 65 63 69 73 69 6f 6e 20 66 6f 72 20 3a | .nexthops.in.it's.decision.for.: |
98d20 | 61 62 62 72 3a 60 52 50 46 20 28 52 65 76 65 72 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 | abbr:`RPF.(Reverse.Path.Forwardi |
98d40 | 6e 67 29 60 20 6c 6f 6f 6b 75 70 20 69 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f | ng)`.lookup.if.this.option.is.no |
98d60 | 74 20 73 65 74 20 28 64 65 66 61 75 6c 74 29 2e 00 57 68 65 6e 20 73 65 74 20 74 68 65 20 69 6e | t.set.(default)..When.set.the.in |
98d80 | 74 65 72 66 61 63 65 20 69 73 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 22 64 69 61 6c 2d 6f 6e 2d | terface.is.enabled.for."dial-on- |
98da0 | 64 65 6d 61 6e 64 22 2e 00 57 68 65 6e 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 73 68 | demand"..When.specified,.this.sh |
98dc0 | 6f 75 6c 64 20 62 65 20 74 68 65 20 6f 6e 6c 79 20 6b 65 79 77 6f 72 64 20 66 6f 72 20 74 68 65 | ould.be.the.only.keyword.for.the |
98de0 | 20 69 6e 74 65 72 66 61 63 65 2e 00 57 68 65 6e 20 73 74 61 72 74 69 6e 67 20 61 20 56 79 4f 53 | .interface..When.starting.a.VyOS |
98e00 | 20 6c 69 76 65 20 73 79 73 74 65 6d 20 28 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 43 | .live.system.(the.installation.C |
98e20 | 44 29 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 | D).the.configured.keyboard.layou |
98e40 | 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 55 53 2e 20 41 73 20 74 68 69 73 20 6d 69 67 68 74 20 | t.defaults.to.US..As.this.might. |
98e60 | 6e 6f 74 20 73 75 69 74 65 20 65 76 65 72 79 6f 6e 65 73 20 75 73 65 20 63 61 73 65 20 79 6f 75 | not.suite.everyones.use.case.you |
98e80 | 20 63 61 6e 20 61 64 6a 75 73 74 20 74 68 65 20 75 73 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 | .can.adjust.the.used.keyboard.la |
98ea0 | 79 6f 75 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 00 57 68 65 6e | yout.on.the.system.console..When |
98ec0 | 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 | .the.DHCP.server.is.considering. |
98ee0 | 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 6c 6c 6f 63 61 74 69 6e 67 20 61 6e 20 49 50 20 61 64 64 | dynamically.allocating.an.IP.add |
98f00 | 72 65 73 73 20 74 6f 20 61 20 63 6c 69 65 6e 74 2c 20 69 74 20 66 69 72 73 74 20 73 65 6e 64 73 | ress.to.a.client,.it.first.sends |
98f20 | 20 61 6e 20 49 43 4d 50 20 45 63 68 6f 20 72 65 71 75 65 73 74 20 28 61 20 70 69 6e 67 29 20 74 | .an.ICMP.Echo.request.(a.ping).t |
98f40 | 6f 20 74 68 65 20 61 64 64 72 65 73 73 20 62 65 69 6e 67 20 61 73 73 69 67 6e 65 64 2e 20 49 74 | o.the.address.being.assigned..It |
98f60 | 20 77 61 69 74 73 20 66 6f 72 20 61 20 73 65 63 6f 6e 64 2c 20 61 6e 64 20 69 66 20 6e 6f 20 49 | .waits.for.a.second,.and.if.no.I |
98f80 | 43 4d 50 20 45 63 68 6f 20 72 65 73 70 6f 6e 73 65 20 68 61 73 20 62 65 65 6e 20 68 65 61 72 64 | CMP.Echo.response.has.been.heard |
98fa0 | 2c 20 69 74 20 61 73 73 69 67 6e 73 20 74 68 65 20 61 64 64 72 65 73 73 2e 00 57 68 65 6e 20 74 | ,.it.assigns.the.address..When.t |
98fc0 | 68 65 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 6f 6e | he.close-action.option.is.set.on |
98fe0 | 20 74 68 65 20 70 65 65 72 73 2c 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 74 79 70 65 20 | .the.peers,.the.connection-type. |
99000 | 6f 66 20 65 61 63 68 20 70 65 65 72 20 68 61 73 20 74 6f 20 63 6f 6e 73 69 64 65 72 65 64 20 63 | of.each.peer.has.to.considered.c |
99020 | 61 72 65 66 75 6c 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6f 70 | arefully..For.example,.if.the.op |
99040 | 74 69 6f 6e 20 69 73 20 73 65 74 20 6f 6e 20 62 6f 74 68 20 70 65 65 72 73 2c 20 74 68 65 6e 20 | tion.is.set.on.both.peers,.then. |
99060 | 62 6f 74 68 20 77 6f 75 6c 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 | both.would.attempt.to.initiate.a |
99080 | 6e 64 20 68 6f 6c 64 20 6f 70 65 6e 20 6d 75 6c 74 69 70 6c 65 20 63 6f 70 69 65 73 20 6f 66 20 | nd.hold.open.multiple.copies.of. |
990a0 | 65 61 63 68 20 63 68 69 6c 64 20 53 41 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c 65 61 64 20 74 | each.child.SA..This.might.lead.t |
990c0 | 6f 20 69 6e 73 74 61 62 69 6c 69 74 79 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6f 72 20 63 | o.instability.of.the.device.or.c |
990e0 | 70 75 2f 6d 65 6d 6f 72 79 20 75 74 69 6c 69 7a 61 74 69 6f 6e 2e 00 57 68 65 6e 20 74 68 65 20 | pu/memory.utilization..When.the. |
99100 | 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 | command.above.is.set,.VyOS.will. |
99120 | 61 6e 73 77 65 72 20 65 76 65 72 79 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 | answer.every.ICMP.echo.request.a |
99140 | 64 64 72 65 73 73 65 64 20 74 6f 20 69 74 73 65 6c 66 2c 20 62 75 74 20 74 68 61 74 20 77 69 6c | ddressed.to.itself,.but.that.wil |
99160 | 6c 20 6f 6e 6c 79 20 68 61 70 70 65 6e 20 69 66 20 6e 6f 20 6f 74 68 65 72 20 72 75 6c 65 20 69 | l.only.happen.if.no.other.rule.i |
99180 | 73 20 61 70 70 6c 69 65 64 20 64 72 6f 70 70 69 6e 67 20 6f 72 20 72 65 6a 65 63 74 69 6e 67 20 | s.applied.dropping.or.rejecting. |
991a0 | 6c 6f 63 61 6c 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 | local.echo.requests..In.case.of. |
991c0 | 63 6f 6e 66 6c 69 63 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 61 6e 73 77 65 72 20 49 | conflict,.VyOS.will.not.answer.I |
991e0 | 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 00 57 68 65 6e 20 74 68 65 20 63 6f 6d 6d | CMP.echo.requests..When.the.comm |
99200 | 61 6e 64 20 61 62 6f 76 65 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 61 6e 73 77 | and.above.is.set,.VyOS.will.answ |
99220 | 65 72 20 6e 6f 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 | er.no.ICMP.echo.request.addresse |
99240 | 64 20 74 6f 20 69 74 73 65 6c 66 20 61 74 20 61 6c 6c 2c 20 6e 6f 20 6d 61 74 74 65 72 20 77 68 | d.to.itself.at.all,.no.matter.wh |
99260 | 65 72 65 20 69 74 20 63 6f 6d 65 73 20 66 72 6f 6d 20 6f 72 20 77 68 65 74 68 65 72 20 6d 6f 72 | ere.it.comes.from.or.whether.mor |
99280 | 65 20 73 70 65 63 69 66 69 63 20 72 75 6c 65 73 20 61 72 65 20 62 65 69 6e 67 20 61 70 70 6c 69 | e.specific.rules.are.being.appli |
992a0 | 65 64 20 74 6f 20 61 63 63 65 70 74 20 74 68 65 6d 2e 00 57 68 65 6e 20 74 68 65 20 76 72 72 70 | ed.to.accept.them..When.the.vrrp |
992c0 | 20 67 72 6f 75 70 20 69 73 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 74 68 65 20 73 79 6e 63 20 67 | .group.is.a.member.of.the.sync.g |
992e0 | 72 6f 75 70 20 77 69 6c 6c 20 75 73 65 20 6f 6e 6c 79 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 | roup.will.use.only.the.sync.grou |
99300 | 70 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 2e 20 54 68 69 73 20 65 78 61 6d | p.health.check.script..This.exam |
99320 | 70 6c 65 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 66 6f | ple.shows.how.to.configure.it.fo |
99340 | 72 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 3a 00 57 68 65 6e 20 75 73 69 6e 67 20 44 48 43 | r.the.sync.group:.When.using.DHC |
99360 | 50 20 74 6f 20 72 65 74 72 69 65 76 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 | P.to.retrieve.IPv4.address.and.i |
99380 | 66 20 6c 6f 63 61 6c 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 | f.local.customizations.are.neede |
993a0 | 64 2c 20 74 68 65 79 20 73 68 6f 75 6c 64 20 62 65 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 | d,.they.should.be.possible.using |
993c0 | 20 74 68 65 20 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 20 68 6f 6f 6b 73 20 70 72 6f 76 69 64 | .the.enter.and.exit.hooks.provid |
993e0 | 65 64 2e 20 54 68 65 20 68 6f 6f 6b 20 64 69 72 73 20 61 72 65 3a 00 57 68 65 6e 20 75 73 69 6e | ed..The.hook.dirs.are:.When.usin |
99400 | 67 20 45 56 45 2d 4e 47 20 74 6f 20 6c 61 62 20 74 68 69 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | g.EVE-NG.to.lab.this.environment |
99420 | 20 65 6e 73 75 72 65 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 65 31 30 30 30 20 61 73 20 74 | .ensure.you.are.using.e1000.as.t |
99440 | 68 65 20 64 65 73 69 72 65 64 20 64 72 69 76 65 72 20 66 6f 72 20 79 6f 75 72 20 56 79 4f 53 20 | he.desired.driver.for.your.VyOS. |
99460 | 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 74 | network.interfaces..When.using.t |
99480 | 68 65 20 72 65 67 75 6c 61 72 20 76 69 72 74 69 6f 20 6e 65 74 77 6f 72 6b 20 64 72 69 76 65 72 | he.regular.virtio.network.driver |
994a0 | 20 6e 6f 20 4c 41 43 50 20 50 44 55 73 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 79 20 56 79 | .no.LACP.PDUs.will.be.sent.by.Vy |
994c0 | 4f 53 20 74 68 75 73 20 74 68 65 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 69 6c 6c 20 6e 65 | OS.thus.the.port-channel.will.ne |
994e0 | 76 65 72 20 62 65 63 6f 6d 65 20 61 63 74 69 76 65 21 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 | ver.become.active!.When.using.NA |
99500 | 54 20 66 6f 72 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 | T.for.a.large.number.of.host.sys |
99520 | 74 65 6d 73 20 69 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d | tems.it.recommended.that.a.minim |
99540 | 75 6d 20 6f 66 20 31 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 | um.of.1.IP.address.is.used.to.NA |
99560 | 54 20 65 76 65 72 79 20 32 35 36 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 69 | T.every.256.host.systems..This.i |
99580 | 73 20 64 75 65 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f 72 | s.due.to.the.limit.of.65,000.por |
995a0 | 74 20 6e 75 6d 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 74 | t.numbers.available.for.unique.t |
995c0 | 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 61 | ranslations.and.a.reserving.an.a |
995e0 | 76 65 72 61 67 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 68 | verage.of.200-300.sessions.per.h |
99600 | 6f 73 74 20 73 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 | ost.system..When.using.NAT.for.a |
99620 | 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 69 74 | .large.number.of.host.systems.it |
99640 | 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 | .recommended.that.a.minimum.of.1 |
99660 | 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 54 20 65 76 65 72 79 | .IP.address.is.used.to.NAT.every |
99680 | 20 32 35 36 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 | .256.private.host.systems..This. |
996a0 | 69 73 20 64 75 65 20 74 6f 20 74 68 65 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f | is.due.to.the.limit.of.65,000.po |
996c0 | 72 74 20 6e 75 6d 62 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 | rt.numbers.available.for.unique. |
996e0 | 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 | translations.and.a.reserving.an. |
99700 | 61 76 65 72 61 67 65 20 6f 66 20 32 30 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 | average.of.200-300.sessions.per. |
99720 | 68 6f 73 74 20 73 79 73 74 65 6d 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 6b 6e 6f | host.system..When.using.SSH,.kno |
99740 | 77 6e 2d 68 6f 73 74 73 2d 66 69 6c 65 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 2d 66 69 6c 65 20 | wn-hosts-file,.private-key-file. |
99760 | 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e 64 61 74 6f 72 | and.public-key-file.are.mandator |
99780 | 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 70 72 69 76 61 | y.options..When.using.SSH,.priva |
997a0 | 74 65 2d 6b 65 79 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 | te-key-file.and.public-key-file. |
997c0 | 61 72 65 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e | are.mandatory.options..When.usin |
997e0 | 67 20 54 69 6d 65 2d 62 61 73 65 64 20 6f 6e 65 2d 74 69 6d 65 20 70 61 73 73 77 6f 72 64 20 28 | g.Time-based.one-time.password.( |
99800 | 54 4f 54 50 29 20 28 4f 54 50 20 48 4f 54 50 2d 74 69 6d 65 29 2c 20 62 65 20 73 75 72 65 20 74 | TOTP).(OTP.HOTP-time),.be.sure.t |
99820 | 68 61 74 20 74 68 65 20 74 69 6d 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 | hat.the.time.on.the.server.and.t |
99840 | 68 65 20 4f 54 50 20 74 6f 6b 65 6e 20 67 65 6e 65 72 61 74 6f 72 20 61 72 65 20 73 79 6e 63 68 | he.OTP.token.generator.are.synch |
99860 | 72 6f 6e 69 7a 65 64 20 62 79 20 4e 54 50 00 57 68 65 6e 20 75 73 69 6e 67 20 73 69 74 65 2d 74 | ronized.by.NTP.When.using.site-t |
99880 | 6f 2d 73 69 74 65 20 49 50 73 65 63 20 77 69 74 68 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 73 | o-site.IPsec.with.VTI.interfaces |
998a0 | 2c 20 62 65 20 73 75 72 65 20 74 6f 20 64 69 73 61 62 6c 65 20 72 6f 75 74 65 20 61 75 74 6f 69 | ,.be.sure.to.disable.route.autoi |
998c0 | 6e 73 74 61 6c 6c 00 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 49 50 76 36 20 70 72 6f 74 6f | nstall.When.using.the.IPv6.proto |
998e0 | 63 6f 6c 2c 20 4d 52 55 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 31 32 38 30 20 62 | col,.MRU.must.be.at.least.1280.b |
99900 | 79 74 65 73 2e 00 57 68 65 6e 20 75 74 69 6c 69 7a 69 6e 67 20 56 79 4f 53 20 69 6e 20 61 6e 20 | ytes..When.utilizing.VyOS.in.an. |
99920 | 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 77 69 74 68 20 41 72 69 73 74 61 20 67 65 61 72 20 79 6f 75 | environment.with.Arista.gear.you |
99940 | 20 63 61 6e 20 75 73 65 20 74 68 69 73 20 62 6c 75 65 20 70 72 69 6e 74 20 61 73 20 61 6e 20 69 | .can.use.this.blue.print.as.an.i |
99960 | 6e 69 74 69 61 6c 20 73 65 74 75 70 20 74 6f 20 67 65 74 20 61 6e 20 4c 41 43 50 20 62 6f 6e 64 | nitial.setup.to.get.an.LACP.bond |
99980 | 20 2f 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 62 65 74 77 | ./.port-channel.operational.betw |
999a0 | 65 65 6e 20 74 68 6f 73 65 20 74 77 6f 20 64 65 76 69 63 65 73 2e 00 57 68 65 72 65 20 62 6f 74 | een.those.two.devices..Where.bot |
999c0 | 68 20 72 6f 75 74 65 73 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 65 42 47 50 | h.routes.were.received.from.eBGP |
999e0 | 20 70 65 65 72 73 2c 20 74 68 65 6e 20 70 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 68 | .peers,.then.prefer.the.route.wh |
99a00 | 69 63 68 20 69 73 20 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 2e 20 4e 6f 74 65 20 74 68 | ich.is.already.selected..Note.th |
99a20 | 61 74 20 74 68 69 73 20 63 68 65 63 6b 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 65 64 20 69 66 20 | at.this.check.is.not.applied.if. |
99a40 | 3a 63 66 67 63 6d 64 3a 60 62 67 70 20 62 65 73 74 70 61 74 68 20 63 6f 6d 70 61 72 65 2d 72 6f | :cfgcmd:`bgp.bestpath.compare-ro |
99a60 | 75 74 65 72 69 64 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 63 68 65 63 | uterid`.is.configured..This.chec |
99a80 | 6b 20 63 61 6e 20 70 72 65 76 65 6e 74 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 66 20 6f 73 63 69 | k.can.prevent.some.cases.of.osci |
99aa0 | 6c 6c 61 74 69 6f 6e 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 | llation..Where.firewall.base.cha |
99ac0 | 69 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 | in.to.configure.firewall.filteri |
99ae0 | 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 | ng.rules.for.transit.traffic.is. |
99b00 | 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 69 6c 74 | ``set.firewall.ipv4.forward.filt |
99b20 | 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 | er....``,.which.happens.in.stage |
99b40 | 20 35 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 | .5,.highlightened.with.red.color |
99b60 | 2e 00 57 68 65 72 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 69 6e 20 74 6f 20 63 | ..Where.firewall.base.chain.to.c |
99b80 | 6f 6e 66 69 67 75 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 | onfigure.firewall.filtering.rule |
99ba0 | 73 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 60 60 73 65 74 20 66 | s.for.transit.traffic.is.``set.f |
99bc0 | 69 72 65 77 61 6c 6c 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 | irewall.ipv6.forward.filter....` |
99be0 | 60 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 35 2c 20 68 69 67 | `,.which.happens.in.stage.5,.hig |
99c00 | 68 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 | hlightened.with.red.color..Where |
99c20 | 20 72 6f 75 74 65 73 20 77 69 74 68 20 61 20 4d 45 44 20 77 65 72 65 20 72 65 63 65 69 76 65 64 | .routes.with.a.MED.were.received |
99c40 | 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 41 53 2c 20 70 72 65 66 65 72 20 74 68 65 20 72 6f | .from.the.same.AS,.prefer.the.ro |
99c60 | 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 73 74 20 4d 45 44 2e 00 57 68 65 72 65 2c 20 | ute.with.the.lowest.MED..Where,. |
99c80 | 6d 61 69 6e 20 6b 65 79 20 77 6f 72 64 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | main.key.words.and.configuration |
99ca0 | 20 70 61 74 68 73 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 75 6e 64 65 72 73 74 6f | .paths.that.needs.to.be.understo |
99cc0 | 6f 64 3a 00 57 68 65 74 68 65 72 20 74 6f 20 61 63 63 65 70 74 20 44 41 44 20 28 44 75 70 6c 69 | od:.Whether.to.accept.DAD.(Dupli |
99ce0 | 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 29 2e 00 57 68 69 63 68 20 67 | cate.Address.Detection)..Which.g |
99d00 | 65 6e 65 72 61 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 | enerates.the.following.configura |
99d20 | 74 69 6f 6e 3a 00 57 68 69 63 68 20 72 65 73 75 6c 74 73 20 69 6e 20 61 20 63 6f 6e 66 69 67 75 | tion:.Which.results.in.a.configu |
99d40 | 72 61 74 69 6f 6e 20 6f 66 3a 00 57 68 69 63 68 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 | ration.of:.Which.would.generate. |
99d60 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 4e 41 54 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 63 6f | the.following.NAT.destination.co |
99d80 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 68 69 6c 65 20 2a 2a 6e 65 74 77 6f 72 6b 20 67 72 6f | nfiguration:.While.**network.gro |
99da0 | 75 70 73 2a 2a 20 61 63 63 65 70 74 20 49 50 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 43 49 44 52 | ups**.accept.IP.networks.in.CIDR |
99dc0 | 20 6e 6f 74 61 74 69 6f 6e 2c 20 73 70 65 63 69 66 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 | .notation,.specific.IP.addresses |
99de0 | 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 61 73 20 61 20 33 32 2d 62 69 74 20 70 72 65 66 69 78 | .can.be.added.as.a.32-bit.prefix |
99e00 | 2e 20 49 66 20 79 6f 75 20 66 6f 72 65 73 65 65 20 74 68 65 20 6e 65 65 64 20 74 6f 20 61 64 64 | ..If.you.foresee.the.need.to.add |
99e20 | 20 61 20 6d 69 78 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 | .a.mix.of.addresses.and.networks |
99e40 | 2c 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 | ,.the.network.group.is.recommend |
99e60 | 65 64 2e 00 57 68 69 6c 65 20 6d 61 6e 79 20 61 72 65 20 61 77 61 72 65 20 6f 66 20 4f 70 65 6e | ed..While.many.are.aware.of.Open |
99e80 | 56 50 4e 20 61 73 20 61 20 43 6c 69 65 6e 74 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 2c 20 69 74 | VPN.as.a.Client.VPN.solution,.it |
99ea0 | 20 69 73 20 6f 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 61 73 20 61 20 73 69 74 65 2d 74 | .is.often.overlooked.as.a.site-t |
99ec0 | 6f 2d 73 69 74 65 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 20 64 75 65 20 74 6f 20 6c 61 63 6b 20 | o-site.VPN.solution.due.to.lack. |
99ee0 | 6f 66 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 68 69 73 20 6d 6f 64 65 20 69 6e 20 6d 61 6e 79 | of.support.for.this.mode.in.many |
99f00 | 20 72 6f 75 74 65 72 20 70 6c 61 74 66 6f 72 6d 73 2e 00 57 68 69 6c 65 20 6e 6f 72 6d 61 6c 20 | .router.platforms..While.normal. |
99f20 | 47 52 45 20 69 73 20 66 6f 72 20 6c 61 79 65 72 20 33 2c 20 47 52 45 54 41 50 20 69 73 20 66 6f | GRE.is.for.layer.3,.GRETAP.is.fo |
99f40 | 72 20 6c 61 79 65 72 20 32 2e 20 47 52 45 54 41 50 20 63 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 | r.layer.2..GRETAP.can.encapsulat |
99f60 | 65 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2c 20 74 68 75 73 20 69 74 20 63 61 6e 20 62 | e.Ethernet.frames,.thus.it.can.b |
99f80 | 65 20 62 72 69 64 67 65 64 20 77 69 74 68 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 | e.bridged.with.other.interfaces. |
99fa0 | 74 6f 20 63 72 65 61 74 65 20 64 61 74 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 | to.create.datalink.layer.segment |
99fc0 | 73 20 74 68 61 74 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 72 65 6d 6f 74 65 20 73 69 74 65 | s.that.span.multiple.remote.site |
99fe0 | 73 2e 00 57 68 69 74 65 6c 69 73 74 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 | s..Whitelist.of.addresses.and.ne |
9a000 | 74 77 6f 72 6b 73 2e 20 41 6c 77 61 79 73 20 61 6c 6c 6f 77 20 69 6e 62 6f 75 6e 64 20 63 6f 6e | tworks..Always.allow.inbound.con |
9a020 | 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 65 73 65 20 73 79 73 74 65 6d 73 2e 00 57 69 6c | nections.from.these.systems..Wil |
9a040 | 6c 20 61 64 64 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 6b 65 79 60 60 20 61 74 20 74 68 65 20 | l.add.``persistent-key``.at.the. |
9a060 | 65 6e 64 20 6f 66 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e | end.of.the.generated.OpenVPN.con |
9a080 | 66 69 67 75 72 61 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 69 73 20 6f 6e 6c 79 | figuration..Please.use.this.only |
9a0a0 | 20 61 73 20 6c 61 73 74 20 72 65 73 6f 72 74 20 2d 20 74 68 69 6e 67 73 20 6d 69 67 68 74 20 62 | .as.last.resort.-.things.might.b |
9a0c0 | 72 65 61 6b 20 61 6e 64 20 4f 70 65 6e 56 50 4e 20 77 6f 6e 27 74 20 73 74 61 72 74 20 69 66 20 | reak.and.OpenVPN.won't.start.if. |
9a0e0 | 79 6f 75 20 70 61 73 73 20 69 6e 76 61 6c 69 64 20 6f 70 74 69 6f 6e 73 2f 73 79 6e 74 61 78 2e | you.pass.invalid.options/syntax. |
9a100 | 00 57 69 6c 6c 20 61 64 64 20 60 60 70 75 73 68 20 22 6b 65 65 70 61 6c 69 76 65 20 31 20 31 30 | .Will.add.``push."keepalive.1.10 |
9a120 | 22 60 60 20 74 6f 20 74 68 65 20 67 65 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e | "``.to.the.generated.OpenVPN.con |
9a140 | 66 69 67 20 66 69 6c 65 2e 00 57 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 6f 6e 6c 79 20 | fig.file..Will.be.recorded.only. |
9a160 | 70 61 63 6b 65 74 73 2f 66 6c 6f 77 73 20 6f 6e 20 2a 2a 69 6e 63 6f 6d 69 6e 67 2a 2a 20 64 69 | packets/flows.on.**incoming**.di |
9a180 | 72 65 63 74 69 6f 6e 20 69 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 | rection.in.configured.interfaces |
9a1a0 | 20 62 79 20 64 65 66 61 75 6c 74 2e 00 57 69 6c 6c 20 64 72 6f 70 20 60 3c 73 68 61 72 65 64 2d | .by.default..Will.drop.`<shared- |
9a1c0 | 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e 5f 60 20 66 72 6f 6d 20 63 6c 69 65 6e 74 20 44 4e 53 20 | network-name>_`.from.client.DNS. |
9a1e0 | 72 65 63 6f 72 64 2c 20 75 73 69 6e 67 20 6f 6e 6c 79 20 74 68 65 20 68 6f 73 74 20 64 65 63 6c | record,.using.only.the.host.decl |
9a200 | 61 72 61 74 69 6f 6e 20 6e 61 6d 65 20 61 6e 64 20 64 6f 6d 61 69 6e 3a 20 60 3c 68 6f 73 74 6e | aration.name.and.domain:.`<hostn |
9a220 | 61 6d 65 3e 2e 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 57 69 6e 64 6f 77 73 20 31 30 20 64 | ame>.<domain-name>`.Windows.10.d |
9a240 | 6f 65 73 20 6e 6f 74 20 61 6c 6c 6f 77 20 61 20 75 73 65 72 20 74 6f 20 63 68 6f 6f 73 65 20 74 | oes.not.allow.a.user.to.choose.t |
9a260 | 68 65 20 69 6e 74 65 67 72 69 74 79 20 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 | he.integrity.and.encryption.ciph |
9a280 | 65 72 73 20 75 73 69 6e 67 20 74 68 65 20 47 55 49 20 61 6e 64 20 69 74 20 75 73 65 73 20 73 6f | ers.using.the.GUI.and.it.uses.so |
9a2a0 | 6d 65 20 6f 6c 64 65 72 20 70 72 6f 70 6f 73 61 6c 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 41 | me.older.proposals.by.default..A |
9a2c0 | 20 75 73 65 72 20 63 61 6e 20 6f 6e 6c 79 20 63 68 61 6e 67 65 20 74 68 65 20 70 72 6f 70 6f 73 | .user.can.only.change.the.propos |
9a2e0 | 61 6c 73 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 62 79 20 63 6f 6e 66 69 67 | als.on.the.client.side.by.config |
9a300 | 75 72 69 6e 67 20 74 68 65 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 | uring.the.IPSec.connection.profi |
9a320 | 6c 65 20 76 69 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 00 57 69 6e 64 6f 77 73 20 49 6e 74 65 72 | le.via.PowerShell..Windows.Inter |
9a340 | 6e 65 74 20 4e 61 6d 65 20 53 65 72 76 69 63 65 20 28 57 49 4e 53 29 20 73 65 72 76 65 72 73 20 | net.Name.Service.(WINS).servers. |
9a360 | 70 72 6f 70 61 67 61 74 65 64 20 74 6f 20 63 6c 69 65 6e 74 00 57 69 6e 64 6f 77 73 20 65 78 70 | propagated.to.client.Windows.exp |
9a380 | 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 | ects.the.server.name.to.be.also. |
9a3a0 | 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 | used.in.the.server's.certificate |
9a3c0 | 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 | .common.name,.so.it's.best.to.us |
9a3e0 | 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e | e.this.DNS.name.for.your.VPN.con |
9a400 | 6e 65 63 74 69 6f 6e 2e 00 57 69 72 65 47 75 61 72 64 00 57 69 72 65 47 75 61 72 64 20 43 6c 69 | nection..WireGuard.WireGuard.Cli |
9a420 | 65 6e 74 20 51 52 20 63 6f 64 65 00 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 | ent.QR.code.WireGuard.interface. |
9a440 | 69 74 73 65 6c 66 20 75 73 65 73 20 61 64 64 72 65 73 73 20 31 30 2e 31 2e 30 2e 31 2f 33 30 00 | itself.uses.address.10.1.0.1/30. |
9a460 | 57 69 72 65 47 75 61 72 64 20 69 73 20 61 6e 20 65 78 74 72 65 6d 65 6c 79 20 73 69 6d 70 6c 65 | WireGuard.is.an.extremely.simple |
9a480 | 20 79 65 74 20 66 61 73 74 20 61 6e 64 20 6d 6f 64 65 72 6e 20 56 50 4e 20 74 68 61 74 20 75 74 | .yet.fast.and.modern.VPN.that.ut |
9a4a0 | 69 6c 69 7a 65 73 20 73 74 61 74 65 2d 6f 66 2d 74 68 65 2d 61 72 74 20 63 72 79 70 74 6f 67 72 | ilizes.state-of-the-art.cryptogr |
9a4c0 | 61 70 68 79 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 69 72 65 67 75 61 72 64 2e | aphy..See.https://www.wireguard. |
9a4e0 | 63 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 57 69 72 65 47 75 | com.for.more.information..WireGu |
9a500 | 61 72 64 20 72 65 71 75 69 72 65 73 20 74 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 61 | ard.requires.the.generation.of.a |
9a520 | 20 6b 65 79 70 61 69 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 61 20 70 72 69 76 61 | .keypair,.which.includes.a.priva |
9a540 | 74 65 20 6b 65 79 20 74 6f 20 64 65 63 72 79 70 74 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 | te.key.to.decrypt.incoming.traff |
9a560 | 69 63 2c 20 61 6e 64 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 70 65 65 72 28 73 29 | ic,.and.a.public.key.for.peer(s) |
9a580 | 20 74 6f 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2e 00 57 69 72 65 6c 65 73 73 20 63 68 | .to.encrypt.traffic..Wireless.ch |
9a5a0 | 61 6e 6e 65 6c 20 60 60 31 60 60 00 57 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 20 74 79 70 65 | annel.``1``.Wireless.device.type |
9a5c0 | 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 00 57 69 72 65 6c 65 73 73 20 68 61 72 | .for.this.interface.Wireless.har |
9a5e0 | 64 77 61 72 65 20 64 65 76 69 63 65 20 75 73 65 64 20 61 73 20 75 6e 64 65 72 6c 61 79 20 72 61 | dware.device.used.as.underlay.ra |
9a600 | 64 69 6f 2e 00 57 69 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 00 57 69 72 65 6c 65 73 73 20 6f | dio..Wireless.options.Wireless.o |
9a620 | 70 74 69 6f 6e 73 20 28 53 74 61 74 69 6f 6e 2f 43 6c 69 65 6e 74 29 00 57 69 72 65 6c 65 73 73 | ptions.(Station/Client).Wireless |
9a640 | 4d 6f 64 65 6d 20 28 57 57 41 4e 29 20 6f 70 74 69 6f 6e 73 00 57 69 74 68 20 56 79 4f 53 20 62 | Modem.(WWAN).options.With.VyOS.b |
9a660 | 65 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 4c 69 6e 75 78 20 61 6e 64 20 69 | eing.based.on.top.of.Linux.and.i |
9a680 | 74 73 20 6b 65 72 6e 65 6c 2c 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 70 72 6f 6a 65 63 74 | ts.kernel,.the.Netfilter.project |
9a6a0 | 20 63 72 65 61 74 65 64 20 74 68 65 20 69 70 74 61 62 6c 65 73 20 61 6e 64 20 6e 6f 77 20 74 68 | .created.the.iptables.and.now.th |
9a6c0 | 65 20 73 75 63 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 20 4c 69 6e | e.successor.nftables.for.the.Lin |
9a6e0 | 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 | ux.kernel.to.work.directly.on.th |
9a700 | 65 20 64 61 74 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 74 65 6e 64 73 20 74 | e.data.flows..This.now.extends.t |
9a720 | 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 73 65 63 75 72 69 74 | he.concept.of.zone-based.securit |
9a740 | 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 6e 67 20 74 68 65 20 | y.to.allow.for.manipulating.the. |
9a760 | 64 61 74 61 20 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f 6e 63 65 20 61 63 63 | data.at.multiple.stages.once.acc |
9a780 | 65 70 74 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 61 | epted.by.the.network.interface.a |
9a7a0 | 6e 64 20 74 68 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e 67 20 68 61 6e 64 65 | nd.the.driver.before.being.hande |
9a7c0 | 64 20 6f 66 66 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 65 2e 67 2e 20 61 | d.off.to.the.destination.(e.g..a |
9a7e0 | 20 77 65 62 20 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 29 2e 00 | .web.server.OR.another.device).. |
9a800 | 57 69 74 68 20 57 69 72 65 47 75 61 72 64 2c 20 61 20 52 6f 61 64 20 57 61 72 72 69 6f 72 20 56 | With.WireGuard,.a.Road.Warrior.V |
9a820 | 50 4e 20 63 6f 6e 66 69 67 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 61 20 73 69 74 65 2d 74 | PN.config.is.similar.to.a.site-t |
9a840 | 6f 2d 73 69 74 65 20 56 50 4e 2e 20 49 74 20 6a 75 73 74 20 6c 61 63 6b 73 20 74 68 65 20 60 60 | o-site.VPN..It.just.lacks.the.`` |
9a860 | 61 64 64 72 65 73 73 60 60 20 61 6e 64 20 60 60 70 6f 72 74 60 60 20 73 74 61 74 65 6d 65 6e 74 | address``.and.``port``.statement |
9a880 | 73 2e 00 57 69 74 68 20 74 68 65 20 60 60 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6f 70 74 69 | s..With.the.``name-server``.opti |
9a8a0 | 6f 6e 20 73 65 74 20 74 6f 20 60 60 6e 6f 6e 65 60 60 2c 20 56 79 4f 53 20 77 69 6c 6c 20 69 67 | on.set.to.``none``,.VyOS.will.ig |
9a8c0 | 6e 6f 72 65 20 74 68 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 79 6f 75 72 20 49 53 50 20 73 65 | nore.the.nameservers.your.ISP.se |
9a8e0 | 6e 64 73 20 79 6f 75 20 61 6e 64 20 74 68 75 73 20 79 6f 75 20 63 61 6e 20 66 75 6c 6c 79 20 72 | nds.you.and.thus.you.can.fully.r |
9a900 | 65 6c 79 20 6f 6e 20 74 68 65 20 6f 6e 65 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 | ely.on.the.ones.you.have.configu |
9a920 | 72 65 64 20 73 74 61 74 69 63 61 6c 6c 79 2e 00 57 69 74 68 20 74 68 65 20 66 69 72 65 77 61 6c | red.statically..With.the.firewal |
9a940 | 6c 20 79 6f 75 20 63 61 6e 20 73 65 74 20 72 75 6c 65 73 20 74 6f 20 61 63 63 65 70 74 2c 20 64 | l.you.can.set.rules.to.accept,.d |
9a960 | 72 6f 70 20 6f 72 20 72 65 6a 65 63 74 20 49 43 4d 50 20 69 6e 2c 20 6f 75 74 20 6f 72 20 6c 6f | rop.or.reject.ICMP.in,.out.or.lo |
9a980 | 63 61 6c 20 74 72 61 66 66 69 63 2e 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 | cal.traffic..You.can.also.use.th |
9a9a0 | 65 20 67 65 6e 65 72 61 6c 20 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 | e.general.**firewall.all-ping**. |
9a9c0 | 63 6f 6d 6d 61 6e 64 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 66 66 65 63 74 73 20 6f 6e | command..This.command.affects.on |
9a9e0 | 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 28 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 66 6f | ly.to.LOCAL.(packets.destined.fo |
9aa00 | 72 20 79 6f 75 72 20 56 79 4f 53 20 73 79 73 74 65 6d 29 2c 20 6e 6f 74 20 74 6f 20 49 4e 20 6f | r.your.VyOS.system),.not.to.IN.o |
9aa20 | 72 20 4f 55 54 20 74 72 61 66 66 69 63 2e 00 57 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | r.OUT.traffic..With.this.command |
9aa40 | 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 6f 77 20 74 68 65 20 55 52 4c 20 70 61 | ,.you.can.specify.how.the.URL.pa |
9aa60 | 74 68 20 73 68 6f 75 6c 64 20 62 65 20 6d 61 74 63 68 65 64 20 61 67 61 69 6e 73 74 20 69 6e 63 | th.should.be.matched.against.inc |
9aa80 | 6f 6d 69 6e 67 20 72 65 71 75 65 73 74 73 2e 00 57 69 74 68 20 7a 6f 6e 65 2d 62 61 73 65 64 20 | oming.requests..With.zone-based. |
9aaa0 | 66 69 72 65 77 61 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 77 61 73 20 69 6d 70 6c | firewalls.a.new.concept.was.impl |
9aac0 | 65 6d 65 6e 74 65 64 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 74 61 6e | emented,.in.addition.to.the.stan |
9aae0 | 64 61 72 64 20 69 6e 20 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2c 20 61 | dard.in.and.out.traffic.flows,.a |
9ab00 | 20 6c 6f 63 61 6c 20 66 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 69 73 20 6c 6f 63 61 | .local.flow.was.added..This.loca |
9ab20 | 6c 20 77 61 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 61 6e | l.was.for.traffic.originating.an |
9ab40 | 64 20 64 65 73 74 69 6e 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e | d.destined.to.the.router.itself. |
9ab60 | 20 57 68 69 63 68 20 6d 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 77 65 | .Which.means.additional.rules.we |
9ab80 | 72 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 66 69 72 65 77 61 | re.required.to.secure.the.firewa |
9aba0 | 6c 6c 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 20 61 | ll.itself.from.the.network,.in.a |
9abc0 | 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 6e 62 6f 75 6e 64 20 | ddition.to.the.existing.inbound. |
9abe0 | 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 65 20 74 72 61 64 | and.outbound.rules.from.the.trad |
9ac00 | 69 74 69 6f 6e 61 6c 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 57 69 74 68 20 7a 6f 6e 65 | itional.concept.above..With.zone |
9ac20 | 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 77 | -based.firewalls.a.new.concept.w |
9ac40 | 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2c 20 69 6e 20 61 64 64 74 69 6f 6e 20 74 6f 20 74 68 | as.implemented,.in.addtion.to.th |
9ac60 | 65 20 73 74 61 6e 64 61 72 64 20 69 6e 20 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 6c | e.standard.in.and.out.traffic.fl |
9ac80 | 6f 77 73 2c 20 61 20 6c 6f 63 61 6c 20 66 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 69 | ows,.a.local.flow.was.added..Thi |
9aca0 | 73 20 6c 6f 63 61 6c 20 77 61 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 | s.local.was.for.traffic.originat |
9acc0 | 69 6e 67 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 | ing.and.destined.to.the.router.i |
9ace0 | 74 73 65 6c 66 2e 20 57 68 69 63 68 20 6d 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 | tself..Which.means.additional.ru |
9ad00 | 6c 65 73 20 77 65 72 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 | les.were.required.to.secure.the. |
9ad20 | 66 69 72 65 77 61 6c 6c 20 69 74 73 65 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b | firewall.itself.from.the.network |
9ad40 | 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 6e | ,.in.addition.to.the.existing.in |
9ad60 | 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 | bound.and.outbound.rules.from.th |
9ad80 | 65 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 59 00 59 | e.traditional.concept.above..Y.Y |
9ada0 | 6f 75 20 61 70 70 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 61 6c 77 61 79 73 20 74 6f 20 61 20 | ou.apply.a.rule-set.always.to.a. |
9adc0 | 7a 6f 6e 65 20 66 72 6f 6d 20 61 6e 20 6f 74 68 65 72 20 7a 6f 6e 65 2c 20 69 74 20 69 73 20 72 | zone.from.an.other.zone,.it.is.r |
9ade0 | 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 63 72 65 61 74 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 | ecommended.to.create.one.rule-se |
9ae00 | 74 20 66 6f 72 20 65 61 63 68 20 7a 6f 6e 65 20 70 61 69 72 2e 00 59 6f 75 20 61 72 65 20 61 62 | t.for.each.zone.pair..You.are.ab |
9ae20 | 6c 65 20 74 6f 20 73 65 74 20 70 6f 73 74 2d 6c 6f 67 69 6e 20 6f 72 20 70 72 65 2d 6c 6f 67 69 | le.to.set.post-login.or.pre-logi |
9ae40 | 6e 20 62 61 6e 6e 65 72 20 6d 65 73 73 61 67 65 73 20 74 6f 20 64 69 73 70 6c 61 79 20 63 65 72 | n.banner.messages.to.display.cer |
9ae60 | 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 79 73 74 65 6d | tain.information.for.this.system |
9ae80 | 2e 00 59 6f 75 20 61 72 65 20 62 65 20 61 62 6c 65 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 | ..You.are.be.able.to.download.th |
9aea0 | 65 20 66 69 6c 65 73 20 75 73 69 6e 67 20 53 43 50 2c 20 6f 6e 63 65 20 74 68 65 20 53 53 48 20 | e.files.using.SCP,.once.the.SSH. |
9aec0 | 73 65 72 76 69 63 65 20 68 61 73 20 62 65 65 6e 20 61 63 74 69 76 61 74 65 64 20 6c 69 6b 65 20 | service.has.been.activated.like. |
9aee0 | 73 6f 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 69 | so.You.can.also.configure.the.ti |
9af00 | 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 70 72 65 65 6d 70 74 69 6f 6e 20 77 69 74 68 20 | me.interval.for.preemption.with. |
9af20 | 74 68 65 20 22 70 72 65 65 6d 70 74 2d 64 65 6c 61 79 22 20 6f 70 74 69 6f 6e 2e 20 46 6f 72 20 | the."preempt-delay".option..For. |
9af40 | 65 78 61 6d 70 6c 65 2c 20 74 6f 20 73 65 74 20 74 68 65 20 68 69 67 68 65 72 20 70 72 69 6f 72 | example,.to.set.the.higher.prior |
9af60 | 69 74 79 20 72 6f 75 74 65 72 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 69 6e 20 31 38 30 20 73 | ity.router.to.take.over.in.180.s |
9af80 | 65 63 6f 6e 64 73 2c 20 75 73 65 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 66 69 6e 65 | econds,.use:.You.can.also.define |
9afa0 | 20 63 75 73 74 6f 6d 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 73 20 74 6f 20 61 70 70 6c 79 20 | .custom.timeout.values.to.apply. |
9afc0 | 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 73 75 62 73 65 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 | to.a.specific.subset.of.connecti |
9afe0 | 6f 6e 73 2c 20 62 61 73 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 | ons,.based.on.a.packet.and.flow. |
9b000 | 73 65 6c 65 63 74 6f 72 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 | selector..To.do.this,.you.need.t |
9b020 | 6f 20 63 72 65 61 74 65 20 61 20 72 75 6c 65 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 70 61 63 | o.create.a.rule.defining.the.pac |
9b040 | 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 00 59 6f 75 20 63 61 6e 20 61 | ket.and.flow.selector..You.can.a |
9b060 | 6c 73 6f 20 6b 65 65 70 20 64 69 66 66 65 72 65 6e 74 20 44 4e 53 20 7a 6f 6e 65 20 75 70 64 61 | lso.keep.different.DNS.zone.upda |
9b080 | 74 65 64 2e 20 4a 75 73 74 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 63 6f 6e 66 69 67 20 6e 6f | ted..Just.create.a.new.config.no |
9b0a0 | 64 65 3a 20 60 60 73 65 74 20 73 65 72 76 69 63 65 20 64 6e 73 20 64 79 6e 61 6d 69 63 20 69 6e | de:.``set.service.dns.dynamic.in |
9b0c0 | 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 66 61 63 65 3e 20 72 66 63 32 31 33 36 20 3c 6f 74 68 | terface.<interface>.rfc2136.<oth |
9b0e0 | 65 72 2d 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 60 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 | er-service-name>``.You.can.also. |
9b100 | 6f 70 74 20 66 6f 72 20 75 73 69 6e 67 20 60 3a 3a 2f 36 34 60 20 61 73 20 70 72 65 66 69 78 20 | opt.for.using.`::/64`.as.prefix. |
9b120 | 66 6f 72 20 79 6f 75 72 20 3a 61 62 62 72 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 41 64 76 65 | for.your.:abbr:`RAs.(Router.Adve |
9b140 | 72 74 69 73 65 6d 65 6e 74 73 29 60 2e 20 54 68 69 73 20 77 69 6c 6c 20 74 61 6b 65 20 74 68 65 | rtisements)`..This.will.take.the |
9b160 | 20 49 50 76 36 20 47 55 41 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 | .IPv6.GUA.prefix.assigned.to.the |
9b180 | 20 69 6e 74 65 72 66 61 63 65 2c 20 77 68 69 63 68 20 63 6f 6d 65 73 20 69 6e 20 68 61 6e 64 79 | .interface,.which.comes.in.handy |
9b1a0 | 20 77 68 65 6e 20 75 73 69 6e 67 20 44 48 43 50 76 36 2d 50 44 2e 00 59 6f 75 20 63 61 6e 20 61 | .when.using.DHCPv6-PD..You.can.a |
9b1c0 | 6c 73 6f 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c 69 | lso.specify.which.IPv6.access-li |
9b1e0 | 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f | st.should.be.shown:.You.can.also |
9b200 | 20 74 75 6e 65 20 6d 75 6c 74 69 63 61 73 74 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | .tune.multicast.with.the.followi |
9b220 | 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 61 6e | ng.commands..You.can.also.use.an |
9b240 | 6f 74 68 65 72 20 61 74 74 72 69 62 75 74 65 73 20 66 6f 72 20 69 64 65 6e 74 69 66 79 20 63 6c | other.attributes.for.identify.cl |
9b260 | 69 65 6e 74 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2c 20 6c 69 6b 65 20 46 72 61 6d 65 64 | ient.for.disconnect,.like.Framed |
9b280 | 2d 49 50 2d 41 64 64 72 65 73 73 2c 20 41 63 63 74 2d 53 65 73 73 69 6f 6e 2d 49 64 2c 20 65 74 | -IP-Address,.Acct-Session-Id,.et |
9b2a0 | 63 2e 20 52 65 73 75 6c 74 20 63 6f 6d 6d 61 6e 64 73 20 61 70 70 65 61 72 73 20 69 6e 20 6c 6f | c..Result.commands.appears.in.lo |
9b2c0 | 67 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 77 72 69 74 65 20 61 20 64 65 73 63 72 69 70 74 | g..You.can.also.write.a.descript |
9b2e0 | 69 6f 6e 20 66 6f 72 20 61 20 66 69 6c 74 65 72 3a 00 59 6f 75 20 63 61 6e 20 61 73 73 69 67 6e | ion.for.a.filter:.You.can.assign |
9b300 | 20 6d 75 6c 74 69 70 6c 65 20 6b 65 79 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 75 73 65 72 20 | .multiple.keys.to.the.same.user. |
9b320 | 62 79 20 75 73 69 6e 67 20 61 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 70 65 72 | by.using.a.unique.identifier.per |
9b340 | 20 53 53 48 20 6b 65 79 2e 00 59 6f 75 20 63 61 6e 20 61 76 6f 69 64 20 74 68 65 20 22 6c 65 61 | .SSH.key..You.can.avoid.the."lea |
9b360 | 6b 79 22 20 62 65 68 61 76 69 6f 72 20 62 79 20 75 73 69 6e 67 20 61 20 66 69 72 65 77 61 6c 6c | ky".behavior.by.using.a.firewall |
9b380 | 20 70 6f 6c 69 63 79 20 74 68 61 74 20 64 72 6f 70 73 20 22 69 6e 76 61 6c 69 64 22 20 73 74 61 | .policy.that.drops."invalid".sta |
9b3a0 | 74 65 20 70 61 63 6b 65 74 73 2e 00 59 6f 75 20 63 61 6e 20 63 68 65 63 6b 20 79 6f 75 72 20 4e | te.packets..You.can.check.your.N |
9b3c0 | 49 43 20 64 72 69 76 65 72 20 62 79 20 69 73 73 75 69 6e 67 20 3a 6f 70 63 6d 64 3a 60 73 68 6f | IC.driver.by.issuing.:opcmd:`sho |
9b3e0 | 77 20 69 6e 74 65 72 66 61 63 65 73 20 65 74 68 65 72 6e 65 74 20 65 74 68 30 20 70 68 79 73 69 | w.interfaces.ethernet.eth0.physi |
9b400 | 63 61 6c 20 7c 20 67 72 65 70 20 2d 69 20 64 72 69 76 65 72 60 00 59 6f 75 20 63 61 6e 20 63 6f | cal.|.grep.-i.driver`.You.can.co |
9b420 | 6e 66 69 67 75 72 65 20 61 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 | nfigure.a.policy.into.a.class.th |
9b440 | 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 | rough.the.``queue-type``.setting |
9b460 | 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 63 6c 61 73 73 65 73 20 28 75 70 20 | ..You.can.configure.classes.(up. |
9b480 | 74 6f 20 34 30 39 30 29 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 74 69 6e 67 73 | to.4090).with.different.settings |
9b4a0 | 20 61 6e 64 20 61 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 77 68 69 63 68 20 77 69 6c 6c | .and.a.default.policy.which.will |
9b4c0 | 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 79 20 74 72 61 66 66 69 63 20 6e 6f 74 20 6d | .be.applied.to.any.traffic.not.m |
9b4e0 | 61 74 63 68 69 6e 67 20 61 6e 79 20 6f 66 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 63 6c | atching.any.of.the.configured.cl |
9b500 | 61 73 73 65 73 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c | asses..You.can.configure.multipl |
9b520 | 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 | e.interfaces.which.whould.partic |
9b540 | 69 70 61 74 65 20 69 6e 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 | ipate.in.flow.accounting..You.ca |
9b560 | 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 | n.configure.multiple.interfaces. |
9b580 | 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 73 66 6c 6f | which.whould.participate.in.sflo |
9b5a0 | 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 6d 75 6c | w.accounting..You.can.create.mul |
9b5c0 | 74 69 70 6c 65 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 61 20 70 68 79 73 69 | tiple.VLAN.interfaces.on.a.physi |
9b5e0 | 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 56 4c 41 4e 20 49 44 20 72 61 6e 67 65 | cal.interface..The.VLAN.ID.range |
9b600 | 20 69 73 20 66 72 6f 6d 20 30 20 74 6f 20 34 30 39 34 2e 00 59 6f 75 20 63 61 6e 20 64 69 73 61 | .is.from.0.to.4094..You.can.disa |
9b620 | 62 6c 65 20 61 20 56 52 52 50 20 67 72 6f 75 70 20 77 69 74 68 20 60 60 64 69 73 61 62 6c 65 60 | ble.a.VRRP.group.with.``disable` |
9b640 | 60 20 6f 70 74 69 6f 6e 3a 00 59 6f 75 20 63 61 6e 20 67 65 74 20 6d 6f 72 65 20 73 70 65 63 69 | `.option:.You.can.get.more.speci |
9b660 | 66 69 63 20 4f 53 50 46 76 33 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 79 20 75 73 69 6e 67 20 | fic.OSPFv3.information.by.using. |
9b680 | 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 59 6f 75 20 | the.parameters.shown.below:.You. |
9b6a0 | 63 61 6e 20 6e 6f 74 20 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 61 6c 6c 6f 77 65 64 2d | can.not.assign.the.same.allowed- |
9b6c0 | 69 70 73 20 73 74 61 74 65 6d 65 6e 74 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 57 69 72 65 47 75 | ips.statement.to.multiple.WireGu |
9b6e0 | 61 72 64 20 70 65 65 72 73 2e 20 54 68 69 73 20 61 20 64 65 73 69 67 6e 20 64 65 63 69 73 69 6f | ard.peers..This.a.design.decisio |
9b700 | 6e 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 | n..For.more.information.please.c |
9b720 | 68 65 63 6b 20 74 68 65 20 60 57 69 72 65 47 75 61 72 64 20 6d 61 69 6c 69 6e 67 20 6c 69 73 74 | heck.the.`WireGuard.mailing.list |
9b740 | 60 5f 2e 00 59 6f 75 20 63 61 6e 20 6e 6f 74 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 56 52 | `_..You.can.not.run.this.in.a.VR |
9b760 | 52 50 20 73 65 74 75 70 2c 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 | RP.setup,.if.multiple.mDNS.repea |
9b780 | 74 65 72 73 20 61 72 65 20 6c 61 75 6e 63 68 65 64 20 69 6e 20 61 20 73 75 62 6e 65 74 20 79 6f | ters.are.launched.in.a.subnet.yo |
9b7a0 | 75 20 77 69 6c 6c 20 65 78 70 65 72 69 65 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 61 63 6b 65 | u.will.experience.the.mDNS.packe |
9b7c0 | 74 20 73 74 6f 72 6d 20 64 65 61 74 68 21 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 22 64 69 61 6c | t.storm.death!.You.can.now."dial |
9b7e0 | 22 20 74 68 65 20 70 65 65 72 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 77 6f 69 6e 67 20 63 6f | ".the.peer.with.the.follwoing.co |
9b800 | 6d 6d 61 6e 64 3a 20 60 60 73 73 74 70 63 20 2d 2d 6c 6f 67 2d 6c 65 76 65 6c 20 34 20 2d 2d 6c | mmand:.``sstpc.--log-level.4.--l |
9b820 | 6f 67 2d 73 74 64 65 72 72 20 2d 2d 75 73 65 72 20 76 79 6f 73 20 2d 2d 70 61 73 73 77 6f 72 64 | og-stderr.--user.vyos.--password |
9b840 | 20 76 79 6f 73 20 76 70 6e 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 2d 2d 20 63 61 6c 6c 20 76 79 | .vyos.vpn.example.com.--.call.vy |
9b860 | 6f 73 60 60 2e 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 53 53 48 20 69 6e 74 6f 20 79 6f 75 72 20 | os``..You.can.now.SSH.into.your. |
9b880 | 73 79 73 74 65 6d 20 75 73 69 6e 67 20 61 64 6d 69 6e 2f 61 64 6d 69 6e 20 61 73 20 61 20 64 65 | system.using.admin/admin.as.a.de |
9b8a0 | 66 61 75 6c 74 20 75 73 65 72 20 73 75 70 70 6c 69 65 64 20 66 72 6f 6d 20 74 68 65 20 60 60 6c | fault.user.supplied.from.the.``l |
9b8c0 | 66 6b 65 69 74 65 6c 2f 74 61 63 61 63 73 5f 70 6c 75 73 3a 6c 61 74 65 73 74 60 60 20 63 6f 6e | fkeitel/tacacs_plus:latest``.con |
9b8e0 | 74 61 69 6e 65 72 2e 00 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 61 70 70 6c 79 20 6f 6e 65 20 70 | tainer..You.can.only.apply.one.p |
9b900 | 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f | olicy.per.interface.and.directio |
9b920 | 6e 2c 20 62 75 74 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 75 73 65 20 61 20 70 6f 6c 69 63 79 20 | n,.but.you.could.reuse.a.policy. |
9b940 | 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 64 69 72 65 | on.different.interfaces.and.dire |
9b960 | 63 74 69 6f 6e 73 3a 00 59 6f 75 20 63 61 6e 20 72 75 6e 20 74 68 65 20 55 44 50 20 62 72 6f 61 | ctions:.You.can.run.the.UDP.broa |
9b980 | 64 63 61 73 74 20 72 65 6c 61 79 20 73 65 72 76 69 63 65 20 6f 6e 20 6d 75 6c 74 69 70 6c 65 20 | dcast.relay.service.on.multiple. |
9b9a0 | 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 73 75 62 6e 65 74 2e 20 54 | routers.connected.to.a.subnet..T |
9b9c0 | 68 65 72 65 20 69 73 20 2a 2a 4e 4f 2a 2a 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c | here.is.**NO**.UDP.broadcast.rel |
9b9e0 | 61 79 20 70 61 63 6b 65 74 20 73 74 6f 72 6d 21 00 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 | ay.packet.storm!.You.can.specify |
9ba00 | 20 61 20 73 74 61 74 69 63 20 44 48 43 50 20 61 73 73 69 67 6e 6d 65 6e 74 20 6f 6e 20 61 20 70 | .a.static.DHCP.assignment.on.a.p |
9ba20 | 65 72 20 68 6f 73 74 20 62 61 73 69 73 2e 20 59 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 68 65 | er.host.basis..You.will.need.the |
9ba40 | 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 73 74 61 74 69 6f 6e 20 61 6e 64 20 | .MAC.address.of.the.station.and. |
9ba60 | 79 6f 75 72 20 64 65 73 69 72 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 61 64 64 | your.desired.IP.address..The.add |
9ba80 | 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 20 73 75 62 6e 65 74 20 64 | ress.must.be.inside.the.subnet.d |
9baa0 | 65 66 69 6e 69 74 69 6f 6e 20 62 75 74 20 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 6f 66 20 | efinition.but.can.be.outside.of. |
9bac0 | 74 68 65 20 72 61 6e 67 65 20 73 74 61 74 65 6d 65 6e 74 2e 00 59 6f 75 20 63 61 6e 20 74 65 73 | the.range.statement..You.can.tes |
9bae0 | 74 20 74 68 65 20 53 4e 4d 50 76 33 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 66 72 6f 6d 20 | t.the.SNMPv3.functionality.from. |
9bb00 | 61 6e 79 20 6c 69 6e 75 78 20 62 61 73 65 64 20 73 79 73 74 65 6d 2c 20 6a 75 73 74 20 72 75 6e | any.linux.based.system,.just.run |
9bb20 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 6e 6d 70 77 61 | .the.following.command:.``snmpwa |
9bb40 | 6c 6b 20 2d 76 20 33 20 2d 75 20 76 79 6f 73 20 2d 61 20 53 48 41 20 2d 41 20 76 79 6f 73 31 32 | lk.-v.3.-u.vyos.-a.SHA.-A.vyos12 |
9bb60 | 33 34 35 36 37 38 20 2d 78 20 41 45 53 20 2d 58 20 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d 6c | 345678.-x.AES.-X.vyos12345678.-l |
9bb80 | 20 61 75 74 68 50 72 69 76 20 31 39 32 2e 30 2e 32 2e 31 20 2e 31 60 60 00 59 6f 75 20 63 61 6e | .authPriv.192.0.2.1..1``.You.can |
9bba0 | 20 75 73 65 20 77 69 6c 64 63 61 72 64 20 60 60 2a 60 60 20 74 6f 20 6d 61 74 63 68 20 61 20 67 | .use.wildcard.``*``.to.match.a.g |
9bbc0 | 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 00 59 6f 75 20 63 61 6e 20 76 65 72 69 | roup.of.interfaces..You.can.veri |
9bbe0 | 66 79 20 79 6f 75 72 20 56 52 52 50 20 67 72 6f 75 70 20 73 74 61 74 75 73 20 77 69 74 68 20 74 | fy.your.VRRP.group.status.with.t |
9bc00 | 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 60 60 72 75 6e 20 73 68 6f 77 20 76 | he.operational.mode.``run.show.v |
9bc20 | 72 72 70 60 60 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 20 76 69 65 77 20 74 68 61 74 | rrp``.command:.You.can.view.that |
9bc40 | 20 74 68 65 20 70 6f 6c 69 63 79 20 69 73 20 62 65 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 28 | .the.policy.is.being.correctly.( |
9bc60 | 6f 72 20 69 6e 63 6f 72 72 65 63 74 6c 79 29 20 75 74 69 6c 69 73 65 64 20 77 69 74 68 20 74 68 | or.incorrectly).utilised.with.th |
9bc80 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 6e 6f 74 20 | e.following.command:.You.cannot. |
9bca0 | 65 61 73 69 6c 79 20 72 65 64 69 73 74 72 69 62 75 74 65 20 49 50 76 36 20 72 6f 75 74 65 73 20 | easily.redistribute.IPv6.routes. |
9bcc0 | 76 69 61 20 4f 53 50 46 76 33 20 6f 6e 20 61 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 | via.OSPFv3.on.a.WireGuard.interf |
9bce0 | 61 63 65 20 6c 69 6e 6b 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 63 | ace.link..This.requires.you.to.c |
9bd00 | 6f 6e 66 69 67 75 72 65 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 6d 61 | onfigure.link-local.addresses.ma |
9bd20 | 6e 75 61 6c 6c 79 20 6f 6e 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 | nually.on.the.WireGuard.interfac |
9bd40 | 65 73 2c 20 73 65 65 20 3a 76 79 74 61 73 6b 3a 60 54 31 34 38 33 60 2e 00 59 6f 75 20 64 6f 20 | es,.see.:vytask:`T1483`..You.do. |
9bd60 | 2a 2a 6e 6f 74 2a 2a 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 63 65 72 74 69 66 69 | **not**.need.to.copy.the.certifi |
9bd80 | 63 61 74 65 20 74 6f 20 74 68 65 20 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 20 49 6e 73 74 65 61 | cate.to.the.other.router..Instea |
9bda0 | 64 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 74 73 20 53 48 41 2d | d,.you.need.to.retrieve.its.SHA- |
9bdc0 | 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e 74 2e 20 4f 70 65 6e 56 50 4e 20 6f 6e 6c 79 20 73 75 | 256.fingerprint..OpenVPN.only.su |
9bde0 | 70 70 6f 72 74 73 20 53 48 41 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 6e 74 73 20 61 74 20 74 | pports.SHA-256.fingerprints.at.t |
9be00 | 68 65 20 6d 6f 6d 65 6e 74 2c 20 73 6f 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 74 68 | he.moment,.so.you.need.to.use.th |
9be20 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 6d 61 79 20 61 6c 73 | e.following.command:.You.may.als |
9be40 | 6f 20 61 64 64 69 74 69 6f 6e 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 69 6d 65 6f 75 74 | o.additionally.configure.timeout |
9be60 | 73 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 63 6f 6e 6e 65 63 74 | s.for.different.types.of.connect |
9be80 | 69 6f 6e 73 2e 00 59 6f 75 20 6d 61 79 20 70 72 65 66 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e | ions..You.may.prefer.locally.con |
9bea0 | 66 69 67 75 72 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 74 68 61 6e 20 74 | figured.capabilities.more.than.t |
9bec0 | 68 65 20 6e 65 67 6f 74 69 61 74 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 65 76 65 6e 20 | he.negotiated.capabilities.even. |
9bee0 | 74 68 6f 75 67 68 20 72 65 6d 6f 74 65 20 70 65 65 72 20 73 65 6e 64 73 20 63 61 70 61 62 69 6c | though.remote.peer.sends.capabil |
9bf00 | 69 74 69 65 73 2e 20 49 66 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 | ities..If.the.peer.is.configured |
9bf20 | 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 6f 76 65 72 72 69 64 65 2d 63 61 70 61 62 69 6c 69 74 79 | .by.:cfgcmd:`override-capability |
9bf40 | 60 2c 20 56 79 4f 53 20 69 67 6e 6f 72 65 73 20 72 65 63 65 69 76 65 64 20 63 61 70 61 62 69 6c | `,.VyOS.ignores.received.capabil |
9bf60 | 69 74 69 65 73 20 74 68 65 6e 20 6f 76 65 72 72 69 64 65 20 6e 65 67 6f 74 69 61 74 65 64 20 63 | ities.then.override.negotiated.c |
9bf80 | 61 70 61 62 69 6c 69 74 69 65 73 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 76 61 6c 75 | apabilities.with.configured.valu |
9bfa0 | 65 73 2e 00 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 73 65 6e 64 | es..You.may.want.to.disable.send |
9bfc0 | 69 6e 67 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 4f 50 45 4e 20 | ing.Capability.Negotiation.OPEN. |
9bfe0 | 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 | message.optional.parameter.to.th |
9c000 | 65 20 70 65 65 72 20 77 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 | e.peer.when.remote.peer.does.not |
9c020 | 20 69 6d 70 6c 65 6d 65 6e 74 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f | .implement.Capability.Negotiatio |
9c040 | 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 61 62 6c 65 2d 63 | n..Please.use.:cfgcmd:`disable-c |
9c060 | 61 70 61 62 69 6c 69 74 79 2d 6e 65 67 6f 74 69 61 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 | apability-negotiation`.command.t |
9c080 | 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 66 65 61 74 75 72 65 2e 00 59 6f 75 20 6e 65 65 64 20 | o.disable.the.feature..You.need. |
9c0a0 | 32 20 73 65 70 61 72 61 74 65 20 66 69 72 65 77 61 6c 6c 73 20 74 6f 20 64 65 66 69 6e 65 20 74 | 2.separate.firewalls.to.define.t |
9c0c0 | 72 61 66 66 69 63 3a 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 69 72 65 63 74 69 6f 6e 2e 00 | raffic:.one.for.each.direction.. |
9c0e0 | 59 6f 75 20 6e 65 65 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 69 6e 2d 6d 65 6d 6f 72 | You.need.to.disable.the.in-memor |
9c100 | 79 20 74 61 62 6c 65 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e | y.table.in.production.environmen |
9c120 | 74 73 21 20 55 73 69 6e 67 20 3a 61 62 62 72 3a 60 49 4d 54 20 28 49 6e 2d 4d 65 6d 6f 72 79 20 | ts!.Using.:abbr:`IMT.(In-Memory. |
9c140 | 54 61 62 6c 65 29 60 20 6d 61 79 20 6c 65 61 64 20 74 6f 20 68 65 61 76 79 20 43 50 55 20 6f 76 | Table)`.may.lead.to.heavy.CPU.ov |
9c160 | 65 72 6c 6f 61 64 69 6e 67 20 61 6e 64 20 75 6e 73 74 61 62 6c 65 20 66 6c 6f 77 2d 61 63 63 6f | erloading.and.unstable.flow-acco |
9c180 | 75 6e 74 69 6e 67 20 62 65 68 61 76 69 6f 72 2e 00 59 6f 75 20 6e 65 65 64 20 79 6f 75 72 20 50 | unting.behavior..You.need.your.P |
9c1a0 | 50 50 6f 45 20 63 72 65 64 65 6e 74 69 61 6c 73 20 66 72 6f 6d 20 79 6f 75 72 20 44 53 4c 20 49 | PPoE.credentials.from.your.DSL.I |
9c1c0 | 53 50 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 2e 20 54 | SP.in.order.to.configure.this..T |
9c1e0 | 68 65 20 75 73 75 61 6c 20 75 73 65 72 6e 61 6d 65 20 69 73 20 69 6e 20 74 68 65 20 66 6f 72 6d | he.usual.username.is.in.the.form |
9c200 | 20 6f 66 20 6e 61 6d 65 40 68 6f 73 74 2e 6e 65 74 20 62 75 74 20 6d 61 79 20 76 61 72 79 20 64 | .of.name@host.net.but.may.vary.d |
9c220 | 65 70 65 6e 64 69 6e 67 20 6f 6e 20 49 53 50 2e 00 59 6f 75 20 6e 6f 77 20 73 65 65 20 74 68 65 | epending.on.ISP..You.now.see.the |
9c240 | 20 6c 6f 6e 67 65 72 20 41 53 20 70 61 74 68 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 64 64 20 | .longer.AS.path..You.should.add. |
9c260 | 61 20 66 69 72 65 77 61 6c 6c 20 74 6f 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | a.firewall.to.your.configuration |
9c280 | 20 61 62 6f 76 65 20 61 73 20 77 65 6c 6c 20 62 79 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 74 | .above.as.well.by.assigning.it.t |
9c2a0 | 6f 20 74 68 65 20 70 70 70 6f 65 30 20 69 74 73 65 6c 66 20 61 73 20 73 68 6f 77 6e 20 68 65 72 | o.the.pppoe0.itself.as.shown.her |
9c2c0 | 65 3a 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 | e:.You.should.also.ensure.that.t |
9c2e0 | 68 65 20 4f 55 54 49 53 44 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 | he.OUTISDE_LOCAL.firewall.group. |
9c300 | 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 | is.applied.to.the.WAN.interface. |
9c320 | 61 6e 64 20 61 20 64 69 72 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 73 68 6f | and.a.direction.(local)..You.sho |
9c340 | 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 4f 55 54 53 49 44 45 | uld.also.ensure.that.the.OUTSIDE |
9c360 | 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 64 | _LOCAL.firewall.group.is.applied |
9c380 | 20 74 6f 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 65 | .to.the.WAN.interface.and.a.dire |
9c3a0 | 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 6e 65 65 | ction.(local)..You.will.also.nee |
9c3c0 | 64 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 70 65 65 72 20 61 73 | d.the.public.key.of.your.peer.as |
9c3e0 | 20 77 65 6c 6c 20 61 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 28 73 29 20 79 6f 75 20 77 61 6e 74 | .well.as.the.network(s).you.want |
9c400 | 20 74 6f 20 74 75 6e 6e 65 6c 20 28 61 6c 6c 6f 77 65 64 2d 69 70 73 29 20 74 6f 20 63 6f 6e 66 | .to.tunnel.(allowed-ips).to.conf |
9c420 | 69 67 75 72 65 20 61 20 57 69 72 65 47 75 61 72 64 20 74 75 6e 6e 65 6c 2e 20 54 68 65 20 70 75 | igure.a.WireGuard.tunnel..The.pu |
9c440 | 62 6c 69 63 20 6b 65 79 20 62 65 6c 6f 77 20 69 73 20 61 6c 77 61 79 73 20 74 68 65 20 70 75 62 | blic.key.below.is.always.the.pub |
9c460 | 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 79 6f 75 72 20 70 65 65 72 2c 20 6e 6f 74 20 79 6f 75 72 | lic.key.from.your.peer,.not.your |
9c480 | 20 6c 6f 63 61 6c 20 6f 6e 65 2e 00 59 6f 75 72 20 49 53 50 73 20 6d 6f 64 65 6d 20 69 73 20 63 | .local.one..Your.ISPs.modem.is.c |
9c4a0 | 6f 6e 6e 65 63 74 65 64 20 74 6f 20 70 6f 72 74 20 60 60 65 74 68 30 60 60 20 6f 66 20 79 6f 75 | onnected.to.port.``eth0``.of.you |
9c4c0 | 72 20 56 79 4f 53 20 62 6f 78 2e 00 59 6f 75 72 20 4c 41 4e 20 63 6f 6e 6e 65 63 74 65 64 20 6f | r.VyOS.box..Your.LAN.connected.o |
9c4e0 | 6e 20 65 74 68 30 20 75 73 65 73 20 70 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 38 3a 62 65 | n.eth0.uses.prefix.``2001:db8:be |
9c500 | 65 66 3a 32 3a 3a 2f 36 34 60 60 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 65 69 | ef:2::/64``.with.the.router.beei |
9c520 | 6e 67 20 60 60 32 30 30 31 3a 64 62 38 3a 62 65 65 66 3a 32 3a 3a 31 60 60 00 5a 65 62 72 61 20 | ng.``2001:db8:beef:2::1``.Zebra. |
9c540 | 73 75 70 70 6f 72 74 73 20 70 72 65 66 69 78 2d 6c 69 73 74 73 20 61 6e 64 20 52 6f 75 74 65 20 | supports.prefix-lists.and.Route. |
9c560 | 4d 61 70 73 73 20 74 6f 20 6d 61 74 63 68 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 | Mapss.to.match.routes.received.f |
9c580 | 72 6f 6d 20 6f 74 68 65 72 20 46 52 52 20 63 6f 6d 70 6f 6e 65 6e 74 73 2e 20 54 68 65 20 70 65 | rom.other.FRR.components..The.pe |
9c5a0 | 72 6d 69 74 2f 64 65 6e 79 20 66 61 63 69 6c 69 74 69 65 73 20 70 72 6f 76 69 64 65 64 20 62 79 | rmit/deny.facilities.provided.by |
9c5c0 | 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 | .these.commands.can.be.used.to.f |
9c5e0 | 69 6c 74 65 72 20 77 68 69 63 68 20 72 6f 75 74 65 73 20 7a 65 62 72 61 20 77 69 6c 6c 20 69 6e | ilter.which.routes.zebra.will.in |
9c600 | 73 74 61 6c 6c 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 5a 65 62 72 61 2f 4b 65 72 6e 65 | stall.in.the.kernel..Zebra/Kerne |
9c620 | 6c 20 72 6f 75 74 65 20 66 69 6c 74 65 72 69 6e 67 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 | l.route.filtering.Zone.Based.Fir |
9c640 | 65 77 61 6c 6c 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 65 77 61 6c 6c 20 28 44 65 70 72 65 | ewall.Zone.Based.Firewall.(Depre |
9c660 | 63 61 74 65 64 29 00 5a 6f 6e 65 2d 50 6f 6c 69 63 79 20 4f 76 65 72 76 69 65 77 00 5a 6f 6e 65 | cated).Zone-Policy.Overview.Zone |
9c680 | 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 00 5b 41 2e 42 2e 43 2e 44 5d 20 e2 80 93 20 6c 69 | -based.firewall.[A.B.C.D].....li |
9c6a0 | 6e 6b 2d 73 74 61 74 65 2d 69 64 2e 20 57 69 74 68 20 74 68 69 73 20 73 70 65 63 69 66 69 65 64 | nk-state-id..With.this.specified |
9c6c0 | 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 70 6f 72 74 69 6f 6e 20 6f 66 | .the.command.displays.portion.of |
9c6e0 | 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 74 68 61 74 20 69 73 | .the.network.environment.that.is |
9c700 | 20 62 65 69 6e 67 20 64 65 73 63 72 69 62 65 64 20 62 79 20 74 68 65 20 61 64 76 65 72 74 69 73 | .being.described.by.the.advertis |
9c720 | 65 6d 65 6e 74 2e 20 54 68 65 20 76 61 6c 75 65 20 65 6e 74 65 72 65 64 20 64 65 70 65 6e 64 73 | ement..The.value.entered.depends |
9c740 | 20 6f 6e 20 74 68 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 e2 80 99 73 20 4c 53 20 74 79 70 | .on.the.advertisement...s.LS.typ |
9c760 | 65 2e 20 49 74 20 6d 75 73 74 20 62 65 20 65 6e 74 65 72 65 64 20 69 6e 20 74 68 65 20 66 6f 72 | e..It.must.be.entered.in.the.for |
9c780 | 6d 20 6f 66 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 00 60 31 2e 20 43 72 65 61 74 65 20 61 | m.of.an.IP.address..`1..Create.a |
9c7a0 | 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 60 5f 00 60 32 2e 20 41 64 64 20 72 65 67 65 78 20 | n.event.handler`_.`2..Add.regex. |
9c7c0 | 74 6f 20 74 68 65 20 73 63 72 69 70 74 60 5f 00 60 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 | to.the.script`_.`3..Add.a.full.p |
9c7e0 | 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 60 5f 00 60 34 2e 20 41 64 64 20 6f 70 74 69 | ath.to.the.script`_.`4..Add.opti |
9c800 | 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 73 60 5f 00 60 3c 6e 61 6d 65 3e 60 20 6d 75 73 74 20 | onal.parameters`_.`<name>`.must. |
9c820 | 62 65 20 69 64 65 6e 74 69 63 61 6c 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 21 00 60 43 6f 6d | be.identical.on.both.sides!.`Com |
9c840 | 6d 6f 6e 20 41 70 70 6c 69 63 61 74 69 6f 6e 73 20 4b 65 70 74 20 45 6e 68 61 6e 63 65 64 60 5f | mon.Applications.Kept.Enhanced`_ |
9c860 | 20 28 43 41 4b 45 29 20 69 73 20 61 20 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 20 71 75 65 75 65 | .(CAKE).is.a.comprehensive.queue |
9c880 | 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 79 73 74 65 6d 2c 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 | .management.system,.implemented. |
9c8a0 | 61 73 20 61 20 71 75 65 75 65 20 64 69 73 63 69 70 6c 69 6e 65 20 28 71 64 69 73 63 29 20 66 6f | as.a.queue.discipline.(qdisc).fo |
9c8c0 | 72 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e | r.the.Linux.kernel..It.is.design |
9c8e0 | 65 64 20 74 6f 20 72 65 70 6c 61 63 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 75 70 6f 6e 20 74 | ed.to.replace.and.improve.upon.t |
9c900 | 68 65 20 63 6f 6d 70 6c 65 78 20 68 69 65 72 61 72 63 68 79 20 6f 66 20 73 69 6d 70 6c 65 20 71 | he.complex.hierarchy.of.simple.q |
9c920 | 64 69 73 63 73 20 70 72 65 73 65 6e 74 6c 79 20 72 65 71 75 69 72 65 64 20 74 6f 20 65 66 66 65 | discs.presently.required.to.effe |
9c940 | 63 74 69 76 65 6c 79 20 74 61 63 6b 6c 65 20 74 68 65 20 62 75 66 66 65 72 62 6c 6f 61 74 20 70 | ctively.tackle.the.bufferbloat.p |
9c960 | 72 6f 62 6c 65 6d 20 61 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 65 64 67 65 2e 00 60 60 24 20 | roblem.at.the.network.edge..``$. |
9c980 | 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c | tail.-n.+2.ca.key.|.head.-n.-1.| |
9c9a0 | 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e | .tr.-d.'\n'``.``$.tail.-n.+2.ca. |
9c9c0 | 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 | pem.|.head.-n.-1.|.tr.-d.'\n'``. |
9c9e0 | 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 65 72 74 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d | ``$.tail.-n.+2.cert.key.|.head.- |
9ca00 | 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 | n.-1.|.tr.-d.'\n'``.``$.tail.-n. |
9ca20 | 2b 32 20 63 65 72 74 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 | +2.cert.pem.|.head.-n.-1.|.tr.-d |
9ca40 | 20 27 5c 6e 27 60 60 00 60 60 2b 60 60 20 73 75 63 63 65 73 73 66 75 6c 00 60 60 2d 60 60 20 66 | .'\n'``.``+``.successful.``-``.f |
9ca60 | 61 69 6c 65 64 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 | ailed.``/config/scripts/dhcp-cli |
9ca80 | 65 6e 74 2f 70 6f 73 74 2d 68 6f 6f 6b 73 2e 64 2f 60 60 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 | ent/post-hooks.d/``.``/config/sc |
9caa0 | 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 65 6e 74 2f 70 72 65 2d 68 6f 6f 6b 73 2e 64 2f 60 60 | ripts/dhcp-client/pre-hooks.d/`` |
9cac0 | 00 60 60 30 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 30 60 60 20 2d 20 32 30 20 6f | .``0.pool.ntp.org``.``0``.-.20.o |
9cae0 | 72 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 28 64 65 66 61 75 6c 74 29 | r.40.MHz.channel.width.(default) |
9cb00 | 00 60 60 30 60 60 3a 20 4e 6f 20 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 2c 20 73 74 72 69 63 74 | .``0``:.No.replay.window,.strict |
9cb20 | 20 63 68 65 63 6b 00 60 60 31 2d 34 32 39 34 39 36 37 32 39 35 60 60 3a 20 4e 75 6d 62 65 72 20 | .check.``1-4294967295``:.Number. |
9cb40 | 6f 66 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 63 6f 75 6c 64 20 62 65 20 6d 69 73 6f 72 64 65 | of.packets.that.could.be.misorde |
9cb60 | 72 65 64 00 60 60 31 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 31 31 35 32 30 30 60 | red.``1.pool.ntp.org``.``115200` |
9cb80 | 60 20 2d 20 31 31 35 2c 32 30 30 20 62 70 73 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 73 65 72 | `.-.115,200.bps.(default.for.ser |
9cba0 | 69 61 6c 20 63 6f 6e 73 6f 6c 65 29 00 60 60 31 32 30 30 60 60 20 2d 20 31 32 30 30 20 62 70 73 | ial.console).``1200``.-.1200.bps |
9cbc0 | 00 60 60 31 39 32 2e 31 36 38 2e 32 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f | .``192.168.2.254``.IP.addreess.o |
9cbe0 | 6e 20 56 79 4f 53 20 65 74 68 32 20 66 72 6f 6d 20 49 53 50 32 00 60 60 31 39 32 30 30 60 60 20 | n.VyOS.eth2.from.ISP2.``19200``. |
9cc00 | 2d 20 31 39 2c 32 30 30 20 62 70 73 00 60 60 31 60 60 20 2d 20 38 30 20 4d 48 7a 20 63 68 61 6e | -.19,200.bps.``1``.-.80.MHz.chan |
9cc20 | 6e 65 6c 20 77 69 64 74 68 00 60 60 32 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 32 | nel.width.``2.pool.ntp.org``.``2 |
9cc40 | 30 33 2e 30 2e 31 31 33 2e 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 79 | 03.0.113.254``.IP.addreess.on.Vy |
9cc60 | 4f 53 20 65 74 68 31 20 66 72 6f 6d 20 49 53 50 31 00 60 60 32 34 30 30 60 60 20 2d 20 32 34 30 | OS.eth1.from.ISP1.``2400``.-.240 |
9cc80 | 30 20 62 70 73 00 60 60 32 60 60 20 2d 20 31 36 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 | 0.bps.``2``.-.160.MHz.channel.wi |
9cca0 | 64 74 68 00 60 60 33 38 34 30 30 60 60 20 2d 20 33 38 2c 34 30 30 20 62 70 73 20 28 64 65 66 61 | dth.``38400``.-.38,400.bps.(defa |
9ccc0 | 75 6c 74 20 66 6f 72 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 29 00 60 60 33 60 60 20 2d 20 38 30 2b | ult.for.Xen.console).``3``.-.80+ |
9cce0 | 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 34 38 30 30 60 60 20 2d 20 | 80.MHz.channel.width.``4800``.-. |
9cd00 | 34 38 30 30 20 62 70 73 00 60 60 35 37 36 30 30 60 60 20 2d 20 35 37 2c 36 30 30 20 62 70 73 00 | 4800.bps.``57600``.-.57,600.bps. |
9cd20 | 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 36 60 60 20 69 73 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f | ``64:ff9b::/96``.is.the.well-kno |
9cd40 | 77 6e 20 70 72 65 66 69 78 20 66 6f 72 20 49 50 76 34 2d 65 6d 62 65 64 64 65 64 20 49 50 76 36 | wn.prefix.for.IPv4-embedded.IPv6 |
9cd60 | 20 61 64 64 72 65 73 73 65 73 2e 20 54 68 65 20 70 72 65 66 69 78 20 69 73 20 75 73 65 64 20 74 | .addresses..The.prefix.is.used.t |
9cd80 | 6f 20 72 65 70 72 65 73 65 6e 74 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 61 6e | o.represent.IPv4.addresses.in.an |
9cda0 | 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 6f 72 6d 61 74 2e 20 54 68 65 20 49 50 76 34 20 61 | .IPv6.address.format..The.IPv4.a |
9cdc0 | 64 64 72 65 73 73 20 69 73 20 65 6e 63 6f 64 65 64 20 69 6e 20 74 68 65 20 6c 6f 77 2d 6f 72 64 | ddress.is.encoded.in.the.low-ord |
9cde0 | 65 72 20 33 32 20 62 69 74 73 20 6f 66 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 | er.32.bits.of.the.IPv6.address.. |
9ce00 | 54 68 65 20 68 69 67 68 2d 6f 72 64 65 72 20 33 32 20 62 69 74 73 20 61 72 65 20 73 65 74 20 74 | The.high-order.32.bits.are.set.t |
9ce20 | 6f 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 65 66 69 78 20 36 34 3a 66 66 39 62 3a | o.the.well-known.prefix.64:ff9b: |
9ce40 | 3a 2f 39 36 2e 00 60 60 38 30 32 2e 33 61 64 60 60 20 2d 20 49 45 45 45 20 38 30 32 2e 33 61 64 | :/96..``802.3ad``.-.IEEE.802.3ad |
9ce60 | 20 44 79 6e 61 6d 69 63 20 6c 69 6e 6b 20 61 67 67 72 65 67 61 74 69 6f 6e 2e 20 43 72 65 61 74 | .Dynamic.link.aggregation..Creat |
9ce80 | 65 73 20 61 67 67 72 65 67 61 74 69 6f 6e 20 67 72 6f 75 70 73 20 74 68 61 74 20 73 68 61 72 65 | es.aggregation.groups.that.share |
9cea0 | 20 74 68 65 20 73 61 6d 65 20 73 70 65 65 64 20 61 6e 64 20 64 75 70 6c 65 78 20 73 65 74 74 69 | .the.same.speed.and.duplex.setti |
9cec0 | 6e 67 73 2e 20 55 74 69 6c 69 7a 65 73 20 61 6c 6c 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 | ngs..Utilizes.all.slaves.in.the. |
9cee0 | 61 63 74 69 76 65 20 61 67 67 72 65 67 61 74 6f 72 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 | active.aggregator.according.to.t |
9cf00 | 68 65 20 38 30 32 2e 33 61 64 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 60 60 39 36 30 30 | he.802.3ad.specification..``9600 |
9cf20 | 60 60 20 2d 20 39 36 30 30 20 62 70 73 00 60 60 3c 20 64 68 2d 67 72 6f 75 70 20 3e 60 60 20 64 | ``.-.9600.bps.``<.dh-group.>``.d |
9cf40 | 65 66 69 6e 65 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f | efines.a.Diffie-Hellman.group.fo |
9cf60 | 72 20 50 46 53 3b 00 60 60 40 60 60 20 55 73 65 20 40 20 61 73 20 72 65 63 6f 72 64 20 6e 61 6d | r.PFS;.``@``.Use.@.as.record.nam |
9cf80 | 65 20 74 6f 20 73 65 74 20 74 68 65 20 72 65 63 6f 72 64 20 66 6f 72 20 74 68 65 20 72 6f 6f 74 | e.to.set.the.record.for.the.root |
9cfa0 | 20 64 6f 6d 61 69 6e 2e 00 60 60 4b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 3a 60 60 00 | .domain..``Known.limitations:``. |
9cfc0 | 60 60 53 74 61 74 65 66 75 6c 2d 49 50 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 20 61 | ``Stateful-IPv6-Address-Pool``.a |
9cfe0 | 6e 64 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 | nd.``Delegated-IPv6-Prefix-Pool` |
9d000 | 60 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 36 39 31 31 2e 20 49 66 20 74 68 65 | `.are.defined.in.RFC6911..If.the |
9d020 | 79 20 61 72 65 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 | y.are.not.defined.in.your.RADIUS |
9d040 | 20 73 65 72 76 65 72 2c 20 61 64 64 20 6e 65 77 20 64 69 63 74 69 6f 6e 61 72 79 5f 2e 00 60 60 | .server,.add.new.dictionary_..`` |
9d060 | 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f 4e 41 4d 45 3d 5b 69 6e 74 65 72 66 61 63 65 6e 61 6d | WLB_INTERFACE_NAME=[interfacenam |
9d080 | 65 5d 60 60 3a 20 49 6e 74 65 72 66 61 63 65 20 74 6f 20 62 65 20 6d 6f 6e 69 74 6f 72 65 64 00 | e]``:.Interface.to.be.monitored. |
9d0a0 | 60 60 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 5f 53 54 41 54 45 3d 5b 41 43 54 49 56 45 7c 46 41 | ``WLB_INTERFACE_STATE=[ACTIVE|FA |
9d0c0 | 49 4c 45 44 5d 60 60 3a 20 49 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 00 60 60 61 60 60 20 2d | ILED]``:.Interface.state.``a``.- |
9d0e0 | 20 38 30 32 2e 31 31 61 20 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 60 60 20 2d | .802.11a.-.54.Mbits/sec.``ac``.- |
9d100 | 20 38 30 32 2e 31 31 61 63 20 2d 20 31 33 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 63 | .802.11ac.-.1300.Mbits/sec.``acc |
9d120 | 65 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 57 65 | ept-own-nexthop``.-...........We |
9d140 | 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 61 63 63 65 70 | ll-known.communities.value.accep |
9d160 | 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 20 30 78 46 46 46 46 30 30 30 38 00 60 60 61 63 63 65 70 | t-own-nexthop.0xFFFF0008.``accep |
9d180 | 74 2d 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c | t-own``.-...................Well |
9d1a0 | 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 41 43 43 45 50 54 5f | -known.communities.value.ACCEPT_ |
9d1c0 | 4f 57 4e 20 30 78 46 46 46 46 30 30 30 31 00 60 60 61 63 63 65 70 74 60 60 3a 20 61 63 63 65 70 | OWN.0xFFFF0001.``accept``:.accep |
9d1e0 | 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 61 63 63 65 73 73 2d 70 6f 69 6e 74 60 60 20 2d | t.the.packet..``access-point``.- |
9d200 | 20 41 63 63 65 73 73 2d 70 6f 69 6e 74 20 66 6f 72 77 61 72 64 73 20 70 61 63 6b 65 74 73 20 62 | .Access-point.forwards.packets.b |
9d220 | 65 74 77 65 65 6e 20 6f 74 68 65 72 20 6e 6f 64 65 73 00 60 60 61 63 74 69 6f 6e 60 60 20 6b 65 | etween.other.nodes.``action``.ke |
9d240 | 65 70 2d 61 6c 69 76 65 20 66 61 69 6c 75 72 65 20 61 63 74 69 6f 6e 3a 00 60 60 61 63 74 69 76 | ep-alive.failure.action:.``activ |
9d260 | 65 2d 62 61 63 6b 75 70 60 60 20 2d 20 41 63 74 69 76 65 2d 62 61 63 6b 75 70 20 70 6f 6c 69 63 | e-backup``.-.Active-backup.polic |
9d280 | 79 3a 20 4f 6e 6c 79 20 6f 6e 65 20 73 6c 61 76 65 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 69 73 | y:.Only.one.slave.in.the.bond.is |
9d2a0 | 20 61 63 74 69 76 65 2e 20 41 20 64 69 66 66 65 72 65 6e 74 20 73 6c 61 76 65 20 62 65 63 6f 6d | .active..A.different.slave.becom |
9d2c0 | 65 73 20 61 63 74 69 76 65 20 69 66 2c 20 61 6e 64 20 6f 6e 6c 79 20 69 66 2c 20 74 68 65 20 61 | es.active.if,.and.only.if,.the.a |
9d2e0 | 63 74 69 76 65 20 73 6c 61 76 65 20 66 61 69 6c 73 2e 20 54 68 65 20 62 6f 6e 64 27 73 20 4d 41 | ctive.slave.fails..The.bond's.MA |
9d300 | 43 20 61 64 64 72 65 73 73 20 69 73 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 69 73 69 62 6c 65 20 | C.address.is.externally.visible. |
9d320 | 6f 6e 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 72 74 20 28 6e 65 74 77 6f 72 6b 20 61 64 61 70 74 65 | on.only.one.port.(network.adapte |
9d340 | 72 29 20 74 6f 20 61 76 6f 69 64 20 63 6f 6e 66 75 73 69 6e 67 20 74 68 65 20 73 77 69 74 63 68 | r).to.avoid.confusing.the.switch |
9d360 | 2e 00 60 60 61 64 61 70 74 69 76 65 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 | ..``adaptive-load-balance``.-.Ad |
9d380 | 61 70 74 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 69 6e 63 6c 75 64 65 73 20 | aptive.load.balancing:.includes. |
9d3a0 | 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 70 6c 75 73 20 72 65 63 65 69 | transmit-load-balance.plus.recei |
9d3c0 | 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 66 6f 72 20 49 50 56 34 20 74 72 61 66 66 | ve.load.balancing.for.IPV4.traff |
9d3e0 | 69 63 2c 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 | ic,.and.does.not.require.any.spe |
9d400 | 63 69 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 6f 72 74 2e 20 54 68 65 20 72 65 63 65 69 76 65 | cial.switch.support..The.receive |
9d420 | 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 41 | .load.balancing.is.achieved.by.A |
9d440 | 52 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 54 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 | RP.negotiation..The.bonding.driv |
9d460 | 65 72 20 69 6e 74 65 72 63 65 70 74 73 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 | er.intercepts.the.ARP.Replies.se |
9d480 | 6e 74 20 62 79 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 6f 6e 20 74 68 65 69 72 20 | nt.by.the.local.system.on.their. |
9d4a0 | 77 61 79 20 6f 75 74 20 61 6e 64 20 6f 76 65 72 77 72 69 74 65 73 20 74 68 65 20 73 6f 75 72 63 | way.out.and.overwrites.the.sourc |
9d4c0 | 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 77 69 74 68 20 74 68 65 20 75 6e 69 71 | e.hardware.address.with.the.uniq |
9d4e0 | 75 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 6f 6e 65 20 6f 66 20 74 68 | ue.hardware.address.of.one.of.th |
9d500 | 65 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 73 75 63 68 20 74 68 61 74 20 64 | e.slaves.in.the.bond.such.that.d |
9d520 | 69 66 66 65 72 65 6e 74 20 70 65 65 72 73 20 75 73 65 20 64 69 66 66 65 72 65 6e 74 20 68 61 72 | ifferent.peers.use.different.har |
9d540 | 64 77 61 72 65 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 2e 00 | dware.addresses.for.the.server.. |
9d560 | 60 60 61 67 67 72 65 73 73 69 76 65 60 60 20 75 73 65 20 41 67 67 72 65 73 73 69 76 65 20 6d 6f | ``aggressive``.use.Aggressive.mo |
9d580 | 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 | de.for.Key.Exchanges.in.the.IKEv |
9d5a0 | 31 20 70 72 6f 74 6f 63 6f 6c 20 61 67 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 69 73 20 6d 75 | 1.protocol.aggressive.mode.is.mu |
9d5c0 | 63 68 20 6d 6f 72 65 20 69 6e 73 65 63 75 72 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 4d 61 69 | ch.more.insecure.compared.to.Mai |
9d5e0 | 6e 20 6d 6f 64 65 3b 00 60 60 61 6c 6c 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6c 6c 20 63 68 | n.mode;.``all-available``.all.ch |
9d600 | 65 63 6b 69 6e 67 20 74 61 72 67 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 | ecking.target.addresses.must.be. |
9d620 | 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 | available.to.pass.this.check.``a |
9d640 | 6e 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6e 79 20 6f 66 20 74 68 65 20 63 68 65 63 6b 69 | ny-available``.any.of.the.checki |
9d660 | 6e 67 20 74 61 72 67 65 74 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 | ng.target.addresses.must.be.avai |
9d680 | 6c 61 62 6c 65 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 6e 79 60 60 | lable.to.pass.this.check.``any`` |
9d6a0 | 20 55 73 65 20 61 6e 79 20 61 73 20 72 65 63 6f 72 64 20 6e 61 6d 65 20 74 6f 20 63 6f 6e 66 69 | .Use.any.as.record.name.to.confi |
9d6c0 | 67 75 72 65 20 74 68 65 20 72 65 63 6f 72 64 20 61 73 20 61 20 77 69 6c 64 63 61 72 64 2e 00 60 | gure.the.record.as.a.wildcard..` |
9d6e0 | 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6c 6f 63 61 6c 2d 69 64 2f 72 65 6d 6f 74 65 2d | `authentication.local-id/remote- |
9d700 | 69 64 60 60 20 2d 20 49 4b 45 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 69 73 20 75 73 65 | id``.-.IKE.identification.is.use |
9d720 | 64 20 66 6f 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 6f 66 20 56 50 4e 20 70 65 65 72 20 64 65 76 | d.for.validation.of.VPN.peer.dev |
9d740 | 69 63 65 73 20 64 75 72 69 6e 67 20 49 4b 45 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 | ices.during.IKE.negotiation..If. |
9d760 | 79 6f 75 20 64 6f 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 | you.do.not.configure.local/remot |
9d780 | 65 2d 69 64 65 6e 74 69 74 79 2c 20 74 68 65 20 64 65 76 69 63 65 20 75 73 65 73 20 74 68 65 20 | e-identity,.the.device.uses.the. |
9d7a0 | 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 68 61 74 20 63 6f 72 72 65 73 | IPv4.or.IPv6.address.that.corres |
9d7c0 | 70 6f 6e 64 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 70 65 65 72 20 62 | ponds.to.the.local/remote.peer.b |
9d7e0 | 79 20 64 65 66 61 75 6c 74 2e 20 49 6e 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 73 65 | y.default..In.certain.network.se |
9d800 | 74 75 70 73 20 28 6c 69 6b 65 20 69 70 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 | tups.(like.ipsec.interface.with. |
9d820 | 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 2c 20 6f 72 20 62 65 68 69 6e 64 20 74 68 65 20 4e | dynamic.address,.or.behind.the.N |
9d840 | 41 54 20 29 2c 20 74 68 65 20 49 4b 45 20 49 44 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 | AT.),.the.IKE.ID.received.from.t |
9d860 | 68 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 49 4b 45 20 67 | he.peer.does.not.match.the.IKE.g |
9d880 | 61 74 65 77 61 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 2e | ateway.configured.on.the.device. |
9d8a0 | 20 54 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 61 20 50 68 61 73 65 20 31 20 76 61 6c 69 | .This.can.lead.to.a.Phase.1.vali |
9d8c0 | 64 61 74 69 6f 6e 20 66 61 69 6c 75 72 65 2e 20 53 6f 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f | dation.failure..So,.make.sure.to |
9d8e0 | 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 69 64 20 65 | .configure.the.local/remote.id.e |
9d900 | 78 70 6c 69 63 69 74 6c 79 20 61 6e 64 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 49 4b | xplicitly.and.ensure.that.the.IK |
9d920 | 45 20 49 44 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 | E.ID.is.the.same.as.the.remote-i |
9d940 | 64 65 6e 74 69 74 79 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 70 65 65 72 20 64 | dentity.configured.on.the.peer.d |
9d960 | 65 76 69 63 65 2e 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 | evice..``authentication``.-.conf |
9d980 | 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f | igure.authentication.between.VyO |
9d9a0 | 53 20 61 6e 64 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 66 20 70 72 65 2d 73 68 61 72 | S.and.a.remote.peer..If.pre-shar |
9d9c0 | 65 64 2d 73 65 63 72 65 74 20 6d 6f 64 65 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 73 65 63 72 | ed-secret.mode.is.used,.the.secr |
9d9e0 | 65 74 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 60 60 73 65 74 20 | et.key.must.be.defined.in.``set. |
9da00 | 76 70 6e 20 69 70 73 65 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 61 6e 64 20 73 | vpn.ipsec.authentication``.and.s |
9da20 | 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 | uboptions:.``authentication``.-. |
9da40 | 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e | configure.authentication.between |
9da60 | 20 56 79 4f 53 20 61 6e 64 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 53 75 62 6f 70 74 69 | .VyOS.and.a.remote.peer..Subopti |
9da80 | 6f 6e 73 3a 00 60 60 62 60 60 20 2d 20 38 30 32 2e 31 31 62 20 2d 20 31 31 20 4d 62 69 74 73 2f | ons:.``b``.-.802.11b.-.11.Mbits/ |
9daa0 | 73 65 63 00 60 60 62 61 62 65 6c 60 60 20 2d 20 42 61 62 65 6c 20 72 6f 75 74 69 6e 67 20 70 72 | sec.``babel``.-.Babel.routing.pr |
9dac0 | 6f 74 6f 63 6f 6c 20 28 42 61 62 65 6c 29 00 60 60 62 65 67 69 6e 60 60 20 4d 61 74 63 68 65 73 | otocol.(Babel).``begin``.Matches |
9dae0 | 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 60 | .the.beginning.of.the.URL.path.` |
9db00 | 60 62 67 70 60 60 20 2d 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c | `bgp``.-.Border.Gateway.Protocol |
9db20 | 20 28 42 47 50 29 00 60 60 62 69 6e 64 60 60 20 2d 20 73 65 6c 65 63 74 20 61 20 56 54 49 20 69 | .(BGP).``bind``.-.select.a.VTI.i |
9db40 | 6e 74 65 72 66 61 63 65 20 74 6f 20 62 69 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 | nterface.to.bind.to.this.peer;.` |
9db60 | 60 62 6c 61 63 6b 68 6f 6c 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | `blackhole``.-.................. |
9db80 | 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 42 | ..Well-known.communities.value.B |
9dba0 | 4c 41 43 4b 48 4f 4c 45 20 30 78 46 46 46 46 30 32 39 41 00 60 60 62 72 6f 61 64 63 61 73 74 60 | LACKHOLE.0xFFFF029A.``broadcast` |
9dbc0 | 60 20 2d 20 42 72 6f 61 64 63 61 73 74 20 70 6f 6c 69 63 79 3a 20 74 72 61 6e 73 6d 69 74 73 20 | `.-.Broadcast.policy:.transmits. |
9dbe0 | 65 76 65 72 79 74 68 69 6e 67 20 6f 6e 20 61 6c 6c 20 73 6c 61 76 65 20 69 6e 74 65 72 66 61 63 | everything.on.all.slave.interfac |
9dc00 | 65 73 2e 00 60 60 62 75 72 73 74 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 | es..``burst``:.Number.of.packets |
9dc20 | 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6f 76 65 72 73 68 6f 6f 74 20 74 68 65 20 6c 69 6d 69 74 20 | .allowed.to.overshoot.the.limit. |
9dc40 | 77 69 74 68 69 6e 20 60 60 70 65 72 69 6f 64 60 60 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 | within.``period``..Default.5..`` |
9dc60 | 63 61 2d 63 65 72 74 2d 66 69 6c 65 60 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 | ca-cert-file``.-.CA.certificate. |
9dc80 | 66 69 6c 65 2e 20 55 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 | file..Using.for.authenticating.r |
9dca0 | 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 61 2d 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d | emote.peer;.``ca-certificate``.- |
9dcc0 | 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 | .CA.certificate.in.PKI.configura |
9dce0 | 74 69 6f 6e 2e 20 55 73 69 6e 67 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 | tion..Using.for.authenticating.r |
9dd00 | 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 | emote.peer;.``cdp``.-.Listen.for |
9dd20 | 20 43 44 50 20 66 6f 72 20 43 69 73 63 6f 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 | .CDP.for.Cisco.routers/switches. |
9dd40 | 60 60 63 65 72 74 2d 66 69 6c 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 | ``cert-file``.-.certificate.file |
9dd60 | 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 | ,.which.will.be.used.for.authent |
9dd80 | 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 | icating.local.router.on.remote.p |
9dda0 | 65 65 72 3b 00 60 60 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 | eer;.``certificate``.-.certifica |
9ddc0 | 74 65 20 66 69 6c 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 | te.file.in.PKI.configuration,.wh |
9dde0 | 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 | ich.will.be.used.for.authenticat |
9de00 | 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b | ing.local.router.on.remote.peer; |
9de20 | 00 60 60 63 6c 65 61 72 60 60 20 63 6c 6f 73 65 73 20 74 68 65 20 43 48 49 4c 44 5f 53 41 20 61 | .``clear``.closes.the.CHILD_SA.a |
9de40 | 6e 64 20 64 6f 65 73 20 6e 6f 74 20 74 61 6b 65 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 20 | nd.does.not.take.further.action. |
9de60 | 28 64 65 66 61 75 6c 74 29 3b 00 60 60 63 6c 65 61 72 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 | (default);.``clear``.set.action. |
9de80 | 74 6f 20 63 6c 65 61 72 3b 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 | to.clear;.``close-action.=.none. |
9dea0 | 7c 20 63 6c 65 61 72 20 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 64 65 66 | |.clear.|.hold.|.restart``.-.def |
9dec0 | 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 | ines.the.action.to.take.if.the.r |
9dee0 | 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 | emote.peer.unexpectedly.closes.a |
9df00 | 20 43 48 49 4c 44 5f 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 | .CHILD_SA.(see.above.for.meaning |
9df20 | 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c | .of.values)..A.closeaction.shoul |
9df40 | 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 69 66 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 | d.not.be.used.if.the.peer.uses.r |
9df60 | 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 | eauthentication.or.uniqueids..`` |
9df80 | 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 74 72 | close-action.=.none.|.clear.|.tr |
9dfa0 | 61 70 20 7c 20 73 74 61 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f | ap.|.start``.-.defines.the.actio |
9dfc0 | 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 | n.to.take.if.the.remote.peer.une |
9dfe0 | 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 65 | xpectedly.closes.a.CHILD_SA.(see |
9e000 | 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 41 | .above.for.meaning.of.values)..A |
9e020 | 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 | .closeaction.should.not.be.used. |
9e040 | 69 66 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f | if.the.peer.uses.reauthenticatio |
9e060 | 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 60 60 | n.or.uniqueids..``close-action`` |
9e080 | 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 | .defines.the.action.to.take.if.t |
9e0a0 | 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 | he.remote.peer.unexpectedly.clos |
9e0c0 | 65 73 20 61 20 43 48 49 4c 44 5f 53 41 3a 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 20 | es.a.CHILD_SA:.``compression``.. |
9e0e0 | 45 6e 61 62 6c 65 73 20 74 68 65 20 20 49 50 43 6f 6d 70 28 49 50 20 50 61 79 6c 6f 61 64 20 43 | Enables.the..IPComp(IP.Payload.C |
9e100 | 6f 6d 70 72 65 73 73 69 6f 6e 29 20 70 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 | ompression).protocol.which.allow |
9e120 | 73 20 63 6f 6d 70 72 65 73 73 69 6e 67 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 49 50 20 | s.compressing.the.content.of.IP. |
9e140 | 70 61 63 6b 65 74 73 2e 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 77 68 65 74 68 65 72 | packets..``compression``.whether |
9e160 | 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 6f 66 20 63 6f 6e 74 65 6e 74 20 69 | .IPComp.compression.of.content.i |
9e180 | 73 20 70 72 6f 70 6f 73 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 | s.proposed.on.the.connection:.`` |
9e1a0 | 63 6f 6e 6e 65 63 74 65 64 60 60 20 2d 20 43 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 28 | connected``.-.Connected.routes.( |
9e1c0 | 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 73 75 62 6e 65 74 20 6f 72 20 68 6f 73 74 | directly.attached.subnet.or.host |
9e1e0 | 29 00 60 60 63 6f 6e 6e 65 63 74 69 6f 6e 2d 74 79 70 65 60 60 20 2d 20 68 6f 77 20 74 6f 20 68 | ).``connection-type``.-.how.to.h |
9e200 | 61 6e 64 6c 65 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 20 50 | andle.this.connection.process..P |
9e220 | 6f 73 73 69 62 6c 65 20 76 61 72 69 61 6e 74 73 3a 00 60 60 63 6f 6e 74 69 6e 75 65 60 60 3a 20 | ossible.variants:.``continue``:. |
9e240 | 63 6f 6e 74 69 6e 75 65 20 70 61 72 73 69 6e 67 20 6e 65 78 74 20 72 75 6c 65 2e 00 60 60 63 72 | continue.parsing.next.rule..``cr |
9e260 | 6c 2d 66 69 6c 65 60 60 20 2d 20 66 69 6c 65 20 77 69 74 68 20 74 68 65 20 43 65 72 74 69 66 69 | l-file``.-.file.with.the.Certifi |
9e280 | 63 61 74 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 4c 69 73 74 2e 20 55 73 69 6e 67 20 74 6f 20 63 | cate.Revocation.List..Using.to.c |
9e2a0 | 68 65 63 6b 20 69 66 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 72 65 | heck.if.a.certificate.for.the.re |
9e2c0 | 6d 6f 74 65 20 70 65 65 72 20 69 73 20 76 61 6c 69 64 20 6f 72 20 72 65 76 6f 6b 65 64 3b 00 60 | mote.peer.is.valid.or.revoked;.` |
9e2e0 | 60 64 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 64 61 79 | `d``.-.Execution.interval.in.day |
9e300 | 73 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d | s.``dead-peer-detection.action.= |
9e320 | 20 63 6c 65 61 72 20 7c 20 68 6f 6c 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f | .clear.|.hold.|.restart``.-.R_U_ |
9e340 | 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 | THERE.notification.messages(IKEv |
9e360 | 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 | 1).or.empty.INFORMATIONAL.messag |
9e380 | 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 | es.(IKEv2).are.periodically.sent |
9e3a0 | 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 | .in.order.to.check.the.livelines |
9e3c0 | 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 | s.of.the.IPsec.peer..The.values. |
9e3e0 | 63 6c 65 61 72 2c 20 68 6f 6c 64 2c 20 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 | clear,.hold,.and.restart.all.act |
9e400 | 69 76 61 74 65 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 | ivate.DPD.and.determine.the.acti |
9e420 | 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 | on.to.perform.on.a.timeout..With |
9e440 | 20 60 60 63 6c 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f | .``clear``.the.connection.is.clo |
9e460 | 73 65 64 20 77 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 | sed.with.no.further.actions.take |
9e480 | 6e 2e 20 60 60 68 6f 6c 64 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 | n..``hold``.installs.a.trap.poli |
9e4a0 | 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 | cy,.which.will.catch.matching.tr |
9e4c0 | 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 | affic.and.tries.to.re-negotiate. |
9e4e0 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 | the.connection.on.demand..``rest |
9e500 | 61 72 74 60 60 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 | art``.will.immediately.trigger.a |
9e520 | 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f | n.attempt.to.re-negotiate.the.co |
9e540 | 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 | nnection..``dead-peer-detection. |
9e560 | 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 72 20 7c 20 74 72 61 70 20 7c 20 72 65 73 74 61 72 74 60 | action.=.clear.|.trap.|.restart` |
9e580 | 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 | `.-.R_U_THERE.notification.messa |
9e5a0 | 67 65 73 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 | ges(IKEv1).or.empty.INFORMATIONA |
9e5c0 | 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 | L.messages.(IKEv2).are.periodica |
9e5e0 | 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c | lly.sent.in.order.to.check.the.l |
9e600 | 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 | iveliness.of.the.IPsec.peer..The |
9e620 | 20 76 61 6c 75 65 73 20 63 6c 65 61 72 2c 20 74 72 61 70 2c 20 61 6e 64 20 72 65 73 74 61 72 74 | .values.clear,.trap,.and.restart |
9e640 | 20 61 6c 6c 20 61 63 74 69 76 61 74 65 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 | .all.activate.DPD.and.determine. |
9e660 | 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f | the.action.to.perform.on.a.timeo |
9e680 | 75 74 2e 20 57 69 74 68 20 60 60 63 6c 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | ut..With.``clear``.the.connectio |
9e6a0 | 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 | n.is.closed.with.no.further.acti |
9e6c0 | 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 | ons.taken..``trap``.installs.a.t |
9e6e0 | 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 | rap.policy,.which.will.catch.mat |
9e700 | 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 | ching.traffic.and.tries.to.re-ne |
9e720 | 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 | gotiate.the.connection.on.demand |
9e740 | 2e 20 60 60 72 65 73 74 61 72 74 60 60 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 | ..``restart``.will.immediately.t |
9e760 | 72 69 67 67 65 72 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 | rigger.an.attempt.to.re-negotiat |
9e780 | 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 | e.the.connection..``dead-peer-de |
9e7a0 | 74 65 63 74 69 6f 6e 60 60 20 63 6f 6e 74 72 6f 6c 73 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 | tection``.controls.the.use.of.th |
9e7c0 | 65 20 44 65 61 64 20 50 65 65 72 20 44 65 74 65 63 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 | e.Dead.Peer.Detection.protocol.( |
9e7e0 | 44 50 44 2c 20 52 46 43 20 33 37 30 36 29 20 77 68 65 72 65 20 52 5f 55 5f 54 48 45 52 45 20 6e | DPD,.RFC.3706).where.R_U_THERE.n |
9e800 | 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 31 29 20 6f 72 20 | otification.messages.(IKEv1).or. |
9e820 | 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b | empty.INFORMATIONAL.messages.(IK |
9e840 | 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 | Ev2).are.periodically.sent.in.or |
9e860 | 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 | der.to.check.the.liveliness.of.t |
9e880 | 68 65 20 49 50 73 65 63 20 70 65 65 72 3a 00 60 60 64 65 66 61 75 6c 74 2d 65 73 70 2d 67 72 6f | he.IPsec.peer:.``default-esp-gro |
9e8a0 | 75 70 60 60 20 2d 20 45 53 50 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 62 79 20 64 65 66 61 75 | up``.-.ESP.group.to.use.by.defau |
9e8c0 | 6c 74 20 66 6f 72 20 74 72 61 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 4d 69 67 68 74 | lt.for.traffic.encryption..Might |
9e8e0 | 20 62 65 20 6f 76 65 72 77 72 69 74 74 65 6e 20 62 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 65 | .be.overwritten.by.individual.se |
9e900 | 74 74 69 6e 67 73 20 66 6f 72 20 74 75 6e 6e 65 6c 20 6f 72 20 56 54 49 20 69 6e 74 65 72 66 61 | ttings.for.tunnel.or.VTI.interfa |
9e920 | 63 65 20 62 69 6e 64 69 6e 67 3b 00 60 60 64 65 73 63 72 69 70 74 69 6f 6e 60 60 20 2d 20 64 65 | ce.binding;.``description``.-.de |
9e940 | 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 64 68 2d 67 72 | scription.for.this.peer;.``dh-gr |
9e960 | 6f 75 70 60 60 20 64 68 2d 67 72 6f 75 70 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 | oup``.dh-group;.``dhcp-interface |
9e980 | 60 60 20 2d 20 49 44 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 67 65 6e 65 72 | ``.-.ID.for.authentication.gener |
9e9a0 | 61 74 65 64 20 66 72 6f 6d 20 44 48 43 50 20 61 64 64 72 65 73 73 20 64 79 6e 61 6d 69 63 61 6c | ated.from.DHCP.address.dynamical |
9e9c0 | 6c 79 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 20 2d 20 75 73 65 20 61 6e 20 | ly;.``dhcp-interface``.-.use.an. |
9e9e0 | 49 50 20 61 64 64 72 65 73 73 2c 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 44 48 43 50 20 66 | IP.address,.received.from.DHCP.f |
9ea00 | 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 | or.IPSec.connection.with.this.pe |
9ea20 | 65 72 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 | er,.instead.of.``local-address`` |
9ea40 | 3b 00 60 60 64 69 73 61 62 6c 65 2d 6d 6f 62 69 6b 65 60 60 20 64 69 73 61 62 6c 65 73 20 4d 4f | ;.``disable-mobike``.disables.MO |
9ea60 | 42 49 4b 45 20 53 75 70 70 6f 72 74 2e 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 | BIKE.Support..MOBIKE.is.only.ava |
9ea80 | 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b 45 76 32 20 61 6e 64 20 65 6e 61 62 6c 65 64 20 62 79 20 | ilable.for.IKEv2.and.enabled.by. |
9eaa0 | 64 65 66 61 75 6c 74 2e 00 60 60 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 | default..``disable-route-autoins |
9eac0 | 74 61 6c 6c 60 60 20 2d 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 77 68 65 6e 20 63 6f 6e 66 69 67 | tall``.-.This.option.when.config |
9eae0 | 75 72 65 64 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 72 6f 75 74 65 73 20 69 6e 73 74 61 6c 6c | ured.disables.the.routes.install |
9eb00 | 65 64 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 74 61 62 6c 65 20 32 32 30 20 66 6f 72 20 | ed.in.the.default.table.220.for. |
9eb20 | 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 69 70 73 65 63 2e 20 49 74 20 69 73 20 6d 6f 73 74 6c 79 | site-to-site.ipsec..It.is.mostly |
9eb40 | 20 75 73 65 64 20 77 69 74 68 20 56 54 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 | .used.with.VTI.configuration..`` |
9eb60 | 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 44 6f 20 6e | disable-route-autoinstall``.Do.n |
9eb80 | 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 20 72 6f 75 74 65 73 20 | ot.automatically.install.routes. |
9eba0 | 74 6f 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 | to.remote.networks;.``disable``. |
9ebc0 | 2d 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b 00 60 60 64 69 73 61 62 6c 65 | -.disable.this.tunnel;.``disable |
9ebe0 | 60 60 20 44 69 73 61 62 6c 65 20 50 46 53 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 | ``.Disable.PFS;.``disable``.disa |
9ec00 | 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 | ble.IPComp.compression.(default) |
9ec20 | 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 4d 4f 42 49 4b 45 3b 00 60 60 | ;.``disable``.disable.MOBIKE;.`` |
9ec40 | 64 72 6f 70 60 60 3a 20 64 72 6f 70 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 65 63 64 73 61 | drop``:.drop.the.packet..``ecdsa |
9ec60 | 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 36 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 | -sha2-nistp256``.``ecdsa-sha2-ni |
9ec80 | 73 74 70 33 38 34 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 | stp384``.``ecdsa-sha2-nistp521`` |
9eca0 | 00 60 60 65 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 45 44 50 20 66 6f 72 20 45 78 | .``edp``.-.Listen.for.EDP.for.Ex |
9ecc0 | 74 72 65 6d 65 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 65 6e 61 62 6c 65 60 | treme.routers/switches.``enable` |
9ece0 | 60 20 49 6e 68 65 72 69 74 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 | `.Inherit.Diffie-Hellman.group.f |
9ed00 | 72 6f 6d 20 49 4b 45 20 67 72 6f 75 70 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 65 6e 61 62 6c | rom.IKE.group.(default);.``enabl |
9ed20 | 65 60 60 20 65 6e 61 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 3b 00 60 | e``.enable.IPComp.compression;.` |
9ed40 | 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 49 4b 45 20 28 64 65 66 61 75 6c 74 | `enable``.enable.MOBIKE.(default |
9ed60 | 20 66 6f 72 20 49 4b 45 76 32 29 3b 00 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 | .for.IKEv2);.``encryption``.encr |
9ed80 | 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c 74 20 31 32 38 20 62 69 | yption.algorithm.(default.128.bi |
9eda0 | 74 20 41 45 53 2d 43 42 43 29 3b 00 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 | t.AES-CBC);.``encryption``.encry |
9edc0 | 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 3b 00 60 60 65 6e 64 60 60 20 4d 61 74 63 68 65 73 | ption.algorithm;.``end``.Matches |
9ede0 | 20 74 68 65 20 65 6e 64 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 2e 00 60 60 65 73 70 2d | .the.end.of.the.URL.path..``esp- |
9ee00 | 67 72 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 65 | group``.-.define.ESP.group.for.e |
9ee20 | 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 69 73 20 | ncrypt.traffic,.defined.by.this. |
9ee40 | 74 75 6e 6e 65 6c 3b 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 | tunnel;.``esp-group``.-.define.E |
9ee60 | 53 50 20 67 72 6f 75 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 70 61 | SP.group.for.encrypt.traffic,.pa |
9ee80 | 73 73 65 64 20 74 68 69 73 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 2e 00 60 60 65 78 61 63 74 | ssed.this.VTI.interface..``exact |
9eea0 | 60 60 20 52 65 71 75 69 72 65 73 20 61 6e 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 20 6f 66 20 | ``.Requires.an.exactly.match.of. |
9eec0 | 74 68 65 20 55 52 4c 20 70 61 74 68 00 60 60 66 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f | the.URL.path.``fdp``.-.Listen.fo |
9eee0 | 72 20 46 44 50 20 66 6f 72 20 46 6f 75 6e 64 72 79 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 | r.FDP.for.Foundry.routers/switch |
9ef00 | 65 73 00 60 60 66 69 6c 65 60 60 20 2d 20 70 61 74 68 20 74 6f 20 74 68 65 20 6b 65 79 20 66 69 | es.``file``.-.path.to.the.key.fi |
9ef20 | 6c 65 3b 00 60 60 66 6c 65 78 76 70 6e 60 60 20 41 6c 6c 6f 77 20 46 6c 65 78 56 50 4e 20 76 65 | le;.``flexvpn``.Allow.FlexVPN.ve |
9ef40 | 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 | ndor.ID.payload.(IKEv2.only)..Se |
9ef60 | 6e 64 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 | nd.the.Cisco.FlexVPN.vendor.ID.p |
9ef80 | 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 | ayload.(IKEv2.only),.which.is.re |
9efa0 | 71 75 69 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 | quired.in.order.to.make.Cisco.br |
9efc0 | 61 6e 64 20 64 65 76 69 63 65 73 20 61 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 | and.devices.allow.negotiating.a. |
9efe0 | 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 | local.traffic.selector.(from.str |
9f000 | 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 | ongSwan's.point.of.view).that.is |
9f020 | 20 6e 6f 74 20 74 68 65 20 61 73 73 69 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 | .not.the.assigned.virtual.IP.add |
9f040 | 72 65 73 73 20 69 66 20 73 75 63 68 20 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 | ress.if.such.an.address.is.reque |
9f060 | 73 74 65 64 20 62 79 20 73 74 72 6f 6e 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 | sted.by.strongSwan..Sending.the. |
9f080 | 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 | Cisco.FlexVPN.vendor.ID.prevents |
9f0a0 | 20 74 68 65 20 70 65 65 72 20 66 72 6f 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 | .the.peer.from.narrowing.the.ini |
9f0c0 | 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 | tiator's.local.traffic.selector. |
9f0e0 | 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 | and.allows.it.to.e.g..negotiate. |
9f100 | 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 | a.TS.of.0.0.0.0/0.==.0.0.0.0/0.i |
9f120 | 6e 73 74 65 61 64 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 | nstead..This.has.been.tested.wit |
9f140 | 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 | h.a."tunnel.mode.ipsec.ipv4".Cis |
9f160 | 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b | co.template.but.should.also.work |
9f180 | 20 66 6f 72 20 47 52 45 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6c 65 78 76 70 | .for.GRE.encapsulation;.``flexvp |
9f1a0 | 6e 60 60 20 41 6c 6c 6f 77 73 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 | n``.Allows.FlexVPN.vendor.ID.pay |
9f1c0 | 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 | load.(IKEv2.only)..Send.the.Cisc |
9f1e0 | 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 | o.FlexVPN.vendor.ID.payload.(IKE |
9f200 | 76 32 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f | v2.only),.which.is.required.in.o |
9f220 | 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 | rder.to.make.Cisco.brand.devices |
9f240 | 20 61 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 | .allow.negotiating.a.local.traff |
9f260 | 69 63 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 | ic.selector.(from.strongSwan's.p |
9f280 | 6f 69 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 | oint.of.view).that.is.not.the.as |
9f2a0 | 73 69 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 | signed.virtual.IP.address.if.suc |
9f2c0 | 68 20 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 | h.an.address.is.requested.by.str |
9f2e0 | 6f 6e 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 | ongSwan..Sending.the.Cisco.FlexV |
9f300 | 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 | PN.vendor.ID.prevents.the.peer.f |
9f320 | 72 6f 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f | rom.narrowing.the.initiator's.lo |
9f340 | 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 | cal.traffic.selector.and.allows. |
9f360 | 69 74 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 | it.to.e.g..negotiate.a.TS.of.0.0 |
9f380 | 2e 30 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 | .0.0/0.==.0.0.0.0/0.instead..Thi |
9f3a0 | 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c | s.has.been.tested.with.a."tunnel |
9f3c0 | 20 6d 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 | .mode.ipsec.ipv4".Cisco.template |
9f3e0 | 20 62 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e | .but.should.also.work.for.GRE.en |
9f400 | 63 61 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6f 72 63 65 2d 75 64 70 2d 65 6e 63 61 70 73 75 | capsulation;.``force-udp-encapsu |
9f420 | 6c 61 74 69 6f 6e 60 60 20 2d 20 66 6f 72 63 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f | lation``.-.force.encapsulation.o |
9f440 | 66 20 45 53 50 20 69 6e 74 6f 20 55 44 50 20 64 61 74 61 67 72 61 6d 73 2e 20 55 73 65 66 75 6c | f.ESP.into.UDP.datagrams..Useful |
9f460 | 20 69 6e 20 63 61 73 65 20 69 66 20 62 65 74 77 65 65 6e 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 | .in.case.if.between.local.and.re |
9f480 | 6d 6f 74 65 20 73 69 64 65 20 69 73 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 2c 20 77 68 | mote.side.is.firewall.or.NAT,.wh |
9f4a0 | 69 63 68 20 6e 6f 74 20 61 6c 6c 6f 77 73 20 70 61 73 73 69 6e 67 20 70 6c 61 69 6e 20 45 53 50 | ich.not.allows.passing.plain.ESP |
9f4c0 | 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 74 68 65 6d 3b 00 60 60 67 60 60 20 2d 20 38 | .packets.between.them;.``g``.-.8 |
9f4e0 | 30 32 2e 31 31 67 20 2d 20 35 34 20 4d 62 69 74 73 2f 73 65 63 20 28 64 65 66 61 75 6c 74 29 00 | 02.11g.-.54.Mbits/sec.(default). |
9f500 | 60 60 67 72 61 63 65 66 75 6c 2d 73 68 75 74 64 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 | ``graceful-shutdown``.-......... |
9f520 | 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 | ...Well-known.communities.value. |
9f540 | 47 52 41 43 45 46 55 4c 5f 53 48 55 54 44 4f 57 4e 20 30 78 46 46 46 46 30 30 30 30 00 60 60 68 | GRACEFUL_SHUTDOWN.0xFFFF0000.``h |
9f560 | 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 68 6f 75 72 73 | ``.-.Execution.interval.in.hours |
9f580 | 00 60 60 68 61 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c | .``hash``.hash.algorithm.(defaul |
9f5a0 | 74 20 73 68 61 31 29 2e 00 60 60 68 61 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d | t.sha1)..``hash``.hash.algorithm |
9f5c0 | 2e 00 60 60 68 6f 6c 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 20 28 64 | ..``hold``.set.action.to.hold.(d |
9f5e0 | 65 66 61 75 6c 74 29 00 60 60 68 6f 6c 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 | efault).``hold``.set.action.to.h |
9f600 | 6f 6c 64 3b 00 60 60 68 74 34 30 2b 60 60 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 | old;.``ht40+``.-.Both.20.MHz.and |
9f620 | 20 34 30 20 4d 48 7a 20 77 69 74 68 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 61 | .40.MHz.with.secondary.channel.a |
9f640 | 62 6f 76 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 74 34 30 2d | bove.the.primary.channel.``ht40- |
9f660 | 60 60 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 | ``.-.Both.20.MHz.and.40.MHz.with |
9f680 | 20 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 62 65 6c 6f 77 20 74 68 65 20 70 72 69 | .secondary.channel.below.the.pri |
9f6a0 | 6d 61 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 76 63 30 60 60 20 2d 20 58 65 6e 20 63 6f 6e 73 | mary.channel.``hvc0``.-.Xen.cons |
9f6c0 | 6f 6c 65 00 60 60 69 64 60 60 20 2d 20 73 74 61 74 69 63 20 49 44 27 73 20 66 6f 72 20 61 75 74 | ole.``id``.-.static.ID's.for.aut |
9f6e0 | 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 49 6e 20 67 65 6e 65 72 61 6c 20 6c 6f 63 61 6c 20 61 6e | hentication..In.general.local.an |
9f700 | 64 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 20 60 60 3c 78 2e 78 2e 78 2e 78 3e 60 60 2c 20 | d.remote.address.``<x.x.x.x>``,. |
9f720 | 60 60 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 60 60 20 6f 72 20 60 60 25 61 6e 79 60 | ``<h:h:h:h:h:h:h:h>``.or.``%any` |
9f740 | 60 3b 00 60 60 69 6b 65 2d 67 72 6f 75 70 60 60 20 2d 20 49 4b 45 20 67 72 6f 75 70 20 74 6f 20 | `;.``ike-group``.-.IKE.group.to. |
9f760 | 75 73 65 20 66 6f 72 20 6b 65 79 20 65 78 63 68 61 6e 67 65 73 3b 00 60 60 69 6b 65 76 31 60 60 | use.for.key.exchanges;.``ikev1`` |
9f780 | 20 75 73 65 20 49 4b 45 76 31 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 | .use.IKEv1.for.Key.Exchange;.``i |
9f7a0 | 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 2d 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 72 | kev2-reauth``.-.reauthenticate.r |
9f7c0 | 65 6d 6f 74 65 20 70 65 65 72 20 64 75 72 69 6e 67 20 74 68 65 20 72 65 6b 65 79 69 6e 67 20 70 | emote.peer.during.the.rekeying.p |
9f7e0 | 72 6f 63 65 73 73 2e 20 43 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 69 74 68 20 49 4b | rocess..Can.be.used.only.with.IK |
9f800 | 45 76 32 2e 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 49 4b 45 5f 53 41 20 66 72 6f 6d 20 74 68 | Ev2..Create.a.new.IKE_SA.from.th |
9f820 | 65 20 73 63 72 61 74 63 68 20 61 6e 64 20 74 72 79 20 74 6f 20 72 65 63 72 65 61 74 65 20 61 6c | e.scratch.and.try.to.recreate.al |
9f840 | 6c 20 49 50 73 65 63 20 53 41 73 3b 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 | l.IPsec.SAs;.``ikev2-reauth``.wh |
9f860 | 65 74 68 65 72 20 72 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 | ether.rekeying.of.an.IKE_SA.shou |
9f880 | 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e | ld.also.reauthenticate.the.peer. |
9f8a0 | 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 | .In.IKEv1,.reauthentication.is.a |
9f8c0 | 6c 77 61 79 73 20 64 6f 6e 65 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 70 61 72 61 6d 65 74 | lways.done..Setting.this.paramet |
9f8e0 | 65 72 20 65 6e 61 62 6c 65 73 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e | er.enables.remote.host.re-authen |
9f900 | 74 69 63 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 2e 00 60 60 | tication.during.an.IKE.rekey..`` |
9f920 | 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e 67 20 | ikev2-reauth``.whether.rekeying. |
9f940 | 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 68 65 | of.an.IKE_SA.should.also.reauthe |
9f960 | 6e 74 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 | nticate.the.peer..In.IKEv1,.reau |
9f980 | 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 3a 00 60 60 69 | thentication.is.always.done:.``i |
9f9a0 | 6b 65 76 32 60 60 20 75 73 65 20 49 4b 45 76 32 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 | kev2``.use.IKEv2.for.Key.Exchang |
9f9c0 | 65 3b 00 60 60 69 6e 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 | e;.``in``:.Ruleset.for.forwarded |
9f9e0 | 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 | .packets.on.an.inbound.interface |
9fa00 | 00 60 60 69 6e 69 74 69 61 74 65 60 60 20 2d 20 64 6f 65 73 20 69 6e 69 74 69 61 6c 20 63 6f 6e | .``initiate``.-.does.initial.con |
9fa20 | 6e 65 63 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 6d 6d 65 64 69 61 74 65 | nection.to.remote.peer.immediate |
9fa40 | 6c 79 20 61 66 74 65 72 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 61 66 74 65 72 20 62 | ly.after.configuring.and.after.b |
9fa60 | 6f 6f 74 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | oot..In.this.mode.the.connection |
9fa80 | 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 72 65 73 74 61 72 74 65 64 20 69 6e 20 63 61 73 65 20 6f | .will.not.be.restarted.in.case.o |
9faa0 | 66 20 64 69 73 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 72 65 66 6f 72 65 20 73 68 6f 75 6c | f.disconnection,.therefore.shoul |
9fac0 | 64 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 44 50 44 | d.be.used.only.together.with.DPD |
9fae0 | 20 6f 72 20 61 6e 6f 74 68 65 72 20 73 65 73 73 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 6d 65 74 | .or.another.session.tracking.met |
9fb00 | 68 6f 64 73 3b 00 60 60 69 6e 74 65 6c 5f 69 64 6c 65 2e 6d 61 78 5f 63 73 74 61 74 65 3d 30 60 | hods;.``intel_idle.max_cstate=0` |
9fb20 | 60 20 44 69 73 61 62 6c 65 20 69 6e 74 65 6c 5f 69 64 6c 65 20 61 6e 64 20 66 61 6c 6c 20 62 61 | `.Disable.intel_idle.and.fall.ba |
9fb40 | 63 6b 20 6f 6e 20 61 63 70 69 5f 69 64 6c 65 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 49 6e | ck.on.acpi_idle.``interface``.In |
9fb60 | 74 65 72 66 61 63 65 20 4e 61 6d 65 20 74 6f 20 75 73 65 2e 20 54 68 65 20 6e 61 6d 65 20 6f 66 | terface.Name.to.use..The.name.of |
9fb80 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 68 20 76 69 72 74 75 61 6c 20 | .the.interface.on.which.virtual. |
9fba0 | 49 50 20 61 64 64 72 65 73 73 65 73 20 73 68 6f 75 6c 64 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 | IP.addresses.should.be.installed |
9fbc0 | 2e 20 49 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 61 64 64 72 65 73 73 65 73 | ..If.not.specified.the.addresses |
9fbe0 | 20 77 69 6c 6c 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 62 6f 75 | .will.be.installed.on.the.outbou |
9fc00 | 6e 64 20 69 6e 74 65 72 66 61 63 65 3b 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 69 73 20 75 | nd.interface;.``interface``.is.u |
9fc20 | 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | sed.for.the.VyOS.CLI.command.to. |
9fc40 | 69 64 65 6e 74 69 66 79 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 | identify.the.WireGuard.interface |
9fc60 | 20 77 68 65 72 65 20 74 68 69 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 69 73 20 74 6f 20 62 65 | .where.this.private.key.is.to.be |
9fc80 | 20 75 73 65 64 2e 00 60 60 69 6e 74 65 72 6e 65 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 | .used..``internet``.-........... |
9fca0 | 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 | ..........Well-known.communities |
9fcc0 | 20 76 61 6c 75 65 20 30 00 60 60 69 6e 74 65 72 76 61 6c 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 | .value.0.``interval``.keep-alive |
9fce0 | 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 | .interval.in.seconds.<2-86400>.( |
9fd00 | 64 65 66 61 75 6c 74 20 33 30 29 3b 00 60 60 69 73 69 73 60 60 20 2d 20 49 6e 74 65 72 6d 65 64 | default.30);.``isis``.-.Intermed |
9fd20 | 69 61 74 65 20 53 79 73 74 65 6d 20 74 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 | iate.System.to.Intermediate.Syst |
9fd40 | 65 6d 20 28 49 53 2d 49 53 29 00 60 60 6a 75 6d 70 60 60 3a 20 6a 75 6d 70 20 74 6f 20 61 6e 6f | em.(IS-IS).``jump``:.jump.to.ano |
9fd60 | 74 68 65 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2e 00 60 60 6b 65 72 6e 65 6c 60 60 20 2d 20 | ther.custom.chain..``kernel``.-. |
9fd80 | 4b 65 72 6e 65 6c 20 72 6f 75 74 65 73 00 60 60 6b 65 79 2d 65 78 63 68 61 6e 67 65 60 60 20 77 | Kernel.routes.``key-exchange``.w |
9fda0 | 68 69 63 68 20 70 72 6f 74 6f 63 6f 6c 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 74 6f 20 | hich.protocol.should.be.used.to. |
9fdc0 | 69 6e 69 74 69 61 6c 69 7a 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 49 66 20 6e 6f 74 | initialize.the.connection.If.not |
9fde0 | 20 73 65 74 20 62 6f 74 68 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 | .set.both.protocols.are.handled. |
9fe00 | 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 77 69 6c 6c 20 75 73 65 20 49 4b 45 76 32 20 77 | and.connections.will.use.IKEv2.w |
9fe20 | 68 65 6e 20 69 6e 69 74 69 61 74 69 6e 67 2c 20 62 75 74 20 61 63 63 65 70 74 20 61 6e 79 20 70 | hen.initiating,.but.accept.any.p |
9fe40 | 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 77 68 65 6e 20 72 65 73 70 6f 6e 64 69 6e 67 3a | rotocol.version.when.responding: |
9fe60 | 00 60 60 6b 65 79 60 60 20 2d 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 2c 20 77 68 69 63 68 20 | .``key``.-.a.private.key,.which. |
9fe80 | 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 | will.be.used.for.authenticating. |
9fea0 | 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6b | local.router.on.remote.peer:.``k |
9fec0 | 65 79 60 60 20 75 73 65 20 41 50 49 20 6b 65 79 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 | ey``.use.API.keys.configured.in. |
9fee0 | 60 60 73 65 72 76 69 63 65 20 68 74 74 70 73 20 61 70 69 20 6b 65 79 73 60 60 00 60 60 6c 61 74 | ``service.https.api.keys``.``lat |
9ff00 | 65 6e 63 79 60 60 3a 20 41 20 73 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 | ency``:.A.server.profile.focused |
9ff20 | 20 6f 6e 20 6c 6f 77 65 72 69 6e 67 20 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 54 68 | .on.lowering.network.latency..Th |
9ff40 | 69 73 20 70 72 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 | is.profile.favors.performance.ov |
9ff60 | 65 72 20 70 6f 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e | er.power.savings.by.setting.``in |
9ff80 | 74 65 6c 5f 70 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d 69 6e 5f 70 65 72 66 5f 70 63 74 3d | tel_pstate``.and.``min_perf_pct= |
9ffa0 | 31 30 30 60 60 2e 00 60 60 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 | 100``..``least-connection``.Dist |
9ffc0 | 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 77 | ributes.requests.to.the.server.w |
9ffe0 | 69 74 68 20 74 68 65 20 66 65 77 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e | ith.the.fewest.active.connection |
a0000 | 73 00 60 60 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 | s.``least-connection``.Distribut |
a0020 | 65 73 20 72 65 71 75 65 73 74 73 20 74 70 20 74 6a 65 20 73 65 72 76 65 72 20 77 6f 74 6a 20 74 | es.requests.tp.tje.server.wotj.t |
a0040 | 68 65 20 66 65 77 65 73 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c | he.fewest.active.connections.``l |
a0060 | 69 66 65 2d 62 79 74 65 73 60 60 20 45 53 50 20 6c 69 66 65 20 69 6e 20 62 79 74 65 73 20 3c 31 | ife-bytes``.ESP.life.in.bytes.<1 |
a0080 | 30 32 34 2d 32 36 38 34 33 35 34 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 62 | 024-26843545600000>..Number.of.b |
a00a0 | 79 74 65 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 | ytes.transmitted.over.an.IPsec.S |
a00c0 | 41 20 62 65 66 6f 72 65 20 69 74 20 65 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 2d 70 61 63 6b | A.before.it.expires;.``life-pack |
a00e0 | 65 74 73 60 60 20 45 53 50 20 6c 69 66 65 20 69 6e 20 70 61 63 6b 65 74 73 20 3c 31 30 30 30 2d | ets``.ESP.life.in.packets.<1000- |
a0100 | 32 36 38 34 33 35 34 35 36 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 | 26843545600000>..Number.of.packe |
a0120 | 74 73 20 74 72 61 6e 73 6d 69 74 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 | ts.transmitted.over.an.IPsec.SA. |
a0140 | 62 65 66 6f 72 65 20 69 74 20 65 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 | before.it.expires;.``lifetime``. |
a0160 | 45 53 50 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 | ESP.lifetime.in.seconds.<30-8640 |
a0180 | 30 3e 20 28 64 65 66 61 75 6c 74 20 33 36 30 30 29 2e 20 48 6f 77 20 6c 6f 6e 67 20 61 20 70 61 | 0>.(default.3600)..How.long.a.pa |
a01a0 | 72 74 69 63 75 6c 61 72 20 69 6e 73 74 61 6e 63 65 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 69 6f | rticular.instance.of.a.connectio |
a01c0 | 6e 20 28 61 20 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 2f 61 75 74 68 65 6e 74 69 63 | n.(a.set.of.encryption/authentic |
a01e0 | 61 74 69 6f 6e 20 6b 65 79 73 20 66 6f 72 20 75 73 65 72 20 70 61 63 6b 65 74 73 29 20 73 68 6f | ation.keys.for.user.packets).sho |
a0200 | 75 6c 64 20 6c 61 73 74 2c 20 66 72 6f 6d 20 73 75 63 63 65 73 73 66 75 6c 20 6e 65 67 6f 74 69 | uld.last,.from.successful.negoti |
a0220 | 61 74 69 6f 6e 20 74 6f 20 65 78 70 69 72 79 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b | ation.to.expiry;.``lifetime``.IK |
a0240 | 45 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 30 2d 38 36 34 30 30 3e 20 | E.lifetime.in.seconds.<0-86400>. |
a0260 | 28 64 65 66 61 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b | (default.28800);.``lifetime``.IK |
a0280 | 45 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e | E.lifetime.in.seconds.<30-86400> |
a02a0 | 20 28 64 65 66 61 75 6c 74 20 32 38 38 30 30 29 3b 00 60 60 6c 6c 67 72 2d 73 74 61 6c 65 60 60 | .(default.28800);.``llgr-stale`` |
a02c0 | 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 | .-...................Well-known. |
a02e0 | 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4c 4c 47 52 5f 53 54 41 4c 45 20 30 78 46 | communities.value.LLGR_STALE.0xF |
a0300 | 46 46 46 30 30 30 36 00 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d 20 6c 6f 63 61 | FFF0006.``local-address``.-.loca |
a0320 | 6c 20 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f | l.IP.address.for.IPSec.connectio |
a0340 | 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 20 60 60 61 | n.with.this.peer..If.defined.``a |
a0360 | 6e 79 60 60 2c 20 74 68 65 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 63 | ny``,.then.an.IP.address.which.c |
a0380 | 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 65 66 61 | onfigured.on.interface.with.defa |
a03a0 | 75 6c 74 20 72 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 75 73 65 64 3b 00 60 60 6c 6f 63 61 6c 2d | ult.route.will.be.used;.``local- |
a03c0 | 61 73 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d | as``.-.....................Well- |
a03e0 | 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 | known.communities.value.NO_EXPOR |
a0400 | 54 5f 53 55 42 43 4f 4e 46 45 44 20 30 78 46 46 46 46 46 46 30 33 00 60 60 6c 6f 63 61 6c 2d 69 | T_SUBCONFED.0xFFFFFF03.``local-i |
a0420 | 64 60 60 20 2d 20 49 44 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 56 79 4f 53 20 72 6f 75 74 | d``.-.ID.for.the.local.VyOS.rout |
a0440 | 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 2c 20 64 75 72 69 6e 67 20 74 68 65 20 61 75 74 68 65 | er..If.defined,.during.the.authe |
a0460 | 6e 74 69 63 61 74 69 6f 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 72 65 6d | ntication.it.will.be.send.to.rem |
a0480 | 6f 74 65 20 70 65 65 72 3b 00 60 60 6c 6f 63 61 6c 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f | ote.peer;.``local-key``.-.name.o |
a04a0 | 66 20 50 4b 49 20 6b 65 79 2d 70 61 69 72 20 77 69 74 68 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 | f.PKI.key-pair.with.local.privat |
a04c0 | 65 20 6b 65 79 00 60 60 6c 6f 63 61 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c | e.key.``local``.-.define.a.local |
a04e0 | 20 73 6f 75 72 63 65 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 | .source.for.match.traffic,.which |
a0500 | 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f | .should.be.encrypted.and.send.to |
a0520 | 20 74 68 69 73 20 70 65 65 72 3a 00 60 60 6c 6f 63 61 6c 60 60 3a 20 52 75 6c 65 73 65 74 20 66 | .this.peer:.``local``:.Ruleset.f |
a0540 | 6f 72 20 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 69 73 20 72 6f 75 | or.packets.destined.for.this.rou |
a0560 | 74 65 72 00 60 60 6d 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 | ter.``m``.-.Execution.interval.i |
a0580 | 6e 20 6d 69 6e 75 74 65 73 00 60 60 6d 61 69 6e 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 | n.minutes.``main``.Routing.table |
a05a0 | 20 75 73 65 64 20 62 79 20 56 79 4f 53 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 | .used.by.VyOS.and.other.interfac |
a05c0 | 65 73 20 6e 6f 74 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 50 42 52 00 60 60 6d 61 | es.not.participating.in.PBR.``ma |
a05e0 | 69 6e 60 60 20 75 73 65 20 4d 61 69 6e 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 | in``.use.Main.mode.for.Key.Excha |
a0600 | 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 31 20 50 72 6f 74 6f 63 6f 6c 20 28 52 65 63 6f | nges.in.the.IKEv1.Protocol.(Reco |
a0620 | 6d 6d 65 6e 64 65 64 20 44 65 66 61 75 6c 74 29 3b 00 60 60 6d 65 73 73 61 67 65 60 60 3a 20 46 | mmended.Default);.``message``:.F |
a0640 | 75 6c 6c 20 6d 65 73 73 61 67 65 20 74 68 61 74 20 68 61 73 20 74 72 69 67 67 65 72 65 64 20 74 | ull.message.that.has.triggered.t |
a0660 | 68 65 20 73 63 72 69 70 74 2e 00 60 60 6d 69 74 69 67 61 74 69 6f 6e 73 3d 6f 66 66 60 60 00 60 | he.script..``mitigations=off``.` |
a0680 | 60 6d 6f 62 69 6b 65 60 60 20 65 6e 61 62 6c 65 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e | `mobike``.enable.MOBIKE.Support. |
a06a0 | 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b | .MOBIKE.is.only.available.for.IK |
a06c0 | 45 76 32 3a 00 60 60 6d 6f 64 65 60 60 20 2d 20 6d 6f 64 65 20 66 6f 72 20 61 75 74 68 65 6e 74 | Ev2:.``mode``.-.mode.for.authent |
a06e0 | 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 6d 6f 74 65 20 | ication.between.VyOS.and.remote. |
a0700 | 70 65 65 72 3a 00 60 60 6d 6f 64 65 60 60 20 49 4b 45 76 31 20 50 68 61 73 65 20 31 20 4d 6f 64 | peer:.``mode``.IKEv1.Phase.1.Mod |
a0720 | 65 20 53 65 6c 65 63 74 69 6f 6e 3a 00 60 60 6d 6f 64 65 60 60 20 74 68 65 20 74 79 70 65 20 6f | e.Selection:.``mode``.the.type.o |
a0740 | 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 6d 6f 6e 69 74 6f 72 60 60 20 2d 20 | f.the.connection:.``monitor``.-. |
a0760 | 50 61 73 73 69 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 20 61 6c 6c 20 70 61 63 6b 65 74 73 20 6f 6e | Passively.monitor.all.packets.on |
a0780 | 20 74 68 65 20 66 72 65 71 75 65 6e 63 79 2f 63 68 61 6e 6e 65 6c 00 60 60 6d 75 6c 74 69 2d 75 | .the.frequency/channel.``multi-u |
a07a0 | 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f | ser-beamformee``.-.Support.for.o |
a07c0 | 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d | peration.as.single.user.beamform |
a07e0 | 65 72 00 60 60 6d 75 6c 74 69 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 | er.``multi-user-beamformer``.-.S |
a0800 | 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 | upport.for.operation.as.single.u |
a0820 | 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 6e 60 60 20 2d 20 38 30 32 2e 31 31 6e 20 2d | ser.beamformer.``n``.-.802.11n.- |
a0840 | 20 36 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 60 6e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 | .600.Mbits/sec.``name``.is.used. |
a0860 | 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e | for.the.VyOS.CLI.command.to.iden |
a0880 | 74 69 66 79 20 74 68 69 73 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 60 60 6e 61 6d 65 60 60 | tify.this.key..This.key.``name`` |
a08a0 | 20 69 73 20 74 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 | .is.then.used.in.the.CLI.configu |
a08c0 | 72 61 74 69 6f 6e 20 74 6f 20 72 65 66 65 72 65 6e 63 65 20 74 68 65 20 6b 65 79 20 69 6e 73 74 | ration.to.reference.the.key.inst |
a08e0 | 61 6e 63 65 2e 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 | ance..``net.ipv4.conf.all.accept |
a0900 | 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c | _redirects``.``net.ipv4.conf.all |
a0920 | 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 65 74 2e 69 70 76 | .accept_source_route``.``net.ipv |
a0940 | 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 6c 6f 67 5f 6d 61 72 74 69 61 6e 73 60 60 00 60 60 6e 65 74 2e | 4.conf.all.log_martians``.``net. |
a0960 | 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 72 70 5f 66 69 6c 74 65 72 60 60 00 60 60 6e 65 74 2e | ipv4.conf.all.rp_filter``.``net. |
a0980 | 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 73 65 6e 64 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 | ipv4.conf.all.send_redirects``.` |
a09a0 | 60 6e 65 74 2e 69 70 76 34 2e 69 63 6d 70 5f 65 63 68 6f 5f 69 67 6e 6f 72 65 5f 62 72 6f 61 64 | `net.ipv4.icmp_echo_ignore_broad |
a09c0 | 63 61 73 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 63 70 5f 72 66 63 31 33 33 37 60 60 | casts``.``net.ipv4.tcp_rfc1337`` |
a09e0 | 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 63 70 5f 73 79 6e 63 6f 6f 6b 69 65 73 60 60 00 60 60 6e | .``net.ipv4.tcp_syncookies``.``n |
a0a00 | 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 | et.ipv6.conf.all.accept_redirect |
a0a20 | 73 60 60 00 60 60 6e 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 | s``.``net.ipv6.conf.all.accept_s |
a0a40 | 6f 75 72 63 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 6f 2d 61 64 76 65 72 74 69 73 65 60 60 20 2d | ource_route``.``no-advertise``.- |
a0a60 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d | .................Well-known.comm |
a0a80 | 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 41 44 56 45 52 54 49 53 45 20 30 78 46 46 46 | unities.value.NO_ADVERTISE.0xFFF |
a0aa0 | 46 46 46 30 32 00 60 60 6e 6f 2d 65 78 70 6f 72 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 | FFF02.``no-export``.-........... |
a0ac0 | 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 | .........Well-known.communities. |
a0ae0 | 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 54 20 30 78 46 46 46 46 46 46 30 31 00 60 60 6e 6f 2d | value.NO_EXPORT.0xFFFFFF01.``no- |
a0b00 | 6c 6c 67 72 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 | llgr``.-......................We |
a0b20 | 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 4c 4c | ll-known.communities.value.NO_LL |
a0b40 | 47 52 20 30 78 46 46 46 46 30 30 30 37 00 60 60 6e 6f 2d 70 65 65 72 60 60 20 2d 20 20 20 20 20 | GR.0xFFFF0007.``no-peer``.-..... |
a0b60 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d | .................Well-known.comm |
a0b80 | 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 50 45 45 52 20 30 78 46 46 46 46 46 46 30 34 00 | unities.value.NOPEER.0xFFFFFF04. |
a0ba0 | 60 60 6e 6f 60 60 20 64 69 73 61 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 | ``no``.disable.remote.host.re-au |
a0bc0 | 74 68 65 6e 74 69 63 61 74 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b | thenticaton.during.an.IKE.rekey; |
a0be0 | 00 60 60 6e 6f 6e 65 60 60 20 2d 20 45 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 | .``none``.-.Execution.interval.i |
a0c00 | 6e 20 6d 69 6e 75 74 65 73 00 60 60 6e 6f 6e 65 60 60 20 2d 20 6c 6f 61 64 73 20 74 68 65 20 63 | n.minutes.``none``.-.loads.the.c |
a0c20 | 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 6c 79 2c 20 77 68 69 63 68 20 74 68 65 6e 20 63 61 6e 20 62 | onnection.only,.which.then.can.b |
a0c40 | 65 20 6d 61 6e 75 61 6c 6c 79 20 69 6e 69 74 69 61 74 65 64 20 6f 72 20 75 73 65 64 20 61 73 20 | e.manually.initiated.or.used.as. |
a0c60 | 61 20 72 65 73 70 6f 6e 64 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 6e 6f 6e | a.responder.configuration..``non |
a0c80 | 65 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 6e 6f 6e 65 20 28 64 65 66 61 75 6c 74 29 | e``.set.action.to.none.(default) |
a0ca0 | 3b 00 60 60 6e 6f 73 65 6c 65 63 74 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 | ;.``noselect``.marks.the.server. |
a0cc0 | 61 73 20 75 6e 75 73 65 64 2c 20 65 78 63 65 70 74 20 66 6f 72 20 64 69 73 70 6c 61 79 20 70 75 | as.unused,.except.for.display.pu |
a0ce0 | 72 70 6f 73 65 73 2e 20 54 68 65 20 73 65 72 76 65 72 20 69 73 20 64 69 73 63 61 72 64 65 64 20 | rposes..The.server.is.discarded. |
a0d00 | 62 79 20 74 68 65 20 73 65 6c 65 63 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 6e 74 | by.the.selection.algorithm..``nt |
a0d20 | 73 60 60 20 65 6e 61 62 6c 65 73 20 4e 65 74 77 6f 72 6b 20 54 69 6d 65 20 53 65 63 75 72 69 74 | s``.enables.Network.Time.Securit |
a0d40 | 79 20 28 4e 54 53 29 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 73 70 65 63 69 66 | y.(NTS).for.the.server.as.specif |
a0d60 | 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 31 35 60 00 60 60 6f 70 74 69 6f 6e 73 60 60 00 60 | ied.in.:rfc:`8915`.``options``.` |
a0d80 | 60 6f 73 70 66 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 | `ospf``.-.Open.Shortest.Path.Fir |
a0da0 | 73 74 20 28 4f 53 50 46 76 32 29 00 60 60 6f 73 70 66 76 33 60 60 20 2d 20 4f 70 65 6e 20 53 68 | st.(OSPFv2).``ospfv3``.-.Open.Sh |
a0dc0 | 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 20 28 49 50 76 36 29 20 28 4f 53 50 46 76 33 | ortest.Path.First.(IPv6).(OSPFv3 |
a0de0 | 29 00 60 60 6f 75 74 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 | ).``out``:.Ruleset.for.forwarded |
a0e00 | 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 | .packets.on.an.outbound.interfac |
a0e20 | 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 | e.``passphrase``.-.local.private |
a0e40 | 20 6b 65 79 20 70 61 73 73 70 68 72 61 73 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d | .key.passphrase.``passphrase``.- |
a0e60 | 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 61 73 73 70 68 72 61 73 65 2c 20 69 66 20 6e 65 65 64 | .private.key.passphrase,.if.need |
a0e80 | 65 64 2e 00 60 60 70 61 73 73 77 6f 72 64 60 60 20 2d 20 70 61 73 73 70 68 72 61 73 65 20 70 72 | ed..``password``.-.passphrase.pr |
a0ea0 | 69 76 61 74 65 20 6b 65 79 2c 20 69 66 20 6e 65 65 64 65 64 2e 00 60 60 70 65 65 72 60 60 20 69 | ivate.key,.if.needed..``peer``.i |
a0ec0 | 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 | s.used.for.the.VyOS.CLI.command. |
a0ee0 | 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 70 65 65 72 20 77 | to.identify.the.WireGuard.peer.w |
a0f00 | 68 65 72 65 20 74 68 69 73 20 73 65 63 72 65 64 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 | here.this.secred.is.to.be.used.. |
a0f20 | 60 60 70 65 72 69 6f 64 60 60 3a 20 54 69 6d 65 20 77 69 6e 64 6f 77 20 66 6f 72 20 72 61 74 65 | ``period``:.Time.window.for.rate |
a0f40 | 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 73 3a 20 60 | .calculation..Possible.values:.` |
a0f60 | 60 73 65 63 6f 6e 64 60 60 20 28 6f 6e 65 20 73 65 63 6f 6e 64 29 2c 20 60 60 6d 69 6e 75 74 65 | `second``.(one.second),.``minute |
a0f80 | 60 60 20 28 6f 6e 65 20 6d 69 6e 75 74 65 29 2c 20 60 60 68 6f 75 72 60 60 20 28 6f 6e 65 20 68 | ``.(one.minute),.``hour``.(one.h |
a0fa0 | 6f 75 72 29 2e 20 44 65 66 61 75 6c 74 20 69 73 20 60 60 73 65 63 6f 6e 64 60 60 2e 00 60 60 70 | our)..Default.is.``second``..``p |
a0fc0 | 66 73 60 60 20 77 68 65 74 68 65 72 20 50 65 72 66 65 63 74 20 46 6f 72 77 61 72 64 20 53 65 63 | fs``.whether.Perfect.Forward.Sec |
a0fe0 | 72 65 63 79 20 6f 66 20 6b 65 79 73 20 69 73 20 64 65 73 69 72 65 64 20 6f 6e 20 74 68 65 20 63 | recy.of.keys.is.desired.on.the.c |
a1000 | 6f 6e 6e 65 63 74 69 6f 6e 27 73 20 6b 65 79 69 6e 67 20 63 68 61 6e 6e 65 6c 20 61 6e 64 20 64 | onnection's.keying.channel.and.d |
a1020 | 65 66 69 6e 65 73 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f | efines.a.Diffie-Hellman.group.fo |
a1040 | 72 20 50 46 53 3a 00 60 60 70 6f 6f 6c 60 60 20 6d 6f 62 69 6c 69 7a 65 73 20 70 65 72 73 69 73 | r.PFS:.``pool``.mobilizes.persis |
a1060 | 74 65 6e 74 20 63 6c 69 65 6e 74 20 6d 6f 64 65 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 77 69 74 | tent.client.mode.association.wit |
a1080 | 68 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 73 2e 00 60 60 | h.a.number.of.remote.servers..`` |
a10a0 | 70 6f 72 74 60 60 20 2d 20 64 65 66 69 6e 65 20 70 6f 72 74 2e 20 48 61 76 65 20 65 66 66 65 63 | port``.-.define.port..Have.effec |
a10c0 | 74 20 6f 6e 6c 79 20 77 68 65 6e 20 75 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 60 | t.only.when.used.together.with.` |
a10e0 | 60 70 72 65 66 69 78 60 60 3b 00 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 | `prefix``;.``pre-shared-secret`` |
a1100 | 20 2d 20 75 73 65 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 | .-.use.predefined.shared.secret. |
a1120 | 70 68 72 61 73 65 3b 00 60 60 70 72 65 66 65 72 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 | phrase;.``prefer``.marks.the.ser |
a1140 | 76 65 72 20 61 73 20 70 72 65 66 65 72 72 65 64 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 68 69 6e | ver.as.preferred..All.other.thin |
a1160 | 67 73 20 62 65 69 6e 67 20 65 71 75 61 6c 2c 20 74 68 69 73 20 68 6f 73 74 20 77 69 6c 6c 20 62 | gs.being.equal,.this.host.will.b |
a1180 | 65 20 63 68 6f 73 65 6e 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 6d 6f | e.chosen.for.synchronization.amo |
a11a0 | 6e 67 20 61 20 73 65 74 20 6f 66 20 63 6f 72 72 65 63 74 6c 79 20 6f 70 65 72 61 74 69 6e 67 20 | ng.a.set.of.correctly.operating. |
a11c0 | 68 6f 73 74 73 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 | hosts..``prefix``.-.IP.network.a |
a11e0 | 74 20 6c 6f 63 61 6c 20 73 69 64 65 2e 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 | t.local.side..``prefix``.-.IP.ne |
a1200 | 74 77 6f 72 6b 20 61 74 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 70 72 66 60 60 20 70 73 | twork.at.remote.side..``prf``.ps |
a1220 | 65 75 64 6f 2d 72 61 6e 64 6f 6d 20 66 75 6e 63 74 69 6f 6e 2e 00 60 60 70 72 69 6f 72 69 74 79 | eudo-random.function..``priority |
a1240 | 60 60 20 2d 20 41 64 64 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 70 6f 6c 69 63 79 2d 62 61 73 | ``.-.Add.priority.for.policy-bas |
a1260 | 65 64 20 49 50 53 65 63 20 56 50 4e 20 74 75 6e 6e 65 6c 73 28 6c 6f 77 65 73 74 20 76 61 6c 75 | ed.IPSec.VPN.tunnels(lowest.valu |
a1280 | 65 20 6d 6f 72 65 20 70 72 65 66 65 72 61 62 6c 65 29 00 60 60 70 72 6f 63 65 73 73 6f 72 2e 6d | e.more.preferable).``processor.m |
a12a0 | 61 78 5f 63 73 74 61 74 65 3d 31 60 60 20 4c 69 6d 69 74 20 70 72 6f 63 65 73 73 6f 72 20 74 6f | ax_cstate=1``.Limit.processor.to |
a12c0 | 20 6d 61 78 69 6d 75 6d 20 43 2d 73 74 61 74 65 20 31 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 | .maximum.C-state.1.``proposal``. |
a12e0 | 45 53 50 2d 67 72 6f 75 70 20 70 72 6f 70 6f 73 61 6c 20 77 69 74 68 20 6e 75 6d 62 65 72 20 3c | ESP-group.proposal.with.number.< |
a1300 | 31 2d 36 35 35 33 35 3e 3a 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 74 68 65 20 6c 69 73 74 20 | 1-65535>:.``proposal``.the.list. |
a1320 | 6f 66 20 70 72 6f 70 6f 73 61 6c 73 20 61 6e 64 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 | of.proposals.and.their.parameter |
a1340 | 73 3a 00 60 60 70 72 6f 74 6f 63 6f 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 70 72 6f | s:.``protocol``.-.define.the.pro |
a1360 | 74 6f 63 6f 6c 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 | tocol.for.match.traffic,.which.s |
a1380 | 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 | hould.be.encrypted.and.send.to.t |
a13a0 | 68 69 73 20 70 65 65 72 3b 00 60 60 70 73 6b 60 60 20 2d 20 50 72 65 73 68 61 72 65 64 20 73 65 | his.peer;.``psk``.-.Preshared.se |
a13c0 | 63 72 65 74 20 6b 65 79 20 6e 61 6d 65 3a 00 60 60 71 75 65 75 65 60 60 3a 20 45 6e 71 75 65 75 | cret.key.name:.``queue``:.Enqueu |
a13e0 | 65 20 70 61 63 6b 65 74 20 74 6f 20 75 73 65 72 73 70 61 63 65 2e 00 60 60 72 61 74 65 60 60 3a | e.packet.to.userspace..``rate``: |
a1400 | 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 | .Number.of.packets..Default.5..` |
a1420 | 60 72 65 6a 65 63 74 60 60 3a 20 72 65 6a 65 63 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 | `reject``:.reject.the.packet..`` |
a1440 | 72 65 6d 6f 74 65 2d 61 64 64 72 65 73 73 60 60 20 2d 20 72 65 6d 6f 74 65 20 49 50 20 61 64 64 | remote-address``.-.remote.IP.add |
a1460 | 72 65 73 73 20 6f 72 20 68 6f 73 74 6e 61 6d 65 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 | ress.or.hostname.for.IPSec.conne |
a1480 | 63 74 69 6f 6e 2e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 75 | ction..IPv4.or.IPv6.address.is.u |
a14a0 | 73 65 64 20 77 68 65 6e 20 61 20 70 65 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 73 74 61 | sed.when.a.peer.has.a.public.sta |
a14c0 | 74 69 63 20 49 50 20 61 64 64 72 65 73 73 2e 20 48 6f 73 74 6e 61 6d 65 20 69 73 20 61 20 44 4e | tic.IP.address..Hostname.is.a.DN |
a14e0 | 53 20 6e 61 6d 65 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 | S.name.which.could.be.used.when. |
a1500 | 61 20 70 65 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 61 | a.peer.has.a.public.IP.address.a |
a1520 | 6e 64 20 44 4e 53 20 6e 61 6d 65 2c 20 62 75 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 63 | nd.DNS.name,.but.an.IP.address.c |
a1540 | 6f 75 6c 64 20 62 65 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 69 6d 65 20 74 6f 20 74 69 6d | ould.be.changed.from.time.to.tim |
a1560 | 65 2e 00 60 60 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 64 65 66 69 6e 65 20 61 6e 20 49 44 20 | e..``remote-id``.-.define.an.ID. |
a1580 | 66 6f 72 20 72 65 6d 6f 74 65 20 70 65 65 72 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 75 73 69 6e | for.remote.peer,.instead.of.usin |
a15a0 | 67 20 70 65 65 72 20 6e 61 6d 65 20 6f 72 20 61 64 64 72 65 73 73 2e 20 55 73 65 66 75 6c 20 69 | g.peer.name.or.address..Useful.i |
a15c0 | 6e 20 63 61 73 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 62 65 68 | n.case.if.the.remote.peer.is.beh |
a15e0 | 69 6e 64 20 4e 41 54 20 6f 72 20 69 66 20 60 60 6d 6f 64 65 20 78 35 30 39 60 60 20 69 73 20 75 | ind.NAT.or.if.``mode.x509``.is.u |
a1600 | 73 65 64 3b 00 60 60 72 65 6d 6f 74 65 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b | sed;.``remote-key``.-.name.of.PK |
a1620 | 49 20 6b 65 79 2d 70 61 69 72 20 77 69 74 68 20 72 65 6d 6f 74 65 20 70 75 62 6c 69 63 20 6b 65 | I.key-pair.with.remote.public.ke |
a1640 | 79 00 60 60 72 65 6d 6f 74 65 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 72 65 6d 6f 74 65 | y.``remote``.-.define.the.remote |
a1660 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 | .destination.for.match.traffic,. |
a1680 | 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 | which.should.be.encrypted.and.se |
a16a0 | 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3a 00 60 60 72 65 70 6c 61 79 2d 77 69 6e 64 6f 77 | nd.to.this.peer:.``replay-window |
a16c0 | 60 60 20 2d 20 49 50 73 65 63 20 72 65 70 6c 61 79 20 77 69 6e 64 6f 77 20 74 6f 20 63 6f 6e 66 | ``.-.IPsec.replay.window.to.conf |
a16e0 | 69 67 75 72 65 20 66 6f 72 20 74 68 69 73 20 43 48 49 4c 44 5f 53 41 20 28 64 65 66 61 75 6c 74 | igure.for.this.CHILD_SA.(default |
a1700 | 3a 20 33 32 29 2c 20 61 20 76 61 6c 75 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 73 20 49 50 73 | :.32),.a.value.of.0.disables.IPs |
a1720 | 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 60 60 72 65 71 2d 73 73 6c 2d 73 | ec.replay.protection.``req-ssl-s |
a1740 | 6e 69 60 60 20 53 53 4c 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 | ni``.SSL.Server.Name.Indication. |
a1760 | 28 53 4e 49 29 20 72 65 71 75 65 73 74 20 6d 61 74 63 68 00 60 60 72 65 73 70 2d 74 69 6d 65 60 | (SNI).request.match.``resp-time` |
a1780 | 60 3a 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 20 66 6f 72 | `:.the.maximum.response.time.for |
a17a0 | 20 70 69 6e 67 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 52 61 6e 67 65 20 31 2e 2e 2e 33 30 2c 20 | .ping.in.seconds..Range.1...30,. |
a17c0 | 64 65 66 61 75 6c 74 20 35 00 60 60 72 65 73 70 6f 6e 64 60 60 20 2d 20 64 6f 65 73 20 6e 6f 74 | default.5.``respond``.-.does.not |
a17e0 | 20 74 72 79 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f | .try.to.initiate.a.connection.to |
a1800 | 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 | .a.remote.peer..In.this.mode,.th |
a1820 | 65 20 49 50 53 65 63 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 | e.IPSec.session.will.be.establis |
a1840 | 68 65 64 20 6f 6e 6c 79 20 61 66 74 65 72 20 69 6e 69 74 69 61 74 69 6f 6e 20 66 72 6f 6d 20 61 | hed.only.after.initiation.from.a |
a1860 | 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 43 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 77 68 | .remote.peer..Could.be.useful.wh |
a1880 | 65 6e 20 74 68 65 72 65 20 69 73 20 6e 6f 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 76 69 | en.there.is.no.direct.connectivi |
a18a0 | 74 79 20 74 6f 20 74 68 65 20 70 65 65 72 20 64 75 65 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 6f | ty.to.the.peer.due.to.firewall.o |
a18c0 | 72 20 4e 41 54 20 69 6e 20 74 68 65 20 6d 69 64 64 6c 65 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c | r.NAT.in.the.middle.of.the.local |
a18e0 | 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 69 64 65 2e 00 60 60 72 65 73 74 61 72 74 60 60 20 69 6d | .and.remote.side..``restart``.im |
a1900 | 6d 65 64 69 61 74 65 6c 79 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 | mediately.tries.to.re-negotiate. |
a1920 | 74 68 65 20 43 48 49 4c 44 5f 53 41 20 75 6e 64 65 72 20 61 20 66 72 65 73 68 20 49 4b 45 5f 53 | the.CHILD_SA.under.a.fresh.IKE_S |
a1940 | 41 3b 00 60 60 72 65 73 74 61 72 74 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 72 65 73 | A;.``restart``.set.action.to.res |
a1960 | 74 61 72 74 3b 00 60 60 72 65 74 75 72 6e 60 60 3a 20 52 65 74 75 72 6e 20 66 72 6f 6d 20 74 68 | tart;.``return``:.Return.from.th |
a1980 | 65 20 63 75 72 72 65 6e 74 20 63 68 61 69 6e 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 20 61 74 20 | e.current.chain.and.continue.at. |
a19a0 | 74 68 65 20 6e 65 78 74 20 72 75 6c 65 20 6f 66 20 74 68 65 20 6c 61 73 74 20 63 68 61 69 6e 2e | the.next.rule.of.the.last.chain. |
a19c0 | 00 60 60 72 69 70 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 | .``rip``.-.Routing.Information.P |
a19e0 | 72 6f 74 6f 63 6f 6c 20 28 52 49 50 29 00 60 60 72 69 70 6e 67 60 60 20 2d 20 52 6f 75 74 69 6e | rotocol.(RIP).``ripng``.-.Routin |
a1a00 | 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 6e 65 78 74 2d 67 65 6e 65 | g.Information.Protocol.next-gene |
a1a20 | 72 61 74 69 6f 6e 20 28 49 50 76 36 29 20 28 52 49 50 6e 67 29 00 60 60 72 6f 75 6e 64 2d 72 6f | ration.(IPv6).(RIPng).``round-ro |
a1a40 | 62 69 6e 60 60 20 2d 20 52 6f 75 6e 64 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e | bin``.-.Round-robin.policy:.Tran |
a1a60 | 73 6d 69 74 20 70 61 63 6b 65 74 73 20 69 6e 20 73 65 71 75 65 6e 74 69 61 6c 20 6f 72 64 65 72 | smit.packets.in.sequential.order |
a1a80 | 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 61 76 61 69 6c 61 62 6c 65 20 73 6c 61 76 65 20 | .from.the.first.available.slave. |
a1aa0 | 74 68 72 6f 75 67 68 20 74 68 65 20 6c 61 73 74 2e 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 | through.the.last..``round-robin` |
a1ac0 | 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 69 6e 20 61 20 63 69 72 63 | `.Distributes.requests.in.a.circ |
a1ae0 | 75 6c 61 72 20 6d 61 6e 6e 65 72 2c 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 73 65 6e 64 69 6e | ular.manner,.sequentially.sendin |
a1b00 | 67 20 65 61 63 68 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 6e 65 78 74 20 73 65 72 76 65 | g.each.request.to.the.next.serve |
a1b20 | 72 20 69 6e 20 6c 69 6e 65 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 | r.in.line.``route-filter-transla |
a1b40 | 74 65 64 2d 76 34 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 | ted-v4``.-...Well-known.communit |
a1b60 | 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 | ies.value.ROUTE_FILTER_TRANSLATE |
a1b80 | 44 5f 76 34 20 30 78 46 46 46 46 30 30 30 32 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 | D_v4.0xFFFF0002.``route-filter-t |
a1ba0 | 72 61 6e 73 6c 61 74 65 64 2d 76 36 60 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f | ranslated-v6``.-...Well-known.co |
a1bc0 | 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 | mmunities.value.ROUTE_FILTER_TRA |
a1be0 | 4e 53 4c 41 54 45 44 5f 76 36 20 30 78 46 46 46 46 30 30 30 34 00 60 60 72 6f 75 74 65 2d 66 69 | NSLATED_v6.0xFFFF0004.``route-fi |
a1c00 | 6c 74 65 72 2d 76 34 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e | lter-v4``.-..............Well-kn |
a1c20 | 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 | own.communities.value.ROUTE_FILT |
a1c40 | 45 52 5f 76 34 20 30 78 46 46 46 46 30 30 30 33 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d | ER_v4.0xFFFF0003.``route-filter- |
a1c60 | 76 36 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 | v6``.-..............Well-known.c |
a1c80 | 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 36 | ommunities.value.ROUTE_FILTER_v6 |
a1ca0 | 20 30 78 46 46 46 46 30 30 30 35 00 60 60 72 73 61 2d 6b 65 79 2d 6e 61 6d 65 60 60 20 2d 20 73 | .0xFFFF0005.``rsa-key-name``.-.s |
a1cc0 | 68 61 72 65 64 20 52 53 41 20 6b 65 79 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | hared.RSA.key.for.authentication |
a1ce0 | 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 | ..The.key.must.be.defined.in.the |
a1d00 | 20 60 60 73 65 74 20 76 70 6e 20 72 73 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 | .``set.vpn.rsa-keys``.section;.` |
a1d20 | 60 72 73 61 60 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 52 53 41 20 61 75 74 68 65 6e 74 | `rsa``.-.options.for.RSA.authent |
a1d40 | 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 | ication.mode:.``rsa``.-.use.simp |
a1d60 | 6c 65 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 2e 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 | le.shared.RSA.key..``rsa``.-.use |
a1d80 | 20 73 69 6d 70 6c 65 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 2e 20 54 68 65 20 6b 65 79 20 | .simple.shared.RSA.key..The.key. |
a1da0 | 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e | must.be.defined.in.the.``set.vpn |
a1dc0 | 20 72 73 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 60 73 65 63 72 65 74 60 60 20 | .rsa-keys``.section;.``secret``. |
a1de0 | 2d 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 55 73 65 64 | -.predefined.shared.secret..Used |
a1e00 | 20 69 66 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 6f 64 65 20 60 60 70 72 65 2d 73 68 61 72 65 64 | .if.configured.mode.``pre-shared |
a1e20 | 2d 73 65 63 72 65 74 60 60 3b 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 | -secret``;.``set.firewall.bridge |
a1e40 | 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 | .forward.filter....``..``set.fir |
a1e60 | 65 77 61 6c 6c 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e | ewall.ipv4.forward.filter....``. |
a1e80 | 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 | .``set.firewall.ipv4.input.filte |
a1ea0 | 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 | r....``..``set.firewall.ipv4.out |
a1ec0 | 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | put.filter....``..``set.firewall |
a1ee0 | 20 69 70 76 36 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 | .ipv6.forward.filter....``..``se |
a1f00 | 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e | t.firewall.ipv6.input.filter.... |
a1f20 | 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 | ``..``set.firewall.ipv6.output.f |
a1f40 | 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 | ilter....``..``single-user-beamf |
a1f60 | 6f 72 6d 65 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 | ormee``.-.Support.for.operation. |
a1f80 | 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 65 00 60 60 73 69 6e 67 | as.single.user.beamformee.``sing |
a1fa0 | 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 | le-user-beamformer``.-.Support.f |
a1fc0 | 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d | or.operation.as.single.user.beam |
a1fe0 | 66 6f 72 6d 65 72 00 60 60 73 6f 6e 6d 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 53 4f | former.``sonmp``.-.Listen.for.SO |
a2000 | 4e 4d 50 20 66 6f 72 20 4e 6f 72 74 65 6c 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 | NMP.for.Nortel.routers/switches. |
a2020 | 60 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 | ``source-address``.Distributes.r |
a2040 | 65 71 75 65 73 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 | equests.based.on.the.source.IP.a |
a2060 | 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 00 60 60 73 73 68 2d 64 73 73 60 60 | ddress.of.the.client.``ssh-dss`` |
a2080 | 00 60 60 73 73 68 2d 65 64 32 35 35 31 39 60 60 00 60 60 73 73 68 2d 72 73 61 20 41 41 41 41 42 | .``ssh-ed25519``.``ssh-rsa.AAAAB |
a20a0 | 33 4e 7a 61 43 31 79 63 32 45 41 41 41 41 42 41 41 2e 2e 2e 56 42 44 35 6c 4b 77 45 57 42 20 75 | 3NzaC1yc2EAAAABAA...VBD5lKwEWB.u |
a20c0 | 73 65 72 6e 61 6d 65 40 68 6f 73 74 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 00 60 60 73 73 68 | sername@host.example.com``.``ssh |
a20e0 | 2d 72 73 61 60 60 00 60 60 73 73 6c 2d 66 63 2d 73 6e 69 2d 65 6e 64 60 60 20 53 53 4c 20 66 72 | -rsa``.``ssl-fc-sni-end``.SSL.fr |
a2100 | 6f 6e 74 65 6e 64 20 6d 61 74 63 68 20 65 6e 64 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 | ontend.match.end.of.connection.S |
a2120 | 65 72 76 65 72 20 4e 61 6d 65 00 60 60 73 73 6c 2d 66 63 2d 73 6e 69 60 60 20 53 53 4c 20 66 72 | erver.Name.``ssl-fc-sni``.SSL.fr |
a2140 | 6f 6e 74 65 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e | ontend.connection.Server.Name.In |
a2160 | 64 69 63 61 74 69 6f 6e 20 6d 61 74 63 68 00 60 60 73 74 61 72 74 60 60 20 74 72 69 65 73 20 74 | dication.match.``start``.tries.t |
a2180 | 6f 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 72 65 2d 63 72 65 61 74 65 20 74 68 65 20 43 48 49 4c | o.immediately.re-create.the.CHIL |
a21a0 | 44 5f 53 41 3b 00 60 60 73 74 61 74 69 63 60 60 20 2d 20 53 74 61 74 69 63 61 6c 6c 79 20 63 6f | D_SA;.``static``.-.Statically.co |
a21c0 | 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 00 60 60 73 74 61 74 69 6f 6e 60 60 20 2d 20 43 6f | nfigured.routes.``station``.-.Co |
a21e0 | 6e 6e 65 63 74 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 61 63 63 65 73 73 20 70 6f 69 6e 74 00 60 | nnects.to.another.access.point.` |
a2200 | 60 73 74 61 74 75 73 20 32 30 30 2d 33 39 39 60 60 20 45 78 70 65 63 74 69 6e 67 20 61 20 6e 6f | `status.200-399``.Expecting.a.no |
a2220 | 6e 2d 66 61 69 6c 75 72 65 20 72 65 73 70 6f 6e 73 65 20 63 6f 64 65 00 60 60 73 74 61 74 75 73 | n-failure.response.code.``status |
a2240 | 20 32 30 30 60 60 20 45 78 70 65 63 74 69 6e 67 20 61 20 32 30 30 20 72 65 73 70 6f 6e 73 65 20 | .200``.Expecting.a.200.response. |
a2260 | 63 6f 64 65 00 60 60 73 74 72 69 6e 67 20 73 75 63 63 65 73 73 60 60 20 45 78 70 65 63 74 69 6e | code.``string.success``.Expectin |
a2280 | 67 20 74 68 65 20 73 74 72 69 6e 67 20 60 73 75 63 63 65 73 73 60 20 69 6e 20 74 68 65 20 72 65 | g.the.string.`success`.in.the.re |
a22a0 | 73 70 6f 6e 73 65 20 62 6f 64 79 00 60 60 73 79 6e 70 72 6f 78 79 60 60 3a 20 73 79 6e 70 72 6f | sponse.body.``synproxy``:.synpro |
a22c0 | 78 79 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 73 79 73 63 74 6c 60 60 20 69 73 20 75 73 65 | xy.the.packet..``sysctl``.is.use |
a22e0 | 64 20 74 6f 20 6d 6f 64 69 66 79 20 6b 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 | d.to.modify.kernel.parameters.at |
a2300 | 20 72 75 6e 74 69 6d 65 2e 20 20 54 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 | .runtime...The.parameters.availa |
a2320 | 62 6c 65 20 61 72 65 20 74 68 6f 73 65 20 6c 69 73 74 65 64 20 75 6e 64 65 72 20 2f 70 72 6f 63 | ble.are.those.listed.under./proc |
a2340 | 2f 73 79 73 2f 2e 00 60 60 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c | /sys/..``table.10``.Routing.tabl |
a2360 | 65 20 75 73 65 64 20 66 6f 72 20 49 53 50 31 00 60 60 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 | e.used.for.ISP1.``table.10``.Rou |
a2380 | 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e 20 31 30 20 28 31 39 32 | ting.table.used.for.VLAN.10.(192 |
a23a0 | 2e 31 36 38 2e 31 38 38 2e 30 2f 32 34 29 00 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 | .168.188.0/24).``table.11``.Rout |
a23c0 | 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 49 53 50 32 00 60 60 74 61 62 6c 65 20 | ing.table.used.for.ISP2.``table. |
a23e0 | 31 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e | 11``.Routing.table.used.for.VLAN |
a2400 | 20 31 31 20 28 31 39 32 2e 31 36 38 2e 31 38 39 2e 30 2f 32 34 29 00 60 60 74 61 62 6c 65 60 60 | .11.(192.168.189.0/24).``table`` |
a2420 | 20 2d 20 4e 6f 6e 2d 6d 61 69 6e 20 4b 65 72 6e 65 6c 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 | .-.Non-main.Kernel.Routing.Table |
a2440 | 00 60 60 74 61 72 67 65 74 60 60 3a 20 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 62 65 20 73 65 | .``target``:.the.target.to.be.se |
a2460 | 6e 74 20 49 43 4d 50 20 70 61 63 6b 65 74 73 20 74 6f 2c 20 61 64 64 72 65 73 73 20 63 61 6e 20 | nt.ICMP.packets.to,.address.can. |
a2480 | 62 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 68 6f 73 74 6e 61 6d 65 00 60 | be.an.IPv4.address.or.hostname.` |
a24a0 | 60 74 65 73 74 2d 73 63 72 69 70 74 60 60 3a 20 41 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 | `test-script``:.A.user.defined.s |
a24c0 | 63 72 69 70 74 20 6d 75 73 74 20 72 65 74 75 72 6e 20 30 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 | cript.must.return.0.to.be.consid |
a24e0 | 65 72 65 64 20 73 75 63 63 65 73 73 66 75 6c 20 61 6e 64 20 6e 6f 6e 2d 7a 65 72 6f 20 74 6f 20 | ered.successful.and.non-zero.to. |
a2500 | 66 61 69 6c 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 2f 63 6f | fail..Scripts.are.located.in./co |
a2520 | 6e 66 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 | nfig/scripts,.for.different.loca |
a2540 | 74 69 6f 6e 73 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 | tions.the.full.path.needs.to.be. |
a2560 | 70 72 6f 76 69 64 65 64 00 60 60 74 68 72 65 73 68 6f 6c 64 60 60 3a 20 60 60 62 65 6c 6f 77 60 | provided.``threshold``:.``below` |
a2580 | 60 20 6f 72 20 60 60 61 62 6f 76 65 60 60 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 74 | `.or.``above``.the.specified.rat |
a25a0 | 65 20 6c 69 6d 69 74 2e 00 60 60 74 68 72 6f 75 67 68 70 75 74 60 60 3a 20 41 20 73 65 72 76 65 | e.limit..``throughput``:.A.serve |
a25c0 | 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 20 6f 6e 20 69 6d 70 72 6f 76 69 6e 67 20 6e | r.profile.focused.on.improving.n |
a25e0 | 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 70 75 74 2e 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 | etwork.throughput..This.profile. |
a2600 | 66 61 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 | favors.performance.over.power.sa |
a2620 | 76 69 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 | vings.by.setting.``intel_pstate` |
a2640 | 60 20 61 6e 64 20 60 60 6d 61 78 5f 70 65 72 66 5f 70 63 74 3d 31 30 30 60 60 20 61 6e 64 20 69 | `.and.``max_perf_pct=100``.and.i |
a2660 | 6e 63 72 65 61 73 69 6e 67 20 6b 65 72 6e 65 6c 20 6e 65 74 77 6f 72 6b 20 62 75 66 66 65 72 20 | ncreasing.kernel.network.buffer. |
a2680 | 73 69 7a 65 73 2e 00 60 60 74 69 6d 65 6f 75 74 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 | sizes..``timeout``.keep-alive.ti |
a26a0 | 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 | meout.in.seconds.<2-86400>.(defa |
a26c0 | 75 6c 74 20 31 32 30 29 20 49 4b 45 76 31 20 6f 6e 6c 79 00 60 60 74 6f 6b 65 6e 60 60 20 75 73 | ult.120).IKEv1.only.``token``.us |
a26e0 | 65 20 4a 57 54 20 74 6f 6b 65 6e 73 2e 00 60 60 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 | e.JWT.tokens..``transmit-load-ba |
a2700 | 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 70 74 69 76 65 20 74 72 61 6e 73 6d 69 74 20 6c 6f 61 64 | lance``.-.Adaptive.transmit.load |
a2720 | 20 62 61 6c 61 6e 63 69 6e 67 3a 20 63 68 61 6e 6e 65 6c 20 62 6f 6e 64 69 6e 67 20 74 68 61 74 | .balancing:.channel.bonding.that |
a2740 | 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 | .does.not.require.any.special.sw |
a2760 | 69 74 63 68 20 73 75 70 70 6f 72 74 2e 00 60 60 74 72 61 6e 73 70 6f 72 74 60 60 20 74 72 61 6e | itch.support..``transport``.tran |
a2780 | 73 70 6f 72 74 20 6d 6f 64 65 3b 00 60 60 74 72 61 70 60 60 20 20 69 6e 73 74 61 6c 6c 73 20 61 | sport.mode;.``trap``..installs.a |
a27a0 | 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d | .trap.policy,.which.will.catch.m |
a27c0 | 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d | atching.traffic.and.tries.to.re- |
a27e0 | 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 74 75 6e 6e 65 6c 20 6f 6e 2d 64 65 6d 61 6e 64 3b 00 | negotiate.the.tunnel.on-demand;. |
a2800 | 60 60 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 20 | ``trap``.installs.a.trap.policy. |
a2820 | 66 6f 72 20 74 68 65 20 43 48 49 4c 44 5f 53 41 3b 00 60 60 74 74 6c 2d 6c 69 6d 69 74 60 60 3a | for.the.CHILD_SA;.``ttl-limit``: |
a2840 | 20 46 6f 72 20 74 68 65 20 55 44 50 20 54 54 4c 20 6c 69 6d 69 74 20 74 65 73 74 20 74 68 65 20 | .For.the.UDP.TTL.limit.test.the. |
a2860 | 68 6f 70 20 63 6f 75 6e 74 20 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 | hop.count.limit.must.be.specifie |
a2880 | 64 2e 20 54 68 65 20 6c 69 6d 69 74 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 | d..The.limit.must.be.shorter.tha |
a28a0 | 6e 20 74 68 65 20 70 61 74 68 20 6c 65 6e 67 74 68 2c 20 61 6e 20 49 43 4d 50 20 74 69 6d 65 20 | n.the.path.length,.an.ICMP.time. |
a28c0 | 65 78 70 69 72 65 64 20 6d 65 73 73 61 67 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 62 65 20 | expired.message.is.needed.to.be. |
a28e0 | 72 65 74 75 72 6e 65 64 20 66 6f 72 20 61 20 73 75 63 63 65 73 73 66 75 6c 20 74 65 73 74 2e 20 | returned.for.a.successful.test.. |
a2900 | 64 65 66 61 75 6c 74 20 31 00 60 60 74 74 79 53 4e 60 60 20 2d 20 53 65 72 69 61 6c 20 64 65 76 | default.1.``ttySN``.-.Serial.dev |
a2920 | 69 63 65 20 6e 61 6d 65 00 60 60 74 74 79 55 53 42 58 60 60 20 2d 20 55 53 42 20 53 65 72 69 61 | ice.name.``ttyUSBX``.-.USB.Seria |
a2940 | 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 00 60 60 74 75 6e 6e 65 6c 60 60 20 2d 20 64 65 66 69 6e | l.device.name.``tunnel``.-.defin |
a2960 | 65 20 63 72 69 74 65 72 69 61 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 20 6d 61 74 | e.criteria.for.traffic.to.be.mat |
a2980 | 63 68 65 64 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6e 67 20 61 6e 64 20 73 65 6e 64 20 69 74 20 | ched.for.encrypting.and.send.it. |
a29a0 | 74 6f 20 61 20 70 65 65 72 3a 00 60 60 74 75 6e 6e 65 6c 60 60 20 74 75 6e 6e 65 6c 20 6d 6f 64 | to.a.peer:.``tunnel``.tunnel.mod |
a29c0 | 65 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 74 79 70 65 60 60 3a 20 53 70 65 63 69 66 79 20 74 | e.(default);.``type``:.Specify.t |
a29e0 | 68 65 20 74 79 70 65 20 6f 66 20 74 65 73 74 2e 20 74 79 70 65 20 63 61 6e 20 62 65 20 70 69 6e | he.type.of.test..type.can.be.pin |
a2a00 | 67 2c 20 74 74 6c 20 6f 72 20 61 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 00 | g,.ttl.or.a.user.defined.script. |
a2a20 | 60 60 75 73 65 2d 78 35 30 39 2d 69 64 60 60 20 2d 20 75 73 65 20 6c 6f 63 61 6c 20 49 44 20 66 | ``use-x509-id``.-.use.local.ID.f |
a2a40 | 72 6f 6d 20 78 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 43 61 6e 6e 6f 74 20 62 65 20 | rom.x509.certificate..Cannot.be. |
a2a60 | 75 73 65 64 20 77 68 65 6e 20 60 60 69 64 60 60 20 69 73 20 64 65 66 69 6e 65 64 3b 00 60 60 76 | used.when.``id``.is.defined;.``v |
a2a80 | 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d 20 44 65 66 69 6e 65 73 20 61 20 76 69 72 | irtual-address``.-.Defines.a.vir |
a2aa0 | 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 69 73 20 72 65 71 75 65 73 74 | tual.IP.address.which.is.request |
a2ac0 | 65 64 20 62 79 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 20 61 6e 64 20 6f 6e 65 20 6f 72 20 73 | ed.by.the.initiator.and.one.or.s |
a2ae0 | 65 76 65 72 61 6c 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | everal.IPv4.and/or.IPv6.addresse |
a2b00 | 73 20 61 72 65 20 61 73 73 69 67 6e 65 64 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 70 6f 6f | s.are.assigned.from.multiple.poo |
a2b20 | 6c 73 20 62 79 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 | ls.by.the.responder..``virtual-i |
a2b40 | 70 60 60 20 41 6c 6c 6f 77 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 | p``.Allow.install.virtual-ip.add |
a2b60 | 72 65 73 73 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 | resses..Comma.separated.list.of. |
a2b80 | 76 69 72 74 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 | virtual.IPs.to.request.in.IKEv2. |
a2ba0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 | configuration.payloads.or.IKEv1. |
a2bc0 | 4d 6f 64 65 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 | Mode.Config..The.wildcard.addres |
a2be0 | 73 65 73 20 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 | ses.0.0.0.0.and.::.request.an.ar |
a2c00 | 62 69 74 72 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 | bitrary.address,.specific.addres |
a2c20 | 73 65 73 20 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 | ses.may.be.defined..The.responde |
a2c40 | 72 20 6d 61 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 | r.may.return.a.different.address |
a2c60 | 2c 20 74 68 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 00 60 60 76 69 72 74 | ,.though,.or.none.at.all..``virt |
a2c80 | 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f 77 73 20 74 6f 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 | ual-ip``.Allows.to.install.virtu |
a2ca0 | 61 6c 2d 69 70 20 61 64 64 72 65 73 73 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 | al-ip.addresses..Comma.separated |
a2cc0 | 20 6c 69 73 74 20 6f 66 20 76 69 72 74 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 | .list.of.virtual.IPs.to.request. |
a2ce0 | 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 | in.IKEv2.configuration.payloads. |
a2d00 | 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 | or.IKEv1.Mode.Config..The.wildca |
a2d20 | 72 64 20 61 64 64 72 65 73 73 65 73 20 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 | rd.addresses.0.0.0.0.and.::.requ |
a2d40 | 65 73 74 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 | est.an.arbitrary.address,.specif |
a2d60 | 69 63 20 61 64 64 72 65 73 73 65 73 20 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 | ic.addresses.may.be.defined..The |
a2d80 | 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e | .responder.may.return.a.differen |
a2da0 | 74 20 61 64 64 72 65 73 73 2c 20 74 68 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c | t.address,.though,.or.none.at.al |
a2dc0 | 6c 2e 20 44 65 66 69 6e 65 20 74 68 65 20 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 | l..Define.the.``virtual-address` |
a2de0 | 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 | `.option.to.configure.the.IP.add |
a2e00 | 72 65 73 73 20 69 6e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 68 69 65 72 61 72 63 68 79 2e 00 | ress.in.site-to-site.hierarchy.. |
a2e20 | 60 60 76 6e 63 60 60 20 2d 20 56 69 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f | ``vnc``.-.Virtual.Network.Contro |
a2e40 | 6c 20 28 56 4e 43 29 00 60 60 76 74 69 60 60 20 2d 20 75 73 65 20 61 20 56 54 49 20 69 6e 74 65 | l.(VNC).``vti``.-.use.a.VTI.inte |
a2e60 | 72 66 61 63 65 20 66 6f 72 20 74 72 61 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 41 6e | rface.for.traffic.encryption..An |
a2e80 | 79 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f | y.traffic,.which.will.be.send.to |
a2ea0 | 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 62 65 20 65 6e 63 72 79 70 74 65 64 | .VTI.interface.will.be.encrypted |
a2ec0 | 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 20 55 73 69 6e 67 20 56 54 | .and.send.to.this.peer..Using.VT |
a2ee0 | 49 20 6d 61 6b 65 73 20 49 50 53 65 63 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 63 68 | I.makes.IPSec.configuration.much |
a2f00 | 20 66 6c 65 78 69 62 6c 65 20 61 6e 64 20 65 61 73 69 65 72 20 69 6e 20 63 6f 6d 70 6c 65 78 20 | .flexible.and.easier.in.complex. |
a2f20 | 73 69 74 75 61 74 69 6f 6e 2c 20 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 64 79 6e 61 6d 69 63 | situation,.and.allows.to.dynamic |
a2f40 | 61 6c 6c 79 20 61 64 64 2f 64 65 6c 65 74 65 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 2c | ally.add/delete.remote.networks, |
a2f60 | 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 61 20 70 65 65 72 2c 20 61 73 20 69 6e 20 74 68 69 | .reachable.via.a.peer,.as.in.thi |
a2f80 | 73 20 6d 6f 64 65 20 72 6f 75 74 65 72 20 64 6f 6e 27 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 | s.mode.router.don't.need.to.crea |
a2fa0 | 74 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 53 41 2f 70 6f 6c 69 63 79 20 66 6f 72 20 65 61 63 68 | te.additional.SA/policy.for.each |
a2fc0 | 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 3a 00 60 60 78 35 30 39 60 60 20 2d 20 6f 70 74 69 | .remote.network:.``x509``.-.opti |
a2fe0 | 6f 6e 73 20 66 6f 72 20 78 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 | ons.for.x509.authentication.mode |
a3000 | 3a 00 60 60 78 35 30 39 60 60 20 2d 20 75 73 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 69 6e | :.``x509``.-.use.certificates.in |
a3020 | 66 72 61 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e | frastructure.for.authentication. |
a3040 | 00 60 60 78 6f 72 2d 68 61 73 68 60 60 20 2d 20 58 4f 52 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e | .``xor-hash``.-.XOR.policy:.Tran |
a3060 | 73 6d 69 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 74 72 61 6e 73 | smit.based.on.the.selected.trans |
a3080 | 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 20 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f | mit.hash.policy...The.default.po |
a30a0 | 6c 69 63 79 20 69 73 20 61 20 73 69 6d 70 6c 65 20 5b 28 73 6f 75 72 63 65 20 4d 41 43 20 61 64 | licy.is.a.simple.[(source.MAC.ad |
a30c0 | 64 72 65 73 73 20 58 4f 52 27 64 20 77 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4d 41 43 | dress.XOR'd.with.destination.MAC |
a30e0 | 20 61 64 64 72 65 73 73 20 58 4f 52 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 29 20 6d 6f 64 | .address.XOR.packet.type.ID).mod |
a3100 | 75 6c 6f 20 73 6c 61 76 65 20 63 6f 75 6e 74 5d 2e 20 41 6c 74 65 72 6e 61 74 65 20 74 72 61 6e | ulo.slave.count]..Alternate.tran |
a3120 | 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 62 65 20 73 65 6c 65 63 74 65 64 20 76 69 | smit.policies.may.be.selected.vi |
a3140 | 61 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 | a.the.:cfgcmd:`hash-policy`.opti |
a3160 | 6f 6e 2c 20 64 65 73 63 72 69 62 65 64 20 62 65 6c 6f 77 2e 00 60 60 79 65 73 60 60 20 65 6e 61 | on,.described.below..``yes``.ena |
a3180 | 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f | ble.remote.host.re-authenticatio |
a31a0 | 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b 00 60 69 67 6e 6f 72 65 60 3a | n.during.an.IKE.rekey;.`ignore`: |
a31c0 | 20 4e 6f 20 63 6f 72 72 65 63 74 69 6f 6e 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 | .No.correction.is.applied.to.the |
a31e0 | 20 63 6c 6f 63 6b 20 66 6f 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 2e 20 54 68 65 20 | .clock.for.the.leap.second..The. |
a3200 | 63 6c 6f 63 6b 20 77 69 6c 6c 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 6c 61 74 65 72 20 69 6e | clock.will.be.corrected.later.in |
a3220 | 20 6e 6f 72 6d 61 6c 20 6f 70 65 72 61 74 69 6f 6e 20 77 68 65 6e 20 6e 65 77 20 6d 65 61 73 75 | .normal.operation.when.new.measu |
a3240 | 72 65 6d 65 6e 74 73 20 61 72 65 20 6d 61 64 65 20 61 6e 64 20 74 68 65 20 65 73 74 69 6d 61 74 | rements.are.made.and.the.estimat |
a3260 | 65 64 20 6f 66 66 73 65 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 6f 6e 65 20 73 65 63 6f 6e | ed.offset.includes.the.one.secon |
a3280 | 64 20 65 72 72 6f 72 2e 00 60 73 6d 65 61 72 60 3a 20 57 68 65 6e 20 73 6d 65 61 72 69 6e 67 20 | d.error..`smear`:.When.smearing. |
a32a0 | 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 65 20 6c 65 61 70 20 73 74 61 74 75 73 20 69 | a.leap.second,.the.leap.status.i |
a32c0 | 73 20 73 75 70 70 72 65 73 73 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 | s.suppressed.on.the.server.and.t |
a32e0 | 68 65 20 73 65 72 76 65 64 20 74 69 6d 65 20 69 73 20 63 6f 72 72 65 63 74 65 64 20 73 6c 6f 77 | he.served.time.is.corrected.slow |
a3300 | 6c 79 20 62 79 20 73 6c 65 77 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 73 74 65 70 70 69 6e | ly.by.slewing.instead.of.steppin |
a3320 | 67 2e 20 54 68 65 20 63 6c 69 65 6e 74 73 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 61 6e 79 20 73 | g..The.clients.do.not.need.any.s |
a3340 | 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 73 20 74 68 65 79 20 64 6f 20 | pecial.configuration.as.they.do. |
a3360 | 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 72 65 20 69 73 20 61 6e 79 20 6c 65 61 70 20 73 65 63 6f 6e | not.know.there.is.any.leap.secon |
a3380 | 64 20 61 6e 64 20 74 68 65 79 20 66 6f 6c 6c 6f 77 20 74 68 65 20 73 65 72 76 65 72 20 74 69 6d | d.and.they.follow.the.server.tim |
a33a0 | 65 20 77 68 69 63 68 20 65 76 65 6e 74 75 61 6c 6c 79 20 62 72 69 6e 67 73 20 74 68 65 6d 20 62 | e.which.eventually.brings.them.b |
a33c0 | 61 63 6b 20 74 6f 20 55 54 43 2e 20 43 61 72 65 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 74 | ack.to.UTC..Care.must.be.taken.t |
a33e0 | 6f 20 65 6e 73 75 72 65 20 74 68 65 79 20 75 73 65 20 6f 6e 6c 79 20 4e 54 50 20 73 65 72 76 65 | o.ensure.they.use.only.NTP.serve |
a3400 | 72 73 20 77 68 69 63 68 20 73 6d 65 61 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 69 | rs.which.smear.the.leap.second.i |
a3420 | 6e 20 65 78 61 63 74 6c 79 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 66 6f 72 20 73 79 6e 63 68 | n.exactly.the.same.way.for.synch |
a3440 | 72 6f 6e 69 73 61 74 69 6f 6e 2e 00 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 20 61 6e 64 | ronisation..`source-address`.and |
a3460 | 20 60 73 6f 75 72 63 65 2d 69 6e 74 65 72 66 61 63 65 60 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 | .`source-interface`.can.not.be.u |
a3480 | 73 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 00 60 73 79 73 74 65 6d 60 3a 20 | sed.at.the.same.time..`system`:. |
a34a0 | 57 68 65 6e 20 69 6e 73 65 72 74 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 | When.inserting.a.leap.second,.th |
a34c0 | 65 20 6b 65 72 6e 65 6c 20 73 74 65 70 73 20 74 68 65 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 20 | e.kernel.steps.the.system.clock. |
a34e0 | 62 61 63 6b 77 61 72 64 73 20 62 79 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 | backwards.by.one.second.when.the |
a3500 | 20 63 6c 6f 63 6b 20 67 65 74 73 20 74 6f 20 30 30 3a 30 30 3a 30 30 20 55 54 43 2e 20 57 68 65 | .clock.gets.to.00:00:00.UTC..Whe |
a3520 | 6e 20 64 65 6c 65 74 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 69 74 20 73 74 65 | n.deleting.a.leap.second,.it.ste |
a3540 | 70 73 20 66 6f 72 77 61 72 64 20 62 79 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 | ps.forward.by.one.second.when.th |
a3560 | 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 74 6f 20 32 33 3a 35 39 3a 35 39 20 55 54 43 2e 00 60 74 | e.clock.gets.to.23:59:59.UTC..`t |
a3580 | 69 6d 65 7a 6f 6e 65 60 3a 20 54 68 69 73 20 64 69 72 65 63 74 69 76 65 20 73 70 65 63 69 66 69 | imezone`:.This.directive.specifi |
a35a0 | 65 73 20 61 20 74 69 6d 65 7a 6f 6e 65 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 20 74 69 6d 65 | es.a.timezone.in.the.system.time |
a35c0 | 7a 6f 6e 65 20 64 61 74 61 62 61 73 65 20 77 68 69 63 68 20 63 68 72 6f 6e 79 64 20 63 61 6e 20 | zone.database.which.chronyd.can. |
a35e0 | 75 73 65 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 6e 20 77 69 6c 6c 20 74 68 65 20 6e | use.to.determine.when.will.the.n |
a3600 | 65 78 74 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 6f 63 63 75 72 20 61 6e 64 20 77 68 61 74 20 69 | ext.leap.second.occur.and.what.i |
a3620 | 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 6f 66 66 73 65 74 20 62 65 74 77 65 65 6e 20 54 41 49 | s.the.current.offset.between.TAI |
a3640 | 20 61 6e 64 20 55 54 43 2e 20 49 74 20 77 69 6c 6c 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 | .and.UTC..It.will.periodically.c |
a3660 | 68 65 63 6b 20 69 66 20 32 33 3a 35 39 3a 35 39 20 61 6e 64 20 32 33 3a 35 39 3a 36 30 20 61 72 | heck.if.23:59:59.and.23:59:60.ar |
a3680 | 65 20 76 61 6c 69 64 20 74 69 6d 65 73 20 69 6e 20 74 68 65 20 74 69 6d 65 7a 6f 6e 65 2e 20 54 | e.valid.times.in.the.timezone..T |
a36a0 | 68 69 73 20 6e 6f 72 6d 61 6c 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 20 74 68 65 20 72 69 67 68 | his.normally.works.with.the.righ |
a36c0 | 74 2f 55 54 43 20 74 69 6d 65 7a 6f 6e 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 | t/UTC.timezone.which.is.the.defa |
a36e0 | 75 6c 74 00 60 74 77 65 65 74 20 62 79 20 45 76 69 6c 4d 6f 67 60 5f 2c 20 32 30 32 30 2d 30 32 | ult.`tweet.by.EvilMog`_,.2020-02 |
a3700 | 2d 32 31 00 61 20 62 61 6e 64 77 69 64 74 68 20 74 65 73 74 20 6f 76 65 72 20 74 68 65 20 56 50 | -21.a.bandwidth.test.over.the.VP |
a3720 | 4e 20 67 6f 74 20 74 68 65 73 65 20 72 65 73 75 6c 74 73 3a 00 61 20 62 6c 61 6e 6b 20 69 6e 64 | N.got.these.results:.a.blank.ind |
a3740 | 69 63 61 74 65 73 20 74 68 61 74 20 6e 6f 20 74 65 73 74 20 68 61 73 20 62 65 65 6e 20 63 61 72 | icates.that.no.test.has.been.car |
a3760 | 72 69 65 64 20 6f 75 74 00 61 65 73 32 35 36 20 45 6e 63 72 79 70 74 69 6f 6e 00 61 6c 65 72 74 | ried.out.aes256.Encryption.alert |
a3780 | 00 61 6c 6c 00 61 6e 20 52 44 20 2f 20 52 54 4c 49 53 54 00 61 6e 20 69 6e 74 65 72 66 61 63 65 | .all.an.RD./.RTLIST.an.interface |
a37a0 | 20 77 69 74 68 20 61 20 6e 65 78 74 68 6f 70 00 61 6e 79 3a 20 61 6e 79 20 49 50 20 61 64 64 72 | .with.a.nexthop.any:.any.IP.addr |
a37c0 | 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 61 6e 79 3a 20 61 6e 79 20 49 50 76 36 20 61 64 64 72 | ess.to.match..any:.any.IPv6.addr |
a37e0 | 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 61 75 74 68 00 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e | ess.to.match..auth.authorization |
a3800 | 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 | .auto.-.interface.duplex.setting |
a3820 | 20 69 73 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 65 64 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 | .is.auto-negotiated.auto.-.inter |
a3840 | 66 61 63 65 20 73 70 65 65 64 20 69 73 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 65 64 00 62 67 | face.speed.is.auto-negotiated.bg |
a3860 | 70 64 00 62 6f 6e 64 69 6e 67 00 62 6f 6f 74 2d 73 69 7a 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 | pd.bonding.boot-size.bootfile-na |
a3880 | 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 6d 65 2c 20 66 69 6c 65 6e 61 6d 65 00 62 6f 6f 74 66 | me.bootfile-name,.filename.bootf |
a38a0 | 69 6c 65 2d 73 65 72 76 65 72 00 62 6f 6f 74 66 69 6c 65 2d 73 69 7a 65 00 62 72 69 64 67 65 00 | ile-server.bootfile-size.bridge. |
a38c0 | 63 6c 69 65 6e 74 20 65 78 61 6d 70 6c 65 20 28 64 65 62 69 61 6e 20 39 29 00 63 6c 69 65 6e 74 | client.example.(debian.9).client |
a38e0 | 2d 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 00 63 6c 6f 63 6b 00 63 6c 6f 63 6b 20 64 61 65 6d 6f | -prefix-length.clock.clock.daemo |
a3900 | 6e 20 28 6e 6f 74 65 20 32 29 00 63 72 69 74 00 63 72 6f 6e 00 64 61 65 6d 6f 6e 00 64 64 63 6c | n.(note.2).crit.cron.daemon.ddcl |
a3920 | 69 65 6e 74 5f 20 68 61 73 20 61 6e 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 | ient_.has.another.way.to.determi |
a3940 | 6e 65 20 74 68 65 20 57 41 4e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 63 | ne.the.WAN.IP.address..This.is.c |
a3960 | 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 3a 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f | ontrolled.by:.ddclient_.uses.two |
a3980 | 20 6d 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e | .methods.to.update.a.DNS.record. |
a39a0 | 20 54 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 | .The.first.one.will.send.updates |
a39c0 | 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 | .directly.to.the.DNS.daemon,.in. |
a39e0 | 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 | compliance.with.:rfc:`2136`..The |
a3a00 | 20 73 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 | .second.one.involves.a.third.par |
a3a20 | 74 79 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 | ty.service,.like.DynDNS.com.or.a |
a3a40 | 6e 79 20 6f 74 68 65 72 20 73 69 6d 69 6c 61 72 20 77 65 62 73 69 74 65 2e 20 54 68 69 73 20 6d | ny.other.similar.website..This.m |
a3a60 | 65 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e | ethod.uses.HTTP.requests.to.tran |
a3a80 | 73 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e | smit.the.new.IP.address..You.can |
a3aa0 | 20 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e | .configure.both.in.VyOS..ddclien |
a3ac0 | 74 5f 20 75 73 65 73 20 74 77 6f 20 6d 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 | t_.uses.two.methods.to.update.a. |
a3ae0 | 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 | DNS.record..The.first.one.will.s |
a3b00 | 65 6e 64 20 75 70 64 61 74 65 73 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 | end.updates.directly.to.the.DNS. |
a3b20 | 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a | daemon,.in.compliance.with.:rfc: |
a3b40 | 60 32 31 33 36 60 2e 20 54 68 65 20 73 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 | `2136`..The.second.one.involves. |
a3b60 | 61 20 74 68 69 72 64 20 70 61 72 74 79 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 | a.third.party.service,.like.DynD |
a3b80 | 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 75 63 68 20 73 65 72 76 69 63 65 | NS.com.or.any.other.such.service |
a3ba0 | 20 70 72 6f 76 69 64 65 72 2e 20 54 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 | .provider..This.method.uses.HTTP |
a3bc0 | 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 | .requests.to.transmit.the.new.IP |
a3be0 | 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 | .address..You.can.configure.both |
a3c00 | 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 73 6b 69 70 20 61 6e | .in.VyOS..ddclient_.will.skip.an |
a3c20 | 79 20 61 64 64 72 65 73 73 20 6c 6f 63 61 74 65 64 20 62 65 66 6f 72 65 20 74 68 65 20 73 74 72 | y.address.located.before.the.str |
a3c40 | 69 6e 67 20 73 65 74 20 69 6e 20 60 3c 70 61 74 74 65 72 6e 3e 60 2e 00 64 65 62 75 67 00 64 65 | ing.set.in.`<pattern>`..debug.de |
a3c60 | 63 72 65 6d 65 6e 74 2d 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 6c 74 20 6d 69 6e 2d 74 68 72 | crement-lifetime.default.min-thr |
a3c80 | 65 73 68 6f 6c 64 00 64 65 66 61 75 6c 74 2d 6c 65 61 73 65 2d 74 69 6d 65 2c 20 6d 61 78 2d 6c | eshold.default-lease-time,.max-l |
a3ca0 | 65 61 73 65 2d 74 69 6d 65 00 64 65 66 61 75 6c 74 2d 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 | ease-time.default-lifetime.defau |
a3cc0 | 6c 74 2d 70 72 65 66 65 72 65 6e 63 65 00 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 72 00 64 65 70 | lt-preference.default-router.dep |
a3ce0 | 72 65 63 61 74 65 2d 70 72 65 66 69 78 00 64 65 73 74 69 6e 61 74 69 6f 6e 2d 68 61 73 68 69 6e | recate-prefix.destination-hashin |
a3d00 | 67 00 64 68 63 70 2d 73 65 72 76 65 72 2d 69 64 65 6e 74 69 66 69 65 72 00 64 69 72 65 63 74 00 | g.dhcp-server-identifier.direct. |
a3d20 | 64 69 72 65 63 74 6f 72 79 00 64 69 73 61 62 6c 65 3a 20 4e 6f 20 73 6f 75 72 63 65 20 76 61 6c | directory.disable:.No.source.val |
a3d40 | 69 64 61 74 69 6f 6e 00 64 6e 73 73 6c 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 00 64 6f 6d 61 69 6e | idation.dnssl.domain-name.domain |
a3d60 | 2d 6e 61 6d 65 2d 73 65 72 76 65 72 73 00 64 6f 6d 61 69 6e 2d 73 65 61 72 63 68 00 65 6d 65 72 | -name-servers.domain-search.emer |
a3d80 | 67 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 20 49 43 4d 50 76 34 20 72 65 64 69 | g.enable.or.disable..ICMPv4.redi |
a3da0 | 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 | rect.messages.send.by.VyOS.The.f |
a3dc0 | 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 | ollowing.system.parameter.will.b |
a3de0 | 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 49 43 4d | e.altered:.enable.or.disable.ICM |
a3e00 | 50 76 34 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 | Pv4.redirect.messages.send.by.Vy |
a3e20 | 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 | OS.The.following.system.paramete |
a3e40 | 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 | r.will.be.altered:.enable.or.dis |
a3e60 | 61 62 6c 65 20 6f 66 20 49 43 4d 50 76 34 20 6f 72 20 49 43 4d 50 76 36 20 72 65 64 69 72 65 63 | able.of.ICMPv4.or.ICMPv6.redirec |
a3e80 | 74 20 6d 65 73 73 61 67 65 73 20 61 63 63 65 70 74 65 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 | t.messages.accepted.by.VyOS..The |
a3ea0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c | .following.system.parameter.will |
a3ec0 | 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 | .be.altered:.enable.or.disable.t |
a3ee0 | 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 6d 61 72 74 69 61 6e 20 49 50 76 34 20 70 61 63 6b 65 | he.logging.of.martian.IPv4.packe |
a3f00 | 74 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 | ts..The.following.system.paramet |
a3f20 | 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 72 72 00 65 74 68 65 72 6e 65 74 | er.will.be.altered:.err.ethernet |
a3f40 | 00 65 78 61 63 74 2d 6d 61 74 63 68 3a 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f 66 20 74 68 65 | .exact-match:.exact.match.of.the |
a3f60 | 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 65 73 2e 00 65 78 63 6c 75 64 65 00 66 61 69 6c 6f | .network.prefixes..exclude.failo |
a3f80 | 76 65 72 00 66 61 73 74 3a 20 52 65 71 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 | ver.fast:.Request.partner.to.tra |
a3fa0 | 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 20 65 76 65 72 79 20 31 20 73 65 63 6f 6e 64 00 66 69 6c | nsmit.LACPDUs.every.1.second.fil |
a3fc0 | 65 20 3c 66 69 6c 65 20 6e 61 6d 65 3e 00 66 69 6c 74 65 72 2d 6c 69 73 74 00 66 74 70 00 66 75 | e.<file.name>.filter-list.ftp.fu |
a3fe0 | 6c 6c 20 2d 20 61 6c 77 61 79 73 20 75 73 65 20 66 75 6c 6c 2d 64 75 70 6c 65 78 00 67 65 6e 65 | ll.-.always.use.full-duplex.gene |
a4000 | 76 65 00 68 61 6c 66 20 2d 20 61 6c 77 61 79 73 20 75 73 65 20 68 61 6c 66 2d 64 75 70 6c 65 78 | ve.half.-.always.use.half-duplex |
a4020 | 00 68 6f 70 2d 6c 69 6d 69 74 00 68 6f 73 74 3a 20 73 69 6e 67 6c 65 20 68 6f 73 74 20 49 50 20 | .hop-limit.host:.single.host.IP. |
a4040 | 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 68 74 74 70 73 3a 2f 2f 61 63 63 65 73 73 | address.to.match..https://access |
a4060 | 2e 72 65 64 68 61 74 2e 63 6f 6d 2f 73 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f | .redhat.com/sites/default/files/ |
a4080 | 61 74 74 61 63 68 6d 65 6e 74 73 2f 32 30 31 35 30 31 2d 70 65 72 66 2d 62 72 69 65 66 2d 6c 6f | attachments/201501-perf-brief-lo |
a40a0 | 77 2d 6c 61 74 65 6e 63 79 2d 74 75 6e 69 6e 67 2d 72 68 65 6c 37 2d 76 32 2e 31 2e 70 64 66 00 | w-latency-tuning-rhel7-v2.1.pdf. |
a40c0 | 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 6f 70 65 6e 76 70 6e 2e 6e 65 74 2f 6f 70 | https://community.openvpn.net/op |
a40e0 | 65 6e 76 70 6e 2f 77 69 6b 69 2f 44 61 74 61 43 68 61 6e 6e 65 6c 4f 66 66 6c 6f 61 64 2f 46 65 | envpn/wiki/DataChannelOffload/Fe |
a4100 | 61 74 75 72 65 73 00 69 66 20 74 68 65 72 65 20 69 73 20 61 20 73 75 70 70 6f 72 74 65 64 20 64 | atures.if.there.is.a.supported.d |
a4120 | 65 76 69 63 65 2c 20 65 6e 61 62 6c 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 00 69 66 20 74 68 65 | evice,.enable.Intel...QAT.if.the |
a4140 | 72 65 20 69 73 20 6e 6f 6e 20 64 65 76 69 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c | re.is.non.device.the.command.wil |
a4160 | 6c 20 73 68 6f 77 20 60 60 60 4e 6f 20 51 41 54 20 64 65 76 69 63 65 20 66 6f 75 6e 64 60 60 60 | l.show.```No.QAT.device.found``` |
a4180 | 00 69 6e 66 6f 00 69 6e 74 65 72 76 61 6c 00 69 6e 76 61 6c 69 64 00 69 6e 76 65 72 73 65 2d 6d | .info.interval.invalid.inverse-m |
a41a0 | 61 74 63 68 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 | atch:.network/netmask.to.match.( |
a41c0 | 72 65 71 75 69 72 65 73 20 6e 65 74 77 6f 72 6b 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 69 70 | requires.network.be.defined)..ip |
a41e0 | 2d 66 6f 72 77 61 72 64 69 6e 67 00 69 73 69 73 64 00 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 | -forwarding.isisd.it.can.be.used |
a4200 | 20 77 69 74 68 20 61 6e 79 20 4e 49 43 00 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 | .with.any.NIC.it.can.be.used.wit |
a4220 | 68 20 61 6e 79 20 4e 49 43 2c 00 69 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 72 65 61 73 65 20 | h.any.NIC,.it.does.not.increase. |
a4240 | 68 61 72 64 77 61 72 65 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 70 74 20 72 61 74 65 20 28 | hardware.device.interrupt.rate.( |
a4260 | 61 6c 74 68 6f 75 67 68 20 69 74 20 64 6f 65 73 20 69 6e 74 72 6f 64 75 63 65 20 69 6e 74 65 72 | although.it.does.introduce.inter |
a4280 | 2d 70 72 6f 63 65 73 73 6f 72 20 69 6e 74 65 72 72 75 70 74 73 20 28 49 50 49 73 29 29 2e 00 69 | -processor.interrupts.(IPIs))..i |
a42a0 | 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 72 65 61 73 65 20 68 61 72 64 77 61 72 65 20 64 65 76 | t.does.not.increase.hardware.dev |
a42c0 | 69 63 65 20 69 6e 74 65 72 72 75 70 74 20 72 61 74 65 2c 20 61 6c 74 68 6f 75 67 68 20 69 74 20 | ice.interrupt.rate,.although.it. |
a42e0 | 64 6f 65 73 20 69 6e 74 72 6f 64 75 63 65 20 69 6e 74 65 72 2d 70 72 6f 63 65 73 73 6f 72 20 69 | does.introduce.inter-processor.i |
a4300 | 6e 74 65 72 72 75 70 74 73 20 28 49 50 49 73 29 00 6b 65 72 6e 00 6c 32 74 70 76 33 00 6c 64 70 | nterrupts.(IPIs).kern.l2tpv3.ldp |
a4320 | 64 00 6c 65 61 73 65 00 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c 65 66 74 20 6c 6f | d.lease.least-connection.left.lo |
a4340 | 63 61 6c 5f 69 70 3a 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 20 23 20 56 50 4e 20 47 61 74 65 77 | cal_ip:.192.168.0.10.#.VPN.Gatew |
a4360 | 61 79 2c 20 62 65 68 69 6e 64 20 4e 41 54 20 64 65 76 69 63 65 00 6c 65 66 74 20 6c 6f 63 61 6c | ay,.behind.NAT.device.left.local |
a4380 | 5f 69 70 3a 20 60 31 39 38 2e 35 31 2e 31 30 30 2e 33 60 20 23 20 73 65 72 76 65 72 20 73 69 64 | _ip:.`198.51.100.3`.#.server.sid |
a43a0 | 65 20 57 41 4e 20 49 50 00 6c 65 66 74 20 70 75 62 6c 69 63 5f 69 70 3a 31 37 32 2e 31 38 2e 32 | e.WAN.IP.left.public_ip:172.18.2 |
a43c0 | 30 31 2e 31 30 00 6c 65 66 74 20 73 75 62 6e 65 74 3a 20 60 31 39 32 2e 31 36 38 2e 30 2e 30 2f | 01.10.left.subnet:.`192.168.0.0/ |
a43e0 | 32 34 60 20 73 69 74 65 31 2c 20 73 65 72 76 65 72 20 73 69 64 65 20 28 69 2e 65 2e 20 6c 6f 63 | 24`.site1,.server.side.(i.e..loc |
a4400 | 61 6c 69 74 79 2c 20 61 63 74 75 61 6c 6c 79 20 74 68 65 72 65 20 69 73 20 6e 6f 20 63 6c 69 65 | ality,.actually.there.is.no.clie |
a4420 | 6e 74 20 6f 72 20 73 65 72 76 65 72 20 72 6f 6c 65 73 29 00 6c 69 6e 6b 2d 6d 74 75 00 6c 6f 63 | nt.or.server.roles).link-mtu.loc |
a4440 | 61 6c 20 75 73 65 20 30 20 28 6c 6f 63 61 6c 30 29 00 6c 6f 63 61 6c 20 75 73 65 20 31 20 28 6c | al.use.0.(local0).local.use.1.(l |
a4460 | 6f 63 61 6c 31 29 00 6c 6f 63 61 6c 20 75 73 65 20 32 20 28 6c 6f 63 61 6c 32 29 00 6c 6f 63 61 | ocal1).local.use.2.(local2).loca |
a4480 | 6c 20 75 73 65 20 33 20 28 6c 6f 63 61 6c 33 29 00 6c 6f 63 61 6c 20 75 73 65 20 34 20 28 6c 6f | l.use.3.(local3).local.use.4.(lo |
a44a0 | 63 61 6c 34 29 00 6c 6f 63 61 6c 20 75 73 65 20 35 20 28 6c 6f 63 61 6c 35 29 00 6c 6f 63 61 6c | cal4).local.use.5.(local5).local |
a44c0 | 20 75 73 65 20 37 20 28 6c 6f 63 61 6c 37 29 00 6c 6f 63 61 6c 30 00 6c 6f 63 61 6c 31 00 6c 6f | .use.7.(local7).local0.local1.lo |
a44e0 | 63 61 6c 32 00 6c 6f 63 61 6c 33 00 6c 6f 63 61 6c 34 00 6c 6f 63 61 6c 35 00 6c 6f 63 61 6c 36 | cal2.local3.local4.local5.local6 |
a4500 | 00 6c 6f 63 61 6c 37 00 6c 6f 63 61 6c 69 74 79 2d 62 61 73 65 64 2d 6c 65 61 73 74 2d 63 6f 6e | .local7.locality-based-least-con |
a4520 | 6e 65 63 74 69 6f 6e 00 6c 6f 67 61 6c 65 72 74 00 6c 6f 67 61 75 64 69 74 00 6c 6f 6f 73 65 3a | nection.logalert.logaudit.loose: |
a4540 | 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 27 73 20 73 6f 75 72 63 65 20 61 | .Each.incoming.packet's.source.a |
a4560 | 64 64 72 65 73 73 20 69 73 20 61 6c 73 6f 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 74 68 | ddress.is.also.tested.against.th |
a4580 | 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 | e.FIB.and.if.the.source.address. |
a45a0 | 69 73 20 6e 6f 74 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 61 6e 79 20 69 6e 74 65 72 66 61 | is.not.reachable.via.any.interfa |
a45c0 | 63 65 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e 00 6c | ce.the.packet.check.will.fail..l |
a45e0 | 70 72 00 6d 44 4e 53 20 52 65 70 65 61 74 65 72 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 | pr.mDNS.Repeater.mDNS.repeater.c |
a4600 | 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 | an.be.configured.to.re-broadcast |
a4620 | 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 73 2e 20 42 79 20 64 65 66 61 | .only.specific.services..By.defa |
a4640 | 75 6c 74 2c 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 61 72 65 20 72 65 2d 62 72 6f 61 64 63 61 | ult,.all.services.are.re-broadca |
a4660 | 73 74 65 64 2e 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 65 6e 61 62 6c | sted..mDNS.repeater.can.be.enabl |
a4680 | 65 64 20 65 69 74 68 65 72 20 6f 6e 20 49 50 76 34 20 73 6f 63 6b 65 74 20 6f 72 20 6f 6e 20 49 | ed.either.on.IPv4.socket.or.on.I |
a46a0 | 50 76 36 20 73 6f 63 6b 65 74 20 6f 72 20 62 6f 74 68 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 | Pv6.socket.or.both.to.re-broadca |
a46c0 | 73 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 77 69 | st..By.default,.mDNS.repeater.wi |
a46e0 | 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e | ll.listen.on.both.IPv4.and.IPv6. |
a4700 | 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 74 65 6d 70 6f 72 61 72 69 6c | .mDNS.repeater.can.be.temporaril |
a4720 | 79 20 64 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 | y.disabled.without.deleting.the. |
a4740 | 73 65 72 76 69 63 65 20 75 73 69 6e 67 00 6d 61 69 6c 00 6d 61 6e 61 67 65 64 2d 66 6c 61 67 00 | service.using.mail.managed-flag. |
a4760 | 6d 61 74 63 68 2d 66 72 61 67 3a 20 53 65 63 6f 6e 64 20 61 6e 64 20 66 75 72 74 68 65 72 20 66 | match-frag:.Second.and.further.f |
a4780 | 72 61 67 6d 65 6e 74 73 20 6f 66 20 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 2e 00 | ragments.of.fragmented.packets.. |
a47a0 | 6d 61 74 63 68 2d 69 70 73 65 63 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 49 50 73 65 63 | match-ipsec:.match.inbound.IPsec |
a47c0 | 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e 6f 6e 2d 66 72 61 67 3a 20 48 65 61 64 20 66 | .packets..match-non-frag:.Head.f |
a47e0 | 72 61 67 6d 65 6e 74 73 20 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 | ragments.or.unfragmented.packets |
a4800 | 2e 00 6d 61 74 63 68 2d 6e 6f 6e 65 3a 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 6e 6f 6e 2d | ..match-none:.match.inbound.non- |
a4820 | 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e 00 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 00 6d 6f | IPsec.packets..minimal.config.mo |
a4840 | 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 | re.information.related.IGP..-.:r |
a4860 | 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 00 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 | ef:`routing-isis`.more.informati |
a4880 | 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d | on.related.IGP..-.:ref:`routing- |
a48a0 | 6f 73 70 66 60 00 6e 61 6d 65 2d 73 65 72 76 65 72 00 6e 65 74 62 69 6f 73 2d 6e 61 6d 65 2d 73 | ospf`.name-server.netbios-name-s |
a48c0 | 65 72 76 65 72 73 00 6e 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 | ervers.network:.network/netmask. |
a48e0 | 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 | to.match.(requires.inverse-match |
a4900 | 20 62 65 20 64 65 66 69 6e 65 64 29 20 42 55 47 2c 20 4e 4f 20 69 6e 76 65 72 74 2d 6d 61 74 63 | .be.defined).BUG,.NO.invert-matc |
a4920 | 68 20 6f 70 74 69 6f 6e 20 69 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 36 00 6e 65 74 77 6f 72 6b | h.option.in.access-list6.network |
a4940 | 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 | :.network/netmask.to.match.(requ |
a4960 | 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 | ires.inverse-match.be.defined).. |
a4980 | 6e 65 77 73 00 6e 65 78 74 2d 73 65 72 76 65 72 00 6e 6f 2d 61 75 74 6f 6e 6f 6d 6f 75 73 2d 66 | news.next-server.no-autonomous-f |
a49a0 | 6c 61 67 00 6e 6f 2d 6f 6e 2d 6c 69 6e 6b 2d 66 6c 61 67 00 6e 6f 74 66 6f 75 6e 64 00 6e 6f 74 | lag.no-on-link-flag.notfound.not |
a49c0 | 69 63 65 00 6e 74 70 00 6e 74 70 2d 73 65 72 76 65 72 00 6e 74 70 2d 73 65 72 76 65 72 73 00 6f | ice.ntp.ntp-server.ntp-servers.o |
a49e0 | 6e 65 20 72 75 6c 65 20 77 69 74 68 20 61 20 4c 41 4e 20 28 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 | ne.rule.with.a.LAN.(inbound-inte |
a4a00 | 72 66 61 63 65 29 20 61 6e 64 20 74 68 65 20 57 41 4e 20 28 69 6e 74 65 72 66 61 63 65 29 2e 00 | rface).and.the.WAN.(interface).. |
a4a20 | 6f 70 65 6e 76 70 6e 00 6f 73 70 66 36 64 00 6f 73 70 66 64 00 6f 73 70 66 64 20 73 75 70 70 6f | openvpn.ospf6d.ospfd.ospfd.suppo |
a4a40 | 72 74 73 20 4f 70 61 71 75 65 20 4c 53 41 20 3a 72 66 63 3a 60 32 33 37 30 60 20 61 73 20 70 61 | rts.Opaque.LSA.:rfc:`2370`.as.pa |
a4a60 | 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 54 72 61 66 66 69 63 20 45 | rtial.support.for.MPLS.Traffic.E |
a4a80 | 6e 67 69 6e 65 65 72 69 6e 67 20 4c 53 41 73 2e 20 54 68 65 20 6f 70 61 71 75 65 2d 6c 73 61 20 | ngineering.LSAs..The.opaque-lsa. |
a4aa0 | 63 61 70 61 62 69 6c 69 74 79 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 | capability.must.be.enabled.in.th |
a4ac0 | 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 6f 74 68 65 72 2d 63 6f 6e 66 69 67 2d 66 6c | e.configuration..other-config-fl |
a4ae0 | 61 67 00 70 61 67 65 73 20 74 6f 20 73 6f 72 74 00 70 6f 6c 69 63 79 20 61 73 2d 70 61 74 68 2d | ag.pages.to.sort.policy.as-path- |
a4b00 | 6c 69 73 74 00 70 6f 6c 69 63 79 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 | list.policy.community-list.polic |
a4b20 | 79 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 6c 61 72 67 65 | y.extcommunity-list.policy.large |
a4b40 | 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 70 2d 73 65 72 76 65 72 00 70 72 65 66 65 | -community-list.pop-server.prefe |
a4b60 | 72 72 65 64 2d 6c 69 66 65 74 69 6d 65 00 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 | rred-lifetime.prefix-list,.distr |
a4b80 | 69 62 75 74 65 2d 6c 69 73 74 00 70 73 65 75 64 6f 2d 65 74 68 65 72 6e 65 74 00 72 61 6e 67 65 | ibute-list.pseudo-ethernet.range |
a4ba0 | 00 72 65 61 63 68 61 62 6c 65 2d 74 69 6d 65 00 72 65 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 72 | .reachable-time.reset.commands.r |
a4bc0 | 65 74 72 61 6e 73 2d 74 69 6d 65 72 00 72 66 63 33 34 34 32 2d 73 74 61 74 69 63 2d 72 6f 75 74 | etrans-timer.rfc3442-static-rout |
a4be0 | 65 2c 20 77 69 6e 64 6f 77 73 2d 73 74 61 74 69 63 2d 72 6f 75 74 65 00 72 66 63 33 37 36 38 2d | e,.windows-static-route.rfc3768- |
a4c00 | 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 37 | compatibility.right.local_ip:.17 |
a4c20 | 32 2e 31 38 2e 32 30 32 2e 31 30 20 23 20 72 69 67 68 74 20 73 69 64 65 20 57 41 4e 20 49 50 00 | 2.18.202.10.#.right.side.WAN.IP. |
a4c40 | 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 32 30 33 2e 30 2e 31 31 33 2e 32 60 20 23 20 | right.local_ip:.`203.0.113.2`.#. |
a4c60 | 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 20 57 41 4e 20 49 50 00 72 69 67 68 74 20 | remote.office.side.WAN.IP.right. |
a4c80 | 73 75 62 6e 65 74 3a 20 60 31 30 2e 30 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 32 2c 72 65 6d 6f | subnet:.`10.0.0.0/24`.site2,remo |
a4ca0 | 74 65 20 6f 66 66 69 63 65 20 73 69 64 65 00 72 69 70 64 00 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 | te.office.side.ripd.round-robin. |
a4cc0 | 72 6f 75 74 65 2d 6d 61 70 00 72 6f 75 74 65 72 73 00 73 46 6c 6f 77 00 73 46 6c 6f 77 20 69 73 | route-map.routers.sFlow.sFlow.is |
a4ce0 | 20 61 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 65 6e 61 62 6c 65 73 20 6d 6f 6e 69 74 | .a.technology.that.enables.monit |
a4d00 | 6f 72 69 6e 67 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 62 79 20 73 65 6e 64 | oring.of.network.traffic.by.send |
a4d20 | 69 6e 67 20 73 61 6d 70 6c 65 64 20 70 61 63 6b 65 74 73 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 | ing.sampled.packets.to.a.collect |
a4d40 | 6f 72 20 64 65 76 69 63 65 2e 00 73 65 63 75 72 69 74 79 00 73 65 72 76 65 72 20 65 78 61 6d 70 | or.device..security.server.examp |
a4d60 | 6c 65 00 73 65 72 76 65 72 2d 69 64 65 6e 74 69 66 69 65 72 00 73 65 74 20 61 20 64 65 73 74 69 | le.server-identifier.set.a.desti |
a4d80 | 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 | nation.and/or.source.address..Ac |
a4da0 | 63 65 70 74 65 64 20 69 6e 70 75 74 3a 00 73 68 61 32 35 36 20 48 61 73 68 65 73 00 73 68 6f 77 | cepted.input:.sha256.Hashes.show |
a4dc0 | 20 63 6f 6d 6d 61 6e 64 73 00 73 69 61 64 64 72 00 73 6c 6f 77 3a 20 52 65 71 75 65 73 74 20 70 | .commands.siaddr.slow:.Request.p |
a4de0 | 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 20 65 76 65 72 79 | artner.to.transmit.LACPDUs.every |
a4e00 | 20 33 30 20 73 65 63 6f 6e 64 73 00 73 6d 74 70 2d 73 65 72 76 65 72 00 73 6f 66 74 77 61 72 65 | .30.seconds.smtp-server.software |
a4e20 | 20 66 69 6c 74 65 72 73 20 63 61 6e 20 65 61 73 69 6c 79 20 62 65 20 61 64 64 65 64 20 74 6f 20 | .filters.can.easily.be.added.to. |
a4e40 | 68 61 73 68 20 6f 76 65 72 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 00 73 6f 66 74 77 61 72 65 | hash.over.new.protocols.software |
a4e60 | 20 66 69 6c 74 65 72 73 20 63 61 6e 20 65 61 73 69 6c 79 20 62 65 20 61 64 64 65 64 20 74 6f 20 | .filters.can.easily.be.added.to. |
a4e80 | 68 61 73 68 20 6f 76 65 72 20 6e 65 77 20 70 72 6f 74 6f 63 6f 6c 73 2c 00 73 6f 75 72 63 65 2d | hash.over.new.protocols,.source- |
a4ea0 | 68 61 73 68 69 6e 67 00 73 70 6f 6b 65 30 31 2d 73 70 6f 6b 65 30 34 00 73 70 6f 6b 65 30 35 00 | hashing.spoke01-spoke04.spoke05. |
a4ec0 | 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 00 73 74 61 74 69 63 2d 72 6f 75 74 65 00 73 74 72 69 | static-mapping.static-route.stri |
a4ee0 | 63 74 3a 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 20 69 73 20 74 65 73 74 | ct:.Each.incoming.packet.is.test |
a4f00 | 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 69 6e | ed.against.the.FIB.and.if.the.in |
a4f20 | 74 65 72 66 61 63 65 20 69 73 20 6e 6f 74 20 74 68 65 20 62 65 73 74 20 72 65 76 65 72 73 65 20 | terface.is.not.the.best.reverse. |
a4f40 | 70 61 74 68 20 74 68 65 20 70 61 63 6b 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e | path.the.packet.check.will.fail. |
a4f60 | 20 42 79 20 64 65 66 61 75 6c 74 20 66 61 69 6c 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 | .By.default.failed.packets.are.d |
a4f80 | 69 73 63 61 72 64 65 64 2e 00 73 75 62 6e 65 74 2d 6d 61 73 6b 00 73 79 73 6c 6f 67 00 74 61 69 | iscarded..subnet-mask.syslog.tai |
a4fa0 | 6c 00 74 63 5f 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 20 74 6f 6f 6c 20 66 6f 72 20 54 72 61 | l.tc_.is.a.powerful.tool.for.Tra |
a4fc0 | 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 66 6f 75 6e 64 20 61 74 20 74 68 65 20 4c 69 6e 75 78 20 | ffic.Control.found.at.the.Linux. |
a4fe0 | 6b 65 72 6e 65 6c 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 | kernel..However,.its.configurati |
a5000 | 6f 6e 20 69 73 20 6f 66 74 65 6e 20 63 6f 6e 73 69 64 65 72 65 64 20 61 20 63 75 6d 62 65 72 73 | on.is.often.considered.a.cumbers |
a5020 | 6f 6d 65 20 74 61 73 6b 2e 20 46 6f 72 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 65 61 73 65 | ome.task..Fortunately,.VyOS.ease |
a5040 | 73 20 74 68 65 20 6a 6f 62 20 74 68 72 6f 75 67 68 20 69 74 73 20 43 4c 49 2c 20 77 68 69 6c 65 | s.the.job.through.its.CLI,.while |
a5060 | 20 75 73 69 6e 67 20 60 60 74 63 60 60 20 61 73 20 62 61 63 6b 65 6e 64 2e 00 74 66 74 70 2d 73 | .using.``tc``.as.backend..tftp-s |
a5080 | 65 72 76 65 72 2d 6e 61 6d 65 00 74 68 69 73 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f | erver-name.this.option.allows.to |
a50a0 | 20 63 6f 6e 66 69 67 75 72 65 20 70 72 65 66 69 78 2d 73 69 64 20 6f 6e 20 53 52 2e 20 54 68 65 | .configure.prefix-sid.on.SR..The |
a50c0 | 20 e2 80 98 6e 6f 2d 70 68 70 2d 66 6c 61 67 e2 80 99 20 6d 65 61 6e 73 20 4e 4f 20 50 65 6e 75 | ....no-php-flag....means.NO.Penu |
a50e0 | 6c 74 69 6d 61 74 65 20 48 6f 70 20 50 6f 70 70 69 6e 67 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 | ltimate.Hop.Popping.that.allows. |
a5100 | 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 | SR.node.to.request.to.its.neighb |
a5120 | 6f 72 20 74 6f 20 6e 6f 74 20 70 6f 70 20 74 68 65 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 | or.to.not.pop.the.label..The.... |
a5140 | 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c e2 80 99 20 66 6c 61 67 20 61 6c 6c 6f 77 73 20 53 52 20 | explicit-null....flag.allows.SR. |
a5160 | 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 20 | node.to.request.to.its.neighbor. |
a5180 | 74 6f 20 73 65 6e 64 20 49 50 20 70 61 63 6b 65 74 20 77 69 74 68 20 74 68 65 20 45 58 50 4c 49 | to.send.IP.packet.with.the.EXPLI |
a51a0 | 43 49 54 2d 4e 55 4c 4c 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 6e 2d 66 6c 61 67 2d 63 6c | CIT-NULL.label..The....n-flag-cl |
a51c0 | 65 61 72 e2 80 99 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 78 70 | ear....option.can.be.used.to.exp |
a51e0 | 6c 69 63 69 74 6c 79 20 63 6c 65 61 72 20 74 68 65 20 4e 6f 64 65 20 66 6c 61 67 20 74 68 61 74 | licitly.clear.the.Node.flag.that |
a5200 | 20 69 73 20 73 65 74 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 50 72 65 66 69 78 2d 53 49 | .is.set.by.default.for.Prefix-SI |
a5220 | 44 73 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 | Ds.associated.to.loopback.addres |
a5240 | 73 65 73 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f | ses..This.option.is.necessary.to |
a5260 | 20 63 6f 6e 66 69 67 75 72 65 20 41 6e 79 63 61 73 74 2d 53 49 44 73 2e 00 74 69 6d 65 2d 6f 66 | .configure.Anycast-SIDs..time-of |
a5280 | 66 73 65 74 00 74 69 6d 65 2d 73 65 72 76 65 72 00 74 69 6d 65 2d 73 65 72 76 65 72 73 00 74 75 | fset.time-server.time-servers.tu |
a52a0 | 6e 6e 65 6c 00 75 73 65 20 36 20 28 6c 6f 63 61 6c 36 29 00 75 73 65 20 74 68 69 73 20 63 6f 6d | nnel.use.6.(local6).use.this.com |
a52c0 | 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 72 65 20 69 73 20 61 6e 20 49 6e 74 | mand.to.check.if.there.is.an.Int |
a52e0 | 65 6c c2 ae 20 51 41 54 20 73 75 70 70 6f 72 74 65 64 20 50 72 6f 63 65 73 73 6f 72 20 69 6e 20 | el...QAT.supported.Processor.in. |
a5300 | 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 75 73 65 72 00 75 75 63 70 00 76 61 6c 69 64 00 76 61 6c | your.system..user.uucp.valid.val |
a5320 | 69 64 2d 6c 69 66 65 74 69 6d 65 00 76 65 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 65 64 | id-lifetime.veth.interfaces.need |
a5340 | 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 20 69 6e 20 70 61 69 72 73 20 2d 20 69 74 27 73 20 63 | .to.be.created.in.pairs.-.it's.c |
a5360 | 61 6c 6c 65 64 20 74 68 65 20 70 65 65 72 20 6e 61 6d 65 00 76 78 6c 61 6e 00 77 61 72 6e 69 6e | alled.the.peer.name.vxlan.warnin |
a5380 | 67 00 77 65 20 64 65 73 63 72 69 62 65 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | g.we.described.the.configuration |
a53a0 | 20 53 52 20 49 53 49 53 20 2f 20 53 52 20 4f 53 50 46 20 75 73 69 6e 67 20 32 20 63 6f 6e 6e 65 | .SR.ISIS./.SR.OSPF.using.2.conne |
a53c0 | 63 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f 20 73 68 61 72 65 20 6c 61 62 65 6c 20 69 6e | cted.with.them.to.share.label.in |
a53e0 | 66 6f 72 6d 61 74 69 6f 6e 2e 00 77 65 69 67 68 74 65 64 2d 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 | formation..weighted-least-connec |
a5400 | 74 69 6f 6e 00 77 65 69 67 68 74 65 64 2d 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 77 68 69 6c 65 20 | tion.weighted-round-robin.while. |
a5420 | 61 20 2a 62 79 74 65 2a 20 69 73 20 77 72 69 74 74 65 6e 20 61 73 20 61 20 73 69 6e 67 6c 65 20 | a.*byte*.is.written.as.a.single. |
a5440 | 2a 2a 62 2a 2a 2e 00 77 69 6e 73 2d 73 65 72 76 65 72 00 77 69 72 65 67 75 61 72 64 00 77 69 72 | **b**..wins-server.wireguard.wir |
a5460 | 65 6c 65 73 73 00 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 61 | eless.with.:cfgcmd:`set.system.a |
a5480 | 63 63 65 6c 65 72 61 74 69 6f 6e 20 71 61 74 60 20 6f 6e 20 62 6f 74 68 20 73 79 73 74 65 6d 73 | cceleration.qat`.on.both.systems |
a54a0 | 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 69 6e 63 72 65 61 73 65 73 2e 00 77 70 61 64 2d 75 | .the.bandwidth.increases..wpad-u |
a54c0 | 72 6c 00 77 70 61 64 2d 75 72 6c 2c 20 77 70 61 64 2d 75 72 6c 20 63 6f 64 65 20 32 35 32 20 3d | rl.wpad-url,.wpad-url.code.252.= |
a54e0 | 20 74 65 78 74 00 77 77 61 6e 00 7a 65 62 72 61 00 4d 49 4d 45 2d 56 65 72 73 69 6f 6e 3a 20 31 | .text.wwan.zebra.MIME-Version:.1 |
a5500 | 2e 30 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 | .0.Content-Type:.text/plain;.cha |
a5520 | 72 73 65 74 3d 55 54 46 2d 38 0a 43 6f 6e 74 65 6e 74 2d 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f | rset=UTF-8.Content-Transfer-Enco |
a5540 | 64 69 6e 67 3a 20 38 62 69 74 0a 58 2d 47 65 6e 65 72 61 74 6f 72 3a 20 4c 6f 63 61 6c 61 7a 79 | ding:.8bit.X-Generator:.Localazy |
a5560 | 20 28 68 74 74 70 73 3a 2f 2f 6c 6f 63 61 6c 61 7a 79 2e 63 6f 6d 29 0a 50 72 6f 6a 65 63 74 2d | .(https://localazy.com).Project- |
a5580 | 49 64 2d 56 65 72 73 69 6f 6e 3a 20 0a 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0a 50 6c 75 72 61 6c | Id-Version:..Language:.en.Plural |
a55a0 | 2d 46 6f 72 6d 73 3a 20 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c 3d 28 6e 3d 3d 31 | -Forms:.nplurals=2;.plural=(n==1 |
a55c0 | 29 20 3f 20 30 20 3a 20 31 3b 0a 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e | ).?.0.:.1;..!<h:h:h:h:h:h:h:h/x> |
a55e0 | 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 | :.Match.everything.except.the.sp |
a5600 | 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2e 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a | ecified.prefix..!<h:h:h:h:h:h:h: |
a5620 | 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 | h>-<h:h:h:h:h:h:h:h>:.Match.ever |
a5640 | 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 6e 67 | ything.except.the.specified.rang |
a5660 | 65 2e 00 21 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 4d 61 74 63 68 20 65 76 65 | e..!<h:h:h:h:h:h:h:h>:.Match.eve |
a5680 | 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 | rything.except.the.specified.add |
a56a0 | 72 65 73 73 2e 00 21 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 | ress..!<x.x.x.x/x>:.Match.everyt |
a56c0 | 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 75 62 6e 65 74 | hing.except.the.specified.subnet |
a56e0 | 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 | ..!<x.x.x.x>-<x.x.x.x>:.Match.ev |
a5700 | 65 72 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 | erything.except.the.specified.ra |
a5720 | 6e 67 65 2e 00 21 3c 78 2e 78 2e 78 2e 78 3e 3a 20 4d 61 74 63 68 20 65 76 65 72 79 74 68 69 6e | nge..!<x.x.x.x>:.Match.everythin |
a5740 | 67 20 65 78 63 65 70 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 2e 00 | g.except.the.specified.address.. |
a5760 | 22 4d 61 6e 61 67 65 64 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 | "Managed.address.configuration". |
a5780 | 66 6c 61 67 00 22 4f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 66 6c 61 67 00 | flag."Other.configuration".flag. |
a57a0 | 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 c3 a4 23 23 23 23 23 23 23 23 23 23 23 | ###################..########### |
a57c0 | 23 23 20 46 6c 6f 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 | ##.Flowtables.Firewall.Configura |
a57e0 | 74 69 6f 6e 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 | tion.########################### |
a5800 | 23 23 23 23 23 23 00 28 54 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 | ######.(This.can.be.useful.when. |
a5820 | 61 20 63 61 6c 6c 65 64 20 73 65 72 76 69 63 65 20 68 61 73 20 6d 61 6e 79 20 61 6e 64 2f 6f 72 | a.called.service.has.many.and/or |
a5840 | 20 6f 66 74 65 6e 20 63 68 61 6e 67 69 6e 67 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 | .often.changing.destination.addr |
a5860 | 65 73 73 65 73 20 2d 20 65 2e 67 2e 20 4e 65 74 66 6c 69 78 2e 29 00 2a 2a 28 44 65 66 61 75 6c | esses.-.e.g..Netflix.).**(Defaul |
a5880 | 74 29 2a 2a 20 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 35 2d | t)**.Flows.are.defined.by.the.5- |
a58a0 | 74 75 70 6c 65 2c 20 66 61 69 72 6e 65 73 73 20 69 73 20 61 70 70 6c 69 65 64 20 6f 76 65 72 20 | tuple,.fairness.is.applied.over. |
a58c0 | 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 | source.and.destination.addresses |
a58e0 | 20 61 6e 64 20 61 6c 73 6f 20 6f 76 65 72 20 69 6e 64 69 76 69 64 75 61 6c 20 66 6c 6f 77 73 2e | .and.also.over.individual.flows. |
a5900 | 00 2a 2a 31 2d 32 35 34 2a 2a 20 e2 80 93 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 | .**1-254**.....interfaces.with.a |
a5920 | 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 69 | .channel.number.interfere.with.i |
a5940 | 6e 74 65 72 66 65 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 69 6e 74 65 72 66 | nterfering.interfaces.and.interf |
a5960 | 61 63 65 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 63 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 | aces.with.the.same.channel.numbe |
a5980 | 72 2e 20 2a 2a 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 e2 80 93 20 69 6e 74 65 72 66 65 72 69 | r..**interfering**.....interferi |
a59a0 | 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 69 6e 74 | ng.interfaces.are.assumed.to.int |
a59c0 | 65 72 66 65 72 65 20 77 69 74 68 20 61 6c 6c 20 6f 74 68 65 72 20 63 68 61 6e 6e 65 6c 73 20 65 | erfere.with.all.other.channels.e |
a59e0 | 78 63 65 70 74 20 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 20 63 68 61 6e 6e 65 6c 73 2e 20 2a | xcept.noninterfering.channels..* |
a5a00 | 2a 6e 6f 6e 69 6e 74 65 72 66 65 72 69 6e 67 2a 2a 20 e2 80 93 20 6e 6f 6e 69 6e 74 65 72 66 65 | *noninterfering**.....noninterfe |
a5a20 | 72 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 75 6d 65 64 20 74 6f 20 6f | ring.interfaces.are.assumed.to.o |
a5a40 | 6e 6c 79 20 69 6e 74 65 72 66 65 72 65 20 77 69 74 68 20 74 68 65 6d 73 65 6c 76 65 73 2e 00 2a | nly.interfere.with.themselves..* |
a5a60 | 2a 31 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 62 65 74 77 | *1..Confirm.IP.connectivity.betw |
a5a80 | 65 65 6e 20 74 75 6e 6e 65 6c 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 61 6e 64 20 72 65 | een.tunnel.source-address.and.re |
a5aa0 | 6d 6f 74 65 3a 2a 2a 00 2a 2a 31 30 2a 2a 20 2d 20 3a 61 62 62 72 3a 60 49 50 46 49 58 20 28 49 | mote:**.**10**.-.:abbr:`IPFIX.(I |
a5ac0 | 50 20 46 6c 6f 77 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 45 78 70 6f 72 74 29 60 20 61 73 20 70 | P.Flow.Information.Export)`.as.p |
a5ae0 | 65 72 20 3a 72 66 63 3a 60 33 39 31 37 60 00 2a 2a 32 2e 20 43 6f 6e 66 69 72 6d 20 74 68 65 20 | er.:rfc:`3917`.**2..Confirm.the. |
a5b00 | 6c 69 6e 6b 20 74 79 70 65 20 68 61 73 20 62 65 65 6e 20 73 65 74 20 74 6f 20 47 52 45 3a 2a 2a | link.type.has.been.set.to.GRE:** |
a5b20 | 00 2a 2a 33 2e 20 43 6f 6e 66 69 72 6d 20 49 50 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 63 | .**3..Confirm.IP.connectivity.ac |
a5b40 | 72 6f 73 73 20 74 68 65 20 74 75 6e 6e 65 6c 3a 2a 2a 00 2a 2a 35 2a 2a 20 2d 20 4d 6f 73 74 20 | ross.the.tunnel:**.**5**.-.Most. |
a5b60 | 63 6f 6d 6d 6f 6e 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 20 72 65 73 74 72 69 63 74 65 64 20 74 | common.version,.but.restricted.t |
a5b80 | 6f 20 49 50 76 34 20 66 6c 6f 77 73 20 6f 6e 6c 79 00 2a 2a 39 2a 2a 20 2d 20 4e 65 74 46 6c 6f | o.IPv4.flows.only.**9**.-.NetFlo |
a5ba0 | 77 20 76 65 72 73 69 6f 6e 20 39 20 28 64 65 66 61 75 6c 74 29 00 2a 2a 41 53 20 70 61 74 68 20 | w.version.9.(default).**AS.path. |
a5bc0 | 6c 65 6e 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 41 63 74 69 76 65 2d 61 63 74 69 76 65 2a 2a | length.check**.**Active-active** |
a5be0 | 3a 20 62 6f 74 68 20 44 48 43 50 20 73 65 72 76 65 72 73 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 | :.both.DHCP.servers.will.respond |
a5c00 | 20 74 6f 20 44 48 43 50 20 72 65 71 75 65 73 74 73 2e 20 49 66 20 60 60 6d 6f 64 65 60 60 20 69 | .to.DHCP.requests..If.``mode``.i |
a5c20 | 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 69 73 20 69 73 20 74 68 65 20 64 65 66 61 75 | s.not.defined,.this.is.the.defau |
a5c40 | 6c 74 20 62 65 68 61 76 69 6f 72 2e 00 2a 2a 41 63 74 69 76 65 2d 70 61 73 73 69 76 65 2a 2a 3a | lt.behavior..**Active-passive**: |
a5c60 | 20 6f 6e 6c 79 20 60 60 70 72 69 6d 61 72 79 60 60 20 73 65 72 76 65 72 20 77 69 6c 6c 20 72 65 | .only.``primary``.server.will.re |
a5c80 | 73 70 6f 6e 64 20 74 6f 20 44 48 43 50 20 72 65 71 75 65 73 74 73 2e 20 49 66 20 74 68 69 73 20 | spond.to.DHCP.requests..If.this. |
a5ca0 | 73 65 72 76 65 72 20 67 6f 65 73 20 6f 66 66 6c 69 6e 65 2c 20 74 68 65 6e 20 60 60 73 65 63 6f | server.goes.offline,.then.``seco |
a5cc0 | 6e 64 61 72 79 60 60 20 73 65 72 76 65 72 20 77 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 65 2e 00 | ndary``.server.will.take.place.. |
a5ce0 | 2a 2a 41 6c 72 65 61 64 79 2d 73 65 6c 65 63 74 65 64 20 65 78 74 65 72 6e 61 6c 20 63 68 65 63 | **Already-selected.external.chec |
a5d00 | 6b 2a 2a 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 49 6e 62 6f 75 6e 64 20 74 72 61 66 | k**.**Applies.to:**.Inbound.traf |
a5d20 | 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 54 72 | fic..**Applies.to:**.Outbound.Tr |
a5d40 | 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 69 65 73 20 74 6f 3a 2a 2a 20 4f 75 74 62 6f 75 6e 64 20 | affic..**Applies.to:**.Outbound. |
a5d60 | 74 72 61 66 66 69 63 2e 00 2a 2a 41 70 70 6c 79 20 74 68 65 20 74 72 61 66 66 69 63 20 70 6f 6c | traffic..**Apply.the.traffic.pol |
a5d80 | 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 67 72 65 73 73 20 6f 72 20 65 | icy.to.an.interface.ingress.or.e |
a5da0 | 67 72 65 73 73 2a 2a 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 | gress**..**Bridge.Port?**:.choos |
a5dc0 | 65 20 61 70 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 69 66 20 69 6e | e.appropiate.path.based.on.if.in |
a5de0 | 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 | terface.were.the.packet.was.rece |
a5e00 | 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 | ived.is.part.of.a.bridge,.or.not |
a5e20 | 2e 00 2a 2a 42 72 69 64 67 65 20 50 6f 72 74 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f | ..**Bridge.Port?**:.choose.appro |
a5e40 | 70 72 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 69 6e 74 | priate.path.based.on.whether.int |
a5e60 | 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 | erface.where.the.packet.was.rece |
a5e80 | 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 6f 72 20 6e 6f 74 | ived.is.part.of.a.bridge,.or.not |
a5ea0 | 2e 00 2a 2a 43 69 73 63 6f 20 49 4f 53 20 52 6f 75 74 65 72 3a 2a 2a 00 2a 2a 43 6c 69 65 6e 74 | ..**Cisco.IOS.Router:**.**Client |
a5ec0 | 20 49 50 20 61 64 64 72 65 73 73 20 76 69 61 20 49 50 20 72 61 6e 67 65 20 64 65 66 69 6e 69 74 | .IP.address.via.IP.range.definit |
a5ee0 | 69 6f 6e 2a 2a 00 2a 2a 43 6c 69 65 6e 74 20 49 50 20 73 75 62 6e 65 74 73 20 76 69 61 20 43 49 | ion**.**Client.IP.subnets.via.CI |
a5f00 | 44 52 20 6e 6f 74 61 74 69 6f 6e 2a 2a 00 2a 2a 43 6c 75 73 74 65 72 2d 4c 69 73 74 20 6c 65 6e | DR.notation**.**Cluster-List.len |
a5f20 | 67 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 43 6f 6e 6e 74 72 61 63 6b 20 49 67 6e 6f 72 65 2a 2a | gth.check**.**Conntrack.Ignore** |
a5f40 | 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 73 79 73 74 | :.rules.defined.under.``set.syst |
a5f60 | 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 20 5b 69 70 76 34 20 7c 20 69 70 76 36 | em.conntrack.ignore.[ipv4.|.ipv6 |
a5f80 | 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 43 72 65 61 74 65 20 61 20 74 72 61 66 66 69 63 20 70 6f 6c 69 | ]....``..**Create.a.traffic.poli |
a5fa0 | 63 79 2a 2a 2e 00 2a 2a 44 48 43 50 28 76 36 29 2a 2a 00 2a 2a 44 48 43 50 76 36 20 50 72 65 66 | cy**..**DHCP(v6)**.**DHCPv6.Pref |
a5fc0 | 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 50 44 29 2a 2a 00 2a 2a 44 65 73 74 69 6e 61 74 69 | ix.Delegation.(PD)**.**Destinati |
a5fe0 | 6f 6e 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 | on.NAT**:.rules.defined.under.`` |
a6000 | 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 74 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e | set.[nat.|.nat66].destination... |
a6020 | 60 60 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 3f | ``..**Destination.is.the.router? |
a6040 | 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 69 61 74 65 20 70 61 74 68 20 62 61 73 65 64 | **:.choose.appropiate.path.based |
a6060 | 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 61 6e | .on.destination.IP.address..Tran |
a6080 | 73 69 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 6e 75 6e 65 73 20 74 6f 20 2a 2a 66 6f 72 77 | sit.forward.continunes.to.**forw |
a60a0 | 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 6e | ard**,.while.traffic.that.destin |
a60c0 | 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f | ation.IP.address.is.configured.o |
a60e0 | 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 75 | n.the.router.continues.to.**inpu |
a6100 | 74 2a 2a 2e 00 2a 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 74 68 65 20 72 6f 75 74 65 72 | t**..**Destination.is.the.router |
a6120 | 3f 2a 2a 3a 20 63 68 6f 6f 73 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 70 61 74 68 20 62 61 73 | ?**:.choose.appropriate.path.bas |
a6140 | 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2e 20 54 72 | ed.on.destination.IP.address..Tr |
a6160 | 61 6e 73 69 74 20 66 6f 72 77 61 72 64 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 66 6f 72 | ansit.forward.continues.to.**for |
a6180 | 77 61 72 64 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 64 65 73 74 69 | ward**,.while.traffic.that.desti |
a61a0 | 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 | nation.IP.address.is.configured. |
a61c0 | 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 20 63 6f 6e 74 69 6e 75 65 73 20 74 6f 20 2a 2a 69 6e 70 | on.the.router.continues.to.**inp |
a61e0 | 75 74 2a 2a 2e 00 2a 2a 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 75 6e 64 65 72 20 64 65 76 65 | ut**..**Documentation.under.deve |
a6200 | 6c 6f 70 6d 65 6e 74 2a 2a 00 2a 2a 45 74 68 65 72 6e 65 74 20 28 70 72 6f 74 6f 63 6f 6c 2c 20 | lopment**.**Ethernet.(protocol,. |
a6220 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 72 20 73 6f 75 72 63 65 20 61 64 | destination.address.or.source.ad |
a6240 | 64 72 65 73 73 29 2a 2a 00 2a 2a 45 78 61 6d 70 6c 65 3a 2a 2a 00 2a 2a 45 78 74 65 72 6e 61 6c | dress)**.**Example:**.**External |
a6260 | 20 63 68 65 63 6b 2a 2a 00 2a 2a 46 69 72 65 77 61 6c 6c 20 6d 61 72 6b 2a 2a 00 2a 2a 46 6c 6f | .check**.**Firewall.mark**.**Flo |
a6280 | 77 74 61 62 6c 65 20 52 65 66 65 72 65 6e 63 65 3a 2a 2a 20 68 74 74 70 73 3a 2f 2f 64 6f 63 73 | wtable.Reference:**.https://docs |
a62a0 | 2e 6b 65 72 6e 65 6c 2e 6f 72 67 2f 6e 65 74 77 6f 72 6b 69 6e 67 2f 6e 66 5f 66 6c 6f 77 74 61 | .kernel.org/networking/nf_flowta |
a62c0 | 62 6c 65 2e 68 74 6d 6c 00 2a 2a 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2a | ble.html.**For.more.information* |
a62e0 | 2a 20 6f 66 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 6e 75 78 20 6e | *.of.Netfilter.hooks.and.Linux.n |
a6300 | 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 62 65 20 66 6f | etworking.packet.flows.can.be.fo |
a6320 | 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 74 70 73 3a 2f | und.in.`Netfilter-Hooks.<https:/ |
a6340 | 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 | /wiki.nftables.org/wiki-nftables |
a6360 | 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e 60 5f 00 2a 2a | /index.php/Netfilter_hooks>`_.** |
a6380 | 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 | Forward.(Bridge)**:.stage.where. |
a63a0 | 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 61 73 73 70 61 73 69 6e 67 20 74 68 72 6f | traffic.that.is.trasspasing.thro |
a63c0 | 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 | ugh.the.bridge.is.filtered.and.c |
a63e0 | 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 20 28 42 72 69 64 67 65 29 2a 2a 3a | ontrolled:.**Forward.(Bridge)**: |
a6400 | 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 69 73 20 74 72 65 | .stage.where.traffic.that.is.tre |
a6420 | 73 70 61 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 62 72 69 64 67 65 20 69 73 20 66 69 | spasing.through.the.bridge.is.fi |
a6440 | 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 3a 00 2a 2a 46 6f 72 77 61 72 64 | ltered.and.controlled:.**Forward |
a6460 | 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 | **:.stage.where.transit.traffic. |
a6480 | 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 | can.be.filtered.and.controlled.. |
a64a0 | 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 | This.includes.ipv4.and.ipv6.filt |
a64c0 | 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 48 61 72 64 77 | ering.rules,.defined.in:.**Hardw |
a64e0 | 61 72 65 20 6f 66 66 6c 6f 61 64 3a 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 73 75 70 70 6f 72 74 | are.offload:**.should.be.support |
a6500 | 65 64 20 62 79 20 74 68 65 20 4e 49 43 73 20 75 73 65 64 2e 00 2a 2a 49 47 50 20 63 6f 73 74 20 | ed.by.the.NICs.used..**IGP.cost. |
a6520 | 63 68 65 63 6b 2a 2a 00 2a 2a 49 50 76 34 20 28 44 53 43 50 20 76 61 6c 75 65 2c 20 6d 61 78 69 | check**.**IPv4.(DSCP.value,.maxi |
a6540 | 6d 75 6d 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 68 2c 20 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 | mum.packet.length,.protocol,.sou |
a6560 | 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 | rce.address,**.**destination.add |
a6580 | 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 | ress,.source.port,.destination.p |
a65a0 | 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a 00 2a 2a 49 50 76 36 20 28 44 53 43 50 | ort.or.TCP.flags)**.**IPv6.(DSCP |
a65c0 | 20 76 61 6c 75 65 2c 20 6d 61 78 69 6d 75 6d 20 70 61 79 6c 6f 61 64 20 6c 65 6e 67 74 68 2c 20 | .value,.maximum.payload.length,. |
a65e0 | 70 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 2a 2a 20 2a 2a 64 65 | protocol,.source.address,**.**de |
a6600 | 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 | stination.address,.source.port,. |
a6620 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 6f 72 20 54 43 50 20 66 6c 61 67 73 29 2a 2a | destination.port.or.TCP.flags)** |
a6640 | 00 2a 2a 49 66 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 20 70 6f 6c 69 | .**If.you.are.looking.for.a.poli |
a6660 | 63 79 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2a 2a 20 62 | cy.for.your.outbound.traffic**.b |
a6680 | 75 74 20 79 6f 75 20 64 6f 6e 27 74 20 6b 6e 6f 77 20 77 68 69 63 68 20 6f 6e 65 20 79 6f 75 20 | ut.you.don't.know.which.one.you. |
a66a0 | 6e 65 65 64 20 61 6e 64 20 79 6f 75 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 67 6f 20 74 68 | need.and.you.don't.want.to.go.th |
a66c0 | 72 6f 75 67 68 20 65 76 65 72 79 20 70 6f 73 73 69 62 6c 65 20 70 6f 6c 69 63 79 20 73 68 6f 77 | rough.every.possible.policy.show |
a66e0 | 6e 20 68 65 72 65 2c 20 2a 2a 6f 75 72 20 62 65 74 20 69 73 20 74 68 61 74 20 68 69 67 68 6c 79 | n.here,.**our.bet.is.that.highly |
a6700 | 20 6c 69 6b 65 6c 79 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 61 2a 2a 20 | .likely.you.are.looking.for.a**. |
a6720 | 53 68 61 70 65 72 5f 20 2a 2a 70 6f 6c 69 63 79 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f | Shaper_.**policy.and.you.want.to |
a6740 | 2a 2a 20 3a 72 65 66 3a 60 73 65 74 20 69 74 73 20 71 75 65 75 65 73 20 3c 65 6d 62 65 64 3e 60 | **.:ref:`set.its.queues.<embed>` |
a6760 | 20 2a 2a 61 73 20 46 51 2d 43 6f 44 65 6c 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f | .**as.FQ-CoDel**..**Important.no |
a6780 | 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 | te.about.default-actions:**.If.d |
a67a0 | 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e | efault.action.for.any.base.chain |
a67c0 | 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c | .is.not.defined,.then.the.defaul |
a67e0 | 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f | t.action.is.set.to.**accept**.fo |
a6800 | 72 20 74 68 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c | r.that.chain..For.custom.chains, |
a6820 | 20 69 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 | .if.default.action.is.not.define |
a6840 | 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 | d,.then.the.default-action.is.se |
a6860 | 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 | t.to.**drop**.**Important.note.a |
a6880 | 62 6f 75 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 | bout.default-actions:**.If.defau |
a68a0 | 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 | lt.action.for.any.base.chain.is. |
a68c0 | 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 | not.defined,.then.the.default.ac |
a68e0 | 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 | tion.is.set.to.**accept**.for.th |
a6900 | 61 74 20 63 68 61 69 6e 2e 20 46 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 69 66 20 | at.chain..For.custom.chains,.if. |
a6920 | 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 | default.action.is.not.defined,.t |
a6940 | 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f | hen.the.default-action.is.set.to |
a6960 | 20 2a 2a 64 72 6f 70 2a 2a 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 | .**drop**..**Important.note.abou |
a6980 | 74 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 | t.default-actions:**.If.default. |
a69a0 | 61 63 74 69 6f 6e 20 66 6f 72 20 61 6e 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 | action.for.any.chain.is.not.defi |
a69c0 | 6e 65 64 2c 20 74 68 65 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 | ned,.then.the.default.action.is. |
a69e0 | 73 65 74 20 74 6f 20 2a 2a 61 63 63 65 70 74 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e | set.to.**accept**.for.that.chain |
a6a00 | 2e 20 4f 6e 6c 79 20 66 6f 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 73 2c 20 74 68 65 20 64 65 | ..Only.for.custom.chains,.the.de |
a6a20 | 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 72 6f 70 2a 2a 2e | fault.action.is.set.to.**drop**. |
a6a40 | 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 61 62 6f 75 74 20 64 65 66 61 75 6c 74 2d | .**Important.note.about.default- |
a6a60 | 61 63 74 69 6f 6e 73 3a 2a 2a 20 49 66 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 66 6f 72 | actions:**.If.default.action.for |
a6a80 | 20 61 6e 79 20 63 68 61 69 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 | .any.chain.is.not.defined,.then. |
a6aa0 | 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 2a 2a 64 | the.default.action.is.set.to.**d |
a6ac0 | 72 6f 70 2a 2a 20 66 6f 72 20 74 68 61 74 20 63 68 61 69 6e 2e 00 2a 2a 49 6d 70 6f 72 74 61 6e | rop**.for.that.chain..**Importan |
a6ae0 | 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 | t.note.on.usage.of.terms:**.The. |
a6b00 | 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 74 65 72 6d 73 20 | firewall.makes.use.of.the.terms. |
a6b20 | 60 66 6f 72 77 61 72 64 60 2c 20 60 69 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 | `forward`,.`input`,.and.`output` |
a6b40 | 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 4d 6f 72 65 20 69 6e 66 6f 72 | .for.firewall.policy..More.infor |
a6b60 | 6d 61 74 69 6f 6e 20 6f 66 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 61 6e 64 20 4c 69 | mation.of.Netfilter.hooks.and.Li |
a6b80 | 6e 75 78 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 61 63 6b 65 74 20 66 6c 6f 77 73 20 63 61 6e 20 | nux.networking.packet.flows.can. |
a6ba0 | 62 65 20 66 6f 75 6e 64 20 69 6e 20 60 4e 65 74 66 69 6c 74 65 72 2d 48 6f 6f 6b 73 20 3c 68 74 | be.found.in.`Netfilter-Hooks.<ht |
a6bc0 | 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 | tps://wiki.nftables.org/wiki-nft |
a6be0 | 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 4e 65 74 66 69 6c 74 65 72 5f 68 6f 6f 6b 73 3e | ables/index.php/Netfilter_hooks> |
a6c00 | 60 5f 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 20 6f 6e 20 75 73 61 67 65 20 6f 66 20 | `_.**Important.note.on.usage.of. |
a6c20 | 74 65 72 6d 73 3a 2a 2a 20 54 68 65 20 66 69 72 65 77 61 6c 6c 20 6d 61 6b 65 73 20 75 73 65 20 | terms:**.The.firewall.makes.use. |
a6c40 | 6f 66 20 74 68 65 20 74 65 72 6d 73 20 60 69 6e 60 2c 20 60 6f 75 74 60 2c 20 61 6e 64 20 60 6c | of.the.terms.`in`,.`out`,.and.`l |
a6c60 | 6f 63 61 6c 60 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 20 55 73 65 72 73 | ocal`.for.firewall.policy..Users |
a6c80 | 20 65 78 70 65 72 69 65 6e 63 65 64 20 77 69 74 68 20 6e 65 74 66 69 6c 74 65 72 20 6f 66 74 65 | .experienced.with.netfilter.ofte |
a6ca0 | 6e 20 63 6f 6e 66 75 73 65 20 60 69 6e 60 20 74 6f 20 62 65 20 61 20 72 65 66 65 72 65 6e 63 65 | n.confuse.`in`.to.be.a.reference |
a6cc0 | 20 74 6f 20 74 68 65 20 60 49 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 61 6e 64 20 60 6f 75 74 60 | .to.the.`INPUT`.chain,.and.`out` |
a6ce0 | 20 74 68 65 20 60 4f 55 54 50 55 54 60 20 63 68 61 69 6e 20 66 72 6f 6d 20 6e 65 74 66 69 6c 74 | .the.`OUTPUT`.chain.from.netfilt |
a6d00 | 65 72 2e 20 54 68 69 73 20 69 73 20 6e 6f 74 20 74 68 65 20 63 61 73 65 2e 20 54 68 65 73 65 20 | er..This.is.not.the.case..These. |
a6d20 | 69 6e 73 74 65 61 64 20 69 6e 64 69 63 61 74 65 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 | instead.indicate.the.use.of.the. |
a6d40 | 60 46 4f 52 57 41 52 44 60 20 63 68 61 69 6e 20 61 6e 64 20 65 69 74 68 65 72 20 74 68 65 20 69 | `FORWARD`.chain.and.either.the.i |
a6d60 | 6e 70 75 74 20 6f 72 20 6f 75 74 70 75 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 60 49 | nput.or.output.interface..The.`I |
a6d80 | 4e 50 55 54 60 20 63 68 61 69 6e 2c 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c | NPUT`.chain,.which.is.used.for.l |
a6da0 | 6f 63 61 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 4f 53 2c 20 69 73 20 61 20 72 65 66 | ocal.traffic.to.the.OS,.is.a.ref |
a6dc0 | 65 72 65 6e 63 65 20 74 6f 20 61 73 20 60 6c 6f 63 61 6c 60 20 77 69 74 68 20 72 65 73 70 65 63 | erence.to.as.`local`.with.respec |
a6de0 | 74 20 74 6f 20 69 74 73 20 69 6e 70 75 74 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 49 6d 70 6f | t.to.its.input.interface..**Impo |
a6e00 | 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e | rtant.note:**.This.documentation |
a6e20 | 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 53 61 67 69 74 74 61 20 | .is.valid.only.for.VyOS.Sagitta. |
a6e40 | 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 | prior.to.1.4-rolling-20230804055 |
a6e60 | 37 00 2a 2a 49 6d 70 6f 72 74 61 6e 74 20 6e 6f 74 65 3a 2a 2a 20 54 68 69 73 20 64 6f 63 75 6d | 7.**Important.note:**.This.docum |
a6e80 | 65 6e 74 61 74 69 6f 6e 20 69 73 20 76 61 6c 69 64 20 6f 6e 6c 79 20 66 6f 72 20 56 79 4f 53 20 | entation.is.valid.only.for.VyOS. |
a6ea0 | 53 61 67 69 74 74 61 20 70 72 69 6f 72 20 74 6f 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 59 59 59 | Sagitta.prior.to.1.4-rolling-YYY |
a6ec0 | 59 4d 4d 44 44 48 48 6d 6d 00 2a 2a 49 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 | YMMDDHHmm.**Input**:.stage.where |
a6ee0 | 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 | .traffic.destinated.to.the.route |
a6f00 | 72 20 69 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e | r.itself.can.be.filtered.and.con |
a6f20 | 74 72 6f 6c 6c 65 64 2e 20 54 68 69 73 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 | trolled..This.is.where.all.rules |
a6f40 | 20 66 6f 72 20 73 65 63 75 72 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 | .for.securing.the.router.should. |
a6f60 | 74 61 6b 65 20 70 6c 61 63 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 | take.place..This.includes.ipv4.a |
a6f80 | 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 | nd.ipv6.filtering.rules,.defined |
a6fa0 | 20 69 6e 3a 00 2a 2a 49 6e 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 | .in:.**Input**:.stage.where.traf |
a6fc0 | 66 69 63 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 | fic.destined.for.the.router.itse |
a6fe0 | 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 | lf.can.be.filtered.and.controlle |
a7000 | 64 2e 20 54 68 69 73 20 69 73 20 77 68 65 72 65 20 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 73 | d..This.is.where.all.rules.for.s |
a7020 | 65 63 75 72 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 74 61 6b 65 20 70 | ecuring.the.router.should.take.p |
a7040 | 6c 61 63 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 | lace..This.includes.ipv4.and.ipv |
a7060 | 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a | 6.filtering.rules,.defined.in:.* |
a7080 | 2a 49 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2a 2a 00 2a 2a 4c 45 46 54 2a 2a 00 2a 2a 4c 45 46 | *Interface.name**.**LEFT**.**LEF |
a70a0 | 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 60 65 74 68 30 2e 32 30 | T:**.*.WAN.interface.on.`eth0.20 |
a70c0 | 31 60 20 2a 20 60 65 74 68 30 2e 32 30 31 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 | 1`.*.`eth0.201`.interface.IP:.`1 |
a70e0 | 37 32 2e 31 38 2e 32 30 31 2e 31 30 2f 32 34 60 20 2a 20 60 76 74 69 31 30 60 20 69 6e 74 65 72 | 72.18.201.10/24`.*.`vti10`.inter |
a7100 | 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 30 2e 32 2f 33 31 60 20 2a 20 60 64 75 6d 30 60 20 | face.IP:.`10.0.0.2/31`.*.`dum0`. |
a7120 | 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 31 31 2e 31 2f 32 34 60 20 28 66 6f | interface.IP:.`10.0.11.1/24`.(fo |
a7140 | 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 29 00 2a 2a 4c 61 79 65 72 20 33 20 62 72 | r.testing.purposes).**Layer.3.br |
a7160 | 69 64 67 65 2a 2a 3a 20 57 68 65 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 73 | idge**:.When.an.IP.address.is.as |
a7180 | 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 62 72 69 64 67 65 20 69 6e 74 65 72 66 61 63 65 2c 20 | signed.to.the.bridge.interface,. |
a71a0 | 61 6e 64 20 69 66 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 72 6f | and.if.traffic.is.sent.to.the.ro |
a71c0 | 75 74 65 72 20 74 6f 20 74 68 69 73 20 49 50 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 75 73 69 | uter.to.this.IP.(for.example.usi |
a71e0 | 6e 67 20 73 75 63 68 20 49 50 20 61 73 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 29 2c 20 | ng.such.IP.as.default.gateway),. |
a7200 | 74 68 65 6e 20 72 75 6c 65 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 2a 2a 62 72 69 64 67 65 20 | then.rules.defined.for.**bridge. |
a7220 | 66 69 72 65 77 61 6c 6c 2a 2a 20 77 6f 6e 27 74 20 6d 61 74 63 68 2c 20 61 6e 64 20 66 69 72 65 | firewall**.won't.match,.and.fire |
a7240 | 77 61 6c 6c 20 61 6e 61 6c 79 73 69 73 20 63 6f 6e 74 69 6e 75 65 73 20 61 74 20 2a 2a 49 50 20 | wall.analysis.continues.at.**IP. |
a7260 | 6c 61 79 65 72 2a 2a 2e 00 2a 2a 4c 65 61 66 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a | layer**..**Leaf2.configuration:* |
a7280 | 2a 00 2a 2a 4c 65 61 66 33 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 4c 69 6e | *.**Leaf3.configuration:**.**Lin |
a72a0 | 75 78 20 73 79 73 74 65 6d 64 2d 6e 65 74 77 6f 72 6b 64 3a 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 70 | ux.systemd-networkd:**.**Local.p |
a72c0 | 72 65 66 65 72 65 6e 63 65 20 63 68 65 63 6b 2a 2a 00 2a 2a 4c 6f 63 61 6c 20 72 6f 75 74 65 20 | reference.check**.**Local.route. |
a72e0 | 63 68 65 63 6b 2a 2a 00 2a 2a 4d 45 44 20 63 68 65 63 6b 2a 2a 00 2a 2a 4d 75 6c 74 69 2d 70 61 | check**.**MED.check**.**Multi-pa |
a7300 | 74 68 20 63 68 65 63 6b 2a 2a 00 2a 2a 4e 6f 64 65 20 31 2a 2a 00 2a 2a 4e 6f 64 65 20 31 3a 2a | th.check**.**Node.1**.**Node.1:* |
a7320 | 2a 00 2a 2a 4e 6f 64 65 20 32 2a 2a 00 2a 2a 4e 6f 64 65 20 32 3a 2a 2a 00 2a 2a 4e 6f 64 65 31 | *.**Node.2**.**Node.2:**.**Node1 |
a7340 | 3a 2a 2a 00 2a 2a 4e 6f 64 65 32 3a 2a 2a 00 2a 2a 4f 50 54 49 4f 4e 41 4c 3a 2a 2a 20 45 78 63 | :**.**Node2:**.**OPTIONAL:**.Exc |
a7360 | 6c 75 64 65 20 49 6e 74 65 72 2d 56 4c 41 4e 20 74 72 61 66 66 69 63 20 28 62 65 74 77 65 65 6e | lude.Inter-VLAN.traffic.(between |
a7380 | 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 31 29 20 66 72 6f 6d 20 50 42 52 00 2a 2a 4f | .VLAN10.and.VLAN11).from.PBR.**O |
a73a0 | 53 50 46 20 6e 65 74 77 6f 72 6b 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 | SPF.network.routing.table**..... |
a73c0 | 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 | includes.a.list.of.acquired.rout |
a73e0 | 65 73 20 66 6f 72 20 61 6c 6c 20 61 63 63 65 73 73 69 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 28 | es.for.all.accessible.networks.( |
a7400 | 6f 72 20 61 67 67 72 65 67 61 74 65 64 20 61 72 65 61 20 72 61 6e 67 65 73 29 20 6f 66 20 4f 53 | or.aggregated.area.ranges).of.OS |
a7420 | 50 46 20 73 79 73 74 65 6d 2e 20 22 49 41 22 20 66 6c 61 67 20 6d 65 61 6e 73 20 74 68 61 74 20 | PF.system.."IA".flag.means.that. |
a7440 | 72 6f 75 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 69 6e 20 74 68 65 20 61 72 65 61 | route.destination.is.in.the.area |
a7460 | 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 6e 6f 74 20 63 6f 6e 6e | .to.which.the.router.is.not.conn |
a7480 | 65 63 74 65 64 2c 20 69 2e 65 2e 20 69 74 e2 80 99 73 20 61 6e 20 69 6e 74 65 72 2d 61 72 65 61 | ected,.i.e..it...s.an.inter-area |
a74a0 | 20 70 61 74 68 2e 20 49 6e 20 73 71 75 61 72 65 20 62 72 61 63 6b 65 74 73 20 61 20 73 75 6d 6d | .path..In.square.brackets.a.summ |
a74c0 | 61 72 79 20 6d 65 74 72 69 63 20 66 6f 72 20 61 6c 6c 20 6c 69 6e 6b 73 20 74 68 72 6f 75 67 68 | ary.metric.for.all.links.through |
a74e0 | 20 77 68 69 63 68 20 61 20 70 61 74 68 20 6c 69 65 73 20 74 6f 20 74 68 69 73 20 6e 65 74 77 6f | .which.a.path.lies.to.this.netwo |
a7500 | 72 6b 20 69 73 20 73 70 65 63 69 66 69 65 64 2e 20 22 76 69 61 22 20 70 72 65 66 69 78 20 64 65 | rk.is.specified.."via".prefix.de |
a7520 | 66 69 6e 65 73 20 61 20 72 6f 75 74 65 72 2d 67 61 74 65 77 61 79 2c 20 69 2e 65 2e 20 74 68 65 | fines.a.router-gateway,.i.e..the |
a7540 | 20 66 69 72 73 74 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 65 20 77 61 79 20 74 6f 20 74 68 65 20 | .first.router.on.the.way.to.the. |
a7560 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 6e 65 78 74 20 68 6f 70 29 2e 20 2a 2a 4f 53 50 46 20 72 | destination.(next.hop)..**OSPF.r |
a7580 | 6f 75 74 65 72 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 80 93 20 69 6e 63 6c 75 64 | outer.routing.table**.....includ |
a75a0 | 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 6f 75 74 65 73 20 74 6f 20 | es.a.list.of.acquired.routes.to. |
a75c0 | 61 6c 6c 20 61 63 63 65 73 73 69 62 6c 65 20 41 42 52 73 20 61 6e 64 20 41 53 42 52 73 2e 20 2a | all.accessible.ABRs.and.ASBRs..* |
a75e0 | 2a 4f 53 50 46 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2a 2a 20 e2 | *OSPF.external.routing.table**.. |
a7600 | 80 93 20 69 6e 63 6c 75 64 65 73 20 61 20 6c 69 73 74 20 6f 66 20 61 63 71 75 69 72 65 64 20 72 | ...includes.a.list.of.acquired.r |
a7620 | 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 74 68 65 20 4f | outes.that.are.external.to.the.O |
a7640 | 53 50 46 20 70 72 6f 63 65 73 73 2e 20 22 45 22 20 66 6c 61 67 20 70 6f 69 6e 74 73 20 74 6f 20 | SPF.process.."E".flag.points.to. |
a7660 | 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 20 74 79 70 65 20 28 45 | the.external.link.metric.type.(E |
a7680 | 31 20 e2 80 93 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 2c 20 45 32 20 e2 80 93 20 6d 65 74 72 | 1.....metric.type.1,.E2.....metr |
a76a0 | 69 63 20 74 79 70 65 20 32 29 2e 20 45 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 6d 65 74 72 69 63 | ic.type.2)..External.link.metric |
a76c0 | 20 69 73 20 70 72 69 6e 74 65 64 20 69 6e 20 74 68 65 20 22 3c 6d 65 74 72 69 63 20 6f 66 20 74 | .is.printed.in.the."<metric.of.t |
a76e0 | 68 65 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 65 20 6c | he.router.which.advertised.the.l |
a7700 | 69 6e 6b 3e 2f 3c 6c 69 6e 6b 20 6d 65 74 72 69 63 3e 22 20 66 6f 72 6d 61 74 2e 00 2a 2a 4f 6e | ink>/<link.metric>".format..**On |
a7720 | 65 20 67 61 74 65 77 61 79 3a 2a 2a 00 2a 2a 4f 72 69 67 69 6e 20 63 68 65 63 6b 2a 2a 00 2a 2a | e.gateway:**.**Origin.check**.** |
a7740 | 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 | Output**:.stage.where.traffic.th |
a7760 | 61 74 20 69 73 20 6f 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 | at.is.originated.by.the.router.i |
a7780 | 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f | tself.can.be.filtered.and.contro |
a77a0 | 6c 6c 65 64 2e 20 42 61 72 65 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 | lled..Bare.in.mind.that.this.tra |
a77c0 | 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 | ffic.can.be.a.new.connection.ori |
a77e0 | 67 69 6e 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e | ginted.by.a.internal.process.run |
a7800 | 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 | ning.on.VyOS.router,.such.as.NTP |
a7820 | 2c 20 6f 72 20 63 61 6e 20 62 65 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 | ,.or.can.be.a.response.to.traffi |
a7840 | 63 20 72 65 63 65 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 | c.received.externaly.through.**i |
a7860 | 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f | nputt**.(for.example.response.to |
a7880 | 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 | .an.ssh.login.attempt.to.the.rou |
a78a0 | 74 65 72 29 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 | ter)..This.includes.ipv4.and.ipv |
a78c0 | 36 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a | 6.filtering.rules,.defined.in:.* |
a78e0 | 2a 4f 75 74 70 75 74 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 | *Output**:.stage.where.traffic.t |
a7900 | 68 61 74 20 6f 72 69 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 | hat.originates.from.the.router.i |
a7920 | 74 73 65 6c 66 20 63 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f | tself.can.be.filtered.and.contro |
a7940 | 6c 6c 65 64 2e 20 42 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 | lled..Bear.in.mind.that.this.tra |
a7960 | 66 66 69 63 20 63 61 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 | ffic.can.be.a.new.connection.ori |
a7980 | 67 69 6e 61 74 65 64 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 | ginated.by.a.internal.process.ru |
a79a0 | 6e 6e 69 6e 67 20 6f 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 | nning.on.VyOS.router,.such.as.NT |
a79c0 | 50 2c 20 6f 72 20 61 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 | P,.or.a.response.to.traffic.rece |
a79e0 | 69 76 65 64 20 65 78 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 2a 2a | ived.externaly.through.**input** |
a7a00 | 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 | .(for.example.response.to.an.ssh |
a7a20 | 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 | .login.attempt.to.the.router)..T |
a7a40 | 68 69 73 20 69 6e 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 | his.includes.ipv4.and.ipv6.filte |
a7a60 | 72 69 6e 67 20 72 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 4f 75 74 70 75 74 | ring.rules,.defined.in:.**Output |
a7a80 | 2a 2a 3a 20 73 74 61 67 65 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6f 72 69 | **:.stage.where.traffic.that.ori |
a7aa0 | 67 69 6e 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 20 63 | ginates.from.the.router.itself.c |
a7ac0 | 61 6e 20 62 65 20 66 69 6c 74 65 72 65 64 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 6c 65 64 2e 20 42 | an.be.filtered.and.controlled..B |
a7ae0 | 65 61 72 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 74 72 61 66 66 69 63 20 63 61 | ear.in.mind.that.this.traffic.ca |
a7b00 | 6e 20 62 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 72 69 67 69 6e 61 74 65 64 | n.be.a.new.connection.originated |
a7b20 | 20 62 79 20 61 20 69 6e 74 65 72 6e 61 6c 20 70 72 6f 63 65 73 73 20 72 75 6e 6e 69 6e 67 20 6f | .by.a.internal.process.running.o |
a7b40 | 6e 20 56 79 4f 53 20 72 6f 75 74 65 72 2c 20 73 75 63 68 20 61 73 20 4e 54 50 2c 20 6f 72 20 61 | n.VyOS.router,.such.as.NTP,.or.a |
a7b60 | 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 72 61 66 66 69 63 20 72 65 63 65 69 76 65 64 20 65 78 | .response.to.traffic.received.ex |
a7b80 | 74 65 72 6e 61 6c 79 20 74 68 72 6f 75 67 68 20 2a 2a 69 6e 70 75 74 74 2a 2a 20 28 66 6f 72 20 | ternaly.through.**inputt**.(for. |
a7ba0 | 65 78 61 6d 70 6c 65 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 6e 20 73 73 68 20 6c 6f 67 69 6e | example.response.to.an.ssh.login |
a7bc0 | 20 61 74 74 65 6d 70 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 29 2e 20 54 68 69 73 20 69 6e | .attempt.to.the.router)..This.in |
a7be0 | 63 6c 75 64 65 73 20 69 70 76 34 20 61 6e 64 20 69 70 76 36 20 66 69 6c 74 65 72 69 6e 67 20 72 | cludes.ipv4.and.ipv6.filtering.r |
a7c00 | 75 6c 65 73 2c 20 64 65 66 69 6e 65 64 20 69 6e 3a 00 2a 2a 50 65 65 72 20 61 64 64 72 65 73 73 | ules,.defined.in:.**Peer.address |
a7c20 | 2a 2a 00 2a 2a 50 6f 6c 69 63 79 20 52 6f 75 74 65 2a 2a 3a 20 72 75 6c 65 73 20 64 65 66 69 6e | **.**Policy.Route**:.rules.defin |
a7c40 | 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 70 6f 6c 69 63 79 20 5b 72 6f 75 74 65 20 7c 20 72 | ed.under.``set.policy.[route.|.r |
a7c60 | 6f 75 74 65 36 5d 20 2e 2e 2e 60 60 2e 00 2a 2a 50 6f 6c 69 63 79 20 64 65 66 69 6e 69 74 69 6f | oute6]....``..**Policy.definitio |
a7c80 | 6e 3a 2a 2a 00 2a 2a 50 6f 73 74 72 6f 75 74 69 6e 67 2a 2a 3a 20 61 73 20 69 6e 20 2a 2a 50 72 | n:**.**Postrouting**:.as.in.**Pr |
a7ca0 | 65 72 6f 75 74 69 6e 67 2a 2a 2c 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 64 65 66 69 | erouting**,.several.actions.defi |
a7cc0 | 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 6f 66 20 56 79 4f 53 20 63 | ned.in.different.parts.of.VyOS.c |
a7ce0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 69 6e 20 74 68 | onfiguration.are.performed.in.th |
a7d00 | 69 73 20 73 74 61 67 65 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 3a 00 2a 2a 50 72 65 72 6f | is.stage..This.includes:.**Prero |
a7d20 | 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 | uting**:.several.actions.can.be. |
a7d40 | 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c | done.in.this.stage,.and.currentl |
a7d60 | 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 | y.these.actions.are.defined.in.d |
a7d80 | 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 6e 20 56 79 4f 53 20 63 6f 6e 66 69 67 75 72 61 | ifferent.parts.in.VyOS.configura |
a7da0 | 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c | tion..Order.is.important,.and.al |
a7dc0 | 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 | l.these.actions.are.performed.be |
a7de0 | 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 | fore.any.actions.defined.under.` |
a7e00 | 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f | `firewall``.section..Relevant.co |
a7e20 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 61 63 74 73 20 69 6e 20 74 68 69 73 20 73 74 | nfiguration.that.acts.in.this.st |
a7e40 | 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 65 72 6f 75 74 69 6e 67 2a 2a 3a 20 73 65 76 65 72 61 6c | age.are:.**Prerouting**:.several |
a7e60 | 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 69 6e 20 74 68 69 73 20 73 74 61 | .actions.can.be.done.in.this.sta |
a7e80 | 67 65 2c 20 61 6e 64 20 63 75 72 72 65 6e 74 6c 79 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 | ge,.and.currently.these.actions. |
a7ea0 | 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 74 73 20 69 | are.defined.in.different.parts.i |
a7ec0 | 6e 20 76 79 6f 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 4f 72 64 65 72 20 69 73 20 69 | n.vyos.configuration..Order.is.i |
a7ee0 | 6d 70 6f 72 74 61 6e 74 2c 20 61 6e 64 20 61 6c 6c 20 74 68 65 73 65 20 61 63 74 69 6f 6e 73 20 | mportant,.and.all.these.actions. |
a7f00 | 61 72 65 20 70 65 72 66 6f 72 6d 65 64 20 62 65 66 6f 72 65 20 61 6e 79 20 61 63 74 69 6f 6e 73 | are.performed.before.any.actions |
a7f20 | 20 64 65 66 69 6e 65 20 75 6e 64 65 72 20 60 60 66 69 72 65 77 61 6c 6c 60 60 20 73 65 63 74 69 | .define.under.``firewall``.secti |
a7f40 | 6f 6e 2e 20 52 65 6c 65 76 61 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 | on..Relevant.configuration.that. |
a7f60 | 61 63 74 73 20 69 6e 20 74 68 69 73 20 73 74 61 67 65 20 61 72 65 3a 00 2a 2a 50 72 69 6d 61 72 | acts.in.this.stage.are:.**Primar |
a7f80 | 79 2a 2a 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 2a 2a 20 46 61 69 72 | y**.**Queueing.discipline**.Fair |
a7fa0 | 2f 46 6c 6f 77 20 51 75 65 75 65 20 43 6f 44 65 6c 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 | /Flow.Queue.CoDel..**Queueing.di |
a7fc0 | 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 44 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 6e 2e | scipline:**.Deficit.Round.Robin. |
a7fe0 | 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 44 65 66 69 63 69 | .**Queueing.discipline:**.Defici |
a8000 | 74 20 6d 6f 64 65 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a | t.mode..**Queueing.discipline:** |
a8020 | 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 72 6f 70 2e 00 | .Generalized.Random.Early.Drop.. |
a8040 | 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 48 69 65 72 61 72 63 | **Queueing.discipline:**.Hierarc |
a8060 | 68 69 63 61 6c 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 | hical.Token.Bucket..**Queueing.d |
a8080 | 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 49 6e 67 72 65 73 73 20 70 6f 6c 69 63 65 72 2e 00 2a 2a | iscipline:**.Ingress.policer..** |
a80a0 | 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 50 46 49 46 4f 20 28 50 61 | Queueing.discipline:**.PFIFO.(Pa |
a80c0 | 63 6b 65 74 20 46 69 72 73 74 20 49 6e 20 46 69 72 73 74 20 4f 75 74 29 2e 00 2a 2a 51 75 65 75 | cket.First.In.First.Out)..**Queu |
a80e0 | 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 50 52 49 4f 2e 00 2a 2a 51 75 65 75 65 | eing.discipline:**.PRIO..**Queue |
a8100 | 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 53 46 51 20 28 53 74 6f 63 68 61 73 74 69 | ing.discipline:**.SFQ.(Stochasti |
a8120 | 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 69 6e 67 29 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 | c.Fairness.Queuing)..**Queueing. |
a8140 | 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 54 6f 63 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 | discipline:**.Tocken.Bucket.Filt |
a8160 | 65 72 2e 00 2a 2a 51 75 65 75 65 69 6e 67 20 64 69 73 63 69 70 6c 69 6e 65 3a 2a 2a 20 6e 65 74 | er..**Queueing.discipline:**.net |
a8180 | 65 6d 20 28 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 29 20 2b 20 54 42 46 20 28 54 6f 6b | em.(Network.Emulator).+.TBF.(Tok |
a81a0 | 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 29 2e 00 2a 2a 52 31 20 53 74 61 74 69 63 20 4b | en.Bucket.Filter)..**R1.Static.K |
a81c0 | 65 79 2a 2a 00 2a 2a 52 31 2a 2a 00 2a 2a 52 32 20 53 74 61 74 69 63 20 4b 65 79 2a 2a 00 2a 2a | ey**.**R1**.**R2.Static.Key**.** |
a81e0 | 52 32 2a 2a 00 2a 2a 52 41 44 49 55 53 20 62 61 73 65 64 20 49 50 20 70 6f 6f 6c 73 20 28 46 72 | R2**.**RADIUS.based.IP.pools.(Fr |
a8200 | 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 29 2a 2a 00 2a 2a 52 41 44 49 55 53 20 73 65 73 73 | amed-IP-Address)**.**RADIUS.sess |
a8220 | 69 6f 6e 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 44 4d 2f 43 6f 41 2a 2a 00 2a 2a 52 49 47 48 54 | ions.management.DM/CoA**.**RIGHT |
a8240 | 2a 2a 00 2a 2a 52 49 47 48 54 3a 2a 2a 20 2a 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e | **.**RIGHT:**.*.WAN.interface.on |
a8260 | 20 60 65 74 68 30 2e 32 30 32 60 20 2a 20 60 65 74 68 30 2e 32 30 31 60 20 69 6e 74 65 72 66 61 | .`eth0.202`.*.`eth0.201`.interfa |
a8280 | 63 65 20 49 50 3a 20 60 31 37 32 2e 31 38 2e 32 30 32 2e 31 30 2f 32 34 60 20 2a 20 60 76 74 69 | ce.IP:.`172.18.202.10/24`.*.`vti |
a82a0 | 31 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 30 2e 33 2f 33 31 60 20 | 10`.interface.IP:.`10.0.0.3/31`. |
a82c0 | 2a 20 60 64 75 6d 30 60 20 69 6e 74 65 72 66 61 63 65 20 49 50 3a 20 60 31 30 2e 30 2e 31 32 2e | *.`dum0`.interface.IP:.`10.0.12. |
a82e0 | 31 2f 32 34 60 20 28 66 6f 72 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 29 00 2a 2a 52 | 1/24`.(for.testing.purposes).**R |
a8300 | 6f 75 74 65 72 20 31 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 32 2a 2a 00 2a 2a 52 6f 75 74 65 72 20 | outer.1**.**Router.2**.**Router. |
a8320 | 33 2a 2a 00 2a 2a 52 6f 75 74 65 72 2d 49 44 20 63 68 65 63 6b 2a 2a 00 2a 2a 52 6f 75 74 65 73 | 3**.**Router-ID.check**.**Routes |
a8340 | 20 6c 65 61 72 6e 65 64 20 61 66 74 65 72 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 | .learned.after.routing.policy.ap |
a8360 | 70 6c 69 65 64 3a 2a 2a 00 2a 2a 52 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 62 65 66 6f 72 65 | plied:**.**Routes.learned.before |
a8380 | 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 20 61 70 70 6c 69 65 64 3a 2a 2a 00 2a 2a 53 57 31 | .routing.policy.applied:**.**SW1 |
a83a0 | 2a 2a 00 2a 2a 53 57 32 2a 2a 00 2a 2a 53 65 63 6f 6e 64 61 72 79 2a 2a 00 2a 2a 53 65 74 74 69 | **.**SW2**.**Secondary**.**Setti |
a83c0 | 6e 67 20 75 70 20 49 50 53 65 63 2a 2a 00 2a 2a 53 65 74 74 69 6e 67 20 75 70 20 74 68 65 20 47 | ng.up.IPSec**.**Setting.up.the.G |
a83e0 | 52 45 20 74 75 6e 6e 65 6c 2a 2a 00 2a 2a 53 6f 75 72 63 65 20 4e 41 54 2a 2a 3a 20 72 75 6c 65 | RE.tunnel**.**Source.NAT**:.rule |
a8400 | 73 20 64 65 66 69 6e 65 64 20 75 6e 64 65 72 20 60 60 73 65 74 20 5b 6e 61 74 20 7c 20 6e 61 74 | s.defined.under.``set.[nat.|.nat |
a8420 | 36 36 5d 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 2e 2e 60 60 2e 00 2a 2a 53 70 69 6e 65 31 20 43 | 66].destination...``..**Spine1.C |
a8440 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 2a 2a 00 2a 2a 53 74 61 74 75 73 2a 2a 00 2a 2a 54 6f 20 | onfiguration:**.**Status**.**To. |
a8460 | 73 65 65 20 74 68 65 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 3a 2a 2a 00 | see.the.redistributed.routes:**. |
a8480 | 2a 2a 54 77 6f 20 67 61 74 65 77 61 79 73 20 61 6e 64 20 64 69 66 66 65 72 65 6e 74 20 6d 65 74 | **Two.gateways.and.different.met |
a84a0 | 72 69 63 73 3a 2a 2a 00 2a 2a 56 4c 41 4e 20 49 44 2a 2a 00 2a 2a 56 79 4f 53 20 52 6f 75 74 65 | rics:**.**VLAN.ID**.**VyOS.Route |
a84c0 | 72 3a 2a 2a 00 2a 2a 57 65 69 67 68 74 20 63 68 65 63 6b 2a 2a 00 2a 2a 61 64 64 72 65 73 73 2a | r:**.**Weight.check**.**address* |
a84e0 | 2a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 | *.can.be.specified.multiple.time |
a8500 | 73 20 61 73 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 65 | s.as.IPv4.and/or.IPv6.address,.e |
a8520 | 2e 67 2e 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e 64 2f 6f 72 20 32 30 30 31 3a 64 62 38 | .g..192.0.2.1/24.and/or.2001:db8 |
a8540 | 3a 3a 31 2f 36 34 00 2a 2a 61 64 64 72 65 73 73 2a 2a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 | ::1/64.**address**.can.be.specif |
a8560 | 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2c 20 65 2e 67 2e 20 31 39 32 2e 31 36 38 | ied.multiple.times,.e.g..192.168 |
a8580 | 2e 31 30 30 2e 31 20 61 6e 64 2f 6f 72 20 31 39 32 2e 31 36 38 2e 31 30 30 2e 30 2f 32 34 00 2a | .100.1.and/or.192.168.100.0/24.* |
a85a0 | 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 65 20 49 50 76 34 20 6f 6e 6c 79 20 69 | *allow**.-.Negotiate.IPv4.only.i |
a85c0 | 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 65 | f.client.requests.(Default.value |
a85e0 | 29 00 2a 2a 61 6c 6c 6f 77 2a 2a 20 2d 20 4e 65 67 6f 74 69 61 74 65 20 49 50 76 36 20 6f 6e 6c | ).**allow**.-.Negotiate.IPv6.onl |
a8600 | 79 20 69 66 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 00 2a 2a 61 6c 6c 6f 77 2d 68 6f 73 | y.if.client.requests.**allow-hos |
a8620 | 74 2d 6e 65 74 77 6f 72 6b 73 2a 2a 20 63 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 69 74 68 | t-networks**.cannot.be.used.with |
a8640 | 20 2a 2a 6e 65 74 77 6f 72 6b 2a 2a 00 2a 2a 61 6c 77 61 79 73 2a 2a 3a 20 52 65 73 74 61 72 74 | .**network**.**always**:.Restart |
a8660 | 20 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e 20 74 68 65 79 20 65 78 69 74 2c 20 72 65 67 61 | .containers.when.they.exit,.rega |
a8680 | 72 64 6c 65 73 73 20 6f 66 20 73 74 61 74 75 73 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 66 | rdless.of.status,.retrying.indef |
a86a0 | 69 6e 69 74 65 6c 79 00 2a 2a 61 70 70 65 6e 64 3a 2a 2a 20 54 68 65 20 72 65 6c 61 79 20 61 67 | initely.**append:**.The.relay.ag |
a86c0 | 65 6e 74 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 70 70 65 6e 64 20 69 74 73 20 6f 77 6e | ent.is.allowed.to.append.its.own |
a86e0 | 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 20 72 65 63 65 69 76 65 64 | .relay.information.to.a.received |
a8700 | 20 44 48 43 50 20 70 61 63 6b 65 74 2c 20 64 69 73 72 65 67 61 72 64 69 6e 67 20 72 65 6c 61 79 | .DHCP.packet,.disregarding.relay |
a8720 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e 20 | .information.already.present.in. |
a8740 | 74 68 65 20 70 61 63 6b 65 74 2e 00 2a 2a 61 70 70 6c 69 63 61 74 69 6f 6e 2a 2a 3a 20 61 6e 61 | the.packet..**application**:.ana |
a8760 | 6c 79 7a 65 73 20 72 65 63 65 69 76 65 64 20 66 6c 6f 77 20 64 61 74 61 20 69 6e 20 74 68 65 20 | lyzes.received.flow.data.in.the. |
a8780 | 63 6f 6e 74 65 78 74 20 6f 66 20 69 6e 74 72 75 73 69 6f 6e 20 64 65 74 65 63 74 69 6f 6e 20 6f | context.of.intrusion.detection.o |
a87a0 | 72 20 74 72 61 66 66 69 63 20 70 72 6f 66 69 6c 69 6e 67 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 | r.traffic.profiling,.for.example |
a87c0 | 00 2a 2a 61 75 74 6f 2a 2a 20 e2 80 93 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 | .**auto**.....automatically.dete |
a87e0 | 72 6d 69 6e 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 65 2e 20 2a 2a 77 69 72 | rmines.the.interface.type..**wir |
a8800 | 65 64 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 73 20 6f 70 74 69 6d 69 73 61 74 69 6f 6e 73 20 66 | ed**.....enables.optimisations.f |
a8820 | 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 77 69 72 65 6c 65 73 73 2a | or.wired.interfaces..**wireless* |
a8840 | 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 73 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 74 69 6d | *.....disables.a.number.of.optim |
a8860 | 69 73 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 6f 6e 6c 79 20 63 6f 72 72 65 63 74 20 6f | isations.that.are.only.correct.o |
a8880 | 6e 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 53 70 65 63 69 66 79 69 6e 67 20 77 | n.wired.interfaces..Specifying.w |
a88a0 | 69 72 65 6c 65 73 73 20 69 73 20 61 6c 77 61 79 73 20 63 6f 72 72 65 63 74 2c 20 62 75 74 20 6d | ireless.is.always.correct,.but.m |
a88c0 | 61 79 20 63 61 75 73 65 20 73 6c 6f 77 65 72 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 61 6e 64 20 | ay.cause.slower.convergence.and. |
a88e0 | 65 78 74 72 61 20 72 6f 75 74 69 6e 67 20 74 72 61 66 66 69 63 2e 00 2a 2a 62 61 6e 2d 74 69 6d | extra.routing.traffic..**ban-tim |
a8900 | 65 2a 2a 20 61 6e 64 20 2a 2a 74 68 72 65 73 68 6f 6c 64 2a 2a 3a 20 74 68 65 73 65 20 76 61 6c | e**.and.**threshold**:.these.val |
a8920 | 75 65 73 20 61 72 65 20 6b 65 70 74 20 76 65 72 79 20 6c 6f 77 20 69 6e 20 6f 72 64 65 72 20 74 | ues.are.kept.very.low.in.order.t |
a8940 | 6f 20 65 61 73 69 6c 79 20 69 64 65 6e 74 69 66 79 20 61 6e 64 20 67 65 6e 65 72 61 74 65 20 61 | o.easily.identify.and.generate.a |
a8960 | 6e 64 20 61 74 74 61 63 6b 2e 00 2a 2a 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 62 72 6f | nd.attack..**broadcast**.....bro |
a8980 | 61 64 63 61 73 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e | adcast.IP.addresses.distribution |
a89a0 | 2e 20 2a 2a 6e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 | ..**non-broadcast**.....address. |
a89c0 | 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 73 20 74 6f | distribution.in.NBMA.networks.to |
a89e0 | 70 6f 6c 6f 67 79 2e 20 2a 2a 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2a 2a 20 | pology..**point-to-multipoint**. |
a8a00 | e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e | ....address.distribution.in.poin |
a8a20 | 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e 20 2a 2a 70 6f 69 6e | t-to-multipoint.networks..**poin |
a8a40 | 74 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 | t-to-point**.....address.distrib |
a8a60 | 75 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 | ution.in.point-to-point.networks |
a8a80 | 2e 00 2a 2a 62 72 6f 61 64 63 61 73 74 2a 2a 20 e2 80 93 20 62 72 6f 61 64 63 61 73 74 20 49 50 | ..**broadcast**.....broadcast.IP |
a8aa0 | 20 61 64 64 72 65 73 73 65 73 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 2a 2a 70 6f 69 6e 74 | .addresses.distribution..**point |
a8ac0 | 2d 74 6f 2d 70 6f 69 6e 74 2a 2a 20 e2 80 93 20 61 64 64 72 65 73 73 20 64 69 73 74 72 69 62 75 | -to-point**.....address.distribu |
a8ae0 | 74 69 6f 6e 20 69 6e 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 6b 73 2e | tion.in.point-to-point.networks. |
a8b00 | 00 2a 2a 63 61 6c 6c 69 6e 67 2d 73 69 64 2a 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 69 6e 74 | .**calling-sid**.-.Calculate.int |
a8b20 | 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 72 6f 6d 20 63 61 6c 6c 69 6e 67 2d 73 | erface.identifier.from.calling-s |
a8b40 | 74 61 74 69 6f 6e 2d 69 64 2e 00 2a 2a 63 69 73 63 6f 2a 2a 20 e2 80 93 20 61 20 72 6f 75 74 65 | tation-id..**cisco**.....a.route |
a8b60 | 72 20 77 69 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 61 73 20 41 42 52 20 69 66 20 69 | r.will.be.considered.as.ABR.if.i |
a8b80 | 74 20 68 61 73 20 73 65 76 65 72 61 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 6c 69 6e 6b 73 20 74 | t.has.several.configured.links.t |
a8ba0 | 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 61 72 65 61 | o.the.networks.in.different.area |
a8bc0 | 73 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 69 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 | s.one.of.which.is.a.backbone.are |
a8be0 | 61 2e 20 4d 6f 72 65 6f 76 65 72 2c 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 | a..Moreover,.the.link.to.the.bac |
a8c00 | 6b 62 6f 6e 65 20 61 72 65 61 20 73 68 6f 75 6c 64 20 62 65 20 61 63 74 69 76 65 20 28 77 6f 72 | kbone.area.should.be.active.(wor |
a8c20 | 6b 69 6e 67 29 2e 20 2a 2a 69 62 6d 2a 2a 20 e2 80 93 20 69 64 65 6e 74 69 63 61 6c 20 74 6f 20 | king)..**ibm**.....identical.to. |
a8c40 | 22 63 69 73 63 6f 22 20 6d 6f 64 65 6c 20 62 75 74 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 61 | "cisco".model.but.in.this.case.a |
a8c60 | 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 6c 69 6e 6b 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 | .backbone.area.link.may.not.be.a |
a8c80 | 63 74 69 76 65 2e 20 2a 2a 73 74 61 6e 64 61 72 64 2a 2a 20 e2 80 93 20 72 6f 75 74 65 72 20 68 | ctive..**standard**.....router.h |
a8ca0 | 61 73 20 73 65 76 65 72 61 6c 20 61 63 74 69 76 65 20 6c 69 6e 6b 73 20 74 6f 20 64 69 66 66 65 | as.several.active.links.to.diffe |
a8cc0 | 72 65 6e 74 20 61 72 65 61 73 2e 20 2a 2a 73 68 6f 72 74 63 75 74 2a 2a 20 e2 80 93 20 69 64 65 | rent.areas..**shortcut**.....ide |
a8ce0 | 6e 74 69 63 61 6c 20 74 6f 20 22 73 74 61 6e 64 61 72 64 22 20 62 75 74 20 69 6e 20 74 68 69 73 | ntical.to."standard".but.in.this |
a8d00 | 20 6d 6f 64 65 6c 20 61 20 72 6f 75 74 65 72 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 | .model.a.router.is.allowed.to.us |
a8d20 | 65 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 61 72 65 61 73 20 74 6f 70 6f 6c 6f 67 79 20 77 69 74 | e.a.connected.areas.topology.wit |
a8d40 | 68 6f 75 74 20 69 6e 76 6f 6c 76 69 6e 67 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 66 | hout.involving.a.backbone.area.f |
a8d60 | 6f 72 20 69 6e 74 65 72 2d 61 72 65 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 2a 2a 63 6f 6c | or.inter-area.connections..**col |
a8d80 | 6c 65 63 74 6f 72 2a 2a 3a 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 72 65 63 65 70 74 | lector**:.responsible.for.recept |
a8da0 | 69 6f 6e 2c 20 73 74 6f 72 61 67 65 20 61 6e 64 20 70 72 65 2d 70 72 6f 63 65 73 73 69 6e 67 20 | ion,.storage.and.pre-processing. |
a8dc0 | 6f 66 20 66 6c 6f 77 20 64 61 74 61 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 61 20 66 6c 6f | of.flow.data.received.from.a.flo |
a8de0 | 77 20 65 78 70 6f 72 74 65 72 00 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 93 20 20 74 68 69 73 | w.exporter.**default**......this |
a8e00 | 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 68 6f 72 74 63 75 74 74 | .area.will.be.used.for.shortcutt |
a8e20 | 69 6e 67 20 6f 6e 6c 79 20 69 66 20 41 42 52 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 | ing.only.if.ABR.does.not.have.a. |
a8e40 | 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 6f 72 20 74 68 69 | link.to.the.backbone.area.or.thi |
a8e60 | 73 20 6c 69 6e 6b 20 77 61 73 20 6c 6f 73 74 2e 20 2a 2a 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 | s.link.was.lost..**enable**..... |
a8e80 | 74 68 65 20 61 72 65 61 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 68 6f 72 74 63 | the.area.will.be.used.for.shortc |
a8ea0 | 75 74 74 69 6e 67 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 65 20 72 6f 75 74 65 20 74 68 61 74 | utting.every.time.the.route.that |
a8ec0 | 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 69 74 20 69 73 20 63 68 65 61 70 65 72 2e 20 2a 2a 64 | .goes.through.it.is.cheaper..**d |
a8ee0 | 69 73 61 62 6c 65 2a 2a 20 e2 80 93 20 74 68 69 73 20 61 72 65 61 20 69 73 20 6e 65 76 65 72 20 | isable**.....this.area.is.never. |
a8f00 | 75 73 65 64 20 62 79 20 41 42 52 20 66 6f 72 20 72 6f 75 74 65 73 20 73 68 6f 72 74 63 75 74 74 | used.by.ABR.for.routes.shortcutt |
a8f20 | 69 6e 67 2e 00 2a 2a 64 65 66 61 75 6c 74 2a 2a 20 e2 80 93 20 65 6e 61 62 6c 65 20 73 70 6c 69 | ing..**default**.....enable.spli |
a8f40 | 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 | t-horizon.on.wired.interfaces,.a |
a8f60 | 6e 64 20 64 69 73 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 77 69 72 65 | nd.disable.split-horizon.on.wire |
a8f80 | 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 20 2a 2a 65 6e 61 62 6c 65 2a 2a 20 e2 80 93 20 | less.interfaces..**enable**..... |
a8fa0 | 65 6e 61 62 6c 65 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 69 73 20 69 6e 74 | enable.split-horizon.on.this.int |
a8fc0 | 65 72 66 61 63 65 73 2e 20 2a 2a 64 69 73 61 62 6c 65 2a 2a 20 e2 80 93 20 64 69 73 61 62 6c 65 | erfaces..**disable**.....disable |
a8fe0 | 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 | .split-horizon.on.this.interface |
a9000 | 73 2e 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f 74 20 6e 65 67 6f 74 69 61 74 65 20 49 | s..**deny**.-.Do.not.negotiate.I |
a9020 | 50 76 34 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 44 6f 20 6e 6f 74 20 6e 65 67 6f 74 69 61 74 65 20 | Pv4.**deny**.-.Do.not.negotiate. |
a9040 | 49 50 76 36 20 28 64 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a 64 65 6e 79 2a 2a 20 2d 20 | IPv6.(default.value).**deny**.-. |
a9060 | 64 65 6e 79 20 6d 70 70 65 00 2a 2a 64 65 6e 79 2a 2a 3a 20 44 65 6e 79 20 73 65 63 6f 6e 64 20 | deny.mppe.**deny**:.Deny.second. |
a9080 | 73 65 73 73 69 6f 6e 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2e 00 2a 2a 64 65 73 74 69 6e 61 | session.authorization..**destina |
a90a0 | 74 69 6f 6e 2a 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 74 | tion**.-.specify.which.packets.t |
a90c0 | 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 | he.translation.will.be.applied.t |
a90e0 | 6f 2c 20 6f 6e 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e | o,.only.based.on.the.destination |
a9100 | 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f 72 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 63 6f 6e 66 | .address.and/or.port.number.conf |
a9120 | 69 67 75 72 65 64 2e 00 2a 2a 64 68 63 70 2a 2a 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 | igured..**dhcp**.interface.addre |
a9140 | 73 73 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 44 48 43 50 20 66 72 6f 6d 20 61 20 44 48 | ss.is.received.by.DHCP.from.a.DH |
a9160 | 43 50 20 73 65 72 76 65 72 20 6f 6e 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e 00 2a 2a 64 68 63 | CP.server.on.this.segment..**dhc |
a9180 | 70 76 36 2a 2a 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 63 65 69 | pv6**.interface.address.is.recei |
a91a0 | 76 65 64 20 62 79 20 44 48 43 50 76 36 20 66 72 6f 6d 20 61 20 44 48 43 50 76 36 20 73 65 72 76 | ved.by.DHCPv6.from.a.DHCPv6.serv |
a91c0 | 65 72 20 6f 6e 20 74 68 69 73 20 73 65 67 6d 65 6e 74 2e 00 2a 2a 64 69 73 61 62 6c 65 2a 2a 3a | er.on.this.segment..**disable**: |
a91e0 | 20 44 69 73 61 62 6c 65 73 20 73 65 73 73 69 6f 6e 20 63 6f 6e 74 72 6f 6c 2e 00 2a 2a 64 69 73 | .Disables.session.control..**dis |
a9200 | 63 61 72 64 3a 2a 2a 20 52 65 63 65 69 76 65 64 20 70 61 63 6b 65 74 73 20 77 68 69 63 68 20 61 | card:**.Received.packets.which.a |
a9220 | 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | lready.contain.relay.information |
a9240 | 20 77 69 6c 6c 20 62 65 20 64 69 73 63 61 72 64 65 64 2e 00 2a 2a 64 6f 77 6e 73 74 72 65 61 6d | .will.be.discarded..**downstream |
a9260 | 3a 2a 2a 20 44 6f 77 6e 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 | :**.Downstream.network.interface |
a9280 | 73 20 61 72 65 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 | s.are.the.distribution.interface |
a92a0 | 73 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 65 74 77 6f 72 6b 73 2c 20 77 | s.to.the.destination.networks,.w |
a92c0 | 68 65 72 65 20 6d 75 6c 74 69 63 61 73 74 20 63 6c 69 65 6e 74 73 20 63 61 6e 20 6a 6f 69 6e 20 | here.multicast.clients.can.join. |
a92e0 | 67 72 6f 75 70 73 20 61 6e 64 20 72 65 63 65 69 76 65 20 6d 75 6c 74 69 63 61 73 74 20 64 61 74 | groups.and.receive.multicast.dat |
a9300 | 61 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 | a..One.or.more.downstream.interf |
a9320 | 61 63 65 73 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 2a 2a 65 78 70 6f 72 | aces.must.be.configured..**expor |
a9340 | 74 65 72 2a 2a 3a 20 61 67 67 72 65 67 61 74 65 73 20 70 61 63 6b 65 74 73 20 69 6e 74 6f 20 66 | ter**:.aggregates.packets.into.f |
a9360 | 6c 6f 77 73 20 61 6e 64 20 65 78 70 6f 72 74 73 20 66 6c 6f 77 20 72 65 63 6f 72 64 73 20 74 6f | lows.and.exports.flow.records.to |
a9380 | 77 61 72 64 73 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 66 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 | wards.one.or.more.flow.collector |
a93a0 | 73 00 2a 2a 66 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 | s.**firewall.all-ping**.affects. |
a93c0 | 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 74 20 61 6c 77 61 79 73 20 62 65 68 61 | only.to.LOCAL.and.it.always.beha |
a93e0 | 76 65 73 20 69 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 74 72 69 63 74 69 76 65 20 77 61 79 00 | ves.in.the.most.restrictive.way. |
a9400 | 2a 2a 66 69 72 65 77 61 6c 6c 20 67 6c 6f 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 61 6c 6c 2d 70 69 | **firewall.global-options.all-pi |
a9420 | 6e 67 2a 2a 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 61 6e 64 20 69 | ng**.affects.only.to.LOCAL.and.i |
a9440 | 74 20 61 6c 77 61 79 73 20 62 65 68 61 76 65 73 20 69 6e 20 74 68 65 20 6d 6f 73 74 20 72 65 73 | t.always.behaves.in.the.most.res |
a9460 | 74 72 69 63 74 69 76 65 20 77 61 79 00 2a 2a 66 6f 72 77 61 72 64 3a 2a 2a 20 41 6c 6c 20 70 61 | trictive.way.**forward:**.All.pa |
a9480 | 63 6b 65 74 73 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 2c 20 72 65 6c 61 79 20 69 6e 66 6f 72 | ckets.are.forwarded,.relay.infor |
a94a0 | 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 77 69 6c 6c 20 62 65 20 69 | mation.already.present.will.be.i |
a94c0 | 67 6e 6f 72 65 64 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 | gnored..**inbound-interface**.-. |
a94e0 | 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 | applicable.only.to.:ref:`destina |
a9500 | 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 69 6e 74 | tion-nat`..It.configures.the.int |
a9520 | 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 69 6e 73 | erface.which.is.used.for.the.ins |
a9540 | 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 | ide.traffic.the.translation.rule |
a9560 | 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 | .applies.to..**inbound-interface |
a9580 | 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 3a 60 64 65 | **.-.applicable.only.to.:ref:`de |
a95a0 | 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 | stination-nat`..It.configures.th |
a95c0 | 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 | e.interface.which.is.used.for.th |
a95e0 | 65 20 69 6e 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e | e.inside.traffic.the.translation |
a9600 | 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 49 6e 74 65 72 66 61 63 65 20 67 72 6f 75 | .rule.applies.to..Interface.grou |
a9620 | 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 | ps,.inverted.selection.and.wildc |
a9640 | 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 2a 2a 69 70 76 34 2d | ard,.are.also.supported..**ipv4- |
a9660 | 61 64 64 72 2a 2a 20 2d 20 43 61 6c 63 75 6c 61 74 65 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 | addr**.-.Calculate.interface.ide |
a9680 | 6e 74 69 66 69 65 72 20 66 72 6f 6d 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 2a 2a 6c 32 2a | ntifier.from.IPv4.address..**l2* |
a96a0 | 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 68 61 74 20 63 6c 69 65 6e 74 73 20 61 72 65 20 6f 6e 20 | *:.It.means.that.clients.are.on. |
a96c0 | 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 77 68 65 72 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 2e | same.network.where.interface.is. |
a96e0 | 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 6c 61 79 65 72 32 2a 2a 20 2d 20 55 73 65 73 20 | **(default)**.**layer2**.-.Uses. |
a9700 | 58 4f 52 20 6f 66 20 68 61 72 64 77 61 72 65 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 20 61 6e | XOR.of.hardware.MAC.addresses.an |
a9720 | 64 20 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 20 66 69 65 6c 64 20 74 6f 20 67 65 6e 65 72 61 | d.packet.type.ID.field.to.genera |
a9740 | 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 00 2a 2a 6c 61 | te.the.hash..The.formula.is.**la |
a9760 | 79 65 72 32 2b 33 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c 69 63 79 20 75 73 65 73 20 61 20 63 6f | yer2+3**.-.This.policy.uses.a.co |
a9780 | 6d 62 69 6e 61 74 69 6f 6e 20 6f 66 20 6c 61 79 65 72 32 20 61 6e 64 20 6c 61 79 65 72 33 20 70 | mbination.of.layer2.and.layer3.p |
a97a0 | 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 67 65 6e 65 72 61 74 65 20 | rotocol.information.to.generate. |
a97c0 | 74 68 65 20 68 61 73 68 2e 20 55 73 65 73 20 58 4f 52 20 6f 66 20 68 61 72 64 77 61 72 65 20 4d | the.hash..Uses.XOR.of.hardware.M |
a97e0 | 41 43 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f | AC.addresses.and.IP.addresses.to |
a9800 | 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 65 20 66 6f 72 6d 75 6c 61 20 | .generate.the.hash..The.formula. |
a9820 | 69 73 3a 00 2a 2a 6c 61 79 65 72 33 2b 34 2a 2a 20 2d 20 54 68 69 73 20 70 6f 6c 69 63 79 20 75 | is:.**layer3+4**.-.This.policy.u |
a9840 | 73 65 73 20 75 70 70 65 72 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 | ses.upper.layer.protocol.informa |
a9860 | 74 69 6f 6e 2c 20 77 68 65 6e 20 61 76 61 69 6c 61 62 6c 65 2c 20 74 6f 20 67 65 6e 65 72 61 74 | tion,.when.available,.to.generat |
a9880 | 65 20 74 68 65 20 68 61 73 68 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 74 72 61 66 | e.the.hash..This.allows.for.traf |
a98a0 | 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 | fic.to.a.particular.network.peer |
a98c0 | 20 74 6f 20 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 73 2c 20 61 6c 74 68 6f 75 | .to.span.multiple.slaves,.althou |
a98e0 | 67 68 20 61 20 73 69 6e 67 6c 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 | gh.a.single.connection.will.not. |
a9900 | 73 70 61 6e 20 6d 75 6c 74 69 70 6c 65 20 73 6c 61 76 65 73 2e 00 2a 2a 6c 65 66 74 2a 2a 00 2a | span.multiple.slaves..**left**.* |
a9920 | 2a 6c 65 76 65 6c 2d 31 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 20 73 74 61 74 69 6f 6e 20 28 4c | *level-1**.-.Act.as.a.station.(L |
a9940 | 65 76 65 6c 20 31 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2a 2a | evel.1).router.only..**level-1** |
a9960 | 20 2d 20 4c 65 76 65 6c 2d 31 20 6f 6e 6c 79 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 | .-.Level-1.only.adjacencies.are. |
a9980 | 66 6f 72 6d 65 64 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 2a 2a 20 2d 20 41 63 74 20 61 73 20 61 | formed..**level-1-2**.-.Act.as.a |
a99a0 | 20 73 74 61 74 69 6f 6e 20 28 4c 65 76 65 6c 20 31 29 20 72 6f 75 74 65 72 20 61 6e 64 20 61 72 | .station.(Level.1).router.and.ar |
a99c0 | 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 2e 00 2a 2a 6c 65 76 65 6c 2d 31 2d 32 | ea.(Level.2).router..**level-1-2 |
a99e0 | 2a 2a 20 2d 20 4c 65 76 65 6c 2d 31 2d 32 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 | **.-.Level-1-2.adjacencies.are.f |
a9a00 | 6f 72 6d 65 64 00 2a 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 41 63 74 20 61 73 20 | ormed.**level-2-only**.-.Act.as. |
a9a20 | 61 6e 20 61 72 65 61 20 28 4c 65 76 65 6c 20 32 29 20 72 6f 75 74 65 72 20 6f 6e 6c 79 2e 00 2a | an.area.(Level.2).router.only..* |
a9a40 | 2a 6c 65 76 65 6c 2d 32 2d 6f 6e 6c 79 2a 2a 20 2d 20 4c 65 76 65 6c 2d 32 20 6f 6e 6c 79 20 61 | *level-2-only**.-.Level-2.only.a |
a9a60 | 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 66 6f 72 6d 65 64 00 2a 2a 6c 6f 63 61 6c 20 73 69 | djacencies.are.formed.**local.si |
a9a80 | 64 65 20 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 6c 6f 63 61 6c 2a 2a 3a 20 41 6c 6c 20 61 | de.-.commands**.**local**:.All.a |
a9aa0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 65 73 20 61 72 65 20 68 61 6e 64 6c 65 | uthentication.queries.are.handle |
a9ac0 | 64 20 6c 6f 63 61 6c 6c 79 2e 00 2a 2a 6c 6f 63 61 6c 2a 2a 3a 20 49 74 20 6d 65 61 6e 73 20 74 | d.locally..**local**:.It.means.t |
a9ae0 | 68 61 74 20 63 6c 69 65 6e 74 20 61 72 65 20 62 65 68 69 6e 64 20 73 6f 6d 65 20 72 6f 75 74 65 | hat.client.are.behind.some.route |
a9b00 | 72 2e 00 2a 2a 6c 6f 67 2d 66 61 69 6c 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 | r..**log-fail**.In.this.mode,.th |
a9b20 | 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 76 61 6c 69 64 | e.recursor.will.attempt.to.valid |
a9b40 | 61 74 65 20 61 6c 6c 20 64 61 74 61 20 69 74 20 72 65 74 72 69 65 76 65 73 20 66 72 6f 6d 20 61 | ate.all.data.it.retrieves.from.a |
a9b60 | 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 73 2c 20 72 65 67 61 72 64 6c 65 73 73 | uthoritative.servers,.regardless |
a9b80 | 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 44 4e 53 53 45 43 20 64 65 73 69 72 65 73 2c | .of.the.client's.DNSSEC.desires, |
a9ba0 | 20 61 6e 64 20 77 69 6c 6c 20 6c 6f 67 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 73 | .and.will.log.the.validation.res |
a9bc0 | 75 6c 74 2e 20 54 68 69 73 20 6d 6f 64 65 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 64 65 | ult..This.mode.can.be.used.to.de |
a9be0 | 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 72 61 20 6c 6f 61 64 20 61 6e 64 20 61 6d 6f 75 6e | termine.the.extra.load.and.amoun |
a9c00 | 74 20 6f 66 20 70 6f 73 73 69 62 6c 79 20 62 6f 67 75 73 20 61 6e 73 77 65 72 73 20 62 65 66 6f | t.of.possibly.bogus.answers.befo |
a9c20 | 72 65 20 74 75 72 6e 69 6e 67 20 6f 6e 20 66 75 6c 6c 2d 62 6c 6f 77 6e 20 76 61 6c 69 64 61 74 | re.turning.on.full-blown.validat |
a9c40 | 69 6f 6e 2e 20 52 65 73 70 6f 6e 73 65 73 20 74 6f 20 63 6c 69 65 6e 74 20 71 75 65 72 69 65 73 | ion..Responses.to.client.queries |
a9c60 | 20 61 72 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 77 69 74 68 20 70 72 6f 63 65 73 73 2e 00 2a | .are.the.same.as.with.process..* |
a9c80 | 2a 6c 6f 6f 6b 75 70 2d 61 2a 2a 20 41 20 46 6c 61 67 2e 00 2a 2a 6c 6f 6f 6b 75 70 2d 73 72 76 | *lookup-a**.A.Flag..**lookup-srv |
a9ca0 | 2a 2a 20 53 20 66 6c 61 67 2e 00 2a 2a 6e 61 72 72 6f 77 2a 2a 20 2d 20 55 73 65 20 6f 6c 64 20 | **.S.flag..**narrow**.-.Use.old. |
a9cc0 | 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 77 69 74 68 20 6e 61 72 72 6f 77 20 6d 65 74 72 69 63 | style.of.TLVs.with.narrow.metric |
a9ce0 | 2e 00 2a 2a 6e 65 74 2d 61 64 6d 69 6e 2a 2a 3a 20 4e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 | ..**net-admin**:.Network.operati |
a9d00 | 6f 6e 73 20 28 69 6e 74 65 72 66 61 63 65 2c 20 66 69 72 65 77 61 6c 6c 2c 20 72 6f 75 74 69 6e | ons.(interface,.firewall,.routin |
a9d20 | 67 20 74 61 62 6c 65 73 29 00 2a 2a 6e 65 74 2d 62 69 6e 64 2d 73 65 72 76 69 63 65 2a 2a 3a 20 | g.tables).**net-bind-service**:. |
a9d40 | 42 69 6e 64 20 61 20 73 6f 63 6b 65 74 20 74 6f 20 70 72 69 76 69 6c 65 67 65 64 20 70 6f 72 74 | Bind.a.socket.to.privileged.port |
a9d60 | 73 20 28 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 6c 65 73 73 20 74 68 61 6e 20 31 30 32 34 29 00 | s.(port.numbers.less.than.1024). |
a9d80 | 2a 2a 6e 65 74 2d 72 61 77 2a 2a 3a 20 50 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 63 72 65 61 74 | **net-raw**:.Permission.to.creat |
a9da0 | 65 20 72 61 77 20 6e 65 74 77 6f 72 6b 20 73 6f 63 6b 65 74 73 00 2a 2a 6e 6f 2a 2a 3a 20 44 6f | e.raw.network.sockets.**no**:.Do |
a9dc0 | 20 6e 6f 74 20 72 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 6f 6e 20 65 78 69 74 00 | .not.restart.containers.on.exit. |
a9de0 | 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 69 73 61 62 | **noauth**:.Authentication.disab |
a9e00 | 6c 65 64 00 2a 2a 6e 6f 61 75 74 68 2a 2a 3a 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 | led.**noauth**:.Authentication.d |
a9e20 | 69 73 61 62 6c 65 64 2e 00 2a 2a 6f 66 66 2a 2a 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 6e | isabled..**off**.In.this.mode,.n |
a9e40 | 6f 20 44 4e 53 53 45 43 20 70 72 6f 63 65 73 73 69 6e 67 20 74 61 6b 65 73 20 70 6c 61 63 65 2e | o.DNSSEC.processing.takes.place. |
a9e60 | 20 54 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c 20 6e 6f 74 20 73 65 74 20 74 68 65 20 44 | .The.recursor.will.not.set.the.D |
a9e80 | 4e 53 53 45 43 20 4f 4b 20 28 44 4f 29 20 62 69 74 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e | NSSEC.OK.(DO).bit.in.the.outgoin |
a9ea0 | 67 20 71 75 65 72 69 65 73 20 61 6e 64 20 77 69 6c 6c 20 69 67 6e 6f 72 65 20 74 68 65 20 44 4f | g.queries.and.will.ignore.the.DO |
a9ec0 | 20 61 6e 64 20 41 44 20 62 69 74 73 20 69 6e 20 71 75 65 72 69 65 73 2e 00 2a 2a 6f 6e 2d 66 61 | .and.AD.bits.in.queries..**on-fa |
a9ee0 | 69 6c 75 72 65 2a 2a 3a 20 52 65 73 74 61 72 74 20 63 6f 6e 74 61 69 6e 65 72 73 20 77 68 65 6e | ilure**:.Restart.containers.when |
a9f00 | 20 74 68 65 79 20 65 78 69 74 20 77 69 74 68 20 61 20 6e 6f 6e 2d 7a 65 72 6f 20 65 78 69 74 20 | .they.exit.with.a.non-zero.exit. |
a9f20 | 63 6f 64 65 2c 20 72 65 74 72 79 69 6e 67 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 20 28 64 65 66 | code,.retrying.indefinitely.(def |
a9f40 | 61 75 6c 74 29 00 2a 2a 6f 72 64 65 72 2a 2a 20 52 75 6c 65 20 6f 72 64 65 72 2e 20 52 65 71 75 | ault).**order**.Rule.order..Requ |
a9f60 | 69 72 65 73 20 60 3c 76 61 6c 75 65 3e 60 2e 00 2a 2a 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 | ires.`<value>`..**outbound-inter |
a9f80 | 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 20 74 6f 20 3a 72 65 66 | face**.-.applicable.only.to.:ref |
a9fa0 | 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 | :`source-nat`..It.configures.the |
a9fc0 | 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 | .interface.which.is.used.for.the |
a9fe0 | 20 6f 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 69 73 20 74 72 61 6e 73 | .outside.traffic.that.this.trans |
aa000 | 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 00 2a 2a 6f 75 74 62 6f 75 | lation.rule.applies.to..**outbou |
aa020 | 6e 64 2d 69 6e 74 65 72 66 61 63 65 2a 2a 20 2d 20 61 70 70 6c 69 63 61 62 6c 65 20 6f 6e 6c 79 | nd-interface**.-.applicable.only |
aa040 | 20 74 6f 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 2e 20 49 74 20 63 6f 6e 66 69 67 | .to.:ref:`source-nat`..It.config |
aa060 | 75 72 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 75 73 65 64 | ures.the.interface.which.is.used |
aa080 | 20 66 6f 72 20 74 68 65 20 6f 75 74 73 69 64 65 20 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 | .for.the.outside.traffic.that.th |
aa0a0 | 69 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 | is.translation.rule.applies.to.. |
aa0c0 | 49 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 73 2c 20 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 | Interface.groups,.inverted.selec |
aa0e0 | 74 69 6f 6e 20 61 6e 64 20 77 69 6c 64 63 61 72 64 2c 20 61 72 65 20 61 6c 73 6f 20 73 75 70 70 | tion.and.wildcard,.are.also.supp |
aa100 | 6f 72 74 65 64 2e 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 63 6c 69 65 6e 74 20 66 | orted..**prefer**.-.Ask.client.f |
aa120 | 6f 72 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 66 61 69 6c | or.IPv4.negotiation,.do.not.fail |
aa140 | 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 41 73 6b 20 | .if.it.rejects.**prefer**.-.Ask. |
aa160 | 63 6c 69 65 6e 74 20 66 6f 72 20 49 50 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 64 6f 20 | client.for.IPv6.negotiation,.do. |
aa180 | 6e 6f 74 20 66 61 69 6c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 00 2a 2a 70 72 65 66 65 72 2a | not.fail.if.it.rejects.**prefer* |
aa1a0 | 2a 20 2d 20 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 | *.-.ask.client.for.mppe,.if.it.r |
aa1c0 | 65 6a 65 63 74 73 20 64 6f 6e 27 74 20 66 61 69 6c 00 2a 2a 70 72 65 66 65 72 2a 2a 20 2d 20 61 | ejects.don't.fail.**prefer**.-.a |
aa1e0 | 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 | sk.client.for.mppe,.if.it.reject |
aa200 | 73 20 64 6f 6e 27 74 20 66 61 69 6c 2e 20 28 44 65 66 61 75 6c 74 20 76 61 6c 75 65 29 00 2a 2a | s.don't.fail..(Default.value).** |
aa220 | 70 72 65 66 65 72 65 6e 63 65 2a 2a 20 52 75 6c 65 20 70 72 65 66 65 72 65 6e 63 65 2e 20 52 65 | preference**.Rule.preference..Re |
aa240 | 71 75 69 72 65 73 20 60 3c 76 61 6c 75 65 3e 60 2e 20 44 65 66 61 75 6c 74 73 20 74 6f 20 30 20 | quires.`<value>`..Defaults.to.0. |
aa260 | 69 66 20 6e 6f 74 20 73 65 74 2e 00 2a 2a 70 72 6f 63 65 73 73 2a 2a 20 57 68 65 6e 20 64 6e 73 | if.not.set..**process**.When.dns |
aa280 | 73 65 63 20 69 73 20 73 65 74 20 74 6f 20 70 72 6f 63 65 73 73 20 74 68 65 20 62 65 68 61 76 69 | sec.is.set.to.process.the.behavi |
aa2a0 | 6f 72 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 70 72 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 | or.is.similar.to.process-no-vali |
aa2c0 | 64 61 74 65 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 77 69 6c 6c | date..However,.the.recursor.will |
aa2e0 | 20 74 72 79 20 74 6f 20 76 61 6c 69 64 61 74 65 20 74 68 65 20 64 61 74 61 20 69 66 20 61 74 20 | .try.to.validate.the.data.if.at. |
aa300 | 6c 65 61 73 74 20 6f 6e 65 20 6f 66 20 74 68 65 20 44 4f 20 6f 72 20 41 44 20 62 69 74 73 20 69 | least.one.of.the.DO.or.AD.bits.i |
aa320 | 73 20 73 65 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 3b 20 69 6e 20 74 68 61 74 20 63 61 73 65 | s.set.in.the.query;.in.that.case |
aa340 | 2c 20 69 74 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 41 44 2d 62 69 74 20 69 6e 20 74 68 65 20 | ,.it.will.set.the.AD-bit.in.the. |
aa360 | 72 65 73 70 6f 6e 73 65 20 77 68 65 6e 20 74 68 65 20 64 61 74 61 20 69 73 20 76 61 6c 69 64 61 | response.when.the.data.is.valida |
aa380 | 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 2c 20 6f 72 20 73 65 6e 64 20 53 45 52 56 46 41 | ted.successfully,.or.send.SERVFA |
aa3a0 | 49 4c 20 77 68 65 6e 20 74 68 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 63 6f 6d 65 73 20 75 70 20 | IL.when.the.validation.comes.up. |
aa3c0 | 62 6f 67 75 73 2e 00 2a 2a 70 72 6f 63 65 73 73 2d 6e 6f 2d 76 61 6c 69 64 61 74 65 2a 2a 20 49 | bogus..**process-no-validate**.I |
aa3e0 | 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 61 63 74 73 20 61 73 | n.this.mode.the.recursor.acts.as |
aa400 | 20 61 20 22 73 65 63 75 72 69 74 79 20 61 77 61 72 65 2c 20 6e 6f 6e 2d 76 61 6c 69 64 61 74 69 | .a."security.aware,.non-validati |
aa420 | 6e 67 22 20 6e 61 6d 65 73 65 72 76 65 72 2c 20 6d 65 61 6e 69 6e 67 20 69 74 20 77 69 6c 6c 20 | ng".nameserver,.meaning.it.will. |
aa440 | 73 65 74 20 74 68 65 20 44 4f 2d 62 69 74 20 6f 6e 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 | set.the.DO-bit.on.outgoing.queri |
aa460 | 65 73 20 61 6e 64 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 44 4e 53 53 45 43 20 72 65 6c 61 74 | es.and.will.provide.DNSSEC.relat |
aa480 | 65 64 20 52 52 73 65 74 73 20 28 4e 53 45 43 2c 20 52 52 53 49 47 29 20 74 6f 20 63 6c 69 65 6e | ed.RRsets.(NSEC,.RRSIG).to.clien |
aa4a0 | 74 73 20 74 68 61 74 20 61 73 6b 20 66 6f 72 20 74 68 65 6d 20 28 62 79 20 6d 65 61 6e 73 20 6f | ts.that.ask.for.them.(by.means.o |
aa4c0 | 66 20 61 20 44 4f 2d 62 69 74 20 69 6e 20 74 68 65 20 71 75 65 72 79 29 2c 20 65 78 63 65 70 74 | f.a.DO-bit.in.the.query),.except |
aa4e0 | 20 66 6f 72 20 7a 6f 6e 65 73 20 70 72 6f 76 69 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 | .for.zones.provided.through.the. |
aa500 | 61 75 74 68 2d 7a 6f 6e 65 73 20 73 65 74 74 69 6e 67 2e 20 49 74 20 77 69 6c 6c 20 6e 6f 74 20 | auth-zones.setting..It.will.not. |
aa520 | 64 6f 20 61 6e 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 | do.any.validation.in.this.mode,. |
aa540 | 6e 6f 74 20 65 76 65 6e 20 77 68 65 6e 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 63 | not.even.when.requested.by.the.c |
aa560 | 6c 69 65 6e 74 2e 00 2a 2a 70 72 6f 74 6f 63 6f 6c 2a 2a 20 2d 20 73 70 65 63 69 66 79 20 77 68 | lient..**protocol**.-.specify.wh |
aa580 | 69 63 68 20 74 79 70 65 73 20 6f 66 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 69 73 20 74 72 61 6e | ich.types.of.protocols.this.tran |
aa5a0 | 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 70 6c 69 65 73 20 74 6f 2e 20 4f 6e 6c 79 20 70 61 | slation.rule.applies.to..Only.pa |
aa5c0 | 63 6b 65 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f | ckets.matching.the.specified.pro |
aa5e0 | 74 6f 63 6f 6c 20 61 72 65 20 4e 41 54 65 64 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 69 73 | tocol.are.NATed..By.default.this |
aa600 | 20 61 70 70 6c 69 65 73 20 74 6f 20 60 61 6c 6c 60 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 2a 2a 70 | .applies.to.`all`.protocols..**p |
aa620 | 72 6f 74 6f 63 6f 6c 2d 73 70 65 63 69 66 69 63 2a 2a 20 50 20 66 6c 61 67 2e 00 2a 2a 72 61 64 | rotocol-specific**.P.flag..**rad |
aa640 | 69 75 73 2a 2a 3a 20 41 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 71 75 65 72 69 65 | ius**:.All.authentication.querie |
aa660 | 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 62 79 20 61 20 63 6f 6e 66 69 67 75 72 65 64 20 52 41 | s.are.handled.by.a.configured.RA |
aa680 | 44 49 55 53 20 73 65 72 76 65 72 2e 00 2a 2a 72 61 6e 64 6f 6d 2a 2a 20 2d 20 52 61 6e 64 6f 6d | DIUS.server..**random**.-.Random |
aa6a0 | 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 00 2a | .interface.identifier.for.IPv6.* |
aa6c0 | 2a 72 65 67 65 78 70 2a 2a 20 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 20 52 65 | *regexp**.Regular.expression..Re |
aa6e0 | 71 75 69 72 65 73 20 60 3c 76 61 6c 75 65 3e 60 2e 00 2a 2a 72 65 6d 6f 74 65 20 73 69 64 65 20 | quires.`<value>`..**remote.side. |
aa700 | 2d 20 63 6f 6d 6d 61 6e 64 73 2a 2a 00 2a 2a 72 65 70 6c 61 63 65 2a 2a 3a 20 54 65 72 6d 69 6e | -.commands**.**replace**:.Termin |
aa720 | 61 74 65 20 66 69 72 73 74 20 73 65 73 73 69 6f 6e 20 77 68 65 6e 20 73 65 63 6f 6e 64 20 69 73 | ate.first.session.when.second.is |
aa740 | 20 61 75 74 68 6f 72 69 7a 65 64 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 2a 2a 72 65 70 6c | .authorized.**(default)**.**repl |
aa760 | 61 63 65 3a 2a 2a 20 52 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6c 72 65 61 64 79 | ace:**.Relay.information.already |
aa780 | 20 70 72 65 73 65 6e 74 20 69 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 73 74 72 69 70 70 65 64 | .present.in.a.packet.is.stripped |
aa7a0 | 20 61 6e 64 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 27 73 20 | .and.replaced.with.the.router's. |
aa7c0 | 6f 77 6e 20 72 65 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 65 74 2e 00 2a 2a 72 65 70 | own.relay.information.set..**rep |
aa7e0 | 6c 61 63 65 6d 65 6e 74 2a 2a 20 52 65 70 6c 61 63 65 6d 65 6e 74 20 44 4e 53 20 6e 61 6d 65 2e | lacement**.Replacement.DNS.name. |
aa800 | 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 76 34 20 6e 65 67 6f | .**require**.-.Require.IPv4.nego |
aa820 | 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 52 65 71 75 69 72 65 20 49 50 | tiation.**require**.-.Require.IP |
aa840 | 76 36 20 6e 65 67 6f 74 69 61 74 69 6f 6e 00 2a 2a 72 65 71 75 69 72 65 2a 2a 20 2d 20 61 73 6b | v6.negotiation.**require**.-.ask |
aa860 | 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 69 66 20 69 74 20 72 65 6a 65 63 74 73 20 | .client.for.mppe,.if.it.rejects. |
aa880 | 64 72 6f 70 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 2a 2a 72 65 73 6f 6c 76 65 2d 75 72 69 2a 2a 20 | drop.connection.**resolve-uri**. |
aa8a0 | 55 20 66 6c 61 67 2e 00 2a 2a 72 69 67 68 74 2a 2a 00 2a 2a 73 65 72 76 69 63 65 2a 2a 20 53 65 | U.flag..**right**.**service**.Se |
aa8c0 | 72 76 69 63 65 20 74 79 70 65 2e 20 52 65 71 75 69 72 65 73 20 60 3c 76 61 6c 75 65 3e 60 2e 00 | rvice.type..Requires.`<value>`.. |
aa8e0 | 2a 2a 73 65 74 70 63 61 70 2a 2a 3a 20 43 61 70 61 62 69 6c 69 74 79 20 73 65 74 73 20 28 66 72 | **setpcap**:.Capability.sets.(fr |
aa900 | 6f 6d 20 62 6f 75 6e 64 65 64 20 6f 72 20 69 6e 68 65 72 69 74 65 64 20 73 65 74 29 00 2a 2a 73 | om.bounded.or.inherited.set).**s |
aa920 | 68 61 72 65 64 2a 2a 3a 20 4d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 20 73 68 61 72 65 20 | hared**:.Multiple.clients.share. |
aa940 | 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b 2e 20 2a 2a 28 64 65 66 61 75 6c 74 29 2a 2a 00 | the.same.network..**(default)**. |
aa960 | 2a 2a 73 6f 75 72 63 65 2a 2a 20 2d 20 73 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 70 61 63 | **source**.-.specifies.which.pac |
aa980 | 6b 65 74 73 20 74 68 65 20 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 6c 65 20 61 70 | kets.the.NAT.translation.rule.ap |
aa9a0 | 70 6c 69 65 73 20 74 6f 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 70 61 63 6b 65 74 73 20 73 6f | plies.to.based.on.the.packets.so |
aa9c0 | 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 70 6f | urce.IP.address.and/or.source.po |
aa9e0 | 72 74 2e 20 4f 6e 6c 79 20 6d 61 74 63 68 69 6e 67 20 70 61 63 6b 65 74 73 20 61 72 65 20 63 6f | rt..Only.matching.packets.are.co |
aaa00 | 6e 73 69 64 65 72 65 64 20 66 6f 72 20 4e 41 54 2e 00 2a 2a 73 79 73 2d 61 64 6d 69 6e 2a 2a 3a | nsidered.for.NAT..**sys-admin**: |
aaa20 | 20 41 64 6d 69 6e 69 73 74 61 74 69 6f 6e 20 6f 70 65 72 61 74 69 6f 6e 73 20 28 71 75 6f 74 61 | .Administation.operations.(quota |
aaa40 | 63 74 6c 2c 20 6d 6f 75 6e 74 2c 20 73 65 74 68 6f 73 74 6e 61 6d 65 2c 20 73 65 74 64 6f 6d 61 | ctl,.mount,.sethostname,.setdoma |
aaa60 | 69 6e 61 6d 65 29 00 2a 2a 73 79 73 2d 74 69 6d 65 2a 2a 3a 20 50 65 72 6d 69 73 73 69 6f 6e 20 | iname).**sys-time**:.Permission. |
aaa80 | 74 6f 20 73 65 74 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 00 2a 2a 74 72 61 6e 73 69 74 69 6f 6e | to.set.system.clock.**transition |
aaaa0 | 2a 2a 20 2d 20 53 65 6e 64 20 61 6e 64 20 61 63 63 65 70 74 20 62 6f 74 68 20 73 74 79 6c 65 73 | **.-.Send.and.accept.both.styles |
aaac0 | 20 6f 66 20 54 4c 56 73 20 64 75 72 69 6e 67 20 74 72 61 6e 73 69 74 69 6f 6e 2e 00 2a 2a 75 70 | .of.TLVs.during.transition..**up |
aaae0 | 73 74 72 65 61 6d 3a 2a 2a 20 54 68 65 20 75 70 73 74 72 65 61 6d 20 6e 65 74 77 6f 72 6b 20 69 | stream:**.The.upstream.network.i |
aab00 | 6e 74 65 72 66 61 63 65 20 69 73 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 | nterface.is.the.outgoing.interfa |
aab20 | 63 65 20 77 68 69 63 68 20 69 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 63 6f 6d 6d | ce.which.is.responsible.for.comm |
aab40 | 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 61 76 61 69 6c 61 62 6c 65 20 6d 75 6c 74 69 63 61 73 74 | unicating.to.available.multicast |
aab60 | 20 64 61 74 61 20 73 6f 75 72 63 65 73 2e 20 54 68 65 72 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 | .data.sources..There.can.only.be |
aab80 | 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2e 00 2a 2a 76 61 6c 69 64 | .one.upstream.interface..**valid |
aaba0 | 61 74 65 2a 2a 20 54 68 65 20 68 69 67 68 65 73 74 20 6d 6f 64 65 20 6f 66 20 44 4e 53 53 45 43 | ate**.The.highest.mode.of.DNSSEC |
aabc0 | 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 61 6c 6c 20 71 | .processing..In.this.mode,.all.q |
aabe0 | 75 65 72 69 65 73 20 77 69 6c 6c 20 62 65 20 76 61 6c 69 64 61 74 65 64 20 61 6e 64 20 77 69 6c | ueries.will.be.validated.and.wil |
aac00 | 6c 20 62 65 20 61 6e 73 77 65 72 65 64 20 77 69 74 68 20 61 20 53 45 52 56 46 41 49 4c 20 69 6e | l.be.answered.with.a.SERVFAIL.in |
aac20 | 20 63 61 73 65 20 6f 66 20 62 6f 67 75 73 20 64 61 74 61 2c 20 72 65 67 61 72 64 6c 65 73 73 20 | .case.of.bogus.data,.regardless. |
aac40 | 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 72 65 71 75 65 73 74 2e 00 2a 2a 76 6c 61 6e 2a | of.the.client's.request..**vlan* |
aac60 | 2a 3a 20 4f 6e 65 20 56 4c 41 4e 20 70 65 72 20 63 6c 69 65 6e 74 2e 00 2a 2a 77 69 64 65 2a 2a | *:.One.VLAN.per.client..**wide** |
aac80 | 20 2d 20 55 73 65 20 6e 65 77 20 73 74 79 6c 65 20 6f 66 20 54 4c 56 73 20 74 6f 20 63 61 72 72 | .-.Use.new.style.of.TLVs.to.carr |
aaca0 | 79 20 77 69 64 65 72 20 6d 65 74 72 69 63 2e 00 2a 2a 78 3a 78 3a 78 3a 78 2a 2a 20 2d 20 53 70 | y.wider.metric..**x:x:x:x**.-.Sp |
aacc0 | 65 63 69 66 79 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 | ecify.interface.identifier.for.I |
aace0 | 50 76 36 00 2a 62 67 70 64 2a 20 73 75 70 70 6f 72 74 73 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f | Pv6.*bgpd*.supports.Multiprotoco |
aad00 | 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f 72 20 42 47 50 2e 20 53 6f 20 69 66 20 61 20 72 65 6d | l.Extension.for.BGP..So.if.a.rem |
aad20 | 6f 74 65 20 70 65 65 72 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 | ote.peer.supports.the.protocol,. |
aad40 | 2a 62 67 70 64 2a 20 63 61 6e 20 65 78 63 68 61 6e 67 65 20 49 50 76 36 20 61 6e 64 2f 6f 72 20 | *bgpd*.can.exchange.IPv6.and/or. |
aad60 | 6d 75 6c 74 69 63 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 30 | multicast.routing.information..0 |
aad80 | 00 30 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 6e | .0.if.not.defined,.which.means.n |
aada0 | 6f 20 72 65 66 72 65 73 68 69 6e 67 2e 00 30 20 69 66 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 | o.refreshing..0.if.not.defined.. |
aadc0 | 30 30 30 30 30 30 00 30 30 31 30 31 30 00 30 30 31 31 30 30 00 30 30 31 31 31 30 00 30 31 30 30 | 000000.001010.001100.001110.0100 |
aade0 | 31 30 00 30 31 30 31 30 30 00 30 31 30 31 31 30 00 30 31 31 30 31 30 00 30 31 31 31 30 30 00 30 | 10.010100.010110.011010.011100.0 |
aae00 | 31 31 31 31 30 00 30 3a 20 44 69 73 61 62 6c 65 20 44 41 44 00 31 00 31 20 69 66 20 6e 6f 74 20 | 11110.0:.Disable.DAD.1.1.if.not. |
aae20 | 64 65 66 69 6e 65 64 2e 00 31 2d 74 6f 2d 31 20 4e 41 54 00 31 2e 20 43 72 65 61 74 65 20 61 6e | defined..1-to-1.NAT.1..Create.an |
aae40 | 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 00 31 2e 20 46 69 72 73 74 20 70 61 63 6b 65 74 20 69 | .event.handler.1..First.packet.i |
aae60 | 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 65 68 74 30 2c 20 77 69 74 68 20 64 65 73 74 69 6e 61 | s.received.on.eht0,.with.destina |
aae80 | 74 69 6f 6e 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 30 30 2c 20 70 72 6f 74 6f 63 | tion.address.192.0.2.100,.protoc |
aaea0 | 6f 6c 20 74 63 70 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 31 31 32 32 | ol.tcp.and.destination.port.1122 |
aaec0 | 2e 20 41 73 73 75 6d 65 20 73 75 63 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 | ..Assume.such.destination.addres |
aaee0 | 73 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 74 68 72 6f 75 67 68 20 69 6e 74 65 72 66 61 63 65 | s.is.reachable.through.interface |
aaf00 | 20 65 74 68 31 2e 00 31 30 00 31 30 20 2d 20 31 30 20 4d 42 69 74 2f 73 00 31 30 2e 30 2e 30 2e | .eth1..10.10.-.10.MBit/s.10.0.0. |
aaf20 | 30 20 74 6f 20 31 30 2e 32 35 35 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 30 2e 30 2e | 0.to.10.255.255.255.(CIDR:.10.0. |
aaf40 | 30 2e 30 2f 38 29 00 31 30 30 20 2d 20 31 30 30 20 4d 42 69 74 2f 73 00 31 30 30 30 20 2d 20 31 | 0.0/8).100.-.100.MBit/s.1000.-.1 |
aaf60 | 20 47 42 69 74 2f 73 00 31 30 30 30 30 20 2d 20 31 30 20 47 42 69 74 2f 73 00 31 30 30 30 30 30 | .GBit/s.10000.-.10.GBit/s.100000 |
aaf80 | 20 2d 20 31 30 30 20 47 42 69 74 2f 73 00 31 30 30 30 31 30 00 31 30 30 31 30 30 00 31 30 30 31 | .-.100.GBit/s.100010.100100.1001 |
aafa0 | 31 30 00 31 30 31 31 31 30 00 31 31 00 31 31 39 00 31 32 00 31 32 31 2c 20 32 34 39 00 31 33 00 | 10.101110.11.119.12.121,.249.13. |
aafc0 | 31 34 00 31 35 00 31 36 00 31 37 00 31 37 32 2e 31 36 2e 30 2e 30 20 74 6f 20 31 37 32 2e 33 31 | 14.15.16.17.172.16.0.0.to.172.31 |
aafe0 | 2e 32 35 35 2e 32 35 35 20 28 43 49 44 52 3a 20 31 37 32 2e 31 36 2e 30 2e 30 2f 31 32 29 00 31 | .255.255.(CIDR:.172.16.0.0/12).1 |
ab000 | 38 00 31 39 00 31 39 32 2e 31 36 38 2e 30 2e 30 20 74 6f 20 31 39 32 2e 31 36 38 2e 32 35 35 2e | 8.19.192.168.0.0.to.192.168.255. |
ab020 | 32 35 35 20 28 43 49 44 52 3a 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 29 00 31 3a 20 45 6e | 255.(CIDR:.192.168.0.0/16).1:.En |
ab040 | 61 62 6c 65 20 44 41 44 20 28 64 65 66 61 75 6c 74 29 00 32 00 32 2e 20 41 64 64 20 72 65 67 65 | able.DAD.(default).2.2..Add.rege |
ab060 | 78 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 00 32 2e 20 53 69 6e 63 65 20 74 68 69 73 20 69 73 | x.to.the.script.2..Since.this.is |
ab080 | 20 74 68 65 20 66 69 72 73 74 20 70 61 63 6b 65 74 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 | .the.first.packet,.connection.st |
ab0a0 | 61 74 75 73 20 6f 66 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 73 6f 20 66 61 72 20 | atus.of.this.connection,.so.far. |
ab0c0 | 69 73 20 2a 2a 6e 65 77 2a 2a 2e 20 53 6f 20 6e 65 69 74 68 65 72 20 72 75 6c 65 20 31 30 20 6e | is.**new**..So.neither.rule.10.n |
ab0e0 | 6f 72 20 32 30 20 61 72 65 20 76 61 6c 69 64 2e 00 32 30 00 32 31 00 32 32 00 32 33 00 32 35 30 | or.20.are.valid..20.21.22.23.250 |
ab100 | 30 20 2d 20 32 2e 35 20 47 42 69 74 2f 73 00 32 35 30 30 30 20 2d 20 32 35 20 47 42 69 74 2f 73 | 0.-.2.5.GBit/s.25000.-.25.GBit/s |
ab120 | 00 32 35 32 00 32 36 00 32 38 00 32 3a 20 45 6e 61 62 6c 65 20 44 41 44 2c 20 61 6e 64 20 64 69 | .252.26.28.2:.Enable.DAD,.and.di |
ab140 | 73 61 62 6c 65 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 69 66 20 4d 41 43 2d 62 61 73 65 | sable.IPv6.operation.if.MAC-base |
ab160 | 64 20 64 75 70 6c 69 63 61 74 65 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 68 | d.duplicate.link-local.address.h |
ab180 | 61 73 20 62 65 65 6e 20 66 6f 75 6e 64 2e 00 32 46 41 20 4f 54 50 20 73 75 70 70 6f 72 74 00 33 | as.been.found..2FA.OTP.support.3 |
ab1a0 | 00 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 72 69 70 | .3..Add.a.full.path.to.the.scrip |
ab1c0 | 74 00 33 30 00 33 34 00 33 36 00 33 38 00 34 00 34 2e 20 41 64 64 20 6f 70 74 69 6f 6e 61 6c 20 | t.30.34.36.38.4.4..Add.optional. |
ab1e0 | 70 61 72 61 6d 65 74 65 72 73 00 34 2e 20 4f 6e 63 65 20 61 6e 73 77 65 72 20 66 72 6f 6d 20 73 | parameters.4..Once.answer.from.s |
ab200 | 65 72 76 65 72 20 31 39 32 2e 30 2e 32 2e 31 30 30 20 69 73 20 73 65 65 6e 20 69 6e 20 6f 70 70 | erver.192.0.2.100.is.seen.in.opp |
ab220 | 6f 73 69 74 65 20 64 69 72 65 63 74 69 6f 6e 2c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 | osite.direction,.connection.stat |
ab240 | 65 20 77 69 6c 6c 20 62 65 20 74 72 69 67 67 65 72 65 64 20 74 6f 20 2a 2a 65 73 74 61 62 6c 69 | e.will.be.triggered.to.**establi |
ab260 | 73 68 65 64 2a 2a 2c 20 73 6f 20 74 68 69 73 20 72 65 70 6c 79 20 69 73 20 61 63 63 65 70 74 65 | shed**,.so.this.reply.is.accepte |
ab280 | 64 20 69 6e 20 72 75 6c 65 20 31 30 2e 00 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 6d 61 | d.in.rule.10..40.MHz.channels.ma |
ab2a0 | 79 20 73 77 69 74 63 68 20 74 68 65 69 72 20 70 72 69 6d 61 72 79 20 61 6e 64 20 73 65 63 6f 6e | y.switch.their.primary.and.secon |
ab2c0 | 64 61 72 79 20 63 68 61 6e 6e 65 6c 73 20 69 66 20 6e 65 65 64 65 64 20 6f 72 20 63 72 65 61 74 | dary.channels.if.needed.or.creat |
ab2e0 | 69 6f 6e 20 6f 66 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 6d 61 79 62 65 20 72 65 6a 65 | ion.of.40.MHz.channel.maybe.reje |
ab300 | 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 42 53 53 65 73 2e | cted.based.on.overlapping.BSSes. |
ab320 | 20 54 68 65 73 65 20 63 68 61 6e 67 65 73 20 61 72 65 20 64 6f 6e 65 20 61 75 74 6f 6d 61 74 69 | .These.changes.are.done.automati |
ab340 | 63 61 6c 6c 79 20 77 68 65 6e 20 68 6f 73 74 61 70 64 20 69 73 20 73 65 74 74 69 6e 67 20 75 70 | cally.when.hostapd.is.setting.up |
ab360 | 20 74 68 65 20 34 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 2e 00 34 30 30 30 30 20 2d 20 34 30 20 | .the.40.MHz.channel..40000.-.40. |
ab380 | 47 42 69 74 2f 73 00 34 32 00 34 34 00 34 36 00 35 00 35 20 69 66 20 6e 6f 74 20 64 65 66 69 6e | GBit/s.42.44.46.5.5.if.not.defin |
ab3a0 | 65 64 2e 00 35 2e 20 53 65 63 6f 6e 64 20 70 61 63 6b 65 74 20 66 6f 72 20 74 68 69 73 20 63 6f | ed..5..Second.packet.for.this.co |
ab3c0 | 6e 6e 65 63 74 69 6f 6e 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 | nnection.is.received.by.the.rout |
ab3e0 | 65 72 2e 20 53 69 6e 63 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 69 73 20 2a 2a | er..Since.connection.state.is.** |
ab400 | 65 73 74 61 62 6c 69 73 68 65 64 2a 2a 2c 20 74 68 65 6e 20 72 75 6c 65 20 31 30 20 69 73 20 68 | established**,.then.rule.10.is.h |
ab420 | 69 74 2c 20 61 6e 64 20 61 20 6e 65 77 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 | it,.and.a.new.entry.in.the.flowt |
ab440 | 61 62 6c 65 20 46 54 30 31 20 69 73 20 61 64 64 65 64 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e | able.FT01.is.added.for.this.conn |
ab460 | 65 63 74 69 6f 6e 2e 00 35 30 30 30 20 2d 20 35 20 47 42 69 74 2f 73 00 35 30 30 30 30 20 2d 20 | ection..5000.-.5.GBit/s.50000.-. |
ab480 | 35 30 20 47 42 69 74 2f 73 00 35 34 00 36 00 36 2e 20 41 6c 6c 20 73 75 62 73 65 63 75 65 6e 74 | 50.GBit/s.54.6.6..All.subsecuent |
ab4a0 | 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 73 6b 69 70 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 70 | .packets.will.skip.traditional.p |
ab4c0 | 61 74 68 2c 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 6f 66 66 6c 6f 61 64 65 64 20 61 6e 64 20 77 | ath,.and.will.be.offloaded.and.w |
ab4e0 | 69 6c 6c 20 75 73 65 20 74 68 65 20 2a 2a 46 61 73 74 20 50 61 74 68 2a 2a 2e 00 36 36 00 36 36 | ill.use.the.**Fast.Path**..66.66 |
ab500 | 25 20 6f 66 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 74 6f 20 65 74 68 30 2c 20 | %.of.traffic.is.routed.to.eth0,. |
ab520 | 65 74 68 31 20 67 65 74 73 20 33 33 25 20 6f 66 20 74 72 61 66 66 69 63 2e 00 36 37 00 36 39 00 | eth1.gets.33%.of.traffic..67.69. |
ab540 | 36 69 6e 34 20 28 53 49 54 29 00 36 69 6e 34 20 75 73 65 73 20 74 75 6e 6e 65 6c 69 6e 67 20 74 | 6in4.(SIT).6in4.uses.tunneling.t |
ab560 | 6f 20 65 6e 63 61 70 73 75 6c 61 74 65 20 49 50 76 36 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 | o.encapsulate.IPv6.traffic.over. |
ab580 | 49 50 76 34 20 6c 69 6e 6b 73 20 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 | IPv4.links.as.defined.in.:rfc:`4 |
ab5a0 | 32 31 33 60 2e 20 54 68 65 20 36 69 6e 34 20 74 72 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 6f | 213`..The.6in4.traffic.is.sent.o |
ab5c0 | 76 65 72 20 49 50 76 34 20 69 6e 73 69 64 65 20 49 50 76 34 20 70 61 63 6b 65 74 73 20 77 68 6f | ver.IPv4.inside.IPv4.packets.who |
ab5e0 | 73 65 20 49 50 20 68 65 61 64 65 72 73 20 68 61 76 65 20 74 68 65 20 49 50 20 70 72 6f 74 6f 63 | se.IP.headers.have.the.IP.protoc |
ab600 | 6f 6c 20 6e 75 6d 62 65 72 20 73 65 74 20 74 6f 20 34 31 2e 20 54 68 69 73 20 70 72 6f 74 6f 63 | ol.number.set.to.41..This.protoc |
ab620 | 6f 6c 20 6e 75 6d 62 65 72 20 69 73 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 64 65 73 69 67 6e | ol.number.is.specifically.design |
ab640 | 61 74 65 64 20 66 6f 72 20 49 50 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2c 20 74 68 65 | ated.for.IPv6.encapsulation,.the |
ab660 | 20 49 50 76 34 20 70 61 63 6b 65 74 20 68 65 61 64 65 72 20 69 73 20 69 6d 6d 65 64 69 61 74 65 | .IPv4.packet.header.is.immediate |
ab680 | 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 74 68 65 20 49 50 76 36 20 70 61 63 6b 65 74 20 62 | ly.followed.by.the.IPv6.packet.b |
ab6a0 | 65 69 6e 67 20 63 61 72 72 69 65 64 2e 20 54 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 | eing.carried..The.encapsulation. |
ab6c0 | 6f 76 65 72 68 65 61 64 20 69 73 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 49 50 76 34 | overhead.is.the.size.of.the.IPv4 |
ab6e0 | 20 68 65 61 64 65 72 20 6f 66 20 32 30 20 62 79 74 65 73 2c 20 74 68 65 72 65 66 6f 72 65 20 77 | .header.of.20.bytes,.therefore.w |
ab700 | 69 74 68 20 61 6e 20 4d 54 55 20 6f 66 20 31 35 30 30 20 62 79 74 65 73 2c 20 49 50 76 36 20 70 | ith.an.MTU.of.1500.bytes,.IPv6.p |
ab720 | 61 63 6b 65 74 73 20 6f 66 20 31 34 38 30 20 62 79 74 65 73 20 63 61 6e 20 62 65 20 73 65 6e 74 | ackets.of.1480.bytes.can.be.sent |
ab740 | 20 77 69 74 68 6f 75 74 20 66 72 61 67 6d 65 6e 74 61 74 69 6f 6e 2e 20 54 68 69 73 20 74 75 6e | .without.fragmentation..This.tun |
ab760 | 6e 65 6c 69 6e 67 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 66 72 65 71 75 65 6e 74 6c 79 20 75 | neling.technique.is.frequently.u |
ab780 | 73 65 64 20 62 79 20 49 50 76 36 20 74 75 6e 6e 65 6c 20 62 72 6f 6b 65 72 73 20 6c 69 6b 65 20 | sed.by.IPv6.tunnel.brokers.like. |
ab7a0 | 60 48 75 72 72 69 63 61 6e 65 20 45 6c 65 63 74 72 69 63 60 5f 2e 00 37 00 37 30 00 38 00 38 30 | `Hurricane.Electric`_..7.70.8.80 |
ab7c0 | 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 72 65 70 72 65 73 65 | 2.1q.VLAN.interfaces.are.represe |
ab7e0 | 6e 74 65 64 20 61 73 20 76 69 72 74 75 61 6c 20 73 75 62 2d 69 6e 74 65 72 66 61 63 65 73 20 69 | nted.as.virtual.sub-interfaces.i |
ab800 | 6e 20 56 79 4f 53 2e 20 54 68 65 20 74 65 72 6d 20 75 73 65 64 20 66 6f 72 20 74 68 69 73 20 69 | n.VyOS..The.term.used.for.this.i |
ab820 | 73 20 60 60 76 69 66 60 60 2e 00 39 00 3a 61 62 62 72 3a 60 41 46 49 20 28 41 64 64 72 65 73 73 | s.``vif``..9.:abbr:`AFI.(Address |
ab840 | 20 66 61 6d 69 6c 79 20 61 75 74 68 6f 72 69 74 79 20 69 64 65 6e 74 69 66 69 65 72 29 60 20 2d | .family.authority.identifier)`.- |
ab860 | 20 60 60 34 39 60 60 20 54 68 65 20 41 46 49 20 76 61 6c 75 65 20 34 39 20 69 73 20 77 68 61 74 | .``49``.The.AFI.value.49.is.what |
ab880 | 20 49 53 2d 49 53 20 75 73 65 73 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 73 69 | .IS-IS.uses.for.private.addressi |
ab8a0 | 6e 67 2e 00 3a 61 62 62 72 3a 60 41 52 50 20 28 41 64 64 72 65 73 73 20 52 65 73 6f 6c 75 74 69 | ng..:abbr:`ARP.(Address.Resoluti |
ab8c0 | 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e | on.Protocol)`.is.a.communication |
ab8e0 | 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 64 69 73 63 6f 76 65 72 69 6e 67 20 74 | .protocol.used.for.discovering.t |
ab900 | 68 65 20 6c 69 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c 20 73 75 63 68 20 61 73 20 61 | he.link.layer.address,.such.as.a |
ab920 | 20 4d 41 43 20 61 64 64 72 65 73 73 2c 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 | .MAC.address,.associated.with.a. |
ab940 | 67 69 76 65 6e 20 69 6e 74 65 72 6e 65 74 20 6c 61 79 65 72 20 61 64 64 72 65 73 73 2c 20 74 79 | given.internet.layer.address,.ty |
ab960 | 70 69 63 61 6c 6c 79 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 6d 61 | pically.an.IPv4.address..This.ma |
ab980 | 70 70 69 6e 67 20 69 73 20 61 20 63 72 69 74 69 63 61 6c 20 66 75 6e 63 74 69 6f 6e 20 69 6e 20 | pping.is.a.critical.function.in. |
ab9a0 | 74 68 65 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 20 73 75 69 74 65 2e 20 41 52 50 | the.Internet.protocol.suite..ARP |
ab9c0 | 20 77 61 73 20 64 65 66 69 6e 65 64 20 69 6e 20 31 39 38 32 20 62 79 20 3a 72 66 63 3a 60 38 32 | .was.defined.in.1982.by.:rfc:`82 |
ab9e0 | 36 60 20 77 68 69 63 68 20 69 73 20 49 6e 74 65 72 6e 65 74 20 53 74 61 6e 64 61 72 64 20 53 54 | 6`.which.is.Internet.Standard.ST |
aba00 | 44 20 33 37 2e 00 3a 61 62 62 72 3a 60 42 46 44 20 28 42 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 | D.37..:abbr:`BFD.(Bidirectional. |
aba20 | 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 60 20 69 73 20 64 65 73 63 72 69 | Forwarding.Detection)`.is.descri |
aba40 | 62 65 64 20 61 6e 64 20 65 78 74 65 6e 64 65 64 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | bed.and.extended.by.the.followin |
aba60 | 67 20 52 46 43 73 3a 20 3a 72 66 63 3a 60 35 38 38 30 60 2c 20 3a 72 66 63 3a 60 35 38 38 31 60 | g.RFCs:.:rfc:`5880`,.:rfc:`5881` |
aba80 | 20 61 6e 64 20 3a 72 66 63 3a 60 35 38 38 33 60 2e 00 3a 61 62 62 72 3a 60 42 47 50 20 28 42 6f | .and.:rfc:`5883`..:abbr:`BGP.(Bo |
abaa0 | 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 6f 6e 65 20 6f | rder.Gateway.Protocol)`.is.one.o |
abac0 | 66 20 74 68 65 20 45 78 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 | f.the.Exterior.Gateway.Protocols |
abae0 | 20 61 6e 64 20 74 68 65 20 64 65 20 66 61 63 74 6f 20 73 74 61 6e 64 61 72 64 20 69 6e 74 65 72 | .and.the.de.facto.standard.inter |
abb00 | 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 6c 61 74 | domain.routing.protocol..The.lat |
abb20 | 65 73 74 20 42 47 50 20 76 65 72 73 69 6f 6e 20 69 73 20 34 2e 20 42 47 50 2d 34 20 69 73 20 64 | est.BGP.version.is.4..BGP-4.is.d |
abb40 | 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 37 37 31 60 20 61 6e 64 20 75 70 64 61 | escribed.in.:rfc:`1771`.and.upda |
abb60 | 74 65 64 20 62 79 20 3a 72 66 63 3a 60 34 32 37 31 60 2e 20 3a 72 66 63 3a 60 32 38 35 38 60 20 | ted.by.:rfc:`4271`..:rfc:`2858`. |
abb80 | 61 64 64 73 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 73 75 70 70 6f 72 74 20 74 6f 20 42 47 | adds.multiprotocol.support.to.BG |
abba0 | 50 2e 00 3a 61 62 62 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 | P..:abbr:`CKN.(MACsec.connectivi |
abbc0 | 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 20 6b 65 79 00 3a 61 62 62 72 3a | ty.association.name)`.key.:abbr: |
abbe0 | 60 44 4d 56 50 4e 20 28 44 79 6e 61 6d 69 63 20 4d 75 6c 74 69 70 6f 69 6e 74 20 56 69 72 74 75 | `DMVPN.(Dynamic.Multipoint.Virtu |
abc00 | 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 69 73 20 61 20 64 79 6e 61 6d 69 | al.Private.Network)`.is.a.dynami |
abc20 | 63 20 3a 61 62 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 | c.:abbr:`VPN.(Virtual.Private.Ne |
abc40 | 74 77 6f 72 6b 29 60 20 74 65 63 68 6e 6f 6c 6f 67 79 20 6f 72 69 67 69 6e 61 6c 6c 79 20 64 65 | twork)`.technology.originally.de |
abc60 | 76 65 6c 6f 70 65 64 20 62 79 20 43 69 73 63 6f 2e 20 57 68 69 6c 65 20 74 68 65 69 72 20 69 6d | veloped.by.Cisco..While.their.im |
abc80 | 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 77 61 73 20 73 6f 6d 65 77 68 61 74 20 70 72 6f 70 72 69 | plementation.was.somewhat.propri |
abca0 | 65 74 61 72 79 2c 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 | etary,.the.underlying.technologi |
abcc0 | 65 73 20 61 72 65 20 61 63 74 75 61 6c 6c 79 20 73 74 61 6e 64 61 72 64 73 20 62 61 73 65 64 2e | es.are.actually.standards.based. |
abce0 | 20 54 68 65 20 74 68 72 65 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 3a 00 3a 61 62 | .The.three.technologies.are:.:ab |
abd00 | 62 72 3a 60 44 4e 41 54 20 28 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 65 74 77 6f 72 6b 20 41 64 | br:`DNAT.(Destination.Network.Ad |
abd20 | 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 63 68 61 6e 67 65 73 20 74 68 65 20 | dress.Translation)`.changes.the. |
abd40 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 70 61 63 6b 65 74 73 20 70 | destination.address.of.packets.p |
abd60 | 61 73 73 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 2c 20 77 68 69 6c 65 | assing.through.the.router,.while |
abd80 | 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 63 68 61 6e 67 65 73 20 74 68 65 20 73 | .:ref:`source-nat`.changes.the.s |
abda0 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 70 61 63 6b 65 74 73 2e 20 44 4e 41 54 20 69 | ource.address.of.packets..DNAT.i |
abdc0 | 73 20 74 79 70 69 63 61 6c 6c 79 20 75 73 65 64 20 77 68 65 6e 20 61 6e 20 65 78 74 65 72 6e 61 | s.typically.used.when.an.externa |
abde0 | 6c 20 28 70 75 62 6c 69 63 29 20 68 6f 73 74 20 6e 65 65 64 73 20 74 6f 20 69 6e 69 74 69 61 74 | l.(public).host.needs.to.initiat |
abe00 | 65 20 61 20 73 65 73 73 69 6f 6e 20 77 69 74 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 | e.a.session.with.an.internal.(pr |
abe20 | 69 76 61 74 65 29 20 68 6f 73 74 2e 20 41 20 63 75 73 74 6f 6d 65 72 20 6e 65 65 64 73 20 74 6f | ivate).host..A.customer.needs.to |
abe40 | 20 61 63 63 65 73 73 20 61 20 70 72 69 76 61 74 65 20 73 65 72 76 69 63 65 20 62 65 68 69 6e 64 | .access.a.private.service.behind |
abe60 | 20 74 68 65 20 72 6f 75 74 65 72 73 20 70 75 62 6c 69 63 20 49 50 2e 20 41 20 63 6f 6e 6e 65 63 | .the.routers.public.IP..A.connec |
abe80 | 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 69 74 68 20 74 68 65 20 72 6f 75 | tion.is.established.with.the.rou |
abea0 | 74 65 72 73 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 61 20 77 65 6c 6c | ters.public.IP.address.on.a.well |
abec0 | 20 6b 6e 6f 77 6e 20 70 6f 72 74 20 61 6e 64 20 74 68 75 73 20 61 6c 6c 20 74 72 61 66 66 69 63 | .known.port.and.thus.all.traffic |
abee0 | 20 66 6f 72 20 74 68 69 73 20 70 6f 72 74 20 69 73 20 72 65 77 72 69 74 74 65 6e 20 74 6f 20 61 | .for.this.port.is.rewritten.to.a |
abf00 | 64 64 72 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f | ddress.the.internal.(private).ho |
abf20 | 73 74 2e 00 3a 61 62 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 | st..:abbr:`EAP.(Extensible.Authe |
abf40 | 6e 74 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6f 76 65 72 20 4c 41 4e 20 28 45 | ntication.Protocol)`.over.LAN.(E |
abf60 | 41 50 6f 4c 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 6f 72 74 20 61 75 74 68 65 6e 74 69 | APoL).is.a.network.port.authenti |
abf80 | 63 61 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 | cation.protocol.used.in.IEEE.802 |
abfa0 | 2e 31 58 20 28 50 6f 72 74 20 42 61 73 65 64 20 4e 65 74 77 6f 72 6b 20 41 63 63 65 73 73 20 43 | .1X.(Port.Based.Network.Access.C |
abfc0 | 6f 6e 74 72 6f 6c 29 20 64 65 76 65 6c 6f 70 65 64 20 74 6f 20 67 69 76 65 20 61 20 67 65 6e 65 | ontrol).developed.to.give.a.gene |
abfe0 | 72 69 63 20 6e 65 74 77 6f 72 6b 20 73 69 67 6e 2d 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 6e 65 | ric.network.sign-on.to.access.ne |
ac000 | 74 77 6f 72 6b 20 72 65 73 6f 75 72 63 65 73 2e 00 3a 61 62 62 72 3a 60 45 55 49 2d 36 34 20 28 | twork.resources..:abbr:`EUI-64.( |
ac020 | 36 34 2d 42 69 74 20 45 78 74 65 6e 64 65 64 20 55 6e 69 71 75 65 20 49 64 65 6e 74 69 66 69 65 | 64-Bit.Extended.Unique.Identifie |
ac040 | 72 29 60 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 34 32 39 31 60 20 | r)`.as.specified.in.:rfc:`4291`. |
ac060 | 61 6c 6c 6f 77 73 20 61 20 68 6f 73 74 20 74 6f 20 61 73 73 69 67 6e 20 69 74 65 73 6c 66 20 61 | allows.a.host.to.assign.iteslf.a |
ac080 | 20 75 6e 69 71 75 65 20 36 34 2d 42 69 74 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 3a 61 62 | .unique.64-Bit.IPv6.address..:ab |
ac0a0 | 62 72 3a 60 47 45 4e 45 56 45 20 28 47 65 6e 65 72 69 63 20 4e 65 74 77 6f 72 6b 20 56 69 72 74 | br:`GENEVE.(Generic.Network.Virt |
ac0c0 | 75 61 6c 69 7a 61 74 69 6f 6e 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 20 73 75 70 70 6f | ualization.Encapsulation)`.suppo |
ac0e0 | 72 74 73 20 61 6c 6c 20 6f 66 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 66 20 3a | rts.all.of.the.capabilities.of.: |
ac100 | 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 | abbr:`VXLAN.(Virtual.Extensible. |
ac120 | 4c 41 4e 29 60 2c 20 3a 61 62 62 72 3a 60 4e 56 47 52 45 20 28 4e 65 74 77 6f 72 6b 20 56 69 72 | LAN)`,.:abbr:`NVGRE.(Network.Vir |
ac140 | 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 69 6e 67 20 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e | tualization.using.Generic.Routin |
ac160 | 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 61 6e 64 20 3a 61 62 62 72 3a 60 53 54 | g.Encapsulation)`,.and.:abbr:`ST |
ac180 | 54 20 28 53 74 61 74 65 6c 65 73 73 20 54 72 61 6e 73 70 6f 72 74 20 54 75 6e 6e 65 6c 69 6e 67 | T.(Stateless.Transport.Tunneling |
ac1a0 | 29 60 20 61 6e 64 20 77 61 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 6f 76 65 72 63 6f 6d 65 20 | )`.and.was.designed.to.overcome. |
ac1c0 | 74 68 65 69 72 20 70 65 72 63 65 69 76 65 64 20 6c 69 6d 69 74 61 74 69 6f 6e 73 2e 20 4d 61 6e | their.perceived.limitations..Man |
ac1e0 | 79 20 62 65 6c 69 65 76 65 20 47 45 4e 45 56 45 20 63 6f 75 6c 64 20 65 76 65 6e 74 75 61 6c 6c | y.believe.GENEVE.could.eventuall |
ac200 | 79 20 72 65 70 6c 61 63 65 20 74 68 65 73 65 20 65 61 72 6c 69 65 72 20 66 6f 72 6d 61 74 73 20 | y.replace.these.earlier.formats. |
ac220 | 65 6e 74 69 72 65 6c 79 2e 00 3a 61 62 62 72 3a 60 47 52 45 20 28 47 65 6e 65 72 69 63 20 52 6f | entirely..:abbr:`GRE.(Generic.Ro |
ac240 | 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 2c 20 47 52 45 2f 49 50 73 65 63 | uting.Encapsulation)`,.GRE/IPsec |
ac260 | 20 28 6f 72 20 49 50 49 50 2f 49 50 73 65 63 2c 20 53 49 54 2f 49 50 73 65 63 2c 20 6f 72 20 61 | .(or.IPIP/IPsec,.SIT/IPsec,.or.a |
ac280 | 6e 79 20 6f 74 68 65 72 20 73 74 61 74 65 6c 65 73 73 20 74 75 6e 6e 65 6c 20 70 72 6f 74 6f 63 | ny.other.stateless.tunnel.protoc |
ac2a0 | 6f 6c 20 6f 76 65 72 20 49 50 73 65 63 29 20 69 73 20 74 68 65 20 75 73 75 61 6c 20 77 61 79 20 | ol.over.IPsec).is.the.usual.way. |
ac2c0 | 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 73 69 64 65 20 61 20 | to.protect.the.traffic.inside.a. |
ac2e0 | 74 75 6e 6e 65 6c 2e 00 3a 61 62 62 72 3a 60 47 52 4f 20 28 47 65 6e 65 72 69 63 20 72 65 63 65 | tunnel..:abbr:`GRO.(Generic.rece |
ac300 | 69 76 65 20 6f 66 66 6c 6f 61 64 29 60 20 69 73 20 74 68 65 20 63 6f 6d 70 6c 65 6d 65 6e 74 20 | ive.offload)`.is.the.complement. |
ac320 | 74 6f 20 47 53 4f 2e 20 49 64 65 61 6c 6c 79 20 61 6e 79 20 66 72 61 6d 65 20 61 73 73 65 6d 62 | to.GSO..Ideally.any.frame.assemb |
ac340 | 6c 65 64 20 62 79 20 47 52 4f 20 73 68 6f 75 6c 64 20 62 65 20 73 65 67 6d 65 6e 74 65 64 20 74 | led.by.GRO.should.be.segmented.t |
ac360 | 6f 20 63 72 65 61 74 65 20 61 6e 20 69 64 65 6e 74 69 63 61 6c 20 73 65 71 75 65 6e 63 65 20 6f | o.create.an.identical.sequence.o |
ac380 | 66 20 66 72 61 6d 65 73 20 75 73 69 6e 67 20 47 53 4f 2c 20 61 6e 64 20 61 6e 79 20 73 65 71 75 | f.frames.using.GSO,.and.any.sequ |
ac3a0 | 65 6e 63 65 20 6f 66 20 66 72 61 6d 65 73 20 73 65 67 6d 65 6e 74 65 64 20 62 79 20 47 53 4f 20 | ence.of.frames.segmented.by.GSO. |
ac3c0 | 73 68 6f 75 6c 64 20 62 65 20 61 62 6c 65 20 74 6f 20 62 65 20 72 65 61 73 73 65 6d 62 6c 65 64 | should.be.able.to.be.reassembled |
ac3e0 | 20 62 61 63 6b 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 62 79 20 47 52 4f 2e 20 54 68 | .back.to.the.original.by.GRO..Th |
ac400 | 65 20 6f 6e 6c 79 20 65 78 63 65 70 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 49 50 76 34 | e.only.exception.to.this.is.IPv4 |
ac420 | 20 49 44 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 61 74 20 74 68 65 20 44 46 20 62 69 74 20 | .ID.in.the.case.that.the.DF.bit. |
ac440 | 69 73 20 73 65 74 20 66 6f 72 20 61 20 67 69 76 65 6e 20 49 50 20 68 65 61 64 65 72 2e 20 49 66 | is.set.for.a.given.IP.header..If |
ac460 | 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 49 50 76 34 20 49 44 20 69 73 20 6e 6f 74 | .the.value.of.the.IPv4.ID.is.not |
ac480 | 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 69 6e 63 72 65 6d 65 6e 74 69 6e 67 20 69 74 20 77 69 | .sequentially.incrementing.it.wi |
ac4a0 | 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 20 73 6f 20 74 68 61 74 20 69 74 20 69 73 20 77 68 65 6e | ll.be.altered.so.that.it.is.when |
ac4c0 | 20 61 20 66 72 61 6d 65 20 61 73 73 65 6d 62 6c 65 64 20 76 69 61 20 47 52 4f 20 69 73 20 73 65 | .a.frame.assembled.via.GRO.is.se |
ac4e0 | 67 6d 65 6e 74 65 64 20 76 69 61 20 47 53 4f 2e 00 3a 61 62 62 72 3a 60 47 53 4f 20 28 47 65 6e | gmented.via.GSO..:abbr:`GSO.(Gen |
ac500 | 65 72 69 63 20 53 65 67 6d 65 6e 74 61 74 69 6f 6e 20 4f 66 66 6c 6f 61 64 29 60 20 69 73 20 61 | eric.Segmentation.Offload)`.is.a |
ac520 | 20 70 75 72 65 20 73 6f 66 74 77 61 72 65 20 6f 66 66 6c 6f 61 64 20 74 68 61 74 20 69 73 20 6d | .pure.software.offload.that.is.m |
ac540 | 65 61 6e 74 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 63 61 73 65 73 20 77 68 65 72 65 20 64 65 | eant.to.deal.with.cases.where.de |
ac560 | 76 69 63 65 20 64 72 69 76 65 72 73 20 63 61 6e 6e 6f 74 20 70 65 72 66 6f 72 6d 20 74 68 65 20 | vice.drivers.cannot.perform.the. |
ac580 | 6f 66 66 6c 6f 61 64 73 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e 20 57 68 61 74 20 6f | offloads.described.above..What.o |
ac5a0 | 63 63 75 72 73 20 69 6e 20 47 53 4f 20 69 73 20 74 68 61 74 20 61 20 67 69 76 65 6e 20 73 6b 62 | ccurs.in.GSO.is.that.a.given.skb |
ac5c0 | 75 66 66 20 77 69 6c 6c 20 68 61 76 65 20 69 74 73 20 64 61 74 61 20 62 72 6f 6b 65 6e 20 6f 75 | uff.will.have.its.data.broken.ou |
ac5e0 | 74 20 6f 76 65 72 20 6d 75 6c 74 69 70 6c 65 20 73 6b 62 75 66 66 73 20 74 68 61 74 20 68 61 76 | t.over.multiple.skbuffs.that.hav |
ac600 | 65 20 62 65 65 6e 20 72 65 73 69 7a 65 64 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 4d 53 53 20 | e.been.resized.to.match.the.MSS. |
ac620 | 70 72 6f 76 69 64 65 64 20 76 69 61 20 73 6b 62 5f 73 68 69 6e 66 6f 28 29 2d 3e 67 73 6f 5f 73 | provided.via.skb_shinfo()->gso_s |
ac640 | 69 7a 65 2e 00 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 | ize..:abbr:`IGMP.(Internet.Group |
ac660 | 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 70 72 6f 78 79 20 73 65 6e | .Management.Protocol)`.proxy.sen |
ac680 | 64 73 20 49 47 4d 50 20 68 6f 73 74 20 6d 65 73 73 61 67 65 73 20 6f 6e 20 62 65 68 61 6c 66 20 | ds.IGMP.host.messages.on.behalf. |
ac6a0 | 6f 66 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 63 6c 69 65 6e 74 2e 20 54 68 65 20 63 6f 6e 66 69 | of.a.connected.client..The.confi |
ac6c0 | 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 64 65 66 69 6e 65 20 6f 6e 65 2c 20 61 6e 64 20 6f 6e | guration.must.define.one,.and.on |
ac6e0 | 6c 79 20 6f 6e 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 6f | ly.one.upstream.interface,.and.o |
ac700 | 6e 65 20 6f 72 20 6d 6f 72 65 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 73 | ne.or.more.downstream.interfaces |
ac720 | 2e 00 3a 61 62 62 72 3a 60 49 50 53 65 63 20 28 49 50 20 53 65 63 75 72 69 74 79 29 60 20 2d 20 | ..:abbr:`IPSec.(IP.Security)`.-. |
ac740 | 74 6f 6f 20 6d 61 6e 79 20 52 46 43 73 20 74 6f 20 6c 69 73 74 2c 20 62 75 74 20 73 74 61 72 74 | too.many.RFCs.to.list,.but.start |
ac760 | 20 77 69 74 68 20 3a 72 66 63 3a 60 34 33 30 31 60 00 3a 61 62 62 72 3a 60 49 53 2d 49 53 20 28 | .with.:rfc:`4301`.:abbr:`IS-IS.( |
ac780 | 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 74 6f 20 49 6e 74 65 72 6d 65 64 69 | Intermediate.System.to.Intermedi |
ac7a0 | 61 74 65 20 53 79 73 74 65 6d 29 60 20 69 73 20 61 20 6c 69 6e 6b 2d 73 74 61 74 65 20 69 6e 74 | ate.System)`.is.a.link-state.int |
ac7c0 | 65 72 69 6f 72 20 67 61 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 20 28 49 47 50 29 20 77 68 69 | erior.gateway.protocol.(IGP).whi |
ac7e0 | 63 68 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 49 53 4f 31 30 35 38 39 2c 20 3a 72 66 | ch.is.described.in.ISO10589,.:rf |
ac800 | 63 3a 60 31 31 39 35 60 2c 20 3a 72 66 63 3a 60 35 33 30 38 60 2e 20 49 53 2d 49 53 20 72 75 6e | c:`1195`,.:rfc:`5308`..IS-IS.run |
ac820 | 73 20 74 68 65 20 44 69 6a 6b 73 74 72 61 20 73 68 6f 72 74 65 73 74 2d 70 61 74 68 20 66 69 72 | s.the.Dijkstra.shortest-path.fir |
ac840 | 73 74 20 28 53 50 46 29 20 61 6c 67 6f 72 69 74 68 6d 20 74 6f 20 63 72 65 61 74 65 20 61 20 64 | st.(SPF).algorithm.to.create.a.d |
ac860 | 61 74 61 62 61 73 65 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b e2 80 99 73 20 74 6f 70 6f 6c | atabase.of.the.network...s.topol |
ac880 | 6f 67 79 2c 20 61 6e 64 20 66 72 6f 6d 20 74 68 61 74 20 64 61 74 61 62 61 73 65 20 74 6f 20 64 | ogy,.and.from.that.database.to.d |
ac8a0 | 65 74 65 72 6d 69 6e 65 20 74 68 65 20 62 65 73 74 20 28 74 68 61 74 20 69 73 2c 20 6c 6f 77 65 | etermine.the.best.(that.is,.lowe |
ac8c0 | 73 74 20 63 6f 73 74 29 20 70 61 74 68 20 74 6f 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 | st.cost).path.to.a.destination.. |
ac8e0 | 54 68 65 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 73 79 73 74 65 6d 73 20 28 74 68 65 20 6e 61 | The.intermediate.systems.(the.na |
ac900 | 6d 65 20 66 6f 72 20 72 6f 75 74 65 72 73 29 20 65 78 63 68 61 6e 67 65 20 74 6f 70 6f 6c 6f 67 | me.for.routers).exchange.topolog |
ac920 | 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 65 69 72 20 64 69 72 65 63 74 6c | y.information.with.their.directl |
ac940 | 79 20 63 6f 6e 65 6e 63 74 65 64 20 6e 65 69 67 68 62 6f 72 73 2e 20 49 53 2d 49 53 20 72 75 6e | y.conencted.neighbors..IS-IS.run |
ac960 | 73 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 61 20 6c 69 6e 6b 20 6c 61 79 65 | s.directly.on.the.data.link.laye |
ac980 | 72 20 28 4c 61 79 65 72 20 32 29 2e 20 49 53 2d 49 53 20 61 64 64 72 65 73 73 65 73 20 61 72 65 | r.(Layer.2)..IS-IS.addresses.are |
ac9a0 | 20 63 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 4e 45 54 73 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 | .called.:abbr:`NETs.(Network.Ent |
ac9c0 | 69 74 79 20 54 69 74 6c 65 73 29 60 20 61 6e 64 20 63 61 6e 20 62 65 20 38 20 74 6f 20 32 30 20 | ity.Titles)`.and.can.be.8.to.20. |
ac9e0 | 62 79 74 65 73 20 6c 6f 6e 67 2c 20 62 75 74 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 31 30 | bytes.long,.but.are.generally.10 |
aca00 | 20 62 79 74 65 73 20 6c 6f 6e 67 2e 20 54 68 65 20 74 72 65 65 20 64 61 74 61 62 61 73 65 20 74 | .bytes.long..The.tree.database.t |
aca20 | 68 61 74 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 49 53 2d 49 53 20 69 73 20 73 69 6d | hat.is.created.with.IS-IS.is.sim |
aca40 | 69 6c 61 72 20 74 6f 20 74 68 65 20 6f 6e 65 20 74 68 61 74 20 69 73 20 63 72 65 61 74 65 64 20 | ilar.to.the.one.that.is.created. |
aca60 | 77 69 74 68 20 4f 53 50 46 20 69 6e 20 74 68 61 74 20 74 68 65 20 70 61 74 68 73 20 63 68 6f 73 | with.OSPF.in.that.the.paths.chos |
aca80 | 65 6e 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 72 2e 20 43 6f 6d 70 61 72 69 73 6f 6e | en.should.be.similar..Comparison |
acaa0 | 73 20 74 6f 20 4f 53 50 46 20 61 72 65 20 69 6e 65 76 69 74 61 62 6c 65 20 61 6e 64 20 6f 66 74 | s.to.OSPF.are.inevitable.and.oft |
acac0 | 65 6e 20 61 72 65 20 72 65 61 73 6f 6e 61 62 6c 65 20 6f 6e 65 73 20 74 6f 20 6d 61 6b 65 20 69 | en.are.reasonable.ones.to.make.i |
acae0 | 6e 20 72 65 67 61 72 64 73 20 74 6f 20 74 68 65 20 77 61 79 20 61 20 6e 65 74 77 6f 72 6b 20 77 | n.regards.to.the.way.a.network.w |
acb00 | 69 6c 6c 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 65 69 74 68 65 72 20 49 47 50 2e 00 3a 61 62 | ill.respond.with.either.IGP..:ab |
acb20 | 62 72 3a 60 4c 33 56 50 4e 20 56 52 46 73 20 28 20 4c 61 79 65 72 20 33 20 56 69 72 74 75 61 6c | br:`L3VPN.VRFs.(.Layer.3.Virtual |
acb40 | 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 73 20 29 60 20 62 67 70 64 20 73 75 70 70 6f 72 | .Private.Networks.)`.bgpd.suppor |
acb60 | 74 73 20 66 6f 72 20 49 50 76 34 20 52 46 43 20 34 33 36 34 20 61 6e 64 20 49 50 76 36 20 52 46 | ts.for.IPv4.RFC.4364.and.IPv6.RF |
acb80 | 43 20 34 36 35 39 2e 20 4c 33 56 50 4e 20 72 6f 75 74 65 73 2c 20 61 6e 64 20 74 68 65 69 72 20 | C.4659..L3VPN.routes,.and.their. |
acba0 | 61 73 73 6f 63 69 61 74 65 64 20 56 52 46 20 4d 50 4c 53 20 6c 61 62 65 6c 73 2c 20 63 61 6e 20 | associated.VRF.MPLS.labels,.can. |
acbc0 | 62 65 20 64 69 73 74 72 69 62 75 74 65 64 20 74 6f 20 56 50 4e 20 53 41 46 49 20 6e 65 69 67 68 | be.distributed.to.VPN.SAFI.neigh |
acbe0 | 62 6f 72 73 20 69 6e 20 74 68 65 20 64 65 66 61 75 6c 74 2c 20 69 2e 65 2e 2c 20 6e 6f 6e 20 56 | bors.in.the.default,.i.e.,.non.V |
acc00 | 52 46 2c 20 42 47 50 20 69 6e 73 74 61 6e 63 65 2e 20 56 52 46 20 4d 50 4c 53 20 6c 61 62 65 6c | RF,.BGP.instance..VRF.MPLS.label |
acc20 | 73 20 61 72 65 20 72 65 61 63 68 65 64 20 75 73 69 6e 67 20 63 6f 72 65 20 4d 50 4c 53 20 6c 61 | s.are.reached.using.core.MPLS.la |
acc40 | 62 65 6c 73 20 77 68 69 63 68 20 61 72 65 20 64 69 73 74 72 69 62 75 74 65 64 20 75 73 69 6e 67 | bels.which.are.distributed.using |
acc60 | 20 4c 44 50 20 6f 72 20 42 47 50 20 6c 61 62 65 6c 65 64 20 75 6e 69 63 61 73 74 2e 20 62 67 70 | .LDP.or.BGP.labeled.unicast..bgp |
acc80 | 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 69 6e 74 65 72 2d 56 52 46 20 72 6f 75 74 65 20 | d.also.supports.inter-VRF.route. |
acca0 | 6c 65 61 6b 69 6e 67 2e 00 3a 61 62 62 72 3a 60 4c 44 50 20 28 4c 61 62 65 6c 20 44 69 73 74 72 | leaking..:abbr:`LDP.(Label.Distr |
accc0 | 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 54 43 50 20 62 61 73 65 | ibution.Protocol)`.is.a.TCP.base |
acce0 | 64 20 4d 50 4c 53 20 73 69 67 6e 61 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 64 | d.MPLS.signaling.protocol.that.d |
acd00 | 69 73 74 72 69 62 75 74 65 73 20 6c 61 62 65 6c 73 20 63 72 65 61 74 69 6e 67 20 4d 50 4c 53 20 | istributes.labels.creating.MPLS. |
acd20 | 6c 61 62 65 6c 20 73 77 69 74 63 68 65 64 20 70 61 74 68 73 20 69 6e 20 61 20 64 79 6e 61 6d 69 | label.switched.paths.in.a.dynami |
acd40 | 63 20 6d 61 6e 6e 65 72 2e 20 4c 44 50 20 69 73 20 6e 6f 74 20 61 20 72 6f 75 74 69 6e 67 20 70 | c.manner..LDP.is.not.a.routing.p |
acd60 | 72 6f 74 6f 63 6f 6c 2c 20 61 73 20 69 74 20 72 65 6c 69 65 73 20 6f 6e 20 6f 74 68 65 72 20 72 | rotocol,.as.it.relies.on.other.r |
acd80 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 66 6f 72 77 61 72 64 69 6e 67 20 | outing.protocols.for.forwarding. |
acda0 | 64 65 63 69 73 69 6f 6e 73 2e 20 4c 44 50 20 63 61 6e 6e 6f 74 20 62 6f 6f 74 73 74 72 61 70 20 | decisions..LDP.cannot.bootstrap. |
acdc0 | 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 65 6c 69 65 73 20 6f 6e 20 | itself,.and.therefore.relies.on. |
acde0 | 73 61 69 64 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 66 6f 72 20 63 6f 6d 6d 75 | said.routing.protocols.for.commu |
ace00 | 6e 69 63 61 74 69 6f 6e 20 77 69 74 68 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 74 68 61 74 | nication.with.other.routers.that |
ace20 | 20 75 73 65 20 4c 44 50 2e 00 3a 61 62 62 72 3a 60 4c 4c 44 50 20 28 4c 69 6e 6b 20 4c 61 79 65 | .use.LDP..:abbr:`LLDP.(Link.Laye |
ace40 | 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 76 65 6e 64 | r.Discovery.Protocol)`.is.a.vend |
ace60 | 6f 72 2d 6e 65 75 74 72 61 6c 20 6c 69 6e 6b 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 20 69 | or-neutral.link.layer.protocol.i |
ace80 | 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 53 75 69 74 65 20 75 73 | n.the.Internet.Protocol.Suite.us |
acea0 | 65 64 20 62 79 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 20 66 6f 72 20 61 64 76 65 72 74 | ed.by.network.devices.for.advert |
acec0 | 69 73 69 6e 67 20 74 68 65 69 72 20 69 64 65 6e 74 69 74 79 2c 20 63 61 70 61 62 69 6c 69 74 69 | ising.their.identity,.capabiliti |
acee0 | 65 73 2c 20 61 6e 64 20 6e 65 69 67 68 62 6f 72 73 20 6f 6e 20 61 6e 20 49 45 45 45 20 38 30 32 | es,.and.neighbors.on.an.IEEE.802 |
acf00 | 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 2c 20 70 72 69 6e 63 69 70 61 6c 6c 79 | .local.area.network,.principally |
acf20 | 20 77 69 72 65 64 20 45 74 68 65 72 6e 65 74 2e 20 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 | .wired.Ethernet..The.protocol.is |
acf40 | 20 66 6f 72 6d 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 62 79 20 74 68 65 20 49 45 45 | .formally.referred.to.by.the.IEE |
acf60 | 45 20 61 73 20 53 74 61 74 69 6f 6e 20 61 6e 64 20 4d 65 64 69 61 20 41 63 63 65 73 73 20 43 6f | E.as.Station.and.Media.Access.Co |
acf80 | 6e 74 72 6f 6c 20 43 6f 6e 6e 65 63 74 69 76 69 74 79 20 44 69 73 63 6f 76 65 72 79 20 73 70 65 | ntrol.Connectivity.Discovery.spe |
acfa0 | 63 69 66 69 65 64 20 69 6e 20 49 45 45 45 20 38 30 32 2e 31 41 42 20 61 6e 64 20 49 45 45 45 20 | cified.in.IEEE.802.1AB.and.IEEE. |
acfc0 | 38 30 32 2e 33 2d 32 30 31 32 20 73 65 63 74 69 6f 6e 20 36 20 63 6c 61 75 73 65 20 37 39 2e 00 | 802.3-2012.section.6.clause.79.. |
acfe0 | 3a 61 62 62 72 3a 60 4c 52 4f 20 28 4c 61 72 67 65 20 52 65 63 65 69 76 65 20 4f 66 66 6c 6f 61 | :abbr:`LRO.(Large.Receive.Offloa |
ad000 | 64 29 60 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 | d)`.is.a.technique.designed.to.b |
ad020 | 6f 6f 73 74 20 74 68 65 20 65 66 66 69 63 69 65 6e 63 79 20 6f 66 20 68 6f 77 20 79 6f 75 72 20 | oost.the.efficiency.of.how.your. |
ad040 | 63 6f 6d 70 75 74 65 72 27 73 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 63 61 72 | computer's.network.interface.car |
ad060 | 64 20 28 4e 49 43 29 20 70 72 6f 63 65 73 73 65 73 20 69 6e 63 6f 6d 69 6e 67 20 6e 65 74 77 6f | d.(NIC).processes.incoming.netwo |
ad080 | 72 6b 20 74 72 61 66 66 69 63 2e 20 54 79 70 69 63 61 6c 6c 79 2c 20 6e 65 74 77 6f 72 6b 20 64 | rk.traffic..Typically,.network.d |
ad0a0 | 61 74 61 20 61 72 72 69 76 65 73 20 69 6e 20 73 6d 61 6c 6c 65 72 20 63 68 75 6e 6b 73 20 63 61 | ata.arrives.in.smaller.chunks.ca |
ad0c0 | 6c 6c 65 64 20 70 61 63 6b 65 74 73 2e 20 50 72 6f 63 65 73 73 69 6e 67 20 65 61 63 68 20 70 61 | lled.packets..Processing.each.pa |
ad0e0 | 63 6b 65 74 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 63 6f 6e 73 75 6d 65 73 20 43 50 55 20 28 | cket.individually.consumes.CPU.( |
ad100 | 63 65 6e 74 72 61 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 75 6e 69 74 29 20 72 65 73 6f 75 72 63 | central.processing.unit).resourc |
ad120 | 65 73 2e 20 4c 6f 74 73 20 6f 66 20 73 6d 61 6c 6c 20 70 61 63 6b 65 74 73 20 63 61 6e 20 6c 65 | es..Lots.of.small.packets.can.le |
ad140 | 61 64 20 74 6f 20 61 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 62 6f 74 74 6c 65 6e 65 63 6b 2e 20 | ad.to.a.performance.bottleneck.. |
ad160 | 49 6e 73 74 65 61 64 20 6f 66 20 68 61 6e 64 69 6e 67 20 74 68 65 20 43 50 55 20 65 61 63 68 20 | Instead.of.handing.the.CPU.each. |
ad180 | 70 61 63 6b 65 74 20 61 73 20 69 74 20 63 6f 6d 65 73 20 69 6e 2c 20 4c 52 4f 20 69 6e 73 74 72 | packet.as.it.comes.in,.LRO.instr |
ad1a0 | 75 63 74 73 20 74 68 65 20 4e 49 43 20 74 6f 20 63 6f 6d 62 69 6e 65 20 6d 75 6c 74 69 70 6c 65 | ucts.the.NIC.to.combine.multiple |
ad1c0 | 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 2c | .incoming.packets.into.a.single, |
ad1e0 | 20 6c 61 72 67 65 72 20 70 61 63 6b 65 74 2e 20 54 68 69 73 20 6c 61 72 67 65 72 20 70 61 63 6b | .larger.packet..This.larger.pack |
ad200 | 65 74 20 69 73 20 74 68 65 6e 20 70 61 73 73 65 64 20 74 6f 20 74 68 65 20 43 50 55 20 66 6f 72 | et.is.then.passed.to.the.CPU.for |
ad220 | 20 70 72 6f 63 65 73 73 69 6e 67 2e 00 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 | .processing..:abbr:`MKA.(MACsec. |
ad240 | 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 75 73 65 64 | Key.Agreement.protocol)`.is.used |
ad260 | 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 6b 65 79 73 20 62 65 74 77 65 65 6e 20 69 6e 64 | .to.synchronize.keys.between.ind |
ad280 | 69 76 69 64 75 61 6c 20 70 65 65 72 73 2e 00 3a 61 62 62 72 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 | ividual.peers..:abbr:`MPLS.(Mult |
ad2a0 | 69 2d 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 74 63 68 69 6e 67 29 60 20 69 73 20 | i-Protocol.Label.Switching)`.is. |
ad2c0 | 61 20 70 61 63 6b 65 74 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 72 61 64 69 67 6d 20 77 68 69 | a.packet.forwarding.paradigm.whi |
ad2e0 | 63 68 20 64 69 66 66 65 72 73 20 66 72 6f 6d 20 72 65 67 75 6c 61 72 20 49 50 20 66 6f 72 77 61 | ch.differs.from.regular.IP.forwa |
ad300 | 72 64 69 6e 67 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 | rding..Instead.of.IP.addresses.b |
ad320 | 65 69 6e 67 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 65 63 69 73 69 6f 6e 20 6f | eing.used.to.make.the.decision.o |
ad340 | 6e 20 66 69 6e 64 69 6e 67 20 74 68 65 20 65 78 69 74 20 69 6e 74 65 72 66 61 63 65 2c 20 61 20 | n.finding.the.exit.interface,.a. |
ad360 | 72 6f 75 74 65 72 20 77 69 6c 6c 20 69 6e 73 74 65 61 64 20 75 73 65 20 61 6e 20 65 78 61 63 74 | router.will.instead.use.an.exact |
ad380 | 20 6d 61 74 63 68 20 6f 6e 20 61 20 33 32 20 62 69 74 2f 34 20 62 79 74 65 20 68 65 61 64 65 72 | .match.on.a.32.bit/4.byte.header |
ad3a0 | 20 63 61 6c 6c 65 64 20 74 68 65 20 4d 50 4c 53 20 6c 61 62 65 6c 2e 20 54 68 69 73 20 6c 61 62 | .called.the.MPLS.label..This.lab |
ad3c0 | 65 6c 20 69 73 20 69 6e 73 65 72 74 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 65 74 68 65 72 | el.is.inserted.between.the.ether |
ad3e0 | 6e 65 74 20 28 6c 61 79 65 72 20 32 29 20 68 65 61 64 65 72 20 61 6e 64 20 74 68 65 20 49 50 20 | net.(layer.2).header.and.the.IP. |
ad400 | 28 6c 61 79 65 72 20 33 29 20 68 65 61 64 65 72 2e 20 4f 6e 65 20 63 61 6e 20 73 74 61 74 69 63 | (layer.3).header..One.can.static |
ad420 | 61 6c 6c 79 20 6f 72 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 6c 61 62 65 6c | ally.or.dynamically.assign.label |
ad440 | 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 2c 20 62 75 74 20 77 65 20 77 69 6c 6c 20 66 6f 63 75 73 20 | .allocations,.but.we.will.focus. |
ad460 | 6f 6e 20 64 79 6e 61 6d 69 63 20 61 6c 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 6c 61 62 65 6c 73 20 | on.dynamic.allocation.of.labels. |
ad480 | 75 73 69 6e 67 20 73 6f 6d 65 20 73 6f 72 74 20 6f 66 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 | using.some.sort.of.label.distrib |
ad4a0 | 75 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 73 75 63 68 20 61 73 20 74 68 65 20 61 70 74 6c | ution.protocol.(such.as.the.aptl |
ad4c0 | 79 20 6e 61 6d 65 64 20 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f | y.named.Label.Distribution.Proto |
ad4e0 | 63 6f 6c 20 2f 20 4c 44 50 2c 20 52 65 73 6f 75 72 63 65 20 52 65 73 65 72 76 61 74 69 6f 6e 20 | col./.LDP,.Resource.Reservation. |
ad500 | 50 72 6f 74 6f 63 6f 6c 20 2f 20 52 53 56 50 2c 20 6f 72 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 | Protocol./.RSVP,.or.Segment.Rout |
ad520 | 69 6e 67 20 74 68 72 6f 75 67 68 20 4f 53 50 46 2f 49 53 49 53 29 2e 20 54 68 65 73 65 20 70 72 | ing.through.OSPF/ISIS)..These.pr |
ad540 | 6f 74 6f 63 6f 6c 73 20 61 6c 6c 6f 77 20 66 6f 72 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f | otocols.allow.for.the.creation.o |
ad560 | 66 20 61 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 2f 75 6e 69 63 61 73 74 20 70 61 74 68 20 | f.a.unidirectional/unicast.path. |
ad580 | 63 61 6c 6c 65 64 20 61 20 6c 61 62 65 6c 65 64 20 73 77 69 74 63 68 65 64 20 70 61 74 68 20 28 | called.a.labeled.switched.path.( |
ad5a0 | 69 6e 69 74 69 61 6c 69 7a 65 64 20 61 73 20 4c 53 50 29 20 74 68 72 6f 75 67 68 6f 75 74 20 74 | initialized.as.LSP).throughout.t |
ad5c0 | 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 6f 70 65 72 61 74 65 73 20 76 65 72 79 20 6d 75 | he.network.that.operates.very.mu |
ad5e0 | 63 68 20 6c 69 6b 65 20 61 20 74 75 6e 6e 65 6c 20 74 68 72 6f 75 67 68 20 74 68 65 20 6e 65 74 | ch.like.a.tunnel.through.the.net |
ad600 | 77 6f 72 6b 2e 20 41 6e 20 65 61 73 79 20 77 61 79 20 6f 66 20 74 68 69 6e 6b 69 6e 67 20 61 62 | work..An.easy.way.of.thinking.ab |
ad620 | 6f 75 74 20 68 6f 77 20 61 6e 20 4d 50 4c 53 20 4c 53 50 20 61 63 74 75 61 6c 6c 79 20 66 6f 72 | out.how.an.MPLS.LSP.actually.for |
ad640 | 77 61 72 64 73 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 6f 75 74 20 61 20 6e 65 74 77 6f | wards.traffic.throughout.a.netwo |
ad660 | 72 6b 20 69 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 20 61 20 47 52 45 20 74 75 6e 6e 65 6c 2e 20 | rk.is.to.think.of.a.GRE.tunnel.. |
ad680 | 54 68 65 79 20 61 72 65 20 6e 6f 74 20 74 68 65 20 73 61 6d 65 20 69 6e 20 68 6f 77 20 74 68 65 | They.are.not.the.same.in.how.the |
ad6a0 | 79 20 6f 70 65 72 61 74 65 2c 20 62 75 74 20 74 68 65 79 20 61 72 65 20 74 68 65 20 73 61 6d 65 | y.operate,.but.they.are.the.same |
ad6c0 | 20 69 6e 20 68 6f 77 20 74 68 65 79 20 68 61 6e 64 6c 65 20 74 68 65 20 74 75 6e 6e 65 6c 65 64 | .in.how.they.handle.the.tunneled |
ad6e0 | 20 70 61 63 6b 65 74 2e 20 49 74 20 77 6f 75 6c 64 20 62 65 20 67 6f 6f 64 20 74 6f 20 74 68 69 | .packet..It.would.be.good.to.thi |
ad700 | 6e 6b 20 6f 66 20 4d 50 4c 53 20 61 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 74 65 63 68 6e 6f | nk.of.MPLS.as.a.tunneling.techno |
ad720 | 6c 6f 67 79 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 74 72 61 6e 73 70 6f | logy.that.can.be.used.to.transpo |
ad740 | 72 74 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 70 61 63 6b 65 | rt.many.different.types.of.packe |
ad760 | 74 73 2c 20 74 6f 20 61 69 64 20 69 6e 20 74 72 61 66 66 69 63 20 65 6e 67 69 6e 65 65 72 69 6e | ts,.to.aid.in.traffic.engineerin |
ad780 | 67 20 62 79 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 65 20 74 6f 20 73 70 65 63 69 66 79 20 70 61 74 | g.by.allowing.one.to.specify.pat |
ad7a0 | 68 73 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 28 75 73 69 6e 67 | hs.throughout.the.network.(using |
ad7c0 | 20 52 53 56 50 20 6f 72 20 53 52 29 2c 20 61 6e 64 20 74 6f 20 67 65 6e 65 72 61 6c 6c 79 20 61 | .RSVP.or.SR),.and.to.generally.a |
ad7e0 | 6c 6c 6f 77 20 66 6f 72 20 65 61 73 69 65 72 20 69 6e 74 72 61 2f 69 6e 74 65 72 20 6e 65 74 77 | llow.for.easier.intra/inter.netw |
ad800 | 6f 72 6b 20 74 72 61 6e 73 70 6f 72 74 20 6f 66 20 64 61 74 61 20 70 61 63 6b 65 74 73 2e 00 3a | ork.transport.of.data.packets..: |
ad820 | 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 | abbr:`NAT.(Network.Address.Trans |
ad840 | 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 6f 6d 6d 6f 6e 20 6d 65 74 68 6f 64 20 6f 66 20 72 | lation)`.is.a.common.method.of.r |
ad860 | 65 6d 61 70 70 69 6e 67 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 69 6e | emapping.one.IP.address.space.in |
ad880 | 74 6f 20 61 6e 6f 74 68 65 72 20 62 79 20 6d 6f 64 69 66 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 | to.another.by.modifying.network. |
ad8a0 | 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 49 50 20 68 65 | address.information.in.the.IP.he |
ad8c0 | 61 64 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 77 68 69 6c 65 20 74 68 65 79 20 61 72 65 20 69 | ader.of.packets.while.they.are.i |
ad8e0 | 6e 20 74 72 61 6e 73 69 74 20 61 63 72 6f 73 73 20 61 20 74 72 61 66 66 69 63 20 72 6f 75 74 69 | n.transit.across.a.traffic.routi |
ad900 | 6e 67 20 64 65 76 69 63 65 2e 20 54 68 65 20 74 65 63 68 6e 69 71 75 65 20 77 61 73 20 6f 72 69 | ng.device..The.technique.was.ori |
ad920 | 67 69 6e 61 6c 6c 79 20 75 73 65 64 20 61 73 20 61 20 73 68 6f 72 74 63 75 74 20 74 6f 20 61 76 | ginally.used.as.a.shortcut.to.av |
ad940 | 6f 69 64 20 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 61 64 64 72 65 73 73 20 65 76 65 72 79 20 | oid.the.need.to.readdress.every. |
ad960 | 68 6f 73 74 20 77 68 65 6e 20 61 20 6e 65 74 77 6f 72 6b 20 77 61 73 20 6d 6f 76 65 64 2e 20 49 | host.when.a.network.was.moved..I |
ad980 | 74 20 68 61 73 20 62 65 63 6f 6d 65 20 61 20 70 6f 70 75 6c 61 72 20 61 6e 64 20 65 73 73 65 6e | t.has.become.a.popular.and.essen |
ad9a0 | 74 69 61 6c 20 74 6f 6f 6c 20 69 6e 20 63 6f 6e 73 65 72 76 69 6e 67 20 67 6c 6f 62 61 6c 20 61 | tial.tool.in.conserving.global.a |
ad9c0 | 64 64 72 65 73 73 20 73 70 61 63 65 20 69 6e 20 74 68 65 20 66 61 63 65 20 6f 66 20 49 50 76 34 | ddress.space.in.the.face.of.IPv4 |
ad9e0 | 20 61 64 64 72 65 73 73 20 65 78 68 61 75 73 74 69 6f 6e 2e 20 4f 6e 65 20 49 6e 74 65 72 6e 65 | .address.exhaustion..One.Interne |
ada00 | 74 2d 72 6f 75 74 61 62 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 4e 41 54 20 67 | t-routable.IP.address.of.a.NAT.g |
ada20 | 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 6e 20 65 6e 74 69 72 65 | ateway.can.be.used.for.an.entire |
ada40 | 20 70 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 2e 00 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 | .private.network..:abbr:`NAT.(Ne |
ada60 | 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 63 | twork.Address.Translation)`.is.c |
ada80 | 6f 6e 66 69 67 75 72 65 64 20 65 6e 74 69 72 65 6c 79 20 6f 6e 20 61 20 73 65 72 69 65 73 20 6f | onfigured.entirely.on.a.series.o |
adaa0 | 66 20 73 6f 20 63 61 6c 6c 65 64 20 60 72 75 6c 65 73 60 2e 20 52 75 6c 65 73 20 61 72 65 20 6e | f.so.called.`rules`..Rules.are.n |
adac0 | 75 6d 62 65 72 65 64 20 61 6e 64 20 65 76 61 6c 75 61 74 65 64 20 62 79 20 74 68 65 20 75 6e 64 | umbered.and.evaluated.by.the.und |
adae0 | 65 72 6c 79 69 6e 67 20 4f 53 20 69 6e 20 6e 75 6d 65 72 69 63 61 6c 20 6f 72 64 65 72 21 20 54 | erlying.OS.in.numerical.order!.T |
adb00 | 68 65 20 72 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 73 20 62 | he.rule.numbers.can.be.changes.b |
adb20 | 79 20 75 74 69 6c 69 7a 69 6e 67 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 6e 61 6d 65 60 | y.utilizing.the.:cfgcmd:`rename` |
adb40 | 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 63 6f 70 79 60 20 63 6f 6d 6d 61 6e 64 73 2e 00 3a 61 | .and.:cfgcmd:`copy`.commands..:a |
adb60 | 62 62 72 3a 60 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 34 20 50 72 65 66 69 78 20 | bbr:`NAT64.(IPv6-to-IPv4.Prefix. |
adb80 | 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 63 72 69 74 69 63 61 6c 20 63 6f 6d 70 | Translation)`.is.a.critical.comp |
adba0 | 6f 6e 65 6e 74 20 69 6e 20 6d 6f 64 65 72 6e 20 6e 65 74 77 6f 72 6b 69 6e 67 2c 20 66 61 63 69 | onent.in.modern.networking,.faci |
adbc0 | 6c 69 74 61 74 69 6e 67 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 49 | litating.communication.between.I |
adbe0 | 50 76 36 20 61 6e 64 20 49 50 76 34 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 69 73 20 64 6f 63 75 | Pv6.and.IPv4.networks..This.docu |
adc00 | 6d 65 6e 74 61 74 69 6f 6e 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 20 73 65 74 75 70 2c 20 63 6f | mentation.outlines.the.setup,.co |
adc20 | 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 61 6e 64 20 75 73 61 67 65 20 6f 66 20 74 68 65 20 4e 41 | nfiguration,.and.usage.of.the.NA |
adc40 | 54 36 34 20 66 65 61 74 75 72 65 20 69 6e 20 79 6f 75 72 20 70 72 6f 6a 65 63 74 2e 20 57 68 65 | T64.feature.in.your.project..Whe |
adc60 | 74 68 65 72 20 79 6f 75 20 61 72 65 20 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 20 74 6f 20 49 50 | ther.you.are.transitioning.to.IP |
adc80 | 76 36 20 6f 72 20 6e 65 65 64 20 74 6f 20 73 65 61 6d 6c 65 73 73 6c 79 20 63 6f 6e 6e 65 63 74 | v6.or.need.to.seamlessly.connect |
adca0 | 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 64 65 76 69 63 65 73 2e 20 4e 41 54 36 34 20 69 73 | .IPv4.and.IPv6.devices..NAT64.is |
adcc0 | 20 61 20 73 74 61 74 65 66 75 6c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 | .a.stateful.translation.mechanis |
adce0 | 6d 20 74 68 61 74 20 74 72 61 6e 73 6c 61 74 65 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 | m.that.translates.IPv6.addresses |
add00 | 20 74 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 49 50 76 34 20 61 64 64 72 | .to.IPv4.addresses.and.IPv4.addr |
add20 | 65 73 73 65 73 20 74 6f 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 4e 41 54 36 34 20 69 | esses.to.IPv6.addresses..NAT64.i |
add40 | 73 20 75 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 49 50 76 36 2d 6f 6e 6c 79 20 63 6c 69 65 6e | s.used.to.enable.IPv6-only.clien |
add60 | 74 73 20 74 6f 20 63 6f 6e 74 61 63 74 20 49 50 76 34 20 73 65 72 76 65 72 73 20 75 73 69 6e 67 | ts.to.contact.IPv4.servers.using |
add80 | 20 75 6e 69 63 61 73 74 20 55 44 50 2c 20 54 43 50 2c 20 6f 72 20 49 43 4d 50 2e 00 3a 61 62 62 | .unicast.UDP,.TCP,.or.ICMP..:abb |
adda0 | 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 20 73 | r:`NET.(Network.Entity.Title)`.s |
addc0 | 65 6c 65 63 74 6f 72 3a 20 60 60 30 30 60 60 20 4d 75 73 74 20 61 6c 77 61 79 73 20 62 65 20 30 | elector:.``00``.Must.always.be.0 |
adde0 | 30 2e 20 54 68 69 73 20 73 65 74 74 69 6e 67 20 69 6e 64 69 63 61 74 65 73 20 22 74 68 69 73 20 | 0..This.setting.indicates."this. |
ade00 | 73 79 73 74 65 6d 22 20 6f 72 20 22 6c 6f 63 61 6c 20 73 79 73 74 65 6d 2e 22 00 3a 61 62 62 72 | system".or."local.system.".:abbr |
ade20 | 3a 60 4e 48 52 50 20 28 4e 65 78 74 20 48 6f 70 20 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 | :`NHRP.(Next.Hop.Resolution.Prot |
ade40 | 6f 63 6f 6c 29 60 20 3a 72 66 63 3a 60 32 33 33 32 60 00 3a 61 62 62 72 3a 60 4e 50 54 76 36 20 | ocol)`.:rfc:`2332`.:abbr:`NPTv6. |
ade60 | 28 49 50 76 36 2d 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 | (IPv6-to-IPv6.Network.Prefix.Tra |
ade80 | 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 | nslation)`.is.an.address.transla |
adea0 | 74 69 6f 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 6e 65 | tion.technology.based.on.IPv6.ne |
adec0 | 74 77 6f 72 6b 73 2c 20 75 73 65 64 20 74 6f 20 63 6f 6e 76 65 72 74 20 61 6e 20 49 50 76 36 20 | tworks,.used.to.convert.an.IPv6. |
adee0 | 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 61 6e 20 49 50 76 36 20 6d 65 73 73 61 67 | address.prefix.in.an.IPv6.messag |
adf00 | 65 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 | e.into.another.IPv6.address.pref |
adf20 | 69 78 2e 20 57 65 20 63 61 6c 6c 20 74 68 69 73 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 | ix..We.call.this.address.transla |
adf40 | 74 69 6f 6e 20 6d 65 74 68 6f 64 20 4e 41 54 36 36 2e 20 44 65 76 69 63 65 73 20 74 68 61 74 20 | tion.method.NAT66..Devices.that. |
adf60 | 73 75 70 70 6f 72 74 20 74 68 65 20 4e 41 54 36 36 20 66 75 6e 63 74 69 6f 6e 20 61 72 65 20 63 | support.the.NAT66.function.are.c |
adf80 | 61 6c 6c 65 64 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2c 20 77 68 69 63 68 20 63 61 6e 20 70 | alled.NAT66.devices,.which.can.p |
adfa0 | 72 6f 76 69 64 65 20 4e 41 54 36 36 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 | rovide.NAT66.source.and.destinat |
adfc0 | 69 6f 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e | ion.address.translation.function |
adfe0 | 73 2e 00 3a 61 62 62 72 3a 60 4e 54 50 20 28 4e 65 74 77 6f 72 6b 20 54 69 6d 65 20 50 72 6f 74 | s..:abbr:`NTP.(Network.Time.Prot |
ae000 | 6f 63 6f 6c 60 29 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 | ocol`).is.a.networking.protocol. |
ae020 | 66 6f 72 20 63 6c 6f 63 6b 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 62 65 74 77 65 65 | for.clock.synchronization.betwee |
ae040 | 6e 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 6f 76 65 72 20 70 61 63 6b 65 74 2d 73 | n.computer.systems.over.packet-s |
ae060 | 77 69 74 63 68 65 64 2c 20 76 61 72 69 61 62 6c 65 2d 6c 61 74 65 6e 63 79 20 64 61 74 61 20 6e | witched,.variable-latency.data.n |
ae080 | 65 74 77 6f 72 6b 73 2e 20 49 6e 20 6f 70 65 72 61 74 69 6f 6e 20 73 69 6e 63 65 20 62 65 66 6f | etworks..In.operation.since.befo |
ae0a0 | 72 65 20 31 39 38 35 2c 20 4e 54 50 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 6f 6c 64 65 73 | re.1985,.NTP.is.one.of.the.oldes |
ae0c0 | 74 20 49 6e 74 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 20 63 75 72 72 65 6e 74 20 | t.Internet.protocols.in.current. |
ae0e0 | 75 73 65 2e 00 3a 61 62 62 72 3a 60 4f 53 50 46 20 28 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 | use..:abbr:`OSPF.(Open.Shortest. |
ae100 | 50 61 74 68 20 46 69 72 73 74 29 60 20 69 73 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 | Path.First)`.is.a.routing.protoc |
ae120 | 6f 6c 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 28 49 50 29 20 6e 65 | ol.for.Internet.Protocol.(IP).ne |
ae140 | 74 77 6f 72 6b 73 2e 20 49 74 20 75 73 65 73 20 61 20 6c 69 6e 6b 20 73 74 61 74 65 20 72 6f 75 | tworks..It.uses.a.link.state.rou |
ae160 | 74 69 6e 67 20 28 4c 53 52 29 20 61 6c 67 6f 72 69 74 68 6d 20 61 6e 64 20 66 61 6c 6c 73 20 69 | ting.(LSR).algorithm.and.falls.i |
ae180 | 6e 74 6f 20 74 68 65 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 69 6f 72 20 67 61 74 65 77 61 | nto.the.group.of.interior.gatewa |
ae1a0 | 79 20 70 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 2c 20 6f 70 65 72 61 74 69 6e 67 20 77 69 | y.protocols.(IGPs),.operating.wi |
ae1c0 | 74 68 69 6e 20 61 20 73 69 6e 67 6c 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 | thin.a.single.autonomous.system. |
ae1e0 | 28 41 53 29 2e 20 49 74 20 69 73 20 64 65 66 69 6e 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 | (AS)..It.is.defined.as.OSPF.Vers |
ae200 | 69 6f 6e 20 32 20 69 6e 20 3a 72 66 63 3a 60 32 33 32 38 60 20 28 31 39 39 38 29 20 66 6f 72 20 | ion.2.in.:rfc:`2328`.(1998).for. |
ae220 | 49 50 76 34 2e 20 55 70 64 61 74 65 73 20 66 6f 72 20 49 50 76 36 20 61 72 65 20 73 70 65 63 69 | IPv4..Updates.for.IPv6.are.speci |
ae240 | 66 69 65 64 20 61 73 20 4f 53 50 46 20 56 65 72 73 69 6f 6e 20 33 20 69 6e 20 3a 72 66 63 3a 60 | fied.as.OSPF.Version.3.in.:rfc:` |
ae260 | 35 33 34 30 60 20 28 32 30 30 38 29 2e 20 4f 53 50 46 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 | 5340`.(2008)..OSPF.supports.the. |
ae280 | 3a 61 62 62 72 3a 60 43 49 44 52 20 28 43 6c 61 73 73 6c 65 73 73 20 49 6e 74 65 72 2d 44 6f 6d | :abbr:`CIDR.(Classless.Inter-Dom |
ae2a0 | 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 64 72 65 73 73 69 6e 67 20 6d 6f 64 65 6c 2e 00 | ain.Routing)`.addressing.model.. |
ae2c0 | 3a 61 62 62 72 3a 60 50 49 4d 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 | :abbr:`PIM.(Protocol.Independent |
ae2e0 | 20 4d 75 6c 74 69 63 61 73 74 29 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | .Multicast)`.must.be.configured. |
ae300 | 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 | in.every.interface.of.every.part |
ae320 | 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d | icipating.router..Every.router.m |
ae340 | 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 | ust.also.have.the.location.of.th |
ae360 | 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 | e.Rendevouz.Point.manually.confi |
ae380 | 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 | gured..Then,.unidirectional.shar |
ae3a0 | 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a | ed.trees.rooted.at.the.Rendevouz |
ae3c0 | 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 | .Point.will.automatically.be.bui |
ae3e0 | 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 3a | lt.for.multicast.distribution..: |
ae400 | 61 62 62 72 3a 60 50 50 50 6f 45 20 28 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 50 72 6f 74 | abbr:`PPPoE.(Point-to-Point.Prot |
ae420 | 6f 63 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 | ocol.over.Ethernet)`.is.a.networ |
ae440 | 6b 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 50 50 50 | k.protocol.for.encapsulating.PPP |
ae460 | 20 66 72 61 6d 65 73 20 69 6e 73 69 64 65 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 2e 20 | .frames.inside.Ethernet.frames.. |
ae480 | 49 74 20 61 70 70 65 61 72 65 64 20 69 6e 20 31 39 39 39 2c 20 69 6e 20 74 68 65 20 63 6f 6e 74 | It.appeared.in.1999,.in.the.cont |
ae4a0 | 65 78 74 20 6f 66 20 74 68 65 20 62 6f 6f 6d 20 6f 66 20 44 53 4c 20 61 73 20 74 68 65 20 73 6f | ext.of.the.boom.of.DSL.as.the.so |
ae4c0 | 6c 75 74 69 6f 6e 20 66 6f 72 20 74 75 6e 6e 65 6c 69 6e 67 20 70 61 63 6b 65 74 73 20 6f 76 65 | lution.for.tunneling.packets.ove |
ae4e0 | 72 20 74 68 65 20 44 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 3a 61 62 62 | r.the.DSL.connection.to.the.:abb |
ae500 | 72 3a 60 49 53 50 73 20 28 49 6e 74 65 72 6e 65 74 20 53 65 72 76 69 63 65 20 50 72 6f 76 69 64 | r:`ISPs.(Internet.Service.Provid |
ae520 | 65 72 73 29 60 20 49 50 20 6e 65 74 77 6f 72 6b 2c 20 61 6e 64 20 66 72 6f 6d 20 74 68 65 72 65 | ers)`.IP.network,.and.from.there |
ae540 | 20 74 6f 20 74 68 65 20 72 65 73 74 20 6f 66 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 20 41 20 | .to.the.rest.of.the.Internet..A. |
ae560 | 32 30 30 35 20 6e 65 74 77 6f 72 6b 69 6e 67 20 62 6f 6f 6b 20 6e 6f 74 65 64 20 74 68 61 74 20 | 2005.networking.book.noted.that. |
ae580 | 22 4d 6f 73 74 20 44 53 4c 20 70 72 6f 76 69 64 65 72 73 20 75 73 65 20 50 50 50 6f 45 2c 20 77 | "Most.DSL.providers.use.PPPoE,.w |
ae5a0 | 68 69 63 68 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 65 6e | hich.provides.authentication,.en |
ae5c0 | 63 72 79 70 74 69 6f 6e 2c 20 61 6e 64 20 63 6f 6d 70 72 65 73 73 69 6f 6e 2e 22 20 54 79 70 69 | cryption,.and.compression.".Typi |
ae5e0 | 63 61 6c 20 75 73 65 20 6f 66 20 50 50 50 6f 45 20 69 6e 76 6f 6c 76 65 73 20 6c 65 76 65 72 61 | cal.use.of.PPPoE.involves.levera |
ae600 | 67 69 6e 67 20 74 68 65 20 50 50 50 20 66 61 63 69 6c 69 74 69 65 73 20 66 6f 72 20 61 75 74 68 | ging.the.PPP.facilities.for.auth |
ae620 | 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 74 68 20 61 20 75 73 65 72 6e | enticating.the.user.with.a.usern |
ae640 | 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 2c 20 70 72 65 64 6f 6d 69 6e 61 74 65 6c 79 20 | ame.and.password,.predominately. |
ae660 | 76 69 61 20 74 68 65 20 50 41 50 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 6c 65 73 73 20 6f 66 | via.the.PAP.protocol.and.less.of |
ae680 | 74 65 6e 20 76 69 61 20 43 48 41 50 2e 00 3a 61 62 62 72 3a 60 52 41 73 20 28 52 6f 75 74 65 72 | ten.via.CHAP..:abbr:`RAs.(Router |
ae6a0 | 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 61 72 65 20 64 65 73 63 72 69 62 65 64 20 | .advertisements)`.are.described. |
ae6c0 | 69 6e 20 3a 72 66 63 3a 60 34 38 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 36 2e 32 60 2e 20 54 68 | in.:rfc:`4861#section-4.6.2`..Th |
ae6e0 | 65 79 20 61 72 65 20 70 61 72 74 20 6f 66 20 77 68 61 74 20 69 73 20 6b 6e 6f 77 6e 20 61 73 20 | ey.are.part.of.what.is.known.as. |
ae700 | 3a 61 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 20 41 64 64 72 65 73 73 20 | :abbr:`SLAAC.(Stateless.Address. |
ae720 | 41 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 2e 00 3a 61 62 62 72 3a 60 52 49 50 20 | Autoconfiguration)`..:abbr:`RIP. |
ae740 | 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 | (Routing.Information.Protocol)`. |
ae760 | 69 73 20 61 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 69 6e 74 65 72 69 6f 72 20 67 61 | is.a.widely.deployed.interior.ga |
ae780 | 74 65 77 61 79 20 70 72 6f 74 6f 63 6f 6c 2e 20 52 49 50 20 77 61 73 20 64 65 76 65 6c 6f 70 65 | teway.protocol..RIP.was.develope |
ae7a0 | 64 20 69 6e 20 74 68 65 20 31 39 37 30 73 20 61 74 20 58 65 72 6f 78 20 4c 61 62 73 20 61 73 20 | d.in.the.1970s.at.Xerox.Labs.as. |
ae7c0 | 70 61 72 74 20 6f 66 20 74 68 65 20 58 4e 53 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | part.of.the.XNS.routing.protocol |
ae7e0 | 2e 20 52 49 50 20 69 73 20 61 20 64 69 73 74 61 6e 63 65 2d 76 65 63 74 6f 72 20 70 72 6f 74 6f | ..RIP.is.a.distance-vector.proto |
ae800 | 63 6f 6c 20 61 6e 64 20 69 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 42 65 6c 6c 6d 61 6e 2d | col.and.is.based.on.the.Bellman- |
ae820 | 46 6f 72 64 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 41 73 20 61 20 64 69 73 74 61 6e 63 65 2d 76 | Ford.algorithms..As.a.distance-v |
ae840 | 65 63 74 6f 72 20 70 72 6f 74 6f 63 6f 6c 2c 20 52 49 50 20 72 6f 75 74 65 72 20 73 65 6e 64 20 | ector.protocol,.RIP.router.send. |
ae860 | 75 70 64 61 74 65 73 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 70 65 72 69 6f 64 69 | updates.to.its.neighbors.periodi |
ae880 | 63 61 6c 6c 79 2c 20 74 68 75 73 20 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 63 6f 6e 76 65 72 67 | cally,.thus.allowing.the.converg |
ae8a0 | 65 6e 63 65 20 74 6f 20 61 20 6b 6e 6f 77 6e 20 74 6f 70 6f 6c 6f 67 79 2e 20 49 6e 20 65 61 63 | ence.to.a.known.topology..In.eac |
ae8c0 | 68 20 75 70 64 61 74 65 2c 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 74 6f 20 61 6e 79 20 67 69 | h.update,.the.distance.to.any.gi |
ae8e0 | 76 65 6e 20 6e 65 74 77 6f 72 6b 20 77 69 6c 6c 20 62 65 20 62 72 6f 61 64 63 61 73 74 20 74 6f | ven.network.will.be.broadcast.to |
ae900 | 20 69 74 73 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 72 6f 75 74 65 72 2e 00 3a 61 62 62 72 3a 60 | .its.neighboring.router..:abbr:` |
ae920 | 52 50 4b 49 20 28 52 65 73 6f 75 72 63 65 20 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 | RPKI.(Resource.Public.Key.Infras |
ae940 | 74 72 75 63 74 75 72 65 29 60 20 69 73 20 61 20 66 72 61 6d 65 77 6f 72 6b 20 3a 61 62 62 72 3a | tructure)`.is.a.framework.:abbr: |
ae960 | 60 50 4b 49 20 28 50 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 29 | `PKI.(Public.Key.Infrastructure) |
ae980 | 60 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 49 6e 74 65 72 6e 65 | `.designed.to.secure.the.Interne |
ae9a0 | 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 2e 20 49 74 20 61 73 73 | t.routing.infrastructure..It.ass |
ae9c0 | 6f 63 69 61 74 65 73 20 42 47 50 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 20 | ociates.BGP.route.announcements. |
ae9e0 | 77 69 74 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 3a 61 62 | with.the.correct.originating.:ab |
aea00 | 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 | br:`ASN.(Autonomus.System.Number |
aea20 | 29 60 20 77 68 69 63 68 20 42 47 50 20 72 6f 75 74 65 72 73 20 63 61 6e 20 74 68 65 6e 20 75 73 | )`.which.BGP.routers.can.then.us |
aea40 | 65 20 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 72 6f 75 74 65 20 61 67 61 69 6e 73 74 20 74 68 | e.to.check.each.route.against.th |
aea60 | 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 3a 61 62 62 72 3a 60 52 4f 41 20 28 52 6f 75 74 | e.corresponding.:abbr:`ROA.(Rout |
aea80 | 65 20 4f 72 69 67 69 6e 20 41 75 74 68 6f 72 69 73 61 74 69 6f 6e 29 60 20 66 6f 72 20 76 61 6c | e.Origin.Authorisation)`.for.val |
aeaa0 | 69 64 69 74 79 2e 20 52 50 4b 49 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | idity..RPKI.is.described.in.:rfc |
aeac0 | 3a 60 36 34 38 30 60 2e 00 3a 61 62 62 72 3a 60 52 50 4b 49 20 28 52 65 73 6f 75 72 63 65 20 50 | :`6480`..:abbr:`RPKI.(Resource.P |
aeae0 | 75 62 6c 69 63 20 4b 65 79 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 29 60 20 69 73 20 61 20 | ublic.Key.Infrastructure)`.is.a. |
aeb00 | 66 72 61 6d 65 77 6f 72 6b 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 | framework.designed.to.secure.the |
aeb20 | 20 49 6e 74 65 72 6e 65 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 | .Internet.routing.infrastructure |
aeb40 | 2e 20 49 74 20 61 73 73 6f 63 69 61 74 65 73 20 42 47 50 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e | ..It.associates.BGP.route.announ |
aeb60 | 63 65 6d 65 6e 74 73 20 77 69 74 68 20 74 68 65 20 63 6f 72 72 65 63 74 20 6f 72 69 67 69 6e 61 | cements.with.the.correct.origina |
aeb80 | 74 69 6e 67 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 75 73 20 53 79 73 74 65 | ting.:abbr:`ASN.(Autonomus.Syste |
aeba0 | 6d 20 4e 75 6d 62 65 72 29 60 20 77 68 69 63 68 20 42 47 50 20 72 6f 75 74 65 72 73 20 63 61 6e | m.Number)`.which.BGP.routers.can |
aebc0 | 20 74 68 65 6e 20 75 73 65 20 74 6f 20 63 68 65 63 6b 20 65 61 63 68 20 72 6f 75 74 65 20 61 67 | .then.use.to.check.each.route.ag |
aebe0 | 61 69 6e 73 74 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 3a 61 62 62 72 3a 60 52 | ainst.the.corresponding.:abbr:`R |
aec00 | 4f 41 20 28 52 6f 75 74 65 20 4f 72 69 67 69 6e 20 41 75 74 68 6f 72 69 73 61 74 69 6f 6e 29 60 | OA.(Route.Origin.Authorisation)` |
aec20 | 20 66 6f 72 20 76 61 6c 69 64 69 74 79 2e 20 52 50 4b 49 20 69 73 20 64 65 73 63 72 69 62 65 64 | .for.validity..RPKI.is.described |
aec40 | 20 69 6e 20 3a 72 66 63 3a 60 36 34 38 30 60 2e 00 3a 61 62 62 72 3a 60 52 50 53 20 28 52 65 63 | .in.:rfc:`6480`..:abbr:`RPS.(Rec |
aec60 | 65 69 76 65 20 50 61 63 6b 65 74 20 53 74 65 65 72 69 6e 67 29 60 20 69 73 20 6c 6f 67 69 63 61 | eive.Packet.Steering)`.is.logica |
aec80 | 6c 6c 79 20 61 20 73 6f 66 74 77 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 | lly.a.software.implementation.of |
aeca0 | 20 3a 61 62 62 72 3a 60 52 53 53 20 28 52 65 63 65 69 76 65 20 53 69 64 65 20 53 63 61 6c 69 6e | .:abbr:`RSS.(Receive.Side.Scalin |
aecc0 | 67 29 60 2e 20 42 65 69 6e 67 20 69 6e 20 73 6f 66 74 77 61 72 65 2c 20 69 74 20 69 73 20 6e 65 | g)`..Being.in.software,.it.is.ne |
aece0 | 63 65 73 73 61 72 69 6c 79 20 63 61 6c 6c 65 64 20 6c 61 74 65 72 20 69 6e 20 74 68 65 20 64 61 | cessarily.called.later.in.the.da |
aed00 | 74 61 70 61 74 68 2e 20 57 68 65 72 65 61 73 20 52 53 53 20 73 65 6c 65 63 74 73 20 74 68 65 20 | tapath..Whereas.RSS.selects.the. |
aed20 | 71 75 65 75 65 20 61 6e 64 20 68 65 6e 63 65 20 43 50 55 20 74 68 61 74 20 77 69 6c 6c 20 72 75 | queue.and.hence.CPU.that.will.ru |
aed40 | 6e 20 74 68 65 20 68 61 72 64 77 61 72 65 20 69 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 | n.the.hardware.interrupt.handler |
aed60 | 2c 20 52 50 53 20 73 65 6c 65 63 74 73 20 74 68 65 20 43 50 55 20 74 6f 20 70 65 72 66 6f 72 6d | ,.RPS.selects.the.CPU.to.perform |
aed80 | 20 70 72 6f 74 6f 63 6f 6c 20 70 72 6f 63 65 73 73 69 6e 67 20 61 62 6f 76 65 20 74 68 65 20 69 | .protocol.processing.above.the.i |
aeda0 | 6e 74 65 72 72 75 70 74 20 68 61 6e 64 6c 65 72 2e 20 54 68 69 73 20 69 73 20 61 63 63 6f 6d 70 | nterrupt.handler..This.is.accomp |
aedc0 | 6c 69 73 68 65 64 20 62 79 20 70 6c 61 63 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 6f 6e 20 | lished.by.placing.the.packet.on. |
aede0 | 74 68 65 20 64 65 73 69 72 65 64 20 43 50 55 27 73 20 62 61 63 6b 6c 6f 67 20 71 75 65 75 65 20 | the.desired.CPU's.backlog.queue. |
aee00 | 61 6e 64 20 77 61 6b 69 6e 67 20 75 70 20 74 68 65 20 43 50 55 20 66 6f 72 20 70 72 6f 63 65 73 | and.waking.up.the.CPU.for.proces |
aee20 | 73 69 6e 67 2e 20 52 50 53 20 68 61 73 20 73 6f 6d 65 20 61 64 76 61 6e 74 61 67 65 73 20 6f 76 | sing..RPS.has.some.advantages.ov |
aee40 | 65 72 20 52 53 53 3a 00 3a 61 62 62 72 3a 60 53 4c 41 41 43 20 28 53 74 61 74 65 6c 65 73 73 20 | er.RSS:.:abbr:`SLAAC.(Stateless. |
aee60 | 41 64 64 72 65 73 73 20 41 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 29 60 20 3a 72 66 63 | Address.Autoconfiguration)`.:rfc |
aee80 | 3a 60 34 38 36 32 60 2e 20 49 50 76 36 20 68 6f 73 74 73 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 | :`4862`..IPv6.hosts.can.configur |
aeea0 | 65 20 74 68 65 6d 73 65 6c 76 65 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 77 68 65 6e 20 | e.themselves.automatically.when. |
aeec0 | 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 75 73 69 | connected.to.an.IPv6.network.usi |
aeee0 | 6e 67 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 | ng.the.Neighbor.Discovery.Protoc |
aef00 | 6f 6c 20 76 69 61 20 3a 61 62 62 72 3a 60 49 43 4d 50 76 36 20 28 49 6e 74 65 72 6e 65 74 20 43 | ol.via.:abbr:`ICMPv6.(Internet.C |
aef20 | 6f 6e 74 72 6f 6c 20 4d 65 73 73 61 67 65 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 | ontrol.Message.Protocol.version. |
aef40 | 36 29 60 20 72 6f 75 74 65 72 20 64 69 73 63 6f 76 65 72 79 20 6d 65 73 73 61 67 65 73 2e 20 57 | 6)`.router.discovery.messages..W |
aef60 | 68 65 6e 20 66 69 72 73 74 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b | hen.first.connected.to.a.network |
aef80 | 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 72 6f 75 74 | ,.a.host.sends.a.link-local.rout |
aefa0 | 65 72 20 73 6f 6c 69 63 69 74 61 74 69 6f 6e 20 6d 75 6c 74 69 63 61 73 74 20 72 65 71 75 65 73 | er.solicitation.multicast.reques |
aefc0 | 74 20 66 6f 72 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 | t.for.its.configuration.paramete |
aefe0 | 72 73 3b 20 72 6f 75 74 65 72 73 20 72 65 73 70 6f 6e 64 20 74 6f 20 73 75 63 68 20 61 20 72 65 | rs;.routers.respond.to.such.a.re |
af000 | 71 75 65 73 74 20 77 69 74 68 20 61 20 72 6f 75 74 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e | quest.with.a.router.advertisemen |
af020 | 74 20 70 61 63 6b 65 74 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 49 6e 74 65 72 6e 65 74 20 | t.packet.that.contains.Internet. |
af040 | 4c 61 79 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 2e 00 | Layer.configuration.parameters.. |
af060 | 3a 61 62 62 72 3a 60 53 4e 41 54 20 28 53 6f 75 72 63 65 20 4e 65 74 77 6f 72 6b 20 41 64 64 72 | :abbr:`SNAT.(Source.Network.Addr |
af080 | 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 74 68 65 20 6d 6f 73 74 20 63 6f | ess.Translation)`.is.the.most.co |
af0a0 | 6d 6d 6f 6e 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 4e 65 74 77 6f 72 6b | mmon.form.of.:abbr:`NAT.(Network |
af0c0 | 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 61 6e 64 20 69 73 20 74 79 | .Address.Translation)`.and.is.ty |
af0e0 | 70 69 63 61 6c 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 73 69 6d 70 6c 79 20 61 73 20 4e 41 | pically.referred.to.simply.as.NA |
af100 | 54 2e 20 54 6f 20 62 65 20 6d 6f 72 65 20 63 6f 72 72 65 63 74 2c 20 77 68 61 74 20 6d 6f 73 74 | T..To.be.more.correct,.what.most |
af120 | 20 70 65 6f 70 6c 65 20 72 65 66 65 72 20 74 6f 20 61 73 20 3a 61 62 62 72 3a 60 4e 41 54 20 28 | .people.refer.to.as.:abbr:`NAT.( |
af140 | 4e 65 74 77 6f 72 6b 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 | Network.Address.Translation)`.is |
af160 | 20 61 63 74 75 61 6c 6c 79 20 74 68 65 20 70 72 6f 63 65 73 73 20 6f 66 20 3a 61 62 62 72 3a 60 | .actually.the.process.of.:abbr:` |
af180 | 50 41 54 20 28 50 6f 72 74 20 41 64 64 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 2c | PAT.(Port.Address.Translation)`, |
af1a0 | 20 6f 72 20 4e 41 54 20 6f 76 65 72 6c 6f 61 64 2e 20 53 4e 41 54 20 69 73 20 74 79 70 69 63 61 | .or.NAT.overload..SNAT.is.typica |
af1c0 | 6c 6c 79 20 75 73 65 64 20 62 79 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 73 2f 70 72 69 76 61 | lly.used.by.internal.users/priva |
af1e0 | 74 65 20 68 6f 73 74 73 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 | te.hosts.to.access.the.Internet. |
af200 | 2d 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 74 72 61 6e 73 6c 61 74 | -.the.source.address.is.translat |
af220 | 65 64 20 61 6e 64 20 74 68 75 73 20 6b 65 70 74 20 70 72 69 76 61 74 65 2e 00 3a 61 62 62 72 3a | ed.and.thus.kept.private..:abbr: |
af240 | 60 53 4e 41 54 36 34 20 28 49 50 76 36 2d 74 6f 2d 49 50 76 34 20 53 6f 75 72 63 65 20 41 64 64 | `SNAT64.(IPv6-to-IPv4.Source.Add |
af260 | 72 65 73 73 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 20 69 73 20 61 20 73 74 61 74 65 66 75 6c | ress.Translation)`.is.a.stateful |
af280 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 20 74 68 61 74 20 74 72 61 6e | .translation.mechanism.that.tran |
af2a0 | 73 6c 61 74 65 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 49 50 76 34 20 61 64 | slates.IPv6.addresses.to.IPv4.ad |
af2c0 | 64 72 65 73 73 65 73 2e 00 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c 65 20 4e 65 74 | dresses..:abbr:`SNMP.(Simple.Net |
af2e0 | 77 6f 72 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 6e | work.Management.Protocol)`.is.an |
af300 | 20 49 6e 74 65 72 6e 65 74 20 53 74 61 6e 64 61 72 64 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 | .Internet.Standard.protocol.for. |
af320 | 63 6f 6c 6c 65 63 74 69 6e 67 20 61 6e 64 20 6f 72 67 61 6e 69 7a 69 6e 67 20 69 6e 66 6f 72 6d | collecting.and.organizing.inform |
af340 | 61 74 69 6f 6e 20 61 62 6f 75 74 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 6f 6e 20 49 | ation.about.managed.devices.on.I |
af360 | 50 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 66 6f 72 20 6d 6f 64 69 66 79 69 6e 67 20 74 68 61 | P.networks.and.for.modifying.tha |
af380 | 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 63 68 61 6e 67 65 20 64 65 76 69 63 65 20 62 | t.information.to.change.device.b |
af3a0 | 65 68 61 76 69 6f 72 2e 20 44 65 76 69 63 65 73 20 74 68 61 74 20 74 79 70 69 63 61 6c 6c 79 20 | ehavior..Devices.that.typically. |
af3c0 | 73 75 70 70 6f 72 74 20 53 4e 4d 50 20 69 6e 63 6c 75 64 65 20 63 61 62 6c 65 20 6d 6f 64 65 6d | support.SNMP.include.cable.modem |
af3e0 | 73 2c 20 72 6f 75 74 65 72 73 2c 20 73 77 69 74 63 68 65 73 2c 20 73 65 72 76 65 72 73 2c 20 77 | s,.routers,.switches,.servers,.w |
af400 | 6f 72 6b 73 74 61 74 69 6f 6e 73 2c 20 70 72 69 6e 74 65 72 73 2c 20 61 6e 64 20 6d 6f 72 65 2e | orkstations,.printers,.and.more. |
af420 | 00 3a 61 62 62 72 3a 60 53 4e 50 54 76 36 20 28 53 6f 75 72 63 65 20 49 50 76 36 2d 74 6f 2d 49 | .:abbr:`SNPTv6.(Source.IPv6-to-I |
af440 | 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 6f 6e 29 60 | Pv6.Network.Prefix.Translation)` |
af460 | 20 54 68 65 20 63 6f 6e 76 65 72 73 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6d 61 69 6e | .The.conversion.function.is.main |
af480 | 6c 79 20 75 73 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 63 65 6e 61 72 69 | ly.used.in.the.following.scenari |
af4a0 | 6f 73 3a 00 3a 61 62 62 72 3a 60 53 53 48 20 28 53 65 63 75 72 65 20 53 68 65 6c 6c 29 60 20 69 | os:.:abbr:`SSH.(Secure.Shell)`.i |
af4c0 | 73 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6e 65 74 77 6f 72 6b 20 70 72 6f 74 6f 63 | s.a.cryptographic.network.protoc |
af4e0 | 6f 6c 20 66 6f 72 20 6f 70 65 72 61 74 69 6e 67 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 69 63 65 | ol.for.operating.network.service |
af500 | 73 20 73 65 63 75 72 65 6c 79 20 6f 76 65 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 | s.securely.over.an.unsecured.net |
af520 | 77 6f 72 6b 2e 20 54 68 65 20 73 74 61 6e 64 61 72 64 20 54 43 50 20 70 6f 72 74 20 66 6f 72 20 | work..The.standard.TCP.port.for. |
af540 | 53 53 48 20 69 73 20 32 32 2e 20 54 68 65 20 62 65 73 74 20 6b 6e 6f 77 6e 20 65 78 61 6d 70 6c | SSH.is.22..The.best.known.exampl |
af560 | 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 66 6f 72 20 72 65 6d 6f 74 65 20 6c 6f 67 69 | e.application.is.for.remote.logi |
af580 | 6e 20 74 6f 20 63 6f 6d 70 75 74 65 72 20 73 79 73 74 65 6d 73 20 62 79 20 75 73 65 72 73 2e 00 | n.to.computer.systems.by.users.. |
af5a0 | 3a 61 62 62 72 3a 60 53 53 54 50 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e 6e 65 | :abbr:`SSTP.(Secure.Socket.Tunne |
af5c0 | 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a 61 62 | ling.Protocol)`.is.a.form.of.:ab |
af5e0 | 62 72 3a 60 56 50 4e 20 28 56 69 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b | br:`VPN.(Virtual.Private.Network |
af600 | 29 60 20 74 75 6e 6e 65 6c 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e | )`.tunnel.that.provides.a.mechan |
af620 | 69 73 6d 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 68 72 | ism.to.transport.PPP.traffic.thr |
af640 | 6f 75 67 68 20 61 6e 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c 53 | ough.an.SSL/TLS.channel..SSL/TLS |
af660 | 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 72 69 | .provides.transport-level.securi |
af680 | 74 79 20 77 69 74 68 20 6b 65 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 | ty.with.key.negotiation,.encrypt |
af6a0 | 69 6f 6e 20 61 6e 64 20 74 72 61 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 6b 69 | ion.and.traffic.integrity.checki |
af6c0 | 6e 67 2e 20 54 68 65 20 75 73 65 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 50 20 | ng..The.use.of.SSL/TLS.over.TCP. |
af6e0 | 70 6f 72 74 20 34 34 33 20 61 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 20 74 68 72 | port.443.allows.SSTP.to.pass.thr |
af700 | 6f 75 67 68 20 76 69 72 74 75 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 | ough.virtually.all.firewalls.and |
af720 | 20 70 72 6f 78 79 20 73 65 72 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 74 68 65 6e | .proxy.servers.except.for.authen |
af740 | 74 69 63 61 74 65 64 20 77 65 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 53 53 54 50 | ticated.web.proxies..:abbr:`SSTP |
af760 | 20 28 53 65 63 75 72 65 20 53 6f 63 6b 65 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 | .(Secure.Socket.Tunneling.Protoc |
af780 | 6f 6c 29 60 20 69 73 20 61 20 66 6f 72 6d 20 6f 66 20 3a 61 62 62 72 3a 60 56 54 50 20 28 56 69 | ol)`.is.a.form.of.:abbr:`VTP.(Vi |
af7a0 | 72 74 75 61 6c 20 50 72 69 76 61 74 65 20 4e 65 74 77 6f 72 6b 29 60 20 74 75 6e 6e 65 6c 20 74 | rtual.Private.Network)`.tunnel.t |
af7c0 | 68 61 74 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 74 72 61 6e | hat.provides.a.mechanism.to.tran |
af7e0 | 73 70 6f 72 74 20 50 50 50 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 61 6e 20 53 53 4c | sport.PPP.traffic.through.an.SSL |
af800 | 2f 54 4c 53 20 63 68 61 6e 6e 65 6c 2e 20 53 53 4c 2f 54 4c 53 20 70 72 6f 76 69 64 65 73 20 74 | /TLS.channel..SSL/TLS.provides.t |
af820 | 72 61 6e 73 70 6f 72 74 2d 6c 65 76 65 6c 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 6b 65 79 | ransport-level.security.with.key |
af840 | 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 74 72 61 | .negotiation,.encryption.and.tra |
af860 | 66 66 69 63 20 69 6e 74 65 67 72 69 74 79 20 63 68 65 63 6b 69 6e 67 2e 20 54 68 65 20 75 73 65 | ffic.integrity.checking..The.use |
af880 | 20 6f 66 20 53 53 4c 2f 54 4c 53 20 6f 76 65 72 20 54 43 50 20 70 6f 72 74 20 34 34 33 20 28 62 | .of.SSL/TLS.over.TCP.port.443.(b |
af8a0 | 79 20 64 65 66 61 75 6c 74 2c 20 70 6f 72 74 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 29 20 | y.default,.port.can.be.changed). |
af8c0 | 61 6c 6c 6f 77 73 20 53 53 54 50 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 68 20 76 69 72 74 | allows.SSTP.to.pass.through.virt |
af8e0 | 75 61 6c 6c 79 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 73 20 61 6e 64 20 70 72 6f 78 79 20 73 65 | ually.all.firewalls.and.proxy.se |
af900 | 72 76 65 72 73 20 65 78 63 65 70 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 77 | rvers.except.for.authenticated.w |
af920 | 65 62 20 70 72 6f 78 69 65 73 2e 00 3a 61 62 62 72 3a 60 53 54 50 20 28 53 70 61 6e 6e 69 6e 67 | eb.proxies..:abbr:`STP.(Spanning |
af940 | 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 70 72 | .Tree.Protocol)`.is.a.network.pr |
af960 | 6f 74 6f 63 6f 6c 20 74 68 61 74 20 62 75 69 6c 64 73 20 61 20 6c 6f 6f 70 2d 66 72 65 65 20 6c | otocol.that.builds.a.loop-free.l |
af980 | 6f 67 69 63 61 6c 20 74 6f 70 6f 6c 6f 67 79 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 6e 65 74 | ogical.topology.for.Ethernet.net |
af9a0 | 77 6f 72 6b 73 2e 20 54 68 65 20 62 61 73 69 63 20 66 75 6e 63 74 69 6f 6e 20 6f 66 20 53 54 50 | works..The.basic.function.of.STP |
af9c0 | 20 69 73 20 74 6f 20 70 72 65 76 65 6e 74 20 62 72 69 64 67 65 20 6c 6f 6f 70 73 20 61 6e 64 20 | .is.to.prevent.bridge.loops.and. |
af9e0 | 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 72 61 64 69 61 74 69 6f 6e 20 74 68 61 74 20 72 65 73 | the.broadcast.radiation.that.res |
afa00 | 75 6c 74 73 20 66 72 6f 6d 20 74 68 65 6d 2e 20 53 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 61 6c | ults.from.them..Spanning.tree.al |
afa20 | 73 6f 20 61 6c 6c 6f 77 73 20 61 20 6e 65 74 77 6f 72 6b 20 64 65 73 69 67 6e 20 74 6f 20 69 6e | so.allows.a.network.design.to.in |
afa40 | 63 6c 75 64 65 20 62 61 63 6b 75 70 20 6c 69 6e 6b 73 20 70 72 6f 76 69 64 69 6e 67 20 66 61 75 | clude.backup.links.providing.fau |
afa60 | 6c 74 20 74 6f 6c 65 72 61 6e 63 65 20 69 66 20 61 6e 20 61 63 74 69 76 65 20 6c 69 6e 6b 20 66 | lt.tolerance.if.an.active.link.f |
afa80 | 61 69 6c 73 2e 00 3a 61 62 62 72 3a 60 54 46 54 50 20 28 54 72 69 76 69 61 6c 20 46 69 6c 65 20 | ails..:abbr:`TFTP.(Trivial.File. |
afaa0 | 54 72 61 6e 73 66 65 72 20 50 72 6f 74 6f 63 6f 6c 29 60 20 69 73 20 61 20 73 69 6d 70 6c 65 2c | Transfer.Protocol)`.is.a.simple, |
afac0 | 20 6c 6f 63 6b 73 74 65 70 20 66 69 6c 65 20 74 72 61 6e 73 66 65 72 20 70 72 6f 74 6f 63 6f 6c | .lockstep.file.transfer.protocol |
afae0 | 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 61 20 63 6c 69 65 6e 74 20 74 6f 20 67 65 74 20 61 20 | .which.allows.a.client.to.get.a. |
afb00 | 66 69 6c 65 20 66 72 6f 6d 20 6f 72 20 70 75 74 20 61 20 66 69 6c 65 20 6f 6e 74 6f 20 61 20 72 | file.from.or.put.a.file.onto.a.r |
afb20 | 65 6d 6f 74 65 20 68 6f 73 74 2e 20 4f 6e 65 20 6f 66 20 69 74 73 20 70 72 69 6d 61 72 79 20 75 | emote.host..One.of.its.primary.u |
afb40 | 73 65 73 20 69 73 20 69 6e 20 74 68 65 20 65 61 72 6c 79 20 73 74 61 67 65 73 20 6f 66 20 6e 6f | ses.is.in.the.early.stages.of.no |
afb60 | 64 65 73 20 62 6f 6f 74 69 6e 67 20 66 72 6f 6d 20 61 20 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 | des.booting.from.a.local.area.ne |
afb80 | 74 77 6f 72 6b 2e 20 54 46 54 50 20 68 61 73 20 62 65 65 6e 20 75 73 65 64 20 66 6f 72 20 74 68 | twork..TFTP.has.been.used.for.th |
afba0 | 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 76 65 72 | is.application.because.it.is.ver |
afbc0 | 79 20 73 69 6d 70 6c 65 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 2e 00 3a 61 62 62 72 3a 60 56 4e | y.simple.to.implement..:abbr:`VN |
afbe0 | 49 20 28 56 69 72 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 29 60 20 | I.(Virtual.Network.Identifier)`. |
afc00 | 69 73 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 61 20 75 6e 69 71 75 65 20 65 6c | is.an.identifier.for.a.unique.el |
afc20 | 65 6d 65 6e 74 20 6f 66 20 61 20 76 69 72 74 75 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 20 49 6e 20 | ement.of.a.virtual.network...In. |
afc40 | 6d 61 6e 79 20 73 69 74 75 61 74 69 6f 6e 73 20 74 68 69 73 20 6d 61 79 20 72 65 70 72 65 73 65 | many.situations.this.may.represe |
afc60 | 6e 74 20 61 6e 20 4c 32 20 73 65 67 6d 65 6e 74 2c 20 68 6f 77 65 76 65 72 2c 20 74 68 65 20 63 | nt.an.L2.segment,.however,.the.c |
afc80 | 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 64 65 66 69 6e 65 73 20 74 68 65 20 66 6f 72 77 61 72 64 | ontrol.plane.defines.the.forward |
afca0 | 69 6e 67 20 73 65 6d 61 6e 74 69 63 73 20 6f 66 20 64 65 63 61 70 73 75 6c 61 74 65 64 20 70 61 | ing.semantics.of.decapsulated.pa |
afcc0 | 63 6b 65 74 73 2e 20 54 68 65 20 56 4e 49 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 70 61 | ckets..The.VNI.MAY.be.used.as.pa |
afce0 | 72 74 20 6f 66 20 45 43 4d 50 20 66 6f 72 77 61 72 64 69 6e 67 20 64 65 63 69 73 69 6f 6e 73 20 | rt.of.ECMP.forwarding.decisions. |
afd00 | 6f 72 20 4d 41 59 20 62 65 20 75 73 65 64 20 61 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f | or.MAY.be.used.as.a.mechanism.to |
afd20 | 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 6f 76 65 72 6c 61 70 70 69 6e 67 | .distinguish.between.overlapping |
afd40 | 20 61 64 64 72 65 73 73 20 73 70 61 63 65 73 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 65 | .address.spaces.contained.in.the |
afd60 | 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 70 61 63 6b 65 74 20 77 68 65 6e 20 6c 6f 61 64 20 62 | .encapsulated.packet.when.load.b |
afd80 | 61 6c 61 6e 63 69 6e 67 20 61 63 72 6f 73 73 20 43 50 55 73 2e 00 3a 61 62 62 72 3a 60 56 52 46 | alancing.across.CPUs..:abbr:`VRF |
afda0 | 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 | .(Virtual.Routing.and.Forwarding |
afdc0 | 29 60 20 64 65 76 69 63 65 73 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 20 69 70 20 72 75 6c 65 | )`.devices.combined.with.ip.rule |
afde0 | 73 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 | s.provides.the.ability.to.create |
afe00 | 20 76 69 72 74 75 61 6c 20 72 6f 75 74 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 | .virtual.routing.and.forwarding. |
afe20 | 64 6f 6d 61 69 6e 73 20 28 61 6b 61 20 56 52 46 73 2c 20 56 52 46 2d 6c 69 74 65 20 74 6f 20 62 | domains.(aka.VRFs,.VRF-lite.to.b |
afe40 | 65 20 73 70 65 63 69 66 69 63 29 20 69 6e 20 74 68 65 20 4c 69 6e 75 78 20 6e 65 74 77 6f 72 6b | e.specific).in.the.Linux.network |
afe60 | 20 73 74 61 63 6b 2e 20 4f 6e 65 20 75 73 65 20 63 61 73 65 20 69 73 20 74 68 65 20 6d 75 6c 74 | .stack..One.use.case.is.the.mult |
afe80 | 69 2d 74 65 6e 61 6e 63 79 20 70 72 6f 62 6c 65 6d 20 77 68 65 72 65 20 65 61 63 68 20 74 65 6e | i-tenancy.problem.where.each.ten |
afea0 | 61 6e 74 20 68 61 73 20 74 68 65 69 72 20 6f 77 6e 20 75 6e 69 71 75 65 20 72 6f 75 74 69 6e 67 | ant.has.their.own.unique.routing |
afec0 | 20 74 61 62 6c 65 73 20 61 6e 64 20 69 6e 20 74 68 65 20 76 65 72 79 20 6c 65 61 73 74 20 6e 65 | .tables.and.in.the.very.least.ne |
afee0 | 65 64 20 64 69 66 66 65 72 65 6e 74 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 73 2e 00 3a | ed.different.default.gateways..: |
aff00 | 61 62 62 72 3a 60 56 58 4c 41 4e 20 28 56 69 72 74 75 61 6c 20 45 78 74 65 6e 73 69 62 6c 65 20 | abbr:`VXLAN.(Virtual.Extensible. |
aff20 | 4c 41 4e 29 60 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 76 69 72 74 75 61 6c 69 7a 61 74 69 6f | LAN)`.is.a.network.virtualizatio |
aff40 | 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 20 74 68 61 74 20 61 74 74 65 6d 70 74 73 20 74 6f 20 61 64 | n.technology.that.attempts.to.ad |
aff60 | 64 72 65 73 73 20 74 68 65 20 73 63 61 6c 61 62 69 6c 69 74 79 20 70 72 6f 62 6c 65 6d 73 20 61 | dress.the.scalability.problems.a |
aff80 | 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 6c 61 72 67 65 20 63 6c 6f 75 64 20 63 6f 6d 70 75 | ssociated.with.large.cloud.compu |
affa0 | 74 69 6e 67 20 64 65 70 6c 6f 79 6d 65 6e 74 73 2e 20 49 74 20 75 73 65 73 20 61 20 56 4c 41 4e | ting.deployments..It.uses.a.VLAN |
affc0 | 2d 6c 69 6b 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 65 63 68 6e 69 71 75 65 20 74 6f | -like.encapsulation.technique.to |
affe0 | 20 65 6e 63 61 70 73 75 6c 61 74 65 20 4f 53 49 20 6c 61 79 65 72 20 32 20 45 74 68 65 72 6e 65 | .encapsulate.OSI.layer.2.Etherne |
b0000 | 74 20 66 72 61 6d 65 73 20 77 69 74 68 69 6e 20 6c 61 79 65 72 20 34 20 55 44 50 20 64 61 74 61 | t.frames.within.layer.4.UDP.data |
b0020 | 67 72 61 6d 73 2c 20 75 73 69 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 | grams,.using.4789.as.the.default |
b0040 | 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 55 44 50 20 70 | .IANA-assigned.destination.UDP.p |
b0060 | 6f 72 74 20 6e 75 6d 62 65 72 2e 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 73 2c 20 77 68 69 | ort.number..VXLAN.endpoints,.whi |
b0080 | 63 68 20 74 65 72 6d 69 6e 61 74 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 61 6e 64 20 6d | ch.terminate.VXLAN.tunnels.and.m |
b00a0 | 61 79 20 62 65 20 65 69 74 68 65 72 20 76 69 72 74 75 61 6c 20 6f 72 20 70 68 79 73 69 63 61 6c | ay.be.either.virtual.or.physical |
b00c0 | 20 73 77 69 74 63 68 20 70 6f 72 74 73 2c 20 61 72 65 20 6b 6e 6f 77 6e 20 61 73 20 3a 61 62 62 | .switch.ports,.are.known.as.:abb |
b00e0 | 72 3a 60 56 54 45 50 73 20 28 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 | r:`VTEPs.(VXLAN.tunnel.endpoints |
b0100 | 29 60 2e 00 3a 61 62 62 72 3a 60 57 41 50 20 28 57 69 72 65 6c 65 73 73 20 41 63 63 65 73 73 2d | )`..:abbr:`WAP.(Wireless.Access- |
b0120 | 50 6f 69 6e 74 29 60 20 70 72 6f 76 69 64 65 73 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 20 | Point)`.provides.network.access. |
b0140 | 74 6f 20 63 6f 6e 6e 65 63 74 69 6e 67 20 73 74 61 74 69 6f 6e 73 20 69 66 20 74 68 65 20 70 68 | to.connecting.stations.if.the.ph |
b0160 | 79 73 69 63 61 6c 20 68 61 72 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 61 63 74 69 6e 67 20 | ysical.hardware.supports.acting. |
b0180 | 61 73 20 61 20 57 41 50 00 3a 61 62 62 72 3a 60 57 4c 41 4e 20 28 57 69 72 65 6c 65 73 73 20 4c | as.a.WAP.:abbr:`WLAN.(Wireless.L |
b01a0 | 41 4e 29 60 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 20 38 30 32 2e 31 31 20 28 61 | AN)`.interface.provide.802.11.(a |
b01c0 | 2f 62 2f 67 2f 6e 2f 61 63 29 20 77 69 72 65 6c 65 73 73 20 73 75 70 70 6f 72 74 20 28 63 6f 6d | /b/g/n/ac).wireless.support.(com |
b01e0 | 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 57 69 2d 46 69 29 20 62 79 20 6d | monly.referred.to.as.Wi-Fi).by.m |
b0200 | 65 61 6e 73 20 6f 66 20 63 6f 6d 70 61 74 69 62 6c 65 20 68 61 72 64 77 61 72 65 2e 20 49 66 20 | eans.of.compatible.hardware..If. |
b0220 | 79 6f 75 72 20 68 61 72 64 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2c 20 56 79 4f 53 20 | your.hardware.supports.it,.VyOS. |
b0240 | 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 70 6c 65 20 6c 6f 67 69 63 61 6c 20 77 69 72 65 6c 65 | supports.multiple.logical.wirele |
b0260 | 73 73 20 69 6e 74 65 72 66 61 63 65 73 20 70 65 72 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 63 | ss.interfaces.per.physical.devic |
b0280 | 65 2e 00 3a 61 62 62 72 3a 60 57 50 41 20 28 57 69 2d 46 69 20 50 72 6f 74 65 63 74 65 64 20 41 | e..:abbr:`WPA.(Wi-Fi.Protected.A |
b02a0 | 63 63 65 73 73 29 60 20 61 6e 64 20 57 50 41 32 20 45 6e 74 65 72 70 72 69 73 65 20 69 6e 20 63 | ccess)`.and.WPA2.Enterprise.in.c |
b02c0 | 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 68 20 38 30 32 2e 31 78 20 62 61 73 65 64 20 61 75 74 | ombination.with.802.1x.based.aut |
b02e0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 | hentication.can.be.used.to.authe |
b0300 | 6e 74 69 63 61 74 65 20 75 73 65 72 73 20 6f 72 20 63 6f 6d 70 75 74 65 72 73 20 69 6e 20 61 20 | nticate.users.or.computers.in.a. |
b0320 | 64 6f 6d 61 69 6e 2e 00 3a 61 62 62 72 3a 60 6d 47 52 45 20 28 4d 75 6c 74 69 70 6f 69 6e 74 20 | domain..:abbr:`mGRE.(Multipoint. |
b0340 | 47 65 6e 65 72 69 63 20 52 6f 75 74 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 29 60 20 | Generic.Routing.Encapsulation)`. |
b0360 | 3a 72 66 63 3a 60 31 37 30 32 60 00 3a 63 66 67 63 6d 64 3a 60 61 64 76 2d 72 6f 75 74 65 72 20 | :rfc:`1702`.:cfgcmd:`adv-router. |
b0380 | 3c 41 2e 42 2e 43 2e 44 3e 60 20 e2 80 93 20 72 6f 75 74 65 72 20 69 64 2c 20 77 68 69 63 68 20 | <A.B.C.D>`.....router.id,.which. |
b03a0 | 6c 69 6e 6b 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 6e 65 65 64 20 74 6f 20 62 65 20 72 | link.advertisements.need.to.be.r |
b03c0 | 65 76 69 65 77 65 64 2e 00 3a 63 66 67 63 6d 64 3a 60 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 | eviewed..:cfgcmd:`self-originate |
b03e0 | 60 20 64 69 73 70 6c 61 79 73 20 6f 6e 6c 79 20 73 65 6c 66 2d 6f 72 69 67 69 6e 61 74 65 64 20 | `.displays.only.self-originated. |
b0400 | 4c 53 41 73 20 66 72 6f 6d 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2e 00 3a 63 66 67 | LSAs.from.the.local.router..:cfg |
b0420 | 63 6d 64 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 20 | cmd:`set.service.conntrack-sync. |
b0440 | 69 6e 74 65 72 66 61 63 65 20 65 74 68 30 20 70 65 65 72 20 31 39 32 2e 31 36 38 2e 30 2e 32 35 | interface.eth0.peer.192.168.0.25 |
b0460 | 30 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 | 0`.:code:`set.service.webproxy.u |
b0480 | 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 61 75 74 6f 2d 75 70 64 | rl-filtering.squidguard.auto-upd |
b04a0 | 61 74 65 20 75 70 64 61 74 65 2d 68 6f 75 72 20 32 33 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 | ate.update-hour.23`.:code:`set.s |
b04c0 | 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c 74 65 72 69 6e 67 20 73 71 | ervice.webproxy.url-filtering.sq |
b04e0 | 75 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 20 61 64 73 60 00 3a 63 6f | uidguard.block-category.ads`.:co |
b0500 | 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 75 72 6c 2d 66 69 6c | de:`set.service.webproxy.url-fil |
b0520 | 74 65 72 69 6e 67 20 73 71 75 69 64 67 75 61 72 64 20 62 6c 6f 63 6b 2d 63 61 74 65 67 6f 72 79 | tering.squidguard.block-category |
b0540 | 20 6d 61 6c 77 61 72 65 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 | .malware`.:code:`set.service.web |
b0560 | 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 2d 61 64 64 72 | proxy.whitelist.destination-addr |
b0580 | 65 73 73 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 60 00 3a 63 6f 64 65 3a 60 73 65 74 20 73 65 72 | ess.192.0.2.0/24`.:code:`set.ser |
b05a0 | 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 20 64 65 73 74 69 6e 61 74 | vice.webproxy.whitelist.destinat |
b05c0 | 69 6f 6e 2d 61 64 64 72 65 73 73 20 31 39 38 2e 35 31 2e 31 30 30 2e 33 33 60 00 3a 63 6f 64 65 | ion-address.198.51.100.33`.:code |
b05e0 | 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 73 74 | :`set.service.webproxy.whitelist |
b0600 | 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 32 60 00 3a 63 6f | .source-address.192.168.1.2`.:co |
b0620 | 64 65 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 77 65 62 70 72 6f 78 79 20 77 68 69 74 65 6c 69 | de:`set.service.webproxy.whiteli |
b0640 | 73 74 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 | st.source-address.192.168.2.0/24 |
b0660 | 60 00 3a 6c 61 73 74 70 72 6f 6f 66 72 65 61 64 3a 32 30 32 31 2d 30 37 2d 31 32 00 3a 6f 70 63 | `.:lastproofread:2021-07-12.:opc |
b0680 | 6d 64 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 77 69 72 65 67 75 61 72 64 20 6b 65 79 2d 70 | md:`generate.pki.wireguard.key-p |
b06a0 | 61 69 72 60 2e 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 00 3a 72 65 66 3a 60 72 | air`..:ref:`routing-bgp`.:ref:`r |
b06c0 | 6f 75 74 69 6e 67 2d 62 67 70 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d | outing-bgp`:.``set.vrf.name.<nam |
b06e0 | 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 62 67 70 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 | e>.protocols.bgp....``.:ref:`rou |
b0700 | 74 69 6e 67 2d 69 73 69 73 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 73 69 73 60 3a 20 | ting-isis`.:ref:`routing-isis`:. |
b0720 | 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 | ``set.vrf.name.<name>.protocols. |
b0740 | 69 73 69 73 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 00 3a | isis....``.:ref:`routing-ospf`.: |
b0760 | 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 | ref:`routing-ospf`:.``set.vrf.na |
b0780 | 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 20 2e 2e 2e 60 60 00 3a | me.<name>.protocols.ospf....``.: |
b07a0 | 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 76 33 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 | ref:`routing-ospfv3`.:ref:`routi |
b07c0 | 6e 67 2d 6f 73 70 66 76 33 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 | ng-ospfv3`:.``set.vrf.name.<name |
b07e0 | 3e 20 70 72 6f 74 6f 63 6f 6c 73 20 6f 73 70 66 76 33 20 2e 2e 2e 60 60 00 3a 72 65 66 3a 60 72 | >.protocols.ospfv3....``.:ref:`r |
b0800 | 6f 75 74 69 6e 67 2d 73 74 61 74 69 63 60 00 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 74 61 | outing-static`.:ref:`routing-sta |
b0820 | 74 69 63 60 3a 20 60 60 73 65 74 20 76 72 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 70 72 6f 74 | tic`:.``set.vrf.name.<name>.prot |
b0840 | 6f 63 6f 6c 73 20 73 74 61 74 69 63 20 2e 2e 2e 60 60 00 3a 72 66 63 3a 60 32 31 33 31 60 20 73 | ocols.static....``.:rfc:`2131`.s |
b0860 | 74 61 74 65 73 3a 20 54 68 65 20 63 6c 69 65 6e 74 20 4d 41 59 20 63 68 6f 6f 73 65 20 74 6f 20 | tates:.The.client.MAY.choose.to. |
b0880 | 65 78 70 6c 69 63 69 74 6c 79 20 70 72 6f 76 69 64 65 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 | explicitly.provide.the.identifie |
b08a0 | 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 | r.through.the.'client.identifier |
b08c0 | 27 20 6f 70 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6c 69 65 73 | '.option..If.the.client.supplies |
b08e0 | 20 61 20 27 63 6c 69 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 27 2c 20 74 68 65 20 63 6c 69 65 | .a.'client.identifier',.the.clie |
b0900 | 6e 74 20 4d 55 53 54 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 27 63 6c 69 65 6e 74 20 69 64 65 | nt.MUST.use.the.same.'client.ide |
b0920 | 6e 74 69 66 69 65 72 27 20 69 6e 20 61 6c 6c 20 73 75 62 73 65 71 75 65 6e 74 20 6d 65 73 73 61 | ntifier'.in.all.subsequent.messa |
b0940 | 67 65 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 20 4d 55 53 54 20 75 73 65 20 74 68 61 | ges,.and.the.server.MUST.use.tha |
b0960 | 74 20 69 64 65 6e 74 69 66 69 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 63 6c 69 | t.identifier.to.identify.the.cli |
b0980 | 65 6e 74 2e 00 3a 72 66 63 3a 60 32 31 33 36 60 20 42 61 73 65 64 00 3a 72 66 63 3a 60 32 33 32 | ent..:rfc:`2136`.Based.:rfc:`232 |
b09a0 | 38 60 2c 20 74 68 65 20 73 75 63 63 65 73 73 6f 72 20 74 6f 20 3a 72 66 63 3a 60 31 35 38 33 60 | 8`,.the.successor.to.:rfc:`1583` |
b09c0 | 2c 20 73 75 67 67 65 73 74 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 73 65 63 74 69 6f 6e 20 | ,.suggests.according.to.section. |
b09e0 | 47 2e 32 20 28 63 68 61 6e 67 65 73 29 20 69 6e 20 73 65 63 74 69 6f 6e 20 31 36 2e 34 2e 31 20 | G.2.(changes).in.section.16.4.1. |
b0a00 | 61 20 63 68 61 6e 67 65 20 74 6f 20 74 68 65 20 70 61 74 68 20 70 72 65 66 65 72 65 6e 63 65 20 | a.change.to.the.path.preference. |
b0a20 | 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 70 72 65 76 65 6e 74 73 20 70 6f 73 73 69 62 6c 65 | algorithm.that.prevents.possible |
b0a40 | 20 72 6f 75 74 69 6e 67 20 6c 6f 6f 70 73 20 74 68 61 74 20 77 65 72 65 20 70 6f 73 73 69 62 6c | .routing.loops.that.were.possibl |
b0a60 | 65 20 69 6e 20 74 68 65 20 6f 6c 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4f 53 50 46 76 32 2e 20 | e.in.the.old.version.of.OSPFv2.. |
b0a80 | 4d 6f 72 65 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 69 74 20 64 65 6d 61 6e 64 73 20 74 68 61 | More.specifically.it.demands.tha |
b0aa0 | 74 20 69 6e 74 65 72 2d 61 72 65 61 20 70 61 74 68 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 | t.inter-area.paths.and.intra-are |
b0ac0 | 61 20 62 61 63 6b 62 6f 6e 65 20 70 61 74 68 20 61 72 65 20 6e 6f 77 20 6f 66 20 65 71 75 61 6c | a.backbone.path.are.now.of.equal |
b0ae0 | 20 70 72 65 66 65 72 65 6e 63 65 20 62 75 74 20 73 74 69 6c 6c 20 62 6f 74 68 20 70 72 65 66 65 | .preference.but.still.both.prefe |
b0b00 | 72 72 65 64 20 74 6f 20 65 78 74 65 72 6e 61 6c 20 70 61 74 68 73 2e 00 3a 76 79 74 61 73 6b 3a | rred.to.external.paths..:vytask: |
b0b20 | 60 54 33 36 34 32 60 20 64 65 73 63 72 69 62 65 73 20 61 20 6e 65 77 20 43 4c 49 20 73 75 62 73 | `T3642`.describes.a.new.CLI.subs |
b0b40 | 79 73 74 65 6d 20 74 68 61 74 20 73 65 72 76 65 73 20 61 73 20 61 20 22 63 65 72 74 73 74 6f 72 | ystem.that.serves.as.a."certstor |
b0b60 | 65 22 20 74 6f 20 61 6c 6c 20 73 65 72 76 69 63 65 73 20 72 65 71 75 69 72 69 6e 67 20 61 6e 79 | e".to.all.services.requiring.any |
b0b80 | 20 6b 69 6e 64 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 20 6b 65 79 28 73 29 2e 20 49 6e 20 73 | .kind.of.encryption.key(s)..In.s |
b0ba0 | 68 6f 72 74 2c 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 76 61 74 65 20 63 65 72 74 69 66 69 | hort,.public.and.private.certifi |
b0bc0 | 63 61 74 65 73 20 61 72 65 20 6e 6f 77 20 73 74 6f 72 65 64 20 69 6e 20 50 4b 43 53 23 38 20 66 | cates.are.now.stored.in.PKCS#8.f |
b0be0 | 6f 72 6d 61 74 20 69 6e 20 74 68 65 20 72 65 67 75 6c 61 72 20 56 79 4f 53 20 43 4c 49 2e 20 4b | ormat.in.the.regular.VyOS.CLI..K |
b0c00 | 65 79 73 20 63 61 6e 20 6e 6f 77 20 62 65 20 61 64 64 65 64 2c 20 65 64 69 74 65 64 2c 20 61 6e | eys.can.now.be.added,.edited,.an |
b0c20 | 64 20 64 65 6c 65 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 20 73 65 74 2f | d.deleted.using.the.regular.set/ |
b0c40 | 65 64 69 74 2f 64 65 6c 65 74 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 2e 00 3c 31 2d 36 35 35 | edit/delete.CLI.commands..<1-655 |
b0c60 | 33 35 3e 3a 20 4e 75 6d 62 65 72 65 64 20 70 6f 72 74 2e 00 3c 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 | 35>:.Numbered.port..<aa:nn:nn>:. |
b0c80 | 45 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 20 72 65 67 75 6c 61 72 20 | Extended.community.list.regular. |
b0ca0 | 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 2f 78 3e 3a | expression..<h:h:h:h:h:h:h:h/x>: |
b0cc0 | 20 49 50 76 36 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a | .IPv6.prefix.to.match..<h:h:h:h: |
b0ce0 | 68 3a 68 3a 68 3a 68 3e 2d 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3e 3a 20 49 50 76 36 | h:h:h:h>-<h:h:h:h:h:h:h:h>:.IPv6 |
b0d00 | 20 72 61 6e 67 65 20 74 6f 20 6d 61 74 63 68 2e 00 3c 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a 68 3a | .range.to.match..<h:h:h:h:h:h:h: |
b0d20 | 68 3e 3a 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 3c 6c 69 6e 65 | h>:.IPv6.address.to.match..<line |
b0d40 | 73 3e 00 3c 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 20 66 72 6f 6d 20 33 34 20 2d 20 31 37 | s>.<number>.must.be.from.34.-.17 |
b0d60 | 33 2e 20 46 6f 72 20 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 73 20 69 74 20 73 68 6f 75 6c 64 | 3..For.80.MHz.channels.it.should |
b0d80 | 20 62 65 20 63 68 61 6e 6e 65 6c 20 2b 20 36 2e 00 3c 6e 75 6d 62 65 72 3e 20 e2 80 93 20 61 72 | .be.channel.+.6..<number>.....ar |
b0da0 | 65 61 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 72 6f 75 67 68 20 77 68 69 63 68 20 61 20 76 69 | ea.identifier.through.which.a.vi |
b0dc0 | 72 74 75 61 6c 20 6c 69 6e 6b 20 67 6f 65 73 2e 20 3c 41 2e 42 2e 43 2e 44 3e 20 e2 80 93 20 41 | rtual.link.goes..<A.B.C.D>.....A |
b0de0 | 42 52 20 72 6f 75 74 65 72 2d 69 64 20 77 69 74 68 20 77 68 69 63 68 20 61 20 76 69 72 74 75 61 | BR.router-id.with.which.a.virtua |
b0e00 | 6c 20 6c 69 6e 6b 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 2e 20 56 69 72 74 75 61 6c 20 6c | l.link.is.established..Virtual.l |
b0e20 | 69 6e 6b 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 62 6f 74 68 20 72 | ink.must.be.configured.on.both.r |
b0e40 | 6f 75 74 65 72 73 2e 00 3c 70 6f 72 74 20 6e 61 6d 65 3e 3a 20 4e 61 6d 65 64 20 70 6f 72 74 20 | outers..<port.name>:.Named.port. |
b0e60 | 28 61 6e 79 20 6e 61 6d 65 20 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2c 20 65 2e 67 2e | (any.name.in./etc/services,.e.g. |
b0e80 | 2c 20 68 74 74 70 29 2e 00 3c 72 74 20 61 61 3a 6e 6e 3a 6e 6e 3e 3a 20 52 6f 75 74 65 20 54 61 | ,.http)..<rt.aa:nn:nn>:.Route.Ta |
b0ea0 | 72 67 65 74 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 6f 6f 20 61 61 | rget.regular.expression..<soo.aa |
b0ec0 | 3a 6e 6e 3a 6e 6e 3e 3a 20 53 69 74 65 20 6f 66 20 4f 72 69 67 69 6e 20 72 65 67 75 6c 61 72 20 | :nn:nn>:.Site.of.Origin.regular. |
b0ee0 | 65 78 70 72 65 73 73 69 6f 6e 2e 00 3c 73 74 61 72 74 3e 2d 3c 65 6e 64 3e 3a 20 4e 75 6d 62 65 | expression..<start>-<end>:.Numbe |
b0f00 | 72 65 64 20 70 6f 72 74 20 72 61 6e 67 65 20 28 65 2e 67 2e 2c 20 31 30 30 31 2d 31 30 30 35 29 | red.port.range.(e.g.,.1001-1005) |
b0f20 | 2e 00 3c 78 2e 78 2e 78 2e 78 2f 78 3e 3a 20 53 75 62 6e 65 74 20 74 6f 20 6d 61 74 63 68 2e 00 | ..<x.x.x.x/x>:.Subnet.to.match.. |
b0f40 | 3c 78 2e 78 2e 78 2e 78 3e 2d 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 72 61 6e 67 65 20 74 6f | <x.x.x.x>-<x.x.x.x>:.IP.range.to |
b0f60 | 20 6d 61 74 63 68 2e 00 3c 78 2e 78 2e 78 2e 78 3e 3a 20 49 50 20 61 64 64 72 65 73 73 20 74 6f | .match..<x.x.x.x>:.IP.address.to |
b0f80 | 20 6d 61 74 63 68 2e 00 41 20 2a 2a 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 | .match..A.**domain.group**.repre |
b0fa0 | 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 64 6f 6d 61 69 6e 73 2e 00 41 | sents.a.collection.of.domains..A |
b0fc0 | 20 2a 2a 6d 61 63 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 61 20 63 6f 6c 6c | .**mac.group**.represents.a.coll |
b0fe0 | 65 63 74 69 6f 6e 20 6f 66 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 2e 00 41 20 2a 2a 70 6f 72 | ection.of.mac.addresses..A.**por |
b1000 | 74 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 73 65 6e 74 73 20 6f 6e 6c 79 20 70 6f 72 74 20 6e | t.group**.represents.only.port.n |
b1020 | 75 6d 62 65 72 73 2c 20 6e 6f 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 50 6f 72 74 20 67 | umbers,.not.the.protocol..Port.g |
b1040 | 72 6f 75 70 73 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 66 6f 72 20 65 69 74 68 | roups.can.be.referenced.for.eith |
b1060 | 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 | er.TCP.or.UDP..It.is.recommended |
b1080 | 20 74 68 61 74 20 54 43 50 20 61 6e 64 20 55 44 50 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 | .that.TCP.and.UDP.groups.are.cre |
b10a0 | 61 74 65 64 20 73 65 70 61 72 61 74 65 6c 79 20 74 6f 20 61 76 6f 69 64 20 61 63 63 69 64 65 6e | ated.separately.to.avoid.acciden |
b10c0 | 74 61 6c 6c 79 20 66 69 6c 74 65 72 69 6e 67 20 75 6e 6e 65 63 65 73 73 61 72 79 20 70 6f 72 74 | tally.filtering.unnecessary.port |
b10e0 | 73 2e 20 52 61 6e 67 65 73 20 6f 66 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 | s..Ranges.of.ports.can.be.specif |
b1100 | 69 65 64 20 62 79 20 75 73 69 6e 67 20 60 2d 60 2e 00 41 20 2a 62 69 74 2a 20 69 73 20 77 72 69 | ied.by.using.`-`..A.*bit*.is.wri |
b1120 | 74 74 65 6e 20 61 73 20 2a 2a 62 69 74 2a 2a 2c 00 41 20 3a 61 62 62 72 3a 60 4e 49 53 20 28 4e | tten.as.**bit**,.A.:abbr:`NIS.(N |
b1140 | 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 72 76 69 63 65 29 60 20 64 6f 6d | etwork.Information.Service)`.dom |
b1160 | 61 69 6e 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 44 48 | ain.can.be.set.to.be.used.for.DH |
b1180 | 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 41 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f | CPv6.clients..A.BGP.confederatio |
b11a0 | 6e 20 64 69 76 69 64 65 73 20 6f 75 72 20 41 53 20 69 6e 74 6f 20 73 75 62 2d 41 53 65 73 20 74 | n.divides.our.AS.into.sub-ASes.t |
b11c0 | 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 72 65 71 75 69 72 65 64 20 | o.reduce.the.number.of.required. |
b11e0 | 49 42 47 50 20 70 65 65 72 69 6e 67 73 2e 20 57 69 74 68 69 6e 20 61 20 73 75 62 2d 41 53 20 77 | IBGP.peerings..Within.a.sub-AS.w |
b1200 | 65 20 73 74 69 6c 6c 20 72 65 71 75 69 72 65 20 66 75 6c 6c 2d 6d 65 73 68 20 49 42 47 50 20 62 | e.still.require.full-mesh.IBGP.b |
b1220 | 75 74 20 62 65 74 77 65 65 6e 20 74 68 65 73 65 20 73 75 62 2d 41 53 65 73 20 77 65 20 75 73 65 | ut.between.these.sub-ASes.we.use |
b1240 | 20 73 6f 6d 65 74 68 69 6e 67 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 45 42 47 50 20 | .something.that.looks.like.EBGP. |
b1260 | 62 75 74 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 49 42 47 50 20 28 63 61 6c 6c 65 64 20 63 6f | but.behaves.like.IBGP.(called.co |
b1280 | 6e 66 65 64 65 72 61 74 69 6f 6e 20 42 47 50 29 2e 20 43 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 | nfederation.BGP)..Confederation. |
b12a0 | 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 | mechanism.is.described.in.:rfc:` |
b12c0 | 35 30 36 35 60 00 41 20 42 47 50 2d 73 70 65 61 6b 69 6e 67 20 72 6f 75 74 65 72 20 6c 69 6b 65 | 5065`.A.BGP-speaking.router.like |
b12e0 | 20 56 79 4f 53 20 63 61 6e 20 72 65 74 72 69 65 76 65 20 52 4f 41 20 69 6e 66 6f 72 6d 61 74 69 | .VyOS.can.retrieve.ROA.informati |
b1300 | 6f 6e 20 66 72 6f 6d 20 52 50 4b 49 20 22 52 65 6c 79 69 6e 67 20 50 61 72 74 79 20 73 6f 66 74 | on.from.RPKI."Relying.Party.soft |
b1320 | 77 61 72 65 22 20 28 6f 66 74 65 6e 20 6a 75 73 74 20 63 61 6c 6c 65 64 20 61 6e 20 22 52 50 4b | ware".(often.just.called.an."RPK |
b1340 | 49 20 73 65 72 76 65 72 22 20 6f 72 20 22 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 22 29 20 62 | I.server".or."RPKI.validator").b |
b1360 | 79 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 54 52 20 28 52 50 4b 49 20 74 6f 20 52 6f 75 74 | y.using.:abbr:`RTR.(RPKI.to.Rout |
b1380 | 65 72 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c | er)`.protocol..There.are.several |
b13a0 | 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 74 6f 20 | .open.source.implementations.to. |
b13c0 | 63 68 6f 6f 73 65 20 66 72 6f 6d 2c 20 73 75 63 68 20 61 73 20 4e 4c 4e 65 74 4c 61 62 73 27 20 | choose.from,.such.as.NLNetLabs'. |
b13e0 | 52 6f 75 74 69 6e 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 52 75 73 74 29 2c 20 43 | Routinator_.(written.in.Rust),.C |
b1400 | 6c 6f 75 64 66 6c 61 72 65 27 73 20 47 6f 52 54 52 5f 20 61 6e 64 20 4f 63 74 6f 52 50 4b 49 5f | loudflare's.GoRTR_.and.OctoRPKI_ |
b1420 | 20 28 77 72 69 74 74 65 6e 20 69 6e 20 47 6f 29 2c 20 61 6e 64 20 52 49 50 45 20 4e 43 43 27 73 | .(written.in.Go),.and.RIPE.NCC's |
b1440 | 20 52 50 4b 49 20 56 61 6c 69 64 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 4a 61 76 | .RPKI.Validator_.(written.in.Jav |
b1460 | 61 29 2e 20 54 68 65 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 64 65 73 63 72 69 62 65 | a)..The.RTR.protocol.is.describe |
b1480 | 64 20 69 6e 20 3a 72 66 63 3a 60 38 32 31 30 60 2e 00 41 20 42 47 50 2d 73 70 65 61 6b 69 6e 67 | d.in.:rfc:`8210`..A.BGP-speaking |
b14a0 | 20 72 6f 75 74 65 72 20 6c 69 6b 65 20 56 79 4f 53 20 63 61 6e 20 72 65 74 72 69 65 76 65 20 52 | .router.like.VyOS.can.retrieve.R |
b14c0 | 4f 41 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 52 50 4b 49 20 22 52 65 6c 79 69 6e | OA.information.from.RPKI."Relyin |
b14e0 | 67 20 50 61 72 74 79 20 73 6f 66 74 77 61 72 65 22 20 28 6f 66 74 65 6e 20 6a 75 73 74 20 63 61 | g.Party.software".(often.just.ca |
b1500 | 6c 6c 65 64 20 61 6e 20 22 52 50 4b 49 20 73 65 72 76 65 72 22 20 6f 72 20 22 52 50 4b 49 20 76 | lled.an."RPKI.server".or."RPKI.v |
b1520 | 61 6c 69 64 61 74 6f 72 22 29 20 62 79 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 54 52 20 28 | alidator").by.using.:abbr:`RTR.( |
b1540 | 52 50 4b 49 20 74 6f 20 52 6f 75 74 65 72 29 60 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 72 65 | RPKI.to.Router)`.protocol..There |
b1560 | 20 61 72 65 20 73 65 76 65 72 61 6c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 69 6d 70 6c 65 6d 65 | .are.several.open.source.impleme |
b1580 | 6e 74 61 74 69 6f 6e 73 20 74 6f 20 63 68 6f 6f 73 65 20 66 72 6f 6d 2c 20 73 75 63 68 20 61 73 | ntations.to.choose.from,.such.as |
b15a0 | 20 4e 4c 4e 65 74 4c 61 62 73 27 20 52 6f 75 74 69 6e 61 74 6f 72 5f 20 28 77 72 69 74 74 65 6e | .NLNetLabs'.Routinator_.(written |
b15c0 | 20 69 6e 20 52 75 73 74 29 2c 20 4f 70 65 6e 42 53 44 27 73 20 72 70 6b 69 2d 63 6c 69 65 6e 74 | .in.Rust),.OpenBSD's.rpki-client |
b15e0 | 5f 20 28 77 72 69 74 74 65 6e 20 69 6e 20 43 29 2c 20 61 6e 64 20 53 74 61 79 52 54 52 5f 20 28 | _.(written.in.C),.and.StayRTR_.( |
b1600 | 77 72 69 74 74 65 6e 20 69 6e 20 47 6f 29 2e 20 54 68 65 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c | written.in.Go)..The.RTR.protocol |
b1620 | 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 32 31 30 60 2e 00 41 20 | .is.described.in.:rfc:`8210`..A. |
b1640 | 42 72 69 64 67 65 20 69 73 20 61 20 77 61 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 77 6f 20 45 | Bridge.is.a.way.to.connect.two.E |
b1660 | 74 68 65 72 6e 65 74 20 73 65 67 6d 65 6e 74 73 20 74 6f 67 65 74 68 65 72 20 69 6e 20 61 20 70 | thernet.segments.together.in.a.p |
b1680 | 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 77 61 79 2e 20 50 61 63 6b 65 74 73 | rotocol.independent.way..Packets |
b16a0 | 20 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 62 61 73 65 64 20 6f 6e 20 45 74 68 65 72 6e 65 74 | .are.forwarded.based.on.Ethernet |
b16c0 | 20 61 64 64 72 65 73 73 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 49 50 20 61 64 64 72 65 73 73 | .address,.rather.than.IP.address |
b16e0 | 20 28 6c 69 6b 65 20 61 20 72 6f 75 74 65 72 29 2e 20 53 69 6e 63 65 20 66 6f 72 77 61 72 64 69 | .(like.a.router)..Since.forwardi |
b1700 | 6e 67 20 69 73 20 64 6f 6e 65 20 61 74 20 4c 61 79 65 72 20 32 2c 20 61 6c 6c 20 70 72 6f 74 6f | ng.is.done.at.Layer.2,.all.proto |
b1720 | 63 6f 6c 73 20 63 61 6e 20 67 6f 20 74 72 61 6e 73 70 61 72 65 6e 74 6c 79 20 74 68 72 6f 75 67 | cols.can.go.transparently.throug |
b1740 | 68 20 61 20 62 72 69 64 67 65 2e 20 54 68 65 20 4c 69 6e 75 78 20 62 72 69 64 67 65 20 63 6f 64 | h.a.bridge..The.Linux.bridge.cod |
b1760 | 65 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 20 73 75 62 73 65 74 20 6f 66 20 74 68 65 20 41 4e 53 | e.implements.a.subset.of.the.ANS |
b1780 | 49 2f 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 64 2e 00 41 20 47 52 45 20 74 75 | I/IEEE.802.1d.standard..A.GRE.tu |
b17a0 | 6e 6e 65 6c 20 6f 70 65 72 61 74 65 73 20 61 74 20 6c 61 79 65 72 20 33 20 6f 66 20 74 68 65 20 | nnel.operates.at.layer.3.of.the. |
b17c0 | 4f 53 49 20 6d 6f 64 65 6c 20 61 6e 64 20 69 73 20 72 65 70 72 65 73 65 6e 74 65 64 20 62 79 20 | OSI.model.and.is.represented.by. |
b17e0 | 49 50 20 70 72 6f 74 6f 63 6f 6c 20 34 37 2e 20 54 68 65 20 6d 61 69 6e 20 62 65 6e 65 66 69 74 | IP.protocol.47..The.main.benefit |
b1800 | 20 6f 66 20 61 20 47 52 45 20 74 75 6e 6e 65 6c 20 69 73 20 74 68 61 74 20 79 6f 75 20 61 72 65 | .of.a.GRE.tunnel.is.that.you.are |
b1820 | 20 61 62 6c 65 20 74 6f 20 63 61 72 72 79 20 6d 75 6c 74 69 70 6c 65 20 70 72 6f 74 6f 63 6f 6c | .able.to.carry.multiple.protocol |
b1840 | 73 20 69 6e 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 74 75 6e 6e 65 6c 2e 20 47 52 45 20 61 6c | s.inside.the.same.tunnel..GRE.al |
b1860 | 73 6f 20 73 75 70 70 6f 72 74 73 20 6d 75 6c 74 69 63 61 73 74 20 74 72 61 66 66 69 63 20 61 6e | so.supports.multicast.traffic.an |
b1880 | 64 20 73 75 70 70 6f 72 74 73 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 61 | d.supports.routing.protocols.tha |
b18a0 | 74 20 6c 65 76 65 72 61 67 65 20 6d 75 6c 74 69 63 61 73 74 20 74 6f 20 66 6f 72 6d 20 6e 65 69 | t.leverage.multicast.to.form.nei |
b18c0 | 67 68 62 6f 72 20 61 64 6a 61 63 65 6e 63 69 65 73 2e 00 41 20 52 75 6c 65 2d 53 65 74 20 63 61 | ghbor.adjacencies..A.Rule-Set.ca |
b18e0 | 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 3a | n.be.applied.to.every.interface: |
b1900 | 00 41 20 53 4e 54 50 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 73 70 | .A.SNTP.server.address.can.be.sp |
b1920 | 65 63 69 66 69 65 64 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 41 20 56 52 | ecified.for.DHCPv6.clients..A.VR |
b1940 | 46 20 64 65 76 69 63 65 20 69 73 20 63 72 65 61 74 65 64 20 77 69 74 68 20 61 6e 20 61 73 73 6f | F.device.is.created.with.an.asso |
b1960 | 63 69 61 74 65 64 20 72 6f 75 74 65 20 74 61 62 6c 65 2e 20 4e 65 74 77 6f 72 6b 20 69 6e 74 65 | ciated.route.table..Network.inte |
b1980 | 72 66 61 63 65 73 20 61 72 65 20 74 68 65 6e 20 65 6e 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 | rfaces.are.then.enslaved.to.a.VR |
b19a0 | 46 20 64 65 76 69 63 65 2e 00 41 20 56 79 4f 53 20 47 52 45 20 74 75 6e 6e 65 6c 20 63 61 6e 20 | F.device..A.VyOS.GRE.tunnel.can. |
b19c0 | 63 61 72 72 79 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 | carry.both.IPv4.and.IPv6.traffic |
b19e0 | 20 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 63 72 65 61 74 65 64 20 6f 76 65 72 20 65 69 | .and.can.also.be.created.over.ei |
b1a00 | 74 68 65 72 20 49 50 76 34 20 28 67 72 65 29 20 6f 72 20 49 50 76 36 20 28 69 70 36 67 72 65 29 | ther.IPv4.(gre).or.IPv6.(ip6gre) |
b1a20 | 2e 00 41 20 56 79 4f 53 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 | ..A.VyOS.router.with.two.interfa |
b1a40 | 63 65 73 20 2d 20 65 74 68 30 20 28 57 41 4e 29 20 61 6e 64 20 65 74 68 31 20 28 4c 41 4e 29 20 | ces.-.eth0.(WAN).and.eth1.(LAN). |
b1a60 | 2d 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 61 20 73 70 6c | -.is.required.to.implement.a.spl |
b1a80 | 69 74 2d 68 6f 72 69 7a 6f 6e 20 44 4e 53 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 | it-horizon.DNS.configuration.for |
b1aa0 | 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 2e 00 41 20 62 61 73 69 63 20 63 6f 6e 66 69 67 75 72 61 74 | .example.com..A.basic.configurat |
b1ac0 | 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 20 74 75 6e 6e 65 6c 20 73 6f 75 72 63 65 20 28 73 6f | ion.requires.a.tunnel.source.(so |
b1ae0 | 75 72 63 65 2d 61 64 64 72 65 73 73 29 2c 20 61 20 74 75 6e 6e 65 6c 20 64 65 73 74 69 6e 61 74 | urce-address),.a.tunnel.destinat |
b1b00 | 69 6f 6e 20 28 72 65 6d 6f 74 65 29 2c 20 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 | ion.(remote),.an.encapsulation.t |
b1b20 | 79 70 65 20 28 67 72 65 29 2c 20 61 6e 64 20 61 6e 20 61 64 64 72 65 73 73 20 28 69 70 76 34 2f | ype.(gre),.and.an.address.(ipv4/ |
b1b40 | 69 70 76 36 29 2e 20 42 65 6c 6f 77 20 69 73 20 61 20 62 61 73 69 63 20 49 50 76 34 20 6f 6e 6c | ipv6)..Below.is.a.basic.IPv4.onl |
b1b60 | 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 74 61 6b 65 6e 20 66 72 | y.configuration.example.taken.fr |
b1b80 | 6f 6d 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 6e 64 20 61 20 43 69 73 63 6f 20 49 4f 53 | om.a.VyOS.router.and.a.Cisco.IOS |
b1ba0 | 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6d 61 69 6e 20 64 69 66 66 65 72 65 6e 63 65 20 62 65 74 | .router..The.main.difference.bet |
b1bc0 | 77 65 65 6e 20 74 68 65 73 65 20 74 77 6f 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 69 73 | ween.these.two.configurations.is |
b1be0 | 20 74 68 61 74 20 56 79 4f 53 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 65 78 70 6c 69 63 69 74 | .that.VyOS.requires.you.explicit |
b1c00 | 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 | ly.configure.the.encapsulation.t |
b1c20 | 79 70 65 2e 20 54 68 65 20 43 69 73 63 6f 20 72 6f 75 74 65 72 20 64 65 66 61 75 6c 74 73 20 74 | ype..The.Cisco.router.defaults.t |
b1c40 | 6f 20 47 52 45 20 49 50 20 6f 74 68 65 72 77 69 73 65 20 69 74 20 77 6f 75 6c 64 20 68 61 76 65 | o.GRE.IP.otherwise.it.would.have |
b1c60 | 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 77 65 6c 6c 2e 00 41 20 62 61 73 | .to.be.configured.as.well..A.bas |
b1c80 | 69 63 20 69 6e 74 72 6f 64 75 63 74 69 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 | ic.introduction.to.zone-based.fi |
b1ca0 | 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 60 68 65 72 65 20 3c 68 74 74 70 | rewalls.can.be.found.`here.<http |
b1cc0 | 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c | s://support.vyos.io/en/kb/articl |
b1ce0 | 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 2d 66 69 72 65 77 61 | es/a-primer-to-zone-based-firewa |
b1d00 | 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e 20 65 78 61 6d 70 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 | ll>`_,.and.an.example.at.:ref:`e |
b1d20 | 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d 70 6f 6c 69 63 79 60 2e 00 41 20 62 72 69 64 67 65 20 6e | xamples-zone-policy`..A.bridge.n |
b1d40 | 61 6d 65 64 20 60 62 72 31 30 30 60 00 41 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e | amed.`br100`.A.brief.description |
b1d60 | 20 77 68 61 74 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 61 6c 6c 20 61 62 6f 75 74 2e | .what.this.network.is.all.about. |
b1d80 | 00 41 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 6d 61 74 63 68 | .A.class.can.have.multiple.match |
b1da0 | 20 66 69 6c 74 65 72 73 3a 00 41 20 63 6f 6d 6d 6f 6e 20 65 78 61 6d 70 6c 65 20 69 73 20 74 68 | .filters:.A.common.example.is.th |
b1dc0 | 65 20 63 61 73 65 20 6f 66 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 77 68 69 63 68 2c 20 69 | e.case.of.some.policies.which,.i |
b1de0 | 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 2c 20 74 68 65 79 20 6e 65 | n.order.to.be.effective,.they.ne |
b1e00 | 65 64 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | ed.to.be.applied.to.an.interface |
b1e20 | 20 74 68 61 74 20 69 73 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 77 68 65 72 | .that.is.directly.connected.wher |
b1e40 | 65 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 73 2e 20 49 66 20 79 6f 75 72 20 72 6f 75 | e.the.bottleneck.is..If.your.rou |
b1e60 | 74 65 72 20 69 73 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f | ter.is.not.directly.connected.to |
b1e80 | 20 74 68 65 20 62 6f 74 74 6c 65 6e 65 63 6b 2c 20 62 75 74 20 73 6f 6d 65 20 68 6f 70 20 62 65 | .the.bottleneck,.but.some.hop.be |
b1ea0 | 66 6f 72 65 20 69 74 2c 20 79 6f 75 20 63 61 6e 20 65 6d 75 6c 61 74 65 20 74 68 65 20 62 6f 74 | fore.it,.you.can.emulate.the.bot |
b1ec0 | 74 6c 65 6e 65 63 6b 20 62 79 20 65 6d 62 65 64 64 69 6e 67 20 79 6f 75 72 20 6e 6f 6e 2d 73 68 | tleneck.by.embedding.your.non-sh |
b1ee0 | 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 | aping.policy.into.a.classful.sha |
b1f00 | 70 69 6e 67 20 6f 6e 65 20 73 6f 20 74 68 61 74 20 69 74 20 74 61 6b 65 73 20 65 66 66 65 63 74 | ping.one.so.that.it.takes.effect |
b1f20 | 2e 00 41 20 63 6f 6d 70 6c 65 74 65 20 4c 44 41 50 20 61 75 74 68 20 4f 70 65 6e 56 50 4e 20 63 | ..A.complete.LDAP.auth.OpenVPN.c |
b1f40 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 75 6c 64 20 6c 6f 6f 6b 20 6c 69 6b 65 20 74 68 65 | onfiguration.could.look.like.the |
b1f60 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 3a 00 41 20 63 6f 6e 66 69 67 75 72 61 74 | .following.example:.A.configurat |
b1f80 | 69 6f 6e 20 65 78 61 6d 70 6c 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 69 73 | ion.example.can.be.found.in.this |
b1fa0 | 20 73 65 63 74 69 6f 6e 2e 20 49 6e 20 74 68 69 73 20 73 69 6d 70 6c 69 66 69 65 64 20 73 63 65 | .section..In.this.simplified.sce |
b1fc0 | 6e 61 72 69 6f 2c 20 6d 61 69 6e 20 74 68 69 6e 67 73 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 | nario,.main.things.to.be.conside |
b1fe0 | 72 65 64 20 61 72 65 3a 00 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 74 20 77 69 | red.are:.A.connection.attempt.wi |
b2000 | 6c 6c 20 62 65 20 73 68 6f 77 6e 20 61 73 3a 00 41 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 | ll.be.shown.as:.A.default.route. |
b2020 | 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 65 64 20 6f 6e 63 65 20 | is.automatically.installed.once. |
b2040 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 70 2e 20 54 6f 20 63 68 61 6e 67 65 20 74 | the.interface.is.up..To.change.t |
b2060 | 68 69 73 20 62 65 68 61 76 69 6f 72 20 75 73 65 20 74 68 65 20 60 60 6e 6f 2d 64 65 66 61 75 6c | his.behavior.use.the.``no-defaul |
b2080 | 74 2d 72 6f 75 74 65 60 60 20 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 41 20 64 65 73 63 72 69 70 74 | t-route``.CLI.option..A.descript |
b20a0 | 69 6f 6e 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 66 6f 72 20 65 61 63 68 20 61 6e 64 20 65 76 | ion.can.be.added.for.each.and.ev |
b20c0 | 65 72 79 20 75 6e 69 71 75 65 20 72 65 6c 61 79 20 49 44 2e 20 54 68 69 73 20 69 73 20 75 73 65 | ery.unique.relay.ID..This.is.use |
b20e0 | 66 75 6c 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 6d 75 6c 74 69 | ful.to.distinguish.between.multi |
b2100 | 70 6c 65 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 73 2f 61 70 70 6c 69 61 63 74 69 6f 6e 73 | ple.different.ports/appliactions |
b2120 | 2e 00 41 20 64 69 73 61 62 6c 65 64 20 67 72 6f 75 70 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 | ..A.disabled.group.will.be.remov |
b2140 | 65 64 20 66 72 6f 6d 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 61 6e 64 20 79 6f 75 | ed.from.the.VRRP.process.and.you |
b2160 | 72 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e | r.router.will.not.participate.in |
b2180 | 20 56 52 52 50 20 66 6f 72 20 74 68 61 74 20 56 52 49 44 2e 20 49 74 20 77 69 6c 6c 20 64 69 73 | .VRRP.for.that.VRID..It.will.dis |
b21a0 | 61 70 70 65 61 72 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d | appear.from.operational.mode.com |
b21c0 | 6d 61 6e 64 73 20 6f 75 74 70 75 74 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 65 6e 74 65 72 20 | mands.output,.rather.than.enter. |
b21e0 | 74 68 65 20 62 61 63 6b 75 70 20 73 74 61 74 65 2e 00 41 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 | the.backup.state..A.domain.name. |
b2200 | 69 73 20 74 68 65 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 20 61 73 73 69 67 6e 65 64 20 74 6f 20 | is.the.label.(name).assigned.to. |
b2220 | 61 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 69 73 20 74 68 75 73 20 75 | a.computer.network.and.is.thus.u |
b2240 | 6e 69 71 75 65 2e 20 56 79 4f 53 20 61 70 70 65 6e 64 73 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e | nique..VyOS.appends.the.domain.n |
b2260 | 61 6d 65 20 61 73 20 61 20 73 75 66 66 69 78 20 74 6f 20 61 6e 79 20 75 6e 71 75 61 6c 69 66 69 | ame.as.a.suffix.to.any.unqualifi |
b2280 | 65 64 20 6e 61 6d 65 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 79 6f 75 20 73 65 74 | ed.name..For.example,.if.you.set |
b22a0 | 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 60 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 2c 20 | .the.domain.name.`example.com`,. |
b22c0 | 61 6e 64 20 79 6f 75 20 77 6f 75 6c 64 20 70 69 6e 67 20 74 68 65 20 75 6e 71 75 61 6c 69 66 69 | and.you.would.ping.the.unqualifi |
b22e0 | 65 64 20 6e 61 6d 65 20 6f 66 20 60 63 72 75 78 60 2c 20 74 68 65 6e 20 56 79 4f 53 20 71 75 61 | ed.name.of.`crux`,.then.VyOS.qua |
b2300 | 6c 69 66 69 65 73 20 74 68 65 20 6e 61 6d 65 20 74 6f 20 60 63 72 75 78 2e 65 78 61 6d 70 6c 65 | lifies.the.name.to.`crux.example |
b2320 | 2e 63 6f 6d 60 2e 00 41 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 | .com`..A.dummy.interface.for.the |
b2340 | 20 70 72 6f 76 69 64 65 72 2d 61 73 73 69 67 6e 65 64 20 49 50 3b 00 41 20 66 69 72 65 77 61 6c | .provider-assigned.IP;.A.firewal |
b2360 | 6c 20 6d 61 72 6b 20 60 60 66 77 6d 61 72 6b 60 60 20 61 6c 6c 6f 77 73 20 75 73 69 6e 67 20 6d | l.mark.``fwmark``.allows.using.m |
b2380 | 75 6c 74 69 70 6c 65 20 70 6f 72 74 73 20 66 6f 72 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c | ultiple.ports.for.high-availabil |
b23a0 | 69 74 79 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 2e 20 49 74 20 75 73 65 73 20 66 77 6d 61 | ity.virtual-server..It.uses.fwma |
b23c0 | 72 6b 20 76 61 6c 75 65 2e 00 41 20 66 75 6c 6c 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 54 75 | rk.value..A.full.example.of.a.Tu |
b23e0 | 6e 6e 65 6c 62 72 6f 6b 65 72 2e 6e 65 74 20 63 6f 6e 66 69 67 20 63 61 6e 20 62 65 20 66 6f 75 | nnelbroker.net.config.can.be.fou |
b2400 | 6e 64 20 61 74 20 3a 72 65 66 3a 60 68 65 72 65 20 3c 65 78 61 6d 70 6c 65 73 2d 74 75 6e 6e 65 | nd.at.:ref:`here.<examples-tunne |
b2420 | 6c 62 72 6f 6b 65 72 2d 69 70 76 36 3e 60 2e 00 41 20 67 65 6e 65 72 69 63 20 60 3c 6e 61 6d 65 | lbroker-ipv6>`..A.generic.`<name |
b2440 | 3e 60 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 69 73 20 73 79 6e 63 20 73 65 72 76 69 63 65 | >`.referencing.this.sync.service |
b2460 | 2e 00 41 20 68 6f 73 74 6e 61 6d 65 20 69 73 20 74 68 65 20 6c 61 62 65 6c 20 28 6e 61 6d 65 29 | ..A.hostname.is.the.label.(name) |
b2480 | 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 28 61 | .assigned.to.a.network.device.(a |
b24a0 | 20 68 6f 73 74 29 20 6f 6e 20 61 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 69 73 20 75 73 65 64 20 | .host).on.a.network.and.is.used. |
b24c0 | 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 6f 6e 65 20 64 65 76 69 63 65 20 66 72 6f 6d 20 61 | to.distinguish.one.device.from.a |
b24e0 | 6e 6f 74 68 65 72 20 6f 6e 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 73 20 6f 72 20 6f | nother.on.specific.networks.or.o |
b2500 | 76 65 72 20 74 68 65 20 69 6e 74 65 72 6e 65 74 2e 20 4f 6e 20 74 68 65 20 6f 74 68 65 72 20 68 | ver.the.internet..On.the.other.h |
b2520 | 61 6e 64 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 6e 61 6d 65 20 77 68 69 63 68 20 | and.this.will.be.the.name.which. |
b2540 | 61 70 70 65 61 72 73 20 6f 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 6c 69 6e 65 20 70 72 6f 6d | appears.on.the.command.line.prom |
b2560 | 70 74 2e 00 41 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e | pt..A.human.readable.description |
b2580 | 20 77 68 61 74 20 74 68 69 73 20 43 41 20 69 73 20 61 62 6f 75 74 2e 00 41 20 68 75 6d 61 6e 20 | .what.this.CA.is.about..A.human. |
b25a0 | 72 65 61 64 61 62 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 20 77 68 61 74 20 74 68 69 73 20 63 | readable.description.what.this.c |
b25c0 | 65 72 74 69 66 69 63 61 74 65 20 69 73 20 61 62 6f 75 74 2e 00 41 20 6c 6f 6f 6b 62 61 63 6b 20 | ertificate.is.about..A.lookback. |
b25e0 | 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 75 70 2c 20 74 68 75 73 20 69 74 20 | interface.is.always.up,.thus.it. |
b2600 | 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 74 72 61 | could.be.used.for.management.tra |
b2620 | 66 66 69 63 20 6f 72 20 61 73 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f | ffic.or.as.source/destination.fo |
b2640 | 72 20 61 6e 64 20 3a 61 62 62 72 3a 60 49 47 50 20 28 49 6e 74 65 72 69 6f 72 20 47 61 74 65 77 | r.and.:abbr:`IGP.(Interior.Gatew |
b2660 | 61 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 6c 69 6b 65 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 | ay.Protocol)`.like.:ref:`routing |
b2680 | 2d 62 67 70 60 20 73 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 6c 69 6e 6b 20 | -bgp`.so.your.internal.BGP.link. |
b26a0 | 69 73 20 6e 6f 74 20 64 65 70 65 6e 64 65 6e 74 20 6f 6e 20 70 68 79 73 69 63 61 6c 20 6c 69 6e | is.not.dependent.on.physical.lin |
b26c0 | 6b 20 73 74 61 74 65 73 20 61 6e 64 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 73 20 63 61 6e | k.states.and.multiple.routes.can |
b26e0 | 20 62 65 20 63 68 6f 73 65 6e 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 41 | .be.chosen.to.the.destination..A |
b2700 | 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 60 20 49 6e 74 65 72 66 61 63 | .:ref:`dummy-interface`.Interfac |
b2720 | 65 20 73 68 6f 75 6c 64 20 61 6c 77 61 79 73 20 62 65 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 | e.should.always.be.preferred.ove |
b2740 | 72 20 61 20 3a 72 65 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e | r.a.:ref:`loopback-interface`.in |
b2760 | 74 65 72 66 61 63 65 2e 00 41 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 | terface..A.loopback.interface.is |
b2780 | 20 61 6c 77 61 79 73 20 75 70 2c 20 74 68 75 73 20 69 74 20 63 6f 75 6c 64 20 62 65 20 75 73 65 | .always.up,.thus.it.could.be.use |
b27a0 | 64 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 74 72 61 66 66 69 63 20 6f 72 20 61 73 20 73 | d.for.management.traffic.or.as.s |
b27c0 | 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6f 72 20 61 6e 64 20 3a 61 62 62 72 3a | ource/destination.for.and.:abbr: |
b27e0 | 60 49 47 50 20 28 49 6e 74 65 72 69 6f 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 29 | `IGP.(Interior.Gateway.Protocol) |
b2800 | 60 20 6c 69 6b 65 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 62 67 70 60 20 73 6f 20 79 6f 75 | `.like.:ref:`routing-bgp`.so.you |
b2820 | 72 20 69 6e 74 65 72 6e 61 6c 20 42 47 50 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 64 65 70 65 6e | r.internal.BGP.link.is.not.depen |
b2840 | 64 65 6e 74 20 6f 6e 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 73 20 61 6e 64 | dent.on.physical.link.states.and |
b2860 | 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 68 6f 73 65 6e 20 74 | .multiple.routes.can.be.chosen.t |
b2880 | 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 41 20 3a 72 65 66 3a 60 64 75 6d 6d 79 | o.the.destination..A.:ref:`dummy |
b28a0 | 2d 69 6e 74 65 72 66 61 63 65 60 20 49 6e 74 65 72 66 61 63 65 20 73 68 6f 75 6c 64 20 61 6c 77 | -interface`.Interface.should.alw |
b28c0 | 61 79 73 20 62 65 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 20 3a 72 65 66 3a 60 6c 6f | ays.be.preferred.over.a.:ref:`lo |
b28e0 | 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 2e 00 41 20 6d | opback-interface`.interface..A.m |
b2900 | 61 6e 61 67 65 64 20 64 65 76 69 63 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 6e 6f 64 65 20 | anaged.device.is.a.network.node. |
b2920 | 74 68 61 74 20 69 6d 70 6c 65 6d 65 6e 74 73 20 61 6e 20 53 4e 4d 50 20 69 6e 74 65 72 66 61 63 | that.implements.an.SNMP.interfac |
b2940 | 65 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 75 6e 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 | e.that.allows.unidirectional.(re |
b2960 | 61 64 2d 6f 6e 6c 79 29 20 6f 72 20 62 69 64 69 72 65 63 74 69 6f 6e 61 6c 20 28 72 65 61 64 20 | ad-only).or.bidirectional.(read. |
b2980 | 61 6e 64 20 77 72 69 74 65 29 20 61 63 63 65 73 73 20 74 6f 20 6e 6f 64 65 2d 73 70 65 63 69 66 | and.write).access.to.node-specif |
b29a0 | 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 4d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 20 | ic.information..Managed.devices. |
b29c0 | 65 78 63 68 61 6e 67 65 20 6e 6f 64 65 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 | exchange.node-specific.informati |
b29e0 | 6f 6e 20 77 69 74 68 20 74 68 65 20 4e 4d 53 73 2e 20 53 6f 6d 65 74 69 6d 65 73 20 63 61 6c 6c | on.with.the.NMSs..Sometimes.call |
b2a00 | 65 64 20 6e 65 74 77 6f 72 6b 20 65 6c 65 6d 65 6e 74 73 2c 20 74 68 65 20 6d 61 6e 61 67 65 64 | ed.network.elements,.the.managed |
b2a20 | 20 64 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 61 6e 79 20 74 79 70 65 20 6f 66 20 64 65 76 69 | .devices.can.be.any.type.of.devi |
b2a40 | 63 65 2c 20 69 6e 63 6c 75 64 69 6e 67 2c 20 62 75 74 20 6e 6f 74 20 6c 69 6d 69 74 65 64 20 74 | ce,.including,.but.not.limited.t |
b2a60 | 6f 2c 20 72 6f 75 74 65 72 73 2c 20 61 63 63 65 73 73 20 73 65 72 76 65 72 73 2c 20 73 77 69 74 | o,.routers,.access.servers,.swit |
b2a80 | 63 68 65 73 2c 20 63 61 62 6c 65 20 6d 6f 64 65 6d 73 2c 20 62 72 69 64 67 65 73 2c 20 68 75 62 | ches,.cable.modems,.bridges,.hub |
b2aa0 | 73 2c 20 49 50 20 74 65 6c 65 70 68 6f 6e 65 73 2c 20 49 50 20 76 69 64 65 6f 20 63 61 6d 65 72 | s,.IP.telephones,.IP.video.camer |
b2ac0 | 61 73 2c 20 63 6f 6d 70 75 74 65 72 20 68 6f 73 74 73 2c 20 61 6e 64 20 70 72 69 6e 74 65 72 73 | as,.computer.hosts,.and.printers |
b2ae0 | 2e 00 41 20 6d 61 74 63 68 20 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 6d 75 6c | ..A.match.filter.can.contain.mul |
b2b00 | 74 69 70 6c 65 20 63 72 69 74 65 72 69 61 20 61 6e 64 20 77 69 6c 6c 20 6d 61 74 63 68 20 74 72 | tiple.criteria.and.will.match.tr |
b2b20 | 61 66 66 69 63 20 69 66 20 61 6c 6c 20 74 68 6f 73 65 20 63 72 69 74 65 72 69 61 20 61 72 65 20 | affic.if.all.those.criteria.are. |
b2b40 | 74 72 75 65 2e 00 41 20 6d 6f 6e 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 63 | true..A.monitored.static.route.c |
b2b60 | 6f 6e 64 69 74 69 6f 6e 73 20 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 74 6f 20 74 68 | onditions.the.installation.to.th |
b2b80 | 65 20 52 49 42 20 6f 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 72 75 6e 6e 69 6e 67 | e.RIB.on.the.BFD.session.running |
b2ba0 | 20 73 74 61 74 65 3a 20 77 68 65 6e 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 75 70 20 74 | .state:.when.BFD.session.is.up.t |
b2bc0 | 68 65 20 72 6f 75 74 65 20 69 73 20 69 6e 73 74 61 6c 6c 65 64 20 74 6f 20 52 49 42 2c 20 62 75 | he.route.is.installed.to.RIB,.bu |
b2be0 | 74 20 77 68 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 69 73 20 64 6f 77 6e 20 69 | t.when.the.BFD.session.is.down.i |
b2c00 | 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 52 49 42 2e 00 41 20 6e 65 74 | t.is.removed.from.the.RIB..A.net |
b2c20 | 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e 20 65 78 65 63 75 74 65 73 | work.management.station.executes |
b2c40 | 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 20 61 6e 64 20 63 | .applications.that.monitor.and.c |
b2c60 | 6f 6e 74 72 6f 6c 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 2e 20 4e 4d 53 73 20 70 72 6f | ontrol.managed.devices..NMSs.pro |
b2c80 | 76 69 64 65 20 74 68 65 20 62 75 6c 6b 20 6f 66 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 | vide.the.bulk.of.the.processing. |
b2ca0 | 61 6e 64 20 6d 65 6d 6f 72 79 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 69 72 65 64 20 66 6f | and.memory.resources.required.fo |
b2cc0 | 72 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 20 4f 6e 65 20 6f 72 20 6d 6f 72 | r.network.management..One.or.mor |
b2ce0 | 65 20 4e 4d 53 73 20 6d 61 79 20 65 78 69 73 74 20 6f 6e 20 61 6e 79 20 6d 61 6e 61 67 65 64 20 | e.NMSs.may.exist.on.any.managed. |
b2d00 | 6e 65 74 77 6f 72 6b 2e 00 41 20 6e 65 77 20 69 6e 74 65 72 66 61 63 65 20 62 65 63 6f 6d 65 73 | network..A.new.interface.becomes |
b2d20 | 20 70 72 65 73 65 6e 74 20 60 60 50 6f 72 74 2d 63 68 61 6e 6e 65 6c 31 60 60 2c 20 61 6c 6c 20 | .present.``Port-channel1``,.all. |
b2d40 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6c 69 6b 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 | configuration.like.allowed.VLAN. |
b2d60 | 69 6e 74 65 72 66 61 63 65 73 2c 20 53 54 50 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 68 65 72 65 | interfaces,.STP.will.happen.here |
b2d80 | 2e 00 41 20 70 61 63 6b 65 74 20 72 61 74 65 20 6c 69 6d 69 74 20 63 61 6e 20 62 65 20 73 65 74 | ..A.packet.rate.limit.can.be.set |
b2da0 | 20 66 6f 72 20 61 20 72 75 6c 65 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 72 75 6c 65 20 74 6f | .for.a.rule.to.apply.the.rule.to |
b2dc0 | 20 74 72 61 66 66 69 63 20 61 62 6f 76 65 20 6f 72 20 62 65 6c 6f 77 20 61 20 73 70 65 63 69 66 | .traffic.above.or.below.a.specif |
b2de0 | 69 65 64 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | ied.threshold..To.configure.the. |
b2e00 | 72 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 75 73 65 3a 00 41 20 70 61 63 6b 65 74 20 74 68 61 74 | rate.limiting.use:.A.packet.that |
b2e20 | 20 66 69 6e 64 73 20 61 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e 20 74 68 65 20 66 | .finds.a.matching.entry.in.the.f |
b2e40 | 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 68 69 74 29 20 69 73 20 74 72 61 6e | lowtable.(flowtable.hit).is.tran |
b2e60 | 73 6d 69 74 74 65 64 20 74 6f 20 74 68 65 20 6f 75 74 70 75 74 20 6e 65 74 64 65 76 69 63 65 2c | smitted.to.the.output.netdevice, |
b2e80 | 20 68 65 6e 63 65 2c 20 70 61 63 6b 65 74 73 20 62 79 70 61 73 73 20 74 68 65 20 63 6c 61 73 73 | .hence,.packets.bypass.the.class |
b2ea0 | 69 63 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 20 61 6e 64 20 75 73 65 73 20 74 | ic.IP.forwarding.path.and.uses.t |
b2ec0 | 68 65 20 2a 2a 46 61 73 74 20 50 61 74 68 2a 2a 20 28 6f 72 61 6e 67 65 20 63 69 72 63 6c 65 73 | he.**Fast.Path**.(orange.circles |
b2ee0 | 20 70 61 74 68 29 2e 20 54 68 65 20 76 69 73 69 62 6c 65 20 65 66 66 65 63 74 20 69 73 20 74 68 | .path)..The.visible.effect.is.th |
b2f00 | 61 74 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 65 65 20 74 68 65 73 65 20 70 61 63 6b 65 74 73 20 | at.you.do.not.see.these.packets. |
b2f20 | 66 72 6f 6d 20 61 6e 79 20 6f 66 20 74 68 65 20 4e 65 74 66 69 6c 74 65 72 20 68 6f 6f 6b 73 20 | from.any.of.the.Netfilter.hooks. |
b2f40 | 63 6f 6d 69 6e 67 20 61 66 74 65 72 20 69 6e 67 72 65 73 73 2e 20 49 6e 20 63 61 73 65 20 74 68 | coming.after.ingress..In.case.th |
b2f60 | 61 74 20 74 68 65 72 65 20 69 73 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 65 6e 74 72 79 20 69 6e | at.there.is.no.matching.entry.in |
b2f80 | 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 28 66 6c 6f 77 74 61 62 6c 65 20 6d 69 73 73 29 2c | .the.flowtable.(flowtable.miss), |
b2fa0 | 20 74 68 65 20 70 61 63 6b 65 74 20 66 6f 6c 6c 6f 77 73 20 74 68 65 20 63 6c 61 73 73 69 63 20 | .the.packet.follows.the.classic. |
b2fc0 | 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 2e 00 41 20 70 65 6e 61 6c 74 79 20 6f 66 | IP.forwarding.path..A.penalty.of |
b2fe0 | 20 31 30 30 30 20 69 73 20 61 73 73 65 73 73 65 64 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 | .1000.is.assessed.each.time.the. |
b3000 | 72 6f 75 74 65 20 66 61 69 6c 73 2e 20 57 68 65 6e 20 74 68 65 20 70 65 6e 61 6c 74 69 65 73 20 | route.fails..When.the.penalties. |
b3020 | 72 65 61 63 68 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c 64 20 28 73 75 | reach.a.predefined.threshold.(su |
b3040 | 70 70 72 65 73 73 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 72 20 73 74 6f 70 73 20 | ppress-value),.the.router.stops. |
b3060 | 61 64 76 65 72 74 69 73 69 6e 67 20 74 68 65 20 72 6f 75 74 65 2e 00 41 20 70 68 79 73 69 63 61 | advertising.the.route..A.physica |
b3080 | 6c 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 63 6f 6e 6e 65 | l.interface.is.required.to.conne |
b30a0 | 63 74 20 74 68 69 73 20 4d 41 43 73 65 63 20 69 6e 73 74 61 6e 63 65 20 74 6f 2e 20 54 72 61 66 | ct.this.MACsec.instance.to..Traf |
b30c0 | 66 69 63 20 6c 65 61 76 69 6e 67 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 | fic.leaving.this.interface.will. |
b30e0 | 6e 6f 77 20 62 65 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 2f 65 6e 63 72 79 70 74 65 64 2e 00 | now.be.authenticated/encrypted.. |
b3100 | 41 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e | A.pool.of.addresses.can.be.defin |
b3120 | 65 64 20 62 79 20 75 73 69 6e 67 20 61 20 68 79 70 68 65 6e 20 62 65 74 77 65 65 6e 20 74 77 6f | ed.by.using.a.hyphen.between.two |
b3140 | 20 49 50 20 61 64 64 72 65 73 73 65 73 3a 00 41 20 70 6f 72 74 20 63 61 6e 20 62 65 20 73 65 74 | .IP.addresses:.A.port.can.be.set |
b3160 | 20 77 69 74 68 20 61 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 | .with.a.port.number.or.a.name.wh |
b3180 | 69 63 68 20 69 73 20 68 65 72 65 20 64 65 66 69 6e 65 64 3a 20 60 60 2f 65 74 63 2f 73 65 72 76 | ich.is.here.defined:.``/etc/serv |
b31a0 | 69 63 65 73 60 60 2e 00 41 20 71 75 65 72 79 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 72 65 20 | ices``..A.query.for.which.there. |
b31c0 | 69 73 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 6c 79 20 6e 6f 20 61 6e 73 77 65 72 20 69 73 20 | is.authoritatively.no.answer.is. |
b31e0 | 63 61 63 68 65 64 20 74 6f 20 71 75 69 63 6b 6c 79 20 64 65 6e 79 20 61 20 72 65 63 6f 72 64 27 | cached.to.quickly.deny.a.record' |
b3200 | 73 20 65 78 69 73 74 65 6e 63 65 20 6c 61 74 65 72 20 6f 6e 2c 20 77 69 74 68 6f 75 74 20 70 75 | s.existence.later.on,.without.pu |
b3220 | 74 74 69 6e 67 20 61 20 68 65 61 76 79 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 | tting.a.heavy.load.on.the.remote |
b3240 | 20 73 65 72 76 65 72 2e 20 49 6e 20 70 72 61 63 74 69 63 65 2c 20 63 61 63 68 65 73 20 63 61 6e | .server..In.practice,.caches.can |
b3260 | 20 62 65 63 6f 6d 65 20 73 61 74 75 72 61 74 65 64 20 77 69 74 68 20 68 75 6e 64 72 65 64 73 20 | .become.saturated.with.hundreds. |
b3280 | 6f 66 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 68 6f 73 74 73 20 77 68 69 63 68 20 61 72 65 20 | of.thousands.of.hosts.which.are. |
b32a0 | 74 72 69 65 64 20 6f 6e 6c 79 20 6f 6e 63 65 2e 00 41 20 72 65 63 65 69 76 65 64 20 4e 48 52 50 | tried.only.once..A.received.NHRP |
b32c0 | 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 77 69 6c 6c 20 74 72 69 67 67 65 72 | .Traffic.Indication.will.trigger |
b32e0 | 20 74 68 65 20 72 65 73 6f 6c 75 74 69 6f 6e 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 6d 65 6e | .the.resolution.and.establishmen |
b3300 | 74 20 6f 66 20 61 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 2e 00 41 20 72 6f 75 74 69 6e 67 | t.of.a.shortcut.route..A.routing |
b3320 | 20 74 61 62 6c 65 20 49 44 20 63 61 6e 20 6e 6f 74 20 62 65 20 6d 6f 64 69 66 69 65 64 20 6f 6e | .table.ID.can.not.be.modified.on |
b3340 | 63 65 20 69 74 20 69 73 20 61 73 73 69 67 6e 65 64 2e 20 49 74 20 63 61 6e 20 6f 6e 6c 79 20 62 | ce.it.is.assigned..It.can.only.b |
b3360 | 65 20 63 68 61 6e 67 65 64 20 62 79 20 64 65 6c 65 74 69 6e 67 20 61 6e 64 20 72 65 2d 61 64 64 | e.changed.by.deleting.and.re-add |
b3380 | 69 6e 67 20 74 68 65 20 56 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 41 20 72 75 6c 65 2d 73 65 74 | ing.the.VRF.instance..A.rule-set |
b33a0 | 20 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 66 69 72 65 77 61 | .is.a.named.collection.of.firewa |
b33c0 | 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 | ll.rules.that.can.be.applied.to. |
b33e0 | 61 6e 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 61 20 7a 6f 6e 65 2e 20 45 61 63 68 20 72 75 6c | an.interface.or.a.zone..Each.rul |
b3400 | 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 | e.is.numbered,.has.an.action.to. |
b3420 | 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e | apply.if.the.rule.is.matched,.an |
b3440 | 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 63 72 69 | d.the.ability.to.specify.the.cri |
b3460 | 74 65 72 69 61 20 74 6f 20 6d 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 | teria.to.match..Data.packets.go. |
b3480 | 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 | through.the.rules.from.1.-.99999 |
b34a0 | 39 2c 20 61 74 20 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e | 9,.at.the.first.match.the.action |
b34c0 | 20 6f 66 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 41 | .of.the.rule.will.be.executed..A |
b34e0 | 20 72 75 6c 65 2d 73 65 74 20 69 73 20 61 20 6e 61 6d 65 64 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 | .rule-set.is.a.named.collection. |
b3500 | 6f 66 20 72 75 6c 65 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 | of.rules.that.can.be.applied.to. |
b3520 | 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 68 20 72 75 6c 65 20 69 73 20 6e 75 6d 62 65 | an.interface..Each.rule.is.numbe |
b3540 | 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 61 70 70 6c 79 20 69 66 20 74 | red,.has.an.action.to.apply.if.t |
b3560 | 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e 64 20 74 68 65 20 61 62 69 6c | he.rule.is.matched,.and.the.abil |
b3580 | 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 63 72 69 74 65 72 69 61 20 74 6f 20 6d | ity.to.specify.the.criteria.to.m |
b35a0 | 61 74 63 68 2e 20 44 61 74 61 20 70 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 | atch..Data.packets.go.through.th |
b35c0 | 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 39 39 39 39 39 39 2c 20 61 74 20 74 68 65 20 | e.rules.from.1.-.999999,.at.the. |
b35e0 | 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 | first.match.the.action.of.the.ru |
b3600 | 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 41 20 73 63 72 69 70 74 20 63 61 | le.will.be.executed..A.script.ca |
b3620 | 6e 20 62 65 20 72 75 6e 20 77 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 | n.be.run.when.an.interface.state |
b3640 | 20 63 68 61 6e 67 65 20 6f 63 63 75 72 73 2e 20 53 63 72 69 70 74 73 20 61 72 65 20 72 75 6e 20 | .change.occurs..Scripts.are.run. |
b3660 | 66 72 6f 6d 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2c 20 66 6f 72 20 61 20 64 69 66 66 | from./config/scripts,.for.a.diff |
b3680 | 65 72 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 20 73 70 65 63 69 66 79 20 74 68 65 20 66 75 6c 6c 20 | erent.location.specify.the.full. |
b36a0 | 70 61 74 68 3a 00 41 20 73 65 67 6d 65 6e 74 20 49 44 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 | path:.A.segment.ID.that.contains |
b36c0 | 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 63 61 6c 63 75 6c 61 74 65 64 | .an.IP.address.prefix.calculated |
b36e0 | 20 62 79 20 61 6e 20 49 47 50 20 69 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 | .by.an.IGP.in.the.service.provid |
b3700 | 65 72 20 63 6f 72 65 20 6e 65 74 77 6f 72 6b 2e 20 50 72 65 66 69 78 20 53 49 44 73 20 61 72 65 | er.core.network..Prefix.SIDs.are |
b3720 | 20 67 6c 6f 62 61 6c 6c 79 20 75 6e 69 71 75 65 2c 20 74 68 69 73 20 76 61 6c 75 65 20 69 6e 64 | .globally.unique,.this.value.ind |
b3740 | 65 6e 74 69 66 79 20 69 74 00 41 20 73 65 6e 64 69 6e 67 20 73 74 61 74 69 6f 6e 20 28 63 6f 6d | entify.it.A.sending.station.(com |
b3760 | 70 75 74 65 72 20 6f 72 20 6e 65 74 77 6f 72 6b 20 73 77 69 74 63 68 29 20 6d 61 79 20 62 65 20 | puter.or.network.switch).may.be. |
b3780 | 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 64 61 74 61 20 66 61 73 74 65 72 20 74 68 61 6e 20 74 68 | transmitting.data.faster.than.th |
b37a0 | 65 20 6f 74 68 65 72 20 65 6e 64 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 63 61 6e 20 61 63 63 65 | e.other.end.of.the.link.can.acce |
b37c0 | 70 74 20 69 74 2e 20 55 73 69 6e 67 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2c 20 74 68 65 20 72 | pt.it..Using.flow.control,.the.r |
b37e0 | 65 63 65 69 76 69 6e 67 20 73 74 61 74 69 6f 6e 20 63 61 6e 20 73 69 67 6e 61 6c 20 74 68 65 20 | eceiving.station.can.signal.the. |
b3800 | 73 65 6e 64 65 72 20 72 65 71 75 65 73 74 69 6e 67 20 73 75 73 70 65 6e 73 69 6f 6e 20 6f 66 20 | sender.requesting.suspension.of. |
b3820 | 74 72 61 6e 73 6d 69 73 73 69 6f 6e 73 20 75 6e 74 69 6c 20 74 68 65 20 72 65 63 65 69 76 65 72 | transmissions.until.the.receiver |
b3840 | 20 63 61 74 63 68 65 73 20 75 70 2e 00 41 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 6e 61 | .catches.up..A.shared.network.na |
b3860 | 6d 65 64 20 60 60 4e 45 54 31 60 60 20 73 65 72 76 65 73 20 73 75 62 6e 65 74 20 60 60 32 30 30 | med.``NET1``.serves.subnet.``200 |
b3880 | 31 3a 64 62 38 3a 3a 2f 36 34 60 60 00 41 20 73 69 6d 70 6c 65 20 42 47 50 20 63 6f 6e 66 69 67 | 1:db8::/64``.A.simple.BGP.config |
b38a0 | 75 72 61 74 69 6f 6e 20 76 69 61 20 49 50 76 36 2e 00 41 20 73 69 6d 70 6c 65 20 52 61 6e 64 6f | uration.via.IPv6..A.simple.Rando |
b38c0 | 6d 20 45 61 72 6c 79 20 44 65 74 65 63 74 69 6f 6e 20 28 52 45 44 29 20 70 6f 6c 69 63 79 20 77 | m.Early.Detection.(RED).policy.w |
b38e0 | 6f 75 6c 64 20 73 74 61 72 74 20 72 61 6e 64 6f 6d 6c 79 20 64 72 6f 70 70 69 6e 67 20 70 61 63 | ould.start.randomly.dropping.pac |
b3900 | 6b 65 74 73 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 62 65 66 6f 72 65 20 69 74 20 72 65 61 63 | kets.from.a.queue.before.it.reac |
b3920 | 68 65 73 20 69 74 73 20 71 75 65 75 65 20 6c 69 6d 69 74 20 74 68 75 73 20 61 76 6f 69 64 69 6e | hes.its.queue.limit.thus.avoidin |
b3940 | 67 20 63 6f 6e 67 65 73 74 69 6f 6e 2e 20 54 68 61 74 20 69 73 20 67 6f 6f 64 20 66 6f 72 20 54 | g.congestion..That.is.good.for.T |
b3960 | 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 73 20 74 68 65 20 67 72 61 64 75 61 6c 20 64 72 | CP.connections.as.the.gradual.dr |
b3980 | 6f 70 70 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 20 61 63 74 73 20 61 73 20 61 20 73 69 67 6e | opping.of.packets.acts.as.a.sign |
b39a0 | 61 6c 20 66 6f 72 20 74 68 65 20 73 65 6e 64 65 72 20 74 6f 20 64 65 63 72 65 61 73 65 20 69 74 | al.for.the.sender.to.decrease.it |
b39c0 | 73 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 72 61 74 65 2e 00 41 20 73 69 6d 70 6c 65 20 65 42 | s.transmission.rate..A.simple.eB |
b39e0 | 47 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 41 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 | GP.configuration:.A.simple.examp |
b3a00 | 6c 65 20 6f 66 20 53 68 61 70 65 72 20 75 73 69 6e 67 20 70 72 69 6f 72 69 74 69 65 73 2e 00 41 | le.of.Shaper.using.priorities..A |
b3a20 | 20 73 69 6d 70 6c 65 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 6e 20 46 51 2d 43 6f 44 65 6c 20 70 | .simple.example.of.an.FQ-CoDel.p |
b3a40 | 6f 6c 69 63 79 20 77 6f 72 6b 69 6e 67 20 69 6e 73 69 64 65 20 61 20 53 68 61 70 65 72 20 6f 6e | olicy.working.inside.a.Shaper.on |
b3a60 | 65 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 64 69 61 | e..A.simplified.traffic.flow.dia |
b3a80 | 67 72 61 6d 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 74 20 | gram,.based.on.Netfilter.packet. |
b3aa0 | 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f | flow,.is.shown.next,.in.order.to |
b3ac0 | 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e 64 | .have.a.full.view.and.understand |
b3ae0 | 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 | ing.of.how.packets.are.processed |
b3b00 | 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 74 72 61 66 66 69 | ,.and.what.possible.paths.traffi |
b3b20 | 63 20 63 61 6e 20 74 61 6b 65 2e 00 41 20 73 69 6d 70 6c 69 66 69 65 64 20 74 72 61 66 66 69 63 | c.can.take..A.simplified.traffic |
b3b40 | 20 66 6c 6f 77 2c 20 62 61 73 65 64 20 6f 6e 20 4e 65 74 66 69 6c 74 65 72 20 70 61 63 6b 65 74 | .flow,.based.on.Netfilter.packet |
b3b60 | 20 66 6c 6f 77 2c 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 2c 20 69 6e 20 6f 72 64 65 72 20 74 | .flow,.is.shown.next,.in.order.t |
b3b80 | 6f 20 68 61 76 65 20 61 20 66 75 6c 6c 20 76 69 65 77 20 61 6e 64 20 75 6e 64 65 72 73 74 61 6e | o.have.a.full.view.and.understan |
b3ba0 | 64 69 6e 67 20 6f 66 20 68 6f 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 | ding.of.how.packets.are.processe |
b3bc0 | 64 2c 20 61 6e 64 20 77 68 61 74 20 70 6f 73 73 69 62 6c 65 20 70 61 74 68 73 20 63 61 6e 20 74 | d,.and.what.possible.paths.can.t |
b3be0 | 61 6b 65 2e 00 41 20 73 69 6e 67 6c 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 | ake..A.single.internal.network.a |
b3c00 | 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 55 73 65 20 74 68 65 20 4e 41 54 | nd.external.network..Use.the.NAT |
b3c20 | 36 36 20 64 65 76 69 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 61 20 73 69 6e 67 6c 65 20 69 6e | 66.device.to.connect.a.single.in |
b3c40 | 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 | ternal.network.and.public.networ |
b3c60 | 6b 2c 20 61 6e 64 20 74 68 65 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c | k,.and.the.hosts.in.the.internal |
b3c80 | 20 6e 65 74 77 6f 72 6b 20 75 73 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 | .network.use.IPv6.address.prefix |
b3ca0 | 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 72 6f 75 74 69 6e 67 20 77 69 74 | es.that.only.support.routing.wit |
b3cc0 | 68 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 72 61 6e 67 65 2e 20 57 68 65 6e 20 61 20 68 6f 73 74 | hin.the.local.range..When.a.host |
b3ce0 | 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 65 | .in.the.internal.network.accesse |
b3d00 | 73 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 68 65 20 73 6f 75 72 | s.the.external.network,.the.sour |
b3d20 | 63 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 69 6e 20 74 68 65 20 6d 65 | ce.IPv6.address.prefix.in.the.me |
b3d40 | 73 73 61 67 65 20 77 69 6c 6c 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 69 6e 74 6f 20 61 20 67 | ssage.will.be.converted.into.a.g |
b3d60 | 6c 6f 62 61 6c 20 75 6e 69 63 61 73 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 72 65 66 69 | lobal.unicast.IPv6.address.prefi |
b3d80 | 78 20 62 79 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 2e 00 41 20 73 74 61 74 69 6f 6e | x.by.the.NAT66.device..A.station |
b3da0 | 20 61 63 74 73 20 61 73 20 61 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 20 61 63 63 65 73 73 69 6e | .acts.as.a.Wi-Fi.client.accessin |
b3dc0 | 67 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 20 61 6e 20 61 76 61 69 6c 61 62 | g.the.network.through.an.availab |
b3de0 | 6c 65 20 57 41 50 00 41 20 73 79 6e 63 20 67 72 6f 75 70 20 61 6c 6c 6f 77 73 20 56 52 52 50 20 | le.WAP.A.sync.group.allows.VRRP. |
b3e00 | 67 72 6f 75 70 73 20 74 6f 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 67 65 74 68 65 72 2e 00 41 | groups.to.transition.together..A |
b3e20 | 20 74 79 70 69 63 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e | .typical.configuration.using.2.n |
b3e40 | 6f 64 65 73 2e 00 41 20 74 79 70 69 63 61 6c 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 75 73 69 | odes..A.typical.problem.with.usi |
b3e60 | 6e 67 20 4e 41 54 20 61 6e 64 20 68 6f 73 74 69 6e 67 20 70 75 62 6c 69 63 20 73 65 72 76 65 72 | ng.NAT.and.hosting.public.server |
b3e80 | 73 20 69 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 73 79 | s.is.the.ability.for.internal.sy |
b3ea0 | 73 74 65 6d 73 20 74 6f 20 72 65 61 63 68 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 | stems.to.reach.an.internal.serve |
b3ec0 | 72 20 75 73 69 6e 67 20 69 74 27 73 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 | r.using.it's.external.IP.address |
b3ee0 | 2e 20 54 68 65 20 73 6f 6c 75 74 69 6f 6e 20 74 6f 20 74 68 69 73 20 69 73 20 75 73 75 61 6c 6c | ..The.solution.to.this.is.usuall |
b3f00 | 79 20 74 68 65 20 75 73 65 20 6f 66 20 73 70 6c 69 74 2d 44 4e 53 20 74 6f 20 63 6f 72 72 65 63 | y.the.use.of.split-DNS.to.correc |
b3f20 | 74 6c 79 20 70 6f 69 6e 74 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 74 6f 20 74 68 65 20 69 6e | tly.point.host.systems.to.the.in |
b3f40 | 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 68 65 6e 20 72 65 71 75 65 73 74 73 20 61 72 65 | ternal.address.when.requests.are |
b3f60 | 20 6d 61 64 65 20 69 6e 74 65 72 6e 61 6c 6c 79 2e 20 42 65 63 61 75 73 65 20 6d 61 6e 79 20 73 | .made.internally..Because.many.s |
b3f80 | 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 73 20 6c 61 63 6b 20 44 4e 53 20 69 6e 66 72 61 73 74 | maller.networks.lack.DNS.infrast |
b3fa0 | 72 75 63 74 75 72 65 2c 20 61 20 77 6f 72 6b 2d 61 72 6f 75 6e 64 20 69 73 20 63 6f 6d 6d 6f 6e | ructure,.a.work-around.is.common |
b3fc0 | 6c 79 20 64 65 70 6c 6f 79 65 64 20 74 6f 20 66 61 63 69 6c 69 74 61 74 65 20 74 68 65 20 74 72 | ly.deployed.to.facilitate.the.tr |
b3fe0 | 61 66 66 69 63 20 62 79 20 4e 41 54 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 20 66 72 6f 6d | affic.by.NATing.the.request.from |
b4000 | 20 69 6e 74 65 72 6e 61 6c 20 68 6f 73 74 73 20 74 6f 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | .internal.hosts.to.the.source.ad |
b4020 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 | dress.of.the.internal.interface. |
b4040 | 6f 6e 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 41 20 75 73 65 72 20 66 72 69 65 6e 64 6c 79 | on.the.firewall..A.user.friendly |
b4060 | 20 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 43 61 6e 20 | .alias.for.this.connection..Can. |
b4080 | 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6e 61 | be.used.instead.of.the.device.na |
b40a0 | 6d 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 41 20 75 73 65 72 20 66 72 69 65 6e | me.when.connecting..A.user.frien |
b40c0 | 64 6c 79 20 64 65 73 63 72 69 70 74 69 6f 6e 20 69 64 65 6e 74 69 66 79 69 6e 67 20 74 68 65 20 | dly.description.identifying.the. |
b40e0 | 63 6f 6e 6e 65 63 74 65 64 20 70 65 72 69 70 68 65 72 61 6c 2e 00 41 20 76 61 6c 75 65 20 6f 66 | connected.peripheral..A.value.of |
b4100 | 20 30 20 64 69 73 61 62 6c 65 73 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e 20 54 68 65 20 | .0.disables.ARP.monitoring..The. |
b4120 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 30 2e 00 41 20 76 61 6c 75 65 20 6f 66 20 32 | default.value.is.0..A.value.of.2 |
b4140 | 39 36 20 77 6f 72 6b 73 20 77 65 6c 6c 20 6f 6e 20 76 65 72 79 20 73 6c 6f 77 20 6c 69 6e 6b 73 | 96.works.well.on.very.slow.links |
b4160 | 20 28 34 30 20 62 79 74 65 73 20 66 6f 72 20 54 43 50 2f 49 50 20 68 65 61 64 65 72 20 2b 20 32 | .(40.bytes.for.TCP/IP.header.+.2 |
b4180 | 35 36 20 62 79 74 65 73 20 6f 66 20 64 61 74 61 29 2e 00 41 20 76 65 72 79 20 73 6d 61 6c 6c 20 | 56.bytes.of.data)..A.very.small. |
b41a0 | 62 75 66 66 65 72 20 77 69 6c 6c 20 73 6f 6f 6e 20 73 74 61 72 74 20 64 72 6f 70 70 69 6e 67 20 | buffer.will.soon.start.dropping. |
b41c0 | 70 61 63 6b 65 74 73 2e 00 41 20 7a 6f 6e 65 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 | packets..A.zone.must.be.configur |
b41e0 | 65 64 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 69 67 6e | ed.before.an.interface.is.assign |
b4200 | 65 64 20 74 6f 20 69 74 20 61 6e 64 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 | ed.to.it.and.an.interface.can.be |
b4220 | 20 61 73 73 69 67 6e 65 64 20 74 6f 20 6f 6e 6c 79 20 61 20 73 69 6e 67 6c 65 20 7a 6f 6e 65 2e | .assigned.to.only.a.single.zone. |
b4240 | 00 41 43 4d 45 00 41 43 4d 45 20 44 69 72 65 63 74 6f 72 79 20 52 65 73 6f 75 72 63 65 20 55 52 | .ACME.ACME.Directory.Resource.UR |
b4260 | 49 2e 00 41 50 49 00 41 52 50 00 41 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 75 73 | I..API.ARP.Above.command.will.us |
b4280 | 65 20 60 31 30 2e 30 2e 30 2e 33 60 20 61 73 20 73 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 72 | e.`10.0.0.3`.as.source.IPv4.addr |
b42a0 | 65 73 73 20 66 6f 72 20 61 6c 6c 20 52 41 44 49 55 53 20 71 75 65 72 69 65 73 20 6f 6e 20 74 68 | ess.for.all.RADIUS.queries.on.th |
b42c0 | 69 73 20 4e 41 53 2e 00 41 62 6f 76 65 2c 20 63 6f 6d 6d 61 6e 64 20 73 79 6e 74 61 78 20 69 73 | is.NAS..Above,.command.syntax.is |
b42e0 | 6e 20 6e 6f 74 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 64 79 6e 61 6d 69 63 20 64 6e 73 | n.noted.to.configure.dynamic.dns |
b4300 | 20 6f 6e 20 61 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 20 49 74 20 69 73 20 | .on.a.specific.interface..It.is. |
b4320 | 70 6f 73 73 69 62 6c 65 20 74 6f 20 6f 76 65 72 6c 6f 6f 6b 20 74 68 65 20 61 64 64 69 74 69 6f | possible.to.overlook.the.additio |
b4340 | 6e 61 6c 20 61 64 64 72 65 73 73 20 6f 70 74 69 6f 6e 2c 20 77 65 62 2c 20 77 68 65 6e 20 63 6f | nal.address.option,.web,.when.co |
b4360 | 6d 70 6c 65 74 65 69 6e 67 20 74 68 6f 73 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 64 64 63 6c 69 65 | mpleteing.those.commands..ddclie |
b4380 | 6e 74 5f 20 68 61 73 20 61 6e 6f 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 | nt_.has.another.way.to.determine |
b43a0 | 20 74 68 65 20 57 41 4e 20 49 50 20 61 64 64 72 65 73 73 2c 20 75 73 69 6e 67 20 61 20 77 65 62 | .the.WAN.IP.address,.using.a.web |
b43c0 | 2d 62 61 73 65 64 20 75 72 6c 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 65 78 74 65 | -based.url.to.determine.the.exte |
b43e0 | 72 6e 61 6c 20 49 50 2e 20 45 61 63 68 20 6f 66 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 61 62 | rnal.IP..Each.of.the.commands.ab |
b4400 | 6f 76 65 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 62 65 20 6d 6f 64 69 66 69 65 64 20 74 6f 20 | ove.will.need.to.be.modified.to. |
b4420 | 75 73 65 20 27 77 65 62 27 20 61 73 20 74 68 65 20 27 69 6e 74 65 72 66 61 63 65 27 20 73 70 65 | use.'web'.as.the.'interface'.spe |
b4440 | 63 69 66 69 65 64 20 69 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 | cified.if.this.functionality.is. |
b4460 | 74 6f 20 62 65 20 75 74 69 6c 69 7a 65 64 2e 00 41 63 63 65 6c 65 72 61 74 69 6f 6e 00 41 63 63 | to.be.utilized..Acceleration.Acc |
b4480 | 65 70 74 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 67 69 76 65 | ept.SSH.connections.for.the.give |
b44a0 | 6e 20 60 3c 64 65 76 69 63 65 3e 60 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e | n.`<device>`.on.TCP.port.`<port> |
b44c0 | 60 2e 20 41 66 74 65 72 20 73 75 63 63 65 73 73 66 75 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 | `..After.successfull.authenticat |
b44e0 | 69 6f 6e 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 64 69 72 65 63 74 6c 79 20 64 72 | ion.the.user.will.be.directly.dr |
b4500 | 6f 70 70 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 73 65 72 69 61 6c 20 64 65 | opped.to.the.connected.serial.de |
b4520 | 76 69 63 65 2e 00 41 63 63 65 70 74 20 6f 6e 6c 79 20 63 65 72 74 61 69 6e 20 70 72 6f 74 6f 63 | vice..Accept.only.certain.protoc |
b4540 | 6f 6c 73 3a 20 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 72 65 70 6c 69 63 61 74 65 20 74 | ols:.You.may.want.to.replicate.t |
b4560 | 68 65 20 73 74 61 74 65 20 6f 66 20 66 6c 6f 77 73 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 | he.state.of.flows.depending.on.t |
b4580 | 68 65 69 72 20 6c 61 79 65 72 20 34 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 63 63 65 70 74 20 70 65 | heir.layer.4.protocol..Accept.pe |
b45a0 | 65 72 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 2e 20 42 79 20 64 65 66 61 | er.interface.identifier..By.defa |
b45c0 | 75 6c 74 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 41 63 63 65 70 74 61 62 6c 65 20 72 | ult.is.not.defined..Acceptable.r |
b45e0 | 61 74 65 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 28 65 2e 67 2e 20 31 2f 6d 69 6e 2c 20 | ate.of.connections.(e.g..1/min,. |
b4600 | 36 30 2f 73 65 63 29 00 41 63 63 65 73 73 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 41 63 63 65 73 | 60/sec).Access.List.Policy.Acces |
b4620 | 73 20 4c 69 73 74 73 00 41 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 69 6d 6d | s.Lists.Action.must.be.taken.imm |
b4640 | 65 64 69 61 74 65 6c 79 20 2d 20 41 20 63 6f 6e 64 69 74 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 | ediately.-.A.condition.that.shou |
b4660 | 6c 64 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 69 6d 6d 65 64 69 61 74 65 6c 79 2c 20 73 75 63 | ld.be.corrected.immediately,.suc |
b4680 | 68 20 61 73 20 61 20 63 6f 72 72 75 70 74 65 64 20 73 79 73 74 65 6d 20 64 61 74 61 62 61 73 65 | h.as.a.corrupted.system.database |
b46a0 | 2e 00 41 63 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 6f 6e 63 65 20 | ..Action.which.will.be.run.once. |
b46c0 | 74 68 65 20 63 74 72 6c 2d 61 6c 74 2d 64 65 6c 20 6b 65 79 73 74 72 6f 6b 65 20 69 73 20 72 65 | the.ctrl-alt-del.keystroke.is.re |
b46e0 | 63 65 69 76 65 64 2e 00 41 63 74 69 6f 6e 73 00 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 79 | ceived..Actions.Active.Directory |
b4700 | 00 41 63 74 69 76 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 62 61 63 6b 65 6e 64 20 73 65 72 | .Active.health.check.backend.ser |
b4720 | 76 65 72 00 41 64 64 20 4e 54 41 20 28 6e 65 67 61 74 69 76 65 20 74 72 75 73 74 20 61 6e 63 68 | ver.Add.NTA.(negative.trust.anch |
b4740 | 6f 72 29 20 66 6f 72 20 74 68 69 73 20 64 6f 6d 61 69 6e 2e 20 54 68 69 73 20 6d 75 73 74 20 62 | or).for.this.domain..This.must.b |
b4760 | 65 20 73 65 74 20 69 66 20 74 68 65 20 64 6f 6d 61 69 6e 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 | e.set.if.the.domain.does.not.sup |
b4780 | 70 6f 72 74 20 44 4e 53 53 45 43 2e 00 41 64 64 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e | port.DNSSEC..Add.Power.Constrain |
b47a0 | 74 20 65 6c 65 6d 65 6e 74 20 74 6f 20 42 65 61 63 6f 6e 20 61 6e 64 20 50 72 6f 62 65 20 52 65 | t.element.to.Beacon.and.Probe.Re |
b47c0 | 73 70 6f 6e 73 65 20 66 72 61 6d 65 73 2e 00 41 64 64 20 61 20 66 6f 72 77 61 72 64 69 6e 67 20 | sponse.frames..Add.a.forwarding. |
b47e0 | 72 75 6c 65 20 6d 61 74 63 68 69 6e 67 20 55 44 50 20 70 6f 72 74 20 6f 6e 20 79 6f 75 72 20 69 | rule.matching.UDP.port.on.your.i |
b4800 | 6e 74 65 72 6e 65 74 20 72 6f 75 74 65 72 2e 00 41 64 64 20 61 20 68 6f 73 74 20 64 65 76 69 63 | nternet.router..Add.a.host.devic |
b4820 | 65 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 41 64 64 20 61 63 63 65 73 73 2d 63 | e.to.the.container..Add.access-c |
b4840 | 6f 6e 74 72 6f 6c 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 61 6c 6c 6f 77 20 6f 72 20 64 65 6e | ontrol.directive.to.allow.or.den |
b4860 | 79 20 75 73 65 72 73 20 61 6e 64 20 67 72 6f 75 70 73 2e 20 44 69 72 65 63 74 69 76 65 73 20 61 | y.users.and.groups..Directives.a |
b4880 | 72 65 20 70 72 6f 63 65 73 73 65 64 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 72 | re.processed.in.the.following.or |
b48a0 | 64 65 72 20 6f 66 20 70 72 65 63 65 64 65 6e 63 65 3a 20 60 60 64 65 6e 79 2d 75 73 65 72 73 60 | der.of.precedence:.``deny-users` |
b48c0 | 60 2c 20 60 60 61 6c 6c 6f 77 2d 75 73 65 72 73 60 60 2c 20 60 60 64 65 6e 79 2d 67 72 6f 75 70 | `,.``allow-users``,.``deny-group |
b48e0 | 73 60 60 20 61 6e 64 20 60 60 61 6c 6c 6f 77 2d 67 72 6f 75 70 73 60 60 2e 00 41 64 64 20 63 75 | s``.and.``allow-groups``..Add.cu |
b4900 | 73 74 6f 6d 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 2e 20 4d 75 6c 74 | stom.environment.variables..Mult |
b4920 | 69 70 6c 65 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 61 | iple.environment.variables.are.a |
b4940 | 6c 6c 6f 77 65 64 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 | llowed..The.following.commands.t |
b4960 | 72 61 6e 73 6c 61 74 65 20 74 6f 20 22 2d 65 20 6b 65 79 3d 76 61 6c 75 65 22 20 77 68 65 6e 20 | ranslate.to."-e.key=value".when. |
b4980 | 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 2e 00 41 64 64 20 64 65 | the.container.is.created..Add.de |
b49a0 | 66 61 75 6c 74 20 72 6f 75 74 65 73 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 60 60 74 61 62 6c 65 | fault.routes.for.routing.``table |
b49c0 | 20 31 30 60 60 20 61 6e 64 20 60 60 74 61 62 6c 65 20 31 31 60 60 00 41 64 64 20 6d 75 6c 74 69 | .10``.and.``table.11``.Add.multi |
b49e0 | 70 6c 65 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 6f 6e 65 20 72 75 6c 65 20 77 69 74 68 20 73 | ple.source.IP.in.one.rule.with.s |
b4a00 | 61 6d 65 20 70 72 69 6f 72 69 74 79 00 41 64 64 20 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 53 4c | ame.priority.Add.new.port.to.SSL |
b4a20 | 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 65 | -ports.acl..Ports.included.by.de |
b4a40 | 66 61 75 6c 74 20 69 6e 20 53 53 4c 2d 70 6f 72 74 73 20 61 63 6c 3a 20 34 34 33 00 41 64 64 20 | fault.in.SSL-ports.acl:.443.Add. |
b4a60 | 6e 65 77 20 70 6f 72 74 20 74 6f 20 53 61 66 65 2d 70 6f 72 74 73 20 61 63 6c 2e 20 50 6f 72 74 | new.port.to.Safe-ports.acl..Port |
b4a80 | 73 20 69 6e 63 6c 75 64 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 53 61 66 65 2d 70 6f | s.included.by.default.in.Safe-po |
b4aa0 | 72 74 73 20 61 63 6c 3a 20 32 31 2c 20 37 30 2c 20 38 30 2c 20 32 31 30 2c 20 32 38 30 2c 20 34 | rts.acl:.21,.70,.80,.210,.280,.4 |
b4ac0 | 34 33 2c 20 34 38 38 2c 20 35 39 31 2c 20 37 37 37 2c 20 38 37 33 2c 20 31 30 32 35 2d 36 35 35 | 43,.488,.591,.777,.873,.1025-655 |
b4ae0 | 33 35 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 | 35.Add.or.replace.BGP.community. |
b4b00 | 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 | attribute.in.format.``<0-65535:0 |
b4b20 | 2d 36 35 35 33 35 3e 60 60 20 6f 72 20 66 72 6f 6d 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d | -65535>``.or.from.well-known.com |
b4b40 | 6d 75 6e 69 74 79 20 6c 69 73 74 00 41 64 64 20 6f 72 20 72 65 70 6c 61 63 65 20 42 47 50 20 6c | munity.list.Add.or.replace.BGP.l |
b4b60 | 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 6e 20 66 6f 72 6d | arge-community.attribute.in.form |
b4b80 | 61 74 20 60 60 3c 30 2d 34 32 39 34 39 36 37 32 39 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3a | at.``<0-4294967295:0-4294967295: |
b4ba0 | 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 00 41 64 64 20 70 6f 6c 69 63 79 20 72 6f 75 74 65 | 0-4294967295>``.Add.policy.route |
b4bc0 | 20 6d 61 74 63 68 69 6e 67 20 56 4c 41 4e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 65 73 00 | .matching.VLAN.source.addresses. |
b4be0 | 41 64 64 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 | Add.public.key.portion.for.the.c |
b4c00 | 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f 20 74 68 65 20 56 | ertificate.named.`name`.to.the.V |
b4c20 | 79 4f 53 20 43 4c 49 2e 00 41 64 64 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 | yOS.CLI..Add.the.CAs.private.key |
b4c40 | 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 | .to.the.VyOS.CLI..This.should.ne |
b4c60 | 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 2c 20 61 6e 64 20 69 73 20 6f 6e 6c | ver.leave.the.system,.and.is.onl |
b4c80 | 79 20 72 65 71 75 69 72 65 64 20 69 66 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f | y.required.if.you.use.VyOS.as.yo |
b4ca0 | 75 72 20 63 65 72 74 69 66 69 63 61 74 65 20 67 65 6e 65 72 61 74 6f 72 20 61 73 20 6d 65 6e 74 | ur.certificate.generator.as.ment |
b4cc0 | 69 6f 6e 65 64 20 61 62 6f 76 65 2e 00 41 64 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 66 72 | ioned.above..Add.the.commands.fr |
b4ce0 | 6f 6d 20 53 6e 69 70 70 65 74 20 69 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 73 69 64 65 20 76 | om.Snippet.in.the.Windows.side.v |
b4d00 | 69 61 20 50 6f 77 65 72 53 68 65 6c 6c 2e 20 41 6c 73 6f 20 69 6d 70 6f 72 74 20 74 68 65 20 72 | ia.PowerShell..Also.import.the.r |
b4d20 | 6f 6f 74 20 43 41 20 63 65 72 74 20 74 6f 20 74 68 65 20 57 69 6e 64 6f 77 73 20 e2 80 9c 54 72 | oot.CA.cert.to.the.Windows....Tr |
b4d40 | 75 73 74 65 64 20 52 6f 6f 74 20 43 65 72 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f 72 69 | usted.Root.Certification.Authori |
b4d60 | 74 69 65 73 e2 80 9d 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 | ties....and.establish.the.connec |
b4d80 | 74 69 6f 6e 2e 00 41 64 64 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f | tion..Add.the.private.key.portio |
b4da0 | 6e 20 6f 66 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 43 4c 49 | n.of.this.certificate.to.the.CLI |
b4dc0 | 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 | ..This.should.never.leave.the.sy |
b4de0 | 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 | stem.as.it.is.used.to.decrypt.th |
b4e00 | 65 20 64 61 74 61 2e 00 41 64 64 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 72 74 69 66 | e.data..Add.the.public.CA.certif |
b4e20 | 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 43 41 20 6e 61 6d 65 64 20 60 6e 61 6d 65 60 20 74 6f | icate.for.the.CA.named.`name`.to |
b4e40 | 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 41 64 64 69 6e 67 20 61 20 32 46 41 20 77 69 74 68 | .the.VyOS.CLI..Adding.a.2FA.with |
b4e60 | 20 61 6e 20 4f 54 50 2d 6b 65 79 00 41 64 64 69 74 69 6f 6e 61 6c 20 67 6c 6f 62 61 6c 20 70 61 | .an.OTP-key.Additional.global.pa |
b4e80 | 72 61 6d 65 74 65 72 73 20 61 72 65 20 73 65 74 2c 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 | rameters.are.set,.including.the. |
b4ea0 | 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 69 6d 69 74 20 | maximum.number.connection.limit. |
b4ec0 | 6f 66 20 34 30 30 30 20 61 6e 64 20 61 20 6d 69 6e 69 6d 75 6d 20 54 4c 53 20 76 65 72 73 69 6f | of.4000.and.a.minimum.TLS.versio |
b4ee0 | 6e 20 6f 66 20 31 2e 33 2e 00 41 64 64 69 74 69 6f 6e 61 6c 20 6f 70 74 69 6f 6e 20 74 6f 20 72 | n.of.1.3..Additional.option.to.r |
b4f00 | 75 6e 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 56 52 46 | un.TFTP.server.in.the.:abbr:`VRF |
b4f20 | 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 | .(Virtual.Routing.and.Forwarding |
b4f40 | 29 60 20 63 6f 6e 74 65 78 74 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 73 68 6f 75 | )`.context.Additionally.you.shou |
b4f60 | 6c 64 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 74 68 69 73 20 66 65 61 74 75 72 | ld.keep.in.mind.that.this.featur |
b4f80 | 65 20 66 75 6e 64 61 6d 65 6e 74 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 61 62 69 | e.fundamentally.disables.the.abi |
b4fa0 | 6c 69 74 79 20 74 6f 20 75 73 65 20 77 69 64 65 6c 79 20 64 65 70 6c 6f 79 65 64 20 42 47 50 20 | lity.to.use.widely.deployed.BGP. |
b4fc0 | 66 65 61 74 75 72 65 73 2e 20 42 47 50 20 75 6e 6e 75 6d 62 65 72 65 64 2c 20 68 6f 73 74 6e 61 | features..BGP.unnumbered,.hostna |
b4fe0 | 6d 65 20 73 75 70 70 6f 72 74 2c 20 41 53 34 2c 20 41 64 64 70 61 74 68 2c 20 52 6f 75 74 65 20 | me.support,.AS4,.Addpath,.Route. |
b5000 | 52 65 66 72 65 73 68 2c 20 4f 52 46 2c 20 44 79 6e 61 6d 69 63 20 43 61 70 61 62 69 6c 69 74 69 | Refresh,.ORF,.Dynamic.Capabiliti |
b5020 | 65 73 2c 20 61 6e 64 20 67 72 61 63 65 66 75 6c 20 72 65 73 74 61 72 74 2e 00 41 64 64 69 74 69 | es,.and.graceful.restart..Additi |
b5040 | 6f 6e 61 6c 6c 79 2c 20 65 61 63 68 20 63 6c 69 65 6e 74 20 6e 65 65 64 73 20 61 20 63 6f 70 79 | onally,.each.client.needs.a.copy |
b5060 | 20 6f 66 20 63 61 20 63 65 72 74 20 61 6e 64 20 69 74 73 20 6f 77 6e 20 63 6c 69 65 6e 74 20 6b | .of.ca.cert.and.its.own.client.k |
b5080 | 65 79 20 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 2e 20 54 68 65 20 66 69 6c 65 73 20 61 72 65 | ey.and.cert.files..The.files.are |
b50a0 | 20 70 6c 61 69 6e 74 65 78 74 20 73 6f 20 74 68 65 79 20 6d 61 79 20 62 65 20 63 6f 70 69 65 64 | .plaintext.so.they.may.be.copied |
b50c0 | 20 65 69 74 68 65 72 20 6d 61 6e 75 61 6c 6c 79 20 66 72 6f 6d 20 74 68 65 20 43 4c 49 2e 20 43 | .either.manually.from.the.CLI..C |
b50e0 | 6c 69 65 6e 74 20 6b 65 79 20 61 6e 64 20 63 65 72 74 20 66 69 6c 65 73 20 73 68 6f 75 6c 64 20 | lient.key.and.cert.files.should. |
b5100 | 62 65 20 73 69 67 6e 65 64 20 77 69 74 68 20 74 68 65 20 70 72 6f 70 65 72 20 63 61 20 63 65 72 | be.signed.with.the.proper.ca.cer |
b5120 | 74 20 61 6e 64 20 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 73 69 | t.and.generated.on.the.server.si |
b5140 | 64 65 2e 00 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 75 73 65 | de..Additionally,.we.want.to.use |
b5160 | 20 56 50 4e 73 20 6f 6e 6c 79 20 6f 6e 20 6f 75 72 20 65 74 68 31 20 69 6e 74 65 72 66 61 63 65 | .VPNs.only.on.our.eth1.interface |
b5180 | 20 28 74 68 65 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 74 68 65 20 | .(the.external.interface.in.the. |
b51a0 | 69 6d 61 67 65 20 61 62 6f 76 65 29 00 41 64 64 72 65 73 73 00 41 64 64 72 65 73 73 20 43 6f 6e | image.above).Address.Address.Con |
b51c0 | 76 65 72 73 69 6f 6e 00 41 64 64 72 65 73 73 20 46 61 6d 69 6c 69 65 73 00 41 64 64 72 65 73 73 | version.Address.Families.Address |
b51e0 | 20 47 72 6f 75 70 73 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 20 73 68 61 6c 6c 20 62 65 20 60 60 | .Groups.Address.pool.shall.be.`` |
b5200 | 32 30 30 31 3a 64 62 38 3a 3a 31 30 30 60 60 20 74 68 72 6f 75 67 68 20 60 60 32 30 30 31 3a 64 | 2001:db8::100``.through.``2001:d |
b5220 | 62 38 3a 3a 31 39 39 60 60 2e 00 41 64 64 72 65 73 73 20 70 6f 6f 6c 73 00 41 64 64 72 65 73 73 | b8::199``..Address.pools.Address |
b5240 | 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 00 41 64 | .to.listen.for.HTTPS.requests.Ad |
b5260 | 64 73 20 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e 71 75 61 6c 69 66 69 | ds.registry.to.list.of.unqualifi |
b5280 | 65 64 2d 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 | ed-search-registries..By.default |
b52a0 | 2c 20 66 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e | ,.for.any.image.that.does.not.in |
b52c0 | 63 6c 75 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 20 69 6d 61 67 65 20 | clude.the.registry.in.the.image. |
b52e0 | 6e 61 6d 65 2c 20 56 79 4f 53 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 72 2e 69 6f 20 61 6e | name,.VyOS.will.use.docker.io.an |
b5300 | 64 20 71 75 61 79 2e 69 6f 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 | d.quay.io.as.the.container.regis |
b5320 | 74 72 79 2e 00 41 64 64 73 20 72 65 67 69 73 74 72 79 20 74 6f 20 6c 69 73 74 20 6f 66 20 75 6e | try..Adds.registry.to.list.of.un |
b5340 | 71 75 61 6c 69 66 69 65 64 2d 73 65 61 72 63 68 2d 72 65 67 69 73 74 72 69 65 73 2e 20 42 79 20 | qualified-search-registries..By. |
b5360 | 64 65 66 61 75 6c 74 2c 20 66 6f 72 20 61 6e 79 20 69 6d 61 67 65 20 74 68 61 74 20 64 6f 65 73 | default,.for.any.image.that.does |
b5380 | 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 74 68 65 20 72 65 67 69 73 74 72 79 20 69 6e 20 74 68 65 | .not.include.the.registry.in.the |
b53a0 | 20 69 6d 61 67 65 20 6e 61 6d 65 2c 20 56 79 6f 73 20 77 69 6c 6c 20 75 73 65 20 64 6f 63 6b 65 | .image.name,.Vyos.will.use.docke |
b53c0 | 72 2e 69 6f 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 2e 00 | r.io.as.the.container.registry.. |
b53e0 | 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 44 69 73 74 61 6e 63 65 00 41 64 76 61 6e 63 65 64 | Administrative.Distance.Advanced |
b5400 | 20 49 6e 74 65 72 66 61 63 65 20 4f 70 74 69 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 4f 70 74 69 | .Interface.Options.Advanced.Opti |
b5420 | 6f 6e 73 00 41 64 76 61 6e 63 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e 20 62 | ons.Advanced.configuration.can.b |
b5440 | 65 20 75 73 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 61 70 70 6c 79 20 73 6f 75 72 63 65 20 | e.used.in.order.to.apply.source. |
b5460 | 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 2c 20 61 6e 64 20 77 69 74 68 69 6e 20 61 | or.destination.NAT,.and.within.a |
b5480 | 20 73 69 6e 67 6c 65 20 72 75 6c 65 2c 20 62 65 20 61 62 6c 65 20 74 6f 20 64 65 66 69 6e 65 20 | .single.rule,.be.able.to.define. |
b54a0 | 6d 75 6c 74 69 70 6c 65 20 74 72 61 6e 73 6c 61 74 65 64 20 61 64 64 72 65 73 73 65 73 2c 20 73 | multiple.translated.addresses,.s |
b54c0 | 6f 20 4e 41 54 20 62 61 6c 61 6e 63 65 73 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 | o.NAT.balances.the.translations. |
b54e0 | 61 6d 6f 6e 67 20 74 68 65 6d 2e 00 41 64 76 61 6e 74 61 67 65 73 20 6f 66 20 4f 70 65 6e 56 50 | among.them..Advantages.of.OpenVP |
b5500 | 4e 20 61 72 65 3a 00 41 64 76 65 72 74 69 73 65 20 44 4e 53 20 73 65 72 76 65 72 20 70 65 72 20 | N.are:.Advertise.DNS.server.per. |
b5520 | 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 36 | https://tools.ietf.org/html/rfc6 |
b5540 | 31 30 36 00 41 64 76 65 72 74 69 73 69 6e 67 20 61 20 4e 41 54 36 34 20 50 72 65 66 69 78 00 41 | 106.Advertising.a.NAT64.Prefix.A |
b5560 | 64 76 65 72 74 69 73 69 6e 67 20 61 20 50 72 65 66 69 78 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 | dvertising.a.Prefix.After.commit |
b5580 | 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 73 20 77 69 6c 6c 20 62 65 | .the.plaintext.passwords.will.be |
b55a0 | 20 68 61 73 68 65 64 20 61 6e 64 20 73 74 6f 72 65 64 20 69 6e 20 79 6f 75 72 20 63 6f 6e 66 69 | .hashed.and.stored.in.your.confi |
b55c0 | 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 43 4c 49 20 63 6f 6e 66 | guration..The.resulting.CLI.conf |
b55e0 | 69 67 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 41 66 74 65 72 20 63 6f 6d 6d 69 74 74 | ig.will.look.like:.After.committ |
b5600 | 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 63 61 6e 20 76 65 72 | ing.the.configuration.we.can.ver |
b5620 | 69 66 79 20 61 6c 6c 20 6c 65 61 6b 65 64 20 72 6f 75 74 65 73 20 61 72 65 20 69 6e 73 74 61 6c | ify.all.leaked.routes.are.instal |
b5640 | 6c 65 64 2c 20 61 6e 64 20 74 72 79 20 74 6f 20 49 43 4d 50 20 70 69 6e 67 20 50 43 31 20 66 72 | led,.and.try.to.ICMP.ping.PC1.fr |
b5660 | 6f 6d 20 50 43 33 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 74 73 20 61 72 65 20 | om.PC3..After.the.PKI.certs.are. |
b5680 | 61 6c 6c 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 6f 6e 66 69 67 75 72 | all.set.up.we.can.start.configur |
b56a0 | 69 6e 67 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 6c 73 20 75 73 65 64 | ing.our.IPSec/IKE.proposals.used |
b56c0 | 20 66 6f 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 61 20 65 6e 63 72 79 | .for.key-exchange.end.data.encry |
b56e0 | 70 74 69 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 | ption..The.used.encryption.ciphe |
b5700 | 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 76 61 72 79 | rs.and.integrity.algorithms.vary |
b5720 | 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f 20 6f 70 65 72 61 74 | .from.operating.system.to.operat |
b5740 | 69 6e 67 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 20 69 6e 20 74 68 69 | ing.system..The.ones.used.in.thi |
b5760 | 73 20 65 78 61 6d 70 6c 65 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 77 6f 72 6b 20 | s.example.are.validated.to.work. |
b5780 | 6f 6e 20 57 69 6e 64 6f 77 73 20 31 30 2e 00 41 66 74 65 72 20 74 68 65 20 50 4b 49 20 63 65 72 | on.Windows.10..After.the.PKI.cer |
b57a0 | 74 73 20 61 72 65 20 61 6c 6c 20 73 65 74 20 75 70 20 77 65 20 63 61 6e 20 73 74 61 72 74 20 63 | ts.are.all.set.up.we.can.start.c |
b57c0 | 6f 6e 66 69 67 75 72 69 6e 67 20 6f 75 72 20 49 50 53 65 63 2f 49 4b 45 20 70 72 6f 70 6f 73 61 | onfiguring.our.IPSec/IKE.proposa |
b57e0 | 6c 73 20 75 73 65 64 20 66 6f 72 20 6b 65 79 2d 65 78 63 68 61 6e 67 65 20 65 6e 64 20 64 61 74 | ls.used.for.key-exchange.end.dat |
b5800 | 61 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 54 68 65 20 75 73 65 64 20 65 6e 63 72 79 70 74 69 6f | a.encryption..The.used.encryptio |
b5820 | 6e 20 63 69 70 68 65 72 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 | n.ciphers.and.integrity.algorith |
b5840 | 6d 73 20 76 61 72 79 20 66 72 6f 6d 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 74 6f | ms.vary.from.operating.system.to |
b5860 | 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 2e 20 54 68 65 20 6f 6e 65 73 20 75 73 65 64 | .operating.system..The.ones.used |
b5880 | 20 69 6e 20 74 68 69 73 20 70 6f 73 74 20 61 72 65 20 76 61 6c 69 64 61 74 65 64 20 74 6f 20 77 | .in.this.post.are.validated.to.w |
b58a0 | 6f 72 6b 20 6f 6e 20 62 6f 74 68 20 57 69 6e 64 6f 77 73 20 31 30 20 61 6e 64 20 69 4f 53 2f 69 | ork.on.both.Windows.10.and.iOS/i |
b58c0 | 50 61 64 4f 53 20 31 34 20 74 6f 20 31 37 2e 00 41 66 74 65 72 20 77 65 20 68 61 76 65 20 69 6d | PadOS.14.to.17..After.we.have.im |
b58e0 | 70 6f 72 74 65 64 20 74 68 65 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 28 73 29 20 77 65 20 | ported.the.CA.certificate(s).we. |
b5900 | 63 61 6e 20 6e 6f 77 20 69 6d 70 6f 72 74 20 61 6e 64 20 61 64 64 20 63 65 72 74 69 66 69 63 61 | can.now.import.and.add.certifica |
b5920 | 74 65 73 20 75 73 65 64 20 62 79 20 73 65 72 76 69 63 65 73 20 6f 6e 20 74 68 69 73 20 72 6f 75 | tes.used.by.services.on.this.rou |
b5940 | 74 65 72 2e 00 41 66 74 65 72 20 79 6f 75 20 6f 62 74 61 69 6e 65 64 20 79 6f 75 72 20 73 65 72 | ter..After.you.obtained.your.ser |
b5960 | 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 20 63 61 6e 20 69 6d 70 6f 72 74 20 69 | ver.certificate.you.can.import.i |
b5980 | 74 20 66 72 6f 6d 20 61 20 66 69 6c 65 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 | t.from.a.file.on.the.local.files |
b59a0 | 79 73 74 65 6d 2c 20 6f 72 20 70 61 73 74 65 20 69 74 20 69 6e 74 6f 20 74 68 65 20 43 4c 49 2e | ystem,.or.paste.it.into.the.CLI. |
b59c0 | 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 65 6e 74 65 72 69 6e 67 20 | .Please.note.that.when.entering. |
b59e0 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6d 61 6e 75 61 6c 6c 79 20 79 6f 75 20 6e 65 65 | the.certificate.manually.you.nee |
b5a00 | 64 20 74 6f 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d | d.to.strip.the.``-----BEGIN.KEY- |
b5a20 | 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 | ----``.and.``-----END.KEY-----`` |
b5a40 | 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 72 20 | .tags..Also,.the.certificate.or. |
b5a60 | 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 61 20 73 | key.needs.to.be.presented.in.a.s |
b5a80 | 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b 73 20 28 | ingle.line.without.line.breaks.( |
b5aa0 | 60 60 5c 6e 60 60 29 2e 00 41 67 65 6e 74 20 2d 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 | ``\n``)..Agent.-.software.which. |
b5ac0 | 72 75 6e 73 20 6f 6e 20 6d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 00 41 6c 65 72 74 00 41 6c | runs.on.managed.devices.Alert.Al |
b5ae0 | 67 6f 72 69 74 68 6d 00 41 6c 69 61 73 65 73 00 41 6c 6c 20 44 4e 53 20 72 65 71 75 65 73 74 73 | gorithm.Aliases.All.DNS.requests |
b5b00 | 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 6d 75 73 74 20 62 65 20 66 6f 72 77 61 72 64 | .for.example.com.must.be.forward |
b5b20 | 65 64 20 74 6f 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 61 74 20 31 39 32 2e 30 2e 32 2e 32 35 | ed.to.a.DNS.server.at.192.0.2.25 |
b5b40 | 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 63 61 66 65 3a 3a 31 00 41 6c 6c 20 53 4e 4d 50 20 | 4.and.2001:db8:cafe::1.All.SNMP. |
b5b60 | 4d 49 42 73 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 65 61 63 68 20 69 6d 61 67 65 20 6f | MIBs.are.located.in.each.image.o |
b5b80 | 66 20 56 79 4f 53 20 68 65 72 65 3a 20 60 60 2f 75 73 72 2f 73 68 61 72 65 2f 73 6e 6d 70 2f 6d | f.VyOS.here:.``/usr/share/snmp/m |
b5ba0 | 69 62 73 2f 60 60 00 41 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 57 57 41 4e 20 63 61 72 64 73 20 | ibs/``.All.available.WWAN.cards. |
b5bc0 | 68 61 76 65 20 61 20 62 75 69 6c 64 20 69 6e 2c 20 72 65 70 72 6f 67 72 61 6d 6d 61 62 6c 65 20 | have.a.build.in,.reprogrammable. |
b5be0 | 66 69 72 6d 77 61 72 65 2e 20 4d 6f 73 74 20 6f 66 20 74 68 65 20 76 65 6e 64 6f 72 73 20 70 72 | firmware..Most.of.the.vendors.pr |
b5c00 | 6f 76 69 64 65 20 61 20 72 65 67 75 6c 61 72 20 75 70 64 61 74 65 20 74 6f 20 74 68 65 20 66 69 | ovide.a.regular.update.to.the.fi |
b5c20 | 72 6d 77 61 72 65 20 75 73 65 64 20 69 6e 20 74 68 65 20 62 61 73 65 62 61 6e 64 20 63 68 69 70 | rmware.used.in.the.baseband.chip |
b5c40 | 2e 00 41 6c 6c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 73 68 6f 75 6c 64 20 62 65 20 73 74 6f | ..All.certificates.should.be.sto |
b5c60 | 72 65 64 20 6f 6e 20 56 79 4f 53 20 75 6e 64 65 72 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 | red.on.VyOS.under.``/config/auth |
b5c80 | 60 60 2e 20 49 66 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 6e 6f 74 20 73 74 6f 72 | ``..If.certificates.are.not.stor |
b5ca0 | 65 64 20 69 6e 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 64 69 72 65 63 74 6f 72 79 20 | ed.in.the.``/config``.directory. |
b5cc0 | 74 68 65 79 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6d 69 67 72 61 74 65 64 20 64 75 72 69 6e 67 | they.will.not.be.migrated.during |
b5ce0 | 20 61 20 73 6f 66 74 77 61 72 65 20 75 70 64 61 74 65 2e 00 41 6c 6c 20 66 61 63 69 6c 69 74 69 | .a.software.update..All.faciliti |
b5d00 | 65 73 00 41 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 44 | es.All.interfaces.used.for.the.D |
b5d20 | 48 43 50 20 72 65 6c 61 79 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 | HCP.relay.must.be.configured..Th |
b5d40 | 69 73 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 75 70 6c 69 6e 6b 20 74 6f 20 74 68 65 20 44 48 | is.includes.the.uplink.to.the.DH |
b5d60 | 43 50 20 73 65 72 76 65 72 2e 00 41 6c 6c 20 69 74 65 6d 73 20 69 6e 20 61 20 73 79 6e 63 20 67 | CP.server..All.items.in.a.sync.g |
b5d80 | 72 6f 75 70 20 73 68 6f 75 6c 64 20 62 65 20 73 69 6d 69 6c 61 72 6c 79 20 63 6f 6e 66 69 67 75 | roup.should.be.similarly.configu |
b5da0 | 72 65 64 2e 20 49 66 20 6f 6e 65 20 56 52 52 50 20 67 72 6f 75 70 20 69 73 20 73 65 74 20 74 6f | red..If.one.VRRP.group.is.set.to |
b5dc0 | 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 65 6d 70 74 69 6f 6e 20 64 65 6c 61 79 20 6f 72 | .a.different.preemption.delay.or |
b5de0 | 20 70 72 69 6f 72 69 74 79 2c 20 69 74 20 77 6f 75 6c 64 20 72 65 73 75 6c 74 20 69 6e 20 61 6e | .priority,.it.would.result.in.an |
b5e00 | 20 65 6e 64 6c 65 73 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 6c 6f 6f 70 2e 00 41 6c 6c 20 6f 74 | .endless.transition.loop..All.ot |
b5e20 | 68 65 72 20 44 4e 53 20 72 65 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 | her.DNS.requests.will.be.forward |
b5e40 | 65 64 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 20 6f 66 20 44 4e 53 20 73 65 72 | ed.to.a.different.set.of.DNS.ser |
b5e60 | 76 65 72 73 20 61 74 20 31 39 32 2e 30 2e 32 2e 31 2c 20 31 39 32 2e 30 2e 32 2e 32 2c 20 32 30 | vers.at.192.0.2.1,.192.0.2.2,.20 |
b5e80 | 30 31 3a 64 62 38 3a 3a 31 3a 66 66 66 66 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a 32 3a 66 | 01:db8::1:ffff.and.2001:db8::2:f |
b5ea0 | 66 66 66 00 41 6c 6c 20 72 65 70 6c 79 20 73 69 7a 65 73 20 61 72 65 20 61 63 63 65 70 74 65 64 | fff.All.reply.sizes.are.accepted |
b5ec0 | 20 62 79 20 64 65 66 61 75 6c 74 2e 00 41 6c 6c 20 72 6f 75 74 65 72 73 20 69 6e 20 74 68 65 20 | .by.default..All.routers.in.the. |
b5ee0 | 50 49 4d 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 61 67 72 65 65 20 6f 6e 20 74 68 65 73 65 20 | PIM.network.must.agree.on.these. |
b5f00 | 76 61 6c 75 65 73 2e 00 41 6c 6c 20 73 63 72 69 70 74 73 20 65 78 63 65 63 75 74 65 64 20 74 68 | values..All.scripts.excecuted.th |
b5f20 | 69 73 20 77 61 79 20 61 72 65 20 65 78 65 63 75 74 65 64 20 61 73 20 72 6f 6f 74 20 75 73 65 72 | is.way.are.executed.as.root.user |
b5f40 | 20 2d 20 74 68 69 73 20 6d 61 79 20 62 65 20 64 61 6e 67 65 72 6f 75 73 2e 20 54 6f 67 65 74 68 | .-.this.may.be.dangerous..Togeth |
b5f60 | 65 72 20 77 69 74 68 20 3a 72 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 60 | er.with.:ref:`command-scripting` |
b5f80 | 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 6e 67 | .this.can.be.used.for.automating |
b5fa0 | 20 28 72 65 2d 29 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 41 6c 6c 20 74 68 65 73 65 20 72 | .(re-)configuration..All.these.r |
b5fc0 | 75 6c 65 73 20 77 69 74 68 20 4f 54 43 20 77 69 6c 6c 20 68 65 6c 70 20 74 6f 20 64 65 74 65 63 | ules.with.OTC.will.help.to.detec |
b5fe0 | 74 20 61 6e 64 20 6d 69 74 69 67 61 74 65 20 72 6f 75 74 65 20 6c 65 61 6b 73 20 61 6e 64 20 68 | t.and.mitigate.route.leaks.and.h |
b6000 | 61 70 70 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6c 6f 63 61 6c 2d 72 6f 6c | appen.automatically.if.local-rol |
b6020 | 65 20 69 73 20 73 65 74 2e 00 41 6c 6c 20 74 68 6f 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 72 | e.is.set..All.those.protocols.ar |
b6040 | 65 20 67 72 6f 75 70 65 64 20 75 6e 64 65 72 20 60 60 69 6e 74 65 72 66 61 63 65 73 20 74 75 6e | e.grouped.under.``interfaces.tun |
b6060 | 6e 65 6c 60 60 20 69 6e 20 56 79 4f 53 2e 20 4c 65 74 27 73 20 74 61 6b 65 20 61 20 63 6c 6f 73 | nel``.in.VyOS..Let's.take.a.clos |
b6080 | 65 72 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 6f 70 74 | er.look.at.the.protocols.and.opt |
b60a0 | 69 6f 6e 73 20 63 75 72 72 65 6e 74 6c 79 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f 53 | ions.currently.supported.by.VyOS |
b60c0 | 2e 00 41 6c 6c 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 73 20 69 73 20 61 | ..All.traffic.between.zones.is.a |
b60e0 | 66 66 65 63 74 65 64 20 62 79 20 65 78 69 73 74 69 6e 67 20 70 6f 6c 69 63 69 65 73 00 41 6c 6c | ffected.by.existing.policies.All |
b6100 | 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 64 20 66 72 6f 6d 20 61 6e 20 69 6e 74 65 72 66 61 63 | .traffic.to.and.from.an.interfac |
b6120 | 65 20 77 69 74 68 69 6e 20 61 20 7a 6f 6e 65 20 69 73 20 70 65 72 6d 69 74 74 65 64 2e 00 41 6c | e.within.a.zone.is.permitted..Al |
b6140 | 6c 20 74 75 6e 6e 65 6c 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 65 63 6b 65 64 | l.tunnel.sessions.can.be.checked |
b6160 | 20 76 69 61 3a 00 41 6c 6c 6f 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 73 20 69 70 20 61 64 64 72 | .via:.Allocation.clients.ip.addr |
b6180 | 65 73 73 65 73 20 62 79 20 52 41 44 49 55 53 00 41 6c 6c 6f 77 20 60 60 73 73 68 60 60 20 64 79 | esses.by.RADIUS.Allow.``ssh``.dy |
b61a0 | 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 41 6c 6c 6f 77 20 61 63 63 65 73 73 20 74 | namic-protection..Allow.access.t |
b61c0 | 6f 20 73 69 74 65 73 20 69 6e 20 61 20 64 6f 6d 61 69 6e 20 77 69 74 68 6f 75 74 20 72 65 74 72 | o.sites.in.a.domain.without.retr |
b61e0 | 69 65 76 69 6e 67 20 74 68 65 6d 20 66 72 6f 6d 20 74 68 65 20 50 72 6f 78 79 20 63 61 63 68 65 | ieving.them.from.the.Proxy.cache |
b6200 | 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 61 6c 6c | ..Specifying."vyos.net".will.all |
b6220 | 6f 77 20 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e 65 74 20 62 75 74 20 74 68 65 20 70 61 | ow.access.to.vyos.net.but.the.pa |
b6240 | 67 65 73 20 61 63 63 65 73 73 65 64 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 61 63 68 65 64 2e | ges.accessed.will.not.be.cached. |
b6260 | 20 49 74 20 75 73 65 66 75 6c 20 66 6f 72 20 77 6f 72 6b 69 6e 67 20 61 72 6f 75 6e 64 20 70 72 | .It.useful.for.working.around.pr |
b6280 | 6f 62 6c 65 6d 73 20 77 69 74 68 20 22 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 22 20 | oblems.with."If-Modified-Since". |
b62a0 | 63 68 65 63 6b 69 6e 67 20 61 74 20 63 65 72 74 61 69 6e 20 73 69 74 65 73 2e 00 41 6c 6c 6f 77 | checking.at.certain.sites..Allow |
b62c0 | 20 62 67 70 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 65 78 74 65 6e 64 65 64 2d 6e | .bgp.to.negotiate.the.extended-n |
b62e0 | 65 78 74 68 6f 70 20 63 61 70 61 62 69 6c 69 74 79 20 77 69 74 68 20 69 74 e2 80 99 73 20 70 65 | exthop.capability.with.it...s.pe |
b6300 | 65 72 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 61 20 49 50 | er..If.you.are.peering.over.a.IP |
b6320 | 76 36 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 74 68 65 6e 20 74 68 69 73 20 | v6.Link-Local.address.then.this. |
b6340 | 63 61 70 61 62 69 6c 69 74 79 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 61 75 74 6f 6d 61 74 69 | capability.is.turned.on.automati |
b6360 | 63 61 6c 6c 79 2e 20 49 66 20 79 6f 75 20 61 72 65 20 70 65 65 72 69 6e 67 20 6f 76 65 72 20 61 | cally..If.you.are.peering.over.a |
b6380 | 20 49 50 76 36 20 47 6c 6f 62 61 6c 20 41 64 64 72 65 73 73 20 74 68 65 6e 20 74 75 72 6e 69 6e | .IPv6.Global.Address.then.turnin |
b63a0 | 67 20 6f 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 42 47 50 | g.on.this.command.will.allow.BGP |
b63c0 | 20 74 6f 20 69 6e 73 74 61 6c 6c 20 49 50 76 34 20 72 6f 75 74 65 73 20 77 69 74 68 20 49 50 76 | .to.install.IPv4.routes.with.IPv |
b63e0 | 36 20 6e 65 78 74 68 6f 70 73 20 69 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 49 50 | 6.nexthops.if.you.do.not.have.IP |
b6400 | 76 34 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 2e 00 41 6c 6c | v4.configured.on.interfaces..All |
b6420 | 6f 77 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 60 3c | ow.cross-origin.requests.from.`< |
b6440 | 6f 72 69 67 69 6e 3e 60 2e 00 41 6c 6c 6f 77 20 65 78 70 6c 69 63 69 74 20 49 50 76 36 20 61 64 | origin>`..Allow.explicit.IPv6.ad |
b6460 | 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 41 6c 6c 6f 77 20 68 | dress.for.the.interface..Allow.h |
b6480 | 6f 73 74 20 6e 65 74 77 6f 72 6b 69 6e 67 20 69 6e 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 20 54 | ost.networking.in.a.container..T |
b64a0 | 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 63 6b 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 | he.network.stack.of.the.containe |
b64c0 | 72 20 69 73 20 6e 6f 74 20 69 73 6f 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 68 6f 73 74 20 | r.is.not.isolated.from.the.host. |
b64e0 | 61 6e 64 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 68 6f 73 74 20 49 50 2e 00 41 6c 6c 6f 77 20 | and.will.use.the.host.IP..Allow. |
b6500 | 6c 69 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e | listing.additional.custom.domain |
b6520 | 73 20 74 6f 20 62 65 20 62 72 6f 77 73 65 64 20 28 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 | s.to.be.browsed.(in.addition.to. |
b6540 | 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 6c 6f 63 61 6c 60 60 29 20 73 6f 20 74 68 61 74 20 74 | the.default.``local``).so.that.t |
b6560 | 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 6c 65 63 74 65 64 2e 00 41 6c 6c 6f 77 20 74 68 69 73 | hey.can.be.reflected..Allow.this |
b6580 | 20 42 46 44 20 70 65 65 72 20 74 6f 20 6e 6f 74 20 62 65 20 64 69 72 65 63 74 6c 79 20 63 6f 6e | .BFD.peer.to.not.be.directly.con |
b65a0 | 6e 65 63 74 65 64 00 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 70 72 20 54 43 50 20 66 6c | nected.Allowed.values.fpr.TCP.fl |
b65c0 | 61 67 73 3a 20 60 60 53 59 4e 60 60 2c 20 60 60 41 43 4b 60 60 2c 20 60 60 46 49 4e 60 60 2c 20 | ags:.``SYN``,.``ACK``,.``FIN``,. |
b65e0 | 60 60 52 53 54 60 60 2c 20 60 60 55 52 47 60 60 2c 20 60 60 50 53 48 60 60 2c 20 60 60 41 4c 4c | ``RST``,.``URG``,.``PSH``,.``ALL |
b6600 | 60 60 20 57 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 | ``.When.specifying.more.than.one |
b6620 | 20 66 6c 61 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 61 20 73 65 70 | .flag,.flags.should.be.comma.sep |
b6640 | 61 72 61 74 65 64 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 20 74 68 65 20 73 65 6c | arated..The.``!``.negate.the.sel |
b6660 | 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 | ected.protocol..Allowed.values.f |
b6680 | 70 72 20 54 43 50 20 66 6c 61 67 73 3a 20 60 60 61 63 6b 60 60 2c 20 60 60 63 77 72 60 60 2c 20 | pr.TCP.flags:.``ack``,.``cwr``,. |
b66a0 | 60 60 65 63 6e 60 60 2c 20 60 60 66 69 6e 60 60 2c 20 60 60 70 73 68 60 60 2c 20 60 60 72 73 74 | ``ecn``,.``fin``,.``psh``,.``rst |
b66c0 | 60 60 2c 20 60 60 73 79 6e 60 60 20 61 6e 64 20 60 60 75 72 67 60 60 2e 20 4d 75 6c 74 69 70 6c | ``,.``syn``.and.``urg``..Multipl |
b66e0 | 65 20 76 61 6c 75 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2c 20 61 6e 64 20 66 6f 72 20 | e.values.are.supported,.and.for. |
b6700 | 69 6e 76 65 72 74 65 64 20 73 65 6c 65 63 74 69 6f 6e 20 75 73 65 20 60 60 6e 6f 74 60 60 2c 20 | inverted.selection.use.``not``,. |
b6720 | 61 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 41 6c 6c 6f 77 73 20 | as.shown.in.the.example..Allows. |
b6740 | 73 70 65 63 69 66 69 63 20 56 4c 41 4e 20 49 44 73 20 74 6f 20 70 61 73 73 20 74 68 72 6f 75 67 | specific.VLAN.IDs.to.pass.throug |
b6760 | 68 20 74 68 65 20 62 72 69 64 67 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 2e 20 54 | h.the.bridge.member.interface..T |
b6780 | 68 69 73 20 63 61 6e 20 65 69 74 68 65 72 20 62 65 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 | his.can.either.be.an.individual. |
b67a0 | 56 4c 41 4e 20 69 64 20 6f 72 20 61 20 72 61 6e 67 65 20 6f 66 20 56 4c 41 4e 20 69 64 73 20 64 | VLAN.id.or.a.range.of.VLAN.ids.d |
b67c0 | 65 6c 69 6d 69 74 65 64 20 62 79 20 61 20 68 79 70 68 65 6e 2e 00 41 6c 6c 6f 77 73 20 74 6f 20 | elimited.by.a.hyphen..Allows.to. |
b67e0 | 64 65 66 69 6e 65 20 55 52 4c 20 70 61 74 68 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 66 | define.URL.path.matching.rules.f |
b6800 | 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 73 65 72 76 69 63 65 2e 00 41 6c 6c 6f 77 73 20 79 6f | or.a.specific.service..Allows.yo |
b6820 | 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 | u.to.configure.the.next-hop.inte |
b6840 | 72 66 61 63 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 | rface.for.an.interface-based.IPv |
b6860 | 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 | 4.static.route..`<interface>`.wi |
b6880 | 6c 6c 20 62 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 | ll.be.the.next-hop.interface.whe |
b68a0 | 72 65 20 74 72 61 66 66 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 | re.traffic.is.routed.for.the.giv |
b68c0 | 65 6e 20 60 3c 73 75 62 6e 65 74 3e 60 2e 00 41 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 6f 6e | en.`<subnet>`..Allows.you.to.con |
b68e0 | 66 69 67 75 72 65 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f | figure.the.next-hop.interface.fo |
b6900 | 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 36 20 73 74 61 74 69 63 | r.an.interface-based.IPv6.static |
b6920 | 20 72 6f 75 74 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 6c 6c 20 62 65 20 74 68 | .route..`<interface>`.will.be.th |
b6940 | 65 20 6e 65 78 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 72 61 66 66 | e.next-hop.interface.where.traff |
b6960 | 69 63 20 69 73 20 72 6f 75 74 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 60 3c 73 75 62 | ic.is.routed.for.the.given.`<sub |
b6980 | 6e 65 74 3e 60 2e 00 41 6c 72 65 61 64 79 20 6c 65 61 72 6e 65 64 20 6b 6e 6f 77 6e 5f 68 6f 73 | net>`..Already.learned.known_hos |
b69a0 | 74 73 20 66 69 6c 65 73 20 6f 66 20 63 6c 69 65 6e 74 73 20 6e 65 65 64 20 61 6e 20 75 70 64 61 | ts.files.of.clients.need.an.upda |
b69c0 | 74 65 20 61 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 77 69 6c 6c 20 63 68 61 6e 67 65 | te.as.the.public.key.will.change |
b69e0 | 2e 00 41 6c 73 6f 2c 20 2a 2a 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 2a 2a 20 69 73 20 61 6e | ..Also,.**default-action**.is.an |
b6a00 | 20 61 63 74 69 6f 6e 20 74 68 61 74 20 74 61 6b 65 73 20 70 6c 61 63 65 20 77 68 65 6e 65 76 65 | .action.that.takes.place.wheneve |
b6a20 | 72 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 72 75 | r.a.packet.does.not.match.any.ru |
b6a40 | 6c 65 20 69 6e 20 69 74 27 73 20 63 68 61 69 6e 2e 20 46 6f 72 20 62 61 73 65 20 63 68 61 69 6e | le.in.it's.chain..For.base.chain |
b6a60 | 73 2c 20 70 6f 73 73 69 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 2a 2a 64 65 66 61 75 6c | s,.possible.options.for.**defaul |
b6a80 | 74 2d 61 63 74 69 6f 6e 2a 2a 20 61 72 65 20 2a 2a 61 63 63 65 70 74 2a 2a 20 6f 72 20 2a 2a 64 | t-action**.are.**accept**.or.**d |
b6aa0 | 72 6f 70 2a 2a 2e 00 41 6c 73 6f 2c 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 | rop**..Also,.for.backwards.compa |
b6ac0 | 74 69 62 69 6c 69 74 79 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 | tibility.this.configuration,.whi |
b6ae0 | 63 68 20 75 73 65 73 20 67 65 6e 65 72 69 63 20 69 6e 74 65 72 66 61 63 65 20 64 65 66 69 6e 69 | ch.uses.generic.interface.defini |
b6b00 | 74 69 6f 6e 2c 20 69 73 20 73 74 69 6c 6c 20 76 61 6c 69 64 3a 00 41 6c 73 6f 2c 20 66 6f 72 20 | tion,.is.still.valid:.Also,.for. |
b6b20 | 74 68 6f 73 65 20 77 68 6f 20 68 61 76 65 6e 27 74 20 75 70 64 61 74 65 64 20 74 6f 20 6e 65 77 | those.who.haven't.updated.to.new |
b6b40 | 65 72 20 76 65 72 73 69 6f 6e 2c 20 6c 65 67 61 63 79 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e | er.version,.legacy.documentation |
b6b60 | 20 69 73 20 73 74 69 6c 6c 20 70 72 65 73 65 6e 74 20 61 6e 64 20 76 61 6c 69 64 20 66 6f 72 20 | .is.still.present.and.valid.for. |
b6b80 | 61 6c 6c 20 73 61 67 69 74 74 61 20 76 65 72 73 69 6f 6e 20 70 72 69 6f 72 20 74 6f 20 56 79 4f | all.sagitta.version.prior.to.VyO |
b6ba0 | 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 3a 00 41 6c 73 6f | S.1.4-rolling-202308040557:.Also |
b6bc0 | 2c 20 69 6e 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2c 20 72 65 64 | ,.in.:ref:`destination-nat`,.red |
b6be0 | 69 72 65 63 74 69 6f 6e 20 74 6f 20 6c 6f 63 61 6c 68 6f 73 74 20 69 73 20 73 75 70 70 6f 72 74 | irection.to.localhost.is.support |
b6c00 | 65 64 2e 20 54 68 65 20 72 65 64 69 72 65 63 74 20 73 74 61 74 65 6d 65 6e 74 20 69 73 20 61 20 | ed..The.redirect.statement.is.a. |
b6c20 | 73 70 65 63 69 61 6c 20 66 6f 72 6d 20 6f 66 20 64 6e 61 74 20 77 68 69 63 68 20 61 6c 77 61 79 | special.form.of.dnat.which.alway |
b6c40 | 73 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 | s.translates.the.destination.add |
b6c60 | 72 65 73 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 68 6f 73 74 e2 80 99 73 20 6f 6e 65 2e 00 | ress.to.the.local.host...s.one.. |
b6c80 | 41 6c 74 65 72 6e 61 74 65 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 73 00 41 6c 74 65 72 6e 61 | Alternate.Routing.Tables.Alterna |
b6ca0 | 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 61 72 65 20 75 73 65 64 20 77 69 74 68 20 | te.routing.tables.are.used.with. |
b6cc0 | 70 6f 6c 69 63 79 20 62 61 73 65 64 20 72 6f 75 74 69 6e 67 20 62 79 20 75 74 69 6c 69 7a 69 6e | policy.based.routing.by.utilizin |
b6ce0 | 67 20 3a 72 65 66 3a 60 76 72 66 60 2e 00 41 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 6d 75 6c | g.:ref:`vrf`..Alternative.to.mul |
b6d00 | 74 69 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 | ticast,.the.remote.IPv4.address. |
b6d20 | 6f 66 20 74 68 65 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 20 63 61 6e 20 62 65 20 73 65 74 20 64 | of.the.VXLAN.tunnel.can.be.set.d |
b6d40 | 69 72 65 63 74 6c 79 2e 20 4c 65 74 27 73 20 63 68 61 6e 67 65 20 74 68 65 20 4d 75 6c 74 69 63 | irectly..Let's.change.the.Multic |
b6d60 | 61 73 74 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 3a 00 41 6c 77 61 79 73 20 65 | ast.example.from.above:.Always.e |
b6d80 | 78 63 6c 75 64 65 20 74 68 69 73 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 6e 79 20 64 65 66 | xclude.this.address.from.any.def |
b6da0 | 69 6e 65 64 20 72 61 6e 67 65 2e 20 54 68 69 73 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 6e 65 | ined.range..This.address.will.ne |
b6dc0 | 76 65 72 20 62 65 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 44 48 43 50 20 73 65 72 76 | ver.be.assigned.by.the.DHCP.serv |
b6de0 | 65 72 2e 00 41 6e 20 2a 2a 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2a 2a 20 72 65 70 72 65 | er..An.**interface.group**.repre |
b6e00 | 73 65 6e 74 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 | sents.a.collection.of.interfaces |
b6e20 | 2e 00 41 6e 20 41 53 20 69 73 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 67 72 6f 75 70 20 6f 66 20 | ..An.AS.is.a.connected.group.of. |
b6e40 | 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 49 50 20 70 72 65 66 69 78 65 73 20 72 75 6e 20 62 79 20 6f | one.or.more.IP.prefixes.run.by.o |
b6e60 | 6e 65 20 6f 72 20 6d 6f 72 65 20 6e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 6f 72 73 20 77 68 69 | ne.or.more.network.operators.whi |
b6e80 | 63 68 20 68 61 73 20 61 20 53 49 4e 47 4c 45 20 61 6e 64 20 43 4c 45 41 52 4c 59 20 44 45 46 49 | ch.has.a.SINGLE.and.CLEARLY.DEFI |
b6ea0 | 4e 45 44 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 79 2e 00 41 6e 20 49 50 76 34 20 54 43 50 20 | NED.routing.policy..An.IPv4.TCP. |
b6ec0 | 66 69 6c 74 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 77 | filter.will.only.match.packets.w |
b6ee0 | 69 74 68 20 61 6e 20 49 50 76 34 20 68 65 61 64 65 72 20 6c 65 6e 67 74 68 20 6f 66 20 32 30 20 | ith.an.IPv4.header.length.of.20. |
b6f00 | 62 79 74 65 73 20 28 77 68 69 63 68 20 69 73 20 74 68 65 20 6d 61 6a 6f 72 69 74 79 20 6f 66 20 | bytes.(which.is.the.majority.of. |
b6f20 | 49 50 76 34 20 70 61 63 6b 65 74 73 20 61 6e 79 77 61 79 29 2e 00 41 6e 20 53 4e 4d 50 2d 6d 61 | IPv4.packets.anyway)..An.SNMP-ma |
b6f40 | 6e 61 67 65 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 72 65 65 20 | naged.network.consists.of.three. |
b6f60 | 6b 65 79 20 63 6f 6d 70 6f 6e 65 6e 74 73 3a 00 41 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | key.components:.An.`<interface>` |
b6f80 | 20 73 70 65 63 69 66 79 69 6e 67 20 77 68 69 63 68 20 73 6c 61 76 65 20 69 73 20 74 68 65 20 70 | .specifying.which.slave.is.the.p |
b6fa0 | 72 69 6d 61 72 79 20 64 65 76 69 63 65 2e 20 54 68 65 20 73 70 65 63 69 66 69 65 64 20 64 65 76 | rimary.device..The.specified.dev |
b6fc0 | 69 63 65 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 62 65 20 74 68 65 20 61 63 74 69 76 65 20 73 6c | ice.will.always.be.the.active.sl |
b6fe0 | 61 76 65 20 77 68 69 6c 65 20 69 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 4f 6e 6c 79 20 | ave.while.it.is.available..Only. |
b7000 | 77 68 65 6e 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 73 20 6f 66 66 2d 6c 69 6e 65 20 77 69 6c | when.the.primary.is.off-line.wil |
b7020 | 6c 20 61 6c 74 65 72 6e 61 74 65 20 64 65 76 69 63 65 73 20 62 65 20 75 73 65 64 2e 20 54 68 69 | l.alternate.devices.be.used..Thi |
b7040 | 73 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 6f 6e 65 20 73 6c 61 76 65 20 69 73 20 70 72 | s.is.useful.when.one.slave.is.pr |
b7060 | 65 66 65 72 72 65 64 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 2c 20 65 2e 67 2e 2c 20 77 68 65 6e | eferred.over.another,.e.g.,.when |
b7080 | 20 6f 6e 65 20 73 6c 61 76 65 20 68 61 73 20 68 69 67 68 65 72 20 74 68 72 6f 75 67 68 70 75 74 | .one.slave.has.higher.throughput |
b70a0 | 20 74 68 61 6e 20 61 6e 6f 74 68 65 72 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 | .than.another..An.additional.lay |
b70c0 | 65 72 20 6f 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 | er.of.symmetric-key.crypto.can.b |
b70e0 | 65 20 75 73 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 | e.used.on.top.of.the.asymmetric. |
b7100 | 63 72 79 70 74 6f 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f 66 20 73 | crypto..An.additional.layer.of.s |
b7120 | 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 65 64 20 | ymmetric-key.crypto.can.be.used. |
b7140 | 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 74 6f 2e | on.top.of.the.asymmetric.crypto. |
b7160 | 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 | .This.command.automatically.crea |
b7180 | 74 65 73 20 66 6f 72 20 79 6f 75 20 74 68 65 20 72 65 71 75 69 72 65 64 20 43 4c 49 20 63 6f 6d | tes.for.you.the.required.CLI.com |
b71a0 | 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 50 53 4b 20 66 6f 72 20 61 20 67 | mand.to.install.this.PSK.for.a.g |
b71c0 | 69 76 65 6e 20 70 65 65 72 2e 00 41 6e 20 61 64 64 69 74 69 6f 6e 61 6c 20 6c 61 79 65 72 20 6f | iven.peer..An.additional.layer.o |
b71e0 | 66 20 73 79 6d 6d 65 74 72 69 63 2d 6b 65 79 20 63 72 79 70 74 6f 20 63 61 6e 20 62 65 20 75 73 | f.symmetric-key.crypto.can.be.us |
b7200 | 65 64 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 61 73 79 6d 6d 65 74 72 69 63 20 63 72 79 70 | ed.on.top.of.the.asymmetric.cryp |
b7220 | 74 6f 2e 20 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 41 6e 20 61 64 76 61 6e 74 61 | to..This.is.optional..An.advanta |
b7240 | 67 65 20 6f 66 20 74 68 69 73 20 73 63 68 65 6d 65 20 69 73 20 74 68 61 74 20 79 6f 75 20 67 65 | ge.of.this.scheme.is.that.you.ge |
b7260 | 74 20 61 20 72 65 61 6c 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 69 74 73 20 6f 77 6e 20 | t.a.real.interface.with.its.own. |
b7280 | 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 73 20 69 74 20 65 61 73 69 65 72 20 74 | address,.which.makes.it.easier.t |
b72a0 | 6f 20 73 65 74 75 70 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 6f 72 20 75 73 65 20 64 79 6e | o.setup.static.routes.or.use.dyn |
b72c0 | 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 77 69 74 68 6f 75 74 20 68 | amic.routing.protocols.without.h |
b72e0 | 61 76 69 6e 67 20 74 6f 20 6d 6f 64 69 66 79 20 49 50 73 65 63 20 70 6f 6c 69 63 69 65 73 2e 20 | aving.to.modify.IPsec.policies.. |
b7300 | 54 68 65 20 6f 74 68 65 72 20 61 64 76 61 6e 74 61 67 65 20 69 73 20 74 68 61 74 20 69 74 20 67 | The.other.advantage.is.that.it.g |
b7320 | 72 65 61 74 6c 79 20 73 69 6d 70 6c 69 66 69 65 73 20 72 6f 75 74 65 72 20 74 6f 20 72 6f 75 74 | reatly.simplifies.router.to.rout |
b7340 | 65 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 74 | er.communication,.which.can.be.t |
b7360 | 72 69 63 6b 79 20 77 69 74 68 20 70 6c 61 69 6e 20 49 50 73 65 63 20 62 65 63 61 75 73 65 20 74 | ricky.with.plain.IPsec.because.t |
b7380 | 68 65 20 65 78 74 65 72 6e 61 6c 20 6f 75 74 67 6f 69 6e 67 20 61 64 64 72 65 73 73 20 6f 66 20 | he.external.outgoing.address.of. |
b73a0 | 74 68 65 20 72 6f 75 74 65 72 20 75 73 75 61 6c 6c 79 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 | the.router.usually.doesn't.match |
b73c0 | 20 74 68 65 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6f 66 20 74 79 70 69 63 61 6c 20 73 69 74 | .the.IPsec.policy.of.typical.sit |
b73e0 | 65 2d 74 6f 2d 73 69 74 65 20 73 65 74 75 70 20 61 6e 64 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 | e-to-site.setup.and.you.need.to. |
b7400 | 61 64 64 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 69 74 | add.special.configuration.for.it |
b7420 | 2c 20 6f 72 20 61 64 6a 75 73 74 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 | ,.or.adjust.the.source.address.f |
b7440 | 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 6f 66 20 79 6f 75 72 20 61 70 70 6c | or.outgoing.traffic.of.your.appl |
b7460 | 69 63 61 74 69 6f 6e 73 2e 20 47 52 45 2f 49 50 73 65 63 20 68 61 73 20 6e 6f 20 73 75 63 68 20 | ications..GRE/IPsec.has.no.such. |
b7480 | 70 72 6f 62 6c 65 6d 20 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 74 72 61 6e 73 70 | problem.and.is.completely.transp |
b74a0 | 61 72 65 6e 74 20 66 6f 72 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 41 6e 20 61 | arent.for.the.applications..An.a |
b74c0 | 67 65 6e 74 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 2d 6d 61 6e 61 67 65 6d 65 6e 74 20 73 6f 66 | gent.is.a.network-management.sof |
b74e0 | 74 77 61 72 65 20 6d 6f 64 75 6c 65 20 74 68 61 74 20 72 65 73 69 64 65 73 20 6f 6e 20 61 20 6d | tware.module.that.resides.on.a.m |
b7500 | 61 6e 61 67 65 64 20 64 65 76 69 63 65 2e 20 41 6e 20 61 67 65 6e 74 20 68 61 73 20 6c 6f 63 61 | anaged.device..An.agent.has.loca |
b7520 | 6c 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 6e 66 6f 72 6d | l.knowledge.of.management.inform |
b7540 | 61 74 69 6f 6e 20 61 6e 64 20 74 72 61 6e 73 6c 61 74 65 73 20 74 68 61 74 20 69 6e 66 6f 72 6d | ation.and.translates.that.inform |
b7560 | 61 74 69 6f 6e 20 74 6f 20 6f 72 20 66 72 6f 6d 20 61 6e 20 53 4e 4d 50 2d 73 70 65 63 69 66 69 | ation.to.or.from.an.SNMP-specifi |
b7580 | 63 20 66 6f 72 6d 2e 00 41 6e 20 61 6c 74 65 72 6e 61 74 65 20 63 6f 6d 6d 61 6e 64 20 63 6f 75 | c.form..An.alternate.command.cou |
b75a0 | 6c 64 20 62 65 20 22 6d 70 6c 73 2d 74 65 20 6f 6e 22 20 28 54 72 61 66 66 69 63 20 45 6e 67 69 | ld.be."mpls-te.on".(Traffic.Engi |
b75c0 | 6e 65 65 72 69 6e 67 29 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 | neering).An.arbitrary.netmask.ca |
b75e0 | 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 | n.be.applied.to.mask.addresses.t |
b7600 | 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 | o.only.match.against.a.specific. |
b7620 | 70 6f 72 74 69 6f 6e 2e 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 | portion..An.arbitrary.netmask.ca |
b7640 | 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 | n.be.applied.to.mask.addresses.t |
b7660 | 6f 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 | o.only.match.against.a.specific. |
b7680 | 70 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 | portion..This.is.particularly.us |
b76a0 | 65 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 | eful.with.IPv6.and.a.zone-based. |
b76c0 | 66 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 | firewall.as.rules.will.remain.va |
b76e0 | 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 | lid.if.the.IPv6.prefix.changes.a |
b7700 | 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 | nd.the.host.portion.of.systems.I |
b7720 | 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 | Pv6.address.is.static.(for.examp |
b7740 | 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 | le,.with.SLAAC.or.`tokenised.IPv |
b7760 | 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 | 6.addresses.<https://datatracker |
b7780 | 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 | .ietf.org/doc/id/draft-chown-6ma |
b77a0 | 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e | n-tokenised-ipv6-identifiers-02. |
b77c0 | 74 78 74 3e 60 5f 29 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e | txt>`_).An.arbitrary.netmask.can |
b77e0 | 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f | .be.applied.to.mask.addresses.to |
b7800 | 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 | .only.match.against.a.specific.p |
b7820 | 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 | ortion..This.is.particularly.use |
b7840 | 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 6e 64 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 | ful.with.IPv6.and.a.zone-based.f |
b7860 | 69 72 65 77 61 6c 6c 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 76 61 6c | irewall.as.rules.will.remain.val |
b7880 | 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e 67 65 73 20 61 6e | id.if.the.IPv6.prefix.changes.an |
b78a0 | 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 65 6d 73 20 49 50 | d.the.host.portion.of.systems.IP |
b78c0 | 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 65 78 61 6d 70 6c | v6.address.is.static.(for.exampl |
b78e0 | 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 64 20 49 50 76 36 | e,.with.SLAAC.or.`tokenised.IPv6 |
b7900 | 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e | .addresses.<https://datatracker. |
b7920 | 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 6e 2d 36 6d 61 6e | ietf.org/doc/id/draft-chown-6man |
b7940 | 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 73 2d 30 32 2e 74 | -tokenised-ipv6-identifiers-02.t |
b7960 | 78 74 3e 60 5f 29 2e 00 41 6e 20 61 72 62 69 74 72 61 72 79 20 6e 65 74 6d 61 73 6b 20 63 61 6e | xt>`_)..An.arbitrary.netmask.can |
b7980 | 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 61 73 6b 20 61 64 64 72 65 73 73 65 73 20 74 6f | .be.applied.to.mask.addresses.to |
b79a0 | 20 6f 6e 6c 79 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 73 70 65 63 69 66 69 63 20 70 | .only.match.against.a.specific.p |
b79c0 | 6f 72 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 75 73 65 | ortion..This.is.particularly.use |
b79e0 | 66 75 6c 20 77 69 74 68 20 49 50 76 36 20 61 73 20 72 75 6c 65 73 20 77 69 6c 6c 20 72 65 6d 61 | ful.with.IPv6.as.rules.will.rema |
b7a00 | 69 6e 20 76 61 6c 69 64 20 69 66 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 68 61 6e | in.valid.if.the.IPv6.prefix.chan |
b7a20 | 67 65 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 70 6f 72 74 69 6f 6e 20 6f 66 20 73 79 73 74 | ges.and.the.host.portion.of.syst |
b7a40 | 65 6d 73 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 73 74 61 74 69 63 20 28 66 6f 72 20 | ems.IPv6.address.is.static.(for. |
b7a60 | 65 78 61 6d 70 6c 65 2c 20 77 69 74 68 20 53 4c 41 41 43 20 6f 72 20 60 74 6f 6b 65 6e 69 73 65 | example,.with.SLAAC.or.`tokenise |
b7a80 | 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 3c 68 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 | d.IPv6.addresses.<https://datatr |
b7aa0 | 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 69 64 2f 64 72 61 66 74 2d 63 68 6f 77 | acker.ietf.org/doc/id/draft-chow |
b7ac0 | 6e 2d 36 6d 61 6e 2d 74 6f 6b 65 6e 69 73 65 64 2d 69 70 76 36 2d 69 64 65 6e 74 69 66 69 65 72 | n-6man-tokenised-ipv6-identifier |
b7ae0 | 73 2d 30 32 2e 74 78 74 3e 60 5f 29 00 41 6e 20 62 61 73 69 63 20 69 6e 74 72 6f 64 75 63 74 69 | s-02.txt>`_).An.basic.introducti |
b7b00 | 6f 6e 20 74 6f 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 63 61 6e 20 62 | on.to.zone-based.firewalls.can.b |
b7b20 | 65 20 66 6f 75 6e 64 20 60 68 65 72 65 20 3c 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 76 | e.found.`here.<https://support.v |
b7b40 | 79 6f 73 2e 69 6f 2f 65 6e 2f 6b 62 2f 61 72 74 69 63 6c 65 73 2f 61 2d 70 72 69 6d 65 72 2d 74 | yos.io/en/kb/articles/a-primer-t |
b7b60 | 6f 2d 7a 6f 6e 65 2d 62 61 73 65 64 2d 66 69 72 65 77 61 6c 6c 3e 60 5f 2c 20 61 6e 64 20 61 6e | o-zone-based-firewall>`_,.and.an |
b7b80 | 20 65 78 61 6d 70 6c 65 20 61 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 7a 6f 6e 65 2d | .example.at.:ref:`examples-zone- |
b7ba0 | 70 6f 6c 69 63 79 60 2e 00 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 63 6f 6e 66 69 67 75 | policy`..An.example.of.a.configu |
b7bc0 | 72 61 74 69 6f 6e 20 74 68 61 74 20 73 65 6e 64 73 20 60 60 74 65 6c 65 67 72 61 66 60 60 20 6d | ration.that.sends.``telegraf``.m |
b7be0 | 65 74 72 69 63 73 20 74 6f 20 72 65 6d 6f 74 65 20 60 60 49 6e 66 6c 75 78 44 42 20 32 60 60 00 | etrics.to.remote.``InfluxDB.2``. |
b7c00 | 41 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 63 72 65 61 74 69 6e 67 20 61 20 56 4c 41 4e 2d 61 77 | An.example.of.creating.a.VLAN-aw |
b7c20 | 61 72 65 20 62 72 69 64 67 65 20 69 73 20 61 73 20 66 6f 6c 6c 6f 77 73 3a 00 41 6e 20 65 78 61 | are.bridge.is.as.follows:.An.exa |
b7c40 | 6d 70 6c 65 20 6f 66 20 6b 65 79 20 67 65 6e 65 72 61 74 69 6f 6e 3a 00 41 6e 20 65 78 61 6d 70 | mple.of.key.generation:.An.examp |
b7c60 | 6c 65 20 6f 66 20 74 68 65 20 64 61 74 61 20 63 61 70 74 75 72 65 64 20 62 79 20 61 20 46 52 45 | le.of.the.data.captured.by.a.FRE |
b7c80 | 45 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 69 74 68 20 73 71 6c 20 61 63 63 6f 75 6e 74 69 | ERADIUS.server.with.sql.accounti |
b7ca0 | 6e 67 3a 00 41 6e 20 65 78 61 6d 70 6c 65 3a 00 41 6e 20 6f 70 74 69 6f 6e 20 74 68 61 74 20 74 | ng:.An.example:.An.option.that.t |
b7cc0 | 61 6b 65 73 20 61 20 71 75 6f 74 65 64 20 73 74 72 69 6e 67 20 69 73 20 73 65 74 20 62 79 20 72 | akes.a.quoted.string.is.set.by.r |
b7ce0 | 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 69 | eplacing.all.quote.characters.wi |
b7d00 | 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 60 26 71 75 6f 74 3b 60 60 20 69 6e 73 69 64 65 20 | th.the.string.``"``.inside. |
b7d20 | 74 68 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 2d 70 61 72 61 6d 65 74 65 72 73 20 76 61 | the.static-mapping-parameters.va |
b7d40 | 6c 75 65 2e 20 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 6c 69 6e 65 20 69 6e 20 64 68 63 70 64 | lue..The.resulting.line.in.dhcpd |
b7d60 | 2e 63 6f 6e 66 20 77 69 6c 6c 20 62 65 20 60 60 6f 70 74 69 6f 6e 20 70 78 65 6c 69 6e 75 78 2e | .conf.will.be.``option.pxelinux. |
b7d80 | 63 6f 6e 66 69 67 66 69 6c 65 20 22 70 78 65 6c 69 6e 75 78 2e 63 66 67 2f 30 31 2d 30 30 2d 31 | configfile."pxelinux.cfg/01-00-1 |
b7da0 | 35 2d 31 37 2d 34 34 2d 32 64 2d 61 61 22 3b 60 60 2e 00 41 6e 61 6c 79 73 69 73 20 6f 6e 20 77 | 5-17-44-2d-aa";``..Analysis.on.w |
b7dc0 | 68 61 74 20 68 61 70 70 65 6e 73 20 66 6f 72 20 64 65 73 69 72 65 64 20 63 6f 6e 6e 65 63 74 69 | hat.happens.for.desired.connecti |
b7de0 | 6f 6e 3a 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 66 6f 72 20 74 72 61 66 66 69 63 20 67 | on:.And.base.chain.for.traffic.g |
b7e00 | 65 6e 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 | enerated.by.the.router.is.``set. |
b7e20 | 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 | firewall.ipv4.output.filter....` |
b7e40 | 60 00 41 6e 64 20 62 61 73 65 20 63 68 61 69 6e 20 66 6f 72 20 74 72 61 66 66 69 63 20 67 65 6e | `.And.base.chain.for.traffic.gen |
b7e60 | 65 72 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 | erated.by.the.router.is.``set.fi |
b7e80 | 72 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 | rewall.ipv6.output.filter....``. |
b7ea0 | 41 6e 64 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 65 20 73 63 72 69 70 74 3a 00 41 6e 64 20 66 | And.content.of.the.script:.And.f |
b7ec0 | 6f 72 20 69 70 76 36 3a 00 41 6e 64 20 6e 65 78 74 2c 20 73 6f 6d 65 20 63 6f 6e 66 69 67 75 72 | or.ipv6:.And.next,.some.configur |
b7ee0 | 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 20 77 68 65 72 65 20 67 72 6f 75 70 73 20 61 72 65 20 75 | ation.example.where.groups.are.u |
b7f00 | 73 65 64 3a 00 41 6e 64 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 3a 00 41 6e 64 20 74 | sed:.And.op-mode.commands:.And.t |
b7f20 | 68 65 20 64 69 66 66 65 72 65 6e 74 20 49 50 76 34 20 2a 2a 72 65 73 65 74 2a 2a 20 63 6f 6d 6d | he.different.IPv4.**reset**.comm |
b7f40 | 61 6e 64 73 20 61 76 61 69 6c 61 62 6c 65 3a 00 41 6e 64 20 74 68 65 6e 20 68 61 73 68 20 69 73 | ands.available:.And.then.hash.is |
b7f60 | 20 72 65 64 75 63 65 64 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 6f 75 6e 74 2e 00 41 6e 64 | .reduced.modulo.slave.count..And |
b7f80 | 2c 20 74 6f 20 70 72 69 6e 74 20 6f 6e 6c 79 20 62 72 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 | ,.to.print.only.bridge.firewall. |
b7fa0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 41 6e 6f 74 68 65 72 20 74 65 72 6d 20 6f 66 74 65 6e 20 | information:.Another.term.often. |
b7fc0 | 75 73 65 64 20 66 6f 72 20 44 4e 41 54 20 69 73 20 2a 2a 31 2d 74 6f 2d 31 20 4e 41 54 2a 2a 2e | used.for.DNAT.is.**1-to-1.NAT**. |
b7fe0 | 20 46 6f 72 20 61 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c | .For.a.1-to-1.NAT.configuration, |
b8000 | 20 62 6f 74 68 20 44 4e 41 54 20 61 6e 64 20 53 4e 41 54 20 61 72 65 20 75 73 65 64 20 74 6f 20 | .both.DNAT.and.SNAT.are.used.to. |
b8020 | 4e 41 54 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c | NAT.all.traffic.from.an.external |
b8040 | 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 | .IP.address.to.an.internal.IP.ad |
b8060 | 64 72 65 73 73 20 61 6e 64 20 76 69 63 65 2d 76 65 72 73 61 2e 00 41 6e 6f 74 68 65 72 20 74 68 | dress.and.vice-versa..Another.th |
b8080 | 69 6e 67 20 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 77 69 74 68 20 4c 44 50 20 69 73 20 | ing.to.keep.in.mind.with.LDP.is. |
b80a0 | 74 68 61 74 20 6d 75 63 68 20 6c 69 6b 65 20 42 47 50 2c 20 69 74 20 69 73 20 61 20 70 72 6f 74 | that.much.like.BGP,.it.is.a.prot |
b80c0 | 6f 63 6f 6c 20 74 68 61 74 20 72 75 6e 73 20 6f 6e 20 74 6f 70 20 6f 66 20 54 43 50 2e 20 49 74 | ocol.that.runs.on.top.of.TCP..It |
b80e0 | 20 68 6f 77 65 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 20 61 62 69 6c 69 74 | .however.does.not.have.an.abilit |
b8100 | 79 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 61 20 72 65 66 72 65 73 68 | y.to.do.something.like.a.refresh |
b8120 | 20 63 61 70 61 62 69 6c 69 74 79 20 6c 69 6b 65 20 42 47 50 73 20 72 6f 75 74 65 20 72 65 66 72 | .capability.like.BGPs.route.refr |
b8140 | 65 73 68 20 63 61 70 61 62 69 6c 69 74 79 2e 20 54 68 65 72 65 66 6f 72 65 20 6f 6e 65 20 6d 69 | esh.capability..Therefore.one.mi |
b8160 | 67 68 74 20 68 61 76 65 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 66 | ght.have.to.reset.the.neighbor.f |
b8180 | 6f 72 20 61 20 63 61 70 61 62 69 6c 69 74 79 20 63 68 61 6e 67 65 20 6f 72 20 61 20 63 6f 6e 66 | or.a.capability.change.or.a.conf |
b81a0 | 69 67 75 72 61 74 69 6f 6e 20 63 68 61 6e 67 65 20 74 6f 20 77 6f 72 6b 2e 00 41 70 70 6c 65 20 | iguration.change.to.work..Apple. |
b81c0 | 69 4f 53 2f 69 50 61 64 4f 53 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 6e 61 | iOS/iPadOS.expects.the.server.na |
b81e0 | 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 65 72 | me.to.be.also.used.in.the.server |
b8200 | 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f 20 69 | 's.certificate.common.name,.so.i |
b8220 | 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 66 6f | t's.best.to.use.this.DNS.name.fo |
b8240 | 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 41 70 70 6c 79 20 61 20 72 | r.your.VPN.connection..Apply.a.r |
b8260 | 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 | oute-map.filter.to.routes.for.th |
b8280 | 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 41 70 70 6c 79 20 61 20 72 6f | e.specified.protocol..Apply.a.ro |
b82a0 | 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 | ute-map.filter.to.routes.for.the |
b82c0 | 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 | .specified.protocol..The.followi |
b82e0 | 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 | ng.protocols.can.be.used:.any,.b |
b8300 | 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 | abel,.bgp,.connected,.eigrp,.isi |
b8320 | 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 | s,.kernel,.ospf,.rip,.static,.ta |
b8340 | 62 6c 65 00 41 70 70 6c 79 20 61 20 72 6f 75 74 65 2d 6d 61 70 20 66 69 6c 74 65 72 20 74 6f 20 | ble.Apply.a.route-map.filter.to. |
b8360 | 72 6f 75 74 65 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 6f 74 6f 63 6f | routes.for.the.specified.protoco |
b8380 | 6c 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 | l..The.following.protocols.can.b |
b83a0 | 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 | e.used:.any,.babel,.bgp,.connect |
b83c0 | 65 64 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c | ed,.isis,.kernel,.ospfv3,.ripng, |
b83e0 | 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 41 70 70 6c 79 20 72 6f 75 74 69 6e 67 20 70 6f 6c | .static,.table.Apply.routing.pol |
b8400 | 69 63 79 20 74 6f 20 2a 2a 69 6e 62 6f 75 6e 64 2a 2a 20 64 69 72 65 63 74 69 6f 6e 20 6f 66 20 | icy.to.**inbound**.direction.of. |
b8420 | 6f 75 74 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 00 41 70 70 6c 79 69 6e 67 20 61 20 52 | out.VLAN.interfaces.Applying.a.R |
b8440 | 75 6c 65 2d 53 65 74 20 74 6f 20 61 20 5a 6f 6e 65 00 41 70 70 6c 79 69 6e 67 20 61 20 52 75 6c | ule-Set.to.a.Zone.Applying.a.Rul |
b8460 | 65 2d 53 65 74 20 74 6f 20 61 6e 20 49 6e 74 65 72 66 61 63 65 00 41 70 70 6c 79 69 6e 67 20 61 | e-Set.to.an.Interface.Applying.a |
b8480 | 20 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 00 41 72 65 61 20 43 6f 6e 66 69 67 75 72 61 74 69 | .traffic.policy.Area.Configurati |
b84a0 | 6f 6e 00 41 72 65 61 20 69 64 65 6e 74 69 66 69 65 72 3a 20 60 60 30 30 30 31 60 60 20 49 53 2d | on.Area.identifier:.``0001``.IS- |
b84c0 | 49 53 20 61 72 65 61 20 6e 75 6d 62 65 72 20 28 6e 75 6d 62 65 72 69 63 61 6c 20 61 72 65 61 20 | IS.area.number.(numberical.area. |
b84e0 | 60 60 31 60 60 29 00 41 72 67 75 6d 65 6e 74 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 70 | ``1``).Arguments.which.will.be.p |
b8500 | 61 73 73 65 64 20 74 6f 20 74 68 65 20 65 78 65 63 75 74 61 62 6c 65 2e 00 41 72 69 73 74 61 20 | assed.to.the.executable..Arista. |
b8520 | 45 4f 53 00 41 72 75 62 61 2f 48 50 00 41 73 20 49 6e 74 65 72 6e 65 74 20 77 69 64 65 20 50 4d | EOS.Aruba/HP.As.Internet.wide.PM |
b8540 | 54 55 20 64 69 73 63 6f 76 65 72 79 20 72 61 72 65 6c 79 20 77 6f 72 6b 73 2c 20 77 65 20 73 6f | TU.discovery.rarely.works,.we.so |
b8560 | 6d 65 74 69 6d 65 73 20 6e 65 65 64 20 74 6f 20 63 6c 61 6d 70 20 6f 75 72 20 54 43 50 20 4d 53 | metimes.need.to.clamp.our.TCP.MS |
b8580 | 53 20 76 61 6c 75 65 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 61 6c 75 65 2e 20 54 68 69 | S.value.to.a.specific.value..Thi |
b85a0 | 73 20 69 73 20 61 20 66 69 65 6c 64 20 69 6e 20 74 68 65 20 54 43 50 20 6f 70 74 69 6f 6e 73 20 | s.is.a.field.in.the.TCP.options. |
b85c0 | 70 61 72 74 20 6f 66 20 61 20 53 59 4e 20 70 61 63 6b 65 74 2e 20 42 79 20 73 65 74 74 69 6e 67 | part.of.a.SYN.packet..By.setting |
b85e0 | 20 74 68 65 20 4d 53 53 20 76 61 6c 75 65 2c 20 79 6f 75 20 61 72 65 20 74 65 6c 6c 69 6e 67 20 | .the.MSS.value,.you.are.telling. |
b8600 | 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 20 75 6e 65 71 75 69 76 6f 63 61 6c 6c 79 20 27 64 | the.remote.side.unequivocally.'d |
b8620 | 6f 20 6e 6f 74 20 74 72 79 20 74 6f 20 73 65 6e 64 20 6d 65 20 70 61 63 6b 65 74 73 20 62 69 67 | o.not.try.to.send.me.packets.big |
b8640 | 67 65 72 20 74 68 61 6e 20 74 68 69 73 20 76 61 6c 75 65 27 2e 00 41 73 20 53 53 54 50 20 70 72 | ger.than.this.value'..As.SSTP.pr |
b8660 | 6f 76 69 64 65 73 20 50 50 50 20 76 69 61 20 61 20 53 53 4c 2f 54 4c 53 20 63 68 61 6e 6e 65 6c | ovides.PPP.via.a.SSL/TLS.channel |
b8680 | 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 70 75 62 6c 69 63 61 6c 6c 79 20 73 69 | .the.use.of.either.publically.si |
b86a0 | 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 73 20 77 65 6c 6c 20 61 73 20 61 20 70 | gned.certificates.as.well.as.a.p |
b86c0 | 72 69 76 61 74 65 20 50 4b 49 20 69 73 20 72 65 71 75 69 72 65 64 2e 00 41 73 20 56 79 4f 53 20 | rivate.PKI.is.required..As.VyOS. |
b86e0 | 69 73 20 4c 69 6e 75 78 20 62 61 73 65 64 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 | is.Linux.based.the.default.port. |
b8700 | 75 73 65 64 20 69 73 20 6e 6f 74 20 75 73 69 6e 67 20 34 37 38 39 20 61 73 20 74 68 65 20 64 65 | used.is.not.using.4789.as.the.de |
b8720 | 66 61 75 6c 74 20 49 41 4e 41 2d 61 73 73 69 67 6e 65 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | fault.IANA-assigned.destination. |
b8740 | 55 44 50 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 49 6e 73 74 65 61 64 20 56 79 4f 53 20 75 73 | UDP.port.number..Instead.VyOS.us |
b8760 | 65 73 20 74 68 65 20 4c 69 6e 75 78 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 38 34 37 | es.the.Linux.default.port.of.847 |
b8780 | 32 2e 00 41 73 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 6f 6e 20 4c 69 6e 75 78 20 61 6e 64 | 2..As.VyOS.is.based.on.Linux.and |
b87a0 | 20 74 68 65 72 65 20 77 61 73 20 6e 6f 20 6f 66 66 69 63 69 61 6c 20 49 41 4e 41 20 70 6f 72 74 | .there.was.no.official.IANA.port |
b87c0 | 20 61 73 73 69 67 6e 65 64 20 66 6f 72 20 56 58 4c 41 4e 2c 20 56 79 4f 53 20 75 73 65 73 20 61 | .assigned.for.VXLAN,.VyOS.uses.a |
b87e0 | 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 38 34 37 32 2e 20 59 6f 75 20 63 61 6e 20 63 | .default.port.of.8472..You.can.c |
b8800 | 68 61 6e 67 65 20 74 68 65 20 70 6f 72 74 20 6f 6e 20 61 20 70 65 72 20 56 58 4c 41 4e 20 69 6e | hange.the.port.on.a.per.VXLAN.in |
b8820 | 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 67 65 74 20 69 74 20 77 6f 72 6b 69 6e 67 20 | terface.basis.to.get.it.working. |
b8840 | 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 76 65 6e 64 6f 72 73 2e 00 41 73 20 56 79 4f 53 | across.multiple.vendors..As.VyOS |
b8860 | 20 69 73 20 62 61 73 65 64 20 6f 6e 20 4c 69 6e 75 78 20 69 74 20 6c 65 76 65 72 61 67 65 73 20 | .is.based.on.Linux.it.leverages. |
b8880 | 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 20 54 68 65 20 4e 65 74 66 69 6c 74 65 72 20 70 72 6f 6a | its.firewall..The.Netfilter.proj |
b88a0 | 65 63 74 20 63 72 65 61 74 65 64 20 69 70 74 61 62 6c 65 73 20 61 6e 64 20 69 74 73 20 73 75 63 | ect.created.iptables.and.its.suc |
b88c0 | 63 65 73 73 6f 72 20 6e 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 | cessor.nftables.for.the.Linux.ke |
b88e0 | 72 6e 65 6c 20 74 6f 20 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 70 61 63 6b 65 74 20 | rnel.to.work.directly.on.packet. |
b8900 | 64 61 74 61 20 66 6c 6f 77 73 2e 20 54 68 69 73 20 6e 6f 77 20 65 78 74 65 6e 64 73 20 74 68 65 | data.flows..This.now.extends.the |
b8920 | 20 63 6f 6e 63 65 70 74 20 6f 66 20 7a 6f 6e 65 2d 62 61 73 65 64 20 73 65 63 75 72 69 74 79 20 | .concept.of.zone-based.security. |
b8940 | 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 6d 61 6e 69 70 75 6c 61 74 69 6e 67 20 74 68 65 20 64 61 | to.allow.for.manipulating.the.da |
b8960 | 74 61 20 61 74 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 67 65 73 20 6f 6e 63 65 20 61 63 63 65 70 | ta.at.multiple.stages.once.accep |
b8980 | 74 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 | ted.by.the.network.interface.and |
b89a0 | 20 74 68 65 20 64 72 69 76 65 72 20 62 65 66 6f 72 65 20 62 65 69 6e 67 20 68 61 6e 64 65 64 20 | .the.driver.before.being.handed. |
b89c0 | 6f 66 66 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 65 2e 67 2e 2c 20 61 20 | off.to.the.destination.(e.g.,.a. |
b89e0 | 77 65 62 20 73 65 72 76 65 72 20 4f 52 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 29 2e 00 41 | web.server.OR.another.device)..A |
b8a00 | 73 20 56 79 4f 53 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 51 4d 49 20 69 6e 74 65 | s.VyOS.makes.use.of.the.QMI.inte |
b8a20 | 72 66 61 63 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 57 57 41 4e 20 6d 6f 64 | rface.to.connect.to.the.WWAN.mod |
b8a40 | 65 6d 20 63 61 72 64 73 2c 20 61 6c 73 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 63 61 6e 20 | em.cards,.also.the.firmware.can. |
b8a60 | 62 65 20 72 65 70 72 6f 67 72 61 6d 6d 65 64 2e 00 41 73 20 61 20 72 65 66 65 72 65 6e 63 65 3a | be.reprogrammed..As.a.reference: |
b8a80 | 20 66 6f 72 20 31 30 6d 62 69 74 2f 73 20 6f 6e 20 49 6e 74 65 6c 2c 20 79 6f 75 20 6d 69 67 68 | .for.10mbit/s.on.Intel,.you.migh |
b8aa0 | 74 20 6e 65 65 64 20 61 74 20 6c 65 61 73 74 20 31 30 6b 62 79 74 65 20 62 75 66 66 65 72 20 69 | t.need.at.least.10kbyte.buffer.i |
b8ac0 | 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 61 63 68 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 | f.you.want.to.reach.your.configu |
b8ae0 | 72 65 64 20 72 61 74 65 2e 00 41 73 20 61 20 72 65 73 75 6c 74 2c 20 74 68 65 20 70 72 6f 63 65 | red.rate..As.a.result,.the.proce |
b8b00 | 73 73 69 6e 67 20 6f 66 20 65 61 63 68 20 70 61 63 6b 65 74 20 62 65 63 6f 6d 65 73 20 6d 6f 72 | ssing.of.each.packet.becomes.mor |
b8b20 | 65 20 65 66 66 69 63 69 65 6e 74 2c 20 70 6f 74 65 6e 74 69 61 6c 6c 79 20 6c 65 76 65 72 61 67 | e.efficient,.potentially.leverag |
b8b40 | 69 6e 67 20 68 61 72 64 77 61 72 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 66 66 6c 6f 61 64 69 | ing.hardware.encryption.offloadi |
b8b60 | 6e 67 20 73 75 70 70 6f 72 74 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 6b 65 72 6e | ng.support.available.in.the.kern |
b8b80 | 65 6c 2e 00 41 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 61 70 70 6c 79 69 6e | el..As.an.alternative.to.applyin |
b8ba0 | 67 20 70 6f 6c 69 63 79 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 64 69 72 65 63 74 6c | g.policy.to.an.interface.directl |
b8bc0 | 79 2c 20 61 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 63 61 6e 20 62 65 20 | y,.a.zone-based.firewall.can.be. |
b8be0 | 63 72 65 61 74 65 64 20 74 6f 20 73 69 6d 70 6c 69 66 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | created.to.simplify.configuratio |
b8c00 | 6e 20 77 68 65 6e 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 62 65 6c 6f 6e | n.when.multiple.interfaces.belon |
b8c20 | 67 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 63 75 72 69 74 79 20 7a 6f 6e 65 2e 20 49 6e 73 | g.to.the.same.security.zone..Ins |
b8c40 | 74 65 61 64 20 6f 66 20 61 70 70 6c 79 69 6e 67 20 72 75 6c 65 2d 73 65 74 73 20 74 6f 20 69 6e | tead.of.applying.rule-sets.to.in |
b8c60 | 74 65 72 66 61 63 65 73 2c 20 74 68 65 79 20 61 72 65 20 61 70 70 6c 69 65 64 20 74 6f 20 73 6f | terfaces,.they.are.applied.to.so |
b8c80 | 75 72 63 65 20 7a 6f 6e 65 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 7a 6f 6e 65 20 70 61 69 72 73 | urce.zone-destination.zone.pairs |
b8ca0 | 2e 00 41 73 20 62 6f 74 68 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 | ..As.both.Microsoft.Windows.and. |
b8cc0 | 41 70 70 6c 65 20 69 4f 53 2f 69 50 61 64 4f 53 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 20 61 20 | Apple.iOS/iPadOS.only.support.a. |
b8ce0 | 63 65 72 74 61 69 6e 20 73 65 74 20 6f 66 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 | certain.set.of.encryption.cipher |
b8d00 | 73 20 61 6e 64 20 69 6e 74 65 67 72 69 74 79 20 61 6c 67 6f 72 69 74 68 6d 73 20 77 65 20 77 69 | s.and.integrity.algorithms.we.wi |
b8d20 | 6c 6c 20 76 61 6c 69 64 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 49 4b 45 2f 45 | ll.validate.the.configured.IKE/E |
b8d40 | 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 6e 64 20 6f 6e 6c 79 20 6c 69 73 74 20 74 68 65 20 63 | SP.proposals.and.only.list.the.c |
b8d60 | 6f 6d 70 61 74 69 62 6c 65 20 6f 6e 65 73 20 74 6f 20 74 68 65 20 75 73 65 72 20 e2 80 94 20 69 | ompatible.ones.to.the.user.....i |
b8d80 | 66 20 6d 75 6c 74 69 70 6c 65 20 61 72 65 20 64 65 66 69 6e 65 64 2e 20 49 66 20 74 68 65 72 65 | f.multiple.are.defined..If.there |
b8da0 | 20 61 72 65 20 6e 6f 20 6d 61 74 63 68 69 6e 67 20 70 72 6f 70 6f 73 61 6c 73 20 66 6f 75 6e 64 | .are.no.matching.proposals.found |
b8dc0 | 20 e2 80 94 20 77 65 20 63 61 6e 20 6e 6f 74 20 67 65 6e 65 72 61 74 65 20 61 20 70 72 6f 66 69 | .....we.can.not.generate.a.profi |
b8de0 | 6c 65 20 66 6f 72 20 79 6f 75 2e 00 41 73 20 64 65 73 63 72 69 62 65 64 2c 20 66 69 72 73 74 20 | le.for.you..As.described,.first. |
b8e00 | 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 65 76 61 6c 75 61 74 65 64 20 62 79 20 61 6c 6c 20 | packet.will.be.evaluated.by.all. |
b8e20 | 74 68 65 20 66 69 72 65 77 61 6c 6c 20 70 61 74 68 2c 20 73 6f 20 64 65 73 69 72 65 64 20 63 6f | the.firewall.path,.so.desired.co |
b8e40 | 6e 6e 65 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 65 78 70 6c 69 63 69 74 65 6c 79 20 61 | nnection.should.be.explicitely.a |
b8e60 | 63 63 65 70 74 65 64 2e 20 53 61 6d 65 20 74 68 69 6e 67 20 73 68 6f 75 6c 64 20 62 65 20 74 61 | ccepted..Same.thing.should.be.ta |
b8e80 | 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 74 72 61 66 66 69 63 20 69 6e 20 | ken.into.account.for.traffic.in. |
b8ea0 | 72 65 76 65 72 73 65 20 6f 72 64 65 72 2e 20 49 6e 20 6d 6f 73 74 20 63 61 73 65 73 20 73 74 61 | reverse.order..In.most.cases.sta |
b8ec0 | 74 65 20 70 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f | te.policies.are.used.in.order.to |
b8ee0 | 20 61 63 63 65 70 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 6e 20 72 65 76 65 72 73 65 20 70 61 | .accept.connection.in.reverse.pa |
b8f00 | 74 63 68 2e 00 41 73 20 6d 6f 72 65 20 61 6e 64 20 6d 6f 72 65 20 72 6f 75 74 65 72 73 20 72 75 | tch..As.more.and.more.routers.ru |
b8f20 | 6e 20 6f 6e 20 48 79 70 65 72 76 69 73 6f 72 73 2c 20 65 78 70 65 63 69 61 6c 6c 79 20 77 69 74 | n.on.Hypervisors,.expecially.wit |
b8f40 | 68 20 61 20 3a 61 62 62 72 3a 60 4e 4f 53 20 28 4e 65 74 77 6f 72 6b 20 4f 70 65 72 61 74 69 6e | h.a.:abbr:`NOS.(Network.Operatin |
b8f60 | 67 20 53 79 73 74 65 6d 29 60 20 61 73 20 56 79 4f 53 2c 20 69 74 20 6d 61 6b 65 73 20 66 65 77 | g.System)`.as.VyOS,.it.makes.few |
b8f80 | 65 72 20 61 6e 64 20 66 65 77 65 72 20 73 65 6e 73 65 20 74 6f 20 75 73 65 20 73 74 61 74 69 63 | er.and.fewer.sense.to.use.static |
b8fa0 | 20 72 65 73 6f 75 72 63 65 20 62 69 6e 64 69 6e 67 73 20 6c 69 6b 65 20 60 60 73 6d 70 2d 61 66 | .resource.bindings.like.``smp-af |
b8fc0 | 66 69 6e 69 74 79 60 60 20 61 73 20 70 72 65 73 65 6e 74 20 69 6e 20 56 79 4f 53 20 31 2e 32 20 | finity``.as.present.in.VyOS.1.2. |
b8fe0 | 61 6e 64 20 65 61 72 6c 69 65 72 20 74 6f 20 70 69 6e 20 63 65 72 74 61 69 6e 20 69 6e 74 65 72 | and.earlier.to.pin.certain.inter |
b9000 | 72 75 70 74 20 68 61 6e 64 6c 65 72 73 20 74 6f 20 73 70 65 63 69 66 69 63 20 43 50 55 73 2e 00 | rupt.handlers.to.specific.CPUs.. |
b9020 | 41 73 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6d | As.network.address.translation.m |
b9040 | 6f 64 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 | odifies.the.IP.address.informati |
b9060 | 6f 6e 20 69 6e 20 70 61 63 6b 65 74 73 2c 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f | on.in.packets,.NAT.implementatio |
b9080 | 6e 73 20 6d 61 79 20 76 61 72 79 20 69 6e 20 74 68 65 69 72 20 73 70 65 63 69 66 69 63 20 62 65 | ns.may.vary.in.their.specific.be |
b90a0 | 68 61 76 69 6f 72 20 69 6e 20 76 61 72 69 6f 75 73 20 61 64 64 72 65 73 73 69 6e 67 20 63 61 73 | havior.in.various.addressing.cas |
b90c0 | 65 73 20 61 6e 64 20 74 68 65 69 72 20 65 66 66 65 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 74 | es.and.their.effect.on.network.t |
b90e0 | 72 61 66 66 69 63 2e 20 54 68 65 20 73 70 65 63 69 66 69 63 73 20 6f 66 20 4e 41 54 20 62 65 68 | raffic..The.specifics.of.NAT.beh |
b9100 | 61 76 69 6f 72 20 61 72 65 20 6e 6f 74 20 63 6f 6d 6d 6f 6e 6c 79 20 64 6f 63 75 6d 65 6e 74 65 | avior.are.not.commonly.documente |
b9120 | 64 20 62 79 20 76 65 6e 64 6f 72 73 20 6f 66 20 65 71 75 69 70 6d 65 6e 74 20 63 6f 6e 74 61 69 | d.by.vendors.of.equipment.contai |
b9140 | 6e 69 6e 67 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 2e 00 41 73 20 6f 66 20 | ning.NAT.implementations..As.of. |
b9160 | 56 79 4f 53 20 31 2e 34 2c 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d | VyOS.1.4,.OpenVPN.site-to-site.m |
b9180 | 6f 64 65 20 63 61 6e 20 75 73 65 20 65 69 74 68 65 72 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 | ode.can.use.either.pre-shared.ke |
b91a0 | 79 73 20 6f 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 2e 00 41 73 20 70 65 72 | ys.or.x.509.certificates..As.per |
b91c0 | 20 64 65 66 61 75 6c 74 20 61 6e 64 20 69 66 20 6e 6f 74 20 6f 74 68 65 72 77 69 73 65 20 64 65 | .default.and.if.not.otherwise.de |
b91e0 | 66 69 6e 65 64 2c 20 6d 73 63 68 61 70 2d 76 32 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 66 | fined,.mschap-v2.is.being.used.f |
b9200 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 6d 70 70 65 20 31 32 38 2d 62 | or.authentication.and.mppe.128-b |
b9220 | 69 74 20 28 73 74 61 74 65 6c 65 73 73 29 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 49 | it.(stateless).for.encryption..I |
b9240 | 66 20 6e 6f 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 69 73 20 73 65 74 20 77 69 74 68 | f.no.gateway-address.is.set.with |
b9260 | 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 65 20 6c 6f 77 65 73 74 | in.the.configuration,.the.lowest |
b9280 | 20 49 50 20 6f 75 74 20 6f 66 20 74 68 65 20 2f 32 34 20 63 6c 69 65 6e 74 2d 69 70 2d 70 6f 6f | .IP.out.of.the./24.client-ip-poo |
b92a0 | 6c 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 69 | l.is.being.used..For.instance,.i |
b92c0 | 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 69 74 20 77 6f 75 6c 64 20 62 65 20 | n.the.example.below.it.would.be. |
b92e0 | 31 39 32 2e 31 36 38 2e 30 2e 31 2e 00 41 73 20 73 61 69 64 20 62 65 66 6f 72 65 2c 20 6f 6e 63 | 192.168.0.1..As.said.before,.onc |
b9300 | 65 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 2c 20 74 | e.firewall.groups.are.created,.t |
b9320 | 68 65 79 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 65 69 74 68 65 72 20 69 6e 20 | hey.can.be.referenced.either.in. |
b9340 | 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 2c 20 6e 61 74 36 36 20 61 6e 64 2f 6f 72 20 70 6f 6c 69 | firewall,.nat,.nat66.and/or.poli |
b9360 | 63 79 2d 72 6f 75 74 65 20 72 75 6c 65 73 2e 00 41 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 | cy-route.rules..As.shown.in.the. |
b9380 | 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 6f 73 73 69 62 | example.above,.one.of.the.possib |
b93a0 | 69 6c 69 74 69 65 73 20 74 6f 20 6d 61 74 63 68 20 70 61 63 6b 65 74 73 20 69 73 20 62 61 73 65 | ilities.to.match.packets.is.base |
b93c0 | 64 20 6f 6e 20 6d 61 72 6b 73 20 64 6f 6e 65 20 62 79 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2c | d.on.marks.done.by.the.firewall, |
b93e0 | 20 60 74 68 61 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 67 72 65 61 74 20 64 65 61 6c | .`that.can.give.you.a.great.deal |
b9400 | 20 6f 66 20 66 6c 65 78 69 62 69 6c 69 74 79 60 5f 2e 00 41 73 20 73 68 6f 77 6e 20 69 6e 20 74 | .of.flexibility`_..As.shown.in.t |
b9420 | 68 65 20 6c 61 73 74 20 63 6f 6d 6d 61 6e 64 20 6f 66 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 | he.last.command.of.the.example.a |
b9440 | 62 6f 76 65 2c 20 74 68 65 20 60 71 75 65 75 65 2d 74 79 70 65 60 20 73 65 74 74 69 6e 67 20 61 | bove,.the.`queue-type`.setting.a |
b9460 | 6c 6c 6f 77 73 20 74 68 65 73 65 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 2e 20 59 6f 75 20 77 69 | llows.these.combinations..You.wi |
b9480 | 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 20 69 74 20 69 6e 20 6d 61 6e 79 20 70 6f 6c | ll.be.able.to.use.it.in.many.pol |
b94a0 | 69 63 69 65 73 2e 00 41 73 20 74 68 65 20 65 78 61 6d 70 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f | icies..As.the.example.image.belo |
b94c0 | 77 20 73 68 6f 77 73 2c 20 74 68 65 20 64 65 76 69 63 65 20 6e 6f 77 20 6e 65 65 64 73 20 72 75 | w.shows,.the.device.now.needs.ru |
b94e0 | 6c 65 73 20 74 6f 20 61 6c 6c 6f 77 2f 62 6c 6f 63 6b 20 74 72 61 66 66 69 63 20 74 6f 20 6f 72 | les.to.allow/block.traffic.to.or |
b9500 | 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 | .from.the.services.running.on.th |
b9520 | 65 20 64 65 76 69 63 65 20 74 68 61 74 20 68 61 76 65 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 | e.device.that.have.open.connecti |
b9540 | 6f 6e 73 20 6f 6e 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 41 73 20 74 68 65 20 65 78 | ons.on.that.interface..As.the.ex |
b9560 | 61 6d 70 6c 65 20 69 6d 61 67 65 20 62 65 6c 6f 77 20 73 68 6f 77 73 2c 20 74 68 65 20 64 65 76 | ample.image.below.shows,.the.dev |
b9580 | 69 63 65 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 72 75 6c 65 73 20 62 6c | ice.was.configured.with.rules.bl |
b95a0 | 6f 63 6b 69 6e 67 20 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 | ocking.inbound.or.outbound.traff |
b95c0 | 69 63 20 6f 6e 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 2e 00 41 73 20 74 68 65 20 6e 61 6d | ic.on.each.interface..As.the.nam |
b95e0 | 65 20 69 6d 70 6c 69 65 73 2c 20 69 74 27 73 20 49 50 76 34 20 65 6e 63 61 70 73 75 6c 61 74 65 | e.implies,.it's.IPv4.encapsulate |
b9600 | 64 20 69 6e 20 49 50 76 36 2c 20 61 73 20 73 69 6d 70 6c 65 20 61 73 20 74 68 61 74 2e 00 41 73 | d.in.IPv6,.as.simple.as.that..As |
b9620 | 20 77 65 6c 6c 20 61 73 20 74 68 65 20 62 65 6c 6f 77 20 74 6f 20 61 6c 6c 6f 77 20 4e 41 54 2d | .well.as.the.below.to.allow.NAT- |
b9640 | 74 72 61 76 65 72 73 61 6c 20 28 77 68 65 6e 20 4e 41 54 20 69 73 20 64 65 74 65 63 74 65 64 20 | traversal.(when.NAT.is.detected. |
b9660 | 62 79 20 74 68 65 20 56 50 4e 20 63 6c 69 65 6e 74 2c 20 45 53 50 20 69 73 20 65 6e 63 61 70 73 | by.the.VPN.client,.ESP.is.encaps |
b9680 | 75 6c 61 74 65 64 20 69 6e 20 55 44 50 20 66 6f 72 20 4e 41 54 2d 74 72 61 76 65 72 73 61 6c 29 | ulated.in.UDP.for.NAT-traversal) |
b96a0 | 3a 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 52 6f 75 6e 64 2d | :.As.with.other.policies,.Round- |
b96c0 | 52 6f 62 69 6e 20 63 61 6e 20 65 6d 62 65 64 5f 20 61 6e 6f 74 68 65 72 20 70 6f 6c 69 63 79 20 | Robin.can.embed_.another.policy. |
b96e0 | 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 65 75 65 | into.a.class.through.the.``queue |
b9700 | 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 2e 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 | -type``.setting..As.with.other.p |
b9720 | 6f 6c 69 63 69 65 73 2c 20 53 68 61 70 65 72 20 63 61 6e 20 65 6d 62 65 64 5f 20 6f 74 68 65 72 | olicies,.Shaper.can.embed_.other |
b9740 | 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f 20 69 74 73 20 63 6c 61 73 73 65 73 20 74 68 72 6f 75 | .policies.into.its.classes.throu |
b9760 | 67 68 20 74 68 65 20 60 60 71 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 20 61 6e | gh.the.``queue-type``.setting.an |
b9780 | 64 20 74 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 | d.then.configure.their.parameter |
b97a0 | 73 2e 00 41 73 20 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 79 6f 75 20 63 | s..As.with.other.policies,.you.c |
b97c0 | 61 6e 20 64 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 20 6f 66 20 6d 61 74 63 | an.define.different.type.of.matc |
b97e0 | 68 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 79 6f 75 72 20 63 6c 61 73 73 65 73 3a 00 41 73 20 | hing.rules.for.your.classes:.As. |
b9800 | 77 69 74 68 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 | with.other.policies,.you.can.emb |
b9820 | 65 64 5f 20 6f 74 68 65 72 20 70 6f 6c 69 63 69 65 73 20 69 6e 74 6f 20 74 68 65 20 63 6c 61 73 | ed_.other.policies.into.the.clas |
b9840 | 73 65 73 20 28 61 6e 64 20 64 65 66 61 75 6c 74 29 20 6f 66 20 79 6f 75 72 20 50 72 69 6f 72 69 | ses.(and.default).of.your.Priori |
b9860 | 74 79 20 51 75 65 75 65 20 70 6f 6c 69 63 79 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 75 | ty.Queue.policy.through.the.``qu |
b9880 | 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 3a 00 41 73 20 79 6f 75 20 63 61 6e 20 73 | eue-type``.setting:.As.you.can.s |
b98a0 | 65 65 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 68 65 72 65 2c 20 79 6f 75 20 63 61 6e 20 | ee.in.the.example.here,.you.can. |
b98c0 | 61 73 73 69 67 6e 20 74 68 65 20 73 61 6d 65 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 73 65 76 65 | assign.the.same.rule-set.to.seve |
b98e0 | 72 61 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 20 41 6e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e | ral.interfaces..An.interface.can |
b9900 | 20 6f 6e 6c 79 20 68 61 76 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 74 20 70 65 72 20 63 68 61 69 | .only.have.one.rule-set.per.chai |
b9920 | 6e 2e 00 41 73 20 79 6f 75 20 63 61 6e 20 73 65 65 2c 20 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 | n..As.you.can.see,.Leaf2.and.Lea |
b9940 | 66 33 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 61 6c 6d 6f 73 74 20 69 64 65 6e 74 | f3.configuration.is.almost.ident |
b9960 | 69 63 61 6c 2e 20 54 68 65 72 65 20 61 72 65 20 6c 6f 74 73 20 6f 66 20 63 6f 6d 6d 61 6e 64 73 | ical..There.are.lots.of.commands |
b9980 | 20 61 62 6f 76 65 2c 20 49 27 6c 6c 20 74 72 79 20 74 6f 20 69 6e 74 6f 20 6d 6f 72 65 20 64 65 | .above,.I'll.try.to.into.more.de |
b99a0 | 74 61 69 6c 20 62 65 6c 6f 77 2c 20 63 6f 6d 6d 61 6e 64 20 64 65 73 63 72 69 70 74 69 6f 6e 73 | tail.below,.command.descriptions |
b99c0 | 20 61 72 65 20 70 6c 61 63 65 64 20 75 6e 64 65 72 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 62 6f | .are.placed.under.the.command.bo |
b99e0 | 78 65 73 3a 00 41 73 73 69 67 6e 20 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 72 66 61 63 65 | xes:.Assign.`<member>`.interface |
b9a00 | 20 74 6f 20 62 72 69 64 67 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 41 20 63 6f 6d 70 | .to.bridge.`<interface>`..A.comp |
b9a20 | 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 77 69 6c 6c 20 68 65 6c 70 20 79 6f 75 20 77 69 74 68 | letion.helper.will.help.you.with |
b9a40 | 20 61 6c 6c 20 61 6c 6c 6f 77 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 63 61 | .all.allowed.interfaces.which.ca |
b9a60 | 6e 20 62 65 20 62 72 69 64 67 65 64 2e 20 54 68 69 73 20 69 6e 63 6c 75 64 65 73 20 3a 72 65 66 | n.be.bridged..This.includes.:ref |
b9a80 | 3a 60 65 74 68 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 62 6f 6e | :`ethernet-interface`,.:ref:`bon |
b9aa0 | 64 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 6c 32 74 70 76 33 2d 69 6e 74 65 72 | d-interface`,.:ref:`l2tpv3-inter |
b9ac0 | 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 6f 70 65 6e 76 70 6e 60 2c 20 3a 72 65 66 3a 60 76 78 6c | face`,.:ref:`openvpn`,.:ref:`vxl |
b9ae0 | 61 6e 2d 69 6e 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 77 69 72 65 6c 65 73 73 2d 69 6e | an-interface`,.:ref:`wireless-in |
b9b00 | 74 65 72 66 61 63 65 60 2c 20 3a 72 65 66 3a 60 74 75 6e 6e 65 6c 2d 69 6e 74 65 72 66 61 63 65 | terface`,.:ref:`tunnel-interface |
b9b20 | 60 20 61 6e 64 20 3a 72 65 66 3a 60 67 65 6e 65 76 65 2d 69 6e 74 65 72 66 61 63 65 60 2e 00 41 | `.and.:ref:`geneve-interface`..A |
b9b40 | 73 73 69 67 6e 20 61 20 73 70 65 63 69 66 69 63 20 62 61 63 6b 65 6e 64 20 74 6f 20 61 20 72 75 | ssign.a.specific.backend.to.a.ru |
b9b60 | 6c 65 00 41 73 73 69 67 6e 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 | le.Assign.interface.identified.b |
b9b80 | 79 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 74 6f 20 56 52 46 20 6e 61 6d 65 64 20 60 3c 6e | y.`<interface>`.to.VRF.named.`<n |
b9ba0 | 61 6d 65 3e 60 2e 00 41 73 73 69 67 6e 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 | ame>`..Assign.member.interfaces. |
b9bc0 | 74 6f 20 50 6f 72 74 43 68 61 6e 6e 65 6c 00 41 73 73 69 67 6e 20 73 74 61 74 69 63 20 49 50 20 | to.PortChannel.Assign.static.IP. |
b9be0 | 61 64 64 72 65 73 73 20 74 6f 20 60 3c 75 73 65 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 41 73 73 | address.to.`<user>`.account..Ass |
b9c00 | 69 67 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 69 73 20 6d 61 63 68 69 | ign.the.IP.address.to.this.machi |
b9c20 | 6e 65 20 66 6f 72 20 60 3c 74 69 6d 65 3e 60 20 73 65 63 6f 6e 64 73 2e 00 41 73 73 69 67 6e 20 | ne.for.`<time>`.seconds..Assign. |
b9c40 | 74 68 65 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 60 3c 6b 65 79 | the.SSH.public.key.portion.`<key |
b9c60 | 3e 60 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 70 65 72 2d 6b 65 79 20 60 3c 69 64 65 6e 74 | >`.identified.by.per-key.`<ident |
b9c80 | 69 66 69 65 72 3e 60 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 20 60 3c 75 73 65 72 | ifier>`.to.the.local.user.`<user |
b9ca0 | 6e 61 6d 65 3e 60 2e 00 41 73 73 6f 63 69 61 74 65 73 20 74 68 65 20 70 72 65 76 69 6f 75 73 6c | name>`..Associates.the.previousl |
b9cc0 | 79 20 67 65 6e 65 72 61 74 65 64 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 61 20 73 70 65 | y.generated.private.key.to.a.spe |
b9ce0 | 63 69 66 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 70 | cific.WireGuard.interface..The.p |
b9d00 | 72 69 76 61 74 65 20 6b 65 79 20 63 61 6e 20 62 65 20 67 65 6e 65 72 61 74 65 20 76 69 61 20 74 | rivate.key.can.be.generate.via.t |
b9d20 | 68 65 20 63 6f 6d 6d 61 6e 64 00 41 73 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 66 69 72 65 | he.command.Assure.that.your.fire |
b9d40 | 77 61 6c 6c 20 72 75 6c 65 73 20 61 6c 6c 6f 77 20 74 68 65 20 74 72 61 66 66 69 63 2c 20 69 6e | wall.rules.allow.the.traffic,.in |
b9d60 | 20 77 68 69 63 68 20 63 61 73 65 20 79 6f 75 20 68 61 76 65 20 61 20 77 6f 72 6b 69 6e 67 20 56 | .which.case.you.have.a.working.V |
b9d80 | 50 4e 20 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 2e 00 41 73 73 75 72 65 64 20 46 6f 72 77 | PN.using.WireGuard..Assured.Forw |
b9da0 | 61 72 64 69 6e 67 28 41 46 29 20 31 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 | arding(AF).11.Assured.Forwarding |
b9dc0 | 28 41 46 29 20 31 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 31 | (AF).12.Assured.Forwarding(AF).1 |
b9de0 | 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 31 00 41 73 73 75 | 3.Assured.Forwarding(AF).21.Assu |
b9e00 | 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 32 00 41 73 73 75 72 65 64 20 46 6f | red.Forwarding(AF).22.Assured.Fo |
b9e20 | 72 77 61 72 64 69 6e 67 28 41 46 29 20 32 33 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 | rwarding(AF).23.Assured.Forwardi |
b9e40 | 6e 67 28 41 46 29 20 33 31 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 | ng(AF).31.Assured.Forwarding(AF) |
b9e60 | 20 33 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 33 33 00 41 73 | .32.Assured.Forwarding(AF).33.As |
b9e80 | 73 75 72 65 64 20 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 31 00 41 73 73 75 72 65 64 20 | sured.Forwarding(AF).41.Assured. |
b9ea0 | 46 6f 72 77 61 72 64 69 6e 67 28 41 46 29 20 34 32 00 41 73 73 75 72 65 64 20 46 6f 72 77 61 72 | Forwarding(AF).42.Assured.Forwar |
b9ec0 | 64 69 6e 67 28 41 46 29 20 34 33 00 41 74 20 65 76 65 72 79 20 72 6f 75 6e 64 2c 20 74 68 65 20 | ding(AF).43.At.every.round,.the. |
b9ee0 | 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 61 64 64 73 20 74 68 65 20 71 75 61 6e 74 75 6d | deficit.counter.adds.the.quantum |
b9f00 | 20 73 6f 20 74 68 61 74 20 65 76 65 6e 20 6c 61 72 67 65 20 70 61 63 6b 65 74 73 20 77 69 6c 6c | .so.that.even.large.packets.will |
b9f20 | 20 68 61 76 65 20 74 68 65 69 72 20 6f 70 70 6f 72 74 75 6e 69 74 79 20 74 6f 20 62 65 20 64 65 | .have.their.opportunity.to.be.de |
b9f40 | 71 75 65 75 65 64 2e 00 41 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 69 74 20 6e 6f 74 20 70 6f 73 | queued..At.the.moment.it.not.pos |
b9f60 | 73 69 62 6c 65 20 74 6f 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 77 68 6f 6c 65 20 66 69 72 65 77 | sible.to.look.at.the.whole.firew |
b9f80 | 61 6c 6c 20 6c 6f 67 20 77 69 74 68 20 56 79 4f 53 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f | all.log.with.VyOS.operational.co |
b9fa0 | 6d 6d 61 6e 64 73 2e 20 41 6c 6c 20 6c 6f 67 73 20 77 69 6c 6c 20 73 61 76 65 20 74 6f 20 60 60 | mmands..All.logs.will.save.to.`` |
b9fc0 | 2f 76 61 72 2f 6c 6f 67 73 2f 6d 65 73 73 61 67 65 73 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c | /var/logs/messages``..For.exampl |
b9fe0 | 65 3a 20 60 60 67 72 65 70 20 27 31 30 2e 31 30 2e 30 2e 31 30 27 20 2f 76 61 72 2f 6c 6f 67 2f | e:.``grep.'10.10.0.10'./var/log/ |
ba000 | 6d 65 73 73 61 67 65 73 60 60 00 41 74 20 74 68 65 20 74 69 6d 65 20 6f 66 20 74 68 69 73 20 77 | messages``.At.the.time.of.this.w |
ba020 | 72 69 74 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 69 73 70 6c 61 79 73 20 61 72 | riting.the.following.displays.ar |
ba040 | 65 20 73 75 70 70 6f 72 74 65 64 3a 00 41 74 20 76 65 72 79 20 6c 6f 77 20 72 61 74 65 73 20 28 | e.supported:.At.very.low.rates.( |
ba060 | 62 65 6c 6f 77 20 33 4d 62 69 74 29 2c 20 62 65 73 69 64 65 73 20 74 75 6e 69 6e 67 20 60 71 75 | below.3Mbit),.besides.tuning.`qu |
ba080 | 61 6e 74 75 6d 60 20 28 33 30 30 20 6b 65 65 70 73 20 62 65 69 6e 67 20 6f 6b 29 20 79 6f 75 20 | antum`.(300.keeps.being.ok).you. |
ba0a0 | 6d 61 79 20 61 6c 73 6f 20 77 61 6e 74 20 74 6f 20 69 6e 63 72 65 61 73 65 20 60 74 61 72 67 65 | may.also.want.to.increase.`targe |
ba0c0 | 74 60 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 31 35 6d 73 20 61 6e 64 20 69 6e | t`.to.something.like.15ms.and.in |
ba0e0 | 63 72 65 61 73 65 20 60 69 6e 74 65 72 76 61 6c 60 20 74 6f 20 73 6f 6d 65 74 68 69 6e 67 20 61 | crease.`interval`.to.something.a |
ba100 | 72 6f 75 6e 64 20 31 35 30 20 6d 73 2e 00 41 74 74 61 63 68 65 73 20 75 73 65 72 2d 64 65 66 69 | round.150.ms..Attaches.user-defi |
ba120 | 6e 65 64 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 20 4f 6e 6c 79 | ned.network.to.a.container..Only |
ba140 | 20 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 | .one.network.must.be.specified.a |
ba160 | 6e 64 20 6d 75 73 74 20 61 6c 72 65 61 64 79 20 65 78 69 73 74 2e 00 41 75 74 68 65 6e 74 69 63 | nd.must.already.exist..Authentic |
ba180 | 61 74 69 6f 6e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 28 45 41 50 6f 4c 29 00 41 75 74 | ation.Authentication.(EAPoL).Aut |
ba1a0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 41 75 74 | hentication.Advanced.Options.Aut |
ba1c0 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c 69 65 6e 74 2d 69 | hentication.application.client-i |
ba1e0 | 64 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 63 6c | d..Authentication.application.cl |
ba200 | 69 65 6e 74 2d 73 65 63 72 65 74 2e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 70 70 6c | ient-secret..Authentication.appl |
ba220 | 69 63 61 74 69 6f 6e 20 74 65 6e 61 6e 74 2d 69 64 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | ication.tenant-id.Authentication |
ba240 | 20 69 73 20 64 6f 6e 65 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 60 60 6f 70 65 6e 76 70 6e 2d | .is.done.by.using.the.``openvpn- |
ba260 | 61 75 74 68 2d 6c 64 61 70 2e 73 6f 60 60 20 70 6c 75 67 69 6e 20 77 68 69 63 68 20 69 73 20 73 | auth-ldap.so``.plugin.which.is.s |
ba280 | 68 69 70 70 65 64 20 77 69 74 68 20 65 76 65 72 79 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 | hipped.with.every.VyOS.installat |
ba2a0 | 69 6f 6e 2e 20 41 20 64 65 64 69 63 61 74 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 | ion..A.dedicated.configuration.f |
ba2c0 | 69 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 49 74 20 69 73 20 62 65 73 74 20 70 72 61 63 | ile.is.required..It.is.best.prac |
ba2e0 | 74 69 73 65 20 74 6f 20 73 74 6f 72 65 20 69 74 20 69 6e 20 60 60 2f 63 6f 6e 66 69 67 60 60 20 | tise.to.store.it.in.``/config``. |
ba300 | 74 6f 20 73 75 72 76 69 76 65 20 69 6d 61 67 65 20 75 70 64 61 74 65 73 00 41 75 74 68 65 6e 74 | to.survive.image.updates.Authent |
ba320 | 69 63 61 74 69 6f 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6e 61 6d 65 00 41 75 74 68 65 6e | ication.organization.name.Authen |
ba340 | 74 69 63 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 e2 80 | tication.token.Authentication... |
ba360 | 93 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 6d 65 73 73 61 67 65 20 69 73 20 | ..to.verify.that.the.message.is. |
ba380 | 66 72 6f 6d 20 61 20 76 61 6c 69 64 20 73 6f 75 72 63 65 2e 00 41 75 74 68 6f 72 69 74 61 74 69 | from.a.valid.source..Authoritati |
ba3a0 | 76 65 20 7a 6f 6e 65 73 00 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 74 6f 6b 65 6e 00 41 75 74 | ve.zones.Authorization.token.Aut |
ba3c0 | 6f 6d 61 74 69 63 20 56 4c 41 4e 20 43 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 69 63 20 56 | omatic.VLAN.Creation.Automatic.V |
ba3e0 | 4c 41 4e 20 63 72 65 61 74 69 6f 6e 00 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 | LAN.creation.Automatically.creat |
ba400 | 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 52 49 50 20 70 65 65 72 20 | e.BFD.session.for.each.RIP.peer. |
ba420 | 64 69 73 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 | discovered.in.this.interface..Wh |
ba440 | 65 6e 20 74 68 65 20 42 46 44 20 73 65 73 73 69 6f 6e 20 6d 6f 6e 69 74 6f 72 20 73 69 67 6e 61 | en.the.BFD.session.monitor.signa |
ba460 | 6c 69 7a 65 20 74 68 61 74 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 64 6f 77 6e 20 74 68 65 20 52 | lize.that.the.link.is.down.the.R |
ba480 | 49 50 20 70 65 65 72 20 69 73 20 72 65 6d 6f 76 65 64 20 61 6e 64 20 61 6c 6c 20 74 68 65 20 6c | IP.peer.is.removed.and.all.the.l |
ba4a0 | 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 | earned.routes.associated.with.th |
ba4c0 | 61 74 20 70 65 65 72 20 61 72 65 20 72 65 6d 6f 76 65 64 2e 00 41 75 74 6f 6d 61 74 69 63 61 6c | at.peer.are.removed..Automatical |
ba4e0 | 6c 79 20 72 65 62 6f 6f 74 20 73 79 73 74 65 6d 20 6f 6e 20 6b 65 72 6e 65 6c 20 70 61 6e 69 63 | ly.reboot.system.on.kernel.panic |
ba500 | 20 61 66 74 65 72 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 | .after.60.seconds..Autonomous.Sy |
ba520 | 73 74 65 6d 73 00 41 76 6f 69 64 69 6e 67 20 22 6c 65 61 6b 79 22 20 4e 41 54 00 41 7a 75 72 65 | stems.Avoiding."leaky".NAT.Azure |
ba540 | 2d 64 61 74 61 2d 65 78 70 6c 6f 72 65 72 00 42 46 44 00 42 46 44 20 53 74 61 74 69 63 20 52 6f | -data-explorer.BFD.BFD.Static.Ro |
ba560 | 75 74 65 20 4d 6f 6e 69 74 6f 72 69 6e 67 00 42 46 44 20 73 65 6e 64 73 20 6c 6f 74 73 20 6f 66 | ute.Monitoring.BFD.sends.lots.of |
ba580 | 20 73 6d 61 6c 6c 20 55 44 50 20 70 61 63 6b 65 74 73 20 76 65 72 79 20 71 75 69 63 6b 6c 79 20 | .small.UDP.packets.very.quickly. |
ba5a0 | 74 6f 20 65 6e 73 75 72 65 73 20 74 68 61 74 20 74 68 65 20 70 65 65 72 20 69 73 20 73 74 69 6c | to.ensures.that.the.peer.is.stil |
ba5c0 | 6c 20 61 6c 69 76 65 2e 00 42 47 50 00 42 47 50 20 2d 20 41 53 20 50 61 74 68 20 50 6f 6c 69 63 | l.alive..BGP.BGP.-.AS.Path.Polic |
ba5e0 | 79 00 42 47 50 20 2d 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 45 78 74 | y.BGP.-.Community.List.BGP.-.Ext |
ba600 | 65 6e 64 65 64 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 2d 20 4c 61 72 67 65 | ended.Community.List.BGP.-.Large |
ba620 | 20 43 6f 6d 6d 75 6e 69 74 79 20 4c 69 73 74 00 42 47 50 20 45 78 61 6d 70 6c 65 00 42 47 50 20 | .Community.List.BGP.Example.BGP. |
ba640 | 52 6f 75 74 65 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 53 63 61 6c 69 6e 67 | Router.Configuration.BGP.Scaling |
ba660 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 47 50 20 61 67 67 72 65 67 61 74 6f 72 20 61 74 | .Configuration.BGP.aggregator.at |
ba680 | 74 72 69 62 75 74 65 3a 20 41 53 20 6e 75 6d 62 65 72 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 | tribute:.AS.number.or.IP.address |
ba6a0 | 20 6f 66 20 61 6e 20 61 67 67 72 65 67 61 74 69 6f 6e 2e 00 42 47 50 20 61 73 2d 70 61 74 68 20 | .of.an.aggregation..BGP.as-path. |
ba6c0 | 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 61 74 6f 6d 69 63 20 61 67 67 72 65 67 | list.to.match..BGP.atomic.aggreg |
ba6e0 | 61 74 65 20 61 74 74 72 69 62 75 74 65 2e 00 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 | ate.attribute..BGP.community-lis |
ba700 | 74 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 | t.to.match..BGP.extended.communi |
ba720 | 74 79 20 74 6f 20 6d 61 74 63 68 2e 00 42 47 50 20 72 6f 6c 65 73 20 61 72 65 20 64 65 66 69 6e | ty.to.match..BGP.roles.are.defin |
ba740 | 65 64 20 69 6e 20 52 46 43 20 3a 72 66 63 3a 60 39 32 33 34 60 20 61 6e 64 20 70 72 6f 76 69 64 | ed.in.RFC.:rfc:`9234`.and.provid |
ba760 | 65 20 61 6e 20 65 61 73 79 20 77 61 79 20 74 6f 20 61 64 64 20 72 6f 75 74 65 20 6c 65 61 6b 20 | e.an.easy.way.to.add.route.leak. |
ba780 | 70 72 65 76 65 6e 74 69 6f 6e 2c 20 64 65 74 65 63 74 69 6f 6e 20 61 6e 64 20 6d 69 74 69 67 61 | prevention,.detection.and.mitiga |
ba7a0 | 74 69 6f 6e 2e 20 54 68 65 20 6c 6f 63 61 6c 20 52 6f 6c 65 20 76 61 6c 75 65 20 69 73 20 6e 65 | tion..The.local.Role.value.is.ne |
ba7c0 | 67 6f 74 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 6e 65 77 20 42 47 50 20 52 6f 6c 65 20 63 | gotiated.with.the.new.BGP.Role.c |
ba7e0 | 61 70 61 62 69 6c 69 74 79 20 77 68 69 63 68 20 68 61 73 20 61 20 62 75 69 6c 74 2d 69 6e 20 63 | apability.which.has.a.built-in.c |
ba800 | 68 65 63 6b 20 6f 66 20 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 76 61 6c 75 65 2e | heck.of.the.corresponding.value. |
ba820 | 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 69 73 6d 61 74 63 68 20 74 68 65 20 6e 65 77 20 4f | .In.case.of.a.mismatch.the.new.O |
ba840 | 50 45 4e 20 52 6f 6c 65 73 20 4d 69 73 6d 61 74 63 68 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 | PEN.Roles.Mismatch.Notification. |
ba860 | 3c 32 2c 20 31 31 3e 20 77 6f 75 6c 64 20 62 65 20 73 65 6e 74 2e 20 54 68 65 20 63 6f 72 72 65 | <2,.11>.would.be.sent..The.corre |
ba880 | 63 74 20 52 6f 6c 65 20 70 61 69 72 73 20 61 72 65 3a 00 42 47 50 20 72 6f 75 74 65 72 73 20 63 | ct.Role.pairs.are:.BGP.routers.c |
ba8a0 | 6f 6e 6e 65 63 74 65 64 20 69 6e 73 69 64 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 74 68 72 6f | onnected.inside.the.same.AS.thro |
ba8c0 | 75 67 68 20 42 47 50 20 62 65 6c 6f 6e 67 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 42 47 | ugh.BGP.belong.to.an.internal.BG |
ba8e0 | 50 20 73 65 73 73 69 6f 6e 2c 20 6f 72 20 49 42 47 50 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 | P.session,.or.IBGP..In.order.to. |
ba900 | 70 72 65 76 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 6c 6f 6f 70 73 2c 20 49 42 47 | prevent.routing.table.loops,.IBG |
ba920 | 50 20 73 70 65 61 6b 65 72 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 49 42 47 | P.speaker.does.not.advertise.IBG |
ba940 | 50 2d 6c 65 61 72 6e 65 64 20 72 6f 75 74 65 73 20 74 6f 20 6f 74 68 65 72 20 49 42 47 50 20 73 | P-learned.routes.to.other.IBGP.s |
ba960 | 70 65 61 6b 65 72 20 28 53 70 6c 69 74 20 48 6f 72 69 7a 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 29 | peaker.(Split.Horizon.mechanism) |
ba980 | 2e 20 41 73 20 73 75 63 68 2c 20 49 42 47 50 20 72 65 71 75 69 72 65 73 20 61 20 66 75 6c 6c 20 | ..As.such,.IBGP.requires.a.full. |
ba9a0 | 6d 65 73 68 20 6f 66 20 61 6c 6c 20 70 65 65 72 73 2e 20 46 6f 72 20 6c 61 72 67 65 20 6e 65 74 | mesh.of.all.peers..For.large.net |
ba9c0 | 77 6f 72 6b 73 2c 20 74 68 69 73 20 71 75 69 63 6b 6c 79 20 62 65 63 6f 6d 65 73 20 75 6e 73 63 | works,.this.quickly.becomes.unsc |
ba9e0 | 61 6c 61 62 6c 65 2e 00 42 47 50 20 72 6f 75 74 65 73 20 6d 61 79 20 62 65 20 6c 65 61 6b 65 64 | alable..BGP.routes.may.be.leaked |
baa00 | 20 28 69 2e 65 2e 20 63 6f 70 69 65 64 29 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 63 61 73 74 | .(i.e..copied).between.a.unicast |
baa20 | 20 56 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 42 20 6f 66 | .VRF.RIB.and.the.VPN.SAFI.RIB.of |
baa40 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 66 6f 72 20 75 73 65 20 69 6e 20 4d 50 4c 53 | .the.default.VRF.for.use.in.MPLS |
baa60 | 2d 62 61 73 65 64 20 4c 33 56 50 4e 73 2e 20 55 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 6d 61 | -based.L3VPNs..Unicast.routes.ma |
baa80 | 79 20 61 6c 73 6f 20 62 65 20 6c 65 61 6b 65 64 20 62 65 74 77 65 65 6e 20 61 6e 79 20 56 52 46 | y.also.be.leaked.between.any.VRF |
baaa0 | 73 20 28 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 20 75 6e 69 63 61 73 74 20 52 49 42 20 6f 66 20 | s.(including.the.unicast.RIB.of. |
baac0 | 74 68 65 20 64 65 66 61 75 6c 74 20 42 47 50 20 69 6e 73 74 61 6e 63 65 29 2e 20 41 20 73 68 6f | the.default.BGP.instance)..A.sho |
baae0 | 72 74 63 75 74 20 73 79 6e 74 61 78 20 69 73 20 61 6c 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 66 | rtcut.syntax.is.also.available.f |
bab00 | 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 6f 6e 65 20 56 | or.specifying.leaking.from.one.V |
bab20 | 52 46 20 74 6f 20 61 6e 6f 74 68 65 72 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 64 65 66 61 | RF.to.another.VRF.using.the.defa |
bab40 | 75 6c 74 20 69 6e 73 74 61 6e 63 65 e2 80 99 73 20 56 50 4e 20 52 49 42 20 61 73 20 74 68 65 20 | ult.instance...s.VPN.RIB.as.the. |
bab60 | 69 6e 74 65 6d 65 64 69 61 72 79 20 2e 20 41 20 63 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 69 | intemediary...A.common.applicati |
bab80 | 6f 6e 20 6f 66 20 74 68 65 20 56 52 46 2d 56 52 46 20 66 65 61 74 75 72 65 20 69 73 20 74 6f 20 | on.of.the.VRF-VRF.feature.is.to. |
baba0 | 63 6f 6e 6e 65 63 74 20 61 20 63 75 73 74 6f 6d 65 72 e2 80 99 73 20 70 72 69 76 61 74 65 20 72 | connect.a.customer...s.private.r |
babc0 | 6f 75 74 69 6e 67 20 64 6f 6d 61 69 6e 20 74 6f 20 61 20 70 72 6f 76 69 64 65 72 e2 80 99 73 20 | outing.domain.to.a.provider...s. |
babe0 | 56 50 4e 20 73 65 72 76 69 63 65 2e 20 4c 65 61 6b 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 72 | VPN.service..Leaking.is.configur |
bac00 | 65 64 20 66 72 6f 6d 20 74 68 65 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 6f 66 20 61 6e 20 | ed.from.the.point.of.view.of.an. |
bac20 | 69 6e 64 69 76 69 64 75 61 6c 20 56 52 46 3a 20 69 6d 70 6f 72 74 20 72 65 66 65 72 73 20 74 6f | individual.VRF:.import.refers.to |
bac40 | 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 6f 6d 20 56 50 4e 20 74 6f 20 61 20 75 6e 69 | .routes.leaked.from.VPN.to.a.uni |
bac60 | 63 61 73 74 20 56 52 46 2c 20 77 68 65 72 65 61 73 20 65 78 70 6f 72 74 20 72 65 66 65 72 73 20 | cast.VRF,.whereas.export.refers. |
bac80 | 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 6b 65 64 20 66 72 6f 6d 20 61 20 75 6e 69 63 61 73 74 20 | to.routes.leaked.from.a.unicast. |
baca0 | 56 52 46 20 74 6f 20 56 50 4e 2e 00 42 61 62 65 6c 00 42 61 62 65 6c 20 61 20 64 75 61 6c 20 73 | VRF.to.VPN..Babel.Babel.a.dual.s |
bacc0 | 74 61 63 6b 20 70 72 6f 74 6f 63 6f 6c 2e 20 41 20 73 69 6e 67 6c 65 20 42 61 62 65 6c 20 69 6e | tack.protocol..A.single.Babel.in |
bace0 | 73 74 61 6e 63 65 20 69 73 20 61 62 6c 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 72 6f 75 74 69 6e | stance.is.able.to.perform.routin |
bad00 | 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 42 61 62 65 6c 20 | g.for.both.IPv4.and.IPv6..Babel. |
bad20 | 69 73 20 61 20 6d 6f 64 65 72 6e 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 64 65 73 | is.a.modern.routing.protocol.des |
bad40 | 69 67 6e 65 64 20 74 6f 20 62 65 20 72 6f 62 75 73 74 20 61 6e 64 20 65 66 66 69 63 69 65 6e 74 | igned.to.be.robust.and.efficient |
bad60 | 20 62 6f 74 68 20 69 6e 20 6f 72 64 69 6e 61 72 79 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 | .both.in.ordinary.wired.networks |
bad80 | 20 61 6e 64 20 69 6e 20 77 69 72 65 6c 65 73 73 20 6d 65 73 68 20 6e 65 74 77 6f 72 6b 73 2e 20 | .and.in.wireless.mesh.networks.. |
bada0 | 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 75 73 65 73 20 68 6f 70 2d 63 6f 75 6e 74 20 6f 6e | By.default,.it.uses.hop-count.on |
badc0 | 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 61 20 76 61 72 69 61 6e 74 20 6f 66 | .wired.networks.and.a.variant.of |
bade0 | 20 45 54 58 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 49 74 20 63 61 6e 20 62 | .ETX.on.wireless.links,.It.can.b |
bae00 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 74 61 6b 65 20 72 61 64 69 6f 20 64 69 76 65 72 | e.configured.to.take.radio.diver |
bae20 | 73 69 74 79 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 61 6e 64 20 74 6f 20 61 75 74 6f 6d 61 74 | sity.into.account.and.to.automat |
bae40 | 69 63 61 6c 6c 79 20 63 6f 6d 70 75 74 65 20 61 20 6c 69 6e 6b 27 73 20 6c 61 74 65 6e 63 79 20 | ically.compute.a.link's.latency. |
bae60 | 61 6e 64 20 69 6e 63 6c 75 64 65 20 69 74 20 69 6e 20 74 68 65 20 6d 65 74 72 69 63 2e 20 49 74 | and.include.it.in.the.metric..It |
bae80 | 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 36 36 60 2e 00 42 61 63 6b | .is.defined.in.:rfc:`8966`..Back |
baea0 | 65 6e 64 00 42 61 63 6b 65 6e 64 20 73 65 72 76 69 63 65 20 63 65 72 74 69 66 69 63 61 74 65 73 | end.Backend.service.certificates |
baec0 | 20 61 72 65 20 63 68 65 63 6b 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 63 65 72 74 69 66 69 | .are.checked.against.the.certifi |
baee0 | 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 | cate.authority.specified.in.the. |
baf00 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 61 6e | configuration,.which.could.be.an |
baf20 | 20 69 6e 74 65 72 6e 61 6c 20 43 41 2e 00 42 61 6c 61 6e 63 65 20 61 6c 67 6f 72 69 74 68 6d 73 | .internal.CA..Balance.algorithms |
baf40 | 3a 00 42 61 6c 61 6e 63 69 6e 67 20 52 75 6c 65 73 00 42 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 | :.Balancing.Rules.Balancing.base |
baf60 | 64 20 6f 6e 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 42 61 6c 61 6e 63 69 6e 67 20 77 69 74 68 20 | d.on.domain.name.Balancing.with. |
baf80 | 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 00 42 61 6e 64 77 69 64 74 68 20 53 68 61 | HTTP.health.checks.Bandwidth.Sha |
bafa0 | 70 69 6e 67 00 42 61 6e 64 77 69 64 74 68 20 53 68 61 70 69 6e 67 20 66 6f 72 20 6c 6f 63 61 6c | ping.Bandwidth.Shaping.for.local |
bafc0 | 20 75 73 65 72 73 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e | .users.Bandwidth.rate.limits.can |
bafe0 | 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 6f 72 20 52 41 44 49 55 | .be.set.for.local.users.or.RADIU |
bb000 | 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 6e 64 77 69 64 74 68 20 72 61 | S.based.attributes..Bandwidth.ra |
bb020 | 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 | te.limits.can.be.set.for.local.u |
bb040 | 73 65 72 73 20 6f 72 20 76 69 61 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 74 74 72 69 62 75 | sers.or.via.RADIUS.based.attribu |
bb060 | 74 65 73 2e 00 42 61 6e 64 77 69 64 74 68 20 72 61 74 65 20 6c 69 6d 69 74 73 20 63 61 6e 20 62 | tes..Bandwidth.rate.limits.can.b |
bb080 | 65 20 73 65 74 20 66 6f 72 20 6c 6f 63 61 6c 20 75 73 65 72 73 20 77 69 74 68 69 6e 20 74 68 65 | e.set.for.local.users.within.the |
bb0a0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 72 20 76 69 61 20 52 41 44 49 55 53 20 62 61 73 | .configuration.or.via.RADIUS.bas |
bb0c0 | 65 64 20 61 74 74 72 69 62 75 74 65 73 2e 00 42 61 73 65 20 63 68 61 69 6e 20 69 73 20 66 6f 72 | ed.attributes..Base.chain.is.for |
bb0e0 | 20 74 72 61 66 66 69 63 20 74 6f 77 61 72 64 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 | .traffic.toward.the.router.is.`` |
bb100 | 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e | set.firewall.ipv4.input.filter.. |
bb120 | 2e 2e 60 60 00 42 61 73 65 20 63 68 61 69 6e 20 69 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 | ..``.Base.chain.is.for.traffic.t |
bb140 | 6f 77 61 72 64 20 74 68 65 20 72 6f 75 74 65 72 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 | oward.the.router.is.``set.firewa |
bb160 | 6c 6c 20 69 70 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 42 61 73 65 6c | ll.ipv6.input.filter....``.Basel |
bb180 | 69 6e 65 20 44 4d 56 50 4e 20 74 6f 70 6f 6c 6f 67 79 00 42 61 73 69 63 20 43 6f 6e 63 65 70 74 | ine.DMVPN.topology.Basic.Concept |
bb1a0 | 73 00 42 61 73 69 63 20 63 6f 6d 6d 61 6e 64 73 00 42 61 73 69 63 20 66 69 6c 74 65 72 69 6e 67 | s.Basic.commands.Basic.filtering |
bb1c0 | 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 61 63 63 65 73 73 2d 6c 69 73 74 20 61 | .can.be.done.using.access-list.a |
bb1e0 | 6e 64 20 61 63 63 65 73 73 2d 6c 69 73 74 36 2e 00 42 61 73 69 63 20 66 69 6c 74 65 72 69 6e 67 | nd.access-list6..Basic.filtering |
bb200 | 20 63 6f 75 6c 64 20 61 6c 73 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 49 50 76 36 20 74 | .could.also.be.applied.to.IPv6.t |
bb220 | 72 61 66 66 69 63 2e 00 42 61 73 69 63 20 73 65 74 75 70 00 42 65 20 73 75 72 65 20 74 6f 20 73 | raffic..Basic.setup.Be.sure.to.s |
bb240 | 65 74 20 61 20 73 61 6e 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 69 6e 20 74 68 65 20 | et.a.sane.default.config.in.the. |
bb260 | 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 66 69 6c 65 2c 20 74 68 69 73 20 77 69 6c 6c 20 62 | default.config.file,.this.will.b |
bb280 | 65 20 6c 6f 61 64 65 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 74 68 61 74 20 61 20 75 73 65 72 | e.loaded.in.the.case.that.a.user |
bb2a0 | 20 69 73 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 61 6e 64 20 6e 6f 20 66 69 6c 65 20 69 73 | .is.authenticated.and.no.file.is |
bb2c0 | 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 64 69 72 65 63 74 6f | .found.in.the.configured.directo |
bb2e0 | 72 79 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 75 73 65 72 73 20 75 73 65 72 6e 61 6d 65 2f 67 | ry.matching.the.users.username/g |
bb300 | 72 6f 75 70 2e 00 42 65 61 6d 66 6f 72 6d 69 6e 67 20 63 61 70 61 62 69 6c 69 74 69 65 73 3a 00 | roup..Beamforming.capabilities:. |
bb320 | 42 65 63 61 75 73 65 20 61 6e 20 61 67 67 72 65 67 61 74 6f 72 20 63 61 6e 6e 6f 74 20 62 65 20 | Because.an.aggregator.cannot.be. |
bb340 | 61 63 74 69 76 65 20 77 69 74 68 6f 75 74 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 61 76 61 69 | active.without.at.least.one.avai |
bb360 | 6c 61 62 6c 65 20 6c 69 6e 6b 2c 20 73 65 74 74 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 | lable.link,.setting.this.option. |
bb380 | 74 6f 20 30 20 6f 72 20 74 6f 20 31 20 68 61 73 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 | to.0.or.to.1.has.the.exact.same. |
bb3a0 | 65 66 66 65 63 74 2e 00 42 65 63 61 75 73 65 20 65 78 69 73 74 69 6e 67 20 73 65 73 73 69 6f 6e | effect..Because.existing.session |
bb3c0 | 73 20 64 6f 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 66 61 69 6c 20 6f 76 65 72 | s.do.not.automatically.fail.over |
bb3e0 | 20 74 6f 20 61 20 6e 65 77 20 70 61 74 68 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 74 61 62 6c | .to.a.new.path,.the.session.tabl |
bb400 | 65 20 63 61 6e 20 62 65 20 66 6c 75 73 68 65 64 20 6f 6e 20 65 61 63 68 20 63 6f 6e 6e 65 63 74 | e.can.be.flushed.on.each.connect |
bb420 | 69 6f 6e 20 73 74 61 74 65 20 63 68 61 6e 67 65 3a 00 42 65 66 6f 72 65 20 65 6e 61 62 6c 69 6e | ion.state.change:.Before.enablin |
bb440 | 67 20 61 6e 79 20 68 61 72 64 77 61 72 65 20 73 65 67 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 66 6c | g.any.hardware.segmentation.offl |
bb460 | 6f 61 64 20 61 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 6f 66 74 77 61 72 65 20 6f 66 66 | oad.a.corresponding.software.off |
bb480 | 6c 6f 61 64 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 47 53 4f 2e 20 4f 74 68 65 72 77 69 | load.is.required.in.GSO..Otherwi |
bb4a0 | 73 65 20 69 74 20 62 65 63 6f 6d 65 73 20 70 6f 73 73 69 62 6c 65 20 66 6f 72 20 61 20 66 72 61 | se.it.becomes.possible.for.a.fra |
bb4c0 | 6d 65 20 74 6f 20 62 65 20 72 65 2d 72 6f 75 74 65 64 20 62 65 74 77 65 65 6e 20 64 65 76 69 63 | me.to.be.re-routed.between.devic |
bb4e0 | 65 73 20 61 6e 64 20 65 6e 64 20 75 70 20 62 65 69 6e 67 20 75 6e 61 62 6c 65 20 74 6f 20 62 65 | es.and.end.up.being.unable.to.be |
bb500 | 20 74 72 61 6e 73 6d 69 74 74 65 64 2e 00 42 65 66 6f 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c | .transmitted..Before.you.are.abl |
bb520 | 65 20 74 6f 20 61 70 70 6c 79 20 61 20 72 75 6c 65 2d 73 65 74 20 74 6f 20 61 20 7a 6f 6e 65 20 | e.to.apply.a.rule-set.to.a.zone. |
bb540 | 79 6f 75 20 68 61 76 65 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 7a 6f 6e 65 73 20 66 69 72 | you.have.to.create.the.zones.fir |
bb560 | 73 74 2e 00 42 65 6c 6f 77 20 61 72 65 20 61 20 6c 69 73 74 20 6f 66 20 72 65 63 6f 72 64 20 74 | st..Below.are.a.list.of.record.t |
bb580 | 79 70 65 73 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | ypes.available.to.be.configured. |
bb5a0 | 77 69 74 68 69 6e 20 56 79 4f 53 2e 20 53 6f 6d 65 20 72 65 63 6f 72 64 73 20 73 75 70 70 6f 72 | within.VyOS..Some.records.suppor |
bb5c0 | 74 20 73 70 65 63 69 61 6c 20 60 3c 6e 61 6d 65 3e 60 20 6b 65 79 77 6f 72 64 73 3a 00 42 65 6c | t.special.`<name>`.keywords:.Bel |
bb5e0 | 6f 77 20 66 6c 6f 77 2d 63 68 61 72 74 20 63 6f 75 6c 64 20 62 65 20 61 20 71 75 69 63 6b 20 72 | ow.flow-chart.could.be.a.quick.r |
bb600 | 65 66 65 72 65 6e 63 65 20 66 6f 72 20 74 68 65 20 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 63 6f | eference.for.the.close-action.co |
bb620 | 6d 62 69 6e 61 74 69 6f 6e 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 68 6f 77 20 74 68 65 20 70 | mbination.depending.on.how.the.p |
bb640 | 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 42 65 6c 6f 77 20 69 73 20 61 6e 20 65 | eer.is.configured..Below.is.an.e |
bb660 | 78 61 6d 70 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4c 4e 53 3a 00 42 65 73 74 20 | xample.to.configure.a.LNS:.Best. |
bb680 | 65 66 66 6f 72 74 20 74 72 61 66 66 69 63 2c 20 64 65 66 61 75 6c 74 00 42 65 74 77 65 65 6e 20 | effort.traffic,.default.Between. |
bb6a0 | 63 6f 6d 70 75 74 65 72 73 2c 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 | computers,.the.most.common.confi |
bb6c0 | 67 75 72 61 74 69 6f 6e 20 75 73 65 64 20 77 61 73 20 22 38 4e 31 22 3a 20 65 69 67 68 74 20 62 | guration.used.was."8N1":.eight.b |
bb6e0 | 69 74 20 63 68 61 72 61 63 74 65 72 73 2c 20 77 69 74 68 20 6f 6e 65 20 73 74 61 72 74 20 62 69 | it.characters,.with.one.start.bi |
bb700 | 74 2c 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 2c 20 61 6e 64 20 6e 6f 20 70 61 72 69 74 79 20 62 | t,.one.stop.bit,.and.no.parity.b |
bb720 | 69 74 2e 20 54 68 75 73 20 31 30 20 42 61 75 64 20 74 69 6d 65 73 20 61 72 65 20 75 73 65 64 20 | it..Thus.10.Baud.times.are.used. |
bb740 | 74 6f 20 73 65 6e 64 20 61 20 73 69 6e 67 6c 65 20 63 68 61 72 61 63 74 65 72 2c 20 61 6e 64 20 | to.send.a.single.character,.and. |
bb760 | 73 6f 20 64 69 76 69 64 69 6e 67 20 74 68 65 20 73 69 67 6e 61 6c 6c 69 6e 67 20 62 69 74 2d 72 | so.dividing.the.signalling.bit-r |
bb780 | 61 74 65 20 62 79 20 74 65 6e 20 72 65 73 75 6c 74 73 20 69 6e 20 74 68 65 20 6f 76 65 72 61 6c | ate.by.ten.results.in.the.overal |
bb7a0 | 6c 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 73 70 65 65 64 20 69 6e 20 63 68 61 72 61 63 74 65 | l.transmission.speed.in.characte |
bb7c0 | 72 73 20 70 65 72 20 73 65 63 6f 6e 64 2e 20 54 68 69 73 20 69 73 20 61 6c 73 6f 20 74 68 65 20 | rs.per.second..This.is.also.the. |
bb7e0 | 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 20 69 66 20 6e 6f 6e 65 20 6f 66 20 74 68 6f 73 65 | default.setting.if.none.of.those |
bb800 | 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 64 65 66 69 6e 65 64 2e 00 42 69 64 69 72 65 63 74 69 6f | .options.are.defined..Bidirectio |
bb820 | 6e 61 6c 20 4e 41 54 00 42 69 6e 61 72 79 20 76 61 6c 75 65 00 42 69 6e 64 20 63 6f 6e 74 61 69 | nal.NAT.Binary.value.Bind.contai |
bb840 | 6e 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 67 69 76 65 6e 20 56 52 46 20 69 6e 73 74 61 | ner.network.to.a.given.VRF.insta |
bb860 | 6e 63 65 2e 00 42 69 6e 64 20 6c 69 73 74 65 6e 65 72 20 74 6f 20 73 70 65 63 69 66 69 63 20 69 | nce..Bind.listener.to.specific.i |
bb880 | 6e 74 65 72 66 61 63 65 2f 61 64 64 72 65 73 73 2c 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 | nterface/address,.mandatory.for. |
bb8a0 | 49 50 76 36 00 42 69 6e 64 73 20 65 74 68 31 2e 32 34 31 20 61 6e 64 20 76 78 6c 61 6e 32 34 31 | IPv6.Binds.eth1.241.and.vxlan241 |
bb8c0 | 20 74 6f 20 65 61 63 68 20 6f 74 68 65 72 20 62 79 20 6d 61 6b 69 6e 67 20 74 68 65 6d 20 62 6f | .to.each.other.by.making.them.bo |
bb8e0 | 74 68 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6f 66 20 74 68 65 20 73 61 6d 65 | th.member.interfaces.of.the.same |
bb900 | 20 62 72 69 64 67 65 2e 00 42 6c 61 63 6b 68 6f 6c 65 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 | .bridge..Blackhole.Block.source. |
bb920 | 49 50 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 53 75 62 73 65 71 75 65 6e 74 20 62 6c 6f 63 6b 73 | IP.in.seconds..Subsequent.blocks |
bb940 | 20 69 6e 63 72 65 61 73 65 20 62 79 20 61 20 66 61 63 74 6f 72 20 6f 66 20 31 2e 35 20 54 68 65 | .increase.by.a.factor.of.1.5.The |
bb960 | 20 64 65 66 61 75 6c 74 20 69 73 20 31 32 30 2e 00 42 6c 6f 63 6b 20 73 6f 75 72 63 65 20 49 50 | .default.is.120..Block.source.IP |
bb980 | 20 77 68 65 6e 20 74 68 65 69 72 20 63 75 6d 75 6c 61 74 69 76 65 20 61 74 74 61 63 6b 20 73 63 | .when.their.cumulative.attack.sc |
bb9a0 | 6f 72 65 20 65 78 63 65 65 64 73 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 68 65 20 64 65 66 61 75 | ore.exceeds.threshold..The.defau |
bb9c0 | 6c 74 20 69 73 20 33 30 2e 00 42 6c 6f 63 6b 69 6e 67 20 63 61 6c 6c 20 77 69 74 68 20 6e 6f 20 | lt.is.30..Blocking.call.with.no. |
bb9e0 | 74 69 6d 65 6f 75 74 2e 20 53 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 75 6e 72 65 | timeout..System.will.become.unre |
bba00 | 73 70 6f 6e 73 69 76 65 20 69 66 20 73 63 72 69 70 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 74 75 | sponsive.if.script.does.not.retu |
bba20 | 72 6e 21 00 42 6f 61 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 | rn!.Boarder.Gateway.Protocol.(BG |
bba40 | 50 29 20 6f 72 69 67 69 6e 20 63 6f 64 65 20 74 6f 20 6d 61 74 63 68 2e 00 42 6f 6e 64 20 2f 20 | P).origin.code.to.match..Bond./. |
bba60 | 4c 69 6e 6b 20 41 67 67 72 65 67 61 74 69 6f 6e 00 42 6f 6e 64 20 6f 70 74 69 6f 6e 73 00 42 6f | Link.Aggregation.Bond.options.Bo |
bba80 | 6f 74 20 69 6d 61 67 65 20 6c 65 6e 67 74 68 20 69 6e 20 35 31 32 2d 6f 63 74 65 74 20 62 6c 6f | ot.image.length.in.512-octet.blo |
bbaa0 | 63 6b 73 00 42 6f 6f 74 73 74 72 61 70 20 66 69 6c 65 20 6e 61 6d 65 00 42 6f 74 68 20 49 50 76 | cks.Bootstrap.file.name.Both.IPv |
bbac0 | 34 20 61 6e 64 20 49 50 76 36 20 6d 75 6c 74 69 63 61 73 74 20 69 73 20 70 6f 73 73 69 62 6c 65 | 4.and.IPv6.multicast.is.possible |
bbae0 | 2e 00 42 6f 74 68 20 6c 6f 63 61 6c 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 61 6e 64 20 72 65 | ..Both.local.administered.and.re |
bbb00 | 6d 6f 74 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 | mote.administered.:abbr:`RADIUS. |
bbb20 | 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 | (Remote.Authentication.Dial-In.U |
bbb40 | 73 65 72 20 53 65 72 76 69 63 65 29 60 20 61 63 63 6f 75 6e 74 73 20 61 72 65 20 73 75 70 70 6f | ser.Service)`.accounts.are.suppo |
bbb60 | 72 74 65 64 2e 00 42 6f 74 68 20 72 65 70 6c 69 65 73 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 | rted..Both.replies.and.requests. |
bbb80 | 74 79 70 65 20 67 72 61 74 75 69 74 6f 75 73 20 61 72 70 20 77 69 6c 6c 20 74 72 69 67 67 65 72 | type.gratuitous.arp.will.trigger |
bbba0 | 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 20 74 6f 20 62 65 20 75 70 64 61 74 65 64 2c 20 69 66 | .the.ARP.table.to.be.updated,.if |
bbbc0 | 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6f 6e 2e 00 42 72 61 6e 63 68 20 31 27 73 20 | .this.setting.is.on..Branch.1's. |
bbbe0 | 72 6f 75 74 65 72 20 6d 69 67 68 74 20 68 61 76 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | router.might.have.the.following. |
bbc00 | 6c 69 6e 65 73 3a 00 42 72 69 64 67 65 00 42 72 69 64 67 65 20 46 69 72 65 77 61 6c 6c 20 43 6f | lines:.Bridge.Bridge.Firewall.Co |
bbc20 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 42 72 69 64 67 65 20 4f 70 74 69 6f 6e 73 00 42 72 69 64 67 | nfiguration.Bridge.Options.Bridg |
bbc40 | 65 20 52 75 6c 65 73 00 42 72 69 64 67 65 20 61 6e 73 77 65 72 73 20 6f 6e 20 49 50 20 61 64 64 | e.Rules.Bridge.answers.on.IP.add |
bbc60 | 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 61 6e 64 20 32 30 30 31 3a 64 62 38 3a 3a | ress.192.0.2.1/24.and.2001:db8:: |
bbc80 | 66 66 66 66 2f 36 34 00 42 72 69 64 67 65 20 6d 61 78 69 6d 75 6d 20 61 67 69 6e 67 20 60 3c 74 | ffff/64.Bridge.maximum.aging.`<t |
bbca0 | 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 32 30 29 2e 00 | ime>`.in.seconds.(default:.20).. |
bbcc0 | 42 72 69 64 67 65 3a 00 42 75 72 73 74 20 63 6f 75 6e 74 00 42 75 73 69 6e 65 73 73 20 55 73 65 | Bridge:.Burst.count.Business.Use |
bbce0 | 72 73 00 42 75 74 20 62 65 66 6f 72 65 20 6c 65 61 72 6e 69 6e 67 20 74 6f 20 63 6f 6e 66 69 67 | rs.But.before.learning.to.config |
bbd00 | 75 72 65 20 79 6f 75 72 20 70 6f 6c 69 63 79 2c 20 77 65 20 77 69 6c 6c 20 77 61 72 6e 20 79 6f | ure.your.policy,.we.will.warn.yo |
bbd20 | 75 20 61 62 6f 75 74 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 | u.about.the.different.units.you. |
bbd40 | 63 61 6e 20 75 73 65 20 61 6e 64 20 61 6c 73 6f 20 73 68 6f 77 20 79 6f 75 20 77 68 61 74 20 2a | can.use.and.also.show.you.what.* |
bbd60 | 63 6c 61 73 73 65 73 2a 20 61 72 65 20 61 6e 64 20 68 6f 77 20 74 68 65 79 20 77 6f 72 6b 2c 20 | classes*.are.and.how.they.work,. |
bbd80 | 61 73 20 73 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 72 65 71 75 69 72 65 20 79 6f 75 | as.some.policies.may.require.you |
bbda0 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 6d 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 | .to.configure.them..By.default.V |
bbdc0 | 52 52 50 20 75 73 65 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 | RRP.uses.multicast.packets..If.y |
bbde0 | 6f 75 72 20 6e 65 74 77 6f 72 6b 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 6d 75 6c | our.network.does.not.support.mul |
bbe00 | 74 69 63 61 73 74 20 66 6f 72 20 77 68 61 74 65 76 65 72 20 72 65 61 73 6f 6e 2c 20 79 6f 75 20 | ticast.for.whatever.reason,.you. |
bbe20 | 63 61 6e 20 6d 61 6b 65 20 56 52 52 50 20 75 73 65 20 75 6e 69 63 61 73 74 20 63 6f 6d 6d 75 6e | can.make.VRRP.use.unicast.commun |
bbe40 | 69 63 61 74 69 6f 6e 20 69 6e 73 74 65 61 64 2e 00 42 79 20 64 65 66 61 75 6c 74 20 56 52 52 50 | ication.instead..By.default.VRRP |
bbe60 | 20 75 73 65 73 20 70 72 65 65 6d 70 74 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c | .uses.preemption..You.can.disabl |
bbe80 | 65 20 69 74 20 77 69 74 68 20 74 68 65 20 22 6e 6f 2d 70 72 65 65 6d 70 74 22 20 6f 70 74 69 6f | e.it.with.the."no-preempt".optio |
bbea0 | 6e 3a 00 42 79 20 64 65 66 61 75 6c 74 20 60 73 74 72 69 63 74 2d 6c 73 61 2d 63 68 65 63 6b 69 | n:.By.default.`strict-lsa-checki |
bbec0 | 6e 67 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 6e 20 74 68 65 20 68 65 6c 70 65 | ng`.is.configured.then.the.helpe |
bbee0 | 72 20 77 69 6c 6c 20 61 62 6f 72 74 20 74 68 65 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 | r.will.abort.the.Graceful.Restar |
bbf00 | 74 20 77 68 65 6e 20 61 20 4c 53 41 20 63 68 61 6e 67 65 20 6f 63 63 75 72 73 20 77 68 69 63 68 | t.when.a.LSA.change.occurs.which |
bbf20 | 20 61 66 66 65 63 74 73 20 74 68 65 20 72 65 73 74 61 72 74 69 6e 67 20 72 6f 75 74 65 72 2e 00 | .affects.the.restarting.router.. |
bbf40 | 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 20 73 63 6f 70 65 20 6f 66 20 74 68 65 20 70 6f 72 74 | By.default.the.scope.of.the.port |
bbf60 | 20 62 69 6e 64 69 6e 67 73 20 66 6f 72 20 75 6e 62 6f 75 6e 64 20 73 6f 63 6b 65 74 73 20 69 73 | .bindings.for.unbound.sockets.is |
bbf80 | 20 6c 69 6d 69 74 65 64 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 2e 20 54 68 61 | .limited.to.the.default.VRF..Tha |
bbfa0 | 74 20 69 73 2c 20 69 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 6d 61 74 63 68 65 64 20 62 79 20 | t.is,.it.will.not.be.matched.by. |
bbfc0 | 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 | packets.arriving.on.interfaces.e |
bbfe0 | 6e 73 6c 61 76 65 64 20 74 6f 20 61 20 56 52 46 20 61 6e 64 20 70 72 6f 63 65 73 73 65 73 20 6d | nslaved.to.a.VRF.and.processes.m |
bc000 | 61 79 20 62 69 6e 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 70 6f 72 74 20 69 66 20 74 68 65 79 | ay.bind.to.the.same.port.if.they |
bc020 | 20 62 69 6e 64 20 74 6f 20 61 20 56 52 46 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 46 52 52 20 | .bind.to.a.VRF..By.default,.FRR. |
bc040 | 77 69 6c 6c 20 62 72 69 6e 67 20 75 70 20 70 65 65 72 69 6e 67 20 77 69 74 68 20 6d 69 6e 69 6d | will.bring.up.peering.with.minim |
bc060 | 61 6c 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 74 68 65 20 62 6f 74 | al.common.capability.for.the.bot |
bc080 | 68 20 73 69 64 65 73 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6c 6f 63 | h.sides..For.example,.if.the.loc |
bc0a0 | 61 6c 20 72 6f 75 74 65 72 20 68 61 73 20 75 6e 69 63 61 73 74 20 61 6e 64 20 6d 75 6c 74 69 63 | al.router.has.unicast.and.multic |
bc0c0 | 61 73 74 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 74 68 65 20 72 65 6d 6f 74 65 20 | ast.capabilities.and.the.remote. |
bc0e0 | 72 6f 75 74 65 72 20 6f 6e 6c 79 20 68 61 73 20 75 6e 69 63 61 73 74 20 63 61 70 61 62 69 6c 69 | router.only.has.unicast.capabili |
bc100 | 74 79 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 65 73 74 61 62 6c 69 | ty.the.local.router.will.establi |
bc120 | 73 68 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 75 6e 69 63 61 73 74 20 6f | sh.the.connection.with.unicast.o |
bc140 | 6e 6c 79 20 63 61 70 61 62 69 6c 69 74 79 2e 20 57 68 65 6e 20 74 68 65 72 65 20 61 72 65 20 6e | nly.capability..When.there.are.n |
bc160 | 6f 20 63 6f 6d 6d 6f 6e 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c 20 46 52 52 20 73 65 6e 64 73 | o.common.capabilities,.FRR.sends |
bc180 | 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 65 72 72 6f 72 20 61 6e | .Unsupported.Capability.error.an |
bc1a0 | 64 20 74 68 65 6e 20 72 65 73 65 74 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 42 79 | d.then.resets.the.connection..By |
bc1c0 | 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 | .default,.VyOS.does.not.advertis |
bc1e0 | 65 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 28 30 2e 30 2e 30 2e 30 2f 30 29 20 65 76 | e.a.default.route.(0.0.0.0/0).ev |
bc200 | 65 6e 20 69 66 20 69 74 20 69 73 20 69 6e 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 57 68 | en.if.it.is.in.routing.table..Wh |
bc220 | 65 6e 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 64 65 66 61 75 6c 74 20 | en.you.want.to.announce.default. |
bc240 | 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 65 65 72 2c 20 75 73 65 20 74 68 69 73 20 63 6f 6d | routes.to.the.peer,.use.this.com |
bc260 | 6d 61 6e 64 2e 20 55 73 69 6e 67 20 6f 70 74 69 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 20 3a 63 | mand..Using.optional.argument.:c |
bc280 | 66 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 20 79 6f 75 20 63 61 6e 20 69 6e 6a 65 63 74 | fgcmd:`route-map`.you.can.inject |
bc2a0 | 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 74 6f 20 67 69 76 65 6e 20 6e 65 69 67 | .the.default.route.to.given.neig |
bc2c0 | 68 62 6f 72 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 63 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 74 | hbor.only.if.the.conditions.in.t |
bc2e0 | 68 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 20 6d 65 74 2e 00 42 79 20 64 65 66 61 75 6c 74 | he.route.map.are.met..By.default |
bc300 | 2c 20 61 20 6e 65 77 20 74 6f 6b 65 6e 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 65 76 65 72 79 | ,.a.new.token.is.generated.every |
bc320 | 20 33 30 20 73 65 63 6f 6e 64 73 20 62 79 20 74 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 6c 69 63 | .30.seconds.by.the.mobile.applic |
bc340 | 61 74 69 6f 6e 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 65 6e 73 61 74 65 20 66 6f | ation..In.order.to.compensate.fo |
bc360 | 72 20 70 6f 73 73 69 62 6c 65 20 74 69 6d 65 2d 73 6b 65 77 20 62 65 74 77 65 65 6e 20 74 68 65 | r.possible.time-skew.between.the |
bc380 | 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 2c 20 61 6e 20 65 78 74 72 61 | .client.and.the.server,.an.extra |
bc3a0 | 20 74 6f 6b 65 6e 20 62 65 66 6f 72 65 20 61 6e 64 20 61 66 74 65 72 20 74 68 65 20 63 75 72 72 | .token.before.and.after.the.curr |
bc3c0 | 65 6e 74 20 74 69 6d 65 20 69 73 20 61 6c 6c 6f 77 65 64 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 | ent.time.is.allowed..This.allows |
bc3e0 | 20 66 6f 72 20 61 20 74 69 6d 65 20 73 6b 65 77 20 6f 66 20 75 70 20 74 6f 20 33 30 20 73 65 63 | .for.a.time.skew.of.up.to.30.sec |
bc400 | 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 | onds.between.authentication.serv |
bc420 | 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 64 64 63 6c 69 | er.and.client..By.default,.ddcli |
bc440 | 65 6e 74 5f 20 77 69 6c 6c 20 75 70 64 61 74 65 20 61 20 64 79 6e 61 6d 69 63 20 64 6e 73 20 72 | ent_.will.update.a.dynamic.dns.r |
bc460 | 65 63 6f 72 64 20 75 73 69 6e 67 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 64 69 72 65 63 | ecord.using.the.IP.address.direc |
bc480 | 74 6c 79 20 61 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 49 | tly.attached.to.the.interface..I |
bc4a0 | 66 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 20 69 73 20 62 65 68 69 6e 64 20 4e | f.your.VyOS.instance.is.behind.N |
bc4c0 | 41 54 2c 20 79 6f 75 72 20 72 65 63 6f 72 64 20 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 | AT,.your.record.will.be.updated. |
bc4e0 | 74 6f 20 70 6f 69 6e 74 20 74 6f 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 49 50 2e 00 42 79 | to.point.to.your.internal.IP..By |
bc500 | 20 64 65 66 61 75 6c 74 2c 20 65 6e 61 62 6c 69 6e 67 20 52 50 4b 49 20 64 6f 65 73 20 6e 6f 74 | .default,.enabling.RPKI.does.not |
bc520 | 20 63 68 61 6e 67 65 20 62 65 73 74 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 49 6e 20 | .change.best.path.selection..In. |
bc540 | 70 61 72 74 69 63 75 6c 61 72 2c 20 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 20 77 69 6c | particular,.invalid.prefixes.wil |
bc560 | 6c 20 73 74 69 6c 6c 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 64 75 72 69 6e 67 20 62 65 73 | l.still.be.considered.during.bes |
bc580 | 74 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 20 72 | t.path.selection..However,.the.r |
bc5a0 | 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 69 67 6e 6f 72 | outer.can.be.configured.to.ignor |
bc5c0 | 65 20 61 6c 6c 20 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 65 73 2e 00 42 79 20 64 65 66 61 75 | e.all.invalid.prefixes..By.defau |
bc5e0 | 6c 74 2c 20 69 74 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 70 6c 61 6e 6e 65 64 20 61 6e 64 | lt,.it.supports.both.planned.and |
bc600 | 20 75 6e 70 6c 61 6e 6e 65 64 20 6f 75 74 61 67 65 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 | .unplanned.outages..By.default,. |
bc620 | 6c 6f 63 61 6c 6c 79 20 61 64 76 65 72 74 69 73 65 64 20 70 72 65 66 69 78 65 73 20 75 73 65 20 | locally.advertised.prefixes.use. |
bc640 | 74 68 65 20 69 6d 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c 20 74 6f 20 65 6e 63 6f 64 | the.implicit-null.label.to.encod |
bc660 | 65 20 69 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e 4c 52 49 2e 00 42 79 20 64 65 66 61 75 | e.in.the.outgoing.NLRI..By.defau |
bc680 | 6c 74 2c 20 6e 67 69 6e 78 20 65 78 70 6f 73 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 20 | lt,.nginx.exposes.the.local.API. |
bc6a0 | 6f 6e 20 61 6c 6c 20 76 69 72 74 75 61 6c 20 73 65 72 76 65 72 73 2e 20 55 73 65 20 74 68 69 73 | on.all.virtual.servers..Use.this |
bc6c0 | 20 74 6f 20 72 65 73 74 72 69 63 74 20 6e 67 69 6e 78 20 74 6f 20 6f 6e 65 20 6f 72 20 6d 6f 72 | .to.restrict.nginx.to.one.or.mor |
bc6e0 | 65 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 72 65 63 | e.virtual.hosts..By.default,.rec |
bc700 | 6f 72 64 65 64 20 66 6c 6f 77 73 20 77 69 6c 6c 20 62 65 20 73 61 76 65 64 20 69 6e 74 65 72 6e | orded.flows.will.be.saved.intern |
bc720 | 61 6c 6c 79 20 61 6e 64 20 63 61 6e 20 62 65 20 6c 69 73 74 65 64 20 77 69 74 68 20 74 68 65 20 | ally.and.can.be.listed.with.the. |
bc740 | 43 4c 49 20 63 6f 6d 6d 61 6e 64 2e 20 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 75 73 69 | CLI.command..You.may.disable.usi |
bc760 | 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 77 69 74 | ng.the.local.in-memory.table.wit |
bc780 | 68 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 42 | h.the.command:.By.default,.the.B |
bc7a0 | 47 50 20 70 72 65 66 69 78 20 69 73 20 61 64 76 65 72 74 69 73 65 64 20 65 76 65 6e 20 69 66 20 | GP.prefix.is.advertised.even.if. |
bc7c0 | 69 74 27 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 | it's.not.present.in.the.routing. |
bc7e0 | 74 61 62 6c 65 2e 20 54 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 64 69 66 66 65 72 73 20 66 72 | table..This.behaviour.differs.fr |
bc800 | 6f 6d 20 74 68 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 73 6f 6d 65 20 76 65 | om.the.implementation.of.some.ve |
bc820 | 6e 64 6f 72 73 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 69 73 20 62 72 69 64 67 69 6e 67 | ndors..By.default,.this.bridging |
bc840 | 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 42 79 20 64 65 66 61 75 6c 74 2c 20 77 68 65 6e 20 56 79 | .is.allowed..By.default,.when.Vy |
bc860 | 4f 53 20 72 65 63 65 69 76 65 73 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 | OS.receives.an.ICMP.echo.request |
bc880 | 20 70 61 63 6b 65 74 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 69 74 73 65 6c 66 2c 20 69 74 20 | .packet.destined.for.itself,.it. |
bc8a0 | 77 69 6c 6c 20 61 6e 73 77 65 72 20 77 69 74 68 20 61 6e 20 49 43 4d 50 20 65 63 68 6f 20 72 65 | will.answer.with.an.ICMP.echo.re |
bc8c0 | 70 6c 79 2c 20 75 6e 6c 65 73 73 20 79 6f 75 20 61 76 6f 69 64 20 69 74 20 74 68 72 6f 75 67 68 | ply,.unless.you.avoid.it.through |
bc8e0 | 20 69 74 73 20 66 69 72 65 77 61 6c 6c 2e 00 42 79 20 75 73 69 6e 67 20 50 73 65 75 64 6f 2d 45 | .its.firewall..By.using.Pseudo-E |
bc900 | 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 65 72 65 20 77 69 6c 6c 20 62 65 | thernet.interfaces.there.will.be |
bc920 | 20 6c 65 73 73 20 73 79 73 74 65 6d 20 6f 76 65 72 68 65 61 64 20 63 6f 6d 70 61 72 65 64 20 74 | .less.system.overhead.compared.t |
bc940 | 6f 20 72 75 6e 6e 69 6e 67 20 61 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 62 72 69 64 67 69 6e 67 | o.running.a.traditional.bridging |
bc960 | 20 61 70 70 72 6f 61 63 68 2e 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 | .approach..Pseudo-Ethernet.inter |
bc980 | 66 61 63 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 77 6f 72 6b 61 72 | faces.can.also.be.used.to.workar |
bc9a0 | 6f 75 6e 64 20 74 68 65 20 67 65 6e 65 72 61 6c 20 6c 69 6d 69 74 20 6f 66 20 34 30 39 36 20 76 | ound.the.general.limit.of.4096.v |
bc9c0 | 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 20 70 65 72 20 70 68 79 73 69 63 61 6c | irtual.LANs.(VLANs).per.physical |
bc9e0 | 20 45 74 68 65 72 6e 65 74 20 70 6f 72 74 2c 20 73 69 6e 63 65 20 74 68 61 74 20 6c 69 6d 69 74 | .Ethernet.port,.since.that.limit |
bca00 | 20 69 73 20 77 69 74 68 20 72 65 73 70 65 63 74 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 4d 41 43 | .is.with.respect.to.a.single.MAC |
bca20 | 20 61 64 64 72 65 73 73 2e 00 42 79 70 61 73 73 69 6e 67 20 74 68 65 20 77 65 62 70 72 6f 78 79 | .address..Bypassing.the.webproxy |
bca40 | 00 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 00 43 41 4b 45 | .CA.(Certificate.Authority).CAKE |
bca60 | 00 43 52 49 54 49 43 2f 45 43 50 00 43 61 6c 6c 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 65 2d 6d | .CRITIC/ECP.Call.another.route-m |
bca80 | 61 70 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 2e 00 43 61 70 61 62 69 6c 69 74 79 20 4e | ap.policy.on.match..Capability.N |
bcaa0 | 65 67 6f 74 69 61 74 69 6f 6e 00 43 65 72 74 61 69 6e 20 76 65 6e 64 6f 72 73 20 75 73 65 20 62 | egotiation.Certain.vendors.use.b |
bcac0 | 72 6f 61 64 63 61 73 74 73 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 69 72 20 65 71 75 69 | roadcasts.to.identify.their.equi |
bcae0 | 70 6d 65 6e 74 20 77 69 74 68 69 6e 20 6f 6e 65 20 65 74 68 65 72 6e 65 74 20 73 65 67 6d 65 6e | pment.within.one.ethernet.segmen |
bcb00 | 74 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 69 66 20 79 6f 75 20 73 70 6c 69 74 20 79 6f | t..Unfortunately.if.you.split.yo |
bcb20 | 75 72 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 20 79 | ur.network.with.multiple.VLANs.y |
bcb40 | 6f 75 20 6c 6f 6f 73 65 20 74 68 65 20 61 62 69 6c 69 74 79 20 6f 66 20 69 64 65 6e 74 69 66 79 | ou.loose.the.ability.of.identify |
bcb60 | 69 6e 67 20 79 6f 75 72 20 65 71 75 69 70 6d 65 6e 74 2e 00 43 65 72 74 69 66 69 63 61 74 65 20 | ing.your.equipment..Certificate. |
bcb80 | 41 75 74 68 6f 72 69 74 79 20 28 43 41 29 00 43 65 72 74 69 66 69 63 61 74 65 20 72 65 76 6f 63 | Authority.(CA).Certificate.revoc |
bcba0 | 61 74 69 6f 6e 20 6c 69 73 74 20 69 6e 20 50 45 4d 20 66 6f 72 6d 61 74 2e 00 43 65 72 74 69 66 | ation.list.in.PEM.format..Certif |
bcbc0 | 69 63 61 74 65 73 00 43 68 61 6e 67 65 20 73 79 73 74 65 6d 20 6b 65 79 62 6f 61 72 64 20 6c 61 | icates.Change.system.keyboard.la |
bcbe0 | 79 6f 75 74 20 74 6f 20 67 69 76 65 6e 20 6c 61 6e 67 75 61 67 65 2e 00 43 68 61 6e 67 65 20 74 | yout.to.given.language..Change.t |
bcc00 | 68 65 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 73 65 74 74 | he.default-action.with.this.sett |
bcc20 | 69 6e 67 2e 00 43 68 61 6e 67 65 73 20 69 6e 20 42 47 50 20 70 6f 6c 69 63 69 65 73 20 72 65 71 | ing..Changes.in.BGP.policies.req |
bcc40 | 75 69 72 65 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 62 65 20 63 6c 65 61 72 | uire.the.BGP.session.to.be.clear |
bcc60 | 65 64 2e 20 43 6c 65 61 72 69 6e 67 20 68 61 73 20 61 20 6c 61 72 67 65 20 6e 65 67 61 74 69 76 | ed..Clearing.has.a.large.negativ |
bcc80 | 65 20 69 6d 70 61 63 74 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 | e.impact.on.network.operations.. |
bcca0 | 53 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 6c 65 73 20 79 6f 75 | Soft.reconfiguration.enables.you |
bccc0 | 20 74 6f 20 67 65 6e 65 72 61 74 65 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 66 72 6f | .to.generate.inbound.updates.fro |
bcce0 | 6d 20 61 20 6e 65 69 67 68 62 6f 72 2c 20 63 68 61 6e 67 65 20 61 6e 64 20 61 63 74 69 76 61 74 | m.a.neighbor,.change.and.activat |
bcd00 | 65 20 42 47 50 20 70 6f 6c 69 63 69 65 73 20 77 69 74 68 6f 75 74 20 63 6c 65 61 72 69 6e 67 20 | e.BGP.policies.without.clearing. |
bcd20 | 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 2e 00 43 68 61 6e 67 65 73 20 74 6f 20 74 68 65 20 | the.BGP.session..Changes.to.the. |
bcd40 | 4e 41 54 20 73 79 73 74 65 6d 20 6f 6e 6c 79 20 61 66 66 65 63 74 20 6e 65 77 6c 79 20 65 73 74 | NAT.system.only.affect.newly.est |
bcd60 | 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 20 41 6c 72 65 61 64 79 20 65 73 | ablished.connections..Already.es |
bcd80 | 74 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 6e 6f 74 20 61 66 | tablished.connections.are.not.af |
bcda0 | 66 65 63 74 65 64 2e 00 43 68 61 6e 67 69 6e 67 20 74 68 65 20 6b 65 79 6d 61 70 20 6f 6e 6c 79 | fected..Changing.the.keymap.only |
bcdc0 | 20 68 61 73 20 61 6e 20 65 66 66 65 63 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 63 6f 6e | .has.an.effect.on.the.system.con |
bcde0 | 73 6f 6c 65 2c 20 75 73 69 6e 67 20 53 53 48 20 6f 72 20 53 65 72 69 61 6c 20 72 65 6d 6f 74 65 | sole,.using.SSH.or.Serial.remote |
bce00 | 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 69 73 20 6e 6f 74 20 61 66 66 | .access.to.the.device.is.not.aff |
bce20 | 65 63 74 65 64 20 61 73 20 74 68 65 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 68 65 72 | ected.as.the.keyboard.layout.her |
bce40 | 65 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 79 6f 75 72 20 61 63 63 65 73 73 20 73 79 73 | e.corresponds.to.your.access.sys |
bce60 | 74 65 6d 2e 00 43 68 61 6e 6e 65 6c 20 6e 75 6d 62 65 72 20 28 49 45 45 45 20 38 30 32 2e 31 31 | tem..Channel.number.(IEEE.802.11 |
bce80 | 29 2c 20 66 6f 72 20 32 2e 34 47 68 7a 20 28 38 30 32 2e 31 31 20 62 2f 67 2f 6e 29 20 63 68 61 | ),.for.2.4Ghz.(802.11.b/g/n).cha |
bcea0 | 6e 6e 65 6c 73 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 2d 31 34 2e 20 4f 6e 20 35 47 68 7a 20 28 | nnels.range.from.1-14..On.5Ghz.( |
bcec0 | 38 30 32 2e 31 31 20 61 2f 68 2f 6a 2f 6e 2f 61 63 29 20 63 68 61 6e 6e 65 6c 73 20 61 76 61 69 | 802.11.a/h/j/n/ac).channels.avai |
bcee0 | 6c 61 62 6c 65 20 61 72 65 20 30 2c 20 33 34 20 74 6f 20 31 37 33 00 43 68 65 63 6b 20 69 66 20 | lable.are.0,.34.to.173.Check.if. |
bcf00 | 74 68 65 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 64 65 76 69 63 65 20 69 73 20 75 70 20 61 6e 64 | the.Intel...QAT.device.is.up.and |
bcf20 | 20 72 65 61 64 79 20 74 6f 20 64 6f 20 74 68 65 20 6a 6f 62 2e 00 43 68 65 63 6b 20 73 74 61 74 | .ready.to.do.the.job..Check.stat |
bcf40 | 75 73 00 43 68 65 63 6b 20 74 68 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 | us.Check.the.many.parameters.ava |
bcf60 | 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 60 73 68 6f 77 20 69 70 76 36 20 72 6f 75 74 65 60 | ilable.for.the.`show.ipv6.route` |
bcf80 | 20 63 6f 6d 6d 61 6e 64 3a 00 43 68 65 63 6b 3a 00 43 68 65 63 6b 69 6e 67 20 63 6f 6e 6e 65 63 | .command:.Check:.Checking.connec |
bcfa0 | 74 69 6f 6e 73 00 43 68 65 63 6b 73 00 43 68 6f 6f 73 65 20 79 6f 75 72 20 60 60 64 69 72 65 63 | tions.Checks.Choose.your.``direc |
bcfc0 | 74 6f 72 79 60 60 20 6c 6f 63 61 74 69 6f 6e 20 63 61 72 65 66 75 6c 6c 79 20 6f 72 20 79 6f 75 | tory``.location.carefully.or.you |
bcfe0 | 20 77 69 6c 6c 20 6c 6f 6f 73 65 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 69 6d 61 67 65 | .will.loose.the.content.on.image |
bd000 | 20 75 70 67 72 61 64 65 73 2e 20 41 6e 79 20 64 69 72 65 63 74 6f 72 79 20 75 6e 64 65 72 20 60 | .upgrades..Any.directory.under.` |
bd020 | 60 2f 63 6f 6e 66 69 67 60 60 20 69 73 20 73 61 76 65 20 61 74 20 74 68 69 73 20 77 69 6c 6c 20 | `/config``.is.save.at.this.will. |
bd040 | 62 65 20 6d 69 67 72 61 74 65 64 2e 00 43 69 73 63 6f 20 43 61 74 61 6c 79 73 74 00 43 69 73 63 | be.migrated..Cisco.Catalyst.Cisc |
bd060 | 6f 20 61 6e 64 20 41 6c 6c 69 65 64 20 54 65 6c 65 73 79 6e 20 63 61 6c 6c 20 69 74 20 50 72 69 | o.and.Allied.Telesyn.call.it.Pri |
bd080 | 76 61 74 65 20 56 4c 41 4e 00 43 6c 61 6d 70 20 4d 53 53 20 66 6f 72 20 61 20 73 70 65 63 69 66 | vate.VLAN.Clamp.MSS.for.a.specif |
bd0a0 | 69 63 20 49 50 00 43 6c 61 73 73 20 74 72 65 61 74 6d 65 6e 74 00 43 6c 61 73 73 65 73 00 43 6c | ic.IP.Class.treatment.Classes.Cl |
bd0c0 | 61 73 73 6c 65 73 73 20 73 74 61 74 69 63 20 72 6f 75 74 65 00 43 6c 65 61 72 20 61 6c 6c 20 42 | assless.static.route.Clear.all.B |
bd0e0 | 47 50 20 65 78 74 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 43 6c 69 65 6e 74 00 43 6c 69 65 6e 74 | GP.extcommunities..Client.Client |
bd100 | 20 41 64 64 72 65 73 73 20 50 6f 6f 6c 73 00 43 6c 69 65 6e 74 20 41 75 74 68 65 6e 74 69 63 61 | .Address.Pools.Client.Authentica |
bd120 | 74 69 6f 6e 00 43 6c 69 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6c 69 65 6e 74 | tion.Client.Configuration.Client |
bd140 | 20 49 50 20 50 6f 6f 6c 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 00 43 6c 69 65 6e 74 | .IP.Pool.Advanced.Options.Client |
bd160 | 20 49 50 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 65 20 70 72 6f 76 69 64 65 64 20 66 | .IP.addresses.will.be.provided.f |
bd180 | 72 6f 6d 20 70 6f 6f 6c 20 60 31 39 32 2e 30 2e 32 2e 30 2f 32 35 60 00 43 6c 69 65 6e 74 20 53 | rom.pool.`192.0.2.0/25`.Client.S |
bd1a0 | 69 64 65 00 43 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6c 69 65 6e 74 20 | ide.Client.configuration.Client. |
bd1c0 | 64 6f 6d 61 69 6e 20 6e 61 6d 65 00 43 6c 69 65 6e 74 20 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 | domain.name.Client.domain.search |
bd1e0 | 00 43 6c 69 65 6e 74 20 69 73 6f 6c 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f | .Client.isolation.can.be.used.to |
bd200 | 20 70 72 65 76 65 6e 74 20 6c 6f 77 2d 6c 65 76 65 6c 20 62 72 69 64 67 69 6e 67 20 6f 66 20 66 | .prevent.low-level.bridging.of.f |
bd220 | 72 61 6d 65 73 20 62 65 74 77 65 65 6e 20 61 73 73 6f 63 69 61 74 65 64 20 73 74 61 74 69 6f 6e | rames.between.associated.station |
bd240 | 73 20 69 6e 20 74 68 65 20 42 53 53 2e 00 43 6c 69 65 6e 74 3a 00 43 6c 69 65 6e 74 73 20 61 72 | s.in.the.BSS..Client:.Clients.ar |
bd260 | 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 74 68 65 20 43 4e 20 66 69 65 6c 64 20 6f 66 20 | e.identified.by.the.CN.field.of. |
bd280 | 74 68 65 69 72 20 78 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 2c 20 69 6e 20 74 68 69 | their.x.509.certificates,.in.thi |
bd2a0 | 73 20 65 78 61 6d 70 6c 65 20 74 68 65 20 43 4e 20 69 73 20 60 60 63 6c 69 65 6e 74 30 60 60 3a | s.example.the.CN.is.``client0``: |
bd2c0 | 00 43 6c 69 65 6e 74 73 20 72 65 63 65 69 76 69 6e 67 20 61 64 76 65 72 74 69 73 65 20 6d 65 73 | .Clients.receiving.advertise.mes |
bd2e0 | 73 61 67 65 73 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 65 72 73 20 63 68 6f 6f | sages.from.multiple.servers.choo |
bd300 | 73 65 20 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 | se.the.server.with.the.highest.p |
bd320 | 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 20 72 61 6e 67 65 20 66 6f 72 20 74 | reference.value..The.range.for.t |
bd340 | 68 69 73 20 76 61 6c 75 65 20 69 73 20 60 60 30 2e 2e 2e 32 35 35 60 60 2e 00 43 6c 6f 63 6b 20 | his.value.is.``0...255``..Clock. |
bd360 | 64 61 65 6d 6f 6e 00 43 6f 6d 6d 61 6e 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 63 61 6e 20 62 65 | daemon.Command.completion.can.be |
bd380 | 20 75 73 65 64 20 74 6f 20 6c 69 73 74 20 61 76 61 69 6c 61 62 6c 65 20 74 69 6d 65 20 7a 6f 6e | .used.to.list.available.time.zon |
bd3a0 | 65 73 2e 20 54 68 65 20 61 64 6a 75 73 74 6d 65 6e 74 20 66 6f 72 20 64 61 79 6c 69 67 68 74 20 | es..The.adjustment.for.daylight. |
bd3c0 | 74 69 6d 65 20 77 69 6c 6c 20 74 61 6b 65 20 70 6c 61 63 65 20 61 75 74 6f 6d 61 74 69 63 61 6c | time.will.take.place.automatical |
bd3e0 | 6c 79 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 74 69 6d 65 20 6f 66 20 79 65 61 72 2e 00 43 6f | ly.based.on.the.time.of.year..Co |
bd400 | 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 61 62 6c 69 6e 67 20 61 20 72 75 6c 65 20 62 75 74 20 6b | mmand.for.disabling.a.rule.but.k |
bd420 | 65 65 70 20 69 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 43 6f 6d | eep.it.in.the.configuration..Com |
bd440 | 6d 61 6e 64 20 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 62 65 20 65 78 74 65 6e 64 65 64 | mand.should.probably.be.extended |
bd460 | 20 74 6f 20 6c 69 73 74 20 61 6c 73 6f 20 74 68 65 20 72 65 61 6c 20 69 6e 74 65 72 66 61 63 65 | .to.list.also.the.real.interface |
bd480 | 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 69 73 20 6f 6e 65 20 56 52 46 20 74 6f 20 67 65 | s.assigned.to.this.one.VRF.to.ge |
bd4a0 | 74 20 61 20 62 65 74 74 65 72 20 6f 76 65 72 76 69 65 77 2e 00 43 6f 6d 6d 61 6e 64 20 75 73 65 | t.a.better.overview..Command.use |
bd4c0 | 64 20 74 6f 20 75 70 64 61 74 65 20 47 65 6f 49 50 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 66 | d.to.update.GeoIP.database.and.f |
bd4e0 | 69 72 65 77 61 6c 6c 20 73 65 74 73 2e 00 43 6f 6d 6d 61 6e 64 73 00 43 6f 6d 6d 6f 6e 20 63 6f | irewall.sets..Commands.Common.co |
bd500 | 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 76 61 6c 69 64 20 66 6f 72 20 62 6f 74 68 20 70 72 69 6d | nfiguration,.valid.for.both.prim |
bd520 | 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 6e 6f 64 65 2e 00 43 6f 6d 6d 6f 6e 20 69 | ary.and.secondary.node..Common.i |
bd540 | 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6d 6d 6f 6e 20 70 61 | nterface.configuration.Common.pa |
bd560 | 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 | rameters.Confederation.Configura |
bd580 | 74 69 6f 6e 00 43 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 e2 80 93 20 45 6e 63 72 79 70 74 | tion.Confidentiality.....Encrypt |
bd5a0 | 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 70 72 65 76 65 6e 74 20 73 6e 6f 6f 70 69 | ion.of.packets.to.prevent.snoopi |
bd5c0 | 6e 67 20 62 79 20 61 6e 20 75 6e 61 75 74 68 6f 72 69 7a 65 64 20 73 6f 75 72 63 65 2e 00 43 6f | ng.by.an.unauthorized.source..Co |
bd5e0 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 45 78 61 6d 70 6c | nfiguration.Configuration.Exampl |
bd600 | 65 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 45 78 61 6d 70 6c 65 73 00 43 6f 6e 66 69 67 75 | e.Configuration.Examples.Configu |
bd620 | 72 61 74 69 6f 6e 20 47 75 69 64 65 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 4f 70 74 69 6f | ration.Guide.Configuration.Optio |
bd640 | 6e 73 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 | ns.Configuration.commands.covere |
bd660 | 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | d.in.this.section:.Configuration |
bd680 | 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 74 68 65 20 70 72 69 76 61 74 65 20 61 6e 64 20 70 75 | .commands.for.the.private.and.pu |
bd6a0 | 62 6c 69 63 20 6b 65 79 20 77 69 6c 6c 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 | blic.key.will.be.displayed.on.th |
bd6c0 | 65 20 73 63 72 65 65 6e 20 77 68 69 63 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 73 65 74 20 6f | e.screen.which.needs.to.be.set.o |
bd6e0 | 6e 20 74 68 65 20 72 6f 75 74 65 72 20 66 69 72 73 74 2e 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d | n.the.router.first..Note.the.com |
bd700 | 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b | mand.with.the.public.key.(set.pk |
bd720 | 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 2d 4c 45 46 54 20 70 75 62 6c 69 63 20 6b 65 79 | i.key-pair.ipsec-LEFT.public.key |
bd740 | 20 27 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e 2e 2e 27 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 | .'MIIBIjANBgkqh...')..Then.do.th |
bd760 | 65 20 73 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 3a 00 43 | e.same.on.the.opposite.router:.C |
bd780 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 77 69 6c 6c 20 64 69 73 70 6c | onfiguration.commands.will.displ |
bd7a0 | 61 79 2e 20 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 74 68 20 74 68 65 20 70 75 | ay..Note.the.command.with.the.pu |
bd7c0 | 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 70 73 65 63 | blic.key.(set.pki.key-pair.ipsec |
bd7e0 | 2d 4c 45 46 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 2e | -LEFT.public.key.'MIIBIjANBgkqh. |
bd800 | 2e 2e 27 29 2e 20 54 68 65 6e 20 64 6f 20 74 68 65 20 73 61 6d 65 20 6f 6e 20 74 68 65 20 6f 70 | ..')..Then.do.the.same.on.the.op |
bd820 | 70 6f 73 69 74 65 20 72 6f 75 74 65 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 61 | posite.router:.Configuration.exa |
bd840 | 6d 70 6c 65 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 73 65 20 65 78 | mple:.Configuration.for.these.ex |
bd860 | 70 6f 72 74 65 64 20 72 6f 75 74 65 73 20 6d 75 73 74 2c 20 61 74 20 61 20 6d 69 6e 69 6d 75 6d | ported.routes.must,.at.a.minimum |
bd880 | 2c 20 73 70 65 63 69 66 79 20 74 68 65 73 65 20 74 77 6f 20 70 61 72 61 6d 65 74 65 72 73 2e 00 | ,.specify.these.two.parameters.. |
bd8a0 | 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 73 | Configuration.of.:ref:`routing-s |
bd8c0 | 74 61 74 69 63 60 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 48 | tatic`.Configuration.of.a.DHCP.H |
bd8e0 | 41 20 70 61 69 72 3a 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 | A.pair:.Configuration.of.a.DHCP. |
bd900 | 66 61 69 6c 6f 76 65 72 20 70 61 69 72 00 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 72 | failover.pair.Configuration.of.r |
bd920 | 6f 75 74 65 20 6c 65 61 6b 69 6e 67 20 62 65 74 77 65 65 6e 20 61 20 75 6e 69 63 61 73 74 20 56 | oute.leaking.between.a.unicast.V |
bd940 | 52 46 20 52 49 42 20 61 6e 64 20 74 68 65 20 56 50 4e 20 53 41 46 49 20 52 49 42 20 6f 66 20 74 | RF.RIB.and.the.VPN.SAFI.RIB.of.t |
bd960 | 68 65 20 64 65 66 61 75 6c 74 20 56 52 46 20 69 73 20 61 63 63 6f 6d 70 6c 69 73 68 65 64 20 76 | he.default.VRF.is.accomplished.v |
bd980 | 69 61 20 63 6f 6d 6d 61 6e 64 73 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 61 20 | ia.commands.in.the.context.of.a. |
bd9a0 | 56 52 46 20 61 64 64 72 65 73 73 2d 66 61 6d 69 6c 79 2e 00 43 6f 6e 66 69 67 75 72 65 00 43 6f | VRF.address-family..Configure.Co |
bd9c0 | 6e 66 69 67 75 72 65 20 3a 61 62 62 72 3a 60 4d 54 55 20 28 4d 61 78 69 6d 75 6d 20 54 72 61 6e | nfigure.:abbr:`MTU.(Maximum.Tran |
bd9e0 | 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 29 60 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 | smission.Unit)`.on.given.`<inter |
bda00 | 66 61 63 65 3e 60 2e 20 49 74 20 69 73 20 74 68 65 20 73 69 7a 65 20 28 69 6e 20 62 79 74 65 73 | face>`..It.is.the.size.(in.bytes |
bda20 | 29 20 6f 66 20 74 68 65 20 6c 61 72 67 65 73 74 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 20 | ).of.the.largest.ethernet.frame. |
bda40 | 73 65 6e 74 20 6f 6e 20 74 68 69 73 20 6c 69 6e 6b 2e 00 43 6f 6e 66 69 67 75 72 65 20 42 46 44 | sent.on.this.link..Configure.BFD |
bda60 | 00 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 20 60 3c 72 65 63 6f 72 64 3e 60 20 77 68 69 63 68 20 | .Configure.DNS.`<record>`.which. |
bda80 | 73 68 6f 75 6c 64 20 62 65 20 75 70 64 61 74 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 73 | should.be.updated..This.can.be.s |
bdaa0 | 65 74 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 44 4e 53 | et.multiple.times..Configure.DNS |
bdac0 | 20 60 3c 7a 6f 6e 65 3e 60 20 74 6f 20 62 65 20 75 70 64 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 | .`<zone>`.to.be.updated..Configu |
bdae0 | 72 65 20 47 45 4e 45 56 45 20 74 75 6e 6e 65 6c 20 66 61 72 20 65 6e 64 2f 72 65 6d 6f 74 65 20 | re.GENEVE.tunnel.far.end/remote. |
bdb00 | 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 72 61 63 65 | tunnel.endpoint..Configure.Grace |
bdb20 | 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 33 36 32 33 60 20 68 65 6c 70 65 72 20 73 | ful.Restart.:rfc:`3623`.helper.s |
bdb40 | 75 70 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 68 65 6c 70 65 72 20 73 75 70 70 6f | upport..By.default,.helper.suppo |
bdb60 | 72 74 20 69 73 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 | rt.is.disabled.for.all.neighbour |
bdb80 | 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 20 65 6e 61 62 6c 65 73 2f 64 69 73 61 62 6c 65 73 20 | s..This.config.enables/disables. |
bdba0 | 68 65 6c 70 65 72 20 73 75 70 70 6f 72 74 20 6f 6e 20 74 68 69 73 20 72 6f 75 74 65 72 20 66 6f | helper.support.on.this.router.fo |
bdbc0 | 72 20 61 6c 6c 20 6e 65 69 67 68 62 6f 75 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 47 72 61 63 | r.all.neighbours..Configure.Grac |
bdbe0 | 65 66 75 6c 20 52 65 73 74 61 72 74 20 3a 72 66 63 3a 60 33 36 32 33 60 20 72 65 73 74 61 72 74 | eful.Restart.:rfc:`3623`.restart |
bdc00 | 69 6e 67 20 73 75 70 70 6f 72 74 2e 20 57 68 65 6e 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 64 | ing.support..When.enabled,.the.d |
bdc20 | 65 66 61 75 6c 74 20 67 72 61 63 65 20 70 65 72 69 6f 64 20 69 73 20 31 32 30 20 73 65 63 6f 6e | efault.grace.period.is.120.secon |
bdc40 | 64 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 43 4d 50 20 74 68 72 65 73 68 6f 6c 64 20 70 61 72 | ds..Configure.ICMP.threshold.par |
bdc60 | 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 | ameters..Configure.IP.address.of |
bdc80 | 20 74 68 65 20 44 48 43 50 20 60 3c 73 65 72 76 65 72 3e 60 20 77 68 69 63 68 20 77 69 6c 6c 20 | .the.DHCP.`<server>`.which.will. |
bdca0 | 68 61 6e 64 6c 65 20 74 68 65 20 72 65 6c 61 79 65 64 20 70 61 63 6b 65 74 73 2e 00 43 6f 6e 66 | handle.the.relayed.packets..Conf |
bdcc0 | 69 67 75 72 65 20 52 41 44 49 55 53 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 69 74 73 20 | igure.RADIUS.`<server>`.and.its. |
bdce0 | 72 65 71 75 69 72 65 64 20 70 6f 72 74 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | required.port.for.authentication |
bdd00 | 20 72 65 71 75 65 73 74 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 52 41 44 49 55 53 20 60 3c 73 65 | .requests..Configure.RADIUS.`<se |
bdd20 | 72 76 65 72 3e 60 20 61 6e 64 20 69 74 73 20 72 65 71 75 69 72 65 64 20 73 68 61 72 65 64 20 60 | rver>`.and.its.required.shared.` |
bdd40 | 3c 73 65 63 72 65 74 3e 60 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 77 69 74 68 | <secret>`.for.communicating.with |
bdd60 | 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 43 6f 6e 66 69 67 75 72 65 20 53 4e | .the.RADIUS.server..Configure.SN |
bdd80 | 41 54 20 72 75 6c 65 20 28 34 30 29 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 | AT.rule.(40).to.only.NAT.packets |
bdda0 | 20 77 69 74 68 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 31 | .with.a.destination.address.of.1 |
bddc0 | 39 32 2e 30 2e 32 2e 31 2e 00 43 6f 6e 66 69 67 75 72 65 20 54 43 50 20 74 68 72 65 73 68 6f 6c | 92.0.2.1..Configure.TCP.threshol |
bdde0 | 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 67 75 72 65 20 55 44 50 20 74 68 72 65 73 | d.parameters.Configure.UDP.thres |
bde00 | 68 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 6d 65 73 73 | hold.parameters.Configure.`<mess |
bde20 | 61 67 65 3e 60 20 77 68 69 63 68 20 69 73 20 73 68 6f 77 6e 20 61 66 74 65 72 20 75 73 65 72 20 | age>`.which.is.shown.after.user. |
bde40 | 68 61 73 20 6c 6f 67 67 65 64 20 69 6e 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 2e 00 43 6f 6e | has.logged.in.to.the.system..Con |
bde60 | 66 69 67 75 72 65 20 60 3c 6d 65 73 73 61 67 65 3e 60 20 77 68 69 63 68 20 69 73 20 73 68 6f 77 | figure.`<message>`.which.is.show |
bde80 | 6e 20 64 75 72 69 6e 67 20 53 53 48 20 63 6f 6e 6e 65 63 74 20 61 6e 64 20 62 65 66 6f 72 65 20 | n.during.SSH.connect.and.before. |
bdea0 | 61 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 | a.user.is.logged.in..Configure.` |
bdec0 | 3c 70 61 73 73 77 6f 72 64 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 | <password>`.used.when.authentica |
bdee0 | 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 | ting.the.update.request.for.DynD |
bdf00 | 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 | NS.service.identified.by.`<servi |
bdf20 | 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 70 61 73 73 77 6f 72 64 3e | ce-name>`..Configure.`<password> |
bdf40 | 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 | `.used.when.authenticating.the.u |
bdf60 | 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 | pdate.request.for.DynDNS.service |
bdf80 | 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e 60 2e 00 43 6f 6e 66 | .identified.by.`<service>`..Conf |
bdfa0 | 69 67 75 72 65 20 60 3c 75 73 65 72 6e 61 6d 65 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 | igure.`<username>`.used.when.aut |
bdfc0 | 68 65 6e 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 | henticating.the.update.request.f |
bdfe0 | 6f 72 20 44 79 6e 44 4e 53 20 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 | or.DynDNS.service.identified.by. |
be000 | 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 60 3c 75 73 | `<service-name>`..Configure.`<us |
be020 | 65 72 6e 61 6d 65 3e 60 20 75 73 65 64 20 77 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e | ername>`.used.when.authenticatin |
be040 | 67 20 74 68 65 20 75 70 64 61 74 65 20 72 65 71 75 65 73 74 20 66 6f 72 20 44 79 6e 44 4e 53 20 | g.the.update.request.for.DynDNS. |
be060 | 73 65 72 76 69 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 3e | service.identified.by.`<service> |
be080 | 60 2e 20 46 6f 72 20 4e 61 6d 65 63 68 65 61 70 2c 20 73 65 74 20 74 68 65 20 3c 64 6f 6d 61 69 | `..For.Namecheap,.set.the.<domai |
be0a0 | 6e 3e 20 79 6f 75 20 77 69 73 68 20 74 6f 20 75 70 64 61 74 65 2e 00 43 6f 6e 66 69 67 75 72 65 | n>.you.wish.to.update..Configure |
be0c0 | 20 61 20 55 52 4c 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .a.URL.that.contains.information |
be0e0 | 20 61 62 6f 75 74 20 69 6d 61 67 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 46 6c 6f 77 | .about.images..Configure.a.sFlow |
be100 | 20 61 67 65 6e 74 20 61 64 64 72 65 73 73 2e 20 49 74 20 63 61 6e 20 62 65 20 49 50 76 34 20 6f | .agent.address..It.can.be.IPv4.o |
be120 | 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 79 6f 75 20 6d 75 73 74 20 73 65 74 | r.IPv6.address,.but.you.must.set |
be140 | 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 63 6f 6c 2c 20 77 68 69 63 68 20 69 73 20 75 73 65 | .the.same.protocol,.which.is.use |
be160 | 64 20 66 6f 72 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 20 61 64 64 72 65 73 73 65 73 2e | d.for.sFlow.collector.addresses. |
be180 | 20 42 79 20 64 65 66 61 75 6c 74 2c 20 75 73 69 6e 67 20 72 6f 75 74 65 72 2d 69 64 20 66 72 6f | .By.default,.using.router-id.fro |
be1a0 | 6d 20 42 47 50 20 6f 72 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 2c 20 6f 72 20 74 68 65 20 70 | m.BGP.or.OSPF.protocol,.or.the.p |
be1c0 | 72 69 6d 61 72 79 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 | rimary.IP.address.from.the.first |
be1e0 | 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 72 | .interface..Configure.a.static.r |
be200 | 6f 75 74 65 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 6e 67 20 67 61 74 65 77 61 79 20 | oute.for.<subnet>.using.gateway. |
be220 | 3c 61 64 64 72 65 73 73 3e 20 2c 20 75 73 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 | <address>.,.use.source.address.t |
be240 | 6f 20 69 6e 64 65 6e 74 69 66 79 20 74 68 65 20 70 65 65 72 20 77 68 65 6e 20 69 73 20 6d 75 6c | o.indentify.the.peer.when.is.mul |
be260 | 74 69 2d 68 6f 70 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 74 68 65 20 67 61 74 65 77 61 79 20 61 | ti-hop.session.and.the.gateway.a |
be280 | 64 64 72 65 73 73 20 61 73 20 42 46 44 20 70 65 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 | ddress.as.BFD.peer.destination.a |
be2a0 | 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 | ddress..Configure.a.static.route |
be2c0 | 20 66 6f 72 20 3c 73 75 62 6e 65 74 3e 20 75 73 69 6e 67 20 67 61 74 65 77 61 79 20 3c 61 64 64 | .for.<subnet>.using.gateway.<add |
be2e0 | 72 65 73 73 3e 20 61 6e 64 20 75 73 65 20 74 68 65 20 67 61 74 65 77 61 79 20 61 64 64 72 65 73 | ress>.and.use.the.gateway.addres |
be300 | 73 20 61 73 20 42 46 44 20 70 65 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 | s.as.BFD.peer.destination.addres |
be320 | 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 4e 65 74 46 6c 6f 77 20 | s..Configure.address.of.NetFlow. |
be340 | 63 6f 6c 6c 65 63 74 6f 72 2e 20 4e 65 74 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 60 3c 61 | collector..NetFlow.server.at.`<a |
be360 | 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 62 6f 74 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f | ddress>`.can.be.both.listening.o |
be380 | 6e 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 | n.an.IPv4.or.IPv6.address..Confi |
be3a0 | 67 75 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e | gure.address.of.sFlow.collector. |
be3c0 | 20 73 46 6c 6f 77 20 73 65 72 76 65 72 20 61 74 20 3c 61 64 64 72 65 73 73 3e 20 63 61 6e 20 62 | .sFlow.server.at.<address>.can.b |
be3e0 | 65 20 62 6f 74 68 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 61 6e 20 49 50 76 34 20 6f 72 20 49 | e.both.listening.on.an.IPv4.or.I |
be400 | 50 76 36 20 61 64 64 72 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 64 64 72 65 73 73 20 6f | Pv6.address..Configure.address.o |
be420 | 66 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 63 74 6f 72 2e 20 73 46 6c 6f 77 20 73 65 72 76 65 72 20 | f.sFlow.collector..sFlow.server. |
be440 | 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 6f 72 | at.`<address>`.can.be.an.IPv4.or |
be460 | 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 42 75 74 20 79 6f 75 20 63 61 6e 6e 6f 74 20 65 78 | .IPv6.address..But.you.cannot.ex |
be480 | 70 6f 72 74 20 74 6f 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 63 6f 6c 6c 65 | port.to.both.IPv4.and.IPv6.colle |
be4a0 | 63 74 6f 72 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 21 00 43 6f 6e 66 69 67 75 72 | ctors.at.the.same.time!.Configur |
be4c0 | 65 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 | e.agent.IP.address.associated.wi |
be4e0 | 74 68 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 67 67 | th.this.interface..Configure.agg |
be500 | 72 65 67 61 74 69 6f 6e 20 64 65 6c 61 79 20 74 69 6d 65 72 20 69 6e 74 65 72 76 61 6c 2e 00 43 | regation.delay.timer.interval..C |
be520 | 6f 6e 66 69 67 75 72 65 20 61 6c 65 72 74 20 73 63 72 69 70 74 20 74 68 61 74 20 77 69 6c 6c 20 | onfigure.alert.script.that.will. |
be540 | 62 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 61 6e 20 61 74 74 61 63 6b 20 69 73 20 64 65 | be.executed.when.an.attack.is.de |
be560 | 74 65 63 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 20 61 63 63 6f 75 6e 74 69 6e 67 20 | tected..Configure.an.accounting. |
be580 | 73 65 72 76 65 72 20 61 6e 64 20 65 6e 61 62 6c 65 20 61 63 63 6f 75 6e 74 69 6e 67 20 77 69 74 | server.and.enable.accounting.wit |
be5a0 | 68 3a 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 6e 61 62 6c 65 20 63 6f 6c 6c 65 63 74 69 | h:.Configure.and.enable.collecti |
be5c0 | 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 69 | on.of.flow.information.for.the.i |
be5e0 | 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 69 6e 74 65 72 66 61 63 | nterface.identified.by.<interfac |
be600 | 65 3e 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 6e 64 20 65 6e 61 62 6c 65 20 63 6f 6c 6c 65 63 74 | e>..Configure.and.enable.collect |
be620 | 69 6f 6e 20 6f 66 20 66 6c 6f 77 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 | ion.of.flow.information.for.the. |
be640 | 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 69 6e 74 65 72 66 | interface.identified.by.`<interf |
be660 | 61 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 61 75 74 6f 2d 63 68 65 63 6b 69 6e 67 20 66 | ace>`..Configure.auto-checking.f |
be680 | 6f 72 20 6e 65 77 20 69 6d 61 67 65 73 00 43 6f 6e 66 69 67 75 72 65 20 62 61 63 6b 65 6e 64 20 | or.new.images.Configure.backend. |
be6a0 | 60 3c 6e 61 6d 65 3e 60 20 6d 6f 64 65 20 54 43 50 20 6f 72 20 48 54 54 50 00 43 6f 6e 66 69 67 | `<name>`.mode.TCP.or.HTTP.Config |
be6c0 | 75 72 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 28 61 20 61 6e 64 20 62 29 20 66 6f 72 20 44 | ure.both.routers.(a.and.b).for.D |
be6e0 | 48 43 50 76 36 2d 50 44 20 76 69 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 3a 00 43 6f | HCPv6-PD.via.dummy.interface:.Co |
be700 | 6e 66 69 67 75 72 65 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 | nfigure.direction.for.processing |
be720 | 20 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 69 74 68 65 72 20 6f 6e 65 20 6f | .traffic..Configure.either.one.o |
be740 | 72 20 74 77 6f 20 73 74 6f 70 20 62 69 74 73 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 | r.two.stop.bits..This.defaults.t |
be760 | 6f 20 6f 6e 65 20 73 74 6f 70 20 62 69 74 73 20 69 66 20 6c 65 66 74 20 75 6e 63 6f 6e 66 69 67 | o.one.stop.bits.if.left.unconfig |
be780 | 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 65 69 74 68 65 72 20 73 65 76 65 6e 20 6f 72 20 | ured..Configure.either.seven.or. |
be7a0 | 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 | eight.data.bits..This.defaults.t |
be7c0 | 6f 20 65 69 67 68 74 20 64 61 74 61 20 62 69 74 73 20 69 66 20 6c 65 66 74 20 75 6e 63 6f 6e 66 | o.eight.data.bits.if.left.unconf |
be7e0 | 69 67 75 72 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 67 65 6e 65 72 61 6c 20 74 68 72 65 73 68 | igured..Configure.general.thresh |
be800 | 6f 6c 64 20 70 61 72 61 6d 65 74 65 72 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 68 6f 77 20 6c 6f | old.parameters..Configure.how.lo |
be820 | 6e 67 20 61 6e 20 49 50 20 28 61 74 74 61 63 6b 65 72 29 20 73 68 6f 75 6c 64 20 62 65 20 6b 65 | ng.an.IP.(attacker).should.be.ke |
be840 | 70 74 20 69 6e 20 62 6c 6f 63 6b 65 64 20 73 74 61 74 65 2e 20 44 65 66 61 75 6c 74 20 76 61 6c | pt.in.blocked.state..Default.val |
be860 | 75 65 20 69 73 20 31 39 30 30 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 64 69 76 69 64 75 61 6c | ue.is.1900..Configure.individual |
be880 | 20 62 72 69 64 67 65 20 70 6f 72 74 20 60 3c 70 72 69 6f 72 69 74 79 3e 60 2e 00 43 6f 6e 66 69 | .bridge.port.`<priority>`..Confi |
be8a0 | 67 75 72 65 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 77 69 74 | gure.interface.`<interface>`.wit |
be8c0 | 68 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 65 | h.one.or.more.interface.addresse |
be8e0 | 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 69 6e 74 65 72 66 61 63 65 2d 73 70 65 63 69 66 69 63 20 | s..Configure.interface-specific. |
be900 | 48 6f 73 74 2f 52 6f 75 74 65 72 20 62 65 68 61 76 69 6f 75 72 2e 20 49 66 20 73 65 74 2c 20 74 | Host/Router.behaviour..If.set,.t |
be920 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 73 77 69 74 63 68 20 74 6f 20 68 6f 73 74 | he.interface.will.switch.to.host |
be940 | 20 6d 6f 64 65 20 61 6e 64 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 6c 6c 20 62 | .mode.and.IPv6.forwarding.will.b |
be960 | 65 20 64 69 73 61 62 6c 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 43 6f | e.disabled.on.this.interface..Co |
be980 | 6e 66 69 67 75 72 65 20 6c 69 73 74 65 6e 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 6d 69 72 | nfigure.listen.interface.for.mir |
be9a0 | 72 6f 72 69 6e 67 20 74 72 61 66 66 69 63 2e 00 43 6f 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 20 | roring.traffic..Configure.local. |
be9c0 | 49 50 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 73 66 6c 6f 77 | IPv4.address.to.listen.for.sflow |
be9e0 | 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 77 20 53 4e 4d 50 20 75 73 65 72 20 6e 61 6d 65 64 20 | ..Configure.new.SNMP.user.named. |
bea00 | 22 76 79 6f 73 22 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 22 76 79 6f 73 31 32 33 34 35 36 | "vyos".with.password."vyos123456 |
bea20 | 37 38 22 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 64 72 65 73 73 | 78".Configure.next-hop.`<address |
bea40 | 3e 60 20 61 6e 64 20 60 3c 74 61 72 67 65 74 2d 61 64 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e | >`.and.`<target-address>`.for.an |
bea60 | 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 20 53 70 65 63 69 66 79 20 74 68 65 20 | .IPv4.static.route..Specify.the. |
bea80 | 74 61 72 67 65 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 6f 72 20 68 65 61 6c 74 68 20 63 | target.IPv4.address.for.health.c |
beaa0 | 68 65 63 6b 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 | hecking..Configure.next-hop.`<ad |
beac0 | 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 34 20 73 74 61 74 69 63 20 72 6f 75 74 65 | dress>`.for.an.IPv4.static.route |
beae0 | 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 | ..Multiple.static.routes.can.be. |
beb00 | 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 6e 65 78 74 2d 68 6f 70 20 60 3c 61 64 | created..Configure.next-hop.`<ad |
beb20 | 64 72 65 73 73 3e 60 20 66 6f 72 20 61 6e 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 | dress>`.for.an.IPv6.static.route |
beb40 | 2e 20 4d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 | ..Multiple.static.routes.can.be. |
beb60 | 63 72 65 61 74 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 72 | created..Configure.one.of.the.pr |
beb80 | 65 64 65 66 69 6e 65 64 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 70 72 6f 66 | edefined.system.performance.prof |
beba0 | 69 6c 65 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 61 74 74 72 | iles..Configure.one.or.more.attr |
bebc0 | 69 62 75 74 65 73 20 74 6f 20 74 68 65 20 67 69 76 65 6e 20 4e 54 50 20 73 65 72 76 65 72 2e 00 | ibutes.to.the.given.NTP.server.. |
bebe0 | 43 6f 6e 66 69 67 75 72 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 73 65 72 76 65 72 73 20 66 6f | Configure.one.or.more.servers.fo |
bec00 | 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 20 53 65 72 76 65 72 20 6e 61 6d 65 20 63 | r.synchronisation..Server.name.c |
bec20 | 61 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 3a 61 | an.be.either.an.IP.address.or.:a |
bec40 | 62 62 72 3a 60 46 51 44 4e 20 28 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 | bbr:`FQDN.(Fully.Qualified.Domai |
bec60 | 6e 20 4e 61 6d 65 29 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 6f 70 74 69 6f 6e 61 6c 20 54 54 4c | n.Name)`..Configure.optional.TTL |
bec80 | 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 72 65 73 6f 75 72 63 65 20 72 65 63 | .value.on.the.given.resource.rec |
beca0 | 6f 72 64 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 | ord..This.defaults.to.600.second |
becc0 | 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 | s..Configure.physical.interface. |
bece0 | 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 68 79 73 69 63 | duplex.setting..Configure.physic |
bed00 | 61 6c 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 73 65 74 74 69 6e 67 2e 00 43 6f 6e 66 | al.interface.speed.setting..Conf |
bed20 | 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 66 6f 72 20 60 69 6e 74 65 72 66 | igure.port.mirroring.for.`interf |
bed40 | 61 63 65 60 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 6f 70 79 20 74 68 | ace`.inbound.traffic.and.copy.th |
bed60 | 65 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d 6f 6e 69 74 6f 72 2d 69 6e 74 65 72 66 61 63 65 60 | e.traffic.to.`monitor-interface` |
bed80 | 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 66 6f 72 20 60 69 | .Configure.port.mirroring.for.`i |
beda0 | 6e 74 65 72 66 61 63 65 60 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 61 6e 64 20 63 | nterface`.outbound.traffic.and.c |
bedc0 | 6f 70 79 20 74 68 65 20 74 72 61 66 66 69 63 20 74 6f 20 60 6d 6f 6e 69 74 6f 72 2d 69 6e 74 65 | opy.the.traffic.to.`monitor-inte |
bede0 | 72 66 61 63 65 60 00 43 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 | rface`.Configure.port.number.of. |
bee00 | 72 65 6d 6f 74 65 20 56 58 4c 41 4e 20 65 6e 64 70 6f 69 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 | remote.VXLAN.endpoint..Configure |
bee20 | 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 66 6c 6f | .port.number.to.be.used.for.sflo |
bee40 | 77 20 63 6f 6e 65 63 74 69 6f 6e 2e 20 44 65 66 61 75 6c 74 20 70 6f 72 74 20 69 73 20 36 33 34 | w.conection..Default.port.is.634 |
bee60 | 33 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 | 3..Configure.protocol.used.for.c |
bee80 | 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 74 65 20 73 79 73 6c 6f 67 20 68 6f | ommunication.to.remote.syslog.ho |
beea0 | 73 74 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 55 44 50 20 6f 72 20 54 43 | st..This.can.be.either.UDP.or.TC |
beec0 | 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 70 72 6f 78 79 20 70 6f 72 74 20 69 66 20 69 74 20 64 6f | P..Configure.proxy.port.if.it.do |
beee0 | 65 73 20 6e 6f 74 20 6c 69 73 74 65 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 | es.not.listen.to.the.default.por |
bef00 | 74 20 38 30 2e 00 43 6f 6e 66 69 67 75 72 65 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 | t.80..Configure.requests.to.the. |
bef20 | 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 74 6f 20 75 73 65 20 53 53 4c 20 65 6e 63 72 79 70 | backend.server.to.use.SSL.encryp |
bef40 | 74 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 62 61 63 6b 65 6e 64 20 61 67 | tion.and.authenticate.backend.ag |
bef60 | 61 69 6e 73 74 20 3c 63 61 2d 63 65 72 74 69 66 69 63 61 74 65 3e 00 43 6f 6e 66 69 67 75 72 65 | ainst.<ca-certificate>.Configure |
bef80 | 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 | .requests.to.the.backend.server. |
befa0 | 74 6f 20 75 73 65 20 53 53 4c 20 65 6e 63 72 79 70 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 76 61 | to.use.SSL.encryption.without.va |
befc0 | 6c 69 64 61 74 69 6e 67 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 00 43 6f 6e 66 | lidating.server.certificate.Conf |
befe0 | 69 67 75 72 65 20 73 46 6c 6f 77 20 61 67 65 6e 74 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 | igure.sFlow.agent.IPv4.or.IPv6.a |
bf000 | 64 64 72 65 73 73 00 43 6f 6e 66 69 67 75 72 65 20 73 63 68 65 64 75 6c 65 20 63 6f 75 6e 74 65 | ddress.Configure.schedule.counte |
bf020 | 72 2d 70 6f 6c 6c 69 6e 67 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 33 | r-polling.in.seconds.(default:.3 |
bf040 | 30 29 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 6d 6f | 0).Configure.service.`<name>`.mo |
bf060 | 64 65 20 54 43 50 20 6f 72 20 48 54 54 50 00 43 6f 6e 66 69 67 75 72 65 20 73 65 72 76 69 63 65 | de.TCP.or.HTTP.Configure.service |
bf080 | 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 75 73 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 3c 6e 61 | .`<name>`.to.use.the.backend.<na |
bf0a0 | 6d 65 3e 00 43 6f 6e 66 69 67 75 72 65 20 73 65 73 73 69 6f 6e 20 74 69 6d 65 6f 75 74 20 61 66 | me>.Configure.session.timeout.af |
bf0c0 | 74 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 62 65 20 6c 6f 67 67 65 | ter.which.the.user.will.be.logge |
bf0e0 | 64 20 6f 75 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 73 79 73 74 65 6d 20 64 6f 6d 61 69 6e 20 6e | d.out..Configure.system.domain.n |
bf100 | 61 6d 65 2e 20 41 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e | ame..A.domain.name.must.start.an |
bf120 | 64 20 65 6e 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e | d.end.with.a.letter.or.digit,.an |
bf140 | 64 20 68 61 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e | d.have.as.interior.characters.on |
bf160 | 6c 79 20 6c 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e | ly.letters,.digits,.or.a.hyphen. |
bf180 | 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 41 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 | .Configure.the.A-side.router.for |
bf1a0 | 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a | .NPTv6.using.the.prefixes.above: |
bf1c0 | 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 42 2d 73 69 64 65 20 72 6f 75 74 65 72 20 66 6f 72 | .Configure.the.B-side.router.for |
bf1e0 | 20 4e 50 54 76 36 20 75 73 69 6e 67 20 74 68 65 20 70 72 65 66 69 78 65 73 20 61 62 6f 76 65 3a | .NPTv6.using.the.prefixes.above: |
bf200 | 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 44 4e 53 20 60 3c 73 65 72 76 65 72 3e 60 20 49 50 | .Configure.the.DNS.`<server>`.IP |
bf220 | 2f 46 51 44 4e 20 75 73 65 64 20 77 68 65 6e 20 75 70 64 61 74 69 6e 67 20 74 68 69 73 20 64 79 | /FQDN.used.when.updating.this.dy |
bf240 | 6e 61 6d 69 63 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | namic.assignment..Configure.the. |
bf260 | 49 50 76 34 20 6f 72 20 49 50 76 36 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 6f 66 20 74 | IPv4.or.IPv6.listen.address.of.t |
bf280 | 68 65 20 54 46 54 50 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 76 34 20 61 6e | he.TFTP.server..Multiple.IPv4.an |
bf2a0 | 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 67 69 76 65 6e 2e 20 54 | d.IPv6.addresses.can.be.given..T |
bf2c0 | 68 65 72 65 20 77 69 6c 6c 20 62 65 20 6f 6e 65 20 54 46 54 50 20 73 65 72 76 65 72 20 69 6e 73 | here.will.be.one.TFTP.server.ins |
bf2e0 | 74 61 6e 63 65 73 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 65 61 63 68 20 49 50 20 61 64 64 72 | tances.listening.on.each.IP.addr |
bf300 | 65 73 73 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 | ess..Configure.the.connection.tr |
bf320 | 61 63 6b 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 73 2e 20 | acking.protocol.helper.modules.. |
bf340 | 41 6c 6c 20 6d 6f 64 75 6c 65 73 20 61 72 65 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 75 6c | All.modules.are.enable.by.defaul |
bf360 | 74 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 73 63 72 65 74 65 20 70 6f 72 74 20 75 | t..Configure.the.discrete.port.u |
bf380 | 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 63 61 6e | nder.which.the.RADIUS.server.can |
bf3a0 | 20 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 64 69 73 63 72 | .be.reached..Configure.the.discr |
bf3c0 | 65 74 65 20 70 6f 72 74 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 54 41 43 41 43 53 20 | ete.port.under.which.the.TACACS. |
bf3e0 | 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 43 6f 6e 66 69 67 75 72 65 | server.can.be.reached..Configure |
bf400 | 20 74 68 65 20 6c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 72 65 76 65 72 73 65 2d 70 72 6f 78 | .the.load-balancing.reverse-prox |
bf420 | 79 20 73 65 72 76 69 63 65 20 66 6f 72 20 48 54 54 50 2e 00 43 6f 6e 66 69 67 75 72 65 20 74 72 | y.service.for.HTTP..Configure.tr |
bf440 | 61 66 66 69 63 20 63 61 70 74 75 72 65 20 6d 6f 64 65 2e 00 43 6f 6e 66 69 67 75 72 65 20 75 73 | affic.capture.mode..Configure.us |
bf460 | 65 72 20 64 65 66 69 6e 65 64 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 41 63 63 | er.defined.:abbr:`MAC.(Media.Acc |
bf480 | 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 65 73 73 20 6f 6e 20 67 69 76 65 6e 20 60 | ess.Control)`.address.on.given.` |
bf4a0 | 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 43 6f 6e 66 69 67 75 72 65 20 77 61 74 65 72 6d 61 72 | <interface>`..Configure.watermar |
bf4c0 | 6b 20 77 61 72 6e 69 6e 67 20 67 65 6e 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 6e 20 49 47 4d 50 | k.warning.generation.for.an.IGMP |
bf4e0 | 20 67 72 6f 75 70 20 6c 69 6d 69 74 2e 20 47 65 6e 65 72 61 74 65 73 20 77 61 72 6e 69 6e 67 20 | .group.limit..Generates.warning. |
bf500 | 6f 6e 63 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 6f 75 70 20 6c 69 6d 69 74 20 | once.the.configured.group.limit. |
bf520 | 69 73 20 72 65 61 63 68 65 64 20 77 68 69 6c 65 20 61 64 64 69 6e 67 20 6e 65 77 20 67 72 6f 75 | is.reached.while.adding.new.grou |
bf540 | 70 73 2e 00 43 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 60 3c 69 | ps..Configured.routing.table.`<i |
bf560 | 64 3e 60 20 69 73 20 75 73 65 64 20 62 79 20 56 52 46 20 60 3c 6e 61 6d 65 3e 60 2e 00 43 6f 6e | d>`.is.used.by.VRF.`<name>`..Con |
bf580 | 66 69 67 75 72 65 64 20 76 61 6c 75 65 00 43 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 42 47 50 | figured.value.Configures.the.BGP |
bf5a0 | 20 73 70 65 61 6b 65 72 20 73 6f 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 61 63 63 65 70 74 73 | .speaker.so.that.it.only.accepts |
bf5c0 | 20 69 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 2c 20 62 75 74 20 64 | .inbound.connections.from,.but.d |
bf5e0 | 6f 65 73 20 6e 6f 74 20 69 6e 69 74 69 61 74 65 20 6f 75 74 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 | oes.not.initiate.outbound.connec |
bf600 | 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e | tions.to.the.peer.or.peer.group. |
bf620 | 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 49 50 6f 45 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 | .Configuring.IPoE.Server.Configu |
bf640 | 72 69 6e 67 20 49 50 73 65 63 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 32 54 50 20 53 65 72 76 | ring.IPsec.Configuring.L2TP.Serv |
bf660 | 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b | er.Configuring.LNS.(L2TP.Network |
bf680 | 20 53 65 72 76 65 72 29 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 50 50 50 6f 45 20 53 65 72 76 65 | .Server).Configuring.PPPoE.Serve |
bf6a0 | 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 50 50 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 | r.Configuring.PPTP.Server.Config |
bf6c0 | 75 72 69 6e 67 20 52 41 44 49 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 00 43 6f 6e 66 69 67 75 72 | uring.RADIUS.accounting.Configur |
bf6e0 | 69 6e 67 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 43 6f 6e 66 69 67 | ing.RADIUS.authentication.Config |
bf700 | 75 72 69 6e 67 20 53 53 54 50 20 53 65 72 76 65 72 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 53 53 | uring.SSTP.Server.Configuring.SS |
bf720 | 54 50 20 63 6c 69 65 6e 74 00 43 6f 6e 66 69 67 75 72 69 6e 67 20 56 79 4f 53 20 74 6f 20 61 63 | TP.client.Configuring.VyOS.to.ac |
bf740 | 74 20 61 73 20 79 6f 75 72 20 49 50 53 65 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 | t.as.your.IPSec.access.concentra |
bf760 | 74 6f 72 20 69 73 20 6f 6e 65 20 74 68 69 6e 67 2c 20 62 75 74 20 79 6f 75 20 70 72 6f 62 61 62 | tor.is.one.thing,.but.you.probab |
bf780 | 6c 79 20 6e 65 65 64 20 74 6f 20 73 65 74 75 70 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 63 6f 6e | ly.need.to.setup.your.client.con |
bf7a0 | 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 73 6f 20 74 68 65 79 20 63 61 | necting.to.the.server.so.they.ca |
bf7c0 | 6e 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 49 50 53 65 63 20 67 61 74 65 77 61 79 2e 00 43 6f 6e | n.talk.to.the.IPSec.gateway..Con |
bf7e0 | 66 69 67 75 72 69 6e 67 20 61 20 6c 69 73 74 65 6e 2d 61 64 64 72 65 73 73 20 69 73 20 65 73 73 | figuring.a.listen-address.is.ess |
bf800 | 65 6e 74 69 61 6c 20 66 6f 72 20 74 68 65 20 73 65 72 76 69 63 65 20 74 6f 20 77 6f 72 6b 2e 00 | ential.for.the.service.to.work.. |
bf820 | 43 6f 6e 6e 65 63 74 2f 44 69 73 63 6f 6e 6e 65 63 74 00 43 6f 6e 6e 65 63 74 65 64 20 63 6c 69 | Connect/Disconnect.Connected.cli |
bf840 | 65 6e 74 20 73 68 6f 75 6c 64 20 75 73 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 73 20 74 68 | ent.should.use.`<address>`.as.th |
bf860 | 65 69 72 20 44 4e 53 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 63 63 | eir.DNS.server..This.command.acc |
bf880 | 65 70 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | epts.both.IPv4.and.IPv6.addresse |
bf8a0 | 73 2e 20 55 70 20 74 6f 20 74 77 6f 20 6e 61 6d 65 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 | s..Up.to.two.nameservers.can.be. |
bf8c0 | 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 49 50 76 34 2c 20 75 70 20 74 6f 20 74 68 72 65 65 | configured.for.IPv4,.up.to.three |
bf8e0 | 20 66 6f 72 20 49 50 76 36 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 50 | .for.IPv6..Connections.to.the.RP |
bf900 | 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 62 | KI.caching.server.can.not.only.b |
bf920 | 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 75 74 20 79 6f | e.established.by.HTTP/TLS.but.yo |
bf940 | 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 | u.can.also.rely.on.a.secure.SSH. |
bf960 | 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 6e 61 62 6c 65 | session.to.the.server..To.enable |
bf980 | 20 53 53 48 20 79 6f 75 20 66 69 72 73 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 79 6f | .SSH.you.first.need.to.create.yo |
bf9a0 | 75 72 73 65 6c 73 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 | ursels.an.SSH.client.keypair.usi |
bf9c0 | 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f | ng.``generate.ssh.client-key./co |
bf9e0 | 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f | nfig/auth/id_rsa_rpki``..Once.yo |
bfa00 | 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 | ur.key.is.created.you.can.setup. |
bfa20 | 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 | the.connection..Connections.to.t |
bfa40 | 68 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f | he.RPKI.caching.server.can.not.o |
bfa60 | 6e 6c 79 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 48 54 54 50 2f 54 4c 53 20 62 | nly.be.established.by.HTTP/TLS.b |
bfa80 | 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 | ut.you.can.also.rely.on.a.secure |
bfaa0 | 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 2e 20 54 6f 20 65 | .SSH.session.to.the.server..To.e |
bfac0 | 6e 61 62 6c 65 20 53 53 48 2c 20 66 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 | nable.SSH,.first.you.need.to.cre |
bfae0 | 61 74 65 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 69 6e 67 20 | ate.an.SSH.client.keypair.using. |
bfb00 | 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f 63 6f 6e 66 69 | ``generate.ssh.client-key./confi |
bfb20 | 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 79 6f 75 72 20 | g/auth/id_rsa_rpki``..Once.your. |
bfb40 | 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 70 20 74 68 65 | key.is.created.you.can.setup.the |
bfb60 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 | .connection..Connections.to.the. |
bfb80 | 52 50 4b 49 20 63 61 63 68 69 6e 67 20 73 65 72 76 65 72 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 | RPKI.caching.server.can.not.only |
bfba0 | 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 79 20 54 43 50 20 75 73 69 6e 67 20 74 68 65 | .be.established.by.TCP.using.the |
bfbc0 | 20 52 54 52 20 70 72 6f 74 6f 63 6f 6c 20 62 75 74 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 | .RTR.protocol.but.you.can.also.r |
bfbe0 | 65 6c 79 20 6f 6e 20 61 20 73 65 63 75 72 65 20 53 53 48 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 | ely.on.a.secure.SSH.session.to.t |
bfc00 | 68 65 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 70 72 6f 76 69 64 65 73 20 74 72 61 6e 73 70 6f | he.server..This.provides.transpo |
bfc20 | 72 74 20 69 6e 74 65 67 72 69 74 79 20 61 6e 64 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 | rt.integrity.and.confidentiality |
bfc40 | 20 61 6e 64 20 69 74 20 69 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 69 66 20 79 6f 75 72 20 76 | .and.it.is.a.good.idea.if.your.v |
bfc60 | 61 6c 69 64 61 74 69 6f 6e 20 73 6f 66 74 77 61 72 65 20 73 75 70 70 6f 72 74 73 20 69 74 2e 20 | alidation.software.supports.it.. |
bfc80 | 20 54 6f 20 65 6e 61 62 6c 65 20 53 53 48 2c 20 66 69 72 73 74 20 79 6f 75 20 6e 65 65 64 20 74 | .To.enable.SSH,.first.you.need.t |
bfca0 | 6f 20 63 72 65 61 74 65 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 | o.create.an.SSH.client.keypair.u |
bfcc0 | 73 69 6e 67 20 60 60 67 65 6e 65 72 61 74 65 20 73 73 68 20 63 6c 69 65 6e 74 2d 6b 65 79 20 2f | sing.``generate.ssh.client-key./ |
bfce0 | 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 5f 72 70 6b 69 60 60 2e 20 4f 6e 63 65 20 | config/auth/id_rsa_rpki``..Once. |
bfd00 | 79 6f 75 72 20 6b 65 79 20 69 73 20 63 72 65 61 74 65 64 20 79 6f 75 20 63 61 6e 20 73 65 74 75 | your.key.is.created.you.can.setu |
bfd20 | 70 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 43 6f 6e 6e 74 72 61 63 6b 00 43 6f 6e 6e | p.the.connection..Conntrack.Conn |
bfd40 | 74 72 61 63 6b 20 53 79 6e 63 00 43 6f 6e 6e 74 72 61 63 6b 20 53 79 6e 63 20 45 78 61 6d 70 6c | track.Sync.Conntrack.Sync.Exampl |
bfd60 | 65 00 43 6f 6e 6e 74 72 61 63 6b 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 00 43 6f 6e 6e 74 72 61 | e.Conntrack.ignore.rules.Conntra |
bfd80 | 63 6b 20 6c 6f 67 00 43 6f 6e 73 6f 6c 65 00 43 6f 6e 73 6f 6c 65 20 53 65 72 76 65 72 00 43 6f | ck.log.Console.Console.Server.Co |
bfda0 | 6e 73 74 72 61 69 6e 20 74 68 65 20 6d 65 6d 6f 72 79 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 | nstrain.the.memory.available.to. |
bfdc0 | 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 00 43 6f 6e 74 61 69 6e 65 72 00 43 6f 6e 74 61 69 6e | the.container..Container.Contain |
bfde0 | 65 72 20 4e 65 74 77 6f 72 6b 73 00 43 6f 6e 74 61 69 6e 65 72 20 52 65 67 69 73 74 72 79 00 43 | er.Networks.Container.Registry.C |
bfe00 | 6f 6e 74 72 61 63 6b 20 54 69 6d 65 6f 75 74 73 00 43 6f 6e 76 65 72 74 20 74 68 65 20 61 64 64 | ontrack.Timeouts.Convert.the.add |
bfe20 | 72 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 60 66 63 30 30 3a 3a 2f | ress.prefix.of.a.single.`fc00::/ |
bfe40 | 36 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 31 3a 3a 2f 36 34 60 00 43 6f 6e 76 65 | 64`.network.to.`fc01::/64`.Conve |
bfe60 | 72 74 20 74 68 65 20 61 64 64 72 65 73 73 20 70 72 65 66 69 78 20 6f 66 20 61 20 73 69 6e 67 6c | rt.the.address.prefix.of.a.singl |
bfe80 | 65 20 60 66 63 30 31 3a 3a 2f 36 34 60 20 6e 65 74 77 6f 72 6b 20 74 6f 20 60 66 63 30 30 3a 3a | e.`fc01::/64`.network.to.`fc00:: |
bfea0 | 2f 36 34 60 00 43 6f 70 79 20 74 68 65 20 6b 65 79 2c 20 61 73 20 69 74 20 69 73 20 6e 6f 74 20 | /64`.Copy.the.key,.as.it.is.not. |
bfec0 | 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 66 69 6c 65 73 79 73 74 65 6d 2e 20 | stored.on.the.local.filesystem.. |
bfee0 | 42 65 63 61 75 73 65 20 69 74 20 69 73 20 61 20 73 79 6d 6d 65 74 72 69 63 20 6b 65 79 2c 20 6f | Because.it.is.a.symmetric.key,.o |
bff00 | 6e 6c 79 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 70 65 65 72 20 73 68 6f 75 6c 64 20 68 61 76 | nly.you.and.your.peer.should.hav |
bff20 | 65 20 6b 6e 6f 77 6c 65 64 67 65 20 6f 66 20 69 74 73 20 63 6f 6e 74 65 6e 74 2e 20 4d 61 6b 65 | e.knowledge.of.its.content..Make |
bff40 | 20 73 75 72 65 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 65 20 74 68 65 20 6b 65 79 20 69 6e 20 | .sure.you.distribute.the.key.in. |
bff60 | 61 20 73 61 66 65 20 6d 61 6e 6e 65 72 2c 00 43 6f 75 6e 74 72 79 20 63 6f 64 65 20 28 49 53 4f | a.safe.manner,.Country.code.(ISO |
bff80 | 2f 49 45 43 20 33 31 36 36 2d 31 29 2e 20 55 73 65 64 20 74 6f 20 73 65 74 20 72 65 67 75 6c 61 | /IEC.3166-1)..Used.to.set.regula |
bffa0 | 74 6f 72 79 20 64 6f 6d 61 69 6e 2e 20 53 65 74 20 61 73 20 6e 65 65 64 65 64 20 74 6f 20 69 6e | tory.domain..Set.as.needed.to.in |
bffc0 | 64 69 63 61 74 65 20 63 6f 75 6e 74 72 79 20 69 6e 20 77 68 69 63 68 20 64 65 76 69 63 65 20 69 | dicate.country.in.which.device.i |
bffe0 | 73 20 6f 70 65 72 61 74 69 6e 67 2e 20 54 68 69 73 20 63 61 6e 20 6c 69 6d 69 74 20 61 76 61 69 | s.operating..This.can.limit.avai |
c0000 | 6c 61 62 6c 65 20 63 68 61 6e 6e 65 6c 73 20 61 6e 64 20 74 72 61 6e 73 6d 69 74 20 70 6f 77 65 | lable.channels.and.transmit.powe |
c0020 | 72 2e 00 43 72 65 61 74 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 | r..Creat.community-list.policy.i |
c0040 | 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 20 | dentified.by.name.<text>..Creat. |
c0060 | 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 | extcommunity-list.policy.identif |
c0080 | 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 44 48 43 50 20 | ied.by.name.<text>..Create.DHCP. |
c00a0 | 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 6f 66 | address.range.with.a.range.id.of |
c00c0 | 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 66 72 | .`<n>`..DHCP.leases.are.taken.fr |
c00e0 | 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 61 72 74 73 20 61 74 | om.this.pool..The.pool.starts.at |
c0100 | 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 44 48 43 | .address.`<address>`..Create.DHC |
c0120 | 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 77 69 74 68 20 61 20 72 61 6e 67 65 20 69 64 20 | P.address.range.with.a.range.id. |
c0140 | 6f 66 20 60 3c 6e 3e 60 2e 20 44 48 43 50 20 6c 65 61 73 65 73 20 61 72 65 20 74 61 6b 65 6e 20 | of.`<n>`..DHCP.leases.are.taken. |
c0160 | 66 72 6f 6d 20 74 68 69 73 20 70 6f 6f 6c 2e 20 54 68 65 20 70 6f 6f 6c 20 73 74 6f 70 73 20 77 | from.this.pool..The.pool.stops.w |
c0180 | 69 74 68 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 | ith.address.`<address>`..Create. |
c01a0 | 44 4e 53 20 72 65 63 6f 72 64 20 70 65 72 20 63 6c 69 65 6e 74 20 6c 65 61 73 65 2c 20 62 79 20 | DNS.record.per.client.lease,.by. |
c01c0 | 61 64 64 69 6e 67 20 63 6c 69 65 6e 74 73 20 74 6f 20 2f 65 74 63 2f 68 6f 73 74 73 20 66 69 6c | adding.clients.to./etc/hosts.fil |
c01e0 | 65 2e 20 45 6e 74 72 79 20 77 69 6c 6c 20 68 61 76 65 20 66 6f 72 6d 61 74 3a 20 60 3c 73 68 61 | e..Entry.will.have.format:.`<sha |
c0200 | 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e 5f 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f | red-network-name>_<hostname>.<do |
c0220 | 6d 61 69 6e 2d 6e 61 6d 65 3e 60 00 43 72 65 61 74 65 20 60 3c 75 73 65 72 3e 60 20 66 6f 72 20 | main-name>`.Create.`<user>`.for. |
c0240 | 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 6e 20 74 68 69 73 20 73 79 73 | local.authentication.on.this.sys |
c0260 | 74 65 6d 2e 20 54 68 65 20 75 73 65 72 73 20 70 61 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 | tem..The.users.password.will.be. |
c0280 | 73 65 74 20 74 6f 20 60 3c 70 61 73 73 3e 60 2e 00 43 72 65 61 74 65 20 60 60 31 37 32 2e 31 38 | set.to.`<pass>`..Create.``172.18 |
c02a0 | 2e 32 30 31 2e 30 2f 32 34 60 60 20 61 73 20 61 20 73 75 62 6e 65 74 20 77 69 74 68 69 6e 20 60 | .201.0/24``.as.a.subnet.within.` |
c02c0 | 60 4e 45 54 31 60 60 20 61 6e 64 20 70 61 73 73 20 61 64 64 72 65 73 73 20 6f 66 20 55 6e 69 66 | `NET1``.and.pass.address.of.Unif |
c02e0 | 69 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 61 74 20 60 60 31 37 32 2e 31 36 2e 31 30 30 2e 31 60 60 | i.controller.at.``172.16.100.1`` |
c0300 | 20 74 6f 20 63 6c 69 65 6e 74 73 20 6f 66 20 74 68 61 74 20 73 75 62 6e 65 74 2e 00 43 72 65 61 | .to.clients.of.that.subnet..Crea |
c0320 | 74 65 20 61 20 62 61 73 69 63 20 62 72 69 64 67 65 00 43 72 65 61 74 65 20 61 20 66 69 6c 65 20 | te.a.basic.bridge.Create.a.file. |
c0340 | 6e 61 6d 65 64 20 60 60 56 79 4f 53 2d 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 34 34 36 34 31 2e 43 | named.``VyOS-1.3.6.1.4.1.44641.C |
c0360 | 6f 6e 66 69 67 4d 67 6d 74 2d 43 6f 6d 6d 61 6e 64 73 60 60 20 75 73 69 6e 67 20 74 68 65 20 66 | onfigMgmt-Commands``.using.the.f |
c0380 | 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 74 65 6e 74 3a 00 43 72 65 61 74 65 20 61 20 6c 6f 61 64 20 | ollowing.content:.Create.a.load. |
c03a0 | 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 2c 20 69 74 20 63 61 6e 20 62 65 20 61 20 6e 75 6d 62 | balancing.rule,.it.can.be.a.numb |
c03c0 | 65 72 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 39 39 39 39 3a 00 43 72 65 61 74 65 20 61 20 | er.between.1.and.9999:.Create.a. |
c03e0 | 6e 65 77 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f | new.:abbr:`CA.(Certificate.Autho |
c0400 | 72 69 74 79 29 60 20 61 6e 64 20 6f 75 74 70 75 74 20 74 68 65 20 43 41 73 20 70 75 62 6c 69 63 | rity)`.and.output.the.CAs.public |
c0420 | 20 61 6e 64 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e | .and.private.key.on.the.console. |
c0440 | 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e | .Create.a.new.DHCP.static.mappin |
c0460 | 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 | g.named.`<description>`.which.is |
c0480 | 20 76 61 6c 69 64 20 66 6f 72 20 74 68 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 | .valid.for.the.host.identified.b |
c04a0 | 79 20 69 74 73 20 44 48 43 50 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 28 44 55 | y.its.DHCP.unique.identifier.(DU |
c04c0 | 49 44 29 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 | ID).`<identifier>`..Create.a.new |
c04e0 | 20 44 48 43 50 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 6e 61 6d 65 64 20 60 3c 64 65 73 | .DHCP.static.mapping.named.`<des |
c0500 | 63 72 69 70 74 69 6f 6e 3e 60 20 77 68 69 63 68 20 69 73 20 76 61 6c 69 64 20 66 6f 72 20 74 68 | cription>`.which.is.valid.for.th |
c0520 | 65 20 68 6f 73 74 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 69 74 73 20 4d 41 43 20 60 3c 61 | e.host.identified.by.its.MAC.`<a |
c0540 | 64 64 72 65 73 73 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 56 4c 41 4e 20 69 6e 74 65 | ddress>`..Create.a.new.VLAN.inte |
c0560 | 72 66 61 63 65 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | rface.on.interface.`<interface>` |
c0580 | 20 75 73 69 6e 67 20 74 68 65 20 56 4c 41 4e 20 6e 75 6d 62 65 72 20 70 72 6f 76 69 64 65 64 20 | .using.the.VLAN.number.provided. |
c05a0 | 76 69 61 20 60 3c 76 6c 61 6e 2d 69 64 3e 60 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 | via.`<vlan-id>`..Create.a.new.pu |
c05c0 | 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 61 69 72 20 61 6e 64 20 6f 75 74 70 75 74 20 | blic/private.keypair.and.output. |
c05e0 | 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 | the.certificate.on.the.console.. |
c0600 | 43 72 65 61 74 65 20 61 20 6e 65 77 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 70 | Create.a.new.public/private.keyp |
c0620 | 61 69 72 20 77 68 69 63 68 20 69 73 20 73 69 67 6e 65 64 20 62 79 20 74 68 65 20 43 41 20 72 65 | air.which.is.signed.by.the.CA.re |
c0640 | 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 20 54 68 65 20 73 69 67 6e 65 | ferenced.by.`ca-name`..The.signe |
c0660 | 64 20 63 65 72 74 69 66 69 63 61 74 65 20 69 73 20 74 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 | d.certificate.is.then.output.to. |
c0680 | 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 65 6c 66 2d 73 | the.console..Create.a.new.self-s |
c06a0 | 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 68 65 20 70 75 62 6c 69 63 2f 70 72 | igned.certificate..The.public/pr |
c06c0 | 69 76 61 74 65 20 69 73 20 74 68 65 6e 20 73 68 6f 77 6e 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f | ivate.is.then.shown.on.the.conso |
c06e0 | 6c 65 2e 00 43 72 65 61 74 65 20 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 | le..Create.a.new.subordinate.:ab |
c0700 | 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 | br:`CA.(Certificate.Authority)`. |
c0720 | 61 6e 64 20 73 69 67 6e 20 69 74 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 | and.sign.it.using.the.private.ke |
c0740 | 79 20 72 65 66 65 72 65 6e 63 65 64 20 62 79 20 60 63 61 2d 6e 61 6d 65 60 2e 00 43 72 65 61 74 | y.referenced.by.`ca-name`..Creat |
c0760 | 65 20 61 20 6e 65 77 20 73 75 62 6f 72 64 69 6e 61 74 65 20 3a 61 62 62 72 3a 60 43 41 20 28 43 | e.a.new.subordinate.:abbr:`CA.(C |
c0780 | 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 61 6e 64 20 73 69 67 6e 20 | ertificate.Authority)`.and.sign. |
c07a0 | 69 74 20 75 73 69 6e 67 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 72 65 66 65 72 65 6e | it.using.the.private.key.referen |
c07c0 | 63 65 64 20 62 79 20 60 6e 61 6d 65 60 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 20 61 73 20 | ced.by.`name`..Create.a.peer.as. |
c07e0 | 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 6e 20 41 53 | you.would.when.you.specify.an.AS |
c0800 | 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 41 53 4e 20 | N,.except.that.if.the.peers.ASN. |
c0820 | 69 73 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 66 | is.different.than.mine.as.specif |
c0840 | 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c 73 | ied.under.the.:cfgcmd:`protocols |
c0860 | 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 | .bgp.<asn>`.command.the.connecti |
c0880 | 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 70 65 65 72 | on.will.be.denied..Create.a.peer |
c08a0 | 20 61 73 20 79 6f 75 20 77 6f 75 6c 64 20 77 68 65 6e 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 | .as.you.would.when.you.specify.a |
c08c0 | 6e 20 41 53 4e 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 69 66 20 74 68 65 20 70 65 65 72 73 20 | n.ASN,.except.that.if.the.peers. |
c08e0 | 41 53 4e 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 6d 69 6e 65 20 61 73 20 73 70 65 63 69 | ASN.is.the.same.as.mine.as.speci |
c0900 | 66 69 65 64 20 75 6e 64 65 72 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 6f 74 6f 63 6f 6c | fied.under.the.:cfgcmd:`protocol |
c0920 | 73 20 62 67 70 20 3c 61 73 6e 3e 60 20 63 6f 6d 6d 61 6e 64 20 74 68 65 20 63 6f 6e 6e 65 63 74 | s.bgp.<asn>`.command.the.connect |
c0940 | 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 6e 69 65 64 2e 00 43 72 65 61 74 65 20 61 20 73 74 61 | ion.will.be.denied..Create.a.sta |
c0960 | 74 69 63 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e 67 20 77 68 69 63 68 20 77 69 6c 6c 20 | tic.hostname.mapping.which.will. |
c0980 | 61 6c 77 61 79 73 20 72 65 73 6f 6c 76 65 20 74 68 65 20 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 | always.resolve.the.name.`<hostna |
c09a0 | 6d 65 3e 60 20 74 6f 20 49 50 20 61 64 64 72 65 73 73 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 | me>`.to.IP.address.`<address>`.. |
c09c0 | 43 72 65 61 74 65 20 61 73 2d 70 61 74 68 2d 70 6f 6c 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 | Create.as-path-policy.identified |
c09e0 | 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c | .by.name.<text>..Create.firewall |
c0a00 | 20 72 75 6c 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 64 65 66 69 | .rule.in.forward.chain,.and.defi |
c0a20 | 6e 65 20 77 68 69 63 68 20 66 6c 6f 77 74 62 61 6c 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 | ne.which.flowtbale.should.be.use |
c0a40 | 64 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 61 63 74 69 6f 6e 20 69 73 20 | d..Only.applicable.if.action.is. |
c0a60 | 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c | ``offload``..Create.firewall.rul |
c0a80 | 65 20 69 6e 20 66 6f 72 77 61 72 64 20 63 68 61 69 6e 2c 20 61 6e 64 20 73 65 74 20 61 63 74 69 | e.in.forward.chain,.and.set.acti |
c0aa0 | 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 2e 00 43 72 65 61 74 65 20 66 69 72 65 77 61 | on.to.``offload``..Create.firewa |
c0ac0 | 6c 6c 20 72 75 6c 65 3a 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 2c | ll.rule:.create.a.firewall.rule, |
c0ae0 | 20 73 65 74 74 69 6e 67 20 61 63 74 69 6f 6e 20 74 6f 20 60 60 6f 66 66 6c 6f 61 64 60 60 20 61 | .setting.action.to.``offload``.a |
c0b00 | 6e 64 20 75 73 69 6e 67 20 64 65 73 69 72 65 64 20 66 6c 6f 77 74 61 62 6c 65 20 66 6f 72 20 60 | nd.using.desired.flowtable.for.` |
c0b20 | 60 6f 66 66 6c 6f 61 64 2d 74 61 72 67 65 74 60 60 2e 00 43 72 65 61 74 65 20 66 6c 6f 77 74 61 | `offload-target``..Create.flowta |
c0b40 | 62 6c 65 3a 20 63 72 65 61 74 65 20 66 6c 6f 77 74 61 62 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 | ble:.create.flowtable,.which.inc |
c0b60 | 6c 75 64 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 61 72 65 20 67 6f | ludes.the.interfaces.that.are.go |
c0b80 | 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e | ing.to.be.used.by.the.flowtable. |
c0ba0 | 00 43 72 65 61 74 65 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c | .Create.large-community-list.pol |
c0bc0 | 69 63 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 6e 61 6d 65 20 3c 74 65 78 74 3e 2e 00 43 | icy.identified.by.name.<text>..C |
c0be0 | 72 65 61 74 65 20 6e 61 6d 65 64 20 60 3c 61 6c 69 61 73 3e 60 20 66 6f 72 20 74 68 65 20 63 6f | reate.named.`<alias>`.for.the.co |
c0c00 | 6e 66 69 67 75 72 65 64 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 20 66 6f 72 20 60 3c 68 6f | nfigured.static.mapping.for.`<ho |
c0c20 | 73 74 6e 61 6d 65 3e 60 2e 20 54 68 75 73 20 74 68 65 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 | stname>`..Thus.the.address.confi |
c0c40 | 67 75 72 65 64 20 61 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 73 74 61 | gured.as.:cfgcmd:`set.system.sta |
c0c60 | 74 69 63 2d 68 6f 73 74 2d 6d 61 70 70 69 6e 67 20 68 6f 73 74 2d 6e 61 6d 65 20 3c 68 6f 73 74 | tic-host-mapping.host-name.<host |
c0c80 | 6e 61 6d 65 3e 20 69 6e 65 74 20 3c 61 64 64 72 65 73 73 3e 60 20 63 61 6e 20 62 65 20 72 65 61 | name>.inet.<address>`.can.be.rea |
c0ca0 | 63 68 65 64 20 76 69 61 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 2e 00 43 72 65 61 74 65 20 | ched.via.multiple.names..Create. |
c0cc0 | 6e 65 77 20 3a 72 66 63 3a 60 32 31 33 36 60 20 44 4e 53 20 75 70 64 61 74 65 20 63 6f 6e 66 69 | new.:rfc:`2136`.DNS.update.confi |
c0ce0 | 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 20 74 68 65 20 49 | guration.which.will.update.the.I |
c0d00 | 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e 74 65 72 66 61 63 | P.address.assigned.to.`<interfac |
c0d20 | 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 | e>`.on.the.service.you.configure |
c0d40 | 64 20 75 6e 64 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 43 72 65 61 74 65 | d.under.`<service-name>`..Create |
c0d60 | 20 6e 65 77 20 56 52 46 20 69 6e 73 74 61 6e 63 65 20 77 69 74 68 20 60 3c 6e 61 6d 65 3e 60 2e | .new.VRF.instance.with.`<name>`. |
c0d80 | 20 54 68 65 20 6e 61 6d 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 70 6c 61 63 69 6e 67 20 69 | .The.name.is.used.when.placing.i |
c0da0 | 6e 64 69 76 69 64 75 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 6f 20 74 68 65 20 56 52 | ndividual.interfaces.into.the.VR |
c0dc0 | 46 2e 00 43 72 65 61 74 65 20 6e 65 77 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 75 70 64 61 74 65 | F..Create.new.dynamic.DNS.update |
c0de0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 75 70 64 61 74 65 | .configuration.which.will.update |
c0e00 | 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 60 3c 69 6e | .the.IP.address.assigned.to.`<in |
c0e20 | 74 65 72 66 61 63 65 3e 60 20 6f 6e 20 74 68 65 20 73 65 72 76 69 63 65 20 79 6f 75 20 63 6f 6e | terface>`.on.the.service.you.con |
c0e40 | 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 | figured.under.`<service-name>`.. |
c0e60 | 43 72 65 61 74 65 20 6e 65 77 20 73 79 73 74 65 6d 20 75 73 65 72 20 77 69 74 68 20 75 73 65 72 | Create.new.system.user.with.user |
c0e80 | 6e 61 6d 65 20 60 3c 6e 61 6d 65 3e 60 20 61 6e 64 20 72 65 61 6c 2d 6e 61 6d 65 20 73 70 65 63 | name.`<name>`.and.real-name.spec |
c0ea0 | 69 66 69 65 64 20 62 79 20 60 3c 73 74 72 69 6e 67 3e 60 2e 00 43 72 65 61 74 65 20 73 65 72 76 | ified.by.`<string>`..Create.serv |
c0ec0 | 69 63 65 20 60 3c 6e 61 6d 65 3e 60 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 3c 70 6f 72 74 3e | ice.`<name>`.to.listen.on.<port> |
c0ee0 | 00 43 72 65 61 74 65 73 20 61 20 6e 61 6d 65 64 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f | .Creates.a.named.container.netwo |
c0f00 | 72 6b 00 43 72 65 61 74 65 73 20 6c 6f 63 61 6c 20 49 50 6f 45 20 75 73 65 72 20 77 69 74 68 20 | rk.Creates.local.IPoE.user.with. |
c0f20 | 75 73 65 72 6e 61 6d 65 3d 2a 2a 3c 69 6e 74 65 72 66 61 63 65 3e 2a 2a 20 61 6e 64 20 70 61 73 | username=**<interface>**.and.pas |
c0f40 | 73 77 6f 72 64 3d 2a 2a 3c 4d 41 43 3e 2a 2a 20 28 6d 61 63 2d 61 64 64 72 65 73 73 29 00 43 72 | sword=**<MAC>**.(mac-address).Cr |
c0f60 | 65 61 74 65 73 20 73 74 61 74 69 63 20 70 65 65 72 20 6d 61 70 70 69 6e 67 20 6f 66 20 70 72 6f | eates.static.peer.mapping.of.pro |
c0f80 | 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 20 74 6f 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f | tocol-address.to.:abbr:`NBMA.(No |
c0fa0 | 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 | n-broadcast.multiple-access.netw |
c0fc0 | 6f 72 6b 29 60 20 61 64 64 72 65 73 73 2e 00 43 72 65 61 74 69 6e 67 20 61 20 62 72 69 64 67 65 | ork)`.address..Creating.a.bridge |
c0fe0 | 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 76 65 72 79 20 73 69 6d 70 6c 65 2e 20 49 6e 20 74 68 | .interface.is.very.simple..In.th |
c1000 | 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 68 61 76 65 3a 00 43 72 65 61 74 69 | is.example,.we.will.have:.Creati |
c1020 | 6e 67 20 61 20 66 6c 6f 77 20 74 61 62 6c 65 3a 00 43 72 65 61 74 69 6e 67 20 61 20 74 72 61 66 | ng.a.flow.table:.Creating.a.traf |
c1040 | 66 69 63 20 70 6f 6c 69 63 79 00 43 72 65 61 74 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 75 73 | fic.policy.Creating.rules.for.us |
c1060 | 69 6e 67 20 66 6c 6f 77 20 74 61 62 6c 65 73 3a 00 43 72 65 64 65 6e 74 69 61 6c 73 20 63 61 6e | ing.flow.tables:.Credentials.can |
c1080 | 20 62 65 20 64 65 66 69 6e 65 64 20 68 65 72 65 20 61 6e 64 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 | .be.defined.here.and.will.only.b |
c10a0 | 65 20 75 73 65 64 20 77 68 65 6e 20 61 64 64 69 6e 67 20 61 20 63 6f 6e 74 61 69 6e 65 72 20 69 | e.used.when.adding.a.container.i |
c10c0 | 6d 61 67 65 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 2e 00 43 72 69 74 69 63 61 6c 00 43 72 69 | mage.to.the.system..Critical.Cri |
c10e0 | 74 69 63 61 6c 20 63 6f 6e 64 69 74 69 6f 6e 73 20 2d 20 65 2e 67 2e 20 68 61 72 64 20 64 72 69 | tical.conditions.-.e.g..hard.dri |
c1100 | 76 65 20 65 72 72 6f 72 73 2e 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 35 33 33 00 | ve.errors..Crystalfontz.CFA-533. |
c1120 | 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 31 00 43 72 79 73 74 61 6c 66 6f 6e 74 | Crystalfontz.CFA-631.Crystalfont |
c1140 | 7a 20 43 46 41 2d 36 33 33 00 43 72 79 73 74 61 6c 66 6f 6e 74 7a 20 43 46 41 2d 36 33 35 00 43 | z.CFA-633.Crystalfontz.CFA-635.C |
c1160 | 75 72 20 48 6f 70 20 4c 69 6d 69 74 00 43 75 72 72 65 6e 74 6c 79 20 64 6f 65 73 20 6e 6f 74 20 | ur.Hop.Limit.Currently.does.not. |
c1180 | 64 6f 20 6d 75 63 68 20 61 73 20 63 61 63 68 69 6e 67 20 69 73 20 6e 6f 74 20 69 6d 70 6c 65 6d | do.much.as.caching.is.not.implem |
c11a0 | 65 6e 74 65 64 2e 00 43 75 72 72 65 6e 74 6c 79 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 | ented..Currently.dynamic.routing |
c11c0 | 20 69 73 20 73 75 70 70 6f 72 74 65 64 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | .is.supported.for.the.following. |
c11e0 | 70 72 6f 74 6f 63 6f 6c 73 3a 00 43 75 73 74 6f 6d 20 46 69 6c 65 00 43 75 73 74 6f 6d 20 62 72 | protocols:.Custom.File.Custom.br |
c1200 | 69 64 67 65 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 | idge.firewall.chains.can.be.crea |
c1220 | 74 65 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 | te.with.command.``set.firewall.b |
c1240 | 72 69 64 67 65 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 6e 20 6f 72 64 65 | ridge.name.<name>....``..In.orde |
c1260 | 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 61 20 72 75 | r.to.use.such.custom.chain,.a.ru |
c1280 | 6c 65 20 77 69 74 68 20 61 63 74 69 6f 6e 20 6a 75 6d 70 2c 20 61 6e 64 20 74 68 65 20 61 70 70 | le.with.action.jump,.and.the.app |
c12a0 | 72 6f 70 69 61 74 65 20 74 61 72 67 65 74 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 | ropiate.target.should.be.defined |
c12c0 | 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c | .in.a.base.chain..Custom.firewal |
c12e0 | 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f | l.chains.can.be.created,.with.co |
c1300 | 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 | mmands.``set.firewall.[ipv4.|.ip |
c1320 | 76 36 5d 20 5b 6e 61 6d 65 20 7c 20 69 70 76 36 2d 6e 61 6d 65 5d 20 3c 6e 61 6d 65 3e 20 2e 2e | v6].[name.|.ipv6-name].<name>... |
c1340 | 2e 60 60 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d | .``..In.order.to.use.such.custom |
c1360 | 20 63 68 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d | .chain,.a.rule.with.**action.jum |
c1380 | 70 2a 2a 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 | p**,.and.the.appropiate.**target |
c13a0 | 2a 2a 20 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 | **.should.be.defined.in.a.base.c |
c13c0 | 68 61 69 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e | hain..Custom.firewall.chains.can |
c13e0 | 20 62 65 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 | .be.created,.with.commands.``set |
c1400 | 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 | .firewall.ipv4.name.<name>....`` |
c1420 | 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 | ..In.order.to.use.such.custom.ch |
c1440 | 61 69 6e 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a | ain,.a.rule.with.**action.jump** |
c1460 | 2c 20 61 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 | ,.and.the.appropiate.**target**. |
c1480 | 73 68 6f 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 | should.be.defined.in.a.base.chai |
c14a0 | 6e 2e 00 43 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 73 20 63 61 6e 20 62 65 | n..Custom.firewall.chains.can.be |
c14c0 | 20 63 72 65 61 74 65 64 2c 20 77 69 74 68 20 63 6f 6d 6d 61 6e 64 73 20 60 60 73 65 74 20 66 69 | .created,.with.commands.``set.fi |
c14e0 | 72 65 77 61 6c 6c 20 69 70 76 36 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 20 2e 2e 2e 60 60 2e 20 49 | rewall.ipv6.name.<name>....``..I |
c1500 | 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 73 75 63 68 20 63 75 73 74 6f 6d 20 63 68 61 69 6e | n.order.to.use.such.custom.chain |
c1520 | 2c 20 61 20 72 75 6c 65 20 77 69 74 68 20 2a 2a 61 63 74 69 6f 6e 20 6a 75 6d 70 2a 2a 2c 20 61 | ,.a.rule.with.**action.jump**,.a |
c1540 | 6e 64 20 74 68 65 20 61 70 70 72 6f 70 69 61 74 65 20 2a 2a 74 61 72 67 65 74 2a 2a 20 73 68 6f | nd.the.appropiate.**target**.sho |
c1560 | 75 6c 64 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 62 61 73 65 20 63 68 61 69 6e 2e 00 | uld.be.defined.in.a.base.chain.. |
c1580 | 43 75 73 74 6f 6d 20 68 65 61 6c 74 68 2d 63 68 65 63 6b 20 73 63 72 69 70 74 20 61 6c 6c 6f 77 | Custom.health-check.script.allow |
c15a0 | 73 20 63 68 65 63 6b 69 6e 67 20 72 65 61 6c 2d 73 65 72 76 65 72 20 61 76 61 69 6c 61 62 69 6c | s.checking.real-server.availabil |
c15c0 | 69 74 79 00 43 75 73 74 6f 6d 69 7a 65 64 20 69 67 6e 6f 72 65 20 72 75 6c 65 73 2c 20 62 61 73 | ity.Customized.ignore.rules,.bas |
c15e0 | 65 64 20 6f 6e 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 | ed.on.a.packet.and.flow.selector |
c1600 | 2e 00 44 43 4f 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 62 6f 74 68 20 6e 65 | ..DCO.can.be.enabled.for.both.ne |
c1620 | 77 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 6c 73 2c 56 79 4f 53 20 61 64 64 73 | w.and.existing.tunnels,VyOS.adds |
c1640 | 20 61 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 63 6f 6e 66 69 67 | .an.option.in.each.tunnel.config |
c1660 | 75 72 61 74 69 6f 6e 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 74 68 69 73 | uration.where.we.can.enable.this |
c1680 | 20 66 75 6e 63 74 69 6f 6e 20 20 2e 54 68 65 20 63 75 72 72 65 6e 74 20 62 65 73 74 20 70 72 61 | .function...The.current.best.pra |
c16a0 | 63 74 69 63 65 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 74 75 6e 6e 65 6c 20 | ctice.is.to.create.a.new.tunnel. |
c16c0 | 77 69 74 68 20 44 43 4f 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 63 68 61 6e 63 65 20 | with.DCO.to.minimize.the.chance. |
c16e0 | 6f 66 20 70 72 6f 62 6c 65 6d 73 20 77 69 74 68 20 65 78 69 73 74 69 6e 67 20 63 6c 69 65 6e 74 | of.problems.with.existing.client |
c1700 | 73 2e 00 44 43 4f 20 73 75 70 70 6f 72 74 20 69 73 20 61 20 70 65 72 2d 74 75 6e 6e 65 6c 20 6f | s..DCO.support.is.a.per-tunnel.o |
c1720 | 70 74 69 6f 6e 20 61 6e 64 20 69 74 20 69 73 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c | ption.and.it.is.not.automaticall |
c1740 | 79 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 6e 65 77 20 6f 72 20 | y.enabled.by.default.for.new.or. |
c1760 | 75 70 67 72 61 64 65 64 20 74 75 6e 6e 65 6c 73 2e 20 45 78 69 73 74 69 6e 67 20 74 75 6e 6e 65 | upgraded.tunnels..Existing.tunne |
c1780 | 6c 73 20 77 69 6c 6c 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 73 20 | ls.will.continue.to.function.as. |
c17a0 | 74 68 65 79 20 68 61 76 65 20 69 6e 20 74 68 65 20 70 61 73 74 2e 00 44 44 6f 53 20 50 72 6f 74 | they.have.in.the.past..DDoS.Prot |
c17c0 | 65 63 74 69 6f 6e 00 44 48 20 47 72 6f 75 70 20 31 34 00 44 48 43 50 20 48 69 67 68 20 41 76 61 | ection.DH.Group.14.DHCP.High.Ava |
c17e0 | 69 6c 61 62 69 6c 69 74 79 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 78 70 | ilability.must.be.configured.exp |
c1800 | 6c 69 63 69 74 6c 79 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 61 74 65 6d 65 | licitly.by.the.following.stateme |
c1820 | 6e 74 73 20 6f 6e 20 62 6f 74 68 20 73 65 72 76 65 72 73 3a 00 44 48 43 50 20 52 65 6c 61 79 00 | nts.on.both.servers:.DHCP.Relay. |
c1840 | 44 48 43 50 20 53 65 72 76 65 72 00 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 70 61 72 61 6d 65 | DHCP.Server.DHCP.failover.parame |
c1860 | 74 65 72 73 00 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 44 48 43 50 20 72 61 6e 67 65 | ters.DHCP.lease.range.DHCP.range |
c1880 | 20 73 70 61 6e 73 20 66 72 6f 6d 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 31 30 60 20 2d 20 60 | .spans.from.`192.168.189.10`.-.` |
c18a0 | 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 30 60 00 44 48 43 50 20 72 65 6c 61 79 20 65 78 61 6d | 192.168.189.250`.DHCP.relay.exam |
c18c0 | 70 6c 65 00 44 48 43 50 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 49 50 | ple.DHCP.server.is.located.at.IP |
c18e0 | 76 34 20 61 64 64 72 65 73 73 20 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 60 65 74 68 32 60 60 2e | v4.address.10.0.1.4.on.``eth2``. |
c1900 | 00 44 48 43 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 73 20 6d 75 73 74 20 62 65 20 63 6f | .DHCPv6.address.pools.must.be.co |
c1920 | 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 61 63 74 20 61 | nfigured.for.the.system.to.act.a |
c1940 | 73 20 61 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | s.a.DHCPv6.server..The.following |
c1960 | 20 65 78 61 6d 70 6c 65 20 64 65 73 63 72 69 62 65 73 20 61 20 63 6f 6d 6d 6f 6e 20 73 63 65 6e | .example.describes.a.common.scen |
c1980 | 61 72 69 6f 2e 00 44 48 43 50 76 36 20 72 65 6c 61 79 20 65 78 61 6d 70 6c 65 00 44 48 43 50 76 | ario..DHCPv6.relay.example.DHCPv |
c19a0 | 36 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 | 6.requests.are.received.by.the.r |
c19c0 | 6f 75 74 65 72 20 6f 6e 20 60 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 60 20 60 | outer.on.`listening.interface`.` |
c19e0 | 60 65 74 68 31 60 60 00 44 4d 56 50 4e 00 44 4d 56 50 4e 20 65 78 61 6d 70 6c 65 20 6e 65 74 77 | `eth1``.DMVPN.DMVPN.example.netw |
c1a00 | 6f 72 6b 00 44 4d 56 50 4e 20 6e 65 74 77 6f 72 6b 00 44 4d 56 50 4e 20 6f 6e 6c 79 20 61 75 74 | ork.DMVPN.network.DMVPN.only.aut |
c1a20 | 6f 6d 61 74 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f | omates.the.tunnel.endpoint.disco |
c1a40 | 76 65 72 79 20 61 6e 64 20 73 65 74 75 70 2e 20 41 20 63 6f 6d 70 6c 65 74 65 20 73 6f 6c 75 74 | very.and.setup..A.complete.solut |
c1a60 | 69 6f 6e 20 61 6c 73 6f 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 74 68 65 20 75 73 65 20 6f 66 | ion.also.incorporates.the.use.of |
c1a80 | 20 61 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2e 20 42 47 50 20 69 73 20 70 61 72 74 | .a.routing.protocol..BGP.is.part |
c1aa0 | 69 63 75 6c 61 72 6c 79 20 77 65 6c 6c 20 73 75 69 74 65 64 20 66 6f 72 20 75 73 65 20 77 69 74 | icularly.well.suited.for.use.wit |
c1ac0 | 68 20 44 4d 56 50 4e 2e 00 44 4e 41 54 00 44 4e 41 54 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 | h.DMVPN..DNAT.DNAT.is.typically. |
c1ae0 | 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 20 2a 2a 50 6f 72 74 20 46 6f 72 77 61 72 64 2a | referred.to.as.a.**Port.Forward* |
c1b00 | 2a 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 56 79 4f 53 20 61 73 20 61 20 4e 41 54 20 72 6f 75 74 | *..When.using.VyOS.as.a.NAT.rout |
c1b20 | 65 72 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 2c 20 61 20 63 6f 6d 6d 6f 6e 20 63 6f 6e 66 69 67 | er.and.firewall,.a.common.config |
c1b40 | 75 72 61 74 69 6f 6e 20 74 61 73 6b 20 69 73 20 74 6f 20 72 65 64 69 72 65 63 74 20 69 6e 63 6f | uration.task.is.to.redirect.inco |
c1b60 | 6d 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 73 79 73 74 65 6d 20 62 65 68 69 6e 64 20 | ming.traffic.to.a.system.behind. |
c1b80 | 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 00 44 4e 41 54 20 72 75 6c 65 20 31 30 20 72 65 70 6c 61 | the.firewall..DNAT.rule.10.repla |
c1ba0 | 63 65 73 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 66 20 61 | ces.the.destination.address.of.a |
c1bc0 | 6e 20 69 6e 62 6f 75 6e 64 20 70 61 63 6b 65 74 20 77 69 74 68 20 31 39 32 2e 30 2e 32 2e 31 30 | n.inbound.packet.with.192.0.2.10 |
c1be0 | 00 44 4e 41 54 36 36 00 44 4e 53 20 46 6f 72 77 61 72 64 69 6e 67 00 44 4e 53 20 6e 61 6d 65 20 | .DNAT66.DNS.Forwarding.DNS.name. |
c1c00 | 73 65 72 76 65 72 73 00 44 4e 53 20 73 65 61 72 63 68 20 6c 69 73 74 20 74 6f 20 61 64 76 65 72 | servers.DNS.search.list.to.adver |
c1c20 | 74 69 73 65 00 44 4e 53 20 73 65 72 76 65 72 20 49 50 76 34 20 61 64 64 72 65 73 73 00 44 4e 53 | tise.DNS.server.IPv4.address.DNS |
c1c40 | 20 73 65 72 76 65 72 20 69 73 20 6c 6f 63 61 74 65 64 20 61 74 20 60 60 32 30 30 31 3a 64 62 38 | .server.is.located.at.``2001:db8 |
c1c60 | 3a 3a 66 66 66 66 60 60 00 44 4e 53 53 4c 00 44 53 43 50 20 76 61 6c 75 65 73 20 61 73 20 70 65 | ::ffff``.DNSSL.DSCP.values.as.pe |
c1c80 | 72 20 3a 72 66 63 3a 60 32 34 37 34 60 20 61 6e 64 20 3a 72 66 63 3a 60 34 35 39 35 60 3a 00 44 | r.:rfc:`2474`.and.:rfc:`4595`:.D |
c1ca0 | 53 53 53 2f 43 43 4b 20 4d 6f 64 65 20 69 6e 20 34 30 20 4d 48 7a 2c 20 74 68 69 73 20 73 65 74 | SSS/CCK.Mode.in.40.MHz,.this.set |
c1cc0 | 73 20 60 60 5b 44 53 53 53 5f 43 43 4b 2d 34 30 5d 60 60 00 44 61 74 61 20 69 73 20 70 72 6f 76 | s.``[DSSS_CCK-40]``.Data.is.prov |
c1ce0 | 69 64 65 64 20 62 79 20 44 42 2d 49 50 2e 63 6f 6d 20 75 6e 64 65 72 20 43 43 2d 42 59 2d 34 2e | ided.by.DB-IP.com.under.CC-BY-4. |
c1d00 | 30 20 6c 69 63 65 6e 73 65 2e 20 41 74 74 72 69 62 75 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2c | 0.license..Attribution.required, |
c1d20 | 20 70 65 72 6d 69 74 73 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 73 6f 20 77 65 20 63 61 | .permits.redistribution.so.we.ca |
c1d40 | 6e 20 69 6e 63 6c 75 64 65 20 61 20 64 61 74 61 62 61 73 65 20 69 6e 20 69 6d 61 67 65 73 28 7e | n.include.a.database.in.images(~ |
c1d60 | 33 4d 42 20 63 6f 6d 70 72 65 73 73 65 64 29 2e 20 49 6e 63 6c 75 64 65 73 20 63 72 6f 6e 20 73 | 3MB.compressed)..Includes.cron.s |
c1d80 | 63 72 69 70 74 20 28 6d 61 6e 75 61 6c 6c 79 20 63 61 6c 6c 61 62 6c 65 20 62 79 20 6f 70 2d 6d | cript.(manually.callable.by.op-m |
c1da0 | 6f 64 65 20 75 70 64 61 74 65 20 67 65 6f 69 70 29 20 74 6f 20 6b 65 65 70 20 64 61 74 61 62 61 | ode.update.geoip).to.keep.databa |
c1dc0 | 73 65 20 61 6e 64 20 72 75 6c 65 73 20 75 70 64 61 74 65 64 2e 00 44 65 62 75 67 00 44 65 62 75 | se.and.rules.updated..Debug.Debu |
c1de0 | 67 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 73 20 2d 20 4d 65 73 73 61 67 65 73 20 74 68 61 74 | g-level.messages.-.Messages.that |
c1e00 | 20 63 6f 6e 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 72 6d 61 6c 6c 79 20 6f 66 | .contain.information.normally.of |
c1e20 | 20 75 73 65 20 6f 6e 6c 79 20 77 68 65 6e 20 64 65 62 75 67 67 69 6e 67 20 61 20 70 72 6f 67 72 | .use.only.when.debugging.a.progr |
c1e40 | 61 6d 2e 00 44 65 66 61 75 6c 74 00 44 65 66 61 75 6c 74 20 31 2e 00 44 65 66 61 75 6c 74 20 47 | am..Default.Default.1..Default.G |
c1e60 | 61 74 65 77 61 79 2f 52 6f 75 74 65 00 44 65 66 61 75 6c 74 20 52 6f 75 74 65 72 20 50 72 65 66 | ateway/Route.Default.Router.Pref |
c1e80 | 65 72 65 6e 63 65 00 44 65 66 61 75 6c 74 20 62 65 68 61 76 69 6f 72 20 2d 20 64 6f 6e 27 74 20 | erence.Default.behavior.-.don't. |
c1ea0 | 61 73 6b 20 63 6c 69 65 6e 74 20 66 6f 72 20 6d 70 70 65 2c 20 62 75 74 20 61 6c 6c 6f 77 20 69 | ask.client.for.mppe,.but.allow.i |
c1ec0 | 74 20 69 66 20 63 6c 69 65 6e 74 20 77 61 6e 74 73 2e 20 50 6c 65 61 73 65 20 6e 6f 74 65 20 74 | t.if.client.wants..Please.note.t |
c1ee0 | 68 61 74 20 52 41 44 49 55 53 20 6d 61 79 20 6f 76 65 72 72 69 64 65 20 74 68 69 73 20 6f 70 74 | hat.RADIUS.may.override.this.opt |
c1f00 | 69 6f 6e 20 62 79 20 4d 53 2d 4d 50 50 45 2d 45 6e 63 72 79 70 74 69 6f 6e 2d 50 6f 6c 69 63 79 | ion.by.MS-MPPE-Encryption-Policy |
c1f20 | 20 61 74 74 72 69 62 75 74 65 2e 00 44 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 61 6e 64 20 | .attribute..Default.gateway.and. |
c1f40 | 44 4e 53 20 73 65 72 76 65 72 20 69 73 20 61 74 20 60 31 39 32 2e 30 2e 32 2e 32 35 34 60 00 44 | DNS.server.is.at.`192.0.2.254`.D |
c1f60 | 65 66 61 75 6c 74 20 69 73 20 35 31 32 20 4d 42 2e 20 55 73 65 20 30 20 4d 42 20 66 6f 72 20 75 | efault.is.512.MB..Use.0.MB.for.u |
c1f80 | 6e 6c 69 6d 69 74 65 64 20 6d 65 6d 6f 72 79 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 61 6e | nlimited.memory..Default.is.``an |
c1fa0 | 79 2d 61 76 61 69 6c 61 62 6c 65 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 60 60 69 63 6d 70 | y-available``..Default.is.``icmp |
c1fc0 | 60 60 2e 00 44 65 66 61 75 6c 74 20 69 73 20 74 6f 20 64 65 74 65 63 74 73 20 70 68 79 73 69 63 | ``..Default.is.to.detects.physic |
c1fe0 | 61 6c 20 6c 69 6e 6b 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 2e 00 44 65 66 61 75 6c 74 20 70 | al.link.state.changes..Default.p |
c2000 | 6f 72 74 20 69 73 20 33 31 32 38 2e 00 44 65 66 61 75 6c 74 3a 20 31 00 44 65 66 61 75 6c 74 3a | ort.is.3128..Default:.1.Default: |
c2020 | 20 34 34 33 00 44 65 66 61 75 6c 74 73 20 74 6f 20 27 75 69 64 27 00 44 65 66 61 75 6c 74 73 20 | .443.Defaults.to.'uid'.Defaults. |
c2040 | 74 6f 20 32 32 35 2e 30 2e 30 2e 35 30 2e 00 44 65 66 61 75 6c 74 73 20 74 6f 20 60 60 75 73 60 | to.225.0.0.50..Defaults.to.``us` |
c2060 | 60 2e 00 44 65 66 69 6e 65 20 43 6f 6e 65 63 74 69 6f 6e 20 54 69 6d 65 6f 75 74 73 00 44 65 66 | `..Define.Conection.Timeouts.Def |
c2080 | 69 6e 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 70 72 65 66 69 78 20 66 6f 72 20 61 20 67 69 | ine.IPv4.or.IPv6.prefix.for.a.gi |
c20a0 | 76 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 20 4f 6e 6c 79 20 6f 6e 65 20 49 50 76 34 20 | ven.network.name..Only.one.IPv4. |
c20c0 | 61 6e 64 20 6f 6e 65 20 49 50 76 36 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 75 73 65 64 20 | and.one.IPv6.prefix.can.be.used. |
c20e0 | 70 65 72 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 2e 00 44 65 66 69 6e 65 20 49 50 76 34 2f 49 50 | per.network.name..Define.IPv4/IP |
c2100 | 76 36 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6d 69 74 74 65 | v6.management.address.transmitte |
c2120 | 64 20 76 69 61 20 4c 4c 44 50 2e 20 4d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 | d.via.LLDP..Multiple.addresses.c |
c2140 | 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 20 4f 6e 6c 79 20 61 64 64 72 65 73 73 65 73 20 63 6f | an.be.defined..Only.addresses.co |
c2160 | 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 62 65 20 74 72 | nnected.to.the.system.will.be.tr |
c2180 | 61 6e 73 6d 69 74 74 65 64 2e 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 | ansmitted..Define.a.IPv4.or.IPv6 |
c21a0 | 20 4e 65 74 77 6f 72 6b 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 49 50 76 34 20 6f 72 | .Network.group..Define.a.IPv4.or |
c21c0 | 20 61 20 49 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 00 44 65 66 69 6e 65 20 61 20 5a | .a.IPv6.address.group.Define.a.Z |
c21e0 | 6f 6e 65 00 44 65 66 69 6e 65 20 61 20 64 69 73 63 72 65 74 65 20 73 6f 75 72 63 65 20 49 50 20 | one.Define.a.discrete.source.IP. |
c2200 | 61 64 64 72 65 73 73 20 6f 66 20 31 30 30 2e 36 34 2e 30 2e 31 20 66 6f 72 20 53 4e 41 54 20 72 | address.of.100.64.0.1.for.SNAT.r |
c2220 | 75 6c 65 20 32 30 00 44 65 66 69 6e 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 2e 00 44 65 | ule.20.Define.a.domain.group..De |
c2240 | 66 69 6e 65 20 61 20 6d 61 63 20 67 72 6f 75 70 2e 00 44 65 66 69 6e 65 20 61 20 70 6f 72 74 20 | fine.a.mac.group..Define.a.port. |
c2260 | 67 72 6f 75 70 2e 20 41 20 70 6f 72 74 20 6e 61 6d 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6e 61 | group..A.port.name.can.be.any.na |
c2280 | 6d 65 20 64 65 66 69 6e 65 64 20 69 6e 20 2f 65 74 63 2f 73 65 72 76 69 63 65 73 2e 20 65 2e 67 | me.defined.in./etc/services..e.g |
c22a0 | 2e 3a 20 68 74 74 70 00 44 65 66 69 6e 65 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 20 75 | .:.http.Define.allowed.ciphers.u |
c22c0 | 73 65 64 20 66 6f 72 20 74 68 65 20 53 53 48 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 41 20 6e 75 | sed.for.the.SSH.connection..A.nu |
c22e0 | 6d 62 65 72 20 6f 66 20 61 6c 6c 6f 77 65 64 20 63 69 70 68 65 72 73 20 63 61 6e 20 62 65 20 73 | mber.of.allowed.ciphers.can.be.s |
c2300 | 70 65 63 69 66 69 65 64 2c 20 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 6f 63 63 75 72 72 65 6e 63 | pecified,.use.multiple.occurrenc |
c2320 | 65 73 20 74 6f 20 61 6c 6c 6f 77 20 6d 75 6c 74 69 70 6c 65 20 63 69 70 68 65 72 73 2e 00 44 65 | es.to.allow.multiple.ciphers..De |
c2340 | 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 20 57 69 6c 64 63 61 72 | fine.an.interface.group..Wildcar |
c2360 | 64 20 61 72 65 20 61 63 63 65 70 74 65 64 20 74 6f 6f 2e 00 44 65 66 69 6e 65 20 62 65 68 61 76 | d.are.accepted.too..Define.behav |
c2380 | 69 6f 72 20 66 6f 72 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 66 72 61 6d 65 73 20 77 68 | ior.for.gratuitous.ARP.frames.wh |
c23a0 | 6f 27 73 20 49 50 20 69 73 20 6e 6f 74 20 61 6c 72 65 61 64 79 20 70 72 65 73 65 6e 74 20 69 6e | o's.IP.is.not.already.present.in |
c23c0 | 20 74 68 65 20 41 52 50 20 74 61 62 6c 65 2e 20 49 66 20 63 6f 6e 66 69 67 75 72 65 64 20 63 72 | .the.ARP.table..If.configured.cr |
c23e0 | 65 61 74 65 20 6e 65 77 20 65 6e 74 72 69 65 73 20 69 6e 20 74 68 65 20 41 52 50 20 74 61 62 6c | eate.new.entries.in.the.ARP.tabl |
c2400 | 65 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 66 6f 72 20 49 50 | e..Define.different.modes.for.IP |
c2420 | 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 61 | .directed.broadcast.forwarding.a |
c2440 | 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 38 31 32 60 20 61 6e 64 20 3a | s.described.in.:rfc:`1812`.and.: |
c2460 | 72 66 63 3a 60 32 36 34 34 60 2e 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 | rfc:`2644`..Define.different.mod |
c2480 | 65 73 20 66 6f 72 20 73 65 6e 64 69 6e 67 20 72 65 70 6c 69 65 73 20 69 6e 20 72 65 73 70 6f 6e | es.for.sending.replies.in.respon |
c24a0 | 73 65 20 74 6f 20 72 65 63 65 69 76 65 64 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 68 61 74 | se.to.received.ARP.requests.that |
c24c0 | 20 72 65 73 6f 6c 76 65 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 | .resolve.local.target.IP.address |
c24e0 | 65 73 3a 00 44 65 66 69 6e 65 20 64 69 66 66 65 72 65 6e 74 20 72 65 73 74 72 69 63 74 69 6f 6e | es:.Define.different.restriction |
c2500 | 20 6c 65 76 65 6c 73 20 66 6f 72 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c | .levels.for.announcing.the.local |
c2520 | 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 49 50 20 70 61 63 6b 65 | .source.IP.address.from.IP.packe |
c2540 | 74 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 73 65 6e 74 20 6f 6e 20 69 6e 74 65 72 | ts.in.ARP.requests.sent.on.inter |
c2560 | 66 61 63 65 2e 00 44 65 66 69 6e 65 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 6c 65 61 66 2d | face..Define.how.to.handle.leaf- |
c2580 | 73 65 6f 6e 64 73 2e 00 44 65 66 69 6e 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 62 65 20 | seonds..Define.interfaces.to.be. |
c25a0 | 75 73 65 64 20 69 6e 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 2e 00 44 65 66 69 6e 65 20 6c 65 | used.in.the.flowtable..Define.le |
c25c0 | 6e 67 74 68 20 6f 66 20 70 61 63 6b 65 74 20 70 61 79 6c 6f 61 64 20 74 6f 20 69 6e 63 6c 75 64 | ngth.of.packet.payload.to.includ |
c25e0 | 65 20 69 6e 20 6e 65 74 6c 69 6e 6b 20 6d 65 73 73 61 67 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 | e.in.netlink.message..Only.appli |
c2600 | 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 | cable.if.rule.log.is.enable.and. |
c2620 | 6c 6f 67 20 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6c 6f 67 | log.group.is.defined..Define.log |
c2640 | 20 67 72 6f 75 70 20 74 6f 20 73 65 6e 64 20 6d 65 73 73 61 67 65 20 74 6f 2e 20 4f 6e 6c 79 20 | .group.to.send.message.to..Only. |
c2660 | 61 70 70 6c 69 63 61 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 | applicable.if.rule.log.is.enable |
c2680 | 2e 00 44 65 66 69 6e 65 20 6c 6f 67 2d 6c 65 76 65 6c 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 | ..Define.log-level..Only.applica |
c26a0 | 62 6c 65 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 2e 00 44 65 66 69 6e | ble.if.rule.log.is.enable..Defin |
c26c0 | 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 71 75 65 75 65 20 69 6e 73 | e.number.of.packets.to.queue.ins |
c26e0 | 69 64 65 20 74 68 65 20 6b 65 72 6e 65 6c 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 74 68 | ide.the.kernel.before.sending.th |
c2700 | 65 6d 20 74 6f 20 75 73 65 72 73 70 61 63 65 2e 20 4f 6e 6c 79 20 61 70 70 6c 69 63 61 62 6c 65 | em.to.userspace..Only.applicable |
c2720 | 20 69 66 20 72 75 6c 65 20 6c 6f 67 20 69 73 20 65 6e 61 62 6c 65 20 61 6e 64 20 6c 6f 67 20 67 | .if.rule.log.is.enable.and.log.g |
c2740 | 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 20 6f 70 65 72 61 74 69 6f | roup.is.defined..Define.operatio |
c2760 | 6e 20 6d 6f 64 65 20 6f 66 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 66 65 61 74 | n.mode.of.High.Availability.feat |
c2780 | 75 72 65 2e 20 44 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 66 20 63 6f 6d 6d 61 6e 64 20 69 73 | ure..Default.value.if.command.is |
c27a0 | 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 73 20 60 61 63 74 69 76 65 2d 61 63 74 69 76 65 | .not.specified.is.`active-active |
c27c0 | 60 00 44 65 66 69 6e 65 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 75 70 | `.Define.the.time.interval.to.up |
c27e0 | 64 61 74 65 20 74 68 65 20 6c 6f 63 61 6c 20 63 61 63 68 65 00 44 65 66 69 6e 65 20 74 68 65 20 | date.the.local.cache.Define.the. |
c2800 | 7a 6f 6e 65 20 61 73 20 61 20 6c 6f 63 61 6c 20 7a 6f 6e 65 2e 20 41 20 6c 6f 63 61 6c 20 7a 6f | zone.as.a.local.zone..A.local.zo |
c2820 | 6e 65 20 68 61 73 20 6e 6f 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 | ne.has.no.interfaces.and.will.be |
c2840 | 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 44 | .applied.to.the.router.itself..D |
c2860 | 65 66 69 6e 65 20 74 79 70 65 20 6f 66 20 6f 66 66 6c 6f 61 64 20 74 6f 20 62 65 20 75 73 65 64 | efine.type.of.offload.to.be.used |
c2880 | 20 62 79 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 3a 20 60 60 68 61 72 64 77 61 72 65 60 60 20 | .by.the.flowtable:.``hardware``. |
c28a0 | 6f 72 20 60 60 73 6f 66 74 77 61 72 65 60 60 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 60 60 73 | or.``software``..By.default,.``s |
c28c0 | 6f 66 74 77 61 72 65 60 60 20 6f 66 66 6c 6f 61 64 20 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e | oftware``.offload.is.used..Defin |
c28e0 | 65 20 75 73 65 64 20 65 74 68 65 72 74 79 70 65 20 6f 66 20 62 72 69 64 67 65 20 69 6e 74 65 72 | e.used.ethertype.of.bridge.inter |
c2900 | 66 61 63 65 2e 00 44 65 66 69 6e 65 64 20 74 68 65 20 49 50 76 34 2c 20 49 50 76 36 20 6f 72 20 | face..Defined.the.IPv4,.IPv6.or. |
c2920 | 46 51 44 4e 20 61 6e 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 63 61 63 68 | FQDN.and.port.number.of.the.cach |
c2940 | 69 6e 67 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 69 6e 73 74 61 6e 63 65 20 77 68 69 63 68 20 | ing.RPKI.caching.instance.which. |
c2960 | 69 73 20 75 73 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6c 74 65 72 6e 61 74 65 20 73 6f 75 72 63 | is.used..Defines.alternate.sourc |
c2980 | 65 73 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 69 6e 67 20 61 6e 64 20 49 47 4d 50 20 64 61 74 | es.for.multicasting.and.IGMP.dat |
c29a0 | 61 2e 20 54 68 65 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 6f | a..The.network.address.must.be.o |
c29c0 | 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 6f 72 6d 61 74 20 27 61 2e 62 2e 63 2e 64 2f | n.the.following.format.'a.b.c.d/ |
c29e0 | 6e 27 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 | n'..By.default,.the.router.will. |
c2a00 | 61 63 63 65 70 74 20 64 61 74 61 20 66 72 6f 6d 20 73 6f 75 72 63 65 73 20 6f 6e 20 74 68 65 20 | accept.data.from.sources.on.the. |
c2a20 | 73 61 6d 65 20 6e 65 74 77 6f 72 6b 20 61 73 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e | same.network.as.configured.on.an |
c2a40 | 20 69 6e 74 65 72 66 61 63 65 2e 20 49 66 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 | .interface..If.the.multicast.sou |
c2a60 | 72 63 65 20 6c 69 65 73 20 6f 6e 20 61 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 2c 20 6f 6e | rce.lies.on.a.remote.network,.on |
c2a80 | 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 66 72 6f 6d 20 77 68 65 72 65 20 74 72 61 66 66 69 63 | e.must.define.from.where.traffic |
c2aa0 | 20 73 68 6f 75 6c 64 20 62 65 20 61 63 63 65 70 74 65 64 2e 00 44 65 66 69 6e 65 73 20 61 6e 20 | .should.be.accepted..Defines.an. |
c2ac0 | 6f 66 66 2d 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 69 78 20 66 6f 72 20 77 68 69 63 | off-NBMA.network.prefix.for.whic |
c2ae0 | 68 20 74 68 65 20 47 52 45 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c 20 61 63 74 20 61 73 20 | h.the.GRE.interface.will.act.as. |
c2b00 | 61 20 67 61 74 65 77 61 79 2e 20 54 68 69 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 | a.gateway..This.an.alternative.t |
c2b20 | 6f 20 64 65 66 69 6e 69 6e 67 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 | o.defining.local.interfaces.with |
c2b40 | 20 73 68 6f 72 74 63 75 74 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 66 6c 61 67 2e 00 44 65 66 69 | .shortcut-destination.flag..Defi |
c2b60 | 6e 65 73 20 62 6c 61 63 6b 68 6f 6c 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 | nes.blackhole.distance.for.this. |
c2b80 | 72 6f 75 74 65 2c 20 72 6f 75 74 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e | route,.routes.with.smaller.admin |
c2ba0 | 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 | istrative.distance.are.elected.p |
c2bc0 | 72 69 6f 72 20 74 6f 20 74 68 6f 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 64 69 73 74 | rior.to.those.with.a.higher.dist |
c2be0 | 61 6e 63 65 2e 00 44 65 66 69 6e 65 73 20 6d 69 6e 69 6d 75 6d 20 61 63 63 65 70 74 61 62 6c 65 | ance..Defines.minimum.acceptable |
c2c00 | 20 4d 54 55 2e 20 49 66 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 6e 65 67 6f | .MTU..If.client.will.try.to.nego |
c2c20 | 74 69 61 74 65 20 6c 65 73 73 20 74 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 4d 54 55 20 74 68 | tiate.less.then.specified.MTU.th |
c2c40 | 65 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 4e 41 4b 65 64 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 | en.it.will.be.NAKed.or.disconnec |
c2c60 | 74 65 64 20 69 66 20 72 65 6a 65 63 74 73 20 67 72 65 61 74 65 72 20 4d 54 55 2e 20 44 65 66 61 | ted.if.rejects.greater.MTU..Defa |
c2c80 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 31 30 30 2a 2a 2e 00 44 65 66 69 6e 65 73 20 6e 65 | ult.value.is.**100**..Defines.ne |
c2ca0 | 78 74 2d 68 6f 70 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 2c 20 | xt-hop.distance.for.this.route,. |
c2cc0 | 72 6f 75 74 65 73 20 77 69 74 68 20 73 6d 61 6c 6c 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 69 | routes.with.smaller.administrati |
c2ce0 | 76 65 20 64 69 73 74 61 6e 63 65 20 61 72 65 20 65 6c 65 63 74 65 64 20 70 72 69 6f 72 20 74 6f | ve.distance.are.elected.prior.to |
c2d00 | 20 74 68 6f 73 65 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 64 69 73 74 61 6e 63 65 2e 00 44 | .those.with.a.higher.distance..D |
c2d20 | 65 66 69 6e 65 73 20 70 72 65 66 65 72 72 65 64 20 4d 52 55 2e 20 42 79 20 64 65 66 61 75 6c 74 | efines.preferred.MRU..By.default |
c2d40 | 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 00 44 65 66 69 6e 65 73 20 70 72 6f 74 6f 63 6f | .is.not.defined..Defines.protoco |
c2d60 | 6c 73 20 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 41 52 50 2c 20 49 43 4d 50 2c 20 54 43 50 00 44 | ls.for.checking.ARP,.ICMP,.TCP.D |
c2d80 | 65 66 69 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 | efines.the.maximum.`<number>`.of |
c2da0 | 20 75 6e 61 6e 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 | .unanswered.echo.requests..Upon. |
c2dc0 | 72 65 61 63 68 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 | reaching.the.value.`<number>`,.t |
c2de0 | 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 00 44 65 66 69 6e 65 | he.session.will.be.reset..Define |
c2e00 | 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 60 3c 6e 75 6d 62 65 72 3e 60 20 6f 66 20 75 6e 61 6e | s.the.maximum.`<number>`.of.unan |
c2e20 | 73 77 65 72 65 64 20 65 63 68 6f 20 72 65 71 75 65 73 74 73 2e 20 55 70 6f 6e 20 72 65 61 63 68 | swered.echo.requests..Upon.reach |
c2e40 | 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 60 3c 6e 75 6d 62 65 72 3e 60 2c 20 74 68 65 20 73 65 | ing.the.value.`<number>`,.the.se |
c2e60 | 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 72 65 73 65 74 2e 20 44 65 66 61 75 6c 74 20 76 61 6c | ssion.will.be.reset..Default.val |
c2e80 | 75 65 20 69 73 20 2a 2a 33 2a 2a 2e 00 44 65 66 69 6e 65 73 20 74 68 65 20 72 6f 75 6e 64 2d 74 | ue.is.**3**..Defines.the.round-t |
c2ea0 | 72 69 70 20 74 69 6d 65 20 75 73 65 64 20 66 6f 72 20 61 63 74 69 76 65 20 71 75 65 75 65 20 6d | rip.time.used.for.active.queue.m |
c2ec0 | 61 6e 61 67 65 6d 65 6e 74 20 28 41 51 4d 29 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e | anagement.(AQM).in.milliseconds. |
c2ee0 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 2e 00 44 65 66 69 6e | .The.default.value.is.100..Defin |
c2f00 | 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 64 65 76 69 63 65 20 61 73 20 61 20 73 79 73 | es.the.specified.device.as.a.sys |
c2f20 | 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 20 41 76 61 69 6c 61 62 6c 65 20 63 6f 6e 73 6f 6c 65 20 64 | tem.console..Available.console.d |
c2f40 | 65 76 69 63 65 73 20 63 61 6e 20 62 65 20 28 73 65 65 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 | evices.can.be.(see.completion.he |
c2f60 | 6c 70 65 72 29 3a 00 44 65 66 69 6e 69 6e 67 20 50 65 65 72 73 00 44 65 6c 65 67 61 74 65 20 70 | lper):.Defining.Peers.Delegate.p |
c2f80 | 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 68 65 20 72 61 6e 67 65 20 69 6e 64 69 63 61 74 65 64 | refixes.from.the.range.indicated |
c2fa0 | 20 62 79 20 74 68 65 20 73 74 61 72 74 20 61 6e 64 20 73 74 6f 70 20 71 75 61 6c 69 66 69 65 72 | .by.the.start.and.stop.qualifier |
c2fc0 | 2e 00 44 65 6c 65 74 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 74 63 68 69 6e | ..Delete.BGP.communities.matchin |
c2fe0 | 67 20 74 68 65 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c 65 74 65 20 42 47 50 | g.the.community-list..Delete.BGP |
c3000 | 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 6c 61 72 67 65 2d | .communities.matching.the.large- |
c3020 | 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 44 65 6c 65 74 65 20 4c 6f 67 73 00 44 65 6c 65 | community-list..Delete.Logs.Dele |
c3040 | 74 65 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 20 | te.a.particular.container.image. |
c3060 | 62 61 73 65 64 20 6f 6e 20 69 74 27 73 20 69 6d 61 67 65 20 49 44 2e 20 59 6f 75 20 63 61 6e 20 | based.on.it's.image.ID..You.can. |
c3080 | 61 6c 73 6f 20 64 65 6c 65 74 65 20 61 6c 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 67 65 73 | also.delete.all.container.images |
c30a0 | 20 61 74 20 6f 6e 63 65 2e 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 20 63 6f 6d 6d 75 6e 69 | .at.once..Delete.all.BGP.communi |
c30c0 | 74 69 65 73 00 44 65 6c 65 74 65 20 61 6c 6c 20 42 47 50 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e | ties.Delete.all.BGP.large-commun |
c30e0 | 69 74 69 65 73 00 44 65 6c 65 74 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 66 72 6f 6d 20 | ities.Delete.default.route.from. |
c3100 | 74 68 65 20 73 79 73 74 65 6d 2e 00 44 65 6c 65 74 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 | the.system..Deletes.the.specifie |
c3120 | 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 66 69 6c 65 20 3c 74 65 78 74 3e 20 69 6e 20 74 68 | d.user-defined.file.<text>.in.th |
c3140 | 65 20 2f 76 61 72 2f 6c 6f 67 2f 75 73 65 72 20 64 69 72 65 63 74 6f 72 79 00 44 65 70 65 6e 64 | e./var/log/user.directory.Depend |
c3160 | 69 6e 67 20 6f 6e 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 2c 20 6e 6f 74 20 61 6c 6c 20 6f 66 20 | ing.on.the.location,.not.all.of. |
c3180 | 74 68 65 73 65 20 63 68 61 6e 6e 65 6c 73 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 | these.channels.may.be.available. |
c31a0 | 66 6f 72 20 75 73 65 21 00 44 65 73 63 72 69 70 74 69 6f 6e 00 44 65 73 70 69 74 65 20 74 68 65 | for.use!.Description.Despite.the |
c31c0 | 20 44 72 6f 70 2d 54 61 69 6c 20 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 73 6c 6f 77 20 | .Drop-Tail.policy.does.not.slow. |
c31e0 | 64 6f 77 6e 20 70 61 63 6b 65 74 73 2c 20 69 66 20 6d 61 6e 79 20 70 61 63 6b 65 74 73 20 61 72 | down.packets,.if.many.packets.ar |
c3200 | 65 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 74 68 65 79 20 63 6f 75 6c 64 20 67 65 74 20 64 72 6f | e.to.be.sent,.they.could.get.dro |
c3220 | 70 70 65 64 20 77 68 65 6e 20 74 72 79 69 6e 67 20 74 6f 20 67 65 74 20 65 6e 71 75 65 75 65 64 | pped.when.trying.to.get.enqueued |
c3240 | 20 61 74 20 74 68 65 20 74 61 69 6c 2e 20 54 68 69 73 20 63 61 6e 20 68 61 70 70 65 6e 20 69 66 | .at.the.tail..This.can.happen.if |
c3260 | 20 74 68 65 20 71 75 65 75 65 20 68 61 73 20 73 74 69 6c 6c 20 6e 6f 74 20 62 65 65 6e 20 61 62 | .the.queue.has.still.not.been.ab |
c3280 | 6c 65 20 74 6f 20 72 65 6c 65 61 73 65 20 65 6e 6f 75 67 68 20 70 61 63 6b 65 74 73 20 66 72 6f | le.to.release.enough.packets.fro |
c32a0 | 6d 20 69 74 73 20 68 65 61 64 2e 00 44 65 73 70 69 74 65 20 74 68 65 20 66 61 63 74 20 74 68 61 | m.its.head..Despite.the.fact.tha |
c32c0 | 74 20 41 44 20 69 73 20 61 20 73 75 70 65 72 73 65 74 20 6f 66 20 4c 44 41 50 00 44 65 73 74 69 | t.AD.is.a.superset.of.LDAP.Desti |
c32e0 | 6e 61 74 69 6f 6e 20 41 64 64 72 65 73 73 00 44 65 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 00 44 | nation.Address.Destination.NAT.D |
c3300 | 65 73 74 69 6e 61 74 69 6f 6e 20 50 72 65 66 69 78 00 44 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 | estination.Prefix.Detailed.infor |
c3320 | 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 63 69 73 63 6f 22 20 61 6e 64 20 22 69 62 6d 22 20 6d | mation.about."cisco".and."ibm".m |
c3340 | 6f 64 65 6c 73 20 64 69 66 66 65 72 65 6e 63 65 73 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 | odels.differences.can.be.found.i |
c3360 | 6e 20 3a 72 66 63 3a 60 33 35 30 39 60 2e 20 41 20 22 73 68 6f 72 74 63 75 74 22 20 6d 6f 64 65 | n.:rfc:`3509`..A."shortcut".mode |
c3380 | 6c 20 61 6c 6c 6f 77 73 20 41 42 52 20 74 6f 20 63 72 65 61 74 65 20 72 6f 75 74 65 73 20 62 65 | l.allows.ABR.to.create.routes.be |
c33a0 | 74 77 65 65 6e 20 61 72 65 61 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 74 6f 70 6f 6c 6f 67 | tween.areas.based.on.the.topolog |
c33c0 | 79 20 6f 66 20 74 68 65 20 61 72 65 61 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 69 73 | y.of.the.areas.connected.to.this |
c33e0 | 20 72 6f 75 74 65 72 20 62 75 74 20 6e 6f 74 20 75 73 69 6e 67 20 61 20 62 61 63 6b 62 6f 6e 65 | .router.but.not.using.a.backbone |
c3400 | 20 61 72 65 61 20 69 6e 20 63 61 73 65 20 69 66 20 6e 6f 6e 2d 62 61 63 6b 62 6f 6e 65 20 72 6f | .area.in.case.if.non-backbone.ro |
c3420 | 75 74 65 20 77 69 6c 6c 20 62 65 20 63 68 65 61 70 65 72 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e | ute.will.be.cheaper..For.more.in |
c3440 | 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 22 73 68 6f 72 74 63 75 74 22 20 6d 6f 64 65 6c | formation.about."shortcut".model |
c3460 | 2c 20 73 65 65 20 3a 74 3a 60 6f 73 70 66 2d 73 68 6f 72 74 63 75 74 2d 61 62 72 2d 30 32 2e 74 | ,.see.:t:`ospf-shortcut-abr-02.t |
c3480 | 78 74 60 00 44 65 74 65 72 6d 69 6e 65 73 20 68 6f 77 20 6f 70 65 6e 6e 68 72 70 20 64 61 65 6d | xt`.Determines.how.opennhrp.daem |
c34a0 | 6f 6e 20 73 68 6f 75 6c 64 20 73 6f 66 74 20 73 77 69 74 63 68 20 74 68 65 20 6d 75 6c 74 69 63 | on.should.soft.switch.the.multic |
c34c0 | 61 73 74 20 74 72 61 66 66 69 63 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 6d 75 6c 74 69 63 61 73 | ast.traffic..Currently,.multicas |
c34e0 | 74 20 74 72 61 66 66 69 63 20 69 73 20 63 61 70 74 75 72 65 64 20 62 79 20 6f 70 65 6e 6e 68 72 | t.traffic.is.captured.by.opennhr |
c3500 | 70 20 64 61 65 6d 6f 6e 20 75 73 69 6e 67 20 61 20 70 61 63 6b 65 74 20 73 6f 63 6b 65 74 2c 20 | p.daemon.using.a.packet.socket,. |
c3520 | 61 6e 64 20 72 65 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 70 72 6f 70 65 72 20 64 65 73 74 69 6e | and.resent.back.to.proper.destin |
c3540 | 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 6d 75 6c 74 69 63 61 73 | ations..This.means.that.multicas |
c3560 | 74 20 70 61 63 6b 65 74 20 73 65 6e 64 69 6e 67 20 69 73 20 43 50 55 20 69 6e 74 65 6e 73 69 76 | t.packet.sending.is.CPU.intensiv |
c3580 | 65 2e 00 44 65 76 69 63 65 20 69 73 20 69 6e 63 61 70 61 62 6c 65 20 6f 66 20 34 30 20 4d 48 7a | e..Device.is.incapable.of.40.MHz |
c35a0 | 2c 20 64 6f 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 2e 20 54 68 69 73 20 73 65 74 73 20 60 60 | ,.do.not.advertise..This.sets.`` |
c35c0 | 5b 34 30 2d 49 4e 54 4f 4c 45 52 41 4e 54 5d 60 60 00 44 65 76 69 63 65 73 20 65 76 61 6c 75 61 | [40-INTOLERANT]``.Devices.evalua |
c35e0 | 74 69 6e 67 20 77 68 65 74 68 65 72 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 69 73 20 | ting.whether.an.IPv4.address.is. |
c3600 | 70 75 62 6c 69 63 20 6d 75 73 74 20 62 65 20 75 70 64 61 74 65 64 20 74 6f 20 72 65 63 6f 67 6e | public.must.be.updated.to.recogn |
c3620 | 69 7a 65 20 74 68 65 20 6e 65 77 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 20 41 6c 6c 6f 63 | ize.the.new.address.space..Alloc |
c3640 | 61 74 69 6e 67 20 6d 6f 72 65 20 70 72 69 76 61 74 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 | ating.more.private.IPv4.address. |
c3660 | 73 70 61 63 65 20 66 6f 72 20 4e 41 54 20 64 65 76 69 63 65 73 20 6d 69 67 68 74 20 70 72 6f 6c | space.for.NAT.devices.might.prol |
c3680 | 6f 6e 67 20 74 68 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 49 50 76 36 2e 00 44 69 66 66 | ong.the.transition.to.IPv6..Diff |
c36a0 | 65 72 65 6e 74 20 4e 41 54 20 54 79 70 65 73 00 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 70 | erent.NAT.Types.Diffie-Hellman.p |
c36c0 | 61 72 61 6d 65 74 65 72 73 00 44 69 72 65 63 74 69 6f 6e 3a 20 2a 2a 69 6e 2a 2a 20 61 6e 64 20 | arameters.Direction:.**in**.and. |
c36e0 | 2a 2a 6f 75 74 2a 2a 2e 20 50 72 6f 74 65 63 74 20 70 75 62 6c 69 63 20 6e 65 74 77 6f 72 6b 20 | **out**..Protect.public.network. |
c3700 | 66 72 6f 6d 20 65 78 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 73 2c 20 61 6e 64 20 69 64 65 6e 74 | from.external.attacks,.and.ident |
c3720 | 69 66 79 20 69 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 73 20 74 6f 77 61 72 64 73 20 69 6e 74 | ify.internal.attacks.towards.int |
c3740 | 65 72 6e 65 74 2e 00 44 69 73 61 62 6c 65 20 28 6c 6f 63 6b 29 20 61 63 63 6f 75 6e 74 2e 20 55 | ernet..Disable.(lock).account..U |
c3760 | 73 65 72 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 74 6f 20 6c 6f 67 20 69 6e 2e 00 | ser.will.not.be.able.to.log.in.. |
c3780 | 44 69 73 61 62 6c 65 20 43 50 55 20 70 6f 77 65 72 20 73 61 76 69 6e 67 20 6d 65 63 68 61 6e 69 | Disable.CPU.power.saving.mechani |
c37a0 | 73 6d 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 43 20 73 74 61 74 65 73 2e 00 44 69 73 61 | sms.also.known.as.C.states..Disa |
c37c0 | 62 6c 65 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 72 6f 74 6f 63 6f 6c | ble.Compression.Control.Protocol |
c37e0 | 20 28 43 43 50 29 2e 20 43 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c | .(CCP)..CCP.is.enabled.by.defaul |
c3800 | 74 2e 00 44 69 73 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 | t..Disable.MLD.reports.and.query |
c3820 | 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 61 62 6c 65 20 60 3c 75 73 65 | .on.the.interface..Disable.`<use |
c3840 | 72 3e 60 20 61 63 63 6f 75 6e 74 2e 00 44 69 73 61 62 6c 65 20 61 20 42 46 44 20 70 65 65 72 00 | r>`.account..Disable.a.BFD.peer. |
c3860 | 44 69 73 61 62 6c 65 20 61 20 63 6f 6e 74 61 69 6e 65 72 2e 00 44 69 73 61 62 6c 65 20 61 20 67 | Disable.a.container..Disable.a.g |
c3880 | 69 76 65 6e 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 00 44 69 73 61 62 6c 65 20 | iven.container.registry.Disable. |
c38a0 | 61 6c 6c 20 6f 70 74 69 6f 6e 61 6c 20 43 50 55 20 6d 69 74 69 67 61 74 69 6f 6e 73 2e 20 54 68 | all.optional.CPU.mitigations..Th |
c38c0 | 69 73 20 69 6d 70 72 6f 76 65 73 20 73 79 73 74 65 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 | is.improves.system.performance,. |
c38e0 | 62 75 74 20 69 74 20 6d 61 79 20 61 6c 73 6f 20 65 78 70 6f 73 65 20 75 73 65 72 73 20 74 6f 20 | but.it.may.also.expose.users.to. |
c3900 | 73 65 76 65 72 61 6c 20 43 50 55 20 76 75 6c 6e 65 72 61 62 69 6c 69 74 69 65 73 2e 00 44 69 73 | several.CPU.vulnerabilities..Dis |
c3920 | 61 62 6c 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6c 6f 67 67 69 6e 67 20 76 69 61 20 53 79 73 6c | able.connection.logging.via.Sysl |
c3940 | 6f 67 2e 00 44 69 73 61 62 6c 65 20 63 6f 6e 6e 74 72 61 63 6b 20 6c 6f 6f 73 65 20 74 72 61 63 | og..Disable.conntrack.loose.trac |
c3960 | 6b 20 6f 70 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 64 68 63 70 2d 72 65 6c 61 79 20 73 65 72 76 | k.option.Disable.dhcp-relay.serv |
c3980 | 69 63 65 2e 00 44 69 73 61 62 6c 65 20 64 68 63 70 76 36 2d 72 65 6c 61 79 20 73 65 72 76 69 63 | ice..Disable.dhcpv6-relay.servic |
c39a0 | 65 2e 00 44 69 73 61 62 6c 65 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 | e..Disable.given.`<interface>`.. |
c39c0 | 49 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 6e 20 61 64 6d 69 6e 69 73 74 72 61 74 | It.will.be.placed.in.administrat |
c39e0 | 69 76 65 6c 79 20 64 6f 77 6e 20 28 60 60 41 2f 44 60 60 29 20 73 74 61 74 65 2e 00 44 69 73 61 | ively.down.(``A/D``).state..Disa |
c3a00 | 62 6c 65 20 68 6f 73 74 69 6e 67 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 7a 6f 6e 65 20 66 | ble.hosting.authoritative.zone.f |
c3a20 | 6f 72 20 60 3c 64 6f 6d 61 69 6e 2d 6e 61 6d 65 3e 60 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 | or.`<domain-name>`.without.delet |
c3a40 | 69 6e 67 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 44 69 73 61 62 6c 65 20 | ing.from.configuration..Disable. |
c3a60 | 69 6d 6d 65 64 69 61 74 65 20 73 65 73 73 69 6f 6e 20 72 65 73 65 74 20 69 66 20 70 65 65 72 27 | immediate.session.reset.if.peer' |
c3a80 | 73 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 6e 6b 20 67 6f 65 73 20 64 6f 77 6e 2e 00 44 69 73 61 | s.connected.link.goes.down..Disa |
c3aa0 | 62 6c 65 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | ble.password.based.authenticatio |
c3ac0 | 6e 2e 20 4c 6f 67 69 6e 20 76 69 61 20 53 53 48 20 6b 65 79 73 20 6f 6e 6c 79 2e 20 54 68 69 73 | n..Login.via.SSH.keys.only..This |
c3ae0 | 20 68 61 72 64 65 6e 73 20 73 65 63 75 72 69 74 79 21 00 44 69 73 61 62 6c 65 20 73 65 6e 64 69 | .hardens.security!.Disable.sendi |
c3b00 | 6e 67 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 50 49 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 | ng.and.receiving.PIM.control.pac |
c3b20 | 6b 65 74 73 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 61 62 6c 65 20 73 | kets.on.the.interface..Disable.s |
c3b40 | 70 65 63 69 66 69 63 20 72 65 63 6f 72 64 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 | pecific.record.without.deleting. |
c3b60 | 69 74 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 44 69 73 61 62 6c 65 20 74 | it.from.configuration..Disable.t |
c3b80 | 68 65 20 68 6f 73 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 72 65 76 65 72 | he.host.validation.through.rever |
c3ba0 | 73 65 20 44 4e 53 20 6c 6f 6f 6b 75 70 73 20 2d 20 63 61 6e 20 73 70 65 65 64 75 70 20 6c 6f 67 | se.DNS.lookups.-.can.speedup.log |
c3bc0 | 69 6e 20 74 69 6d 65 20 77 68 65 6e 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 20 69 73 20 6e | in.time.when.reverse.lookup.is.n |
c3be0 | 6f 74 20 70 6f 73 73 69 62 6c 65 2e 00 44 69 73 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 63 6f | ot.possible..Disable.the.peer.co |
c3c00 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 49 50 76 34 20 73 74 | nfiguration.Disable.this.IPv4.st |
c3c20 | 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 69 73 61 62 6c 65 20 74 68 69 73 20 49 | atic.route.entry..Disable.this.I |
c3c40 | 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 65 6e 74 72 79 2e 00 44 69 73 61 62 6c 65 20 | Pv6.static.route.entry..Disable. |
c3c60 | 74 68 69 73 20 73 65 72 76 69 63 65 2e 00 44 69 73 61 62 6c 65 20 74 72 61 6e 73 6d 69 74 20 6f | this.service..Disable.transmit.o |
c3c80 | 66 20 4c 4c 44 50 20 66 72 61 6d 65 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 | f.LLDP.frames.on.given.`<interfa |
c3ca0 | 63 65 3e 60 2e 20 55 73 65 66 75 6c 20 74 6f 20 65 78 63 6c 75 64 65 20 63 65 72 74 61 69 6e 20 | ce>`..Useful.to.exclude.certain. |
c3cc0 | 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 4c 4c 44 50 20 77 68 65 6e 20 60 60 61 6c 6c 60 | interfaces.from.LLDP.when.``all` |
c3ce0 | 60 20 68 61 76 65 20 62 65 65 6e 20 65 6e 61 62 6c 65 64 2e 00 44 69 73 61 62 6c 65 64 20 62 79 | `.have.been.enabled..Disabled.by |
c3d00 | 20 64 65 66 61 75 6c 74 20 2d 20 6e 6f 20 6b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6c 6f 61 64 | .default.-.no.kernel.module.load |
c3d20 | 65 64 2e 00 44 69 73 61 62 6c 65 73 20 63 61 63 68 69 6e 67 20 6f 66 20 70 65 65 72 20 69 6e 66 | ed..Disables.caching.of.peer.inf |
c3d40 | 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 66 6f 72 77 61 72 64 65 64 20 4e 48 52 50 20 52 65 73 | ormation.from.forwarded.NHRP.Res |
c3d60 | 6f 6c 75 74 69 6f 6e 20 52 65 70 6c 79 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 20 63 61 6e 20 | olution.Reply.packets..This.can. |
c3d80 | 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 75 63 65 20 6d 65 6d 6f 72 79 20 63 6f 6e 73 75 6d 70 | be.used.to.reduce.memory.consump |
c3da0 | 74 69 6f 6e 20 6f 6e 20 62 69 67 20 4e 42 4d 41 20 73 75 62 6e 65 74 73 2e 00 44 69 73 61 62 6c | tion.on.big.NBMA.subnets..Disabl |
c3dc0 | 65 73 20 66 6c 6f 77 20 69 73 6f 6c 61 74 69 6f 6e 2c 20 61 6c 6c 20 74 72 61 66 66 69 63 20 70 | es.flow.isolation,.all.traffic.p |
c3de0 | 61 73 73 65 73 20 74 68 72 6f 75 67 68 20 61 20 73 69 6e 67 6c 65 20 71 75 65 75 65 2e 00 44 69 | asses.through.a.single.queue..Di |
c3e00 | 73 61 62 6c 65 73 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 65 64 20 49 50 76 34 20 73 74 61 74 | sables.interface-based.IPv4.stat |
c3e20 | 69 63 20 72 6f 75 74 65 2e 00 44 69 73 61 62 6c 65 73 20 69 6e 74 65 72 66 61 63 65 2d 62 61 73 | ic.route..Disables.interface-bas |
c3e40 | 65 64 20 49 50 76 36 20 73 74 61 74 69 63 20 72 6f 75 74 65 2e 00 44 69 73 61 62 6c 65 73 20 71 | ed.IPv6.static.route..Disables.q |
c3e60 | 75 69 63 6b 6c 65 61 76 65 20 6d 6f 64 65 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 20 74 68 65 | uickleave.mode..In.this.mode.the |
c3e80 | 20 64 61 65 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 73 65 6e 64 20 61 20 4c 65 61 76 65 20 49 47 | .daemon.will.not.send.a.Leave.IG |
c3ea0 | 4d 50 20 6d 65 73 73 61 67 65 20 75 70 73 74 72 65 61 6d 20 61 73 20 73 6f 6f 6e 20 61 73 20 69 | MP.message.upstream.as.soon.as.i |
c3ec0 | 74 20 72 65 63 65 69 76 65 73 20 61 20 4c 65 61 76 65 20 6d 65 73 73 61 67 65 20 66 6f 72 20 61 | t.receives.a.Leave.message.for.a |
c3ee0 | 6e 79 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 64 61 65 | ny.downstream.interface..The.dae |
c3f00 | 6d 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 61 73 6b 20 66 6f 72 20 4d 65 6d 62 65 72 73 68 69 70 20 | mon.will.not.ask.for.Membership. |
c3f20 | 72 65 70 6f 72 74 73 20 6f 6e 20 74 68 65 20 64 6f 77 6e 73 74 72 65 61 6d 20 69 6e 74 65 72 66 | reports.on.the.downstream.interf |
c3f40 | 61 63 65 73 2c 20 61 6e 64 20 69 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 72 65 63 65 69 76 65 | aces,.and.if.a.report.is.receive |
c3f60 | 64 20 74 68 65 20 67 72 6f 75 70 20 69 73 20 6e 6f 74 20 6a 6f 69 6e 65 64 20 61 67 61 69 6e 20 | d.the.group.is.not.joined.again. |
c3f80 | 74 68 65 20 75 70 73 74 72 65 61 6d 2e 00 44 69 73 61 62 6c 65 73 20 77 65 62 20 66 69 6c 74 65 | the.upstream..Disables.web.filte |
c3fa0 | 72 69 6e 67 20 77 69 74 68 6f 75 74 20 64 69 73 63 61 72 64 69 6e 67 20 63 6f 6e 66 69 67 75 72 | ring.without.discarding.configur |
c3fc0 | 61 74 69 6f 6e 2e 00 44 69 73 61 62 6c 65 73 20 77 65 62 20 70 72 6f 78 79 20 74 72 61 6e 73 70 | ation..Disables.web.proxy.transp |
c3fe0 | 61 72 65 6e 74 20 6d 6f 64 65 20 61 74 20 61 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 | arent.mode.at.a.listening.addres |
c4000 | 73 2e 00 44 69 73 61 62 6c 69 6e 67 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 00 44 69 73 61 | s..Disabling.Advertisements.Disa |
c4020 | 62 6c 69 6e 67 20 61 20 56 52 52 50 20 67 72 6f 75 70 00 44 69 73 61 62 6c 69 6e 67 20 74 68 65 | bling.a.VRRP.group.Disabling.the |
c4040 | 20 65 6e 63 72 79 70 74 69 6f 6e 20 6f 6e 20 74 68 65 20 6c 69 6e 6b 20 62 79 20 72 65 6d 6f 76 | .encryption.on.the.link.by.remov |
c4060 | 69 6e 67 20 60 60 73 65 63 75 72 69 74 79 20 65 6e 63 72 79 70 74 60 60 20 77 69 6c 6c 20 73 68 | ing.``security.encrypt``.will.sh |
c4080 | 6f 77 20 74 68 65 20 75 6e 65 6e 63 72 79 70 74 65 64 20 62 75 74 20 61 75 74 68 65 6e 74 69 63 | ow.the.unencrypted.but.authentic |
c40a0 | 61 74 65 64 20 63 6f 6e 74 65 6e 74 2e 00 44 69 73 61 64 76 61 6e 74 61 67 65 73 20 61 72 65 3a | ated.content..Disadvantages.are: |
c40c0 | 00 44 69 73 61 73 73 6f 63 69 61 74 65 20 73 74 61 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 | .Disassociate.stations.based.on. |
c40e0 | 65 78 63 65 73 73 69 76 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 66 61 69 6c 75 72 65 73 20 | excessive.transmission.failures. |
c4100 | 6f 72 20 6f 74 68 65 72 20 69 6e 64 69 63 61 74 69 6f 6e 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 | or.other.indications.of.connecti |
c4120 | 6f 6e 20 6c 6f 73 73 2e 00 44 69 73 70 6c 61 79 20 49 50 76 34 20 72 6f 75 74 69 6e 67 20 74 61 | on.loss..Display.IPv4.routing.ta |
c4140 | 62 6c 65 20 66 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 | ble.for.VRF.identified.by.`<name |
c4160 | 3e 60 2e 00 44 69 73 70 6c 61 79 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 | >`..Display.IPv6.routing.table.f |
c4180 | 6f 72 20 56 52 46 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 00 44 | or.VRF.identified.by.`<name>`..D |
c41a0 | 69 73 70 6c 61 79 20 4c 6f 67 73 00 44 69 73 70 6c 61 79 20 4f 54 50 20 6b 65 79 20 66 6f 72 20 | isplay.Logs.Display.OTP.key.for. |
c41c0 | 75 73 65 72 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 61 | user.Display.all.authorization.a |
c41e0 | 74 74 65 6d 70 74 73 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 | ttempts.of.the.specified.image.D |
c4200 | 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 6c 65 20 65 6e 74 72 69 | isplay.all.known.ARP.table.entri |
c4220 | 65 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 6c 79 20 28 60 65 | es.on.a.given.interface.only.(`e |
c4240 | 74 68 31 60 29 3a 00 44 69 73 70 6c 61 79 20 61 6c 6c 20 6b 6e 6f 77 6e 20 41 52 50 20 74 61 62 | th1`):.Display.all.known.ARP.tab |
c4260 | 6c 65 20 65 6e 74 72 69 65 73 20 73 70 61 6e 6e 69 6e 67 20 61 63 72 6f 73 73 20 61 6c 6c 20 69 | le.entries.spanning.across.all.i |
c4280 | 6e 74 65 72 66 61 63 65 73 00 44 69 73 70 6c 61 79 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 61 20 | nterfaces.Display.contents.of.a. |
c42a0 | 73 70 65 63 69 66 69 65 64 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f 67 20 66 69 6c 65 20 | specified.user-defined.log.file. |
c42c0 | 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 63 | of.the.specified.image.Display.c |
c42e0 | 6f 6e 74 65 6e 74 73 20 6f 66 20 61 6c 6c 20 6d 61 73 74 65 72 20 6c 6f 67 20 66 69 6c 65 73 20 | ontents.of.all.master.log.files. |
c4300 | 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c | of.the.specified.image.Display.l |
c4320 | 61 73 74 20 6c 69 6e 65 73 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 20 6c 6f 67 20 6f 66 20 74 | ast.lines.of.the.system.log.of.t |
c4340 | 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 69 73 74 20 | he.specified.image.Display.list. |
c4360 | 6f 66 20 61 6c 6c 20 75 73 65 72 2d 64 65 66 69 6e 65 64 20 6c 6f 67 20 66 69 6c 65 73 20 6f 66 | of.all.user-defined.log.files.of |
c4380 | 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6d 61 67 65 00 44 69 73 70 6c 61 79 20 6c 6f 67 | .the.specified.image.Display.log |
c43a0 | 20 66 69 6c 65 73 20 6f 66 20 67 69 76 65 6e 20 63 61 74 65 67 6f 72 79 20 6f 6e 20 74 68 65 20 | .files.of.given.category.on.the. |
c43c0 | 63 6f 6e 73 6f 6c 65 2e 20 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 | console..Use.tab.completion.to.g |
c43e0 | 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 63 61 74 65 67 6f 72 69 65 | et.a.list.of.available.categorie |
c4400 | 73 2e 20 54 68 6f 73 20 63 61 74 65 67 6f 72 69 65 73 20 63 6f 75 6c 64 20 62 65 3a 20 61 6c 6c | s..Thos.categories.could.be:.all |
c4420 | 2c 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 20 63 6c 75 73 74 65 72 2c 20 63 6f 6e 6e 74 72 | ,.authorization,.cluster,.conntr |
c4440 | 61 63 6b 2d 73 79 6e 63 2c 20 64 68 63 70 2c 20 64 69 72 65 63 74 6f 72 79 2c 20 64 6e 73 2c 20 | ack-sync,.dhcp,.directory,.dns,. |
c4460 | 66 69 6c 65 2c 20 66 69 72 65 77 61 6c 6c 2c 20 68 74 74 70 73 2c 20 69 6d 61 67 65 20 6c 6c 64 | file,.firewall,.https,.image.lld |
c4480 | 70 2c 20 6e 61 74 2c 20 6f 70 65 6e 76 70 6e 2c 20 73 6e 6d 70 2c 20 74 61 69 6c 2c 20 76 70 6e | p,.nat,.openvpn,.snmp,.tail,.vpn |
c44a0 | 2c 20 76 72 72 70 00 44 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | ,.vrrp.Displays.information.abou |
c44c0 | 74 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 20 64 69 73 63 6f 76 65 72 65 64 20 76 69 61 20 4c | t.all.neighbors.discovered.via.L |
c44e0 | 4c 44 50 2e 00 44 69 73 70 6c 61 79 73 20 71 75 65 75 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | LDP..Displays.queue.information. |
c4500 | 66 6f 72 20 61 20 50 50 50 6f 45 20 69 6e 74 65 72 66 61 63 65 2e 00 44 69 73 70 6c 61 79 73 20 | for.a.PPPoE.interface..Displays. |
c4520 | 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 61 6b 65 6e 20 74 6f 20 61 20 6e 65 74 | the.route.packets.taken.to.a.net |
c4540 | 77 6f 72 6b 20 68 6f 73 74 20 75 74 69 6c 69 7a 69 6e 67 20 56 52 46 20 69 6e 73 74 61 6e 63 65 | work.host.utilizing.VRF.instance |
c4560 | 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 6e 61 6d 65 3e 60 2e 20 57 68 65 6e 20 75 73 | .identified.by.`<name>`..When.us |
c4580 | 69 6e 67 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6f 70 74 69 6f 6e 2c 20 64 69 73 | ing.the.IPv4.or.IPv6.option,.dis |
c45a0 | 70 6c 61 79 73 20 74 68 65 20 72 6f 75 74 65 20 70 61 63 6b 65 74 73 20 74 61 6b 65 6e 20 74 6f | plays.the.route.packets.taken.to |
c45c0 | 20 74 68 65 20 67 69 76 65 6e 20 68 6f 73 74 73 20 49 50 20 61 64 64 72 65 73 73 20 66 61 6d 69 | .the.given.hosts.IP.address.fami |
c45e0 | 6c 79 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 | ly..This.option.is.useful.when.t |
c4600 | 68 65 20 68 6f 73 74 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 68 6f 73 74 6e 61 | he.host.is.specified.as.a.hostna |
c4620 | 6d 65 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2e 00 44 6f | me.rather.than.an.IP.address..Do |
c4640 | 20 2a 6e 6f 74 2a 20 6d 61 6e 75 61 6c 6c 79 20 65 64 69 74 20 60 2f 65 74 63 2f 68 6f 73 74 73 | .*not*.manually.edit.`/etc/hosts |
c4660 | 60 2e 20 54 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 | `..This.file.will.automatically. |
c4680 | 62 65 20 72 65 67 65 6e 65 72 61 74 65 64 20 6f 6e 20 62 6f 6f 74 20 62 61 73 65 64 20 6f 6e 20 | be.regenerated.on.boot.based.on. |
c46a0 | 74 68 65 20 73 65 74 74 69 6e 67 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2c 20 77 68 | the.settings.in.this.section,.wh |
c46c0 | 69 63 68 20 6d 65 61 6e 73 20 79 6f 75 27 6c 6c 20 6c 6f 73 65 20 61 6c 6c 20 79 6f 75 72 20 6d | ich.means.you'll.lose.all.your.m |
c46e0 | 61 6e 75 61 6c 20 65 64 69 74 73 2e 20 49 6e 73 74 65 61 64 2c 20 63 6f 6e 66 69 67 75 72 65 20 | anual.edits..Instead,.configure. |
c4700 | 73 74 61 74 69 63 20 68 6f 73 74 20 6d 61 70 70 69 6e 67 73 20 61 73 20 66 6f 6c 6c 6f 77 73 2e | static.host.mappings.as.follows. |
c4720 | 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 34 20 6e 65 78 74 68 6f 70 20 74 72 61 63 6b | .Do.not.allow.IPv4.nexthop.track |
c4740 | 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 | ing.to.resolve.via.the.default.r |
c4760 | 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 | oute..This.parameter.is.configur |
c4780 | 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c | ed.per-VRF,.so.the.command.is.al |
c47a0 | 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 75 62 6e 6f 64 65 2e | so.available.in.the.VRF.subnode. |
c47c0 | 00 44 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 49 50 76 36 20 6e 65 78 74 68 6f 70 20 74 72 61 63 6b | .Do.not.allow.IPv6.nexthop.track |
c47e0 | 69 6e 67 20 74 6f 20 72 65 73 6f 6c 76 65 20 76 69 61 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 | ing.to.resolve.via.the.default.r |
c4800 | 6f 75 74 65 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 | oute..This.parameter.is.configur |
c4820 | 65 64 20 70 65 72 2d 56 52 46 2c 20 73 6f 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c | ed.per-VRF,.so.the.command.is.al |
c4840 | 73 6f 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 65 20 56 52 46 20 73 75 62 6e 6f 64 65 2e | so.available.in.the.VRF.subnode. |
c4860 | 00 44 6f 20 6e 6f 74 20 61 73 73 69 67 6e 20 61 20 6c 69 6e 6b 2d 6c 6f 63 61 6c 20 49 50 76 36 | .Do.not.assign.a.link-local.IPv6 |
c4880 | 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 44 6f 20 6e | .address.to.this.interface..Do.n |
c48a0 | 6f 74 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 20 61 73 20 74 68 65 20 66 69 72 73 74 20 73 74 | ot.configure.IFB.as.the.first.st |
c48c0 | 65 70 2e 20 46 69 72 73 74 20 63 72 65 61 74 65 20 65 76 65 72 79 74 68 69 6e 67 20 65 6c 73 65 | ep..First.create.everything.else |
c48e0 | 20 6f 66 20 79 6f 75 72 20 74 72 61 66 66 69 63 2d 70 6f 6c 69 63 79 2c 20 61 6e 64 20 74 68 65 | .of.your.traffic-policy,.and.the |
c4900 | 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 49 46 42 2e 20 4f 74 68 65 72 77 69 | n.you.can.configure.IFB..Otherwi |
c4920 | 73 65 20 79 6f 75 20 6d 69 67 68 74 20 67 65 74 20 74 68 65 20 60 60 52 54 4e 45 54 4c 49 4e 4b | se.you.might.get.the.``RTNETLINK |
c4940 | 20 61 6e 73 77 65 72 3a 20 46 69 6c 65 20 65 78 69 73 74 73 60 60 20 65 72 72 6f 72 2c 20 77 68 | .answer:.File.exists``.error,.wh |
c4960 | 69 63 68 20 63 61 6e 20 62 65 20 73 6f 6c 76 65 64 20 77 69 74 68 20 60 60 73 75 64 6f 20 69 70 | ich.can.be.solved.with.``sudo.ip |
c4980 | 20 6c 69 6e 6b 20 64 65 6c 65 74 65 20 69 66 62 30 60 60 2e 00 44 6f 20 6e 6f 74 20 6c 65 61 76 | .link.delete.ifb0``..Do.not.leav |
c49a0 | 65 20 69 6e 74 72 6f 73 70 65 63 74 69 6f 6e 20 65 6e 61 62 6c 65 64 20 69 6e 20 70 72 6f 64 75 | e.introspection.enabled.in.produ |
c49c0 | 63 74 69 6f 6e 2c 20 69 74 20 69 73 20 61 20 73 65 63 75 72 69 74 79 20 72 69 73 6b 2e 00 44 6f | ction,.it.is.a.security.risk..Do |
c49e0 | 20 6e 6f 74 20 73 65 6e 64 20 48 61 72 64 20 52 65 73 65 74 20 43 45 41 53 45 20 4e 6f 74 69 66 | .not.send.Hard.Reset.CEASE.Notif |
c4a00 | 69 63 61 74 69 6f 6e 20 66 6f 72 20 22 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 52 65 73 65 | ication.for."Administrative.Rese |
c4a20 | 74 22 20 65 76 65 6e 74 73 2e 20 57 68 65 6e 20 73 65 74 20 61 6e 64 20 47 72 61 63 65 66 75 6c | t".events..When.set.and.Graceful |
c4a40 | 20 52 65 73 74 61 72 74 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 63 61 70 61 62 69 6c 69 74 79 | .Restart.Notification.capability |
c4a60 | 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 74 68 65 20 70 65 65 72 73 2c | .is.exchanged.between.the.peers, |
c4a80 | 20 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 20 70 72 6f 63 65 64 75 72 65 73 20 61 70 70 | .Graceful.Restart.procedures.app |
c4aa0 | 6c 79 2c 20 61 6e 64 20 72 6f 75 74 65 73 20 77 69 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 64 2e | ly,.and.routes.will.be.retained. |
c4ac0 | 00 44 6f 20 6e 6f 74 20 75 73 65 20 74 68 65 20 6c 6f 63 61 6c 20 60 60 2f 65 74 63 2f 68 6f 73 | .Do.not.use.the.local.``/etc/hos |
c4ae0 | 74 73 60 60 20 66 69 6c 65 20 69 6e 20 6e 61 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 56 79 | ts``.file.in.name.resolution..Vy |
c4b00 | 4f 53 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 69 73 20 66 69 6c | OS.DHCP.server.will.use.this.fil |
c4b20 | 65 20 74 6f 20 61 64 64 20 72 65 73 6f 6c 76 65 72 73 20 74 6f 20 61 73 73 69 67 6e 65 64 20 61 | e.to.add.resolvers.to.assigned.a |
c4b40 | 64 64 72 65 73 73 65 73 2e 00 44 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 62 65 20 75 73 | ddresses..Does.not.need.to.be.us |
c4b60 | 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 70 72 6f 78 79 5f 61 72 70 2e 00 44 6f 6d 61 | ed.together.with.proxy_arp..Doma |
c4b80 | 69 6e 00 44 6f 6d 61 69 6e 20 47 72 6f 75 70 73 00 44 6f 6d 61 69 6e 20 4e 61 6d 65 00 44 6f 6d | in.Domain.Groups.Domain.Name.Dom |
c4ba0 | 61 69 6e 20 6e 61 6d 65 28 73 29 20 66 6f 72 20 77 68 69 63 68 20 74 6f 20 6f 62 74 61 69 6e 20 | ain.name(s).for.which.to.obtain. |
c4bc0 | 63 65 72 74 69 66 69 63 61 74 65 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 20 63 61 6e 20 69 6e 63 | certificate.Domain.names.can.inc |
c4be0 | 6c 75 64 65 20 6c 65 74 74 65 72 73 2c 20 6e 75 6d 62 65 72 73 2c 20 68 79 70 68 65 6e 73 20 61 | lude.letters,.numbers,.hyphens.a |
c4c00 | 6e 64 20 70 65 72 69 6f 64 73 20 77 69 74 68 20 61 20 6d 61 78 69 6d 75 6d 20 6c 65 6e 67 74 68 | nd.periods.with.a.maximum.length |
c4c20 | 20 6f 66 20 32 35 33 20 63 68 61 72 61 63 74 65 72 73 2e 00 44 6f 6d 61 69 6e 20 6e 61 6d 65 73 | .of.253.characters..Domain.names |
c4c40 | 20 74 6f 20 61 70 70 6c 79 2c 20 6d 75 6c 74 69 70 6c 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 | .to.apply,.multiple.domain-names |
c4c60 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 44 6f 6d 61 69 6e 20 73 65 61 72 63 68 | .can.be.specified..Domain.search |
c4c80 | 20 6f 72 64 65 72 00 44 6f 6e 27 74 20 62 65 20 61 66 72 61 69 64 20 74 68 61 74 20 79 6f 75 20 | .order.Don't.be.afraid.that.you. |
c4ca0 | 6e 65 65 64 20 74 6f 20 72 65 2d 64 6f 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | need.to.re-do.your.configuration |
c4cc0 | 2e 20 4b 65 79 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 68 61 6e 64 6c 65 64 2c | ..Key.transformation.is.handled, |
c4ce0 | 20 61 73 20 61 6c 77 61 79 73 2c 20 62 79 20 6f 75 72 20 6d 69 67 72 61 74 69 6f 6e 20 73 63 72 | .as.always,.by.our.migration.scr |
c4d00 | 69 70 74 73 2c 20 73 6f 20 74 68 69 73 20 77 69 6c 6c 20 62 65 20 61 20 73 6d 6f 6f 74 68 20 74 | ipts,.so.this.will.be.a.smooth.t |
c4d20 | 72 61 6e 73 69 74 69 6f 6e 20 66 6f 72 20 79 6f 75 21 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c | ransition.for.you!.Don't.forget, |
c4d40 | 20 74 68 65 20 43 49 44 52 20 64 65 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 | .the.CIDR.declared.in.the.networ |
c4d60 | 6b 20 73 74 61 74 65 6d 65 6e 74 20 2a 2a 4d 55 53 54 20 65 78 69 73 74 20 69 6e 20 79 6f 75 72 | k.statement.**MUST.exist.in.your |
c4d80 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 | .routing.table.(dynamic.or.stati |
c4da0 | 63 29 2c 20 74 68 65 20 62 65 73 74 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 | c),.the.best.way.to.make.sure.th |
c4dc0 | 61 74 20 69 73 20 74 72 75 65 20 69 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 | at.is.true.is.creating.a.static. |
c4de0 | 72 6f 75 74 65 3a 2a 2a 00 44 6f 6e 27 74 20 66 6f 72 67 65 74 2c 20 74 68 65 20 43 49 44 52 20 | route:**.Don't.forget,.the.CIDR. |
c4e00 | 64 65 63 6c 61 72 65 64 20 69 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 6e | declared.in.the.network.statemen |
c4e20 | 74 20 4d 55 53 54 20 2a 2a 65 78 69 73 74 20 69 6e 20 79 6f 75 72 20 72 6f 75 74 69 6e 67 20 74 | t.MUST.**exist.in.your.routing.t |
c4e40 | 61 62 6c 65 20 28 64 79 6e 61 6d 69 63 20 6f 72 20 73 74 61 74 69 63 29 2c 20 74 68 65 20 62 65 | able.(dynamic.or.static),.the.be |
c4e60 | 73 74 20 77 61 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 69 73 20 74 72 75 65 | st.way.to.make.sure.that.is.true |
c4e80 | 20 69 73 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 3a 2a 2a 00 44 | .is.creating.a.static.route:**.D |
c4ea0 | 6f 6e 27 74 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 64 | on't.get.confused.about.the.used |
c4ec0 | 20 2f 33 31 20 74 75 6e 6e 65 6c 20 73 75 62 6e 65 74 2e 20 3a 72 66 63 3a 60 33 30 32 31 60 20 | ./31.tunnel.subnet..:rfc:`3021`. |
c4ee0 | 67 69 76 65 73 20 79 6f 75 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | gives.you.additional.information |
c4f00 | 20 66 6f 72 20 75 73 69 6e 67 20 2f 33 31 20 73 75 62 6e 65 74 73 20 6f 6e 20 70 6f 69 6e 74 2d | .for.using./31.subnets.on.point- |
c4f20 | 74 6f 2d 70 6f 69 6e 74 20 6c 69 6e 6b 73 2e 00 44 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 | to-point.links..Download.bandwid |
c4f40 | 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e | th.limit.in.kbit/s.for.`<user>`. |
c4f60 | 00 44 6f 77 6e 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 | .Download.bandwidth.limit.in.kbi |
c4f80 | 74 2f 73 20 66 6f 72 20 75 73 65 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 | t/s.for.user.on.interface.`<inte |
c4fa0 | 72 66 61 63 65 3e 60 2e 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 64 61 74 65 20 63 6f 6d 70 6c 65 74 | rface>`..Download/Update.complet |
c4fc0 | 65 20 62 6c 61 63 6b 6c 69 73 74 00 44 6f 77 6e 6c 6f 61 64 2f 55 70 64 61 74 65 20 70 61 72 74 | e.blacklist.Download/Update.part |
c4fe0 | 69 61 6c 20 62 6c 61 63 6b 6c 69 73 74 2e 00 44 72 6f 70 20 41 53 2d 4e 55 4d 42 45 52 20 66 72 | ial.blacklist..Drop.AS-NUMBER.fr |
c5000 | 6f 6d 20 74 68 65 20 42 47 50 20 41 53 20 70 61 74 68 2e 00 44 72 6f 70 20 54 61 69 6c 00 44 72 | om.the.BGP.AS.path..Drop.Tail.Dr |
c5020 | 6f 70 20 72 61 74 65 00 44 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 20 72 65 70 6f 72 74 65 64 | op.rate.Dropped.packets.reported |
c5040 | 20 6f 6e 20 44 52 4f 50 4d 4f 4e 20 4e 65 74 6c 69 6e 6b 20 63 68 61 6e 6e 65 6c 20 62 79 20 4c | .on.DROPMON.Netlink.channel.by.L |
c5060 | 69 6e 75 78 20 6b 65 72 6e 65 6c 20 61 72 65 20 65 78 70 6f 72 74 65 64 20 76 69 61 20 74 68 65 | inux.kernel.are.exported.via.the |
c5080 | 20 73 74 61 6e 64 61 72 64 20 73 46 6c 6f 77 20 76 35 20 65 78 74 65 6e 73 69 6f 6e 20 66 6f 72 | .standard.sFlow.v5.extension.for |
c50a0 | 20 72 65 70 6f 72 74 69 6e 67 20 64 72 6f 70 70 65 64 20 70 61 63 6b 65 74 73 00 44 75 61 6c 2d | .reporting.dropped.packets.Dual- |
c50c0 | 53 74 61 63 6b 20 49 50 76 34 2f 49 50 76 36 20 70 72 6f 76 69 73 69 6f 6e 69 6e 67 20 77 69 74 | Stack.IPv4/IPv6.provisioning.wit |
c50e0 | 68 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 44 75 6d 6d 79 00 44 75 6d 6d 79 20 | h.Prefix.Delegation.Dummy.Dummy. |
c5100 | 69 6e 74 65 72 66 61 63 65 00 44 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 | interface.Dummy.interfaces.can.b |
c5120 | 65 20 75 73 65 64 20 61 73 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 20 61 6c 77 61 79 73 | e.used.as.interfaces.that.always |
c5140 | 20 73 74 61 79 20 75 70 20 28 69 6e 20 74 68 65 20 73 61 6d 65 20 66 61 73 68 69 6f 6e 20 74 6f | .stay.up.(in.the.same.fashion.to |
c5160 | 20 6c 6f 6f 70 62 61 63 6b 73 20 69 6e 20 43 69 73 63 6f 20 49 4f 53 29 2c 20 6f 72 20 66 6f 72 | .loopbacks.in.Cisco.IOS),.or.for |
c5180 | 20 74 65 73 74 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 00 44 75 70 6c 69 63 61 74 65 20 70 61 63 | .testing.purposes..Duplicate.pac |
c51a0 | 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 70 61 63 | kets.are.not.included.in.the.pac |
c51c0 | 6b 65 74 20 6c 6f 73 73 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2c 20 61 6c 74 68 6f 75 67 68 20 74 | ket.loss.calculation,.although.t |
c51e0 | 68 65 20 72 6f 75 6e 64 2d 74 72 69 70 20 74 69 6d 65 20 6f 66 20 74 68 65 73 65 20 70 61 63 6b | he.round-trip.time.of.these.pack |
c5200 | 65 74 73 20 69 73 20 75 73 65 64 20 69 6e 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 6d | ets.is.used.in.calculating.the.m |
c5220 | 69 6e 69 6d 75 6d 2f 20 61 76 65 72 61 67 65 2f 6d 61 78 69 6d 75 6d 20 72 6f 75 6e 64 2d 74 72 | inimum/.average/maximum.round-tr |
c5240 | 69 70 20 74 69 6d 65 20 6e 75 6d 62 65 72 73 2e 00 44 75 72 69 6e 67 20 69 6e 69 74 69 61 6c 20 | ip.time.numbers..During.initial. |
c5260 | 64 65 70 6c 6f 79 6d 65 6e 74 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 75 73 69 6e 67 20 74 68 | deployment.we.recommend.using.th |
c5280 | 65 20 73 74 61 67 69 6e 67 20 41 50 49 20 6f 66 20 4c 65 74 73 45 6e 63 72 79 70 74 20 74 6f 20 | e.staging.API.of.LetsEncrypt.to. |
c52a0 | 70 72 65 76 65 6e 74 20 61 6e 64 20 62 6c 61 63 6b 6c 69 73 74 69 6e 67 20 6f 66 20 79 6f 75 72 | prevent.and.blacklisting.of.your |
c52c0 | 20 73 79 73 74 65 6d 2e 20 54 68 65 20 41 50 49 20 65 6e 64 70 6f 69 6e 74 20 69 73 20 68 74 74 | .system..The.API.endpoint.is.htt |
c52e0 | 70 73 3a 2f 2f 61 63 6d 65 2d 73 74 61 67 69 6e 67 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e | ps://acme-staging-v02.api.letsen |
c5300 | 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 79 00 44 75 72 69 6e 67 20 70 72 6f 66 69 | crypt.org/directory.During.profi |
c5320 | 6c 65 20 69 6d 70 6f 72 74 2c 20 74 68 65 20 75 73 65 72 20 69 73 20 61 73 6b 65 64 20 74 6f 20 | le.import,.the.user.is.asked.to. |
c5340 | 65 6e 74 65 72 20 69 74 73 20 49 50 53 65 63 20 63 72 65 64 65 6e 74 69 61 6c 73 20 28 75 73 65 | enter.its.IPSec.credentials.(use |
c5360 | 72 6e 61 6d 65 20 61 6e 64 20 70 61 73 73 77 6f 72 64 29 20 77 68 69 63 68 20 69 73 20 73 74 6f | rname.and.password).which.is.sto |
c5380 | 72 65 64 20 6f 6e 20 74 68 65 20 6d 6f 62 69 6c 65 2e 00 44 79 6e 61 6d 69 63 20 44 4e 53 00 44 | red.on.the.mobile..Dynamic.DNS.D |
c53a0 | 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 00 45 41 50 6f 4c 20 63 6f 6d 65 73 20 77 69 | ynamic-protection.EAPoL.comes.wi |
c53c0 | 74 68 20 61 6e 20 69 64 65 6e 74 69 66 79 20 6f 70 74 69 6f 6e 2e 20 57 65 20 61 75 74 6f 6d 61 | th.an.identify.option..We.automa |
c53e0 | 74 69 63 61 6c 6c 79 20 75 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 4d 41 43 20 61 64 | tically.use.the.interface.MAC.ad |
c5400 | 64 72 65 73 73 20 61 73 20 69 64 65 6e 74 69 74 79 20 70 61 72 61 6d 65 74 65 72 2e 00 45 53 50 | dress.as.identity.parameter..ESP |
c5420 | 20 28 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 53 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 | .(Encapsulating.Security.Payload |
c5440 | 29 20 41 74 74 72 69 62 75 74 65 73 00 45 53 50 20 50 68 61 73 65 3a 00 45 53 50 20 69 73 20 75 | ).Attributes.ESP.Phase:.ESP.is.u |
c5460 | 73 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 | sed.to.provide.confidentiality,. |
c5480 | 64 61 74 61 20 6f 72 69 67 69 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 63 6f 6e 6e | data.origin.authentication,.conn |
c54a0 | 65 63 74 69 6f 6e 6c 65 73 73 20 69 6e 74 65 67 72 69 74 79 2c 20 61 6e 20 61 6e 74 69 2d 72 65 | ectionless.integrity,.an.anti-re |
c54c0 | 70 6c 61 79 20 73 65 72 76 69 63 65 20 28 61 20 66 6f 72 6d 20 6f 66 20 70 61 72 74 69 61 6c 20 | play.service.(a.form.of.partial. |
c54e0 | 73 65 71 75 65 6e 63 65 20 69 6e 74 65 67 72 69 74 79 29 2c 20 61 6e 64 20 6c 69 6d 69 74 65 64 | sequence.integrity),.and.limited |
c5500 | 20 74 72 61 66 66 69 63 20 66 6c 6f 77 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2e 20 68 | .traffic.flow.confidentiality..h |
c5520 | 74 74 70 73 3a 2f 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f | ttps://datatracker.ietf.org/doc/ |
c5540 | 68 74 6d 6c 2f 72 66 63 34 33 30 33 00 45 61 63 68 20 3a 61 62 62 72 3a 60 41 53 20 28 41 75 74 | html/rfc4303.Each.:abbr:`AS.(Aut |
c5560 | 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 29 60 20 68 61 73 20 61 6e 20 69 64 65 6e 74 69 66 79 | onomous.System)`.has.an.identify |
c5580 | 69 6e 67 20 6e 75 6d 62 65 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 69 74 20 63 61 | ing.number.associated.with.it.ca |
c55a0 | 6c 6c 65 64 20 61 6e 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 | lled.an.:abbr:`ASN.(Autonomous.S |
c55c0 | 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 2e 20 54 68 69 73 20 69 73 20 61 20 74 77 6f 20 6f 63 | ystem.Number)`..This.is.a.two.oc |
c55e0 | 74 65 74 20 76 61 6c 75 65 20 72 61 6e 67 69 6e 67 20 69 6e 20 76 61 6c 75 65 20 66 72 6f 6d 20 | tet.value.ranging.in.value.from. |
c5600 | 31 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 41 53 20 6e 75 6d 62 65 72 73 20 36 34 35 31 32 | 1.to.65535..The.AS.numbers.64512 |
c5620 | 20 74 68 72 6f 75 67 68 20 36 35 35 33 35 20 61 72 65 20 64 65 66 69 6e 65 64 20 61 73 20 70 72 | .through.65535.are.defined.as.pr |
c5640 | 69 76 61 74 65 20 41 53 20 6e 75 6d 62 65 72 73 2e 20 50 72 69 76 61 74 65 20 41 53 20 6e 75 6d | ivate.AS.numbers..Private.AS.num |
c5660 | 62 65 72 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 64 76 65 72 74 69 73 65 64 20 6f 6e 20 74 | bers.must.not.be.advertised.on.t |
c5680 | 68 65 20 67 6c 6f 62 61 6c 20 49 6e 74 65 72 6e 65 74 2e 20 54 68 65 20 32 2d 62 79 74 65 20 41 | he.global.Internet..The.2-byte.A |
c56a0 | 53 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 68 61 73 20 62 65 65 6e 20 65 78 68 61 75 73 74 65 | S.number.range.has.been.exhauste |
c56c0 | 64 2e 20 34 2d 62 79 74 65 20 41 53 20 6e 75 6d 62 65 72 73 20 61 72 65 20 73 70 65 63 69 66 69 | d..4-byte.AS.numbers.are.specifi |
c56e0 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 36 37 39 33 60 2c 20 61 6e 64 20 70 72 6f 76 69 64 65 20 61 | ed.in.:rfc:`6793`,.and.provide.a |
c5700 | 20 70 6f 6f 6c 20 6f 66 20 34 32 39 34 39 36 37 32 39 36 20 41 53 20 6e 75 6d 62 65 72 73 2e 00 | .pool.of.4294967296.AS.numbers.. |
c5720 | 45 61 63 68 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 75 6e 69 | Each.Netfilter.connection.is.uni |
c5740 | 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 28 6c 61 79 65 72 2d 33 20 70 | quely.identified.by.a.(layer-3.p |
c5760 | 72 6f 74 6f 63 6f 6c 2c 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 | rotocol,.source.address,.destina |
c5780 | 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 20 6c 61 79 65 72 2d 34 20 70 72 6f 74 6f 63 6f 6c 2c 20 | tion.address,.layer-4.protocol,. |
c57a0 | 6c 61 79 65 72 2d 34 20 6b 65 79 29 20 74 75 70 6c 65 2e 20 54 68 65 20 6c 61 79 65 72 2d 34 20 | layer-4.key).tuple..The.layer-4. |
c57c0 | 6b 65 79 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 74 72 61 6e 73 70 6f 72 74 20 70 72 6f | key.depends.on.the.transport.pro |
c57e0 | 74 6f 63 6f 6c 3b 20 66 6f 72 20 54 43 50 2f 55 44 50 20 69 74 20 69 73 20 74 68 65 20 70 6f 72 | tocol;.for.TCP/UDP.it.is.the.por |
c5800 | 74 20 6e 75 6d 62 65 72 73 2c 20 66 6f 72 20 74 75 6e 6e 65 6c 73 20 69 74 20 63 61 6e 20 62 65 | t.numbers,.for.tunnels.it.can.be |
c5820 | 20 74 68 65 69 72 20 74 75 6e 6e 65 6c 20 49 44 2c 20 62 75 74 20 6f 74 68 65 72 77 69 73 65 20 | .their.tunnel.ID,.but.otherwise. |
c5840 | 69 73 20 6a 75 73 74 20 7a 65 72 6f 2c 20 61 73 20 69 66 20 69 74 20 77 65 72 65 20 6e 6f 74 20 | is.just.zero,.as.if.it.were.not. |
c5860 | 70 61 72 74 20 6f 66 20 74 68 65 20 74 75 70 6c 65 2e 20 54 6f 20 62 65 20 61 62 6c 65 20 74 6f | part.of.the.tuple..To.be.able.to |
c5880 | 20 69 6e 73 70 65 63 74 20 74 68 65 20 54 43 50 20 70 6f 72 74 20 69 6e 20 61 6c 6c 20 63 61 73 | .inspect.the.TCP.port.in.all.cas |
c58a0 | 65 73 2c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 6d 61 6e 64 61 74 6f 72 69 6c 79 20 | es,.packets.will.be.mandatorily. |
c58c0 | 64 65 66 72 61 67 6d 65 6e 74 65 64 2e 00 45 61 63 68 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 | defragmented..Each.VXLAN.segment |
c58e0 | 20 69 73 20 69 64 65 6e 74 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 61 20 32 34 2d 62 69 74 20 | .is.identified.through.a.24-bit. |
c5900 | 73 65 67 6d 65 6e 74 20 49 44 2c 20 74 65 72 6d 65 64 20 74 68 65 20 3a 61 62 62 72 3a 60 56 4e | segment.ID,.termed.the.:abbr:`VN |
c5920 | 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 65 6e 74 69 66 69 65 72 20 28 6f 72 20 | I.(VXLAN.Network.Identifier.(or. |
c5940 | 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 2c 20 54 68 69 73 20 61 6c 6c 6f 77 73 | VXLAN.Segment.ID))`,.This.allows |
c5960 | 20 75 70 20 74 6f 20 31 36 4d 20 56 58 4c 41 4e 20 73 65 67 6d 65 6e 74 73 20 74 6f 20 63 6f 65 | .up.to.16M.VXLAN.segments.to.coe |
c5980 | 78 69 73 74 20 77 69 74 68 69 6e 20 74 68 65 20 73 61 6d 65 20 61 64 6d 69 6e 69 73 74 72 61 74 | xist.within.the.same.administrat |
c59a0 | 69 76 65 20 64 6f 6d 61 69 6e 2e 00 45 61 63 68 20 62 72 69 64 67 65 20 68 61 73 20 61 20 72 65 | ive.domain..Each.bridge.has.a.re |
c59c0 | 6c 61 74 69 76 65 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 63 6f 73 74 2e 20 45 61 63 68 20 69 | lative.priority.and.cost..Each.i |
c59e0 | 6e 74 65 72 66 61 63 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 70 6f | nterface.is.associated.with.a.po |
c5a00 | 72 74 20 28 6e 75 6d 62 65 72 29 20 69 6e 20 74 68 65 20 53 54 50 20 63 6f 64 65 2e 20 45 61 63 | rt.(number).in.the.STP.code..Eac |
c5a20 | 68 20 68 61 73 20 61 20 70 72 69 6f 72 69 74 79 20 61 6e 64 20 61 20 63 6f 73 74 2c 20 74 68 61 | h.has.a.priority.and.a.cost,.tha |
c5a40 | 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 69 64 65 20 77 68 69 63 68 20 69 73 20 74 68 65 | t.is.used.to.decide.which.is.the |
c5a60 | 20 73 68 6f 72 74 65 73 74 20 70 61 74 68 20 74 6f 20 66 6f 72 77 61 72 64 20 61 20 70 61 63 6b | .shortest.path.to.forward.a.pack |
c5a80 | 65 74 2e 20 54 68 65 20 6c 6f 77 65 73 74 20 63 6f 73 74 20 70 61 74 68 20 69 73 20 61 6c 77 61 | et..The.lowest.cost.path.is.alwa |
c5aa0 | 79 73 20 75 73 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 6f 74 68 65 72 20 70 61 74 68 20 69 73 | ys.used.unless.the.other.path.is |
c5ac0 | 20 64 6f 77 6e 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 62 72 69 64 | .down..If.you.have.multiple.brid |
c5ae0 | 67 65 73 20 61 6e 64 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 65 6e 20 79 6f 75 20 6d 61 79 20 | ges.and.interfaces.then.you.may. |
c5b00 | 6e 65 65 64 20 74 6f 20 61 64 6a 75 73 74 20 74 68 65 20 70 72 69 6f 72 69 74 69 65 73 20 74 6f | need.to.adjust.the.priorities.to |
c5b20 | 20 61 63 68 69 65 76 65 20 6f 70 74 69 6d 75 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 45 61 | .achieve.optimum.performance..Ea |
c5b40 | 63 68 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 69 6e 73 74 61 6e 63 65 20 63 61 6e 20 | ch.broadcast.relay.instance.can. |
c5b60 | 62 65 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 64 69 73 61 62 6c 65 64 20 77 69 74 68 6f 75 74 | be.individually.disabled.without |
c5b80 | 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 6f 64 65 20 62 79 | .deleting.the.configured.node.by |
c5ba0 | 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 45 61 | .using.the.following.command:.Ea |
c5bc0 | 63 68 20 63 6c 61 73 73 20 63 61 6e 20 68 61 76 65 20 61 20 67 75 61 72 61 6e 74 65 65 64 20 70 | ch.class.can.have.a.guaranteed.p |
c5be0 | 61 72 74 20 6f 66 20 74 68 65 20 74 6f 74 61 6c 20 62 61 6e 64 77 69 64 74 68 20 64 65 66 69 6e | art.of.the.total.bandwidth.defin |
c5c00 | 65 64 20 66 6f 72 20 74 68 65 20 77 68 6f 6c 65 20 70 6f 6c 69 63 79 2c 20 73 6f 20 61 6c 6c 20 | ed.for.the.whole.policy,.so.all. |
c5c20 | 74 68 6f 73 65 20 73 68 61 72 65 73 20 74 6f 67 65 74 68 65 72 20 73 68 6f 75 6c 64 20 6e 6f 74 | those.shares.together.should.not |
c5c40 | 20 62 65 20 68 69 67 68 65 72 20 74 68 61 6e 20 74 68 65 20 70 6f 6c 69 63 79 27 73 20 77 68 6f | .be.higher.than.the.policy's.who |
c5c60 | 6c 65 20 62 61 6e 64 77 69 64 74 68 2e 00 45 61 63 68 20 63 6c 61 73 73 20 69 73 20 61 73 73 69 | le.bandwidth..Each.class.is.assi |
c5c80 | 67 6e 65 64 20 61 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 28 74 68 65 20 6e 75 6d 62 | gned.a.deficit.counter.(the.numb |
c5ca0 | 65 72 20 6f 66 20 62 79 74 65 73 20 74 68 61 74 20 61 20 66 6c 6f 77 20 69 73 20 61 6c 6c 6f 77 | er.of.bytes.that.a.flow.is.allow |
c5cc0 | 65 64 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 77 68 65 6e 20 69 74 20 69 73 20 69 74 73 20 74 75 | ed.to.transmit.when.it.is.its.tu |
c5ce0 | 72 6e 29 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 74 6f 20 71 75 61 6e 74 75 6d 2e 20 51 75 61 6e | rn).initialized.to.quantum..Quan |
c5d00 | 74 75 6d 20 69 73 20 61 20 70 61 72 61 6d 65 74 65 72 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 | tum.is.a.parameter.you.configure |
c5d20 | 20 77 68 69 63 68 20 61 63 74 73 20 6c 69 6b 65 20 61 20 63 72 65 64 69 74 20 6f 66 20 66 69 78 | .which.acts.like.a.credit.of.fix |
c5d40 | 20 62 79 74 65 73 20 74 68 65 20 63 6f 75 6e 74 65 72 20 72 65 63 65 69 76 65 73 20 6f 6e 20 65 | .bytes.the.counter.receives.on.e |
c5d60 | 61 63 68 20 72 6f 75 6e 64 2e 20 54 68 65 6e 20 74 68 65 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 | ach.round..Then.the.Round-Robin. |
c5d80 | 70 6f 6c 69 63 79 20 73 74 61 72 74 73 20 6d 6f 76 69 6e 67 20 69 74 73 20 52 6f 75 6e 64 20 52 | policy.starts.moving.its.Round.R |
c5da0 | 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 71 75 65 75 65 73 2e | obin.pointer.through.the.queues. |
c5dc0 | 20 49 66 20 74 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 69 73 20 67 72 65 61 74 | .If.the.deficit.counter.is.great |
c5de0 | 65 72 20 74 68 61 6e 20 74 68 65 20 70 61 63 6b 65 74 27 73 20 73 69 7a 65 20 61 74 20 74 68 65 | er.than.the.packet's.size.at.the |
c5e00 | 20 68 65 61 64 20 6f 66 20 74 68 65 20 71 75 65 75 65 2c 20 74 68 69 73 20 70 61 63 6b 65 74 20 | .head.of.the.queue,.this.packet. |
c5e20 | 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 6e 64 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 | will.be.sent.and.the.value.of.th |
c5e40 | 65 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 62 65 20 64 65 63 72 65 6d 65 6e 74 65 64 20 62 79 | e.counter.will.be.decremented.by |
c5e60 | 20 74 68 65 20 70 61 63 6b 65 74 20 73 69 7a 65 2e 20 54 68 65 6e 2c 20 74 68 65 20 73 69 7a 65 | .the.packet.size..Then,.the.size |
c5e80 | 20 6f 66 20 74 68 65 20 6e 65 78 74 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 | .of.the.next.packet.will.be.comp |
c5ea0 | 61 72 65 64 20 74 6f 20 74 68 65 20 63 6f 75 6e 74 65 72 20 76 61 6c 75 65 20 61 67 61 69 6e 2c | ared.to.the.counter.value.again, |
c5ec0 | 20 72 65 70 65 61 74 69 6e 67 20 74 68 65 20 70 72 6f 63 65 73 73 2e 20 4f 6e 63 65 20 74 68 65 | .repeating.the.process..Once.the |
c5ee0 | 20 71 75 65 75 65 20 69 73 20 65 6d 70 74 79 20 6f 72 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 | .queue.is.empty.or.the.value.of. |
c5f00 | 74 68 65 20 63 6f 75 6e 74 65 72 20 69 73 20 69 6e 73 75 66 66 69 63 69 65 6e 74 2c 20 74 68 65 | the.counter.is.insufficient,.the |
c5f20 | 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 69 6e 74 65 72 20 77 69 6c 6c 20 6d 6f 76 65 20 74 | .Round-Robin.pointer.will.move.t |
c5f40 | 6f 20 74 68 65 20 6e 65 78 74 20 71 75 65 75 65 2e 20 49 66 20 74 68 65 20 71 75 65 75 65 20 69 | o.the.next.queue..If.the.queue.i |
c5f60 | 73 20 65 6d 70 74 79 2c 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 64 65 66 69 63 69 | s.empty,.the.value.of.the.defici |
c5f80 | 74 20 63 6f 75 6e 74 65 72 20 69 73 20 72 65 73 65 74 20 74 6f 20 30 2e 00 45 61 63 68 20 64 79 | t.counter.is.reset.to.0..Each.dy |
c5fa0 | 6e 61 6d 69 63 20 4e 48 53 20 77 69 6c 6c 20 67 65 74 20 61 20 70 65 65 72 20 65 6e 74 72 79 20 | namic.NHS.will.get.a.peer.entry. |
c5fc0 | 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 | with.the.configured.network.addr |
c5fe0 | 65 73 73 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 65 64 20 4e 42 4d 41 20 61 64 64 72 | ess.and.the.discovered.NBMA.addr |
c6000 | 65 73 73 2e 00 45 61 63 68 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 69 73 20 63 6f 6e 66 69 67 | ess..Each.health.check.is.config |
c6020 | 75 72 65 64 20 69 6e 20 69 74 73 20 6f 77 6e 20 74 65 73 74 2c 20 74 65 73 74 73 20 61 72 65 20 | ured.in.its.own.test,.tests.are. |
c6040 | 6e 75 6d 62 65 72 65 64 20 61 6e 64 20 70 72 6f 63 65 73 73 65 64 20 69 6e 20 6e 75 6d 65 72 69 | numbered.and.processed.in.numeri |
c6060 | 63 20 6f 72 64 65 72 2e 20 46 6f 72 20 6d 75 6c 74 69 20 74 61 72 67 65 74 20 68 65 61 6c 74 68 | c.order..For.multi.target.health |
c6080 | 20 63 68 65 63 6b 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 65 73 74 73 20 63 61 6e 20 62 65 20 | .checking.multiple.tests.can.be. |
c60a0 | 64 65 66 69 6e 65 64 3a 00 45 61 63 68 20 69 6e 64 69 76 69 64 75 61 6c 20 63 6f 6e 66 69 67 75 | defined:.Each.individual.configu |
c60c0 | 72 65 64 20 63 6f 6e 73 6f 6c 65 2d 73 65 72 76 65 72 20 64 65 76 69 63 65 20 63 61 6e 20 62 65 | red.console-server.device.can.be |
c60e0 | 20 64 69 72 65 63 74 6c 79 20 65 78 70 6f 73 65 64 20 74 6f 20 74 68 65 20 6f 75 74 73 69 64 65 | .directly.exposed.to.the.outside |
c6100 | 20 77 6f 72 6c 64 2e 20 41 20 75 73 65 72 20 63 61 6e 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e | .world..A.user.can.directly.conn |
c6120 | 65 63 74 20 76 69 61 20 53 53 48 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 70 6f | ect.via.SSH.to.the.configured.po |
c6140 | 72 74 2e 00 45 61 63 68 20 6e 6f 64 65 20 28 48 75 62 20 61 6e 64 20 53 70 6f 6b 65 29 20 75 73 | rt..Each.node.(Hub.and.Spoke).us |
c6160 | 65 73 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 | es.an.IP.address.from.the.networ |
c6180 | 6b 20 31 37 32 2e 31 36 2e 32 35 33 2e 31 32 38 2f 32 39 2e 00 45 61 63 68 20 6f 66 20 74 68 65 | k.172.16.253.128/29..Each.of.the |
c61a0 | 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 | .install.command.should.be.appli |
c61c0 | 65 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d | ed.to.the.configuration.and.comm |
c61e0 | 69 74 65 64 20 62 65 66 6f 72 65 20 75 73 69 6e 67 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 6e | ited.before.using.under.the.open |
c6200 | 63 6f 6e 6e 65 63 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 45 61 63 68 20 73 69 74 65 | connect.configuration:.Each.site |
c6220 | 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f | -to-site.peer.has.the.next.optio |
c6240 | 6e 73 3a 00 45 65 6e 61 62 6c 65 73 20 74 68 65 20 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f | ns:.Eenables.the.Generic.Protoco |
c6260 | 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 56 58 4c 41 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 | l.extension.(VXLAN-GPE)..Current |
c6280 | 6c 79 2c 20 74 68 69 73 20 69 73 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 | ly,.this.is.only.supported.toget |
c62a0 | 68 65 72 20 77 69 74 68 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 | her.with.the.external.keyword..E |
c62c0 | 6d 61 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 61 73 73 6f 63 69 61 74 65 20 77 69 74 68 20 63 | mail.address.to.associate.with.c |
c62e0 | 65 72 74 69 66 69 63 61 74 65 00 45 6d 61 69 6c 20 75 73 65 64 20 66 6f 72 20 72 65 67 69 73 74 | ertificate.Email.used.for.regist |
c6300 | 72 61 74 69 6f 6e 20 61 6e 64 20 72 65 63 6f 76 65 72 79 20 63 6f 6e 74 61 63 74 2e 00 45 6d 62 | ration.and.recovery.contact..Emb |
c6320 | 65 64 64 69 6e 67 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 6e 6f 74 68 65 72 20 6f | edding.one.policy.into.another.o |
c6340 | 6e 65 00 45 6d 65 72 67 65 6e 63 79 00 45 6e 61 62 6c 65 20 3a 61 62 62 72 3a 60 42 4d 50 20 28 | ne.Emergency.Enable.:abbr:`BMP.( |
c6360 | 42 47 50 20 4d 6f 6e 69 74 6f 72 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 29 60 20 73 75 70 70 6f 72 | BGP.Monitoring.Protocol)`.suppor |
c6380 | 74 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 49 53 49 53 20 6f 6e 20 61 6e 20 69 6e 74 65 | t.Enable.BFD.for.ISIS.on.an.inte |
c63a0 | 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 4f 53 50 46 20 6f 6e 20 61 6e 20 | rface.Enable.BFD.for.OSPF.on.an. |
c63c0 | 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 66 6f 72 20 4f 53 50 46 76 33 20 | interface.Enable.BFD.for.OSPFv3. |
c63e0 | 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 42 47 | on.an.interface.Enable.BFD.in.BG |
c6400 | 50 00 45 6e 61 62 6c 65 20 42 46 44 20 69 6e 20 49 53 49 53 00 45 6e 61 62 6c 65 20 42 46 44 20 | P.Enable.BFD.in.ISIS.Enable.BFD. |
c6420 | 69 6e 20 4f 53 50 46 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 20 42 47 50 20 70 65 65 72 | in.OSPF.Enable.BFD.on.a.BGP.peer |
c6440 | 20 67 72 6f 75 70 00 45 6e 61 62 6c 65 20 42 46 44 20 6f 6e 20 61 20 73 69 6e 67 6c 65 20 42 47 | .group.Enable.BFD.on.a.single.BG |
c6460 | 50 20 6e 65 69 67 68 62 6f 72 00 45 6e 61 62 6c 65 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 | P.neighbor.Enable.DHCP.failover. |
c6480 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 61 64 64 72 65 73 73 20 70 | configuration.for.this.address.p |
c64a0 | 6f 6f 6c 2e 00 45 6e 61 62 6c 65 20 47 72 61 70 68 51 4c 20 53 63 68 65 6d 61 20 69 6e 74 72 6f | ool..Enable.GraphQL.Schema.intro |
c64c0 | 73 70 65 63 74 69 6f 6e 2e 00 45 6e 61 62 6c 65 20 48 54 2d 64 65 6c 61 79 65 64 20 42 6c 6f 63 | spection..Enable.HT-delayed.Bloc |
c64e0 | 6b 20 41 63 6b 20 60 60 5b 44 45 4c 41 59 45 44 2d 42 41 5d 60 60 00 45 6e 61 62 6c 65 20 49 43 | k.Ack.``[DELAYED-BA]``.Enable.IC |
c6500 | 4d 50 20 52 6f 75 74 65 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 73 75 70 | MP.Router.Discovery.Protocol.sup |
c6520 | 70 6f 72 74 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 71 75 65 72 69 65 72 | port.Enable.IGMP.and.MLD.querier |
c6540 | 2e 00 45 6e 61 62 6c 65 20 49 47 4d 50 20 61 6e 64 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 2e 00 | ..Enable.IGMP.and.MLD.snooping.. |
c6560 | 45 6e 61 62 6c 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 63 6c 69 65 6e 74 00 45 | Enable.IP.forwarding.on.client.E |
c6580 | 6e 61 62 6c 65 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 61 6e 64 20 49 47 50 | nable.IS-IS.Enable.IS-IS.and.IGP |
c65a0 | 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 00 45 6e 61 62 6c 65 20 49 53 2d 49 | -LDP.synchronization.Enable.IS-I |
c65c0 | 53 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 6e 61 | S.and.redistribute.routes.not.na |
c65e0 | 74 69 76 65 6c 79 20 69 6e 20 49 53 2d 49 53 00 45 6e 61 62 6c 65 20 49 53 2d 49 53 20 77 69 74 | tively.in.IS-IS.Enable.IS-IS.wit |
c6600 | 68 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 | h.Segment.Routing.(Experimental) |
c6620 | 00 45 6e 61 62 6c 65 20 4c 2d 53 49 47 20 54 58 4f 50 20 70 72 6f 74 65 63 74 69 6f 6e 20 63 61 | .Enable.L-SIG.TXOP.protection.ca |
c6640 | 70 61 62 69 6c 69 74 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 28 4c 6f 77 20 44 65 6e 73 69 74 | pability.Enable.LDPC.(Low.Densit |
c6660 | 79 20 50 61 72 69 74 79 20 43 68 65 63 6b 29 20 63 6f 64 69 6e 67 20 63 61 70 61 62 69 6c 69 74 | y.Parity.Check).coding.capabilit |
c6680 | 79 00 45 6e 61 62 6c 65 20 4c 44 50 43 20 63 6f 64 69 6e 67 20 63 61 70 61 62 69 6c 69 74 79 00 | y.Enable.LDPC.coding.capability. |
c66a0 | 45 6e 61 62 6c 65 20 4c 4c 44 50 20 73 65 72 76 69 63 65 00 45 6e 61 62 6c 65 20 4f 53 50 46 00 | Enable.LLDP.service.Enable.OSPF. |
c66c0 | 45 6e 61 62 6c 65 20 4f 53 50 46 20 61 6e 64 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e | Enable.OSPF.and.IGP-LDP.synchron |
c66e0 | 69 7a 61 74 69 6f 6e 3a 00 45 6e 61 62 6c 65 20 4f 53 50 46 20 77 69 74 68 20 53 65 67 6d 65 6e | ization:.Enable.OSPF.with.Segmen |
c6700 | 74 20 52 6f 75 74 69 6e 67 20 28 45 78 70 65 72 69 6d 65 6e 74 61 6c 29 3a 00 45 6e 61 62 6c 65 | t.Routing.(Experimental):.Enable |
c6720 | 20 4f 53 50 46 20 77 69 74 68 20 72 6f 75 74 65 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 | .OSPF.with.route.redistribution. |
c6740 | 6f 66 20 74 68 65 20 6c 6f 6f 70 62 61 63 6b 20 61 6e 64 20 64 65 66 61 75 6c 74 20 6f 72 69 67 | of.the.loopback.and.default.orig |
c6760 | 69 6e 61 74 65 3a 00 45 6e 61 62 6c 65 20 4f 54 50 20 32 46 41 20 66 6f 72 20 75 73 65 72 20 60 | inate:.Enable.OTP.2FA.for.user.` |
c6780 | 75 73 65 72 6e 61 6d 65 60 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74 69 6e 67 73 2c | username`.with.default.settings, |
c67a0 | 20 75 73 69 6e 67 20 74 68 65 20 42 41 53 45 33 32 20 65 6e 63 6f 64 65 64 20 32 46 41 2f 4d 46 | .using.the.BASE32.encoded.2FA/MF |
c67c0 | 41 20 6b 65 79 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 6b 65 79 3e 60 2e 00 45 6e 61 62 | A.key.specified.by.`<key>`..Enab |
c67e0 | 6c 65 20 4f 70 65 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 | le.OpenVPN.Data.Channel.Offload. |
c6800 | 66 65 61 74 75 72 65 20 62 79 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 | feature.by.loading.the.appropria |
c6820 | 74 65 20 6b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 2e 00 45 6e 61 62 6c 65 20 50 52 45 46 36 34 20 | te.kernel.module..Enable.PREF64. |
c6840 | 6f 70 74 69 6f 6e 20 61 73 20 6f 75 74 6c 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 37 38 31 | option.as.outlined.in.:rfc:`8781 |
c6860 | 60 2e 00 45 6e 61 62 6c 65 20 53 4e 4d 50 00 45 6e 61 62 6c 65 20 53 4e 4d 50 20 71 75 65 72 69 | `..Enable.SNMP.Enable.SNMP.queri |
c6880 | 65 73 20 6f 66 20 74 68 65 20 4c 4c 44 50 20 64 61 74 61 62 61 73 65 00 45 6e 61 62 6c 65 20 53 | es.of.the.LLDP.database.Enable.S |
c68a0 | 4e 4d 50 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 6e 20 69 6e 64 69 76 69 64 75 61 6c 20 72 6f | NMP.support.for.an.individual.ro |
c68c0 | 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2e 00 45 6e 61 62 6c 65 20 53 54 50 00 45 6e 61 62 6c 65 20 | uting.daemon..Enable.STP.Enable. |
c68e0 | 54 46 54 50 20 73 65 72 76 69 63 65 20 62 79 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 20 60 | TFTP.service.by.specifying.the.` |
c6900 | 3c 64 69 72 65 63 74 6f 72 79 3e 60 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 | <directory>`.which.will.be.used. |
c6920 | 74 6f 20 73 65 72 76 65 20 66 69 6c 65 73 2e 00 45 6e 61 62 6c 65 20 56 48 54 20 54 58 4f 50 20 | to.serve.files..Enable.VHT.TXOP. |
c6940 | 50 6f 77 65 72 20 53 61 76 65 20 4d 6f 64 65 00 45 6e 61 62 6c 65 20 56 4c 41 4e 2d 41 77 61 72 | Power.Save.Mode.Enable.VLAN-Awar |
c6960 | 65 20 42 72 69 64 67 65 00 45 6e 61 62 6c 65 20 61 75 74 6f 6d 61 74 69 63 20 72 65 64 69 72 65 | e.Bridge.Enable.automatic.redire |
c6980 | 63 74 20 66 72 6f 6d 20 68 74 74 70 20 74 6f 20 68 74 74 70 73 2e 00 45 6e 61 62 6c 65 20 63 72 | ct.from.http.to.https..Enable.cr |
c69a0 | 65 61 74 69 6f 6e 20 6f 66 20 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 2e 00 45 6e 61 62 6c | eation.of.shortcut.routes..Enabl |
c69c0 | 65 20 64 69 66 66 65 72 65 6e 74 20 74 79 70 65 73 20 6f 66 20 68 61 72 64 77 61 72 65 20 6f 66 | e.different.types.of.hardware.of |
c69e0 | 66 6c 6f 61 64 69 6e 67 20 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 4e 49 43 2e 00 45 6e 61 62 6c | floading.on.the.given.NIC..Enabl |
c6a00 | 65 20 67 69 76 65 6e 20 6c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f 6c 20 6f 6e 20 74 68 69 73 20 | e.given.legacy.protocol.on.this. |
c6a20 | 4c 4c 44 50 20 69 6e 73 74 61 6e 63 65 2e 20 4c 65 67 61 63 79 20 70 72 6f 74 6f 63 6f 6c 73 20 | LLDP.instance..Legacy.protocols. |
c6a40 | 69 6e 63 6c 75 64 65 3a 00 45 6e 61 62 6c 65 20 6c 61 79 65 72 20 37 20 48 54 54 50 20 68 65 61 | include:.Enable.layer.7.HTTP.hea |
c6a60 | 6c 74 68 20 63 68 65 63 6b 00 45 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 20 74 68 65 | lth.check.Enable.logging.for.the |
c6a80 | 20 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 20 49 66 20 74 68 69 73 20 63 6f 6e 66 69 67 75 | .matched.packet..If.this.configu |
c6aa0 | 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 70 72 65 73 65 6e 74 2c 20 74 | ration.command.is.not.present,.t |
c6ac0 | 68 65 6e 20 6c 6f 67 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 00 45 6e 61 62 6c 65 20 6f | hen.log.is.not.enabled..Enable.o |
c6ae0 | 72 20 44 69 73 61 62 6c 65 20 56 79 4f 53 20 74 6f 20 62 65 20 3a 72 66 63 3a 60 31 33 33 37 60 | r.Disable.VyOS.to.be.:rfc:`1337` |
c6b00 | 20 63 6f 6e 66 6f 72 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 65 6d 20 70 | .conform..The.following.system.p |
c6b20 | 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 45 6e 61 62 6c 65 | arameter.will.be.altered:.Enable |
c6b40 | 20 6f 72 20 44 69 73 61 62 6c 65 20 69 66 20 56 79 4f 53 20 75 73 65 20 49 50 76 34 20 54 43 50 | .or.Disable.if.VyOS.use.IPv4.TCP |
c6b60 | 20 53 59 4e 20 43 6f 6f 6b 69 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 | .SYN.Cookies..The.following.syst |
c6b80 | 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 45 6e | em.parameter.will.be.altered:.En |
c6ba0 | 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 66 6f 72 20 74 68 65 20 | able.or.disable.logging.for.the. |
c6bc0 | 6d 61 74 63 68 65 64 20 70 61 63 6b 65 74 2e 00 45 6e 61 62 6c 65 20 6f 73 70 66 20 6f 6e 20 61 | matched.packet..Enable.ospf.on.a |
c6be0 | 6e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 73 65 74 20 61 73 73 6f 63 69 61 74 65 64 20 61 | n.interface.and.set.associated.a |
c6c00 | 72 65 61 2e 00 45 6e 61 62 6c 65 20 70 6f 6c 69 63 79 20 66 6f 72 20 73 6f 75 72 63 65 20 76 61 | rea..Enable.policy.for.source.va |
c6c20 | 6c 69 64 61 74 69 6f 6e 20 62 79 20 72 65 76 65 72 73 65 64 20 70 61 74 68 2c 20 61 73 20 73 70 | lidation.by.reversed.path,.as.sp |
c6c40 | 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 30 34 60 2e 20 43 75 72 72 65 6e 74 20 | ecified.in.:rfc:`3704`..Current. |
c6c60 | 72 65 63 6f 6d 6d 65 6e 64 65 64 20 70 72 61 63 74 69 63 65 20 69 6e 20 3a 72 66 63 3a 60 33 37 | recommended.practice.in.:rfc:`37 |
c6c80 | 30 34 60 20 69 73 20 74 6f 20 65 6e 61 62 6c 65 20 73 74 72 69 63 74 20 6d 6f 64 65 20 74 6f 20 | 04`.is.to.enable.strict.mode.to. |
c6ca0 | 70 72 65 76 65 6e 74 20 49 50 20 73 70 6f 6f 66 69 6e 67 20 66 72 6f 6d 20 44 44 6f 73 20 61 74 | prevent.IP.spoofing.from.DDos.at |
c6cc0 | 74 61 63 6b 73 2e 20 49 66 20 75 73 69 6e 67 20 61 73 79 6d 6d 65 74 72 69 63 20 72 6f 75 74 69 | tacks..If.using.asymmetric.routi |
c6ce0 | 6e 67 20 6f 72 20 6f 74 68 65 72 20 63 6f 6d 70 6c 69 63 61 74 65 64 20 72 6f 75 74 69 6e 67 2c | ng.or.other.complicated.routing, |
c6d00 | 20 74 68 65 6e 20 6c 6f 6f 73 65 20 6d 6f 64 65 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e | .then.loose.mode.is.recommended. |
c6d20 | 00 45 6e 61 62 6c 65 20 72 65 63 65 69 76 69 6e 67 20 50 50 44 55 20 75 73 69 6e 67 20 53 54 42 | .Enable.receiving.PPDU.using.STB |
c6d40 | 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 45 6e 61 62 | C.(Space.Time.Block.Coding).Enab |
c6d60 | 6c 65 20 73 61 6d 70 6c 69 6e 67 20 6f 66 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 77 69 | le.sampling.of.packets,.which.wi |
c6d80 | 6c 6c 20 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 74 6f 20 73 46 6c 6f 77 20 63 6f 6c 6c 65 | ll.be.transmitted.to.sFlow.colle |
c6da0 | 63 74 6f 72 73 2e 00 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 50 50 44 55 20 75 73 69 6e 67 | ctors..Enable.sending.PPDU.using |
c6dc0 | 20 53 54 42 43 20 28 53 70 61 63 65 20 54 69 6d 65 20 42 6c 6f 63 6b 20 43 6f 64 69 6e 67 29 00 | .STBC.(Space.Time.Block.Coding). |
c6de0 | 45 6e 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 6f 66 20 43 69 73 63 6f 20 73 74 79 6c 65 20 4e 48 | Enable.sending.of.Cisco.style.NH |
c6e00 | 52 50 20 54 72 61 66 66 69 63 20 49 6e 64 69 63 61 74 69 6f 6e 20 70 61 63 6b 65 74 73 2e 20 49 | RP.Traffic.Indication.packets..I |
c6e20 | 66 20 74 68 69 73 20 69 73 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 6f 70 65 6e 6e 68 72 70 20 64 | f.this.is.enabled.and.opennhrp.d |
c6e40 | 65 74 65 63 74 73 20 61 20 66 6f 72 77 61 72 64 65 64 20 20 70 61 63 6b 65 74 2c 20 69 74 20 77 | etects.a.forwarded..packet,.it.w |
c6e60 | 69 6c 6c 20 73 65 6e 64 20 61 20 6d 65 73 73 61 67 65 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e | ill.send.a.message.to.the.origin |
c6e80 | 61 6c 20 73 65 6e 64 65 72 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 6e 73 74 72 75 63 74 | al.sender.of.the.packet.instruct |
c6ea0 | 69 6e 67 20 69 74 20 74 6f 20 63 72 65 61 74 65 20 61 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 | ing.it.to.create.a.direct.connec |
c6ec0 | 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 69 73 20 | tion.with.the.destination..This. |
c6ee0 | 69 73 20 62 61 73 69 63 61 6c 6c 79 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 65 6e 64 | is.basically.a.protocol.independ |
c6f00 | 65 6e 74 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 49 43 4d 50 20 72 65 64 69 72 65 63 74 2e | ent.equivalent.of.ICMP.redirect. |
c6f20 | 00 45 6e 61 62 6c 65 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 | .Enable.spanning.tree.protocol.. |
c6f40 | 53 54 50 20 69 73 20 64 69 73 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 45 6e 61 62 | STP.is.disabled.by.default..Enab |
c6f60 | 6c 65 20 74 68 65 20 4f 70 61 71 75 65 2d 4c 53 41 20 63 61 70 61 62 69 6c 69 74 79 20 28 72 66 | le.the.Opaque-LSA.capability.(rf |
c6f80 | 63 32 33 37 30 29 2c 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 74 72 61 6e 73 70 6f 72 74 20 6c | c2370),.necessary.to.transport.l |
c6fa0 | 61 62 65 6c 20 6f 6e 20 49 47 50 00 45 6e 61 62 6c 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 | abel.on.IGP.Enable.this.feature. |
c6fc0 | 63 61 75 73 65 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 65 73 65 74 2e 00 45 6e 61 62 6c | causes.an.interface.reset..Enabl |
c6fe0 | 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 4c 4c 44 50 20 69 6e 66 6f 72 6d 61 74 69 | e.transmission.of.LLDP.informati |
c7000 | 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 20 59 6f 75 20 63 | on.on.given.`<interface>`..You.c |
c7020 | 61 6e 20 61 6c 73 6f 20 73 61 79 20 60 60 61 6c 6c 60 60 20 68 65 72 65 20 73 6f 20 4c 4c 44 50 | an.also.say.``all``.here.so.LLDP |
c7040 | 20 69 73 20 74 75 72 6e 65 64 20 6f 6e 20 6f 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 | .is.turned.on.on.every.interface |
c7060 | 2e 00 45 6e 61 62 6c 65 64 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 | ..Enabled.on-demand.PPPoE.connec |
c7080 | 74 69 6f 6e 73 20 62 72 69 6e 67 20 75 70 20 74 68 65 20 6c 69 6e 6b 20 6f 6e 6c 79 20 77 68 65 | tions.bring.up.the.link.only.whe |
c70a0 | 6e 20 74 72 61 66 66 69 63 20 6e 65 65 64 73 20 74 6f 20 70 61 73 73 20 74 68 69 73 20 6c 69 6e | n.traffic.needs.to.pass.this.lin |
c70c0 | 6b 2e 20 20 49 66 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 | k...If.the.link.fails.for.any.re |
c70e0 | 61 73 6f 6e 2c 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 62 61 63 6b 20 75 | ason,.the.link.is.brought.back.u |
c7100 | 70 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 20 70 61 73 | p.automatically.once.traffic.pas |
c7120 | 73 65 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 61 67 61 69 6e 2e 20 49 66 20 79 6f 75 20 | ses.the.interface.again..If.you. |
c7140 | 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 50 50 50 6f 45 20 63 6f 6e | configure.an.on-demand.PPPoE.con |
c7160 | 6e 65 63 74 69 6f 6e 2c 20 79 6f 75 20 6d 75 73 74 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 | nection,.you.must.also.configure |
c7180 | 20 74 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 70 65 72 69 6f 64 2c 20 61 66 74 65 72 20 | .the.idle.timeout.period,.after. |
c71a0 | 77 68 69 63 68 20 61 6e 20 69 64 6c 65 20 50 50 50 6f 45 20 6c 69 6e 6b 20 77 69 6c 6c 20 62 65 | which.an.idle.PPPoE.link.will.be |
c71c0 | 20 64 69 73 63 6f 6e 6e 65 63 74 65 64 2e 20 41 20 6e 6f 6e 2d 7a 65 72 6f 20 69 64 6c 65 20 74 | .disconnected..A.non-zero.idle.t |
c71e0 | 69 6d 65 6f 75 74 20 77 69 6c 6c 20 6e 65 76 65 72 20 64 69 73 63 6f 6e 6e 65 63 74 20 74 68 65 | imeout.will.never.disconnect.the |
c7200 | 20 6c 69 6e 6b 20 61 66 74 65 72 20 69 74 20 66 69 72 73 74 20 63 61 6d 65 20 75 70 2e 00 45 6e | .link.after.it.first.came.up..En |
c7220 | 61 62 6c 65 73 20 43 69 73 63 6f 20 73 74 79 6c 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | ables.Cisco.style.authentication |
c7240 | 20 6f 6e 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 54 68 69 73 20 65 6d 62 65 64 73 20 74 68 | .on.NHRP.packets..This.embeds.th |
c7260 | 65 20 73 65 63 72 65 74 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 74 6f 20 74 | e.secret.plaintext.password.to.t |
c7280 | 68 65 20 6f 75 74 67 6f 69 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 2e 20 49 6e 63 6f 6d 69 | he.outgoing.NHRP.packets..Incomi |
c72a0 | 6e 67 20 4e 48 52 50 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | ng.NHRP.packets.on.this.interfac |
c72c0 | 65 20 61 72 65 20 64 69 73 63 61 72 64 65 64 20 75 6e 6c 65 73 73 20 74 68 65 20 73 65 63 72 65 | e.are.discarded.unless.the.secre |
c72e0 | 74 20 70 61 73 73 77 6f 72 64 20 69 73 20 70 72 65 73 65 6e 74 2e 20 4d 61 78 69 6d 75 6d 20 6c | t.password.is.present..Maximum.l |
c7300 | 65 6e 67 74 68 20 6f 66 20 74 68 65 20 73 65 63 72 65 74 20 69 73 20 38 20 63 68 61 72 61 63 74 | ength.of.the.secret.is.8.charact |
c7320 | 65 72 73 2e 00 45 6e 61 62 6c 65 73 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 20 | ers..Enables.HTTP.health.checks. |
c7340 | 75 73 69 6e 67 20 4f 50 54 49 4f 4e 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 61 67 61 69 6e | using.OPTION.HTTP.requests.again |
c7360 | 73 74 20 27 2f 27 20 61 6e 64 20 65 78 70 65 63 74 69 6e 67 20 61 20 73 75 63 63 65 73 73 66 75 | st.'/'.and.expecting.a.successfu |
c7380 | 6c 20 72 65 73 70 6f 6e 73 65 20 63 6f 64 65 20 69 6e 20 74 68 65 20 32 30 30 2d 33 39 39 20 72 | l.response.code.in.the.200-399.r |
c73a0 | 61 6e 67 65 2e 00 45 6e 61 62 6c 65 73 20 61 6e 20 4d 50 4c 53 20 6c 61 62 65 6c 20 74 6f 20 62 | ange..Enables.an.MPLS.label.to.b |
c73c0 | 65 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 72 6f 75 74 65 20 65 78 70 6f 72 74 65 64 20 66 | e.attached.to.a.route.exported.f |
c73e0 | 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 56 | rom.the.current.unicast.VRF.to.V |
c7400 | 50 4e 2e 20 49 66 20 74 68 65 20 76 61 6c 75 65 20 73 70 65 63 69 66 69 65 64 20 69 73 20 61 75 | PN..If.the.value.specified.is.au |
c7420 | 74 6f 2c 20 74 68 65 20 6c 61 62 65 6c 20 76 61 6c 75 65 20 69 73 20 61 75 74 6f 6d 61 74 69 63 | to,.the.label.value.is.automatic |
c7440 | 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 66 72 6f 6d 20 61 20 70 6f 6f 6c 20 6d 61 69 6e 74 61 | ally.assigned.from.a.pool.mainta |
c7460 | 69 6e 65 64 2e 00 45 6e 61 62 6c 65 73 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 70 69 6e 67 20 | ined..Enables.bandwidth.shaping. |
c7480 | 76 69 61 20 52 41 44 49 55 53 2e 00 45 6e 61 62 6c 65 73 20 69 6d 70 6f 72 74 20 6f 72 20 65 78 | via.RADIUS..Enables.import.or.ex |
c74a0 | 70 6f 72 74 20 6f 66 20 72 6f 75 74 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 | port.of.routes.between.the.curre |
c74c0 | 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e 64 20 56 50 4e 2e 00 45 6e 61 62 6c 65 73 20 | nt.unicast.VRF.and.VPN..Enables. |
c74e0 | 74 68 65 20 47 65 6e 65 72 69 63 20 50 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 20 28 | the.Generic.Protocol.extension.( |
c7500 | 56 58 4c 41 4e 2d 47 50 45 29 2e 20 43 75 72 72 65 6e 74 6c 79 2c 20 74 68 69 73 20 69 73 20 6f | VXLAN-GPE)..Currently,.this.is.o |
c7520 | 6e 6c 79 20 73 75 70 70 6f 72 74 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 74 68 65 20 | nly.supported.together.with.the. |
c7540 | 65 78 74 65 72 6e 61 6c 20 6b 65 79 77 6f 72 64 2e 00 45 6e 61 62 6c 65 73 20 74 68 65 20 65 63 | external.keyword..Enables.the.ec |
c7560 | 68 6f 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6d 6f 64 65 00 45 6e 61 62 6c 65 73 20 74 68 65 | ho.transmission.mode.Enables.the |
c7580 | 20 72 6f 6f 74 20 70 61 72 74 69 74 69 6f 6e 20 61 75 74 6f 2d 65 78 74 65 6e 73 69 6f 6e 20 61 | .root.partition.auto-extension.a |
c75a0 | 6e 64 20 72 65 73 69 7a 65 73 20 74 6f 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 76 61 69 6c 61 | nd.resizes.to.the.maximum.availa |
c75c0 | 62 6c 65 20 73 70 61 63 65 20 6f 6e 20 73 79 73 74 65 6d 20 62 6f 6f 74 2e 00 45 6e 61 62 6c 69 | ble.space.on.system.boot..Enabli |
c75e0 | 6e 67 20 41 64 76 65 72 74 69 73 6d 65 6e 74 73 00 45 6e 61 62 6c 69 6e 67 20 4f 70 65 6e 56 50 | ng.Advertisments.Enabling.OpenVP |
c7600 | 4e 20 44 43 4f 00 45 6e 61 62 6c 69 6e 67 20 53 53 48 20 6f 6e 6c 79 20 72 65 71 75 69 72 65 73 | N.DCO.Enabling.SSH.only.requires |
c7620 | 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 60 60 3c 70 6f 72 74 | .you.to.specify.the.port.``<port |
c7640 | 3e 60 60 20 79 6f 75 20 77 61 6e 74 20 53 53 48 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 2e 20 42 | >``.you.want.SSH.to.listen.on..B |
c7660 | 79 20 64 65 66 61 75 6c 74 2c 20 53 53 48 20 72 75 6e 73 20 6f 6e 20 70 6f 72 74 20 32 32 2e 00 | y.default,.SSH.runs.on.port.22.. |
c7680 | 45 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 69 6e 63 72 65 61 73 65 73 | Enabling.this.function.increases |
c76a0 | 20 74 68 65 20 72 69 73 6b 20 6f 66 20 62 61 6e 64 77 69 64 74 68 20 73 61 74 75 72 61 74 69 6f | .the.risk.of.bandwidth.saturatio |
c76c0 | 6e 2e 00 45 6e 66 6f 72 63 65 20 73 74 72 69 63 74 20 70 61 74 68 20 63 68 65 63 6b 69 6e 67 00 | n..Enforce.strict.path.checking. |
c76e0 | 45 6e 66 6f 72 63 65 20 73 74 72 69 63 74 20 70 61 74 68 20 63 68 65 63 6b 69 6e 67 2e 00 45 6e | Enforce.strict.path.checking..En |
c7700 | 73 6c 61 76 65 20 60 3c 6d 65 6d 62 65 72 3e 60 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 6f | slave.`<member>`.interface.to.bo |
c7720 | 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 45 6e 73 75 72 65 20 74 68 61 74 20 77 68 | nd.`<interface>`..Ensure.that.wh |
c7740 | 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 77 68 65 72 65 20 62 6f 74 68 20 61 | en.comparing.routes.where.both.a |
c7760 | 72 65 20 65 71 75 61 6c 20 6f 6e 20 6d 6f 73 74 20 6d 65 74 72 69 63 73 2c 20 69 6e 63 6c 75 64 | re.equal.on.most.metrics,.includ |
c7780 | 69 6e 67 20 6c 6f 63 61 6c 2d 70 72 65 66 2c 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 2c 20 | ing.local-pref,.AS_PATH.length,. |
c77a0 | 49 47 50 20 63 6f 73 74 2c 20 4d 45 44 2c 20 74 68 61 74 20 74 68 65 20 74 69 65 20 69 73 20 62 | IGP.cost,.MED,.that.the.tie.is.b |
c77c0 | 72 6f 6b 65 6e 20 62 61 73 65 64 20 6f 6e 20 72 6f 75 74 65 72 2d 49 44 2e 00 45 6e 74 65 72 70 | roken.based.on.router-ID..Enterp |
c77e0 | 72 69 73 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 20 75 73 75 61 6c 6c 79 20 73 68 69 70 20 | rise.installations.usually.ship. |
c7800 | 61 20 6b 69 6e 64 20 6f 66 20 64 69 72 65 63 74 6f 72 79 20 73 65 72 76 69 63 65 20 77 68 69 63 | a.kind.of.directory.service.whic |
c7820 | 68 20 69 73 20 75 73 65 64 20 74 6f 20 68 61 76 65 20 61 20 73 69 6e 67 6c 65 20 70 61 73 73 77 | h.is.used.to.have.a.single.passw |
c7840 | 6f 72 64 20 73 74 6f 72 65 20 66 6f 72 20 61 6c 6c 20 65 6d 70 6c 6f 79 65 65 73 2e 20 56 79 4f | ord.store.for.all.employees..VyO |
c7860 | 53 20 61 6e 64 20 4f 70 65 6e 56 50 4e 20 73 75 70 70 6f 72 74 20 75 73 69 6e 67 20 4c 44 41 50 | S.and.OpenVPN.support.using.LDAP |
c7880 | 2f 41 44 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 61 63 6b 65 6e 64 2e 00 45 72 69 63 | /AD.as.single.user.backend..Eric |
c78a0 | 73 73 6f 6e 20 63 61 6c 6c 20 69 74 20 4d 41 43 2d 46 6f 72 63 65 64 20 46 6f 72 77 61 72 64 69 | sson.call.it.MAC-Forced.Forwardi |
c78c0 | 6e 67 20 28 52 46 43 20 44 72 61 66 74 29 00 45 72 72 6f 72 00 45 72 72 6f 72 20 63 6f 6e 64 69 | ng.(RFC.Draft).Error.Error.condi |
c78e0 | 74 69 6f 6e 73 00 45 73 74 61 62 6c 69 73 68 65 64 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 | tions.Established.sessions.can.b |
c7900 | 65 20 76 69 65 77 65 64 20 75 73 69 6e 67 20 74 68 65 20 2a 2a 73 68 6f 77 20 6c 32 74 70 2d 73 | e.viewed.using.the.**show.l2tp-s |
c7920 | 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 2a 2a 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d | erver.sessions**.operational.com |
c7940 | 6d 61 6e 64 00 45 74 68 65 72 6e 65 74 00 45 74 68 65 72 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 | mand.Ethernet.Ethernet.flow.cont |
c7960 | 72 6f 6c 20 69 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 74 65 6d 70 6f 72 61 72 69 | rol.is.a.mechanism.for.temporari |
c7980 | 6c 79 20 73 74 6f 70 70 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 | ly.stopping.the.transmission.of. |
c79a0 | 64 61 74 61 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 66 61 6d 69 6c 79 20 63 6f 6d 70 75 74 65 72 | data.on.Ethernet.family.computer |
c79c0 | 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 67 6f 61 6c 20 6f 66 20 74 68 69 73 20 6d 65 63 68 | .networks..The.goal.of.this.mech |
c79e0 | 61 6e 69 73 6d 20 69 73 20 74 6f 20 65 6e 73 75 72 65 20 7a 65 72 6f 20 70 61 63 6b 65 74 20 6c | anism.is.to.ensure.zero.packet.l |
c7a00 | 6f 73 73 20 69 6e 20 74 68 65 20 70 72 65 73 65 6e 63 65 20 6f 66 20 6e 65 74 77 6f 72 6b 20 63 | oss.in.the.presence.of.network.c |
c7a20 | 6f 6e 67 65 73 74 69 6f 6e 2e 00 45 74 68 65 72 6e 65 74 20 6f 70 74 69 6f 6e 73 00 45 74 68 65 | ongestion..Ethernet.options.Ethe |
c7a40 | 72 74 79 70 65 20 60 60 30 78 38 31 30 30 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 60 60 38 | rtype.``0x8100``.is.used.for.``8 |
c7a60 | 30 32 2e 31 71 60 60 20 61 6e 64 20 65 74 68 65 72 74 79 70 65 20 60 60 30 78 38 38 61 38 60 60 | 02.1q``.and.ethertype.``0x88a8`` |
c7a80 | 20 69 73 20 75 73 65 64 20 66 6f 72 20 60 60 38 30 32 2e 31 61 64 60 60 2e 00 45 76 65 6e 74 20 | .is.used.for.``802.1ad``..Event. |
c7aa0 | 48 61 6e 64 6c 65 72 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 43 6f 6e 66 69 67 75 72 61 74 | Handler.Event.Handler.Configurat |
c7ac0 | 69 6f 6e 20 53 74 65 70 73 00 45 76 65 6e 74 20 48 61 6e 64 6c 65 72 20 54 65 63 68 6e 6f 6c 6f | ion.Steps.Event.Handler.Technolo |
c7ae0 | 67 79 20 4f 76 65 72 76 69 65 77 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 61 6c 6c 6f 77 73 | gy.Overview.Event.handler.allows |
c7b00 | 20 79 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 73 63 72 69 70 74 73 20 77 68 65 6e 20 61 20 73 | .you.to.execute.scripts.when.a.s |
c7b20 | 74 72 69 6e 67 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 61 20 72 65 67 65 78 20 6f 72 20 61 20 | tring.that.matches.a.regex.or.a. |
c7b40 | 72 65 67 65 78 20 77 69 74 68 20 61 20 73 65 72 76 69 63 65 20 6e 61 6d 65 20 61 70 70 65 61 72 | regex.with.a.service.name.appear |
c7b60 | 73 20 69 6e 20 6a 6f 75 72 6e 61 6c 64 20 6c 6f 67 73 2e 20 59 6f 75 20 63 61 6e 20 70 61 73 73 | s.in.journald.logs..You.can.pass |
c7b80 | 20 76 61 72 69 61 62 6c 65 73 2c 20 61 72 67 75 6d 65 6e 74 73 2c 20 61 6e 64 20 61 20 66 75 6c | .variables,.arguments,.and.a.ful |
c7ba0 | 6c 20 6d 61 74 63 68 69 6e 67 20 73 74 72 69 6e 67 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e | l.matching.string.to.the.script. |
c7bc0 | 00 45 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 73 63 72 69 70 74 00 45 76 65 6e 74 20 68 61 6e 64 | .Event.handler.script.Event.hand |
c7be0 | 6c 65 72 20 74 68 61 74 20 6d 6f 6e 69 74 6f 72 73 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 69 | ler.that.monitors.the.state.of.i |
c7c00 | 6e 74 65 72 66 61 63 65 20 65 74 68 30 2e 00 45 76 65 72 79 20 4e 41 54 20 72 75 6c 65 20 68 61 | nterface.eth0..Every.NAT.rule.ha |
c7c20 | 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 64 2e | s.a.translation.command.defined. |
c7c40 | 20 54 68 65 20 61 64 64 72 65 73 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 74 72 61 | .The.address.defined.for.the.tra |
c7c60 | 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 61 64 64 72 65 73 73 20 75 73 65 64 20 77 68 65 | nslation.is.the.address.used.whe |
c7c80 | 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 70 | n.the.address.information.in.a.p |
c7ca0 | 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e 00 45 76 65 72 79 20 53 4e 41 54 36 36 20 | acket.is.replaced..Every.SNAT66. |
c7cc0 | 72 75 6c 65 20 68 61 73 20 61 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 64 | rule.has.a.translation.command.d |
c7ce0 | 65 66 69 6e 65 64 2e 20 54 68 65 20 70 72 65 66 69 78 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 | efined..The.prefix.defined.for.t |
c7d00 | 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 69 73 20 74 68 65 20 70 72 65 66 69 78 20 75 73 65 | he.translation.is.the.prefix.use |
c7d20 | 64 20 77 68 65 6e 20 74 68 65 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 | d.when.the.address.information.i |
c7d40 | 6e 20 61 20 70 61 63 6b 65 74 20 69 73 20 72 65 70 6c 61 63 65 64 2e e3 80 81 00 45 76 65 72 79 | n.a.packet.is.replaced.....Every |
c7d60 | 20 53 53 48 20 6b 65 79 20 63 6f 6d 65 73 20 69 6e 20 74 68 72 65 65 20 70 61 72 74 73 3a 00 45 | .SSH.key.comes.in.three.parts:.E |
c7d80 | 76 65 72 79 20 53 53 48 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 72 65 66 65 | very.SSH.public.key.portion.refe |
c7da0 | 72 65 6e 63 65 64 20 62 79 20 60 3c 69 64 65 6e 74 69 66 69 65 72 3e 60 20 72 65 71 75 69 72 65 | renced.by.`<identifier>`.require |
c7dc0 | 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 60 3c 74 79 70 | s.the.configuration.of.the.`<typ |
c7de0 | 65 3e 60 20 6f 66 20 70 75 62 6c 69 63 2d 6b 65 79 20 75 73 65 64 2e 20 54 68 69 73 20 74 79 70 | e>`.of.public-key.used..This.typ |
c7e00 | 65 20 63 61 6e 20 62 65 20 61 6e 79 20 6f 66 3a 00 45 76 65 72 79 20 55 44 50 20 70 6f 72 74 20 | e.can.be.any.of:.Every.UDP.port. |
c7e20 | 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 20 72 65 71 75 69 72 65 73 20 6f | which.will.be.forward.requires.o |
c7e40 | 6e 65 20 75 6e 69 71 75 65 20 49 44 2e 20 43 75 72 72 65 6e 74 6c 79 20 77 65 20 73 75 70 70 6f | ne.unique.ID..Currently.we.suppo |
c7e60 | 72 74 20 39 39 20 49 44 73 21 00 45 76 65 72 79 20 56 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 | rt.99.IDs!.Every.Virtual.Etherne |
c7e80 | 74 20 69 6e 74 65 72 66 61 63 65 73 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 61 20 72 65 61 6c | t.interfaces.behaves.like.a.real |
c7ea0 | 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 79 20 63 61 6e 20 68 61 | .Ethernet.interface..They.can.ha |
c7ec0 | 76 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 66 69 67 75 72 65 | ve.IPv4/IPv6.addresses.configure |
c7ee0 | 64 2c 20 6f 72 20 63 61 6e 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 73 20 62 79 20 44 | d,.or.can.request.addresses.by.D |
c7f00 | 48 43 50 2f 20 44 48 43 50 76 36 20 61 6e 64 20 61 72 65 20 61 73 73 6f 63 69 61 74 65 64 2f 6d | HCP/.DHCPv6.and.are.associated/m |
c7f20 | 61 70 70 65 64 20 77 69 74 68 20 61 20 72 65 61 6c 20 65 74 68 65 72 6e 65 74 20 70 6f 72 74 2e | apped.with.a.real.ethernet.port. |
c7f40 | 20 54 68 69 73 20 61 6c 73 6f 20 6d 61 6b 65 73 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 | .This.also.makes.Pseudo-Ethernet |
c7f60 | 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 74 65 72 65 73 74 69 6e 67 20 66 6f 72 20 74 65 73 74 | .interfaces.interesting.for.test |
c7f80 | 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 20 41 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 | ing.purposes..A.Pseudo-Ethernet. |
c7fa0 | 64 65 76 69 63 65 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 63 68 61 72 61 63 74 65 72 69 73 74 | device.will.inherit.characterist |
c7fc0 | 69 63 73 20 28 73 70 65 65 64 2c 20 64 75 70 6c 65 78 2c 20 2e 2e 2e 29 20 66 72 6f 6d 20 69 74 | ics.(speed,.duplex,....).from.it |
c7fe0 | 73 20 70 68 79 73 69 63 61 6c 20 70 61 72 65 6e 74 20 28 74 68 65 20 73 6f 20 63 61 6c 6c 65 64 | s.physical.parent.(the.so.called |
c8000 | 20 6c 69 6e 6b 29 20 69 6e 74 65 72 66 61 63 65 2e 00 45 76 65 72 79 20 57 57 41 4e 20 63 6f 6e | .link).interface..Every.WWAN.con |
c8020 | 6e 65 63 74 69 6f 6e 20 72 65 71 75 69 72 65 73 20 61 6e 20 3a 61 62 62 72 3a 60 41 50 4e 20 28 | nection.requires.an.:abbr:`APN.( |
c8040 | 41 63 63 65 73 73 20 50 6f 69 6e 74 20 4e 61 6d 65 29 60 20 77 68 69 63 68 20 69 73 20 75 73 65 | Access.Point.Name)`.which.is.use |
c8060 | 64 20 62 79 20 74 68 65 20 63 6c 69 65 6e 74 20 74 6f 20 64 69 61 6c 20 69 6e 74 6f 20 74 68 65 | d.by.the.client.to.dial.into.the |
c8080 | 20 49 53 50 73 20 6e 65 74 77 6f 72 6b 2e 20 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f | .ISPs.network..This.is.a.mandato |
c80a0 | 72 79 20 70 61 72 61 6d 65 74 65 72 2e 20 43 6f 6e 74 61 63 74 20 79 6f 75 72 20 53 65 72 76 69 | ry.parameter..Contact.your.Servi |
c80c0 | 63 65 20 50 72 6f 76 69 64 65 72 20 66 6f 72 20 63 6f 72 72 65 63 74 20 41 50 4e 2e 00 45 76 65 | ce.Provider.for.correct.APN..Eve |
c80e0 | 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c | ry.connection/remote-access.pool |
c8100 | 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 73 6f 20 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 | .we.configure.also.needs.a.pool. |
c8120 | 77 68 65 72 65 20 77 65 20 63 61 6e 20 64 72 61 77 20 6f 75 72 20 63 6c 69 65 6e 74 20 49 50 20 | where.we.can.draw.our.client.IP. |
c8140 | 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 20 57 65 20 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 | addresses.from..We.provide.one.I |
c8160 | 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 6f 6f 6c 2e 20 41 75 74 68 6f 72 69 7a 65 64 20 63 6c | Pv4.and.IPv6.pool..Authorized.cl |
c8180 | 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 | ients.will.receive.an.IPv4.addre |
c81a0 | 73 73 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 31 32 38 2f 32 35 20 70 72 65 66 69 | ss.from.the.192.0.2.128/25.prefi |
c81c0 | 78 20 61 6e 64 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 32 | x.and.an.IPv6.address.from.the.2 |
c81e0 | 30 30 31 3a 64 62 38 3a 32 30 30 30 3a 3a 2f 36 34 20 70 72 65 66 69 78 2e 20 57 65 20 63 61 6e | 001:db8:2000::/64.prefix..We.can |
c8200 | 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 | .also.send.some.DNS.nameservers. |
c8220 | 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 74 68 65 69 | down.to.our.clients.used.on.thei |
c8240 | 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2f 72 | r.connection..Every.connection/r |
c8260 | 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 70 6f 6f 6c 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 61 | emote-access.pool.we.configure.a |
c8280 | 6c 73 6f 20 6e 65 65 64 73 20 61 20 70 6f 6f 6c 20 77 68 65 72 65 20 77 65 20 63 61 6e 20 64 72 | lso.needs.a.pool.where.we.can.dr |
c82a0 | 61 77 20 6f 75 72 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e | aw.our.client.IP.addresses.from. |
c82c0 | 20 57 65 20 70 72 6f 76 69 64 65 20 6f 6e 65 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 6f | .We.provide.one.IPv4.and.IPv6.po |
c82e0 | 6f 6c 2e 20 41 75 74 68 6f 72 69 7a 65 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 72 65 63 65 | ol..Authorized.clients.will.rece |
c8300 | 69 76 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 63 6f 6e | ive.an.IPv4.address.from.the.con |
c8320 | 66 69 67 75 72 65 64 20 49 50 76 34 20 70 72 65 66 69 78 20 61 6e 64 20 61 6e 20 49 50 76 36 20 | figured.IPv4.prefix.and.an.IPv6. |
c8340 | 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2e 20 57 65 | address.from.the.IPv6.prefix..We |
c8360 | 20 63 61 6e 20 61 6c 73 6f 20 73 65 6e 64 20 73 6f 6d 65 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 | .can.also.send.some.DNS.nameserv |
c8380 | 65 72 73 20 64 6f 77 6e 20 74 6f 20 6f 75 72 20 63 6c 69 65 6e 74 73 20 75 73 65 64 20 6f 6e 20 | ers.down.to.our.clients.used.on. |
c83a0 | 74 68 65 69 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 00 45 78 61 6d 70 6c | their.connection..Example.Exampl |
c83c0 | 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 45 78 61 6d 70 6c 65 20 49 50 76 36 20 6f 6e 6c | e.Configuration.Example.IPv6.onl |
c83e0 | 79 3a 00 45 78 61 6d 70 6c 65 20 4e 65 74 77 6f 72 6b 00 45 78 61 6d 70 6c 65 20 50 61 72 74 69 | y:.Example.Network.Example.Parti |
c8400 | 61 6c 20 43 6f 6e 66 69 67 00 45 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | al.Config.Example.configuration. |
c8420 | 66 6f 72 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 3a 00 45 78 61 6d 70 6c | for.WireGuard.interfaces:.Exampl |
c8440 | 65 20 66 6f 72 20 63 68 61 6e 67 69 6e 67 20 72 61 74 65 2d 6c 69 6d 69 74 20 76 69 61 20 52 41 | e.for.changing.rate-limit.via.RA |
c8460 | 44 49 55 53 20 43 6f 41 2e 00 45 78 61 6d 70 6c 65 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 69 6e | DIUS.CoA..Example.for.configurin |
c8480 | 67 20 61 20 73 69 6d 70 6c 65 20 4c 32 54 50 20 6f 76 65 72 20 49 50 73 65 63 20 56 50 4e 20 66 | g.a.simple.L2TP.over.IPsec.VPN.f |
c84a0 | 6f 72 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 28 77 6f 72 6b 73 20 77 69 74 68 20 6e 61 74 | or.remote.access.(works.with.nat |
c84c0 | 69 76 65 20 57 69 6e 64 6f 77 73 20 61 6e 64 20 4d 61 63 20 56 50 4e 20 63 6c 69 65 6e 74 73 29 | ive.Windows.and.Mac.VPN.clients) |
c84e0 | 3a 00 45 78 61 6d 70 6c 65 20 6f 66 20 72 65 64 69 72 65 63 74 69 6f 6e 3a 00 45 78 61 6d 70 6c | :.Example.of.redirection:.Exampl |
c8500 | 65 20 73 79 6e 70 72 6f 78 79 00 45 78 61 6d 70 6c 65 2c 20 66 72 6f 6d 20 72 61 64 69 75 73 2d | e.synproxy.Example,.from.radius- |
c8520 | 73 65 72 76 65 72 20 73 65 6e 64 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 64 69 73 63 6f 6e 6e 65 | server.send.command.for.disconne |
c8540 | 63 74 20 63 6c 69 65 6e 74 20 77 69 74 68 20 75 73 65 72 6e 61 6d 65 20 74 65 73 74 00 45 78 61 | ct.client.with.username.test.Exa |
c8560 | 6d 70 6c 65 3a 00 45 78 61 6d 70 6c 65 3a 20 44 65 6c 65 67 61 74 65 20 61 20 2f 36 34 20 70 72 | mple:.Example:.Delegate.a./64.pr |
c8580 | 65 66 69 78 20 74 6f 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 38 20 77 68 69 63 68 20 77 69 6c | efix.to.interface.eth8.which.wil |
c85a0 | 6c 20 75 73 65 20 61 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 69 73 20 72 6f | l.use.a.local.address.on.this.ro |
c85c0 | 75 74 65 72 20 6f 66 20 60 60 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 60 60 2c 20 61 73 20 74 | uter.of.``<prefix>::ffff``,.as.t |
c85e0 | 68 65 20 61 64 64 72 65 73 73 20 36 35 35 33 34 20 77 69 6c 6c 20 63 6f 72 72 65 73 70 6f 6e 64 | he.address.65534.will.correspond |
c8600 | 20 74 6f 20 60 60 66 66 66 66 60 60 20 69 6e 20 68 65 78 61 64 65 63 69 6d 61 6c 20 6e 6f 74 61 | .to.``ffff``.in.hexadecimal.nota |
c8620 | 74 69 6f 6e 2e 00 45 78 61 6d 70 6c 65 3a 20 46 6f 72 20 61 6e 20 7e 38 2c 30 30 30 20 68 6f 73 | tion..Example:.For.an.~8,000.hos |
c8640 | 74 20 6e 65 74 77 6f 72 6b 20 61 20 73 6f 75 72 63 65 20 4e 41 54 20 70 6f 6f 6c 20 6f 66 20 33 | t.network.a.source.NAT.pool.of.3 |
c8660 | 32 20 49 50 20 61 64 64 72 65 73 73 65 73 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 45 | 2.IP.addresses.is.recommended..E |
c8680 | 78 61 6d 70 6c 65 3a 20 49 66 20 49 44 20 69 73 20 31 20 61 6e 64 20 74 68 65 20 63 6c 69 65 6e | xample:.If.ID.is.1.and.the.clien |
c86a0 | 74 20 69 73 20 64 65 6c 65 67 61 74 65 64 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 32 30 | t.is.delegated.an.IPv6.prefix.20 |
c86c0 | 30 31 3a 64 62 38 3a 66 66 66 66 3a 3a 2f 34 38 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 63 6f | 01:db8:ffff::/48,.dhcp6c.will.co |
c86e0 | 6d 62 69 6e 65 20 74 68 65 20 74 77 6f 20 76 61 6c 75 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 | mbine.the.two.values.into.a.sing |
c8700 | 6c 65 20 49 50 76 36 20 70 72 65 66 69 78 2c 20 32 30 30 31 3a 64 62 38 3a 66 66 66 66 3a 31 3a | le.IPv6.prefix,.2001:db8:ffff:1: |
c8720 | 3a 2f 36 34 2c 20 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 70 72 65 | :/64,.and.will.configure.the.pre |
c8740 | 66 69 78 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 | fix.on.the.specified.interface.. |
c8760 | 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 | Example:.Mirror.the.inbound.traf |
c8780 | 66 69 63 20 6f 66 20 60 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 | fic.of.`bond1`.port.to.`eth3`.Ex |
c87a0 | 61 6d 70 6c 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 | ample:.Mirror.the.inbound.traffi |
c87c0 | 63 20 6f 66 20 60 62 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c | c.of.`br1`.port.to.`eth3`.Exampl |
c87e0 | 65 3a 20 4d 69 72 72 6f 72 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 | e:.Mirror.the.inbound.traffic.of |
c8800 | 20 60 65 74 68 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 | .`eth1`.port.to.`eth3`.Example:. |
c8820 | 4d 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 | Mirror.the.outbound.traffic.of.` |
c8840 | 62 6f 6e 64 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d | bond1`.port.to.`eth3`.Example:.M |
c8860 | 69 72 72 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 62 | irror.the.outbound.traffic.of.`b |
c8880 | 72 31 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 4d 69 72 72 | r1`.port.to.`eth3`.Example:.Mirr |
c88a0 | 6f 72 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 20 6f 66 20 60 65 74 68 31 | or.the.outbound.traffic.of.`eth1 |
c88c0 | 60 20 70 6f 72 74 20 74 6f 20 60 65 74 68 33 60 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 | `.port.to.`eth3`.Example:.Set.`e |
c88e0 | 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 | th0`.member.port.to.be.allowed.V |
c8900 | 4c 41 4e 20 34 00 45 78 61 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 | LAN.4.Example:.Set.`eth0`.member |
c8920 | 20 70 6f 72 74 20 74 6f 20 62 65 20 61 6c 6c 6f 77 65 64 20 56 4c 41 4e 20 36 2d 38 00 45 78 61 | .port.to.be.allowed.VLAN.6-8.Exa |
c8940 | 6d 70 6c 65 3a 20 53 65 74 20 60 65 74 68 30 60 20 6d 65 6d 62 65 72 20 70 6f 72 74 20 74 6f 20 | mple:.Set.`eth0`.member.port.to. |
c8960 | 62 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 20 32 00 45 78 61 6d 70 6c 65 3a 20 74 6f 20 62 65 20 | be.native.VLAN.2.Example:.to.be. |
c8980 | 61 70 70 65 6e 64 65 64 20 69 73 20 73 65 74 20 74 6f 20 60 60 76 79 6f 73 2e 6e 65 74 60 60 20 | appended.is.set.to.``vyos.net``. |
c89a0 | 61 6e 64 20 74 68 65 20 55 52 4c 20 72 65 63 65 69 76 65 64 20 69 73 20 60 60 77 77 77 2f 66 6f | and.the.URL.received.is.``www/fo |
c89c0 | 6f 2e 68 74 6d 6c 60 60 2c 20 74 68 65 20 73 79 73 74 65 6d 20 77 69 6c 6c 20 75 73 65 20 74 68 | o.html``,.the.system.will.use.th |
c89e0 | 65 20 67 65 6e 65 72 61 74 65 64 2c 20 66 69 6e 61 6c 20 55 52 4c 20 6f 66 20 60 60 77 77 77 2e | e.generated,.final.URL.of.``www. |
c8a00 | 76 79 6f 73 2e 6e 65 74 2f 66 6f 6f 2e 68 74 6d 6c 60 60 2e 00 45 78 61 6d 70 6c 65 73 00 45 78 | vyos.net/foo.html``..Examples.Ex |
c8a20 | 61 6d 70 6c 65 73 20 6f 66 20 70 6f 6c 69 63 69 65 73 20 75 73 61 67 65 3a 00 45 78 61 6d 70 6c | amples.of.policies.usage:.Exampl |
c8a40 | 65 73 3a 00 45 78 63 6c 75 64 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 20 60 60 | es:.Exclude.IP.addresses.from.`` |
c8a60 | 56 52 52 50 20 70 61 63 6b 65 74 73 60 60 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 60 60 65 78 | VRRP.packets``..This.option.``ex |
c8a80 | 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 60 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 79 6f | cluded-address``.is.used.when.yo |
c8aa0 | 75 20 77 61 6e 74 20 74 6f 20 73 65 74 20 49 50 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 | u.want.to.set.IPv4.+.IPv6.addres |
c8ac0 | 73 65 73 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 | ses.on.the.same.virtual.interfac |
c8ae0 | 65 20 6f 72 20 77 68 65 6e 20 75 73 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 32 30 20 49 50 20 61 | e.or.when.used.more.than.20.IP.a |
c8b00 | 64 64 72 65 73 73 65 73 2e 00 45 78 63 6c 75 64 65 20 61 64 64 72 65 73 73 00 45 78 63 6c 75 64 | ddresses..Exclude.address.Exclud |
c8b20 | 65 20 74 72 61 66 66 69 63 00 45 78 69 74 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 | e.traffic.Exit.policy.on.match:. |
c8b40 | 67 6f 20 74 6f 20 6e 65 78 74 20 73 65 71 75 65 6e 63 65 20 6e 75 6d 62 65 72 2e 00 45 78 69 74 | go.to.next.sequence.number..Exit |
c8b60 | 20 70 6f 6c 69 63 79 20 6f 6e 20 6d 61 74 63 68 3a 20 67 6f 20 74 6f 20 72 75 6c 65 20 3c 31 2d | .policy.on.match:.go.to.rule.<1- |
c8b80 | 36 35 35 33 35 3e 00 45 78 70 65 64 69 74 65 64 20 66 6f 72 77 61 72 64 69 6e 67 20 28 45 46 29 | 65535>.Expedited.forwarding.(EF) |
c8ba0 | 00 45 78 70 6c 61 6e 61 74 69 6f 6e 00 45 78 70 6c 69 63 69 74 6c 79 20 64 65 63 6c 61 72 65 20 | .Explanation.Explicitly.declare. |
c8bc0 | 49 44 20 66 6f 72 20 74 68 69 73 20 6d 69 6e 69 6f 6e 20 74 6f 20 75 73 65 20 28 64 65 66 61 75 | ID.for.this.minion.to.use.(defau |
c8be0 | 6c 74 3a 20 68 6f 73 74 6e 61 6d 65 29 00 45 78 74 65 72 6e 61 6c 20 44 48 43 50 76 36 20 73 65 | lt:.hostname).External.DHCPv6.se |
c8c00 | 72 76 65 72 20 69 73 20 61 74 20 32 30 30 31 3a 64 62 38 3a 3a 34 00 45 78 74 65 72 6e 61 6c 20 | rver.is.at.2001:db8::4.External. |
c8c20 | 52 6f 75 74 65 20 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e 00 45 78 74 65 72 6e 61 6c 20 61 74 74 | Route.Summarisation.External.att |
c8c40 | 61 63 6b 3a 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 65 74 | ack:.an.attack.from.the.internet |
c8c60 | 20 74 6f 77 61 72 64 73 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 69 73 20 69 64 65 6e 74 | .towards.an.internal.IP.is.ident |
c8c80 | 69 66 79 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f | ify..In.this.case,.all.connectio |
c8ca0 | 6e 73 20 74 6f 77 61 72 64 73 20 73 75 63 68 20 49 50 20 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b | ns.towards.such.IP.will.be.block |
c8cc0 | 65 64 00 46 51 2d 43 6f 44 65 6c 00 46 51 2d 43 6f 44 65 6c 20 66 69 67 68 74 73 20 62 75 66 66 | ed.FQ-CoDel.FQ-CoDel.fights.buff |
c8ce0 | 65 72 62 6c 6f 61 74 20 61 6e 64 20 72 65 64 75 63 65 73 20 6c 61 74 65 6e 63 79 20 77 69 74 68 | erbloat.and.reduces.latency.with |
c8d00 | 6f 75 74 20 74 68 65 20 6e 65 65 64 20 6f 66 20 63 6f 6d 70 6c 65 78 20 63 6f 6e 66 69 67 75 72 | out.the.need.of.complex.configur |
c8d20 | 61 74 69 6f 6e 73 2e 20 49 74 20 68 61 73 20 62 65 63 6f 6d 65 20 74 68 65 20 6e 65 77 20 64 65 | ations..It.has.become.the.new.de |
c8d40 | 66 61 75 6c 74 20 51 75 65 75 65 69 6e 67 20 44 69 73 63 69 70 6c 69 6e 65 20 66 6f 72 20 74 68 | fault.Queueing.Discipline.for.th |
c8d60 | 65 20 69 6e 74 65 72 66 61 63 65 73 20 6f 66 20 73 6f 6d 65 20 47 4e 55 2f 4c 69 6e 75 78 20 64 | e.interfaces.of.some.GNU/Linux.d |
c8d80 | 69 73 74 72 69 62 75 74 69 6f 6e 73 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 62 61 73 65 64 20 | istributions..FQ-CoDel.is.based. |
c8da0 | 6f 6e 20 61 20 6d 6f 64 69 66 69 65 64 20 44 65 66 69 63 69 74 20 52 6f 75 6e 64 20 52 6f 62 69 | on.a.modified.Deficit.Round.Robi |
c8dc0 | 6e 20 28 44 52 52 5f 29 20 71 75 65 75 65 20 73 63 68 65 64 75 6c 65 72 20 77 69 74 68 20 74 68 | n.(DRR_).queue.scheduler.with.th |
c8de0 | 65 20 43 6f 44 65 6c 20 41 63 74 69 76 65 20 51 75 65 75 65 20 4d 61 6e 61 67 65 6d 65 6e 74 20 | e.CoDel.Active.Queue.Management. |
c8e00 | 28 41 51 4d 29 20 61 6c 67 6f 72 69 74 68 6d 20 6f 70 65 72 61 74 69 6e 67 20 6f 6e 20 65 61 63 | (AQM).algorithm.operating.on.eac |
c8e20 | 68 20 71 75 65 75 65 2e 00 46 51 2d 43 6f 44 65 6c 20 69 73 20 74 75 6e 65 64 20 74 6f 20 72 75 | h.queue..FQ-CoDel.is.tuned.to.ru |
c8e40 | 6e 20 6f 6b 20 77 69 74 68 20 69 74 73 20 64 65 66 61 75 6c 74 20 70 61 72 61 6d 65 74 65 72 73 | n.ok.with.its.default.parameters |
c8e60 | 20 61 74 20 31 30 47 62 69 74 20 73 70 65 65 64 73 2e 20 49 74 20 6d 69 67 68 74 20 77 6f 72 6b | .at.10Gbit.speeds..It.might.work |
c8e80 | 20 6f 6b 20 74 6f 6f 20 61 74 20 6f 74 68 65 72 20 73 70 65 65 64 73 20 77 69 74 68 6f 75 74 20 | .ok.too.at.other.speeds.without. |
c8ea0 | 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 74 68 69 6e 67 2c 20 62 75 74 20 68 65 72 65 20 77 | configuring.anything,.but.here.w |
c8ec0 | 65 20 77 69 6c 6c 20 65 78 70 6c 61 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 77 68 65 6e 20 79 | e.will.explain.some.cases.when.y |
c8ee0 | 6f 75 20 6d 69 67 68 74 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 69 74 73 20 70 61 72 61 6d 65 | ou.might.want.to.tune.its.parame |
c8f00 | 74 65 72 73 2e 00 46 51 2d 43 6f 64 65 6c 20 69 73 20 61 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 | ters..FQ-Codel.is.a.non-shaping. |
c8f20 | 28 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 | (work-conserving).policy,.so.it. |
c8f40 | 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 72 20 6f 75 74 67 | will.only.be.useful.if.your.outg |
c8f60 | 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 | oing.interface.is.really.full..I |
c8f80 | 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 | f.it.is.not,.VyOS.will.not.own.t |
c8fa0 | 68 65 20 71 75 65 75 65 20 61 6e 64 20 46 51 2d 43 6f 64 65 6c 20 77 69 6c 6c 20 68 61 76 65 20 | he.queue.and.FQ-Codel.will.have. |
c8fc0 | 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 | no.effect..If.there.is.bandwidth |
c8fe0 | 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c | .available.on.the.physical.link, |
c9000 | 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 51 2d 43 6f 64 65 6c 20 69 6e 74 6f 20 61 20 | .you.can.embed_.FQ-Codel.into.a. |
c9020 | 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 | classful.shaping.policy.to.make. |
c9040 | 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 66 20 79 6f 75 20 61 | sure.it.owns.the.queue..If.you.a |
c9060 | 72 65 20 6e 6f 74 20 73 75 72 65 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 | re.not.sure.if.you.need.to.embed |
c9080 | 20 79 6f 75 72 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 53 68 61 | .your.FQ-CoDel.policy.into.a.Sha |
c90a0 | 70 65 72 2c 20 64 6f 20 69 74 2e 00 46 52 52 00 46 52 52 20 6f 66 66 65 72 73 20 6f 6e 6c 79 20 | per,.do.it..FRR.FRR.offers.only. |
c90c0 | 70 61 72 74 69 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 | partial.support.for.some.of.the. |
c90e0 | 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 74 68 61 74 | routing.protocol.extensions.that |
c9100 | 20 61 72 65 20 75 73 65 64 20 77 69 74 68 20 4d 50 4c 53 2d 54 45 3b 20 69 74 20 64 6f 65 73 20 | .are.used.with.MPLS-TE;.it.does. |
c9120 | 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 20 63 6f 6d 70 6c 65 74 65 20 52 53 56 50 2d 54 45 20 73 | not.support.a.complete.RSVP-TE.s |
c9140 | 6f 6c 75 74 69 6f 6e 2e 00 46 52 52 20 73 75 70 70 6f 72 74 73 20 61 20 6e 65 77 20 77 61 79 20 | olution..FRR.supports.a.new.way. |
c9160 | 6f 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 56 4c 41 4e 2d 74 6f 2d 56 4e 49 20 6d 61 70 70 69 | of.configuring.VLAN-to-VNI.mappi |
c9180 | 6e 67 73 20 66 6f 72 20 45 56 50 4e 2d 56 58 4c 41 4e 2c 20 77 68 65 6e 20 77 6f 72 6b 69 6e 67 | ngs.for.EVPN-VXLAN,.when.working |
c91a0 | 20 77 69 74 68 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 49 6e 20 74 68 69 73 20 | .with.the.Linux.kernel..In.this. |
c91c0 | 6e 65 77 20 77 61 79 2c 20 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 61 20 56 4c 41 4e 20 74 | new.way,.the.mapping.of.a.VLAN.t |
c91e0 | 6f 20 61 20 3a 61 62 62 72 3a 60 56 4e 49 20 28 56 58 4c 41 4e 20 4e 65 74 77 6f 72 6b 20 49 64 | o.a.:abbr:`VNI.(VXLAN.Network.Id |
c9200 | 65 6e 74 69 66 69 65 72 20 28 6f 72 20 56 58 4c 41 4e 20 53 65 67 6d 65 6e 74 20 49 44 29 29 60 | entifier.(or.VXLAN.Segment.ID))` |
c9220 | 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6e 74 61 69 6e | .is.configured.against.a.contain |
c9240 | 65 72 20 56 58 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 72 65 66 65 | er.VXLAN.interface.which.is.refe |
c9260 | 72 72 65 64 20 74 6f 20 61 73 20 61 20 3a 61 62 62 72 3a 60 53 56 44 20 28 53 69 6e 67 6c 65 20 | rred.to.as.a.:abbr:`SVD.(Single. |
c9280 | 56 58 4c 41 4e 20 64 65 76 69 63 65 29 60 2e 00 46 54 50 20 64 61 65 6d 6f 6e 00 46 61 63 69 6c | VXLAN.device)`..FTP.daemon.Facil |
c92a0 | 69 74 69 65 73 00 46 61 63 69 6c 69 74 69 65 73 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 | ities.Facilities.can.be.adjusted |
c92c0 | 20 74 6f 20 6d 65 65 74 20 74 68 65 20 6e 65 65 64 73 20 6f 66 20 74 68 65 20 75 73 65 72 3a 00 | .to.meet.the.needs.of.the.user:. |
c92e0 | 46 61 63 69 6c 69 74 79 20 43 6f 64 65 00 46 61 69 6c 6f 76 65 72 00 46 61 69 6c 6f 76 65 72 20 | Facility.Code.Failover.Failover. |
c9300 | 52 6f 75 74 65 73 00 46 61 69 6c 6f 76 65 72 20 6d 65 63 68 61 6e 69 73 6d 20 74 6f 20 75 73 65 | Routes.Failover.mechanism.to.use |
c9320 | 20 66 6f 72 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 00 46 61 69 6c 6f 76 65 72 20 72 6f | .for.conntrack-sync..Failover.ro |
c9340 | 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 | utes.are.manually.configured.rou |
c9360 | 74 65 73 2c 20 62 75 74 20 74 68 65 79 20 69 6e 73 74 61 6c 6c 20 74 6f 20 74 68 65 20 72 6f 75 | tes,.but.they.install.to.the.rou |
c9380 | 74 69 6e 67 20 74 61 62 6c 65 20 69 66 20 74 68 65 20 68 65 61 6c 74 68 2d 63 68 65 63 6b 20 74 | ting.table.if.the.health-check.t |
c93a0 | 61 72 67 65 74 20 69 73 20 61 6c 69 76 65 2e 20 49 66 20 74 68 65 20 74 61 72 67 65 74 20 69 73 | arget.is.alive..If.the.target.is |
c93c0 | 20 6e 6f 74 20 61 6c 69 76 65 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 6d 6f 76 65 64 20 | .not.alive.the.route.is.removed. |
c93e0 | 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 6e 74 69 6c 20 74 68 65 | from.the.routing.table.until.the |
c9400 | 20 74 61 72 67 65 74 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 46 61 69 6c 6f | .target.will.be.available..Failo |
c9420 | 76 65 72 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 | ver.routes.are.manually.configur |
c9440 | 65 64 20 72 6f 75 74 65 73 2c 20 62 75 74 20 74 68 65 79 20 6f 6e 6c 79 20 69 6e 73 74 61 6c 6c | ed.routes,.but.they.only.install |
c9460 | 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 66 20 74 68 65 20 68 65 61 | .to.the.routing.table.if.the.hea |
c9480 | 6c 74 68 2d 63 68 65 63 6b 20 74 61 72 67 65 74 20 69 73 20 61 6c 69 76 65 2e 20 49 66 20 74 68 | lth-check.target.is.alive..If.th |
c94a0 | 65 20 74 61 72 67 65 74 20 69 73 20 6e 6f 74 20 61 6c 69 76 65 20 74 68 65 20 72 6f 75 74 65 20 | e.target.is.not.alive.the.route. |
c94c0 | 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | is.removed.from.the.routing.tabl |
c94e0 | 65 20 75 6e 74 69 6c 20 74 68 65 20 74 61 72 67 65 74 20 62 65 63 6f 6d 65 73 20 61 76 61 69 6c | e.until.the.target.becomes.avail |
c9500 | 61 62 6c 65 2e 00 46 61 69 72 20 51 75 65 75 65 00 46 61 69 72 20 51 75 65 75 65 20 69 73 20 61 | able..Fair.Queue.Fair.Queue.is.a |
c9520 | 20 6e 6f 6e 2d 73 68 61 70 69 6e 67 20 28 77 6f 72 6b 2d 63 6f 6e 73 65 72 76 69 6e 67 29 20 70 | .non-shaping.(work-conserving).p |
c9540 | 6f 6c 69 63 79 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 20 75 73 65 66 75 6c | olicy,.so.it.will.only.be.useful |
c9560 | 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 | .if.your.outgoing.interface.is.r |
c9580 | 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 | eally.full..If.it.is.not,.VyOS.w |
c95a0 | 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 46 61 69 72 20 51 | ill.not.own.the.queue.and.Fair.Q |
c95c0 | 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 20 74 68 65 | ueue.will.have.no.effect..If.the |
c95e0 | 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 65 | re.is.bandwidth.available.on.the |
c9600 | 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 64 5f 20 46 | .physical.link,.you.can.embed_.F |
c9620 | 61 69 72 2d 51 75 65 75 65 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 6c 20 73 68 61 70 69 6e | air-Queue.into.a.classful.shapin |
c9640 | 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 20 6f 77 6e 73 20 74 68 | g.policy.to.make.sure.it.owns.th |
c9660 | 65 20 71 75 65 75 65 2e 00 46 61 69 72 20 51 75 65 75 65 20 69 73 20 61 20 77 6f 72 6b 2d 63 6f | e.queue..Fair.Queue.is.a.work-co |
c9680 | 6e 73 65 72 76 69 6e 67 20 73 63 68 65 64 75 6c 65 72 20 77 68 69 63 68 20 73 63 68 65 64 75 6c | nserving.scheduler.which.schedul |
c96a0 | 65 73 20 74 68 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 6f 66 20 70 61 63 6b 65 74 73 20 62 | es.the.transmission.of.packets.b |
c96c0 | 61 73 65 64 20 6f 6e 20 66 6c 6f 77 73 2c 20 74 68 61 74 20 69 73 2c 20 69 74 20 62 61 6c 61 6e | ased.on.flows,.that.is,.it.balan |
c96e0 | 63 65 73 20 74 72 61 66 66 69 63 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 69 74 20 74 68 72 6f | ces.traffic.distributing.it.thro |
c9700 | 75 67 68 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 2d 71 75 65 75 65 73 20 69 6e 20 6f 72 64 65 | ugh.different.sub-queues.in.orde |
c9720 | 72 20 74 6f 20 65 6e 73 75 72 65 20 66 61 69 72 6e 65 73 73 20 73 6f 20 74 68 61 74 20 65 61 63 | r.to.ensure.fairness.so.that.eac |
c9740 | 68 20 66 6c 6f 77 20 69 73 20 61 62 6c 65 20 74 6f 20 73 65 6e 64 20 64 61 74 61 20 69 6e 20 74 | h.flow.is.able.to.send.data.in.t |
c9760 | 75 72 6e 2c 20 70 72 65 76 65 6e 74 69 6e 67 20 61 6e 79 20 73 69 6e 67 6c 65 20 6f 6e 65 20 66 | urn,.preventing.any.single.one.f |
c9780 | 72 6f 6d 20 64 72 6f 77 6e 69 6e 67 20 6f 75 74 20 74 68 65 20 72 65 73 74 2e 00 46 61 73 74 4e | rom.drowning.out.the.rest..FastN |
c97a0 | 65 74 4d 6f 6e 00 46 61 73 74 4e 65 74 4d 6f 6e 20 69 73 20 61 20 68 69 67 68 2d 70 65 72 66 6f | etMon.FastNetMon.is.a.high-perfo |
c97c0 | 72 6d 61 6e 63 65 20 44 44 6f 53 20 64 65 74 65 63 74 6f 72 2f 73 65 6e 73 6f 72 20 62 75 69 6c | rmance.DDoS.detector/sensor.buil |
c97e0 | 74 20 6f 6e 20 74 6f 70 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 70 61 63 6b 65 74 20 63 61 70 74 | t.on.top.of.multiple.packet.capt |
c9800 | 75 72 65 20 65 6e 67 69 6e 65 73 3a 20 4e 65 74 46 6c 6f 77 2c 20 49 50 46 49 58 2c 20 73 46 6c | ure.engines:.NetFlow,.IPFIX,.sFl |
c9820 | 6f 77 2c 20 41 46 5f 50 41 43 4b 45 54 20 28 70 6f 72 74 20 6d 69 72 72 6f 72 29 2e 20 49 74 20 | ow,.AF_PACKET.(port.mirror)..It. |
c9840 | 63 61 6e 20 64 65 74 65 63 74 20 68 6f 73 74 73 20 69 6e 20 74 68 65 20 64 65 70 6c 6f 79 65 64 | can.detect.hosts.in.the.deployed |
c9860 | 20 6e 65 74 77 6f 72 6b 20 73 65 6e 64 69 6e 67 20 6f 72 20 72 65 63 65 69 76 69 6e 67 20 6c 61 | .network.sending.or.receiving.la |
c9880 | 72 67 65 20 76 6f 6c 75 6d 65 73 20 6f 66 20 74 72 61 66 66 69 63 2c 20 70 61 63 6b 65 74 73 2f | rge.volumes.of.traffic,.packets/ |
c98a0 | 62 79 74 65 73 2f 66 6c 6f 77 73 20 70 65 72 20 73 65 63 6f 6e 64 20 61 6e 64 20 70 65 72 66 6f | bytes/flows.per.second.and.perfo |
c98c0 | 72 6d 20 61 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 68 61 6e 64 | rm.a.configurable.action.to.hand |
c98e0 | 6c 65 20 74 68 61 74 20 65 76 65 6e 74 2c 20 73 75 63 68 20 61 73 20 63 61 6c 6c 69 6e 67 20 61 | le.that.event,.such.as.calling.a |
c9900 | 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 2e 00 46 65 61 74 75 72 65 73 20 6f 66 20 74 68 65 20 | .custom.script..Features.of.the. |
c9920 | 43 75 72 72 65 6e 74 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 00 46 69 65 6c 64 00 46 69 6c | Current.Implementation.Field.Fil |
c9940 | 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 20 63 6f 6e | e.identified.by.`<filename>`.con |
c9960 | 74 61 69 6e 69 6e 67 20 74 68 65 20 54 53 49 47 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | taining.the.TSIG.authentication. |
c9980 | 6b 65 79 20 66 6f 72 20 52 46 43 32 31 33 36 20 6e 73 75 70 64 61 74 65 20 6f 6e 20 72 65 6d 6f | key.for.RFC2136.nsupdate.on.remo |
c99a0 | 74 65 20 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 | te.DNS.server..File.identified.b |
c99c0 | 79 20 60 3c 6b 65 79 66 69 6c 65 3e 60 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 73 65 63 | y.`<keyfile>`.containing.the.sec |
c99e0 | 72 65 74 20 52 4e 44 43 20 6b 65 79 20 73 68 61 72 65 64 20 77 69 74 68 20 72 65 6d 6f 74 65 20 | ret.RNDC.key.shared.with.remote. |
c9a00 | 44 4e 53 20 73 65 72 76 65 72 2e 00 46 69 6c 74 65 72 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 | DNS.server..Filter.Type-3.summar |
c9a20 | 79 2d 4c 53 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 20 | y-LSAs.announced.to.other.areas. |
c9a40 | 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 69 6e 74 72 61 2d 20 61 72 65 61 20 70 61 74 68 | originated.from.intra-.area.path |
c9a60 | 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 2e 20 54 68 69 73 20 63 6f 6d 6d | s.from.specified.area..This.comm |
c9a80 | 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 46 69 6c | and.makes.sense.in.ABR.only..Fil |
c9aa0 | 74 65 72 20 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 2f 64 65 73 74 | ter.traffic.based.on.source/dest |
c9ac0 | 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 69 6c 74 65 72 2d 49 64 3d 32 30 30 30 2f | ination.address..Filter-Id=2000/ |
c9ae0 | 33 30 30 30 20 28 6d 65 61 6e 73 20 32 30 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d | 3000.(means.2000Kbit.down-stream |
c9b00 | 20 72 61 74 65 20 61 6e 64 20 33 30 30 30 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 74 | .rate.and.3000Kbit.up-stream.rat |
c9b20 | 65 29 00 46 69 6c 74 65 72 2d 49 64 3d 35 30 30 30 2f 34 30 30 30 20 28 6d 65 61 6e 73 20 35 30 | e).Filter-Id=5000/4000.(means.50 |
c9b40 | 30 30 4b 62 69 74 20 64 6f 77 6e 2d 73 74 72 65 61 6d 20 72 61 74 65 20 61 6e 64 20 34 30 30 30 | 00Kbit.down-stream.rate.and.4000 |
c9b60 | 4b 62 69 74 20 75 70 2d 73 74 72 65 61 6d 20 72 61 74 65 29 20 49 66 20 61 74 74 72 69 62 75 74 | Kbit.up-stream.rate).If.attribut |
c9b80 | 65 20 46 69 6c 74 65 72 2d 49 64 20 72 65 64 65 66 69 6e 65 64 2c 20 72 65 70 6c 61 63 65 20 69 | e.Filter-Id.redefined,.replace.i |
c9ba0 | 74 20 69 6e 20 52 41 44 49 55 53 20 43 6f 41 20 72 65 71 75 65 73 74 2e 00 46 69 6c 74 65 72 69 | t.in.RADIUS.CoA.request..Filteri |
c9bc0 | 6e 67 00 46 69 6c 74 65 72 69 6e 67 20 69 73 20 75 73 65 64 20 66 6f 72 20 62 6f 74 68 20 69 6e | ng.Filtering.is.used.for.both.in |
c9be0 | 70 75 74 20 61 6e 64 20 6f 75 74 70 75 74 20 6f 66 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e | put.and.output.of.the.routing.in |
c9c00 | 66 6f 72 6d 61 74 69 6f 6e 2e 20 4f 6e 63 65 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 64 65 66 | formation..Once.filtering.is.def |
c9c20 | 69 6e 65 64 2c 20 69 74 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 69 6e 20 61 6e 79 20 64 | ined,.it.can.be.applied.in.any.d |
c9c40 | 69 72 65 63 74 69 6f 6e 2e 20 56 79 4f 53 20 6d 61 6b 65 73 20 66 69 6c 74 65 72 69 6e 67 20 70 | irection..VyOS.makes.filtering.p |
c9c60 | 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 61 63 6c 73 20 61 6e 64 20 70 72 65 66 69 78 20 6c 69 | ossible.using.acls.and.prefix.li |
c9c80 | 73 74 73 2e 00 46 69 6e 61 6c 6c 79 2c 20 74 6f 20 61 70 70 6c 79 20 74 68 65 20 70 6f 6c 69 63 | sts..Finally,.to.apply.the.polic |
c9ca0 | 79 20 72 6f 75 74 65 20 74 6f 20 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 6e 20 6f 75 | y.route.to.ingress.traffic.on.ou |
c9cc0 | 72 20 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 77 65 20 75 73 65 3a 00 46 69 72 65 77 61 6c | r.LAN.interface,.we.use:.Firewal |
c9ce0 | 6c 00 46 69 72 65 77 61 6c 6c 20 2d 20 49 50 76 34 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c | l.Firewall.-.IPv4.Rules.Firewall |
c9d00 | 20 2d 20 49 50 76 36 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 | .-.IPv6.Rules.Firewall.Configura |
c9d20 | 74 69 6f 6e 00 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 28 44 65 70 | tion.Firewall.Configuration.(Dep |
c9d40 | 72 65 63 61 74 65 64 29 00 46 69 72 65 77 61 6c 6c 20 44 65 73 63 72 69 70 74 69 6f 6e 00 46 69 | recated).Firewall.Description.Fi |
c9d60 | 72 65 77 61 6c 6c 20 45 78 63 65 70 74 69 6f 6e 73 00 46 69 72 65 77 61 6c 6c 20 4c 6f 67 73 00 | rewall.Exceptions.Firewall.Logs. |
c9d80 | 46 69 72 65 77 61 6c 6c 20 52 75 6c 65 73 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 00 46 | Firewall.Rules.Firewall.groups.F |
c9da0 | 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 | irewall.groups.represent.collect |
c9dc0 | 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 | ions.of.IP.addresses,.networks,. |
c9de0 | 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 64 6f 6d 61 69 6e 73 2e | ports,.mac.addresses.or.domains. |
c9e00 | 20 4f 6e 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 | .Once.created,.a.group.can.be.re |
c9e20 | 66 65 72 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f | ferenced.by.firewall,.nat.and.po |
c9e40 | 6c 69 63 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 | licy.route.rules.as.either.a.sou |
c9e60 | 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2e 20 4d 65 6d 62 | rce.or.destination.matcher..Memb |
c9e80 | 65 72 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 6f 72 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d | ers.can.be.added.or.removed.from |
c9ea0 | 20 61 20 67 72 6f 75 70 20 77 69 74 68 6f 75 74 20 63 68 61 6e 67 65 73 20 74 6f 2c 20 6f 72 20 | .a.group.without.changes.to,.or. |
c9ec0 | 74 68 65 20 6e 65 65 64 20 74 6f 20 72 65 6c 6f 61 64 2c 20 69 6e 64 69 76 69 64 75 61 6c 20 66 | the.need.to.reload,.individual.f |
c9ee0 | 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 72 | irewall.rules..Firewall.groups.r |
c9f00 | 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 65 | epresent.collections.of.IP.addre |
c9f20 | 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 65 | sses,.networks,.ports,.mac.addre |
c9f40 | 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 63 | sses,.domains.or.interfaces..Onc |
c9f60 | 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 | e.created,.a.group.can.be.refere |
c9f80 | 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 79 | nced.by.firewall,.nat.and.policy |
c9fa0 | 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 20 | .route.rules.as.either.a.source. |
c9fc0 | 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2c 20 61 6e 64 20 61 73 20 69 | or.destination.matcher,.and.as.i |
c9fe0 | 6e 62 70 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 69 | nbpund/outbound.in.the.case.of.i |
ca000 | 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 00 46 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 73 20 | nterface.group..Firewall.groups. |
ca020 | 72 65 70 72 65 73 65 6e 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 49 50 20 61 64 64 72 | represent.collections.of.IP.addr |
ca040 | 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 2c 20 70 6f 72 74 73 2c 20 6d 61 63 20 61 64 64 72 | esses,.networks,.ports,.mac.addr |
ca060 | 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e | esses,.domains.or.interfaces..On |
ca080 | 63 65 20 63 72 65 61 74 65 64 2c 20 61 20 67 72 6f 75 70 20 63 61 6e 20 62 65 20 72 65 66 65 72 | ce.created,.a.group.can.be.refer |
ca0a0 | 65 6e 63 65 64 20 62 79 20 66 69 72 65 77 61 6c 6c 2c 20 6e 61 74 20 61 6e 64 20 70 6f 6c 69 63 | enced.by.firewall,.nat.and.polic |
ca0c0 | 79 20 72 6f 75 74 65 20 72 75 6c 65 73 20 61 73 20 65 69 74 68 65 72 20 61 20 73 6f 75 72 63 65 | y.route.rules.as.either.a.source |
ca0e0 | 20 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2c 20 61 6e 64 2f 6f 72 20 | .or.destination.matcher,.and/or. |
ca100 | 61 73 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 20 74 68 65 20 63 61 73 65 20 | as.inbound/outbound.in.the.case. |
ca120 | 6f 66 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 2e 00 46 69 72 65 77 61 6c 6c 20 6d 61 72 | of.interface.group..Firewall.mar |
ca140 | 6b 2e 20 49 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 6c 6f 61 64 62 61 6c 61 6e 63 69 6e 67 20 | k..It.possible.to.loadbalancing. |
ca160 | 74 72 61 66 66 69 63 20 62 61 73 65 64 20 6f 6e 20 60 60 66 77 6d 61 72 6b 60 60 20 76 61 6c 75 | traffic.based.on.``fwmark``.valu |
ca180 | 65 00 46 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 61 70 | e.Firewall.policy.can.also.be.ap |
ca1a0 | 70 6c 69 65 64 20 74 6f 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 65 72 66 61 63 65 20 66 6f | plied.to.the.tunnel.interface.fo |
ca1c0 | 72 20 60 6c 6f 63 61 6c 60 2c 20 60 69 6e 60 2c 20 61 6e 64 20 60 6f 75 74 60 20 64 69 72 65 63 | r.`local`,.`in`,.and.`out`.direc |
ca1e0 | 74 69 6f 6e 73 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 73 20 69 64 65 6e 74 69 63 61 6c 6c 79 20 | tions.and.functions.identically. |
ca200 | 74 6f 20 65 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 00 46 69 72 65 77 61 6c 6c | to.ethernet.interfaces..Firewall |
ca220 | 20 72 75 6c 65 73 20 61 72 65 20 77 72 69 74 74 65 6e 20 61 73 20 6e 6f 72 6d 61 6c 2c 20 75 73 | .rules.are.written.as.normal,.us |
ca240 | 69 6e 67 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 | ing.the.internal.IP.address.as.t |
ca260 | 68 65 20 73 6f 75 72 63 65 20 6f 66 20 6f 75 74 62 6f 75 6e 64 20 72 75 6c 65 73 20 61 6e 64 20 | he.source.of.outbound.rules.and. |
ca280 | 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 69 6e 62 6f 75 6e 64 20 72 75 6c 65 73 | the.destination.of.inbound.rules |
ca2a0 | 2e 00 46 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 66 6f 72 20 44 65 73 74 69 6e 61 74 69 6f 6e | ..Firewall.rules.for.Destination |
ca2c0 | 20 4e 41 54 00 46 69 72 65 77 61 6c 6c 2d 4c 65 67 61 63 79 00 46 69 72 6d 77 61 72 65 20 55 70 | .NAT.Firewall-Legacy.Firmware.Up |
ca2e0 | 64 61 74 65 00 46 69 72 73 74 20 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 61 20 72 6f | date.First.hop.interface.of.a.ro |
ca300 | 75 74 65 20 74 6f 20 6d 61 74 63 68 2e 00 46 69 72 73 74 20 6f 66 20 61 6c 6c 20 79 6f 75 20 6d | ute.to.match..First.of.all.you.m |
ca320 | 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 42 47 50 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 | ust.configure.BGP.router.with.th |
ca340 | 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 | e.:abbr:`ASN.(Autonomous.System. |
ca360 | 4e 75 6d 62 65 72 29 60 2e 20 54 68 65 20 41 53 20 6e 75 6d 62 65 72 20 69 73 20 61 6e 20 69 64 | Number)`..The.AS.number.is.an.id |
ca380 | 65 6e 74 69 66 69 65 72 20 66 6f 72 20 74 68 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 | entifier.for.the.autonomous.syst |
ca3a0 | 65 6d 2e 20 54 68 65 20 42 47 50 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 73 20 74 68 65 20 41 53 | em..The.BGP.protocol.uses.the.AS |
ca3c0 | 20 6e 75 6d 62 65 72 20 66 6f 72 20 64 65 74 65 63 74 69 6e 67 20 77 68 65 74 68 65 72 20 74 68 | .number.for.detecting.whether.th |
ca3e0 | 65 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 69 6e 74 65 72 6e 61 6c 20 6f 72 20 | e.BGP.connection.is.internal.or. |
ca400 | 65 78 74 65 72 6e 61 6c 2e 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 | external..VyOS.does.not.have.a.s |
ca420 | 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 47 50 20 | pecial.command.to.start.the.BGP. |
ca440 | 70 72 6f 63 65 73 73 2e 20 54 68 65 20 42 47 50 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 | process..The.BGP.process.starts. |
ca460 | 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6e 65 69 67 68 62 6f 72 20 69 73 20 63 6f 6e 66 69 | when.the.first.neighbor.is.confi |
ca480 | 67 75 72 65 64 2e 00 46 69 72 73 74 20 6f 66 20 61 6c 6c 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 | gured..First.of.all,.we.need.to. |
ca4a0 | 63 72 65 61 74 65 20 61 20 43 41 20 72 6f 6f 74 20 63 65 72 74 69 66 69 63 61 74 65 20 61 6e 64 | create.a.CA.root.certificate.and |
ca4c0 | 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 | .server.certificate.on.the.serve |
ca4e0 | 72 20 73 69 64 65 2e 00 46 69 72 73 74 20 73 63 65 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 64 65 | r.side..First.scenario:.apply.de |
ca500 | 73 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 66 6f 72 20 61 6c 6c 20 48 54 54 50 20 74 72 61 66 66 | stination.NAT.for.all.HTTP.traff |
ca520 | 69 63 20 63 6f 6d 6d 69 6e 67 20 74 68 72 6f 75 67 68 20 69 6e 74 65 72 66 61 63 65 20 65 74 68 | ic.comming.through.interface.eth |
ca540 | 30 2c 20 61 6e 64 20 75 73 65 72 20 34 20 62 61 63 6b 65 6e 64 73 2e 20 46 69 72 73 74 20 62 61 | 0,.and.user.4.backends..First.ba |
ca560 | 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 72 65 63 65 69 76 65 64 20 33 30 25 20 6f 66 20 74 68 65 | ckend.should.received.30%.of.the |
ca580 | 20 72 65 71 75 65 73 74 2c 20 73 65 63 6f 6e 64 20 62 61 63 6b 65 6e 64 20 73 68 6f 75 6c 64 20 | .request,.second.backend.should. |
ca5a0 | 67 65 74 20 32 30 25 2c 20 74 68 69 72 64 20 31 35 25 20 61 6e 64 20 74 68 65 20 66 6f 75 72 74 | get.20%,.third.15%.and.the.fourt |
ca5c0 | 68 20 33 35 25 20 57 65 20 77 69 6c 6c 20 75 73 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 | h.35%.We.will.use.source.and.des |
ca5e0 | 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 66 6f 72 20 68 61 73 68 20 67 65 6e 65 72 61 | tination.address.for.hash.genera |
ca600 | 74 69 6f 6e 2e 00 46 69 72 73 74 20 73 74 65 70 73 00 46 69 72 73 74 20 74 68 65 20 4f 54 50 20 | tion..First.steps.First.the.OTP. |
ca620 | 6b 65 79 73 20 6d 75 73 74 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 61 6e 64 20 73 65 6e 74 20 | keys.must.be.generated.and.sent. |
ca640 | 74 6f 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | to.the.user.and.to.the.configura |
ca660 | 74 69 6f 6e 3a 00 46 69 72 73 74 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 | tion:.First.we.need.to.specify.t |
ca680 | 68 65 20 62 61 73 69 63 20 73 65 74 74 69 6e 67 73 2e 20 31 31 39 34 2f 55 44 50 20 69 73 20 74 | he.basic.settings..1194/UDP.is.t |
ca6a0 | 68 65 20 64 65 66 61 75 6c 74 2e 20 54 68 65 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e | he.default..The.``persistent-tun |
ca6c0 | 6e 65 6c 60 60 20 6f 70 74 69 6f 6e 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2c 20 69 74 20 | nel``.option.is.recommended,.it. |
ca6e0 | 70 72 65 76 65 6e 74 73 20 74 68 65 20 54 55 4e 2f 54 41 50 20 64 65 76 69 63 65 20 66 72 6f 6d | prevents.the.TUN/TAP.device.from |
ca700 | 20 63 6c 6f 73 69 6e 67 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 73 65 74 73 20 6f 72 | .closing.on.connection.resets.or |
ca720 | 20 64 61 65 6d 6f 6e 20 72 65 6c 6f 61 64 73 2e 00 46 69 72 73 74 20 79 6f 75 20 77 69 6c 6c 20 | .daemon.reloads..First.you.will. |
ca740 | 6e 65 65 64 20 74 6f 20 64 65 70 6c 6f 79 20 61 6e 20 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 | need.to.deploy.an.RPKI.validator |
ca760 | 20 66 6f 72 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 74 6f 20 75 73 65 2e 20 4e 4c 6e 65 74 20 | .for.your.routers.to.use..NLnet. |
ca780 | 4c 61 62 73 20 70 72 6f 76 69 64 65 73 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 73 6f | Labs.provides.a.collection.of.so |
ca7a0 | 66 74 77 61 72 65 5f 20 79 6f 75 20 63 61 6e 20 63 6f 6d 70 61 72 65 20 61 6e 64 20 73 65 74 74 | ftware_.you.can.compare.and.sett |
ca7c0 | 6c 65 20 6f 6e 20 6f 6e 65 2e 20 4f 6e 63 65 20 79 6f 75 72 20 73 65 72 76 65 72 20 69 73 20 72 | le.on.one..Once.your.server.is.r |
ca7e0 | 75 6e 6e 69 6e 67 20 79 6f 75 20 63 61 6e 20 73 74 61 72 74 20 76 61 6c 69 64 61 74 69 6e 67 20 | unning.you.can.start.validating. |
ca800 | 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 46 69 72 73 74 20 79 6f 75 20 77 69 6c 6c 20 6e 65 | announcements..First.you.will.ne |
ca820 | 65 64 20 74 6f 20 64 65 70 6c 6f 79 20 61 6e 20 52 50 4b 49 20 76 61 6c 69 64 61 74 6f 72 20 66 | ed.to.deploy.an.RPKI.validator.f |
ca840 | 6f 72 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 74 6f 20 75 73 65 2e 20 54 68 65 20 52 49 50 45 | or.your.routers.to.use..The.RIPE |
ca860 | 20 4e 43 43 20 68 65 6c 70 66 75 6c 6c 79 20 70 72 6f 76 69 64 65 20 60 73 6f 6d 65 20 69 6e 73 | .NCC.helpfully.provide.`some.ins |
ca880 | 74 72 75 63 74 69 6f 6e 73 60 5f 20 74 6f 20 67 65 74 20 79 6f 75 20 73 74 61 72 74 65 64 20 77 | tructions`_.to.get.you.started.w |
ca8a0 | 69 74 68 20 73 65 76 65 72 61 6c 20 64 69 66 66 65 72 65 6e 74 20 6f 70 74 69 6f 6e 73 2e 20 20 | ith.several.different.options... |
ca8c0 | 4f 6e 63 65 20 79 6f 75 72 20 73 65 72 76 65 72 20 69 73 20 72 75 6e 6e 69 6e 67 20 79 6f 75 20 | Once.your.server.is.running.you. |
ca8e0 | 63 61 6e 20 73 74 61 72 74 20 76 61 6c 69 64 61 74 69 6e 67 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e | can.start.validating.announcemen |
ca900 | 74 73 2e 00 46 69 72 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 72 75 6e 20 74 | ts..First,.on.both.routers.run.t |
ca920 | 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 72 61 74 65 | he.operational.command."generate |
ca940 | 20 70 6b 69 20 6b 65 79 2d 70 61 69 72 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 | .pki.key-pair.install.<key-pair. |
ca960 | 6e 61 6d 3e 3e 22 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 20 64 69 66 66 65 72 65 6e 74 | nam>>"..You.may.choose.different |
ca980 | 20 6c 65 6e 67 74 68 20 74 68 61 6e 20 32 30 34 38 20 6f 66 20 63 6f 75 72 73 65 2e 00 46 69 72 | .length.than.2048.of.course..Fir |
ca9a0 | 73 74 2c 20 6f 6e 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 72 75 6e 20 74 68 65 20 6f 70 65 72 | st,.on.both.routers.run.the.oper |
ca9c0 | 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 22 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6b 65 | ational.command."generate.pki.ke |
ca9e0 | 79 2d 70 61 69 72 20 69 6e 73 74 61 6c 6c 20 3c 6b 65 79 2d 70 61 69 72 20 6e 61 6d 65 3e 22 2e | y-pair.install.<key-pair.name>". |
caa00 | 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 20 64 69 66 66 65 72 65 6e 74 20 6c 65 6e 67 74 68 | .You.may.choose.different.length |
caa20 | 20 74 68 61 6e 20 32 30 34 38 20 6f 66 20 63 6f 75 72 73 65 2e 00 46 69 72 73 74 2c 20 6f 6e 65 | .than.2048.of.course..First,.one |
caa40 | 20 6f 66 20 74 68 65 20 73 79 73 74 65 6d 73 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 6b 65 79 | .of.the.systems.generate.the.key |
caa60 | 20 75 73 69 6e 67 20 74 68 65 20 3a 72 65 66 3a 60 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 | .using.the.:ref:`generate.pki.op |
caa80 | 65 6e 76 70 6e 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 3c 63 6f 6e 66 69 67 75 72 61 74 69 6f | envpn.shared-secret<configuratio |
caaa0 | 6e 2f 70 6b 69 2f 69 6e 64 65 78 3a 70 6b 69 3e 60 20 63 6f 6d 6d 61 6e 64 2e 20 4f 6e 63 65 20 | n/pki/index:pki>`.command..Once. |
caac0 | 67 65 6e 65 72 61 74 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 69 6e 73 74 | generated,.you.will.need.to.inst |
caae0 | 61 6c 6c 20 74 68 69 73 20 6b 65 79 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d | all.this.key.on.the.local.system |
cab00 | 2c 20 74 68 65 6e 20 63 6f 70 79 20 61 6e 64 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 79 | ,.then.copy.and.install.this.key |
cab20 | 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 46 69 72 73 74 2c 20 79 6f | .to.the.remote.router..First,.yo |
cab40 | 75 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 6b 65 79 20 62 79 20 72 75 6e 6e | u.need.to.generate.a.key.by.runn |
cab60 | 69 6e 67 20 60 60 72 75 6e 20 67 65 6e 65 72 61 74 65 20 70 6b 69 20 6f 70 65 6e 76 70 6e 20 73 | ing.``run.generate.pki.openvpn.s |
cab80 | 68 61 72 65 64 2d 73 65 63 72 65 74 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 60 20 66 72 | hared-secret.install.<name>``.fr |
caba0 | 6f 6d 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 59 6f 75 20 63 61 6e 20 75 | om.configuration.mode..You.can.u |
cabc0 | 73 65 20 61 6e 79 20 6e 61 6d 65 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 60 60 73 32 73 60 60 | se.any.name,.we.will.use.``s2s`` |
cabe0 | 2e 00 46 6c 61 73 68 00 46 6c 61 73 68 20 4f 76 65 72 72 69 64 65 00 46 6c 6f 77 20 41 63 63 6f | ..Flash.Flash.Override.Flow.Acco |
cac00 | 75 6e 74 69 6e 67 00 46 6c 6f 77 20 45 78 70 6f 72 74 00 46 6c 6f 77 20 61 6e 64 20 70 61 63 6b | unting.Flow.Export.Flow.and.pack |
cac20 | 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 00 46 6c 6f 77 73 20 61 72 65 20 64 65 66 | et-based.balancing.Flows.are.def |
cac40 | 69 6e 65 64 20 62 79 20 73 6f 75 72 63 65 2d 64 65 73 74 69 6e 61 74 69 6f 6e 20 68 6f 73 74 20 | ined.by.source-destination.host. |
cac60 | 70 61 69 72 73 2e 00 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 | pairs..Flows.are.defined.by.the. |
cac80 | 35 2d 74 75 70 6c 65 2e 20 46 61 69 72 6e 65 73 73 20 69 73 20 61 70 70 6c 69 65 64 20 66 69 72 | 5-tuple..Fairness.is.applied.fir |
caca0 | 73 74 20 6f 76 65 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 2c 20 74 | st.over.destination.addresses,.t |
cacc0 | 68 65 6e 20 6f 76 65 72 20 69 6e 64 69 76 69 64 75 61 6c 20 66 6c 6f 77 73 2e 00 46 6c 6f 77 73 | hen.over.individual.flows..Flows |
cace0 | 20 61 72 65 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 35 2d 74 75 70 6c 65 2e 20 46 61 69 | .are.defined.by.the.5-tuple..Fai |
cad00 | 72 6e 65 73 73 20 69 73 20 61 70 70 6c 69 65 64 20 66 69 72 73 74 20 6f 76 65 72 20 73 6f 75 72 | rness.is.applied.first.over.sour |
cad20 | 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 6e 20 6f 76 65 72 20 69 6e 64 69 76 69 64 75 | ce.addresses,.then.over.individu |
cad40 | 61 6c 20 66 6c 6f 77 73 2e 00 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 62 79 20 74 | al.flows..Flows.are.defined.by.t |
cad60 | 68 65 20 65 6e 74 69 72 65 20 35 2d 74 75 70 6c 65 20 28 73 6f 75 72 63 65 20 49 50 20 61 64 64 | he.entire.5-tuple.(source.IP.add |
cad80 | 72 65 73 73 2c 20 73 6f 75 72 63 65 20 70 6f 72 74 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 | ress,.source.port,.destination.I |
cada0 | 50 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 2c 20 74 72 61 | P.address,.destination.port,.tra |
cadc0 | 6e 73 70 6f 72 74 20 70 72 6f 74 6f 63 6f 6c 29 2e 00 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 | nsport.protocol)..Flows.are.defi |
cade0 | 6e 65 64 20 6f 6e 6c 79 20 62 79 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e | ned.only.by.destination.address. |
cae00 | 00 46 6c 6f 77 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 6f 6e 6c 79 20 62 79 20 73 6f 75 72 63 | .Flows.are.defined.only.by.sourc |
cae20 | 65 20 61 64 64 72 65 73 73 2e 00 46 6c 6f 77 73 20 63 61 6e 20 62 65 20 65 78 70 6f 72 74 65 64 | e.address..Flows.can.be.exported |
cae40 | 20 76 69 61 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 73 3a 20 4e 65 | .via.two.different.protocols:.Ne |
cae60 | 74 46 6c 6f 77 20 28 76 65 72 73 69 6f 6e 73 20 35 2c 20 39 20 61 6e 64 20 31 30 2f 49 50 46 49 | tFlow.(versions.5,.9.and.10/IPFI |
cae80 | 58 29 20 61 6e 64 20 73 46 6c 6f 77 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 79 6f 75 20 | X).and.sFlow..Additionally,.you. |
caea0 | 6d 61 79 20 73 61 76 65 20 66 6c 6f 77 73 20 74 6f 20 61 6e 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 | may.save.flows.to.an.in-memory.t |
caec0 | 61 62 6c 65 20 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 20 61 20 72 6f 75 74 65 72 2e 00 46 6c 6f | able.internally.in.a.router..Flo |
caee0 | 77 74 61 62 6c 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 6c 6f 77 74 61 62 6c 65 73 20 | wtable.Configuration.Flowtables. |
caf00 | 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 61 20 66 61 73 74 70 61 74 68 | .allows.you.to.define.a.fastpath |
caf20 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 64 61 74 61 70 61 74 68 2e | .through.the.flowtable.datapath. |
caf40 | 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 73 75 70 70 6f 72 74 73 20 66 6f 72 20 74 68 65 20 | .The.flowtable.supports.for.the. |
caf60 | 6c 61 79 65 72 20 33 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 6e 64 20 74 68 65 20 6c 61 | layer.3.IPv4.and.IPv6.and.the.la |
caf80 | 79 65 72 20 34 20 54 43 50 20 61 6e 64 20 55 44 50 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 46 6c 6f | yer.4.TCP.and.UDP.protocols..Flo |
cafa0 | 77 74 61 62 6c 65 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 46 | wtables.Firewall.Configuration.F |
cafc0 | 6c 75 73 68 69 6e 67 20 74 68 65 20 73 65 73 73 69 6f 6e 20 74 61 62 6c 65 20 77 69 6c 6c 20 63 | lushing.the.session.table.will.c |
cafe0 | 61 75 73 65 20 6f 74 68 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 66 61 6c 6c 20 62 | ause.other.connections.to.fall.b |
cb000 | 61 63 6b 20 66 72 6f 6d 20 66 6c 6f 77 2d 62 61 73 65 64 20 74 6f 20 70 61 63 6b 65 74 2d 62 61 | ack.from.flow-based.to.packet-ba |
cb020 | 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 75 6e 74 69 6c 20 65 61 63 68 20 66 6c 6f 77 20 69 73 | sed.balancing.until.each.flow.is |
cb040 | 20 72 65 65 73 74 61 62 6c 69 73 68 65 64 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 53 53 48 20 64 | .reestablished..Follow.the.SSH.d |
cb060 | 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 | ynamic-protection.log..Follow.th |
cb080 | 65 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 46 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 | e.SSH.server.log..Follow.the.ins |
cb0a0 | 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 43 41 20 63 65 72 74 20 28 69 | tructions.to.generate.CA.cert.(i |
cb0c0 | 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 46 6f 6c 6c 6f 77 20 74 68 | n.configuration.mode):.Follow.th |
cb0e0 | 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 73 65 72 76 65 | e.instructions.to.generate.serve |
cb100 | 72 20 63 65 72 74 20 28 69 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 29 3a 00 | r.cert.(in.configuration.mode):. |
cb120 | 46 6f 6c 6c 6f 77 20 74 68 65 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 65 61 74 65 | Follow.the.logs.for.mDNS.repeate |
cb140 | 72 20 73 65 72 76 69 63 65 2e 00 46 6f 72 20 3a 72 65 66 3a 60 62 69 64 69 72 65 63 74 69 6f 6e | r.service..For.:ref:`bidirection |
cb160 | 61 6c 2d 6e 61 74 60 20 61 20 72 75 6c 65 20 66 6f 72 20 62 6f 74 68 20 3a 72 65 66 3a 60 73 6f | al-nat`.a.rule.for.both.:ref:`so |
cb180 | 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d | urce-nat`.and.:ref:`destination- |
cb1a0 | 6e 61 74 60 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 00 46 6f 72 20 3a 72 | nat`.needs.to.be.created..For.:r |
cb1c0 | 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 72 75 6c 65 73 20 74 68 65 20 70 | ef:`destination-nat`.rules.the.p |
cb1e0 | 61 63 6b 65 74 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 | ackets.destination.address.will. |
cb200 | 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 | be.replaced.by.the.specified.add |
cb220 | 72 65 73 73 20 69 6e 20 74 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 | ress.in.the.`translation.address |
cb240 | 60 20 63 6f 6d 6d 61 6e 64 2e 00 46 6f 72 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 | `.command..For.:ref:`source-nat` |
cb260 | 20 72 75 6c 65 73 20 74 68 65 20 70 61 63 6b 65 74 73 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 | .rules.the.packets.source.addres |
cb280 | 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 77 69 74 68 20 74 68 65 20 61 64 64 72 | s.will.be.replaced.with.the.addr |
cb2a0 | 65 73 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e | ess.specified.in.the.translation |
cb2c0 | 20 63 6f 6d 6d 61 6e 64 2e 20 41 20 70 6f 72 74 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e | .command..A.port.translation.can |
cb2e0 | 20 61 6c 73 6f 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 70 61 72 74 20 6f | .also.be.specified.and.is.part.o |
cb300 | 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 46 6f 72 20 45 | f.the.translation.address..For.E |
cb320 | 6e 63 72 79 70 74 69 6f 6e 3a 00 46 6f 72 20 48 61 73 68 69 6e 67 3a 00 46 6f 72 20 49 53 2d 49 | ncryption:.For.Hashing:.For.IS-I |
cb340 | 53 20 74 6f 70 20 6f 70 65 72 61 74 65 20 63 6f 72 72 65 63 74 6c 79 2c 20 6f 6e 65 20 6d 75 73 | S.top.operate.correctly,.one.mus |
cb360 | 74 20 64 6f 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 61 20 52 6f 75 74 65 72 20 | t.do.the.equivalent.of.a.Router. |
cb380 | 49 44 20 69 6e 20 43 4c 4e 53 2e 20 54 68 69 73 20 52 6f 75 74 65 72 20 49 44 20 69 73 20 63 61 | ID.in.CLNS..This.Router.ID.is.ca |
cb3a0 | 6c 6c 65 64 20 74 68 65 20 3a 61 62 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 | lled.the.:abbr:`NET.(Network.Ent |
cb3c0 | 69 74 79 20 54 69 74 6c 65 29 60 2e 20 54 68 69 73 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 | ity.Title)`..This.must.be.unique |
cb3e0 | 20 66 6f 72 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 74 68 61 74 20 | .for.each.and.every.router.that. |
cb400 | 69 73 20 6f 70 65 72 61 74 69 6e 67 20 69 6e 20 49 53 2d 49 53 2e 20 49 74 20 61 6c 73 6f 20 6d | is.operating.in.IS-IS..It.also.m |
cb420 | 75 73 74 20 6e 6f 74 20 62 65 20 64 75 70 6c 69 63 61 74 65 64 20 6f 74 68 65 72 77 69 73 65 20 | ust.not.be.duplicated.otherwise. |
cb440 | 74 68 65 20 73 61 6d 65 20 69 73 73 75 65 73 20 74 68 61 74 20 6f 63 63 75 72 20 77 69 74 68 69 | the.same.issues.that.occur.withi |
cb460 | 6e 20 4f 53 50 46 20 77 69 6c 6c 20 6f 63 63 75 72 20 77 69 74 68 69 6e 20 49 53 2d 49 53 20 77 | n.OSPF.will.occur.within.IS-IS.w |
cb480 | 68 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 73 61 69 64 20 64 75 70 6c 69 63 61 74 69 6f 6e | hen.it.comes.to.said.duplication |
cb4a0 | 2e 00 46 6f 72 20 49 6e 63 6f 6d 69 6e 67 20 61 6e 64 20 49 6d 70 6f 72 74 20 52 6f 75 74 65 2d | ..For.Incoming.and.Import.Route- |
cb4c0 | 6d 61 70 73 20 69 66 20 77 65 20 72 65 63 65 69 76 65 20 61 20 76 36 20 67 6c 6f 62 61 6c 20 61 | maps.if.we.receive.a.v6.global.a |
cb4e0 | 6e 64 20 76 36 20 4c 4c 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2c 20 | nd.v6.LL.address.for.the.route,. |
cb500 | 74 68 65 6e 20 70 72 65 66 65 72 20 74 6f 20 75 73 65 20 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 | then.prefer.to.use.the.global.ad |
cb520 | 64 72 65 73 73 20 61 73 20 74 68 65 20 6e 65 78 74 68 6f 70 2e 00 46 6f 72 20 4c 6f 63 61 6c 20 | dress.as.the.nexthop..For.Local. |
cb540 | 55 73 65 72 73 00 46 6f 72 20 52 41 44 49 55 53 20 75 73 65 72 73 00 46 6f 72 20 55 53 42 20 70 | Users.For.RADIUS.users.For.USB.p |
cb560 | 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a | ort.information.please.refor.to: |
cb580 | 20 3a 72 65 66 3a 60 68 61 72 64 77 61 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 61 20 68 65 61 64 | .:ref:`hardware_usb`..For.a.head |
cb5a0 | 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f 77 20 65 78 61 6d | start.you.can.use.the.below.exam |
cb5c0 | 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 20 77 69 74 68 20 | ple.on.how.to.build.a.bond.with. |
cb5e0 | 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 6f 6d 20 56 79 4f 53 20 74 6f 20 61 20 4a 75 | two.interfaces.from.VyOS.to.a.Ju |
cb600 | 6e 69 70 65 72 20 45 58 20 53 77 69 74 63 68 20 73 79 73 74 65 6d 2e 00 46 6f 72 20 61 20 68 65 | niper.EX.Switch.system..For.a.he |
cb620 | 61 64 73 74 61 72 74 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 65 20 62 65 6c 6f 77 20 65 78 | adstart.you.can.use.the.below.ex |
cb640 | 61 6d 70 6c 65 20 6f 6e 20 68 6f 77 20 74 6f 20 62 75 69 6c 64 20 61 20 62 6f 6e 64 2c 70 6f 72 | ample.on.how.to.build.a.bond,por |
cb660 | 74 2d 63 68 61 6e 6e 65 6c 20 77 69 74 68 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 66 72 | t-channel.with.two.interfaces.fr |
cb680 | 6f 6d 20 56 79 4f 53 20 74 6f 20 61 20 41 72 75 62 61 2f 48 50 20 32 35 31 30 47 20 73 77 69 74 | om.VyOS.to.a.Aruba/HP.2510G.swit |
cb6a0 | 63 68 2e 00 46 6f 72 20 61 20 6c 61 72 67 65 20 61 6d 6f 75 6e 74 20 6f 66 20 70 72 69 76 61 74 | ch..For.a.large.amount.of.privat |
cb6c0 | 65 20 6d 61 63 68 69 6e 65 73 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 20 79 6f 75 72 20 61 | e.machines.behind.the.NAT.your.a |
cb6e0 | 64 64 72 65 73 73 20 70 6f 6f 6c 20 6d 69 67 68 74 20 74 6f 20 62 65 20 62 69 67 67 65 72 2e 20 | ddress.pool.might.to.be.bigger.. |
cb700 | 55 73 65 20 61 6e 79 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 31 30 30 | Use.any.address.in.the.range.100 |
cb720 | 2e 36 34 2e 30 2e 31 30 20 2d 20 31 30 30 2e 36 34 2e 30 2e 32 30 20 6f 6e 20 53 4e 41 54 20 72 | .64.0.10.-.100.64.0.20.on.SNAT.r |
cb740 | 75 6c 65 20 34 30 20 77 68 65 6e 20 64 6f 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f | ule.40.when.doing.the.translatio |
cb760 | 6e 00 46 6f 72 20 61 20 73 69 6d 70 6c 65 20 68 6f 6d 65 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e | n.For.a.simple.home.network.usin |
cb780 | 67 20 6a 75 73 74 20 74 68 65 20 49 53 50 27 73 20 65 71 75 69 70 6d 65 6e 74 2c 20 74 68 69 73 | g.just.the.ISP's.equipment,.this |
cb7a0 | 20 69 73 20 75 73 75 61 6c 6c 79 20 64 65 73 69 72 61 62 6c 65 2e 20 42 75 74 20 69 66 20 79 6f | .is.usually.desirable..But.if.yo |
cb7c0 | 75 20 77 61 6e 74 20 74 6f 20 72 75 6e 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 66 69 72 65 77 | u.want.to.run.VyOS.as.your.firew |
cb7e0 | 61 6c 6c 20 61 6e 64 20 72 6f 75 74 65 72 2c 20 74 68 69 73 20 77 69 6c 6c 20 72 65 73 75 6c 74 | all.and.router,.this.will.result |
cb800 | 20 69 6e 20 68 61 76 69 6e 67 20 61 20 64 6f 75 62 6c 65 20 4e 41 54 20 61 6e 64 20 66 69 72 65 | .in.having.a.double.NAT.and.fire |
cb820 | 77 61 6c 6c 20 73 65 74 75 70 2e 20 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 61 20 66 65 | wall.setup..This.results.in.a.fe |
cb840 | 77 20 65 78 74 72 61 20 6c 61 79 65 72 73 20 6f 66 20 63 6f 6d 70 6c 65 78 69 74 79 2c 20 70 61 | w.extra.layers.of.complexity,.pa |
cb860 | 72 74 69 63 75 6c 61 72 6c 79 20 69 66 20 79 6f 75 20 75 73 65 20 73 6f 6d 65 20 4e 41 54 20 6f | rticularly.if.you.use.some.NAT.o |
cb880 | 72 20 74 75 6e 6e 65 6c 20 66 65 61 74 75 72 65 73 2e 00 46 6f 72 20 63 6f 6e 6e 65 63 74 69 6f | r.tunnel.features..For.connectio |
cb8a0 | 6e 6c 65 73 73 20 70 72 6f 74 6f 63 6f 6c 73 20 61 73 20 6c 69 6b 65 20 49 43 4d 50 20 61 6e 64 | nless.protocols.as.like.ICMP.and |
cb8c0 | 20 55 44 50 2c 20 61 20 66 6c 6f 77 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 63 6f 6d 70 6c | .UDP,.a.flow.is.considered.compl |
cb8e0 | 65 74 65 20 6f 6e 63 65 20 6e 6f 20 6d 6f 72 65 20 70 61 63 6b 65 74 73 20 66 6f 72 20 74 68 69 | ete.once.no.more.packets.for.thi |
cb900 | 73 20 66 6c 6f 77 20 61 70 70 65 61 72 20 61 66 74 65 72 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 | s.flow.appear.after.configurable |
cb920 | 20 74 69 6d 65 6f 75 74 2e 00 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 70 72 6f 62 6c 65 | .timeout..For.example,.if.proble |
cb940 | 6d 73 20 77 69 74 68 20 70 6f 6f 72 20 74 69 6d 65 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f | ms.with.poor.time.synchronizatio |
cb960 | 6e 20 61 72 65 20 65 78 70 65 72 69 65 6e 63 65 64 2c 20 74 68 65 20 77 69 6e 64 6f 77 20 63 61 | n.are.experienced,.the.window.ca |
cb980 | 6e 20 62 65 20 69 6e 63 72 65 61 73 65 64 20 66 72 6f 6d 20 69 74 73 20 64 65 66 61 75 6c 74 20 | n.be.increased.from.its.default. |
cb9a0 | 73 69 7a 65 20 6f 66 20 33 20 70 65 72 6d 69 74 74 65 64 20 63 6f 64 65 73 20 28 6f 6e 65 20 70 | size.of.3.permitted.codes.(one.p |
cb9c0 | 72 65 76 69 6f 75 73 20 63 6f 64 65 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 | revious.code,.the.current.code,. |
cb9e0 | 74 68 65 20 6e 65 78 74 20 63 6f 64 65 29 20 74 6f 20 31 37 20 70 65 72 6d 69 74 74 65 64 20 63 | the.next.code).to.17.permitted.c |
cba00 | 6f 64 65 73 20 28 74 68 65 20 38 20 70 72 65 76 69 6f 75 73 20 63 6f 64 65 73 2c 20 74 68 65 20 | odes.(the.8.previous.codes,.the. |
cba20 | 63 75 72 72 65 6e 74 20 63 6f 64 65 2c 20 61 6e 64 20 74 68 65 20 38 20 6e 65 78 74 20 63 6f 64 | current.code,.and.the.8.next.cod |
cba40 | 65 73 29 2e 20 54 68 69 73 20 77 69 6c 6c 20 70 65 72 6d 69 74 20 66 6f 72 20 61 20 74 69 6d 65 | es)..This.will.permit.for.a.time |
cba60 | 20 73 6b 65 77 20 6f 66 20 75 70 20 74 6f 20 34 20 6d 69 6e 75 74 65 73 20 62 65 74 77 65 65 6e | .skew.of.up.to.4.minutes.between |
cba80 | 20 63 6c 69 65 6e 74 20 61 6e 64 20 73 65 72 76 65 72 2e 00 46 6f 72 20 65 78 61 6d 70 6c 65 3a | .client.and.server..For.example: |
cbaa0 | 00 46 6f 72 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 63 6f 6e 66 69 67 75 | .For.firewall.filtering,.configu |
cbac0 | 72 61 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 64 6f 6e 65 20 69 6e 20 60 60 73 65 74 20 66 | ration.should.be.done.in.``set.f |
cbae0 | 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 2e 2e 2e 60 60 00 46 6f 72 20 | irewall.[ipv4.|.ipv6]....``.For. |
cbb00 | 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 2c 20 66 69 72 65 77 61 6c 6c 20 72 75 6c | firewall.filtering,.firewall.rul |
cbb20 | 65 73 20 6e 65 65 64 73 20 74 6f 20 62 65 20 63 72 65 61 74 65 64 2e 20 45 61 63 68 20 72 75 6c | es.needs.to.be.created..Each.rul |
cbb40 | 65 20 69 73 20 6e 75 6d 62 65 72 65 64 2c 20 68 61 73 20 61 6e 20 61 63 74 69 6f 6e 20 74 6f 20 | e.is.numbered,.has.an.action.to. |
cbb60 | 61 70 70 6c 79 20 69 66 20 74 68 65 20 72 75 6c 65 20 69 73 20 6d 61 74 63 68 65 64 2c 20 61 6e | apply.if.the.rule.is.matched,.an |
cbb80 | 64 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 73 70 65 63 69 66 79 20 6d 75 6c 74 69 70 6c | d.the.ability.to.specify.multipl |
cbba0 | 65 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 2e 20 44 61 74 61 20 70 61 63 6b 65 74 | e.criteria.matchers..Data.packet |
cbbc0 | 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 75 6c 65 73 20 66 72 6f 6d 20 31 20 2d 20 | s.go.through.the.rules.from.1.-. |
cbbe0 | 39 39 39 39 39 39 2c 20 73 6f 20 6f 72 64 65 72 20 69 73 20 63 72 75 63 69 61 6c 2e 20 41 74 20 | 999999,.so.order.is.crucial..At. |
cbc00 | 74 68 65 20 66 69 72 73 74 20 6d 61 74 63 68 20 74 68 65 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 | the.first.match.the.action.of.th |
cbc20 | 65 20 72 75 6c 65 20 77 69 6c 6c 20 62 65 20 65 78 65 63 75 74 65 64 2e 00 46 6f 72 20 66 72 61 | e.rule.will.be.executed..For.fra |
cbc40 | 67 6d 65 6e 74 65 64 20 54 43 50 20 6f 72 20 55 44 50 20 70 61 63 6b 65 74 73 20 61 6e 64 20 61 | gmented.TCP.or.UDP.packets.and.a |
cbc60 | 6c 6c 20 6f 74 68 65 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 70 72 6f 74 6f 63 6f 6c 20 | ll.other.IPv4.and.IPv6.protocol. |
cbc80 | 74 72 61 66 66 69 63 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 | traffic,.the.source.and.destinat |
cbca0 | 69 6f 6e 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 6f 6d 69 74 74 65 64 2e | ion.port.information.is.omitted. |
cbcc0 | 20 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 66 6f 72 6d 75 6c 61 | .For.non-IP.traffic,.the.formula |
cbce0 | 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 65 20 6c 61 79 65 72 32 20 74 | .is.the.same.as.for.the.layer2.t |
cbd00 | 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 46 6f 72 20 67 65 6e 65 72 61 74 | ransmit.hash.policy..For.generat |
cbd20 | 69 6e 67 20 61 6e 20 4f 54 50 20 6b 65 79 20 69 6e 20 56 79 4f 53 2c 20 79 6f 75 20 63 61 6e 20 | ing.an.OTP.key.in.VyOS,.you.can. |
cbd40 | 75 73 65 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 28 6f 70 65 72 61 74 69 6f 6e 61 6c | use.the.CLI.command.(operational |
cbd60 | 20 6d 6f 64 65 29 3a 00 46 6f 72 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 74 68 65 20 | .mode):.For.inbound.updates.the. |
cbd80 | 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 20 69 6e 73 74 | order.of.preference.is:.For.inst |
cbda0 | 61 6e 63 65 2c 20 77 69 74 68 20 3a 63 6f 64 65 3a 60 73 65 74 20 71 6f 73 20 70 6f 6c 69 63 79 | ance,.with.:code:`set.qos.policy |
cbdc0 | 20 73 68 61 70 65 72 20 4d 59 2d 53 48 41 50 45 52 20 63 6c 61 73 73 20 33 30 20 73 65 74 2d 64 | .shaper.MY-SHAPER.class.30.set-d |
cbde0 | 73 63 70 20 45 46 60 20 79 6f 75 20 77 6f 75 6c 64 20 62 65 20 6d 6f 64 69 66 79 69 6e 67 20 74 | scp.EF`.you.would.be.modifying.t |
cbe00 | 68 65 20 44 53 43 50 20 66 69 65 6c 64 20 76 61 6c 75 65 20 6f 66 20 70 61 63 6b 65 74 73 20 69 | he.DSCP.field.value.of.packets.i |
cbe20 | 6e 20 74 68 61 74 20 63 6c 61 73 73 20 74 6f 20 45 78 70 65 64 69 74 65 20 46 6f 72 77 61 72 64 | n.that.class.to.Expedite.Forward |
cbe40 | 69 6e 67 2e 00 46 6f 72 20 69 70 76 34 3a 00 46 6f 72 20 6c 61 74 65 73 74 20 72 65 6c 65 61 73 | ing..For.ipv4:.For.latest.releas |
cbe60 | 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 28 69 6e 74 65 72 66 61 | es,.refer.the.`firewall.(interfa |
cbe80 | 63 65 2d 67 72 6f 75 70 73 29 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f | ce-groups).<https://docs.vyos.io |
cbea0 | 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c | /en/latest/configuration/firewal |
cbec0 | 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 3e | l/general.html#interface-groups> |
cbee0 | 60 5f 20 6d 61 69 6e 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 | `_.main.page.to.configure.zone.b |
cbf00 | 61 73 65 64 20 72 75 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 6e 74 72 6f | ased.rules..New.syntax.was.intro |
cbf20 | 64 75 63 65 64 20 68 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 6f 72 20 6c | duced.here.:vytask:`T5160`.For.l |
cbf40 | 61 74 65 73 74 20 72 65 6c 65 61 73 65 73 2c 20 72 65 66 65 72 20 74 68 65 20 60 66 69 72 65 77 | atest.releases,.refer.the.`firew |
cbf60 | 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 | all.<https://docs.vyos.io/en/lat |
cbf80 | 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 | est/configuration/firewall/gener |
cbfa0 | 61 6c 2e 68 74 6d 6c 23 69 6e 74 65 72 66 61 63 65 2d 67 72 6f 75 70 73 3e 60 5f 20 6d 61 69 6e | al.html#interface-groups>`_.main |
cbfc0 | 20 70 61 67 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 7a 6f 6e 65 20 62 61 73 65 64 20 72 75 | .page.to.configure.zone.based.ru |
cbfe0 | 6c 65 73 2e 20 4e 65 77 20 73 79 6e 74 61 78 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 68 | les..New.syntax.was.introduced.h |
cc000 | 65 72 65 20 3a 76 79 74 61 73 6b 3a 60 54 35 31 36 30 60 00 46 6f 72 20 6d 6f 72 65 20 69 6e 66 | ere.:vytask:`T5160`.For.more.inf |
cc020 | 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 68 6f 77 20 4d 50 4c 53 20 6c 61 62 65 6c 20 73 77 69 74 63 | ormation.on.how.MPLS.label.switc |
cc040 | 68 69 6e 67 20 77 6f 72 6b 73 2c 20 70 6c 65 61 73 65 20 67 6f 20 76 69 73 69 74 20 60 57 69 6b | hing.works,.please.go.visit.`Wik |
cc060 | 69 70 65 64 69 61 20 28 4d 50 4c 53 29 60 5f 2e 00 46 6f 72 20 6d 75 6c 74 69 20 68 6f 70 20 73 | ipedia.(MPLS)`_..For.multi.hop.s |
cc080 | 65 73 73 69 6f 6e 73 20 6f 6e 6c 79 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6d 69 6e 69 | essions.only..Configure.the.mini |
cc0a0 | 6d 75 6d 20 65 78 70 65 63 74 65 64 20 54 54 4c 20 66 6f 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 | mum.expected.TTL.for.an.incoming |
cc0c0 | 20 42 46 44 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 2e 00 46 6f 72 20 6e 65 74 77 6f 72 6b | .BFD.control.packet..For.network |
cc0e0 | 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2c 20 69 74 27 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 | .maintenance,.it's.a.good.idea.t |
cc100 | 6f 20 64 69 72 65 63 74 20 75 73 65 72 73 20 74 6f 20 61 20 62 61 63 6b 75 70 20 73 65 72 76 65 | o.direct.users.to.a.backup.serve |
cc120 | 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 73 65 72 76 65 72 20 63 61 6e | r.so.that.the.primary.server.can |
cc140 | 20 62 65 20 73 61 66 65 6c 79 20 74 61 6b 65 6e 20 6f 75 74 20 6f 66 20 73 65 72 76 69 63 65 2e | .be.safely.taken.out.of.service. |
cc160 | 20 49 74 27 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 77 69 74 63 68 20 79 6f 75 72 20 50 50 | .It's.possible.to.switch.your.PP |
cc180 | 50 6f 45 20 73 65 72 76 65 72 20 74 6f 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 6d 6f 64 65 20 77 | PoE.server.to.maintenance.mode.w |
cc1a0 | 68 65 72 65 20 69 74 20 6d 61 69 6e 74 61 69 6e 73 20 61 6c 72 65 61 64 79 20 65 73 74 61 62 6c | here.it.maintains.already.establ |
cc1c0 | 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 75 74 20 72 65 66 75 73 65 73 20 6e | ished.connections,.but.refuses.n |
cc1e0 | 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 74 74 65 6d 70 74 73 2e 00 46 6f 72 20 6f 70 74 69 | ew.connection.attempts..For.opti |
cc200 | 6d 61 6c 20 73 63 61 6c 61 62 69 6c 69 74 79 2c 20 4d 75 6c 74 69 63 61 73 74 20 73 68 6f 75 6c | mal.scalability,.Multicast.shoul |
cc220 | 64 6e 27 74 20 62 65 20 75 73 65 64 20 61 74 20 61 6c 6c 2c 20 62 75 74 20 69 6e 73 74 65 61 64 | dn't.be.used.at.all,.but.instead |
cc240 | 20 75 73 65 20 42 47 50 20 74 6f 20 73 69 67 6e 61 6c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 65 64 | .use.BGP.to.signal.all.connected |
cc260 | 20 64 65 76 69 63 65 73 20 62 65 74 77 65 65 6e 20 6c 65 61 76 65 73 2e 20 55 6e 66 6f 72 74 75 | .devices.between.leaves..Unfortu |
cc280 | 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 79 65 74 20 73 75 70 70 6f 72 | nately,.VyOS.does.not.yet.suppor |
cc2a0 | 74 20 74 68 69 73 2e 00 46 6f 72 20 6f 75 74 62 6f 75 6e 64 20 75 70 64 61 74 65 73 20 74 68 65 | t.this..For.outbound.updates.the |
cc2c0 | 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 69 73 3a 00 46 6f 72 20 72 65 66 | .order.of.preference.is:.For.ref |
cc2e0 | 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 64 65 66 | erence,.a.description.can.be.def |
cc300 | 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 64 20 63 75 73 74 6f 6d 20 63 68 | ined.for.every.defined.custom.ch |
cc320 | 61 69 6e 2e 00 46 6f 72 20 72 65 66 65 72 65 6e 63 65 2c 20 61 20 64 65 73 63 72 69 70 74 69 6f | ain..For.reference,.a.descriptio |
cc340 | 6e 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c | n.can.be.defined.for.every.singl |
cc360 | 65 20 72 75 6c 65 2c 20 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 64 65 66 69 6e 65 64 20 63 75 | e.rule,.and.for.every.defined.cu |
cc380 | 73 74 6f 6d 20 63 68 61 69 6e 2e 00 46 6f 72 20 73 65 63 75 72 69 74 79 2c 20 74 68 65 20 6c 69 | stom.chain..For.security,.the.li |
cc3a0 | 73 74 65 6e 20 61 64 64 72 65 73 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 | sten.address.should.only.be.used |
cc3c0 | 20 6f 6e 20 69 6e 74 65 72 6e 61 6c 2f 74 72 75 73 74 65 64 20 6e 65 74 77 6f 72 6b 73 21 00 46 | .on.internal/trusted.networks!.F |
cc3e0 | 6f 72 20 73 65 72 69 61 6c 20 76 69 61 20 55 53 42 20 70 6f 72 74 20 69 6e 66 6f 72 6d 61 74 69 | or.serial.via.USB.port.informati |
cc400 | 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 6f 72 20 74 6f 3a 20 3a 72 65 66 3a 60 68 61 72 64 77 61 | on.please.refor.to:.:ref:`hardwa |
cc420 | 72 65 5f 75 73 62 60 2e 00 46 6f 72 20 73 69 6d 70 6c 69 63 69 74 79 20 77 65 27 6c 6c 20 61 73 | re_usb`..For.simplicity.we'll.as |
cc440 | 73 75 6d 65 20 74 68 61 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 47 52 45 2c 20 69 | sume.that.the.protocol.is.GRE,.i |
cc460 | 74 27 73 20 6e 6f 74 20 68 61 72 64 20 74 6f 20 67 75 65 73 73 20 77 68 61 74 20 6e 65 65 64 73 | t's.not.hard.to.guess.what.needs |
cc480 | 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 74 6f 20 6d 61 6b 65 20 69 74 20 77 6f 72 6b 20 77 | .to.be.changed.to.make.it.work.w |
cc4a0 | 69 74 68 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 2e 20 57 65 20 61 73 73 | ith.a.different.protocol..We.ass |
cc4c0 | 75 6d 65 20 74 68 61 74 20 49 50 73 65 63 20 77 69 6c 6c 20 75 73 65 20 70 72 65 2d 73 68 61 72 | ume.that.IPsec.will.use.pre-shar |
cc4e0 | 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 77 69 6c | ed.secret.authentication.and.wil |
cc500 | 6c 20 75 73 65 20 41 45 53 31 32 38 2f 53 48 41 31 20 66 6f 72 20 74 68 65 20 63 69 70 68 65 72 | l.use.AES128/SHA1.for.the.cipher |
cc520 | 20 61 6e 64 20 68 61 73 68 2e 20 41 64 6a 75 73 74 20 74 68 69 73 20 61 73 20 6e 65 63 65 73 73 | .and.hash..Adjust.this.as.necess |
cc540 | 61 72 79 2e 00 46 6f 72 20 74 68 65 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e | ary..For.the.:ref:`destination-n |
cc560 | 61 74 36 36 60 20 72 75 6c 65 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 | at66`.rule,.the.destination.addr |
cc580 | 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 69 73 72 65 70 6c 61 63 65 64 20 62 79 20 | ess.of.the.packet.isreplaced.by. |
cc5a0 | 74 68 65 20 61 64 64 72 65 73 73 20 63 61 6c 63 75 6c 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 | the.address.calculated.from.the. |
cc5c0 | 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 69 6e 20 74 | specified.address.or.prefix.in.t |
cc5e0 | 68 65 20 60 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 60 20 63 6f 6d 6d 61 6e 64 | he.`translation.address`.command |
cc600 | 00 46 6f 72 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 | .For.the.OpenVPN.traffic.to.pass |
cc620 | 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 79 6f 75 20 | .through.the.WAN.interface,.you. |
cc640 | 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 63 65 70 74 69 6f 6e | must.create.a.firewall.exception |
cc660 | 2e 00 46 6f 72 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 74 72 61 66 66 69 63 20 74 6f 20 70 | ..For.the.WireGuard.traffic.to.p |
cc680 | 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 2c 20 79 | ass.through.the.WAN.interface,.y |
cc6a0 | 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 20 66 69 72 65 77 61 6c 6c 20 65 78 63 65 70 74 | ou.must.create.a.firewall.except |
cc6c0 | 69 6f 6e 2e 00 46 6f 72 20 74 68 65 20 61 76 65 72 61 67 65 20 75 73 65 72 20 61 20 73 65 72 69 | ion..For.the.average.user.a.seri |
cc6e0 | 61 6c 20 63 6f 6e 73 6f 6c 65 20 68 61 73 20 6e 6f 20 61 64 76 61 6e 74 61 67 65 20 6f 76 65 72 | al.console.has.no.advantage.over |
cc700 | 20 61 20 63 6f 6e 73 6f 6c 65 20 6f 66 66 65 72 65 64 20 62 79 20 61 20 64 69 72 65 63 74 6c 79 | .a.console.offered.by.a.directly |
cc720 | 20 61 74 74 61 63 68 65 64 20 6b 65 79 62 6f 61 72 64 20 61 6e 64 20 73 63 72 65 65 6e 2e 20 53 | .attached.keyboard.and.screen..S |
cc740 | 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 61 72 65 20 6d 75 63 68 20 73 6c 6f 77 65 72 2c 20 | erial.consoles.are.much.slower,. |
cc760 | 74 61 6b 69 6e 67 20 75 70 20 74 6f 20 61 20 73 65 63 6f 6e 64 20 74 6f 20 66 69 6c 6c 20 61 20 | taking.up.to.a.second.to.fill.a. |
cc780 | 38 30 20 63 6f 6c 75 6d 6e 20 62 79 20 32 34 20 6c 69 6e 65 20 73 63 72 65 65 6e 2e 20 53 65 72 | 80.column.by.24.line.screen..Ser |
cc7a0 | 69 61 6c 20 63 6f 6e 73 6f 6c 65 73 20 67 65 6e 65 72 61 6c 6c 79 20 6f 6e 6c 79 20 73 75 70 70 | ial.consoles.generally.only.supp |
cc7c0 | 6f 72 74 20 6e 6f 6e 2d 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 20 41 53 43 49 49 20 74 65 78 74 2c | ort.non-proportional.ASCII.text, |
cc7e0 | 20 77 69 74 68 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 6c 61 6e 67 75 61 | .with.limited.support.for.langua |
cc800 | 67 65 73 20 6f 74 68 65 72 20 74 68 61 6e 20 45 6e 67 6c 69 73 68 2e 00 46 6f 72 20 74 68 65 20 | ges.other.than.English..For.the. |
cc820 | 69 6e 67 72 65 73 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2c | ingress.traffic.of.an.interface, |
cc840 | 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 79 6f 75 20 63 61 | .there.is.only.one.policy.you.ca |
cc860 | 6e 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 79 2c 20 61 20 2a 2a 4c 69 6d 69 74 65 72 2a 2a 20 | n.directly.apply,.a.**Limiter**. |
cc880 | 70 6f 6c 69 63 79 2e 20 59 6f 75 20 63 61 6e 6e 6f 74 20 61 70 70 6c 79 20 61 20 73 68 61 70 69 | policy..You.cannot.apply.a.shapi |
cc8a0 | 6e 67 20 70 6f 6c 69 63 79 20 64 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 69 6e 67 72 65 73 | ng.policy.directly.to.the.ingres |
cc8c0 | 73 20 74 72 61 66 66 69 63 20 6f 66 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 62 65 63 61 75 | s.traffic.of.any.interface.becau |
cc8e0 | 73 65 20 73 68 61 70 69 6e 67 20 6f 6e 6c 79 20 77 6f 72 6b 73 20 66 6f 72 20 6f 75 74 62 6f 75 | se.shaping.only.works.for.outbou |
cc900 | 6e 64 20 74 72 61 66 66 69 63 2e 00 46 6f 72 20 74 68 65 20 73 61 6b 65 20 6f 66 20 64 65 6d 6f | nd.traffic..For.the.sake.of.demo |
cc920 | 6e 73 74 72 61 74 69 6f 6e 2c 20 60 65 78 61 6d 70 6c 65 20 23 31 20 69 6e 20 74 68 65 20 6f 66 | nstration,.`example.#1.in.the.of |
cc940 | 66 69 63 69 61 6c 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 3c 68 74 74 70 73 3a 2f 2f 77 77 | ficial.documentation.<https://ww |
cc960 | 77 2e 7a 61 62 62 69 78 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 75 72 72 65 | w.zabbix.com/documentation/curre |
cc980 | 6e 74 2f 6d 61 6e 75 61 6c 2f 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 2f 63 6f 6e 74 61 69 6e 65 72 | nt/manual/installation/container |
cc9a0 | 73 3e 60 5f 20 74 6f 20 74 68 65 20 64 65 63 6c 61 72 61 74 69 76 65 20 56 79 4f 53 20 43 4c 49 | s>`_.to.the.declarative.VyOS.CLI |
cc9c0 | 20 73 79 6e 74 61 78 2e 00 46 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 65 64 20 | .syntax..For.traffic.originated. |
cc9e0 | 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 6f | by.the.router,.base.chain.is.**o |
cca00 | 75 74 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b | utput.filter**:.``set.firewall.[ |
cca20 | 69 70 76 34 20 7c 20 69 70 76 36 5d 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 | ipv4.|.ipv6].output.filter....`` |
cca40 | 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 68 61 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 66 6f | .For.traffic.that.needs.to.be.fo |
cca60 | 72 77 61 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 74 68 65 20 62 72 69 64 67 65 2c | rwared.internally.by.the.bridge, |
cca80 | 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 69 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 | .base.chain.is.is.**forward**,.a |
ccaa0 | 6e 64 20 69 74 27 73 20 62 61 73 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 66 69 6c 74 65 72 69 | nd.it's.base.command.for.filteri |
ccac0 | 6e 67 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 | ng.is.``set.firewall.bridge.forw |
ccae0 | 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 68 61 | ard.filter....``.For.traffic.tha |
ccb00 | 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 66 6f 72 77 61 72 65 64 20 69 6e 74 65 72 6e 61 6c 6c | t.needs.to.be.forwared.internall |
ccb20 | 79 20 62 79 20 74 68 65 20 62 72 69 64 67 65 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 69 | y.by.the.bridge,.base.chain.is.i |
ccb40 | 73 20 2a 2a 66 6f 72 77 61 72 64 2a 2a 2c 20 61 6e 64 20 69 74 27 73 20 62 61 73 65 20 63 6f 6d | s.**forward**,.and.it's.base.com |
ccb60 | 6d 61 6e 64 20 66 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 69 73 20 60 60 73 65 74 20 66 69 72 65 | mand.for.filtering.is.``set.fire |
ccb80 | 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 | wall.bridge.forward.filter....`` |
ccba0 | 2c 20 77 68 69 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 34 2c 20 68 69 67 68 | ,.which.happens.in.stage.4,.high |
ccbc0 | 6c 69 67 68 74 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 46 6f 72 20 74 72 | lightened.with.red.color..For.tr |
ccbe0 | 61 66 66 69 63 20 74 6f 77 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c | affic.towards.the.router.itself, |
ccc00 | 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 20 66 69 6c 74 65 72 2a 2a 3a | .base.chain.is.**input.filter**: |
ccc20 | 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 69 6e | .``set.firewall.[ipv4.|.ipv6].in |
ccc40 | 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 66 66 69 63 20 74 6f 77 | put.filter....``.For.traffic.tow |
ccc60 | 61 72 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2c 20 62 61 73 65 20 63 68 61 | ards.the.router.itself,.base.cha |
ccc80 | 69 6e 20 69 73 20 2a 2a 69 6e 70 75 74 2a 2a 2c 20 77 68 69 6c 65 20 74 72 61 66 66 69 63 20 6f | in.is.**input**,.while.traffic.o |
ccca0 | 72 69 67 69 6e 61 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 61 73 65 20 63 68 | riginated.by.the.router,.base.ch |
cccc0 | 61 69 6e 20 69 73 20 2a 2a 6f 75 74 70 75 74 2a 2a 2e 20 41 20 6e 65 77 20 73 69 6d 70 6c 69 66 | ain.is.**output**..A.new.simplif |
ccce0 | 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 6d 20 69 73 20 73 68 6f 77 6e | ied.packet.flow.diagram.is.shown |
ccd00 | 20 6e 65 78 74 2c 20 77 68 69 63 68 20 73 68 6f 77 73 20 74 68 65 20 70 61 74 68 20 66 6f 72 20 | .next,.which.shows.the.path.for. |
ccd20 | 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 61 74 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 | traffic.destinated.to.the.router |
ccd40 | 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 67 65 6e 65 72 61 74 65 64 20 62 | .itself,.and.traffic.generated.b |
ccd60 | 79 20 74 68 65 20 72 6f 75 74 65 72 20 28 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 63 69 72 63 | y.the.router.(starting.from.circ |
ccd80 | 6c 65 20 6e 75 6d 62 65 72 20 36 29 3a 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 | le.number.6):.For.transit.traffi |
ccda0 | 63 2c 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 | c,.which.is.received.by.the.rout |
ccdc0 | 65 72 20 61 6e 64 20 66 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 | er.and.forwarded,.base.chain.is. |
ccde0 | 2a 2a 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 2a 2a 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 | **forward.filter**:.``set.firewa |
cce00 | 6c 6c 20 5b 69 70 76 34 20 7c 20 69 70 76 36 5d 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 | ll.[ipv4.|.ipv6].forward.filter. |
cce20 | 2e 2e 2e 60 60 00 46 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 | ...``.For.transit.traffic,.which |
cce40 | 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 66 | .is.received.by.the.router.and.f |
cce60 | 6f 72 77 61 72 64 65 64 2c 20 62 61 73 65 20 63 68 61 69 6e 20 69 73 20 2a 2a 66 6f 72 77 61 72 | orwarded,.base.chain.is.**forwar |
cce80 | 64 2a 2a 2e 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 | d**..A.simplified.packet.flow.di |
ccea0 | 61 67 72 61 6d 20 66 6f 72 20 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 73 68 6f | agram.for.transit.traffic.is.sho |
ccec0 | 77 6e 20 6e 65 78 74 3a 00 46 6f 72 20 77 65 62 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 72 6f | wn.next:.For.web.application.pro |
ccee0 | 76 69 64 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 69 72 20 73 | viding.information.about.their.s |
ccf00 | 74 61 74 65 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 20 63 61 6e 20 62 65 20 75 | tate.HTTP.health.checks.can.be.u |
ccf20 | 73 65 64 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 69 72 20 61 76 61 69 6c 61 62 69 6c | sed.to.determine.their.availabil |
ccf40 | 69 74 79 2e 00 46 6f 72 6d 61 6c 6c 79 2c 20 61 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 6c 6f | ity..Formally,.a.virtual.link.lo |
ccf60 | 6f 6b 73 20 6c 69 6b 65 20 61 20 70 6f 69 6e 74 2d 74 6f 2d 70 6f 69 6e 74 20 6e 65 74 77 6f 72 | oks.like.a.point-to-point.networ |
ccf80 | 6b 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 77 6f 20 41 42 52 20 66 72 6f 6d 20 6f 6e 65 20 61 72 | k.connecting.two.ABR.from.one.ar |
ccfa0 | 65 61 20 6f 6e 65 20 6f 66 20 77 68 69 63 68 20 70 68 79 73 69 63 61 6c 6c 79 20 63 6f 6e 6e 65 | ea.one.of.which.physically.conne |
ccfc0 | 63 74 65 64 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 54 68 69 73 20 70 73 | cted.to.a.backbone.area..This.ps |
ccfe0 | 65 75 64 6f 2d 6e 65 74 77 6f 72 6b 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 | eudo-network.is.considered.to.be |
cd000 | 6c 6f 6e 67 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 00 46 6f 72 77 61 72 64 | long.to.a.backbone.area..Forward |
cd020 | 20 69 6e 63 6f 6d 69 6e 67 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 74 68 65 20 44 4e 53 | .incoming.DNS.queries.to.the.DNS |
cd040 | 20 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 65 20 60 60 | .servers.configured.under.the.`` |
cd060 | 73 79 73 74 65 6d 20 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6e 6f 64 65 73 2e 00 46 6f 72 77 | system.name-server``.nodes..Forw |
cd080 | 61 72 64 20 6d 65 74 68 6f 64 00 46 6f 72 77 61 72 64 20 72 65 63 65 69 76 65 64 20 71 75 65 72 | ard.method.Forward.received.quer |
cd0a0 | 69 65 73 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 64 6f 6d 61 69 6e 20 28 73 70 65 | ies.for.a.particular.domain.(spe |
cd0c0 | 63 69 66 69 65 64 20 76 69 61 20 60 64 6f 6d 61 69 6e 2d 6e 61 6d 65 60 29 20 74 6f 20 61 20 67 | cified.via.`domain-name`).to.a.g |
cd0e0 | 69 76 65 6e 20 6e 61 6d 65 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 | iven.nameserver..Multiple.namese |
cd100 | 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 59 6f 75 20 63 61 6e 20 | rvers.can.be.specified..You.can. |
cd120 | 75 73 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 66 6f 72 20 61 20 44 4e 53 20 73 70 6c 69 74 | use.this.feature.for.a.DNS.split |
cd140 | 2d 68 6f 72 69 7a 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 46 6f 75 72 20 70 6f 6c | -horizon.configuration..Four.pol |
cd160 | 69 63 69 65 73 20 66 6f 72 20 72 65 66 6f 72 77 61 72 64 69 6e 67 20 44 48 43 50 20 70 61 63 6b | icies.for.reforwarding.DHCP.pack |
cd180 | 65 74 73 20 65 78 69 73 74 3a 00 46 72 6f 6d 20 3a 72 66 63 3a 60 31 39 33 30 60 3a 00 46 72 6f | ets.exist:.From.:rfc:`1930`:.Fro |
cd1a0 | 6d 20 61 20 73 65 63 75 72 69 74 79 20 70 65 72 73 70 65 63 74 69 76 65 2c 20 69 74 20 69 73 20 | m.a.security.perspective,.it.is. |
cd1c0 | 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 6c 65 74 20 61 20 74 68 69 72 64 20 70 | not.recommended.to.let.a.third.p |
cd1e0 | 61 72 74 79 20 63 72 65 61 74 65 20 61 6e 64 20 73 68 61 72 65 20 74 68 65 20 70 72 69 76 61 74 | arty.create.and.share.the.privat |
cd200 | 65 20 6b 65 79 20 66 6f 72 20 61 20 73 65 63 75 72 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 | e.key.for.a.secured.connection.. |
cd220 | 59 6f 75 20 73 68 6f 75 6c 64 20 63 72 65 61 74 65 20 74 68 65 20 70 72 69 76 61 74 65 20 70 6f | You.should.create.the.private.po |
cd240 | 72 74 69 6f 6e 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 61 6e 64 20 6f 6e 6c 79 20 68 61 6e 64 20 | rtion.on.your.own.and.only.hand. |
cd260 | 6f 75 74 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2e 20 50 6c 65 61 73 65 20 6b 65 65 70 20 | out.the.public.key..Please.keep. |
cd280 | 74 68 69 73 20 69 6e 20 6d 69 6e 64 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 73 20 63 6f 6e | this.in.mind.when.using.this.con |
cd2a0 | 76 65 6e 69 65 6e 63 65 20 66 65 61 74 75 72 65 2e 00 46 72 6f 6d 20 6d 61 69 6e 20 73 74 72 75 | venience.feature..From.main.stru |
cd2c0 | 63 74 75 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 64 6f 63 3a 60 46 69 72 65 77 61 6c 6c 20 | cture.defined.in.:doc:`Firewall. |
cd2e0 | 4f 76 65 72 76 69 65 77 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c | Overview</configuration/firewall |
cd300 | 2f 69 6e 64 65 78 3e 60 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e | /index>`.in.this.section.you.can |
cd320 | 20 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 6c 79 20 | .find.detailed.information.only. |
cd340 | 66 6f 72 20 74 68 65 20 6e 65 78 74 20 70 61 72 74 20 6f 66 20 74 68 65 20 67 65 6e 65 72 61 6c | for.the.next.part.of.the.general |
cd360 | 20 73 74 72 75 63 74 75 72 65 3a 00 46 77 6d 61 72 6b 00 47 45 4e 45 56 45 00 47 45 4e 45 56 45 | .structure:.Fwmark.GENEVE.GENEVE |
cd380 | 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6e 65 74 77 6f 72 6b 20 | .is.designed.to.support.network. |
cd3a0 | 76 69 72 74 75 61 6c 69 7a 61 74 69 6f 6e 20 75 73 65 20 63 61 73 65 73 2c 20 77 68 65 72 65 20 | virtualization.use.cases,.where. |
cd3c0 | 74 75 6e 6e 65 6c 73 20 61 72 65 20 74 79 70 69 63 61 6c 6c 79 20 65 73 74 61 62 6c 69 73 68 65 | tunnels.are.typically.establishe |
cd3e0 | 64 20 74 6f 20 61 63 74 20 61 73 20 61 20 62 61 63 6b 70 6c 61 6e 65 20 62 65 74 77 65 65 6e 20 | d.to.act.as.a.backplane.between. |
cd400 | 74 68 65 20 76 69 72 74 75 61 6c 20 73 77 69 74 63 68 65 73 20 72 65 73 69 64 69 6e 67 20 69 6e | the.virtual.switches.residing.in |
cd420 | 20 68 79 70 65 72 76 69 73 6f 72 73 2c 20 70 68 79 73 69 63 61 6c 20 73 77 69 74 63 68 65 73 2c | .hypervisors,.physical.switches, |
cd440 | 20 6f 72 20 6d 69 64 64 6c 65 62 6f 78 65 73 20 6f 72 20 6f 74 68 65 72 20 61 70 70 6c 69 61 6e | .or.middleboxes.or.other.applian |
cd460 | 63 65 73 2e 20 41 6e 20 61 72 62 69 74 72 61 72 79 20 49 50 20 6e 65 74 77 6f 72 6b 20 63 61 6e | ces..An.arbitrary.IP.network.can |
cd480 | 20 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 75 6e 64 65 72 6c 61 79 20 61 6c 74 68 6f 75 67 68 | .be.used.as.an.underlay.although |
cd4a0 | 20 43 6c 6f 73 20 6e 65 74 77 6f 72 6b 73 20 2d 20 41 20 74 65 63 68 6e 69 71 75 65 20 66 6f 72 | .Clos.networks.-.A.technique.for |
cd4c0 | 20 63 6f 6d 70 6f 73 69 6e 67 20 6e 65 74 77 6f 72 6b 20 66 61 62 72 69 63 73 20 6c 61 72 67 65 | .composing.network.fabrics.large |
cd4e0 | 72 20 74 68 61 6e 20 61 20 73 69 6e 67 6c 65 20 73 77 69 74 63 68 20 77 68 69 6c 65 20 6d 61 69 | r.than.a.single.switch.while.mai |
cd500 | 6e 74 61 69 6e 69 6e 67 20 6e 6f 6e 2d 62 6c 6f 63 6b 69 6e 67 20 62 61 6e 64 77 69 64 74 68 20 | ntaining.non-blocking.bandwidth. |
cd520 | 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 6f 69 6e 74 73 2e 20 45 43 4d 50 20 69 | across.connection.points..ECMP.i |
cd540 | 73 20 75 73 65 64 20 74 6f 20 64 69 76 69 64 65 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 | s.used.to.divide.traffic.across. |
cd560 | 74 68 65 20 6d 75 6c 74 69 70 6c 65 20 6c 69 6e 6b 73 20 61 6e 64 20 73 77 69 74 63 68 65 73 20 | the.multiple.links.and.switches. |
cd580 | 74 68 61 74 20 63 6f 6e 73 74 69 74 75 74 65 20 74 68 65 20 66 61 62 72 69 63 2e 20 53 6f 6d 65 | that.constitute.the.fabric..Some |
cd5a0 | 74 69 6d 65 73 20 74 65 72 6d 65 64 20 22 6c 65 61 66 20 61 6e 64 20 73 70 69 6e 65 22 20 6f 72 | times.termed."leaf.and.spine".or |
cd5c0 | 20 22 66 61 74 20 74 72 65 65 22 20 74 6f 70 6f 6c 6f 67 69 65 73 2e 00 47 45 4e 45 56 45 20 6f | ."fat.tree".topologies..GENEVE.o |
cd5e0 | 70 74 69 6f 6e 73 00 47 52 45 20 69 73 20 61 20 77 65 6c 6c 20 64 65 66 69 6e 65 64 20 73 74 61 | ptions.GRE.is.a.well.defined.sta |
cd600 | 6e 64 61 72 64 20 74 68 61 74 20 69 73 20 63 6f 6d 6d 6f 6e 20 69 6e 20 6d 6f 73 74 20 6e 65 74 | ndard.that.is.common.in.most.net |
cd620 | 77 6f 72 6b 73 2e 20 57 68 69 6c 65 20 6e 6f 74 20 69 6e 68 65 72 65 6e 74 6c 79 20 64 69 66 66 | works..While.not.inherently.diff |
cd640 | 69 63 75 6c 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 72 65 20 61 72 65 20 61 20 63 | icult.to.configure.there.are.a.c |
cd660 | 6f 75 70 6c 65 20 6f 66 20 74 68 69 6e 67 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 | ouple.of.things.to.keep.in.mind. |
cd680 | 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 | to.make.sure.the.configuration.p |
cd6a0 | 65 72 66 6f 72 6d 73 20 61 73 20 65 78 70 65 63 74 65 64 2e 20 41 20 63 6f 6d 6d 6f 6e 20 63 61 | erforms.as.expected..A.common.ca |
cd6c0 | 75 73 65 20 66 6f 72 20 47 52 45 20 74 75 6e 6e 65 6c 73 20 74 6f 20 66 61 69 6c 20 74 6f 20 63 | use.for.GRE.tunnels.to.fail.to.c |
cd6e0 | 6f 6d 65 20 75 70 20 63 6f 72 72 65 63 74 6c 79 20 69 6e 63 6c 75 64 65 20 41 43 4c 20 6f 72 20 | ome.up.correctly.include.ACL.or. |
cd700 | 46 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 | Firewall.configurations.that.are |
cd720 | 20 64 69 73 63 61 72 64 69 6e 67 20 49 50 20 70 72 6f 74 6f 63 6f 6c 20 34 37 20 6f 72 20 62 6c | .discarding.IP.protocol.47.or.bl |
cd740 | 6f 63 6b 69 6e 67 20 79 6f 75 72 20 73 6f 75 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 74 | ocking.your.source/destination.t |
cd760 | 72 61 66 66 69 63 2e 00 47 52 45 20 69 73 20 61 6c 73 6f 20 74 68 65 20 6f 6e 6c 79 20 63 6c 61 | raffic..GRE.is.also.the.only.cla |
cd780 | 73 73 69 63 20 70 72 6f 74 6f 63 6f 6c 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 63 72 65 61 74 69 | ssic.protocol.that.allows.creati |
cd7a0 | 6e 67 20 6d 75 6c 74 69 70 6c 65 20 74 75 6e 6e 65 6c 73 20 77 69 74 68 20 74 68 65 20 73 61 6d | ng.multiple.tunnels.with.the.sam |
cd7c0 | 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 64 75 65 20 74 6f 20 | e.source.and.destination.due.to. |
cd7e0 | 69 74 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 74 75 6e 6e 65 6c 20 6b 65 79 73 2e 20 44 65 73 | its.support.for.tunnel.keys..Des |
cd800 | 70 69 74 65 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 69 73 20 66 65 61 74 75 72 65 20 68 61 73 20 | pite.its.name,.this.feature.has. |
cd820 | 6e 6f 74 68 69 6e 67 20 74 6f 20 64 6f 20 77 69 74 68 20 73 65 63 75 72 69 74 79 3a 20 69 74 27 | nothing.to.do.with.security:.it' |
cd840 | 73 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 20 74 68 61 74 20 61 6c 6c 6f | s.simply.an.identifier.that.allo |
cd860 | 77 73 20 72 6f 75 74 65 72 73 20 74 6f 20 74 65 6c 6c 20 6f 6e 65 20 74 75 6e 6e 65 6c 20 66 72 | ws.routers.to.tell.one.tunnel.fr |
cd880 | 6f 6d 20 61 6e 6f 74 68 65 72 2e 00 47 52 45 20 69 73 20 6f 66 74 65 6e 20 73 65 65 6e 20 61 73 | om.another..GRE.is.often.seen.as |
cd8a0 | 20 61 20 6f 6e 65 20 73 69 7a 65 20 66 69 74 73 20 61 6c 6c 20 73 6f 6c 75 74 69 6f 6e 20 77 68 | .a.one.size.fits.all.solution.wh |
cd8c0 | 65 6e 20 69 74 20 63 6f 6d 65 73 20 74 6f 20 63 6c 61 73 73 69 63 20 49 50 20 74 75 6e 6e 65 6c | en.it.comes.to.classic.IP.tunnel |
cd8e0 | 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 61 6e 64 20 66 6f 72 20 61 20 67 6f 6f 64 20 72 65 | ing.protocols,.and.for.a.good.re |
cd900 | 61 73 6f 6e 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 65 20 61 72 65 20 6d 6f 72 65 20 73 70 | ason..However,.there.are.more.sp |
cd920 | 65 63 69 61 6c 69 7a 65 64 20 6f 70 74 69 6f 6e 73 2c 20 61 6e 64 20 6d 61 6e 79 20 6f 66 20 74 | ecialized.options,.and.many.of.t |
cd940 | 68 65 6d 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 72 65 | hem.are.supported.by.VyOS..There |
cd960 | 20 61 72 65 20 61 6c 73 6f 20 72 61 74 68 65 72 20 6f 62 73 63 75 72 65 20 47 52 45 20 6f 70 74 | .are.also.rather.obscure.GRE.opt |
cd980 | 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 66 75 6c 2e 00 47 52 45 2f 49 50 49 | ions.that.can.be.useful..GRE/IPI |
cd9a0 | 50 2f 53 49 54 20 61 6e 64 20 49 50 73 65 63 20 61 72 65 20 77 69 64 65 6c 79 20 61 63 63 65 70 | P/SIT.and.IPsec.are.widely.accep |
cd9c0 | 74 65 64 20 73 74 61 6e 64 61 72 64 73 2c 20 77 68 69 63 68 20 6d 61 6b 65 20 74 68 69 73 20 73 | ted.standards,.which.make.this.s |
cd9e0 | 63 68 65 6d 65 20 65 61 73 79 20 74 6f 20 69 6d 70 6c 65 6d 65 6e 74 20 62 65 74 77 65 65 6e 20 | cheme.easy.to.implement.between. |
cda00 | 56 79 4f 53 20 61 6e 64 20 76 69 72 74 75 61 6c 6c 79 20 61 6e 79 20 6f 74 68 65 72 20 72 6f 75 | VyOS.and.virtually.any.other.rou |
cda20 | 74 65 72 2e 00 47 52 45 54 41 50 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 65 6e | ter..GRETAP.Genearate.a.new.Open |
cda40 | 56 50 4e 20 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 65 64 | VPN.shared.secret..The.generated |
cda60 | 20 73 65 63 72 65 64 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e | .secred.is.the.output.to.the.con |
cda80 | 73 6f 6c 65 2e 00 47 65 6e 65 61 72 61 74 65 20 61 20 6e 65 77 20 4f 70 65 6e 56 50 4e 20 73 68 | sole..Genearate.a.new.OpenVPN.sh |
cdaa0 | 61 72 65 64 20 73 65 63 72 65 74 2e 20 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 73 65 63 72 65 | ared.secret..The.generated.secre |
cdac0 | 74 20 69 73 20 74 68 65 20 6f 75 74 70 75 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 | t.is.the.output.to.the.console.. |
cdae0 | 47 65 6e 65 72 61 6c 00 47 65 6e 65 72 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 65 | General.General.Configuration.Ge |
cdb00 | 6e 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 | neral.commands.for.firewall.conf |
cdb20 | 69 67 75 72 61 74 69 6f 6e 2c 20 63 6f 75 6e 74 65 72 20 61 6e 64 20 73 74 61 74 69 73 63 69 74 | iguration,.counter.and.statiscit |
cdb40 | 73 3a 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b | s:.Generate.:abbr:`MKA.(MACsec.K |
cdb60 | 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 20 | ey.Agreement.protocol)`.CAK.key. |
cdb80 | 31 32 38 20 6f 72 20 32 35 36 20 62 69 74 73 2e 00 47 65 6e 65 72 61 74 65 20 3a 61 62 62 72 3a | 128.or.256.bits..Generate.:abbr: |
cdba0 | 60 4d 4b 41 20 28 4d 41 43 73 65 63 20 4b 65 79 20 41 67 72 65 65 6d 65 6e 74 20 70 72 6f 74 6f | `MKA.(MACsec.Key.Agreement.proto |
cdbc0 | 63 6f 6c 29 60 20 43 41 4b 20 6b 65 79 2e 00 47 65 6e 65 72 61 74 65 20 4b 65 79 70 61 69 72 00 | col)`.CAK.key..Generate.Keypair. |
cdbe0 | 47 65 6e 65 72 61 74 65 20 61 20 57 69 72 65 47 75 61 72 64 20 70 72 65 2d 73 68 61 72 65 64 20 | Generate.a.WireGuard.pre-shared. |
cdc00 | 73 65 63 72 65 74 20 75 73 65 64 20 66 6f 72 20 70 65 65 72 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 | secret.used.for.peers.to.communi |
cdc20 | 63 61 74 65 2e 00 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 57 69 72 65 47 75 61 72 64 20 70 | cate..Generate.a.new.WireGuard.p |
cdc40 | 75 62 6c 69 63 2f 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 61 6e 64 20 6f 75 | ublic/private.key.portion.and.ou |
cdc60 | 74 70 75 74 20 74 68 65 20 72 65 73 75 6c 74 20 74 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 | tput.the.result.to.the.console.. |
cdc80 | 47 65 6e 65 72 61 74 65 20 61 20 6e 65 77 20 73 65 74 20 6f 66 20 3a 61 62 62 72 3a 60 44 48 20 | Generate.a.new.set.of.:abbr:`DH. |
cdca0 | 28 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 29 60 20 70 61 72 61 6d 65 74 65 72 73 2e 20 54 68 | (Diffie-Hellman)`.parameters..Th |
cdcc0 | 65 20 6b 65 79 20 73 69 7a 65 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 43 | e.key.size.is.requested.by.the.C |
cdce0 | 4c 49 20 61 6e 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 34 38 20 62 69 74 2e 00 47 65 6e | LI.and.defaults.to.2048.bit..Gen |
cdd00 | 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d | erate.the.configuration.mode.com |
cdd20 | 6d 61 6e 64 73 20 74 6f 20 61 64 64 20 61 20 70 75 62 6c 69 63 20 6b 65 79 20 66 6f 72 20 3a 72 | mands.to.add.a.public.key.for.:r |
cdd40 | 65 66 3a 60 73 73 68 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e | ef:`ssh_key_based_authentication |
cdd60 | 60 2e 20 60 60 3c 6c 6f 63 61 74 69 6f 6e 3e 60 60 20 63 61 6e 20 62 65 20 61 20 6c 6f 63 61 6c | `..``<location>``.can.be.a.local |
cdd80 | 20 70 61 74 68 20 6f 72 20 61 20 55 52 4c 20 70 6f 69 6e 74 69 6e 67 20 61 74 20 61 20 72 65 6d | .path.or.a.URL.pointing.at.a.rem |
cdda0 | 6f 74 65 20 66 69 6c 65 2e 00 47 65 6e 65 72 61 74 65 73 20 61 20 6b 65 79 70 61 69 72 2c 20 77 | ote.file..Generates.a.keypair,.w |
cddc0 | 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 61 6e 64 20 70 72 69 | hich.includes.the.public.and.pri |
cdde0 | 76 61 74 65 20 70 61 72 74 73 2c 20 61 6e 64 20 62 75 69 6c 64 20 61 20 63 6f 6e 66 69 67 75 72 | vate.parts,.and.build.a.configur |
cde00 | 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 6e 73 74 61 6c 6c 20 74 68 69 73 20 6b 65 | ation.command.to.install.this.ke |
cde20 | 79 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 2e 00 47 65 6e 65 72 69 63 20 52 6f 75 74 | y.to.``interface``..Generic.Rout |
cde40 | 69 6e 67 20 45 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 28 47 52 45 29 00 47 65 6e 65 76 65 20 48 | ing.Encapsulation.(GRE).Geneve.H |
cde60 | 65 61 64 65 72 3a 00 47 65 74 20 61 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 77 69 72 65 67 75 61 | eader:.Get.a.list.of.all.wiregua |
cde80 | 72 64 20 69 6e 74 65 72 66 61 63 65 73 00 47 65 74 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 76 | rd.interfaces.Get.an.overview.ov |
cdea0 | 65 72 20 74 68 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 6f 75 6e 74 65 72 73 2e 00 47 65 74 20 | er.the.encryption.counters..Get. |
cdec0 | 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 4c 4c 44 50 20 | detailed.information.about.LLDP. |
cdee0 | 6e 65 69 67 68 62 6f 72 73 2e 00 47 65 74 20 74 68 65 20 44 48 43 50 76 36 2d 50 44 20 70 72 65 | neighbors..Get.the.DHCPv6-PD.pre |
cdf00 | 66 69 78 65 73 20 66 72 6f 6d 20 62 6f 74 68 20 72 6f 75 74 65 72 73 3a 00 47 65 74 74 69 6e 67 | fixes.from.both.routers:.Getting |
cdf20 | 20 73 74 61 72 74 65 64 00 47 69 76 65 6e 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 6f 70 65 | .started.Given.the.fact.that.ope |
cdf40 | 6e 20 44 4e 53 20 72 65 63 75 72 73 6f 72 73 20 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e | n.DNS.recursors.could.be.used.on |
cdf60 | 20 44 44 6f 53 20 61 6d 70 6c 69 66 69 63 61 74 69 6f 6e 20 61 74 74 61 63 6b 73 2c 20 79 6f 75 | .DDoS.amplification.attacks,.you |
cdf80 | 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 73 20 77 68 69 | .must.configure.the.networks.whi |
cdfa0 | 63 68 20 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 63 75 72 | ch.are.allowed.to.use.this.recur |
cdfc0 | 73 6f 72 2e 20 41 20 6e 65 74 77 6f 72 6b 20 6f 66 20 60 60 30 2e 30 2e 30 2e 30 2f 30 60 60 20 | sor..A.network.of.``0.0.0.0/0``. |
cdfe0 | 6f 72 20 60 60 3a 3a 2f 30 60 60 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 61 6c 6c 20 49 50 76 34 | or.``::/0``.would.allow.all.IPv4 |
ce000 | 20 61 6e 64 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 74 6f 20 71 75 65 72 79 20 74 68 69 73 | .and.IPv6.networks.to.query.this |
ce020 | 20 73 65 72 76 65 72 2e 20 54 68 69 73 20 69 73 20 67 65 6e 65 72 61 6c 6c 79 20 61 20 62 61 64 | .server..This.is.generally.a.bad |
ce040 | 20 69 64 65 61 2e 00 47 69 76 65 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 | .idea..Given.the.following.examp |
ce060 | 6c 65 20 77 65 20 68 61 76 65 20 6f 6e 65 20 56 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e | le.we.have.one.VyOS.router.actin |
ce080 | 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 20 61 6e 64 20 61 6e 6f 74 68 65 72 20 | g.as.OpenVPN.server.and.another. |
ce0a0 | 56 79 4f 53 20 72 6f 75 74 65 72 20 61 63 74 69 6e 67 20 61 73 20 4f 70 65 6e 56 50 4e 20 63 6c | VyOS.router.acting.as.OpenVPN.cl |
ce0c0 | 69 65 6e 74 2e 20 54 68 65 20 73 65 72 76 65 72 20 61 6c 73 6f 20 70 75 73 68 65 73 20 61 20 73 | ient..The.server.also.pushes.a.s |
ce0e0 | 74 61 74 69 63 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 4f | tatic.client.IP.address.to.the.O |
ce100 | 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 2e 20 52 65 6d 65 6d 62 65 72 2c 20 63 6c 69 65 6e 74 73 | penVPN.client..Remember,.clients |
ce120 | 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 65 69 72 20 43 4e 20 61 | .are.identified.using.their.CN.a |
ce140 | 74 74 72 69 62 75 74 65 20 69 6e 20 74 68 65 20 53 53 4c 20 63 65 72 74 69 66 69 63 61 74 65 2e | ttribute.in.the.SSL.certificate. |
ce160 | 00 47 6c 6f 61 62 61 6c 00 47 6c 6f 62 61 6c 00 47 6c 6f 62 61 6c 20 41 64 76 61 6e 63 65 64 20 | .Gloabal.Global.Global.Advanced. |
ce180 | 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 4f 70 | options.Global.Options.Global.Op |
ce1a0 | 74 69 6f 6e 73 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 47 6c 6f | tions.Firewall.Configuration.Glo |
ce1c0 | 62 61 6c 20 6f 70 74 69 6f 6e 73 00 47 6c 6f 62 61 6c 20 70 61 72 61 6d 65 74 65 72 73 00 47 6c | bal.options.Global.parameters.Gl |
ce1e0 | 6f 62 61 6c 20 73 65 74 74 69 6e 67 73 00 47 72 61 63 65 66 75 6c 20 52 65 73 74 61 72 74 00 47 | obal.settings.Graceful.Restart.G |
ce200 | 72 61 70 68 51 4c 00 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 00 47 72 6f 75 70 73 00 47 72 6f | raphQL.Gratuitous.ARP.Groups.Gro |
ce220 | 75 70 73 20 6e 65 65 64 20 74 6f 20 68 61 76 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2e 20 45 | ups.need.to.have.unique.names..E |
ce240 | 76 65 6e 20 74 68 6f 75 67 68 20 73 6f 6d 65 20 63 6f 6e 74 61 69 6e 20 49 50 76 34 20 61 64 64 | ven.though.some.contain.IPv4.add |
ce260 | 72 65 73 73 65 73 20 61 6e 64 20 6f 74 68 65 72 73 20 63 6f 6e 74 61 69 6e 20 49 50 76 36 20 61 | resses.and.others.contain.IPv6.a |
ce280 | 64 64 72 65 73 73 65 73 2c 20 74 68 65 79 20 73 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 68 61 76 | ddresses,.they.still.need.to.hav |
ce2a0 | 65 20 75 6e 69 71 75 65 20 6e 61 6d 65 73 2c 20 73 6f 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 | e.unique.names,.so.you.may.want. |
ce2c0 | 74 6f 20 61 70 70 65 6e 64 20 22 2d 76 34 22 20 6f 72 20 22 2d 76 36 22 20 74 6f 20 79 6f 75 72 | to.append."-v4".or."-v6".to.your |
ce2e0 | 20 67 72 6f 75 70 20 6e 61 6d 65 73 2e 00 48 51 27 73 20 72 6f 75 74 65 72 20 72 65 71 75 69 72 | .group.names..HQ's.router.requir |
ce300 | 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 65 70 73 20 74 6f 20 67 65 6e 65 72 61 | es.the.following.steps.to.genera |
ce320 | 74 65 20 63 72 79 70 74 6f 20 6d 61 74 65 72 69 61 6c 73 20 66 6f 72 20 74 68 65 20 42 72 61 6e | te.crypto.materials.for.the.Bran |
ce340 | 63 68 20 31 3a 00 48 54 20 28 48 69 67 68 20 54 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 61 62 | ch.1:.HT.(High.Throughput).capab |
ce360 | 69 6c 69 74 69 65 73 20 28 38 30 32 2e 31 31 6e 29 00 48 54 54 50 20 41 50 49 00 48 54 54 50 20 | ilities.(802.11n).HTTP.API.HTTP. |
ce380 | 62 61 73 65 64 20 73 65 72 76 69 63 65 73 00 48 54 54 50 20 62 61 73 69 63 20 61 75 74 68 65 6e | based.services.HTTP.basic.authen |
ce3a0 | 74 69 63 61 74 69 6f 6e 20 75 73 65 72 6e 61 6d 65 00 48 54 54 50 20 63 6c 69 65 6e 74 00 48 54 | tication.username.HTTP.client.HT |
ce3c0 | 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 00 48 54 54 50 2d 41 50 49 00 48 61 69 72 70 69 6e | TP.health.check.HTTP-API.Hairpin |
ce3e0 | 20 4e 41 54 2f 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e 00 48 61 6e 64 20 6f 75 74 20 70 72 65 | .NAT/NAT.Reflection.Hand.out.pre |
ce400 | 66 69 78 65 73 20 6f 66 20 73 69 7a 65 20 60 3c 6c 65 6e 67 74 68 3e 60 20 74 6f 20 63 6c 69 65 | fixes.of.size.`<length>`.to.clie |
ce420 | 6e 74 73 20 69 6e 20 73 75 62 6e 65 74 20 60 3c 70 72 65 66 69 78 3e 60 20 77 68 65 6e 20 74 68 | nts.in.subnet.`<prefix>`.when.th |
ce440 | 65 79 20 72 65 71 75 65 73 74 20 66 6f 72 20 70 72 65 66 69 78 20 64 65 6c 65 67 61 74 69 6f 6e | ey.request.for.prefix.delegation |
ce460 | 2e 00 48 61 6e 64 6c 69 6e 67 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 00 48 61 76 69 6e 67 | ..Handling.and.monitoring.Having |
ce480 | 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 6f 66 20 49 4e | .control.over.the.matching.of.IN |
ce4a0 | 56 41 4c 49 44 20 73 74 61 74 65 20 74 72 61 66 66 69 63 2c 20 65 2e 67 2e 20 74 68 65 20 61 62 | VALID.state.traffic,.e.g..the.ab |
ce4c0 | 69 6c 69 74 79 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 6c 6f 67 2c 20 69 73 20 61 6e 20 | ility.to.selectively.log,.is.an. |
ce4e0 | 69 6d 70 6f 72 74 61 6e 74 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 20 74 6f 6f 6c 20 66 | important.troubleshooting.tool.f |
ce500 | 6f 72 20 6f 62 73 65 72 76 69 6e 67 20 62 72 6f 6b 65 6e 20 70 72 6f 74 6f 63 6f 6c 20 62 65 68 | or.observing.broken.protocol.beh |
ce520 | 61 76 69 6f 72 2e 20 46 6f 72 20 74 68 69 73 20 72 65 61 73 6f 6e 2c 20 56 79 4f 53 20 64 6f 65 | avior..For.this.reason,.VyOS.doe |
ce540 | 73 20 6e 6f 74 20 67 6c 6f 62 61 6c 6c 79 20 64 72 6f 70 20 69 6e 76 61 6c 69 64 20 73 74 61 74 | s.not.globally.drop.invalid.stat |
ce560 | 65 20 74 72 61 66 66 69 63 2c 20 69 6e 73 74 65 61 64 20 61 6c 6c 6f 77 69 6e 67 20 74 68 65 20 | e.traffic,.instead.allowing.the. |
ce580 | 6f 70 65 72 61 74 6f 72 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 64 65 74 65 72 6d 69 6e 61 74 69 | operator.to.make.the.determinati |
ce5a0 | 6f 6e 20 6f 6e 20 68 6f 77 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 68 61 6e 64 6c 65 64 | on.on.how.the.traffic.is.handled |
ce5c0 | 2e 00 48 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 00 48 65 61 6c 74 68 20 63 68 | ..Health.check.scripts.Health.ch |
ce5e0 | 65 63 6b 73 00 48 65 61 6c 74 68 2d 63 68 65 63 6b 00 48 65 72 65 20 61 72 65 20 73 6f 6d 65 20 | ecks.Health-check.Here.are.some. |
ce600 | 65 78 61 6d 70 6c 65 73 20 66 6f 72 20 61 70 70 6c 79 69 6e 67 20 61 20 72 75 6c 65 2d 73 65 74 | examples.for.applying.a.rule-set |
ce620 | 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 00 48 65 72 65 20 69 73 20 61 20 73 65 63 6f 6e | .to.an.interface.Here.is.a.secon |
ce640 | 64 20 65 78 61 6d 70 6c 65 20 6f 66 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 74 75 6e 6e 65 6c | d.example.of.a.dual-stack.tunnel |
ce660 | 20 6f 76 65 72 20 49 50 76 36 20 62 65 74 77 65 65 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 | .over.IPv6.between.a.VyOS.router |
ce680 | 20 61 6e 64 20 61 20 4c 69 6e 75 78 20 68 6f 73 74 20 75 73 69 6e 67 20 73 79 73 74 65 6d 64 2d | .and.a.Linux.host.using.systemd- |
ce6a0 | 6e 65 74 77 6f 72 6b 64 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 3a 61 62 | networkd..Here.is.an.example.:ab |
ce6c0 | 62 72 3a 60 4e 45 54 20 28 4e 65 74 77 6f 72 6b 20 45 6e 74 69 74 79 20 54 69 74 6c 65 29 60 20 | br:`NET.(Network.Entity.Title)`. |
ce6e0 | 76 61 6c 75 65 3a 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 72 6f 75 74 65 2d | value:.Here.is.an.example.route- |
ce700 | 6d 61 70 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 72 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 61 | map.to.apply.to.routes.learned.a |
ce720 | 74 20 69 6d 70 6f 72 74 2e 20 49 6e 20 74 68 69 73 20 66 69 6c 74 65 72 20 77 65 20 72 65 6a 65 | t.import..In.this.filter.we.reje |
ce740 | 63 74 20 70 72 65 66 69 78 65 73 20 77 69 74 68 20 74 68 65 20 73 74 61 74 65 20 60 69 6e 76 61 | ct.prefixes.with.the.state.`inva |
ce760 | 6c 69 64 60 2c 20 61 6e 64 20 73 65 74 20 61 20 68 69 67 68 65 72 20 60 6c 6f 63 61 6c 2d 70 72 | lid`,.and.set.a.higher.`local-pr |
ce780 | 65 66 65 72 65 6e 63 65 60 20 69 66 20 74 68 65 20 70 72 65 66 69 78 20 69 73 20 52 50 4b 49 20 | eference`.if.the.prefix.is.RPKI. |
ce7a0 | 60 76 61 6c 69 64 60 20 72 61 74 68 65 72 20 74 68 61 6e 20 6d 65 72 65 6c 79 20 60 6e 6f 74 66 | `valid`.rather.than.merely.`notf |
ce7c0 | 6f 75 6e 64 60 2e 00 48 65 72 65 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 77 65 72 65 20 6d | ound`..Here.is.an.example.were.m |
ce7e0 | 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 3a 00 48 65 72 65 | ultiple.groups.are.created:.Here |
ce800 | 20 69 73 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 73 68 6f 77 69 6e 67 20 74 | .is.the.routing.tables.showing.t |
ce820 | 68 65 20 4d 50 4c 53 20 73 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 6c 61 62 65 6c 20 6f 70 | he.MPLS.segment.routing.label.op |
ce840 | 65 72 61 74 69 6f 6e 73 3a 00 48 65 72 65 20 77 65 20 70 72 6f 76 69 64 65 20 74 77 6f 20 65 78 | erations:.Here.we.provide.two.ex |
ce860 | 61 6d 70 6c 65 73 20 6f 6e 20 68 6f 77 20 74 6f 20 61 70 70 6c 79 20 4e 41 54 20 4c 6f 61 64 20 | amples.on.how.to.apply.NAT.Load. |
ce880 | 42 61 6c 61 6e 63 65 2e 00 48 65 72 65 27 73 20 61 6e 20 65 78 74 72 61 63 74 20 6f 66 20 61 20 | Balance..Here's.an.extract.of.a. |
ce8a0 | 73 69 6d 70 6c 65 20 31 2d 74 6f 2d 31 20 4e 41 54 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | simple.1-to-1.NAT.configuration. |
ce8c0 | 77 69 74 68 20 6f 6e 65 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 6f 6e 65 20 65 78 74 65 72 6e | with.one.internal.and.one.extern |
ce8e0 | 61 6c 20 69 6e 74 65 72 66 61 63 65 3a 00 48 65 72 65 27 73 20 6f 6e 65 20 65 78 61 6d 70 6c 65 | al.interface:.Here's.one.example |
ce900 | 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 61 6e | .of.a.network.environment.for.an |
ce920 | 20 41 53 50 2e 20 54 68 65 20 41 53 50 20 72 65 71 75 65 73 74 73 20 74 68 61 74 20 61 6c 6c 20 | .ASP..The.ASP.requests.that.all. |
ce940 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 74 68 69 73 20 63 6f 6d 70 61 6e 79 20 73 68 | connections.from.this.company.sh |
ce960 | 6f 75 6c 64 20 63 6f 6d 65 20 66 72 6f 6d 20 31 37 32 2e 32 39 2e 34 31 2e 38 39 20 2d 20 61 6e | ould.come.from.172.29.41.89.-.an |
ce980 | 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 61 73 73 69 67 6e 65 64 20 62 79 20 74 68 65 | .address.that.is.assigned.by.the |
ce9a0 | 20 41 53 50 20 61 6e 64 20 6e 6f 74 20 69 6e 20 75 73 65 20 61 74 20 74 68 65 20 63 75 73 74 6f | .ASP.and.not.in.use.at.the.custo |
ce9c0 | 6d 65 72 20 73 69 74 65 2e 00 48 65 72 65 27 73 20 74 68 65 20 49 50 20 72 6f 75 74 65 73 20 74 | mer.site..Here's.the.IP.routes.t |
ce9e0 | 68 61 74 20 61 72 65 20 70 6f 70 75 6c 61 74 65 64 2e 20 4a 75 73 74 20 74 68 65 20 6c 6f 6f 70 | hat.are.populated..Just.the.loop |
cea00 | 62 61 63 6b 3a 00 48 65 72 65 27 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 75 70 3a 00 48 | back:.Here's.the.neighbors.up:.H |
cea20 | 65 72 65 27 73 20 74 68 65 20 72 6f 75 74 65 73 3a 00 48 65 77 6c 65 74 74 2d 50 61 63 6b 61 72 | ere's.the.routes:.Hewlett-Packar |
cea40 | 64 20 63 61 6c 6c 20 69 74 20 53 6f 75 72 63 65 2d 50 6f 72 74 20 66 69 6c 74 65 72 69 6e 67 20 | d.call.it.Source-Port.filtering. |
cea60 | 6f 72 20 70 6f 72 74 2d 69 73 6f 6c 61 74 69 6f 6e 00 48 69 67 68 00 48 69 67 68 20 41 76 61 69 | or.port-isolation.High.High.Avai |
cea80 | 6c 61 62 69 6c 69 74 79 00 48 69 67 68 20 61 76 61 69 6c 61 62 69 6c 69 74 79 00 48 6f 6d 65 20 | lability.High.availability.Home. |
ceaa0 | 55 73 65 72 73 00 48 6f 70 20 63 6f 75 6e 74 20 66 69 65 6c 64 20 6f 66 20 74 68 65 20 6f 75 74 | Users.Hop.count.field.of.the.out |
ceac0 | 67 6f 69 6e 67 20 52 41 20 70 61 63 6b 65 74 73 00 48 6f 73 74 20 49 6e 66 6f 72 6d 61 74 69 6f | going.RA.packets.Host.Informatio |
ceae0 | 6e 00 48 6f 73 74 20 6e 61 6d 65 00 48 6f 73 74 20 73 70 65 63 69 66 69 63 20 6d 61 70 70 69 6e | n.Host.name.Host.specific.mappin |
ceb00 | 67 20 73 68 61 6c 6c 20 62 65 20 6e 61 6d 65 64 20 60 60 63 6c 69 65 6e 74 31 60 60 00 48 6f 73 | g.shall.be.named.``client1``.Hos |
ceb20 | 74 6e 61 6d 65 00 48 6f 77 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 73 73 69 67 | tname.How.an.IP.address.is.assig |
ceb40 | 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 3a 72 65 66 3a 60 65 74 68 | ned.to.an.interface.in.:ref:`eth |
ceb60 | 65 72 6e 65 74 2d 69 6e 74 65 72 66 61 63 65 60 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 73 | ernet-interface`..This.section.s |
ceb80 | 68 6f 77 73 20 68 6f 77 20 74 6f 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 20 61 6e 20 49 50 | hows.how.to.statically.map.an.IP |
ceba0 | 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 68 6f 73 74 6e 61 6d 65 20 66 6f 72 20 6c 6f 63 61 6c | .address.to.a.hostname.for.local |
cebc0 | 20 28 6d 65 61 6e 69 6e 67 20 6f 6e 20 74 68 69 73 20 56 79 4f 53 20 69 6e 73 74 61 6e 63 65 29 | .(meaning.on.this.VyOS.instance) |
cebe0 | 20 6e 61 6d 65 20 72 65 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 74 68 65 20 56 79 | .name.resolution..This.is.the.Vy |
cec00 | 4f 53 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 20 60 2f 65 74 63 2f 68 6f 73 74 73 60 20 66 69 | OS.equivalent.to.`/etc/hosts`.fi |
cec20 | 6c 65 20 65 6e 74 72 69 65 73 2e 00 48 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 45 76 65 | le.entries..How.to.configure.Eve |
cec40 | 6e 74 20 48 61 6e 64 6c 65 72 00 48 6f 77 20 74 6f 20 6d 61 6b 65 20 69 74 20 77 6f 72 6b 00 48 | nt.Handler.How.to.make.it.work.H |
cec60 | 6f 77 65 76 65 72 2c 20 6e 6f 77 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6b 65 20 49 50 73 | owever,.now.you.need.to.make.IPs |
cec80 | 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e 20 | ec.work.with.dynamic.address.on. |
ceca0 | 6f 6e 65 20 73 69 64 65 2e 20 54 68 65 20 74 72 69 63 6b 79 20 70 61 72 74 20 69 73 20 74 68 61 | one.side..The.tricky.part.is.tha |
cecc0 | 74 20 70 72 65 2d 73 68 61 72 65 64 20 73 65 63 72 65 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 | t.pre-shared.secret.authenticati |
cece0 | 6f 6e 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 | on.doesn't.work.with.dynamic.add |
ced00 | 72 65 73 73 2c 20 73 6f 20 77 65 27 6c 6c 20 68 61 76 65 20 74 6f 20 75 73 65 20 52 53 41 20 6b | ress,.so.we'll.have.to.use.RSA.k |
ced20 | 65 79 73 2e 00 48 6f 77 65 76 65 72 2c 20 73 69 6e 63 65 20 56 79 4f 53 20 31 2e 34 2c 20 69 74 | eys..However,.since.VyOS.1.4,.it |
ced40 | 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 76 65 72 69 66 79 20 73 65 6c 66 2d 73 69 67 6e | .is.possible.to.verify.self-sign |
ced60 | 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 63 65 72 74 69 66 69 63 61 74 | ed.certificates.using.certificat |
ced80 | 65 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 48 6f 77 65 76 65 72 2c 20 73 70 6c 69 74 2d 74 | e.fingerprints..However,.split-t |
ceda0 | 75 6e 6e 65 6c 69 6e 67 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 62 79 20 73 70 65 63 | unneling.can.be.achieved.by.spec |
cedc0 | 69 66 79 69 6e 67 20 74 68 65 20 72 65 6d 6f 74 65 20 73 75 62 6e 65 74 73 2e 20 54 68 69 73 20 | ifying.the.remote.subnets..This. |
cede0 | 65 6e 73 75 72 65 73 20 74 68 61 74 20 6f 6e 6c 79 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e | ensures.that.only.traffic.destin |
cee00 | 65 64 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 74 65 20 69 73 20 73 65 6e 74 20 6f | ed.for.the.remote.site.is.sent.o |
cee20 | 76 65 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 72 61 66 66 69 | ver.the.tunnel..All.other.traffi |
cee40 | 63 20 69 73 20 75 6e 61 66 66 65 63 74 65 64 2e 00 48 75 61 77 65 69 20 4d 45 39 30 39 73 2d 31 | c.is.unaffected..Huawei.ME909s-1 |
cee60 | 32 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 48 75 61 77 65 69 20 4d 45 | 20.miniPCIe.card.(LTE).Huawei.ME |
cee80 | 39 30 39 75 2d 35 32 31 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 48 75 62 | 909u-521.miniPCIe.card.(LTE).Hub |
ceea0 | 00 49 45 45 45 20 38 30 32 2e 31 58 2f 4d 41 43 73 65 63 20 70 72 65 2d 73 68 61 72 65 64 20 6b | .IEEE.802.1X/MACsec.pre-shared.k |
ceec0 | 65 79 20 6d 6f 64 65 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 63 6f 6e 66 69 67 75 72 69 6e 67 | ey.mode..This.allows.configuring |
ceee0 | 20 4d 41 43 73 65 63 20 77 69 74 68 20 61 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 75 73 | .MACsec.with.a.pre-shared.key.us |
cef00 | 69 6e 67 20 61 20 3a 61 62 62 72 3a 60 43 41 4b 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 | ing.a.:abbr:`CAK.(MACsec.connect |
cef20 | 69 76 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 6b 65 79 29 60 20 61 6e 64 20 3a 61 62 62 | ivity.association.key)`.and.:abb |
cef40 | 72 3a 60 43 4b 4e 20 28 4d 41 43 73 65 63 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 61 73 73 6f | r:`CKN.(MACsec.connectivity.asso |
cef60 | 63 69 61 74 69 6f 6e 20 6e 61 6d 65 29 60 20 70 61 69 72 2e 00 49 45 45 45 20 38 30 32 2e 31 58 | ciation.name)`.pair..IEEE.802.1X |
cef80 | 2f 4d 41 43 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 77 69 6e 64 6f 77 | /MACsec.replay.protection.window |
cefa0 | 2e 20 54 68 69 73 20 64 65 74 65 72 6d 69 6e 65 73 20 61 20 77 69 6e 64 6f 77 20 69 6e 20 77 68 | ..This.determines.a.window.in.wh |
cefc0 | 69 63 68 20 72 65 70 6c 61 79 20 69 73 20 74 6f 6c 65 72 61 74 65 64 2c 20 74 6f 20 61 6c 6c 6f | ich.replay.is.tolerated,.to.allo |
cefe0 | 77 20 72 65 63 65 69 70 74 20 6f 66 20 66 72 61 6d 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 | w.receipt.of.frames.that.have.be |
cf000 | 65 6e 20 6d 69 73 6f 72 64 65 72 65 64 20 62 79 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 00 49 45 | en.misordered.by.the.network..IE |
cf020 | 45 45 20 38 30 32 2e 31 61 64 5f 20 77 61 73 20 61 6e 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 | EE.802.1ad_.was.an.Ethernet.netw |
cf040 | 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 69 6e 66 6f 72 6d 61 6c 6c 79 20 6b 6e 6f 77 6e | orking.standard.informally.known |
cf060 | 20 61 73 20 51 69 6e 51 20 61 73 20 61 6e 20 61 6d 65 6e 64 6d 65 6e 74 20 74 6f 20 49 45 45 45 | .as.QinQ.as.an.amendment.to.IEEE |
cf080 | 20 73 74 61 6e 64 61 72 64 20 38 30 32 2e 31 71 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 | .standard.802.1q.VLAN.interfaces |
cf0a0 | 20 61 73 20 64 65 73 63 72 69 62 65 64 20 61 62 6f 76 65 2e 20 38 30 32 2e 31 61 64 20 77 61 73 | .as.described.above..802.1ad.was |
cf0c0 | 20 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 69 6e 74 6f 20 74 68 65 20 62 61 73 65 20 38 30 32 2e | .incorporated.into.the.base.802. |
cf0e0 | 31 71 5f 20 73 74 61 6e 64 61 72 64 20 69 6e 20 32 30 31 31 2e 20 54 68 65 20 74 65 63 68 6e 69 | 1q_.standard.in.2011..The.techni |
cf100 | 71 75 65 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 70 72 6f 76 69 64 65 72 20 62 72 | que.is.also.known.as.provider.br |
cf120 | 69 64 67 69 6e 67 2c 20 53 74 61 63 6b 65 64 20 56 4c 41 4e 73 2c 20 6f 72 20 73 69 6d 70 6c 79 | idging,.Stacked.VLANs,.or.simply |
cf140 | 20 51 69 6e 51 20 6f 72 20 51 2d 69 6e 2d 51 2e 20 22 51 2d 69 6e 2d 51 22 20 63 61 6e 20 66 6f | .QinQ.or.Q-in-Q.."Q-in-Q".can.fo |
cf160 | 72 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 73 20 61 70 70 6c 79 20 74 6f 20 43 2d 74 | r.supported.devices.apply.to.C-t |
cf180 | 61 67 20 73 74 61 63 6b 69 6e 67 20 6f 6e 20 43 2d 74 61 67 20 28 45 74 68 65 72 6e 65 74 20 54 | ag.stacking.on.C-tag.(Ethernet.T |
cf1a0 | 79 70 65 20 3d 20 30 78 38 31 30 30 29 2e 00 49 45 45 45 20 38 30 32 2e 31 71 5f 2c 20 6f 66 74 | ype.=.0x8100)..IEEE.802.1q_,.oft |
cf1c0 | 65 6e 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 44 6f 74 31 71 2c 20 69 73 20 74 68 65 20 | en.referred.to.as.Dot1q,.is.the. |
cf1e0 | 6e 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 6e 64 61 72 64 20 74 68 61 74 20 73 75 70 70 6f 72 74 | networking.standard.that.support |
cf200 | 73 20 76 69 72 74 75 61 6c 20 4c 41 4e 73 20 28 56 4c 41 4e 73 29 20 6f 6e 20 61 6e 20 49 45 45 | s.virtual.LANs.(VLANs).on.an.IEE |
cf220 | 45 20 38 30 32 2e 33 20 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 73 74 | E.802.3.Ethernet.network..The.st |
cf240 | 61 6e 64 61 72 64 20 64 65 66 69 6e 65 73 20 61 20 73 79 73 74 65 6d 20 6f 66 20 56 4c 41 4e 20 | andard.defines.a.system.of.VLAN. |
cf260 | 74 61 67 67 69 6e 67 20 66 6f 72 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 61 6e 64 20 | tagging.for.Ethernet.frames.and. |
cf280 | 74 68 65 20 61 63 63 6f 6d 70 61 6e 79 69 6e 67 20 70 72 6f 63 65 64 75 72 65 73 20 74 6f 20 62 | the.accompanying.procedures.to.b |
cf2a0 | 65 20 75 73 65 64 20 62 79 20 62 72 69 64 67 65 73 20 61 6e 64 20 73 77 69 74 63 68 65 73 20 69 | e.used.by.bridges.and.switches.i |
cf2c0 | 6e 20 68 61 6e 64 6c 69 6e 67 20 73 75 63 68 20 66 72 61 6d 65 73 2e 20 54 68 65 20 73 74 61 6e | n.handling.such.frames..The.stan |
cf2e0 | 64 61 72 64 20 61 6c 73 6f 20 63 6f 6e 74 61 69 6e 73 20 70 72 6f 76 69 73 69 6f 6e 73 20 66 6f | dard.also.contains.provisions.fo |
cf300 | 72 20 61 20 71 75 61 6c 69 74 79 2d 6f 66 2d 73 65 72 76 69 63 65 20 70 72 69 6f 72 69 74 69 7a | r.a.quality-of-service.prioritiz |
cf320 | 61 74 69 6f 6e 20 73 63 68 65 6d 65 20 63 6f 6d 6d 6f 6e 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 49 | ation.scheme.commonly.known.as.I |
cf340 | 45 45 45 20 38 30 32 2e 31 70 20 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 47 65 6e 65 72 | EEE.802.1p.and.defines.the.Gener |
cf360 | 69 63 20 41 74 74 72 69 62 75 74 65 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 50 72 6f 74 6f 63 | ic.Attribute.Registration.Protoc |
cf380 | 6f 6c 2e 00 49 45 54 46 20 70 75 62 6c 69 73 68 65 64 20 3a 72 66 63 3a 60 36 35 39 38 60 2c 20 | ol..IETF.published.:rfc:`6598`,. |
cf3a0 | 64 65 74 61 69 6c 69 6e 67 20 61 20 73 68 61 72 65 64 20 61 64 64 72 65 73 73 20 73 70 61 63 65 | detailing.a.shared.address.space |
cf3c0 | 20 66 6f 72 20 75 73 65 20 69 6e 20 49 53 50 20 43 47 4e 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 | .for.use.in.ISP.CGN.deployments. |
cf3e0 | 74 68 61 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 74 68 65 20 73 61 6d 65 20 6e 65 74 77 6f 72 6b | that.can.handle.the.same.network |
cf400 | 20 70 72 65 66 69 78 65 73 20 6f 63 63 75 72 72 69 6e 67 20 62 6f 74 68 20 6f 6e 20 69 6e 62 6f | .prefixes.occurring.both.on.inbo |
cf420 | 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 41 52 49 | und.and.outbound.interfaces..ARI |
cf440 | 4e 20 72 65 74 75 72 6e 65 64 20 61 64 64 72 65 73 73 20 73 70 61 63 65 20 74 6f 20 74 68 65 20 | N.returned.address.space.to.the. |
cf460 | 3a 61 62 62 72 3a 60 49 41 4e 41 20 28 49 6e 74 65 72 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e | :abbr:`IANA.(Internet.Assigned.N |
cf480 | 75 6d 62 65 72 73 20 41 75 74 68 6f 72 69 74 79 29 60 20 66 6f 72 20 74 68 69 73 20 61 6c 6c 6f | umbers.Authority)`.for.this.allo |
cf4a0 | 63 61 74 69 6f 6e 2e 00 49 47 4d 50 20 2d 20 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d 61 | cation..IGMP.-.Internet.Group.Ma |
cf4c0 | 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 00 49 47 4d 50 20 50 72 6f 78 79 00 49 4b | nagement.Protocol).IGMP.Proxy.IK |
cf4e0 | 45 20 28 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 29 20 41 74 74 72 69 62 | E.(Internet.Key.Exchange).Attrib |
cf500 | 75 74 65 73 00 49 4b 45 20 50 68 61 73 65 3a 00 49 4b 45 20 70 65 72 66 6f 72 6d 73 20 6d 75 74 | utes.IKE.Phase:.IKE.performs.mut |
cf520 | 75 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 70 | ual.authentication.between.two.p |
cf540 | 61 72 74 69 65 73 20 61 6e 64 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 6e 20 49 4b 45 20 73 65 | arties.and.establishes.an.IKE.se |
cf560 | 63 75 72 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 28 53 41 29 20 74 68 61 74 20 69 6e 63 | curity.association.(SA).that.inc |
cf580 | 6c 75 64 65 73 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | ludes.shared.secret.information. |
cf5a0 | 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 66 66 69 63 69 65 6e 74 6c 79 20 | that.can.be.used.to.efficiently. |
cf5c0 | 65 73 74 61 62 6c 69 73 68 20 53 41 73 20 66 6f 72 20 45 6e 63 61 70 73 75 6c 61 74 69 6e 67 20 | establish.SAs.for.Encapsulating. |
cf5e0 | 53 65 63 75 72 69 74 79 20 50 61 79 6c 6f 61 64 20 28 45 53 50 29 20 6f 72 20 41 75 74 68 65 6e | Security.Payload.(ESP).or.Authen |
cf600 | 74 69 63 61 74 69 6f 6e 20 48 65 61 64 65 72 20 28 41 48 29 20 61 6e 64 20 61 20 73 65 74 20 6f | tication.Header.(AH).and.a.set.o |
cf620 | 66 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 | f.cryptographic.algorithms.to.be |
cf640 | 20 75 73 65 64 20 62 79 20 74 68 65 20 53 41 73 20 74 6f 20 70 72 6f 74 65 63 74 20 74 68 65 20 | .used.by.the.SAs.to.protect.the. |
cf660 | 74 72 61 66 66 69 63 20 74 68 61 74 20 74 68 65 79 20 63 61 72 72 79 2e 20 68 74 74 70 73 3a 2f | traffic.that.they.carry..https:/ |
cf680 | 2f 64 61 74 61 74 72 61 63 6b 65 72 2e 69 65 74 66 2e 6f 72 67 2f 64 6f 63 2f 68 74 6d 6c 2f 72 | /datatracker.ietf.org/doc/html/r |
cf6a0 | 66 63 35 39 39 36 00 49 4b 45 76 31 00 49 4b 45 76 32 00 49 4b 45 76 32 20 49 50 53 65 63 20 72 | fc5996.IKEv1.IKEv2.IKEv2.IPSec.r |
cf6c0 | 6f 61 64 2d 77 61 72 72 69 6f 72 73 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 56 50 4e 00 49 | oad-warriors.remote-access.VPN.I |
cf6e0 | 50 00 49 50 20 61 64 64 72 65 73 73 00 49 50 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 | P.IP.address.IP.address.``192.16 |
cf700 | 38 2e 31 2e 31 30 30 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 | 8.1.100``.shall.be.statically.ma |
cf720 | 70 70 65 64 20 74 6f 20 63 6c 69 65 6e 74 20 6e 61 6d 65 64 20 60 60 63 6c 69 65 6e 74 31 60 60 | pped.to.client.named.``client1`` |
cf740 | 00 49 50 20 61 64 64 72 65 73 73 20 60 60 31 39 32 2e 31 36 38 2e 32 2e 31 2f 32 34 60 60 00 49 | .IP.address.``192.168.2.1/24``.I |
cf760 | 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 20 73 65 72 76 65 72 20 69 64 65 6e 74 69 | P.address.for.DHCP.server.identi |
cf780 | 66 69 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 4e 54 50 20 73 65 72 76 65 72 00 49 50 | fier.IP.address.of.NTP.server.IP |
cf7a0 | 20 61 64 64 72 65 73 73 20 6f 66 20 50 4f 50 33 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 | .address.of.POP3.server.IP.addre |
cf7c0 | 73 73 20 6f 66 20 53 4d 54 50 20 73 65 72 76 65 72 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 | ss.of.SMTP.server.IP.address.of. |
cf7e0 | 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d | route.to.match,.based.on.access- |
cf800 | 6c 69 73 74 2e 00 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 | list..IP.address.of.route.to.mat |
cf820 | 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 20 61 64 64 | ch,.based.on.prefix-list..IP.add |
cf840 | 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e | ress.of.route.to.match,.based.on |
cf860 | 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 20 74 | .specified.prefix-length..Note.t |
cf880 | 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 6b 65 72 6e 65 6c 20 | hat.this.can.be.used.for.kernel. |
cf8a0 | 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 74 68 65 | routes.only..Do.not.apply.to.the |
cf8c0 | 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f | .routes.of.dynamic.routing.proto |
cf8e0 | 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 46 50 29 2c 20 61 73 20 74 | cols.(e.g..BGP,.RIP,.OSFP),.as.t |
cf900 | 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 72 65 73 75 6c | his.can.lead.to.unexpected.resul |
cf920 | 74 73 2e 2e 00 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 65 78 63 6c 75 64 65 20 66 72 6f 6d 20 | ts...IP.address.to.exclude.from. |
cf940 | 44 48 43 50 20 6c 65 61 73 65 20 72 61 6e 67 65 00 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 72 | DHCP.lease.range.IP.addresses.or |
cf960 | 20 6e 65 74 77 6f 72 6b 73 20 66 6f 72 20 77 68 69 63 68 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 | .networks.for.which.local.conntr |
cf980 | 61 63 6b 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 73 79 6e 63 65 64 00 49 | ack.entries.will.not.be.synced.I |
cf9a0 | 50 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 00 49 50 20 6d 61 73 71 75 65 72 61 | P.management.address.IP.masquera |
cf9c0 | 64 69 6e 67 20 69 73 20 61 20 74 65 63 68 6e 69 71 75 65 20 74 68 61 74 20 68 69 64 65 73 20 61 | ding.is.a.technique.that.hides.a |
cf9e0 | 6e 20 65 6e 74 69 72 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2c 20 75 73 75 61 6c | n.entire.IP.address.space,.usual |
cfa00 | 6c 79 20 63 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 70 72 69 76 61 74 65 20 49 50 20 61 64 64 72 | ly.consisting.of.private.IP.addr |
cfa20 | 65 73 73 65 73 2c 20 62 65 68 69 6e 64 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 | esses,.behind.a.single.IP.addres |
cfa40 | 73 20 69 6e 20 61 6e 6f 74 68 65 72 2c 20 75 73 75 61 6c 6c 79 20 70 75 62 6c 69 63 20 61 64 64 | s.in.another,.usually.public.add |
cfa60 | 72 65 73 73 20 73 70 61 63 65 2e 20 54 68 65 20 68 69 64 64 65 6e 20 61 64 64 72 65 73 73 65 73 | ress.space..The.hidden.addresses |
cfa80 | 20 61 72 65 20 63 68 61 6e 67 65 64 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 28 70 75 62 6c | .are.changed.into.a.single.(publ |
cfaa0 | 69 63 29 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 | ic).IP.address.as.the.source.add |
cfac0 | 72 65 73 73 20 6f 66 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 49 50 20 70 61 63 6b 65 74 73 20 | ress.of.the.outgoing.IP.packets. |
cfae0 | 73 6f 20 74 68 65 79 20 61 70 70 65 61 72 20 61 73 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 6e 6f | so.they.appear.as.originating.no |
cfb00 | 74 20 66 72 6f 6d 20 74 68 65 20 68 69 64 64 65 6e 20 68 6f 73 74 20 62 75 74 20 66 72 6f 6d 20 | t.from.the.hidden.host.but.from. |
cfb20 | 74 68 65 20 72 6f 75 74 69 6e 67 20 64 65 76 69 63 65 20 69 74 73 65 6c 66 2e 20 42 65 63 61 75 | the.routing.device.itself..Becau |
cfb40 | 73 65 20 6f 66 20 74 68 65 20 70 6f 70 75 6c 61 72 69 74 79 20 6f 66 20 74 68 69 73 20 74 65 63 | se.of.the.popularity.of.this.tec |
cfb60 | 68 6e 69 71 75 65 20 74 6f 20 63 6f 6e 73 65 72 76 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 | hnique.to.conserve.IPv4.address. |
cfb80 | 73 70 61 63 65 2c 20 74 68 65 20 74 65 72 6d 20 4e 41 54 20 68 61 73 20 62 65 63 6f 6d 65 20 76 | space,.the.term.NAT.has.become.v |
cfba0 | 69 72 74 75 61 6c 6c 79 20 73 79 6e 6f 6e 79 6d 6f 75 73 20 77 69 74 68 20 49 50 20 6d 61 73 71 | irtually.synonymous.with.IP.masq |
cfbc0 | 75 65 72 61 64 69 6e 67 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 | uerading..IP.next-hop.of.route.t |
cfbe0 | 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 | o.match,.based.on.access-list..I |
cfc00 | 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 | P.next-hop.of.route.to.match,.ba |
cfc20 | 73 65 64 20 6f 6e 20 69 70 20 61 64 64 72 65 73 73 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f | sed.on.ip.address..IP.next-hop.o |
cfc40 | 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 | f.route.to.match,.based.on.prefi |
cfc60 | 78 20 6c 65 6e 67 74 68 2e 00 49 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 | x.length..IP.next-hop.of.route.t |
cfc80 | 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 | o.match,.based.on.prefix-list..I |
cfca0 | 50 20 6e 65 78 74 2d 68 6f 70 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 | P.next-hop.of.route.to.match,.ba |
cfcc0 | 73 65 64 20 6f 6e 20 74 79 70 65 2e 00 49 50 20 70 72 65 63 65 64 65 6e 63 65 20 61 73 20 64 65 | sed.on.type..IP.precedence.as.de |
cfce0 | 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 37 39 31 60 3a 00 49 50 20 70 72 6f 74 6f 63 6f 6c | fined.in.:rfc:`791`:.IP.protocol |
cfd00 | 20 6e 75 6d 62 65 72 20 35 30 20 28 45 53 50 29 00 49 50 20 72 6f 75 74 65 20 73 6f 75 72 63 65 | .number.50.(ESP).IP.route.source |
cfd20 | 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 61 63 63 | .of.route.to.match,.based.on.acc |
cfd40 | 65 73 73 2d 6c 69 73 74 2e 00 49 50 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 6f 66 20 72 6f 75 | ess-list..IP.route.source.of.rou |
cfd60 | 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 70 72 65 66 69 78 2d 6c 69 73 | te.to.match,.based.on.prefix-lis |
cfd80 | 74 2e 00 49 50 36 49 50 36 00 49 50 49 50 00 49 50 49 50 36 00 49 50 53 65 63 20 49 4b 45 20 61 | t..IP6IP6.IPIP.IPIP6.IPSec.IKE.a |
cfda0 | 6e 64 20 45 53 50 00 49 50 53 65 63 20 49 4b 45 20 61 6e 64 20 45 53 50 20 47 72 6f 75 70 73 3b | nd.ESP.IPSec.IKE.and.ESP.Groups; |
cfdc0 | 00 49 50 53 65 63 20 49 4b 45 76 32 20 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 56 50 4e 00 49 | .IPSec.IKEv2.Remote.Access.VPN.I |
cfde0 | 50 53 65 63 20 49 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 00 49 50 53 65 63 20 49 | PSec.IKEv2.site2site.VPN.IPSec.I |
cfe00 | 4b 45 76 32 20 73 69 74 65 32 73 69 74 65 20 56 50 4e 20 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 | KEv2.site2site.VPN.(source../dra |
cfe20 | 77 2e 69 6f 2f 76 70 6e 5f 73 32 73 5f 69 6b 65 76 32 2e 64 72 61 77 69 6f 29 00 49 50 53 65 63 | w.io/vpn_s2s_ikev2.drawio).IPSec |
cfe40 | 20 56 50 4e 20 54 75 6e 6e 65 6c 73 00 49 50 53 65 63 20 56 50 4e 20 74 75 6e 6e 65 6c 73 2e 00 | .VPN.Tunnels.IPSec.VPN.tunnels.. |
cfe60 | 49 50 53 65 63 3a 00 49 50 6f 45 20 53 65 72 76 65 72 00 49 50 6f 45 20 63 61 6e 20 62 65 20 63 | IPSec:.IPoE.Server.IPoE.can.be.c |
cfe80 | 6f 6e 66 69 67 75 72 65 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 65 73 | onfigure.on.different.interfaces |
cfea0 | 2c 20 69 74 20 77 69 6c 6c 20 64 65 70 65 6e 64 20 6f 6e 20 65 61 63 68 20 73 70 65 63 69 66 69 | ,.it.will.depend.on.each.specifi |
cfec0 | 63 20 73 69 74 75 61 74 69 6f 6e 20 77 68 69 63 68 20 69 6e 74 65 72 66 61 63 65 20 77 69 6c 6c | c.situation.which.interface.will |
cfee0 | 20 70 72 6f 76 69 64 65 20 49 50 6f 45 20 74 6f 20 63 6c 69 65 6e 74 73 2e 20 54 68 65 20 63 6c | .provide.IPoE.to.clients..The.cl |
cff00 | 69 65 6e 74 73 20 6d 61 63 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 69 6e 63 6f 6d 69 | ients.mac.address.and.the.incomi |
cff20 | 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 63 6f | ng.interface.is.being.used.as.co |
cff40 | 6e 74 72 6f 6c 20 70 61 72 61 6d 65 74 65 72 2c 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 | ntrol.parameter,.to.authenticate |
cff60 | 20 61 20 63 6c 69 65 6e 74 2e 00 49 50 6f 45 20 69 73 20 61 20 6d 65 74 68 6f 64 20 6f 66 20 64 | .a.client..IPoE.is.a.method.of.d |
cff80 | 65 6c 69 76 65 72 69 6e 67 20 61 6e 20 49 50 20 70 61 79 6c 6f 61 64 20 6f 76 65 72 20 61 6e 20 | elivering.an.IP.payload.over.an. |
cffa0 | 45 74 68 65 72 6e 65 74 2d 62 61 73 65 64 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 6f 72 | Ethernet-based.access.network.or |
cffc0 | 20 61 6e 20 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 20 75 73 69 6e 67 20 62 72 69 64 67 65 64 | .an.access.network.using.bridged |
cffe0 | 20 45 74 68 65 72 6e 65 74 20 6f 76 65 72 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 20 54 72 61 6e | .Ethernet.over.Asynchronous.Tran |
d0000 | 73 66 65 72 20 4d 6f 64 65 20 28 41 54 4d 29 20 77 69 74 68 6f 75 74 20 75 73 69 6e 67 20 50 50 | sfer.Mode.(ATM).without.using.PP |
d0020 | 50 6f 45 2e 20 49 74 20 64 69 72 65 63 74 6c 79 20 65 6e 63 61 70 73 75 6c 61 74 65 73 20 74 68 | PoE..It.directly.encapsulates.th |
d0040 | 65 20 49 50 20 64 61 74 61 67 72 61 6d 73 20 69 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 | e.IP.datagrams.in.Ethernet.frame |
d0060 | 73 2c 20 75 73 69 6e 67 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 3a 72 66 63 3a 60 38 39 34 60 | s,.using.the.standard.:rfc:`894` |
d0080 | 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 2e 00 49 50 6f 45 20 73 65 72 76 65 72 20 77 69 6c 6c | .encapsulation..IPoE.server.will |
d00a0 | 20 6c 69 73 74 65 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 73 20 65 74 68 31 2e 35 30 20 61 6e | .listen.on.interfaces.eth1.50.an |
d00c0 | 64 20 65 74 68 31 2e 35 31 00 49 50 73 65 63 00 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6d 61 74 | d.eth1.51.IPsec.IPsec.policy.mat |
d00e0 | 63 68 69 6e 67 20 47 52 45 00 49 50 76 34 00 49 50 76 34 20 46 69 72 65 77 61 6c 6c 20 43 6f 6e | ching.GRE.IPv4.IPv4.Firewall.Con |
d0100 | 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 6e 65 78 74 20 | figuration.IPv4.address.of.next. |
d0120 | 62 6f 6f 74 73 74 72 61 70 20 73 65 72 76 65 72 00 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 | bootstrap.server.IPv4.address.of |
d0140 | 20 72 6f 75 74 65 72 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 27 73 20 73 75 62 6e 65 74 00 49 | .router.on.the.client's.subnet.I |
d0160 | 50 76 34 20 6f 72 20 49 50 76 36 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 4e 65 | Pv4.or.IPv6.source.address.of.Ne |
d0180 | 74 46 6c 6f 77 20 70 61 63 6b 65 74 73 00 49 50 76 34 20 70 65 65 72 69 6e 67 00 49 50 76 34 20 | tFlow.packets.IPv4.peering.IPv4. |
d01a0 | 72 65 6c 61 79 00 49 50 76 34 20 72 6f 75 74 65 20 61 6e 64 20 49 50 76 36 20 72 6f 75 74 65 20 | relay.IPv4.route.and.IPv6.route. |
d01c0 | 70 6f 6c 69 63 69 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 | policies.are.defined.in.this.sec |
d01e0 | 74 69 6f 6e 2e 20 54 68 65 73 65 20 72 6f 75 74 65 20 70 6f 6c 69 63 69 65 73 20 63 61 6e 20 74 | tion..These.route.policies.can.t |
d0200 | 68 65 6e 20 62 65 20 61 73 73 6f 63 69 61 74 65 64 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 2e | hen.be.associated.to.interfaces. |
d0220 | 00 49 50 76 34 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 | .IPv4.route.source:.bgp,.connect |
d0240 | 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 72 70 2c 20 6f | ed,.eigrp,.isis,.kernel,.nhrp,.o |
d0260 | 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 49 50 76 34 20 73 65 72 76 65 72 00 49 50 | spf,.rip,.static..IPv4.server.IP |
d0280 | 76 34 2f 49 50 76 36 20 72 65 6d 6f 74 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 56 58 | v4/IPv6.remote.address.of.the.VX |
d02a0 | 4c 41 4e 20 74 75 6e 6e 65 6c 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 20 74 6f 20 6d 75 6c 74 69 | LAN.tunnel..Alternative.to.multi |
d02c0 | 63 61 73 74 2c 20 74 68 65 20 72 65 6d 6f 74 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 | cast,.the.remote.IPv4/IPv6.addre |
d02e0 | 73 73 20 63 61 6e 20 73 65 74 20 64 69 72 65 63 74 6c 79 2e 00 49 50 76 36 00 49 50 76 36 20 41 | ss.can.set.directly..IPv6.IPv6.A |
d0300 | 63 63 65 73 73 20 4c 69 73 74 00 49 50 76 36 20 41 64 76 61 6e 63 65 64 20 4f 70 74 69 6f 6e 73 | ccess.List.IPv6.Advanced.Options |
d0320 | 00 49 50 76 36 20 44 48 43 50 76 36 2d 50 44 20 45 78 61 6d 70 6c 65 00 49 50 76 36 20 44 4e 53 | .IPv6.DHCPv6-PD.Example.IPv6.DNS |
d0340 | 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 70 74 69 6f 6e 61 6c 2e 00 49 50 76 36 20 46 69 | .addresses.are.optional..IPv6.Fi |
d0360 | 72 65 77 61 6c 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 50 76 36 20 4d 75 6c 74 69 63 | rewall.Configuration.IPv6.Multic |
d0380 | 61 73 74 00 49 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 00 49 50 76 36 20 | ast.IPv6.Prefix.Delegation.IPv6. |
d03a0 | 50 72 65 66 69 78 20 4c 69 73 74 73 00 49 50 76 36 20 53 4c 41 41 43 20 61 6e 64 20 49 41 2d 50 | Prefix.Lists.IPv6.SLAAC.and.IA-P |
d03c0 | 44 00 49 50 76 36 20 54 43 50 20 66 69 6c 74 65 72 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 | D.IPv6.TCP.filters.will.only.mat |
d03e0 | 63 68 20 49 50 76 36 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 6e 6f 20 68 65 61 64 65 72 20 65 | ch.IPv6.packets.with.no.header.e |
d0400 | 78 74 65 6e 73 69 6f 6e 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 | xtension,.see.https://en.wikiped |
d0420 | 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 49 50 76 36 5f 70 61 63 6b 65 74 23 45 78 74 65 6e 73 69 6f | ia.org/wiki/IPv6_packet#Extensio |
d0440 | 6e 5f 68 65 61 64 65 72 73 00 49 50 76 36 20 61 64 64 72 65 73 73 20 60 60 32 30 30 31 3a 64 62 | n_headers.IPv6.address.``2001:db |
d0460 | 38 3a 3a 31 30 31 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 | 8::101``.shall.be.statically.map |
d0480 | 70 65 64 00 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 | ped.IPv6.address.of.route.to.mat |
d04a0 | 63 68 2c 20 62 61 73 65 64 20 6f 6e 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c 69 73 74 2e 00 49 | ch,.based.on.IPv6.access-list..I |
d04c0 | 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 | Pv6.address.of.route.to.match,.b |
d04e0 | 61 73 65 64 20 6f 6e 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 49 50 76 36 20 61 | ased.on.IPv6.prefix-list..IPv6.a |
d0500 | 64 64 72 65 73 73 20 6f 66 20 72 6f 75 74 65 20 74 6f 20 6d 61 74 63 68 2c 20 62 61 73 65 64 20 | ddress.of.route.to.match,.based. |
d0520 | 6f 6e 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2d 6c 65 6e 67 74 68 2e 20 4e 6f 74 65 | on.specified.prefix-length..Note |
d0540 | 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 6f 72 20 6b 65 72 6e 65 | .that.this.can.be.used.for.kerne |
d0560 | 6c 20 72 6f 75 74 65 73 20 6f 6e 6c 79 2e 20 44 6f 20 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 74 | l.routes.only..Do.not.apply.to.t |
d0580 | 68 65 20 72 6f 75 74 65 73 20 6f 66 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f | he.routes.of.dynamic.routing.pro |
d05a0 | 74 6f 63 6f 6c 73 20 28 65 2e 67 2e 20 42 47 50 2c 20 52 49 50 2c 20 4f 53 46 50 29 2c 20 61 73 | tocols.(e.g..BGP,.RIP,.OSFP),.as |
d05c0 | 20 74 68 69 73 20 63 61 6e 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 74 65 64 20 72 65 73 | .this.can.lead.to.unexpected.res |
d05e0 | 75 6c 74 73 2e 2e 00 49 50 76 36 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 69 78 00 49 50 76 36 | ults...IPv6.client's.prefix.IPv6 |
d0600 | 20 63 6c 69 65 6e 74 27 73 20 70 72 65 66 69 78 20 61 73 73 69 67 6e 6d 65 6e 74 00 49 50 76 36 | .client's.prefix.assignment.IPv6 |
d0620 | 20 64 65 66 61 75 6c 74 20 63 6c 69 65 6e 74 27 73 20 70 6f 6f 6c 20 61 73 73 69 67 6e 6d 65 6e | .default.client's.pool.assignmen |
d0640 | 74 00 49 50 76 36 20 70 65 65 72 69 6e 67 00 49 50 76 36 20 70 72 65 66 69 78 20 60 60 32 30 30 | t.IPv6.peering.IPv6.prefix.``200 |
d0660 | 31 3a 64 62 38 3a 30 3a 31 30 31 3a 3a 2f 36 34 60 60 20 73 68 61 6c 6c 20 62 65 20 73 74 61 74 | 1:db8:0:101::/64``.shall.be.stat |
d0680 | 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 00 49 50 76 36 20 70 72 65 66 69 78 2e 00 49 50 76 36 20 | ically.mapped.IPv6.prefix..IPv6. |
d06a0 | 72 65 6c 61 79 00 49 50 76 36 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f | relay.IPv6.route.source:.bgp,.co |
d06c0 | 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6e 68 | nnected,.eigrp,.isis,.kernel,.nh |
d06e0 | 72 70 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 49 50 76 36 20 | rp,.ospfv3,.ripng,.static..IPv6. |
d0700 | 73 65 72 76 65 72 00 49 50 76 36 20 73 75 70 70 6f 72 74 00 49 53 2d 49 53 00 49 53 2d 49 53 20 | server.IPv6.support.IS-IS.IS-IS. |
d0720 | 47 6c 6f 62 61 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 2d 49 53 20 53 52 20 43 6f | Global.Configuration.IS-IS.SR.Co |
d0740 | 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 53 43 2d 44 48 43 50 20 4f 70 74 69 6f 6e 20 6e 61 6d 65 | nfiguration.ISC-DHCP.Option.name |
d0760 | 00 49 64 65 6e 74 69 74 79 20 42 61 73 65 64 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 66 | .Identity.Based.Configuration.If |
d0780 | 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 65 74 20 62 75 74 20 2a 2a | .**max-threshold**.is.set.but.** |
d07a0 | 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 20 69 73 20 6e 6f 74 2c 20 74 68 65 6e 20 2a 2a 6d 69 6e | min-threshold.is.not,.then.**min |
d07c0 | 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 69 73 20 73 63 61 6c 65 64 20 74 6f 20 35 30 25 20 6f 66 | -threshold**.is.scaled.to.50%.of |
d07e0 | 20 2a 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2e 00 49 66 20 3a 63 66 67 63 6d 64 3a 60 | .**max-threshold**..If.:cfgcmd:` |
d0800 | 73 74 72 69 63 74 60 20 69 73 20 73 65 74 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 77 | strict`.is.set.the.BGP.session.w |
d0820 | 6f 6e e2 80 99 74 20 62 65 63 6f 6d 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 75 6e 74 69 6c 20 | on...t.become.established.until. |
d0840 | 74 68 65 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 73 65 74 73 20 6c 6f 63 61 6c 20 52 6f 6c 65 | the.BGP.neighbor.sets.local.Role |
d0860 | 20 6f 6e 20 69 74 73 20 73 69 64 65 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .on.its.side..This.configuration |
d0880 | 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 20 52 46 43 20 3a 72 66 | .parameter.is.defined.in.RFC.:rf |
d08a0 | 63 3a 60 39 32 33 34 60 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 65 6e 66 6f 72 63 65 20 | c:`9234`.and.is.used.to.enforce. |
d08c0 | 74 68 65 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | the.corresponding.configuration. |
d08e0 | 61 74 20 79 6f 75 72 20 63 6f 75 6e 74 65 72 2d 70 61 72 74 73 20 73 69 64 65 2e 00 49 66 20 41 | at.your.counter-parts.side..If.A |
d0900 | 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 73 20 75 73 65 64 20 69 6e 20 61 6e 20 65 74 68 65 | RP.monitoring.is.used.in.an.ethe |
d0920 | 72 63 68 61 6e 6e 65 6c 20 63 6f 6d 70 61 74 69 62 6c 65 20 6d 6f 64 65 20 28 6d 6f 64 65 73 20 | rchannel.compatible.mode.(modes. |
d0940 | 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 61 6e 64 20 78 6f 72 2d 68 61 73 68 29 2c 20 74 68 65 20 73 | round-robin.and.xor-hash),.the.s |
d0960 | 77 69 74 63 68 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 20 | witch.should.be.configured.in.a. |
d0980 | 6d 6f 64 65 20 74 68 61 74 20 65 76 65 6e 6c 79 20 64 69 73 74 72 69 62 75 74 65 73 20 70 61 63 | mode.that.evenly.distributes.pac |
d09a0 | 6b 65 74 73 20 61 63 72 6f 73 73 20 61 6c 6c 20 6c 69 6e 6b 73 2e 20 49 66 20 74 68 65 20 73 77 | kets.across.all.links..If.the.sw |
d09c0 | 69 74 63 68 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 64 69 73 74 72 69 62 75 74 65 | itch.is.configured.to.distribute |
d09e0 | 20 74 68 65 20 70 61 63 6b 65 74 73 20 69 6e 20 61 6e 20 58 4f 52 20 66 61 73 68 69 6f 6e 2c 20 | .the.packets.in.an.XOR.fashion,. |
d0a00 | 61 6c 6c 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 74 68 65 20 41 52 50 20 74 61 72 67 65 74 73 | all.replies.from.the.ARP.targets |
d0a20 | 20 77 69 6c 6c 20 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 6c 69 | .will.be.received.on.the.same.li |
d0a40 | 6e 6b 20 77 68 69 63 68 20 63 6f 75 6c 64 20 63 61 75 73 65 20 74 68 65 20 6f 74 68 65 72 20 74 | nk.which.could.cause.the.other.t |
d0a60 | 65 61 6d 20 6d 65 6d 62 65 72 73 20 74 6f 20 66 61 69 6c 2e 00 49 66 20 43 41 20 69 73 20 70 72 | eam.members.to.fail..If.CA.is.pr |
d0a80 | 65 73 65 6e 74 2c 20 74 68 69 73 20 63 65 72 74 69 66 69 63 61 74 65 20 77 69 6c 6c 20 62 65 20 | esent,.this.certificate.will.be. |
d0aa0 | 69 6e 63 6c 75 64 65 64 20 69 6e 20 67 65 6e 65 72 61 74 65 64 20 43 52 4c 73 00 49 66 20 43 4c | included.in.generated.CRLs.If.CL |
d0ac0 | 49 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 | I.option.is.not.specified,.this. |
d0ae0 | 66 65 61 74 75 72 65 20 69 73 20 64 69 73 61 62 6c 65 64 2e 00 49 66 20 50 49 4d 20 68 61 73 20 | feature.is.disabled..If.PIM.has. |
d0b00 | 74 68 65 20 61 20 63 68 6f 69 63 65 20 6f 66 20 45 43 4d 50 20 6e 65 78 74 68 6f 70 73 20 66 6f | the.a.choice.of.ECMP.nexthops.fo |
d0b20 | 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 3a 61 62 62 72 3a 60 52 50 46 20 28 52 65 76 65 72 | r.a.particular.:abbr:`RPF.(Rever |
d0b40 | 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 2c 20 50 49 4d 20 77 69 6c 6c 20 63 | se.Path.Forwarding)`,.PIM.will.c |
d0b60 | 61 75 73 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 6f 20 62 65 20 73 70 72 65 61 64 20 6f 75 74 20 | ause.S,G.flows.to.be.spread.out. |
d0b80 | 61 6d 6f 6e 67 73 74 20 74 68 65 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 20 74 68 69 73 20 63 6f | amongst.the.nexthops..If.this.co |
d0ba0 | 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 74 68 65 6e 20 74 68 65 20 | mmand.is.not.specified.then.the. |
d0bc0 | 66 69 72 73 74 20 6e 65 78 74 68 6f 70 20 66 6f 75 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 | first.nexthop.found.will.be.used |
d0be0 | 2e 00 49 66 20 50 49 4d 20 69 73 20 75 73 69 6e 67 20 45 43 4d 50 20 61 6e 64 20 61 6e 20 69 6e | ..If.PIM.is.using.ECMP.and.an.in |
d0c00 | 74 65 72 66 61 63 65 20 67 6f 65 73 20 64 6f 77 6e 2c 20 63 61 75 73 65 20 50 49 4d 20 74 6f 20 | terface.goes.down,.cause.PIM.to. |
d0c20 | 72 65 62 61 6c 61 6e 63 65 20 61 6c 6c 20 53 2c 47 20 66 6c 6f 77 73 20 61 63 72 6f 73 73 20 74 | rebalance.all.S,G.flows.across.t |
d0c40 | 68 65 20 72 65 6d 61 69 6e 69 6e 67 20 6e 65 78 74 68 6f 70 73 2e 20 49 66 20 74 68 69 73 20 63 | he.remaining.nexthops..If.this.c |
d0c60 | 6f 6d 6d 61 6e 64 20 69 73 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 65 64 20 50 49 4d 20 6f 6e 6c | ommand.is.not.configured.PIM.onl |
d0c80 | 79 20 6d 6f 64 69 66 69 65 73 20 74 68 6f 73 65 20 53 2c 47 20 66 6c 6f 77 73 20 74 68 61 74 20 | y.modifies.those.S,G.flows.that. |
d0ca0 | 77 65 72 65 20 75 73 69 6e 67 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 77 65 | were.using.the.interface.that.we |
d0cc0 | 6e 74 20 64 6f 77 6e 2e 00 49 66 20 60 60 61 6c 69 61 73 60 60 20 69 73 20 73 65 74 2c 20 69 74 | nt.down..If.``alias``.is.set,.it |
d0ce0 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 76 69 | .can.be.used.instead.of.the.devi |
d0d00 | 63 65 20 77 68 65 6e 20 63 6f 6e 6e 65 63 74 69 6e 67 2e 00 49 66 20 60 60 61 6c 6c 60 60 20 69 | ce.when.connecting..If.``all``.i |
d0d20 | 73 20 73 70 65 63 69 66 69 65 64 2c 20 72 65 6d 6f 76 65 20 61 6c 6c 20 41 53 20 6e 75 6d 62 65 | s.specified,.remove.all.AS.numbe |
d0d40 | 72 73 20 66 72 6f 6d 20 74 68 65 20 41 53 5f 50 41 54 48 20 6f 66 20 74 68 65 20 42 47 50 20 70 | rs.from.the.AS_PATH.of.the.BGP.p |
d0d60 | 61 74 68 27 73 20 4e 4c 52 49 2e 00 49 66 20 61 20 6c 6f 63 61 6c 20 66 69 72 65 77 61 6c 6c 20 | ath's.NLRI..If.a.local.firewall. |
d0d80 | 70 6f 6c 69 63 79 20 69 73 20 69 6e 20 70 6c 61 63 65 20 6f 6e 20 79 6f 75 72 20 65 78 74 65 72 | policy.is.in.place.on.your.exter |
d0da0 | 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 61 | nal.interface.you.will.need.to.a |
d0dc0 | 6c 6c 6f 77 20 74 68 65 20 70 6f 72 74 73 20 62 65 6c 6f 77 3a 00 49 66 20 61 20 72 65 67 69 73 | llow.the.ports.below:.If.a.regis |
d0de0 | 74 72 79 20 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2c 20 44 6f 63 6b 65 72 2e 69 6f 20 | try.is.not.specified,.Docker.io. |
d0e00 | 77 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 72 65 | will.be.used.as.the.container.re |
d0e20 | 67 69 73 74 72 79 20 75 6e 6c 65 73 73 20 61 6e 20 61 6c 74 65 72 6e 61 74 69 76 65 20 72 65 67 | gistry.unless.an.alternative.reg |
d0e40 | 69 73 74 72 79 20 69 73 20 73 70 65 63 69 66 69 65 64 20 75 73 69 6e 67 20 2a 2a 73 65 74 20 63 | istry.is.specified.using.**set.c |
d0e60 | 6f 6e 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 79 20 3c 6e 61 6d 65 3e 2a 2a 20 6f 72 20 74 68 | ontainer.registry.<name>**.or.th |
d0e80 | 65 20 72 65 67 69 73 74 72 79 20 69 73 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 69 6d | e.registry.is.included.in.the.im |
d0ea0 | 61 67 65 20 6e 61 6d 65 00 49 66 20 61 20 72 65 73 70 6f 6e 73 65 20 69 73 20 68 65 61 72 64 2c | age.name.If.a.response.is.heard, |
d0ec0 | 20 74 68 65 20 6c 65 61 73 65 20 69 73 20 61 62 61 6e 64 6f 6e 65 64 2c 20 61 6e 64 20 74 68 65 | .the.lease.is.abandoned,.and.the |
d0ee0 | 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 | .server.does.not.respond.to.the. |
d0f00 | 63 6c 69 65 6e 74 2e 20 54 68 65 20 6c 65 61 73 65 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 61 62 | client..The.lease.will.remain.ab |
d0f20 | 61 6e 64 6f 6e 65 64 20 66 6f 72 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 61 62 61 6e 64 6f 6e | andoned.for.a.minimum.of.abandon |
d0f40 | 2d 6c 65 61 73 65 2d 74 69 6d 65 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 73 20 74 6f | -lease-time.seconds.(defaults.to |
d0f60 | 20 32 34 20 68 6f 75 72 73 29 2e 00 49 66 20 61 20 72 6f 75 74 65 20 68 61 73 20 61 6e 20 4f 52 | .24.hours)..If.a.route.has.an.OR |
d0f80 | 49 47 49 4e 41 54 4f 52 5f 49 44 20 61 74 74 72 69 62 75 74 65 20 62 65 63 61 75 73 65 20 69 74 | IGINATOR_ID.attribute.because.it |
d0fa0 | 20 68 61 73 20 62 65 65 6e 20 72 65 66 6c 65 63 74 65 64 2c 20 74 68 61 74 20 4f 52 49 47 49 4e | .has.been.reflected,.that.ORIGIN |
d0fc0 | 41 54 4f 52 5f 49 44 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 4f 74 68 65 72 77 69 73 65 2c | ATOR_ID.will.be.used..Otherwise, |
d0fe0 | 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 68 65 20 72 | .the.router-ID.of.the.peer.the.r |
d1000 | 6f 75 74 65 20 77 61 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 77 69 6c 6c 20 62 65 20 75 | oute.was.received.from.will.be.u |
d1020 | 73 65 64 2e 00 49 66 20 61 20 72 75 6c 65 20 69 73 20 64 65 66 69 6e 65 64 2c 20 74 68 65 6e 20 | sed..If.a.rule.is.defined,.then. |
d1040 | 61 6e 20 61 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 66 6f 72 20 69 74 | an.action.must.be.defined.for.it |
d1060 | 2e 20 54 68 69 73 20 74 65 6c 6c 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 77 68 61 74 20 74 | ..This.tells.the.firewall.what.t |
d1080 | 6f 20 64 6f 20 69 66 20 61 6c 6c 20 63 72 69 74 65 72 69 61 20 6d 61 74 63 68 65 72 73 20 64 65 | o.do.if.all.criteria.matchers.de |
d10a0 | 66 69 6e 65 64 20 66 6f 72 20 73 75 63 68 20 72 75 6c 65 20 64 6f 20 6d 61 74 63 68 2e 00 49 66 | fined.for.such.rule.do.match..If |
d10c0 | 20 61 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 20 61 64 64 72 65 73 73 65 73 20 62 | .a.there.are.no.free.addresses.b |
d10e0 | 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 72 65 73 | ut.there.are.abandoned.IP.addres |
d1100 | 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 74 74 65 6d 70 | ses,.the.DHCP.server.will.attemp |
d1120 | 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 64 20 49 50 20 61 64 64 | t.to.reclaim.an.abandoned.IP.add |
d1140 | 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 | ress.regardless.of.the.value.of. |
d1160 | 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 49 66 20 61 6e 20 49 53 50 20 64 65 | abandon-lease-time..If.an.ISP.de |
d1180 | 70 6c 6f 79 73 20 61 20 3a 61 62 62 72 3a 60 43 47 4e 20 28 43 61 72 72 69 65 72 2d 67 72 61 64 | ploys.a.:abbr:`CGN.(Carrier-grad |
d11a0 | 65 20 4e 41 54 29 60 2c 20 61 6e 64 20 75 73 65 73 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 | e.NAT)`,.and.uses.:rfc:`1918`.ad |
d11c0 | 64 72 65 73 73 20 73 70 61 63 65 20 74 6f 20 6e 75 6d 62 65 72 20 63 75 73 74 6f 6d 65 72 20 67 | dress.space.to.number.customer.g |
d11e0 | 61 74 65 77 61 79 73 2c 20 74 68 65 20 72 69 73 6b 20 6f 66 20 61 64 64 72 65 73 73 20 63 6f 6c | ateways,.the.risk.of.address.col |
d1200 | 6c 69 73 69 6f 6e 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 72 6f 75 74 69 6e 67 20 66 61 | lision,.and.therefore.routing.fa |
d1220 | 69 6c 75 72 65 73 2c 20 61 72 69 73 65 73 20 77 68 65 6e 20 74 68 65 20 63 75 73 74 6f 6d 65 72 | ilures,.arises.when.the.customer |
d1240 | 20 6e 65 74 77 6f 72 6b 20 61 6c 72 65 61 64 79 20 75 73 65 73 20 61 6e 20 3a 72 66 63 3a 60 31 | .network.already.uses.an.:rfc:`1 |
d1260 | 39 31 38 60 20 61 64 64 72 65 73 73 20 73 70 61 63 65 2e 00 49 66 20 61 6e 20 61 6e 6f 74 68 65 | 918`.address.space..If.an.anothe |
d1280 | 72 20 62 72 69 64 67 65 20 69 6e 20 74 68 65 20 73 70 61 6e 6e 69 6e 67 20 74 72 65 65 20 64 6f | r.bridge.in.the.spanning.tree.do |
d12a0 | 65 73 20 6e 6f 74 20 73 65 6e 64 20 6f 75 74 20 61 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 20 66 | es.not.send.out.a.hello.packet.f |
d12c0 | 6f 72 20 61 20 6c 6f 6e 67 20 70 65 72 69 6f 64 20 6f 66 20 74 69 6d 65 2c 20 69 74 20 69 73 20 | or.a.long.period.of.time,.it.is. |
d12e0 | 61 73 73 75 6d 65 64 20 74 6f 20 62 65 20 64 65 61 64 2e 00 49 66 20 63 68 6f 6f 73 69 6e 67 20 | assumed.to.be.dead..If.choosing. |
d1300 | 61 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 | a.value.below.31.seconds.be.awar |
d1320 | 65 20 74 68 61 74 20 73 6f 6d 65 20 68 61 72 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 | e.that.some.hardware.platforms.c |
d1340 | 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 | annot.see.data.flowing.in.better |
d1360 | 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 20 63 68 75 6e 6b 73 2e 00 49 66 20 63 6f 6e 66 69 | .than.30.second.chunks..If.confi |
d1380 | 67 75 72 65 64 2c 20 69 6e 63 6f 6d 69 6e 67 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 | gured,.incoming.IP.directed.broa |
d13a0 | 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 | dcast.packets.on.this.interface. |
d13c0 | 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 65 64 | will.be.forwarded..If.configured |
d13e0 | 2c 20 72 65 70 6c 79 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 64 | ,.reply.only.if.the.target.IP.ad |
d1400 | 64 72 65 73 73 20 69 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 | dress.is.local.address.configure |
d1420 | 64 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 | d.on.the.incoming.interface..If. |
d1440 | 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 72 79 20 74 6f 20 61 76 6f 69 64 20 6c 6f 63 61 6c 20 61 | configured,.try.to.avoid.local.a |
d1460 | 64 64 72 65 73 73 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 69 6e 20 74 68 65 20 74 61 72 | ddresses.that.are.not.in.the.tar |
d1480 | 67 65 74 27 73 20 73 75 62 6e 65 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e | get's.subnet.for.this.interface. |
d14a0 | 20 54 68 69 73 20 6d 6f 64 65 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 61 72 67 65 74 | .This.mode.is.useful.when.target |
d14c0 | 20 68 6f 73 74 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 | .hosts.reachable.via.this.interf |
d14e0 | 61 63 65 20 72 65 71 75 69 72 65 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 | ace.require.the.source.IP.addres |
d1500 | 73 20 69 6e 20 41 52 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 62 65 20 70 61 72 74 20 6f 66 20 | s.in.ARP.requests.to.be.part.of. |
d1520 | 74 68 65 69 72 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 66 69 67 75 72 65 64 | their.logical.network.configured |
d1540 | 20 6f 6e 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 | .on.the.receiving.interface..Whe |
d1560 | 6e 20 77 65 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 72 65 71 75 65 73 74 20 77 65 20 77 69 6c | n.we.generate.the.request.we.wil |
d1580 | 6c 20 63 68 65 63 6b 20 61 6c 6c 20 6f 75 72 20 73 75 62 6e 65 74 73 20 74 68 61 74 20 69 6e 63 | l.check.all.our.subnets.that.inc |
d15a0 | 6c 75 64 65 20 74 68 65 20 74 61 72 67 65 74 20 49 50 20 61 6e 64 20 77 69 6c 6c 20 70 72 65 73 | lude.the.target.IP.and.will.pres |
d15c0 | 65 72 76 65 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 66 20 69 74 20 69 73 | erve.the.source.address.if.it.is |
d15e0 | 20 66 72 6f 6d 20 73 75 63 68 20 73 75 62 6e 65 74 2e 20 49 66 20 74 68 65 72 65 20 69 73 20 6e | .from.such.subnet..If.there.is.n |
d1600 | 6f 20 73 75 63 68 20 73 75 62 6e 65 74 20 77 65 20 73 65 6c 65 63 74 20 73 6f 75 72 63 65 20 61 | o.such.subnet.we.select.source.a |
d1620 | 64 64 72 65 73 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 72 75 6c 65 73 20 66 6f | ddress.according.to.the.rules.fo |
d1640 | 72 20 6c 65 76 65 6c 20 32 2e 00 49 66 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 56 58 4c 41 4e 20 | r.level.2..If.configuring.VXLAN. |
d1660 | 69 6e 20 61 20 56 79 4f 53 20 76 69 72 74 75 61 6c 20 6d 61 63 68 69 6e 65 2c 20 65 6e 73 75 72 | in.a.VyOS.virtual.machine,.ensur |
d1680 | 65 20 74 68 61 74 20 4d 41 43 20 73 70 6f 6f 66 69 6e 67 20 28 48 79 70 65 72 2d 56 29 20 6f 72 | e.that.MAC.spoofing.(Hyper-V).or |
d16a0 | 20 46 6f 72 67 65 64 20 54 72 61 6e 73 6d 69 74 73 20 28 45 53 58 29 20 61 72 65 20 70 65 72 6d | .Forged.Transmits.(ESX).are.perm |
d16c0 | 69 74 74 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 66 6f 72 77 61 72 64 65 64 20 66 72 61 6d 65 | itted,.otherwise.forwarded.frame |
d16e0 | 73 20 6d 61 79 20 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 68 79 70 65 72 76 69 73 | s.may.be.blocked.by.the.hypervis |
d1700 | 6f 72 2e 00 49 66 20 66 6f 72 77 61 72 64 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 64 | or..If.forwarding.traffic.to.a.d |
d1720 | 69 66 66 65 72 65 6e 74 20 70 6f 72 74 20 74 68 61 6e 20 69 74 20 69 73 20 61 72 72 69 76 69 6e | ifferent.port.than.it.is.arrivin |
d1740 | 67 20 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 | g.on,.you.may.also.configure.the |
d1760 | 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 72 74 20 75 73 69 6e 67 20 60 73 65 74 20 6e 61 74 | .translation.port.using.`set.nat |
d1780 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 72 75 6c 65 20 5b 6e 5d 20 74 72 61 6e 73 6c 61 74 69 6f | .destination.rule.[n].translatio |
d17a0 | 6e 20 70 6f 72 74 60 2e 00 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 66 | n.port`..If.guaranteed.traffic.f |
d17c0 | 6f 72 20 61 20 63 6c 61 73 73 20 69 73 20 6d 65 74 20 61 6e 64 20 74 68 65 72 65 20 69 73 20 72 | or.a.class.is.met.and.there.is.r |
d17e0 | 6f 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 74 72 61 66 66 69 63 2c 20 74 68 65 20 63 65 69 6c 69 6e | oom.for.more.traffic,.the.ceilin |
d1800 | 67 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 65 74 20 68 | g.parameter.can.be.used.to.set.h |
d1820 | 6f 77 20 6d 75 63 68 20 6d 6f 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 6f 75 6c 64 20 62 65 20 | ow.much.more.bandwidth.could.be. |
d1840 | 75 73 65 64 2e 20 49 66 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 69 73 20 6d | used..If.guaranteed.traffic.is.m |
d1860 | 65 74 20 61 6e 64 20 74 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 63 6c 61 73 73 65 73 | et.and.there.are.several.classes |
d1880 | 20 77 69 6c 6c 69 6e 67 20 74 6f 20 75 73 65 20 74 68 65 69 72 20 63 65 69 6c 69 6e 67 73 2c 20 | .willing.to.use.their.ceilings,. |
d18a0 | 74 68 65 20 70 72 69 6f 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 65 73 74 61 | the.priority.parameter.will.esta |
d18c0 | 62 6c 69 73 68 20 74 68 65 20 6f 72 64 65 72 20 69 6e 20 77 68 69 63 68 20 74 68 61 74 20 61 64 | blish.the.order.in.which.that.ad |
d18e0 | 64 69 74 69 6f 6e 61 6c 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 | ditional.traffic.will.be.allocat |
d1900 | 65 64 2e 20 50 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 61 6e 79 20 6e 75 6d 62 65 72 20 66 | ed..Priority.can.be.any.number.f |
d1920 | 72 6f 6d 20 30 20 74 6f 20 37 2e 20 54 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 | rom.0.to.7..The.lower.the.number |
d1940 | 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2e 00 49 66 20 69 6e | ,.the.higher.the.priority..If.in |
d1960 | 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 | terface.were.the.packet.was.rece |
d1980 | 69 76 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 | ived.is.part.of.a.bridge,.then.p |
d19a0 | 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 | acket.is.processed.at.the.**Brid |
d19c0 | 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 76 65 72 | ge.Layer**,.which.contains.a.ver |
d19e0 | 20 62 61 73 69 63 20 73 65 74 75 70 20 77 68 65 72 65 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 | .basic.setup.where.for.bridge.fi |
d1a00 | 6c 74 65 72 69 6e 67 3a 00 49 66 20 69 6e 74 65 72 66 61 63 65 20 77 65 72 65 20 74 68 65 20 70 | ltering:.If.interface.were.the.p |
d1a20 | 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 70 61 72 74 20 6f 66 | acket.was.received.isn't.part.of |
d1a40 | 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 | .a.bridge,.then.packet.is.proces |
d1a60 | 73 65 64 20 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 49 66 20 69 74 27 73 | sed.at.the.**IP.Layer**:.If.it's |
d1a80 | 20 76 69 74 61 6c 20 74 68 61 74 20 74 68 65 20 64 61 65 6d 6f 6e 20 73 68 6f 75 6c 64 20 61 63 | .vital.that.the.daemon.should.ac |
d1aa0 | 74 20 65 78 61 63 74 6c 79 20 6c 69 6b 65 20 61 20 72 65 61 6c 20 6d 75 6c 74 69 63 61 73 74 20 | t.exactly.like.a.real.multicast. |
d1ac0 | 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 | client.on.the.upstream.interface |
d1ae0 | 2c 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 62 6c 65 | ,.this.function.should.be.enable |
d1b00 | 64 2e 00 49 66 20 6b 6e 6f 77 6e 2c 20 74 68 65 20 49 50 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 | d..If.known,.the.IP.of.the.remot |
d1b20 | 65 20 72 6f 75 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 | e.router.can.be.configured.using |
d1b40 | 20 74 68 65 20 60 60 72 65 6d 6f 74 65 2d 68 6f 73 74 60 60 20 64 69 72 65 63 74 69 76 65 3b 20 | .the.``remote-host``.directive;. |
d1b60 | 69 66 20 75 6e 6b 6e 6f 77 6e 2c 20 69 74 20 63 61 6e 20 62 65 20 6f 6d 69 74 74 65 64 2e 20 57 | if.unknown,.it.can.be.omitted..W |
d1b80 | 65 20 77 69 6c 6c 20 61 73 73 75 6d 65 20 61 20 64 79 6e 61 6d 69 63 20 49 50 20 66 6f 72 20 6f | e.will.assume.a.dynamic.IP.for.o |
d1ba0 | 75 72 20 72 65 6d 6f 74 65 20 72 6f 75 74 65 72 2e 00 49 66 20 6c 6f 67 67 69 6e 67 20 74 6f 20 | ur.remote.router..If.logging.to. |
d1bc0 | 61 20 6c 6f 63 61 6c 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 69 73 20 63 6f 6e 66 69 67 75 72 | a.local.user.account.is.configur |
d1be0 | 65 64 2c 20 61 6c 6c 20 64 65 66 69 6e 65 64 20 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 61 72 65 | ed,.all.defined.log.messages.are |
d1c00 | 20 64 69 73 70 6c 61 79 20 6f 6e 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 69 66 20 74 68 65 20 6c | .display.on.the.console.if.the.l |
d1c20 | 6f 63 61 6c 20 75 73 65 72 20 69 73 20 6c 6f 67 67 65 64 20 69 6e 2c 20 69 66 20 74 68 65 20 75 | ocal.user.is.logged.in,.if.the.u |
d1c40 | 73 65 72 20 69 73 20 6e 6f 74 20 6c 6f 67 67 65 64 20 69 6e 2c 20 6e 6f 20 6d 65 73 73 61 67 65 | ser.is.not.logged.in,.no.message |
d1c60 | 73 20 61 72 65 20 62 65 69 6e 67 20 64 69 73 70 6c 61 79 65 64 2e 20 46 6f 72 20 61 6e 20 65 78 | s.are.being.displayed..For.an.ex |
d1c80 | 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 | planation.on.:ref:`syslog_facili |
d1ca0 | 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f | ties`.keywords.and.:ref:`syslog_ |
d1cc0 | 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 | severity_level`.keywords.see.tab |
d1ce0 | 6c 65 73 20 62 65 6c 6f 77 2e 00 49 66 20 6d 61 6b 69 6e 67 20 75 73 65 20 6f 66 20 6d 75 6c 74 | les.below..If.making.use.of.mult |
d1d00 | 69 70 6c 65 20 74 75 6e 6e 65 6c 73 2c 20 4f 70 65 6e 56 50 4e 20 6d 75 73 74 20 68 61 76 65 20 | iple.tunnels,.OpenVPN.must.have. |
d1d20 | 61 20 77 61 79 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 62 65 74 77 65 65 6e 20 64 69 66 | a.way.to.distinguish.between.dif |
d1d40 | 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 20 61 73 69 64 65 20 66 72 6f 6d 20 74 68 65 20 70 72 | ferent.tunnels.aside.from.the.pr |
d1d60 | 65 2d 73 68 61 72 65 64 2d 6b 65 79 2e 20 54 68 69 73 20 69 73 20 65 69 74 68 65 72 20 62 79 20 | e-shared-key..This.is.either.by. |
d1d80 | 72 65 66 65 72 65 6e 63 69 6e 67 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 70 6f 72 74 20 6e | referencing.IP.address.or.port.n |
d1da0 | 75 6d 62 65 72 2e 20 4f 6e 65 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 64 69 63 61 74 65 | umber..One.option.is.to.dedicate |
d1dc0 | 20 61 20 70 75 62 6c 69 63 20 49 50 20 74 6f 20 65 61 63 68 20 74 75 6e 6e 65 6c 2e 20 41 6e 6f | .a.public.IP.to.each.tunnel..Ano |
d1de0 | 74 68 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f 20 64 65 64 69 63 61 74 65 20 61 20 70 6f 72 | ther.option.is.to.dedicate.a.por |
d1e00 | 74 20 6e 75 6d 62 65 72 20 74 6f 20 65 61 63 68 20 74 75 6e 6e 65 6c 20 28 65 2e 67 2e 20 31 31 | t.number.to.each.tunnel.(e.g..11 |
d1e20 | 39 35 2c 31 31 39 36 2c 31 31 39 37 2e 2e 2e 29 2e 00 49 66 20 6d 75 6c 74 69 2d 70 61 74 68 69 | 95,1196,1197...)..If.multi-pathi |
d1e40 | 6e 67 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 63 68 65 63 6b 20 77 68 65 74 68 65 | ng.is.enabled,.then.check.whethe |
d1e60 | 72 20 74 68 65 20 72 6f 75 74 65 73 20 6e 6f 74 20 79 65 74 20 64 69 73 74 69 6e 67 75 69 73 68 | r.the.routes.not.yet.distinguish |
d1e80 | 65 64 20 69 6e 20 70 72 65 66 65 72 65 6e 63 65 20 6d 61 79 20 62 65 20 63 6f 6e 73 69 64 65 72 | ed.in.preference.may.be.consider |
d1ea0 | 65 64 20 65 71 75 61 6c 2e 20 49 66 20 3a 63 66 67 63 6d 64 3a 60 62 67 70 20 62 65 73 74 70 61 | ed.equal..If.:cfgcmd:`bgp.bestpa |
d1ec0 | 74 68 20 61 73 2d 70 61 74 68 20 6d 75 6c 74 69 70 61 74 68 2d 72 65 6c 61 78 60 20 69 73 20 73 | th.as-path.multipath-relax`.is.s |
d1ee0 | 65 74 2c 20 61 6c 6c 20 73 75 63 68 20 72 6f 75 74 65 73 20 61 72 65 20 63 6f 6e 73 69 64 65 72 | et,.all.such.routes.are.consider |
d1f00 | 65 64 20 65 71 75 61 6c 2c 20 6f 74 68 65 72 77 69 73 65 20 72 6f 75 74 65 73 20 72 65 63 65 69 | ed.equal,.otherwise.routes.recei |
d1f20 | 76 65 64 20 76 69 61 20 69 42 47 50 20 77 69 74 68 20 69 64 65 6e 74 69 63 61 6c 20 41 53 5f 50 | ved.via.iBGP.with.identical.AS_P |
d1f40 | 41 54 48 73 20 6f 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 65 42 47 | ATHs.or.routes.received.from.eBG |
d1f60 | 50 20 6e 65 69 67 68 62 6f 75 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 41 53 20 61 72 65 20 | P.neighbours.in.the.same.AS.are. |
d1f80 | 63 6f 6e 73 69 64 65 72 65 64 20 65 71 75 61 6c 2e 00 49 66 20 6e 6f 20 63 6f 6e 6e 65 63 74 69 | considered.equal..If.no.connecti |
d1fa0 | 6f 6e 20 74 6f 20 61 6e 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 20 63 61 6e 20 62 | on.to.an.RPKI.cache.server.can.b |
d1fc0 | 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 66 74 65 72 20 61 20 70 72 65 2d 64 65 66 69 6e 65 | e.established.after.a.pre-define |
d1fe0 | 64 20 74 69 6d 65 6f 75 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 70 72 6f 63 65 | d.timeout,.the.router.will.proce |
d2000 | 73 73 20 72 6f 75 74 65 73 20 77 69 74 68 6f 75 74 20 70 72 65 66 69 78 20 6f 72 69 67 69 6e 20 | ss.routes.without.prefix.origin. |
d2020 | 76 61 6c 69 64 61 74 69 6f 6e 2e 20 49 74 20 73 74 69 6c 6c 20 77 69 6c 6c 20 74 72 79 20 74 6f | validation..It.still.will.try.to |
d2040 | 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 6e 20 52 50 | .establish.a.connection.to.an.RP |
d2060 | 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e | KI.cache.server.in.the.backgroun |
d2080 | 64 2e 00 49 66 20 6e 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 | d..If.no.destination.is.specifie |
d20a0 | 64 20 74 68 65 20 72 75 6c 65 20 77 69 6c 6c 20 6d 61 74 63 68 20 6f 6e 20 61 6e 79 20 64 65 73 | d.the.rule.will.match.on.any.des |
d20c0 | 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 2e 00 49 66 20 6e 6f | tination.address.and.port..If.no |
d20e0 | 20 69 70 20 70 72 65 66 69 78 20 6c 69 73 74 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 69 74 | .ip.prefix.list.is.specified,.it |
d2100 | 20 61 63 74 73 20 61 73 20 70 65 72 6d 69 74 2e 20 49 66 20 69 70 20 70 72 65 66 69 78 20 6c 69 | .acts.as.permit..If.ip.prefix.li |
d2120 | 73 74 20 69 73 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 6e 6f 20 6d 61 74 63 68 20 69 73 20 66 | st.is.defined,.and.no.match.is.f |
d2140 | 6f 75 6e 64 2c 20 64 65 66 61 75 6c 74 20 64 65 6e 79 20 69 73 20 61 70 70 6c 69 65 64 2e 00 49 | ound,.default.deny.is.applied..I |
d2160 | 66 20 6e 6f 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 64 | f.no.option.is.specified,.this.d |
d2180 | 65 66 61 75 6c 74 73 20 74 6f 20 60 61 6c 6c 60 2e 00 49 66 20 6e 6f 74 20 73 65 74 20 28 64 65 | efaults.to.`all`..If.not.set.(de |
d21a0 | 66 61 75 6c 74 29 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 68 61 76 65 20 6d 75 6c 74 69 70 | fault).allows.you.to.have.multip |
d21c0 | 6c 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 74 68 65 20 73 61 6d | le.network.interfaces.on.the.sam |
d21e0 | 65 20 73 75 62 6e 65 74 2c 20 61 6e 64 20 68 61 76 65 20 74 68 65 20 41 52 50 73 20 66 6f 72 20 | e.subnet,.and.have.the.ARPs.for. |
d2200 | 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 62 65 20 61 6e 73 77 65 72 65 64 20 62 61 73 65 64 | each.interface.be.answered.based |
d2220 | 20 6f 6e 20 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 74 68 65 20 6b 65 72 6e 65 6c 20 77 6f | .on.whether.or.not.the.kernel.wo |
d2240 | 75 6c 64 20 72 6f 75 74 65 20 61 20 70 61 63 6b 65 74 20 66 72 6f 6d 20 74 68 65 20 41 52 50 27 | uld.route.a.packet.from.the.ARP' |
d2260 | 64 20 49 50 20 6f 75 74 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 20 28 74 68 65 72 65 66 6f | d.IP.out.that.interface.(therefo |
d2280 | 72 65 20 79 6f 75 20 6d 75 73 74 20 75 73 65 20 73 6f 75 72 63 65 20 62 61 73 65 64 20 72 6f 75 | re.you.must.use.source.based.rou |
d22a0 | 74 69 6e 67 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 2e 00 49 66 20 6f 70 74 69 6f | ting.for.this.to.work)..If.optio |
d22c0 | 6e 61 6c 20 70 72 6f 66 69 6c 65 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 75 73 65 64 2c 20 73 | nal.profile.parameter.is.used,.s |
d22e0 | 65 6c 65 63 74 20 61 20 42 46 44 20 70 72 6f 66 69 6c 65 20 66 6f 72 20 74 68 65 20 42 46 44 20 | elect.a.BFD.profile.for.the.BFD. |
d2300 | 73 65 73 73 69 6f 6e 73 20 63 72 65 61 74 65 64 20 76 69 61 20 74 68 69 73 20 69 6e 74 65 72 66 | sessions.created.via.this.interf |
d2320 | 61 63 65 2e 00 49 66 20 73 65 74 20 74 68 65 20 6b 65 72 6e 65 6c 20 63 61 6e 20 72 65 73 70 6f | ace..If.set.the.kernel.can.respo |
d2340 | 6e 64 20 74 6f 20 61 72 70 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 61 64 64 72 65 73 73 65 | nd.to.arp.requests.with.addresse |
d2360 | 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 6d 61 | s.from.other.interfaces..This.ma |
d2380 | 79 20 73 65 65 6d 20 77 72 6f 6e 67 20 62 75 74 20 69 74 20 75 73 75 61 6c 6c 79 20 6d 61 6b 65 | y.seem.wrong.but.it.usually.make |
d23a0 | 73 20 73 65 6e 73 65 2c 20 62 65 63 61 75 73 65 20 69 74 20 69 6e 63 72 65 61 73 65 73 20 74 68 | s.sense,.because.it.increases.th |
d23c0 | 65 20 63 68 61 6e 63 65 20 6f 66 20 73 75 63 63 65 73 73 66 75 6c 20 63 6f 6d 6d 75 6e 69 63 61 | e.chance.of.successful.communica |
d23e0 | 74 69 6f 6e 2e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6f 77 6e 65 64 20 62 79 20 | tion..IP.addresses.are.owned.by. |
d2400 | 74 68 65 20 63 6f 6d 70 6c 65 74 65 20 68 6f 73 74 20 6f 6e 20 4c 69 6e 75 78 2c 20 6e 6f 74 20 | the.complete.host.on.Linux,.not. |
d2420 | 62 79 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4f 6e 6c 79 20 66 | by.particular.interfaces..Only.f |
d2440 | 6f 72 20 6d 6f 72 65 20 63 6f 6d 70 6c 65 78 20 73 65 74 75 70 73 20 6c 69 6b 65 20 6c 6f 61 64 | or.more.complex.setups.like.load |
d2460 | 2d 62 61 6c 61 6e 63 69 6e 67 2c 20 64 6f 65 73 20 74 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 | -balancing,.does.this.behaviour. |
d2480 | 63 61 75 73 65 20 70 72 6f 62 6c 65 6d 73 2e 00 49 66 20 73 65 74 2c 20 49 50 76 34 20 64 69 72 | cause.problems..If.set,.IPv4.dir |
d24a0 | 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 6c 6c 20 | ected.broadcast.forwarding.will. |
d24c0 | 62 65 20 63 6f 6d 70 6c 65 74 65 6c 79 20 64 69 73 61 62 6c 65 64 20 72 65 67 61 72 64 6c 65 73 | be.completely.disabled.regardles |
d24e0 | 73 20 6f 66 20 77 68 65 74 68 65 72 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 64 69 72 65 63 | s.of.whether.per-interface.direc |
d2500 | 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 69 73 20 65 6e 61 62 | ted.broadcast.forwarding.is.enab |
d2520 | 6c 65 64 20 6f 72 20 6e 6f 74 2e 00 49 66 20 73 75 66 66 69 78 20 69 73 20 6f 6d 69 74 74 65 64 | led.or.not..If.suffix.is.omitted |
d2540 | 2c 20 6d 69 6e 75 74 65 73 20 61 72 65 20 69 6d 70 6c 69 65 64 2e 00 49 66 20 74 68 65 20 3a 63 | ,.minutes.are.implied..If.the.:c |
d2560 | 66 67 63 6d 64 3a 60 6e 6f 2d 70 72 65 70 65 6e 64 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 | fgcmd:`no-prepend`.attribute.is. |
d2580 | 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6c 6f 63 | specified,.then.the.supplied.loc |
d25a0 | 61 6c 2d 61 73 20 69 73 20 6e 6f 74 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 72 65 | al-as.is.not.prepended.to.the.re |
d25c0 | 63 65 69 76 65 64 20 41 53 5f 50 41 54 48 2e 00 49 66 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 | ceived.AS_PATH..If.the.:cfgcmd:` |
d25e0 | 72 65 70 6c 61 63 65 2d 61 73 60 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 70 65 63 69 66 69 | replace-as`.attribute.is.specifi |
d2600 | 65 64 2c 20 74 68 65 6e 20 6f 6e 6c 79 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 6c 6f 63 61 6c | ed,.then.only.the.supplied.local |
d2620 | 2d 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 41 53 5f 50 41 54 48 20 | -as.is.prepended.to.the.AS_PATH. |
d2640 | 77 68 65 6e 20 74 72 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 2d 72 6f 75 74 65 20 75 70 | when.transmitting.local-route.up |
d2660 | 64 61 74 65 73 20 74 6f 20 74 68 69 73 20 70 65 65 72 2e 00 49 66 20 74 68 65 20 41 52 50 20 74 | dates.to.this.peer..If.the.ARP.t |
d2680 | 61 62 6c 65 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 49 50 20 61 64 64 | able.already.contains.the.IP.add |
d26a0 | 72 65 73 73 20 6f 66 20 74 68 65 20 67 72 61 74 75 69 74 6f 75 73 20 61 72 70 20 66 72 61 6d 65 | ress.of.the.gratuitous.arp.frame |
d26c0 | 2c 20 74 68 65 20 61 72 70 20 74 61 62 6c 65 20 77 69 6c 6c 20 62 65 20 75 70 64 61 74 65 64 20 | ,.the.arp.table.will.be.updated. |
d26e0 | 72 65 67 61 72 64 6c 65 73 73 20 69 66 20 74 68 69 73 20 73 65 74 74 69 6e 67 20 69 73 20 6f 6e | regardless.if.this.setting.is.on |
d2700 | 20 6f 72 20 6f 66 66 2e 00 49 66 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 | .or.off..If.the.AS-Path.for.the. |
d2720 | 72 6f 75 74 65 20 68 61 73 20 61 20 70 72 69 76 61 74 65 20 41 53 4e 20 62 65 74 77 65 65 6e 20 | route.has.a.private.ASN.between. |
d2740 | 70 75 62 6c 69 63 20 41 53 4e 73 2c 20 69 74 20 69 73 20 61 73 73 75 6d 65 64 20 74 68 61 74 20 | public.ASNs,.it.is.assumed.that. |
d2760 | 74 68 69 73 20 69 73 20 61 20 64 65 73 69 67 6e 20 63 68 6f 69 63 65 2c 20 61 6e 64 20 74 68 65 | this.is.a.design.choice,.and.the |
d2780 | 20 70 72 69 76 61 74 65 20 41 53 4e 20 69 73 20 6e 6f 74 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 | .private.ASN.is.not.removed..If. |
d27a0 | 74 68 65 20 41 53 2d 50 61 74 68 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 6f 6e | the.AS-Path.for.the.route.has.on |
d27c0 | 6c 79 20 70 72 69 76 61 74 65 20 41 53 4e 73 2c 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e | ly.private.ASNs,.the.private.ASN |
d27e0 | 73 20 61 72 65 20 72 65 6d 6f 76 65 64 2e 00 49 66 20 74 68 65 20 49 50 20 70 72 65 66 69 78 20 | s.are.removed..If.the.IP.prefix. |
d2800 | 6d 61 73 6b 20 69 73 20 70 72 65 73 65 6e 74 2c 20 69 74 20 64 69 72 65 63 74 73 20 6f 70 65 6e | mask.is.present,.it.directs.open |
d2820 | 6e 68 72 70 20 74 6f 20 75 73 65 20 74 68 69 73 20 70 65 65 72 20 61 73 20 61 20 6e 65 78 74 20 | nhrp.to.use.this.peer.as.a.next. |
d2840 | 68 6f 70 20 73 65 72 76 65 72 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 52 65 73 6f 6c 75 74 69 | hop.server.when.sending.Resoluti |
d2860 | 6f 6e 20 52 65 71 75 65 73 74 73 20 6d 61 74 63 68 69 6e 67 20 74 68 69 73 20 73 75 62 6e 65 74 | on.Requests.matching.this.subnet |
d2880 | 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 | ..If.the.RADIUS.server.sends.the |
d28a0 | 20 61 74 74 72 69 62 75 74 65 20 60 60 44 65 6c 65 67 61 74 65 64 2d 49 50 76 36 2d 50 72 65 66 | .attribute.``Delegated-IPv6-Pref |
d28c0 | 69 78 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 65 66 69 78 | ix-Pool``,.IPv6.delegation.pefix |
d28e0 | 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 | .will.be.allocated.from.a.predef |
d2900 | 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 64 65 6c 65 67 61 74 65 60 60 20 77 68 6f 73 | ined.IPv6.pool.``delegate``.whos |
d2920 | 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 | e.name.equals.the.attribute.valu |
d2940 | 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 | e..If.the.RADIUS.server.sends.th |
d2960 | 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 60 | e.attribute.``Framed-IP-Address` |
d2980 | 60 20 74 68 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 | `.then.this.IP.address.will.be.a |
d29a0 | 6c 6c 6f 63 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 6f | llocated.to.the.client.and.the.o |
d29c0 | 70 74 69 6f 6e 20 60 60 64 65 66 61 75 6c 74 2d 70 6f 6f 6c 60 60 20 77 69 74 68 69 6e 20 74 68 | ption.``default-pool``.within.th |
d29e0 | 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 69 73 20 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 | e.CLI.config.is.being.ignored..I |
d2a00 | 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 | f.the.RADIUS.server.sends.the.at |
d2a20 | 74 72 69 62 75 74 65 20 60 60 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 60 60 20 74 68 | tribute.``Framed-IP-Address``.th |
d2a40 | 65 6e 20 74 68 69 73 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 | en.this.IP.address.will.be.alloc |
d2a60 | 61 74 65 64 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 64 20 74 68 65 20 6f 70 74 69 6f | ated.to.the.client.and.the.optio |
d2a80 | 6e 20 69 70 2d 70 6f 6f 6c 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 20 | n.ip-pool.within.the.CLI.config. |
d2aa0 | 69 73 20 62 65 69 6e 67 20 69 67 6e 6f 72 65 64 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 | is.being.ignored..If.the.RADIUS. |
d2ac0 | 73 65 72 76 65 72 20 73 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 46 72 61 | server.sends.the.attribute.``Fra |
d2ae0 | 6d 65 64 2d 50 6f 6f 6c 60 60 2c 20 49 50 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 20 61 | med-Pool``,.IP.address.will.be.a |
d2b00 | 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 49 50 20 70 6f | llocated.from.a.predefined.IP.po |
d2b20 | 6f 6c 20 77 68 6f 73 65 20 6e 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 | ol.whose.name.equals.the.attribu |
d2b40 | 74 65 20 76 61 6c 75 65 2e 00 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 73 | te.value..If.the.RADIUS.server.s |
d2b60 | 65 6e 64 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 53 74 61 74 65 66 75 6c 2d 49 50 | ends.the.attribute.``Stateful-IP |
d2b80 | 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 2c 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | v6-Address-Pool``,.IPv6.address. |
d2ba0 | 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 63 61 74 65 64 20 66 72 6f 6d 20 61 20 70 72 65 64 65 66 69 | will.be.allocated.from.a.predefi |
d2bc0 | 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 60 60 70 72 65 66 69 78 60 60 20 77 68 6f 73 65 20 6e | ned.IPv6.pool.``prefix``.whose.n |
d2be0 | 61 6d 65 20 65 71 75 61 6c 73 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 76 61 6c 75 65 2e 00 | ame.equals.the.attribute.value.. |
d2c00 | 49 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 73 20 74 68 65 20 61 74 | If.the.RADIUS.server.uses.the.at |
d2c20 | 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d 49 64 60 60 2c 20 70 70 70 20 74 75 6e | tribute.``NAS-Port-Id``,.ppp.tun |
d2c40 | 6e 65 6c 73 20 77 69 6c 6c 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 49 66 20 74 68 65 20 61 76 65 | nels.will.be.renamed..If.the.ave |
d2c60 | 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 | rage.queue.size.is.lower.than.th |
d2c80 | 65 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 61 6e 20 61 72 72 69 76 69 6e 67 | e.**min-threshold**,.an.arriving |
d2ca0 | 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 71 75 | .packet.will.be.placed.in.the.qu |
d2cc0 | 65 75 65 2e 00 49 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 71 75 65 75 65 20 73 69 7a 65 20 69 | eue..If.the.current.queue.size.i |
d2ce0 | 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 2a 2a 71 75 65 75 65 2d 6c 69 6d 69 74 2a 2a 2c 20 74 | s.larger.than.**queue-limit**,.t |
d2d00 | 68 65 6e 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 70 65 64 2e 20 54 68 65 | hen.packets.will.be.dropped..The |
d2d20 | 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 64 65 70 65 6e 64 73 20 6f 6e 20 69 | .average.queue.size.depends.on.i |
d2d40 | 74 73 20 66 6f 72 6d 65 72 20 61 76 65 72 61 67 65 20 73 69 7a 65 20 61 6e 64 20 69 74 73 20 63 | ts.former.average.size.and.its.c |
d2d60 | 75 72 72 65 6e 74 20 6f 6e 65 2e 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 | urrent.one..If.the.interface.whe |
d2d80 | 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 20 70 61 | re.the.packet.was.received.is.pa |
d2da0 | 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 73 20 70 72 | rt.of.a.bridge,.then.packetis.pr |
d2dc0 | 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c | ocessed.at.the.**Bridge.Layer**, |
d2de0 | 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 61 73 69 63 20 73 65 74 75 70 20 66 6f | .which.contains.a.basic.setup.fo |
d2e00 | 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a 00 49 66 20 74 68 65 20 69 6e 74 65 72 | r.bridge.filtering:.If.the.inter |
d2e20 | 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 | face.where.the.packet.was.receiv |
d2e40 | 65 64 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 62 72 69 64 67 65 2c 20 74 68 65 6e 20 74 68 65 | ed.is.part.of.a.bridge,.then.the |
d2e60 | 20 70 61 63 6b 65 74 20 69 73 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 2a 2a 42 72 | .packet.is.processed.at.the.**Br |
d2e80 | 69 64 67 65 20 4c 61 79 65 72 2a 2a 2c 20 77 68 69 63 68 20 63 6f 6e 74 61 69 6e 73 20 61 20 62 | idge.Layer**,.which.contains.a.b |
d2ea0 | 61 73 69 63 20 73 65 74 75 70 20 66 6f 72 20 62 72 69 64 67 65 20 66 69 6c 74 65 72 69 6e 67 3a | asic.setup.for.bridge.filtering: |
d2ec0 | 00 49 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 65 20 70 61 63 6b | .If.the.interface.where.the.pack |
d2ee0 | 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 20 69 73 6e 27 74 20 70 61 72 74 20 6f 66 20 61 20 | et.was.received.isn't.part.of.a. |
d2f00 | 62 72 69 64 67 65 2c 20 74 68 65 6e 20 70 61 63 6b 65 74 69 73 20 70 72 6f 63 65 73 73 65 64 20 | bridge,.then.packetis.processed. |
d2f20 | 61 74 20 74 68 65 20 2a 2a 49 50 20 4c 61 79 65 72 2a 2a 3a 00 49 66 20 74 68 65 20 70 72 6f 74 | at.the.**IP.Layer**:.If.the.prot |
d2f40 | 6f 63 6f 6c 20 69 73 20 49 50 76 36 20 74 68 65 6e 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 | ocol.is.IPv6.then.the.source.and |
d2f60 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 66 69 72 73 74 | .destination.addresses.are.first |
d2f80 | 20 68 61 73 68 65 64 20 75 73 69 6e 67 20 69 70 76 36 5f 61 64 64 72 5f 68 61 73 68 2e 00 49 66 | .hashed.using.ipv6_addr_hash..If |
d2fa0 | 20 74 68 65 20 73 74 61 74 69 63 61 6c 6c 79 20 6d 61 70 70 65 64 20 70 65 65 72 20 69 73 20 72 | .the.statically.mapped.peer.is.r |
d2fc0 | 75 6e 6e 69 6e 67 20 43 69 73 63 6f 20 49 4f 53 2c 20 73 70 65 63 69 66 79 20 74 68 65 20 63 69 | unning.Cisco.IOS,.specify.the.ci |
d2fe0 | 73 63 6f 20 6b 65 79 77 6f 72 64 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 6f 20 66 69 78 20 73 | sco.keyword..It.is.used.to.fix.s |
d3000 | 74 61 74 69 63 61 6c 6c 79 20 74 68 65 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 | tatically.the.Registration.Reque |
d3020 | 73 74 20 49 44 20 73 6f 20 74 68 61 74 20 61 20 6d 61 74 63 68 69 6e 67 20 50 75 72 67 65 20 52 | st.ID.so.that.a.matching.Purge.R |
d3040 | 65 71 75 65 73 74 20 63 61 6e 20 62 65 20 73 65 6e 74 20 69 66 20 4e 42 4d 41 20 61 64 64 72 65 | equest.can.be.sent.if.NBMA.addre |
d3060 | 73 73 20 68 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 69 73 20 69 73 20 74 6f 20 77 6f 72 6b 20 | ss.has.changed..This.is.to.work. |
d3080 | 61 72 6f 75 6e 64 20 62 72 6f 6b 65 6e 20 49 4f 53 20 77 68 69 63 68 20 72 65 71 75 69 72 65 73 | around.broken.IOS.which.requires |
d30a0 | 20 50 75 72 67 65 20 52 65 71 75 65 73 74 20 49 44 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 6f | .Purge.Request.ID.to.match.the.o |
d30c0 | 72 69 67 69 6e 61 6c 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 20 49 44 2e | riginal.Registration.Request.ID. |
d30e0 | 00 49 66 20 74 68 65 20 73 79 73 74 65 6d 20 64 65 74 65 63 74 73 20 61 6e 20 75 6e 63 6f 6e 66 | .If.the.system.detects.an.unconf |
d3100 | 69 67 75 72 65 64 20 77 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 2c 20 69 74 20 77 69 6c 6c 20 | igured.wireless.device,.it.will. |
d3120 | 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 64 64 65 64 20 74 68 65 20 63 6f 6e 66 69 | be.automatically.added.the.confi |
d3140 | 67 75 72 61 74 69 6f 6e 20 74 72 65 65 2c 20 73 70 65 63 69 66 79 69 6e 67 20 61 6e 79 20 64 65 | guration.tree,.specifying.any.de |
d3160 | 74 65 63 74 65 64 20 73 65 74 74 69 6e 67 73 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 69 74 | tected.settings.(for.example,.it |
d3180 | 73 20 4d 41 43 20 61 64 64 72 65 73 73 29 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f | s.MAC.address).and.configured.to |
d31a0 | 20 72 75 6e 20 69 6e 20 6d 6f 6e 69 74 6f 72 20 6d 6f 64 65 2e 00 49 66 20 74 68 65 20 74 61 62 | .run.in.monitor.mode..If.the.tab |
d31c0 | 6c 65 20 69 73 20 65 6d 70 74 79 20 61 6e 64 20 79 6f 75 20 68 61 76 65 20 61 20 77 61 72 6e 69 | le.is.empty.and.you.have.a.warni |
d31e0 | 6e 67 20 6d 65 73 73 61 67 65 2c 20 69 74 20 6d 65 61 6e 73 20 63 6f 6e 6e 74 72 61 63 6b 20 69 | ng.message,.it.means.conntrack.i |
d3200 | 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2e 20 54 6f 20 65 6e 61 62 6c 65 20 63 6f 6e 6e 74 72 61 | s.not.enabled..To.enable.conntra |
d3220 | 63 6b 2c 20 6a 75 73 74 20 63 72 65 61 74 65 20 61 20 4e 41 54 20 6f 72 20 61 20 66 69 72 65 77 | ck,.just.create.a.NAT.or.a.firew |
d3240 | 61 6c 6c 20 72 75 6c 65 2e 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 | all.rule..:cfgcmd:`set.firewall. |
d3260 | 73 74 61 74 65 2d 70 6f 6c 69 63 79 20 65 73 74 61 62 6c 69 73 68 65 64 20 61 63 74 69 6f 6e 20 | state-policy.established.action. |
d3280 | 61 63 63 65 70 74 60 00 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 66 72 65 65 20 61 64 64 | accept`.If.there.are.no.free.add |
d32a0 | 72 65 73 73 65 73 20 62 75 74 20 74 68 65 72 65 20 61 72 65 20 61 62 61 6e 64 6f 6e 65 64 20 49 | resses.but.there.are.abandoned.I |
d32c0 | 50 20 61 64 64 72 65 73 73 65 73 2c 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 77 69 6c | P.addresses,.the.DHCP.server.wil |
d32e0 | 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 63 6c 61 69 6d 20 61 6e 20 61 62 61 6e 64 6f 6e 65 | l.attempt.to.reclaim.an.abandone |
d3300 | 64 20 49 50 20 61 64 64 72 65 73 73 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 76 | d.IP.address.regardless.of.the.v |
d3320 | 61 6c 75 65 20 6f 66 20 61 62 61 6e 64 6f 6e 2d 6c 65 61 73 65 2d 74 69 6d 65 2e 00 49 66 20 74 | alue.of.abandon-lease-time..If.t |
d3340 | 68 65 72 65 20 69 73 20 53 4e 41 54 20 72 75 6c 65 73 20 6f 6e 20 65 74 68 31 2c 20 6e 65 65 64 | here.is.SNAT.rules.on.eth1,.need |
d3360 | 20 74 6f 20 61 64 64 20 65 78 63 6c 75 64 65 20 72 75 6c 65 00 49 66 20 74 68 69 73 20 63 6f 6d | .to.add.exclude.rule.If.this.com |
d3380 | 6d 61 6e 64 20 69 73 20 69 6e 76 6f 6b 65 64 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 65 20 6d | mand.is.invoked.from.configure.m |
d33a0 | 6f 64 65 20 77 69 74 68 20 74 68 65 20 60 60 72 75 6e 60 60 20 70 72 65 66 69 78 20 74 68 65 20 | ode.with.the.``run``.prefix.the. |
d33c0 | 6b 65 79 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 73 74 61 6c 6c 65 64 20 74 | key.is.automatically.installed.t |
d33e0 | 6f 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 69 6e 74 65 72 66 61 63 65 3a 00 49 66 20 | o.the.appropriate.interface:.If. |
d3400 | 74 68 69 73 20 69 73 20 73 65 74 20 74 68 65 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 69 6c 6c | this.is.set.the.relay.agent.will |
d3420 | 20 69 6e 73 65 72 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 49 44 2e 20 54 68 69 73 20 6f | .insert.the.interface.ID..This.o |
d3440 | 70 74 69 6f 6e 20 69 73 20 73 65 74 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 66 20 6d 6f | ption.is.set.automatically.if.mo |
d3460 | 72 65 20 74 68 61 6e 20 6f 6e 65 20 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 | re.than.one.listening.interfaces |
d3480 | 20 61 72 65 20 69 6e 20 75 73 65 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 65 | .are.in.use..If.this.option.is.e |
d34a0 | 6e 61 62 6c 65 64 2c 20 74 68 65 6e 20 74 68 65 20 61 6c 72 65 61 64 79 2d 73 65 6c 65 63 74 65 | nabled,.then.the.already-selecte |
d34c0 | 64 20 63 68 65 63 6b 2c 20 77 68 65 72 65 20 61 6c 72 65 61 64 79 20 73 65 6c 65 63 74 65 64 20 | d.check,.where.already.selected. |
d34e0 | 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 20 70 72 65 66 65 72 72 65 64 2c 20 69 73 20 73 6b | eBGP.routes.are.preferred,.is.sk |
d3500 | 69 70 70 65 64 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 73 70 65 63 69 66 69 | ipped..If.this.option.is.specifi |
d3520 | 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 30 2c 20 74 68 65 6e 20 74 | ed.and.is.greater.than.0,.then.t |
d3540 | 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 6e 64 20 4c 43 50 20 70 69 6e 67 | he.PPP.module.will.send.LCP.ping |
d3560 | 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 65 76 65 72 79 20 60 3c 69 6e | s.of.the.echo.request.every.`<in |
d3580 | 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e | terval>`.seconds..If.this.option |
d35a0 | 20 69 73 20 73 70 65 63 69 66 69 65 64 20 61 6e 64 20 69 73 20 67 72 65 61 74 65 72 20 74 68 61 | .is.specified.and.is.greater.tha |
d35c0 | 6e 20 30 2c 20 74 68 65 6e 20 74 68 65 20 50 50 50 20 6d 6f 64 75 6c 65 20 77 69 6c 6c 20 73 65 | n.0,.then.the.PPP.module.will.se |
d35e0 | 6e 64 20 4c 43 50 20 70 69 6e 67 73 20 6f 66 20 74 68 65 20 65 63 68 6f 20 72 65 71 75 65 73 74 | nd.LCP.pings.of.the.echo.request |
d3600 | 20 65 76 65 72 79 20 60 3c 69 6e 74 65 72 76 61 6c 3e 60 20 73 65 63 6f 6e 64 73 2e 20 44 65 66 | .every.`<interval>`.seconds..Def |
d3620 | 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 33 30 2a 2a 2e 00 49 66 20 74 68 69 73 20 6f 70 | ault.value.is.**30**..If.this.op |
d3640 | 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c 20 69 6e 63 6f 6d 69 6e | tion.is.unset.(default),.incomin |
d3660 | 67 20 49 50 20 64 69 72 65 63 74 65 64 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 20 | g.IP.directed.broadcast.packets. |
d3680 | 77 69 6c 6c 20 6e 6f 74 20 62 65 20 66 6f 72 77 61 72 64 65 64 2e 00 49 66 20 74 68 69 73 20 6f | will.not.be.forwarded..If.this.o |
d36a0 | 70 74 69 6f 6e 20 69 73 20 75 6e 73 65 74 20 28 64 65 66 61 75 6c 74 29 2c 20 72 65 70 6c 79 20 | ption.is.unset.(default),.reply. |
d36c0 | 66 6f 72 20 61 6e 79 20 6c 6f 63 61 6c 20 74 61 72 67 65 74 20 49 50 20 61 64 64 72 65 73 73 2c | for.any.local.target.IP.address, |
d36e0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 | .configured.on.any.interface..If |
d3700 | 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e 6f 74 20 73 65 74 20 6f 72 20 30 2c | .this.parameter.is.not.set.or.0, |
d3720 | 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e 64 20 6c 69 6e 6b 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 74 | .an.on-demand.link.will.not.be.t |
d3740 | 61 6b 65 6e 20 64 6f 77 6e 20 77 68 65 6e 20 69 74 20 69 73 20 69 64 6c 65 20 61 6e 64 20 61 66 | aken.down.when.it.is.idle.and.af |
d3760 | 74 65 72 20 74 68 65 20 69 6e 69 74 69 61 6c 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 20 6f 66 | ter.the.initial.establishment.of |
d3780 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 74 20 77 69 6c 6c 20 73 74 61 79 20 75 70 | .the.connection..It.will.stay.up |
d37a0 | 20 66 6f 72 65 76 65 72 2e 00 49 66 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 6e | .forever..If.this.parameter.is.n |
d37c0 | 6f 74 20 73 65 74 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 68 6f 6c 64 6f 66 66 20 74 69 6d 65 | ot.set,.the.default.holdoff.time |
d37e0 | 20 69 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 | .is.30.seconds..If.unset,.incomi |
d3800 | 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 | ng.connections.to.the.RADIUS.ser |
d3820 | 76 65 72 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 | ver.will.use.the.nearest.interfa |
d3840 | 63 65 20 61 64 64 72 65 73 73 20 70 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 | ce.address.pointing.towards.the. |
d3860 | 73 65 72 76 65 72 20 2d 20 6d 61 6b 69 6e 67 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f | server.-.making.it.error.prone.o |
d3880 | 6e 20 65 2e 67 2e 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b | n.e.g..OSPF.networks.when.a.link |
d38a0 | 20 66 61 69 6c 73 20 61 6e 64 20 61 20 62 61 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b | .fails.and.a.backup.route.is.tak |
d38c0 | 65 6e 2e 00 49 66 20 75 6e 73 65 74 2c 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f | en..If.unset,.incoming.connectio |
d38e0 | 6e 73 20 74 6f 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 20 77 69 6c 6c 20 75 73 65 | ns.to.the.TACACS.server.will.use |
d3900 | 20 74 68 65 20 6e 65 61 72 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 20 70 | .the.nearest.interface.address.p |
d3920 | 6f 69 6e 74 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 20 73 65 72 76 65 72 20 2d 20 6d 61 6b | ointing.towards.the.server.-.mak |
d3940 | 69 6e 67 20 69 74 20 65 72 72 6f 72 20 70 72 6f 6e 65 20 6f 6e 20 65 2e 67 2e 20 4f 53 50 46 20 | ing.it.error.prone.on.e.g..OSPF. |
d3960 | 6e 65 74 77 6f 72 6b 73 20 77 68 65 6e 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 20 61 6e 64 20 61 | networks.when.a.link.fails.and.a |
d3980 | 20 62 61 63 6b 75 70 20 72 6f 75 74 65 20 69 73 20 74 61 6b 65 6e 2e 00 49 66 20 79 6f 75 20 61 | .backup.route.is.taken..If.you.a |
d39a0 | 70 70 6c 79 20 61 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 61 6e 20 69 6e 64 69 76 69 64 75 61 | pply.a.parameter.to.an.individua |
d39c0 | 6c 20 6e 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 79 6f 75 20 6f 76 65 72 72 | l.neighbor.IP.address,.you.overr |
d39e0 | 69 64 65 20 74 68 65 20 61 63 74 69 6f 6e 20 64 65 66 69 6e 65 64 20 66 6f 72 20 61 20 70 65 65 | ide.the.action.defined.for.a.pee |
d3a00 | 72 20 67 72 6f 75 70 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 61 74 20 49 50 20 61 64 | r.group.that.includes.that.IP.ad |
d3a20 | 64 72 65 73 73 2e 00 49 66 20 79 6f 75 20 61 72 65 20 61 20 68 61 63 6b 65 72 20 6f 72 20 77 61 | dress..If.you.are.a.hacker.or.wa |
d3a40 | 6e 74 20 74 6f 20 74 72 79 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 77 65 20 73 75 70 70 6f 72 74 | nt.to.try.on.your.own.we.support |
d3a60 | 20 70 61 73 73 69 6e 67 20 72 61 77 20 4f 70 65 6e 56 50 4e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 | .passing.raw.OpenVPN.options.to. |
d3a80 | 4f 70 65 6e 56 50 4e 2e 00 49 66 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 | OpenVPN..If.you.are.configuring. |
d3aa0 | 61 20 56 52 46 20 66 6f 72 20 6d 61 6e 61 67 65 6d 65 6e 74 20 70 75 72 70 6f 73 65 73 2c 20 74 | a.VRF.for.management.purposes,.t |
d3ac0 | 68 65 72 65 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 6e 6f 20 77 61 79 20 74 6f 20 66 6f 72 63 | here.is.currently.no.way.to.forc |
d3ae0 | 65 20 73 79 73 74 65 6d 20 44 4e 53 20 74 72 61 66 66 69 63 20 76 69 61 20 61 20 73 70 65 63 69 | e.system.DNS.traffic.via.a.speci |
d3b00 | 66 69 63 20 56 52 46 2e 00 49 66 20 79 6f 75 20 61 72 65 20 6e 65 77 20 74 6f 20 74 68 65 73 65 | fic.VRF..If.you.are.new.to.these |
d3b20 | 20 72 6f 75 74 69 6e 67 20 73 65 63 75 72 69 74 79 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 | .routing.security.technologies.t |
d3b40 | 68 65 6e 20 74 68 65 72 65 20 69 73 20 61 6e 20 60 65 78 63 65 6c 6c 65 6e 74 20 67 75 69 64 65 | hen.there.is.an.`excellent.guide |
d3b60 | 20 74 6f 20 52 50 4b 49 60 5f 20 62 79 20 4e 4c 6e 65 74 20 4c 61 62 73 20 77 68 69 63 68 20 77 | .to.RPKI`_.by.NLnet.Labs.which.w |
d3b80 | 69 6c 6c 20 67 65 74 20 79 6f 75 20 75 70 20 74 6f 20 73 70 65 65 64 20 76 65 72 79 20 71 75 69 | ill.get.you.up.to.speed.very.qui |
d3ba0 | 63 6b 6c 79 2e 20 54 68 65 69 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 65 78 70 6c 61 69 | ckly..Their.documentation.explai |
d3bc0 | 6e 73 20 65 76 65 72 79 74 68 69 6e 67 20 66 72 6f 6d 20 77 68 61 74 20 52 50 4b 49 20 69 73 20 | ns.everything.from.what.RPKI.is. |
d3be0 | 74 6f 20 64 65 70 6c 6f 79 69 6e 67 20 69 74 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 2e 20 49 | to.deploying.it.in.production..I |
d3c00 | 74 20 61 6c 73 6f 20 68 61 73 20 73 6f 6d 65 20 60 68 65 6c 70 20 61 6e 64 20 6f 70 65 72 61 74 | t.also.has.some.`help.and.operat |
d3c20 | 69 6f 6e 61 6c 20 67 75 69 64 61 6e 63 65 60 5f 20 69 6e 63 6c 75 64 69 6e 67 20 22 57 68 61 74 | ional.guidance`_.including."What |
d3c40 | 20 63 61 6e 20 49 20 64 6f 20 61 62 6f 75 74 20 6d 79 20 72 6f 75 74 65 20 68 61 76 69 6e 67 20 | .can.I.do.about.my.route.having. |
d3c60 | 61 6e 20 49 6e 76 61 6c 69 64 20 73 74 61 74 65 3f 22 00 49 66 20 79 6f 75 20 61 72 65 20 72 65 | an.Invalid.state?".If.you.are.re |
d3c80 | 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 | sponsible.for.the.global.address |
d3ca0 | 65 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 2c 20 70 6c 65 | es.assigned.to.your.network,.ple |
d3cc0 | 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 70 72 65 66 69 78 65 73 | ase.make.sure.that.your.prefixes |
d3ce0 | 20 68 61 76 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 | .have.ROAs.associated.with.them. |
d3d00 | 74 6f 20 61 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 66 6f 75 6e 64 60 20 62 79 20 52 50 4b | to.avoid.being.`notfound`.by.RPK |
d3d20 | 49 2e 20 46 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 69 73 20 77 69 6c 6c 20 69 6e 76 6f 6c | I..For.most.ASNs.this.will.invol |
d3d40 | 76 65 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 79 6f 75 72 20 3a 61 62 62 | ve.publishing.ROAs.via.your.:abb |
d3d60 | 72 3a 60 52 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e 74 65 72 6e 65 74 20 52 65 67 69 73 74 | r:`RIR.(Regional.Internet.Regist |
d3d80 | 72 79 29 60 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e 49 43 2c 20 41 52 49 4e 2c 20 4c 41 43 | ry)`.(RIPE.NCC,.APNIC,.ARIN,.LAC |
d3da0 | 4e 49 43 20 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e 64 20 69 73 20 73 6f 6d 65 74 68 69 6e | NIC.or.AFRINIC),.and.is.somethin |
d3dc0 | 67 20 79 6f 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 64 20 74 6f 20 64 6f 20 77 68 65 6e 65 | g.you.are.encouraged.to.do.whene |
d3de0 | 76 65 72 20 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 61 64 64 72 65 73 73 | ver.you.plan.to.announce.address |
d3e00 | 65 73 20 69 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 20 79 6f 75 20 61 72 65 20 72 65 73 70 | es.into.the.DFZ..If.you.are.resp |
d3e20 | 6f 6e 73 69 62 6c 65 20 66 6f 72 20 74 68 65 20 67 6c 6f 62 61 6c 20 61 64 64 72 65 73 73 65 73 | onsible.for.the.global.addresses |
d3e40 | 20 61 73 73 69 67 6e 65 64 20 74 6f 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 2c 20 70 6c 65 61 73 | .assigned.to.your.network,.pleas |
d3e60 | 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 61 74 20 79 6f 75 72 20 70 72 65 66 69 78 65 73 20 68 | e.make.sure.that.your.prefixes.h |
d3e80 | 61 76 65 20 52 4f 41 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 6d 20 74 6f | ave.ROAs.associated.with.them.to |
d3ea0 | 20 61 76 6f 69 64 20 62 65 69 6e 67 20 60 6e 6f 74 66 6f 75 6e 64 60 20 62 79 20 52 50 4b 49 2e | .avoid.being.`notfound`.by.RPKI. |
d3ec0 | 20 46 6f 72 20 6d 6f 73 74 20 41 53 4e 73 20 74 68 69 73 20 77 69 6c 6c 20 69 6e 76 6f 6c 76 65 | .For.most.ASNs.this.will.involve |
d3ee0 | 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 79 6f 75 72 20 3a 61 62 62 72 3a | .publishing.ROAs.via.your.:abbr: |
d3f00 | 60 52 49 52 20 28 52 65 67 69 6f 6e 61 6c 20 49 6e 74 65 72 6e 65 74 20 52 65 67 69 73 74 72 79 | `RIR.(Regional.Internet.Registry |
d3f20 | 29 60 20 28 52 49 50 45 20 4e 43 43 2c 20 41 50 4e 49 43 2c 20 41 52 49 4e 2c 20 4c 41 43 4e 49 | )`.(RIPE.NCC,.APNIC,.ARIN,.LACNI |
d3f40 | 43 2c 20 6f 72 20 41 46 52 49 4e 49 43 29 2c 20 61 6e 64 20 69 73 20 73 6f 6d 65 74 68 69 6e 67 | C,.or.AFRINIC),.and.is.something |
d3f60 | 20 79 6f 75 20 61 72 65 20 65 6e 63 6f 75 72 61 67 65 64 20 74 6f 20 64 6f 20 77 68 65 6e 65 76 | .you.are.encouraged.to.do.whenev |
d3f80 | 65 72 20 79 6f 75 20 70 6c 61 6e 20 74 6f 20 61 6e 6e 6f 75 6e 63 65 20 61 64 64 72 65 73 73 65 | er.you.plan.to.announce.addresse |
d3fa0 | 73 20 69 6e 74 6f 20 74 68 65 20 44 46 5a 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 | s.into.the.DFZ..If.you.are.using |
d3fc0 | 20 46 51 2d 43 6f 44 65 6c 20 65 6d 62 65 64 64 65 64 20 69 6e 74 6f 20 53 68 61 70 65 72 5f 20 | .FQ-CoDel.embedded.into.Shaper_. |
d3fe0 | 61 6e 64 20 79 6f 75 20 68 61 76 65 20 6c 61 72 67 65 20 72 61 74 65 73 20 28 31 30 30 4d 62 69 | and.you.have.large.rates.(100Mbi |
d4000 | 74 20 61 6e 64 20 61 62 6f 76 65 29 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e 73 69 64 65 72 20 69 | t.and.above),.you.may.consider.i |
d4020 | 6e 63 72 65 61 73 69 6e 67 20 60 71 75 61 6e 74 75 6d 60 20 74 6f 20 38 30 30 30 20 6f 72 20 68 | ncreasing.`quantum`.to.8000.or.h |
d4040 | 69 67 68 65 72 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 63 68 65 64 75 6c 65 72 20 73 61 76 65 | igher.so.that.the.scheduler.save |
d4060 | 73 20 43 50 55 2e 00 49 66 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 4f 53 50 46 20 61 73 20 | s.CPU..If.you.are.using.OSPF.as. |
d4080 | 49 47 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c 6f 73 65 73 74 20 69 6e 74 65 72 66 61 63 | IGP,.always.the.closest.interfac |
d40a0 | 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 | e.connected.to.the.RADIUS.server |
d40c0 | 20 69 73 20 75 73 65 64 2e 20 57 69 74 68 20 56 79 4f 53 20 31 2e 32 20 79 6f 75 20 63 61 6e 20 | .is.used..With.VyOS.1.2.you.can. |
d40e0 | 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 20 72 65 71 75 65 73 74 | bind.all.outgoing.RADIUS.request |
d4100 | 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 65 2e 67 2e 20 74 68 65 | s.to.a.single.source.IP.e.g..the |
d4120 | 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 61 72 65 20 | .loopback.interface..If.you.are. |
d4140 | 75 73 69 6e 67 20 4f 53 50 46 20 61 73 20 49 47 50 2c 20 61 6c 77 61 79 73 20 74 68 65 20 63 6c | using.OSPF.as.IGP,.always.the.cl |
d4160 | 6f 73 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 | osest.interface.connected.to.the |
d4180 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 73 20 75 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 | .RADIUS.server.is.used..You.can. |
d41a0 | 62 69 6e 64 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 52 41 44 49 55 53 20 72 65 71 75 65 73 74 | bind.all.outgoing.RADIUS.request |
d41c0 | 73 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 73 6f 75 72 63 65 20 49 50 20 65 2e 67 2e 20 74 68 65 | s.to.a.single.source.IP.e.g..the |
d41e0 | 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 63 68 61 6e | .loopback.interface..If.you.chan |
d4200 | 67 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 68 61 | ge.the.default.encryption.and.ha |
d4220 | 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 2c 20 62 65 20 73 75 72 65 20 74 68 61 74 20 74 | shing.algorithms,.be.sure.that.t |
d4240 | 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 65 6e 64 73 20 68 61 76 65 20 6d 61 | he.local.and.remote.ends.have.ma |
d4260 | 74 63 68 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 2c 20 6f 74 68 65 72 77 69 73 65 | tching.configurations,.otherwise |
d4280 | 20 74 68 65 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 6e 6f 74 20 63 6f 6d 65 20 75 70 2e 00 49 66 | .the.tunnel.will.not.come.up..If |
d42a0 | 20 79 6f 75 20 63 68 6f 6f 73 65 20 61 6e 79 20 61 73 20 74 68 65 20 6f 70 74 69 6f 6e 20 74 68 | .you.choose.any.as.the.option.th |
d42c0 | 61 74 20 77 69 6c 6c 20 63 61 75 73 65 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 74 68 61 74 | at.will.cause.all.protocols.that |
d42e0 | 20 61 72 65 20 73 65 6e 64 69 6e 67 20 72 6f 75 74 65 73 20 74 6f 20 7a 65 62 72 61 2e 00 49 66 | .are.sending.routes.to.zebra..If |
d4300 | 20 79 6f 75 20 63 6f 6e 66 69 67 75 72 65 20 61 20 63 6c 61 73 73 20 66 6f 72 20 2a 2a 56 6f 49 | .you.configure.a.class.for.**VoI |
d4320 | 50 20 74 72 61 66 66 69 63 2a 2a 2c 20 64 6f 6e 27 74 20 67 69 76 65 20 69 74 20 61 6e 79 20 2a | P.traffic**,.don't.give.it.any.* |
d4340 | 63 65 69 6c 69 6e 67 2a 2c 20 6f 74 68 65 72 77 69 73 65 20 6e 65 77 20 56 6f 49 50 20 63 61 6c | ceiling*,.otherwise.new.VoIP.cal |
d4360 | 6c 73 20 63 6f 75 6c 64 20 73 74 61 72 74 20 77 68 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 | ls.could.start.when.the.link.is. |
d4380 | 61 76 61 69 6c 61 62 6c 65 20 61 6e 64 20 67 65 74 20 73 75 64 64 65 6e 6c 79 20 64 72 6f 70 70 | available.and.get.suddenly.dropp |
d43a0 | 65 64 20 77 68 65 6e 20 6f 74 68 65 72 20 63 6c 61 73 73 65 73 20 73 74 61 72 74 20 75 73 69 6e | ed.when.other.classes.start.usin |
d43c0 | 67 20 74 68 65 69 72 20 61 73 73 69 67 6e 65 64 20 2a 62 61 6e 64 77 69 64 74 68 2a 20 73 68 61 | g.their.assigned.*bandwidth*.sha |
d43e0 | 72 65 2e 00 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 74 68 69 73 2c 20 79 6f 75 20 77 69 6c 6c | re..If.you.enable.this,.you.will |
d4400 | 20 70 72 6f 62 61 62 6c 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 64 69 76 65 72 73 69 74 79 2d | .probably.want.to.set.diversity- |
d4420 | 66 61 63 74 6f 72 20 61 6e 64 20 63 68 61 6e 6e 65 6c 20 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 | factor.and.channel.below..If.you |
d4440 | 20 65 6e 74 65 72 20 61 20 76 61 6c 75 65 20 73 6d 61 6c 6c 65 72 20 74 68 61 6e 20 36 30 20 73 | .enter.a.value.smaller.than.60.s |
d4460 | 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 73 20 63 61 6e 20 61 6e | econds.be.aware.that.this.can.an |
d4480 | 64 20 77 69 6c 6c 20 61 66 66 65 63 74 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 61 74 20 73 63 61 | d.will.affect.convergence.at.sca |
d44a0 | 6c 65 2e 00 49 66 20 79 6f 75 20 66 65 65 6c 20 62 65 74 74 65 72 20 66 6f 72 77 61 72 64 69 6e | le..If.you.feel.better.forwardin |
d44c0 | 67 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 65 73 74 73 20 74 6f | g.all.authentication.requests.to |
d44e0 | 20 79 6f 75 72 20 65 6e 74 65 72 70 72 69 73 65 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2c | .your.enterprises.RADIUS.server, |
d4500 | 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 62 65 6c 6f 77 2e 00 49 66 20 79 6f 75 20 | .use.the.commands.below..If.you. |
d4520 | 68 61 70 70 65 6e 20 74 6f 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 76 69 72 74 75 61 6c 20 | happen.to.run.this.in.a.virtual. |
d4540 | 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 6c 69 6b 65 20 62 79 20 45 56 45 2d 4e 47 20 79 6f 75 20 6e | environment.like.by.EVE-NG.you.n |
d4560 | 65 65 64 20 74 6f 20 65 6e 73 75 72 65 20 79 6f 75 72 20 56 79 4f 53 20 4e 49 43 20 69 73 20 73 | eed.to.ensure.your.VyOS.NIC.is.s |
d4580 | 65 74 20 74 6f 20 75 73 65 20 74 68 65 20 65 31 30 30 30 20 64 72 69 76 65 72 2e 20 55 73 69 6e | et.to.use.the.e1000.driver..Usin |
d45a0 | 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 60 60 76 69 72 74 69 6f 2d 6e 65 74 2d 70 63 69 60 60 | g.the.default.``virtio-net-pci`` |
d45c0 | 20 6f 72 20 74 68 65 20 60 60 76 6d 78 6e 65 74 33 60 60 20 64 72 69 76 65 72 20 77 69 6c 6c 20 | .or.the.``vmxnet3``.driver.will. |
d45e0 | 6e 6f 74 20 77 6f 72 6b 2e 20 49 43 4d 50 20 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 6e 6f 74 | not.work..ICMP.messages.will.not |
d4600 | 20 62 65 20 70 72 6f 70 65 72 6c 79 20 70 72 6f 63 65 73 73 65 64 2e 20 54 68 65 79 20 61 72 65 | .be.properly.processed..They.are |
d4620 | 20 76 69 73 69 62 6c 65 20 6f 6e 20 74 68 65 20 76 69 72 74 75 61 6c 20 77 69 72 65 20 62 75 74 | .visible.on.the.virtual.wire.but |
d4640 | 20 77 69 6c 6c 20 6e 6f 74 20 6d 61 6b 65 20 69 74 20 66 75 6c 6c 79 20 75 70 20 74 68 65 20 6e | .will.not.make.it.fully.up.the.n |
d4660 | 65 74 77 6f 72 6b 69 6e 67 20 73 74 61 63 6b 2e 00 49 66 20 79 6f 75 20 68 61 70 70 65 6e 20 74 | etworking.stack..If.you.happen.t |
d4680 | 6f 20 75 73 65 20 53 6f 6c 61 72 57 69 6e 64 73 20 4f 72 69 6f 6e 20 61 73 20 4e 4d 53 20 79 6f | o.use.SolarWinds.Orion.as.NMS.yo |
d46a0 | 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 44 65 76 69 63 65 20 54 65 6d 70 6c 61 | u.can.also.use.the.Device.Templa |
d46c0 | 74 65 73 20 4d 61 6e 61 67 65 6d 65 6e 74 2e 20 41 20 74 65 6d 70 6c 61 74 65 20 66 6f 72 20 56 | tes.Management..A.template.for.V |
d46e0 | 79 4f 53 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 69 6d 70 6f 72 74 65 64 2e 00 49 66 20 79 | yOS.can.be.easily.imported..If.y |
d4700 | 6f 75 20 68 61 70 70 65 6e 65 64 20 74 6f 20 75 73 65 20 61 20 43 69 73 63 6f 20 4e 4d 2d 31 36 | ou.happened.to.use.a.Cisco.NM-16 |
d4720 | 41 20 2d 20 53 69 78 74 65 65 6e 20 50 6f 72 74 20 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d | A.-.Sixteen.Port.Async.Network.M |
d4740 | 6f 64 75 6c 65 20 6f 72 20 4e 4d 2d 33 32 41 20 2d 20 54 68 69 72 74 79 2d 74 77 6f 20 50 6f 72 | odule.or.NM-32A.-.Thirty-two.Por |
d4760 | 74 20 41 73 79 6e 63 20 4e 65 74 77 6f 72 6b 20 4d 6f 64 75 6c 65 20 2d 20 74 68 69 73 20 69 73 | t.Async.Network.Module.-.this.is |
d4780 | 20 79 6f 75 72 20 56 79 4f 53 20 72 65 70 6c 61 63 65 6d 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 | .your.VyOS.replacement..If.you.h |
d47a0 | 61 76 65 20 61 20 6c 6f 74 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2c 20 61 6e 64 2f 6f 72 20 | ave.a.lot.of.interfaces,.and/or. |
d47c0 | 61 20 6c 6f 74 20 6f 66 20 73 75 62 6e 65 74 73 2c 20 74 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 | a.lot.of.subnets,.then.enabling. |
d47e0 | 4f 53 50 46 20 76 69 61 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 79 20 72 65 73 75 6c 74 | OSPF.via.this.command.may.result |
d4800 | 20 69 6e 20 61 20 73 6c 69 67 68 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 69 6d 70 72 6f 76 65 | .in.a.slight.performance.improve |
d4820 | 6d 65 6e 74 2e 00 49 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 65 | ment..If.you.have.configured.the |
d4840 | 20 60 49 4e 53 49 44 45 2d 4f 55 54 60 20 70 6f 6c 69 63 79 2c 20 79 6f 75 20 77 69 6c 6c 20 6e | .`INSIDE-OUT`.policy,.you.will.n |
d4860 | 65 65 64 20 74 6f 20 61 64 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 74 6f 20 70 | eed.to.add.additional.rules.to.p |
d4880 | 65 72 6d 69 74 20 69 6e 62 6f 75 6e 64 20 4e 41 54 20 74 72 61 66 66 69 63 2e 00 49 66 20 79 6f | ermit.inbound.NAT.traffic..If.yo |
d48a0 | 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 73 20 63 6f 6e 66 69 67 | u.have.multiple.addresses.config |
d48c0 | 75 72 65 64 20 6f 6e 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 74 65 72 66 61 63 65 20 61 | ured.on.a.particular.interface.a |
d48e0 | 6e 64 20 77 6f 75 6c 64 20 6c 69 6b 65 20 50 49 4d 20 74 6f 20 75 73 65 20 61 20 73 70 65 63 69 | nd.would.like.PIM.to.use.a.speci |
d4900 | 66 69 63 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 | fic.source.address.associated.wi |
d4920 | 74 68 20 74 68 61 74 20 69 6e 74 65 72 66 61 63 65 2e 00 49 66 20 79 6f 75 20 6e 65 65 64 20 74 | th.that.interface..If.you.need.t |
d4940 | 6f 20 73 61 6d 70 6c 65 20 61 6c 73 6f 20 65 67 72 65 73 73 20 74 72 61 66 66 69 63 2c 20 79 6f | o.sample.also.egress.traffic,.yo |
d4960 | 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 65 67 72 65 73 73 20 66 | u.may.want.to.configure.egress.f |
d4980 | 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 3a 00 49 66 20 79 6f 75 20 6f 6e 6c 79 20 77 61 6e 74 | low-accounting:.If.you.only.want |
d49a0 | 20 74 6f 20 63 68 65 63 6b 20 69 66 20 74 68 65 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 69 73 | .to.check.if.the.user.account.is |
d49c0 | 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 63 61 6e 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 28 61 | .enabled.and.can.authenticate.(a |
d49e0 | 67 61 69 6e 73 74 20 74 68 65 20 70 72 69 6d 61 72 79 20 67 72 6f 75 70 29 20 74 68 65 20 66 6f | gainst.the.primary.group).the.fo |
d4a00 | 6c 6c 6f 77 69 6e 67 20 73 6e 69 70 70 65 64 20 69 73 20 73 75 66 66 69 63 69 65 6e 74 3a 00 49 | llowing.snipped.is.sufficient:.I |
d4a20 | 66 20 79 6f 75 20 73 65 74 20 61 20 63 75 73 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 | f.you.set.a.custom.RADIUS.attrib |
d4a40 | 75 74 65 20 79 6f 75 20 6d 75 73 74 20 64 65 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 | ute.you.must.define.it.on.both.d |
d4a60 | 69 63 74 69 6f 6e 61 72 69 65 73 20 61 74 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 | ictionaries.at.RADIUS.server.and |
d4a80 | 20 63 6c 69 65 6e 74 2c 20 77 68 69 63 68 20 69 73 20 74 68 65 20 76 79 6f 73 20 72 6f 75 74 65 | .client,.which.is.the.vyos.route |
d4aa0 | 72 20 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2e 00 49 66 20 79 6f 75 20 73 65 74 20 61 20 63 | r.in.our.example..If.you.set.a.c |
d4ac0 | 75 73 74 6f 6d 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 6d 75 73 74 20 | ustom.RADIUS.attribute.you.must. |
d4ae0 | 64 65 66 69 6e 65 20 69 74 20 6f 6e 20 62 6f 74 68 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 61 | define.it.on.both.dictionaries.a |
d4b00 | 74 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2e 00 49 66 20 79 | t.RADIUS.server.and.client..If.y |
d4b20 | 6f 75 20 75 73 65 20 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 | ou.use.USB.to.serial.converters. |
d4b40 | 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 79 6f 75 72 20 56 79 4f 53 20 61 70 70 6c | for.connecting.to.your.VyOS.appl |
d4b60 | 69 61 6e 63 65 20 70 6c 65 61 73 65 20 6e 6f 74 65 20 74 68 61 74 20 6d 6f 73 74 20 6f 66 20 74 | iance.please.note.that.most.of.t |
d4b80 | 68 65 6d 20 75 73 65 20 73 6f 66 74 77 61 72 65 20 65 6d 75 6c 61 74 69 6f 6e 20 77 69 74 68 6f | hem.use.software.emulation.witho |
d4ba0 | 75 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 79 6f 75 20 | ut.flow.control..This.means.you. |
d4bc0 | 73 68 6f 75 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 61 20 63 6f 6d 6d 6f 6e 20 62 61 75 64 20 | should.start.with.a.common.baud. |
d4be0 | 72 61 74 65 20 28 6d 6f 73 74 20 6c 69 6b 65 6c 79 20 39 36 30 30 20 62 61 75 64 29 20 61 73 20 | rate.(most.likely.9600.baud).as. |
d4c00 | 6f 74 68 65 72 77 69 73 65 20 79 6f 75 20 70 72 6f 62 61 62 6c 79 20 63 61 6e 20 6e 6f 74 20 63 | otherwise.you.probably.can.not.c |
d4c20 | 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 75 73 69 6e 67 20 68 69 67 68 20 | onnect.to.the.device.using.high. |
d4c40 | 73 70 65 65 64 20 62 61 75 64 20 72 61 74 65 73 20 61 73 20 79 6f 75 72 20 73 65 72 69 61 6c 20 | speed.baud.rates.as.your.serial. |
d4c60 | 63 6f 6e 76 65 72 74 65 72 20 73 69 6d 70 6c 79 20 63 61 6e 20 6e 6f 74 20 70 72 6f 63 65 73 73 | converter.simply.can.not.process |
d4c80 | 20 74 68 69 73 20 64 61 74 61 20 72 61 74 65 2e 00 49 66 20 79 6f 75 20 75 73 65 20 61 20 73 65 | .this.data.rate..If.you.use.a.se |
d4ca0 | 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 64 6f 20 6e 6f 74 20 66 6f | lf-signed.certificate,.do.not.fo |
d4cc0 | 72 67 65 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 43 41 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 | rget.to.install.CA.on.the.client |
d4ce0 | 20 73 69 64 65 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 | .side..If.you.want.to.change.the |
d4d00 | 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 66 6c 6f 77 73 2c 20 77 68 69 63 68 20 | .maximum.number.of.flows,.which. |
d4d20 | 61 72 65 20 74 72 61 63 6b 69 6e 67 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 2c 20 79 6f 75 | are.tracking.simultaneously,.you |
d4d40 | 20 6d 61 79 20 64 6f 20 74 68 69 73 20 77 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 28 | .may.do.this.with.this.command.( |
d4d60 | 64 65 66 61 75 6c 74 20 38 31 39 32 29 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 69 | default.8192)..If.you.want.to.di |
d4d80 | 73 61 62 6c 65 20 61 20 72 75 6c 65 20 62 75 74 20 6c 65 74 20 69 74 20 69 6e 20 74 68 65 20 63 | sable.a.rule.but.let.it.in.the.c |
d4da0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 61 76 | onfiguration..If.you.want.to.hav |
d4dc0 | 65 20 61 64 6d 69 6e 20 75 73 65 72 73 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 76 69 | e.admin.users.to.authenticate.vi |
d4de0 | 61 20 52 41 44 49 55 53 20 69 74 20 69 73 20 65 73 73 65 6e 74 69 61 6c 20 74 6f 20 73 65 6e 74 | a.RADIUS.it.is.essential.to.sent |
d4e00 | 20 74 68 65 20 60 60 43 69 73 63 6f 2d 41 56 2d 50 61 69 72 20 73 68 65 6c 6c 3a 70 72 69 76 2d | .the.``Cisco-AV-Pair.shell:priv- |
d4e20 | 6c 76 6c 3d 31 35 60 60 20 61 74 74 72 69 62 75 74 65 2e 20 57 69 74 68 6f 75 74 20 74 68 65 20 | lvl=15``.attribute..Without.the. |
d4e40 | 61 74 74 72 69 62 75 74 65 20 79 6f 75 20 77 69 6c 6c 20 6f 6e 6c 79 20 67 65 74 20 72 65 67 75 | attribute.you.will.only.get.regu |
d4e60 | 6c 61 72 2c 20 6e 6f 6e 20 70 72 69 76 69 6c 65 67 75 65 64 2c 20 73 79 73 74 65 6d 20 75 73 65 | lar,.non.privilegued,.system.use |
d4e80 | 72 73 2e 00 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 65 78 69 73 74 69 6e 67 20 | rs..If.you.want.to.use.existing. |
d4ea0 | 62 6c 61 63 6b 6c 69 73 74 73 20 79 6f 75 20 68 61 76 65 20 74 6f 20 63 72 65 61 74 65 2f 64 6f | blacklists.you.have.to.create/do |
d4ec0 | 77 6e 6c 6f 61 64 20 61 20 64 61 74 61 62 61 73 65 20 66 69 72 73 74 2e 20 4f 74 68 65 72 77 69 | wnload.a.database.first..Otherwi |
d4ee0 | 73 65 20 79 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 61 62 6c 65 20 74 6f 20 63 6f 6d 6d 69 | se.you.will.not.be.able.to.commi |
d4f00 | 74 20 74 68 65 20 63 6f 6e 66 69 67 20 63 68 61 6e 67 65 73 2e 00 49 66 20 79 6f 75 20 77 61 6e | t.the.config.changes..If.you.wan |
d4f20 | 74 20 79 6f 75 72 20 72 6f 75 74 65 72 20 74 6f 20 66 6f 72 77 61 72 64 20 44 48 43 50 20 72 65 | t.your.router.to.forward.DHCP.re |
d4f40 | 71 75 65 73 74 73 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 44 48 43 50 20 73 65 72 76 65 | quests.to.an.external.DHCP.serve |
d4f60 | 72 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 79 73 74 65 6d 20 74 | r.you.can.configure.the.system.t |
d4f80 | 6f 20 61 63 74 20 61 73 20 61 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 2e 20 54 68 65 | o.act.as.a.DHCP.relay.agent..The |
d4fa0 | 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 20 77 6f 72 6b 73 20 77 69 74 68 20 49 50 76 | .DHCP.relay.agent.works.with.IPv |
d4fc0 | 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 00 49 66 20 79 6f 75 20 77 61 6e | 4.and.IPv6.addresses..If.you.wan |
d4fe0 | 74 2c 20 6e 65 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 75 73 65 20 6d 6f 72 65 20 61 64 76 | t,.need,.and.should.use.more.adv |
d5000 | 61 6e 63 65 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 28 64 65 66 61 75 6c | anced.encryption.ciphers.(defaul |
d5020 | 74 20 69 73 20 73 74 69 6c 6c 20 33 44 45 53 29 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 70 72 6f | t.is.still.3DES).you.need.to.pro |
d5040 | 76 69 73 69 6f 6e 20 79 6f 75 72 20 64 65 76 69 63 65 20 75 73 69 6e 67 20 61 20 73 6f 2d 63 61 | vision.your.device.using.a.so-ca |
d5060 | 6c 6c 65 64 20 22 44 65 76 69 63 65 20 50 72 6f 66 69 6c 65 22 2e 20 41 20 70 72 6f 66 69 6c 65 | lled."Device.Profile"..A.profile |
d5080 | 20 69 73 20 61 20 73 69 6d 70 6c 65 20 74 65 78 74 20 66 69 6c 65 20 63 6f 6e 74 61 69 6e 69 6e | .is.a.simple.text.file.containin |
d50a0 | 67 20 58 4d 4c 20 6e 6f 64 65 73 20 77 69 74 68 20 61 20 60 60 2e 6d 6f 62 69 6c 65 63 6f 6e 66 | g.XML.nodes.with.a.``.mobileconf |
d50c0 | 69 67 60 60 20 66 69 6c 65 20 65 78 74 65 6e 73 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 | ig``.file.extension.that.can.be. |
d50e0 | 73 65 6e 74 20 61 6e 64 20 6f 70 65 6e 65 64 20 6f 6e 20 61 6e 79 20 64 65 76 69 63 65 20 66 72 | sent.and.opened.on.any.device.fr |
d5100 | 6f 6d 20 61 6e 20 45 2d 4d 61 69 6c 2e 00 49 66 20 79 6f 75 27 76 65 20 63 6f 6d 70 6c 65 74 65 | om.an.E-Mail..If.you've.complete |
d5120 | 64 20 61 6c 6c 20 74 68 65 20 61 62 6f 76 65 20 73 74 65 70 73 20 79 6f 75 20 6e 6f 20 64 6f 75 | d.all.the.above.steps.you.no.dou |
d5140 | 62 74 20 77 61 6e 74 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 61 6c 6c 20 77 6f 72 6b 69 | bt.want.to.see.if.it's.all.worki |
d5160 | 6e 67 2e 00 49 67 6e 6f 72 65 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 20 77 68 65 6e 20 73 | ng..Ignore.AS_PATH.length.when.s |
d5180 | 65 6c 65 63 74 69 6e 67 20 61 20 72 6f 75 74 65 00 49 67 6e 6f 72 65 20 56 52 52 50 20 6d 61 69 | electing.a.route.Ignore.VRRP.mai |
d51a0 | 6e 20 69 6e 74 65 72 66 61 63 65 20 66 61 75 6c 74 73 00 49 6d 61 67 65 20 74 68 61 6e 6b 66 75 | n.interface.faults.Image.thankfu |
d51c0 | 6c 6c 79 20 62 6f 72 72 6f 77 65 64 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b | lly.borrowed.from.https://en.wik |
d51e0 | 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 46 69 6c 65 3a 53 4e 4d 50 5f 63 6f 6d 6d 75 6e | ipedia.org/wiki/File:SNMP_commun |
d5200 | 69 63 61 74 69 6f 6e 5f 70 72 69 6e 63 69 70 6c 65 73 5f 64 69 61 67 72 61 6d 2e 50 4e 47 20 77 | ication_principles_diagram.PNG.w |
d5220 | 68 69 63 68 20 69 73 20 75 6e 64 65 72 20 74 68 65 20 47 4e 55 20 46 72 65 65 20 44 6f 63 75 6d | hich.is.under.the.GNU.Free.Docum |
d5240 | 65 6e 74 61 74 69 6f 6e 20 4c 69 63 65 6e 73 65 00 49 6d 61 67 69 6e 65 20 74 68 65 20 66 6f 6c | entation.License.Imagine.the.fol |
d5260 | 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 00 49 6d 6d 65 64 69 61 74 65 00 49 6d 70 6f 72 74 | lowing.topology.Immediate.Import |
d5280 | 20 66 69 6c 65 73 20 74 6f 20 50 4b 49 20 66 6f 72 6d 61 74 00 49 6d 70 6f 72 74 20 74 68 65 20 | .files.to.PKI.format.Import.the. |
d52a0 | 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 6f 72 74 69 6f 6e 20 74 6f 20 74 68 65 20 43 | CAs.private.key.portion.to.the.C |
d52c0 | 4c 49 2e 20 54 68 69 73 20 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 | LI..This.should.never.leave.the. |
d52e0 | 73 79 73 74 65 6d 20 61 73 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 | system.as.it.is.used.to.decrypt. |
d5300 | 74 68 65 20 64 61 74 61 2e 20 54 68 65 20 6b 65 79 20 69 73 20 72 65 71 75 69 72 65 64 20 69 66 | the.data..The.key.is.required.if |
d5320 | 20 79 6f 75 20 75 73 65 20 56 79 4f 53 20 61 73 20 79 6f 75 72 20 63 65 72 74 69 66 69 63 61 74 | .you.use.VyOS.as.your.certificat |
d5340 | 65 20 67 65 6e 65 72 61 74 6f 72 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 | e.generator..Import.the.OpenVPN. |
d5360 | 73 68 61 72 65 64 20 73 65 63 72 65 74 20 73 74 6f 72 65 64 20 69 6e 20 66 69 6c 65 20 74 6f 20 | shared.secret.stored.in.file.to. |
d5380 | 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 49 6d 70 6f 72 74 20 74 68 65 20 63 65 72 74 69 66 69 | the.VyOS.CLI..Import.the.certifi |
d53a0 | 63 61 74 65 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 43 4c 49 2e 00 | cate.from.the.file.to.VyOS.CLI.. |
d53c0 | 49 6d 70 6f 72 74 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 6f 66 20 74 68 65 20 63 65 | Import.the.private.key.of.the.ce |
d53e0 | 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 20 54 68 69 73 20 | rtificate.to.the.VyOS.CLI..This. |
d5400 | 73 68 6f 75 6c 64 20 6e 65 76 65 72 20 6c 65 61 76 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 73 | should.never.leave.the.system.as |
d5420 | 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 64 61 74 61 2e | .it.is.used.to.decrypt.the.data. |
d5440 | 00 49 6d 70 6f 72 74 20 74 68 65 20 70 75 62 6c 69 63 20 43 41 20 63 65 72 74 69 66 69 63 61 74 | .Import.the.public.CA.certificat |
d5460 | 65 20 66 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 66 69 6c 65 20 74 6f 20 56 79 4f 53 20 | e.from.the.defined.file.to.VyOS. |
d5480 | 43 4c 49 2e 00 49 6d 70 6f 72 74 65 64 20 70 72 65 66 69 78 65 73 20 64 75 72 69 6e 67 20 74 68 | CLI..Imported.prefixes.during.th |
d54a0 | 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 61 79 20 68 61 76 65 20 76 61 6c 75 65 73 3a 00 49 6e | e.validation.may.have.values:.In |
d54c0 | 20 3a 72 66 63 3a 60 33 30 36 39 60 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 56 4c 41 4e 20 41 | .:rfc:`3069`.it.is.called.VLAN.A |
d54e0 | 67 67 72 65 67 61 74 69 6f 6e 00 49 6e 20 3a 76 79 74 61 73 6b 3a 60 54 32 31 39 39 60 20 74 68 | ggregation.In.:vytask:`T2199`.th |
d5500 | 65 20 73 79 6e 74 61 78 20 6f 66 20 74 68 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | e.syntax.of.the.zone.configurati |
d5520 | 6f 6e 20 77 61 73 20 63 68 61 6e 67 65 64 2e 20 54 68 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 | on.was.changed..The.zone.configu |
d5540 | 72 61 74 69 6f 6e 20 6d 6f 76 65 64 20 66 72 6f 6d 20 60 60 7a 6f 6e 65 2d 70 6f 6c 69 63 79 20 | ration.moved.from.``zone-policy. |
d5560 | 7a 6f 6e 65 20 3c 6e 61 6d 65 3e 60 60 20 74 6f 20 60 60 66 69 72 65 77 61 6c 6c 20 7a 6f 6e 65 | zone.<name>``.to.``firewall.zone |
d5580 | 20 3c 6e 61 6d 65 3e 60 60 2e 00 49 6e 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 20 | .<name>``..In.Internet.Protocol. |
d55a0 | 56 65 72 73 69 6f 6e 20 36 20 28 49 50 76 36 29 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 20 66 | Version.6.(IPv6).networks,.the.f |
d55c0 | 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 41 52 50 20 69 73 20 70 72 6f 76 69 64 65 64 20 | unctionality.of.ARP.is.provided. |
d55e0 | 62 79 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 | by.the.Neighbor.Discovery.Protoc |
d5600 | 6f 6c 20 28 4e 44 50 29 2e 00 49 6e 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 77 65 20 64 | ol.(NDP)..In.Priority.Queue.we.d |
d5620 | 6f 20 6e 6f 74 20 64 65 66 69 6e 65 20 63 6c 61 73 65 73 20 77 69 74 68 20 61 20 6d 65 61 6e 69 | o.not.define.clases.with.a.meani |
d5640 | 6e 67 6c 65 73 73 20 63 6c 61 73 73 20 49 44 20 6e 75 6d 62 65 72 20 62 75 74 20 77 69 74 68 20 | ngless.class.ID.number.but.with. |
d5660 | 61 20 63 6c 61 73 73 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 20 28 31 2d 37 29 2e 20 54 | a.class.priority.number.(1-7)..T |
d5680 | 68 65 20 6c 6f 77 65 72 20 74 68 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 | he.lower.the.number,.the.higher. |
d56a0 | 74 68 65 20 70 72 69 6f 72 69 74 79 2e 00 49 6e 20 56 79 4f 53 20 74 68 65 20 74 65 72 6d 73 20 | the.priority..In.VyOS.the.terms. |
d56c0 | 60 60 76 69 66 2d 73 60 60 20 61 6e 64 20 60 60 76 69 66 2d 63 60 60 20 73 74 61 6e 64 20 66 6f | ``vif-s``.and.``vif-c``.stand.fo |
d56e0 | 72 20 74 68 65 20 65 74 68 65 72 74 79 70 65 20 74 61 67 73 20 74 68 61 74 20 61 72 65 20 75 73 | r.the.ethertype.tags.that.are.us |
d5700 | 65 64 2e 00 49 6e 20 56 79 4f 53 2c 20 45 53 50 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 | ed..In.VyOS,.ESP.attributes.are. |
d5720 | 73 70 65 63 69 66 69 65 64 20 74 68 72 6f 75 67 68 20 45 53 50 20 67 72 6f 75 70 73 2e 20 4d 75 | specified.through.ESP.groups..Mu |
d5740 | 6c 74 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 | ltiple.proposals.can.be.specifie |
d5760 | 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 72 6f 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 49 4b | d.in.a.single.group..In.VyOS,.IK |
d5780 | 45 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 74 68 72 6f 75 | E.attributes.are.specified.throu |
d57a0 | 67 68 20 49 4b 45 20 67 72 6f 75 70 73 2e 20 4d 75 6c 74 69 70 6c 65 20 70 72 6f 70 6f 73 61 6c | gh.IKE.groups..Multiple.proposal |
d57c0 | 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 67 | s.can.be.specified.in.a.single.g |
d57e0 | 72 6f 75 70 2e 00 49 6e 20 56 79 4f 53 2c 20 61 20 63 6c 61 73 73 20 69 73 20 69 64 65 6e 74 69 | roup..In.VyOS,.a.class.is.identi |
d5800 | 66 69 65 64 20 62 79 20 61 20 6e 75 6d 62 65 72 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 | fied.by.a.number.you.can.choose. |
d5820 | 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 69 74 2e 00 49 6e 20 61 20 6d 69 6e 69 6d 61 | when.configuring.it..In.a.minima |
d5840 | 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6d | l.configuration,.the.following.m |
d5860 | 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 3a 00 49 6e 20 61 20 6d 75 6c 74 69 70 6c 65 20 56 | ust.be.provided:.In.a.multiple.V |
d5880 | 4c 41 4e 20 68 65 61 64 65 72 20 63 6f 6e 74 65 78 74 2c 20 6f 75 74 20 6f 66 20 63 6f 6e 76 65 | LAN.header.context,.out.of.conve |
d58a0 | 6e 69 65 6e 63 65 20 74 68 65 20 74 65 72 6d 20 22 56 4c 41 4e 20 74 61 67 22 20 6f 72 20 6a 75 | nience.the.term."VLAN.tag".or.ju |
d58c0 | 73 74 20 22 74 61 67 22 20 66 6f 72 20 73 68 6f 72 74 20 69 73 20 6f 66 74 65 6e 20 75 73 65 64 | st."tag".for.short.is.often.used |
d58e0 | 20 69 6e 20 70 6c 61 63 65 20 6f 66 20 22 38 30 32 2e 31 71 5f 20 56 4c 41 4e 20 68 65 61 64 65 | .in.place.of."802.1q_.VLAN.heade |
d5900 | 72 22 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 61 | r"..QinQ.allows.multiple.VLAN.ta |
d5920 | 67 73 20 69 6e 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 3b 20 74 6f 67 65 74 68 65 | gs.in.an.Ethernet.frame;.togethe |
d5940 | 72 20 74 68 65 73 65 20 74 61 67 73 20 63 6f 6e 73 74 69 74 75 74 65 20 61 20 74 61 67 20 73 74 | r.these.tags.constitute.a.tag.st |
d5960 | 61 63 6b 2e 20 57 68 65 6e 20 75 73 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 | ack..When.used.in.the.context.of |
d5980 | 20 61 6e 20 45 74 68 65 72 6e 65 74 20 66 72 61 6d 65 2c 20 61 20 51 69 6e 51 20 66 72 61 6d 65 | .an.Ethernet.frame,.a.QinQ.frame |
d59a0 | 20 69 73 20 61 20 66 72 61 6d 65 20 74 68 61 74 20 68 61 73 20 32 20 56 4c 41 4e 20 38 30 32 2e | .is.a.frame.that.has.2.VLAN.802. |
d59c0 | 31 71 5f 20 68 65 61 64 65 72 73 20 28 64 6f 75 62 6c 65 2d 74 61 67 67 65 64 29 2e 00 49 6e 20 | 1q_.headers.(double-tagged)..In. |
d59e0 | 61 20 6e 75 74 73 68 65 6c 6c 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 69 6d 70 6c 65 6d 65 6e | a.nutshell,.the.current.implemen |
d5a00 | 74 61 74 69 6f 6e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 65 | tation.provides.the.following.fe |
d5a20 | 61 74 75 72 65 73 3a 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 3a 61 62 62 72 3a 60 52 41 | atures:.In.addition.to.:abbr:`RA |
d5a40 | 44 49 55 53 20 28 52 65 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c | DIUS.(Remote.Authentication.Dial |
d5a60 | 2d 49 6e 20 55 73 65 72 20 53 65 72 76 69 63 65 29 60 2c 20 3a 61 62 62 72 3a 60 54 41 43 41 43 | -In.User.Service)`,.:abbr:`TACAC |
d5a80 | 53 20 28 54 65 72 6d 69 6e 61 6c 20 41 63 63 65 73 73 20 43 6f 6e 74 72 6f 6c 6c 65 72 20 41 63 | S.(Terminal.Access.Controller.Ac |
d5aa0 | 63 65 73 73 20 43 6f 6e 74 72 6f 6c 20 53 79 73 74 65 6d 29 60 20 63 61 6e 20 61 6c 73 6f 20 62 | cess.Control.System)`.can.also.b |
d5ac0 | 65 20 66 6f 75 6e 64 20 69 6e 20 6c 61 72 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 2e 00 49 6e | e.found.in.large.deployments..In |
d5ae0 | 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 64 69 73 70 6c 61 79 69 6e 67 20 66 6c 6f 77 20 61 63 63 | .addition.to.displaying.flow.acc |
d5b00 | 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6c 6f 63 61 6c 6c 79 2c 20 6f 6e 65 | ounting.information.locally,.one |
d5b20 | 20 63 61 6e 20 61 6c 73 6f 20 65 78 70 6f 72 74 65 64 20 74 68 65 6d 20 74 6f 20 61 20 63 6f 6c | .can.also.exported.them.to.a.col |
d5b40 | 6c 65 63 74 69 6f 6e 20 73 65 72 76 65 72 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 | lection.server..In.addition.to.t |
d5b60 | 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 74 68 65 20 6f 75 74 70 75 74 20 69 73 20 | he.command.above,.the.output.is. |
d5b80 | 69 6e 20 61 20 66 6f 72 6d 61 74 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f | in.a.format.which.can.be.used.to |
d5ba0 | 20 64 69 72 65 63 74 6c 79 20 69 6d 70 6f 72 74 20 74 68 65 20 6b 65 79 20 69 6e 74 6f 20 74 68 | .directly.import.the.key.into.th |
d5bc0 | 65 20 56 79 4f 53 20 43 4c 49 20 62 79 20 73 69 6d 70 6c 79 20 63 6f 70 79 2d 70 61 73 74 69 6e | e.VyOS.CLI.by.simply.copy-pastin |
d5be0 | 67 20 74 68 65 20 6f 75 74 70 75 74 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 65 20 69 6e 74 6f 20 63 | g.the.output.from.op-mode.into.c |
d5c00 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 77 | onfiguration.mode..In.addition.w |
d5c20 | 65 20 73 65 74 75 70 20 49 50 76 36 20 3a 61 62 62 72 3a 60 52 41 20 28 52 6f 75 74 65 72 20 41 | e.setup.IPv6.:abbr:`RA.(Router.A |
d5c40 | 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 70 72 65 66 | dvertisements)`.to.make.the.pref |
d5c60 | 69 78 20 6b 6e 6f 77 6e 20 6f 6e 20 74 68 65 20 65 74 68 30 20 6c 69 6e 6b 2e 00 49 6e 20 61 64 | ix.known.on.the.eth0.link..In.ad |
d5c80 | 64 69 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 | dition.you.can.also.disable.the. |
d5ca0 | 77 68 6f 6c 65 20 73 65 72 76 69 63 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 74 | whole.service.without.the.need.t |
d5cc0 | 6f 20 72 65 6d 6f 76 65 20 69 74 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 6f 6e | o.remove.it.from.the.current.con |
d5ce0 | 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c | figuration..In.addition.you.will |
d5d00 | 20 73 70 65 63 69 66 69 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e | .specifiy.the.IP.address.or.FQDN |
d5d20 | 20 66 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 20 77 69 6c 6c 20 63 6f | .for.the.client.where.it.will.co |
d5d40 | 6e 6e 65 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 72 61 6d 65 74 65 72 20 | nnect.to..The.address.parameter. |
d5d60 | 63 61 6e 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 | can.be.used.up.to.two.times.and. |
d5d80 | 69 73 20 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 70 | is.used.to.assign.the.clients.sp |
d5da0 | 65 63 69 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 36 20 28 2f 31 32 38 29 | ecific.IPv4.(/32).or.IPv6.(/128) |
d5dc0 | 20 61 64 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 73 | .address..In.addition.you.will.s |
d5de0 | 70 65 63 69 66 79 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 20 66 6f | pecify.the.IP.address.or.FQDN.fo |
d5e00 | 72 20 74 68 65 20 63 6c 69 65 6e 74 20 77 68 65 72 65 20 69 74 20 77 69 6c 6c 20 63 6f 6e 6e 65 | r.the.client.where.it.will.conne |
d5e20 | 63 74 20 74 6f 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 70 61 72 61 6d 65 74 65 72 20 63 61 6e | ct.to..The.address.parameter.can |
d5e40 | 20 62 65 20 75 73 65 64 20 75 70 20 74 6f 20 74 77 6f 20 74 69 6d 65 73 20 61 6e 64 20 69 73 20 | .be.used.up.to.two.times.and.is. |
d5e60 | 75 73 65 64 20 74 6f 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 70 65 63 69 | used.to.assign.the.clients.speci |
d5e80 | 66 69 63 20 49 50 76 34 20 28 2f 33 32 29 20 6f 72 20 49 50 76 36 20 28 2f 31 32 38 29 20 61 64 | fic.IPv4.(/32).or.IPv6.(/128).ad |
d5ea0 | 64 72 65 73 73 2e 00 49 6e 20 61 64 64 69 74 69 6f 6e 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 | dress..In.addition,.you.can.spec |
d5ec0 | 69 66 79 20 6d 61 6e 79 20 6f 74 68 65 72 20 70 61 72 61 6d 65 74 65 72 73 20 74 6f 20 67 65 74 | ify.many.other.parameters.to.get |
d5ee0 | 20 42 47 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 49 6e 20 61 6e 20 2a 2a 61 64 64 72 65 73 | .BGP.information:.In.an.**addres |
d5f00 | 73 20 67 72 6f 75 70 2a 2a 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 | s.group**.a.single.IP.address.or |
d5f20 | 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 61 72 65 20 64 65 66 69 6e 65 64 2e 00 | .IP.address.ranges.are.defined.. |
d5f40 | 49 6e 20 62 6f 74 68 20 63 61 73 65 73 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 66 | In.both.cases,.we.will.use.the.f |
d5f60 | 6f 6c 6c 6f 77 69 6e 67 20 73 65 74 74 69 6e 67 73 3a 00 49 6e 20 63 61 73 65 20 6f 66 20 70 65 | ollowing.settings:.In.case.of.pe |
d5f80 | 65 72 2d 70 65 65 72 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 20 72 6f 75 74 65 73 20 63 61 6e 20 | er-peer.relationship.routes.can. |
d5fa0 | 62 65 20 72 65 63 65 69 76 65 64 20 6f 6e 6c 79 20 69 66 20 4f 54 43 20 76 61 6c 75 65 20 69 73 | be.received.only.if.OTC.value.is |
d5fc0 | 20 65 71 75 61 6c 20 74 6f 20 79 6f 75 72 20 6e 65 69 67 68 62 6f 72 20 41 53 20 6e 75 6d 62 65 | .equal.to.your.neighbor.AS.numbe |
d5fe0 | 72 2e 00 49 6e 20 63 61 73 65 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 61 74 63 68 | r..In.case,.if.you.need.to.catch |
d6000 | 20 73 6f 6d 65 20 6c 6f 67 73 20 66 72 6f 6d 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 | .some.logs.from.flow-accounting. |
d6020 | 64 61 65 6d 6f 6e 2c 20 79 6f 75 20 6d 61 79 20 63 6f 6e 66 69 67 75 72 65 20 6c 6f 67 67 69 6e | daemon,.you.may.configure.loggin |
d6040 | 67 20 66 61 63 69 6c 69 74 79 3a 00 49 6e 20 63 6f 6e 74 72 61 73 74 20 74 6f 20 73 69 6d 70 6c | g.facility:.In.contrast.to.simpl |
d6060 | 65 20 52 45 44 2c 20 56 79 4f 53 27 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 75 73 65 73 20 | e.RED,.VyOS'.Random-Detect.uses. |
d6080 | 61 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 52 61 6e 64 6f 6d 20 45 61 72 6c 79 20 44 65 74 65 63 | a.Generalized.Random.Early.Detec |
d60a0 | 74 20 70 6f 6c 69 63 79 20 74 68 61 74 20 70 72 6f 76 69 64 65 73 20 64 69 66 66 65 72 65 6e 74 | t.policy.that.provides.different |
d60c0 | 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 49 50 20 | .virtual.queues.based.on.the.IP. |
d60e0 | 50 72 65 63 65 64 65 6e 63 65 20 76 61 6c 75 65 20 73 6f 20 74 68 61 74 20 73 6f 6d 65 20 76 69 | Precedence.value.so.that.some.vi |
d6100 | 72 74 75 61 6c 20 71 75 65 75 65 73 20 63 61 6e 20 64 72 6f 70 20 6d 6f 72 65 20 70 61 63 6b 65 | rtual.queues.can.drop.more.packe |
d6120 | 74 73 20 74 68 61 6e 20 6f 74 68 65 72 73 2e 00 49 6e 20 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 | ts.than.others..In.failover.mode |
d6140 | 2c 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 65 74 20 74 6f 20 62 65 20 74 68 65 | ,.one.interface.is.set.to.be.the |
d6160 | 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 | .primary.interface.and.other.int |
d6180 | 65 72 66 61 63 65 73 20 61 72 65 20 73 65 63 6f 6e 64 61 72 79 20 6f 72 20 73 70 61 72 65 2e 20 | erfaces.are.secondary.or.spare.. |
d61a0 | 49 6e 73 74 65 61 64 20 6f 66 20 62 61 6c 61 6e 63 69 6e 67 20 74 72 61 66 66 69 63 20 61 63 72 | Instead.of.balancing.traffic.acr |
d61c0 | 6f 73 73 20 61 6c 6c 20 68 65 61 6c 74 68 79 20 69 6e 74 65 72 66 61 63 65 73 2c 20 6f 6e 6c 79 | oss.all.healthy.interfaces,.only |
d61e0 | 20 74 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 73 65 64 20 61 | .the.primary.interface.is.used.a |
d6200 | 6e 64 20 69 6e 20 63 61 73 65 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 61 20 73 65 63 6f 6e 64 61 | nd.in.case.of.failure,.a.seconda |
d6220 | 72 79 20 69 6e 74 65 72 66 61 63 65 20 73 65 6c 65 63 74 65 64 20 66 72 6f 6d 20 74 68 65 20 70 | ry.interface.selected.from.the.p |
d6240 | 6f 6f 6c 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 74 61 6b 65 | ool.of.available.interfaces.take |
d6260 | 73 20 6f 76 65 72 2e 20 54 68 65 20 70 72 69 6d 61 72 79 20 69 6e 74 65 72 66 61 63 65 20 69 73 | s.over..The.primary.interface.is |
d6280 | 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 77 65 69 67 68 74 20 61 6e | .selected.based.on.its.weight.an |
d62a0 | 64 20 68 65 61 6c 74 68 2c 20 6f 74 68 65 72 73 20 62 65 63 6f 6d 65 20 73 65 63 6f 6e 64 61 72 | d.health,.others.become.secondar |
d62c0 | 79 20 69 6e 74 65 72 66 61 63 65 73 2e 20 53 65 63 6f 6e 64 61 72 79 20 69 6e 74 65 72 66 61 63 | y.interfaces..Secondary.interfac |
d62e0 | 65 73 20 74 6f 20 74 61 6b 65 20 6f 76 65 72 20 61 20 66 61 69 6c 65 64 20 70 72 69 6d 61 72 79 | es.to.take.over.a.failed.primary |
d6300 | 20 69 6e 74 65 72 66 61 63 65 20 61 72 65 20 63 68 6f 73 65 6e 20 66 72 6f 6d 20 74 68 65 20 6c | .interface.are.chosen.from.the.l |
d6320 | 6f 61 64 20 62 61 6c 61 6e 63 65 72 27 73 20 69 6e 74 65 72 66 61 63 65 20 70 6f 6f 6c 2c 20 64 | oad.balancer's.interface.pool,.d |
d6340 | 65 70 65 6e 64 69 6e 67 20 6f 6e 20 74 68 65 69 72 20 77 65 69 67 68 74 20 61 6e 64 20 68 65 61 | epending.on.their.weight.and.hea |
d6360 | 6c 74 68 2e 20 49 6e 74 65 72 66 61 63 65 20 72 6f 6c 65 73 20 63 61 6e 20 61 6c 73 6f 20 62 65 | lth..Interface.roles.can.also.be |
d6380 | 20 73 65 6c 65 63 74 65 64 20 62 61 73 65 64 20 6f 6e 20 72 75 6c 65 20 6f 72 64 65 72 20 62 79 | .selected.based.on.rule.order.by |
d63a0 | 20 69 6e 63 6c 75 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 62 61 6c 61 6e 63 69 | .including.interfaces.in.balanci |
d63c0 | 6e 67 20 72 75 6c 65 73 20 61 6e 64 20 6f 72 64 65 72 69 6e 67 20 74 68 6f 73 65 20 72 75 6c 65 | ng.rules.and.ordering.those.rule |
d63e0 | 73 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 20 54 6f 20 70 75 74 20 74 68 65 20 6c 6f 61 64 20 62 | s.accordingly..To.put.the.load.b |
d6400 | 61 6c 61 6e 63 65 72 20 69 6e 20 66 61 69 6c 6f 76 65 72 20 6d 6f 64 65 2c 20 63 72 65 61 74 65 | alancer.in.failover.mode,.create |
d6420 | 20 61 20 66 61 69 6c 6f 76 65 72 20 72 75 6c 65 3a 00 49 6e 20 66 69 72 65 77 61 6c 6c 20 62 72 | .a.failover.rule:.In.firewall.br |
d6440 | 69 64 67 65 20 72 75 6c 65 73 2c 20 74 68 65 20 61 63 74 69 6f 6e 20 63 61 6e 20 62 65 3a 00 49 | idge.rules,.the.action.can.be:.I |
d6460 | 6e 20 67 65 6e 65 72 61 6c 2c 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 72 65 71 75 69 72 65 | n.general,.OSPF.protocol.require |
d6480 | 73 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 28 61 72 65 61 20 30 29 20 74 6f 20 62 65 | s.a.backbone.area.(area.0).to.be |
d64a0 | 20 63 6f 68 65 72 65 6e 74 20 61 6e 64 20 66 75 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 20 49 | .coherent.and.fully.connected..I |
d64c0 | 2e 65 2e 20 61 6e 79 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 20 6d 75 73 | .e..any.backbone.area.router.mus |
d64e0 | 74 20 68 61 76 65 20 61 20 72 6f 75 74 65 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 62 61 63 6b | t.have.a.route.to.any.other.back |
d6500 | 62 6f 6e 65 20 61 72 65 61 20 72 6f 75 74 65 72 2e 20 4d 6f 72 65 6f 76 65 72 2c 20 65 76 65 72 | bone.area.router..Moreover,.ever |
d6520 | 79 20 41 42 52 20 6d 75 73 74 20 68 61 76 65 20 61 20 6c 69 6e 6b 20 74 6f 20 62 61 63 6b 62 6f | y.ABR.must.have.a.link.to.backbo |
d6540 | 6e 65 20 61 72 65 61 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 6e 6f 74 20 61 6c 77 61 | ne.area..However,.it.is.not.alwa |
d6560 | 79 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 68 61 76 65 20 61 20 70 68 79 73 69 63 61 6c 20 6c | ys.possible.to.have.a.physical.l |
d6580 | 69 6e 6b 20 74 6f 20 61 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 61 2e 20 49 6e 20 74 68 69 73 20 | ink.to.a.backbone.area..In.this. |
d65a0 | 63 61 73 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 41 42 52 20 28 6f 6e 65 20 6f 66 20 74 68 65 | case.between.two.ABR.(one.of.the |
d65c0 | 6d 20 68 61 73 20 61 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 62 61 63 6b 62 6f 6e 65 20 61 72 65 | m.has.a.link.to.the.backbone.are |
d65e0 | 61 29 20 69 6e 20 74 68 65 20 61 72 65 61 20 28 6e 6f 74 20 73 74 75 62 20 61 72 65 61 29 20 61 | a).in.the.area.(not.stub.area).a |
d6600 | 20 76 69 72 74 75 61 6c 20 6c 69 6e 6b 20 69 73 20 6f 72 67 61 6e 69 7a 65 64 2e 00 49 6e 20 6c | .virtual.link.is.organized..In.l |
d6620 | 61 72 67 65 20 64 65 70 6c 6f 79 6d 65 6e 74 73 20 69 74 20 69 73 20 6e 6f 74 20 72 65 61 73 6f | arge.deployments.it.is.not.reaso |
d6640 | 6e 61 62 6c 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 65 61 63 68 20 75 73 65 72 20 69 6e 64 | nable.to.configure.each.user.ind |
d6660 | 69 76 69 64 75 61 6c 6c 79 20 6f 6e 20 65 76 65 72 79 20 73 79 73 74 65 6d 2e 20 56 79 4f 53 20 | ividually.on.every.system..VyOS. |
d6680 | 73 75 70 70 6f 72 74 73 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 52 41 44 49 55 53 20 28 52 65 | supports.using.:abbr:`RADIUS.(Re |
d66a0 | 6d 6f 74 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 44 69 61 6c 2d 49 6e 20 55 73 65 72 | mote.Authentication.Dial-In.User |
d66c0 | 20 53 65 72 76 69 63 65 29 60 20 73 65 72 76 65 72 73 20 61 73 20 62 61 63 6b 65 6e 64 20 66 6f | .Service)`.servers.as.backend.fo |
d66e0 | 72 20 75 73 65 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 | r.user.authentication..In.order. |
d6700 | 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | for.flow.accounting.information. |
d6720 | 74 6f 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 61 6e 64 20 64 69 73 70 6c 61 79 65 64 20 66 6f | to.be.collected.and.displayed.fo |
d6740 | 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6d 75 | r.an.interface,.the.interface.mu |
d6760 | 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e | st.be.configured.for.flow.accoun |
d6780 | 74 69 6e 67 2e 00 49 6e 20 6f 72 64 65 72 20 66 6f 72 20 74 68 65 20 70 72 69 6d 61 72 79 20 61 | ting..In.order.for.the.primary.a |
d67a0 | 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 | nd.the.secondary.DHCP.server.to. |
d67c0 | 6b 65 65 70 20 74 68 65 69 72 20 6c 65 61 73 65 20 74 61 62 6c 65 73 20 69 6e 20 73 79 6e 63 2c | keep.their.lease.tables.in.sync, |
d67e0 | 20 74 68 65 79 20 6d 75 73 74 20 62 65 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 65 61 63 68 | .they.must.be.able.to.reach.each |
d6800 | 20 6f 74 68 65 72 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 36 34 37 2e 20 49 66 20 79 6f 75 20 68 | .other.on.TCP.port.647..If.you.h |
d6820 | 61 76 65 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 69 6e 20 65 66 66 65 63 74 2c 20 61 64 | ave.firewall.rules.in.effect,.ad |
d6840 | 6a 75 73 74 20 74 68 65 6d 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 00 49 6e 20 6f 72 64 65 72 20 | just.them.accordingly..In.order. |
d6860 | 66 6f 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 75 73 65 20 61 6e 64 20 63 6f 6d 70 6c 65 | for.the.system.to.use.and.comple |
d6880 | 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 20 6e 61 6d 65 73 2c 20 61 20 6c 69 73 | te.unqualified.host.names,.a.lis |
d68a0 | 74 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 | t.can.be.defined.which.will.be.u |
d68c0 | 73 65 64 20 66 6f 72 20 64 6f 6d 61 69 6e 20 73 65 61 72 63 68 65 73 2e 00 49 6e 20 6f 72 64 65 | sed.for.domain.searches..In.orde |
d68e0 | 72 20 74 6f 20 61 6c 6c 6f 77 20 66 6f 72 20 4c 44 50 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 | r.to.allow.for.LDP.on.the.local. |
d6900 | 72 6f 75 74 65 72 20 74 6f 20 65 78 63 68 61 6e 67 65 20 6c 61 62 65 6c 20 61 64 76 65 72 74 69 | router.to.exchange.label.adverti |
d6920 | 73 65 6d 65 6e 74 73 20 77 69 74 68 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 2c 20 61 20 54 43 | sements.with.other.routers,.a.TC |
d6940 | 50 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 62 65 | P.session.will.be.established.be |
d6960 | 74 77 65 65 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 65 64 20 61 | tween.automatically.discovered.a |
d6980 | 6e 64 20 73 74 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 72 6f 75 74 65 72 73 2e 20 | nd.statically.assigned.routers.. |
d69a0 | 4c 44 50 20 77 69 6c 6c 20 74 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 54 43 50 20 | LDP.will.try.to.establish.a.TCP. |
d69c0 | 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 65 20 2a 2a 74 72 61 6e 73 70 6f 72 74 20 61 64 64 72 65 | session.to.the.**transport.addre |
d69e0 | 73 73 2a 2a 20 6f 66 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 2e 20 54 68 65 72 65 66 6f 72 65 | ss**.of.other.routers..Therefore |
d6a00 | 20 66 6f 72 20 4c 44 50 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 70 65 72 6c 79 20 70 6c | .for.LDP.to.function.properly.pl |
d6a20 | 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 74 72 61 6e 73 70 6f 72 74 20 61 64 64 | ease.make.sure.the.transport.add |
d6a40 | 72 65 73 73 20 69 73 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 | ress.is.shown.in.the.routing.tab |
d6a60 | 6c 65 20 61 6e 64 20 72 65 61 63 68 61 62 6c 65 20 74 6f 20 74 72 61 66 66 69 63 20 61 74 20 61 | le.and.reachable.to.traffic.at.a |
d6a80 | 6c 6c 20 74 69 6d 65 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e | ll.times..In.order.to.control.an |
d6aa0 | 64 20 6d 6f 64 69 66 79 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 | d.modify.routing.information.tha |
d6ac0 | 74 20 69 73 20 65 78 63 68 61 6e 67 65 64 20 62 65 74 77 65 65 6e 20 70 65 65 72 73 20 79 6f 75 | t.is.exchanged.between.peers.you |
d6ae0 | 20 63 61 6e 20 75 73 65 20 72 6f 75 74 65 2d 6d 61 70 2c 20 66 69 6c 74 65 72 2d 6c 69 73 74 2c | .can.use.route-map,.filter-list, |
d6b00 | 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 2e 00 49 | .prefix-list,.distribute-list..I |
d6b20 | 6e 20 6f 72 64 65 72 20 74 6f 20 64 65 66 69 6e 65 20 77 68 69 63 68 20 74 72 61 66 66 69 63 20 | n.order.to.define.which.traffic. |
d6b40 | 67 6f 65 73 20 69 6e 74 6f 20 77 68 69 63 68 20 63 6c 61 73 73 2c 20 79 6f 75 20 64 65 66 69 6e | goes.into.which.class,.you.defin |
d6b60 | 65 20 66 69 6c 74 65 72 73 20 28 74 68 61 74 20 69 73 2c 20 74 68 65 20 6d 61 74 63 68 69 6e 67 | e.filters.(that.is,.the.matching |
d6b80 | 20 63 72 69 74 65 72 69 61 29 2e 20 50 61 63 6b 65 74 73 20 67 6f 20 74 68 72 6f 75 67 68 20 74 | .criteria)..Packets.go.through.t |
d6ba0 | 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 73 20 28 61 73 20 69 6e 20 74 68 65 20 72 | hese.matching.rules.(as.in.the.r |
d6bc0 | 75 6c 65 73 20 6f 66 20 61 20 66 69 72 65 77 61 6c 6c 29 20 61 6e 64 2c 20 69 66 20 61 20 70 61 | ules.of.a.firewall).and,.if.a.pa |
d6be0 | 63 6b 65 74 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 74 65 72 2c 20 69 74 20 69 73 20 61 | cket.matches.the.filter,.it.is.a |
d6c00 | 73 73 69 67 6e 65 64 20 74 6f 20 74 68 61 74 20 63 6c 61 73 73 2e 00 49 6e 20 6f 72 64 65 72 20 | ssigned.to.that.class..In.order. |
d6c20 | 74 6f 20 68 61 76 65 20 56 79 4f 53 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 77 6f 72 | to.have.VyOS.Traffic.Control.wor |
d6c40 | 6b 69 6e 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 66 6f 6c 6c 6f 77 20 32 20 73 74 65 70 73 3a | king.you.need.to.follow.2.steps: |
d6c60 | 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 68 61 76 65 20 66 75 6c 6c 20 63 6f 6e 74 72 6f 6c 20 61 | .In.order.to.have.full.control.a |
d6c80 | 6e 64 20 6d 61 6b 65 20 75 73 65 20 6f 66 20 6d 75 6c 74 69 70 6c 65 20 73 74 61 74 69 63 20 70 | nd.make.use.of.multiple.static.p |
d6ca0 | 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 79 6f 75 72 20 56 79 4f 53 20 77 69 | ublic.IP.addresses,.your.VyOS.wi |
d6cc0 | 6c 6c 20 68 61 76 65 20 74 6f 20 69 6e 69 74 69 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 63 6f | ll.have.to.initiate.the.PPPoE.co |
d6ce0 | 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 6f 6c 20 69 74 2e 20 49 6e 20 6f 72 64 65 | nnection.and.control.it..In.orde |
d6d00 | 72 20 66 6f 72 20 74 68 69 73 20 6d 65 74 68 6f 64 20 74 6f 20 77 6f 72 6b 2c 20 79 6f 75 20 77 | r.for.this.method.to.work,.you.w |
d6d20 | 69 6c 6c 20 68 61 76 65 20 74 6f 20 66 69 67 75 72 65 20 6f 75 74 20 68 6f 77 20 74 6f 20 6d 61 | ill.have.to.figure.out.how.to.ma |
d6d40 | 6b 65 20 79 6f 75 72 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 20 73 77 69 74 63 68 20 | ke.your.DSL.Modem/Router.switch. |
d6d60 | 69 6e 74 6f 20 61 20 42 72 69 64 67 65 64 20 4d 6f 64 65 20 73 6f 20 69 74 20 6f 6e 6c 79 20 61 | into.a.Bridged.Mode.so.it.only.a |
d6d80 | 63 74 73 20 61 73 20 61 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 64 65 76 69 63 65 20 | cts.as.a.DSL.Transceiver.device. |
d6da0 | 74 6f 20 63 6f 6e 6e 65 63 74 20 62 65 74 77 65 65 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 | to.connect.between.the.Ethernet. |
d6dc0 | 6c 69 6e 6b 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 61 6e 64 20 74 68 65 20 70 68 6f 6e 65 20 | link.of.your.VyOS.and.the.phone. |
d6de0 | 63 61 62 6c 65 2e 20 4f 6e 63 65 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 | cable..Once.your.DSL.Transceiver |
d6e00 | 20 69 73 20 69 6e 20 42 72 69 64 67 65 20 4d 6f 64 65 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 67 | .is.in.Bridge.Mode,.you.should.g |
d6e20 | 65 74 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 69 74 2e 20 50 6c 65 61 73 65 | et.no.IP.address.from.it..Please |
d6e40 | 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 45 74 | .make.sure.you.connect.to.the.Et |
d6e60 | 68 65 72 6e 65 74 20 50 6f 72 74 20 31 20 69 66 20 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 | hernet.Port.1.if.your.DSL.Transc |
d6e80 | 65 69 76 65 72 20 68 61 73 20 61 20 73 77 69 74 63 68 2c 20 61 73 20 73 6f 6d 65 20 6f 66 20 74 | eiver.has.a.switch,.as.some.of.t |
d6ea0 | 68 65 6d 20 6f 6e 6c 79 20 77 6f 72 6b 20 74 68 69 73 20 77 61 79 2e 00 49 6e 20 6f 72 64 65 72 | hem.only.work.this.way..In.order |
d6ec0 | 20 74 6f 20 6d 61 70 20 73 70 65 63 69 66 69 63 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 | .to.map.specific.IPv6.addresses. |
d6ee0 | 74 6f 20 73 70 65 63 69 66 69 63 20 68 6f 73 74 73 20 73 74 61 74 69 63 20 6d 61 70 70 69 6e 67 | to.specific.hosts.static.mapping |
d6f00 | 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | s.can.be.created..The.following. |
d6f20 | 65 78 61 6d 70 6c 65 20 65 78 70 6c 61 69 6e 73 20 74 68 65 20 70 72 6f 63 65 73 73 2e 00 49 6e | example.explains.the.process..In |
d6f40 | 20 6f 72 64 65 72 20 74 6f 20 6d 69 6e 69 6d 69 7a 65 20 74 68 65 20 66 6c 6f 6f 64 69 6e 67 20 | .order.to.minimize.the.flooding. |
d6f60 | 6f 66 20 41 52 50 20 61 6e 64 20 4e 44 20 6d 65 73 73 61 67 65 73 20 69 6e 20 74 68 65 20 56 58 | of.ARP.and.ND.messages.in.the.VX |
d6f80 | 4c 41 4e 20 6e 65 74 77 6f 72 6b 2c 20 45 56 50 4e 20 69 6e 63 6c 75 64 65 73 20 70 72 6f 76 69 | LAN.network,.EVPN.includes.provi |
d6fa0 | 73 69 6f 6e 73 20 3a 72 66 63 3a 60 37 34 33 32 23 73 65 63 74 69 6f 6e 2d 31 30 60 20 74 68 61 | sions.:rfc:`7432#section-10`.tha |
d6fc0 | 74 20 61 6c 6c 6f 77 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 56 54 45 50 73 20 74 6f 20 73 | t.allow.participating.VTEPs.to.s |
d6fe0 | 75 70 70 72 65 73 73 20 73 75 63 68 20 6d 65 73 73 61 67 65 73 20 69 6e 20 63 61 73 65 20 74 68 | uppress.such.messages.in.case.th |
d7000 | 65 79 20 6b 6e 6f 77 20 74 68 65 20 4d 41 43 2d 49 50 20 62 69 6e 64 69 6e 67 20 61 6e 64 20 63 | ey.know.the.MAC-IP.binding.and.c |
d7020 | 61 6e 20 72 65 70 6c 79 20 6f 6e 20 62 65 68 61 6c 66 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 | an.reply.on.behalf.of.the.remote |
d7040 | 20 68 6f 73 74 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 73 65 70 61 72 61 74 65 20 74 72 61 66 | .host..In.order.to.separate.traf |
d7060 | 66 69 63 2c 20 46 61 69 72 20 51 75 65 75 65 20 75 73 65 73 20 61 20 63 6c 61 73 73 69 66 69 65 | fic,.Fair.Queue.uses.a.classifie |
d7080 | 72 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 | r.based.on.source.address,.desti |
d70a0 | 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 | nation.address.and.source.port.. |
d70c0 | 54 68 65 20 61 6c 67 6f 72 69 74 68 6d 20 65 6e 71 75 65 75 65 73 20 70 61 63 6b 65 74 73 20 74 | The.algorithm.enqueues.packets.t |
d70e0 | 6f 20 68 61 73 68 20 62 75 63 6b 65 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 6f 73 65 20 74 72 | o.hash.buckets.based.on.those.tr |
d7100 | 65 65 20 70 61 72 61 6d 65 74 65 72 73 2e 20 45 61 63 68 20 6f 66 20 74 68 65 73 65 20 62 75 63 | ee.parameters..Each.of.these.buc |
d7120 | 6b 65 74 73 20 73 68 6f 75 6c 64 20 72 65 70 72 65 73 65 6e 74 20 61 20 75 6e 69 71 75 65 20 66 | kets.should.represent.a.unique.f |
d7140 | 6c 6f 77 2e 20 42 65 63 61 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 66 6c 6f 77 73 20 6d 61 79 20 | low..Because.multiple.flows.may. |
d7160 | 67 65 74 20 68 61 73 68 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 62 75 63 6b 65 74 2c 20 74 | get.hashed.to.the.same.bucket,.t |
d7180 | 68 65 20 68 61 73 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 70 65 72 74 75 72 62 65 | he.hashing.algorithm.is.perturbe |
d71a0 | 64 20 61 74 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 69 6e 74 65 72 76 61 6c 73 20 73 6f 20 74 | d.at.configurable.intervals.so.t |
d71c0 | 68 61 74 20 74 68 65 20 75 6e 66 61 69 72 6e 65 73 73 20 6c 61 73 74 73 20 6f 6e 6c 79 20 66 6f | hat.the.unfairness.lasts.only.fo |
d71e0 | 72 20 61 20 73 68 6f 72 74 20 77 68 69 6c 65 2e 20 50 65 72 74 75 72 62 61 74 69 6f 6e 20 6d 61 | r.a.short.while..Perturbation.ma |
d7200 | 79 20 68 6f 77 65 76 65 72 20 63 61 75 73 65 20 73 6f 6d 65 20 69 6e 61 64 76 65 72 74 65 6e 74 | y.however.cause.some.inadvertent |
d7220 | 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 20 74 6f 20 6f 63 63 75 72 2e 20 41 6e 20 | .packet.reordering.to.occur..An. |
d7240 | 61 64 76 69 73 61 62 6c 65 20 76 61 6c 75 65 20 63 6f 75 6c 64 20 62 65 20 31 30 20 73 65 63 6f | advisable.value.could.be.10.seco |
d7260 | 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 50 49 4d 2c 20 69 74 20 69 73 20 | nds..In.order.to.use.PIM,.it.is. |
d7280 | 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 3a 61 62 62 72 3a 60 | necessary.to.configure.a.:abbr:` |
d72a0 | 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 20 66 6f 72 20 6a 6f 69 6e 20 | RP.(Rendezvous.Point)`.for.join. |
d72c0 | 6d 65 73 73 61 67 65 73 20 74 6f 20 62 65 20 73 65 6e 74 20 74 6f 2e 20 43 75 72 72 65 6e 74 6c | messages.to.be.sent.to..Currentl |
d72e0 | 79 20 74 68 65 20 6f 6e 6c 79 20 6d 65 74 68 6f 64 6f 6c 6f 67 79 20 74 6f 20 64 6f 20 74 68 69 | y.the.only.methodology.to.do.thi |
d7300 | 73 20 69 73 20 76 69 61 20 73 74 61 74 69 63 20 72 65 6e 64 65 7a 76 6f 75 73 20 70 6f 69 6e 74 | s.is.via.static.rendezvous.point |
d7320 | 20 63 6f 6d 6d 61 6e 64 73 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 54 53 4f 2f 4c | .commands..In.order.to.use.TSO/L |
d7340 | 52 4f 20 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 70 74 65 72 73 2c 20 74 68 65 20 53 47 | RO.with.VMXNET3.adapters,.the.SG |
d7360 | 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 70 74 69 6f 6e 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 | .offloading.option.must.also.be. |
d7380 | 65 6e 61 62 6c 65 64 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 54 53 4f 2f 4c 52 4f | enabled..In.order.to.use.TSO/LRO |
d73a0 | 20 77 69 74 68 20 56 4d 58 4e 45 54 33 20 61 64 61 74 65 72 73 20 6f 6e 65 20 6d 75 73 74 20 61 | .with.VMXNET3.adaters.one.must.a |
d73c0 | 6c 73 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 53 47 20 6f 66 66 6c 6f 61 64 69 6e 67 20 6f 70 74 | lso.enable.the.SG.offloading.opt |
d73e0 | 69 6f 6e 2e 00 49 6e 20 6f 72 64 65 72 20 74 6f 20 75 73 65 20 66 6c 6f 77 74 61 62 6c 65 73 2c | ion..In.order.to.use.flowtables, |
d7400 | 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 | .the.minimal.configuration.neede |
d7420 | 64 20 69 6e 63 6c 75 64 65 73 3a 00 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 20 69 74 20 61 6c | d.includes:.In.other.words.it.al |
d7440 | 6c 6f 77 73 20 63 6f 6e 74 72 6f 6c 20 6f 66 20 77 68 69 63 68 20 63 61 72 64 73 20 28 75 73 75 | lows.control.of.which.cards.(usu |
d7460 | 61 6c 6c 79 20 31 29 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 74 6f 20 61 6e 20 61 72 70 20 72 | ally.1).will.respond.to.an.arp.r |
d7480 | 65 71 75 65 73 74 2e 00 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 63 6f 6e 6e 65 63 74 69 | equest..In.other.words,.connecti |
d74a0 | 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 61 73 20 61 6c 72 65 61 64 79 20 6f 62 73 65 72 76 65 64 | on.tracking.has.already.observed |
d74c0 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 20 63 6c 6f 73 65 64 20 61 6e 64 20 68 61 | .the.connection.be.closed.and.ha |
d74e0 | 73 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 66 6c 6f 77 20 74 6f 20 49 4e 56 41 4c 49 44 | s.transition.the.flow.to.INVALID |
d7500 | 20 74 6f 20 70 72 65 76 65 6e 74 20 61 74 74 61 63 6b 73 20 66 72 6f 6d 20 61 74 74 65 6d 70 74 | .to.prevent.attacks.from.attempt |
d7520 | 69 6e 67 20 74 6f 20 72 65 75 73 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 49 6e 20 | ing.to.reuse.the.connection..In. |
d7540 | 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 | our.example.the.certificate.name |
d7560 | 20 69 73 20 63 61 6c 6c 65 64 20 76 79 6f 73 3a 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 2c | .is.called.vyos:.In.our.example, |
d7580 | 20 77 65 20 75 73 65 64 20 74 68 65 20 6b 65 79 20 6e 61 6d 65 20 60 60 6f 70 65 6e 76 70 6e 2d | .we.used.the.key.name.``openvpn- |
d75a0 | 31 60 60 20 77 68 69 63 68 20 77 65 20 77 69 6c 6c 20 72 65 66 65 72 65 6e 63 65 20 69 6e 20 6f | 1``.which.we.will.reference.in.o |
d75c0 | 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 | ur.configuration..In.our.example |
d75e0 | 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 69 6e 67 20 77 65 62 20 73 65 72 76 | ,.we.will.be.forwarding.web.serv |
d7600 | 65 72 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 77 65 62 20 73 65 | er.traffic.to.an.internal.web.se |
d7620 | 72 76 65 72 20 6f 6e 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 20 48 54 54 50 20 74 72 61 66 | rver.on.192.168.0.100..HTTP.traf |
d7640 | 66 69 63 20 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 74 68 65 20 54 43 50 20 70 72 6f 74 6f 63 6f | fic.makes.use.of.the.TCP.protoco |
d7660 | 6c 20 6f 6e 20 70 6f 72 74 20 38 30 2e 20 46 6f 72 20 6f 74 68 65 72 20 63 6f 6d 6d 6f 6e 20 70 | l.on.port.80..For.other.common.p |
d7680 | 6f 72 74 20 6e 75 6d 62 65 72 73 2c 20 73 65 65 3a 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b | ort.numbers,.see:.https://en.wik |
d76a0 | 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4c 69 73 74 5f 6f 66 5f 54 43 50 5f 61 6e 64 5f | ipedia.org/wiki/List_of_TCP_and_ |
d76c0 | 55 44 50 5f 70 6f 72 74 5f 6e 75 6d 62 65 72 73 00 49 6e 20 70 72 69 6e 63 69 70 6c 65 2c 20 76 | UDP_port_numbers.In.principle,.v |
d76e0 | 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 3a 63 6f 64 65 3a 60 6d 69 6e 2d 74 68 72 65 73 68 6f | alues.must.be.:code:`min-thresho |
d7700 | 6c 64 60 20 3c 20 3a 63 6f 64 65 3a 60 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 60 20 3c 20 3a 63 | ld`.<.:code:`max-threshold`.<.:c |
d7720 | 6f 64 65 3a 60 71 75 65 75 65 2d 6c 69 6d 69 74 60 2e 00 49 6e 20 73 68 6f 72 74 2c 20 44 4d 56 | ode:`queue-limit`..In.short,.DMV |
d7740 | 50 4e 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 20 66 6f 72 20 63 | PN.provides.the.capability.for.c |
d7760 | 72 65 61 74 69 6e 67 20 61 20 64 79 6e 61 6d 69 63 2d 6d 65 73 68 20 56 50 4e 20 6e 65 74 77 6f | reating.a.dynamic-mesh.VPN.netwo |
d7780 | 72 6b 20 77 69 74 68 6f 75 74 20 68 61 76 69 6e 67 20 74 6f 20 70 72 65 2d 63 6f 6e 66 69 67 75 | rk.without.having.to.pre-configu |
d77a0 | 72 65 20 28 73 74 61 74 69 63 29 20 61 6c 6c 20 70 6f 73 73 69 62 6c 65 20 74 75 6e 6e 65 6c 20 | re.(static).all.possible.tunnel. |
d77c0 | 65 6e 64 2d 70 6f 69 6e 74 20 70 65 65 72 73 2e 00 49 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 69 | end-point.peers..In.some.cases.i |
d77e0 | 74 20 6d 61 79 20 62 65 20 6d 6f 72 65 20 63 6f 6e 76 65 6e 69 65 6e 74 20 74 6f 20 65 6e 61 62 | t.may.be.more.convenient.to.enab |
d7800 | 6c 65 20 4f 53 50 46 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 2f 73 75 62 6e 65 | le.OSPF.on.a.per.interface/subne |
d7820 | 74 20 62 61 73 69 73 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 70 72 6f 74 6f 63 6f 6c 73 20 6f | t.basis.:cfgcmd:`set.protocols.o |
d7840 | 73 70 66 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 72 66 61 63 65 3e 20 61 72 65 61 20 3c | spf.interface.<interface>.area.< |
d7860 | 78 2e 78 2e 78 2e 78 20 7c 20 78 3e 60 00 49 6e 20 74 68 65 20 3a 72 65 66 3a 60 63 72 65 61 74 | x.x.x.x.|.x>`.In.the.:ref:`creat |
d7880 | 69 6e 67 5f 61 5f 74 72 61 66 66 69 63 5f 70 6f 6c 69 63 79 60 20 73 65 63 74 69 6f 6e 20 79 6f | ing_a_traffic_policy`.section.yo |
d78a0 | 75 20 77 69 6c 6c 20 73 65 65 20 74 68 61 74 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 | u.will.see.that.some.of.the.poli |
d78c0 | 63 69 65 73 20 75 73 65 20 2a 63 6c 61 73 73 65 73 2a 2e 20 54 68 6f 73 65 20 70 6f 6c 69 63 69 | cies.use.*classes*..Those.polici |
d78e0 | 65 73 20 6c 65 74 20 79 6f 75 20 64 69 73 74 72 69 62 75 74 65 20 74 72 61 66 66 69 63 20 69 6e | es.let.you.distribute.traffic.in |
d7900 | 74 6f 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 20 61 63 63 6f 72 64 69 6e 67 20 74 | to.different.classes.according.t |
d7920 | 6f 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 63 61 6e 20 63 | o.different.parameters.you.can.c |
d7940 | 68 6f 6f 73 65 2e 20 53 6f 2c 20 61 20 63 6c 61 73 73 20 69 73 20 6a 75 73 74 20 61 20 73 70 65 | hoose..So,.a.class.is.just.a.spe |
d7960 | 63 69 66 69 63 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 79 6f 75 20 73 65 6c 65 63 74 | cific.type.of.traffic.you.select |
d7980 | 2e 00 49 6e 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2c 20 61 20 6b 65 79 20 70 6f 69 6e 74 20 6f | ..In.the.VyOS.CLI,.a.key.point.o |
d79a0 | 66 74 65 6e 20 6f 76 65 72 6c 6f 6f 6b 65 64 20 69 73 20 74 68 61 74 20 72 61 74 68 65 72 20 74 | ften.overlooked.is.that.rather.t |
d79c0 | 68 61 6e 20 62 65 69 6e 67 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 | han.being.configured.using.the.` |
d79e0 | 73 65 74 20 76 70 6e 60 20 73 74 61 6e 7a 61 2c 20 4f 70 65 6e 56 50 4e 20 69 73 20 63 6f 6e 66 | set.vpn`.stanza,.OpenVPN.is.conf |
d7a00 | 69 67 75 72 65 64 20 61 73 20 61 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 75 73 | igured.as.a.network.interface.us |
d7a20 | 69 6e 67 20 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 6e 76 70 6e 60 2e 00 49 6e | ing.`set.interfaces.openvpn`..In |
d7a40 | 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2c 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 | .the.above.example,.an.external. |
d7a60 | 49 50 20 6f 66 20 31 39 32 2e 30 2e 32 2e 32 20 69 73 20 61 73 73 75 6d 65 64 2e 00 49 6e 20 74 | IP.of.192.0.2.2.is.assumed..In.t |
d7a80 | 68 65 20 61 67 65 20 6f 66 20 76 65 72 79 20 66 61 73 74 20 6e 65 74 77 6f 72 6b 73 2c 20 61 20 | he.age.of.very.fast.networks,.a. |
d7aa0 | 73 65 63 6f 6e 64 20 6f 66 20 75 6e 72 65 61 63 68 61 62 69 6c 69 74 79 20 6d 61 79 20 65 71 75 | second.of.unreachability.may.equ |
d7ac0 | 61 6c 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 6c 6f 73 74 20 70 61 63 6b 65 74 73 2e 20 54 68 65 | al.millions.of.lost.packets..The |
d7ae0 | 20 69 64 65 61 20 62 65 68 69 6e 64 20 42 46 44 20 69 73 20 74 6f 20 64 65 74 65 63 74 20 76 65 | .idea.behind.BFD.is.to.detect.ve |
d7b00 | 72 79 20 71 75 69 63 6b 6c 79 20 77 68 65 6e 20 61 20 70 65 65 72 20 69 73 20 64 6f 77 6e 20 61 | ry.quickly.when.a.peer.is.down.a |
d7b20 | 6e 64 20 74 61 6b 65 20 61 63 74 69 6f 6e 20 65 78 74 72 65 6d 65 6c 79 20 66 61 73 74 2e 00 49 | nd.take.action.extremely.fast..I |
d7b40 | 6e 20 74 68 65 20 63 61 73 65 20 6f 66 20 4c 32 54 50 76 33 2c 20 74 68 65 20 66 65 61 74 75 72 | n.the.case.of.L2TPv3,.the.featur |
d7b60 | 65 73 20 6c 6f 73 74 20 61 72 65 20 74 65 6c 65 74 72 61 66 66 69 63 20 65 6e 67 69 6e 65 65 72 | es.lost.are.teletraffic.engineer |
d7b80 | 69 6e 67 20 66 65 61 74 75 72 65 73 20 63 6f 6e 73 69 64 65 72 65 64 20 69 6d 70 6f 72 74 61 6e | ing.features.considered.importan |
d7ba0 | 74 20 69 6e 20 4d 50 4c 53 2e 20 48 6f 77 65 76 65 72 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 | t.in.MPLS..However,.there.is.no. |
d7bc0 | 72 65 61 73 6f 6e 20 74 68 65 73 65 20 66 65 61 74 75 72 65 73 20 63 6f 75 6c 64 20 6e 6f 74 20 | reason.these.features.could.not. |
d7be0 | 62 65 20 72 65 2d 65 6e 67 69 6e 65 65 72 65 64 20 69 6e 20 6f 72 20 6f 6e 20 74 6f 70 20 6f 66 | be.re-engineered.in.or.on.top.of |
d7c00 | 20 4c 32 54 50 76 33 20 69 6e 20 6c 61 74 65 72 20 70 72 6f 64 75 63 74 73 2e 00 49 6e 20 74 68 | .L2TPv3.in.later.products..In.th |
d7c20 | 65 20 63 61 73 65 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 73 | e.case.the.average.queue.size.is |
d7c40 | 20 62 65 74 77 65 65 6e 20 2a 2a 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 20 61 6e 64 20 2a | .between.**min-threshold**.and.* |
d7c60 | 2a 6d 61 78 2d 74 68 72 65 73 68 6f 6c 64 2a 2a 2c 20 74 68 65 6e 20 61 6e 20 61 72 72 69 76 69 | *max-threshold**,.then.an.arrivi |
d7c80 | 6e 67 20 70 61 63 6b 65 74 20 77 6f 75 6c 64 20 62 65 20 65 69 74 68 65 72 20 64 72 6f 70 70 65 | ng.packet.would.be.either.droppe |
d7ca0 | 64 20 6f 72 20 70 6c 61 63 65 64 20 69 6e 20 74 68 65 20 71 75 65 75 65 2c 20 69 74 20 77 69 6c | d.or.placed.in.the.queue,.it.wil |
d7cc0 | 6c 20 64 65 70 65 6e 64 20 6f 6e 20 74 68 65 20 64 65 66 69 6e 65 64 20 2a 2a 6d 61 72 6b 2d 70 | l.depend.on.the.defined.**mark-p |
d7ce0 | 72 6f 62 61 62 69 6c 69 74 79 2a 2a 2e 00 49 6e 20 74 68 65 20 63 61 73 65 20 79 6f 75 20 77 61 | robability**..In.the.case.you.wa |
d7d00 | 6e 74 20 74 6f 20 61 70 70 6c 79 20 73 6f 6d 65 20 6b 69 6e 64 20 6f 66 20 2a 2a 73 68 61 70 69 | nt.to.apply.some.kind.of.**shapi |
d7d20 | 6e 67 2a 2a 20 74 6f 20 79 6f 75 72 20 2a 2a 69 6e 62 6f 75 6e 64 2a 2a 20 74 72 61 66 66 69 63 | ng**.to.your.**inbound**.traffic |
d7d40 | 2c 20 63 68 65 63 6b 20 74 68 65 20 69 6e 67 72 65 73 73 2d 73 68 61 70 69 6e 67 5f 20 73 65 63 | ,.check.the.ingress-shaping_.sec |
d7d60 | 74 69 6f 6e 2e 00 49 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 2c 20 77 65 20 73 | tion..In.the.command.above,.we.s |
d7d80 | 65 74 20 74 68 65 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 79 20 77 65 20 61 72 65 20 67 6f 69 | et.the.type.of.policy.we.are.goi |
d7da0 | 6e 67 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 61 6e 64 20 74 68 65 20 6e 61 6d 65 20 77 65 20 | ng.to.work.with.and.the.name.we. |
d7dc0 | 63 68 6f 6f 73 65 20 66 6f 72 20 69 74 3b 20 61 20 63 6c 61 73 73 20 28 73 6f 20 74 68 61 74 20 | choose.for.it;.a.class.(so.that. |
d7de0 | 77 65 20 63 61 6e 20 64 69 66 66 65 72 65 6e 74 69 61 74 65 20 73 6f 6d 65 20 74 72 61 66 66 69 | we.can.differentiate.some.traffi |
d7e00 | 63 29 20 61 6e 64 20 61 6e 20 69 64 65 6e 74 69 66 69 61 62 6c 65 20 6e 75 6d 62 65 72 20 66 6f | c).and.an.identifiable.number.fo |
d7e20 | 72 20 74 68 61 74 20 63 6c 61 73 73 3b 20 74 68 65 6e 20 77 65 20 63 6f 6e 66 69 67 75 72 65 20 | r.that.class;.then.we.configure. |
d7e40 | 61 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 28 6f 72 20 66 69 6c 74 65 72 29 20 61 6e 64 20 | a.matching.rule.(or.filter).and. |
d7e60 | 61 20 6e 61 6d 65 20 66 6f 72 20 69 74 2e 00 49 6e 20 74 68 65 20 65 6e 64 2c 20 61 6e 20 58 4d | a.name.for.it..In.the.end,.an.XM |
d7e80 | 4c 20 73 74 72 75 63 74 75 72 65 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 77 68 69 63 68 20 63 | L.structure.is.generated.which.c |
d7ea0 | 61 6e 20 62 65 20 73 61 76 65 64 20 61 73 20 60 60 76 79 6f 73 2e 6d 6f 62 69 6c 65 63 6f 6e 66 | an.be.saved.as.``vyos.mobileconf |
d7ec0 | 69 67 60 60 20 61 6e 64 20 73 65 6e 74 20 74 6f 20 74 68 65 20 64 65 76 69 63 65 20 62 79 20 45 | ig``.and.sent.to.the.device.by.E |
d7ee0 | 2d 4d 61 69 6c 20 77 68 65 72 65 20 69 74 20 6c 61 74 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6f | -Mail.where.it.later.can.be.impo |
d7f00 | 72 74 65 64 2e 00 49 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 2c 20 74 68 65 20 | rted..In.the.example.above,.the. |
d7f20 | 66 69 72 73 74 20 34 39 39 20 73 65 73 73 69 6f 6e 73 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 6f | first.499.sessions.connect.witho |
d7f40 | 75 74 20 64 65 6c 61 79 2e 20 50 41 44 4f 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 62 65 20 64 | ut.delay..PADO.packets.will.be.d |
d7f60 | 65 6c 61 79 65 64 20 35 30 20 6d 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 72 6f 6d | elayed.50.ms.for.connection.from |
d7f80 | 20 35 30 30 20 74 6f 20 39 39 39 2c 20 74 68 69 73 20 74 72 69 63 6b 20 61 6c 6c 6f 77 73 20 6f | .500.to.999,.this.trick.allows.o |
d7fa0 | 74 68 65 72 20 50 50 50 6f 45 20 73 65 72 76 65 72 73 20 73 65 6e 64 20 50 41 44 4f 20 66 61 73 | ther.PPPoE.servers.send.PADO.fas |
d7fc0 | 74 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 | ter.and.clients.will.connect.to. |
d7fe0 | 6f 74 68 65 72 20 73 65 72 76 65 72 73 2e 20 4c 61 73 74 20 63 6f 6d 6d 61 6e 64 20 73 61 79 73 | other.servers..Last.command.says |
d8000 | 20 74 68 61 74 20 74 68 69 73 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 63 61 6e 20 73 65 72 76 | .that.this.PPPoE.server.can.serv |
d8020 | 65 20 6f 6e 6c 79 20 33 30 30 30 20 63 6c 69 65 6e 74 73 2e 00 49 6e 20 74 68 65 20 65 78 61 6d | e.only.3000.clients..In.the.exam |
d8040 | 70 6c 65 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e | ple.used.for.the.Quick.Start.con |
d8060 | 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 2c 20 77 65 20 64 65 6d 6f 6e 73 74 72 61 74 65 | figuration.above,.we.demonstrate |
d8080 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 49 6e | .the.following.configuration:.In |
d80a0 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 65 20 63 61 6e 20 73 65 | .the.following.example.we.can.se |
d80c0 | 65 20 61 20 62 61 73 69 63 20 6d 75 6c 74 69 63 61 73 74 20 73 65 74 75 70 3a 00 49 6e 20 74 68 | e.a.basic.multicast.setup:.In.th |
d80e0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 62 6f 74 68 20 60 55 73 65 72 31 | e.following.example,.both.`User1 |
d8100 | 60 20 61 6e 64 20 60 55 73 65 72 32 60 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 53 53 | `.and.`User2`.will.be.able.to.SS |
d8120 | 48 20 69 6e 74 6f 20 56 79 4f 53 20 61 73 20 75 73 65 72 20 60 60 76 79 6f 73 60 60 20 75 73 69 | H.into.VyOS.as.user.``vyos``.usi |
d8140 | 6e 67 20 74 68 65 69 72 20 76 65 72 79 20 6f 77 6e 20 6b 65 79 73 2e 20 60 55 73 65 72 31 60 20 | ng.their.very.own.keys..`User1`. |
d8160 | 69 73 20 72 65 73 74 72 69 63 74 65 64 20 74 6f 20 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f | is.restricted.to.only.be.able.to |
d8180 | 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 61 20 73 69 6e 67 6c 65 20 49 50 20 61 64 64 72 65 73 | .connect.from.a.single.IP.addres |
d81a0 | 73 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 69 66 20 70 61 73 73 77 6f 72 64 20 62 61 73 65 20 | s..In.addition.if.password.base. |
d81c0 | 6c 6f 67 69 6e 20 69 73 20 77 61 6e 74 65 64 20 66 6f 72 20 74 68 65 20 60 60 76 79 6f 73 60 60 | login.is.wanted.for.the.``vyos`` |
d81e0 | 20 75 73 65 72 20 61 20 32 46 41 2f 4d 46 41 20 6b 65 79 63 6f 64 65 20 69 73 20 72 65 71 75 69 | .user.a.2FA/MFA.keycode.is.requi |
d8200 | 72 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 70 61 73 73 77 6f 72 64 2e | red.in.addition.to.the.password. |
d8220 | 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 20 49 | .In.the.following.example,.the.I |
d8240 | 50 73 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 63 6c 69 65 6e 74 73 20 61 72 65 20 64 65 | Ps.for.the.remote.clients.are.de |
d8260 | 66 69 6e 65 64 20 69 6e 20 74 68 65 20 70 65 65 72 73 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 | fined.in.the.peers..This.allows. |
d8280 | 74 68 65 20 70 65 65 72 73 20 74 6f 20 69 6e 74 65 72 61 63 74 20 77 69 74 68 20 6f 6e 65 20 61 | the.peers.to.interact.with.one.a |
d82a0 | 6e 6f 74 68 65 72 2e 20 49 6e 20 63 6f 6d 70 61 72 69 73 6f 6e 20 74 6f 20 74 68 65 20 73 69 74 | nother..In.comparison.to.the.sit |
d82c0 | 65 2d 74 6f 2d 73 69 74 65 20 65 78 61 6d 70 6c 65 20 74 68 65 20 60 60 70 65 72 73 69 73 74 65 | e-to-site.example.the.``persiste |
d82e0 | 6e 74 2d 6b 65 65 70 61 6c 69 76 65 60 60 20 66 6c 61 67 20 69 73 20 73 65 74 20 74 6f 20 31 35 | nt-keepalive``.flag.is.set.to.15 |
d8300 | 20 73 65 63 6f 6e 64 73 20 74 6f 20 61 73 73 75 72 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | .seconds.to.assure.the.connectio |
d8320 | 6e 20 69 73 20 6b 65 70 74 20 61 6c 69 76 65 2e 20 54 68 69 73 20 69 73 20 6d 61 69 6e 6c 79 20 | n.is.kept.alive..This.is.mainly. |
d8340 | 72 65 6c 65 76 61 6e 74 20 69 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 70 65 65 72 73 20 69 73 20 | relevant.if.one.of.the.peers.is. |
d8360 | 62 65 68 69 6e 64 20 4e 41 54 20 61 6e 64 20 63 61 6e 27 74 20 62 65 20 63 6f 6e 6e 65 63 74 65 | behind.NAT.and.can't.be.connecte |
d8380 | 64 20 74 6f 20 69 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6c 6f 73 74 2e 20 | d.to.if.the.connection.is.lost.. |
d83a0 | 54 6f 20 62 65 20 65 66 66 65 63 74 69 76 65 20 74 68 69 73 20 76 61 6c 75 65 20 6e 65 65 64 73 | To.be.effective.this.value.needs |
d83c0 | 20 74 6f 20 62 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 74 68 65 20 55 44 50 20 74 69 6d 65 6f 75 | .to.be.lower.than.the.UDP.timeou |
d83e0 | 74 2e 00 49 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 | t..In.the.following.example,.whe |
d8400 | 6e 20 56 4c 41 4e 39 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 56 4c 41 4e 32 30 20 77 69 6c 6c | n.VLAN9.transitions,.VLAN20.will |
d8420 | 20 61 6c 73 6f 20 74 72 61 6e 73 69 74 69 6f 6e 3a 00 49 6e 20 74 68 65 20 66 75 74 75 72 65 20 | .also.transition:.In.the.future. |
d8440 | 74 68 69 73 20 69 73 20 65 78 70 65 63 74 65 64 20 74 6f 20 62 65 20 61 20 76 65 72 79 20 75 73 | this.is.expected.to.be.a.very.us |
d8460 | 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 74 68 6f 75 67 68 20 74 68 65 72 65 20 61 72 65 20 | eful.protocol.(though.there.are. |
d8480 | 60 6f 74 68 65 72 20 70 72 6f 70 6f 73 61 6c 73 60 5f 29 2e 00 49 6e 20 74 68 65 20 6e 65 78 74 | `other.proposals`_)..In.the.next |
d84a0 | 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 6f | .example.all.traffic.destined.to |
d84c0 | 20 60 60 32 30 33 2e 30 2e 31 31 33 2e 31 60 60 20 61 6e 64 20 70 6f 72 74 20 60 60 38 32 38 30 | .``203.0.113.1``.and.port.``8280 |
d84e0 | 60 60 20 70 72 6f 74 6f 63 6f 6c 20 54 43 50 20 69 73 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 | ``.protocol.TCP.is.balanced.betw |
d8500 | 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 31 60 | een.2.real.servers.``192.0.2.11` |
d8520 | 60 20 61 6e 64 20 60 60 31 39 32 2e 30 2e 32 2e 31 32 60 60 20 74 6f 20 70 6f 72 74 20 60 60 38 | `.and.``192.0.2.12``.to.port.``8 |
d8540 | 30 60 60 00 49 6e 20 74 68 65 20 70 61 73 74 20 28 56 79 4f 53 20 31 2e 31 29 20 75 73 65 64 20 | 0``.In.the.past.(VyOS.1.1).used. |
d8560 | 61 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 | a.gateway-address.configured.und |
d8580 | 65 72 20 74 68 65 20 73 79 73 74 65 6d 20 74 72 65 65 20 28 3a 63 66 67 63 6d 64 3a 60 73 65 74 | er.the.system.tree.(:cfgcmd:`set |
d85a0 | 20 73 79 73 74 65 6d 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 3c 61 64 64 72 65 73 73 | .system.gateway-address.<address |
d85c0 | 3e 60 29 2c 20 74 68 69 73 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 | >`),.this.is.no.longer.supported |
d85e0 | 20 61 6e 64 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 61 72 65 | .and.existing.configurations.are |
d8600 | 20 6d 69 67 72 61 74 65 64 20 74 6f 20 74 68 65 20 6e 65 77 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 | .migrated.to.the.new.CLI.command |
d8620 | 2e 00 49 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 72 65 65 2c 20 61 6c 6c 20 68 61 72 64 | ..In.this.command.tree,.all.hard |
d8640 | 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 77 69 6c 6c 20 62 | ware.acceleration.options.will.b |
d8660 | 65 20 68 61 6e 64 6c 65 64 2e 20 41 74 20 74 68 65 20 6d 6f 6d 65 6e 74 20 6f 6e 6c 79 20 60 49 | e.handled..At.the.moment.only.`I |
d8680 | 6e 74 65 6c c2 ae 20 51 41 54 60 5f 20 69 73 20 73 75 70 70 6f 72 74 65 64 00 49 6e 20 74 68 69 | ntel...QAT`_.is.supported.In.thi |
d86a0 | 73 20 65 78 61 6d 70 6c 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 64 65 73 74 69 6e 65 64 20 74 | s.example.all.traffic.destined.t |
d86c0 | 6f 20 70 6f 72 74 73 20 22 38 30 2c 20 32 32 32 32 2c 20 38 38 38 38 22 20 70 72 6f 74 6f 63 6f | o.ports."80,.2222,.8888".protoco |
d86e0 | 6c 20 54 43 50 20 6d 61 72 6b 73 20 74 6f 20 66 77 6d 61 72 6b 20 22 31 31 31 22 20 61 6e 64 20 | l.TCP.marks.to.fwmark."111".and. |
d8700 | 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 32 20 72 65 61 6c 20 73 65 72 76 65 72 73 2e | balanced.between.2.real.servers. |
d8720 | 20 50 6f 72 74 20 22 30 22 20 69 73 20 72 65 71 75 69 72 65 64 20 69 66 20 6d 75 6c 74 69 70 6c | .Port."0".is.required.if.multipl |
d8740 | 65 20 70 6f 72 74 73 20 61 72 65 20 75 73 65 64 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c | e.ports.are.used..In.this.exampl |
d8760 | 65 20 69 6d 61 67 65 2c 20 61 20 73 69 6d 70 6c 69 66 65 64 20 74 72 61 66 66 69 63 20 66 6c 6f | e.image,.a.simplifed.traffic.flo |
d8780 | 77 20 69 73 20 73 68 6f 77 6e 20 74 6f 20 68 65 6c 70 20 70 72 6f 76 69 64 65 20 63 6f 6e 74 65 | w.is.shown.to.help.provide.conte |
d87a0 | 78 74 20 74 6f 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 60 66 6f 72 77 61 72 64 60 2c 20 60 69 | xt.to.the.terms.of.`forward`,.`i |
d87c0 | 6e 70 75 74 60 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 66 6f 72 20 74 68 65 20 6e 65 77 20 | nput`,.and.`output`.for.the.new. |
d87e0 | 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 66 6f 72 6d 61 74 2e 00 49 6e 20 74 68 69 73 20 65 78 61 | firewall.CLI.format..In.this.exa |
d8800 | 6d 70 6c 65 20 77 65 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 6d 6f 73 74 20 63 6f 6d 70 6c 69 | mple.we.will.use.the.most.compli |
d8820 | 63 61 74 65 64 20 63 61 73 65 3a 20 61 20 73 65 74 75 70 20 77 68 65 72 65 20 65 61 63 68 20 63 | cated.case:.a.setup.where.each.c |
d8840 | 6c 69 65 6e 74 20 69 73 20 61 20 72 6f 75 74 65 72 20 74 68 61 74 20 68 61 73 20 69 74 73 20 6f | lient.is.a.router.that.has.its.o |
d8860 | 77 6e 20 73 75 62 6e 65 74 20 28 74 68 69 6e 6b 20 48 51 20 61 6e 64 20 62 72 61 6e 63 68 20 6f | wn.subnet.(think.HQ.and.branch.o |
d8880 | 66 66 69 63 65 73 29 2c 20 73 69 6e 63 65 20 73 69 6d 70 6c 65 72 20 73 65 74 75 70 73 20 61 72 | ffices),.since.simpler.setups.ar |
d88a0 | 65 20 73 75 62 73 65 74 73 20 6f 66 20 69 74 2e 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 | e.subsets.of.it..In.this.example |
d88c0 | 2c 20 73 6f 6d 65 20 2a 4f 70 65 6e 4e 49 43 2a 20 73 65 72 76 65 72 73 20 61 72 65 20 75 73 65 | ,.some.*OpenNIC*.servers.are.use |
d88e0 | 64 2c 20 74 77 6f 20 49 50 76 34 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 74 77 6f 20 49 50 | d,.two.IPv4.addresses.and.two.IP |
d8900 | 76 36 20 61 64 64 72 65 73 73 65 73 3a 00 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 | v6.addresses:.In.this.example,.w |
d8920 | 65 20 75 73 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a 2a 20 61 73 20 74 68 65 20 74 72 61 6e | e.use.**masquerade**.as.the.tran |
d8940 | 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 69 6e 73 74 65 61 64 20 6f 66 20 61 6e 20 49 50 | slation.address.instead.of.an.IP |
d8960 | 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 2a 2a 6d 61 73 71 75 65 72 61 64 65 2a 2a 20 74 61 72 | .address..The.**masquerade**.tar |
d8980 | 67 65 74 20 69 73 20 65 66 66 65 63 74 69 76 65 6c 79 20 61 6e 20 61 6c 69 61 73 20 74 6f 20 73 | get.is.effectively.an.alias.to.s |
d89a0 | 61 79 20 22 75 73 65 20 77 68 61 74 65 76 65 72 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 6f | ay."use.whatever.IP.address.is.o |
d89c0 | 6e 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 22 2c 20 72 61 74 68 65 | n.the.outgoing.interface",.rathe |
d89e0 | 72 20 74 68 61 6e 20 61 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 49 | r.than.a.statically.configured.I |
d8a00 | 50 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 69 66 20 79 6f 75 | P.address..This.is.useful.if.you |
d8a20 | 20 75 73 65 20 44 48 43 50 20 66 6f 72 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 | .use.DHCP.for.your.outgoing.inte |
d8a40 | 72 66 61 63 65 20 61 6e 64 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 20 65 | rface.and.do.not.know.what.the.e |
d8a60 | 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 2e 00 49 6e 20 74 68 69 73 | xternal.address.will.be..In.this |
d8a80 | 20 65 78 61 6d 70 6c 65 2c 20 77 65 20 77 69 6c 6c 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 65 | .example,.we.will.be.using.the.e |
d8aa0 | 78 61 6d 70 6c 65 20 51 75 69 63 6b 20 53 74 61 72 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | xample.Quick.Start.configuration |
d8ac0 | 20 61 62 6f 76 65 20 61 73 20 61 20 73 74 61 72 74 69 6e 67 20 70 6f 69 6e 74 2e 00 49 6e 20 74 | .above.as.a.starting.point..In.t |
d8ae0 | 68 69 73 20 6d 65 74 68 6f 64 2c 20 74 68 65 20 44 53 4c 20 4d 6f 64 65 6d 2f 52 6f 75 74 65 72 | his.method,.the.DSL.Modem/Router |
d8b00 | 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 74 68 65 20 49 53 50 20 66 6f 72 20 79 6f 75 20 77 69 74 | .connects.to.the.ISP.for.you.wit |
d8b20 | 68 20 79 6f 75 72 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 65 70 72 6f 67 72 61 6d 6d 65 64 | h.your.credentials.preprogrammed |
d8b40 | 20 69 6e 74 6f 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 20 67 69 76 65 73 20 79 6f 75 | .into.the.device..This.gives.you |
d8b60 | 20 61 6e 20 3a 72 66 63 3a 60 31 39 31 38 60 20 61 64 64 72 65 73 73 2c 20 73 75 63 68 20 61 73 | .an.:rfc:`1918`.address,.such.as |
d8b80 | 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 60 60 20 62 79 20 64 65 66 61 75 6c 74 2e 00 | .``192.168.1.0/24``.by.default.. |
d8ba0 | 49 6e 20 74 68 69 73 20 73 63 65 6e 61 72 69 6f 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f | In.this.scenario:.In.this.sectio |
d8bc0 | 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 | n.there's.useful.information.of. |
d8be0 | 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 | all.firewall.configuration.that. |
d8c00 | 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 76 34 2c 20 61 6e 64 20 | can.be.done.regarding.IPv4,.and. |
d8c20 | 61 70 70 72 6f 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e | appropiate.op-mode.commands..Con |
d8c40 | 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 | figuration.commands.covered.in.t |
d8c60 | 68 69 73 20 73 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 | his.section:.In.this.section.the |
d8c80 | 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 | re's.useful.information.of.all.f |
d8ca0 | 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 | irewall.configuration.that.can.b |
d8cc0 | 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 49 50 76 36 2c 20 61 6e 64 20 61 70 70 72 6f | e.done.regarding.IPv6,.and.appro |
d8ce0 | 70 69 61 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 | piate.op-mode.commands..Configur |
d8d00 | 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 | ation.commands.covered.in.this.s |
d8d20 | 65 63 74 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 | ection:.In.this.section.there's. |
d8d40 | 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 | useful.information.of.all.firewa |
d8d60 | 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e | ll.configuration.that.can.be.don |
d8d80 | 65 20 72 65 67 61 72 64 69 6e 67 20 62 72 69 64 67 65 2c 20 61 6e 64 20 61 70 70 72 6f 70 69 61 | e.regarding.bridge,.and.appropia |
d8da0 | 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 | te.op-mode.commands..Configurati |
d8dc0 | 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 | on.commands.covered.in.this.sect |
d8de0 | 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 | ion:.In.this.section.there's.use |
d8e00 | 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 | ful.information.of.all.firewall. |
d8e20 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 | configuration.that.can.be.done.r |
d8e40 | 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c 65 73 00 49 6e 20 74 68 69 73 20 73 65 63 74 | egarding.flowtables.In.this.sect |
d8e60 | 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f | ion.there's.useful.information.o |
d8e80 | 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 | f.all.firewall.configuration.tha |
d8ea0 | 74 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 72 65 67 61 72 64 69 6e 67 20 66 6c 6f 77 74 61 62 6c | t.can.be.done.regarding.flowtabl |
d8ec0 | 65 73 2e 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 65 66 | es..In.this.section.there's.usef |
d8ee0 | 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 61 6c 6c 20 63 | ul.information.of.all.firewall.c |
d8f00 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 6e 65 65 64 65 64 20 66 6f 72 20 | onfiguration.that.is.needed.for. |
d8f20 | 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 2e 20 43 6f 6e 66 69 67 75 72 61 74 69 | zone-based.firewall..Configurati |
d8f40 | 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 63 6f 76 65 72 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 | on.commands.covered.in.this.sect |
d8f60 | 69 6f 6e 3a 00 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 79 6f 75 20 63 61 6e 20 66 69 6e | ion:.In.this.section.you.can.fin |
d8f80 | 64 20 61 6c 6c 20 75 73 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f 70 2d 6d 6f 64 65 20 63 6f | d.all.useful.firewall.op-mode.co |
d8fa0 | 6d 6d 61 6e 64 73 2e 00 49 6e 20 74 72 61 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 20 6d 6f 64 | mmands..In.transparent.proxy.mod |
d8fc0 | 65 2c 20 61 6c 6c 20 74 72 61 66 66 69 63 20 61 72 72 69 76 69 6e 67 20 6f 6e 20 70 6f 72 74 20 | e,.all.traffic.arriving.on.port. |
d8fe0 | 38 30 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 | 80.and.destined.for.the.Internet |
d9000 | 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f | .is.automatically.forwarded.thro |
d9020 | 75 67 68 20 74 68 65 20 70 72 6f 78 79 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 69 6d 6d 65 64 | ugh.the.proxy..This.allows.immed |
d9040 | 69 61 74 65 20 70 72 6f 78 79 20 66 6f 72 77 61 72 64 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f | iate.proxy.forwarding.without.co |
d9060 | 6e 66 69 67 75 72 69 6e 67 20 63 6c 69 65 6e 74 20 62 72 6f 77 73 65 72 73 2e 00 49 6e 20 74 79 | nfiguring.client.browsers..In.ty |
d9080 | 70 69 63 61 6c 20 75 73 65 73 20 6f 66 20 53 4e 4d 50 2c 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 | pical.uses.of.SNMP,.one.or.more. |
d90a0 | 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 63 6f 6d 70 75 74 65 72 73 20 63 61 6c 6c 65 64 20 | administrative.computers.called. |
d90c0 | 6d 61 6e 61 67 65 72 73 20 68 61 76 65 20 74 68 65 20 74 61 73 6b 20 6f 66 20 6d 6f 6e 69 74 6f | managers.have.the.task.of.monito |
d90e0 | 72 69 6e 67 20 6f 72 20 6d 61 6e 61 67 69 6e 67 20 61 20 67 72 6f 75 70 20 6f 66 20 68 6f 73 74 | ring.or.managing.a.group.of.host |
d9100 | 73 20 6f 72 20 64 65 76 69 63 65 73 20 6f 6e 20 61 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f | s.or.devices.on.a.computer.netwo |
d9120 | 72 6b 2e 20 45 61 63 68 20 6d 61 6e 61 67 65 64 20 73 79 73 74 65 6d 20 65 78 65 63 75 74 65 73 | rk..Each.managed.system.executes |
d9140 | 20 61 20 73 6f 66 74 77 61 72 65 20 63 6f 6d 70 6f 6e 65 6e 74 20 63 61 6c 6c 65 64 20 61 6e 20 | .a.software.component.called.an. |
d9160 | 61 67 65 6e 74 20 77 68 69 63 68 20 72 65 70 6f 72 74 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | agent.which.reports.information. |
d9180 | 76 69 61 20 53 4e 4d 50 20 74 6f 20 74 68 65 20 6d 61 6e 61 67 65 72 2e 00 49 6e 20 7a 6f 6e 65 | via.SNMP.to.the.manager..In.zone |
d91a0 | 2d 62 61 73 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 | -based.policy,.interfaces.are.as |
d91c0 | 73 69 67 6e 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 | signed.to.zones,.and.inspection. |
d91e0 | 70 6f 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 | policy.is.applied.to.traffic.mov |
d9200 | 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 6e 64 20 61 63 74 65 64 20 | ing.between.the.zones.and.acted. |
d9220 | 6f 6e 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 | on.according.to.firewall.rules.. |
d9240 | 41 20 5a 6f 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 | A.Zone.is.a.group.of.interfaces. |
d9260 | 74 68 61 74 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 | that.have.similar.functions.or.f |
d9280 | 65 61 74 75 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 73 65 63 75 | eatures..It.establishes.the.secu |
d92a0 | 72 69 74 79 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e | rity.borders.of.a.network..A.zon |
d92c0 | 65 20 64 65 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 65 72 65 20 74 72 61 66 66 | e.defines.a.boundary.where.traff |
d92e0 | 69 63 20 69 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 63 79 20 72 65 73 74 72 69 | ic.is.subjected.to.policy.restri |
d9300 | 63 74 69 6f 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 | ctions.as.it.crosses.to.another. |
d9320 | 72 65 67 69 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e 20 7a 6f 6e 65 2d 62 61 73 | region.of.a.network..In.zone-bas |
d9340 | 65 64 20 70 6f 6c 69 63 79 2c 20 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 61 73 73 69 67 6e | ed.policy,.interfaces.are.assign |
d9360 | 65 64 20 74 6f 20 7a 6f 6e 65 73 2c 20 61 6e 64 20 69 6e 73 70 65 63 74 69 6f 6e 20 70 6f 6c 69 | ed.to.zones,.and.inspection.poli |
d9380 | 63 79 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 72 61 66 66 69 63 20 6d 6f 76 69 6e 67 20 | cy.is.applied.to.traffic.moving. |
d93a0 | 62 65 74 77 65 65 6e 20 74 68 65 20 7a 6f 6e 65 73 20 61 6e 64 20 61 63 74 65 64 20 6f 6e 20 61 | between.the.zones.and.acted.on.a |
d93c0 | 63 63 6f 72 64 69 6e 67 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2e 20 41 20 7a 6f | ccording.to.firewall.rules..A.zo |
d93e0 | 6e 65 20 69 73 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 20 74 68 61 74 | ne.is.a.group.of.interfaces.that |
d9400 | 20 68 61 76 65 20 73 69 6d 69 6c 61 72 20 66 75 6e 63 74 69 6f 6e 73 20 6f 72 20 66 65 61 74 75 | .have.similar.functions.or.featu |
d9420 | 72 65 73 2e 20 49 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 73 65 63 75 72 69 74 79 | res..It.establishes.the.security |
d9440 | 20 62 6f 72 64 65 72 73 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 20 41 20 7a 6f 6e 65 20 64 65 | .borders.of.a.network..A.zone.de |
d9460 | 66 69 6e 65 73 20 61 20 62 6f 75 6e 64 61 72 79 20 77 68 65 72 65 20 74 72 61 66 66 69 63 20 69 | fines.a.boundary.where.traffic.i |
d9480 | 73 20 73 75 62 6a 65 63 74 65 64 20 74 6f 20 70 6f 6c 69 63 79 20 72 65 73 74 72 69 63 74 69 6f | s.subjected.to.policy.restrictio |
d94a0 | 6e 73 20 61 73 20 69 74 20 63 72 6f 73 73 65 73 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 65 67 69 | ns.as.it.crosses.to.another.regi |
d94c0 | 6f 6e 20 6f 66 20 61 20 6e 65 74 77 6f 72 6b 2e 00 49 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 | on.of.a.network..Inbound.connect |
d94e0 | 69 6f 6e 73 20 74 6f 20 61 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 69 | ions.to.a.WAN.interface.can.be.i |
d9500 | 6d 70 72 6f 70 65 72 6c 79 20 68 61 6e 64 6c 65 64 20 77 68 65 6e 20 74 68 65 20 72 65 70 6c 79 | mproperly.handled.when.the.reply |
d9520 | 20 69 73 20 73 65 6e 74 20 62 61 63 6b 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 49 6e 63 | .is.sent.back.to.the.client..Inc |
d9540 | 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 72 65 63 65 69 76 65 64 20 62 79 20 74 68 65 | oming.traffic.is.received.by.the |
d9560 | 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 49 66 20 74 68 65 20 72 65 63 65 69 76 69 6e 67 | .current.slave..If.the.receiving |
d9580 | 20 73 6c 61 76 65 20 66 61 69 6c 73 2c 20 61 6e 6f 74 68 65 72 20 73 6c 61 76 65 20 74 61 6b 65 | .slave.fails,.another.slave.take |
d95a0 | 73 20 6f 76 65 72 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 66 61 | s.over.the.MAC.address.of.the.fa |
d95c0 | 69 6c 65 64 20 72 65 63 65 69 76 69 6e 67 20 73 6c 61 76 65 2e 00 49 6e 63 72 65 61 73 65 20 4d | iled.receiving.slave..Increase.M |
d95e0 | 61 78 69 6d 75 6d 20 4d 50 44 55 20 6c 65 6e 67 74 68 20 74 6f 20 37 39 39 31 20 6f 72 20 31 31 | aximum.MPDU.length.to.7991.or.11 |
d9600 | 34 35 34 20 6f 63 74 65 74 73 20 28 64 65 66 61 75 6c 74 20 33 38 39 35 20 6f 63 74 65 74 73 29 | 454.octets.(default.3895.octets) |
d9620 | 00 49 6e 64 69 63 61 74 69 6f 6e 00 49 6e 64 69 76 69 64 75 61 6c 20 43 6c 69 65 6e 74 20 53 75 | .Indication.Individual.Client.Su |
d9640 | 62 6e 65 74 00 49 6e 66 6f 72 6d 20 63 6c 69 65 6e 74 20 74 68 61 74 20 74 68 65 20 44 4e 53 20 | bnet.Inform.client.that.the.DNS. |
d9660 | 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 | server.can.be.found.at.`<address |
d9680 | 3e 60 2e 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 67 61 74 68 65 72 65 64 20 77 69 74 68 20 4c 4c | >`..Information.gathered.with.LL |
d96a0 | 44 50 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 64 65 76 69 63 65 20 61 73 20 61 20 | DP.is.stored.in.the.device.as.a. |
d96c0 | 3a 61 62 62 72 3a 60 4d 49 42 20 28 4d 61 6e 61 67 65 6d 65 6e 74 20 49 6e 66 6f 72 6d 61 74 69 | :abbr:`MIB.(Management.Informati |
d96e0 | 6f 6e 20 44 61 74 61 62 61 73 65 29 60 20 61 6e 64 20 63 61 6e 20 62 65 20 71 75 65 72 69 65 64 | on.Database)`.and.can.be.queried |
d9700 | 20 77 69 74 68 20 3a 61 62 62 72 3a 60 53 4e 4d 50 20 28 53 69 6d 70 6c 65 20 4e 65 74 77 6f 72 | .with.:abbr:`SNMP.(Simple.Networ |
d9720 | 6b 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 73 20 73 70 65 63 69 | k.Management.Protocol)`.as.speci |
d9740 | 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 39 32 32 60 2e 20 54 68 65 20 74 6f 70 6f 6c 6f 67 | fied.in.:rfc:`2922`..The.topolog |
d9760 | 79 20 6f 66 20 61 6e 20 4c 4c 44 50 2d 65 6e 61 62 6c 65 64 20 6e 65 74 77 6f 72 6b 20 63 61 6e | y.of.an.LLDP-enabled.network.can |
d9780 | 20 62 65 20 64 69 73 63 6f 76 65 72 65 64 20 62 79 20 63 72 61 77 6c 69 6e 67 20 74 68 65 20 68 | .be.discovered.by.crawling.the.h |
d97a0 | 6f 73 74 73 20 61 6e 64 20 71 75 65 72 79 69 6e 67 20 74 68 69 73 20 64 61 74 61 62 61 73 65 2e | osts.and.querying.this.database. |
d97c0 | 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 6d 61 79 20 62 65 20 72 65 74 72 69 65 76 | .Information.that.may.be.retriev |
d97e0 | 65 64 20 69 6e 63 6c 75 64 65 3a 00 49 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 00 49 6e 66 6f 72 6d | ed.include:.Informational.Inform |
d9800 | 61 74 69 6f 6e 61 6c 20 6d 65 73 73 61 67 65 73 00 49 6e 70 75 74 20 66 72 6f 6d 20 60 65 74 68 | ational.messages.Input.from.`eth |
d9820 | 30 60 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 00 49 6e 73 70 65 63 74 20 6c 6f 67 | 0`.network.interface.Inspect.log |
d9840 | 73 3a 00 49 6e 73 74 61 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 73 6f 66 74 77 61 72 65 20 76 | s:.Install.the.client.software.v |
d9860 | 69 61 20 61 70 74 20 61 6e 64 20 65 78 65 63 75 74 65 20 70 70 74 70 73 65 74 75 70 20 74 6f 20 | ia.apt.and.execute.pptpsetup.to. |
d9880 | 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 49 6e 73 74 | generate.the.configuration..Inst |
d98a0 | 65 61 64 20 6f 66 20 61 20 6e 75 6d 65 72 69 63 61 6c 20 4d 53 53 20 76 61 6c 75 65 20 60 63 6c | ead.of.a.numerical.MSS.value.`cl |
d98c0 | 61 6d 70 2d 6d 73 73 2d 74 6f 2d 70 6d 74 75 60 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 | amp-mss-to-pmtu`.can.be.used.to. |
d98e0 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 65 74 20 74 68 65 20 70 72 6f 70 65 72 20 76 61 6c | automatically.set.the.proper.val |
d9900 | 75 65 2e 00 49 6e 73 74 65 61 64 20 6f 66 20 70 61 73 73 77 6f 72 64 20 6f 6e 6c 79 20 61 75 74 | ue..Instead.of.password.only.aut |
d9920 | 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 32 46 41 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e | hentication,.2FA.password.authen |
d9940 | 74 69 63 61 74 69 6f 6e 20 2b 20 4f 54 50 20 6b 65 79 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 | tication.+.OTP.key.can.be.used.. |
d9960 | 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 4f 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | Alternatively,.OTP.authenticatio |
d9980 | 6e 20 6f 6e 6c 79 2c 20 77 69 74 68 6f 75 74 20 61 20 70 61 73 73 77 6f 72 64 2c 20 63 61 6e 20 | n.only,.without.a.password,.can. |
d99a0 | 62 65 20 75 73 65 64 2e 20 54 6f 20 64 6f 20 74 68 69 73 2c 20 61 6e 20 4f 54 50 20 63 6f 6e 66 | be.used..To.do.this,.an.OTP.conf |
d99c0 | 69 67 75 72 61 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 61 64 64 65 64 20 74 6f 20 74 68 65 20 63 | iguration.must.be.added.to.the.c |
d99e0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 3a 00 49 6e 73 74 65 61 64 20 6f 66 20 73 | onfiguration.above:.Instead.of.s |
d9a00 | 65 6e 64 69 6e 67 20 74 68 65 20 72 65 61 6c 20 73 79 73 74 65 6d 20 68 6f 73 74 6e 61 6d 65 20 | ending.the.real.system.hostname. |
d9a20 | 74 6f 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 2c 20 6f 76 65 72 77 72 69 74 65 20 74 68 | to.the.DHCP.server,.overwrite.th |
d9a40 | 65 20 68 6f 73 74 2d 6e 61 6d 65 20 77 69 74 68 20 74 68 69 73 20 67 69 76 65 6e 2d 76 61 6c 75 | e.host-name.with.this.given-valu |
d9a60 | 65 2e 00 49 6e 74 65 67 72 69 74 79 20 e2 80 93 20 4d 65 73 73 61 67 65 20 69 6e 74 65 67 72 69 | e..Integrity.....Message.integri |
d9a80 | 74 79 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 61 20 70 61 63 6b 65 74 20 68 61 73 20 6e | ty.to.ensure.that.a.packet.has.n |
d9aa0 | 6f 74 20 62 65 65 6e 20 74 61 6d 70 65 72 65 64 20 77 68 69 6c 65 20 69 6e 20 74 72 61 6e 73 69 | ot.been.tampered.while.in.transi |
d9ac0 | 74 20 69 6e 63 6c 75 64 69 6e 67 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 70 61 63 6b 65 74 20 72 | t.including.an.optional.packet.r |
d9ae0 | 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 2e 00 49 6e 74 65 | eplay.protection.mechanism..Inte |
d9b00 | 6c 20 41 58 32 30 30 00 49 6e 74 65 6c c2 ae 20 51 41 54 00 49 6e 74 65 72 63 6f 6e 6e 65 63 74 | l.AX200.Intel...QAT.Interconnect |
d9b20 | 20 74 68 65 20 67 6c 6f 62 61 6c 20 56 52 46 20 77 69 74 68 20 76 72 66 20 22 72 65 64 22 20 75 | .the.global.VRF.with.vrf."red".u |
d9b40 | 73 69 6e 67 20 74 68 65 20 76 65 74 68 31 30 20 3c 2d 3e 20 76 65 74 68 20 31 31 20 70 61 69 72 | sing.the.veth10.<->.veth.11.pair |
d9b60 | 00 49 6e 74 65 72 66 61 63 65 20 2a 2a 65 74 68 30 2a 2a 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e | .Interface.**eth0**.used.to.conn |
d9b80 | 65 63 74 20 74 6f 20 75 70 73 74 72 65 61 6d 2e 00 49 6e 74 65 72 66 61 63 65 20 43 6f 6e 66 69 | ect.to.upstream..Interface.Confi |
d9ba0 | 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 47 72 6f 75 70 73 00 49 6e 74 65 72 66 | guration.Interface.Groups.Interf |
d9bc0 | 61 63 65 20 52 6f 75 74 65 73 00 49 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 4c 41 4e 20 | ace.Routes.Interface.`eth1`.LAN. |
d9be0 | 69 73 20 62 65 68 69 6e 64 20 4e 41 54 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 73 75 62 73 63 | is.behind.NAT..In.order.to.subsc |
d9c00 | 72 69 62 65 20 60 31 30 2e 30 2e 30 2e 30 2f 32 33 60 20 73 75 62 6e 65 74 20 6d 75 6c 74 69 63 | ribe.`10.0.0.0/23`.subnet.multic |
d9c20 | 61 73 74 20 77 68 69 63 68 20 69 73 20 69 6e 20 60 65 74 68 30 60 20 57 41 4e 20 77 65 20 6e 65 | ast.which.is.in.`eth0`.WAN.we.ne |
d9c40 | 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 67 6d 70 2d 70 72 6f 78 79 2e 00 49 6e 74 65 | ed.to.configure.igmp-proxy..Inte |
d9c60 | 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 72 66 61 63 65 20 66 6f | rface.configuration.Interface.fo |
d9c80 | 72 20 44 48 43 50 20 52 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 66 6f 72 77 61 72 64 20 72 65 | r.DHCP.Relay.Agent.to.forward.re |
d9ca0 | 71 75 65 73 74 73 20 6f 75 74 2e 00 49 6e 74 65 72 66 61 63 65 20 66 6f 72 20 44 48 43 50 20 52 | quests.out..Interface.for.DHCP.R |
d9cc0 | 65 6c 61 79 20 41 67 65 6e 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 72 65 71 75 65 73 74 | elay.Agent.to.listen.for.request |
d9ce0 | 73 2e 00 49 6e 74 65 72 66 61 63 65 20 73 70 65 63 69 66 69 63 20 63 6f 6d 6d 61 6e 64 73 00 49 | s..Interface.specific.commands.I |
d9d00 | 6e 74 65 72 66 61 63 65 20 74 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e | nterface.to.use.for.syncing.conn |
d9d20 | 74 72 61 63 6b 20 65 6e 74 72 69 65 73 2e 00 49 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 66 6f | track.entries..Interface.used.fo |
d9d40 | 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 69 73 20 69 73 20 6d 61 6e 64 61 74 | r.VXLAN.underlay..This.is.mandat |
d9d60 | 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e 20 76 69 61 20 61 20 6d 75 6c 74 69 | ory.when.using.VXLAN.via.a.multi |
d9d80 | 63 61 73 74 20 6e 65 74 77 6f 72 6b 2e 20 56 58 4c 41 4e 20 74 72 61 66 66 69 63 20 77 69 6c 6c | cast.network..VXLAN.traffic.will |
d9da0 | 20 61 6c 77 61 79 73 20 65 6e 74 65 72 20 61 6e 64 20 65 78 69 74 20 74 68 69 73 20 69 6e 74 65 | .always.enter.and.exit.this.inte |
d9dc0 | 72 66 61 63 65 2e 00 49 6e 74 65 72 66 61 63 65 20 77 65 69 67 68 74 00 49 6e 74 65 72 66 61 63 | rface..Interface.weight.Interfac |
d9de0 | 65 73 00 49 6e 74 65 72 66 61 63 65 73 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 49 6e 74 65 | es.Interfaces.Configuration.Inte |
d9e00 | 72 66 61 63 65 73 20 74 68 61 74 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 74 68 65 20 44 | rfaces.that.participate.in.the.D |
d9e20 | 48 43 50 20 72 65 6c 61 79 20 70 72 6f 63 65 73 73 2e 20 49 66 20 74 68 69 73 20 63 6f 6d 6d 61 | HCP.relay.process..If.this.comma |
d9e40 | 6e 64 20 69 73 20 75 73 65 64 2c 20 61 74 20 6c 65 61 73 74 20 74 77 6f 20 65 6e 74 72 69 65 73 | nd.is.used,.at.least.two.entries |
d9e60 | 20 6f 66 20 69 74 20 61 72 65 20 72 65 71 75 69 72 65 64 3a 20 6f 6e 65 20 66 6f 72 20 74 68 65 | .of.it.are.required:.one.for.the |
d9e80 | 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 63 61 70 74 75 72 65 73 20 74 68 65 20 64 68 63 | .interface.that.captures.the.dhc |
d9ea0 | 70 2d 72 65 71 75 65 73 74 73 2c 20 61 6e 64 20 6f 6e 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 | p-requests,.and.one.for.the.inte |
d9ec0 | 72 66 61 63 65 20 74 6f 20 66 6f 72 77 61 72 64 20 73 75 63 68 20 72 65 71 75 65 73 74 73 2e 20 | rface.to.forward.such.requests.. |
d9ee0 | 41 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 20 | A.warning.message.will.be.shown. |
d9f00 | 69 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 2c 20 73 69 6e 63 65 20 6e | if.this.command.is.used,.since.n |
d9f20 | 65 77 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 68 6f 75 6c 64 20 75 73 65 20 60 60 | ew.implementations.should.use.`` |
d9f40 | 6c 69 73 74 65 6e 2d 69 6e 74 65 72 66 61 63 65 60 60 20 61 6e 64 20 60 60 75 70 73 74 72 65 61 | listen-interface``.and.``upstrea |
d9f60 | 6d 2d 69 6e 74 65 72 66 61 63 65 60 60 2e 00 49 6e 74 65 72 66 61 63 65 73 20 77 68 6f 73 65 20 | m-interface``..Interfaces.whose. |
d9f80 | 44 48 43 50 20 63 6c 69 65 6e 74 20 6e 61 6d 65 73 65 72 76 65 72 73 20 74 6f 20 66 6f 72 77 61 | DHCP.client.nameservers.to.forwa |
d9fa0 | 72 64 20 72 65 71 75 65 73 74 73 20 74 6f 2e 00 49 6e 74 65 72 66 61 63 65 73 2c 20 74 68 65 69 | rd.requests.to..Interfaces,.thei |
d9fc0 | 72 20 77 65 69 67 68 74 20 61 6e 64 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 | r.weight.and.the.type.of.traffic |
d9fe0 | 20 74 6f 20 62 65 20 62 61 6c 61 6e 63 65 64 20 61 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 6e | .to.be.balanced.are.defined.in.n |
da000 | 75 6d 62 65 72 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 75 6c 65 20 73 65 74 73 2e 20 54 68 65 | umbered.balancing.rule.sets..The |
da020 | 20 72 75 6c 65 20 73 65 74 73 20 61 72 65 20 65 78 65 63 75 74 65 64 20 69 6e 20 6e 75 6d 65 72 | .rule.sets.are.executed.in.numer |
da040 | 69 63 61 6c 20 6f 72 64 65 72 20 61 67 61 69 6e 73 74 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b | ical.order.against.outgoing.pack |
da060 | 65 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 61 20 6d 61 74 63 68 20 74 68 65 20 70 61 63 6b | ets..In.case.of.a.match.the.pack |
da080 | 65 74 20 69 73 20 73 65 6e 74 20 74 68 72 6f 75 67 68 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 | et.is.sent.through.an.interface. |
da0a0 | 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 20 | specified.in.the.matching.rule.. |
da0c0 | 49 66 20 61 20 70 61 63 6b 65 74 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 61 6e 79 20 72 75 | If.a.packet.doesn't.match.any.ru |
da0e0 | 6c 65 20 69 74 20 69 73 20 73 65 6e 74 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 73 79 73 74 65 | le.it.is.sent.by.using.the.syste |
da100 | 6d 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 52 75 6c 65 20 6e 75 6d 62 65 72 73 20 63 61 | m.routing.table..Rule.numbers.ca |
da120 | 6e 27 74 20 62 65 20 63 68 61 6e 67 65 64 2e 00 49 6e 74 65 72 6e 61 6c 20 61 74 74 61 63 6b 3a | n't.be.changed..Internal.attack: |
da140 | 20 61 6e 20 61 74 74 61 63 6b 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 | .an.attack.from.the.internal.net |
da160 | 77 6f 72 6b 20 28 67 65 6e 65 72 61 74 65 64 20 62 79 20 61 20 63 75 73 74 6f 6d 65 72 29 20 74 | work.(generated.by.a.customer).t |
da180 | 6f 77 61 72 64 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 69 73 20 69 64 65 6e 74 69 66 79 2e | owards.the.internet.is.identify. |
da1a0 | 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 | .In.this.case,.all.connections.f |
da1c0 | 72 6f 6d 20 74 68 69 73 20 70 61 72 74 69 63 75 6c 61 72 20 49 50 2f 43 75 73 74 6f 6d 65 72 20 | rom.this.particular.IP/Customer. |
da1e0 | 77 69 6c 6c 20 62 65 20 62 6c 6f 63 6b 65 64 2e 00 49 6e 74 65 72 6e 61 6c 6c 79 2c 20 69 6e 20 | will.be.blocked..Internally,.in. |
da200 | 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 70 72 6f 63 65 73 73 65 73 20 65 78 69 73 74 20 | flow-accounting.processes.exist. |
da220 | 61 20 62 75 66 66 65 72 20 66 6f 72 20 64 61 74 61 20 65 78 63 68 61 6e 67 69 6e 67 20 62 65 74 | a.buffer.for.data.exchanging.bet |
da240 | 77 65 65 6e 20 63 6f 72 65 20 70 72 6f 63 65 73 73 20 61 6e 64 20 70 6c 75 67 69 6e 73 20 28 65 | ween.core.process.and.plugins.(e |
da260 | 61 63 68 20 65 78 70 6f 72 74 20 74 61 72 67 65 74 20 69 73 20 61 20 73 65 70 61 72 61 74 65 64 | ach.export.target.is.a.separated |
da280 | 20 70 6c 75 67 69 6e 29 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 68 69 67 68 20 74 72 61 66 66 | .plugin)..If.you.have.high.traff |
da2a0 | 69 63 20 6c 65 76 65 6c 73 20 6f 72 20 6e 6f 74 65 64 20 73 6f 6d 65 20 70 72 6f 62 6c 65 6d 73 | ic.levels.or.noted.some.problems |
da2c0 | 20 77 69 74 68 20 6d 69 73 73 65 64 20 72 65 63 6f 72 64 73 20 6f 72 20 73 74 6f 70 70 69 6e 67 | .with.missed.records.or.stopping |
da2e0 | 20 65 78 70 6f 72 74 69 6e 67 2c 20 79 6f 75 20 6d 61 79 20 74 72 79 20 74 6f 20 69 6e 63 72 65 | .exporting,.you.may.try.to.incre |
da300 | 61 73 65 20 61 20 64 65 66 61 75 6c 74 20 62 75 66 66 65 72 20 73 69 7a 65 20 28 31 30 20 4d 69 | ase.a.default.buffer.size.(10.Mi |
da320 | 42 29 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 6e 64 3a 00 49 6e 74 65 72 6e | B).with.the.next.command:.Intern |
da340 | 65 74 20 4b 65 79 20 45 78 63 68 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 20 28 49 4b 45 76 32 | et.Key.Exchange.version.2.(IKEv2 |
da360 | 29 20 69 73 20 61 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 2c 20 62 61 73 65 64 | ).is.a.tunneling.protocol,.based |
da380 | 20 6f 6e 20 49 50 73 65 63 2c 20 74 68 61 74 20 65 73 74 61 62 6c 69 73 68 65 73 20 61 20 73 65 | .on.IPsec,.that.establishes.a.se |
da3a0 | 63 75 72 65 20 56 50 4e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 | cure.VPN.communication.between.V |
da3c0 | 50 4e 20 64 65 76 69 63 65 73 2c 20 20 61 6e 64 20 64 65 66 69 6e 65 73 20 6e 65 67 6f 74 69 61 | PN.devices,..and.defines.negotia |
da3e0 | 74 69 6f 6e 20 61 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 65 | tion.and.authentication.processe |
da400 | 73 20 66 6f 72 20 49 50 73 65 63 20 73 65 63 75 72 69 74 79 20 61 73 73 6f 63 69 61 74 69 6f 6e | s.for.IPsec.security.association |
da420 | 73 20 28 53 41 73 29 2e 20 49 74 20 69 73 20 6f 66 74 65 6e 20 6b 6e 6f 77 6e 20 61 73 20 49 4b | s.(SAs)..It.is.often.known.as.IK |
da440 | 45 76 32 2f 49 50 53 65 63 20 6f 72 20 49 50 53 65 63 20 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d | Ev2/IPSec.or.IPSec.IKEv2.remote- |
da460 | 61 63 63 65 73 73 20 e2 80 94 20 6f 72 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 73 20 61 73 20 6f | access.....or.road-warriors.as.o |
da480 | 74 68 65 72 73 20 63 61 6c 6c 20 69 74 2e 00 49 6e 74 65 72 6e 65 74 20 4b 65 79 20 45 78 63 68 | thers.call.it..Internet.Key.Exch |
da4a0 | 61 6e 67 65 20 76 65 72 73 69 6f 6e 20 32 2c 20 49 4b 45 76 32 20 66 6f 72 20 73 68 6f 72 74 2c | ange.version.2,.IKEv2.for.short, |
da4c0 | 20 69 73 20 61 20 72 65 71 75 65 73 74 2f 72 65 73 70 6f 6e 73 65 20 70 72 6f 74 6f 63 6f 6c 20 | .is.a.request/response.protocol. |
da4e0 | 64 65 76 65 6c 6f 70 65 64 20 62 79 20 62 6f 74 68 20 43 69 73 63 6f 20 61 6e 64 20 4d 69 63 72 | developed.by.both.Cisco.and.Micr |
da500 | 6f 73 6f 66 74 2e 20 49 74 20 69 73 20 75 73 65 64 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 | osoft..It.is.used.to.establish.a |
da520 | 6e 64 20 73 65 63 75 72 65 20 49 50 76 34 2f 49 50 76 36 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c | nd.secure.IPv4/IPv6.connections, |
da540 | 20 62 65 20 69 74 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 20 6f 72 20 66 72 6f | .be.it.a.site-to-site.VPN.or.fro |
da560 | 6d 20 61 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 | m.a.road-warrior.connecting.to.a |
da580 | 20 68 75 62 20 73 69 74 65 2e 20 49 4b 45 76 32 2c 20 77 68 65 6e 20 72 75 6e 20 69 6e 20 70 6f | .hub.site..IKEv2,.when.run.in.po |
da5a0 | 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 2c 20 6f 72 20 72 65 6d 6f 74 65 2d 61 63 63 | int-to-multipoint,.or.remote-acc |
da5c0 | 65 73 73 2f 72 6f 61 64 2d 77 61 72 72 69 6f 72 20 6d 6f 64 65 2c 20 73 65 63 75 72 65 73 20 74 | ess/road-warrior.mode,.secures.t |
da5e0 | 68 65 20 73 65 72 76 65 72 2d 73 69 64 65 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6c 61 79 65 | he.server-side.with.another.laye |
da600 | 72 20 62 79 20 75 73 69 6e 67 20 61 6e 20 78 35 30 39 20 73 69 67 6e 65 64 20 73 65 72 76 65 72 | r.by.using.an.x509.signed.server |
da620 | 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 49 6e 74 65 72 6e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 | .certificate..Internetwork.Contr |
da640 | 6f 6c 00 49 6e 74 65 72 76 61 6c 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 | ol.Interval.Interval.in.millisec |
da660 | 6f 6e 64 73 00 49 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 20 62 65 74 77 65 65 6e | onds.Interval.in.minutes.between |
da680 | 20 75 70 64 61 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 36 30 29 00 49 6e 74 72 6f 64 75 63 69 | .updates.(default:.60).Introduci |
da6a0 | 6e 67 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 72 65 6d 6f 76 65 73 20 74 68 65 20 | ng.route.reflectors.removes.the. |
da6c0 | 6e 65 65 64 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 2d 6d 65 73 68 2e 20 57 68 65 6e 20 79 6f 75 | need.for.the.full-mesh..When.you |
da6e0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 79 6f 75 | .configure.a.route.reflector.you |
da700 | 20 68 61 76 65 20 74 6f 20 74 65 6c 6c 20 74 68 65 20 72 6f 75 74 65 72 20 77 68 65 74 68 65 72 | .have.to.tell.the.router.whether |
da720 | 20 74 68 65 20 6f 74 68 65 72 20 49 42 47 50 20 72 6f 75 74 65 72 20 69 73 20 61 20 63 6c 69 65 | .the.other.IBGP.router.is.a.clie |
da740 | 6e 74 20 6f 72 20 6e 6f 6e 2d 63 6c 69 65 6e 74 2e 20 41 20 63 6c 69 65 6e 74 20 69 73 20 61 6e | nt.or.non-client..A.client.is.an |
da760 | 20 49 42 47 50 20 72 6f 75 74 65 72 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 20 72 65 66 6c | .IBGP.router.that.the.route.refl |
da780 | 65 63 74 6f 72 20 77 69 6c 6c 20 e2 80 9c 72 65 66 6c 65 63 74 e2 80 9d 20 72 6f 75 74 65 73 20 | ector.will....reflect....routes. |
da7a0 | 74 6f 2c 20 74 68 65 20 6e 6f 6e 2d 63 6c 69 65 6e 74 20 69 73 20 6a 75 73 74 20 61 20 72 65 67 | to,.the.non-client.is.just.a.reg |
da7c0 | 75 6c 61 72 20 49 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 20 52 6f 75 74 65 20 72 65 66 6c 65 63 | ular.IBGP.neighbor..Route.reflec |
da7e0 | 74 6f 72 73 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a | tors.mechanism.is.described.in.: |
da800 | 72 66 63 3a 60 34 34 35 36 60 20 61 6e 64 20 75 70 64 61 74 65 64 20 62 79 20 3a 72 66 63 3a 60 | rfc:`4456`.and.updated.by.:rfc:` |
da820 | 37 36 30 36 60 2e 00 49 74 20 64 69 73 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 68 | 7606`..It.disables.transparent.h |
da840 | 75 67 65 20 70 61 67 65 73 2c 20 61 6e 64 20 61 75 74 6f 6d 61 74 69 63 20 4e 55 4d 41 20 62 61 | uge.pages,.and.automatic.NUMA.ba |
da860 | 6c 61 6e 63 69 6e 67 2e 20 49 74 20 61 6c 73 6f 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 | lancing..It.also.uses.cpupower.t |
da880 | 6f 20 73 65 74 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f | o.set.the.performance.cpufreq.go |
da8a0 | 76 65 72 6e 6f 72 2c 20 61 6e 64 20 72 65 71 75 65 73 74 73 20 61 20 63 70 75 5f 64 6d 61 5f 6c | vernor,.and.requests.a.cpu_dma_l |
da8c0 | 61 74 65 6e 63 79 20 76 61 6c 75 65 20 6f 66 20 31 2e 20 49 74 20 61 6c 73 6f 20 73 65 74 73 20 | atency.value.of.1..It.also.sets. |
da8e0 | 62 75 73 79 5f 72 65 61 64 20 61 6e 64 20 62 75 73 79 5f 70 6f 6c 6c 20 74 69 6d 65 73 20 74 6f | busy_read.and.busy_poll.times.to |
da900 | 20 35 30 20 75 73 2c 20 61 6e 64 20 74 63 70 5f 66 61 73 74 6f 70 65 6e 20 74 6f 20 33 2e 00 49 | .50.us,.and.tcp_fastopen.to.3..I |
da920 | 74 20 65 6e 61 62 6c 65 73 20 74 72 61 6e 73 70 61 72 65 6e 74 20 68 75 67 65 20 70 61 67 65 73 | t.enables.transparent.huge.pages |
da940 | 2c 20 61 6e 64 20 75 73 65 73 20 63 70 75 70 6f 77 65 72 20 74 6f 20 73 65 74 20 74 68 65 20 70 | ,.and.uses.cpupower.to.set.the.p |
da960 | 65 72 66 6f 72 6d 61 6e 63 65 20 63 70 75 66 72 65 71 20 67 6f 76 65 72 6e 6f 72 2e 20 49 74 20 | erformance.cpufreq.governor..It. |
da980 | 61 6c 73 6f 20 73 65 74 73 20 60 60 6b 65 72 6e 65 6c 2e 73 63 68 65 64 5f 6d 69 6e 5f 67 72 61 | also.sets.``kernel.sched_min_gra |
da9a0 | 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 6f 20 31 30 20 75 73 2c 20 60 60 6b 65 72 6e 65 6c | nularity_ns``.to.10.us,.``kernel |
da9c0 | 2e 73 63 68 65 64 5f 77 61 6b 65 75 70 5f 67 72 61 6e 75 6c 61 72 69 74 79 5f 6e 73 60 60 20 74 | .sched_wakeup_granularity_ns``.t |
da9e0 | 6f 20 31 35 20 75 73 73 2c 20 61 6e 64 20 60 60 76 6d 2e 64 69 72 74 79 5f 72 61 74 69 6f 60 60 | o.15.uss,.and.``vm.dirty_ratio`` |
daa00 | 20 74 6f 20 34 30 25 2e 00 49 74 20 67 65 6e 65 72 61 74 65 73 20 74 68 65 20 6b 65 79 70 61 69 | .to.40%..It.generates.the.keypai |
daa20 | 72 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 61 6e 64 | r,.which.includes.the.public.and |
daa40 | 20 70 72 69 76 61 74 65 20 70 61 72 74 73 2e 20 54 68 65 20 6b 65 79 20 69 73 20 6e 6f 74 20 73 | .private.parts..The.key.is.not.s |
daa60 | 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 20 2d 20 6f 6e 6c 79 20 61 20 6b 65 79 | tored.on.the.system.-.only.a.key |
daa80 | 70 61 69 72 20 69 73 20 67 65 6e 65 72 61 74 65 64 2e 00 49 74 20 68 65 6c 70 73 20 74 6f 20 73 | pair.is.generated..It.helps.to.s |
daaa0 | 75 70 70 6f 72 74 20 61 73 20 48 45 4c 50 45 52 20 6f 6e 6c 79 20 66 6f 72 20 70 6c 61 6e 6e 65 | upport.as.HELPER.only.for.planne |
daac0 | 64 20 72 65 73 74 61 72 74 73 2e 00 49 74 20 68 65 6c 70 73 20 74 6f 20 74 68 69 6e 6b 20 6f 66 | d.restarts..It.helps.to.think.of |
daae0 | 20 74 68 65 20 73 79 6e 74 61 78 20 61 73 3a 20 28 73 65 65 20 62 65 6c 6f 77 29 2e 20 54 68 65 | .the.syntax.as:.(see.below)..The |
dab00 | 20 27 72 75 6c 65 2d 73 65 74 27 20 73 68 6f 75 6c 64 20 62 65 20 77 72 69 74 74 65 6e 20 66 72 | .'rule-set'.should.be.written.fr |
dab20 | 6f 6d 20 74 68 65 20 70 65 72 73 70 65 63 74 69 76 65 20 6f 66 3a 20 2a 53 6f 75 72 63 65 20 5a | om.the.perspective.of:.*Source.Z |
dab40 | 6f 6e 65 2a 2d 74 6f 2d 3e 2a 44 65 73 74 69 6e 61 74 69 6f 6e 20 5a 6f 6e 65 2a 00 49 74 20 69 | one*-to->*Destination.Zone*.It.i |
dab60 | 73 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 43 69 73 63 6f 20 28 52 29 20 41 6e 79 43 | s.compatible.with.Cisco.(R).AnyC |
dab80 | 6f 6e 6e 65 63 74 20 28 52 29 20 63 6c 69 65 6e 74 73 2e 00 49 74 20 69 73 20 63 6f 6e 6e 65 63 | onnect.(R).clients..It.is.connec |
daba0 | 74 65 64 20 74 6f 20 60 60 65 74 68 31 60 60 00 49 74 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 | ted.to.``eth1``.It.is.highly.rec |
dabc0 | 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 53 53 48 20 6b 65 79 20 61 75 74 68 65 6e 74 69 | ommended.to.use.SSH.key.authenti |
dabe0 | 63 61 74 69 6f 6e 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 72 65 20 69 73 20 6f 6e 6c 79 | cation..By.default.there.is.only |
dac00 | 20 6f 6e 65 20 75 73 65 72 20 28 60 60 76 79 6f 73 60 60 29 2c 20 61 6e 64 20 79 6f 75 20 63 61 | .one.user.(``vyos``),.and.you.ca |
dac20 | 6e 20 61 73 73 69 67 6e 20 61 6e 79 20 6e 75 6d 62 65 72 20 6f 66 20 6b 65 79 73 20 74 6f 20 74 | n.assign.any.number.of.keys.to.t |
dac40 | 68 61 74 20 75 73 65 72 2e 20 59 6f 75 20 63 61 6e 20 67 65 6e 65 72 61 74 65 20 61 20 73 73 68 | hat.user..You.can.generate.a.ssh |
dac60 | 20 6b 65 79 20 77 69 74 68 20 74 68 65 20 60 60 73 73 68 2d 6b 65 79 67 65 6e 60 60 20 63 6f 6d | .key.with.the.``ssh-keygen``.com |
dac80 | 6d 61 6e 64 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 2c 20 77 68 69 63 | mand.on.your.local.machine,.whic |
daca0 | 68 20 77 69 6c 6c 20 28 62 79 20 64 65 66 61 75 6c 74 29 20 73 61 76 65 20 69 74 20 61 73 20 60 | h.will.(by.default).save.it.as.` |
dacc0 | 60 7e 2f 2e 73 73 68 2f 69 64 5f 72 73 61 2e 70 75 62 60 60 2e 00 49 74 20 69 73 20 68 69 67 68 | `~/.ssh/id_rsa.pub``..It.is.high |
dace0 | 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 61 | ly.recommended.to.use.the.same.a |
dad00 | 64 64 72 65 73 73 20 66 6f 72 20 62 6f 74 68 20 74 68 65 20 4c 44 50 20 72 6f 75 74 65 72 2d 69 | ddress.for.both.the.LDP.router-i |
dad20 | 64 20 61 6e 64 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 74 72 61 6e 73 70 6f 72 74 20 61 64 | d.and.the.discovery.transport.ad |
dad40 | 64 72 65 73 73 2c 20 62 75 74 20 66 6f 72 20 56 79 4f 53 20 4d 50 4c 53 20 4c 44 50 20 74 6f 20 | dress,.but.for.VyOS.MPLS.LDP.to. |
dad60 | 77 6f 72 6b 20 62 6f 74 68 20 70 61 72 61 6d 65 74 65 72 73 20 6d 75 73 74 20 62 65 20 65 78 70 | work.both.parameters.must.be.exp |
dad80 | 6c 69 63 69 74 6c 79 20 73 65 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | licitly.set.in.the.configuration |
dada0 | 2e 00 49 74 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 | ..It.is.important.to.note.that.w |
dadc0 | 68 65 6e 20 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 20 74 68 61 74 | hen.creating.firewall.rules.that |
dade0 | 20 74 68 65 20 44 4e 41 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 | .the.DNAT.translation.occurs.**b |
dae00 | 65 66 6f 72 65 2a 2a 20 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 68 65 20 66 69 | efore**.traffic.traverses.the.fi |
dae20 | 72 65 77 61 6c 6c 2e 20 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 64 65 73 74 | rewall..In.other.words,.the.dest |
dae40 | 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e | ination.address.has.already.been |
dae60 | 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 | .translated.to.192.168.0.100..It |
dae80 | 20 69 73 20 69 6d 70 6f 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 77 68 65 6e 20 | .is.important.to.note.that.when. |
daea0 | 63 72 65 61 74 69 6e 67 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 74 68 65 20 44 4e 41 | creating.firewall.rules,.the.DNA |
daec0 | 54 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 6f 63 63 75 72 73 20 2a 2a 62 65 66 6f 72 65 2a 2a 20 | T.translation.occurs.**before**. |
daee0 | 74 72 61 66 66 69 63 20 74 72 61 76 65 72 73 65 73 20 74 68 65 20 66 69 72 65 77 61 6c 6c 2e 20 | traffic.traverses.the.firewall.. |
daf00 | 49 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | In.other.words,.the.destination. |
daf20 | 61 64 64 72 65 73 73 20 68 61 73 20 61 6c 72 65 61 64 79 20 62 65 65 6e 20 74 72 61 6e 73 6c 61 | address.has.already.been.transla |
daf40 | 74 65 64 20 74 6f 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 49 74 20 69 73 20 6e 6f 74 20 | ted.to.192.168.0.100..It.is.not. |
daf60 | 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4c | sufficient.to.only.configure.a.L |
daf80 | 33 56 50 4e 20 56 52 46 73 20 62 75 74 20 4c 33 56 50 4e 20 56 52 46 73 20 6d 75 73 74 20 62 65 | 3VPN.VRFs.but.L3VPN.VRFs.must.be |
dafa0 | 20 6d 61 69 6e 74 61 69 6e 65 64 2c 20 74 6f 6f 2e 46 6f 72 20 4c 33 56 50 4e 20 56 52 46 20 6d | .maintained,.too.For.L3VPN.VRF.m |
dafc0 | 61 69 6e 74 65 6e 61 6e 63 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 | aintenance.the.following.operati |
dafe0 | 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 | onal.commands.are.in.place..It.i |
db000 | 73 20 6e 6f 74 20 73 75 66 66 69 63 69 65 6e 74 20 74 6f 20 6f 6e 6c 79 20 63 6f 6e 66 69 67 75 | s.not.sufficient.to.only.configu |
db020 | 72 65 20 61 20 56 52 46 20 62 75 74 20 56 52 46 73 20 6d 75 73 74 20 62 65 20 6d 61 69 6e 74 61 | re.a.VRF.but.VRFs.must.be.mainta |
db040 | 69 6e 65 64 2c 20 74 6f 6f 2e 20 46 6f 72 20 56 52 46 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 74 | ined,.too..For.VRF.maintenance.t |
db060 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 | he.following.operational.command |
db080 | 73 20 61 72 65 20 69 6e 20 70 6c 61 63 65 2e 00 49 74 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 | s.are.in.place..It.is.not.valid. |
db0a0 | 74 6f 20 75 73 65 20 74 68 65 20 60 76 69 66 20 31 60 20 6f 70 74 69 6f 6e 20 66 6f 72 20 56 4c | to.use.the.`vif.1`.option.for.VL |
db0c0 | 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 65 73 20 62 65 63 61 75 73 65 20 56 4c 41 4e 20 61 77 | AN.aware.bridges.because.VLAN.aw |
db0e0 | 61 72 65 20 62 72 69 64 67 65 73 20 61 73 73 75 6d 65 20 74 68 61 74 20 61 6c 6c 20 75 6e 6c 61 | are.bridges.assume.that.all.unla |
db100 | 62 65 6c 65 64 20 70 61 63 6b 65 74 73 20 62 65 6c 6f 6e 67 20 74 6f 20 74 68 65 20 64 65 66 61 | beled.packets.belong.to.the.defa |
db120 | 75 6c 74 20 56 4c 41 4e 20 31 20 6d 65 6d 62 65 72 20 61 6e 64 20 74 68 61 74 20 74 68 65 20 56 | ult.VLAN.1.member.and.that.the.V |
db140 | 4c 41 4e 20 49 44 20 6f 66 20 74 68 65 20 62 72 69 64 67 65 27 73 20 70 61 72 65 6e 74 20 69 6e | LAN.ID.of.the.bridge's.parent.in |
db160 | 74 65 72 66 61 63 65 20 69 73 20 61 6c 77 61 79 73 20 31 00 49 74 20 69 73 20 70 6f 73 73 69 62 | terface.is.always.1.It.is.possib |
db180 | 6c 65 20 74 6f 20 65 6e 68 61 6e 63 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 63 | le.to.enhance.authentication.sec |
db1a0 | 75 72 69 74 79 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 61 62 62 72 3a 60 32 46 41 20 28 54 | urity.by.using.the.:abbr:`2FA.(T |
db1c0 | 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 2f 3a 61 62 62 72 | wo-factor.authentication)`/:abbr |
db1e0 | 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 | :`MFA.(Multi-factor.authenticati |
db200 | 6f 6e 29 60 20 66 65 61 74 75 72 65 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 61 62 62 72 | on)`.feature.together.with.:abbr |
db220 | 3a 60 4f 54 50 20 28 4f 6e 65 2d 54 69 6d 65 2d 50 61 64 29 60 20 6f 6e 20 56 79 4f 53 2e 20 3a | :`OTP.(One-Time-Pad)`.on.VyOS..: |
db240 | 61 62 62 72 3a 60 32 46 41 20 28 54 77 6f 2d 66 61 63 74 6f 72 20 61 75 74 68 65 6e 74 69 63 61 | abbr:`2FA.(Two-factor.authentica |
db260 | 74 69 6f 6e 29 60 2f 3a 61 62 62 72 3a 60 4d 46 41 20 28 4d 75 6c 74 69 2d 66 61 63 74 6f 72 20 | tion)`/:abbr:`MFA.(Multi-factor. |
db280 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 29 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 | authentication)`.is.configured.i |
db2a0 | 6e 64 65 70 65 6e 64 65 6e 74 6c 79 20 70 65 72 20 65 61 63 68 20 75 73 65 72 2e 20 49 66 20 61 | ndependently.per.each.user..If.a |
db2c0 | 6e 20 4f 54 50 20 6b 65 79 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 61 20 75 73 | n.OTP.key.is.configured.for.a.us |
db2e0 | 65 72 2c 20 32 46 41 2f 4d 46 41 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 65 6e 61 | er,.2FA/MFA.is.automatically.ena |
db300 | 62 6c 65 64 20 66 6f 72 20 74 68 61 74 20 70 61 72 74 69 63 75 6c 61 72 20 75 73 65 72 2e 20 49 | bled.for.that.particular.user..I |
db320 | 66 20 61 20 75 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 6e 20 4f 54 50 20 6b 65 | f.a.user.does.not.have.an.OTP.ke |
db340 | 79 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 74 68 65 72 65 20 69 73 20 6e 6f 20 32 46 41 2f 4d 46 | y.configured,.there.is.no.2FA/MF |
db360 | 41 20 63 68 65 63 6b 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e 00 49 74 20 69 73 20 70 6f 73 | A.check.for.that.user..It.is.pos |
db380 | 73 69 62 6c 65 20 74 6f 20 70 65 72 6d 69 74 20 42 47 50 20 69 6e 73 74 61 6c 6c 20 56 50 4e 20 | sible.to.permit.BGP.install.VPN. |
db3a0 | 70 72 65 66 69 78 65 73 20 77 69 74 68 6f 75 74 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 62 65 6c | prefixes.without.transport.label |
db3c0 | 73 2e 20 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 69 6e 73 74 61 | s..This.configuration.will.insta |
db3e0 | 6c 6c 20 56 50 4e 20 70 72 65 66 69 78 65 73 20 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 | ll.VPN.prefixes.originated.from. |
db400 | 61 6e 20 65 2d 62 67 70 20 73 65 73 73 69 6f 6e 2c 20 61 6e 64 20 77 69 74 68 20 74 68 65 20 6e | an.e-bgp.session,.and.with.the.n |
db420 | 65 78 74 2d 68 6f 70 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 49 74 20 69 | ext-hop.directly.connected..It.i |
db440 | 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 73 74 61 74 69 63 20 72 | s.possible.to.specify.a.static.r |
db460 | 6f 75 74 65 20 66 6f 72 20 69 70 76 36 20 70 72 65 66 69 78 65 73 20 75 73 69 6e 67 20 61 6e 20 | oute.for.ipv6.prefixes.using.an. |
db480 | 53 52 76 36 20 73 65 67 6d 65 6e 74 73 20 69 6e 73 74 72 75 63 74 69 6f 6e 2e 20 54 68 65 20 60 | SRv6.segments.instruction..The.` |
db4a0 | 2f 60 20 73 65 70 61 72 61 74 6f 72 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 73 70 65 63 | /`.separator.can.be.used.to.spec |
db4c0 | 69 66 79 20 6d 75 6c 74 69 70 6c 65 20 73 65 67 6d 65 6e 74 20 69 6e 73 74 72 75 63 74 69 6f 6e | ify.multiple.segment.instruction |
db4e0 | 73 2e 00 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 75 73 65 20 65 69 74 68 65 72 20 | s..It.is.possible.to.use.either. |
db500 | 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 55 6e 69 63 61 73 74 20 74 6f 20 73 79 6e 63 20 63 6f 6e | Multicast.or.Unicast.to.sync.con |
db520 | 6e 74 72 61 63 6b 20 74 72 61 66 66 69 63 2e 20 4d 6f 73 74 20 65 78 61 6d 70 6c 65 73 20 62 65 | ntrack.traffic..Most.examples.be |
db540 | 6c 6f 77 20 73 68 6f 77 20 4d 75 6c 74 69 63 61 73 74 2c 20 62 75 74 20 75 6e 69 63 61 73 74 20 | low.show.Multicast,.but.unicast. |
db560 | 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 22 70 | can.be.specified.by.using.the."p |
db580 | 65 65 72 22 20 6b 65 79 77 6f 72 6b 20 61 66 74 65 72 20 74 68 65 20 73 70 65 63 69 66 69 63 65 | eer".keywork.after.the.specifice |
db5a0 | 64 20 69 6e 74 65 72 66 61 63 65 2c 20 61 73 20 69 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | d.interface,.as.in.the.following |
db5c0 | 20 65 78 61 6d 70 6c 65 3a 00 49 74 20 69 73 20 76 65 72 79 20 65 61 73 79 20 74 6f 20 6d 69 73 | .example:.It.is.very.easy.to.mis |
db5e0 | 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 63 61 73 74 20 72 65 70 65 61 74 69 6e 67 20 69 66 | configure.multicast.repeating.if |
db600 | 20 79 6f 75 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 20 4e 48 53 65 73 2e 00 49 74 20 75 73 65 | .you.have.multiple.NHSes..It.use |
db620 | 73 20 61 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e | s.a.single.TCP.or.UDP.connection |
db640 | 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 72 65 6c 79 20 6f 6e 20 70 61 63 6b 65 74 20 73 6f 75 | .and.does.not.rely.on.packet.sou |
db660 | 72 63 65 20 61 64 64 72 65 73 73 65 73 2c 20 73 6f 20 69 74 20 77 69 6c 6c 20 77 6f 72 6b 20 65 | rce.addresses,.so.it.will.work.e |
db680 | 76 65 6e 20 74 68 72 6f 75 67 68 20 61 20 64 6f 75 62 6c 65 20 4e 41 54 3a 20 70 65 72 66 65 63 | ven.through.a.double.NAT:.perfec |
db6a0 | 74 20 66 6f 72 20 70 75 62 6c 69 63 20 68 6f 74 73 70 6f 74 73 20 61 6e 64 20 73 75 63 68 00 49 | t.for.public.hotspots.and.such.I |
db6c0 | 74 20 75 73 65 73 20 61 20 73 74 6f 63 68 61 73 74 69 63 20 6d 6f 64 65 6c 20 74 6f 20 63 6c 61 | t.uses.a.stochastic.model.to.cla |
db6e0 | 73 73 69 66 79 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b 65 74 73 20 69 6e 74 6f 20 64 69 66 66 | ssify.incoming.packets.into.diff |
db700 | 65 72 65 6e 74 20 66 6c 6f 77 73 20 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 70 72 6f 76 69 | erent.flows.and.is.used.to.provi |
db720 | 64 65 20 61 20 66 61 69 72 20 73 68 61 72 65 20 6f 66 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 | de.a.fair.share.of.the.bandwidth |
db740 | 20 74 6f 20 61 6c 6c 20 74 68 65 20 66 6c 6f 77 73 20 75 73 69 6e 67 20 74 68 65 20 71 75 65 75 | .to.all.the.flows.using.the.queu |
db760 | 65 2e 20 45 61 63 68 20 66 6c 6f 77 20 69 73 20 6d 61 6e 61 67 65 64 20 62 79 20 74 68 65 20 43 | e..Each.flow.is.managed.by.the.C |
db780 | 6f 44 65 6c 20 71 75 65 75 69 6e 67 20 20 64 69 73 63 69 70 6c 69 6e 65 2e 20 52 65 6f 72 64 65 | oDel.queuing..discipline..Reorde |
db7a0 | 72 69 6e 67 20 77 69 74 68 69 6e 20 61 20 66 6c 6f 77 20 69 73 20 61 76 6f 69 64 65 64 20 73 69 | ring.within.a.flow.is.avoided.si |
db7c0 | 6e 63 65 20 43 6f 64 65 6c 20 69 6e 74 65 72 6e 61 6c 6c 79 20 75 73 65 73 20 61 20 46 49 46 4f | nce.Codel.internally.uses.a.FIFO |
db7e0 | 20 71 75 65 75 65 2e 00 49 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 62 69 6e 65 64 20 77 69 74 68 | .queue..It.will.be.combined.with |
db800 | 20 74 68 65 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 6c | .the.delegated.prefix.and.the.sl |
db820 | 61 2d 69 64 20 74 6f 20 66 6f 72 6d 20 61 20 63 6f 6d 70 6c 65 74 65 20 69 6e 74 65 72 66 61 63 | a-id.to.form.a.complete.interfac |
db840 | 65 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 74 6f 20 75 73 65 | e.address..The.default.is.to.use |
db860 | 20 74 68 65 20 45 55 49 2d 36 34 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 | .the.EUI-64.address.of.the.inter |
db880 | 66 61 63 65 2e 00 49 74 27 73 20 65 61 73 79 20 74 6f 20 73 65 74 75 70 20 61 6e 64 20 6f 66 66 | face..It's.easy.to.setup.and.off |
db8a0 | 65 72 73 20 76 65 72 79 20 66 6c 65 78 69 62 6c 65 20 73 70 6c 69 74 20 74 75 6e 6e 65 6c 69 6e | ers.very.flexible.split.tunnelin |
db8c0 | 67 00 49 74 27 73 20 6e 6f 74 20 6c 69 6b 65 6c 79 20 74 68 61 74 20 61 6e 79 6f 6e 65 20 77 69 | g.It's.not.likely.that.anyone.wi |
db8e0 | 6c 6c 20 6e 65 65 64 20 69 74 20 61 6e 79 20 74 69 6d 65 20 73 6f 6f 6e 2c 20 62 75 74 20 69 74 | ll.need.it.any.time.soon,.but.it |
db900 | 20 64 6f 65 73 20 65 78 69 73 74 2e 00 49 74 27 73 20 73 6c 6f 77 65 72 20 74 68 61 6e 20 49 50 | .does.exist..It's.slower.than.IP |
db920 | 73 65 63 20 64 75 65 20 74 6f 20 68 69 67 68 65 72 20 70 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 68 | sec.due.to.higher.protocol.overh |
db940 | 65 61 64 20 61 6e 64 20 74 68 65 20 66 61 63 74 20 69 74 20 72 75 6e 73 20 69 6e 20 75 73 65 72 | ead.and.the.fact.it.runs.in.user |
db960 | 20 6d 6f 64 65 20 77 68 69 6c 65 20 49 50 73 65 63 2c 20 6f 6e 20 4c 69 6e 75 78 2c 20 69 73 20 | .mode.while.IPsec,.on.Linux,.is. |
db980 | 69 6e 20 6b 65 72 6e 65 6c 20 6d 6f 64 65 00 49 74 27 73 20 74 69 6d 65 20 74 6f 20 63 68 65 63 | in.kernel.mode.It's.time.to.chec |
db9a0 | 6b 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 2c 20 74 6f 20 73 65 65 20 69 66 20 61 6e 79 | k.conntrack.table,.to.see.if.any |
db9c0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 61 73 20 61 63 63 65 70 74 65 64 2c 20 61 6e 64 20 69 66 | .connection.was.accepted,.and.if |
db9e0 | 20 77 61 73 20 70 72 6f 70 65 72 6c 79 20 6f 66 66 6c 6f 61 64 65 64 00 4a 6f 69 6e 20 61 20 67 | .was.properly.offloaded.Join.a.g |
dba00 | 69 76 65 6e 20 56 52 46 2e 20 54 68 69 73 20 77 69 6c 6c 20 6f 70 65 6e 20 61 20 6e 65 77 20 73 | iven.VRF..This.will.open.a.new.s |
dba20 | 75 62 73 68 65 6c 6c 20 77 69 74 68 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 56 52 46 | ubshell.within.the.specified.VRF |
dba40 | 2e 00 4a 75 6d 70 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 72 75 6c 65 20 69 6e 20 74 68 | ..Jump.to.a.different.rule.in.th |
dba60 | 69 73 20 72 6f 75 74 65 2d 6d 61 70 20 6f 6e 20 61 20 6d 61 74 63 68 2e 00 4a 75 6e 69 70 65 72 | is.route-map.on.a.match..Juniper |
dba80 | 20 45 58 20 53 77 69 74 63 68 00 4b 65 72 6e 65 6c 00 4b 65 72 6e 65 6c 20 6d 65 73 73 61 67 65 | .EX.Switch.Kernel.Kernel.message |
dbaa0 | 73 00 4b 65 79 20 42 61 73 65 64 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 4b 65 79 20 47 | s.Key.Based.Authentication.Key.G |
dbac0 | 65 6e 65 72 61 74 69 6f 6e 00 4b 65 79 20 4d 61 6e 61 67 65 6d 65 6e 74 00 4b 65 79 20 50 61 72 | eneration.Key.Management.Key.Par |
dbae0 | 61 6d 65 74 65 72 73 3a 00 4b 65 79 20 50 6f 69 6e 74 73 3a 00 4b 65 79 20 65 78 63 68 61 6e 67 | ameters:.Key.Points:.Key.exchang |
dbb00 | 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 64 6f 6e 65 | e.and.payload.encryption.is.done |
dbb20 | 20 75 73 69 6e 67 20 49 4b 45 20 61 6e 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 | .using.IKE.and.ESP.proposals.as. |
dbb40 | 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 | known.from.IKEv1.but.the.connect |
dbb60 | 69 6f 6e 73 20 61 72 65 20 66 61 73 74 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f | ions.are.faster.to.establish,.mo |
dbb80 | 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f | re.reliable,.and.also.support.ro |
dbba0 | 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 | aming.from.IP.to.IP.(called.MOBI |
dbbc0 | 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 | KE.which.makes.sure.your.connect |
dbbe0 | 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 | ion.does.not.drop.when.changing. |
dbc00 | 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 | networks.from.e.g..WIFI.to.LTE.a |
dbc20 | 6e 64 20 62 61 63 6b 29 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 | nd.back)..Authentication.can.be. |
dbc40 | 61 63 68 69 65 76 65 64 20 77 69 74 68 20 58 2e 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 73 | achieved.with.X.509.certificates |
dbc60 | 2e 00 4b 65 79 20 65 78 63 68 61 6e 67 65 20 61 6e 64 20 70 61 79 6c 6f 61 64 20 65 6e 63 72 79 | ..Key.exchange.and.payload.encry |
dbc80 | 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 64 6f 6e 65 20 75 73 69 6e 67 20 49 4b 45 20 61 6e | ption.is.still.done.using.IKE.an |
dbca0 | 64 20 45 53 50 20 70 72 6f 70 6f 73 61 6c 73 20 61 73 20 6b 6e 6f 77 6e 20 66 72 6f 6d 20 49 4b | d.ESP.proposals.as.known.from.IK |
dbcc0 | 45 76 31 20 62 75 74 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 66 61 73 74 | Ev1.but.the.connections.are.fast |
dbce0 | 65 72 20 74 6f 20 65 73 74 61 62 6c 69 73 68 2c 20 6d 6f 72 65 20 72 65 6c 69 61 62 6c 65 2c 20 | er.to.establish,.more.reliable,. |
dbd00 | 61 6e 64 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 20 72 6f 61 6d 69 6e 67 20 66 72 6f 6d 20 49 50 | and.also.support.roaming.from.IP |
dbd20 | 20 74 6f 20 49 50 20 28 63 61 6c 6c 65 64 20 4d 4f 42 49 4b 45 20 77 68 69 63 68 20 6d 61 6b 65 | .to.IP.(called.MOBIKE.which.make |
dbd40 | 73 20 73 75 72 65 20 79 6f 75 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 | s.sure.your.connection.does.not. |
dbd60 | 64 72 6f 70 20 77 68 65 6e 20 63 68 61 6e 67 69 6e 67 20 6e 65 74 77 6f 72 6b 73 20 66 72 6f 6d | drop.when.changing.networks.from |
dbd80 | 20 65 2e 67 2e 20 57 49 46 49 20 74 6f 20 4c 54 45 20 61 6e 64 20 62 61 63 6b 29 2e 00 4b 65 79 | .e.g..WIFI.to.LTE.and.back)..Key |
dbda0 | 20 75 73 61 67 65 20 28 43 4c 49 29 00 4b 65 79 62 6f 61 72 64 20 4c 61 79 6f 75 74 00 4b 65 79 | .usage.(CLI).Keyboard.Layout.Key |
dbdc0 | 70 61 69 72 73 00 4b 65 79 77 6f 72 64 00 4c 32 54 50 00 4c 32 54 50 20 6f 76 65 72 20 49 50 73 | pairs.Keyword.L2TP.L2TP.over.IPs |
dbde0 | 65 63 00 4c 32 54 50 76 33 00 4c 32 54 50 76 33 20 63 61 6e 20 62 65 20 72 65 67 61 72 64 65 64 | ec.L2TPv3.L2TPv3.can.be.regarded |
dbe00 | 20 61 73 20 62 65 69 6e 67 20 74 6f 20 4d 50 4c 53 20 77 68 61 74 20 49 50 20 69 73 20 74 6f 20 | .as.being.to.MPLS.what.IP.is.to. |
dbe20 | 41 54 4d 3a 20 61 20 73 69 6d 70 6c 69 66 69 65 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 | ATM:.a.simplified.version.of.the |
dbe40 | 20 73 61 6d 65 20 63 6f 6e 63 65 70 74 2c 20 77 69 74 68 20 6d 75 63 68 20 6f 66 20 74 68 65 20 | .same.concept,.with.much.of.the. |
dbe60 | 73 61 6d 65 20 62 65 6e 65 66 69 74 20 61 63 68 69 65 76 65 64 20 61 74 20 61 20 66 72 61 63 74 | same.benefit.achieved.at.a.fract |
dbe80 | 69 6f 6e 20 6f 66 20 74 68 65 20 65 66 66 6f 72 74 2c 20 61 74 20 74 68 65 20 63 6f 73 74 20 6f | ion.of.the.effort,.at.the.cost.o |
dbea0 | 66 20 6c 6f 73 69 6e 67 20 73 6f 6d 65 20 74 65 63 68 6e 69 63 61 6c 20 66 65 61 74 75 72 65 73 | f.losing.some.technical.features |
dbec0 | 20 63 6f 6e 73 69 64 65 72 65 64 20 6c 65 73 73 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 20 74 68 | .considered.less.important.in.th |
dbee0 | 65 20 6d 61 72 6b 65 74 2e 00 4c 32 54 50 76 33 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e | e.market..L2TPv3.is.described.in |
dbf00 | 20 3a 72 66 63 3a 60 33 39 32 31 60 2e 00 4c 32 54 50 76 33 20 69 73 20 64 65 73 63 72 69 62 65 | .:rfc:`3921`..L2TPv3.is.describe |
dbf20 | 64 20 69 6e 20 3a 72 66 63 3a 60 33 39 33 31 60 2e 00 4c 32 54 50 76 33 20 6f 70 74 69 6f 6e 73 | d.in.:rfc:`3931`..L2TPv3.options |
dbf40 | 00 4c 32 54 50 76 33 3a 00 4c 33 56 50 4e 20 56 52 46 73 00 4c 44 41 50 00 4c 44 41 50 20 70 72 | .L2TPv3:.L3VPN.VRFs.LDAP.LDAP.pr |
dbf60 | 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 2e 20 44 65 66 61 75 6c 74 73 20 74 6f 20 33 20 69 66 | otocol.version..Defaults.to.3.if |
dbf80 | 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 2e 00 4c 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 | .not.specified..LDAP.search.filt |
dbfa0 | 65 72 20 74 6f 20 6c 6f 63 61 74 65 20 74 68 65 20 75 73 65 72 20 44 4e 2e 20 52 65 71 75 69 72 | er.to.locate.the.user.DN..Requir |
dbfc0 | 65 64 20 69 66 20 74 68 65 20 75 73 65 72 73 20 61 72 65 20 69 6e 20 61 20 68 69 65 72 61 72 63 | ed.if.the.users.are.in.a.hierarc |
dbfe0 | 68 79 20 62 65 6c 6f 77 20 74 68 65 20 62 61 73 65 20 44 4e 2c 20 6f 72 20 69 66 20 74 68 65 20 | hy.below.the.base.DN,.or.if.the. |
dc000 | 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 6e 6f 74 20 77 68 61 74 20 62 75 69 6c 64 73 20 74 68 | login.name.is.not.what.builds.th |
dc020 | 65 20 75 73 65 72 20 73 70 65 63 69 66 69 63 20 70 61 72 74 20 6f 66 20 74 68 65 20 75 73 65 72 | e.user.specific.part.of.the.user |
dc040 | 73 20 44 4e 2e 00 4c 4c 44 50 00 4c 4c 44 50 20 70 65 72 66 6f 72 6d 73 20 66 75 6e 63 74 69 6f | s.DN..LLDP.LLDP.performs.functio |
dc060 | 6e 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 73 65 76 65 72 61 6c 20 70 72 6f 70 72 69 65 74 61 72 | ns.similar.to.several.proprietar |
dc080 | 79 20 70 72 6f 74 6f 63 6f 6c 73 2c 20 73 75 63 68 20 61 73 20 3a 61 62 62 72 3a 60 43 44 50 20 | y.protocols,.such.as.:abbr:`CDP. |
dc0a0 | 28 43 69 73 63 6f 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 2c 20 3a 61 62 | (Cisco.Discovery.Protocol)`,.:ab |
dc0c0 | 62 72 3a 60 46 44 50 20 28 46 6f 75 6e 64 72 79 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f | br:`FDP.(Foundry.Discovery.Proto |
dc0e0 | 63 6f 6c 29 60 2c 20 3a 61 62 62 72 3a 60 4e 44 50 20 28 4e 6f 72 74 65 6c 20 44 69 73 63 6f 76 | col)`,.:abbr:`NDP.(Nortel.Discov |
dc100 | 65 72 79 20 50 72 6f 74 6f 63 6f 6c 29 60 20 61 6e 64 20 3a 61 62 62 72 3a 60 4c 4c 54 44 20 28 | ery.Protocol)`.and.:abbr:`LLTD.( |
dc120 | 4c 69 6e 6b 20 4c 61 79 65 72 20 54 6f 70 6f 6c 6f 67 79 20 44 69 73 63 6f 76 65 72 79 29 60 2e | Link.Layer.Topology.Discovery)`. |
dc140 | 00 4c 4e 53 20 28 4c 32 54 50 20 4e 65 74 77 6f 72 6b 20 53 65 72 76 65 72 29 00 4c 4e 53 20 61 | .LNS.(L2TP.Network.Server).LNS.a |
dc160 | 72 65 20 6f 66 74 65 6e 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 20 4c 41 | re.often.used.to.connect.to.a.LA |
dc180 | 43 20 28 4c 32 54 50 20 41 63 63 65 73 73 20 43 6f 6e 63 65 6e 74 72 61 74 6f 72 29 2e 00 4c 61 | C.(L2TP.Access.Concentrator)..La |
dc1a0 | 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 00 4c 61 79 65 72 20 | bel.Distribution.Protocol.Layer. |
dc1c0 | 32 20 54 75 6e 6e 65 6c 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 20 33 20 | 2.Tunnelling.Protocol.Version.3. |
dc1e0 | 69 73 20 61 6e 20 49 45 54 46 20 73 74 61 6e 64 61 72 64 20 72 65 6c 61 74 65 64 20 74 6f 20 4c | is.an.IETF.standard.related.to.L |
dc200 | 32 54 50 20 74 68 61 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 6e 20 61 6c 74 65 72 | 2TP.that.can.be.used.as.an.alter |
dc220 | 6e 61 74 69 76 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 3a 72 65 66 3a 60 6d 70 6c 73 60 20 66 | native.protocol.to.:ref:`mpls`.f |
dc240 | 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 6d 75 6c 74 69 70 72 6f 74 6f 63 6f | or.encapsulation.of.multiprotoco |
dc260 | 6c 20 4c 61 79 65 72 20 32 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 66 66 69 63 | l.Layer.2.communications.traffic |
dc280 | 20 6f 76 65 72 20 49 50 20 6e 65 74 77 6f 72 6b 73 2e 20 4c 69 6b 65 20 4c 32 54 50 2c 20 4c 32 | .over.IP.networks..Like.L2TP,.L2 |
dc2a0 | 54 50 76 33 20 70 72 6f 76 69 64 65 73 20 61 20 70 73 65 75 64 6f 2d 77 69 72 65 20 73 65 72 76 | TPv3.provides.a.pseudo-wire.serv |
dc2c0 | 69 63 65 20 62 75 74 20 69 73 20 73 63 61 6c 65 64 20 74 6f 20 66 69 74 20 63 61 72 72 69 65 72 | ice.but.is.scaled.to.fit.carrier |
dc2e0 | 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2e 00 4c 65 61 73 65 20 74 69 6d 65 20 77 69 6c 6c 20 62 | .requirements..Lease.time.will.b |
dc300 | 65 20 6c 65 66 74 20 61 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 77 68 69 63 | e.left.at.the.default.value.whic |
dc320 | 68 20 69 73 20 32 34 20 68 6f 75 72 73 00 4c 65 61 73 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 | h.is.24.hours.Lease.timeout.in.s |
dc340 | 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 38 36 34 30 30 29 00 4c 65 67 61 63 79 20 46 | econds.(default:.86400).Legacy.F |
dc360 | 69 72 65 77 61 6c 6c 00 4c 65 74 20 53 4e 4d 50 20 64 61 65 6d 6f 6e 20 6c 69 73 74 65 6e 20 6f | irewall.Let.SNMP.daemon.listen.o |
dc380 | 6e 6c 79 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 00 4c 65 74 27 | nly.on.IP.address.192.0.2.1.Let' |
dc3a0 | 73 20 61 73 73 75 6d 65 20 50 43 34 20 6f 6e 20 4c 65 61 66 32 20 77 61 6e 74 73 20 74 6f 20 70 | s.assume.PC4.on.Leaf2.wants.to.p |
dc3c0 | 69 6e 67 20 50 43 35 20 6f 6e 20 4c 65 61 66 33 2e 20 49 6e 73 74 65 61 64 20 6f 66 20 73 65 74 | ing.PC5.on.Leaf3..Instead.of.set |
dc3e0 | 74 69 6e 67 20 4c 65 61 66 33 20 61 73 20 6f 75 72 20 72 65 6d 6f 74 65 20 65 6e 64 20 6d 61 6e | ting.Leaf3.as.our.remote.end.man |
dc400 | 75 61 6c 6c 79 2c 20 4c 65 61 66 32 20 65 6e 63 61 70 73 75 6c 61 74 65 73 20 74 68 65 20 70 61 | ually,.Leaf2.encapsulates.the.pa |
dc420 | 63 6b 65 74 20 69 6e 74 6f 20 61 20 55 44 50 2d 70 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 | cket.into.a.UDP-packet.and.sends |
dc440 | 20 69 74 20 74 6f 20 69 74 73 20 64 65 73 69 67 6e 61 74 65 64 20 6d 75 6c 74 69 63 61 73 74 2d | .it.to.its.designated.multicast- |
dc460 | 61 64 64 72 65 73 73 20 76 69 61 20 53 70 69 6e 65 31 2e 20 57 68 65 6e 20 53 70 69 6e 65 31 20 | address.via.Spine1..When.Spine1. |
dc480 | 72 65 63 65 69 76 65 73 20 74 68 69 73 20 70 61 63 6b 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 | receives.this.packet.it.forwards |
dc4a0 | 20 69 74 20 74 6f 20 61 6c 6c 20 6f 74 68 65 72 20 6c 65 61 76 65 73 20 77 68 6f 20 68 61 73 20 | .it.to.all.other.leaves.who.has. |
dc4c0 | 6a 6f 69 6e 65 64 20 74 68 65 20 73 61 6d 65 20 6d 75 6c 74 69 63 61 73 74 2d 67 72 6f 75 70 2c | joined.the.same.multicast-group, |
dc4e0 | 20 69 6e 20 74 68 69 73 20 63 61 73 65 20 4c 65 61 66 33 2e 20 57 68 65 6e 20 4c 65 61 66 33 20 | .in.this.case.Leaf3..When.Leaf3. |
dc500 | 72 65 63 65 69 76 65 73 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 20 66 6f 72 77 61 72 64 73 20 | receives.the.packet.it.forwards. |
dc520 | 69 74 2c 20 77 68 69 6c 65 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 6c 65 61 72 6e | it,.while.at.the.same.time.learn |
dc540 | 69 6e 67 20 74 68 61 74 20 50 43 34 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 62 65 68 69 6e 64 | ing.that.PC4.is.reachable.behind |
dc560 | 20 4c 65 61 66 32 2c 20 62 65 63 61 75 73 65 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 65 64 | .Leaf2,.because.the.encapsulated |
dc580 | 20 70 61 63 6b 65 74 20 68 61 64 20 4c 65 61 66 32 27 73 20 49 50 20 61 64 64 72 65 73 73 20 73 | .packet.had.Leaf2's.IP.address.s |
dc5a0 | 65 74 20 61 73 20 73 6f 75 72 63 65 20 49 50 2e 00 4c 65 74 27 73 20 61 73 73 75 6d 65 20 77 65 | et.as.source.IP..Let's.assume.we |
dc5c0 | 20 68 61 76 65 20 74 77 6f 20 44 48 43 50 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e | .have.two.DHCP.WAN.interfaces.an |
dc5e0 | 64 20 6f 6e 65 20 4c 41 4e 20 28 65 74 68 32 29 3a 00 4c 65 74 27 73 20 62 75 69 6c 64 20 61 20 | d.one.LAN.(eth2):.Let's.build.a. |
dc600 | 73 69 6d 70 6c 65 20 56 50 4e 20 62 65 74 77 65 65 6e 20 32 20 49 6e 74 65 6c c2 ae 20 51 41 54 | simple.VPN.between.2.Intel...QAT |
dc620 | 20 72 65 61 64 79 20 64 65 76 69 63 65 73 2e 00 4c 65 74 27 73 20 65 78 70 61 6e 64 20 74 68 65 | .ready.devices..Let's.expand.the |
dc640 | 20 65 78 61 6d 70 6c 65 20 66 72 6f 6d 20 61 62 6f 76 65 20 61 6e 64 20 61 64 64 20 77 65 69 67 | .example.from.above.and.add.weig |
dc660 | 68 74 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 65 20 62 61 6e 64 77 69 | ht.to.the.interfaces..The.bandwi |
dc680 | 64 74 68 20 66 72 6f 6d 20 65 74 68 30 20 69 73 20 6c 61 72 67 65 72 20 74 68 61 6e 20 65 74 68 | dth.from.eth0.is.larger.than.eth |
dc6a0 | 31 2e 20 50 65 72 20 64 65 66 61 75 6c 74 2c 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 | 1..Per.default,.outbound.traffic |
dc6c0 | 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 72 61 6e 64 6f 6d 6c 79 20 61 63 72 6f 73 73 20 | .is.distributed.randomly.across. |
dc6e0 | 61 76 61 69 6c 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 57 65 69 67 68 74 73 20 63 61 | available.interfaces..Weights.ca |
dc700 | 6e 20 62 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 69 | n.be.assigned.to.interfaces.to.i |
dc720 | 6e 66 6c 75 65 6e 63 65 20 74 68 65 20 62 61 6c 61 6e 63 69 6e 67 2e 00 4c 65 74 73 20 61 73 73 | nfluence.the.balancing..Lets.ass |
dc740 | 75 6d 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 3a 00 4c 65 76 65 | ume.the.following.topology:.Leve |
dc760 | 6c 20 34 20 62 61 6c 61 6e 63 69 6e 67 00 4c 69 66 65 74 69 6d 65 20 61 73 73 6f 63 69 61 74 65 | l.4.balancing.Lifetime.associate |
dc780 | 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 72 20 69 6e 20 75 6e 69 | d.with.the.default.router.in.uni |
dc7a0 | 74 73 20 6f 66 20 73 65 63 6f 6e 64 73 00 4c 69 66 65 74 69 6d 65 20 69 6e 20 64 61 79 73 3b 20 | ts.of.seconds.Lifetime.in.days;. |
dc7c0 | 64 65 66 61 75 6c 74 20 69 73 20 33 36 35 00 4c 69 66 65 74 69 6d 65 20 69 73 20 64 65 63 72 65 | default.is.365.Lifetime.is.decre |
dc7e0 | 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 | mented.by.the.number.of.seconds. |
dc800 | 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 52 41 20 2d 20 75 73 65 20 69 6e 20 63 6f 6e 6a 75 | since.the.last.RA.-.use.in.conju |
dc820 | 6e 63 74 69 6f 6e 20 77 69 74 68 20 61 20 44 48 43 50 76 36 2d 50 44 20 70 72 65 66 69 78 00 4c | nction.with.a.DHCPv6-PD.prefix.L |
dc840 | 69 6b 65 20 6f 6e 20 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 2c 20 41 70 70 6c 65 20 | ike.on.Microsoft.Windows,.Apple. |
dc860 | 69 4f 53 2f 69 50 61 64 4f 53 20 6f 75 74 20 6f 66 20 74 68 65 20 62 6f 78 20 64 6f 65 73 20 6e | iOS/iPadOS.out.of.the.box.does.n |
dc880 | 6f 74 20 65 78 70 6f 73 65 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 56 50 4e 20 6f 70 74 69 | ot.expose.all.available.VPN.opti |
dc8a0 | 6f 6e 73 20 76 69 61 20 74 68 65 20 64 65 76 69 63 65 20 47 55 49 2e 00 4c 69 6d 69 74 20 61 6c | ons.via.the.device.GUI..Limit.al |
dc8c0 | 6c 6f 77 65 64 20 63 69 70 68 65 72 20 61 6c 67 6f 72 69 74 68 6d 73 20 75 73 65 64 20 64 75 72 | lowed.cipher.algorithms.used.dur |
dc8e0 | 69 6e 67 20 53 53 4c 2f 54 4c 53 20 68 61 6e 64 73 68 61 6b 65 00 4c 69 6d 69 74 20 6c 6f 67 69 | ing.SSL/TLS.handshake.Limit.logi |
dc900 | 6e 73 20 74 6f 20 60 3c 6c 69 6d 69 74 3e 60 20 70 65 72 20 65 76 65 72 79 20 60 60 72 61 74 65 | ns.to.`<limit>`.per.every.``rate |
dc920 | 2d 74 69 6d 65 60 60 20 73 65 63 6f 6e 64 73 2e 20 52 61 74 65 20 6c 69 6d 69 74 20 6d 75 73 74 | -time``.seconds..Rate.limit.must |
dc940 | 20 62 65 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 31 30 20 61 74 74 65 6d 70 74 73 2e 00 4c | .be.between.1.and.10.attempts..L |
dc960 | 69 6d 69 74 20 6c 6f 67 69 6e 73 20 74 6f 20 60 60 72 61 74 65 2d 6c 69 6d 69 74 60 60 20 61 74 | imit.logins.to.``rate-limit``.at |
dc980 | 74 65 6d 70 73 20 70 65 72 20 65 76 65 72 79 20 60 3c 73 65 63 6f 6e 64 73 3e 60 2e 20 52 61 74 | temps.per.every.`<seconds>`..Rat |
dc9a0 | 65 20 74 69 6d 65 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 35 20 61 6e 64 20 36 30 | e.time.must.be.between.15.and.60 |
dc9c0 | 30 20 73 65 63 6f 6e 64 73 2e 00 4c 69 6d 69 74 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 | 0.seconds..Limit.maximum.number. |
dc9e0 | 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 4c 69 6d 69 74 65 72 00 4c 69 6d 69 74 65 72 20 69 | of.connections.Limiter.Limiter.i |
dca00 | 73 20 6f 6e 65 20 6f 66 20 74 68 6f 73 65 20 70 6f 6c 69 63 69 65 73 20 74 68 61 74 20 75 73 65 | s.one.of.those.policies.that.use |
dca20 | 73 20 63 6c 61 73 73 65 73 5f 20 28 49 6e 67 72 65 73 73 20 71 64 69 73 63 20 69 73 20 61 63 74 | s.classes_.(Ingress.qdisc.is.act |
dca40 | 75 61 6c 6c 79 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 63 79 20 62 75 74 20 66 69 6c | ually.a.classless.policy.but.fil |
dca60 | 74 65 72 73 20 64 6f 20 77 6f 72 6b 20 69 6e 20 69 74 29 2e 00 4c 69 6d 69 74 73 00 4c 69 6e 65 | ters.do.work.in.it)..Limits.Line |
dca80 | 20 70 72 69 6e 74 65 72 20 73 75 62 73 79 73 74 65 6d 00 4c 69 6e 6b 20 4d 54 55 20 76 61 6c 75 | .printer.subsystem.Link.MTU.valu |
dcaa0 | 65 20 70 6c 61 63 65 64 20 69 6e 20 52 41 73 2c 20 65 78 6c 75 64 65 64 20 69 6e 20 52 41 73 20 | e.placed.in.RAs,.exluded.in.RAs. |
dcac0 | 69 66 20 75 6e 73 65 74 00 4c 69 6e 6b 20 61 67 67 72 65 67 61 74 69 6f 6e 00 4c 69 6e 75 78 20 | if.unset.Link.aggregation.Linux. |
dcae0 | 6e 65 74 66 69 6c 74 65 72 20 77 69 6c 6c 20 6e 6f 74 20 4e 41 54 20 74 72 61 66 66 69 63 20 6d | netfilter.will.not.NAT.traffic.m |
dcb00 | 61 72 6b 65 64 20 61 73 20 49 4e 56 41 4c 49 44 2e 20 54 68 69 73 20 6f 66 74 65 6e 20 63 6f 6e | arked.as.INVALID..This.often.con |
dcb20 | 66 75 73 65 73 20 70 65 6f 70 6c 65 20 69 6e 74 6f 20 74 68 69 6e 6b 69 6e 67 20 74 68 61 74 20 | fuses.people.into.thinking.that. |
dcb40 | 4c 69 6e 75 78 20 28 6f 72 20 73 70 65 63 69 66 69 63 61 6c 6c 79 20 56 79 4f 53 29 20 68 61 73 | Linux.(or.specifically.VyOS).has |
dcb60 | 20 61 20 62 72 6f 6b 65 6e 20 4e 41 54 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 62 65 63 | .a.broken.NAT.implementation.bec |
dcb80 | 61 75 73 65 20 6e 6f 6e 2d 4e 41 54 65 64 20 74 72 61 66 66 69 63 20 69 73 20 73 65 65 6e 20 6c | ause.non-NATed.traffic.is.seen.l |
dcba0 | 65 61 76 69 6e 67 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 | eaving.an.external.interface..Th |
dcbc0 | 69 73 20 69 73 20 61 63 74 75 61 6c 6c 79 20 77 6f 72 6b 69 6e 67 20 61 73 20 69 6e 74 65 6e 64 | is.is.actually.working.as.intend |
dcbe0 | 65 64 2c 20 61 6e 64 20 61 20 70 61 63 6b 65 74 20 63 61 70 74 75 72 65 20 6f 66 20 74 68 65 20 | ed,.and.a.packet.capture.of.the. |
dcc00 | 22 6c 65 61 6b 79 22 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 72 65 76 65 61 6c 20 74 68 | "leaky".traffic.should.reveal.th |
dcc20 | 61 74 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 20 65 69 74 68 65 72 20 61 6e 20 61 64 64 69 | at.the.traffic.is.either.an.addi |
dcc40 | 74 69 6f 6e 61 6c 20 54 43 50 20 22 52 53 54 22 2c 20 22 46 49 4e 2c 41 43 4b 22 2c 20 6f 72 20 | tional.TCP."RST",."FIN,ACK",.or. |
dcc60 | 22 52 53 54 2c 41 43 4b 22 20 73 65 6e 74 20 62 79 20 63 6c 69 65 6e 74 20 73 79 73 74 65 6d 73 | "RST,ACK".sent.by.client.systems |
dcc80 | 20 61 66 74 65 72 20 4c 69 6e 75 78 20 6e 65 74 66 69 6c 74 65 72 20 63 6f 6e 73 69 64 65 72 73 | .after.Linux.netfilter.considers |
dcca0 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 6c 6f 73 65 64 2e 20 54 68 65 20 6d 6f 73 74 | .the.connection.closed..The.most |
dccc0 | 20 63 6f 6d 6d 6f 6e 20 69 73 20 74 68 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 54 43 50 20 52 53 | .common.is.the.additional.TCP.RS |
dcce0 | 54 20 73 6f 6d 65 20 68 6f 73 74 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 | T.some.host.implementations.send |
dcd00 | 20 61 66 74 65 72 20 74 65 72 6d 69 6e 61 74 69 6e 67 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 | .after.terminating.a.connection. |
dcd20 | 28 77 68 69 63 68 20 69 73 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 | (which.is.implementation-specifi |
dcd40 | 63 29 2e 00 4c 69 73 74 20 61 6c 6c 20 4d 41 43 73 65 63 20 69 6e 74 65 72 66 61 63 65 73 2e 00 | c)..List.all.MACsec.interfaces.. |
dcd60 | 4c 69 73 74 20 6f 66 20 66 61 63 69 6c 69 74 69 65 73 20 75 73 65 64 20 62 79 20 73 79 73 6c 6f | List.of.facilities.used.by.syslo |
dcd80 | 67 2e 20 4d 6f 73 74 20 66 61 63 69 6c 69 74 69 65 73 20 6e 61 6d 65 73 20 61 72 65 20 73 65 6c | g..Most.facilities.names.are.sel |
dcda0 | 66 20 65 78 70 6c 61 6e 61 74 6f 72 79 2e 20 46 61 63 69 6c 69 74 69 65 73 20 6c 6f 63 61 6c 30 | f.explanatory..Facilities.local0 |
dcdc0 | 20 2d 20 6c 6f 63 61 6c 37 20 63 6f 6d 6d 6f 6e 20 75 73 61 67 65 20 69 73 20 66 2e 65 2e 20 61 | .-.local7.common.usage.is.f.e..a |
dcde0 | 73 20 6e 65 74 77 6f 72 6b 20 6c 6f 67 73 20 66 61 63 69 6c 69 74 69 65 73 20 66 6f 72 20 6e 6f | s.network.logs.facilities.for.no |
dce00 | 64 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 65 71 75 69 70 6d 65 6e 74 2e 20 47 65 6e 65 72 | des.and.network.equipment..Gener |
dce20 | 61 6c 6c 79 20 69 74 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 73 69 74 75 61 74 69 6f 6e | ally.it.depends.on.the.situation |
dce40 | 20 68 6f 77 20 74 6f 20 63 6c 61 73 73 69 66 79 20 6c 6f 67 73 20 61 6e 64 20 70 75 74 20 74 68 | .how.to.classify.logs.and.put.th |
dce60 | 65 6d 20 74 6f 20 66 61 63 69 6c 69 74 69 65 73 2e 20 53 65 65 20 66 61 63 69 6c 69 74 69 65 73 | em.to.facilities..See.facilities |
dce80 | 20 6d 6f 72 65 20 61 73 20 61 20 74 6f 6f 6c 20 72 61 74 68 65 72 20 74 68 61 6e 20 61 20 64 69 | .more.as.a.tool.rather.than.a.di |
dcea0 | 72 65 63 74 69 76 65 20 74 6f 20 66 6f 6c 6c 6f 77 2e 00 4c 69 73 74 20 6f 66 20 6e 65 74 77 6f | rective.to.follow..List.of.netwo |
dcec0 | 72 6b 73 20 6f 72 20 63 6c 69 65 6e 74 20 61 64 64 72 65 73 73 65 73 20 70 65 72 6d 69 74 74 65 | rks.or.client.addresses.permitte |
dcee0 | 64 20 74 6f 20 63 6f 6e 74 61 63 74 20 74 68 69 73 20 4e 54 50 20 73 65 72 76 65 72 2e 00 4c 69 | d.to.contact.this.NTP.server..Li |
dcf00 | 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 4d 41 43 73 3a 20 60 60 68 6d 61 63 2d 6d 64 35 | st.of.supported.MACs:.``hmac-md5 |
dcf20 | 60 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 | ``,.``hmac-md5-96``,.``hmac-ripe |
dcf40 | 6d 64 31 36 30 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 60 60 2c 20 60 60 68 6d 61 63 2d 73 | md160``,.``hmac-sha1``,.``hmac-s |
dcf60 | 68 61 31 2d 39 36 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 60 60 2c 20 60 60 68 | ha1-96``,.``hmac-sha2-256``,.``h |
dcf80 | 6d 61 63 2d 73 68 61 32 2d 35 31 32 60 60 2c 20 60 60 75 6d 61 63 2d 36 34 40 6f 70 65 6e 73 73 | mac-sha2-512``,.``umac-64@openss |
dcfa0 | 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 | h.com``,.``umac-128@openssh.com` |
dcfc0 | 60 2c 20 60 60 68 6d 61 63 2d 6d 64 35 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 2c | `,.``hmac-md5-etm@openssh.com``, |
dcfe0 | 20 60 60 68 6d 61 63 2d 6d 64 35 2d 39 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f 6d 60 60 | .``hmac-md5-96-etm@openssh.com`` |
dd000 | 2c 20 60 60 68 6d 61 63 2d 72 69 70 65 6d 64 31 36 30 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 | ,.``hmac-ripemd160-etm@openssh.c |
dd020 | 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e 63 6f | om``,.``hmac-sha1-etm@openssh.co |
dd040 | 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 31 2d 39 36 2d 65 74 6d 40 6f 70 65 6e 73 73 68 2e | m``,.``hmac-sha1-96-etm@openssh. |
dd060 | 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 32 35 36 2d 65 74 6d 40 6f 70 65 6e 73 | com``,.``hmac-sha2-256-etm@opens |
dd080 | 73 68 2e 63 6f 6d 60 60 2c 20 60 60 68 6d 61 63 2d 73 68 61 32 2d 35 31 32 2d 65 74 6d 40 6f 70 | sh.com``,.``hmac-sha2-512-etm@op |
dd0a0 | 65 6e 73 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 36 34 2d 65 74 6d 40 6f 70 65 6e 73 | enssh.com``,.``umac-64-etm@opens |
dd0c0 | 73 68 2e 63 6f 6d 60 60 2c 20 60 60 75 6d 61 63 2d 31 32 38 2d 65 74 6d 40 6f 70 65 6e 73 73 68 | sh.com``,.``umac-128-etm@openssh |
dd0e0 | 2e 63 6f 6d 60 60 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 61 6c 67 6f 72 69 74 | .com``.List.of.supported.algorit |
dd100 | 68 6d 73 3a 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 2d 73 68 61 | hms:.``diffie-hellman-group1-sha |
dd120 | 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 68 | 1``,.``diffie-hellman-group14-sh |
dd140 | 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 34 2d 73 | a1``,.``diffie-hellman-group14-s |
dd160 | 68 61 32 35 36 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 31 | ha256``,.``diffie-hellman-group1 |
dd180 | 36 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d 67 72 6f | 6-sha512``,.``diffie-hellman-gro |
dd1a0 | 75 70 31 38 2d 73 68 61 35 31 32 60 60 2c 20 60 60 64 69 66 66 69 65 2d 68 65 6c 6c 6d 61 6e 2d | up18-sha512``,.``diffie-hellman- |
dd1c0 | 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 31 60 60 2c 20 60 60 64 69 66 66 69 65 2d | group-exchange-sha1``,.``diffie- |
dd1e0 | 68 65 6c 6c 6d 61 6e 2d 67 72 6f 75 70 2d 65 78 63 68 61 6e 67 65 2d 73 68 61 32 35 36 60 60 2c | hellman-group-exchange-sha256``, |
dd200 | 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 36 60 60 2c 20 60 60 65 63 64 68 2d | .``ecdh-sha2-nistp256``,.``ecdh- |
dd220 | 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 2c 20 60 60 65 63 64 68 2d 73 68 61 32 2d 6e 69 73 | sha2-nistp384``,.``ecdh-sha2-nis |
dd240 | 74 70 35 32 31 60 60 2c 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 32 35 36 60 60 20 61 | tp521``,.``curve25519-sha256``.a |
dd260 | 6e 64 20 60 60 63 75 72 76 65 32 35 35 31 39 2d 73 68 61 32 35 36 40 6c 69 62 73 73 68 2e 6f 72 | nd.``curve25519-sha256@libssh.or |
dd280 | 67 60 60 2e 00 4c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 63 69 70 68 65 72 73 3a 20 | g``..List.of.supported.ciphers:. |
dd2a0 | 60 60 33 64 65 73 2d 63 62 63 60 60 2c 20 60 60 61 65 73 31 32 38 2d 63 62 63 60 60 2c 20 60 60 | ``3des-cbc``,.``aes128-cbc``,.`` |
dd2c0 | 61 65 73 31 39 32 2d 63 62 63 60 60 2c 20 60 60 61 65 73 32 35 36 2d 63 62 63 60 60 2c 20 60 60 | aes192-cbc``,.``aes256-cbc``,.`` |
dd2e0 | 61 65 73 31 32 38 2d 63 74 72 60 60 2c 20 60 60 61 65 73 31 39 32 2d 63 74 72 60 60 2c 20 60 60 | aes128-ctr``,.``aes192-ctr``,.`` |
dd300 | 61 65 73 32 35 36 2d 63 74 72 60 60 2c 20 60 60 61 72 63 66 6f 75 72 31 32 38 60 60 2c 20 60 60 | aes256-ctr``,.``arcfour128``,.`` |
dd320 | 61 72 63 66 6f 75 72 32 35 36 60 60 2c 20 60 60 61 72 63 66 6f 75 72 60 60 2c 20 60 60 62 6c 6f | arcfour256``,.``arcfour``,.``blo |
dd340 | 77 66 69 73 68 2d 63 62 63 60 60 2c 20 60 60 63 61 73 74 31 32 38 2d 63 62 63 60 60 00 4c 69 73 | wfish-cbc``,.``cast128-cbc``.Lis |
dd360 | 74 20 6f 66 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 00 4c 69 73 74 | t.of.well-known.communities.List |
dd380 | 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 71 75 65 73 74 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 | en.for.DHCP.requests.on.interfac |
dd3a0 | 65 20 60 60 65 74 68 31 60 60 2e 00 4c 69 73 74 73 20 56 52 46 73 20 74 68 61 74 20 68 61 76 65 | e.``eth1``..Lists.VRFs.that.have |
dd3c0 | 20 62 65 65 6e 20 63 72 65 61 74 65 64 00 4c 6f 61 64 20 42 61 6c 61 6e 63 65 00 4c 6f 61 64 20 | .been.created.Load.Balance.Load. |
dd3e0 | 42 61 6c 61 6e 63 69 6e 67 00 4c 6f 61 64 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 61 | Balancing.Load.the.container.ima |
dd400 | 67 65 20 69 6e 20 6f 70 2d 6d 6f 64 65 2e 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 00 4c 6f | ge.in.op-mode..Load-balancing.Lo |
dd420 | 61 64 2d 62 61 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 | ad-balancing.algorithms.to.be.us |
dd440 | 65 64 20 66 6f 72 20 64 69 73 74 72 69 62 75 74 65 64 20 72 65 71 75 65 73 74 73 20 61 6d 6f 6e | ed.for.distributed.requests.amon |
dd460 | 67 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 73 65 72 76 65 72 73 00 4c 6f 61 64 2d 62 61 6c | g.the.available.servers.Load-bal |
dd480 | 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 | ancing.algorithms.to.be.used.for |
dd4a0 | 20 64 69 73 74 72 69 62 75 74 69 6e 64 20 72 65 71 75 65 73 74 73 20 61 6d 6f 6e 67 20 74 68 65 | .distributind.requests.among.the |
dd4c0 | 20 76 61 69 6c 61 62 6c 65 20 73 65 72 76 65 72 73 00 4c 6f 61 64 2d 62 61 6c 61 6e 63 69 6e 67 | .vailable.servers.Load-balancing |
dd4e0 | 20 73 63 68 65 64 75 6c 65 20 61 6c 67 6f 72 69 74 68 6d 3a 00 4c 6f 63 61 6c 00 4c 6f 63 61 6c | .schedule.algorithm:.Local.Local |
dd500 | 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a 00 4c 6f 63 61 | .Configuration.-.Annotated:.Loca |
dd520 | 6c 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4c 6f 63 61 6c 20 49 50 20 60 3c 61 64 64 72 | l.Configuration:.Local.IP.`<addr |
dd540 | 65 73 73 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f | ess>`.used.when.communicating.to |
dd560 | 20 74 68 65 20 48 41 20 70 65 65 72 2e 00 4c 6f 63 61 6c 20 49 50 20 60 3c 61 64 64 72 65 73 73 | .the.HA.peer..Local.IP.`<address |
dd580 | 3e 60 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f 20 74 68 | >`.used.when.communicating.to.th |
dd5a0 | 65 20 66 61 69 6c 6f 76 65 72 20 70 65 65 72 2e 00 4c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 | e.failover.peer..Local.IP.addres |
dd5c0 | 73 65 73 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 00 4c 6f 63 61 6c 20 49 50 76 34 20 61 64 64 72 | ses.to.listen.on.Local.IPv4.addr |
dd5e0 | 65 73 73 65 73 20 66 6f 72 20 73 65 72 76 69 63 65 20 74 6f 20 6c 69 73 74 65 6e 20 6f 6e 2e 00 | esses.for.service.to.listen.on.. |
dd600 | 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 34 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 49 50 76 | Local.Route.IPv4.Local.Route.IPv |
dd620 | 36 00 4c 6f 63 61 6c 20 52 6f 75 74 65 20 50 6f 6c 69 63 79 00 4c 6f 63 61 6c 20 55 73 65 72 20 | 6.Local.Route.Policy.Local.User. |
dd640 | 41 63 63 6f 75 6e 74 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 | Account.Local.path.that.includes |
dd660 | 20 74 68 65 20 6b 6e 6f 77 6e 20 68 6f 73 74 73 20 66 69 6c 65 2e 00 4c 6f 63 61 6c 20 70 61 74 | .the.known.hosts.file..Local.pat |
dd680 | 68 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 72 69 76 61 74 65 20 6b 65 79 20 | h.that.includes.the.private.key. |
dd6a0 | 66 69 6c 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 61 6c 20 70 61 74 68 20 74 | file.of.the.router..Local.path.t |
dd6c0 | 68 61 74 20 69 6e 63 6c 75 64 65 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6c 65 | hat.includes.the.public.key.file |
dd6e0 | 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2e 00 4c 6f 63 61 6c 20 72 6f 75 74 65 00 4c 6f 63 61 | .of.the.router..Local.route.Loca |
dd700 | 6c 6c 79 20 63 6f 6e 6e 65 63 74 20 74 6f 20 73 65 72 69 61 6c 20 70 6f 72 74 20 69 64 65 6e 74 | lly.connect.to.serial.port.ident |
dd720 | 69 66 69 65 64 20 62 79 20 60 3c 64 65 76 69 63 65 3e 60 2e 00 4c 6f 63 61 6c 6c 79 20 73 69 67 | ified.by.`<device>`..Locally.sig |
dd740 | 6e 69 66 69 63 61 6e 74 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 | nificant.administrative.distance |
dd760 | 2e 00 4c 6f 67 20 61 6c 65 72 74 00 4c 6f 67 20 61 75 64 69 74 00 4c 6f 67 20 65 76 65 72 79 74 | ..Log.alert.Log.audit.Log.everyt |
dd780 | 68 69 6e 67 00 4c 6f 67 20 6d 65 73 73 61 67 65 73 20 66 72 6f 6d 20 61 20 73 70 65 63 69 66 69 | hing.Log.messages.from.a.specifi |
dd7a0 | 65 64 20 69 6d 61 67 65 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 6f 6e 20 74 68 65 | ed.image.can.be.displayed.on.the |
dd7c0 | 20 63 6f 6e 73 6f 6c 65 2e 20 44 65 74 61 69 6c 73 20 6f 66 20 61 6c 6c 6f 77 65 64 20 70 61 72 | .console..Details.of.allowed.par |
dd7e0 | 61 6d 65 74 65 72 73 3a 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 | ameters:.Log.syslog.messages.to. |
dd800 | 60 60 2f 64 65 76 2f 63 6f 6e 73 6f 6c 65 60 60 2c 20 66 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 | ``/dev/console``,.for.an.explana |
dd820 | 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 | tion.on.:ref:`syslog_facilities` |
dd840 | 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 | .keywords.and.:ref:`syslog_sever |
dd860 | 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 | ity_level`.keywords.see.tables.b |
dd880 | 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 74 6f 20 66 69 6c | elow..Log.syslog.messages.to.fil |
dd8a0 | 65 20 73 70 65 63 69 66 69 65 64 20 76 69 61 20 60 3c 66 69 6c 65 6e 61 6d 65 3e 60 2c 20 66 6f | e.specified.via.`<filename>`,.fo |
dd8c0 | 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 | r.an.explanation.on.:ref:`syslog |
dd8e0 | 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 73 20 61 6e 64 20 3a 72 65 66 3a 60 | _facilities`.keywords.and.:ref:` |
dd900 | 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 6c 60 20 6b 65 79 77 6f 72 64 73 20 | syslog_severity_level`.keywords. |
dd920 | 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f 67 20 73 79 73 6c 6f 67 20 6d 65 73 | see.tables.below..Log.syslog.mes |
dd940 | 73 61 67 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 73 70 65 63 69 66 69 65 64 20 62 | sages.to.remote.host.specified.b |
dd960 | 79 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 | y.`<address>`..The.address.can.b |
dd980 | 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 65 69 74 68 65 72 20 46 51 44 4e 20 6f 72 20 49 50 | e.specified.by.either.FQDN.or.IP |
dd9a0 | 20 61 64 64 72 65 73 73 2e 20 46 6f 72 20 61 6e 20 65 78 70 6c 61 6e 61 74 69 6f 6e 20 6f 6e 20 | .address..For.an.explanation.on. |
dd9c0 | 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 66 61 63 69 6c 69 74 69 65 73 60 20 6b 65 79 77 6f 72 64 | :ref:`syslog_facilities`.keyword |
dd9e0 | 73 20 61 6e 64 20 3a 72 65 66 3a 60 73 79 73 6c 6f 67 5f 73 65 76 65 72 69 74 79 5f 6c 65 76 65 | s.and.:ref:`syslog_severity_leve |
dda00 | 6c 60 20 6b 65 79 77 6f 72 64 73 20 73 65 65 20 74 61 62 6c 65 73 20 62 65 6c 6f 77 2e 00 4c 6f | l`.keywords.see.tables.below..Lo |
dda20 | 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 73 | g.the.connection.tracking.events |
dda40 | 20 70 65 72 20 70 72 6f 74 6f 63 6f 6c 2e 00 4c 6f 67 67 69 6e 67 00 4c 6f 67 67 69 6e 67 20 63 | .per.protocol..Logging.Logging.c |
dda60 | 61 6e 20 62 65 20 65 6e 61 62 6c 65 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 66 69 | an.be.enable.for.every.single.fi |
dda80 | 72 65 77 61 6c 6c 20 72 75 6c 65 2e 20 49 66 20 65 6e 61 62 6c 65 64 2c 20 6f 74 68 65 72 20 6c | rewall.rule..If.enabled,.other.l |
ddaa0 | 6f 67 20 6f 70 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 4c 6f 67 67 69 | og.options.can.be.defined..Loggi |
ddac0 | 6e 67 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 6c 65 61 76 65 73 20 74 68 65 20 6c | ng.to.a.remote.host.leaves.the.l |
ddae0 | 6f 63 61 6c 20 6c 6f 67 67 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 6e 74 61 63 | ocal.logging.configuration.intac |
ddb00 | 74 2c 20 69 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 70 61 72 61 6c | t,.it.can.be.configured.in.paral |
ddb20 | 6c 65 6c 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 6f 72 20 63 6f 6e 73 6f 6c 65 20 | lel.to.a.custom.file.or.console. |
ddb40 | 6c 6f 67 67 69 6e 67 2e 20 59 6f 75 20 63 61 6e 20 6c 6f 67 20 74 6f 20 6d 75 6c 74 69 70 6c 65 | logging..You.can.log.to.multiple |
ddb60 | 20 68 6f 73 74 73 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2c 20 75 73 69 6e 67 20 65 | .hosts.at.the.same.time,.using.e |
ddb80 | 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 | ither.TCP.or.UDP..The.default.is |
ddba0 | 20 73 65 6e 64 69 6e 67 20 74 68 65 20 6d 65 73 73 61 67 65 73 20 76 69 61 20 70 6f 72 74 20 35 | .sending.the.messages.via.port.5 |
ddbc0 | 31 34 2f 55 44 50 2e 00 4c 6f 67 69 6e 20 42 61 6e 6e 65 72 00 4c 6f 67 69 6e 20 6c 69 6d 69 74 | 14/UDP..Login.Banner.Login.limit |
ddbe0 | 73 00 4c 6f 67 69 6e 2f 55 73 65 72 20 4d 61 6e 61 67 65 6d 65 6e 74 00 4c 6f 6f 70 20 46 72 65 | s.Login/User.Management.Loop.Fre |
ddc00 | 65 20 41 6c 74 65 72 6e 61 74 65 20 28 4c 46 41 29 00 4c 6f 6f 70 62 61 63 6b 00 4c 6f 6f 70 62 | e.Alternate.(LFA).Loopback.Loopb |
ddc20 | 61 63 6b 73 20 6f 63 63 75 72 73 20 61 74 20 74 68 65 20 49 50 20 6c 65 76 65 6c 20 74 68 65 20 | acks.occurs.at.the.IP.level.the. |
ddc40 | 73 61 6d 65 20 77 61 79 20 61 73 20 66 6f 72 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 | same.way.as.for.other.interfaces |
ddc60 | 2c 20 65 74 68 65 72 6e 65 74 20 66 72 61 6d 65 73 20 61 72 65 20 6e 6f 74 20 66 6f 72 77 61 72 | ,.ethernet.frames.are.not.forwar |
ddc80 | 64 65 64 20 62 65 74 77 65 65 6e 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 | ded.between.Pseudo-Ethernet.inte |
ddca0 | 72 66 61 63 65 73 2e 00 4c 6f 77 00 4d 41 43 20 47 72 6f 75 70 73 00 4d 41 43 20 61 64 64 72 65 | rfaces..Low.MAC.Groups.MAC.addre |
ddcc0 | 73 73 20 61 67 69 6e 67 20 60 3c 74 69 6d 65 60 3e 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 | ss.aging.`<time`>.in.seconds.(de |
ddce0 | 66 61 75 6c 74 3a 20 33 30 30 29 2e 00 4d 41 43 2f 50 48 59 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | fault:.300)..MAC/PHY.information |
ddd00 | 00 4d 41 43 56 4c 41 4e 20 2d 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 00 4d 41 43 73 65 | .MACVLAN.-.Pseudo.Ethernet.MACse |
ddd20 | 63 00 4d 41 43 73 65 63 20 69 73 20 61 6e 20 49 45 45 45 20 73 74 61 6e 64 61 72 64 20 28 49 45 | c.MACsec.is.an.IEEE.standard.(IE |
ddd40 | 45 45 20 38 30 32 2e 31 41 45 29 20 66 6f 72 20 4d 41 43 20 73 65 63 75 72 69 74 79 2c 20 69 6e | EE.802.1AE).for.MAC.security,.in |
ddd60 | 74 72 6f 64 75 63 65 64 20 69 6e 20 32 30 30 36 2e 20 49 74 20 64 65 66 69 6e 65 73 20 61 20 77 | troduced.in.2006..It.defines.a.w |
ddd80 | 61 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 64 65 70 | ay.to.establish.a.protocol.indep |
ddda0 | 65 6e 64 65 6e 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 77 6f 20 68 6f | endent.connection.between.two.ho |
dddc0 | 73 74 73 20 77 69 74 68 20 64 61 74 61 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 2c 20 61 | sts.with.data.confidentiality,.a |
ddde0 | 75 74 68 65 6e 74 69 63 69 74 79 20 61 6e 64 2f 6f 72 20 69 6e 74 65 67 72 69 74 79 2c 20 75 73 | uthenticity.and/or.integrity,.us |
dde00 | 69 6e 67 20 47 43 4d 2d 41 45 53 2d 31 32 38 2e 20 4d 41 43 73 65 63 20 6f 70 65 72 61 74 65 73 | ing.GCM-AES-128..MACsec.operates |
dde20 | 20 6f 6e 20 74 68 65 20 45 74 68 65 72 6e 65 74 20 6c 61 79 65 72 20 61 6e 64 20 61 73 20 73 75 | .on.the.Ethernet.layer.and.as.su |
dde40 | 63 68 20 69 73 20 61 20 6c 61 79 65 72 20 32 20 70 72 6f 74 6f 63 6f 6c 2c 20 77 68 69 63 68 20 | ch.is.a.layer.2.protocol,.which. |
dde60 | 6d 65 61 6e 73 20 69 74 27 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 72 | means.it's.designed.to.secure.tr |
dde80 | 61 66 66 69 63 20 77 69 74 68 69 6e 20 61 20 6c 61 79 65 72 20 32 20 6e 65 74 77 6f 72 6b 2c 20 | affic.within.a.layer.2.network,. |
ddea0 | 69 6e 63 6c 75 64 69 6e 67 20 44 48 43 50 20 6f 72 20 41 52 50 20 72 65 71 75 65 73 74 73 2e 20 | including.DHCP.or.ARP.requests.. |
ddec0 | 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6d 70 65 74 65 20 77 69 74 68 20 6f 74 68 65 72 20 73 | It.does.not.compete.with.other.s |
ddee0 | 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 73 20 73 75 63 68 20 61 73 20 49 50 73 65 63 20 | ecurity.solutions.such.as.IPsec. |
ddf00 | 28 6c 61 79 65 72 20 33 29 20 6f 72 20 54 4c 53 20 28 6c 61 79 65 72 20 34 29 2c 20 61 73 20 61 | (layer.3).or.TLS.(layer.4),.as.a |
ddf20 | 6c 6c 20 74 68 6f 73 65 20 73 6f 6c 75 74 69 6f 6e 73 20 61 72 65 20 75 73 65 64 20 66 6f 72 20 | ll.those.solutions.are.used.for. |
ddf40 | 74 68 65 69 72 20 6f 77 6e 20 73 70 65 63 69 66 69 63 20 75 73 65 20 63 61 73 65 73 2e 00 4d 41 | their.own.specific.use.cases..MA |
ddf60 | 43 73 65 63 20 6f 6e 6c 79 20 70 72 6f 76 69 64 65 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | Csec.only.provides.authenticatio |
ddf80 | 6e 20 62 79 20 64 65 66 61 75 6c 74 2c 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 6f 70 74 69 | n.by.default,.encryption.is.opti |
ddfa0 | 6f 6e 61 6c 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 65 | onal..This.command.will.enable.e |
ddfc0 | 6e 63 72 79 70 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 | ncryption.for.all.outgoing.packe |
ddfe0 | 74 73 2e 00 4d 41 43 73 65 63 20 6f 70 74 69 6f 6e 73 00 4d 44 49 20 70 6f 77 65 72 00 4d 46 41 | ts..MACsec.options.MDI.power.MFA |
de000 | 2f 32 46 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 75 73 69 6e 67 20 4f 54 50 20 28 6f | /2FA.authentication.using.OTP.(o |
de020 | 6e 65 20 74 69 6d 65 20 70 61 73 73 77 6f 72 64 73 29 00 4d 50 4c 53 00 4d 50 4c 53 20 73 75 70 | ne.time.passwords).MPLS.MPLS.sup |
de040 | 70 6f 72 74 20 69 6e 20 56 79 4f 53 20 69 73 20 6e 6f 74 20 66 69 6e 69 73 68 65 64 20 79 65 74 | port.in.VyOS.is.not.finished.yet |
de060 | 2c 20 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 69 74 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 | ,.and.therefore.its.functionalit |
de080 | 79 20 69 73 20 6c 69 6d 69 74 65 64 2e 20 43 75 72 72 65 6e 74 6c 79 20 74 68 65 72 65 20 69 73 | y.is.limited..Currently.there.is |
de0a0 | 20 6e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 4d 50 4c 53 20 65 6e 61 62 6c 65 64 20 56 50 4e | .no.support.for.MPLS.enabled.VPN |
de0c0 | 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 4c 32 56 50 4e 73 20 61 6e 64 20 6d 56 50 | .services.such.as.L2VPNs.and.mVP |
de0e0 | 4e 73 2e 20 52 53 56 50 20 73 75 70 70 6f 72 74 20 69 73 20 61 6c 73 6f 20 6e 6f 74 20 70 72 65 | Ns..RSVP.support.is.also.not.pre |
de100 | 73 65 6e 74 20 61 73 20 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 72 6f 75 74 69 6e 67 20 73 | sent.as.the.underlying.routing.s |
de120 | 74 61 63 6b 20 28 46 52 52 29 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 69 74 | tack.(FRR).does.not.implement.it |
de140 | 2e 20 43 75 72 72 65 6e 74 6c 79 20 56 79 4f 53 20 69 6d 70 6c 65 6d 65 6e 74 73 20 4c 44 50 20 | ..Currently.VyOS.implements.LDP. |
de160 | 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 52 46 43 20 35 30 33 36 3b 20 6f 74 68 65 72 20 | as.described.in.RFC.5036;.other. |
de180 | 4c 44 50 20 73 74 61 6e 64 61 72 64 20 61 72 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f | LDP.standard.are.the.following.o |
de1a0 | 6e 65 73 3a 20 52 46 43 20 36 37 32 30 2c 20 52 46 43 20 36 36 36 37 2c 20 52 46 43 20 35 39 31 | nes:.RFC.6720,.RFC.6667,.RFC.591 |
de1c0 | 39 2c 20 52 46 43 20 35 35 36 31 2c 20 52 46 43 20 37 35 35 32 2c 20 52 46 43 20 34 34 34 37 2e | 9,.RFC.5561,.RFC.7552,.RFC.4447. |
de1e0 | 20 42 65 63 61 75 73 65 20 4d 50 4c 53 20 69 73 20 61 6c 72 65 61 64 79 20 61 76 61 69 6c 61 62 | .Because.MPLS.is.already.availab |
de200 | 6c 65 20 28 46 52 52 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 52 46 43 20 33 30 33 31 29 2e | le.(FRR.also.supports.RFC.3031). |
de220 | 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 32 30 20 28 49 50 20 68 65 61 64 65 72 | .MSS.value.=.MTU.-.20.(IP.header |
de240 | 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 72 29 2c 20 72 65 73 75 6c 74 69 6e 67 20 69 | ).-.20.(TCP.header),.resulting.i |
de260 | 6e 20 31 34 35 32 20 62 79 74 65 73 20 6f 6e 20 61 20 31 34 39 32 20 62 79 74 65 20 4d 54 55 2e | n.1452.bytes.on.a.1492.byte.MTU. |
de280 | 00 4d 53 53 20 76 61 6c 75 65 20 3d 20 4d 54 55 20 2d 20 34 30 20 28 49 50 76 36 20 68 65 61 64 | .MSS.value.=.MTU.-.40.(IPv6.head |
de2a0 | 65 72 29 20 2d 20 32 30 20 28 54 43 50 20 68 65 61 64 65 72 29 2c 20 72 65 73 75 6c 74 69 6e 67 | er).-.20.(TCP.header),.resulting |
de2c0 | 20 69 6e 20 31 34 33 32 20 62 79 74 65 73 20 6f 6e 20 61 20 31 34 39 32 20 62 79 74 65 20 4d 54 | .in.1432.bytes.on.a.1492.byte.MT |
de2e0 | 55 2e 00 4d 54 55 00 4d 61 69 6c 20 73 79 73 74 65 6d 00 4d 61 69 6e 20 6e 6f 74 65 73 20 72 65 | U..MTU.Mail.system.Main.notes.re |
de300 | 67 61 72 64 69 6e 67 20 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 | garding.this.packet.flow.and.ter |
de320 | 6d 69 6e 6f 6c 6f 67 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 3a 00 | minology.used.in.VyOS.firewall:. |
de340 | 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 | Main.structure.VyOS.firewall.cli |
de360 | 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 69 | .is.shown.next:.Main.structure.i |
de380 | 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 4d 61 69 6e 74 65 6e 61 6e 63 65 20 6d 6f 64 65 00 4d | s.shown.next:.Maintenance.mode.M |
de3a0 | 61 6b 65 20 73 75 72 65 20 63 6f 6e 6e 74 72 61 63 6b 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 | ake.sure.conntrack.is.enabled.by |
de3c0 | 20 72 75 6e 6e 69 6e 67 20 61 6e 64 20 73 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 | .running.and.show.connection.tra |
de3e0 | 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 4d 61 6e 61 67 65 64 20 64 65 76 69 63 65 73 00 4d 61 6e | cking.table..Managed.devices.Man |
de400 | 61 67 65 6d 65 6e 74 20 46 72 61 6d 65 20 50 72 6f 74 65 63 74 69 6f 6e 20 28 4d 46 50 29 20 61 | agement.Frame.Protection.(MFP).a |
de420 | 63 63 6f 72 64 69 6e 67 20 74 6f 20 49 45 45 45 20 38 30 32 2e 31 31 77 00 4d 61 6e 64 61 74 6f | ccording.to.IEEE.802.11w.Mandato |
de440 | 72 79 20 53 65 74 74 69 6e 67 73 00 4d 61 6e 75 61 6c 20 4e 65 69 67 68 62 6f 72 20 43 6f 6e 66 | ry.Settings.Manual.Neighbor.Conf |
de460 | 69 67 75 72 61 74 69 6f 6e 00 4d 61 6e 75 61 6c 6c 79 20 74 72 69 67 67 65 72 20 63 65 72 74 69 | iguration.Manually.trigger.certi |
de480 | 66 69 63 61 74 65 20 72 65 6e 65 77 61 6c 2e 20 54 68 69 73 20 77 69 6c 6c 20 62 65 20 64 6f 6e | ficate.renewal..This.will.be.don |
de4a0 | 65 20 74 77 69 63 65 20 61 20 64 61 79 2e 00 4d 61 70 73 20 74 68 65 20 56 4e 49 20 74 6f 20 74 | e.twice.a.day..Maps.the.VNI.to.t |
de4c0 | 68 65 20 73 70 65 63 69 66 69 65 64 20 56 4c 41 4e 20 69 64 2e 20 54 68 65 20 56 4c 41 4e 20 63 | he.specified.VLAN.id..The.VLAN.c |
de4e0 | 61 6e 20 74 68 65 6e 20 62 65 20 63 6f 6e 73 75 6d 65 64 20 62 79 20 61 20 62 72 69 64 67 65 2e | an.then.be.consumed.by.a.bridge. |
de500 | 00 4d 61 72 6b 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 73 20 6f 66 66 6c 69 6e 65 20 66 | .Mark.RADIUS.server.as.offline.f |
de520 | 6f 72 20 74 68 69 73 20 67 69 76 65 6e 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 | or.this.given.`<time>`.in.second |
de540 | 73 2e 00 4d 61 72 6b 20 74 68 65 20 43 41 73 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 73 20 70 | s..Mark.the.CAs.private.key.as.p |
de560 | 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 2e 20 55 73 65 72 20 69 73 20 61 73 6b 65 64 | assword.protected..User.is.asked |
de580 | 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 77 68 65 6e 20 74 68 65 20 6b 65 79 20 69 | .for.the.password.when.the.key.i |
de5a0 | 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 72 6b 20 74 68 65 20 70 72 69 76 61 74 65 20 6b | s.referenced..Mark.the.private.k |
de5c0 | 65 79 20 61 73 20 70 61 73 73 77 6f 72 64 20 70 72 6f 74 65 63 74 65 64 2e 20 55 73 65 72 20 69 | ey.as.password.protected..User.i |
de5e0 | 73 20 61 73 6b 65 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 77 68 65 6e 20 74 68 | s.asked.for.the.password.when.th |
de600 | 65 20 6b 65 79 20 69 73 20 72 65 66 65 72 65 6e 63 65 64 2e 00 4d 61 74 63 68 20 42 47 50 20 6c | e.key.is.referenced..Match.BGP.l |
de620 | 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 00 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 | arge.communities..Match.IP.addre |
de640 | 73 73 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d | sses.based.on.its.geolocation..M |
de660 | 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 | ore.info:.`geoip.matching.<https |
de680 | 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c | ://wiki.nftables.org/wiki-nftabl |
de6a0 | 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 00 | es/index.php/GeoIP_matching>`_.. |
de6c0 | 4d 61 74 63 68 20 49 50 20 61 64 64 72 65 73 73 65 73 20 62 61 73 65 64 20 6f 6e 20 69 74 73 20 | Match.IP.addresses.based.on.its. |
de6e0 | 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 20 4d 6f 72 65 20 69 6e 66 6f 3a 20 60 67 65 6f 69 70 20 6d | geolocation..More.info:.`geoip.m |
de700 | 61 74 63 68 69 6e 67 20 3c 68 74 74 70 73 3a 2f 2f 77 69 6b 69 2e 6e 66 74 61 62 6c 65 73 2e 6f | atching.<https://wiki.nftables.o |
de720 | 72 67 2f 77 69 6b 69 2d 6e 66 74 61 62 6c 65 73 2f 69 6e 64 65 78 2e 70 68 70 2f 47 65 6f 49 50 | rg/wiki-nftables/index.php/GeoIP |
de740 | 5f 6d 61 74 63 68 69 6e 67 3e 60 5f 2e 20 55 73 65 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 | _matching>`_..Use.inverse-match. |
de760 | 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e 67 20 65 78 63 65 70 74 20 74 68 65 20 67 69 76 | to.match.anything.except.the.giv |
de780 | 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 2e 00 4d 61 74 63 68 20 52 50 4b 49 20 76 61 6c | en.country-codes..Match.RPKI.val |
de7a0 | 69 64 61 74 69 6f 6e 20 72 65 73 75 6c 74 2e 00 4d 61 74 63 68 20 61 20 70 72 6f 74 6f 63 6f 6c | idation.result..Match.a.protocol |
de7c0 | 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 6f 72 20 | .criteria..A.protocol.number.or. |
de7e0 | 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 69 6e 3a 20 60 60 2f 65 | a.name.which.is.defined.in:.``/e |
de800 | 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 70 65 63 69 61 6c 20 6e 61 6d 65 73 20 61 72 | tc/protocols``..Special.names.ar |
de820 | 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 61 6e 64 20 | e.``all``.for.all.protocols.and. |
de840 | 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 63 70 20 61 6e 64 20 75 64 70 20 62 61 73 65 | ``tcp_udp``.for.tcp.and.udp.base |
de860 | 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 65 73 20 74 68 65 | d.packets..The.``!``.negates.the |
de880 | 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 4d 61 74 63 68 20 61 20 70 72 6f 74 | .selected.protocol..Match.a.prot |
de8a0 | 6f 63 6f 6c 20 63 72 69 74 65 72 69 61 2e 20 41 20 70 72 6f 74 6f 63 6f 6c 20 6e 75 6d 62 65 72 | ocol.criteria..A.protocol.number |
de8c0 | 20 6f 72 20 61 20 6e 61 6d 65 20 77 68 69 63 68 20 69 73 20 68 65 72 65 20 64 65 66 69 6e 65 64 | .or.a.name.which.is.here.defined |
de8e0 | 3a 20 60 60 2f 65 74 63 2f 70 72 6f 74 6f 63 6f 6c 73 60 60 2e 20 53 70 65 63 69 61 6c 20 6e 61 | :.``/etc/protocols``..Special.na |
de900 | 6d 65 73 20 61 72 65 20 60 60 61 6c 6c 60 60 20 66 6f 72 20 61 6c 6c 20 70 72 6f 74 6f 63 6f 6c | mes.are.``all``.for.all.protocol |
de920 | 73 20 61 6e 64 20 60 60 74 63 70 5f 75 64 70 60 60 20 66 6f 72 20 74 63 70 20 61 6e 64 20 75 64 | s.and.``tcp_udp``.for.tcp.and.ud |
de940 | 70 20 62 61 73 65 64 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 60 60 21 60 60 20 6e 65 67 61 74 | p.based.packets..The.``!``.negat |
de960 | 65 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 70 72 6f 74 6f 63 6f 6c 2e 00 4d 61 74 63 68 20 61 | e.the.selected.protocol..Match.a |
de980 | 67 61 69 6e 73 74 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 70 61 63 6b 65 74 2e 00 4d 61 | gainst.the.state.of.a.packet..Ma |
de9a0 | 74 63 68 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 | tch.based.on.connection.tracking |
de9c0 | 20 70 72 6f 74 6f 63 6f 6c 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 20 74 6f 20 73 65 63 75 72 | .protocol.helper.module.to.secur |
de9e0 | 65 20 75 73 65 20 6f 66 20 74 68 61 74 20 68 65 6c 70 65 72 20 6d 6f 64 75 6c 65 2e 20 53 65 65 | e.use.of.that.helper.module..See |
dea00 | 20 62 65 6c 6f 77 20 66 6f 72 20 70 6f 73 73 69 62 6c 65 20 63 6f 6d 70 6c 65 74 69 6f 6e 73 20 | .below.for.possible.completions. |
dea20 | 60 3c 6d 6f 64 75 6c 65 3e 60 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 64 73 63 70 20 | `<module>`..Match.based.on.dscp. |
dea40 | 76 61 6c 75 65 20 63 72 69 74 65 72 69 61 2e 20 4d 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 | value.criteria..Multiple.values. |
dea60 | 66 72 6f 6d 20 30 20 74 6f 20 36 33 20 61 6e 64 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 70 70 | from.0.to.63.and.ranges.are.supp |
dea80 | 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 64 73 63 70 20 76 61 6c 75 65 | orted..Match.based.on.dscp.value |
deaa0 | 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 66 72 61 67 6d 65 6e 74 20 63 72 69 74 65 72 | ..Match.based.on.fragment.criter |
deac0 | 69 61 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 20 63 6f 64 65 20 61 6e 64 | ia..Match.based.on.icmp.code.and |
deae0 | 20 74 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 20 74 79 70 65 2d | .type..Match.based.on.icmp.type- |
deb00 | 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 | name.criteria..Use.tab.for.infor |
deb20 | 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 | mation.about.what.**type-name**. |
deb40 | 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 | criteria.are.supported..Match.ba |
deb60 | 73 65 64 20 6f 6e 20 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 | sed.on.icmpv6.type-name.criteria |
deb80 | 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 | ..Use.tab.for.information.about. |
deba0 | 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 65 20 | what.**type-name**.criteria.are. |
debc0 | 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 7c 69 | supported..Match.based.on.icmp|i |
debe0 | 63 6d 70 76 36 20 63 6f 64 65 20 61 6e 64 20 74 79 70 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 | cmpv6.code.and.type..Match.based |
dec00 | 20 6f 6e 20 69 63 6d 70 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 | .on.icmp|icmpv6.type-name.criter |
dec20 | 69 61 2e 20 55 73 65 20 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 | ia..Use.tab.for.information.abou |
dec40 | 74 20 77 68 61 74 20 2a 2a 74 79 70 65 2d 6e 61 6d 65 2a 2a 20 63 72 69 74 65 72 69 61 20 61 72 | t.what.**type-name**.criteria.ar |
dec60 | 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 63 6d 70 | e.supported..Match.based.on.icmp |
dec80 | 7c 69 63 6d 70 76 36 20 74 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 2e 20 55 73 65 20 | |icmpv6.type-name.criteria..Use. |
deca0 | 74 61 62 20 66 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 77 68 61 74 20 74 | tab.for.information.about.what.t |
decc0 | 79 70 65 2d 6e 61 6d 65 20 63 72 69 74 65 72 69 61 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e | ype-name.criteria.are.supported. |
dece0 | 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 | .Match.based.on.inbound.interfac |
ded00 | 65 20 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 | e.group..Prepending.character.`` |
ded20 | 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 | !``.for.inverted.matching.criter |
ded40 | 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 | ia.is.also.supportd..For.example |
ded60 | 20 60 60 21 49 46 41 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e | .``!IFACE_GROUP``.Match.based.on |
ded80 | 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 | .inbound.interface..Wilcard.``*` |
deda0 | 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 | `.can.be.used..For.example:.``et |
dedc0 | 68 32 2a 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 | h2*``.Match.based.on.inbound.int |
dede0 | 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 | erface..Wilcard.``*``.can.be.use |
dee00 | 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 2e 20 50 72 65 70 65 | d..For.example:.``eth2*``..Prepe |
dee20 | 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 | nding.character.``!``.for.invert |
dee40 | 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 | ed.matching.criteria.is.also.sup |
dee60 | 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 74 68 32 60 60 00 4d 61 74 | portd..For.example.``!eth2``.Mat |
dee80 | 63 68 20 62 61 73 65 64 20 6f 6e 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 69 6e 74 | ch.based.on.inbound/outbound.int |
deea0 | 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 | erface..Wilcard.``*``.can.be.use |
deec0 | 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 4d 61 74 63 68 20 | d..For.example:.``eth2*``.Match. |
deee0 | 62 61 73 65 64 20 6f 6e 20 69 70 73 65 63 20 63 72 69 74 65 72 69 61 2e 00 4d 61 74 63 68 20 62 | based.on.ipsec.criteria..Match.b |
def00 | 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 | ased.on.outbound.interface.group |
def20 | 2e 20 50 72 65 70 65 6e 64 69 6e 67 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 | ..Prepending.character.``!``.for |
def40 | 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 | .inverted.matching.criteria.is.a |
def60 | 6c 73 6f 20 73 75 70 70 6f 72 74 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 49 46 41 | lso.supportd..For.example.``!IFA |
def80 | 43 45 5f 47 52 4f 55 50 60 60 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 | CE_GROUP``.Match.based.on.outbou |
defa0 | 6e 64 20 69 6e 74 65 72 66 61 63 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 | nd.interface..Wilcard.``*``.can. |
defc0 | 62 65 20 75 73 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 00 | be.used..For.example:.``eth2*``. |
defe0 | 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 | Match.based.on.outbound.interfac |
df000 | 65 2e 20 57 69 6c 63 61 72 64 20 60 60 2a 60 60 20 63 61 6e 20 62 65 20 75 73 65 64 2e 20 46 6f | e..Wilcard.``*``.can.be.used..Fo |
df020 | 72 20 65 78 61 6d 70 6c 65 3a 20 60 60 65 74 68 32 2a 60 60 2e 20 50 72 65 70 65 6e 64 69 6e 67 | r.example:.``eth2*``..Prepending |
df040 | 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 | .character.``!``.for.inverted.ma |
df060 | 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 64 | tching.criteria.is.also.supportd |
df080 | 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 21 65 74 68 32 60 60 00 4d 61 74 63 68 20 62 61 | ..For.example.``!eth2``.Match.ba |
df0a0 | 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 6c 65 6e 67 74 68 20 63 72 69 74 65 72 69 61 2e 20 4d | sed.on.packet.length.criteria..M |
df0c0 | 75 6c 74 69 70 6c 65 20 76 61 6c 75 65 73 20 66 72 6f 6d 20 31 20 74 6f 20 36 35 35 33 35 20 61 | ultiple.values.from.1.to.65535.a |
df0e0 | 6e 64 20 72 61 6e 67 65 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 | nd.ranges.are.supported..Match.b |
df100 | 61 73 65 64 20 6f 6e 20 70 61 63 6b 65 74 20 74 79 70 65 20 63 72 69 74 65 72 69 61 2e 00 4d 61 | ased.on.packet.type.criteria..Ma |
df120 | 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 76 65 72 61 67 65 | tch.based.on.the.maximum.average |
df140 | 20 72 61 74 65 2c 20 73 70 65 63 69 66 69 65 64 20 61 73 20 2a 2a 69 6e 74 65 67 65 72 2f 75 6e | .rate,.specified.as.**integer/un |
df160 | 69 74 2a 2a 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 2a 2a 35 2f 6d 69 6e 75 74 65 73 2a 2a 00 | it**..For.example.**5/minutes**. |
df180 | 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 | Match.based.on.the.maximum.numbe |
df1a0 | 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6c 6f 77 20 69 6e 20 65 78 63 65 73 73 20 | r.of.packets.to.allow.in.excess. |
df1c0 | 6f 66 20 72 61 74 65 2e 00 4d 61 74 63 68 20 62 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 49 44 2e | of.rate..Match.based.on.vlan.ID. |
df1e0 | 20 52 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 | .Range.is.also.supported..Match. |
df200 | 62 61 73 65 64 20 6f 6e 20 76 6c 61 6e 20 70 72 69 6f 72 69 74 79 28 70 63 70 29 2e 20 52 61 6e | based.on.vlan.priority(pcp)..Ran |
df220 | 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 2e 00 4d 61 74 63 68 20 62 61 73 65 | ge.is.also.supported..Match.base |
df240 | 73 20 6f 6e 20 72 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 73 6f 75 72 63 65 73 2e 00 4d 61 74 63 | s.on.recently.seen.sources..Matc |
df260 | 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d | h.criteria.based.on.connection.m |
df280 | 61 72 6b 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 6e 61 74 | ark..Match.criteria.based.on.nat |
df2a0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 75 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 | .connection.status..Match.criter |
df2c0 | 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e | ia.based.on.source.and/or.destin |
df2e0 | 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 73 69 6d 69 6c 61 72 20 74 | ation.address..This.is.similar.t |
df300 | 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 20 70 61 72 74 2c 20 62 75 74 20 68 | o.the.network.groups.part,.but.h |
df320 | 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6e 65 67 61 74 65 20 74 68 65 20 6d | ere.you.are.able.to.negate.the.m |
df340 | 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 65 73 2e 00 4d 61 74 63 68 20 63 72 69 74 65 72 69 | atching.addresses..Match.criteri |
df360 | 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 61 6e 64 2f 6f 72 20 64 65 73 74 69 6e 61 | a.based.on.source.and/or.destina |
df380 | 74 69 6f 6e 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4d 61 74 63 68 20 64 6f 6d 61 69 6e 20 6e | tion.mac-address..Match.domain.n |
df3a0 | 61 6d 65 00 4d 61 74 63 68 20 66 69 72 65 77 61 6c 6c 20 6d 61 72 6b 20 76 61 6c 75 65 00 4d 61 | ame.Match.firewall.mark.value.Ma |
df3c0 | 74 63 68 20 68 6f 70 2d 6c 69 6d 69 74 20 70 61 72 61 6d 65 74 65 72 2c 20 77 68 65 72 65 20 27 | tch.hop-limit.parameter,.where.' |
df3e0 | 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 65 71 75 61 6c 27 3b 20 27 67 74 27 20 73 74 61 | eq'.stands.for.'equal';.'gt'.sta |
df400 | 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 20 74 68 61 6e 27 2c 20 61 6e 64 20 27 6c 74 27 | nds.for.'greater.than',.and.'lt' |
df420 | 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 73 20 74 68 61 6e 27 2e 00 4d 61 74 63 68 20 6c | .stands.for.'less.than'..Match.l |
df440 | 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 2e 00 4d 61 74 63 68 20 72 6f 75 74 65 20 6d 65 74 | ocal.preference..Match.route.met |
df460 | 72 69 63 2e 00 4d 61 74 63 68 20 74 69 6d 65 20 74 6f 20 6c 69 76 65 20 70 61 72 61 6d 65 74 65 | ric..Match.time.to.live.paramete |
df480 | 72 2c 20 77 68 65 72 65 20 27 65 71 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 65 71 75 61 6c 27 | r,.where.'eq'.stands.for.'equal' |
df4a0 | 3b 20 27 67 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 67 72 65 61 74 65 72 20 74 68 61 6e 27 | ;.'gt'.stands.for.'greater.than' |
df4c0 | 2c 20 61 6e 64 20 27 6c 74 27 20 73 74 61 6e 64 73 20 66 6f 72 20 27 6c 65 73 73 20 74 68 61 6e | ,.and.'lt'.stands.for.'less.than |
df4e0 | 27 2e 00 4d 61 74 63 68 20 77 68 65 6e 20 27 63 6f 75 6e 74 27 20 61 6d 6f 75 6e 74 20 6f 66 20 | '..Match.when.'count'.amount.of. |
df500 | 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 73 65 65 6e 20 77 69 74 68 69 6e 20 27 74 69 6d | connections.are.seen.within.'tim |
df520 | 65 27 2e 20 54 68 65 73 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 61 6e 20 | e'..These.matching.criteria.can. |
df540 | 62 65 20 75 73 65 64 20 74 6f 20 62 6c 6f 63 6b 20 62 72 75 74 65 2d 66 6f 72 63 65 20 61 74 74 | be.used.to.block.brute-force.att |
df560 | 65 6d 70 74 73 2e 00 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 00 4d 61 74 63 68 69 6e | empts..Matching.criteria.Matchin |
df580 | 67 20 74 72 61 66 66 69 63 00 4d 61 78 69 6d 75 6d 20 41 2d 4d 53 44 55 20 6c 65 6e 67 74 68 20 | g.traffic.Maximum.A-MSDU.length. |
df5a0 | 33 38 33 39 20 28 64 65 66 61 75 6c 74 29 20 6f 72 20 37 39 33 35 20 6f 63 74 65 74 73 00 4d 61 | 3839.(default).or.7935.octets.Ma |
df5c0 | 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 | ximum.Transmission.Unit.(MTU).(d |
df5e0 | 65 66 61 75 6c 74 3a 20 2a 2a 31 34 33 36 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d | efault:.**1436**).Maximum.Transm |
df600 | 69 73 73 69 6f 6e 20 55 6e 69 74 20 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 34 | ission.Unit.(MTU).(default:.**14 |
df620 | 39 32 2a 2a 29 00 4d 61 78 69 6d 75 6d 20 54 72 61 6e 73 6d 69 73 73 69 6f 6e 20 55 6e 69 74 20 | 92**).Maximum.Transmission.Unit. |
df640 | 28 4d 54 55 29 20 28 64 65 66 61 75 6c 74 3a 20 2a 2a 31 35 30 30 2a 2a 29 00 4d 61 78 69 6d 75 | (MTU).(default:.**1500**).Maximu |
df660 | 6d 20 6e 75 6d 62 65 72 20 6f 66 20 44 4e 53 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 2e 20 31 | m.number.of.DNS.cache.entries..1 |
df680 | 20 6d 69 6c 6c 69 6f 6e 20 70 65 72 20 43 50 55 20 63 6f 72 65 20 77 69 6c 6c 20 67 65 6e 65 72 | .million.per.CPU.core.will.gener |
df6a0 | 61 6c 6c 79 20 73 75 66 66 69 63 65 20 66 6f 72 20 6d 6f 73 74 20 69 6e 73 74 61 6c 6c 61 74 69 | ally.suffice.for.most.installati |
df6c0 | 6f 6e 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 49 50 76 34 20 6e 61 6d 65 | ons..Maximum.number.of.IPv4.name |
df6e0 | 73 65 72 76 65 72 73 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 61 75 74 68 65 6e | servers.Maximum.number.of.authen |
df700 | 74 69 63 61 74 6f 72 20 70 72 6f 63 65 73 73 65 73 20 74 6f 20 73 70 61 77 6e 2e 20 49 66 20 79 | ticator.processes.to.spawn..If.y |
df720 | 6f 75 20 73 74 61 72 74 20 74 6f 6f 20 66 65 77 20 53 71 75 69 64 20 77 69 6c 6c 20 68 61 76 65 | ou.start.too.few.Squid.will.have |
df740 | 20 74 6f 20 77 61 69 74 20 66 6f 72 20 74 68 65 6d 20 74 6f 20 70 72 6f 63 65 73 73 20 61 20 62 | .to.wait.for.them.to.process.a.b |
df760 | 61 63 6b 6c 6f 67 20 6f 66 20 63 72 65 64 65 6e 74 69 61 6c 20 76 65 72 69 66 69 63 61 74 69 6f | acklog.of.credential.verificatio |
df780 | 6e 73 2c 20 73 6c 6f 77 69 6e 67 20 69 74 20 64 6f 77 6e 2e 20 57 68 65 6e 20 70 61 73 73 77 6f | ns,.slowing.it.down..When.passwo |
df7a0 | 72 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 73 20 61 72 65 20 64 6f 6e 65 20 76 69 61 20 61 20 | rd.verifications.are.done.via.a. |
df7c0 | 28 73 6c 6f 77 29 20 6e 65 74 77 6f 72 6b 20 79 6f 75 20 61 72 65 20 6c 69 6b 65 6c 79 20 74 6f | (slow).network.you.are.likely.to |
df7e0 | 20 6e 65 65 64 20 6c 6f 74 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 6f 72 20 70 72 6f 63 | .need.lots.of.authenticator.proc |
df800 | 65 73 73 65 73 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 | esses..Maximum.number.of.concurr |
df820 | 65 6e 74 20 73 65 73 73 69 6f 6e 20 73 74 61 72 74 20 61 74 74 65 6d 70 74 73 00 4d 61 78 69 6d | ent.session.start.attempts.Maxim |
df840 | 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 73 74 61 74 69 6f 6e 73 20 61 6c 6c 6f 77 65 64 20 69 6e | um.number.of.stations.allowed.in |
df860 | 20 73 74 61 74 69 6f 6e 20 74 61 62 6c 65 2e 20 4e 65 77 20 73 74 61 74 69 6f 6e 73 20 77 69 6c | .station.table..New.stations.wil |
df880 | 6c 20 62 65 20 72 65 6a 65 63 74 65 64 20 61 66 74 65 72 20 74 68 65 20 73 74 61 74 69 6f 6e 20 | l.be.rejected.after.the.station. |
df8a0 | 74 61 62 6c 65 20 69 73 20 66 75 6c 6c 2e 20 49 45 45 45 20 38 30 32 2e 31 31 20 68 61 73 20 61 | table.is.full..IEEE.802.11.has.a |
df8c0 | 20 6c 69 6d 69 74 20 6f 66 20 32 30 30 37 20 64 69 66 66 65 72 65 6e 74 20 61 73 73 6f 63 69 61 | .limit.of.2007.different.associa |
df8e0 | 74 69 6f 6e 20 49 44 73 2c 20 73 6f 20 74 68 69 73 20 6e 75 6d 62 65 72 20 73 68 6f 75 6c 64 20 | tion.IDs,.so.this.number.should. |
df900 | 6e 6f 74 20 62 65 20 6c 61 72 67 65 72 20 74 68 61 6e 20 74 68 61 74 2e 00 4d 61 78 69 6d 75 6d | not.be.larger.than.that..Maximum |
df920 | 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 20 61 6e 20 65 78 70 69 72 65 64 20 72 65 63 6f | .number.of.times.an.expired.reco |
df940 | 72 64 e2 80 99 73 20 54 54 4c 20 69 73 20 65 78 74 65 6e 64 65 64 20 62 79 20 33 30 73 20 77 68 | rd...s.TTL.is.extended.by.30s.wh |
df960 | 65 6e 20 73 65 72 76 69 6e 67 20 73 74 61 6c 65 2e 20 45 78 74 65 6e 73 69 6f 6e 20 6f 6e 6c 79 | en.serving.stale..Extension.only |
df980 | 20 6f 63 63 75 72 73 20 69 66 20 61 20 72 65 63 6f 72 64 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 | .occurs.if.a.record.cannot.be.re |
df9a0 | 66 72 65 73 68 65 64 2e 20 41 20 76 61 6c 75 65 20 6f 66 20 30 20 6d 65 61 6e 73 20 74 68 65 20 | freshed..A.value.of.0.means.the. |
df9c0 | 53 65 72 76 65 20 53 74 61 6c 65 20 6d 65 63 68 61 6e 69 73 6d 20 69 73 20 6e 6f 74 20 75 73 65 | Serve.Stale.mechanism.is.not.use |
df9e0 | 64 2e 20 54 6f 20 61 6c 6c 6f 77 20 72 65 63 6f 72 64 73 20 62 65 63 6f 6d 69 6e 67 20 73 74 61 | d..To.allow.records.becoming.sta |
dfa00 | 6c 65 20 74 6f 20 62 65 20 73 65 72 76 65 64 20 66 6f 72 20 61 6e 20 68 6f 75 72 2c 20 75 73 65 | le.to.be.served.for.an.hour,.use |
dfa20 | 20 61 20 76 61 6c 75 65 20 6f 66 20 31 32 30 2e 00 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 | .a.value.of.120..Maximum.number. |
dfa40 | 6f 66 20 74 72 69 65 73 20 74 6f 20 73 65 6e 64 20 41 63 63 65 73 73 2d 52 65 71 75 65 73 74 2f | of.tries.to.send.Access-Request/ |
dfa60 | 41 63 63 6f 75 6e 74 69 6e 67 2d 52 65 71 75 65 73 74 20 71 75 65 72 69 65 73 00 4d 65 64 69 75 | Accounting-Request.queries.Mediu |
dfa80 | 6d 00 4d 65 6d 62 65 72 20 49 6e 74 65 72 66 61 63 65 73 00 4d 65 6d 62 65 72 20 69 6e 74 65 72 | m.Member.Interfaces.Member.inter |
dfaa0 | 66 61 63 65 73 20 60 65 74 68 31 60 20 61 6e 64 20 56 4c 41 4e 20 31 30 20 6f 6e 20 69 6e 74 65 | faces.`eth1`.and.VLAN.10.on.inte |
dfac0 | 72 66 61 63 65 20 60 65 74 68 32 60 00 4d 65 73 73 61 67 65 73 20 67 65 6e 65 72 61 74 65 64 20 | rface.`eth2`.Messages.generated. |
dfae0 | 69 6e 74 65 72 6e 61 6c 6c 79 20 62 79 20 73 79 73 6c 6f 67 64 00 4d 65 74 72 69 73 20 76 65 72 | internally.by.syslogd.Metris.ver |
dfb00 | 73 69 6f 6e 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 32 60 60 00 4d 69 63 72 6f | sion,.the.default.is.``2``.Micro |
dfb20 | 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 65 72 20 | soft.Windows.expects.the.server. |
dfb40 | 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 65 72 76 | name.to.be.also.used.in.the.serv |
dfb60 | 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c 20 73 6f | er's.certificate.common.name,.so |
dfb80 | 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 6d 65 20 | .it's.best.to.use.this.DNS.name. |
dfba0 | 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 4d 69 6e 20 61 6e 64 | for.your.VPN.connection..Min.and |
dfbc0 | 20 6d 61 78 20 69 6e 74 65 72 76 61 6c 73 20 62 65 74 77 65 65 6e 20 75 6e 73 6f 6c 69 63 69 74 | .max.intervals.between.unsolicit |
dfbe0 | 65 64 20 6d 75 6c 74 69 63 61 73 74 20 52 41 73 00 4d 69 6e 75 6d 75 6d 20 66 69 72 65 77 61 6c | ed.multicast.RAs.Minumum.firewal |
dfc00 | 6c 20 72 75 6c 65 73 65 74 20 69 73 20 70 72 6f 76 69 64 65 64 2c 20 77 68 69 63 68 20 69 6e 63 | l.ruleset.is.provided,.which.inc |
dfc20 | 6c 75 64 65 73 20 73 6f 6d 65 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 2c 20 61 6e 64 20 | ludes.some.filtering.rules,.and. |
dfc40 | 61 70 70 72 6f 70 69 61 74 65 20 72 75 6c 65 73 20 66 6f 72 20 75 73 69 6e 67 20 66 6c 6f 77 74 | appropiate.rules.for.using.flowt |
dfc60 | 61 62 6c 65 20 6f 66 66 6c 6f 61 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 4d 6f 64 69 66 | able.offload.capabilities..Modif |
dfc80 | 79 20 74 68 65 20 6a 6f 69 6e 2f 70 72 75 6e 65 20 69 6e 74 65 72 76 61 6c 20 74 68 61 74 20 50 | y.the.join/prune.interval.that.P |
dfca0 | 49 4d 20 75 73 65 73 20 74 6f 20 74 68 65 20 6e 65 77 20 76 61 6c 75 65 2e 20 54 69 6d 65 20 69 | IM.uses.to.the.new.value..Time.i |
dfcc0 | 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 4d 6f 64 69 66 79 20 74 | s.specified.in.seconds..Modify.t |
dfce0 | 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 | he.time.out.value.for.a.S,G.flow |
dfd00 | 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 63 6f 6e 64 73 20 61 74 20 3a 61 62 62 72 3a 60 | .from.1-65535.seconds.at.:abbr:` |
dfd20 | 52 50 20 28 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 29 60 2e 20 54 68 65 20 6e 6f 72 6d | RP.(Rendezvous.Point)`..The.norm |
dfd40 | 61 6c 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 69 6f 64 20 66 6f 72 20 74 68 65 20 4b 41 54 28 | al.keepalive.period.for.the.KAT( |
dfd60 | 53 2c 47 29 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 31 30 20 73 65 63 6f 6e 64 73 2e 20 48 6f | S,G).defaults.to.210.seconds..Ho |
dfd80 | 77 65 76 65 72 2c 20 61 74 20 74 68 65 20 3a 61 62 62 72 3a 60 52 50 20 28 52 65 6e 64 65 7a 76 | wever,.at.the.:abbr:`RP.(Rendezv |
dfda0 | 6f 75 73 20 50 6f 69 6e 74 29 60 2c 20 74 68 65 20 6b 65 65 70 61 6c 69 76 65 20 70 65 72 69 6f | ous.Point)`,.the.keepalive.perio |
dfdc0 | 64 20 6d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 20 74 68 65 20 52 65 67 69 73 74 65 72 5f | d.must.be.at.least.the.Register_ |
dfde0 | 53 75 70 70 72 65 73 73 69 6f 6e 5f 54 69 6d 65 2c 20 6f 72 20 74 68 65 20 52 50 20 6d 61 79 20 | Suppression_Time,.or.the.RP.may. |
dfe00 | 74 69 6d 65 20 6f 75 74 20 74 68 65 20 28 53 2c 47 29 20 73 74 61 74 65 20 62 65 66 6f 72 65 20 | time.out.the.(S,G).state.before. |
dfe20 | 74 68 65 20 6e 65 78 74 20 4e 75 6c 6c 2d 52 65 67 69 73 74 65 72 20 61 72 72 69 76 65 73 2e 20 | the.next.Null-Register.arrives.. |
dfe40 | 54 68 75 73 2c 20 74 68 65 20 4b 41 54 28 53 2c 47 29 20 69 73 20 73 65 74 20 74 6f 20 6d 61 78 | Thus,.the.KAT(S,G).is.set.to.max |
dfe60 | 28 4b 65 65 70 61 6c 69 76 65 5f 50 65 72 69 6f 64 2c 20 52 50 5f 4b 65 65 70 61 6c 69 76 65 5f | (Keepalive_Period,.RP_Keepalive_ |
dfe80 | 50 65 72 69 6f 64 29 20 77 68 65 6e 20 61 20 52 65 67 69 73 74 65 72 2d 53 74 6f 70 20 69 73 20 | Period).when.a.Register-Stop.is. |
dfea0 | 73 65 6e 74 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 | sent..Modify.the.time.out.value. |
dfec0 | 66 6f 72 20 61 20 53 2c 47 20 66 6c 6f 77 20 66 72 6f 6d 20 31 2d 36 35 35 33 35 20 73 65 63 6f | for.a.S,G.flow.from.1-65535.seco |
dfee0 | 6e 64 73 2e 20 49 66 20 63 68 6f 6f 73 69 6e 67 20 61 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 33 | nds..If.choosing.a.value.below.3 |
dff00 | 31 20 73 65 63 6f 6e 64 73 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 73 6f 6d 65 20 68 61 72 | 1.seconds.be.aware.that.some.har |
dff20 | 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 | dware.platforms.cannot.see.data. |
dff40 | 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 | flowing.in.better.than.30.second |
dff60 | 20 63 68 75 6e 6b 73 2e 00 4d 6f 64 69 66 79 20 74 68 65 20 74 69 6d 65 20 74 68 61 74 20 70 69 | .chunks..Modify.the.time.that.pi |
dff80 | 6d 20 77 69 6c 6c 20 72 65 67 69 73 74 65 72 20 73 75 70 70 72 65 73 73 20 61 20 46 48 52 20 77 | m.will.register.suppress.a.FHR.w |
dffa0 | 69 6c 6c 20 73 65 6e 64 20 72 65 67 69 73 74 65 72 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 | ill.send.register.notifications. |
dffc0 | 74 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 4d 6f 6e 69 74 6f 72 2c 20 74 68 65 20 73 79 73 74 | to.the.kernel..Monitor,.the.syst |
dffe0 | 65 6d 20 70 61 73 73 69 76 65 6c 79 20 6d 6f 6e 69 74 6f 72 73 20 61 6e 79 20 6b 69 6e 64 20 6f | em.passively.monitors.any.kind.o |
e0000 | 66 20 77 69 72 65 6c 65 73 73 20 74 72 61 66 66 69 63 00 4d 6f 6e 69 74 6f 72 69 6e 67 00 4d 6f | f.wireless.traffic.Monitoring.Mo |
e0020 | 6e 69 74 6f 72 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 69 74 68 20 60 60 74 65 | nitoring.functionality.with.``te |
e0040 | 6c 65 67 72 61 66 60 60 20 61 6e 64 20 60 60 49 6e 66 6c 75 78 44 42 20 32 60 60 20 69 73 20 70 | legraf``.and.``InfluxDB.2``.is.p |
e0060 | 72 6f 76 69 64 65 64 2e 20 54 65 6c 65 67 72 61 66 20 69 73 20 74 68 65 20 6f 70 65 6e 20 73 6f | rovided..Telegraf.is.the.open.so |
e0080 | 75 72 63 65 20 73 65 72 76 65 72 20 61 67 65 6e 74 20 74 6f 20 68 65 6c 70 20 79 6f 75 20 63 6f | urce.server.agent.to.help.you.co |
e00a0 | 6c 6c 65 63 74 20 6d 65 74 72 69 63 73 2c 20 65 76 65 6e 74 73 20 61 6e 64 20 6c 6f 67 73 20 66 | llect.metrics,.events.and.logs.f |
e00c0 | 72 6f 6d 20 79 6f 75 72 20 72 6f 75 74 65 72 73 2e 00 4d 6f 72 65 20 64 65 74 61 69 6c 73 20 61 | rom.your.routers..More.details.a |
e00e0 | 62 6f 75 74 20 74 68 65 20 49 50 73 65 63 20 61 6e 64 20 56 54 49 20 69 73 73 75 65 20 61 6e 64 | bout.the.IPsec.and.VTI.issue.and |
e0100 | 20 6f 70 74 69 6f 6e 20 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c | .option.disable-route-autoinstal |
e0120 | 6c 20 68 74 74 70 73 3a 2f 2f 62 6c 6f 67 2e 76 79 6f 73 2e 69 6f 2f 76 79 6f 73 2d 31 2d 64 6f | l.https://blog.vyos.io/vyos-1-do |
e0140 | 74 2d 32 2d 30 2d 64 65 76 65 6c 6f 70 6d 65 6e 74 2d 6e 65 77 73 2d 69 6e 2d 6a 75 6c 79 00 4d | t-2-0-development-news-in-july.M |
e0160 | 6f 73 74 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 20 69 6e 63 6c 75 64 65 20 6e 61 | ost.operating.systems.include.na |
e0180 | 74 69 76 65 20 63 6c 69 65 6e 74 20 73 75 70 70 6f 72 74 20 66 6f 72 20 49 50 73 65 63 20 49 4b | tive.client.support.for.IPsec.IK |
e01a0 | 45 76 32 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 | Ev2.VPN.connections,.and.others. |
e01c0 | 74 79 70 69 63 61 6c 6c 79 20 68 61 76 65 20 61 6e 20 61 70 70 20 6f 72 20 61 64 64 2d 6f 6e 20 | typically.have.an.app.or.add-on. |
e01e0 | 70 61 63 6b 61 67 65 20 77 68 69 63 68 20 61 64 64 73 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 | package.which.adds.the.capabilit |
e0200 | 79 2e 20 54 68 69 73 20 73 65 63 74 69 6f 6e 20 63 6f 76 65 72 73 20 49 50 73 65 63 20 49 4b 45 | y..This.section.covers.IPsec.IKE |
e0220 | 76 32 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 57 69 6e 64 | v2.client.configuration.for.Wind |
e0240 | 6f 77 73 20 31 30 2e 00 4d 6f 75 6e 74 20 61 20 76 6f 6c 75 6d 65 20 69 6e 74 6f 20 74 68 65 20 | ows.10..Mount.a.volume.into.the. |
e0260 | 63 6f 6e 74 61 69 6e 65 72 00 4d 75 6c 74 69 00 4d 75 6c 74 69 2d 63 6c 69 65 6e 74 20 73 65 72 | container.Multi.Multi-client.ser |
e0280 | 76 65 72 20 69 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 70 75 6c 61 72 20 4f 70 65 6e 56 50 4e 20 | ver.is.the.most.popular.OpenVPN. |
e02a0 | 6d 6f 64 65 20 6f 6e 20 72 6f 75 74 65 72 73 2e 20 49 74 20 61 6c 77 61 79 73 20 75 73 65 73 20 | mode.on.routers..It.always.uses. |
e02c0 | 78 2e 35 30 39 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 74 68 65 72 65 66 6f | x.509.authentication.and.therefo |
e02e0 | 72 65 20 72 65 71 75 69 72 65 73 20 61 20 50 4b 49 20 73 65 74 75 70 2e 20 52 65 66 65 72 20 74 | re.requires.a.PKI.setup..Refer.t |
e0300 | 68 69 73 20 74 6f 70 69 63 20 3a 72 65 66 3a 60 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 6b | his.topic.:ref:`configuration/pk |
e0320 | 69 2f 69 6e 64 65 78 3a 70 6b 69 60 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 43 41 20 63 65 | i/index:pki`.to.generate.a.CA.ce |
e0340 | 72 74 69 66 69 63 61 74 65 2c 20 61 20 73 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 20 | rtificate,.a.server.certificate. |
e0360 | 61 6e 64 20 6b 65 79 2c 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 72 65 76 6f 63 61 74 69 6f | and.key,.a.certificate.revocatio |
e0380 | 6e 20 6c 69 73 74 2c 20 61 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 6b 65 79 20 65 78 63 | n.list,.a.Diffie-Hellman.key.exc |
e03a0 | 68 61 6e 67 65 20 70 61 72 61 6d 65 74 65 72 73 20 66 69 6c 65 2e 20 59 6f 75 20 64 6f 20 6e 6f | hange.parameters.file..You.do.no |
e03c0 | 74 20 6e 65 65 64 20 63 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 73 20 61 6e 64 20 6b | t.need.client.certificates.and.k |
e03e0 | 65 79 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 20 73 65 74 75 70 2e 00 4d 75 6c 74 69 2d | eys.for.the.server.setup..Multi- |
e0400 | 68 6f 6d 65 64 2e 20 49 6e 20 61 20 6d 75 6c 74 69 2d 68 6f 6d 65 64 20 6e 65 74 77 6f 72 6b 20 | homed..In.a.multi-homed.network. |
e0420 | 65 6e 76 69 72 6f 6e 6d 65 6e 74 2c 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 63 6f | environment,.the.NAT66.device.co |
e0440 | 6e 6e 65 63 74 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 6e | nnects.to.an.internal.network.an |
e0460 | 64 20 73 69 6d 75 6c 74 61 6e 65 6f 75 73 6c 79 20 63 6f 6e 6e 65 63 74 73 20 74 6f 20 64 69 66 | d.simultaneously.connects.to.dif |
e0480 | 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 41 64 64 72 65 73 | ferent.external.networks..Addres |
e04a0 | 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | s.translation.can.be.configured. |
e04c0 | 6f 6e 20 65 61 63 68 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 69 64 65 20 69 6e | on.each.external.network.side.in |
e04e0 | 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 63 | terface.of.the.NAT66.device.to.c |
e0500 | 6f 6e 76 65 72 74 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b | onvert.the.same.internal.network |
e0520 | 20 61 64 64 72 65 73 73 20 69 6e 74 6f 20 64 69 66 66 65 72 65 6e 74 20 65 78 74 65 72 6e 61 6c | .address.into.different.external |
e0540 | 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 72 65 61 6c 69 7a 65 20 | .network.addresses,.and.realize. |
e0560 | 74 68 65 20 6d 61 70 70 69 6e 67 20 6f 66 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 6e 61 6c | the.mapping.of.the.same.internal |
e0580 | 20 61 64 64 72 65 73 73 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 65 78 74 65 72 6e 61 6c 20 61 64 | .address.to.multiple.external.ad |
e05a0 | 64 72 65 73 73 65 73 2e 00 4d 75 6c 74 69 3a 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 | dresses..Multi:.can.be.specified |
e05c0 | 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 00 4d 75 6c 74 69 | .multiple.times..Multicast.Multi |
e05e0 | 63 61 73 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 32 32 34 2e 30 2e 30 2e 32 35 31 20 61 64 | cast.DNS.uses.the.224.0.0.251.ad |
e0600 | 64 72 65 73 73 2c 20 77 68 69 63 68 20 69 73 20 22 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c | dress,.which.is."administrativel |
e0620 | 79 20 73 63 6f 70 65 64 22 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 6c 65 61 76 65 20 74 68 65 | y.scoped".and.does.not.leave.the |
e0640 | 20 73 75 62 6e 65 74 2e 20 49 74 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 | .subnet..It.retransmits.mDNS.pac |
e0660 | 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6f 74 68 65 72 | kets.from.one.interface.to.other |
e0680 | 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 | .interfaces..This.enables.suppor |
e06a0 | 74 20 66 6f 72 20 65 2e 67 2e 20 41 70 70 6c 65 20 41 69 72 70 6c 61 79 20 64 65 76 69 63 65 73 | t.for.e.g..Apple.Airplay.devices |
e06c0 | 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e 00 4d 75 6c 74 69 63 61 73 | .across.multiple.VLANs..Multicas |
e06e0 | 74 20 44 4e 53 20 75 73 65 73 20 74 68 65 20 72 65 73 65 72 76 65 64 20 61 64 64 72 65 73 73 20 | t.DNS.uses.the.reserved.address. |
e0700 | 60 60 32 32 34 2e 30 2e 30 2e 32 35 31 60 60 2c 20 77 68 69 63 68 20 69 73 20 60 22 61 64 6d 69 | ``224.0.0.251``,.which.is.`"admi |
e0720 | 6e 69 73 74 72 61 74 69 76 65 6c 79 20 73 63 6f 70 65 64 22 60 20 61 6e 64 20 64 6f 65 73 20 6e | nistratively.scoped"`.and.does.n |
e0740 | 6f 74 20 6c 65 61 76 65 20 74 68 65 20 73 75 62 6e 65 74 2e 20 6d 44 4e 53 20 72 65 70 65 61 74 | ot.leave.the.subnet..mDNS.repeat |
e0760 | 65 72 20 72 65 74 72 61 6e 73 6d 69 74 73 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d | er.retransmits.mDNS.packets.from |
e0780 | 20 6f 6e 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 | .one.interface.to.other.interfac |
e07a0 | 65 73 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 64 65 76 | es..This.enables.support.for.dev |
e07c0 | 69 63 65 73 20 75 73 69 6e 67 20 6d 44 4e 53 20 64 69 73 63 6f 76 65 72 79 20 28 6c 69 6b 65 20 | ices.using.mDNS.discovery.(like. |
e07e0 | 6e 65 74 77 6f 72 6b 20 70 72 69 6e 74 65 72 73 2c 20 41 70 70 6c 65 20 41 69 72 70 6c 61 79 2c | network.printers,.Apple.Airplay, |
e0800 | 20 43 68 72 6f 6d 65 63 61 73 74 2c 20 76 61 72 69 6f 75 73 20 49 50 20 62 61 73 65 64 20 68 6f | .Chromecast,.various.IP.based.ho |
e0820 | 6d 65 2d 61 75 74 6f 6d 61 74 69 6f 6e 20 64 65 76 69 63 65 73 20 65 74 63 29 20 61 63 72 6f 73 | me-automation.devices.etc).acros |
e0840 | 73 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 56 58 4c 41 | s.multiple.VLANs..Multicast.VXLA |
e0860 | 4e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 61 64 64 72 65 73 73 20 66 6f 72 20 56 58 | N.Multicast.group.address.for.VX |
e0880 | 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 56 58 4c 41 4e 20 74 75 6e 6e 65 6c 73 20 63 61 6e | LAN.interface..VXLAN.tunnels.can |
e08a0 | 20 62 65 20 62 75 69 6c 74 20 65 69 74 68 65 72 20 76 69 61 20 4d 75 6c 74 69 63 61 73 74 20 6f | .be.built.either.via.Multicast.o |
e08c0 | 72 20 76 69 61 20 55 6e 69 63 61 73 74 2e 00 4d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 74 | r.via.Unicast..Multicast.group.t |
e08e0 | 6f 20 75 73 65 20 66 6f 72 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 | o.use.for.syncing.conntrack.entr |
e0900 | 69 65 73 2e 00 4d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 74 61 | ies..Multicast.receivers.will.ta |
e0920 | 6c 6b 20 49 47 4d 50 20 74 6f 20 74 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 73 | lk.IGMP.to.their.local.router,.s |
e0940 | 6f 2c 20 62 65 73 69 64 65 73 20 68 61 76 69 6e 67 20 50 49 4d 20 63 6f 6e 66 69 67 75 72 65 64 | o,.besides.having.PIM.configured |
e0960 | 20 69 6e 20 65 76 65 72 79 20 72 6f 75 74 65 72 2c 20 49 47 4d 50 20 6d 75 73 74 20 61 6c 73 6f | .in.every.router,.IGMP.must.also |
e0980 | 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 72 20 77 68 65 | .be.configured.in.any.router.whe |
e09a0 | 72 65 20 74 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 73 74 20 72 65 | re.there.could.be.a.multicast.re |
e09c0 | 63 65 69 76 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 | ceiver.locally.connected..Multic |
e09e0 | 61 73 74 20 72 65 63 65 69 76 65 72 73 20 77 69 6c 6c 20 74 61 6c 6b 20 4d 4c 44 20 74 6f 20 74 | ast.receivers.will.talk.MLD.to.t |
e0a00 | 68 65 69 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 2c 20 73 6f 2c 20 62 65 73 69 64 65 73 20 68 | heir.local.router,.so,.besides.h |
e0a20 | 61 76 69 6e 67 20 50 49 4d 76 36 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 | aving.PIMv6.configured.in.every. |
e0a40 | 72 6f 75 74 65 72 2c 20 4d 4c 44 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 | router,.MLD.must.also.be.configu |
e0a60 | 72 65 64 20 69 6e 20 61 6e 79 20 72 6f 75 74 65 72 20 77 68 65 72 65 20 74 68 65 72 65 20 63 6f | red.in.any.router.where.there.co |
e0a80 | 75 6c 64 20 62 65 20 61 20 6d 75 6c 74 69 63 61 73 74 20 72 65 63 65 69 76 65 72 20 6c 6f 63 61 | uld.be.a.multicast.receiver.loca |
e0aa0 | 6c 6c 79 20 63 6f 6e 6e 65 63 74 65 64 2e 00 4d 75 6c 74 69 63 61 73 74 2d 72 6f 75 74 69 6e 67 | lly.connected..Multicast-routing |
e0ac0 | 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 65 20 6c 65 61 76 65 73 20 74 6f 20 66 | .is.required.for.the.leaves.to.f |
e0ae0 | 6f 72 77 61 72 64 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 65 61 63 68 20 6f 74 68 65 | orward.traffic.between.each.othe |
e0b00 | 72 20 69 6e 20 61 20 6d 6f 72 65 20 73 63 61 6c 61 62 6c 65 20 77 61 79 2e 20 54 68 69 73 20 61 | r.in.a.more.scalable.way..This.a |
e0b20 | 6c 73 6f 20 72 65 71 75 69 72 65 73 20 50 49 4d 20 74 6f 20 62 65 20 65 6e 61 62 6c 65 64 20 74 | lso.requires.PIM.to.be.enabled.t |
e0b40 | 6f 77 61 72 64 73 20 74 68 65 20 6c 65 61 76 65 73 20 73 6f 20 74 68 61 74 20 74 68 65 20 53 70 | owards.the.leaves.so.that.the.Sp |
e0b60 | 69 6e 65 20 63 61 6e 20 6c 65 61 72 6e 20 77 68 61 74 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f | ine.can.learn.what.multicast.gro |
e0b80 | 75 70 73 20 65 61 63 68 20 4c 65 61 66 20 65 78 70 65 63 74 73 20 74 72 61 66 66 69 63 20 66 72 | ups.each.Leaf.expects.traffic.fr |
e0ba0 | 6f 6d 2e 00 4d 75 6c 74 69 70 6c 65 20 44 4e 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 | om..Multiple.DNS.servers.can.be. |
e0bc0 | 64 65 66 69 6e 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 52 50 4b 49 20 63 61 63 68 69 6e 67 20 69 | defined..Multiple.RPKI.caching.i |
e0be0 | 6e 73 74 61 6e 63 65 73 20 63 61 6e 20 62 65 20 73 75 70 70 6c 69 65 64 20 61 6e 64 20 74 68 65 | nstances.can.be.supplied.and.the |
e0c00 | 79 20 6e 65 65 64 20 61 20 70 72 65 66 65 72 65 6e 63 65 20 69 6e 20 77 68 69 63 68 20 74 68 65 | y.need.a.preference.in.which.the |
e0c20 | 69 72 20 72 65 73 75 6c 74 20 73 65 74 73 20 61 72 65 20 75 73 65 64 2e 00 4d 75 6c 74 69 70 6c | ir.result.sets.are.used..Multipl |
e0c40 | 65 20 55 70 6c 69 6e 6b 73 00 4d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 74 6f 20 56 4e 49 20 6d | e.Uplinks.Multiple.VLAN.to.VNI.m |
e0c60 | 61 70 70 69 6e 67 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 67 61 69 6e 73 | appings.can.be.configured.agains |
e0c80 | 74 20 74 68 65 20 73 61 6d 65 20 53 56 44 2e 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 66 6f 72 20 | t.the.same.SVD..This.allows.for. |
e0ca0 | 61 20 73 69 67 6e 69 66 69 63 61 6e 74 20 73 63 61 6c 69 6e 67 20 6f 66 20 74 68 65 20 6e 75 6d | a.significant.scaling.of.the.num |
e0cc0 | 62 65 72 20 6f 66 20 56 4e 49 73 20 73 69 6e 63 65 20 61 20 73 65 70 61 72 61 74 65 20 56 58 4c | ber.of.VNIs.since.a.separate.VXL |
e0ce0 | 41 4e 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 72 65 71 75 69 72 | AN.interface.is.no.longer.requir |
e0d00 | 65 64 20 66 6f 72 20 65 61 63 68 20 56 4e 49 2e 00 4d 75 6c 74 69 70 6c 65 20 61 6c 69 61 73 65 | ed.for.each.VNI..Multiple.aliase |
e0d20 | 73 20 63 61 6e 20 70 65 20 73 70 65 63 69 66 69 65 64 20 70 65 72 20 68 6f 73 74 2d 6e 61 6d 65 | s.can.pe.specified.per.host-name |
e0d40 | 2e 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 63 61 6e | ..Multiple.destination.ports.can |
e0d60 | 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 | .be.specified.as.a.comma-separat |
e0d80 | 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 61 6c 73 6f | ed.list..The.whole.list.can.also |
e0da0 | 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 27 21 27 2e 20 46 6f 72 20 65 78 61 | .be."negated".using.'!'..For.exa |
e0dc0 | 6d 70 6c 65 3a 20 27 21 32 32 2c 74 65 6c 6e 65 74 2c 68 74 74 70 2c 31 32 33 2c 31 30 30 31 2d | mple:.'!22,telnet,http,123,1001- |
e0de0 | 31 30 30 35 27 00 4d 75 6c 74 69 70 6c 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 | 1005'.Multiple.destination.ports |
e0e00 | 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 6f 6d 6d 61 2d 73 65 70 | .can.be.specified.as.a.comma-sep |
e0e20 | 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c 69 73 74 20 63 61 6e 20 | arated.list..The.whole.list.can. |
e0e40 | 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 27 21 27 2e 20 46 6f 72 | also.be."negated".using.'!'..For |
e0e60 | 20 65 78 61 6d 70 6c 65 3a 20 60 21 32 32 2c 74 65 6c 6e 65 74 2c 68 74 74 70 2c 31 32 33 2c 31 | .example:.`!22,telnet,http,123,1 |
e0e80 | 30 30 31 2d 31 30 30 35 60 60 00 4d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 6d | 001-1005``.Multiple.interfaces.m |
e0ea0 | 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 | ay.be.specified..Multiple.networ |
e0ec0 | 6b 73 2f 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 63 6f | ks/client.IP.addresses.can.be.co |
e0ee0 | 6e 66 69 67 75 72 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 | nfigured..Multiple.servers.can.b |
e0f00 | 65 20 73 70 65 63 69 66 69 65 64 2e 00 4d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 65 73 20 63 | e.specified..Multiple.services.c |
e0f20 | 61 6e 20 62 65 20 75 73 65 64 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 2e 20 4a 75 73 74 20 73 | an.be.used.per.interface..Just.s |
e0f40 | 70 65 63 69 66 79 20 61 73 20 6d 61 6e 79 20 73 65 72 76 69 63 65 73 20 70 65 72 20 69 6e 74 65 | pecify.as.many.services.per.inte |
e0f60 | 72 66 61 63 65 20 61 73 20 79 6f 75 20 6c 69 6b 65 21 00 4d 75 6c 74 69 70 6c 65 20 73 6f 75 72 | rface.as.you.like!.Multiple.sour |
e0f80 | 63 65 20 70 6f 72 74 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 20 63 | ce.ports.can.be.specified.as.a.c |
e0fa0 | 6f 6d 6d 61 2d 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 2e 20 54 68 65 20 77 68 6f 6c 65 20 6c | omma-separated.list..The.whole.l |
e0fc0 | 69 73 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 22 6e 65 67 61 74 65 64 22 20 75 73 69 6e 67 20 | ist.can.also.be."negated".using. |
e0fe0 | 60 60 21 60 60 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 4d 75 6c 74 69 70 6c 65 20 74 61 72 | ``!``..For.example:.Multiple.tar |
e1000 | 67 65 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 | get.IP.addresses.can.be.specifie |
e1020 | 64 2e 20 41 74 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 | d..At.least.one.IP.address.must. |
e1040 | 62 65 20 67 69 76 65 6e 20 66 6f 72 20 41 52 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 74 6f 20 66 | be.given.for.ARP.monitoring.to.f |
e1060 | 75 6e 63 74 69 6f 6e 2e 00 4d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 20 63 61 6e 20 63 6f 6e 6e | unction..Multiple.users.can.conn |
e1080 | 65 63 74 20 74 6f 20 74 68 65 20 73 61 6d 65 20 73 65 72 69 61 6c 20 64 65 76 69 63 65 20 62 75 | ect.to.the.same.serial.device.bu |
e10a0 | 74 20 6f 6e 6c 79 20 6f 6e 65 20 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 77 72 69 74 65 20 74 | t.only.one.is.allowed.to.write.t |
e10c0 | 6f 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 70 6f 72 74 2e 00 4d 75 6c 74 69 70 72 6f 74 6f 63 6f | o.the.console.port..Multiprotoco |
e10e0 | 6c 20 65 78 74 65 6e 73 69 6f 6e 73 20 65 6e 61 62 6c 65 20 42 47 50 20 74 6f 20 63 61 72 72 79 | l.extensions.enable.BGP.to.carry |
e1100 | 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c | .routing.information.for.multipl |
e1120 | 65 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 42 47 50 20 73 | e.network.layer.protocols..BGP.s |
e1140 | 75 70 70 6f 72 74 73 20 61 6e 20 41 64 64 72 65 73 73 20 46 61 6d 69 6c 79 20 49 64 65 6e 74 69 | upports.an.Address.Family.Identi |
e1160 | 66 69 65 72 20 28 41 46 49 29 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 4e 00 | fier.(AFI).for.IPv4.and.IPv6..N. |
e1180 | 4e 41 54 00 4e 41 54 20 28 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 53 6f 75 72 63 65 20 4e 41 | NAT.NAT.(specifically,.Source.NA |
e11a0 | 54 29 3b 00 4e 41 54 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4e 41 54 20 4c 6f 61 64 20 42 | T);.NAT.Configuration.NAT.Load.B |
e11c0 | 61 6c 61 6e 63 65 00 4e 41 54 20 4c 6f 61 64 20 42 61 6c 61 6e 63 65 20 75 73 65 73 20 61 6e 20 | alance.NAT.Load.Balance.uses.an. |
e11e0 | 61 6c 67 6f 72 69 74 68 6d 20 74 68 61 74 20 67 65 6e 65 72 61 74 65 73 20 61 20 68 61 73 68 20 | algorithm.that.generates.a.hash. |
e1200 | 61 6e 64 20 62 61 73 65 64 20 6f 6e 20 69 74 2c 20 74 68 65 6e 20 69 74 20 61 70 70 6c 69 65 73 | and.based.on.it,.then.it.applies |
e1220 | 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2e 20 54 68 69 73 | .corresponding.translation..This |
e1240 | 20 68 61 73 68 20 63 61 6e 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 72 61 6e 64 6f 6d 6c 79 2c | .hash.can.be.generated.randomly, |
e1260 | 20 6f 72 20 63 61 6e 20 75 73 65 20 64 61 74 61 20 66 72 6f 6d 20 74 68 65 20 69 70 20 68 65 61 | .or.can.use.data.from.the.ip.hea |
e1280 | 64 65 72 3a 20 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e | der:.source-address,.destination |
e12a0 | 2d 61 64 64 72 65 73 73 2c 20 73 6f 75 72 63 65 2d 70 6f 72 74 20 61 6e 64 2f 6f 72 20 64 65 73 | -address,.source-port.and/or.des |
e12c0 | 74 69 6e 61 74 69 6f 6e 2d 70 6f 72 74 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 69 74 20 77 69 | tination-port..By.default,.it.wi |
e12e0 | 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 4e | ll.generate.the.hash.randomly..N |
e1300 | 41 54 20 52 75 6c 65 73 65 74 00 4e 41 54 20 62 65 66 6f 72 65 20 56 50 4e 00 4e 41 54 20 62 65 | AT.Ruleset.NAT.before.VPN.NAT.be |
e1320 | 66 6f 72 65 20 56 50 4e 20 54 6f 70 6f 6c 6f 67 79 00 4e 41 54 2c 20 52 6f 75 74 69 6e 67 2c 20 | fore.VPN.Topology.NAT,.Routing,. |
e1340 | 46 69 72 65 77 61 6c 6c 20 49 6e 74 65 72 61 63 74 69 6f 6e 00 4e 41 54 34 34 00 4e 41 54 36 34 | Firewall.Interaction.NAT44.NAT64 |
e1360 | 00 4e 41 54 36 34 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4e 41 54 | .NAT64.client.configuration:.NAT |
e1380 | 36 34 20 70 72 65 66 69 78 20 6d 61 73 6b 20 6d 75 73 74 20 62 65 20 6f 6e 65 20 6f 66 3a 20 2f | 64.prefix.mask.must.be.one.of:./ |
e13a0 | 33 32 2c 20 2f 34 30 2c 20 2f 34 38 2c 20 2f 35 36 2c 20 2f 36 34 20 6f 72 20 39 36 2e 00 4e 41 | 32,./40,./48,./56,./64.or.96..NA |
e13c0 | 54 36 34 20 73 65 72 76 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 4e 41 54 36 36 28 | T64.server.configuration:.NAT66( |
e13e0 | 4e 50 54 76 36 29 00 4e 48 52 50 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 64 79 6e 61 6d 69 63 | NPTv6).NHRP.provides.the.dynamic |
e1400 | 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 20 6d 65 63 68 61 | .tunnel.endpoint.discovery.mecha |
e1420 | 6e 69 73 6d 20 28 65 6e 64 70 6f 69 6e 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 2c 20 61 6e 64 | nism.(endpoint.registration,.and |
e1440 | 20 65 6e 64 70 6f 69 6e 74 20 64 69 73 63 6f 76 65 72 79 2f 6c 6f 6f 6b 75 70 29 2c 20 6d 47 52 | .endpoint.discovery/lookup),.mGR |
e1460 | 45 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 65 6e 63 61 70 73 75 6c 61 74 | E.provides.the.tunnel.encapsulat |
e1480 | 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 6e 64 20 74 68 65 20 49 50 53 65 63 20 70 72 6f 74 6f 63 | ion.itself,.and.the.IPSec.protoc |
e14a0 | 6f 6c 73 20 68 61 6e 64 6c 65 20 74 68 65 20 6b 65 79 20 65 78 63 68 61 6e 67 65 2c 20 61 6e 64 | ols.handle.the.key.exchange,.and |
e14c0 | 20 63 72 79 70 74 6f 20 6d 65 63 68 61 6e 69 73 6d 2e 00 4e 54 50 00 4e 54 50 20 69 73 20 69 6e | .crypto.mechanism..NTP.NTP.is.in |
e14e0 | 74 65 6e 64 65 64 20 74 6f 20 73 79 6e 63 68 72 6f 6e 69 7a 65 20 61 6c 6c 20 70 61 72 74 69 63 | tended.to.synchronize.all.partic |
e1500 | 69 70 61 74 69 6e 67 20 63 6f 6d 70 75 74 65 72 73 20 74 6f 20 77 69 74 68 69 6e 20 61 20 66 65 | ipating.computers.to.within.a.fe |
e1520 | 77 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 66 20 3a 61 62 62 72 3a 60 55 54 43 20 28 43 6f | w.milliseconds.of.:abbr:`UTC.(Co |
e1540 | 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 60 2e 20 49 74 20 75 | ordinated.Universal.Time)`..It.u |
e1560 | 73 65 73 20 74 68 65 20 69 6e 74 65 72 73 65 63 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2c 20 | ses.the.intersection.algorithm,. |
e1580 | 61 20 6d 6f 64 69 66 69 65 64 20 76 65 72 73 69 6f 6e 20 6f 66 20 4d 61 72 7a 75 6c 6c 6f 27 73 | a.modified.version.of.Marzullo's |
e15a0 | 20 61 6c 67 6f 72 69 74 68 6d 2c 20 74 6f 20 73 65 6c 65 63 74 20 61 63 63 75 72 61 74 65 20 74 | .algorithm,.to.select.accurate.t |
e15c0 | 69 6d 65 20 73 65 72 76 65 72 73 20 61 6e 64 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 6d | ime.servers.and.is.designed.to.m |
e15e0 | 69 74 69 67 61 74 65 20 74 68 65 20 65 66 66 65 63 74 73 20 6f 66 20 76 61 72 69 61 62 6c 65 20 | itigate.the.effects.of.variable. |
e1600 | 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 4e 54 50 20 63 61 6e 20 75 73 75 61 6c 6c 79 | network.latency..NTP.can.usually |
e1620 | 20 6d 61 69 6e 74 61 69 6e 20 74 69 6d 65 20 74 6f 20 77 69 74 68 69 6e 20 74 65 6e 73 20 6f 66 | .maintain.time.to.within.tens.of |
e1640 | 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 6f 76 65 72 20 74 68 65 20 70 75 62 6c 69 63 20 49 6e | .milliseconds.over.the.public.In |
e1660 | 74 65 72 6e 65 74 2c 20 61 6e 64 20 63 61 6e 20 61 63 68 69 65 76 65 20 62 65 74 74 65 72 20 74 | ternet,.and.can.achieve.better.t |
e1680 | 68 61 6e 20 6f 6e 65 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 20 61 63 63 75 72 61 63 79 20 69 6e 20 | han.one.millisecond.accuracy.in. |
e16a0 | 6c 6f 63 61 6c 20 61 72 65 61 20 6e 65 74 77 6f 72 6b 73 20 75 6e 64 65 72 20 69 64 65 61 6c 20 | local.area.networks.under.ideal. |
e16c0 | 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 41 73 79 6d 6d 65 74 72 69 63 20 72 6f 75 74 65 73 20 61 6e | conditions..Asymmetric.routes.an |
e16e0 | 64 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 67 65 73 74 69 6f 6e 20 63 61 6e 20 63 61 75 73 65 20 65 | d.network.congestion.can.cause.e |
e1700 | 72 72 6f 72 73 20 6f 66 20 31 30 30 20 6d 73 20 6f 72 20 6d 6f 72 65 2e 00 4e 54 50 20 70 72 6f | rrors.of.100.ms.or.more..NTP.pro |
e1720 | 63 65 73 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 6f 6e 20 74 68 65 20 73 70 65 | cess.will.only.listen.on.the.spe |
e1740 | 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 6d 75 73 74 20 73 70 65 63 | cified.IP.address..You.must.spec |
e1760 | 69 66 79 20 74 68 65 20 60 3c 61 64 64 72 65 73 73 3e 60 20 61 6e 64 20 6f 70 74 69 6f 6e 61 6c | ify.the.`<address>`.and.optional |
e1780 | 6c 79 20 74 68 65 20 70 65 72 6d 69 74 74 65 64 20 63 6c 69 65 6e 74 73 2e 20 4d 75 6c 74 69 70 | ly.the.permitted.clients..Multip |
e17a0 | 6c 65 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 | le.listen.addresses.can.be.confi |
e17c0 | 67 75 72 65 64 2e 00 4e 54 50 20 73 75 62 73 79 73 74 65 6d 00 4e 54 50 20 73 75 70 70 6c 69 65 | gured..NTP.subsystem.NTP.supplie |
e17e0 | 73 20 61 20 77 61 72 6e 69 6e 67 20 6f 66 20 61 6e 79 20 69 6d 70 65 6e 64 69 6e 67 20 6c 65 61 | s.a.warning.of.any.impending.lea |
e1800 | 70 20 73 65 63 6f 6e 64 20 61 64 6a 75 73 74 6d 65 6e 74 2c 20 62 75 74 20 6e 6f 20 69 6e 66 6f | p.second.adjustment,.but.no.info |
e1820 | 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6c 6f 63 61 6c 20 74 69 6d 65 20 7a 6f 6e 65 73 20 6f | rmation.about.local.time.zones.o |
e1840 | 72 20 64 61 79 6c 69 67 68 74 20 73 61 76 69 6e 67 20 74 69 6d 65 20 69 73 20 74 72 61 6e 73 6d | r.daylight.saving.time.is.transm |
e1860 | 69 74 74 65 64 2e 00 4e 61 6d 65 20 53 65 72 76 65 72 00 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 | itted..Name.Server.Name.of.insta |
e1880 | 6c 6c 65 64 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 63 65 72 74 69 | lled.certificate.authority.certi |
e18a0 | 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 73 65 72 76 65 72 | ficate..Name.of.installed.server |
e18c0 | 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 4e 61 6d 65 20 6f 66 20 73 74 61 74 69 63 20 6d 61 70 | .certificate..Name.of.static.map |
e18e0 | 70 69 6e 67 00 4e 61 6d 65 20 6f 66 20 74 68 65 20 73 69 6e 67 6c 65 20 74 61 62 6c 65 20 4f 6e | ping.Name.of.the.single.table.On |
e1900 | 6c 79 20 69 66 20 73 65 74 20 67 72 6f 75 70 2d 6d 65 74 72 69 63 73 20 73 69 6e 67 6c 65 2d 74 | ly.if.set.group-metrics.single-t |
e1920 | 61 62 6c 65 2e 00 4e 61 6d 65 20 6f 72 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 66 20 54 46 | able..Name.or.IPv4.address.of.TF |
e1940 | 54 50 20 73 65 72 76 65 72 00 4e 65 74 42 49 4f 53 20 6f 76 65 72 20 54 43 50 2f 49 50 20 6e 61 | TP.server.NetBIOS.over.TCP/IP.na |
e1960 | 6d 65 20 73 65 72 76 65 72 00 4e 65 74 46 6c 6f 77 00 4e 65 74 46 6c 6f 77 20 2f 20 49 50 46 49 | me.server.NetFlow.NetFlow./.IPFI |
e1980 | 58 00 4e 65 74 46 6c 6f 77 20 65 6e 67 69 6e 65 2d 69 64 20 77 68 69 63 68 20 77 69 6c 6c 20 61 | X.NetFlow.engine-id.which.will.a |
e19a0 | 70 70 65 61 72 20 69 6e 20 4e 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 54 68 65 20 72 61 6e 67 65 | ppear.in.NetFlow.data..The.range |
e19c0 | 20 69 73 20 30 20 74 6f 20 32 35 35 2e 00 4e 65 74 46 6c 6f 77 20 69 73 20 61 20 66 65 61 74 75 | .is.0.to.255..NetFlow.is.a.featu |
e19e0 | 72 65 20 74 68 61 74 20 77 61 73 20 69 6e 74 72 6f 64 75 63 65 64 20 6f 6e 20 43 69 73 63 6f 20 | re.that.was.introduced.on.Cisco. |
e1a00 | 72 6f 75 74 65 72 73 20 61 72 6f 75 6e 64 20 31 39 39 36 20 74 68 61 74 20 70 72 6f 76 69 64 65 | routers.around.1996.that.provide |
e1a20 | 73 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 6f 6c 6c 65 63 74 20 49 50 20 6e 65 74 77 | s.the.ability.to.collect.IP.netw |
e1a40 | 6f 72 6b 20 74 72 61 66 66 69 63 20 61 73 20 69 74 20 65 6e 74 65 72 73 20 6f 72 20 65 78 69 74 | ork.traffic.as.it.enters.or.exit |
e1a60 | 73 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 61 6e 61 6c 79 7a 69 6e 67 20 74 68 65 | s.an.interface..By.analyzing.the |
e1a80 | 20 64 61 74 61 20 70 72 6f 76 69 64 65 64 20 62 79 20 4e 65 74 46 6c 6f 77 2c 20 61 20 6e 65 74 | .data.provided.by.NetFlow,.a.net |
e1aa0 | 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 63 61 6e 20 64 65 74 65 72 6d 69 6e 65 | work.administrator.can.determine |
e1ac0 | 20 74 68 69 6e 67 73 20 73 75 63 68 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 6e 64 20 64 | .things.such.as.the.source.and.d |
e1ae0 | 65 73 74 69 6e 61 74 69 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 2c 20 63 6c 61 73 73 20 6f 66 20 | estination.of.traffic,.class.of. |
e1b00 | 73 65 72 76 69 63 65 2c 20 61 6e 64 20 74 68 65 20 63 61 75 73 65 73 20 6f 66 20 63 6f 6e 67 65 | service,.and.the.causes.of.conge |
e1b20 | 73 74 69 6f 6e 2e 20 41 20 74 79 70 69 63 61 6c 20 66 6c 6f 77 20 6d 6f 6e 69 74 6f 72 69 6e 67 | stion..A.typical.flow.monitoring |
e1b40 | 20 73 65 74 75 70 20 28 75 73 69 6e 67 20 4e 65 74 46 6c 6f 77 29 20 63 6f 6e 73 69 73 74 73 20 | .setup.(using.NetFlow).consists. |
e1b60 | 6f 66 20 74 68 72 65 65 20 6d 61 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 73 3a 00 4e 65 74 46 6c 6f | of.three.main.components:.NetFlo |
e1b80 | 77 20 69 73 20 75 73 75 61 6c 6c 79 20 65 6e 61 62 6c 65 64 20 6f 6e 20 61 20 70 65 72 2d 69 6e | w.is.usually.enabled.on.a.per-in |
e1ba0 | 74 65 72 66 61 63 65 20 62 61 73 69 73 20 74 6f 20 6c 69 6d 69 74 20 6c 6f 61 64 20 6f 6e 20 74 | terface.basis.to.limit.load.on.t |
e1bc0 | 68 65 20 72 6f 75 74 65 72 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 69 6e 76 6f 6c 76 65 64 20 69 6e | he.router.components.involved.in |
e1be0 | 20 4e 65 74 46 6c 6f 77 2c 20 6f 72 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 61 6d 6f 75 6e 74 | .NetFlow,.or.to.limit.the.amount |
e1c00 | 20 6f 66 20 4e 65 74 46 6c 6f 77 20 72 65 63 6f 72 64 73 20 65 78 70 6f 72 74 65 64 2e 00 4e 65 | .of.NetFlow.records.exported..Ne |
e1c20 | 74 46 6c 6f 77 20 76 35 20 65 78 61 6d 70 6c 65 3a 00 4e 65 74 66 69 6c 74 65 72 20 62 61 73 65 | tFlow.v5.example:.Netfilter.base |
e1c40 | 64 00 4e 65 74 6d 61 73 6b 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 6c 65 6e 67 74 68 2e 00 4e | d.Netmask.greater.than.length..N |
e1c60 | 65 74 6d 61 73 6b 20 6c 65 73 73 20 74 68 61 6e 20 6c 65 6e 67 74 68 00 4e 65 74 77 6f 72 6b 20 | etmask.less.than.length.Network. |
e1c80 | 41 64 76 65 72 74 69 73 65 6d 65 6e 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 4e 65 74 77 | Advertisement.Configuration.Netw |
e1ca0 | 6f 72 6b 20 43 6f 6e 74 72 6f 6c 00 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 00 4e 65 74 | ork.Control.Network.Emulator.Net |
e1cc0 | 77 6f 72 6b 20 47 72 6f 75 70 73 00 4e 65 74 77 6f 72 6b 20 49 44 20 28 53 53 49 44 29 20 60 60 | work.Groups.Network.ID.(SSID).`` |
e1ce0 | 45 6e 74 65 72 70 72 69 73 65 2d 54 45 53 54 60 60 00 4e 65 74 77 6f 72 6b 20 49 44 20 28 53 53 | Enterprise-TEST``.Network.ID.(SS |
e1d00 | 49 44 29 20 60 60 54 45 53 54 60 60 00 4e 65 74 77 6f 72 6b 20 54 6f 70 6f 6c 6f 67 79 20 44 69 | ID).``TEST``.Network.Topology.Di |
e1d20 | 61 67 72 61 6d 00 4e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 74 61 74 69 6f 6e | agram.Network.management.station |
e1d40 | 20 28 4e 4d 53 29 20 2d 20 73 6f 66 74 77 61 72 65 20 77 68 69 63 68 20 72 75 6e 73 20 6f 6e 20 | .(NMS).-.software.which.runs.on. |
e1d60 | 74 68 65 20 6d 61 6e 61 67 65 72 00 4e 65 74 77 6f 72 6b 20 6e 65 77 73 20 73 75 62 73 79 73 74 | the.manager.Network.news.subsyst |
e1d80 | 65 6d 00 4e 65 74 77 6f 72 6b 20 74 6f 20 62 65 20 70 72 6f 74 65 63 74 65 64 3a 20 31 39 32 2e | em.Network.to.be.protected:.192. |
e1da0 | 30 2e 32 2e 30 2f 32 34 20 28 70 75 62 6c 69 63 20 49 50 73 20 75 73 65 20 62 79 20 63 75 73 74 | 0.2.0/24.(public.IPs.use.by.cust |
e1dc0 | 6f 6d 65 72 73 29 00 4e 65 74 77 6f 72 6b 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 71 75 65 72 79 | omers).Networks.allowed.to.query |
e1de0 | 20 74 68 69 73 20 73 65 72 76 65 72 00 4e 65 77 20 75 73 65 72 20 77 69 6c 6c 20 75 73 65 20 53 | .this.server.New.user.will.use.S |
e1e00 | 48 41 2f 41 45 53 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 70 72 | HA/AES.for.authentication.and.pr |
e1e20 | 69 76 61 63 79 00 4e 65 78 74 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f | ivacy.Next.it.is.necessary.to.co |
e1e40 | 6e 66 69 67 75 72 65 20 32 46 41 20 66 6f 72 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 3a 00 4e 65 78 | nfigure.2FA.for.OpenConnect:.Nex |
e1e60 | 74 2d 68 6f 70 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 00 4e 65 | t-hop.interface.for.the.route.Ne |
e1e80 | 78 74 68 6f 70 20 49 50 20 61 64 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 49 50 76 36 20 61 | xthop.IP.address..Nexthop.IPv6.a |
e1ea0 | 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 4e 65 78 74 68 6f 70 20 49 50 76 36 20 61 64 | ddress.to.match..Nexthop.IPv6.ad |
e1ec0 | 64 72 65 73 73 2e 00 4e 65 78 74 68 6f 70 20 54 72 61 63 6b 69 6e 67 00 4e 65 78 74 68 6f 70 20 | dress..Nexthop.Tracking.Nexthop. |
e1ee0 | 74 72 61 63 6b 69 6e 67 20 72 65 73 6f 6c 76 65 20 6e 65 78 74 68 6f 70 73 20 76 69 61 20 74 68 | tracking.resolve.nexthops.via.th |
e1f00 | 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 54 68 69 73 | e.default.route.by.default..This |
e1f20 | 20 69 73 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 61 20 74 72 61 | .is.enabled.by.default.for.a.tra |
e1f40 | 64 69 74 69 6f 6e 61 6c 20 70 72 6f 66 69 6c 65 20 6f 66 20 46 52 52 20 77 68 69 63 68 20 77 65 | ditional.profile.of.FRR.which.we |
e1f60 | 20 75 73 65 2e 20 49 74 20 61 6e 64 20 63 61 6e 20 62 65 20 64 69 73 61 62 6c 65 64 20 69 66 20 | .use..It.and.can.be.disabled.if. |
e1f80 | 79 6f 75 20 64 6f 20 6e 6f 74 20 77 61 6e 27 74 20 74 6f 20 65 2e 67 2e 20 61 6c 6c 6f 77 20 42 | you.do.not.wan't.to.e.g..allow.B |
e1fa0 | 47 50 20 74 6f 20 70 65 65 72 20 61 63 72 6f 73 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f | GP.to.peer.across.the.default.ro |
e1fc0 | 75 74 65 2e 00 4e 6f 20 52 4f 41 20 65 78 69 73 74 73 20 77 68 69 63 68 20 63 6f 76 65 72 73 20 | ute..No.ROA.exists.which.covers. |
e1fe0 | 74 68 61 74 20 70 72 65 66 69 78 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 74 68 69 73 20 | that.prefix..Unfortunately.this. |
e2000 | 69 73 20 74 68 65 20 63 61 73 65 20 66 6f 72 20 61 62 6f 75 74 20 34 30 25 2d 35 30 25 20 6f 66 | is.the.case.for.about.40%-50%.of |
e2020 | 20 74 68 65 20 70 72 65 66 69 78 65 73 20 77 68 69 63 68 20 77 65 72 65 20 61 6e 6e 6f 75 6e 63 | .the.prefixes.which.were.announc |
e2040 | 65 64 20 74 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 44 46 5a 20 28 64 65 66 61 75 6c 74 2d 66 72 | ed.to.the.:abbr:`DFZ.(default-fr |
e2060 | 65 65 20 7a 6f 6e 65 29 60 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 20 32 30 32 34 2e 00 | ee.zone)`.at.the.start.of.2024.. |
e2080 | 4e 6f 20 52 4f 41 20 65 78 69 73 74 73 20 77 68 69 63 68 20 63 6f 76 65 72 73 20 74 68 61 74 20 | No.ROA.exists.which.covers.that. |
e20a0 | 70 72 65 66 69 78 2e 20 55 6e 66 6f 72 74 75 6e 61 74 65 6c 79 20 74 68 69 73 20 69 73 20 74 68 | prefix..Unfortunately.this.is.th |
e20c0 | 65 20 63 61 73 65 20 66 6f 72 20 61 62 6f 75 74 20 38 30 25 20 6f 66 20 74 68 65 20 49 50 76 34 | e.case.for.about.80%.of.the.IPv4 |
e20e0 | 20 70 72 65 66 69 78 65 73 20 77 68 69 63 68 20 77 65 72 65 20 61 6e 6e 6f 75 6e 63 65 64 20 74 | .prefixes.which.were.announced.t |
e2100 | 6f 20 74 68 65 20 3a 61 62 62 72 3a 60 44 46 5a 20 28 64 65 66 61 75 6c 74 2d 66 72 65 65 20 7a | o.the.:abbr:`DFZ.(default-free.z |
e2120 | 6f 6e 65 29 60 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 20 32 30 32 30 00 4e 6f 20 56 4c | one)`.at.the.start.of.2020.No.VL |
e2140 | 41 4e 20 74 61 67 67 69 6e 67 20 72 65 71 75 69 72 65 64 20 62 79 20 79 6f 75 72 20 49 53 50 2e | AN.tagging.required.by.your.ISP. |
e2160 | 00 4e 6f 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 20 69 6e 64 65 66 69 6e 69 | .No.route.is.suppressed.indefini |
e2180 | 74 65 6c 79 2e 20 4d 61 78 69 6d 75 6d 2d 73 75 70 70 72 65 73 73 2d 74 69 6d 65 20 64 65 66 69 | tely..Maximum-suppress-time.defi |
e21a0 | 6e 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d 65 20 61 20 72 6f 75 74 65 20 63 61 6e | nes.the.maximum.time.a.route.can |
e21c0 | 20 62 65 20 73 75 70 70 72 65 73 73 65 64 20 62 65 66 6f 72 65 20 69 74 20 69 73 20 72 65 2d 61 | .be.suppressed.before.it.is.re-a |
e21e0 | 64 76 65 72 74 69 73 65 64 2e 00 4e 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 53 52 4c 42 00 4e | dvertised..No.support.for.SRLB.N |
e2200 | 6f 20 73 75 70 70 6f 72 74 20 66 6f 72 20 62 69 6e 64 69 6e 67 20 53 49 44 00 4e 6f 20 73 75 70 | o.support.for.binding.SID.No.sup |
e2220 | 70 6f 72 74 20 66 6f 72 20 6c 65 76 65 6c 20 72 65 64 69 73 74 72 69 62 75 74 69 6f 6e 20 28 4c | port.for.level.redistribution.(L |
e2240 | 31 20 74 6f 20 4c 32 20 6f 72 20 4c 32 20 74 6f 20 4c 31 29 00 4e 6f 6e 2d 74 72 61 6e 73 70 61 | 1.to.L2.or.L2.to.L1).Non-transpa |
e2260 | 72 65 6e 74 20 70 72 6f 78 79 69 6e 67 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 74 68 65 20 | rent.proxying.requires.that.the. |
e2280 | 63 6c 69 65 6e 74 20 62 72 6f 77 73 65 72 73 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 | client.browsers.be.configured.wi |
e22a0 | 74 68 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e 67 73 20 62 65 66 6f 72 65 20 72 65 71 | th.the.proxy.settings.before.req |
e22c0 | 75 65 73 74 73 20 61 72 65 20 72 65 64 69 72 65 63 74 65 64 2e 20 54 68 65 20 61 64 76 61 6e 74 | uests.are.redirected..The.advant |
e22e0 | 61 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 74 68 65 20 63 6c 69 65 6e 74 20 77 | age.of.this.is.that.the.client.w |
e2300 | 65 62 20 62 72 6f 77 73 65 72 20 63 61 6e 20 64 65 74 65 63 74 20 74 68 61 74 20 61 20 70 72 6f | eb.browser.can.detect.that.a.pro |
e2320 | 78 79 20 69 73 20 69 6e 20 75 73 65 20 61 6e 64 20 63 61 6e 20 62 65 68 61 76 65 20 61 63 63 6f | xy.is.in.use.and.can.behave.acco |
e2340 | 72 64 69 6e 67 6c 79 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 2c 20 77 65 62 2d 74 72 61 6e 73 6d | rdingly..In.addition,.web-transm |
e2360 | 69 74 74 65 64 20 6d 61 6c 77 61 72 65 20 63 61 6e 20 73 6f 6d 65 74 69 6d 65 73 20 62 65 20 62 | itted.malware.can.sometimes.be.b |
e2380 | 6c 6f 63 6b 65 64 20 62 79 20 61 20 6e 6f 6e 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 77 65 62 20 | locked.by.a.non-transparent.web. |
e23a0 | 70 72 6f 78 79 2c 20 73 69 6e 63 65 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 61 77 61 72 65 20 | proxy,.since.they.are.not.aware. |
e23c0 | 6f 66 20 74 68 65 20 70 72 6f 78 79 20 73 65 74 74 69 6e 67 73 2e 00 4e 6f 6e 65 20 6f 66 20 74 | of.the.proxy.settings..None.of.t |
e23e0 | 68 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 73 20 68 61 76 65 20 63 6c 69 65 6e 74 | he.operating.systems.have.client |
e2400 | 20 73 6f 66 74 77 61 72 65 20 69 6e 73 74 61 6c 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 00 4e | .software.installed.by.default.N |
e2420 | 6f 72 6d 61 6c 20 62 75 74 20 73 69 67 6e 69 66 69 63 61 6e 74 20 63 6f 6e 64 69 74 69 6f 6e 73 | ormal.but.significant.conditions |
e2440 | 20 2d 20 63 6f 6e 64 69 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 65 72 72 6f 72 | .-.conditions.that.are.not.error |
e2460 | 20 63 6f 6e 64 69 74 69 6f 6e 73 2c 20 62 75 74 20 74 68 61 74 20 6d 61 79 20 72 65 71 75 69 72 | .conditions,.but.that.may.requir |
e2480 | 65 20 73 70 65 63 69 61 6c 20 68 61 6e 64 6c 69 6e 67 2e 00 4e 6f 74 20 61 6c 6c 20 74 72 61 6e | e.special.handling..Not.all.tran |
e24a0 | 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 20 6d 61 79 20 62 65 20 38 30 32 2e 33 61 64 20 63 6f 6d | smit.policies.may.be.802.3ad.com |
e24c0 | 70 6c 69 61 6e 74 2c 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 69 6e 20 72 65 67 61 72 64 73 20 | pliant,.particularly.in.regards. |
e24e0 | 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 6d 69 73 6f 72 64 65 72 69 6e 67 20 72 65 71 75 69 72 | to.the.packet.misordering.requir |
e2500 | 65 6d 65 6e 74 73 20 6f 66 20 73 65 63 74 69 6f 6e 20 34 33 2e 32 2e 34 20 6f 66 20 74 68 65 20 | ements.of.section.43.2.4.of.the. |
e2520 | 38 30 32 2e 33 61 64 20 73 74 61 6e 64 61 72 64 2e 00 4e 6f 74 65 20 74 68 61 74 20 64 65 6c 65 | 802.3ad.standard..Note.that.dele |
e2540 | 74 69 6e 67 20 74 68 65 20 6c 6f 67 20 66 69 6c 65 20 64 6f 65 73 20 6e 6f 74 20 73 74 6f 70 20 | ting.the.log.file.does.not.stop. |
e2560 | 74 68 65 20 73 79 73 74 65 6d 20 66 72 6f 6d 20 6c 6f 67 67 69 6e 67 20 65 76 65 6e 74 73 2e 20 | the.system.from.logging.events.. |
e2580 | 49 66 20 79 6f 75 20 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 68 69 6c 65 20 74 68 | If.you.use.this.command.while.th |
e25a0 | 65 20 73 79 73 74 65 6d 20 69 73 20 6c 6f 67 67 69 6e 67 20 65 76 65 6e 74 73 2c 20 6f 6c 64 20 | e.system.is.logging.events,.old. |
e25c0 | 6c 6f 67 20 65 76 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 64 65 6c 65 74 65 64 2c 20 62 75 74 20 | log.events.will.be.deleted,.but. |
e25e0 | 65 76 65 6e 74 73 20 61 66 74 65 72 20 74 68 65 20 64 65 6c 65 74 65 20 6f 70 65 72 61 74 69 6f | events.after.the.delete.operatio |
e2600 | 6e 20 77 69 6c 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 69 6e 20 74 68 65 20 6e 65 77 20 66 69 | n.will.be.recorded.in.the.new.fi |
e2620 | 6c 65 2e 20 54 6f 20 64 65 6c 65 74 65 20 74 68 65 20 66 69 6c 65 20 61 6c 74 6f 67 65 74 68 65 | le..To.delete.the.file.altogethe |
e2640 | 72 2c 20 66 69 72 73 74 20 64 65 6c 65 74 65 20 6c 6f 67 67 69 6e 67 20 74 6f 20 74 68 65 20 66 | r,.first.delete.logging.to.the.f |
e2660 | 69 6c 65 20 75 73 69 6e 67 20 73 79 73 74 65 6d 20 73 79 73 6c 6f 67 20 3a 72 65 66 3a 60 63 75 | ile.using.system.syslog.:ref:`cu |
e2680 | 73 74 6f 6d 2d 66 69 6c 65 60 20 63 6f 6d 6d 61 6e 64 2c 20 61 6e 64 20 74 68 65 6e 20 64 65 6c | stom-file`.command,.and.then.del |
e26a0 | 65 74 65 20 74 68 65 20 66 69 6c 65 2e 00 4e 6f 74 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 | ete.the.file..Note.the.command.w |
e26c0 | 69 74 68 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 28 73 65 74 20 70 6b 69 20 6b 65 79 2d | ith.the.public.key.(set.pki.key- |
e26e0 | 70 61 69 72 20 69 70 73 65 63 2d 52 49 47 48 54 20 70 75 62 6c 69 63 20 6b 65 79 20 27 46 41 41 | pair.ipsec-RIGHT.public.key.'FAA |
e2700 | 4f 43 41 51 38 41 4d 49 49 2e 2e 2e 27 29 2e 00 4e 6f 74 65 3a 20 63 65 72 74 69 66 69 63 61 74 | OCAQ8AMII...')..Note:.certificat |
e2720 | 65 20 6e 61 6d 65 73 20 64 6f 6e 27 74 20 6d 61 74 74 65 72 2c 20 77 65 20 75 73 65 20 27 6f 70 | e.names.don't.matter,.we.use.'op |
e2740 | 65 6e 76 70 6e 2d 6c 6f 63 61 6c 27 20 61 6e 64 20 27 6f 70 65 6e 76 70 6e 2d 72 65 6d 6f 74 65 | envpn-local'.and.'openvpn-remote |
e2760 | 27 20 62 75 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 72 62 69 74 72 61 72 79 2e 00 4e 6f 74 | '.but.they.can.be.arbitrary..Not |
e2780 | 69 63 65 00 4e 6f 77 20 63 6f 6e 66 69 67 75 72 65 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 | ice.Now.configure.conntrack-sync |
e27a0 | 20 73 65 72 76 69 63 65 20 6f 6e 20 60 60 72 6f 75 74 65 72 31 60 60 20 2a 2a 61 6e 64 2a 2a 20 | .service.on.``router1``.**and**. |
e27c0 | 60 60 72 6f 75 74 65 72 32 60 60 00 4e 6f 77 20 74 68 65 20 6e 6f 74 65 64 20 70 75 62 6c 69 63 | ``router2``.Now.the.noted.public |
e27e0 | 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 65 20 6f | .keys.should.be.entered.on.the.o |
e2800 | 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 2e 00 4e 6f 77 20 77 65 20 61 64 64 20 74 68 65 20 | pposite.routers..Now.we.add.the. |
e2820 | 6f 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 63 6f 70 65 2c 20 61 64 61 70 74 20 74 6f 20 79 6f | option.to.the.scope,.adapt.to.yo |
e2840 | 75 72 20 73 65 74 75 70 00 4e 6f 77 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 | ur.setup.Now.we.need.to.specify. |
e2860 | 74 68 65 20 73 65 72 76 65 72 20 6e 65 74 77 6f 72 6b 20 73 65 74 74 69 6e 67 73 2e 20 49 6e 20 | the.server.network.settings..In. |
e2880 | 61 6c 6c 20 63 61 73 65 73 20 77 65 20 6e 65 65 64 20 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 | all.cases.we.need.to.specify.the |
e28a0 | 20 73 75 62 6e 65 74 20 66 6f 72 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 | .subnet.for.client.tunnel.endpoi |
e28c0 | 6e 74 73 2e 20 53 69 6e 63 65 20 77 65 20 77 61 6e 74 20 63 6c 69 65 6e 74 73 20 74 6f 20 61 63 | nts..Since.we.want.clients.to.ac |
e28e0 | 63 65 73 73 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 20 62 65 68 69 6e 64 20 6f | cess.a.specific.network.behind.o |
e2900 | 75 72 20 72 6f 75 74 65 72 2c 20 77 65 20 77 69 6c 6c 20 75 73 65 20 61 20 70 75 73 68 2d 72 6f | ur.router,.we.will.use.a.push-ro |
e2920 | 75 74 65 20 6f 70 74 69 6f 6e 20 66 6f 72 20 69 6e 73 74 61 6c 6c 69 6e 67 20 74 68 61 74 20 72 | ute.option.for.installing.that.r |
e2940 | 6f 75 74 65 20 6f 6e 20 63 6c 69 65 6e 74 73 2e 00 4e 6f 77 20 77 68 65 6e 20 63 6f 6e 6e 65 63 | oute.on.clients..Now.when.connec |
e2960 | 74 69 6e 67 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 66 69 72 73 74 20 62 65 20 61 73 6b 65 | ting.the.user.will.first.be.aske |
e2980 | 64 20 66 6f 72 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 74 68 65 6e 20 74 68 65 20 | d.for.the.password.and.then.the. |
e29a0 | 4f 54 50 20 6b 65 79 2e 00 4e 6f 77 20 79 6f 75 20 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 | OTP.key..Now.you.are.ready.to.se |
e29c0 | 74 75 70 20 49 50 73 65 63 2e 20 54 68 65 20 6b 65 79 20 70 6f 69 6e 74 73 3a 00 4e 6f 77 20 79 | tup.IPsec..The.key.points:.Now.y |
e29e0 | 6f 75 20 61 72 65 20 72 65 61 64 79 20 74 6f 20 73 65 74 75 70 20 49 50 73 65 63 2e 20 59 6f 75 | ou.are.ready.to.setup.IPsec..You |
e2a00 | 27 6c 6c 20 6e 65 65 64 20 74 6f 20 75 73 65 20 61 6e 20 49 44 20 69 6e 73 74 65 61 64 20 6f 66 | 'll.need.to.use.an.ID.instead.of |
e2a20 | 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 70 65 65 72 2e 00 4e 75 6d 62 65 72 20 6f 66 | .address.for.the.peer..Number.of |
e2a40 | 20 61 6e 74 65 6e 6e 61 73 20 6f 6e 20 74 68 69 73 20 63 61 72 64 00 4e 75 6d 62 65 72 20 6f 66 | .antennas.on.this.card.Number.of |
e2a60 | 20 62 69 74 73 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 76 34 20 61 64 64 72 65 73 73 20 74 6f 20 | .bits.of.client.IPv4.address.to. |
e2a80 | 70 61 73 73 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 | pass.when.sending.EDNS.Client.Su |
e2aa0 | 62 6e 65 74 20 61 64 64 72 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 4e 75 6d 62 65 72 | bnet.address.information..Number |
e2ac0 | 20 6f 66 20 6c 69 6e 65 73 20 74 6f 20 62 65 20 64 69 73 70 6c 61 79 65 64 2c 20 64 65 66 61 75 | .of.lines.to.be.displayed,.defau |
e2ae0 | 6c 74 20 31 30 00 4f 53 50 46 00 4f 53 50 46 20 53 52 20 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | lt.10.OSPF.OSPF.SR..Configuratio |
e2b00 | 6e 00 4f 53 50 46 20 69 73 20 61 20 77 69 64 65 6c 79 20 75 73 65 64 20 49 47 50 20 69 6e 20 6c | n.OSPF.is.a.widely.used.IGP.in.l |
e2b20 | 61 72 67 65 20 65 6e 74 65 72 70 72 69 73 65 20 6e 65 74 77 6f 72 6b 73 2e 00 4f 53 50 46 20 72 | arge.enterprise.networks..OSPF.r |
e2b40 | 6f 75 74 69 6e 67 20 64 65 76 69 63 65 73 20 6e 6f 72 6d 61 6c 6c 79 20 64 69 73 63 6f 76 65 72 | outing.devices.normally.discover |
e2b60 | 20 74 68 65 69 72 20 6e 65 69 67 68 62 6f 72 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 62 79 20 | .their.neighbors.dynamically.by. |
e2b80 | 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 74 68 65 20 62 72 6f 61 64 63 61 73 74 20 6f 72 20 6d 75 | listening.to.the.broadcast.or.mu |
e2ba0 | 6c 74 69 63 61 73 74 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 6e 65 74 | lticast.hello.packets.on.the.net |
e2bc0 | 77 6f 72 6b 2e 20 42 65 63 61 75 73 65 20 61 6e 20 4e 42 4d 41 20 6e 65 74 77 6f 72 6b 20 64 6f | work..Because.an.NBMA.network.do |
e2be0 | 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 62 72 6f 61 64 63 61 73 74 20 28 6f 72 20 6d 75 6c | es.not.support.broadcast.(or.mul |
e2c00 | 74 69 63 61 73 74 29 2c 20 74 68 65 20 64 65 76 69 63 65 20 63 61 6e 6e 6f 74 20 64 69 73 63 6f | ticast),.the.device.cannot.disco |
e2c20 | 76 65 72 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 2c 20 73 | ver.its.neighbors.dynamically,.s |
e2c40 | 6f 20 79 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 61 6c 6c 20 74 68 65 20 6e 65 69 | o.you.must.configure.all.the.nei |
e2c60 | 67 68 62 6f 72 73 20 73 74 61 74 69 63 61 6c 6c 79 2e 00 4f 53 50 46 76 32 20 28 49 50 76 34 29 | ghbors.statically..OSPFv2.(IPv4) |
e2c80 | 00 4f 53 50 46 76 33 20 28 49 50 76 36 29 00 4f 54 50 2d 6b 65 79 20 67 65 6e 65 72 61 74 69 6f | .OSPFv3.(IPv6).OTP-key.generatio |
e2ca0 | 6e 00 4f 66 66 6c 6f 61 64 69 6e 67 00 4f 66 66 73 65 74 20 6f 66 20 74 68 65 20 63 6c 69 65 6e | n.Offloading.Offset.of.the.clien |
e2cc0 | 74 27 73 20 73 75 62 6e 65 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 66 72 6f 6d 20 43 6f 6f 72 64 | t's.subnet.in.seconds.from.Coord |
e2ce0 | 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 20 28 55 54 43 29 00 4f 66 74 65 | inated.Universal.Time.(UTC).Ofte |
e2d00 | 6e 20 77 65 20 6e 65 65 64 20 74 6f 20 65 6d 62 65 64 20 6f 6e 65 20 70 6f 6c 69 63 79 20 69 6e | n.we.need.to.embed.one.policy.in |
e2d20 | 74 6f 20 61 6e 6f 74 68 65 72 20 6f 6e 65 2e 20 49 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 | to.another.one..It.is.possible.t |
e2d40 | 6f 20 64 6f 20 73 6f 20 6f 6e 20 63 6c 61 73 73 66 75 6c 20 70 6f 6c 69 63 69 65 73 2c 20 62 79 | o.do.so.on.classful.policies,.by |
e2d60 | 20 61 74 74 61 63 68 69 6e 67 20 61 20 6e 65 77 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 61 20 63 | .attaching.a.new.policy.into.a.c |
e2d80 | 6c 61 73 73 2e 20 46 6f 72 20 69 6e 73 74 61 6e 63 65 2c 20 79 6f 75 20 6d 69 67 68 74 20 77 61 | lass..For.instance,.you.might.wa |
e2da0 | 6e 74 20 74 6f 20 61 70 70 6c 79 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 69 65 73 20 74 | nt.to.apply.different.policies.t |
e2dc0 | 6f 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 20 6f 66 20 61 20 52 6f 75 | o.the.different.classes.of.a.Rou |
e2de0 | 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 | nd-Robin.policy.you.have.configu |
e2e00 | 72 65 64 2e 00 4f 66 74 65 6e 20 79 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 76 65 20 74 6f | red..Often.you.will.also.have.to |
e2e20 | 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 2a 64 65 66 61 75 6c 74 2a 20 74 72 61 66 66 69 | .configure.your.*default*.traffi |
e2e40 | 63 20 69 6e 20 74 68 65 20 73 61 6d 65 20 77 61 79 20 79 6f 75 20 64 6f 20 77 69 74 68 20 61 20 | c.in.the.same.way.you.do.with.a. |
e2e60 | 63 6c 61 73 73 2e 20 2a 44 65 66 61 75 6c 74 2a 20 63 61 6e 20 62 65 20 63 6f 6e 73 69 64 65 72 | class..*Default*.can.be.consider |
e2e80 | 65 64 20 61 20 63 6c 61 73 73 20 61 73 20 69 74 20 62 65 68 61 76 65 73 20 6c 69 6b 65 20 74 68 | ed.a.class.as.it.behaves.like.th |
e2ea0 | 61 74 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 61 6e 79 20 74 72 61 66 66 69 63 20 74 68 61 74 | at..It.contains.any.traffic.that |
e2ec0 | 20 64 69 64 20 6e 6f 74 20 6d 61 74 63 68 20 61 6e 79 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 | .did.not.match.any.of.the.define |
e2ee0 | 64 20 63 6c 61 73 73 65 73 2c 20 73 6f 20 69 74 20 69 73 20 6c 69 6b 65 20 61 6e 20 6f 70 65 6e | d.classes,.so.it.is.like.an.open |
e2f00 | 20 63 6c 61 73 73 2c 20 61 20 63 6c 61 73 73 20 77 69 74 68 6f 75 74 20 6d 61 74 63 68 69 6e 67 | .class,.a.class.without.matching |
e2f20 | 20 66 69 6c 74 65 72 73 2e 00 4f 6e 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 | .filters..On.active.router.run:. |
e2f40 | 4f 6e 20 62 6f 74 68 20 73 69 64 65 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 | On.both.sides,.you.need.to.gener |
e2f60 | 61 74 65 20 61 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 70 | ate.a.self-signed.certificate,.p |
e2f80 | 72 65 66 65 72 72 61 62 6c 79 20 75 73 69 6e 67 20 74 68 65 20 22 65 63 22 20 28 65 6c 6c 69 70 | referrably.using.the."ec".(ellip |
e2fa0 | 74 69 63 20 63 75 72 76 65 29 20 74 79 70 65 2e 20 59 6f 75 20 63 61 6e 20 67 65 6e 65 72 61 74 | tic.curve).type..You.can.generat |
e2fc0 | 65 20 74 68 65 6d 20 62 79 20 65 78 65 63 75 74 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 60 60 72 75 | e.them.by.executing.command.``ru |
e2fe0 | 6e 20 67 65 6e 65 72 61 74 65 20 70 6b 69 20 63 65 72 74 69 66 69 63 61 74 65 20 73 65 6c 66 2d | n.generate.pki.certificate.self- |
e3000 | 73 69 67 6e 65 64 20 69 6e 73 74 61 6c 6c 20 3c 6e 61 6d 65 3e 60 60 20 69 6e 20 74 68 65 20 63 | signed.install.<name>``.in.the.c |
e3020 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 4f 6e 63 65 20 74 68 65 20 63 6f 6d 6d | onfiguration.mode..Once.the.comm |
e3040 | 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 2c 20 69 74 20 77 69 6c 6c 20 61 64 64 20 74 68 65 | and.is.complete,.it.will.add.the |
e3060 | 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | .certificate.to.the.configuratio |
e3080 | 6e 20 73 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 60 60 70 6b 69 60 60 20 73 75 62 74 72 65 | n.session,.to.the.``pki``.subtre |
e30a0 | 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 72 65 76 69 65 77 20 74 68 65 20 70 72 6f 70 6f | e..You.can.then.review.the.propo |
e30c0 | 73 65 64 20 63 68 61 6e 67 65 73 20 61 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 6d 2e 00 4f 6e 20 | sed.changes.and.commit.them..On. |
e30e0 | 6c 6f 77 20 72 61 74 65 73 20 28 62 65 6c 6f 77 20 34 30 4d 62 69 74 29 20 79 6f 75 20 6d 61 79 | low.rates.(below.40Mbit).you.may |
e3100 | 20 77 61 6e 74 20 74 6f 20 74 75 6e 65 20 60 71 75 61 6e 74 75 6d 60 20 64 6f 77 6e 20 74 6f 20 | .want.to.tune.`quantum`.down.to. |
e3120 | 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 33 30 30 20 62 79 74 65 73 2e 00 4f 6e 20 6d 6f 73 | something.like.300.bytes..On.mos |
e3140 | 74 20 73 63 65 6e 61 72 69 6f 73 2c 20 74 68 65 72 65 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f 20 | t.scenarios,.there's.no.need.to. |
e3160 | 63 68 61 6e 67 65 20 73 70 65 63 69 66 69 63 20 70 61 72 61 6d 65 74 65 72 73 2c 20 61 6e 64 20 | change.specific.parameters,.and. |
e3180 | 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 65 | using.default.configuration.is.e |
e31a0 | 6e 6f 75 67 68 2e 20 42 75 74 20 74 68 65 72 65 20 61 72 65 20 63 61 73 65 73 20 77 65 72 65 20 | nough..But.there.are.cases.were. |
e31c0 | 65 78 74 72 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6e 65 65 64 65 64 2e 00 4f | extra.configuration.is.needed..O |
e31e0 | 6e 20 73 74 61 6e 64 62 79 20 72 6f 75 74 65 72 20 72 75 6e 3a 00 4f 6e 20 73 79 73 74 65 6d 73 | n.standby.router.run:.On.systems |
e3200 | 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 72 65 64 75 6e 64 61 6e 74 20 75 70 6c 69 6e 6b 73 | .with.multiple.redundant.uplinks |
e3220 | 20 61 6e 64 20 72 6f 75 74 65 73 2c 20 69 74 27 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f | .and.routes,.it's.a.good.idea.to |
e3240 | 20 75 73 65 20 61 20 64 65 64 69 63 61 74 65 64 20 61 64 64 72 65 73 73 20 66 6f 72 20 6d 61 6e | .use.a.dedicated.address.for.man |
e3260 | 61 67 65 6d 65 6e 74 20 61 6e 64 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | agement.and.dynamic.routing.prot |
e3280 | 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 65 72 2c 20 61 73 73 69 67 6e 69 6e 67 20 74 68 61 74 20 61 | ocols..However,.assigning.that.a |
e32a0 | 64 64 72 65 73 73 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 20 69 73 20 72 69 73 | ddress.to.a.physical.link.is.ris |
e32c0 | 6b 79 3a 20 69 66 20 74 68 61 74 20 6c 69 6e 6b 20 67 6f 65 73 20 64 6f 77 6e 2c 20 74 68 61 74 | ky:.if.that.link.goes.down,.that |
e32e0 | 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 69 6e 61 63 63 65 73 73 69 62 6c | .address.will.become.inaccessibl |
e3300 | 65 2e 20 41 20 63 6f 6d 6d 6f 6e 20 73 6f 6c 75 74 69 6f 6e 20 69 73 20 74 6f 20 61 73 73 69 67 | e..A.common.solution.is.to.assig |
e3320 | 6e 20 74 68 65 20 6d 61 6e 61 67 65 6d 65 6e 74 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 6c 6f | n.the.management.address.to.a.lo |
e3340 | 6f 70 62 61 63 6b 20 6f 72 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 | opback.or.a.dummy.interface.and. |
e3360 | 61 64 76 65 72 74 69 73 65 20 74 68 61 74 20 61 64 64 72 65 73 73 20 76 69 61 20 61 6c 6c 20 70 | advertise.that.address.via.all.p |
e3380 | 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 2c 20 73 6f 20 74 68 61 74 20 69 74 27 73 20 72 65 61 63 | hysical.links,.so.that.it's.reac |
e33a0 | 68 61 62 6c 65 20 74 68 72 6f 75 67 68 20 61 6e 79 20 6f 66 20 74 68 65 6d 2e 20 53 69 6e 63 65 | hable.through.any.of.them..Since |
e33c0 | 20 69 6e 20 4c 69 6e 75 78 2d 62 61 73 65 64 20 73 79 73 74 65 6d 73 2c 20 74 68 65 72 65 20 63 | .in.Linux-based.systems,.there.c |
e33e0 | 61 6e 20 62 65 20 6f 6e 6c 79 20 6f 6e 65 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 | an.be.only.one.loopback.interfac |
e3400 | 65 2c 20 69 74 27 73 20 62 65 74 74 65 72 20 74 6f 20 75 73 65 20 61 20 64 75 6d 6d 79 20 69 6e | e,.it's.better.to.use.a.dummy.in |
e3420 | 74 65 72 66 61 63 65 20 66 6f 72 20 74 68 61 74 20 70 75 72 70 6f 73 65 2c 20 73 69 6e 63 65 20 | terface.for.that.purpose,.since. |
e3440 | 74 68 65 79 20 63 61 6e 20 62 65 20 61 64 64 65 64 2c 20 72 65 6d 6f 76 65 64 2c 20 61 6e 64 20 | they.can.be.added,.removed,.and. |
e3460 | 74 61 6b 65 6e 20 75 70 20 61 6e 64 20 64 6f 77 6e 20 69 6e 64 65 70 65 6e 64 65 6e 74 6c 79 2e | taken.up.and.down.independently. |
e3480 | 00 4f 6e 20 74 68 65 20 4c 45 46 54 20 28 73 74 61 74 69 63 20 61 64 64 72 65 73 73 29 3a 00 4f | .On.the.LEFT.(static.address):.O |
e34a0 | 6e 20 74 68 65 20 4c 45 46 54 3a 00 4f 6e 20 74 68 65 20 52 49 47 48 54 20 28 64 79 6e 61 6d 69 | n.the.LEFT:.On.the.RIGHT.(dynami |
e34c0 | 63 20 61 64 64 72 65 73 73 29 3a 00 4f 6e 20 74 68 65 20 52 49 47 48 54 2c 20 73 65 74 75 70 20 | c.address):.On.the.RIGHT,.setup. |
e34e0 | 62 79 20 61 6e 61 6c 6f 67 79 20 61 6e 64 20 73 77 61 70 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 | by.analogy.and.swap.local.and.re |
e3500 | 6d 6f 74 65 20 61 64 64 72 65 73 73 65 73 2e 00 4f 6e 20 74 68 65 20 52 49 47 48 54 3a 00 4f 6e | mote.addresses..On.the.RIGHT:.On |
e3520 | 20 74 68 65 20 61 63 74 69 76 65 20 72 6f 75 74 65 72 2c 20 79 6f 75 20 73 68 6f 75 6c 64 20 68 | .the.active.router,.you.should.h |
e3540 | 61 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2d | ave.information.in.the.internal- |
e3560 | 63 61 63 68 65 20 6f 66 20 63 6f 6e 6e 74 72 61 63 6b 2d 73 79 6e 63 2e 20 54 68 65 20 73 61 6d | cache.of.conntrack-sync..The.sam |
e3580 | 65 20 63 75 72 72 65 6e 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6e 75 6d | e.current.active.connections.num |
e35a0 | 62 65 72 20 73 68 6f 75 6c 64 20 62 65 20 73 68 6f 77 6e 20 69 6e 20 74 68 65 20 65 78 74 65 72 | ber.should.be.shown.in.the.exter |
e35c0 | 6e 61 6c 2d 63 61 63 68 65 20 6f 66 20 74 68 65 20 73 74 61 6e 64 62 79 20 72 6f 75 74 65 72 00 | nal-cache.of.the.standby.router. |
e35e0 | 4f 6e 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 2c 20 77 65 20 6e 65 65 64 20 74 6f 20 73 65 74 | On.the.initiator,.we.need.to.set |
e3600 | 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 20 6f 70 74 69 6f 6e 20 73 6f 20 74 68 61 74 20 69 74 | .the.remote-id.option.so.that.it |
e3620 | 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 49 4b 45 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 | .can.identify.IKE.traffic.from.t |
e3640 | 68 65 20 72 65 73 70 6f 6e 64 65 72 20 63 6f 72 72 65 63 74 6c 79 2e 00 4f 6e 20 74 68 65 20 69 | he.responder.correctly..On.the.i |
e3660 | 6e 69 74 69 61 74 6f 72 2c 20 77 65 20 73 65 74 20 74 68 65 20 70 65 65 72 20 61 64 64 72 65 73 | nitiator,.we.set.the.peer.addres |
e3680 | 73 20 74 6f 20 69 74 73 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 2c 20 62 75 74 20 6f 6e 20 | s.to.its.public.address,.but.on. |
e36a0 | 74 68 65 20 72 65 73 70 6f 6e 64 65 72 20 77 65 20 6f 6e 6c 79 20 73 65 74 20 74 68 65 20 69 64 | the.responder.we.only.set.the.id |
e36c0 | 2e 00 4f 6e 20 74 68 65 20 6c 61 73 74 20 68 6f 70 20 72 6f 75 74 65 72 20 69 66 20 69 74 20 69 | ..On.the.last.hop.router.if.it.i |
e36e0 | 73 20 64 65 73 69 72 65 64 20 74 6f 20 6e 6f 74 20 73 77 69 74 63 68 20 6f 76 65 72 20 74 6f 20 | s.desired.to.not.switch.over.to. |
e3700 | 74 68 65 20 53 50 54 20 74 72 65 65 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 20 63 6f 6d 6d | the.SPT.tree.configure.this.comm |
e3720 | 61 6e 64 2e 00 4f 6e 20 74 68 65 20 72 65 73 70 6f 6e 64 65 72 2c 20 77 65 20 6e 65 65 64 20 74 | and..On.the.responder,.we.need.t |
e3740 | 6f 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 20 69 64 20 73 6f 20 74 68 61 74 20 69 6e 69 74 69 | o.set.the.local.id.so.that.initi |
e3760 | 61 74 6f 72 20 63 61 6e 20 6b 6e 6f 77 20 77 68 6f 27 73 20 74 61 6c 6b 69 6e 67 20 74 6f 20 69 | ator.can.know.who's.talking.to.i |
e3780 | 74 20 66 6f 72 20 74 68 65 20 70 6f 69 6e 74 20 23 33 20 74 6f 20 77 6f 72 6b 2e 00 4f 6e 63 65 | t.for.the.point.#3.to.work..Once |
e37a0 | 20 61 20 63 6c 61 73 73 20 68 61 73 20 61 20 66 69 6c 74 65 72 20 63 6f 6e 66 69 67 75 72 65 64 | .a.class.has.a.filter.configured |
e37c0 | 2c 20 79 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 68 61 76 65 20 74 6f 20 64 65 66 69 6e 65 20 77 | ,.you.will.also.have.to.define.w |
e37e0 | 68 61 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 6f 20 77 69 74 68 20 74 68 65 20 74 72 61 66 | hat.you.want.to.do.with.the.traf |
e3800 | 66 69 63 20 6f 66 20 74 68 61 74 20 63 6c 61 73 73 2c 20 77 68 61 74 20 73 70 65 63 69 66 69 63 | fic.of.that.class,.what.specific |
e3820 | 20 54 72 61 66 66 69 63 2d 43 6f 6e 74 72 6f 6c 20 74 72 65 61 74 6d 65 6e 74 20 79 6f 75 20 77 | .Traffic-Control.treatment.you.w |
e3840 | 61 6e 74 20 74 6f 20 67 69 76 65 20 69 74 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 64 69 | ant.to.give.it..You.will.have.di |
e3860 | 66 66 65 72 65 6e 74 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 64 65 70 65 6e 64 69 6e 67 20 | fferent.possibilities.depending. |
e3880 | 6f 6e 20 74 68 65 20 54 72 61 66 66 69 63 20 50 6f 6c 69 63 79 20 79 6f 75 20 61 72 65 20 63 6f | on.the.Traffic.Policy.you.are.co |
e38a0 | 6e 66 69 67 75 72 69 6e 67 2e 00 4f 6e 63 65 20 61 20 6e 65 69 67 68 62 6f 72 20 68 61 73 20 62 | nfiguring..Once.a.neighbor.has.b |
e38c0 | 65 65 6e 20 66 6f 75 6e 64 2c 20 74 68 65 20 65 6e 74 72 79 20 69 73 20 63 6f 6e 73 69 64 65 72 | een.found,.the.entry.is.consider |
e38e0 | 65 64 20 74 6f 20 62 65 20 76 61 6c 69 64 20 66 6f 72 20 61 74 20 6c 65 61 73 74 20 66 6f 72 20 | ed.to.be.valid.for.at.least.for. |
e3900 | 74 68 69 73 20 73 70 65 63 69 66 69 63 20 74 69 6d 65 2e 20 41 6e 20 65 6e 74 72 79 27 73 20 76 | this.specific.time..An.entry's.v |
e3920 | 61 6c 69 64 69 74 79 20 77 69 6c 6c 20 62 65 20 65 78 74 65 6e 64 65 64 20 69 66 20 69 74 20 72 | alidity.will.be.extended.if.it.r |
e3940 | 65 63 65 69 76 65 73 20 70 6f 73 69 74 69 76 65 20 66 65 65 64 62 61 63 6b 20 66 72 6f 6d 20 68 | eceives.positive.feedback.from.h |
e3960 | 69 67 68 65 72 20 6c 65 76 65 6c 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 4f 6e 63 65 20 61 20 72 6f | igher.level.protocols..Once.a.ro |
e3980 | 75 74 65 20 69 73 20 61 73 73 65 73 73 65 64 20 61 20 70 65 6e 61 6c 74 79 2c 20 74 68 65 20 70 | ute.is.assessed.a.penalty,.the.p |
e39a0 | 65 6e 61 6c 74 79 20 69 73 20 64 65 63 72 65 61 73 65 64 20 62 79 20 68 61 6c 66 20 65 61 63 68 | enalty.is.decreased.by.half.each |
e39c0 | 20 74 69 6d 65 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d | .time.a.predefined.amount.of.tim |
e39e0 | 65 20 65 6c 61 70 73 65 73 20 28 68 61 6c 66 2d 6c 69 66 65 2d 74 69 6d 65 29 2e 20 57 68 65 6e | e.elapses.(half-life-time)..When |
e3a00 | 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 69 65 73 20 66 61 6c 6c 20 | .the.accumulated.penalties.fall. |
e3a20 | 62 65 6c 6f 77 20 61 20 70 72 65 64 65 66 69 6e 65 64 20 74 68 72 65 73 68 6f 6c 64 20 28 72 65 | below.a.predefined.threshold.(re |
e3a40 | 75 73 65 2d 76 61 6c 75 65 29 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 75 6e 73 75 70 70 72 | use-value),.the.route.is.unsuppr |
e3a60 | 65 73 73 65 64 20 61 6e 64 20 61 64 64 65 64 20 62 61 63 6b 20 69 6e 74 6f 20 74 68 65 20 42 47 | essed.and.added.back.into.the.BG |
e3a80 | 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 4f 6e 63 65 20 61 20 74 72 61 66 66 69 63 2d | P.routing.table..Once.a.traffic- |
e3aa0 | 70 6f 6c 69 63 79 20 69 73 20 63 72 65 61 74 65 64 2c 20 79 6f 75 20 63 61 6e 20 61 70 70 6c 79 | policy.is.created,.you.can.apply |
e3ac0 | 20 69 74 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 3a 00 4f 6e 63 65 20 63 72 65 61 74 65 | .it.to.an.interface:.Once.create |
e3ae0 | 64 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 2c 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 | d.in.the.system,.Pseudo-Ethernet |
e3b00 | 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 72 65 66 65 72 65 6e 63 65 64 20 69 6e | .interfaces.can.be.referenced.in |
e3b20 | 20 74 68 65 20 65 78 61 63 74 20 73 61 6d 65 20 77 61 79 20 61 73 20 6f 74 68 65 72 20 45 74 68 | .the.exact.same.way.as.other.Eth |
e3b40 | 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 4e 6f 74 65 73 20 61 62 6f 75 74 20 75 73 | ernet.interfaces..Notes.about.us |
e3b60 | 69 6e 67 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 3a | ing.Pseudo-.Ethernet.interfaces: |
e3b80 | 00 4f 6e 63 65 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 73 20 63 6f 6e 66 69 67 75 | .Once.flow.accounting.is.configu |
e3ba0 | 72 65 64 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 73 20 69 74 20 70 72 6f 76 69 64 65 73 | red.on.an.interfaces.it.provides |
e3bc0 | 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 64 69 73 70 6c 61 79 20 63 61 70 74 75 72 65 64 | .the.ability.to.display.captured |
e3be0 | 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 | .network.traffic.information.for |
e3c00 | 20 61 6c 6c 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 4f 6e 63 65 | .all.configured.interfaces..Once |
e3c20 | 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 69 73 20 63 6f 6d 70 6c 65 74 65 64 2c 20 69 74 20 77 69 | .the.command.is.completed,.it.wi |
e3c40 | 6c 6c 20 61 64 64 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 63 6f | ll.add.the.certificate.to.the.co |
e3c60 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 65 73 73 69 6f 6e 2c 20 74 6f 20 74 68 65 20 70 6b 69 20 | nfiguration.session,.to.the.pki. |
e3c80 | 73 75 62 74 72 65 65 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 72 65 76 69 65 77 20 74 68 65 | subtree..You.can.then.review.the |
e3ca0 | 20 70 72 6f 70 6f 73 65 64 20 63 68 61 6e 67 65 73 20 61 6e 64 20 63 6f 6d 6d 69 74 20 74 68 65 | .proposed.changes.and.commit.the |
e3cc0 | 6d 2e 00 4f 6e 63 65 20 74 68 65 20 66 69 72 73 74 20 70 61 63 6b 65 74 20 6f 66 20 74 68 65 20 | m..Once.the.first.packet.of.the. |
e3ce0 | 66 6c 6f 77 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 74 | flow.successfully.goes.through.t |
e3d00 | 68 65 20 49 50 20 66 6f 72 77 61 72 64 69 6e 67 20 70 61 74 68 20 28 62 6c 61 63 6b 20 63 69 72 | he.IP.forwarding.path.(black.cir |
e3d20 | 63 6c 65 73 20 70 61 74 68 29 2c 20 66 72 6f 6d 20 74 68 65 20 73 65 63 6f 6e 64 20 70 61 63 6b | cles.path),.from.the.second.pack |
e3d40 | 65 74 20 6f 6e 2c 20 79 6f 75 20 6d 69 67 68 74 20 64 65 63 69 64 65 20 74 6f 20 6f 66 66 6c 6f | et.on,.you.might.decide.to.offlo |
e3d60 | 61 64 20 74 68 65 20 66 6c 6f 77 20 74 6f 20 74 68 65 20 66 6c 6f 77 74 61 62 6c 65 20 74 68 72 | ad.the.flow.to.the.flowtable.thr |
e3d80 | 6f 75 67 68 20 79 6f 75 72 20 72 75 6c 65 73 65 74 2e 20 54 68 65 20 66 6c 6f 77 74 61 62 6c 65 | ough.your.ruleset..The.flowtable |
e3da0 | 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 70 72 6f 76 69 64 65 73 20 61 20 72 75 6c 65 20 | .infrastructure.provides.a.rule. |
e3dc0 | 61 63 74 69 6f 6e 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 73 70 65 63 69 66 | action.that.allows.you.to.specif |
e3de0 | 79 20 77 68 65 6e 20 74 6f 20 61 64 64 20 61 20 66 6c 6f 77 20 74 6f 20 74 68 65 20 66 6c 6f 77 | y.when.to.add.a.flow.to.the.flow |
e3e00 | 74 61 62 6c 65 20 28 4f 6e 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 69 6e 67 2c 20 72 65 64 | table.(On.forward.filtering,.red |
e3e20 | 20 63 69 72 63 6c 65 20 6e 75 6d 62 65 72 20 36 29 00 4f 6e 63 65 20 74 68 65 20 6c 6f 63 61 6c | .circle.number.6).Once.the.local |
e3e40 | 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 20 60 60 73 65 74 20 73 65 72 76 69 63 65 20 70 | .tunnel.endpoint.``set.service.p |
e3e60 | 70 70 6f 65 2d 73 65 72 76 65 72 20 67 61 74 65 77 61 79 2d 61 64 64 72 65 73 73 20 27 31 30 2e | ppoe-server.gateway-address.'10. |
e3e80 | 31 2e 31 2e 32 27 60 60 20 68 61 73 20 62 65 65 6e 20 64 65 66 69 6e 65 64 2c 20 74 68 65 20 63 | 1.1.2'``.has.been.defined,.the.c |
e3ea0 | 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 64 65 66 69 | lient.IP.pool.can.be.either.defi |
e3ec0 | 6e 65 64 20 61 73 20 61 20 72 61 6e 67 65 20 6f 72 20 61 73 20 73 75 62 6e 65 74 20 75 73 69 6e | ned.as.a.range.or.as.subnet.usin |
e3ee0 | 67 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2e 20 49 66 20 74 68 65 20 43 49 44 52 20 6e 6f 74 | g.CIDR.notation..If.the.CIDR.not |
e3f00 | 61 74 69 6f 6e 20 69 73 20 75 73 65 64 2c 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 6e 65 74 73 20 | ation.is.used,.multiple.subnets. |
e3f20 | 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 68 69 63 68 20 61 72 65 20 75 73 65 64 20 73 65 71 75 | can.be.setup.which.are.used.sequ |
e3f40 | 65 6e 74 69 61 6c 6c 79 2e 00 4f 6e 63 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 | entially..Once.the.matching.rule |
e3f60 | 73 20 61 72 65 20 73 65 74 20 66 6f 72 20 61 20 63 6c 61 73 73 2c 20 79 6f 75 20 63 61 6e 20 73 | s.are.set.for.a.class,.you.can.s |
e3f80 | 74 61 72 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 68 6f 77 20 79 6f 75 20 77 61 6e 74 20 6d 61 | tart.configuring.how.you.want.ma |
e3fa0 | 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 68 61 76 65 2e 00 4f 6e 63 65 20 74 | tching.traffic.to.behave..Once.t |
e3fc0 | 68 65 20 75 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 74 68 65 20 75 73 65 72 20 73 | he.user.is.connected,.the.user.s |
e3fe0 | 65 73 73 69 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 74 20 6c 69 6d 69 74 73 20 61 | ession.is.using.the.set.limits.a |
e4000 | 6e 64 20 63 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 61 20 27 73 68 6f 77 20 70 70 | nd.can.be.displayed.via.'show.pp |
e4020 | 70 6f 65 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 27 2e 00 4f 6e 63 65 20 74 68 65 20 75 | poe-server.sessions'..Once.the.u |
e4040 | 73 65 72 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2c 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 | ser.is.connected,.the.user.sessi |
e4060 | 6f 6e 20 69 73 20 75 73 69 6e 67 20 74 68 65 20 73 65 74 20 6c 69 6d 69 74 73 20 61 6e 64 20 63 | on.is.using.the.set.limits.and.c |
e4080 | 61 6e 20 62 65 20 64 69 73 70 6c 61 79 65 64 20 76 69 61 20 60 60 73 68 6f 77 20 70 70 70 6f 65 | an.be.displayed.via.``show.pppoe |
e40a0 | 2d 73 65 72 76 65 72 20 73 65 73 73 69 6f 6e 73 60 60 2e 00 4f 6e 63 65 20 79 6f 75 20 63 6f 6d | -server.sessions``..Once.you.com |
e40c0 | 6d 69 74 20 74 68 65 20 61 62 6f 76 65 20 63 68 61 6e 67 65 73 20 79 6f 75 20 63 61 6e 20 63 72 | mit.the.above.changes.you.can.cr |
e40e0 | 65 61 74 65 20 61 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 69 6e 20 74 68 65 20 2f 63 6f 6e 66 69 | eate.a.config.file.in.the./confi |
e4100 | 67 2f 61 75 74 68 2f 6f 63 73 65 72 76 2f 63 6f 6e 66 69 67 2d 70 65 72 2d 75 73 65 72 20 64 69 | g/auth/ocserv/config-per-user.di |
e4120 | 72 65 63 74 6f 72 79 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 61 20 75 73 65 72 6e 61 6d 65 20 | rectory.that.matches.a.username. |
e4140 | 6f 66 20 61 20 75 73 65 72 20 79 6f 75 20 68 61 76 65 20 63 72 65 61 74 65 64 20 65 2e 67 2e 20 | of.a.user.you.have.created.e.g.. |
e4160 | 22 74 73 74 22 2e 20 4e 6f 77 20 77 68 65 6e 20 6c 6f 67 67 69 6e 67 20 69 6e 20 77 69 74 68 20 | "tst"..Now.when.logging.in.with. |
e4180 | 74 68 65 20 22 74 73 74 22 20 75 73 65 72 20 74 68 65 20 63 6f 6e 66 69 67 20 6f 70 74 69 6f 6e | the."tst".user.the.config.option |
e41a0 | 73 20 79 6f 75 20 73 65 74 20 69 6e 20 74 68 69 73 20 66 69 6c 65 20 77 69 6c 6c 20 62 65 20 6c | s.you.set.in.this.file.will.be.l |
e41c0 | 6f 61 64 65 64 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 76 65 20 61 6e 20 45 74 68 65 72 6e 65 74 | oaded..Once.you.have.an.Ethernet |
e41e0 | 20 64 65 76 69 63 65 20 63 6f 6e 6e 65 63 74 65 64 2c 20 69 2e 65 2e 20 60 65 74 68 30 60 2c 20 | .device.connected,.i.e..`eth0`,. |
e4200 | 74 68 65 6e 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 74 6f 20 6f 70 65 | then.you.can.configure.it.to.ope |
e4220 | 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 66 6f 72 20 79 6f 75 20 61 6e 64 20 | n.the.PPPoE.session.for.you.and. |
e4240 | 79 6f 75 72 20 44 53 4c 20 54 72 61 6e 73 63 65 69 76 65 72 20 28 4d 6f 64 65 6d 2f 52 6f 75 74 | your.DSL.Transceiver.(Modem/Rout |
e4260 | 65 72 29 20 6a 75 73 74 20 61 63 74 73 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 79 6f 75 72 20 | er).just.acts.to.translate.your. |
e4280 | 6d 65 73 73 61 67 65 73 20 69 6e 20 61 20 77 61 79 20 74 68 61 74 20 76 44 53 4c 2f 61 44 53 4c | messages.in.a.way.that.vDSL/aDSL |
e42a0 | 20 75 6e 64 65 72 73 74 61 6e 64 73 2e 00 4f 6e 63 65 20 79 6f 75 20 68 61 76 65 20 73 65 74 75 | .understands..Once.you.have.setu |
e42c0 | 70 20 79 6f 75 72 20 53 53 54 50 20 73 65 72 76 65 72 20 74 68 65 72 65 20 63 6f 6d 65 73 20 74 | p.your.SSTP.server.there.comes.t |
e42e0 | 68 65 20 74 69 6d 65 20 74 6f 20 64 6f 20 73 6f 6d 65 20 62 61 73 69 63 20 74 65 73 74 69 6e 67 | he.time.to.do.some.basic.testing |
e4300 | 2e 20 54 68 65 20 4c 69 6e 75 78 20 63 6c 69 65 6e 74 20 75 73 65 64 20 66 6f 72 20 74 65 73 74 | ..The.Linux.client.used.for.test |
e4320 | 69 6e 67 20 69 73 20 63 61 6c 6c 65 64 20 73 73 74 70 63 5f 2e 20 73 73 74 70 63 5f 20 72 65 71 | ing.is.called.sstpc_..sstpc_.req |
e4340 | 75 69 72 65 73 20 61 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 70 65 65 72 20 66 | uires.a.PPP.configuration/peer.f |
e4360 | 69 6c 65 2e 00 4f 6e 63 65 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 61 72 65 20 63 6f 6e 66 69 | ile..Once.your.routers.are.confi |
e4380 | 67 75 72 65 64 20 74 6f 20 72 65 6a 65 63 74 20 52 50 4b 49 2d 69 6e 76 61 6c 69 64 20 70 72 65 | gured.to.reject.RPKI-invalid.pre |
e43a0 | 66 69 78 65 73 2c 20 79 6f 75 20 63 61 6e 20 74 65 73 74 20 77 68 65 74 68 65 72 20 74 68 65 20 | fixes,.you.can.test.whether.the. |
e43c0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 77 6f 72 6b 69 6e 67 20 63 6f 72 72 65 63 74 | configuration.is.working.correct |
e43e0 | 6c 79 20 75 73 69 6e 67 20 43 6c 6f 75 64 66 6c 61 72 65 27 73 20 74 65 73 74 5f 20 77 65 62 73 | ly.using.Cloudflare's.test_.webs |
e4400 | 69 74 65 2e 20 4b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 68 61 74 20 69 6e 20 6f 72 64 65 72 20 | ite..Keep.in.mind.that.in.order. |
e4420 | 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 68 61 | for.this.to.work,.you.need.to.ha |
e4440 | 76 65 20 6e 6f 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 73 20 6f 72 20 61 6e 79 74 68 69 6e 67 | ve.no.default.routes.or.anything |
e4460 | 20 65 6c 73 65 20 74 68 61 74 20 77 6f 75 6c 64 20 73 74 69 6c 6c 20 73 65 6e 64 20 74 72 61 66 | .else.that.would.still.send.traf |
e4480 | 66 69 63 20 74 6f 20 52 50 4b 49 2d 69 6e 76 61 6c 69 64 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 | fic.to.RPKI-invalid.destinations |
e44a0 | 2e 00 4f 6e 63 65 20 79 6f 75 72 20 72 6f 75 74 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 | ..Once.your.routers.are.configur |
e44c0 | 65 64 20 74 6f 20 72 65 6a 65 63 74 20 52 50 4b 49 2d 69 6e 76 61 6c 69 64 20 70 72 65 66 69 78 | ed.to.reject.RPKI-invalid.prefix |
e44e0 | 65 73 2c 20 79 6f 75 20 63 61 6e 20 74 65 73 74 20 77 68 65 74 68 65 72 20 74 68 65 20 63 6f 6e | es,.you.can.test.whether.the.con |
e4500 | 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 77 6f 72 6b 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 | figuration.is.working.correctly. |
e4520 | 75 73 69 6e 67 20 74 68 65 20 60 52 49 50 45 20 4c 61 62 73 20 52 50 4b 49 20 54 65 73 74 60 5f | using.the.`RIPE.Labs.RPKI.Test`_ |
e4540 | 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 20 74 6f 6f 6c 2e 00 4f 6e 65 20 54 79 70 65 2d 33 20 73 | .experimental.tool..One.Type-3.s |
e4560 | 75 6d 6d 61 72 79 2d 4c 53 41 20 77 69 74 68 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 20 3c 45 2e | ummary-LSA.with.routing.info.<E. |
e4580 | 46 2e 47 2e 48 2f 4d 3e 20 69 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 6e 74 6f 20 62 61 63 6b 62 | F.G.H/M>.is.announced.into.backb |
e45a0 | 6f 6e 65 20 61 72 65 61 20 69 66 20 64 65 66 69 6e 65 64 20 61 72 65 61 20 63 6f 6e 74 61 69 6e | one.area.if.defined.area.contain |
e45c0 | 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 69 6e 74 72 61 2d 61 72 65 61 20 6e 65 74 77 6f 72 | s.at.least.one.intra-area.networ |
e45e0 | 6b 20 28 69 2e 65 2e 20 64 65 73 63 72 69 62 65 64 20 77 69 74 68 20 72 6f 75 74 65 72 2d 4c 53 | k.(i.e..described.with.router-LS |
e4600 | 41 20 6f 72 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 29 20 66 72 6f 6d 20 72 61 6e 67 65 20 3c 41 2e | A.or.network-LSA).from.range.<A. |
e4620 | 42 2e 43 2e 44 2f 4d 3e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e | B.C.D/M>..This.command.makes.sen |
e4640 | 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 4f 6e 65 20 69 6d 70 6c 69 63 69 74 20 65 6e 76 | se.in.ABR.only..One.implicit.env |
e4660 | 69 72 6f 6e 6d 65 6e 74 20 65 78 69 73 74 73 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 69 6d 70 6f | ironment.exists..One.of.the.impo |
e4680 | 72 74 61 6e 74 20 66 65 61 74 75 72 65 73 20 62 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 | rtant.features.built.on.top.of.t |
e46a0 | 68 65 20 4e 65 74 66 69 6c 74 65 72 20 66 72 61 6d 65 77 6f 72 6b 20 69 73 20 63 6f 6e 6e 65 63 | he.Netfilter.framework.is.connec |
e46c0 | 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 2e 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 | tion.tracking..Connection.tracki |
e46e0 | 6e 67 20 61 6c 6c 6f 77 73 20 74 68 65 20 6b 65 72 6e 65 6c 20 74 6f 20 6b 65 65 70 20 74 72 61 | ng.allows.the.kernel.to.keep.tra |
e4700 | 63 6b 20 6f 66 20 61 6c 6c 20 6c 6f 67 69 63 61 6c 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 | ck.of.all.logical.network.connec |
e4720 | 74 69 6f 6e 73 20 6f 72 20 73 65 73 73 69 6f 6e 73 2c 20 61 6e 64 20 74 68 65 72 65 62 79 20 72 | tions.or.sessions,.and.thereby.r |
e4740 | 65 6c 61 74 65 20 61 6c 6c 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 73 20 77 68 69 63 68 20 6d | elate.all.of.the.packets.which.m |
e4760 | 61 79 20 6d 61 6b 65 20 75 70 20 74 68 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 41 54 20 | ay.make.up.that.connection..NAT. |
e4780 | 72 65 6c 69 65 73 20 6f 6e 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 72 | relies.on.this.information.to.tr |
e47a0 | 61 6e 73 6c 61 74 65 20 61 6c 6c 20 72 65 6c 61 74 65 64 20 70 61 63 6b 65 74 73 20 69 6e 20 74 | anslate.all.related.packets.in.t |
e47c0 | 68 65 20 73 61 6d 65 20 77 61 79 2c 20 61 6e 64 20 69 70 74 61 62 6c 65 73 20 63 61 6e 20 75 73 | he.same.way,.and.iptables.can.us |
e47e0 | 65 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 61 63 74 20 61 73 20 61 20 73 | e.this.information.to.act.as.a.s |
e4800 | 74 61 74 65 66 75 6c 20 66 69 72 65 77 61 6c 6c 2e 00 4f 6e 65 20 6f 66 20 74 68 65 20 75 73 65 | tateful.firewall..One.of.the.use |
e4820 | 73 20 6f 66 20 46 61 69 72 20 51 75 65 75 65 20 6d 69 67 68 74 20 62 65 20 74 68 65 20 6d 69 74 | s.of.Fair.Queue.might.be.the.mit |
e4840 | 69 67 61 74 69 6f 6e 20 6f 66 20 44 65 6e 69 61 6c 20 6f 66 20 53 65 72 76 69 63 65 20 61 74 74 | igation.of.Denial.of.Service.att |
e4860 | 61 63 6b 73 2e 00 4f 6e 6c 79 20 38 30 32 2e 31 51 2d 74 61 67 67 65 64 20 70 61 63 6b 65 74 73 | acks..Only.802.1Q-tagged.packets |
e4880 | 20 61 72 65 20 61 63 63 65 70 74 65 64 20 6f 6e 20 45 74 68 65 72 6e 65 74 20 76 69 66 73 2e 00 | .are.accepted.on.Ethernet.vifs.. |
e48a0 | 4f 6e 6c 79 20 56 52 52 50 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 20 52 65 71 75 69 72 65 64 | Only.VRRP.is.supported..Required |
e48c0 | 20 6f 70 74 69 6f 6e 2e 00 4f 6e 6c 79 20 61 6c 6c 6f 77 20 63 65 72 74 61 69 6e 20 49 50 20 61 | .option..Only.allow.certain.IP.a |
e48e0 | 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 66 69 78 65 73 20 74 6f 20 61 63 63 65 73 73 20 74 | ddresses.or.prefixes.to.access.t |
e4900 | 68 65 20 68 74 74 70 73 20 77 65 62 73 65 72 76 65 72 2e 00 4f 6e 6c 79 20 69 6e 20 74 68 65 20 | he.https.webserver..Only.in.the. |
e4920 | 73 6f 75 72 63 65 20 63 72 69 74 65 72 69 61 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 | source.criteria,.you.can.specify |
e4940 | 20 61 20 6d 61 63 2d 61 64 64 72 65 73 73 2e 00 4f 6e 6c 79 20 6f 6e 65 20 53 52 47 42 20 61 6e | .a.mac-address..Only.one.SRGB.an |
e4960 | 64 20 64 65 66 61 75 6c 74 20 53 50 46 20 41 6c 67 6f 72 69 74 68 6d 20 69 73 20 73 75 70 70 6f | d.default.SPF.Algorithm.is.suppo |
e4980 | 72 74 65 64 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f | rted.Only.request.an.address.fro |
e49a0 | 6d 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 72 65 71 | m.the.DHCP.server.but.do.not.req |
e49c0 | 75 65 73 74 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 2e 00 4f 6e 6c 79 20 72 65 71 | uest.a.default.gateway..Only.req |
e49e0 | 75 65 73 74 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 50 50 50 6f 45 20 73 | uest.an.address.from.the.PPPoE.s |
e4a00 | 65 72 76 65 72 20 62 75 74 20 64 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 | erver.but.do.not.install.any.def |
e4a20 | 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f 6e 6c 79 20 72 65 71 75 65 73 74 20 61 6e 20 61 64 64 72 | ault.route..Only.request.an.addr |
e4a40 | 65 73 73 20 66 72 6f 6d 20 74 68 65 20 53 53 54 50 20 73 65 72 76 65 72 20 62 75 74 20 64 6f 20 | ess.from.the.SSTP.server.but.do. |
e4a60 | 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 6e 79 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 4f | not.install.any.default.route..O |
e4a80 | 6e 6c 79 20 74 68 65 20 74 79 70 65 20 28 60 60 73 73 68 2d 72 73 61 60 60 29 20 61 6e 64 20 74 | nly.the.type.(``ssh-rsa``).and.t |
e4aa0 | 68 65 20 6b 65 79 20 28 60 60 41 41 41 42 33 4e 2e 2e 2e 60 60 29 20 61 72 65 20 75 73 65 64 2e | he.key.(``AAAB3N...``).are.used. |
e4ac0 | 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 6b 65 79 20 77 69 6c 6c 20 75 73 75 61 6c 6c 79 20 | .Note.that.the.key.will.usually. |
e4ae0 | 62 65 20 73 65 76 65 72 61 6c 20 68 75 6e 64 72 65 64 20 63 68 61 72 61 63 74 65 72 73 20 6c 6f | be.several.hundred.characters.lo |
e4b00 | 6e 67 2c 20 61 6e 64 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 63 6f 70 79 20 61 6e | ng,.and.you.will.need.to.copy.an |
e4b20 | 64 20 70 61 73 74 65 20 69 74 2e 20 53 6f 6d 65 20 74 65 72 6d 69 6e 61 6c 20 65 6d 75 6c 61 74 | d.paste.it..Some.terminal.emulat |
e4b40 | 6f 72 73 20 6d 61 79 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 73 70 6c 69 74 20 74 68 69 73 20 | ors.may.accidentally.split.this. |
e4b60 | 6f 76 65 72 20 73 65 76 65 72 61 6c 20 6c 69 6e 65 73 2e 20 42 65 20 61 74 74 65 6e 74 69 76 65 | over.several.lines..Be.attentive |
e4b80 | 20 77 68 65 6e 20 79 6f 75 20 70 61 73 74 65 20 69 74 20 74 68 61 74 20 69 74 20 6f 6e 6c 79 20 | .when.you.paste.it.that.it.only. |
e4ba0 | 70 61 73 74 65 73 20 61 73 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 2e 20 54 68 65 20 74 68 69 | pastes.as.a.single.line..The.thi |
e4bc0 | 72 64 20 70 61 72 74 20 69 73 20 73 69 6d 70 6c 79 20 61 6e 20 69 64 65 6e 74 69 66 69 65 72 2c | rd.part.is.simply.an.identifier, |
e4be0 | 20 61 6e 64 20 69 73 20 66 6f 72 20 79 6f 75 72 20 6f 77 6e 20 72 65 66 65 72 65 6e 63 65 2e 00 | .and.is.for.your.own.reference.. |
e4c00 | 4f 6e 6c 79 20 77 6f 72 6b 73 20 77 69 74 68 20 61 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 77 | Only.works.with.a.VXLAN.device.w |
e4c20 | 69 74 68 20 65 78 74 65 72 6e 61 6c 20 66 6c 61 67 20 73 65 74 2e 00 4f 70 2d 6d 6f 64 65 20 63 | ith.external.flag.set..Op-mode.c |
e4c40 | 68 65 63 6b 20 76 69 72 74 75 61 6c 2d 73 65 72 76 65 72 20 73 74 61 74 75 73 00 4f 70 65 6e 43 | heck.virtual-server.status.OpenC |
e4c60 | 6f 6e 6e 65 63 74 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | onnect.OpenConnect.can.be.config |
e4c80 | 75 72 65 64 20 74 6f 20 73 65 6e 64 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 | ured.to.send.accounting.informat |
e4ca0 | 69 6f 6e 20 74 6f 20 61 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 74 6f 20 63 61 70 74 75 72 | ion.to.a.RADIUS.server.to.captur |
e4cc0 | 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 64 61 74 61 20 73 75 63 68 20 61 73 20 74 69 6d 65 | e.user.session.data.such.as.time |
e4ce0 | 20 6f 66 20 63 6f 6e 6e 65 63 74 2f 64 69 73 63 6f 6e 6e 65 63 74 2c 20 64 61 74 61 20 74 72 61 | .of.connect/disconnect,.data.tra |
e4d00 | 6e 73 66 65 72 72 65 64 2c 20 61 6e 64 20 73 6f 20 6f 6e 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 | nsferred,.and.so.on..OpenConnect |
e4d20 | 20 73 65 72 76 65 72 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 69 6e 20 | .server.matches.the.filename.in. |
e4d40 | 61 20 63 61 73 65 20 73 65 6e 73 69 74 69 76 65 20 6d 61 6e 6e 65 72 2c 20 6d 61 6b 65 20 73 75 | a.case.sensitive.manner,.make.su |
e4d60 | 72 65 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2f 67 72 6f 75 70 20 6e 61 6d 65 20 79 6f 75 20 63 | re.the.username/group.name.you.c |
e4d80 | 6f 6e 66 69 67 75 72 65 20 6d 61 74 63 68 65 73 20 74 68 65 20 66 69 6c 65 6e 61 6d 65 20 65 78 | onfigure.matches.the.filename.ex |
e4da0 | 61 63 74 6c 79 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 73 75 70 70 6f 72 74 73 20 61 20 73 75 | actly..OpenConnect.supports.a.su |
e4dc0 | 62 73 65 74 20 6f 66 20 69 74 27 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f | bset.of.it's.configuration.optio |
e4de0 | 6e 73 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 6f 6e 20 61 20 70 65 72 20 75 73 65 72 2f 67 | ns.to.be.applied.on.a.per.user/g |
e4e00 | 72 6f 75 70 20 62 61 73 69 73 2c 20 66 6f 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 75 | roup.basis,.for.configuration.pu |
e4e20 | 72 70 6f 73 65 73 20 77 65 20 72 65 66 65 72 20 74 6f 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e | rposes.we.refer.to.this.function |
e4e40 | 61 6c 69 74 79 20 61 73 20 22 49 64 65 6e 74 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 69 67 22 | ality.as."Identity.based.config" |
e4e60 | 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 60 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 53 65 72 | ..The.following.`OpenConnect.Ser |
e4e80 | 76 65 72 20 4d 61 6e 75 61 6c 20 3c 68 74 74 70 73 3a 2f 2f 6f 63 73 65 72 76 2e 67 69 74 6c 61 | ver.Manual.<https://ocserv.gitla |
e4ea0 | 62 2e 69 6f 2f 77 77 77 2f 6d 61 6e 75 61 6c 2e 68 74 6d 6c 23 3a 7e 3a 74 65 78 74 3d 43 6f 6e | b.io/www/manual.html#:~:text=Con |
e4ec0 | 66 69 67 75 72 61 74 69 6f 6e 25 32 30 66 69 6c 65 73 25 32 30 74 68 61 74 25 20 32 30 77 69 6c | figuration%20files%20that%.20wil |
e4ee0 | 6c 25 32 30 62 65 25 32 30 61 70 70 6c 69 65 64 25 32 30 70 65 72 25 32 30 75 73 65 72 25 32 30 | l%20be%20applied%20per%20user%20 |
e4f00 | 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 6f 72 25 30 41 25 32 33 25 32 30 70 65 72 25 32 30 67 72 | connection%20or%0A%23%20per%20gr |
e4f20 | 6f 75 70 3e 60 5f 20 6f 75 74 6c 69 6e 65 73 20 74 68 65 20 73 65 74 20 6f 66 20 63 6f 6e 66 69 | oup>`_.outlines.the.set.of.confi |
e4f40 | 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 61 6c 6c 6f 77 65 | guration.options.that.are.allowe |
e4f60 | 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 6c 65 76 65 72 61 67 65 64 20 74 6f 20 61 70 70 6c | d..This.can.be.leveraged.to.appl |
e4f80 | 79 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 73 20 6f 66 20 63 6f 6e 66 69 67 73 20 74 6f 20 64 | y.different.sets.of.configs.to.d |
e4fa0 | 69 66 66 65 72 65 6e 74 20 75 73 65 72 73 20 6f 72 20 67 72 6f 75 70 73 20 6f 66 20 75 73 65 72 | ifferent.users.or.groups.of.user |
e4fc0 | 73 2e 00 4f 70 65 6e 43 6f 6e 6e 65 63 74 2d 63 6f 6d 70 61 74 69 62 6c 65 20 73 65 72 76 65 72 | s..OpenConnect-compatible.server |
e4fe0 | 20 66 65 61 74 75 72 65 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 66 72 6f 6d 20 74 68 69 73 20 | .feature.is.available.from.this. |
e5000 | 72 65 6c 65 61 73 65 2e 20 4f 70 65 6e 63 6f 6e 6e 65 63 74 20 56 50 4e 20 73 75 70 70 6f 72 74 | release..Openconnect.VPN.support |
e5020 | 73 20 53 53 4c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 6e 64 20 6f 66 66 65 72 73 20 66 75 6c 6c | s.SSL.connection.and.offers.full |
e5040 | 20 6e 65 74 77 6f 72 6b 20 61 63 63 65 73 73 2e 20 53 53 4c 20 56 50 4e 20 6e 65 74 77 6f 72 6b | .network.access..SSL.VPN.network |
e5060 | 20 65 78 74 65 6e 73 69 6f 6e 20 63 6f 6e 6e 65 63 74 73 20 74 68 65 20 65 6e 64 2d 75 73 65 72 | .extension.connects.the.end-user |
e5080 | 20 73 79 73 74 65 6d 20 74 6f 20 74 68 65 20 63 6f 72 70 6f 72 61 74 65 20 6e 65 74 77 6f 72 6b | .system.to.the.corporate.network |
e50a0 | 20 77 69 74 68 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 73 20 62 61 73 65 64 20 6f 6e 6c 79 | .with.access.controls.based.only |
e50c0 | 20 6f 6e 20 6e 65 74 77 6f 72 6b 20 6c 61 79 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 | .on.network.layer.information,.s |
e50e0 | 75 63 68 20 61 73 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 6e | uch.as.destination.IP.address.an |
e5100 | 64 20 70 6f 72 74 20 6e 75 6d 62 65 72 2e 20 53 6f 2c 20 69 74 20 70 72 6f 76 69 64 65 73 20 73 | d.port.number..So,.it.provides.s |
e5120 | 61 66 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 66 6f 72 20 61 6c 6c 20 74 79 70 65 73 20 | afe.communication.for.all.types. |
e5140 | 6f 66 20 64 65 76 69 63 65 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 70 75 62 6c 69 63 20 | of.device.traffic.across.public. |
e5160 | 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 72 69 76 61 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 61 | networks.and.private.networks,.a |
e5180 | 6c 73 6f 20 65 6e 63 72 79 70 74 73 20 74 68 65 20 74 72 61 66 66 69 63 20 77 69 74 68 20 53 53 | lso.encrypts.the.traffic.with.SS |
e51a0 | 4c 20 70 72 6f 74 6f 63 6f 6c 2e 00 4f 70 65 6e 56 50 4e 00 4f 70 65 6e 56 50 4e 20 2a 2a 77 69 | L.protocol..OpenVPN.OpenVPN.**wi |
e51c0 | 6c 6c 20 6e 6f 74 2a 2a 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 61 74 65 20 72 6f | ll.not**.automatically.create.ro |
e51e0 | 75 74 65 73 20 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 20 66 6f 72 20 63 6c 69 65 6e 74 20 73 75 | utes.in.the.kernel.for.client.su |
e5200 | 62 6e 65 74 73 20 77 68 65 6e 20 74 68 65 79 20 63 6f 6e 6e 65 63 74 20 61 6e 64 20 77 69 6c 6c | bnets.when.they.connect.and.will |
e5220 | 20 6f 6e 6c 79 20 75 73 65 20 63 6c 69 65 6e 74 2d 73 75 62 6e 65 74 20 61 73 73 6f 63 69 61 74 | .only.use.client-subnet.associat |
e5240 | 69 6f 6e 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 73 6f 20 77 65 20 6e 65 65 64 20 74 6f 20 63 72 | ion.internally,.so.we.need.to.cr |
e5260 | 65 61 74 65 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 20 31 30 2e 32 33 2e 30 2e 30 2f 32 30 | eate.a.route.to.the.10.23.0.0/20 |
e5280 | 20 6e 65 74 77 6f 72 6b 20 6f 75 72 73 65 6c 76 65 73 3a 00 4f 70 65 6e 56 50 4e 20 44 43 4f 20 | .network.ourselves:.OpenVPN.DCO. |
e52a0 | 69 73 20 6e 6f 74 20 66 75 6c 6c 20 4f 70 65 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 73 75 70 | is.not.full.OpenVPN.features.sup |
e52c0 | 70 6f 72 74 65 64 20 2c 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 63 6f 6e 73 69 64 65 72 65 64 | ported.,.is.currently.considered |
e52e0 | 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 2e 20 46 75 72 74 68 65 72 6d 6f 72 65 2c 20 74 68 65 72 | .experimental..Furthermore,.ther |
e5300 | 65 20 61 72 65 20 63 65 72 74 61 69 6e 20 4f 70 65 6e 56 50 4e 20 66 65 61 74 75 72 65 73 20 61 | e.are.certain.OpenVPN.features.a |
e5320 | 6e 64 20 75 73 65 20 63 61 73 65 73 20 74 68 61 74 20 72 65 6d 61 69 6e 20 69 6e 63 6f 6d 70 61 | nd.use.cases.that.remain.incompa |
e5340 | 74 69 62 6c 65 20 77 69 74 68 20 44 43 4f 2e 20 54 6f 20 67 65 74 20 61 20 63 6f 6d 70 72 65 68 | tible.with.DCO..To.get.a.compreh |
e5360 | 65 6e 73 69 76 65 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 6f 66 20 74 68 65 20 6c 69 6d 69 | ensive.understanding.of.the.limi |
e5380 | 74 61 74 69 6f 6e 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 44 43 4f 2c 20 72 65 66 | tations.associated.with.DCO,.ref |
e53a0 | 65 72 20 74 6f 20 74 68 65 20 6c 69 73 74 20 6f 66 20 6b 6e 6f 77 6e 20 6c 69 6d 69 74 61 74 69 | er.to.the.list.of.known.limitati |
e53c0 | 6f 6e 73 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 00 4f 70 65 6e 56 50 | ons.in.the.documentation..OpenVP |
e53e0 | 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 00 4f 70 65 | N.Data.Channel.Offload.(DCO).Ope |
e5400 | 6e 56 50 4e 20 44 61 74 61 20 43 68 61 6e 6e 65 6c 20 4f 66 66 6c 6f 61 64 20 28 44 43 4f 29 20 | nVPN.Data.Channel.Offload.(DCO). |
e5420 | 65 6e 61 62 6c 65 73 20 73 69 67 6e 69 66 69 63 61 6e 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 | enables.significant.performance. |
e5440 | 65 6e 68 61 6e 63 65 6d 65 6e 74 20 69 6e 20 65 6e 63 72 79 70 74 65 64 20 4f 70 65 6e 56 50 4e | enhancement.in.encrypted.OpenVPN |
e5460 | 20 64 61 74 61 20 70 72 6f 63 65 73 73 69 6e 67 2e 20 42 79 20 6d 69 6e 69 6d 69 7a 69 6e 67 20 | .data.processing..By.minimizing. |
e5480 | 63 6f 6e 74 65 78 74 20 73 77 69 74 63 68 69 6e 67 20 66 6f 72 20 65 61 63 68 20 70 61 63 6b 65 | context.switching.for.each.packe |
e54a0 | 74 2c 20 44 43 4f 20 65 66 66 65 63 74 69 76 65 6c 79 20 72 65 64 75 63 65 73 20 6f 76 65 72 68 | t,.DCO.effectively.reduces.overh |
e54c0 | 65 61 64 2e 20 54 68 69 73 20 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 20 69 73 20 61 63 68 69 65 76 | ead..This.optimization.is.achiev |
e54e0 | 65 64 20 62 79 20 6b 65 65 70 69 6e 67 20 6d 6f 73 74 20 64 61 74 61 20 68 61 6e 64 6c 69 6e 67 | ed.by.keeping.most.data.handling |
e5500 | 20 74 61 73 6b 73 20 77 69 74 68 69 6e 20 74 68 65 20 6b 65 72 6e 65 6c 2c 20 61 76 6f 69 64 69 | .tasks.within.the.kernel,.avoidi |
e5520 | 6e 67 20 66 72 65 71 75 65 6e 74 20 73 77 69 74 63 68 65 73 20 62 65 74 77 65 65 6e 20 6b 65 72 | ng.frequent.switches.between.ker |
e5540 | 6e 65 6c 20 61 6e 64 20 75 73 65 72 20 73 70 61 63 65 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f | nel.and.user.space.for.encryptio |
e5560 | 6e 20 61 6e 64 20 70 61 63 6b 65 74 20 68 61 6e 64 6c 69 6e 67 2e 00 4f 70 65 6e 56 50 4e 20 61 | n.and.packet.handling..OpenVPN.a |
e5580 | 6c 6c 6f 77 73 20 66 6f 72 20 65 69 74 68 65 72 20 54 43 50 20 6f 72 20 55 44 50 2e 20 55 44 50 | llows.for.either.TCP.or.UDP..UDP |
e55a0 | 20 77 69 6c 6c 20 70 72 6f 76 69 64 65 20 74 68 65 20 6c 6f 77 65 73 74 20 6c 61 74 65 6e 63 79 | .will.provide.the.lowest.latency |
e55c0 | 2c 20 77 68 69 6c 65 20 54 43 50 20 77 69 6c 6c 20 77 6f 72 6b 20 62 65 74 74 65 72 20 66 6f 72 | ,.while.TCP.will.work.better.for |
e55e0 | 20 6c 6f 73 73 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 3b 20 67 65 6e 65 72 61 6c 6c 79 20 55 44 | .lossy.connections;.generally.UD |
e5600 | 50 20 69 73 20 70 72 65 66 65 72 72 65 64 20 77 68 65 6e 20 70 6f 73 73 69 62 6c 65 2e 00 4f 70 | P.is.preferred.when.possible..Op |
e5620 | 65 6e 56 50 4e 20 69 73 20 70 6f 70 75 6c 61 72 20 66 6f 72 20 63 6c 69 65 6e 74 2d 73 65 72 76 | enVPN.is.popular.for.client-serv |
e5640 | 65 72 20 73 65 74 75 70 73 2c 20 62 75 74 20 69 74 73 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | er.setups,.but.its.site-to-site. |
e5660 | 6d 6f 64 65 20 72 65 6d 61 69 6e 73 20 61 20 72 65 6c 61 74 69 76 65 6c 79 20 6f 62 73 63 75 72 | mode.remains.a.relatively.obscur |
e5680 | 65 20 66 65 61 74 75 72 65 2c 20 61 6e 64 20 6d 61 6e 79 20 72 6f 75 74 65 72 20 61 70 70 6c 69 | e.feature,.and.many.router.appli |
e56a0 | 61 6e 63 65 73 20 73 74 69 6c 6c 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 69 74 2e 20 48 6f | ances.still.don't.support.it..Ho |
e56c0 | 77 65 76 65 72 2c 20 69 74 27 73 20 76 65 72 79 20 75 73 65 66 75 6c 20 66 6f 72 20 71 75 69 63 | wever,.it's.very.useful.for.quic |
e56e0 | 6b 6c 79 20 73 65 74 74 69 6e 67 20 75 70 20 74 75 6e 6e 65 6c 73 20 62 65 74 77 65 65 6e 20 72 | kly.setting.up.tunnels.between.r |
e5700 | 6f 75 74 65 72 73 2e 00 4f 70 65 6e 56 50 4e 20 73 74 61 74 75 73 20 63 61 6e 20 62 65 20 76 65 | outers..OpenVPN.status.can.be.ve |
e5720 | 72 69 66 69 65 64 20 75 73 69 6e 67 20 74 68 65 20 60 73 68 6f 77 20 6f 70 65 6e 76 70 6e 60 20 | rified.using.the.`show.openvpn`. |
e5740 | 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 2e 20 53 65 65 20 74 68 65 20 62 75 | operational.commands..See.the.bu |
e5760 | 69 6c 74 2d 69 6e 20 68 65 6c 70 20 66 6f 72 20 61 20 63 6f 6d 70 6c 65 74 65 20 6c 69 73 74 20 | ilt-in.help.for.a.complete.list. |
e5780 | 6f 66 20 6f 70 74 69 6f 6e 73 2e 00 4f 70 65 6e 63 6f 6e 6e 65 63 74 20 43 6f 6e 66 69 67 75 72 | of.options..Openconnect.Configur |
e57a0 | 61 74 69 6f 6e 00 4f 70 65 72 61 74 69 6e 67 20 4d 6f 64 65 73 00 4f 70 65 72 61 74 69 6f 6e 00 | ation.Operating.Modes.Operation. |
e57c0 | 4f 70 65 72 61 74 69 6f 6e 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 69 6f 6e 20 4d 6f 64 | Operation.Commands.Operation.Mod |
e57e0 | 65 00 4f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 6f 66 20 77 69 72 65 6c 65 73 73 20 72 61 64 | e.Operation.mode.of.wireless.rad |
e5800 | 69 6f 2e 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 65 00 4f 70 65 72 61 74 69 6f 6e 2d 6d 6f 64 | io..Operation-mode.Operation-mod |
e5820 | 65 20 46 69 72 65 77 61 6c 6c 00 4f 70 65 72 61 74 69 6f 6e 61 6c 20 43 6f 6d 6d 61 6e 64 73 00 | e.Firewall.Operational.Commands. |
e5840 | 4f 70 65 72 61 74 69 6f 6e 61 6c 20 4d 6f 64 65 20 43 6f 6d 6d 61 6e 64 73 00 4f 70 65 72 61 74 | Operational.Mode.Commands.Operat |
e5860 | 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 00 4f 70 74 69 6f 6e 00 4f 70 74 69 6f 6e 20 34 33 20 | ional.commands.Option.Option.43. |
e5880 | 66 6f 72 20 55 6e 69 46 49 00 4f 70 74 69 6f 6e 20 64 65 73 63 72 69 70 74 69 6f 6e 00 4f 70 74 | for.UniFI.Option.description.Opt |
e58a0 | 69 6f 6e 20 6e 75 6d 62 65 72 00 4f 70 74 69 6f 6e 20 73 70 65 63 69 66 79 69 6e 67 20 74 68 65 | ion.number.Option.specifying.the |
e58c0 | 20 72 61 74 65 20 69 6e 20 77 68 69 63 68 20 77 65 27 6c 6c 20 61 73 6b 20 6f 75 72 20 6c 69 6e | .rate.in.which.we'll.ask.our.lin |
e58e0 | 6b 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 20 70 61 63 | k.partner.to.transmit.LACPDU.pac |
e5900 | 6b 65 74 73 20 69 6e 20 38 30 32 2e 33 61 64 20 6d 6f 64 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 | kets.in.802.3ad.mode..Option.to. |
e5920 | 64 69 73 61 62 6c 65 20 72 75 6c 65 2e 00 4f 70 74 69 6f 6e 20 74 6f 20 65 6e 61 62 6c 65 20 6f | disable.rule..Option.to.enable.o |
e5940 | 72 20 64 69 73 61 62 6c 65 20 6c 6f 67 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 2e 00 4f 70 74 | r.disable.log.matching.rule..Opt |
e5960 | 69 6f 6e 20 74 6f 20 6c 6f 67 20 70 61 63 6b 65 74 73 20 68 69 74 74 69 6e 67 20 64 65 66 61 75 | ion.to.log.packets.hitting.defau |
e5980 | 6c 74 2d 61 63 74 69 6f 6e 2e 00 4f 70 74 69 6f 6e 61 6c 00 4f 70 74 69 6f 6e 61 6c 20 43 6f 6e | lt-action..Optional.Optional.Con |
e59a0 | 66 69 67 75 72 61 74 69 6f 6e 00 4f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 70 72 | figuration.Optional.parameter.pr |
e59c0 | 65 66 69 78 2d 6c 69 73 74 20 63 61 6e 20 62 65 20 75 73 65 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 | efix-list.can.be.use.to.control. |
e59e0 | 77 68 69 63 68 20 67 72 6f 75 70 73 20 74 6f 20 73 77 69 74 63 68 20 6f 72 20 6e 6f 74 20 73 77 | which.groups.to.switch.or.not.sw |
e5a00 | 69 74 63 68 2e 20 49 66 20 61 20 67 72 6f 75 70 20 69 73 20 50 45 52 4d 49 54 20 61 73 20 70 65 | itch..If.a.group.is.PERMIT.as.pe |
e5a20 | 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 74 68 65 6e 20 74 68 65 20 53 50 54 20 | r.the.prefix-list,.then.the.SPT. |
e5a40 | 73 77 69 74 63 68 6f 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 68 61 70 70 65 6e 20 66 6f 72 20 69 | switchover.does.not.happen.for.i |
e5a60 | 74 20 61 6e 64 20 69 66 20 69 74 20 69 73 20 44 45 4e 59 2c 20 74 68 65 6e 20 74 68 65 20 53 50 | t.and.if.it.is.DENY,.then.the.SP |
e5a80 | 54 20 73 77 69 74 63 68 6f 76 65 72 20 68 61 70 70 65 6e 73 2e 00 4f 70 74 69 6f 6e 61 6c 2c 20 | T.switchover.happens..Optional,. |
e5aa0 | 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 65 6e 61 62 6c 65 20 75 70 6c 6f 61 64 73 2c 20 65 | if.you.want.to.enable.uploads,.e |
e5ac0 | 6c 73 65 20 54 46 54 50 20 73 65 72 76 65 72 20 77 69 6c 6c 20 61 63 74 20 61 73 20 61 20 72 65 | lse.TFTP.server.will.act.as.a.re |
e5ae0 | 61 64 2d 6f 6e 6c 79 20 73 65 72 76 65 72 2e 00 4f 70 74 69 6f 6e 61 6c 2f 64 65 66 61 75 6c 74 | ad-only.server..Optional/default |
e5b00 | 20 73 65 74 74 69 6e 67 73 00 4f 70 74 69 6f 6e 61 6c 6c 79 20 73 65 74 20 61 20 73 70 65 63 69 | .settings.Optionally.set.a.speci |
e5b20 | 66 69 63 20 73 74 61 74 69 63 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 | fic.static.IPv4.or.IPv6.address. |
e5b40 | 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 2e 20 54 68 69 73 20 61 64 64 72 65 73 73 20 | for.the.container..This.address. |
e5b60 | 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 74 68 65 20 6e 61 6d 65 64 20 6e 65 74 77 6f 72 6b | must.be.within.the.named.network |
e5b80 | 20 70 72 65 66 69 78 2e 00 4f 70 74 69 6f 6e 73 00 4f 70 74 69 6f 6e 73 20 28 47 6c 6f 62 61 6c | .prefix..Options.Options.(Global |
e5ba0 | 20 49 50 73 65 63 20 73 65 74 74 69 6e 67 73 29 20 41 74 74 72 69 62 75 74 65 73 00 4f 70 74 69 | .IPsec.settings).Attributes.Opti |
e5bc0 | 6f 6e 73 20 75 73 65 64 20 66 6f 72 20 71 75 65 75 65 20 74 61 72 67 65 74 2e 20 41 63 74 69 6f | ons.used.for.queue.target..Actio |
e5be0 | 6e 20 71 75 65 75 65 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 | n.queue.must.be.defined.to.use.t |
e5c00 | 68 69 73 20 73 65 74 74 69 6e 67 00 4f 72 20 2a 2a 62 69 6e 61 72 79 2a 2a 20 70 72 65 66 69 78 | his.setting.Or.**binary**.prefix |
e5c20 | 65 73 2e 00 4f 72 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 66 74 70 2c 20 60 64 65 6c 65 74 65 | es..Or,.for.example.ftp,.`delete |
e5c40 | 20 73 79 73 74 65 6d 20 63 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 73 20 66 74 70 60 2e 00 | .system.conntrack.modules.ftp`.. |
e5c60 | 4f 72 64 65 72 20 63 6f 6e 6e 74 72 61 63 6b 64 20 74 6f 20 72 65 71 75 65 73 74 20 61 20 63 6f | Order.conntrackd.to.request.a.co |
e5c80 | 6d 70 6c 65 74 65 20 63 6f 6e 6e 74 72 61 63 6b 20 74 61 62 6c 65 20 72 65 73 79 6e 63 20 61 67 | mplete.conntrack.table.resync.ag |
e5ca0 | 61 69 6e 73 74 20 74 68 65 20 6f 74 68 65 72 20 6e 6f 64 65 20 61 74 20 73 74 61 72 74 75 70 2e | ainst.the.other.node.at.startup. |
e5cc0 | 00 4f 72 69 67 69 6e 61 74 65 20 61 6e 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 28 74 79 70 65 2d | .Originate.an.AS-External.(type- |
e5ce0 | 35 29 20 4c 53 41 20 64 65 73 63 72 69 62 69 6e 67 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 | 5).LSA.describing.a.default.rout |
e5d00 | 65 20 69 6e 74 6f 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 2d 72 6f 75 74 69 6e 67 20 63 61 70 61 | e.into.all.external-routing.capa |
e5d20 | 62 6c 65 20 61 72 65 61 73 2c 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6d 65 74 72 | ble.areas,.of.the.specified.metr |
e5d40 | 69 63 20 61 6e 64 20 6d 65 74 72 69 63 20 74 79 70 65 2e 20 49 66 20 74 68 65 20 3a 63 66 67 63 | ic.and.metric.type..If.the.:cfgc |
e5d60 | 6d 64 3a 60 61 6c 77 61 79 73 60 20 6b 65 79 77 6f 72 64 20 69 73 20 67 69 76 65 6e 20 74 68 65 | md:`always`.keyword.is.given.the |
e5d80 | 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 61 6c 77 61 79 73 20 61 64 76 65 72 74 69 73 | n.the.default.is.always.advertis |
e5da0 | 65 64 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 68 65 72 65 20 69 73 20 6e 6f 20 64 65 66 61 75 6c | ed,.even.when.there.is.no.defaul |
e5dc0 | 74 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 | t.present.in.the.routing.table.. |
e5de0 | 54 68 65 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 72 6f 75 74 65 2d 6d 61 70 60 | The.argument.:cfgcmd:`route-map` |
e5e00 | 20 73 70 65 63 69 66 69 65 73 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 74 68 65 20 64 65 66 61 | .specifies.to.advertise.the.defa |
e5e20 | 75 6c 74 20 72 6f 75 74 65 20 69 66 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 69 73 20 73 61 | ult.route.if.the.route.map.is.sa |
e5e40 | 74 69 73 66 69 65 64 2e 00 4f 74 68 65 72 20 61 74 74 72 69 62 75 74 65 73 20 63 61 6e 20 62 65 | tisfied..Other.attributes.can.be |
e5e60 | 20 75 73 65 64 2c 20 62 75 74 20 74 68 65 79 20 68 61 76 65 20 74 6f 20 62 65 20 69 6e 20 6f 6e | .used,.but.they.have.to.be.in.on |
e5e80 | 65 20 6f 66 20 74 68 65 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 69 6e 20 2a 2f 75 73 72 2f 73 | e.of.the.dictionaries.in.*/usr/s |
e5ea0 | 68 61 72 65 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2a 2e 00 4f 75 72 20 63 6f 6e 66 | hare/accel-ppp/radius*..Our.conf |
e5ec0 | 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 20 62 65 3a 00 4f 75 72 | iguration.commands.would.be:.Our |
e5ee0 | 20 72 65 6d 6f 74 65 20 65 6e 64 20 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 20 66 6f 72 20 70 65 | .remote.end.of.the.tunnel.for.pe |
e5f00 | 65 72 20 60 74 6f 2d 77 67 30 32 60 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 61 74 20 31 39 32 | er.`to-wg02`.is.reachable.at.192 |
e5f20 | 2e 30 2e 32 2e 31 20 70 6f 72 74 20 35 31 38 32 30 00 4f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 | .0.2.1.port.51820.Outbound.traff |
e5f40 | 69 63 20 63 61 6e 20 62 65 20 62 61 6c 61 6e 63 65 64 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6f | ic.can.be.balanced.between.two.o |
e5f60 | 72 20 6d 6f 72 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 73 2e 20 49 66 20 61 | r.more.outbound.interfaces..If.a |
e5f80 | 20 70 61 74 68 20 66 61 69 6c 73 2c 20 74 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 | .path.fails,.traffic.is.balanced |
e5fa0 | 20 61 63 72 6f 73 73 20 74 68 65 20 72 65 6d 61 69 6e 69 6e 67 20 68 65 61 6c 74 68 79 20 70 61 | .across.the.remaining.healthy.pa |
e5fc0 | 74 68 73 2c 20 61 20 72 65 63 6f 76 65 72 65 64 20 70 61 74 68 20 69 73 20 61 75 74 6f 6d 61 74 | ths,.a.recovered.path.is.automat |
e5fe0 | 69 63 61 6c 6c 79 20 61 64 64 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 | ically.added.back.to.the.routing |
e6000 | 20 74 61 62 6c 65 20 61 6e 64 20 75 73 65 64 20 62 79 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 | .table.and.used.by.the.load.bala |
e6020 | 6e 63 65 72 2e 20 54 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 61 75 74 6f 6d 61 74 69 | ncer..The.load.balancer.automati |
e6040 | 63 61 6c 6c 79 20 61 64 64 73 20 72 6f 75 74 65 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 | cally.adds.routes.for.each.path. |
e6060 | 74 6f 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 61 6e 64 20 62 61 6c 61 6e 63 65 | to.the.routing.table.and.balance |
e6080 | 73 20 74 72 61 66 66 69 63 20 61 63 72 6f 73 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | s.traffic.across.the.configured. |
e60a0 | 69 6e 74 65 72 66 61 63 65 73 2c 20 64 65 74 65 72 6d 69 6e 65 64 20 62 79 20 69 6e 74 65 72 66 | interfaces,.determined.by.interf |
e60c0 | 61 63 65 20 68 65 61 6c 74 68 20 61 6e 64 20 77 65 69 67 68 74 2e 00 4f 75 74 67 6f 69 6e 67 20 | ace.health.and.weight..Outgoing. |
e60e0 | 74 72 61 66 66 69 63 20 69 73 20 62 61 6c 61 6e 63 65 64 20 69 6e 20 61 20 66 6c 6f 77 2d 62 61 | traffic.is.balanced.in.a.flow-ba |
e6100 | 73 65 64 20 6d 61 6e 6e 65 72 2e 20 41 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e | sed.manner..A.connection.trackin |
e6120 | 67 20 74 61 62 6c 65 20 69 73 20 75 73 65 64 20 74 6f 20 74 72 61 63 6b 20 66 6c 6f 77 73 20 62 | g.table.is.used.to.track.flows.b |
e6140 | 79 20 74 68 65 69 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 64 65 73 74 69 6e 61 74 | y.their.source.address,.destinat |
e6160 | 69 6f 6e 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 6f 72 74 2e 20 45 61 63 68 20 66 6c 6f 77 20 | ion.address.and.port..Each.flow. |
e6180 | 69 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 61 63 63 6f | is.assigned.to.an.interface.acco |
e61a0 | 72 64 69 6e 67 20 74 6f 20 74 68 65 20 64 65 66 69 6e 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 72 | rding.to.the.defined.balancing.r |
e61c0 | 75 6c 65 73 20 61 6e 64 20 73 75 62 73 65 71 75 65 6e 74 20 70 61 63 6b 65 74 73 20 61 72 65 20 | ules.and.subsequent.packets.are. |
e61e0 | 73 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2e | sent.through.the.same.interface. |
e6200 | 20 54 68 69 73 20 68 61 73 20 74 68 65 20 61 64 76 61 6e 74 61 67 65 20 74 68 61 74 20 70 61 63 | .This.has.the.advantage.that.pac |
e6220 | 6b 65 74 73 20 61 6c 77 61 79 73 20 61 72 72 69 76 65 20 69 6e 20 6f 72 64 65 72 20 69 66 20 6c | kets.always.arrive.in.order.if.l |
e6240 | 69 6e 6b 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 73 70 65 65 64 73 20 61 72 65 20 69 | inks.with.different.speeds.are.i |
e6260 | 6e 20 75 73 65 2e 00 4f 75 74 70 75 74 20 66 72 6f 6d 20 60 65 74 68 30 60 20 6e 65 74 77 6f 72 | n.use..Output.from.`eth0`.networ |
e6280 | 6b 20 69 6e 74 65 72 66 61 63 65 00 4f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 50 72 6f 6d 65 74 | k.interface.Output.plugin.Promet |
e62a0 | 68 65 75 73 20 63 6c 69 65 6e 74 00 4f 76 65 72 20 49 50 00 4f 76 65 72 20 49 50 53 65 63 2c 20 | heus.client.Over.IP.Over.IPSec,. |
e62c0 | 4c 32 20 56 50 4e 20 28 62 72 69 64 67 65 29 00 4f 76 65 72 20 55 44 50 00 4f 76 65 72 72 69 64 | L2.VPN.(bridge).Over.UDP.Overrid |
e62e0 | 65 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 27 73 20 6e 61 6d 65 2d 73 65 72 76 65 72 20 77 | e.static-mapping's.name-server.w |
e6300 | 69 74 68 20 61 20 63 75 73 74 6f 6d 20 6f 6e 65 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 73 65 | ith.a.custom.one.that.will.be.se |
e6320 | 6e 74 20 6f 6e 6c 79 20 74 6f 20 74 68 69 73 20 68 6f 73 74 2e 00 4f 76 65 72 76 69 65 77 00 4f | nt.only.to.this.host..Overview.O |
e6340 | 76 65 72 76 69 65 77 20 61 6e 64 20 62 61 73 69 63 20 63 6f 6e 63 65 70 74 73 00 4f 76 65 72 76 | verview.and.basic.concepts.Overv |
e6360 | 69 65 77 20 6f 66 20 64 65 66 69 6e 65 64 20 67 72 6f 75 70 73 2e 20 59 6f 75 20 73 65 65 20 74 | iew.of.defined.groups..You.see.t |
e6380 | 68 65 20 74 79 70 65 2c 20 74 68 65 20 6d 65 6d 62 65 72 73 2c 20 61 6e 64 20 77 68 65 72 65 20 | he.type,.the.members,.and.where. |
e63a0 | 74 68 65 20 67 72 6f 75 70 20 69 73 20 75 73 65 64 2e 00 50 42 52 20 6d 75 6c 74 69 70 6c 65 20 | the.group.is.used..PBR.multiple. |
e63c0 | 75 70 6c 69 6e 6b 73 00 50 43 31 20 69 73 20 69 6e 20 74 68 65 20 60 60 64 65 66 61 75 6c 74 60 | uplinks.PC1.is.in.the.``default` |
e63e0 | 60 20 56 52 46 20 61 6e 64 20 61 63 74 69 6e 67 20 61 73 20 65 2e 67 2e 20 61 20 22 66 69 6c 65 | `.VRF.and.acting.as.e.g..a."file |
e6400 | 73 65 72 76 65 72 22 00 50 43 32 20 69 73 20 69 6e 20 56 52 46 20 60 60 62 6c 75 65 60 60 20 77 | server".PC2.is.in.VRF.``blue``.w |
e6420 | 68 69 63 68 20 69 73 20 74 68 65 20 64 65 76 65 6c 6f 70 6d 65 6e 74 20 64 65 70 61 72 74 6d 65 | hich.is.the.development.departme |
e6440 | 6e 74 00 50 43 33 20 61 6e 64 20 50 43 34 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 | nt.PC3.and.PC4.are.connected.to. |
e6460 | 61 20 62 72 69 64 67 65 20 64 65 76 69 63 65 20 6f 6e 20 72 6f 75 74 65 72 20 60 60 52 31 60 60 | a.bridge.device.on.router.``R1`` |
e6480 | 20 77 68 69 63 68 20 69 73 20 69 6e 20 56 52 46 20 60 60 72 65 64 60 60 2e 20 53 61 79 20 74 68 | .which.is.in.VRF.``red``..Say.th |
e64a0 | 69 73 20 69 73 20 74 68 65 20 48 52 20 64 65 70 61 72 74 6d 65 6e 74 2e 00 50 43 34 20 68 61 73 | is.is.the.HR.department..PC4.has |
e64c0 | 20 49 50 20 31 30 2e 30 2e 30 2e 34 2f 32 34 20 61 6e 64 20 50 43 35 20 68 61 73 20 49 50 20 31 | .IP.10.0.0.4/24.and.PC5.has.IP.1 |
e64e0 | 30 2e 30 2e 30 2e 35 2f 32 34 2c 20 73 6f 20 74 68 65 79 20 62 65 6c 69 65 76 65 20 74 68 65 79 | 0.0.0.5/24,.so.they.believe.they |
e6500 | 20 61 72 65 20 69 6e 20 74 68 65 20 73 61 6d 65 20 62 72 6f 61 64 63 61 73 74 20 64 6f 6d 61 69 | .are.in.the.same.broadcast.domai |
e6520 | 6e 2e 00 50 43 35 20 72 65 63 65 69 76 65 73 20 74 68 65 20 70 69 6e 67 20 65 63 68 6f 2c 20 72 | n..PC5.receives.the.ping.echo,.r |
e6540 | 65 73 70 6f 6e 64 73 20 77 69 74 68 20 61 6e 20 65 63 68 6f 20 72 65 70 6c 79 20 74 68 61 74 20 | esponds.with.an.echo.reply.that. |
e6560 | 4c 65 61 66 33 20 72 65 63 65 69 76 65 73 20 61 6e 64 20 74 68 69 73 20 74 69 6d 65 20 66 6f 72 | Leaf3.receives.and.this.time.for |
e6580 | 77 61 72 64 73 20 74 6f 20 4c 65 61 66 32 27 73 20 75 6e 69 63 61 73 74 20 61 64 64 72 65 73 73 | wards.to.Leaf2's.unicast.address |
e65a0 | 20 64 69 72 65 63 74 6c 79 20 62 65 63 61 75 73 65 20 69 74 20 6c 65 61 72 6e 65 64 20 74 68 65 | .directly.because.it.learned.the |
e65c0 | 20 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 50 43 34 20 61 62 6f 76 65 2e 20 57 68 65 6e 20 4c 65 61 | .location.of.PC4.above..When.Lea |
e65e0 | 66 32 20 72 65 63 65 69 76 65 73 20 74 68 65 20 65 63 68 6f 20 72 65 70 6c 79 20 66 72 6f 6d 20 | f2.receives.the.echo.reply.from. |
e6600 | 50 43 35 20 69 74 20 73 65 65 73 20 74 68 61 74 20 69 74 20 63 61 6d 65 20 66 72 6f 6d 20 4c 65 | PC5.it.sees.that.it.came.from.Le |
e6620 | 61 66 33 20 61 6e 64 20 73 6f 20 72 65 6d 65 6d 62 65 72 73 20 74 68 61 74 20 50 43 35 20 69 73 | af3.and.so.remembers.that.PC5.is |
e6640 | 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 4c 65 61 66 33 2e 00 50 49 4d 20 28 50 72 6f 74 6f | .reachable.via.Leaf3..PIM.(Proto |
e6660 | 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 29 20 6d 75 73 74 20 | col.Independent.Multicast).must. |
e6680 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 | be.configured.in.every.interface |
e66a0 | 20 6f 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 | .of.every.participating.router.. |
e66c0 | 45 76 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 | Every.router.must.also.have.the. |
e66e0 | 6c 6f 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 | location.of.the.Rendevouz.Point. |
e6700 | 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 | manually.configured..Then,.unidi |
e6720 | 72 65 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 | rectional.shared.trees.rooted.at |
e6740 | 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 | .the.Rendevouz.Point.will.automa |
e6760 | 74 69 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 | tically.be.built.for.multicast.d |
e6780 | 69 73 74 72 69 62 75 74 69 6f 6e 2e 00 50 49 4d 20 61 6e 64 20 49 47 4d 50 00 50 49 4d 20 e2 80 | istribution..PIM.and.IGMP.PIM... |
e67a0 | 93 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 | ..Protocol.Independent.Multicast |
e67c0 | 00 50 49 4d 2d 53 4d 20 2d 20 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 00 50 49 4d 36 20 2d | .PIM-SM.-.PIM.Sparse.Mode.PIM6.- |
e67e0 | 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 | .Protocol.Independent.Multicast. |
e6800 | 66 6f 72 20 49 50 76 36 00 50 49 4d 76 36 20 28 50 72 6f 74 6f 63 6f 6c 20 49 6e 64 65 70 65 6e | for.IPv6.PIMv6.(Protocol.Indepen |
e6820 | 64 65 6e 74 20 4d 75 6c 74 69 63 61 73 74 20 66 6f 72 20 49 50 76 36 29 20 6d 75 73 74 20 62 65 | dent.Multicast.for.IPv6).must.be |
e6840 | 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 65 76 65 72 79 20 69 6e 74 65 72 66 61 63 65 20 6f | .configured.in.every.interface.o |
e6860 | 66 20 65 76 65 72 79 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 72 6f 75 74 65 72 2e 20 45 76 | f.every.participating.router..Ev |
e6880 | 65 72 79 20 72 6f 75 74 65 72 20 6d 75 73 74 20 61 6c 73 6f 20 68 61 76 65 20 74 68 65 20 6c 6f | ery.router.must.also.have.the.lo |
e68a0 | 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 6d 61 | cation.of.the.Rendevouz.Point.ma |
e68c0 | 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 54 68 65 6e 2c 20 75 6e 69 64 69 72 65 | nually.configured..Then,.unidire |
e68e0 | 63 74 69 6f 6e 61 6c 20 73 68 61 72 65 64 20 74 72 65 65 73 20 72 6f 6f 74 65 64 20 61 74 20 74 | ctional.shared.trees.rooted.at.t |
e6900 | 68 65 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 | he.Rendevouz.Point.will.automati |
e6920 | 63 61 6c 6c 79 20 62 65 20 62 75 69 6c 74 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 69 73 | cally.be.built.for.multicast.dis |
e6940 | 74 72 69 62 75 74 69 6f 6e 2e 00 50 4b 49 00 50 50 44 55 00 50 50 50 20 41 64 76 61 6e 63 65 64 | tribution..PKI.PPDU.PPP.Advanced |
e6960 | 20 4f 70 74 69 6f 6e 73 00 50 50 50 20 53 65 74 74 69 6e 67 73 00 50 50 50 6f 45 00 50 50 50 6f | .Options.PPP.Settings.PPPoE.PPPo |
e6980 | 45 20 53 65 72 76 65 72 00 50 50 50 6f 45 20 6f 70 74 69 6f 6e 73 00 50 50 54 50 2d 53 65 72 76 | E.Server.PPPoE.options.PPTP-Serv |
e69a0 | 65 72 00 50 61 63 6b 65 74 2d 62 61 73 65 64 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 6c 65 | er.Packet-based.balancing.can.le |
e69c0 | 61 64 20 74 6f 20 61 20 62 65 74 74 65 72 20 62 61 6c 61 6e 63 65 20 61 63 72 6f 73 73 20 69 6e | ad.to.a.better.balance.across.in |
e69e0 | 74 65 72 66 61 63 65 73 20 77 68 65 6e 20 6f 75 74 20 6f 66 20 6f 72 64 65 72 20 70 61 63 6b 65 | terfaces.when.out.of.order.packe |
e6a00 | 74 73 20 61 72 65 20 6e 6f 20 69 73 73 75 65 2e 20 50 65 72 2d 70 61 63 6b 65 74 2d 62 61 73 65 | ts.are.no.issue..Per-packet-base |
e6a20 | 64 20 62 61 6c 61 6e 63 69 6e 67 20 63 61 6e 20 62 65 20 73 65 74 20 66 6f 72 20 61 20 62 61 6c | d.balancing.can.be.set.for.a.bal |
e6a40 | 61 6e 63 69 6e 67 20 72 75 6c 65 20 77 69 74 68 3a 00 50 61 72 74 69 63 75 6c 61 72 6c 79 20 6c | ancing.rule.with:.Particularly.l |
e6a60 | 61 72 67 65 20 6e 65 74 77 6f 72 6b 73 20 6d 61 79 20 77 69 73 68 20 74 6f 20 72 75 6e 20 74 68 | arge.networks.may.wish.to.run.th |
e6a80 | 65 69 72 20 6f 77 6e 20 52 50 4b 49 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 | eir.own.RPKI.certificate.authori |
e6aa0 | 74 79 20 61 6e 64 20 70 75 62 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 20 69 6e 73 74 65 61 | ty.and.publication.server.instea |
e6ac0 | 64 20 6f 66 20 70 75 62 6c 69 73 68 69 6e 67 20 52 4f 41 73 20 76 69 61 20 74 68 65 69 72 20 52 | d.of.publishing.ROAs.via.their.R |
e6ae0 | 49 52 2e 20 54 68 69 73 20 69 73 20 61 20 73 75 62 6a 65 63 74 20 66 61 72 20 62 65 79 6f 6e 64 | IR..This.is.a.subject.far.beyond |
e6b00 | 20 74 68 65 20 73 63 6f 70 65 20 6f 66 20 56 79 4f 53 27 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f | .the.scope.of.VyOS'.documentatio |
e6b20 | 6e 2e 20 43 6f 6e 73 69 64 65 72 20 72 65 61 64 69 6e 67 20 61 62 6f 75 74 20 4b 72 69 6c 6c 5f | n..Consider.reading.about.Krill_ |
e6b40 | 20 69 66 20 74 68 69 73 20 69 73 20 61 20 72 61 62 62 69 74 20 68 6f 6c 65 20 79 6f 75 20 6e 65 | .if.this.is.a.rabbit.hole.you.ne |
e6b60 | 65 64 20 6f 72 20 65 73 70 65 63 69 61 6c 6c 79 20 77 61 6e 74 20 74 6f 20 64 69 76 65 20 64 6f | ed.or.especially.want.to.dive.do |
e6b80 | 77 6e 2e 00 50 61 73 73 20 61 64 64 72 65 73 73 20 6f 66 20 55 6e 69 66 69 20 63 6f 6e 74 72 6f | wn..Pass.address.of.Unifi.contro |
e6ba0 | 6c 6c 65 72 20 61 74 20 60 60 31 37 32 2e 31 36 2e 31 30 30 2e 31 60 60 20 74 6f 20 61 6c 6c 20 | ller.at.``172.16.100.1``.to.all. |
e6bc0 | 63 6c 69 65 6e 74 73 20 6f 66 20 60 60 4e 45 54 31 60 60 00 50 61 74 68 20 60 3c 63 6f 73 74 3e | clients.of.``NET1``.Path.`<cost> |
e6be0 | 60 20 76 61 6c 75 65 20 66 6f 72 20 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 | `.value.for.Spanning.Tree.Protoc |
e6c00 | 6f 6c 2e 20 45 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 61 20 62 72 69 64 67 65 20 63 | ol..Each.interface.in.a.bridge.c |
e6c20 | 6f 75 6c 64 20 68 61 76 65 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 70 65 65 64 20 61 6e 64 20 | ould.have.a.different.speed.and. |
e6c40 | 74 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 64 65 63 69 64 69 6e 67 | this.value.is.used.when.deciding |
e6c60 | 20 77 68 69 63 68 20 6c 69 6e 6b 20 74 6f 20 75 73 65 2e 20 46 61 73 74 65 72 20 69 6e 74 65 72 | .which.link.to.use..Faster.inter |
e6c80 | 66 61 63 65 73 20 73 68 6f 75 6c 64 20 68 61 76 65 20 6c 6f 77 65 72 20 63 6f 73 74 73 2e 00 50 | faces.should.have.lower.costs..P |
e6ca0 | 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 74 68 65 20 | ath.to.`<file>`.pointing.to.the. |
e6cc0 | 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 20 63 65 72 74 69 66 69 63 61 74 | certificate.authority.certificat |
e6ce0 | 65 2e 00 50 61 74 68 20 74 6f 20 60 3c 66 69 6c 65 3e 60 20 70 6f 69 6e 74 69 6e 67 20 74 6f 20 | e..Path.to.`<file>`.pointing.to. |
e6d00 | 74 68 65 20 73 65 72 76 65 72 73 20 63 65 72 74 69 66 69 63 61 74 65 20 28 70 75 62 6c 69 63 20 | the.servers.certificate.(public. |
e6d20 | 70 6f 72 74 69 6f 6e 29 2e 00 50 65 65 72 20 2d 20 50 65 65 72 00 50 65 65 72 20 47 72 6f 75 70 | portion)..Peer.-.Peer.Peer.Group |
e6d40 | 73 00 50 65 65 72 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e 00 50 65 65 72 | s.Peer.IP.address.to.match..Peer |
e6d60 | 20 50 61 72 61 6d 65 74 65 72 73 00 50 65 65 72 20 67 72 6f 75 70 73 20 61 72 65 20 75 73 65 64 | .Parameters.Peer.groups.are.used |
e6d80 | 20 74 6f 20 68 65 6c 70 20 69 6d 70 72 6f 76 65 20 73 63 61 6c 69 6e 67 20 62 79 20 67 65 6e 65 | .to.help.improve.scaling.by.gene |
e6da0 | 72 61 74 69 6e 67 20 74 68 65 20 73 61 6d 65 20 75 70 64 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 | rating.the.same.update.informati |
e6dc0 | 6f 6e 20 74 6f 20 61 6c 6c 20 6d 65 6d 62 65 72 73 20 6f 66 20 61 20 70 65 65 72 20 67 72 6f 75 | on.to.all.members.of.a.peer.grou |
e6de0 | 70 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 74 68 65 | p..Note.that.this.means.that.the |
e6e00 | 20 72 6f 75 74 65 73 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 61 20 6d 65 6d 62 65 72 20 6f 66 | .routes.generated.by.a.member.of |
e6e20 | 20 61 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 20 | .a.peer.group.will.be.sent.back. |
e6e40 | 74 6f 20 74 68 61 74 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 70 65 65 72 20 77 69 74 68 20 74 68 | to.that.originating.peer.with.th |
e6e60 | 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 65 72 20 61 74 74 72 69 62 75 74 | e.originator.identifier.attribut |
e6e80 | 65 20 73 65 74 20 74 6f 20 69 6e 64 69 63 61 74 65 64 20 74 68 65 20 6f 72 69 67 69 6e 61 74 69 | e.set.to.indicated.the.originati |
e6ea0 | 6e 67 20 70 65 65 72 2e 20 41 6c 6c 20 70 65 65 72 73 20 6e 6f 74 20 61 73 73 6f 63 69 61 74 65 | ng.peer..All.peers.not.associate |
e6ec0 | 64 20 77 69 74 68 20 61 20 73 70 65 63 69 66 69 63 20 70 65 65 72 20 67 72 6f 75 70 20 61 72 65 | d.with.a.specific.peer.group.are |
e6ee0 | 20 74 72 65 61 74 65 64 20 61 73 20 62 65 6c 6f 6e 67 69 6e 67 20 74 6f 20 61 20 64 65 66 61 75 | .treated.as.belonging.to.a.defau |
e6f00 | 6c 74 20 70 65 65 72 20 67 72 6f 75 70 2c 20 61 6e 64 20 77 69 6c 6c 20 73 68 61 72 65 20 75 70 | lt.peer.group,.and.will.share.up |
e6f20 | 64 61 74 65 73 2e 00 50 65 65 72 20 74 6f 20 73 65 6e 64 20 75 6e 69 63 61 73 74 20 55 44 50 20 | dates..Peer.to.send.unicast.UDP. |
e6f40 | 63 6f 6e 6e 74 72 61 63 6b 20 73 79 6e 63 20 65 6e 74 69 72 65 73 20 74 6f 2c 20 69 66 20 6e 6f | conntrack.sync.entires.to,.if.no |
e6f60 | 74 20 75 73 69 6e 67 20 4d 75 6c 74 69 63 61 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | t.using.Multicast.configuration. |
e6f80 | 66 72 6f 6d 20 61 62 6f 76 65 20 61 62 6f 76 65 2e 00 50 65 65 72 73 20 43 6f 6e 66 69 67 75 72 | from.above.above..Peers.Configur |
e6fa0 | 61 74 69 6f 6e 00 50 65 72 20 64 65 66 61 75 6c 74 20 56 79 4f 53 73 20 68 61 73 20 6d 69 6e 69 | ation.Per.default.VyOSs.has.mini |
e6fc0 | 6d 61 6c 20 73 79 73 6c 6f 67 20 6c 6f 67 67 69 6e 67 20 65 6e 61 62 6c 65 64 20 77 68 69 63 68 | mal.syslog.logging.enabled.which |
e6fe0 | 20 69 73 20 73 74 6f 72 65 64 20 61 6e 64 20 72 6f 74 61 74 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 | .is.stored.and.rotated.locally.. |
e7000 | 45 72 72 6f 72 73 20 77 69 6c 6c 20 62 65 20 61 6c 77 61 79 73 20 6c 6f 67 67 65 64 20 74 6f 20 | Errors.will.be.always.logged.to. |
e7020 | 61 20 6c 6f 63 61 6c 20 66 69 6c 65 2c 20 77 68 69 63 68 20 69 6e 63 6c 75 64 65 73 20 60 6c 6f | a.local.file,.which.includes.`lo |
e7040 | 63 61 6c 37 60 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 73 2c 20 65 6d 65 72 67 65 6e 63 79 20 | cal7`.error.messages,.emergency. |
e7060 | 6d 65 73 73 61 67 65 73 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 74 68 65 20 63 6f 6e | messages.will.be.sent.to.the.con |
e7080 | 73 6f 6c 65 2c 20 74 6f 6f 2e 00 50 65 72 20 64 65 66 61 75 6c 74 20 65 76 65 72 79 20 70 61 63 | sole,.too..Per.default.every.pac |
e70a0 | 6b 65 74 20 69 73 20 73 61 6d 70 6c 65 64 20 28 74 68 61 74 20 69 73 2c 20 74 68 65 20 73 61 6d | ket.is.sampled.(that.is,.the.sam |
e70c0 | 70 6c 69 6e 67 20 72 61 74 65 20 69 73 20 31 29 2e 00 50 65 72 20 64 65 66 61 75 6c 74 20 74 68 | pling.rate.is.1)..Per.default.th |
e70e0 | 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 72 65 70 6c 61 63 65 64 | e.user.session.is.being.replaced |
e7100 | 20 69 66 20 61 20 73 65 63 6f 6e 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 72 65 71 75 | .if.a.second.authentication.requ |
e7120 | 65 73 74 20 73 75 63 63 65 65 64 73 2e 20 53 75 63 68 20 73 65 73 73 69 6f 6e 20 72 65 71 75 65 | est.succeeds..Such.session.reque |
e7140 | 73 74 73 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 20 64 65 6e 69 65 64 20 6f 72 20 61 6c 6c 6f | sts.can.be.either.denied.or.allo |
e7160 | 77 65 64 20 65 6e 74 69 72 65 6c 79 2c 20 77 68 69 63 68 20 77 6f 75 6c 64 20 61 6c 6c 6f 77 20 | wed.entirely,.which.would.allow. |
e7180 | 6d 75 6c 74 69 70 6c 65 20 73 65 73 73 69 6f 6e 73 20 66 6f 72 20 61 20 75 73 65 72 20 69 6e 20 | multiple.sessions.for.a.user.in. |
e71a0 | 74 68 65 20 6c 61 74 74 65 72 20 63 61 73 65 2e 20 49 66 20 69 74 20 69 73 20 64 65 6e 69 65 64 | the.latter.case..If.it.is.denied |
e71c0 | 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 73 65 73 73 69 6f 6e 20 69 73 20 62 65 69 6e 67 20 72 65 | ,.the.second.session.is.being.re |
e71e0 | 6a 65 63 74 65 64 20 65 76 65 6e 20 69 66 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | jected.even.if.the.authenticatio |
e7200 | 6e 20 73 75 63 63 65 65 64 73 2c 20 74 68 65 20 75 73 65 72 20 68 61 73 20 74 6f 20 74 65 72 6d | n.succeeds,.the.user.has.to.term |
e7220 | 69 6e 61 74 65 20 69 74 73 20 66 69 72 73 74 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 63 61 6e 20 | inate.its.first.session.and.can. |
e7240 | 74 68 65 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 67 61 69 6e 2e 00 50 65 72 20 64 | then.authentication.again..Per.d |
e7260 | 65 66 61 75 6c 74 2c 20 69 6e 74 65 72 66 61 63 65 73 20 75 73 65 64 20 69 6e 20 61 20 6c 6f 61 | efault,.interfaces.used.in.a.loa |
e7280 | 64 20 62 61 6c 61 6e 63 69 6e 67 20 70 6f 6f 6c 20 72 65 70 6c 61 63 65 20 74 68 65 20 73 6f 75 | d.balancing.pool.replace.the.sou |
e72a0 | 72 63 65 20 49 50 20 6f 66 20 65 61 63 68 20 6f 75 74 67 6f 69 6e 67 20 70 61 63 6b 65 74 20 77 | rce.IP.of.each.outgoing.packet.w |
e72c0 | 69 74 68 20 69 74 73 20 6f 77 6e 20 61 64 64 72 65 73 73 20 74 6f 20 65 6e 73 75 72 65 20 74 68 | ith.its.own.address.to.ensure.th |
e72e0 | 61 74 20 72 65 70 6c 69 65 73 20 61 72 72 69 76 65 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e | at.replies.arrive.on.the.same.in |
e7300 | 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 77 6f 72 6b 73 20 74 68 72 6f 75 67 68 20 61 75 74 6f | terface..This.works.through.auto |
e7320 | 6d 61 74 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 73 6f 75 72 63 65 20 4e 41 54 20 28 | matically.generated.source.NAT.( |
e7340 | 53 4e 41 54 29 20 72 75 6c 65 73 2c 20 74 68 65 73 65 20 72 75 6c 65 73 20 61 72 65 20 6f 6e 6c | SNAT).rules,.these.rules.are.onl |
e7360 | 79 20 61 70 70 6c 69 65 64 20 74 6f 20 62 61 6c 61 6e 63 65 64 20 74 72 61 66 66 69 63 2e 20 49 | y.applied.to.balanced.traffic..I |
e7380 | 6e 20 63 61 73 65 73 20 77 68 65 72 65 20 74 68 69 73 20 62 65 68 61 76 69 6f 75 72 20 69 73 20 | n.cases.where.this.behaviour.is. |
e73a0 | 6e 6f 74 20 64 65 73 69 72 65 64 2c 20 74 68 65 20 61 75 74 6f 6d 61 74 69 63 20 67 65 6e 65 72 | not.desired,.the.automatic.gener |
e73c0 | 61 74 69 6f 6e 20 6f 66 20 53 4e 41 54 20 72 75 6c 65 73 20 63 61 6e 20 62 65 20 64 69 73 61 62 | ation.of.SNAT.rules.can.be.disab |
e73e0 | 6c 65 64 3a 00 50 65 72 66 6f 72 6d 20 4e 41 54 20 6c 6f 6f 6b 75 70 20 62 65 66 6f 72 65 20 61 | led:.Perform.NAT.lookup.before.a |
e7400 | 70 70 6c 79 69 6e 67 20 66 6c 6f 77 2d 69 73 6f 6c 61 74 69 6f 6e 20 72 75 6c 65 73 2e 00 50 65 | pplying.flow-isolation.rules..Pe |
e7420 | 72 66 6f 72 6d 61 6e 63 65 00 50 65 72 69 6f 64 69 63 61 6c 6c 79 2c 20 61 20 68 65 6c 6c 6f 20 | rformance.Periodically,.a.hello. |
e7440 | 70 61 63 6b 65 74 20 69 73 20 73 65 6e 74 20 6f 75 74 20 62 79 20 74 68 65 20 52 6f 6f 74 20 42 | packet.is.sent.out.by.the.Root.B |
e7460 | 72 69 64 67 65 20 61 6e 64 20 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 20 42 72 69 64 67 65 73 | ridge.and.the.Designated.Bridges |
e7480 | 2e 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 65 20 75 73 65 64 20 74 6f 20 63 6f 6d 6d | ..Hello.packets.are.used.to.comm |
e74a0 | 75 6e 69 63 61 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 74 6f | unicate.information.about.the.to |
e74c0 | 70 6f 6c 6f 67 79 20 74 68 72 6f 75 67 68 6f 75 74 20 74 68 65 20 65 6e 74 69 72 65 20 42 72 69 | pology.throughout.the.entire.Bri |
e74e0 | 64 67 65 64 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 2e 00 50 69 6e 67 20 63 6f | dged.Local.Area.Network..Ping.co |
e7500 | 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 69 6e 74 65 72 72 75 70 74 65 64 20 61 74 20 61 6e 79 20 | mmand.can.be.interrupted.at.any. |
e7520 | 67 69 76 65 6e 20 74 69 6d 65 20 75 73 69 6e 67 20 60 60 3c 43 74 72 6c 3e 2b 63 60 60 2e 20 41 | given.time.using.``<Ctrl>+c``..A |
e7540 | 20 62 72 69 65 66 20 73 74 61 74 69 73 74 69 63 20 69 73 20 73 68 6f 77 6e 20 61 66 74 65 72 77 | .brief.statistic.is.shown.afterw |
e7560 | 61 72 64 73 2e 00 50 69 6e 67 20 75 73 65 73 20 49 43 4d 50 20 70 72 6f 74 6f 63 6f 6c 27 73 20 | ards..Ping.uses.ICMP.protocol's. |
e7580 | 6d 61 6e 64 61 74 6f 72 79 20 45 43 48 4f 5f 52 45 51 55 45 53 54 20 64 61 74 61 67 72 61 6d 20 | mandatory.ECHO_REQUEST.datagram. |
e75a0 | 74 6f 20 65 6c 69 63 69 74 20 61 6e 20 49 43 4d 50 20 45 43 48 4f 5f 52 45 53 50 4f 4e 53 45 20 | to.elicit.an.ICMP.ECHO_RESPONSE. |
e75c0 | 66 72 6f 6d 20 61 20 68 6f 73 74 20 6f 72 20 67 61 74 65 77 61 79 2e 20 45 43 48 4f 5f 52 45 51 | from.a.host.or.gateway..ECHO_REQ |
e75e0 | 55 45 53 54 20 64 61 74 61 67 72 61 6d 73 20 28 70 69 6e 67 73 29 20 77 69 6c 6c 20 68 61 76 65 | UEST.datagrams.(pings).will.have |
e7600 | 20 61 6e 20 49 50 20 61 6e 64 20 49 43 4d 50 20 68 65 61 64 65 72 2c 20 66 6f 6c 6c 6f 77 65 64 | .an.IP.and.ICMP.header,.followed |
e7620 | 20 62 79 20 22 73 74 72 75 63 74 20 74 69 6d 65 76 61 6c 22 20 61 6e 64 20 61 6e 20 61 72 62 69 | .by."struct.timeval".and.an.arbi |
e7640 | 74 72 61 72 79 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 64 20 62 79 74 65 73 20 75 73 65 64 20 74 | trary.number.of.pad.bytes.used.t |
e7660 | 6f 20 66 69 6c 6c 20 6f 75 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 50 69 6e 67 69 6e 67 20 28 | o.fill.out.the.packet..Pinging.( |
e7680 | 49 50 76 36 29 20 74 68 65 20 6f 74 68 65 72 20 68 6f 73 74 20 61 6e 64 20 69 6e 74 65 72 63 65 | IPv6).the.other.host.and.interce |
e76a0 | 70 74 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 20 60 60 65 74 68 31 60 60 20 77 69 | pting.the.traffic.in.``eth1``.wi |
e76c0 | 6c 6c 20 73 68 6f 77 20 79 6f 75 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 69 73 20 65 6e 63 72 79 | ll.show.you.the.content.is.encry |
e76e0 | 70 74 65 64 2e 00 50 6c 61 63 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 67 69 76 65 6e 20 56 | pted..Place.interface.in.given.V |
e7700 | 52 46 20 69 6e 73 74 61 6e 63 65 2e 00 50 6c 61 79 20 61 6e 20 61 75 64 69 62 6c 65 20 62 65 65 | RF.instance..Play.an.audible.bee |
e7720 | 70 20 74 6f 20 74 68 65 20 73 79 73 74 65 6d 20 73 70 65 61 6b 65 72 20 77 68 65 6e 20 73 79 73 | p.to.the.system.speaker.when.sys |
e7740 | 74 65 6d 20 69 73 20 72 65 61 64 79 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 64 | tem.is.ready..Please.be.aware,.d |
e7760 | 75 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 68 | ue.to.an.upstream.bug,.config.ch |
e7780 | 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 70 | anges/commits.will.restart.the.p |
e77a0 | 70 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 6e | pp.daemon.and.will.reset.existin |
e77c0 | 67 20 49 50 6f 45 20 73 65 73 73 69 6f 6e 73 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 | g.IPoE.sessions,.in.order.to.bec |
e77e0 | 6f 6d 65 20 65 66 66 65 63 74 69 76 65 2e 00 50 6c 65 61 73 65 20 62 65 20 61 77 61 72 65 2c 20 | ome.effective..Please.be.aware,. |
e7800 | 64 75 65 20 74 6f 20 61 6e 20 75 70 73 74 72 65 61 6d 20 62 75 67 2c 20 63 6f 6e 66 69 67 20 63 | due.to.an.upstream.bug,.config.c |
e7820 | 68 61 6e 67 65 73 2f 63 6f 6d 6d 69 74 73 20 77 69 6c 6c 20 72 65 73 74 61 72 74 20 74 68 65 20 | hanges/commits.will.restart.the. |
e7840 | 70 70 70 20 64 61 65 6d 6f 6e 20 61 6e 64 20 77 69 6c 6c 20 72 65 73 65 74 20 65 78 69 73 74 69 | ppp.daemon.and.will.reset.existi |
e7860 | 6e 67 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 63 6f 6e 6e 65 63 | ng.PPPoE.connections.from.connec |
e7880 | 74 65 64 20 75 73 65 72 73 2c 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 65 66 | ted.users,.in.order.to.become.ef |
e78a0 | 66 65 63 74 69 76 65 2e 00 50 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 | fective..Please.refer.to.the.:re |
e78c0 | 66 3a 60 69 70 73 65 63 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 | f:`ipsec`.documentation.for.the. |
e78e0 | 69 6e 64 69 76 69 64 75 61 6c 20 49 50 53 65 63 20 72 65 6c 61 74 65 64 20 6f 70 74 69 6f 6e 73 | individual.IPSec.related.options |
e7900 | 2e 00 50 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 3a 72 65 66 3a 60 74 75 6e 6e | ..Please.refer.to.the.:ref:`tunn |
e7920 | 65 6c 2d 69 6e 74 65 72 66 61 63 65 60 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 | el-interface`.documentation.for. |
e7940 | 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c 20 74 75 6e 6e 65 6c 20 72 65 6c 61 74 65 64 20 6f 70 | the.individual.tunnel.related.op |
e7960 | 74 69 6f 6e 73 2e 00 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 3a 72 65 66 3a 60 64 68 63 70 | tions..Please.see.the.:ref:`dhcp |
e7980 | 2d 64 6e 73 2d 71 75 69 63 6b 2d 73 74 61 72 74 60 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e | -dns-quick-start`.configuration. |
e79a0 | 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 3a 72 65 66 3a | .Please.take.a.look.at.the.:ref: |
e79c0 | 60 76 79 6f 73 61 70 69 60 20 70 61 67 65 20 66 6f 72 20 61 6e 20 64 65 74 61 69 6c 65 64 20 68 | `vyosapi`.page.for.an.detailed.h |
e79e0 | 6f 77 2d 74 6f 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 | ow-to..Please.take.a.look.at.the |
e7a00 | 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 47 75 69 64 65 20 66 6f 72 20 6f 75 72 20 3a 72 65 66 | .Contributing.Guide.for.our.:ref |
e7a20 | 3a 60 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 60 2e 00 50 6c 65 61 73 65 20 74 61 6b 65 20 61 20 | :`documentation`..Please.take.a. |
e7a40 | 6c 6f 6f 6b 20 69 6e 20 74 68 65 20 41 75 74 6f 6d 61 74 69 6f 6e 20 73 65 63 74 69 6f 6e 20 74 | look.in.the.Automation.section.t |
e7a60 | 6f 20 66 69 6e 64 20 73 6f 6d 65 20 75 73 65 66 75 6c 6c 20 45 78 61 6d 70 6c 65 73 2e 00 50 6c | o.find.some.usefull.Examples..Pl |
e7a80 | 65 61 73 65 2c 20 72 65 66 65 72 20 74 6f 20 61 70 70 72 6f 70 69 61 74 65 20 73 65 63 74 69 6f | ease,.refer.to.appropiate.sectio |
e7aa0 | 6e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 | n.for.more.information.about.fir |
e7ac0 | 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 50 6c 65 61 73 65 2c 20 72 65 66 | ewall.configuration:.Please,.ref |
e7ae0 | 65 72 20 74 6f 20 61 70 70 72 6f 70 72 69 61 74 65 20 73 65 63 74 69 6f 6e 20 66 6f 72 20 6d 6f | er.to.appropriate.section.for.mo |
e7b00 | 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 66 69 72 65 77 61 6c 6c 20 63 6f | re.information.about.firewall.co |
e7b20 | 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 50 6f 6c 69 63 69 65 73 20 61 72 65 20 75 73 65 64 20 66 | nfiguration:.Policies.are.used.f |
e7b40 | 6f 72 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 74 72 61 66 66 69 63 20 6d 61 6e 61 67 65 6d | or.filtering.and.traffic.managem |
e7b60 | 65 6e 74 2e 20 57 69 74 68 20 70 6f 6c 69 63 69 65 73 2c 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 | ent..With.policies,.network.admi |
e7b80 | 6e 69 73 74 72 61 74 6f 72 73 20 63 6f 75 6c 64 20 66 69 6c 74 65 72 20 61 6e 64 20 74 72 65 61 | nistrators.could.filter.and.trea |
e7ba0 | 74 20 74 72 61 66 66 69 63 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 6e 65 65 | t.traffic.according.to.their.nee |
e7bc0 | 64 73 2e 00 50 6f 6c 69 63 69 65 73 20 66 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 61 | ds..Policies.for.local.traffic.a |
e7be0 | 72 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 50 6f 6c 69 | re.defined.in.this.section..Poli |
e7c00 | 63 69 65 73 2c 20 69 6e 20 56 79 4f 53 2c 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 75 | cies,.in.VyOS,.are.implemented.u |
e7c20 | 73 69 6e 67 20 46 52 52 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 72 6f 75 74 65 20 6d 61 70 | sing.FRR.filtering.and.route.map |
e7c40 | 73 2e 20 44 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 46 52 52 20 63 | s..Detailed.information.of.FRR.c |
e7c60 | 6f 75 6c 64 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 66 72 72 | ould.be.found.in.http://docs.frr |
e7c80 | 6f 75 74 69 6e 67 2e 6f 72 67 2f 00 50 6f 6c 69 63 79 00 50 6f 6c 69 63 79 20 53 65 63 74 69 6f | outing.org/.Policy.Policy.Sectio |
e7ca0 | 6e 73 00 50 6f 6c 69 63 79 20 66 6f 72 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 73 00 50 | ns.Policy.for.checking.targets.P |
e7cc0 | 6f 6c 69 63 79 20 74 6f 20 74 72 61 63 6b 20 70 72 65 76 69 6f 75 73 6c 79 20 65 73 74 61 62 6c | olicy.to.track.previously.establ |
e7ce0 | 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 | ished.connections..Policy-Based. |
e7d00 | 52 6f 75 74 69 6e 67 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 49 53 50 20 75 70 6c 69 6e 6b | Routing.with.multiple.ISP.uplink |
e7d20 | 73 20 28 73 6f 75 72 63 65 20 2e 2f 64 72 61 77 2e 69 6f 2f 70 62 72 5f 65 78 61 6d 70 6c 65 5f | s.(source../draw.io/pbr_example_ |
e7d40 | 31 2e 64 72 61 77 69 6f 29 00 50 6f 72 74 20 47 72 6f 75 70 73 00 50 6f 72 74 20 4d 69 72 72 6f | 1.drawio).Port.Groups.Port.Mirro |
e7d60 | 72 20 28 53 50 41 4e 29 00 50 6f 72 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 | r.(SPAN).Port.for.Dynamic.Author |
e7d80 | 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 | ization.Extension.server.(DM/CoA |
e7da0 | 29 00 50 6f 72 74 20 6e 61 6d 65 20 61 6e 64 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 6f 72 74 | ).Port.name.and.description.Port |
e7dc0 | 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 64 65 66 61 | .number.used.by.connection,.defa |
e7de0 | 75 6c 74 20 69 73 20 60 60 39 32 37 33 60 60 00 50 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 | ult.is.``9273``.Port.number.used |
e7e00 | 20 62 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 50 6f 72 74 20 74 6f 20 6c 69 73 74 65 6e 20 66 | .by.connection..Port.to.listen.f |
e7e20 | 6f 72 20 48 54 54 50 53 20 72 65 71 75 65 73 74 73 3b 20 64 65 66 61 75 6c 74 20 34 34 33 00 50 | or.HTTPS.requests;.default.443.P |
e7e40 | 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 72 65 | ortions.of.the.network.which.are |
e7e60 | 20 56 4c 41 4e 2d 61 77 61 72 65 20 28 69 2e 65 2e 2c 20 49 45 45 45 20 38 30 32 2e 31 71 5f 20 | .VLAN-aware.(i.e.,.IEEE.802.1q_. |
e7e80 | 63 6f 6e 66 6f 72 6d 61 6e 74 29 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 56 4c 41 4e 20 74 61 67 | conformant).can.include.VLAN.tag |
e7ea0 | 73 2e 20 57 68 65 6e 20 61 20 66 72 61 6d 65 20 65 6e 74 65 72 73 20 74 68 65 20 56 4c 41 4e 2d | s..When.a.frame.enters.the.VLAN- |
e7ec0 | 61 77 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 61 20 | aware.portion.of.the.network,.a. |
e7ee0 | 74 61 67 20 69 73 20 61 64 64 65 64 20 74 6f 20 72 65 70 72 65 73 65 6e 74 20 74 68 65 20 56 4c | tag.is.added.to.represent.the.VL |
e7f00 | 41 4e 20 6d 65 6d 62 65 72 73 68 69 70 2e 20 45 61 63 68 20 66 72 61 6d 65 20 6d 75 73 74 20 62 | AN.membership..Each.frame.must.b |
e7f20 | 65 20 64 69 73 74 69 6e 67 75 69 73 68 61 62 6c 65 20 61 73 20 62 65 69 6e 67 20 77 69 74 68 69 | e.distinguishable.as.being.withi |
e7f40 | 6e 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 56 4c 41 4e 2e 20 41 20 66 72 61 6d 65 20 69 6e 20 74 | n.exactly.one.VLAN..A.frame.in.t |
e7f60 | 68 65 20 56 4c 41 4e 2d 61 77 61 72 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 | he.VLAN-aware.portion.of.the.net |
e7f80 | 77 6f 72 6b 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 61 20 56 4c 41 | work.that.does.not.contain.a.VLA |
e7fa0 | 4e 20 74 61 67 20 69 73 20 61 73 73 75 6d 65 64 20 74 6f 20 62 65 20 66 6c 6f 77 69 6e 67 20 6f | N.tag.is.assumed.to.be.flowing.o |
e7fc0 | 6e 20 74 68 65 20 6e 61 74 69 76 65 20 56 4c 41 4e 2e 00 50 72 65 2d 73 68 61 72 65 64 20 6b 65 | n.the.native.VLAN..Pre-shared.ke |
e7fe0 | 79 73 00 50 72 65 63 65 64 65 6e 63 65 00 50 72 65 65 6d 70 74 69 6f 6e 00 50 72 65 66 65 72 20 | ys.Precedence.Preemption.Prefer. |
e8000 | 61 20 73 70 65 63 69 66 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 72 6f 75 74 | a.specific.routing.protocol.rout |
e8020 | 65 73 20 6f 76 65 72 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | es.over.another.routing.protocol |
e8040 | 20 72 75 6e 6e 69 6e 67 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2e 00 50 72 65 | .running.on.the.same.router..Pre |
e8060 | 66 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 6f 75 74 | fer.higher.local.preference.rout |
e8080 | 65 73 20 74 6f 20 6c 6f 77 65 72 2e 00 50 72 65 66 65 72 20 68 69 67 68 65 72 20 6c 6f 63 61 6c | es.to.lower..Prefer.higher.local |
e80a0 | 20 77 65 69 67 68 74 20 72 6f 75 74 65 73 20 74 6f 20 6c 6f 77 65 72 20 72 6f 75 74 65 73 2e 00 | .weight.routes.to.lower.routes.. |
e80c0 | 50 72 65 66 65 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 28 73 74 61 74 69 63 73 2c 20 61 67 | Prefer.local.routes.(statics,.ag |
e80e0 | 67 72 65 67 61 74 65 73 2c 20 72 65 64 69 73 74 72 69 62 75 74 65 64 29 20 74 6f 20 72 65 63 65 | gregates,.redistributed).to.rece |
e8100 | 69 76 65 64 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 73 68 6f 72 74 65 73 74 20 68 6f 70 | ived.routes..Prefer.shortest.hop |
e8120 | 2d 63 6f 75 6e 74 20 41 53 5f 50 41 54 48 73 2e 00 50 72 65 66 65 72 20 74 68 65 20 6c 6f 77 65 | -count.AS_PATHs..Prefer.the.lowe |
e8140 | 73 74 20 6f 72 69 67 69 6e 20 74 79 70 65 20 72 6f 75 74 65 2e 20 54 68 61 74 20 69 73 2c 20 70 | st.origin.type.route..That.is,.p |
e8160 | 72 65 66 65 72 20 49 47 50 20 6f 72 69 67 69 6e 20 72 6f 75 74 65 73 20 74 6f 20 45 47 50 2c 20 | refer.IGP.origin.routes.to.EGP,. |
e8180 | 74 6f 20 49 6e 63 6f 6d 70 6c 65 74 65 20 72 6f 75 74 65 73 2e 00 50 72 65 66 65 72 20 74 68 65 | to.Incomplete.routes..Prefer.the |
e81a0 | 20 72 6f 75 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 61 6e 20 65 78 74 65 72 6e 61 6c | .route.received.from.an.external |
e81c0 | 2c 20 65 42 47 50 20 70 65 65 72 20 6f 76 65 72 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 | ,.eBGP.peer.over.routes.received |
e81e0 | 20 66 72 6f 6d 20 6f 74 68 65 72 20 74 79 70 65 73 20 6f 66 20 70 65 65 72 73 2e 00 50 72 65 66 | .from.other.types.of.peers..Pref |
e8200 | 65 72 20 74 68 65 20 72 6f 75 74 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 | er.the.route.received.from.the.p |
e8220 | 65 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 72 20 74 72 61 6e 73 70 6f 72 74 20 6c 61 | eer.with.the.higher.transport.la |
e8240 | 79 65 72 20 61 64 64 72 65 73 73 2c 20 61 73 20 61 20 6c 61 73 74 2d 72 65 73 6f 72 74 20 74 69 | yer.address,.as.a.last-resort.ti |
e8260 | 65 2d 62 72 65 61 6b 65 72 2e 00 50 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 | e-breaker..Prefer.the.route.with |
e8280 | 20 74 68 65 20 6c 6f 77 65 72 20 49 47 50 20 63 6f 73 74 2e 00 50 72 65 66 65 72 20 74 68 65 20 | .the.lower.IGP.cost..Prefer.the. |
e82a0 | 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 6f 77 65 73 74 20 60 72 6f 75 74 65 72 2d 49 44 | route.with.the.lowest.`router-ID |
e82c0 | 60 2e 20 49 66 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 61 6e 20 60 4f 52 49 47 49 4e 41 54 | `..If.the.route.has.an.`ORIGINAT |
e82e0 | 4f 52 5f 49 44 60 20 61 74 74 72 69 62 75 74 65 2c 20 74 68 72 6f 75 67 68 20 69 42 47 50 20 72 | OR_ID`.attribute,.through.iBGP.r |
e8300 | 65 66 6c 65 63 74 69 6f 6e 2c 20 74 68 65 6e 20 74 68 61 74 20 72 6f 75 74 65 72 20 49 44 20 69 | eflection,.then.that.router.ID.i |
e8320 | 73 20 75 73 65 64 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 60 72 6f 75 74 65 72 2d 49 44 | s.used,.otherwise.the.`router-ID |
e8340 | 60 20 6f 66 20 74 68 65 20 70 65 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 72 65 63 65 | `.of.the.peer.the.route.was.rece |
e8360 | 69 76 65 64 20 66 72 6f 6d 20 69 73 20 75 73 65 64 2e 00 50 72 65 66 65 72 65 6e 63 65 20 61 73 | ived.from.is.used..Preference.as |
e8380 | 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 72 | sociated.with.the.default.router |
e83a0 | 00 50 72 65 66 69 78 20 43 6f 6e 76 65 72 73 69 6f 6e 00 50 72 65 66 69 78 20 44 65 6c 65 67 61 | .Prefix.Conversion.Prefix.Delega |
e83c0 | 74 69 6f 6e 00 50 72 65 66 69 78 20 4c 69 73 74 20 50 6f 6c 69 63 79 00 50 72 65 66 69 78 20 4c | tion.Prefix.List.Policy.Prefix.L |
e83e0 | 69 73 74 73 00 50 72 65 66 69 78 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 | ists.Prefix.can.not.be.used.for. |
e8400 | 6f 6e 2d 6c 69 6e 6b 20 64 65 74 65 72 6d 69 6e 61 74 69 6f 6e 00 50 72 65 66 69 78 20 63 61 6e | on-link.determination.Prefix.can |
e8420 | 20 6e 6f 74 20 62 65 20 75 73 65 64 20 66 6f 72 20 73 74 61 74 65 6c 65 73 73 20 61 64 64 72 65 | .not.be.used.for.stateless.addre |
e8440 | 73 73 20 61 75 74 6f 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 50 72 65 66 69 78 20 66 69 6c | ss.auto-configuration.Prefix.fil |
e8460 | 74 65 72 69 6e 67 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 6e 67 20 70 72 65 66 69 78 2d | tering.can.be.done.using.prefix- |
e8480 | 6c 69 73 74 20 61 6e 64 20 70 72 65 66 69 78 2d 6c 69 73 74 36 2e 00 50 72 65 66 69 78 20 6c 65 | list.and.prefix-list6..Prefix.le |
e84a0 | 6e 67 74 68 20 69 6e 20 69 6e 74 65 72 66 61 63 65 20 6d 75 73 74 20 62 65 20 65 71 75 61 6c 20 | ngth.in.interface.must.be.equal. |
e84c0 | 6f 72 20 62 69 67 67 65 72 20 28 69 2e 65 2e 20 73 6d 61 6c 6c 65 72 20 6e 65 74 77 6f 72 6b 29 | or.bigger.(i.e..smaller.network) |
e84e0 | 20 74 68 61 6e 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 69 6e 20 6e 65 74 77 6f 72 6b 20 73 | .than.prefix.length.in.network.s |
e8500 | 74 61 74 65 6d 65 6e 74 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 73 74 61 74 65 6d 65 6e 74 20 | tatement..For.example.statement. |
e8520 | 61 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 65 6e 61 62 6c 65 20 6f 73 70 66 20 6f 6e 20 69 6e 74 | above.doesn't.enable.ospf.on.int |
e8540 | 65 72 66 61 63 65 20 77 69 74 68 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 31 2f | erface.with.address.192.168.1.1/ |
e8560 | 32 33 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 | 23,.but.it.does.on.interface.wit |
e8580 | 68 20 61 64 64 72 65 73 73 20 31 39 32 2e 31 36 38 2e 31 2e 31 32 39 2f 32 35 2e 00 50 72 65 66 | h.address.192.168.1.129/25..Pref |
e85a0 | 69 78 20 6c 69 73 74 73 20 70 72 6f 76 69 64 65 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 | ix.lists.provides.the.most.power |
e85c0 | 66 75 6c 20 70 72 65 66 69 78 20 62 61 73 65 64 20 66 69 6c 74 65 72 69 6e 67 20 6d 65 63 68 61 | ful.prefix.based.filtering.mecha |
e85e0 | 6e 69 73 6d 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 2d 6c 69 73 74 | nism..In.addition.to.access-list |
e8600 | 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2c 20 69 70 20 70 72 65 66 69 78 2d 6c 69 73 74 20 68 | .functionality,.ip.prefix-list.h |
e8620 | 61 73 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 72 61 6e 67 65 20 73 70 65 63 69 66 69 63 61 | as.prefix.length.range.specifica |
e8640 | 74 69 6f 6e 2e 00 50 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 2e 00 50 | tion..Prefix.to.match.against..P |
e8660 | 72 65 66 69 78 65 73 00 50 72 65 70 65 6e 64 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 6c 61 73 | refixes.Prepend.the.existing.las |
e8680 | 74 20 41 53 20 6e 75 6d 62 65 72 20 28 74 68 65 20 6c 65 66 74 6d 6f 73 74 20 41 53 4e 29 20 74 | t.AS.number.(the.leftmost.ASN).t |
e86a0 | 6f 20 74 68 65 20 41 53 5f 50 41 54 48 2e 00 50 72 65 70 65 6e 64 20 74 68 65 20 67 69 76 65 6e | o.the.AS_PATH..Prepend.the.given |
e86c0 | 20 73 74 72 69 6e 67 20 6f 66 20 41 53 20 6e 75 6d 62 65 72 73 20 74 6f 20 74 68 65 20 41 53 5f | .string.of.AS.numbers.to.the.AS_ |
e86e0 | 50 41 54 48 20 6f 66 20 74 68 65 20 42 47 50 20 70 61 74 68 27 73 20 4e 4c 52 49 2e 00 50 72 69 | PATH.of.the.BGP.path's.NLRI..Pri |
e8700 | 6e 63 69 70 6c 65 20 6f 66 20 53 4e 4d 50 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 00 50 72 69 | nciple.of.SNMP.Communication.Pri |
e8720 | 6e 74 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 6e 65 69 67 68 62 6f 72 20 63 6f 6e 6e 65 63 74 | nt.a.summary.of.neighbor.connect |
e8740 | 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 41 46 49 2f 53 41 46 49 20 | ions.for.the.specified.AFI/SAFI. |
e8760 | 63 6f 6d 62 69 6e 61 74 69 6f 6e 2e 00 50 72 69 6e 74 20 61 63 74 69 76 65 20 49 50 56 34 20 6f | combination..Print.active.IPV4.o |
e8780 | 72 20 49 50 56 36 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 65 64 20 76 69 61 20 74 68 65 | r.IPV6.routes.advertised.via.the |
e87a0 | 20 56 50 4e 20 53 41 46 49 2e 00 50 72 69 6f 72 69 74 79 00 50 72 69 6f 72 69 74 79 20 51 75 65 | .VPN.SAFI..Priority.Priority.Que |
e87c0 | 75 65 00 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 2c 20 61 73 20 6f 74 68 65 72 20 6e 6f 6e 2d | ue.Priority.Queue,.as.other.non- |
e87e0 | 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 69 65 73 2c 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c | shaping.policies,.is.only.useful |
e8800 | 20 69 66 20 79 6f 75 72 20 6f 75 74 67 6f 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 72 | .if.your.outgoing.interface.is.r |
e8820 | 65 61 6c 6c 79 20 66 75 6c 6c 2e 20 49 66 20 69 74 20 69 73 20 6e 6f 74 2c 20 56 79 4f 53 20 77 | eally.full..If.it.is.not,.VyOS.w |
e8840 | 69 6c 6c 20 6e 6f 74 20 6f 77 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 50 72 69 6f 72 69 | ill.not.own.the.queue.and.Priori |
e8860 | 74 79 20 51 75 65 75 65 20 77 69 6c 6c 20 68 61 76 65 20 6e 6f 20 65 66 66 65 63 74 2e 20 49 66 | ty.Queue.will.have.no.effect..If |
e8880 | 20 74 68 65 72 65 20 69 73 20 62 61 6e 64 77 69 64 74 68 20 61 76 61 69 6c 61 62 6c 65 20 6f 6e | .there.is.bandwidth.available.on |
e88a0 | 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 2c 20 79 6f 75 20 63 61 6e 20 65 6d 62 65 | .the.physical.link,.you.can.embe |
e88c0 | 64 5f 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 66 75 | d_.Priority.Queue.into.a.classfu |
e88e0 | 6c 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 69 74 | l.shaping.policy.to.make.sure.it |
e8900 | 20 6f 77 6e 73 20 74 68 65 20 71 75 65 75 65 2e 20 49 6e 20 74 68 61 74 20 63 61 73 65 20 70 61 | .owns.the.queue..In.that.case.pa |
e8920 | 63 6b 65 74 73 20 63 61 6e 20 62 65 20 70 72 69 6f 72 69 74 69 7a 65 64 20 62 61 73 65 64 20 6f | ckets.can.be.prioritized.based.o |
e8940 | 6e 20 44 53 43 50 2e 00 50 72 69 76 61 74 65 20 56 4c 41 4e 20 70 72 6f 78 79 20 61 72 70 2e 20 | n.DSCP..Private.VLAN.proxy.arp.. |
e8960 | 42 61 73 69 63 61 6c 6c 79 20 61 6c 6c 6f 77 20 70 72 6f 78 79 20 61 72 70 20 72 65 70 6c 69 65 | Basically.allow.proxy.arp.replie |
e8980 | 73 20 62 61 63 6b 20 74 6f 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 28 66 72 | s.back.to.the.same.interface.(fr |
e89a0 | 6f 6d 20 77 68 69 63 68 20 74 68 65 20 41 52 50 20 72 65 71 75 65 73 74 2f 73 6f 6c 69 63 69 74 | om.which.the.ARP.request/solicit |
e89c0 | 61 74 69 6f 6e 20 77 61 73 20 72 65 63 65 69 76 65 64 29 2e 00 50 72 6f 66 69 6c 65 20 67 65 6e | ation.was.received)..Profile.gen |
e89e0 | 65 72 61 74 69 6f 6e 20 68 61 70 70 65 6e 73 20 66 72 6f 6d 20 74 68 65 20 6f 70 65 72 61 74 69 | eration.happens.from.the.operati |
e8a00 | 6f 6e 61 6c 20 6c 65 76 65 6c 20 61 6e 64 20 69 73 20 61 73 20 73 69 6d 70 6c 65 20 61 73 20 69 | onal.level.and.is.as.simple.as.i |
e8a20 | 73 73 75 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | ssuing.the.following.command.to. |
e8a40 | 63 72 65 61 74 65 20 61 20 70 72 6f 66 69 6c 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 | create.a.profile.to.connect.to.t |
e8a60 | 68 65 20 49 4b 45 76 32 20 61 63 63 65 73 73 20 73 65 72 76 65 72 20 61 74 20 60 60 76 70 6e 2e | he.IKEv2.access.server.at.``vpn. |
e8a80 | 76 79 6f 73 2e 6e 65 74 60 60 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | vyos.net``.with.the.configuratio |
e8aa0 | 6e 20 66 6f 72 20 74 68 65 20 60 60 72 77 60 60 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 | n.for.the.``rw``.remote-access.c |
e8ac0 | 6f 6e 6e 65 63 74 69 6f 6e 20 67 72 6f 75 70 2e 00 50 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 | onnection.group..Prometheus-clie |
e8ae0 | 6e 74 00 50 72 6f 74 65 63 74 73 20 68 6f 73 74 20 66 72 6f 6d 20 62 72 75 74 65 2d 66 6f 72 63 | nt.Protects.host.from.brute-forc |
e8b00 | 65 20 61 74 74 61 63 6b 73 20 61 67 61 69 6e 73 74 20 53 53 48 2e 20 4c 6f 67 20 6d 65 73 73 61 | e.attacks.against.SSH..Log.messa |
e8b20 | 67 65 73 20 61 72 65 20 70 61 72 73 65 64 2c 20 6c 69 6e 65 2d 62 79 2d 6c 69 6e 65 2c 20 66 6f | ges.are.parsed,.line-by-line,.fo |
e8b40 | 72 20 72 65 63 6f 67 6e 69 7a 65 64 20 70 61 74 74 65 72 6e 73 2e 20 49 66 20 61 6e 20 61 74 74 | r.recognized.patterns..If.an.att |
e8b60 | 61 63 6b 2c 20 73 75 63 68 20 61 73 20 73 65 76 65 72 61 6c 20 6c 6f 67 69 6e 20 66 61 69 6c 75 | ack,.such.as.several.login.failu |
e8b80 | 72 65 73 20 77 69 74 68 69 6e 20 61 20 66 65 77 20 73 65 63 6f 6e 64 73 2c 20 69 73 20 64 65 74 | res.within.a.few.seconds,.is.det |
e8ba0 | 65 63 74 65 64 2c 20 74 68 65 20 6f 66 66 65 6e 64 69 6e 67 20 49 50 20 69 73 20 62 6c 6f 63 6b | ected,.the.offending.IP.is.block |
e8bc0 | 65 64 2e 20 4f 66 66 65 6e 64 65 72 73 20 61 72 65 20 75 6e 62 6c 6f 63 6b 65 64 20 61 66 74 65 | ed..Offenders.are.unblocked.afte |
e8be0 | 72 20 61 20 73 65 74 20 69 6e 74 65 72 76 61 6c 2e 00 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 77 | r.a.set.interval..Protocol.for.w |
e8c00 | 68 69 63 68 20 65 78 70 65 63 74 20 65 6e 74 72 69 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 | hich.expect.entries.need.to.be.s |
e8c20 | 79 6e 63 68 72 6f 6e 69 7a 65 64 2e 00 50 72 6f 74 6f 63 6f 6c 73 00 50 72 6f 74 6f 63 6f 6c 73 | ynchronized..Protocols.Protocols |
e8c40 | 20 61 72 65 3a 20 74 63 70 2c 20 73 63 74 70 2c 20 64 63 63 70 2c 20 75 64 70 2c 20 69 63 6d 70 | .are:.tcp,.sctp,.dccp,.udp,.icmp |
e8c60 | 20 61 6e 64 20 69 70 76 36 2d 69 63 6d 70 2e 00 50 72 6f 76 69 64 65 20 54 46 54 50 20 73 65 72 | .and.ipv6-icmp..Provide.TFTP.ser |
e8c80 | 76 65 72 20 6c 69 73 74 65 6e 69 6e 67 20 6f 6e 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 | ver.listening.on.both.IPv4.and.I |
e8ca0 | 50 76 36 20 61 64 64 72 65 73 73 65 73 20 60 60 31 39 32 2e 30 2e 32 2e 31 60 60 20 61 6e 64 20 | Pv6.addresses.``192.0.2.1``.and. |
e8cc0 | 60 60 32 30 30 31 3a 64 62 38 3a 3a 31 60 60 20 73 65 72 76 69 6e 67 20 74 68 65 20 63 6f 6e 74 | ``2001:db8::1``.serving.the.cont |
e8ce0 | 65 6e 74 20 66 72 6f 6d 20 60 60 2f 63 6f 6e 66 69 67 2f 74 66 74 70 62 6f 6f 74 60 60 2e 20 55 | ent.from.``/config/tftpboot``..U |
e8d00 | 70 6c 6f 61 64 69 6e 67 20 76 69 61 20 54 46 54 50 20 74 6f 20 74 68 69 73 20 73 65 72 76 65 72 | ploading.via.TFTP.to.this.server |
e8d20 | 20 69 73 20 64 69 73 61 62 6c 65 64 2e 00 50 72 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 | .is.disabled..Provide.a.IPv4.or. |
e8d40 | 49 50 76 36 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 | IPv6.address.group.description.P |
e8d60 | 72 6f 76 69 64 65 20 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 67 72 | rovide.a.IPv4.or.IPv6.network.gr |
e8d80 | 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 64 65 73 63 72 | oup.description..Provide.a.descr |
e8da0 | 69 70 74 69 6f 6e 20 66 6f 72 20 65 61 63 68 20 72 75 6c 65 2e 00 50 72 6f 76 69 64 65 20 61 20 | iption.for.each.rule..Provide.a. |
e8dc0 | 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 74 68 65 20 66 6c 6f 77 20 74 61 62 6c 65 2e 00 50 | description.to.the.flow.table..P |
e8de0 | 72 6f 76 69 64 65 20 61 20 64 6f 6d 61 69 6e 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f | rovide.a.domain.group.descriptio |
e8e00 | 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 6d 61 63 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 | n..Provide.a.mac.group.descripti |
e8e20 | 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 70 6f 72 74 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 | on..Provide.a.port.group.descrip |
e8e40 | 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 | tion..Provide.a.rule-set.descrip |
e8e60 | 74 69 6f 6e 20 74 6f 20 61 20 63 75 73 74 6f 6d 20 66 69 72 65 77 61 6c 6c 20 63 68 61 69 6e 2e | tion.to.a.custom.firewall.chain. |
e8e80 | 00 50 72 6f 76 69 64 65 20 61 20 72 75 6c 65 2d 73 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2e | .Provide.a.rule-set.description. |
e8ea0 | 00 50 72 6f 76 69 64 65 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b | .Provide.an.IPv4.or.IPv6.network |
e8ec0 | 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 50 72 6f 76 69 64 65 20 61 6e 20 69 | .group.description..Provide.an.i |
e8ee0 | 6e 74 65 72 66 61 63 65 20 67 72 6f 75 70 20 64 65 73 63 72 69 70 74 69 6f 6e 00 50 72 6f 76 69 | nterface.group.description.Provi |
e8f00 | 64 65 72 20 2d 20 43 75 73 74 6f 6d 65 72 00 50 72 6f 76 69 64 65 73 20 61 20 62 61 63 6b 62 6f | der.-.Customer.Provides.a.backbo |
e8f20 | 6e 65 20 61 72 65 61 20 63 6f 68 65 72 65 6e 63 65 20 62 79 20 76 69 72 74 75 61 6c 20 6c 69 6e | ne.area.coherence.by.virtual.lin |
e8f40 | 6b 20 65 73 74 61 62 6c 69 73 68 6d 65 6e 74 2e 00 50 72 6f 76 69 64 65 73 20 61 20 70 65 72 2d | k.establishment..Provides.a.per- |
e8f60 | 64 65 76 69 63 65 20 63 6f 6e 74 72 6f 6c 20 74 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 | device.control.to.enable/disable |
e8f80 | 20 74 68 65 20 74 68 72 65 61 64 65 64 20 6d 6f 64 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 4e | .the.threaded.mode.for.all.the.N |
e8fa0 | 41 50 49 20 69 6e 73 74 61 6e 63 65 73 20 6f 66 20 74 68 65 20 67 69 76 65 6e 20 6e 65 74 77 6f | API.instances.of.the.given.netwo |
e8fc0 | 72 6b 20 64 65 76 69 63 65 2c 20 77 69 74 68 6f 75 74 20 74 68 65 20 6e 65 65 64 20 66 6f 72 20 | rk.device,.without.the.need.for. |
e8fe0 | 61 20 64 65 76 69 63 65 20 75 70 2f 64 6f 77 6e 2e 00 50 72 6f 78 79 20 61 75 74 68 65 6e 74 69 | a.device.up/down..Proxy.authenti |
e9000 | 63 61 74 69 6f 6e 20 6d 65 74 68 6f 64 2c 20 63 75 72 72 65 6e 74 6c 79 20 6f 6e 6c 79 20 4c 44 | cation.method,.currently.only.LD |
e9020 | 41 50 20 69 73 20 73 75 70 70 6f 72 74 65 64 2e 00 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 | AP.is.supported..Pseudo.Ethernet |
e9040 | 2f 4d 41 43 56 4c 41 4e 20 6f 70 74 69 6f 6e 73 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 | /MACVLAN.options.Pseudo-Ethernet |
e9060 | 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 6e 6f 74 20 62 65 20 72 65 61 63 68 65 64 20 66 | .interfaces.can.not.be.reached.f |
e9080 | 72 6f 6d 20 79 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 68 6f 73 74 2e 20 54 68 69 73 20 6d 65 61 | rom.your.internal.host..This.mea |
e90a0 | 6e 73 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 74 72 79 20 74 6f 20 70 69 6e 67 20 | ns.that.you.can.not.try.to.ping. |
e90c0 | 61 20 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 66 72 6f 6d | a.Pseudo-Ethernet.interface.from |
e90e0 | 20 74 68 65 20 68 6f 73 74 20 73 79 73 74 65 6d 20 6f 6e 20 77 68 69 63 68 20 69 74 20 69 73 20 | .the.host.system.on.which.it.is. |
e9100 | 64 65 66 69 6e 65 64 2e 20 54 68 65 20 70 69 6e 67 20 77 69 6c 6c 20 62 65 20 6c 6f 73 74 2e 00 | defined..The.ping.will.be.lost.. |
e9120 | 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 20 6d 61 79 20 6e | Pseudo-Ethernet.interfaces.may.n |
e9140 | 6f 74 20 77 6f 72 6b 20 69 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 69 63 68 20 65 78 | ot.work.in.environments.which.ex |
e9160 | 70 65 63 74 20 61 20 3a 61 62 62 72 3a 60 4e 49 43 20 28 4e 65 74 77 6f 72 6b 20 49 6e 74 65 72 | pect.a.:abbr:`NIC.(Network.Inter |
e9180 | 66 61 63 65 20 43 61 72 64 29 60 20 74 6f 20 6f 6e 6c 79 20 68 61 76 65 20 61 20 73 69 6e 67 6c | face.Card)`.to.only.have.a.singl |
e91a0 | 65 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 61 70 70 6c 69 65 73 20 74 6f 3a 20 2d 20 56 4d | e.address..This.applies.to:.-.VM |
e91c0 | 77 61 72 65 20 6d 61 63 68 69 6e 65 73 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 73 65 74 74 | ware.machines.using.default.sett |
e91e0 | 69 6e 67 73 20 2d 20 4e 65 74 77 6f 72 6b 20 73 77 69 74 63 68 65 73 20 77 69 74 68 20 73 65 63 | ings.-.Network.switches.with.sec |
e9200 | 75 72 69 74 79 20 73 65 74 74 69 6e 67 73 20 61 6c 6c 6f 77 69 6e 67 20 6f 6e 6c 79 20 61 20 73 | urity.settings.allowing.only.a.s |
e9220 | 69 6e 67 6c 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 2d 20 78 44 53 4c 20 6d 6f 64 65 6d 73 20 | ingle.MAC.address.-.xDSL.modems. |
e9240 | 74 68 61 74 20 74 72 79 20 74 6f 20 6c 65 61 72 6e 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 | that.try.to.learn.the.MAC.addres |
e9260 | 73 20 6f 66 20 74 68 65 20 4e 49 43 00 50 73 65 75 64 6f 2d 45 74 68 65 72 6e 65 74 20 6f 72 20 | s.of.the.NIC.Pseudo-Ethernet.or. |
e9280 | 4d 41 43 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 73 65 65 6e 20 61 | MACVLAN.interfaces.can.be.seen.a |
e92a0 | 73 20 73 75 62 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 72 65 67 75 6c 61 72 20 65 74 68 65 72 | s.subinterfaces.to.regular.ether |
e92c0 | 6e 65 74 20 69 6e 74 65 72 66 61 63 65 73 2e 20 45 61 63 68 20 61 6e 64 20 65 76 65 72 79 20 73 | net.interfaces..Each.and.every.s |
e92e0 | 75 62 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 72 65 61 74 65 64 20 61 20 64 69 66 66 65 72 65 | ubinterface.is.created.a.differe |
e9300 | 6e 74 20 6d 65 64 69 61 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 28 4d 41 43 29 20 61 64 | nt.media.access.control.(MAC).ad |
e9320 | 64 72 65 73 73 2c 20 66 6f 72 20 61 20 73 69 6e 67 6c 65 20 70 68 79 73 69 63 61 6c 20 45 74 68 | dress,.for.a.single.physical.Eth |
e9340 | 65 72 6e 65 74 20 70 6f 72 74 2e 20 50 73 65 75 64 6f 2d 20 45 74 68 65 72 6e 65 74 20 69 6e 74 | ernet.port..Pseudo-.Ethernet.int |
e9360 | 65 72 66 61 63 65 73 20 68 61 76 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 20 61 70 70 6c 69 | erfaces.have.most.of.their.appli |
e9380 | 63 61 74 69 6f 6e 20 69 6e 20 76 69 72 74 75 61 6c 69 7a 65 64 20 65 6e 76 69 72 6f 6e 6d 65 6e | cation.in.virtualized.environmen |
e93a0 | 74 73 2c 00 50 75 62 6c 69 73 68 20 61 20 70 6f 72 74 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 | ts,.Publish.a.port.for.the.conta |
e93c0 | 69 6e 65 72 2e 00 50 75 6c 6c 20 61 20 6e 65 77 20 69 6d 61 67 65 20 66 6f 72 20 63 6f 6e 74 61 | iner..Pull.a.new.image.for.conta |
e93e0 | 69 6e 65 72 00 51 69 6e 51 20 28 38 30 32 2e 31 61 64 29 00 51 6f 53 00 51 75 65 75 65 20 73 69 | iner.QinQ.(802.1ad).QoS.Queue.si |
e9400 | 7a 65 20 66 6f 72 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 6c 6f 63 61 6c 20 63 6f 6e 6e 74 72 | ze.for.listening.to.local.conntr |
e9420 | 61 63 6b 20 65 76 65 6e 74 73 20 69 6e 20 4d 42 2e 00 51 75 65 75 65 20 73 69 7a 65 20 66 6f 72 | ack.events.in.MB..Queue.size.for |
e9440 | 20 73 79 6e 63 69 6e 67 20 63 6f 6e 6e 74 72 61 63 6b 20 65 6e 74 72 69 65 73 20 69 6e 20 4d 42 | .syncing.conntrack.entries.in.MB |
e9460 | 2e 00 51 75 6f 74 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 69 64 65 20 70 61 72 61 | ..Quotes.can.be.used.inside.para |
e9480 | 6d 65 74 65 72 20 76 61 6c 75 65 73 20 62 79 20 72 65 70 6c 61 63 69 6e 67 20 61 6c 6c 20 71 75 | meter.values.by.replacing.all.qu |
e94a0 | 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 69 74 68 20 74 68 65 20 73 74 72 69 6e 67 20 60 | ote.characters.with.the.string.` |
e94c0 | 60 26 71 75 6f 74 3b 60 60 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 | `"``..They.will.be.replaced |
e94e0 | 20 77 69 74 68 20 6c 69 74 65 72 61 6c 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 73 20 77 | .with.literal.quote.characters.w |
e9500 | 68 65 6e 20 67 65 6e 65 72 61 74 69 6e 67 20 64 68 63 70 64 2e 63 6f 6e 66 2e 00 52 31 20 68 61 | hen.generating.dhcpd.conf..R1.ha |
e9520 | 73 20 31 39 32 2e 30 2e 32 2e 31 2f 32 34 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 31 2f 36 34 00 | s.192.0.2.1/24.&.2001:db8::1/64. |
e9540 | 52 31 20 69 73 20 6d 61 6e 61 67 65 64 20 74 68 72 6f 75 67 68 20 61 6e 20 6f 75 74 2d 6f 66 2d | R1.is.managed.through.an.out-of- |
e9560 | 62 61 6e 64 20 6e 65 74 77 6f 72 6b 20 74 68 61 74 20 72 65 73 69 64 65 73 20 69 6e 20 56 52 46 | band.network.that.resides.in.VRF |
e9580 | 20 60 60 6d 67 6d 74 60 60 00 52 31 3a 00 52 32 20 68 61 73 20 31 39 32 2e 30 2e 32 2e 32 2f 32 | .``mgmt``.R1:.R2.has.192.0.2.2/2 |
e95a0 | 34 20 26 20 32 30 30 31 3a 64 62 38 3a 3a 32 2f 36 34 00 52 32 3a 00 52 41 44 49 55 53 00 52 41 | 4.&.2001:db8::2/64.R2:.RADIUS.RA |
e95c0 | 44 49 55 53 20 53 65 74 75 70 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 20 66 65 61 74 75 | DIUS.Setup.RADIUS.advanced.featu |
e95e0 | 72 65 73 00 52 41 44 49 55 53 20 61 64 76 61 6e 63 65 64 20 6f 70 74 69 6f 6e 73 00 52 41 44 49 | res.RADIUS.advanced.options.RADI |
e9600 | 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 00 52 41 44 49 55 53 20 62 61 6e 64 77 69 64 | US.authentication.RADIUS.bandwid |
e9620 | 74 68 20 73 68 61 70 69 6e 67 20 61 74 74 72 69 62 75 74 65 00 52 41 44 49 55 53 20 70 72 6f 76 | th.shaping.attribute.RADIUS.prov |
e9640 | 69 64 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 74 68 65 20 65 78 61 | ides.the.IP.addresses.in.the.exa |
e9660 | 6d 70 6c 65 20 61 62 6f 76 65 20 76 69 61 20 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 | mple.above.via.Framed-IP-Address |
e9680 | 2e 00 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 20 60 60 31 39 32 2e 31 36 38 2e 33 2e 31 | ..RADIUS.server.at.``192.168.3.1 |
e96a0 | 30 60 60 20 77 69 74 68 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 60 60 56 79 4f 53 50 61 73 | 0``.with.shared-secret.``VyOSPas |
e96c0 | 73 77 6f 72 64 60 60 00 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 | sword``.RADIUS.servers.could.be. |
e96e0 | 68 61 72 64 65 6e 65 64 20 62 79 20 6f 6e 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 | hardened.by.only.allowing.certai |
e9700 | 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 | n.IP.addresses.to.connect..As.of |
e9720 | 20 74 68 69 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 | .this.the.source.address.of.each |
e9740 | 20 52 41 44 49 55 53 20 71 75 65 72 79 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e | .RADIUS.query.can.be.configured. |
e9760 | 00 52 41 44 49 55 53 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 00 52 46 43 20 33 37 36 38 20 | .RADIUS.source.address.RFC.3768. |
e9780 | 64 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 4d 41 43 20 61 64 64 72 65 73 73 20 74 6f | defines.a.virtual.MAC.address.to |
e97a0 | 20 65 61 63 68 20 56 52 52 50 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 2e 20 54 68 69 73 20 | .each.VRRP.virtual.router..This. |
e97c0 | 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 77 69 6c 6c 20 | virtual.router.MAC.address.will. |
e97e0 | 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 69 6e 20 61 6c 6c 20 70 65 72 | be.used.as.the.source.in.all.per |
e9800 | 69 6f 64 69 63 20 56 52 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 62 79 20 74 68 65 20 | iodic.VRRP.messages.sent.by.the. |
e9820 | 61 63 74 69 76 65 20 6e 6f 64 65 2e 20 57 68 65 6e 20 74 68 65 20 72 66 63 33 37 36 38 2d 63 6f | active.node..When.the.rfc3768-co |
e9840 | 6d 70 61 74 69 62 69 6c 69 74 79 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 2c 20 61 20 6e 65 77 | mpatibility.option.is.set,.a.new |
e9860 | 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 72 65 61 74 65 64 2c 20 74 6f 20 77 | .VRRP.interface.is.created,.to.w |
e9880 | 68 69 63 68 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 76 69 72 | hich.the.MAC.address.and.the.vir |
e98a0 | 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 | tual.IP.address.is.automatically |
e98c0 | 20 61 73 73 69 67 6e 65 64 2e 00 52 46 43 20 38 36 38 20 74 69 6d 65 20 73 65 72 76 65 72 20 49 | .assigned..RFC.868.time.server.I |
e98e0 | 50 76 34 20 61 64 64 72 65 73 73 00 52 49 50 00 52 49 50 76 31 20 61 73 20 64 65 73 63 72 69 62 | Pv4.address.RIP.RIPv1.as.describ |
e9900 | 65 64 20 69 6e 20 3a 72 66 63 3a 60 31 30 35 38 60 00 52 49 50 76 32 20 61 73 20 64 65 73 63 72 | ed.in.:rfc:`1058`.RIPv2.as.descr |
e9920 | 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 34 35 33 60 00 52 50 4b 49 00 52 53 2d 53 65 72 76 | ibed.in.:rfc:`2453`.RPKI.RS-Serv |
e9940 | 65 72 20 2d 20 52 53 2d 43 6c 69 65 6e 74 00 52 53 41 20 63 61 6e 20 62 65 20 75 73 65 64 20 66 | er.-.RS-Client.RSA.can.be.used.f |
e9960 | 6f 72 20 73 65 72 76 69 63 65 73 20 73 75 63 68 20 61 73 20 6b 65 79 20 65 78 63 68 61 6e 67 65 | or.services.such.as.key.exchange |
e9980 | 73 20 61 6e 64 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 70 75 72 70 6f 73 65 73 2e 20 54 | s.and.for.encryption.purposes..T |
e99a0 | 6f 20 6d 61 6b 65 20 49 50 53 65 63 20 77 6f 72 6b 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 | o.make.IPSec.work.with.dynamic.a |
e99c0 | 64 64 72 65 73 73 20 6f 6e 20 6f 6e 65 2f 62 6f 74 68 20 73 69 64 65 73 2c 20 77 65 20 77 69 6c | ddress.on.one/both.sides,.we.wil |
e99e0 | 6c 20 68 61 76 65 20 74 6f 20 75 73 65 20 52 53 41 20 6b 65 79 73 20 66 6f 72 20 61 75 74 68 65 | l.have.to.use.RSA.keys.for.authe |
e9a00 | 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 79 20 61 72 65 20 76 65 72 79 20 66 61 73 74 20 61 6e | ntication..They.are.very.fast.an |
e9a20 | 64 20 65 61 73 79 20 74 6f 20 73 65 74 75 70 2e 00 52 53 41 2d 4b 65 79 73 00 52 61 6e 64 6f 6d | d.easy.to.setup..RSA-Keys.Random |
e9a40 | 2d 44 65 74 65 63 74 00 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 63 6f 75 6c 64 20 62 65 20 75 | -Detect.Random-Detect.could.be.u |
e9a60 | 73 65 66 75 6c 20 66 6f 72 20 68 65 61 76 79 20 74 72 61 66 66 69 63 2e 20 4f 6e 65 20 75 73 65 | seful.for.heavy.traffic..One.use |
e9a80 | 20 6f 66 20 74 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 6d 69 67 68 74 20 62 65 20 74 6f 20 70 | .of.this.algorithm.might.be.to.p |
e9aa0 | 72 65 76 65 6e 74 20 61 20 62 61 63 6b 62 6f 6e 65 20 6f 76 65 72 6c 6f 61 64 2e 20 42 75 74 20 | revent.a.backbone.overload..But. |
e9ac0 | 6f 6e 6c 79 20 66 6f 72 20 54 43 50 20 28 62 65 63 61 75 73 65 20 64 72 6f 70 70 65 64 20 70 61 | only.for.TCP.(because.dropped.pa |
e9ae0 | 63 6b 65 74 73 20 63 6f 75 6c 64 20 62 65 20 72 65 74 72 61 6e 73 6d 69 74 74 65 64 29 2c 20 6e | ckets.could.be.retransmitted),.n |
e9b00 | 6f 74 20 66 6f 72 20 55 44 50 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2c 20 64 | ot.for.UDP..Range.is.1.to.255,.d |
e9b20 | 65 66 61 75 6c 74 20 69 73 20 31 2e 00 52 61 6e 67 65 20 69 73 20 31 20 74 6f 20 33 30 30 2c 20 | efault.is.1..Range.is.1.to.300,. |
e9b40 | 64 65 66 61 75 6c 74 20 69 73 20 31 30 2e 00 52 61 74 65 20 43 6f 6e 74 72 6f 6c 00 52 61 74 65 | default.is.10..Rate.Control.Rate |
e9b60 | 20 6c 69 6d 69 74 00 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 69 73 20 61 20 43 50 55 2d 66 72 69 | .limit.Rate-Control.is.a.CPU-fri |
e9b80 | 65 6e 64 6c 79 20 70 6f 6c 69 63 79 2e 20 59 6f 75 20 6d 69 67 68 74 20 63 6f 6e 73 69 64 65 72 | endly.policy..You.might.consider |
e9ba0 | 20 75 73 69 6e 67 20 69 74 20 77 68 65 6e 20 79 6f 75 20 6a 75 73 74 20 73 69 6d 70 6c 79 20 77 | .using.it.when.you.just.simply.w |
e9bc0 | 61 6e 74 20 74 6f 20 73 6c 6f 77 20 74 72 61 66 66 69 63 20 64 6f 77 6e 2e 00 52 61 74 65 2d 43 | ant.to.slow.traffic.down..Rate-C |
e9be0 | 6f 6e 74 72 6f 6c 20 69 73 20 61 20 63 6c 61 73 73 6c 65 73 73 20 70 6f 6c 69 63 79 20 74 68 61 | ontrol.is.a.classless.policy.tha |
e9c00 | 74 20 6c 69 6d 69 74 73 20 74 68 65 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 74 6f 20 61 20 73 65 | t.limits.the.packet.flow.to.a.se |
e9c20 | 74 20 72 61 74 65 2e 20 49 74 20 69 73 20 61 20 70 75 72 65 20 73 68 61 70 65 72 2c 20 69 74 20 | t.rate..It.is.a.pure.shaper,.it. |
e9c40 | 64 6f 65 73 20 6e 6f 74 20 73 63 68 65 64 75 6c 65 20 74 72 61 66 66 69 63 2e 20 54 72 61 66 66 | does.not.schedule.traffic..Traff |
e9c60 | 69 63 20 69 73 20 66 69 6c 74 65 72 65 64 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 65 78 70 65 | ic.is.filtered.based.on.the.expe |
e9c80 | 6e 64 69 74 75 72 65 20 6f 66 20 74 6f 6b 65 6e 73 2e 20 54 6f 6b 65 6e 73 20 72 6f 75 67 68 6c | nditure.of.tokens..Tokens.roughl |
e9ca0 | 79 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 62 79 74 65 73 2e 00 52 61 77 20 50 61 72 61 6d | y.correspond.to.bytes..Raw.Param |
e9cc0 | 65 74 65 72 73 00 52 61 77 20 70 61 72 61 6d 65 74 65 72 73 20 63 61 6e 20 62 65 20 70 61 73 73 | eters.Raw.parameters.can.be.pass |
e9ce0 | 65 64 20 74 6f 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 2c 20 73 75 62 6e 65 | ed.to.shared-network-name,.subne |
e9d00 | 74 20 61 6e 64 20 73 74 61 74 69 63 2d 6d 61 70 70 69 6e 67 3a 00 52 65 2d 67 65 6e 65 72 61 74 | t.and.static-mapping:.Re-generat |
e9d20 | 65 64 20 61 20 6b 6e 6f 77 6e 20 70 75 62 2f 70 72 69 76 61 74 65 20 6b 65 79 66 69 6c 65 20 77 | ed.a.known.pub/private.keyfile.w |
e9d40 | 68 69 63 68 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 6f | hich.can.be.used.to.connect.to.o |
e9d60 | 74 68 65 72 20 73 65 72 76 69 63 65 73 20 28 65 2e 67 2e 20 52 50 4b 49 20 63 61 63 68 65 29 2e | ther.services.(e.g..RPKI.cache). |
e9d80 | 00 52 65 2d 67 65 6e 65 72 61 74 65 64 20 74 68 65 20 70 75 62 6c 69 63 2f 70 72 69 76 61 74 65 | .Re-generated.the.public/private |
e9da0 | 20 6b 65 79 70 6f 72 74 69 6f 6e 20 77 68 69 63 68 20 53 53 48 20 75 73 65 73 20 74 6f 20 73 65 | .keyportion.which.SSH.uses.to.se |
e9dc0 | 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 52 65 61 63 68 61 62 6c 65 20 54 69 6d 65 | cure.connections..Reachable.Time |
e9de0 | 00 52 65 61 6c 20 73 65 72 76 65 72 00 52 65 61 6c 20 73 65 72 76 65 72 20 49 50 20 61 64 64 72 | .Real.server.Real.server.IP.addr |
e9e00 | 65 73 73 20 61 6e 64 20 70 6f 72 74 00 52 65 61 6c 20 73 65 72 76 65 72 20 69 73 20 61 75 74 6f | ess.and.port.Real.server.is.auto |
e9e20 | 2d 65 78 63 6c 75 64 65 64 20 69 66 20 70 6f 72 74 20 63 68 65 63 6b 20 77 69 74 68 20 74 68 69 | -excluded.if.port.check.with.thi |
e9e40 | 73 20 73 65 72 76 65 72 20 66 61 69 6c 2e 00 52 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 66 | s.server.fail..Receive.traffic.f |
e9e60 | 72 6f 6d 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 63 72 65 61 74 65 64 20 62 79 20 74 68 65 20 73 | rom.connections.created.by.the.s |
e9e80 | 65 72 76 65 72 20 69 73 20 61 6c 73 6f 20 62 61 6c 61 6e 63 65 64 2e 20 57 68 65 6e 20 74 68 65 | erver.is.also.balanced..When.the |
e9ea0 | 20 6c 6f 63 61 6c 20 73 79 73 74 65 6d 20 73 65 6e 64 73 20 61 6e 20 41 52 50 20 52 65 71 75 65 | .local.system.sends.an.ARP.Reque |
e9ec0 | 73 74 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 63 6f 70 69 65 73 20 61 6e 64 | st.the.bonding.driver.copies.and |
e9ee0 | 20 73 61 76 65 73 20 74 68 65 20 70 65 65 72 27 73 20 49 50 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | .saves.the.peer's.IP.information |
e9f00 | 20 66 72 6f 6d 20 74 68 65 20 41 52 50 20 70 61 63 6b 65 74 2e 20 57 68 65 6e 20 74 68 65 20 41 | .from.the.ARP.packet..When.the.A |
e9f20 | 52 50 20 52 65 70 6c 79 20 61 72 72 69 76 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 | RP.Reply.arrives.from.the.peer,. |
e9f40 | 69 74 73 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 69 73 20 72 65 74 72 69 65 76 65 | its.hardware.address.is.retrieve |
e9f60 | 64 20 61 6e 64 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 69 6e 69 74 69 61 74 | d.and.the.bonding.driver.initiat |
e9f80 | 65 73 20 61 6e 20 41 52 50 20 72 65 70 6c 79 20 74 6f 20 74 68 69 73 20 70 65 65 72 20 61 73 73 | es.an.ARP.reply.to.this.peer.ass |
e9fa0 | 69 67 6e 69 6e 67 20 69 74 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 73 20 69 | igning.it.to.one.of.the.slaves.i |
e9fc0 | 6e 20 74 68 65 20 62 6f 6e 64 2e 20 41 20 70 72 6f 62 6c 65 6d 61 74 69 63 20 6f 75 74 63 6f 6d | n.the.bond..A.problematic.outcom |
e9fe0 | 65 20 6f 66 20 75 73 69 6e 67 20 41 52 50 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 66 6f 72 20 62 | e.of.using.ARP.negotiation.for.b |
ea000 | 61 6c 61 6e 63 69 6e 67 20 69 73 20 74 68 61 74 20 65 61 63 68 20 74 69 6d 65 20 74 68 61 74 20 | alancing.is.that.each.time.that. |
ea020 | 61 6e 20 41 52 50 20 72 65 71 75 65 73 74 20 69 73 20 62 72 6f 61 64 63 61 73 74 20 69 74 20 75 | an.ARP.request.is.broadcast.it.u |
ea040 | 73 65 73 20 74 68 65 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 | ses.the.hardware.address.of.the. |
ea060 | 62 6f 6e 64 2e 20 48 65 6e 63 65 2c 20 70 65 65 72 73 20 6c 65 61 72 6e 20 74 68 65 20 68 61 72 | bond..Hence,.peers.learn.the.har |
ea080 | 64 77 61 72 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 6f 6e 64 20 61 6e 64 20 74 68 | dware.address.of.the.bond.and.th |
ea0a0 | 65 20 62 61 6c 61 6e 63 69 6e 67 20 6f 66 20 72 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 63 | e.balancing.of.receive.traffic.c |
ea0c0 | 6f 6c 6c 61 70 73 65 73 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 6c 61 76 65 2e 20 54 | ollapses.to.the.current.slave..T |
ea0e0 | 68 69 73 20 69 73 20 68 61 6e 64 6c 65 64 20 62 79 20 73 65 6e 64 69 6e 67 20 75 70 64 61 74 65 | his.is.handled.by.sending.update |
ea100 | 73 20 28 41 52 50 20 52 65 70 6c 69 65 73 29 20 74 6f 20 61 6c 6c 20 74 68 65 20 70 65 65 72 73 | s.(ARP.Replies).to.all.the.peers |
ea120 | 20 77 69 74 68 20 74 68 65 69 72 20 69 6e 64 69 76 69 64 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 | .with.their.individually.assigne |
ea140 | 64 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 20 73 75 63 68 20 74 68 61 74 20 74 68 65 | d.hardware.address.such.that.the |
ea160 | 20 74 72 61 66 66 69 63 20 69 73 20 72 65 64 69 73 74 72 69 62 75 74 65 64 2e 20 52 65 63 65 69 | .traffic.is.redistributed..Recei |
ea180 | 76 65 20 74 72 61 66 66 69 63 20 69 73 20 61 6c 73 6f 20 72 65 64 69 73 74 72 69 62 75 74 65 64 | ve.traffic.is.also.redistributed |
ea1a0 | 20 77 68 65 6e 20 61 20 6e 65 77 20 73 6c 61 76 65 20 69 73 20 61 64 64 65 64 20 74 6f 20 74 68 | .when.a.new.slave.is.added.to.th |
ea1c0 | 65 20 62 6f 6e 64 20 61 6e 64 20 77 68 65 6e 20 61 6e 20 69 6e 61 63 74 69 76 65 20 73 6c 61 76 | e.bond.and.when.an.inactive.slav |
ea1e0 | 65 20 69 73 20 72 65 2d 61 63 74 69 76 61 74 65 64 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 6c | e.is.re-activated..The.receive.l |
ea200 | 6f 61 64 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 | oad.is.distributed.sequentially. |
ea220 | 28 72 6f 75 6e 64 20 72 6f 62 69 6e 29 20 61 6d 6f 6e 67 20 74 68 65 20 67 72 6f 75 70 20 6f 66 | (round.robin).among.the.group.of |
ea240 | 20 68 69 67 68 65 73 74 20 73 70 65 65 64 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 62 6f 6e | .highest.speed.slaves.in.the.bon |
ea260 | 64 2e 00 52 65 63 65 69 76 65 64 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 73 20 68 61 | d..Received.RADIUS.attributes.ha |
ea280 | 76 65 20 61 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 74 68 61 6e 20 70 61 72 61 6d 65 | ve.a.higher.priority.than.parame |
ea2a0 | 74 65 72 73 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 | ters.defined.within.the.CLI.conf |
ea2c0 | 69 67 75 72 61 74 69 6f 6e 2c 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 65 78 70 6c 61 6e 61 74 | iguration,.refer.to.the.explanat |
ea2e0 | 69 6f 6e 20 62 65 6c 6f 77 2e 00 52 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f 72 20 6c 61 72 67 65 | ion.below..Recommended.for.large |
ea300 | 72 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 00 52 65 63 6f 72 64 20 74 79 70 65 73 00 52 65 | r.installations..Record.types.Re |
ea320 | 64 69 72 65 63 74 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 00 52 65 64 69 72 65 63 74 20 4d 69 | direct.HTTP.to.HTTPS.Redirect.Mi |
ea340 | 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 65 20 69 6e 74 | crosoft.RDP.traffic.from.the.int |
ea360 | 65 72 6e 61 6c 20 28 4c 41 4e 2c 20 70 72 69 76 61 74 65 29 20 6e 65 74 77 6f 72 6b 20 76 69 61 | ernal.(LAN,.private).network.via |
ea380 | 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 | .:ref:`destination-nat`.in.rule. |
ea3a0 | 31 31 30 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 | 110.to.the.internal,.private.hos |
ea3c0 | 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 20 57 65 20 61 6c 73 6f 20 6e 65 65 64 20 61 20 3a 72 65 | t.192.0.2.40..We.also.need.a.:re |
ea3e0 | 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 72 75 6c 65 20 31 31 30 20 66 6f 72 20 74 68 65 20 | f:`source-nat`.rule.110.for.the. |
ea400 | 72 65 76 65 72 73 65 20 70 61 74 68 20 6f 66 20 74 68 65 20 74 72 61 66 66 69 63 2e 20 54 68 65 | reverse.path.of.the.traffic..The |
ea420 | 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 69 | .internal.network.192.0.2.0/24.i |
ea440 | 73 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 30 2e | s.reachable.via.interface.`eth0. |
ea460 | 31 30 60 2e 00 52 65 64 69 72 65 63 74 20 4d 69 63 72 6f 73 6f 66 74 20 52 44 50 20 74 72 61 66 | 10`..Redirect.Microsoft.RDP.traf |
ea480 | 66 69 63 20 66 72 6f 6d 20 74 68 65 20 6f 75 74 73 69 64 65 20 28 57 41 4e 2c 20 65 78 74 65 72 | fic.from.the.outside.(WAN,.exter |
ea4a0 | 6e 61 6c 29 20 77 6f 72 6c 64 20 76 69 61 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f 6e | nal).world.via.:ref:`destination |
ea4c0 | 2d 6e 61 74 60 20 69 6e 20 72 75 6c 65 20 31 30 30 20 74 6f 20 74 68 65 20 69 6e 74 65 72 6e 61 | -nat`.in.rule.100.to.the.interna |
ea4e0 | 6c 2c 20 70 72 69 76 61 74 65 20 68 6f 73 74 20 31 39 32 2e 30 2e 32 2e 34 30 2e 00 52 65 64 69 | l,.private.host.192.0.2.40..Redi |
ea500 | 72 65 63 74 20 55 52 4c 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 00 52 65 64 69 73 | rect.URL.to.a.new.location.Redis |
ea520 | 74 72 69 62 75 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 65 64 75 6e 64 61 6e | tribution.Configuration.Redundan |
ea540 | 63 79 20 61 6e 64 20 6c 6f 61 64 20 73 68 61 72 69 6e 67 2e 20 54 68 65 72 65 20 61 72 65 20 6d | cy.and.load.sharing..There.are.m |
ea560 | 75 6c 74 69 70 6c 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 20 61 74 20 74 68 65 20 65 64 67 | ultiple.NAT66.devices.at.the.edg |
ea580 | 65 20 6f 66 20 61 6e 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 6e 6f 74 68 65 72 20 | e.of.an.IPv6.network.to.another. |
ea5a0 | 49 50 76 36 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 70 61 74 68 20 74 68 72 6f 75 67 68 20 74 | IPv6.network..The.path.through.t |
ea5c0 | 68 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 74 6f 20 61 6e 6f 74 68 65 72 20 49 50 76 36 20 | he.NAT66.device.to.another.IPv6. |
ea5e0 | 6e 65 74 77 6f 72 6b 20 66 6f 72 6d 73 20 61 6e 20 65 71 75 69 76 61 6c 65 6e 74 20 72 6f 75 74 | network.forms.an.equivalent.rout |
ea600 | 65 2c 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 61 6e 20 62 65 20 6c 6f 61 64 2d 73 68 61 72 65 | e,.and.traffic.can.be.load-share |
ea620 | 64 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2e 20 49 6e 20 74 68 69 | d.on.these.NAT66.devices..In.thi |
ea640 | 73 20 63 61 73 65 2c 20 79 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 61 | s.case,.you.can.configure.the.sa |
ea660 | 6d 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 72 75 | me.source.address.translation.ru |
ea680 | 6c 65 73 20 6f 6e 20 74 68 65 73 65 20 4e 41 54 36 36 20 64 65 76 69 63 65 73 2c 20 73 6f 20 74 | les.on.these.NAT66.devices,.so.t |
ea6a0 | 68 61 74 20 61 6e 79 20 4e 41 54 36 36 20 64 65 76 69 63 65 20 63 61 6e 20 68 61 6e 64 6c 65 20 | hat.any.NAT66.device.can.handle. |
ea6c0 | 49 50 76 36 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 64 69 66 66 65 72 65 6e 74 20 73 | IPv6.traffic.between.different.s |
ea6e0 | 69 74 65 73 2e 00 52 65 67 69 73 74 65 72 20 44 4e 53 20 72 65 63 6f 72 64 20 60 60 65 78 61 6d | ites..Register.DNS.record.``exam |
ea700 | 70 6c 65 2e 76 79 6f 73 2e 69 6f 60 60 20 6f 6e 20 44 4e 53 20 73 65 72 76 65 72 20 60 60 6e 73 | ple.vyos.io``.on.DNS.server.``ns |
ea720 | 31 2e 76 79 6f 73 2e 69 6f 60 60 00 52 65 67 75 6c 61 72 20 56 4c 41 4e 73 20 28 38 30 32 2e 31 | 1.vyos.io``.Regular.VLANs.(802.1 |
ea740 | 71 29 00 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 | q).Regular.expression.to.match.a |
ea760 | 67 61 69 6e 73 74 20 61 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2e 00 52 65 67 75 6c 61 72 | gainst.a.community-list..Regular |
ea780 | 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 20 6c | .expression.to.match.against.a.l |
ea7a0 | 61 72 67 65 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e 00 52 65 67 75 6c 61 72 20 65 78 70 | arge.community.list..Regular.exp |
ea7c0 | 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 61 6e 20 41 53 20 70 | ression.to.match.against.an.AS.p |
ea7e0 | 61 74 68 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 22 36 34 35 30 31 20 36 34 35 30 32 22 2e 00 | ath..For.example."64501.64502".. |
ea800 | 52 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 | Regular.expression.to.match.agai |
ea820 | 6e 73 74 20 61 6e 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2c 20 | nst.an.extended.community.list,. |
ea840 | 77 68 65 72 65 20 74 65 78 74 20 63 6f 75 6c 64 20 62 65 3a 00 52 65 6a 65 63 74 20 44 48 43 50 | where.text.could.be:.Reject.DHCP |
ea860 | 20 6c 65 61 73 65 73 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 61 64 64 72 65 73 73 20 6f 72 20 | .leases.from.a.given.address.or. |
ea880 | 72 61 6e 67 65 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 77 68 65 6e 20 61 20 6d 6f 64 | range..This.is.useful.when.a.mod |
ea8a0 | 65 6d 20 67 69 76 65 73 20 61 20 6c 6f 63 61 6c 20 49 50 20 77 68 65 6e 20 66 69 72 73 74 20 73 | em.gives.a.local.IP.when.first.s |
ea8c0 | 74 61 72 74 69 6e 67 2e 00 52 65 6d 65 6d 62 65 72 20 73 6f 75 72 63 65 20 49 50 20 69 6e 20 73 | tarting..Remember.source.IP.in.s |
ea8e0 | 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 72 65 73 65 74 20 74 68 65 69 72 20 73 63 6f 72 65 2e | econds.before.reset.their.score. |
ea900 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 2e 00 52 65 6d 6f 74 65 20 41 63 63 | .The.default.is.1800..Remote.Acc |
ea920 | 65 73 73 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 52 6f 61 64 57 61 72 72 69 6f 72 22 20 | ess.Remote.Access."RoadWarrior". |
ea940 | 45 78 61 6d 70 6c 65 00 52 65 6d 6f 74 65 20 41 63 63 65 73 73 20 22 52 6f 61 64 57 61 72 72 69 | Example.Remote.Access."RoadWarri |
ea960 | 6f 72 22 20 63 6c 69 65 6e 74 73 00 52 65 6d 6f 74 65 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | or".clients.Remote.Configuration |
ea980 | 20 2d 20 41 6e 6e 6f 74 61 74 65 64 3a 00 52 65 6d 6f 74 65 20 43 6f 6e 66 69 67 75 72 61 74 69 | .-.Annotated:.Remote.Configurati |
ea9a0 | 6f 6e 3a 00 52 65 6d 6f 74 65 20 48 6f 73 74 00 52 65 6d 6f 74 65 20 55 52 4c 00 52 65 6d 6f 74 | on:.Remote.Host.Remote.URL.Remot |
ea9c0 | 65 20 55 52 4c 20 74 6f 20 53 70 6c 75 6e 6b 20 63 6f 6c 6c 65 63 74 6f 72 00 52 65 6d 6f 74 65 | e.URL.to.Splunk.collector.Remote |
ea9e0 | 20 55 52 4c 2e 00 52 65 6d 6f 74 65 20 60 60 49 6e 66 6c 75 78 44 42 60 60 20 62 75 63 6b 65 74 | .URL..Remote.``InfluxDB``.bucket |
eaa00 | 20 6e 61 6d 65 00 52 65 6d 6f 74 65 20 64 61 74 61 62 61 73 65 20 6e 61 6d 65 2e 00 52 65 6d 6f | .name.Remote.database.name..Remo |
eaa20 | 74 65 20 70 65 65 72 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 73 65 | te.peer.IP.`<address>`.of.the.se |
eaa40 | 63 6f 6e 64 20 44 48 43 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 69 73 20 48 41 20 63 6c 75 73 | cond.DHCP.server.in.this.HA.clus |
eaa60 | 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 65 65 72 20 49 50 20 60 3c 61 64 64 72 65 73 73 3e 60 20 | ter..Remote.peer.IP.`<address>`. |
eaa80 | 6f 66 20 74 68 65 20 73 65 63 6f 6e 64 20 44 48 43 50 20 73 65 72 76 65 72 20 69 6e 20 74 68 69 | of.the.second.DHCP.server.in.thi |
eaaa0 | 73 20 66 61 69 6c 6f 76 65 72 20 63 6c 75 73 74 65 72 2e 00 52 65 6d 6f 74 65 20 70 6f 72 74 00 | s.failover.cluster..Remote.port. |
eaac0 | 52 65 6d 6f 74 65 20 74 72 61 6e 73 6d 69 73 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 77 69 6c | Remote.transmission.interval.wil |
eaae0 | 6c 20 62 65 20 6d 75 6c 74 69 70 6c 69 65 64 20 62 79 20 74 68 69 73 20 76 61 6c 75 65 00 52 65 | l.be.multiplied.by.this.value.Re |
eab00 | 6e 61 6d 69 6e 67 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 66 61 63 65 73 20 62 79 20 52 41 44 | naming.clients.interfaces.by.RAD |
eab20 | 49 55 53 00 52 65 70 65 61 74 20 74 68 65 20 70 72 6f 63 65 64 75 72 65 20 6f 6e 20 74 68 65 20 | IUS.Repeat.the.procedure.on.the. |
eab40 | 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 52 65 70 6c 61 79 20 70 72 6f 74 65 63 74 69 6f 6e 00 | other.router..Replay.protection. |
eab60 | 52 65 71 75 65 73 74 20 6f 6e 6c 79 20 61 20 74 65 6d 70 6f 72 61 72 79 20 61 64 64 72 65 73 73 | Request.only.a.temporary.address |
eab80 | 20 61 6e 64 20 6e 6f 74 20 66 6f 72 6d 20 61 6e 20 49 41 5f 4e 41 20 28 49 64 65 6e 74 69 74 79 | .and.not.form.an.IA_NA.(Identity |
eaba0 | 20 41 73 73 6f 63 69 61 74 69 6f 6e 20 66 6f 72 20 4e 6f 6e 2d 74 65 6d 70 6f 72 61 72 79 20 41 | .Association.for.Non-temporary.A |
eabc0 | 64 64 72 65 73 73 65 73 29 20 70 61 72 74 6e 65 72 73 68 69 70 2e 00 52 65 71 75 65 73 74 73 20 | ddresses).partnership..Requests. |
eabe0 | 61 72 65 20 66 6f 72 77 61 72 64 65 64 20 74 68 72 6f 75 67 68 20 60 60 65 74 68 32 60 60 20 61 | are.forwarded.through.``eth2``.a |
eac00 | 73 20 74 68 65 20 60 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 60 00 52 65 71 75 69 | s.the.`upstream.interface`.Requi |
eac20 | 72 65 20 74 68 65 20 70 65 65 72 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 69 74 73 65 | re.the.peer.to.authenticate.itse |
eac40 | 6c 66 20 75 73 69 6e 67 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 | lf.using.one.of.the.following.pr |
eac60 | 6f 74 6f 63 6f 6c 73 3a 20 70 61 70 2c 20 63 68 61 70 2c 20 6d 73 63 68 61 70 2c 20 6d 73 63 68 | otocols:.pap,.chap,.mschap,.msch |
eac80 | 61 70 2d 76 32 2e 00 52 65 71 75 69 72 65 6d 65 6e 74 73 00 52 65 71 75 69 72 65 6d 65 6e 74 73 | ap-v2..Requirements.Requirements |
eaca0 | 20 74 6f 20 65 6e 61 62 6c 65 20 73 79 6e 70 72 6f 78 79 3a 00 52 65 71 75 69 72 65 6d 65 6e 74 | .to.enable.synproxy:.Requirement |
eacc0 | 73 3a 00 52 65 73 65 74 00 52 65 73 65 74 20 4f 70 65 6e 56 50 4e 00 52 65 73 65 74 20 63 6f 6d | s:.Reset.Reset.OpenVPN.Reset.com |
eace0 | 6d 61 6e 64 73 00 52 65 73 65 74 73 20 74 68 65 20 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 | mands.Resets.the.local.DNS.forwa |
ead00 | 72 64 69 6e 67 20 63 61 63 68 65 20 64 61 74 61 62 61 73 65 2e 20 59 6f 75 20 63 61 6e 20 72 65 | rding.cache.database..You.can.re |
ead20 | 73 65 74 20 74 68 65 20 63 61 63 68 65 20 66 6f 72 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 6f 72 | set.the.cache.for.all.entries.or |
ead40 | 20 6f 6e 6c 79 20 66 6f 72 20 65 6e 74 72 69 65 73 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 | .only.for.entries.to.a.specific. |
ead60 | 64 6f 6d 61 69 6e 2e 00 52 65 73 74 61 72 74 00 52 65 73 74 61 72 74 20 44 48 43 50 20 72 65 6c | domain..Restart.Restart.DHCP.rel |
ead80 | 61 79 20 73 65 72 76 69 63 65 00 52 65 73 74 61 72 74 20 44 48 43 50 76 36 20 72 65 6c 61 79 20 | ay.service.Restart.DHCPv6.relay. |
eada0 | 61 67 65 6e 74 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 00 52 65 73 74 61 72 74 20 61 20 67 69 76 | agent.immediately..Restart.a.giv |
eadc0 | 65 6e 20 63 6f 6e 74 61 69 6e 65 72 00 52 65 73 74 61 72 74 20 6d 44 4e 53 20 72 65 70 65 61 74 | en.container.Restart.mDNS.repeat |
eade0 | 65 72 20 73 65 72 76 69 63 65 2e 00 52 65 73 74 61 72 74 20 74 68 65 20 44 48 43 50 20 73 65 72 | er.service..Restart.the.DHCP.ser |
eae00 | 76 65 72 00 52 65 73 74 61 72 74 20 74 68 65 20 49 47 4d 50 20 70 72 6f 78 79 20 70 72 6f 63 65 | ver.Restart.the.IGMP.proxy.proce |
eae20 | 73 73 2e 00 52 65 73 74 61 72 74 20 74 68 65 20 53 53 48 20 64 61 65 6d 6f 6e 20 70 72 6f 63 65 | ss..Restart.the.SSH.daemon.proce |
eae40 | 73 73 2c 20 74 68 65 20 63 75 72 72 65 6e 74 20 73 65 73 73 69 6f 6e 20 69 73 20 6e 6f 74 20 61 | ss,.the.current.session.is.not.a |
eae60 | 66 66 65 63 74 65 64 2c 20 6f 6e 6c 79 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 64 61 65 | ffected,.only.the.background.dae |
eae80 | 6d 6f 6e 20 69 73 20 72 65 73 74 61 72 74 65 64 2e 00 52 65 73 74 61 72 74 73 20 74 68 65 20 44 | mon.is.restarted..Restarts.the.D |
eaea0 | 4e 53 20 72 65 63 75 72 73 6f 72 20 70 72 6f 63 65 73 73 2e 20 54 68 69 73 20 61 6c 73 6f 20 69 | NS.recursor.process..This.also.i |
eaec0 | 6e 76 61 6c 69 64 61 74 65 73 20 74 68 65 20 6c 6f 63 61 6c 20 44 4e 53 20 66 6f 72 77 61 72 64 | nvalidates.the.local.DNS.forward |
eaee0 | 69 6e 67 20 63 61 63 68 65 2e 00 52 65 73 75 6c 74 69 6e 67 20 69 6e 00 52 65 73 75 6c 74 73 20 | ing.cache..Resulting.in.Results. |
eaf00 | 69 6e 3a 00 52 65 74 72 61 6e 73 6d 69 74 20 54 69 6d 65 72 00 52 65 74 72 69 65 76 65 20 63 75 | in:.Retransmit.Timer.Retrieve.cu |
eaf20 | 72 72 65 6e 74 20 73 74 61 74 69 73 74 69 63 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 | rrent.statistics.of.connection.t |
eaf40 | 72 61 63 6b 69 6e 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 74 72 69 65 76 65 20 63 75 72 72 | racking.subsystem..Retrieve.curr |
eaf60 | 65 6e 74 20 73 74 61 74 75 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e | ent.status.of.connection.trackin |
eaf80 | 67 20 73 75 62 73 79 73 74 65 6d 2e 00 52 65 74 72 69 65 76 65 20 70 75 62 6c 69 63 20 6b 65 79 | g.subsystem..Retrieve.public.key |
eafa0 | 20 70 6f 72 74 69 6f 6e 20 66 72 6f 6d 20 63 6f 6e 66 69 67 75 72 65 64 20 57 49 72 65 47 75 61 | .portion.from.configured.WIreGua |
eafc0 | 72 64 20 69 6e 74 65 72 66 61 63 65 2e 00 52 65 76 65 72 73 65 2d 70 72 6f 78 79 00 52 6f 75 6e | rd.interface..Reverse-proxy.Roun |
eafe0 | 64 20 52 6f 62 69 6e 00 52 6f 75 74 65 20 41 67 67 72 65 67 61 74 69 6f 6e 20 43 6f 6e 66 69 67 | d.Robin.Route.Aggregation.Config |
eb000 | 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 44 61 6d 70 65 6e 69 6e 67 00 52 6f 75 74 65 20 46 69 | uration.Route.Dampening.Route.Fi |
eb020 | 6c 74 65 72 69 6e 67 00 52 6f 75 74 65 20 46 69 6c 74 65 72 69 6e 67 20 43 6f 6e 66 69 67 75 72 | ltering.Route.Filtering.Configur |
eb040 | 61 74 69 6f 6e 00 52 6f 75 74 65 20 4d 61 70 00 52 6f 75 74 65 20 4d 61 70 20 50 6f 6c 69 63 79 | ation.Route.Map.Route.Map.Policy |
eb060 | 00 52 6f 75 74 65 20 52 65 64 69 73 74 72 69 62 75 74 69 6f 6e 00 52 6f 75 74 65 20 52 65 66 6c | .Route.Redistribution.Route.Refl |
eb080 | 65 63 74 6f 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 | ector.Configuration.Route.Select |
eb0a0 | 69 6f 6e 00 52 6f 75 74 65 20 53 65 6c 65 63 74 69 6f 6e 20 43 6f 6e 66 69 67 75 72 61 74 69 6f | ion.Route.Selection.Configuratio |
eb0c0 | 6e 00 52 6f 75 74 65 20 61 6e 64 20 52 6f 75 74 65 36 20 50 6f 6c 69 63 79 00 52 6f 75 74 65 20 | n.Route.and.Route6.Policy.Route. |
eb0e0 | 64 61 6d 70 65 6e 69 6e 67 20 77 69 63 68 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | dampening.wich.described.in.:rfc |
eb100 | 3a 60 32 34 33 39 60 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 69 64 65 6e 74 69 66 79 20 | :`2439`.enables.you.to.identify. |
eb120 | 72 6f 75 74 65 73 20 74 68 61 74 20 72 65 70 65 61 74 65 64 6c 79 20 66 61 69 6c 20 61 6e 64 20 | routes.that.repeatedly.fail.and. |
eb140 | 72 65 74 75 72 6e 2e 20 49 66 20 72 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 69 73 20 65 6e | return..If.route.dampening.is.en |
eb160 | 61 62 6c 65 64 2c 20 61 6e 20 75 6e 73 74 61 62 6c 65 20 72 6f 75 74 65 20 61 63 63 75 6d 75 6c | abled,.an.unstable.route.accumul |
eb180 | 61 74 65 73 20 70 65 6e 61 6c 74 69 65 73 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 72 6f 75 | ates.penalties.each.time.the.rou |
eb1a0 | 74 65 20 66 61 69 6c 73 20 61 6e 64 20 72 65 74 75 72 6e 73 2e 20 49 66 20 74 68 65 20 61 63 63 | te.fails.and.returns..If.the.acc |
eb1c0 | 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 69 65 73 20 65 78 63 65 65 64 20 61 20 74 68 72 65 | umulated.penalties.exceed.a.thre |
eb1e0 | 73 68 6f 6c 64 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 64 | shold,.the.route.is.no.longer.ad |
eb200 | 76 65 72 74 69 73 65 64 2e 20 54 68 69 73 20 69 73 20 72 6f 75 74 65 20 73 75 70 70 72 65 73 73 | vertised..This.is.route.suppress |
eb220 | 69 6f 6e 2e 20 52 6f 75 74 65 73 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 73 75 70 70 72 | ion..Routes.that.have.been.suppr |
eb240 | 65 73 73 65 64 20 61 72 65 20 72 65 2d 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 74 68 65 20 72 6f | essed.are.re-entered.into.the.ro |
eb260 | 75 74 69 6e 67 20 74 61 62 6c 65 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 20 61 6d 6f 75 6e 74 | uting.table.only.when.the.amount |
eb280 | 20 6f 66 20 74 68 65 69 72 20 70 65 6e 61 6c 74 79 20 66 61 6c 6c 73 20 62 65 6c 6f 77 20 61 20 | .of.their.penalty.falls.below.a. |
eb2a0 | 74 68 72 65 73 68 6f 6c 64 2e 00 52 6f 75 74 65 20 66 69 6c 74 65 72 20 63 61 6e 20 62 65 20 61 | threshold..Route.filter.can.be.a |
eb2c0 | 70 70 6c 69 65 64 20 75 73 69 6e 67 20 61 20 72 6f 75 74 65 2d 6d 61 70 3a 00 52 6f 75 74 65 20 | pplied.using.a.route-map:.Route. |
eb2e0 | 6d 61 70 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 6c 20 63 6f 6d 6d 61 6e 64 2c 20 74 68 61 74 | map.is.a.powerfull.command,.that |
eb300 | 20 67 69 76 65 73 20 6e 65 74 77 6f 72 6b 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 73 20 61 20 | .gives.network.administrators.a. |
eb320 | 76 65 72 79 20 75 73 65 66 75 6c 20 61 6e 64 20 66 6c 65 78 69 62 6c 65 20 74 6f 6f 6c 20 66 6f | very.useful.and.flexible.tool.fo |
eb340 | 72 20 74 72 61 66 66 69 63 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 6d 61 | r.traffic.manipulation..Route.ma |
eb360 | 70 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 6d 61 74 63 68 20 61 20 | ps.can.be.configured.to.match.a. |
eb380 | 73 70 65 63 69 66 69 63 20 52 50 4b 49 20 76 61 6c 69 64 61 74 69 6f 6e 20 73 74 61 74 65 2e 20 | specific.RPKI.validation.state.. |
eb3a0 | 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 6c 6f 63 61 | This.allows.the.creation.of.loca |
eb3c0 | 6c 20 70 6f 6c 69 63 69 65 73 2c 20 77 68 69 63 68 20 68 61 6e 64 6c 65 20 42 47 50 20 72 6f 75 | l.policies,.which.handle.BGP.rou |
eb3e0 | 74 65 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 63 6f 6d 65 20 6f 66 20 74 68 65 20 | tes.based.on.the.outcome.of.the. |
eb400 | 50 72 65 66 69 78 20 4f 72 69 67 69 6e 20 56 61 6c 69 64 61 74 69 6f 6e 2e 00 52 6f 75 74 65 20 | Prefix.Origin.Validation..Route. |
eb420 | 6d 65 74 72 69 63 00 52 6f 75 74 65 20 74 61 67 20 74 6f 20 6d 61 74 63 68 2e 00 52 6f 75 74 65 | metric.Route.tag.to.match..Route |
eb440 | 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 00 52 6f 75 74 65 72 20 4c 69 66 65 74 69 6d 65 | r.Advertisements.Router.Lifetime |
eb460 | 00 52 6f 75 74 65 72 20 72 65 63 65 69 76 65 73 20 44 48 43 50 20 63 6c 69 65 6e 74 20 72 65 71 | .Router.receives.DHCP.client.req |
eb480 | 75 65 73 74 73 20 6f 6e 20 60 60 65 74 68 31 60 60 20 61 6e 64 20 72 65 6c 61 79 73 20 74 68 65 | uests.on.``eth1``.and.relays.the |
eb4a0 | 6d 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 61 74 20 31 30 2e 30 2e 31 2e 34 20 6f 6e 20 60 | m.to.the.server.at.10.0.1.4.on.` |
eb4c0 | 60 65 74 68 32 60 60 2e 00 52 6f 75 74 65 73 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 61 20 | `eth2``..Routes.exported.from.a. |
eb4e0 | 75 6e 69 63 61 73 74 20 56 52 46 20 74 6f 20 74 68 65 20 56 50 4e 20 52 49 42 20 6d 75 73 74 20 | unicast.VRF.to.the.VPN.RIB.must. |
eb500 | 62 65 20 61 75 67 6d 65 6e 74 65 64 20 62 79 20 74 77 6f 20 70 61 72 61 6d 65 74 65 72 73 3a 00 | be.augmented.by.two.parameters:. |
eb520 | 52 6f 75 74 65 73 20 6f 6e 20 4e 6f 64 65 20 32 3a 00 52 6f 75 74 65 73 20 74 68 61 74 20 61 72 | Routes.on.Node.2:.Routes.that.ar |
eb540 | 65 20 73 65 6e 74 20 66 72 6f 6d 20 70 72 6f 76 69 64 65 72 2c 20 72 73 2d 73 65 72 76 65 72 2c | e.sent.from.provider,.rs-server, |
eb560 | 20 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 28 6f 72 20 69 66 20 72 | .or.the.peer.local-role.(or.if.r |
eb580 | 65 63 65 69 76 65 64 20 62 79 20 63 75 73 74 6f 6d 65 72 2c 20 72 73 2d 63 6c 69 65 6e 74 2c 20 | eceived.by.customer,.rs-client,. |
eb5a0 | 6f 72 20 74 68 65 20 70 65 65 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 29 20 77 69 6c 6c 20 62 65 20 | or.the.peer.local-role).will.be. |
eb5c0 | 6d 61 72 6b 65 64 20 77 69 74 68 20 61 20 6e 65 77 20 4f 6e 6c 79 20 74 6f 20 43 75 73 74 6f 6d | marked.with.a.new.Only.to.Custom |
eb5e0 | 65 72 20 28 4f 54 43 29 20 61 74 74 72 69 62 75 74 65 2e 00 52 6f 75 74 65 73 20 77 69 74 68 20 | er.(OTC).attribute..Routes.with. |
eb600 | 61 20 64 69 73 74 61 6e 63 65 20 6f 66 20 32 35 35 20 61 72 65 20 65 66 66 65 63 74 69 76 65 6c | a.distance.of.255.are.effectivel |
eb620 | 79 20 64 69 73 61 62 6c 65 64 20 61 6e 64 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 74 | y.disabled.and.not.installed.int |
eb640 | 6f 20 74 68 65 20 6b 65 72 6e 65 6c 2e 00 52 6f 75 74 65 73 20 77 69 74 68 20 74 68 69 73 20 61 | o.the.kernel..Routes.with.this.a |
eb660 | 74 74 72 69 62 75 74 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 6e 74 20 74 6f 20 79 6f 75 | ttribute.can.only.be.sent.to.you |
eb680 | 72 20 6e 65 69 67 68 62 6f 72 20 69 66 20 79 6f 75 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 | r.neighbor.if.your.local-role.is |
eb6a0 | 20 70 72 6f 76 69 64 65 72 20 6f 72 20 72 73 2d 73 65 72 76 65 72 2e 20 52 6f 75 74 65 73 20 77 | .provider.or.rs-server..Routes.w |
eb6c0 | 69 74 68 20 74 68 69 73 20 61 74 74 72 69 62 75 74 65 20 63 61 6e 20 62 65 20 72 65 63 65 69 76 | ith.this.attribute.can.be.receiv |
eb6e0 | 65 64 20 6f 6e 6c 79 20 69 66 20 79 6f 75 72 20 6c 6f 63 61 6c 2d 72 6f 6c 65 20 69 73 20 63 75 | ed.only.if.your.local-role.is.cu |
eb700 | 73 74 6f 6d 65 72 20 6f 72 20 72 73 2d 63 6c 69 65 6e 74 2e 00 52 6f 75 74 69 6e 65 00 52 6f 75 | stomer.or.rs-client..Routine.Rou |
eb720 | 74 69 6e 67 00 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 20 74 68 61 74 20 77 69 6c 6c 20 62 65 | ting.Routing.tables.that.will.be |
eb740 | 20 75 73 65 64 20 69 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 20 61 72 65 3a 00 52 75 6c 65 20 | .used.in.this.example.are:.Rule. |
eb760 | 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d | 10.matches.requests.with.the.dom |
eb780 | 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 31 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 | ain.name.``node1.example.com``.f |
eb7a0 | 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d | orwards.to.the.backend.``bk-api- |
eb7c0 | 30 31 60 60 00 52 75 6c 65 20 31 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 | 01``.Rule.10.matches.requests.wi |
eb7e0 | 74 68 20 74 68 65 20 65 78 61 63 74 20 55 52 4c 20 70 61 74 68 20 60 60 2f 2e 77 65 6c 6c 2d 6b | th.the.exact.URL.path.``/.well-k |
eb800 | 6e 6f 77 6e 2f 78 78 78 60 60 20 61 6e 64 20 72 65 64 69 72 65 63 74 73 20 74 6f 20 6c 6f 63 61 | nown/xxx``.and.redirects.to.loca |
eb820 | 74 69 6f 6e 20 60 60 2f 63 65 72 74 73 2f 60 60 2e 00 52 75 6c 65 20 31 31 30 20 69 73 20 68 69 | tion.``/certs/``..Rule.110.is.hi |
eb840 | 74 2c 20 73 6f 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 61 63 63 65 70 74 65 64 2e 00 52 75 | t,.so.connection.is.accepted..Ru |
eb860 | 6c 65 20 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 55 52 4c 20 | le.20.matches.requests.with.URL. |
eb880 | 70 61 74 68 73 20 65 6e 64 69 6e 67 20 69 6e 20 60 60 2f 6d 61 69 6c 60 60 20 6f 72 20 65 78 61 | paths.ending.in.``/mail``.or.exa |
eb8a0 | 63 74 20 70 61 74 68 20 60 60 2f 65 6d 61 69 6c 2f 62 61 72 60 60 20 72 65 64 69 72 65 63 74 20 | ct.path.``/email/bar``.redirect. |
eb8c0 | 74 6f 20 6c 6f 63 61 74 69 6f 6e 20 60 60 2f 70 6f 73 74 66 69 78 2f 60 60 2e 00 52 75 6c 65 20 | to.location.``/postfix/``..Rule. |
eb8e0 | 32 30 20 6d 61 74 63 68 65 73 20 72 65 71 75 65 73 74 73 20 77 69 74 68 20 74 68 65 20 64 6f 6d | 20.matches.requests.with.the.dom |
eb900 | 61 69 6e 20 6e 61 6d 65 20 60 60 6e 6f 64 65 32 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 20 66 | ain.name.``node2.example.com``.f |
eb920 | 6f 72 77 61 72 64 73 20 74 6f 20 74 68 65 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 61 70 69 2d | orwards.to.the.backend.``bk-api- |
eb940 | 30 32 60 60 00 52 75 6c 65 20 53 74 61 74 75 73 00 52 75 6c 65 2d 53 65 74 73 00 52 75 6c 65 2d | 02``.Rule.Status.Rule-Sets.Rule- |
eb960 | 73 65 74 20 6f 76 65 72 76 69 65 77 00 52 75 6c 65 73 00 52 75 6c 65 73 20 61 6c 6c 6f 77 20 74 | set.overview.Rules.Rules.allow.t |
eb980 | 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 72 6f 75 74 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 | o.control.and.route.incoming.tra |
eb9a0 | 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 62 61 63 6b 65 6e 64 20 62 61 73 65 64 20 6f | ffic.to.specific.backend.based.o |
eb9c0 | 6e 20 70 72 65 64 65 66 69 6e 65 64 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 52 75 6c 65 73 20 61 | n.predefined.conditions..Rules.a |
eb9e0 | 6c 6c 6f 77 20 74 6f 20 64 65 66 69 6e 65 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 | llow.to.define.matching.criteria |
eba00 | 20 61 6e 64 20 70 65 72 66 6f 72 6d 20 61 63 74 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e | .and.perform.action.accordingly. |
eba20 | 00 52 75 6c 65 73 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 20 66 6f 72 20 62 6f 74 68 20 | .Rules.will.be.created.for.both. |
eba40 | 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 | :ref:`source-nat`.and.:ref:`dest |
eba60 | 69 6e 61 74 69 6f 6e 2d 6e 61 74 60 2e 00 52 75 6e 6e 69 6e 67 20 42 65 68 69 6e 64 20 4e 41 54 | ination-nat`..Running.Behind.NAT |
eba80 | 00 53 4e 41 54 00 53 4e 41 54 36 34 00 53 4e 41 54 36 36 00 53 4e 4d 50 00 53 4e 4d 50 20 45 78 | .SNAT.SNAT64.SNAT66.SNMP.SNMP.Ex |
ebaa0 | 74 65 6e 73 69 6f 6e 73 00 53 4e 4d 50 20 50 72 6f 74 6f 63 6f 6c 20 56 65 72 73 69 6f 6e 73 00 | tensions.SNMP.Protocol.Versions. |
ebac0 | 53 4e 4d 50 20 63 61 6e 20 77 6f 72 6b 20 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 6f 72 20 61 | SNMP.can.work.synchronously.or.a |
ebae0 | 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 2e 20 49 6e 20 73 79 6e 63 68 72 6f 6e 6f 75 73 20 63 6f | synchronously..In.synchronous.co |
ebb00 | 6d 6d 75 6e 69 63 61 74 69 6f 6e 2c 20 74 68 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 73 79 73 74 | mmunication,.the.monitoring.syst |
ebb20 | 65 6d 20 71 75 65 72 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 70 65 72 69 6f 64 69 63 61 6c | em.queries.the.router.periodical |
ebb40 | 6c 79 2e 20 49 6e 20 61 73 79 6e 63 68 72 6f 6e 6f 75 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 | ly..In.asynchronous,.the.router. |
ebb60 | 73 65 6e 64 73 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 22 74 72 61 70 22 | sends.notification.to.the."trap" |
ebb80 | 20 28 74 68 65 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 68 6f 73 74 29 2e 00 53 4e 4d 50 20 69 73 20 | .(the.monitoring.host)..SNMP.is. |
ebba0 | 61 20 63 6f 6d 70 6f 6e 65 6e 74 20 6f 66 20 74 68 65 20 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 | a.component.of.the.Internet.Prot |
ebbc0 | 6f 63 6f 6c 20 53 75 69 74 65 20 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 65 20 49 6e 74 | ocol.Suite.as.defined.by.the.Int |
ebbe0 | 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 54 61 73 6b 20 46 6f 72 63 65 20 28 49 45 | ernet.Engineering.Task.Force.(IE |
ebc00 | 54 46 29 2e 20 49 74 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 61 20 73 65 74 20 6f 66 20 73 74 61 | TF)..It.consists.of.a.set.of.sta |
ebc20 | 6e 64 61 72 64 73 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 69 | ndards.for.network.management,.i |
ebc40 | 6e 63 6c 75 64 69 6e 67 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6c 61 79 65 72 20 70 72 | ncluding.an.application.layer.pr |
ebc60 | 6f 74 6f 63 6f 6c 2c 20 61 20 64 61 74 61 62 61 73 65 20 73 63 68 65 6d 61 2c 20 61 6e 64 20 61 | otocol,.a.database.schema,.and.a |
ebc80 | 20 73 65 74 20 6f 66 20 64 61 74 61 20 6f 62 6a 65 63 74 73 2e 00 53 4e 4d 50 20 69 73 20 77 69 | .set.of.data.objects..SNMP.is.wi |
ebca0 | 64 65 6c 79 20 75 73 65 64 20 69 6e 20 6e 65 74 77 6f 72 6b 20 6d 61 6e 61 67 65 6d 65 6e 74 20 | dely.used.in.network.management. |
ebcc0 | 66 6f 72 20 6e 65 74 77 6f 72 6b 20 6d 6f 6e 69 74 6f 72 69 6e 67 2e 20 53 4e 4d 50 20 65 78 70 | for.network.monitoring..SNMP.exp |
ebce0 | 6f 73 65 73 20 6d 61 6e 61 67 65 6d 65 6e 74 20 64 61 74 61 20 69 6e 20 74 68 65 20 66 6f 72 6d | oses.management.data.in.the.form |
ebd00 | 20 6f 66 20 76 61 72 69 61 62 6c 65 73 20 6f 6e 20 74 68 65 20 6d 61 6e 61 67 65 64 20 73 79 73 | .of.variables.on.the.managed.sys |
ebd20 | 74 65 6d 73 20 6f 72 67 61 6e 69 7a 65 64 20 69 6e 20 61 20 6d 61 6e 61 67 65 6d 65 6e 74 20 69 | tems.organized.in.a.management.i |
ebd40 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 61 73 65 20 28 4d 49 42 5f 29 20 77 68 69 63 68 20 64 65 73 | nformation.base.(MIB_).which.des |
ebd60 | 63 72 69 62 65 20 74 68 65 20 73 79 73 74 65 6d 20 73 74 61 74 75 73 20 61 6e 64 20 63 6f 6e 66 | cribe.the.system.status.and.conf |
ebd80 | 69 67 75 72 61 74 69 6f 6e 2e 20 54 68 65 73 65 20 76 61 72 69 61 62 6c 65 73 20 63 61 6e 20 74 | iguration..These.variables.can.t |
ebda0 | 68 65 6e 20 62 65 20 72 65 6d 6f 74 65 6c 79 20 71 75 65 72 69 65 64 20 28 61 6e 64 2c 20 69 6e | hen.be.remotely.queried.(and,.in |
ebdc0 | 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2c 20 6d 61 6e 69 70 75 6c 61 74 65 64 | .some.circumstances,.manipulated |
ebde0 | 29 20 62 79 20 6d 61 6e 61 67 69 6e 67 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 53 4e 4d 50 | ).by.managing.applications..SNMP |
ebe00 | 76 32 00 53 4e 4d 50 76 32 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 6e 79 20 61 | v2.SNMPv2.does.not.support.any.a |
ebe20 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 73 2c 20 6f 74 68 65 72 20 | uthentication.mechanisms,.other. |
ebe40 | 74 68 61 6e 20 63 6c 69 65 6e 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2c 20 73 6f 20 79 | than.client.source.address,.so.y |
ebe60 | 6f 75 20 73 68 6f 75 6c 64 20 73 70 65 63 69 66 79 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 63 | ou.should.specify.addresses.of.c |
ebe80 | 6c 69 65 6e 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6d 6f 6e 69 74 6f 72 20 74 68 65 20 72 6f | lients.allowed.to.monitor.the.ro |
ebea0 | 75 74 65 72 2e 20 4e 6f 74 65 20 74 68 61 74 20 53 4e 4d 50 76 32 20 61 6c 73 6f 20 73 75 70 70 | uter..Note.that.SNMPv2.also.supp |
ebec0 | 6f 72 74 73 20 6e 6f 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6e 64 20 61 6c 77 61 79 73 20 73 65 | orts.no.encryption.and.always.se |
ebee0 | 6e 64 73 20 64 61 74 61 20 69 6e 20 70 6c 61 69 6e 20 74 65 78 74 2e 00 53 4e 4d 50 76 32 20 69 | nds.data.in.plain.text..SNMPv2.i |
ebf00 | 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 61 6e 64 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 | s.the.original.and.most.commonly |
ebf20 | 20 75 73 65 64 20 76 65 72 73 69 6f 6e 2e 20 46 6f 72 20 61 75 74 68 6f 72 69 7a 69 6e 67 20 63 | .used.version..For.authorizing.c |
ebf40 | 6c 69 65 6e 74 73 2c 20 53 4e 4d 50 20 75 73 65 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 | lients,.SNMP.uses.the.concept.of |
ebf60 | 20 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 20 43 6f 6d 6d 75 6e 69 74 69 65 73 20 6d 61 79 20 68 61 | .communities..Communities.may.ha |
ebf80 | 76 65 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 73 65 74 20 74 6f 20 72 65 61 64 20 6f 6e 6c | ve.authorization.set.to.read.onl |
ebfa0 | 79 20 28 74 68 69 73 20 69 73 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 29 20 6f 72 20 74 6f 20 72 65 | y.(this.is.most.common).or.to.re |
ebfc0 | 61 64 20 61 6e 64 20 77 72 69 74 65 20 28 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 | ad.and.write.(this.option.is.not |
ebfe0 | 20 61 63 74 69 76 65 6c 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 29 2e 00 53 4e 4d 50 76 33 00 | .actively.used.in.VyOS)..SNMPv3. |
ec000 | 53 4e 4d 50 76 33 20 28 76 65 72 73 69 6f 6e 20 33 20 6f 66 20 74 68 65 20 53 4e 4d 50 20 70 72 | SNMPv3.(version.3.of.the.SNMP.pr |
ec020 | 6f 74 6f 63 6f 6c 29 20 69 6e 74 72 6f 64 75 63 65 64 20 61 20 77 68 6f 6c 65 20 73 6c 65 77 20 | otocol).introduced.a.whole.slew. |
ec040 | 6f 66 20 6e 65 77 20 73 65 63 75 72 69 74 79 20 72 65 6c 61 74 65 64 20 66 65 61 74 75 72 65 73 | of.new.security.related.features |
ec060 | 20 74 68 61 74 20 68 61 76 65 20 62 65 65 6e 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 74 68 65 | .that.have.been.missing.from.the |
ec080 | 20 70 72 65 76 69 6f 75 73 20 76 65 72 73 69 6f 6e 73 2e 20 53 65 63 75 72 69 74 79 20 77 61 73 | .previous.versions..Security.was |
ec0a0 | 20 6f 6e 65 20 6f 66 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 61 6b 6e 65 73 73 20 6f 66 20 | .one.of.the.biggest.weakness.of. |
ec0c0 | 53 4e 4d 50 20 75 6e 74 69 6c 20 76 33 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 6e | SNMP.until.v3..Authentication.in |
ec0e0 | 20 53 4e 4d 50 20 56 65 72 73 69 6f 6e 73 20 31 20 61 6e 64 20 32 20 61 6d 6f 75 6e 74 73 20 74 | .SNMP.Versions.1.and.2.amounts.t |
ec100 | 6f 20 6e 6f 74 68 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 61 20 70 61 73 73 77 6f 72 64 20 28 | o.nothing.more.than.a.password.( |
ec120 | 63 6f 6d 6d 75 6e 69 74 79 20 73 74 72 69 6e 67 29 20 73 65 6e 74 20 69 6e 20 63 6c 65 61 72 20 | community.string).sent.in.clear. |
ec140 | 74 65 78 74 20 62 65 74 77 65 65 6e 20 61 20 6d 61 6e 61 67 65 72 20 61 6e 64 20 61 67 65 6e 74 | text.between.a.manager.and.agent |
ec160 | 2e 20 45 61 63 68 20 53 4e 4d 50 76 33 20 6d 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 73 20 73 | ..Each.SNMPv3.message.contains.s |
ec180 | 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 73 20 77 68 69 63 68 20 61 72 65 20 65 6e 63 | ecurity.parameters.which.are.enc |
ec1a0 | 6f 64 65 64 20 61 73 20 61 6e 20 6f 63 74 65 74 20 73 74 72 69 6e 67 2e 20 54 68 65 20 6d 65 61 | oded.as.an.octet.string..The.mea |
ec1c0 | 6e 69 6e 67 20 6f 66 20 74 68 65 73 65 20 73 65 63 75 72 69 74 79 20 70 61 72 61 6d 65 74 65 72 | ning.of.these.security.parameter |
ec1e0 | 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 73 65 63 75 72 69 74 79 20 6d 6f 64 65 6c 20 | s.depends.on.the.security.model. |
ec200 | 62 65 69 6e 67 20 75 73 65 64 2e 00 53 50 41 4e 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 6e 67 20 | being.used..SPAN.port.mirroring. |
ec220 | 63 61 6e 20 63 6f 70 79 20 74 68 65 20 69 6e 62 6f 75 6e 64 2f 6f 75 74 62 6f 75 6e 64 20 74 72 | can.copy.the.inbound/outbound.tr |
ec240 | 61 66 66 69 63 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 74 68 65 20 73 70 | affic.of.the.interface.to.the.sp |
ec260 | 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 69 | ecified.interface,.usually.the.i |
ec280 | 6e 74 65 72 66 61 63 65 20 63 61 6e 20 62 65 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 73 6f 6d | nterface.can.be.connected.to.som |
ec2a0 | 65 20 73 70 65 63 69 61 6c 20 65 71 75 69 70 6d 65 6e 74 2c 20 73 75 63 68 20 61 73 20 62 65 68 | e.special.equipment,.such.as.beh |
ec2c0 | 61 76 69 6f 72 20 63 6f 6e 74 72 6f 6c 20 73 79 73 74 65 6d 2c 20 69 6e 74 72 75 73 69 6f 6e 20 | avior.control.system,.intrusion. |
ec2e0 | 64 65 74 65 63 74 69 6f 6e 20 73 79 73 74 65 6d 20 61 6e 64 20 74 72 61 66 66 69 63 20 63 6f 6c | detection.system.and.traffic.col |
ec300 | 6c 65 63 74 6f 72 2c 20 61 6e 64 20 63 61 6e 20 63 6f 70 79 20 61 6c 6c 20 72 65 6c 61 74 65 64 | lector,.and.can.copy.all.related |
ec320 | 20 74 72 61 66 66 69 63 20 66 72 6f 6d 20 74 68 69 73 20 70 6f 72 74 2e 20 54 68 65 20 62 65 6e | .traffic.from.this.port..The.ben |
ec340 | 65 66 69 74 20 6f 66 20 6d 69 72 72 6f 72 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 69 73 | efit.of.mirroring.the.traffic.is |
ec360 | 20 74 68 61 74 20 74 68 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 69 73 20 69 73 6f 6c 61 74 65 | .that.the.application.is.isolate |
ec380 | 64 20 66 72 6f 6d 20 74 68 65 20 73 6f 75 72 63 65 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 6f | d.from.the.source.traffic.and.so |
ec3a0 | 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 69 6e 67 20 64 6f 65 73 20 6e 6f 74 | .application.processing.does.not |
ec3c0 | 20 61 66 66 65 63 74 20 74 68 65 20 74 72 61 66 66 69 63 20 6f 72 20 74 68 65 20 73 79 73 74 65 | .affect.the.traffic.or.the.syste |
ec3e0 | 6d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 00 53 53 48 00 53 53 48 20 3a 72 65 66 3a 60 73 73 68 | m.performance..SSH.SSH.:ref:`ssh |
ec400 | 5f 6b 65 79 5f 62 61 73 65 64 5f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 00 53 53 48 20 3a | _key_based_authentication`.SSH.: |
ec420 | 72 65 66 3a 60 73 73 68 5f 6f 70 65 72 61 74 69 6f 6e 60 00 53 53 48 20 63 6c 69 65 6e 74 00 53 | ref:`ssh_operation`.SSH.client.S |
ec440 | 53 48 20 70 72 6f 76 69 64 65 73 20 61 20 73 65 63 75 72 65 20 63 68 61 6e 6e 65 6c 20 6f 76 65 | SH.provides.a.secure.channel.ove |
ec460 | 72 20 61 6e 20 75 6e 73 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 20 69 6e 20 61 20 63 6c 69 65 | r.an.unsecured.network.in.a.clie |
ec480 | 6e 74 2d 73 65 72 76 65 72 20 61 72 63 68 69 74 65 63 74 75 72 65 2c 20 63 6f 6e 6e 65 63 74 69 | nt-server.architecture,.connecti |
ec4a0 | 6e 67 20 61 6e 20 53 53 48 20 63 6c 69 65 6e 74 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 77 69 74 | ng.an.SSH.client.application.wit |
ec4c0 | 68 20 61 6e 20 53 53 48 20 73 65 72 76 65 72 2e 20 43 6f 6d 6d 6f 6e 20 61 70 70 6c 69 63 61 74 | h.an.SSH.server..Common.applicat |
ec4e0 | 69 6f 6e 73 20 69 6e 63 6c 75 64 65 20 72 65 6d 6f 74 65 20 63 6f 6d 6d 61 6e 64 2d 6c 69 6e 65 | ions.include.remote.command-line |
ec500 | 20 6c 6f 67 69 6e 20 61 6e 64 20 72 65 6d 6f 74 65 20 63 6f 6d 6d 61 6e 64 20 65 78 65 63 75 74 | .login.and.remote.command.execut |
ec520 | 69 6f 6e 2c 20 62 75 74 20 61 6e 79 20 6e 65 74 77 6f 72 6b 20 73 65 72 76 69 63 65 20 63 61 6e | ion,.but.any.network.service.can |
ec540 | 20 62 65 20 73 65 63 75 72 65 64 20 77 69 74 68 20 53 53 48 2e 20 54 68 65 20 70 72 6f 74 6f 63 | .be.secured.with.SSH..The.protoc |
ec560 | 6f 6c 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 64 69 73 74 69 6e 67 75 69 73 68 65 73 20 62 | ol.specification.distinguishes.b |
ec580 | 65 74 77 65 65 6e 20 74 77 6f 20 6d 61 6a 6f 72 20 76 65 72 73 69 6f 6e 73 2c 20 72 65 66 65 72 | etween.two.major.versions,.refer |
ec5a0 | 72 65 64 20 74 6f 20 61 73 20 53 53 48 2d 31 20 61 6e 64 20 53 53 48 2d 32 2e 00 53 53 48 20 75 | red.to.as.SSH-1.and.SSH-2..SSH.u |
ec5c0 | 73 65 72 6e 61 6d 65 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 6e 20 53 53 48 20 63 6f 6e 6e | sername.to.establish.an.SSH.conn |
ec5e0 | 65 63 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 53 48 20 | ection.to.the.cache.server..SSH. |
ec600 | 77 61 73 20 64 65 73 69 67 6e 65 64 20 61 73 20 61 20 72 65 70 6c 61 63 65 6d 65 6e 74 20 66 6f | was.designed.as.a.replacement.fo |
ec620 | 72 20 54 65 6c 6e 65 74 20 61 6e 64 20 66 6f 72 20 75 6e 73 65 63 75 72 65 64 20 72 65 6d 6f 74 | r.Telnet.and.for.unsecured.remot |
ec640 | 65 20 73 68 65 6c 6c 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 63 68 20 61 73 20 74 68 65 20 42 65 | e.shell.protocols.such.as.the.Be |
ec660 | 72 6b 65 6c 65 79 20 72 6c 6f 67 69 6e 2c 20 72 73 68 2c 20 61 6e 64 20 72 65 78 65 63 20 70 72 | rkeley.rlogin,.rsh,.and.rexec.pr |
ec680 | 6f 74 6f 63 6f 6c 73 2e 20 54 68 6f 73 65 20 70 72 6f 74 6f 63 6f 6c 73 20 73 65 6e 64 20 69 6e | otocols..Those.protocols.send.in |
ec6a0 | 66 6f 72 6d 61 74 69 6f 6e 2c 20 6e 6f 74 61 62 6c 79 20 70 61 73 73 77 6f 72 64 73 2c 20 69 6e | formation,.notably.passwords,.in |
ec6c0 | 20 70 6c 61 69 6e 74 65 78 74 2c 20 72 65 6e 64 65 72 69 6e 67 20 74 68 65 6d 20 73 75 73 63 65 | .plaintext,.rendering.them.susce |
ec6e0 | 70 74 69 62 6c 65 20 74 6f 20 69 6e 74 65 72 63 65 70 74 69 6f 6e 20 61 6e 64 20 64 69 73 63 6c | ptible.to.interception.and.discl |
ec700 | 6f 73 75 72 65 20 75 73 69 6e 67 20 70 61 63 6b 65 74 20 61 6e 61 6c 79 73 69 73 2e 20 54 68 65 | osure.using.packet.analysis..The |
ec720 | 20 65 6e 63 72 79 70 74 69 6f 6e 20 75 73 65 64 20 62 79 20 53 53 48 20 69 73 20 69 6e 74 65 6e | .encryption.used.by.SSH.is.inten |
ec740 | 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 69 74 79 20 61 | ded.to.provide.confidentiality.a |
ec760 | 6e 64 20 69 6e 74 65 67 72 69 74 79 20 6f 66 20 64 61 74 61 20 6f 76 65 72 20 61 6e 20 75 6e 73 | nd.integrity.of.data.over.an.uns |
ec780 | 65 63 75 72 65 64 20 6e 65 74 77 6f 72 6b 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 49 6e 74 65 | ecured.network,.such.as.the.Inte |
ec7a0 | 72 6e 65 74 2e 00 53 53 49 44 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 49 45 45 45 20 38 30 | rnet..SSID.to.be.used.in.IEEE.80 |
ec7c0 | 32 2e 31 31 20 6d 61 6e 61 67 65 6d 65 6e 74 20 66 72 61 6d 65 73 00 53 53 4c 20 42 72 69 64 67 | 2.11.management.frames.SSL.Bridg |
ec7e0 | 69 6e 67 00 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 73 00 53 53 4c 20 43 65 72 74 69 66 69 | ing.SSL.Certificates.SSL.Certifi |
ec800 | 63 61 74 65 73 20 67 65 6e 65 72 61 74 69 6f 6e 00 53 53 4c 20 6d 61 74 63 68 20 53 65 72 76 65 | cates.generation.SSL.match.Serve |
ec820 | 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 20 6f 70 74 69 6f 6e 3a 00 | r.Name.Indication.(SNI).option:. |
ec840 | 53 53 54 50 20 43 6c 69 65 6e 74 00 53 53 54 50 20 43 6c 69 65 6e 74 20 4f 70 74 69 6f 6e 73 00 | SSTP.Client.SSTP.Client.Options. |
ec860 | 53 53 54 50 20 53 65 72 76 65 72 00 53 53 54 50 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f | SSTP.Server.SSTP.is.available.fo |
ec880 | 72 20 4c 69 6e 75 78 2c 20 42 53 44 2c 20 61 6e 64 20 57 69 6e 64 6f 77 73 2e 00 53 53 54 50 20 | r.Linux,.BSD,.and.Windows..SSTP. |
ec8a0 | 72 65 6d 6f 74 65 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 20 43 61 6e | remote.server.to.connect.to..Can |
ec8c0 | 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e | .be.either.an.IP.address.or.FQDN |
ec8e0 | 2e 00 53 54 50 20 50 61 72 61 6d 65 74 65 72 00 53 61 6c 74 2d 4d 69 6e 69 6f 6e 00 53 61 6c 74 | ..STP.Parameter.Salt-Minion.Salt |
ec900 | 53 74 61 63 6b 5f 20 69 73 20 50 79 74 68 6f 6e 2d 62 61 73 65 64 2c 20 6f 70 65 6e 2d 73 6f 75 | Stack_.is.Python-based,.open-sou |
ec920 | 72 63 65 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 65 76 65 6e 74 2d 64 72 69 76 65 6e 20 49 54 | rce.software.for.event-driven.IT |
ec940 | 20 61 75 74 6f 6d 61 74 69 6f 6e 2c 20 72 65 6d 6f 74 65 20 74 61 73 6b 20 65 78 65 63 75 74 69 | .automation,.remote.task.executi |
ec960 | 6f 6e 2c 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 61 6e 61 67 65 6d 65 6e 74 | on,.and.configuration.management |
ec980 | 2e 20 53 75 70 70 6f 72 74 69 6e 67 20 74 68 65 20 22 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 | ..Supporting.the."infrastructure |
ec9a0 | 20 61 73 20 63 6f 64 65 22 20 61 70 70 72 6f 61 63 68 20 74 6f 20 64 61 74 61 20 63 65 6e 74 65 | .as.code".approach.to.data.cente |
ec9c0 | 72 20 73 79 73 74 65 6d 20 61 6e 64 20 6e 65 74 77 6f 72 6b 20 64 65 70 6c 6f 79 6d 65 6e 74 20 | r.system.and.network.deployment. |
ec9e0 | 61 6e 64 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 75 | and.management,.configuration.au |
eca00 | 74 6f 6d 61 74 69 6f 6e 2c 20 53 65 63 4f 70 73 20 6f 72 63 68 65 73 74 72 61 74 69 6f 6e 2c 20 | tomation,.SecOps.orchestration,. |
eca20 | 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 20 72 65 6d 65 64 69 61 74 69 6f 6e 2c 20 61 6e 64 20 68 | vulnerability.remediation,.and.h |
eca40 | 79 62 72 69 64 20 63 6c 6f 75 64 20 63 6f 6e 74 72 6f 6c 2e 00 53 61 6d 65 20 61 73 20 65 78 70 | ybrid.cloud.control..Same.as.exp |
eca60 | 6f 72 74 2d 6c 69 73 74 2c 20 62 75 74 20 69 74 20 61 70 70 6c 69 65 73 20 74 6f 20 70 61 74 68 | ort-list,.but.it.applies.to.path |
eca80 | 73 20 61 6e 6e 6f 75 6e 63 65 64 20 69 6e 74 6f 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 | s.announced.into.specified.area. |
ecaa0 | 61 73 20 54 79 70 65 2d 33 20 73 75 6d 6d 61 72 79 2d 4c 53 41 73 2e 20 54 68 69 73 20 63 6f 6d | as.Type-3.summary-LSAs..This.com |
ecac0 | 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 53 61 | mand.makes.sense.in.ABR.only..Sa |
ecae0 | 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 53 56 44 20 77 69 74 68 20 56 | mple.configuration.of.SVD.with.V |
ecb00 | 4c 41 4e 20 74 6f 20 56 4e 49 20 6d 61 70 70 69 6e 67 73 20 69 73 20 73 68 6f 77 6e 20 62 65 6c | LAN.to.VNI.mappings.is.shown.bel |
ecb20 | 6f 77 2e 00 53 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 73 65 74 75 | ow..Sample.configuration.to.setu |
ecb40 | 70 20 4c 44 50 20 6f 6e 20 56 79 4f 53 00 53 63 61 6e 6e 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 | p.LDP.on.VyOS.Scanning.is.not.su |
ecb60 | 70 70 6f 72 74 65 64 20 6f 6e 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 64 72 69 76 65 72 73 20 | pported.on.all.wireless.drivers. |
ecb80 | 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 2e 20 52 65 66 65 72 20 74 6f 20 | and.wireless.hardware..Refer.to. |
ecba0 | 79 6f 75 72 20 64 72 69 76 65 72 20 61 6e 64 20 77 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 | your.driver.and.wireless.hardwar |
ecbc0 | 65 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 66 75 72 74 68 65 72 20 64 65 74 61 | e.documentation.for.further.deta |
ecbe0 | 69 6c 73 2e 00 53 63 72 69 70 74 20 65 78 65 63 75 74 69 6f 6e 00 53 63 72 69 70 74 20 74 6f 20 | ils..Script.execution.Script.to. |
ecc00 | 72 75 6e 20 62 65 66 6f 72 65 20 73 65 73 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6d | run.before.session.interface.com |
ecc20 | 65 73 20 75 70 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e | es.up.Script.to.run.when.session |
ecc40 | 20 69 6e 74 65 72 66 61 63 65 20 63 68 61 6e 67 65 64 20 62 79 20 52 41 44 49 55 53 20 43 6f 41 | .interface.changed.by.RADIUS.CoA |
ecc60 | 20 68 61 6e 64 6c 69 6e 67 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 | .handling.Script.to.run.when.ses |
ecc80 | 73 69 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 67 6f 69 6e 67 20 74 6f 20 74 65 72 6d 69 6e 61 74 | sion.interface.going.to.terminat |
ecca0 | 65 00 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 77 68 65 6e 20 73 65 73 73 69 6f 6e 20 69 6e 74 | e.Script.to.run.when.session.int |
eccc0 | 65 72 66 61 63 65 20 69 73 20 63 6f 6d 70 6c 65 74 65 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 | erface.is.completely.configured. |
ecce0 | 61 6e 64 20 73 74 61 72 74 65 64 00 53 63 72 69 70 74 69 6e 67 00 53 65 63 6f 6e 64 20 73 63 65 | and.started.Scripting.Second.sce |
ecd00 | 6e 61 72 69 6f 3a 20 61 70 70 6c 79 20 73 6f 75 72 63 65 20 4e 41 54 20 66 6f 72 20 61 6c 6c 20 | nario:.apply.source.NAT.for.all. |
ecd20 | 6f 75 74 67 6f 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d 20 4c 41 4e 20 31 30 | outgoing.connections.from.LAN.10 |
ecd40 | 2e 30 2e 30 2e 30 2f 38 2c 20 75 73 69 6e 67 20 33 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 | .0.0.0/8,.using.3.public.address |
ecd60 | 65 73 20 61 6e 64 20 65 71 75 61 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 57 65 20 77 69 | es.and.equal.distribution..We.wi |
ecd80 | 6c 6c 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 68 61 73 68 20 72 61 6e 64 6f 6d 6c 79 2e 00 53 | ll.generate.the.hash.randomly..S |
ecda0 | 65 63 72 65 74 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 | ecret.for.Dynamic.Authorization. |
ecdc0 | 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 4d 2f 43 6f 41 29 00 53 65 63 75 72 69 | Extension.server.(DM/CoA).Securi |
ecde0 | 74 79 00 53 65 63 75 72 69 74 79 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 | ty.Security/authentication.messa |
ece00 | 67 65 73 00 53 65 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 60 20 | ges.See.:rfc:`7761#section-4.1`. |
ece20 | 66 6f 72 20 64 65 74 61 69 6c 73 2e 00 53 65 65 20 62 65 6c 6f 77 20 74 68 65 20 64 69 66 66 65 | for.details..See.below.the.diffe |
ece40 | 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 | rent.parameters.available.for.th |
ece60 | 65 20 49 50 76 34 20 2a 2a 73 68 6f 77 2a 2a 20 63 6f 6d 6d 61 6e 64 3a 00 53 65 67 6d 65 6e 74 | e.IPv4.**show**.command:.Segment |
ece80 | 20 52 6f 75 74 69 6e 67 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 28 53 52 29 20 69 73 | .Routing.Segment.Routing.(SR).is |
ecea0 | 20 61 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 74 68 61 74 20 69 73 20 | .a.network.architecture.that.is. |
ecec0 | 73 69 6d 69 6c 61 72 20 74 6f 20 73 6f 75 72 63 65 2d 72 6f 75 74 69 6e 67 20 2e 20 49 6e 20 74 | similar.to.source-routing...In.t |
ecee0 | 68 69 73 20 61 72 63 68 69 74 65 63 74 75 72 65 2c 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f | his.architecture,.the.ingress.ro |
ecf00 | 75 74 65 72 20 61 64 64 73 20 61 20 6c 69 73 74 20 6f 66 20 73 65 67 6d 65 6e 74 73 2c 20 6b 6e | uter.adds.a.list.of.segments,.kn |
ecf20 | 6f 77 6e 20 61 73 20 53 49 44 73 2c 20 74 6f 20 74 68 65 20 70 61 63 6b 65 74 20 61 73 20 69 74 | own.as.SIDs,.to.the.packet.as.it |
ecf40 | 20 65 6e 74 65 72 73 20 74 68 65 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 73 65 20 73 65 67 6d 65 | .enters.the.network..These.segme |
ecf60 | 6e 74 73 20 72 65 70 72 65 73 65 6e 74 20 64 69 66 66 65 72 65 6e 74 20 70 6f 72 74 69 6f 6e 73 | nts.represent.different.portions |
ecf80 | 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 61 74 68 20 74 68 61 74 20 74 68 65 20 70 61 | .of.the.network.path.that.the.pa |
ecfa0 | 63 6b 65 74 20 77 69 6c 6c 20 74 61 6b 65 2e 00 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 | cket.will.take..Segment.Routing. |
ecfc0 | 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 | can.be.applied.to.an.existing.MP |
ecfe0 | 4c 53 2d 62 61 73 65 64 20 64 61 74 61 20 70 6c 61 6e 65 20 61 6e 64 20 64 65 66 69 6e 65 73 20 | LS-based.data.plane.and.defines. |
ed000 | 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 | a.control.plane.network.architec |
ed020 | 74 75 72 65 2e 20 49 6e 20 4d 50 4c 53 20 6e 65 74 77 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 | ture..In.MPLS.networks,.segments |
ed040 | 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 | .are.encoded.as.MPLS.labels.and. |
ed060 | 61 72 65 20 61 64 64 65 64 20 61 74 20 74 68 65 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 2e | are.added.at.the.ingress.router. |
ed080 | 20 54 68 65 73 65 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 20 74 68 65 6e 20 65 78 63 68 | .These.MPLS.labels.are.then.exch |
ed0a0 | 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 6e 74 65 72 69 6f 72 20 | anged.and.populated.by.Interior. |
ed0c0 | 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 73 20 28 49 47 50 73 29 20 6c 69 6b 65 20 49 53 | Gateway.Protocols.(IGPs).like.IS |
ed0e0 | 2d 49 53 20 6f 72 20 4f 53 50 46 20 77 68 69 63 68 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 6f 6e | -IS.or.OSPF.which.are.running.on |
ed100 | 20 6d 6f 73 74 20 49 53 50 73 2e 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 69 6e 67 20 28 53 52 29 | .most.ISPs..Segment.routing.(SR) |
ed120 | 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 20 70 72 6f 74 6f 63 6f 6c 73 20 74 6f | .is.used.by.the.IGP.protocols.to |
ed140 | 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2c 20 62 | .interconnect.network.devices,.b |
ed160 | 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 | elow.configuration.shows.how.to. |
ed180 | 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 49 53 2d 49 53 3a 00 53 65 67 6d 65 6e 74 20 72 6f 75 74 | enable.SR.on.IS-IS:.Segment.rout |
ed1a0 | 69 6e 67 20 28 53 52 29 20 69 73 20 75 73 65 64 20 62 79 20 74 68 65 20 49 47 50 20 70 72 6f 74 | ing.(SR).is.used.by.the.IGP.prot |
ed1c0 | 6f 63 6f 6c 73 20 74 6f 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 20 6e 65 74 77 6f 72 6b 20 64 65 | ocols.to.interconnect.network.de |
ed1e0 | 76 69 63 65 73 2c 20 62 65 6c 6f 77 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 68 6f 77 73 | vices,.below.configuration.shows |
ed200 | 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 53 52 20 6f 6e 20 4f 53 50 46 3a 00 53 65 67 6d 65 | .how.to.enable.SR.on.OSPF:.Segme |
ed220 | 6e 74 20 72 6f 75 74 69 6e 67 20 64 65 66 69 6e 65 73 20 61 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 | nt.routing.defines.a.control.pla |
ed240 | 6e 65 20 6e 65 74 77 6f 72 6b 20 61 72 63 68 69 74 65 63 74 75 72 65 20 61 6e 64 20 63 61 6e 20 | ne.network.architecture.and.can. |
ed260 | 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 4d 50 4c 53 20 62 | be.applied.to.an.existing.MPLS.b |
ed280 | 61 73 65 64 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 6e 20 74 68 65 20 4d 50 4c 53 20 6e 65 74 77 | ased.dataplane..In.the.MPLS.netw |
ed2a0 | 6f 72 6b 73 2c 20 73 65 67 6d 65 6e 74 73 20 61 72 65 20 65 6e 63 6f 64 65 64 20 61 73 20 4d 50 | orks,.segments.are.encoded.as.MP |
ed2c0 | 4c 53 20 6c 61 62 65 6c 73 20 61 6e 64 20 61 72 65 20 69 6d 70 6f 73 65 64 20 61 74 20 74 68 65 | LS.labels.and.are.imposed.at.the |
ed2e0 | 20 69 6e 67 72 65 73 73 20 72 6f 75 74 65 72 2e 20 4d 50 4c 53 20 6c 61 62 65 6c 73 20 61 72 65 | .ingress.router..MPLS.labels.are |
ed300 | 20 65 78 63 68 61 6e 67 65 64 20 61 6e 64 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 47 50 73 | .exchanged.and.populated.by.IGPs |
ed320 | 20 6c 69 6b 65 20 49 53 2d 49 53 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 61 73 20 70 | .like.IS-IS.Segment.Routing.as.p |
ed340 | 65 72 20 52 46 43 38 36 36 37 20 66 6f 72 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e 65 2e 20 49 | er.RFC8667.for.MPLS.dataplane..I |
ed360 | 74 20 73 75 70 70 6f 72 74 73 20 49 50 76 34 2c 20 49 50 76 36 20 61 6e 64 20 45 43 4d 50 20 61 | t.supports.IPv4,.IPv6.and.ECMP.a |
ed380 | 6e 64 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 43 69 73 63 6f | nd.has.been.tested.against.Cisco |
ed3a0 | 20 26 20 4a 75 6e 69 70 65 72 20 72 6f 75 74 65 72 73 2e 68 6f 77 65 76 65 72 2c 74 68 69 73 20 | .&.Juniper.routers.however,this. |
ed3c0 | 64 65 70 6c 6f 79 6d 65 6e 74 20 69 73 20 73 74 69 6c 6c 20 45 58 50 45 52 49 4d 45 4e 54 41 4c | deployment.is.still.EXPERIMENTAL |
ed3e0 | 20 66 6f 72 20 46 52 52 2e 00 53 65 6c 65 63 74 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 75 73 65 | .for.FRR..Select.TLS.version.use |
ed400 | 64 2e 00 53 65 6c 65 63 74 20 63 69 70 68 65 72 20 73 75 69 74 65 20 75 73 65 64 20 66 6f 72 20 | d..Select.cipher.suite.used.for. |
ed420 | 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6f 70 65 72 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 73 | cryptographic.operations..This.s |
ed440 | 65 74 74 69 6e 67 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 2e 00 53 65 6c 65 63 74 20 68 6f 77 20 | etting.is.mandatory..Select.how. |
ed460 | 6c 61 62 65 6c 73 20 61 72 65 20 61 6c 6c 6f 63 61 74 65 64 20 69 6e 20 74 68 65 20 67 69 76 65 | labels.are.allocated.in.the.give |
ed480 | 6e 20 56 52 46 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 70 65 72 2d 76 72 66 20 6d | n.VRF..By.default,.the.per-vrf.m |
ed4a0 | 6f 64 65 20 69 73 20 73 65 6c 65 63 74 65 64 2c 20 61 6e 64 20 6f 6e 65 20 6c 61 62 65 6c 20 69 | ode.is.selected,.and.one.label.i |
ed4c0 | 73 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 74 68 65 | s.used.for.all.prefixes.from.the |
ed4e0 | 20 56 52 46 2e 20 54 68 65 20 70 65 72 2d 6e 65 78 74 68 6f 70 20 77 69 6c 6c 20 75 73 65 20 61 | .VRF..The.per-nexthop.will.use.a |
ed500 | 20 75 6e 69 71 75 65 20 6c 61 62 65 6c 20 66 6f 72 20 61 6c 6c 20 70 72 65 66 69 78 65 73 20 74 | .unique.label.for.all.prefixes.t |
ed520 | 68 61 74 20 61 72 65 20 72 65 61 63 68 61 62 6c 65 20 76 69 61 20 74 68 65 20 73 61 6d 65 20 6e | hat.are.reachable.via.the.same.n |
ed540 | 65 78 74 68 6f 70 2e 00 53 65 6c 66 20 53 69 67 6e 65 64 20 43 41 00 53 65 6e 64 20 61 20 50 72 | exthop..Self.Signed.CA.Send.a.Pr |
ed560 | 6f 78 79 20 50 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 6f 6e 20 31 20 68 65 61 64 65 72 20 28 74 | oxy.Protocol.version.1.header.(t |
ed580 | 65 78 74 20 66 6f 72 6d 61 74 29 00 53 65 6e 64 20 61 20 50 72 6f 78 79 20 50 72 6f 74 6f 63 6f | ext.format).Send.a.Proxy.Protoco |
ed5a0 | 6c 20 76 65 72 73 69 6f 6e 20 32 20 68 65 61 64 65 72 20 28 62 69 6e 61 72 79 20 66 6f 72 6d 61 | l.version.2.header.(binary.forma |
ed5c0 | 74 29 00 53 65 6e 64 20 61 6c 6c 20 44 4e 53 20 71 75 65 72 69 65 73 20 74 6f 20 74 68 65 20 49 | t).Send.all.DNS.queries.to.the.I |
ed5e0 | 50 76 34 2f 49 50 76 36 20 44 4e 53 20 73 65 72 76 65 72 20 73 70 65 63 69 66 69 65 64 20 75 6e | Pv4/IPv6.DNS.server.specified.un |
ed600 | 64 65 72 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 6e 20 6f 70 74 69 6f 6e 61 6c 20 70 6f 72 74 | der.`<address>`.on.optional.port |
ed620 | 20 73 70 65 63 69 66 69 65 64 20 75 6e 64 65 72 20 60 3c 70 6f 72 74 3e 60 2e 20 54 68 65 20 70 | .specified.under.`<port>`..The.p |
ed640 | 6f 72 74 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 33 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 | ort.defaults.to.53..You.can.conf |
ed660 | 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 73 65 72 76 65 72 73 20 68 65 72 65 2e | igure.multiple.nameservers.here. |
ed680 | 00 53 65 6e 64 20 65 6d 70 74 79 20 53 53 49 44 20 69 6e 20 62 65 61 63 6f 6e 73 20 61 6e 64 20 | .Send.empty.SSID.in.beacons.and. |
ed6a0 | 69 67 6e 6f 72 65 20 70 72 6f 62 65 20 72 65 71 75 65 73 74 20 66 72 61 6d 65 73 20 74 68 61 74 | ignore.probe.request.frames.that |
ed6c0 | 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 66 75 6c 6c 20 53 53 49 44 2c 20 69 2e 65 2e 2c | .do.not.specify.full.SSID,.i.e., |
ed6e0 | 20 72 65 71 75 69 72 65 20 73 74 61 74 69 6f 6e 73 20 74 6f 20 6b 6e 6f 77 20 53 53 49 44 2e 00 | .require.stations.to.know.SSID.. |
ed700 | 53 65 6e 74 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 20 69 6e 20 74 68 65 20 | Sent.to.the.client.(LAC).in.the. |
ed720 | 48 6f 73 74 2d 4e 61 6d 65 20 61 74 74 72 69 62 75 74 65 00 53 65 72 69 61 6c 20 43 6f 6e 73 6f | Host-Name.attribute.Serial.Conso |
ed740 | 6c 65 00 53 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 73 20 63 61 6e 20 62 65 20 61 6e 79 20 | le.Serial.interfaces.can.be.any. |
ed760 | 69 6e 74 65 72 66 61 63 65 20 77 68 69 63 68 20 69 73 20 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e | interface.which.is.directly.conn |
ed780 | 65 63 74 65 64 20 74 6f 20 74 68 65 20 43 50 55 20 6f 72 20 63 68 69 70 73 65 74 20 28 6d 6f 73 | ected.to.the.CPU.or.chipset.(mos |
ed7a0 | 74 6c 79 20 6b 6e 6f 77 6e 20 61 73 20 61 20 74 74 79 53 20 69 6e 74 65 72 66 61 63 65 20 69 6e | tly.known.as.a.ttyS.interface.in |
ed7c0 | 20 4c 69 6e 75 78 29 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 55 53 42 20 74 6f 20 73 65 72 69 | .Linux).or.any.other.USB.to.seri |
ed7e0 | 61 6c 20 63 6f 6e 76 65 72 74 65 72 20 28 50 72 6f 6c 69 66 69 63 20 50 4c 32 33 30 33 20 6f 72 | al.converter.(Prolific.PL2303.or |
ed800 | 20 46 54 44 49 20 46 54 32 33 32 2f 46 54 34 32 33 32 20 62 61 73 65 64 20 63 68 69 70 73 29 2e | .FTDI.FT232/FT4232.based.chips). |
ed820 | 00 53 65 72 76 65 72 00 53 65 72 76 65 72 20 43 65 72 74 69 66 69 63 61 74 65 00 53 65 72 76 65 | .Server.Server.Certificate.Serve |
ed840 | 72 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 53 69 64 65 00 53 65 72 76 | r.Configuration.Server.Side.Serv |
ed860 | 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 53 65 72 76 65 72 20 6e 61 6d 65 73 20 66 6f | er.configuration.Server.names.fo |
ed880 | 72 20 76 69 72 74 75 61 6c 20 68 6f 73 74 73 20 69 74 20 63 61 6e 20 62 65 20 65 78 61 63 74 2c | r.virtual.hosts.it.can.be.exact, |
ed8a0 | 20 77 69 6c 64 63 61 72 64 20 6f 72 20 72 65 67 65 78 2e 00 53 65 72 76 65 72 3a 00 53 65 72 76 | .wildcard.or.regex..Server:.Serv |
ed8c0 | 69 63 65 00 53 65 72 76 69 63 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 72 65 73 | ice.Service.configuration.is.res |
ed8e0 | 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 62 69 6e 64 69 6e 67 20 74 6f 20 61 20 73 70 65 63 69 66 | ponsible.for.binding.to.a.specif |
ed900 | 69 63 20 70 6f 72 74 2c 20 77 68 69 6c 65 20 74 68 65 20 62 61 63 6b 65 6e 64 20 63 6f 6e 66 69 | ic.port,.while.the.backend.confi |
ed920 | 67 75 72 61 74 69 6f 6e 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 74 79 70 65 20 6f 66 20 | guration.determines.the.type.of. |
ed940 | 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 61 6e 64 | load.balancing.to.be.applied.and |
ed960 | 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 65 61 6c 20 73 65 72 76 65 72 73 20 74 6f 20 62 | .specifies.the.real.servers.to.b |
ed980 | 65 20 75 74 69 6c 69 7a 65 64 2e 00 53 65 74 20 42 46 44 20 70 65 65 72 20 49 50 76 34 20 61 64 | e.utilized..Set.BFD.peer.IPv4.ad |
ed9a0 | 64 72 65 73 73 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 00 53 65 74 20 42 47 50 20 63 6f | dress.or.IPv6.address.Set.BGP.co |
ed9c0 | 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 74 6f 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 2e 00 53 | mmunity-list.to.exactly.match..S |
ed9e0 | 65 74 20 42 47 50 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 61 74 74 72 69 62 75 74 | et.BGP.local.preference.attribut |
eda00 | 65 2e 00 53 65 74 20 42 47 50 20 6f 72 69 67 69 6e 20 63 6f 64 65 2e 00 53 65 74 20 42 47 50 20 | e..Set.BGP.origin.code..Set.BGP. |
eda20 | 6f 72 69 67 69 6e 61 74 6f 72 20 49 44 20 61 74 74 72 69 62 75 74 65 2e 00 53 65 74 20 42 47 50 | originator.ID.attribute..Set.BGP |
eda40 | 20 77 65 69 67 68 74 20 61 74 74 72 69 62 75 74 65 00 53 65 74 20 44 4e 41 54 20 72 75 6c 65 20 | .weight.attribute.Set.DNAT.rule. |
eda60 | 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 65 74 20 49 | 20.to.only.NAT.UDP.packets.Set.I |
eda80 | 50 20 66 72 61 67 6d 65 6e 74 20 6d 61 74 63 68 2c 20 77 68 65 72 65 3a 00 53 65 74 20 49 50 53 | P.fragment.match,.where:.Set.IPS |
edaa0 | 65 63 20 69 6e 62 6f 75 6e 64 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 73 2c 20 77 68 65 72 | ec.inbound.match.criterias,.wher |
edac0 | 65 3a 00 53 65 74 20 4f 53 50 46 20 65 78 74 65 72 6e 61 6c 20 6d 65 74 72 69 63 2d 74 79 70 65 | e:.Set.OSPF.external.metric-type |
edae0 | 2e 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 54 | ..Set.SNAT.rule.20.to.only.NAT.T |
edb00 | 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 00 53 65 74 20 53 4e 41 54 20 72 75 6c 65 | CP.and.UDP.packets.Set.SNAT.rule |
edb20 | 20 32 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b 65 74 73 20 61 72 72 69 76 69 6e 67 | .20.to.only.NAT.packets.arriving |
edb40 | 20 66 72 6f 6d 20 74 68 65 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 00 53 | .from.the.192.0.2.0/24.network.S |
edb60 | 65 74 20 53 4e 41 54 20 72 75 6c 65 20 33 30 20 74 6f 20 6f 6e 6c 79 20 4e 41 54 20 70 61 63 6b | et.SNAT.rule.30.to.only.NAT.pack |
edb80 | 65 74 73 20 61 72 72 69 76 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 32 30 33 2e 30 2e 31 31 33 2e | ets.arriving.from.the.203.0.113. |
edba0 | 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 70 6f 72 74 20 | 0/24.network.with.a.source.port. |
edbc0 | 6f 66 20 38 30 20 61 6e 64 20 34 34 33 00 53 65 74 20 53 53 4c 20 63 65 72 74 65 66 69 63 61 74 | of.80.and.443.Set.SSL.certeficat |
edbe0 | 65 20 3c 6e 61 6d 65 3e 20 66 6f 72 20 73 65 72 76 69 63 65 20 3c 6e 61 6d 65 3e 00 53 65 74 20 | e.<name>.for.service.<name>.Set. |
edc00 | 53 53 4c 20 63 65 72 74 69 66 69 63 61 74 65 20 3c 6e 61 6d 65 3e 20 66 6f 72 20 73 65 72 76 69 | SSL.certificate.<name>.for.servi |
edc20 | 63 65 20 3c 6e 61 6d 65 3e 00 53 65 74 20 54 43 50 2d 4d 53 53 20 28 6d 61 78 69 6d 75 6d 20 73 | ce.<name>.Set.TCP-MSS.(maximum.s |
edc40 | 65 67 6d 65 6e 74 20 73 69 7a 65 29 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 00 | egment.size).for.the.connection. |
edc60 | 53 65 74 20 54 54 4c 20 74 6f 20 33 30 30 20 73 65 63 6f 6e 64 73 00 53 65 74 20 56 69 72 74 75 | Set.TTL.to.300.seconds.Set.Virtu |
edc80 | 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 63 65 00 53 65 74 20 61 20 63 6f 6e 74 61 69 | al.Tunnel.Interface.Set.a.contai |
edca0 | 6e 65 72 20 64 65 73 63 72 69 70 74 69 6f 6e 00 53 65 74 20 61 20 64 65 73 63 72 69 70 74 69 6f | ner.description.Set.a.descriptio |
edcc0 | 6e 20 66 6f 72 20 74 68 65 20 73 68 61 70 65 72 2e 00 53 65 74 20 61 20 64 65 73 74 69 6e 61 74 | n.for.the.shaper..Set.a.destinat |
edce0 | 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 63 65 70 | ion.and/or.source.address..Accep |
edd00 | 74 65 64 20 69 6e 70 75 74 20 66 6f 72 20 69 70 76 34 3a 00 53 65 74 20 61 20 64 65 73 74 69 6e | ted.input.for.ipv4:.Set.a.destin |
edd20 | 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 20 73 6f 75 72 63 65 20 70 6f 72 74 2e 20 41 63 63 65 70 74 | ation.and/or.source.port..Accept |
edd40 | 65 64 20 69 6e 70 75 74 3a 00 53 65 74 20 61 20 68 75 6d 61 6e 20 72 65 61 64 61 62 6c 65 2c 20 | ed.input:.Set.a.human.readable,. |
edd60 | 64 65 73 63 72 69 70 74 69 76 65 20 61 6c 69 61 73 20 66 6f 72 20 74 68 69 73 20 63 6f 6e 6e 65 | descriptive.alias.for.this.conne |
edd80 | 63 74 69 6f 6e 2e 20 41 6c 69 61 73 20 69 73 20 75 73 65 64 20 62 79 20 65 2e 67 2e 20 74 68 65 | ction..Alias.is.used.by.e.g..the |
edda0 | 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 60 20 63 6f 6d 6d 61 6e | .:opcmd:`show.interfaces`.comman |
eddc0 | 64 20 6f 72 20 53 4e 4d 50 20 62 61 73 65 64 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 74 6f 6f 6c 73 | d.or.SNMP.based.monitoring.tools |
edde0 | 2e 00 53 65 74 20 61 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d | ..Set.a.limit.on.the.maximum.num |
ede00 | 62 65 72 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 20 6c 6f 67 67 65 64 2d 69 6e 20 75 73 65 72 | ber.of.concurrent.logged-in.user |
ede20 | 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 65 74 20 61 20 6d 65 61 6e 69 6e 67 66 75 | s.on.the.system..Set.a.meaningfu |
ede40 | 6c 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 61 20 6e 61 6d 65 64 20 61 70 69 20 6b | l.description..Set.a.named.api.k |
ede60 | 65 79 2e 20 45 76 65 72 79 20 6b 65 79 20 68 61 73 20 74 68 65 20 73 61 6d 65 2c 20 66 75 6c 6c | ey..Every.key.has.the.same,.full |
ede80 | 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 65 74 20 | .permissions.on.the.system..Set. |
edea0 | 61 20 72 75 6c 65 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 20 61 20 73 70 65 63 69 66 | a.rule.description..Set.a.specif |
edec0 | 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 53 65 74 20 61 20 73 70 65 63 69 66 | ic.connection.mark..Set.a.specif |
edee0 | 69 63 20 70 61 63 6b 65 74 20 6d 61 72 6b 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 66 6f 72 20 74 | ic.packet.mark..Set.action.for.t |
edf00 | 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 61 63 74 69 6f 6e 20 | he.route-map.policy..Set.action. |
edf20 | 74 6f 20 74 61 6b 65 20 6f 6e 20 65 6e 74 72 69 65 73 20 6d 61 74 63 68 69 6e 67 20 74 68 69 73 | to.take.on.entries.matching.this |
edf40 | 20 72 75 6c 65 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 41 20 28 41 64 64 72 65 73 73 29 | .rule..Set.an.:abbr:`A.(Address) |
edf60 | 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 61 6e 64 20 60 60 61 | `.record..Supports.``@``.and.``a |
edf80 | 6e 79 60 60 20 6b 65 79 77 6f 72 64 73 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 41 41 41 | ny``.keywords..Set.an.:abbr:`AAA |
edfa0 | 41 20 28 49 50 76 36 20 41 64 64 72 65 73 73 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 | A.(IPv6.Address)`.record..Suppor |
edfc0 | 74 73 20 60 60 40 60 60 20 61 6e 64 20 60 60 61 6e 79 60 60 20 6b 65 79 77 6f 72 64 73 2e 00 53 | ts.``@``.and.``any``.keywords..S |
edfe0 | 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 43 4e 41 4d 45 20 28 43 61 6e 6f 6e 69 63 61 6c 20 6e 61 | et.an.:abbr:`CNAME.(Canonical.na |
ee000 | 6d 65 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 | me)`.record..Supports.``@``.keyw |
ee020 | 6f 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 4e 41 50 54 52 20 28 4e 61 6d 69 6e 67 | ord..Set.an.:abbr:`NAPTR.(Naming |
ee040 | 20 61 75 74 68 6f 72 69 74 79 20 70 6f 69 6e 74 65 72 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 | .authority.pointer)`.record..Sup |
ee060 | 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 2e 20 4e 41 50 54 52 20 72 65 63 6f 72 | ports.``@``.keyword..NAPTR.recor |
ee080 | 64 73 20 73 75 70 70 6f 72 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 74 69 6f 6e 73 | ds.support.the.following.options |
ee0a0 | 3a 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 4e 53 20 28 4e 61 6d 65 73 65 72 76 65 72 29 60 | :.Set.an.:abbr:`NS.(Nameserver)` |
ee0c0 | 20 72 65 63 6f 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 50 54 52 20 28 50 6f 69 6e | .record..Set.an.:abbr:`PTR.(Poin |
ee0e0 | 74 65 72 20 72 65 63 6f 72 64 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 73 20 60 60 | ter.record)`.record..Supports.`` |
ee100 | 40 60 60 20 6b 65 79 77 6f 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 62 62 72 3a 60 53 50 46 20 28 | @``.keyword..Set.an.:abbr:`SPF.( |
ee120 | 53 65 6e 64 65 72 20 70 6f 6c 69 63 79 20 66 72 61 6d 65 77 6f 72 6b 29 60 20 72 65 63 6f 72 64 | Sender.policy.framework)`.record |
ee140 | 2e 20 53 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 2e 00 53 65 74 20 61 6e | ..Supports.``@``.keyword..Set.an |
ee160 | 20 3a 61 62 62 72 3a 60 53 52 56 20 28 53 65 72 76 69 63 65 29 60 20 72 65 63 6f 72 64 2e 20 53 | .:abbr:`SRV.(Service)`.record..S |
ee180 | 75 70 70 6f 72 74 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 2e 00 53 65 74 20 61 6e 20 3a 61 | upports.``@``.keyword..Set.an.:a |
ee1a0 | 62 62 72 3a 60 54 58 54 20 28 54 65 78 74 29 60 20 72 65 63 6f 72 64 2e 20 53 75 70 70 6f 72 74 | bbr:`TXT.(Text)`.record..Support |
ee1c0 | 73 20 60 60 40 60 60 20 6b 65 79 77 6f 72 64 2e 00 53 65 74 20 61 6e 20 41 50 49 2d 4b 45 59 20 | s.``@``.keyword..Set.an.API-KEY. |
ee1e0 | 69 73 20 74 68 65 20 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 | is.the.minimal.configuration.to. |
ee200 | 67 65 74 20 61 20 77 6f 72 6b 69 6e 67 20 41 50 49 20 45 6e 64 70 6f 69 6e 74 2e 00 53 65 74 20 | get.a.working.API.Endpoint..Set. |
ee220 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 54 68 65 20 63 6f 6e 66 | authentication.backend..The.conf |
ee240 | 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 61 63 6b 65 6e 64 20 69 73 | igured.authentication.backend.is |
ee260 | 20 75 73 65 64 20 66 6f 72 20 61 6c 6c 20 71 75 65 72 69 65 73 2e 00 53 65 74 20 63 6f 6e 74 61 | .used.for.all.queries..Set.conta |
ee280 | 69 6e 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 6f 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 | iner.capabilities.or.permissions |
ee2a0 | 2e 00 53 65 74 20 64 65 6c 61 79 20 62 65 74 77 65 65 6e 20 67 72 61 74 75 69 74 6f 75 73 20 41 | ..Set.delay.between.gratuitous.A |
ee2c0 | 52 50 20 6d 65 73 73 61 67 65 73 20 73 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 | RP.messages.sent.on.an.interface |
ee2e0 | 2e 00 53 65 74 20 64 65 6c 61 79 20 66 6f 72 20 73 65 63 6f 6e 64 20 73 65 74 20 6f 66 20 67 72 | ..Set.delay.for.second.set.of.gr |
ee300 | 61 74 75 69 74 6f 75 73 20 41 52 50 73 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 | atuitous.ARPs.after.transition.t |
ee320 | 6f 20 4d 41 53 54 45 52 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 60 3c 74 65 78 74 | o.MASTER..Set.description.`<text |
ee340 | 3e 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 73 65 72 76 69 63 65 20 62 65 69 6e 67 | >`.for.dynamic.DNS.service.being |
ee360 | 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 | .configured..Set.description.for |
ee380 | 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 | .as-path-list.policy..Set.descri |
ee3a0 | 70 74 69 6f 6e 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e | ption.for.community-list.policy. |
ee3c0 | 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 65 78 74 63 6f 6d 6d 75 6e 69 74 | .Set.description.for.extcommunit |
ee3e0 | 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 | y-list.policy..Set.description.f |
ee400 | 6f 72 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 | or.large-community-list.policy.. |
ee420 | 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 20 69 6e 20 49 50 76 36 | Set.description.for.rule.in.IPv6 |
ee440 | 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f | .prefix-list..Set.description.fo |
ee460 | 72 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 2e 00 53 65 74 20 64 | r.rule.in.the.prefix-list..Set.d |
ee480 | 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 72 75 6c 65 2e 00 53 65 74 20 64 65 73 63 72 69 70 | escription.for.rule..Set.descrip |
ee4a0 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 53 | tion.for.the.IPv6.access.list..S |
ee4c0 | 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 49 50 76 36 20 70 72 65 66 | et.description.for.the.IPv6.pref |
ee4e0 | 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 | ix-list.policy..Set.description. |
ee500 | 66 6f 72 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 2e 00 53 65 74 20 64 65 73 63 72 69 70 | for.the.access.list..Set.descrip |
ee520 | 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2e | tion.for.the.prefix-list.policy. |
ee540 | 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 6d | .Set.description.for.the.route-m |
ee560 | 61 70 20 70 6f 6c 69 63 79 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 74 | ap.policy..Set.description.for.t |
ee580 | 68 65 20 72 75 6c 65 20 69 6e 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2e | he.rule.in.the.route-map.policy. |
ee5a0 | 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 20 6f 66 20 74 68 65 20 70 65 65 72 20 6f 72 20 | .Set.description.of.the.peer.or. |
ee5c0 | 70 65 65 72 20 67 72 6f 75 70 2e 00 53 65 74 20 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 53 65 74 | peer.group..Set.description..Set |
ee5e0 | 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 | .destination.address.or.prefix.t |
ee600 | 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 72 6f 75 74 69 6e 67 | o.match..Set.destination.routing |
ee620 | 20 70 72 6f 74 6f 63 6f 6c 20 6d 65 74 72 69 63 2e 20 41 64 64 20 6f 72 20 73 75 62 74 72 61 63 | .protocol.metric..Add.or.subtrac |
ee640 | 74 20 6d 65 74 72 69 63 2c 20 6f 72 20 73 65 74 20 6d 65 74 72 69 63 20 76 61 6c 75 65 2e 00 53 | t.metric,.or.set.metric.value..S |
ee660 | 65 74 20 65 74 68 31 20 74 6f 20 62 65 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 69 6e 74 65 | et.eth1.to.be.the.listening.inte |
ee680 | 72 66 61 63 65 20 66 6f 72 20 74 68 65 20 44 48 43 50 76 36 20 72 65 6c 61 79 2e 00 53 65 74 20 | rface.for.the.DHCPv6.relay..Set. |
ee6a0 | 65 78 65 63 75 74 69 6f 6e 20 74 69 6d 65 20 69 6e 20 63 6f 6d 6d 6f 6e 20 63 72 6f 6e 5f 20 74 | execution.time.in.common.cron_.t |
ee6c0 | 69 6d 65 20 66 6f 72 6d 61 74 2e 20 41 20 63 72 6f 6e 20 60 3c 73 70 65 63 3e 60 20 6f 66 20 60 | ime.format..A.cron.`<spec>`.of.` |
ee6e0 | 60 33 30 20 2a 2f 36 20 2a 20 2a 20 2a 60 60 20 77 6f 75 6c 64 20 65 78 65 63 75 74 65 20 74 68 | `30.*/6.*.*.*``.would.execute.th |
ee700 | 65 20 60 3c 74 61 73 6b 3e 60 20 61 74 20 6d 69 6e 75 74 65 20 33 30 20 70 61 73 74 20 65 76 65 | e.`<task>`.at.minute.30.past.eve |
ee720 | 72 79 20 36 74 68 20 68 6f 75 72 2e 00 53 65 74 20 65 78 74 63 6f 6d 6d 75 6e 69 74 79 20 62 61 | ry.6th.hour..Set.extcommunity.ba |
ee740 | 6e 64 77 69 64 74 68 00 53 65 74 20 69 66 20 61 6e 74 65 6e 6e 61 20 70 61 74 74 65 72 6e 20 64 | ndwidth.Set.if.antenna.pattern.d |
ee760 | 6f 65 73 20 6e 6f 74 20 63 68 61 6e 67 65 20 64 75 72 69 6e 67 20 74 68 65 20 6c 69 66 65 74 69 | oes.not.change.during.the.lifeti |
ee780 | 6d 65 20 6f 66 20 61 6e 20 61 73 73 6f 63 69 61 74 69 6f 6e 00 53 65 74 20 69 6e 62 6f 75 6e 64 | me.of.an.association.Set.inbound |
ee7a0 | 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 69 6e 74 65 72 66 61 | .interface.to.match..Set.interfa |
ee7c0 | 63 65 73 20 74 6f 20 61 20 7a 6f 6e 65 2e 20 41 20 7a 6f 6e 65 20 63 61 6e 20 68 61 76 65 20 6d | ces.to.a.zone..A.zone.can.have.m |
ee7e0 | 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2e 20 42 75 74 20 61 6e 20 69 6e 74 65 72 | ultiple.interfaces..But.an.inter |
ee800 | 66 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 61 20 6d 65 6d 62 65 72 20 69 6e 20 6f 6e 65 | face.can.only.be.a.member.in.one |
ee820 | 20 7a 6f 6e 65 2e 00 53 65 74 20 6c 6f 63 61 6c 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 | .zone..Set.local.:abbr:`ASN.(Aut |
ee840 | 6f 6e 6f 6d 6f 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 74 68 61 74 20 74 68 69 | onomous.System.Number)`.that.thi |
ee860 | 73 20 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 69 73 20 69 73 20 61 20 61 | s.router.represents..This.is.a.a |
ee880 | 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 6c 6f 63 61 6c 20 61 75 74 | .mandatory.option!.Set.local.aut |
ee8a0 | 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 6e 75 6d 62 65 72 20 74 68 61 74 20 74 68 69 73 20 | onomous.system.number.that.this. |
ee8c0 | 72 6f 75 74 65 72 20 72 65 70 72 65 73 65 6e 74 73 2e 20 54 68 69 73 20 69 73 20 61 20 6d 61 6e | router.represents..This.is.a.man |
ee8e0 | 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 21 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 | datory.option!.Set.match.criteri |
ee900 | 61 20 62 61 73 65 64 20 6f 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6d 61 72 6b 2e 00 53 65 74 20 | a.based.on.connection.mark..Set. |
ee920 | 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 64 65 73 74 69 6e 61 74 | match.criteria.based.on.destinat |
ee940 | 69 6f 6e 20 70 6f 72 74 2c 20 77 68 65 72 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e | ion.port,.where.<match_criteria> |
ee960 | 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 | .could.be:.Set.match.criteria.ba |
ee980 | 73 65 64 20 6f 6e 20 73 65 73 73 69 6f 6e 20 73 74 61 74 65 2e 00 53 65 74 20 6d 61 74 63 68 20 | sed.on.session.state..Set.match. |
ee9a0 | 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 | criteria.based.on.source.or.dest |
ee9c0 | 69 6e 61 74 69 6f 6e 20 67 72 6f 75 70 73 2c 20 77 68 65 72 65 20 3c 74 65 78 74 3e 20 77 6f 75 | ination.groups,.where.<text>.wou |
ee9e0 | 6c 64 20 62 65 20 74 68 65 20 67 72 6f 75 70 20 6e 61 6d 65 2f 69 64 65 6e 74 69 66 69 65 72 2e | ld.be.the.group.name/identifier. |
eea00 | 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 27 21 27 20 66 6f 72 20 69 6e 76 65 72 | .Prepend.character.'!'.for.inver |
eea20 | 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 53 65 74 20 6d 61 74 63 68 | ted.matching.criteria..Set.match |
eea40 | 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 | .criteria.based.on.source.or.des |
eea60 | 74 69 6e 61 74 69 6f 6e 20 69 70 76 34 7c 69 70 76 36 20 61 64 64 72 65 73 73 2c 20 77 68 65 72 | tination.ipv4|ipv6.address,.wher |
eea80 | 65 20 3c 6d 61 74 63 68 5f 63 72 69 74 65 72 69 61 3e 20 63 6f 75 6c 64 20 62 65 3a 00 53 65 74 | e.<match_criteria>.could.be:.Set |
eeaa0 | 20 6d 61 74 63 68 20 63 72 69 74 65 72 69 61 20 62 61 73 65 64 20 6f 6e 20 74 63 70 20 66 6c 61 | .match.criteria.based.on.tcp.fla |
eeac0 | 67 73 2e 20 41 6c 6c 6f 77 65 64 20 76 61 6c 75 65 73 20 66 6f 72 20 54 43 50 20 66 6c 61 67 73 | gs..Allowed.values.for.TCP.flags |
eeae0 | 3a 20 53 59 4e 20 41 43 4b 20 46 49 4e 20 52 53 54 20 55 52 47 20 50 53 48 20 41 4c 4c 2e 20 57 | :.SYN.ACK.FIN.RST.URG.PSH.ALL..W |
eeb00 | 68 65 6e 20 73 70 65 63 69 66 79 69 6e 67 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 66 6c 61 | hen.specifying.more.than.one.fla |
eeb20 | 67 2c 20 66 6c 61 67 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 61 2d 73 65 70 61 72 61 74 | g,.flags.should.be.comma-separat |
eeb40 | 65 64 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 20 3a 20 76 61 6c 75 65 20 6f 66 20 27 53 59 4e 2c | ed..For.example.:.value.of.'SYN, |
eeb60 | 21 41 43 4b 2c 21 46 49 4e 2c 21 52 53 54 27 20 77 69 6c 6c 20 6f 6e 6c 79 20 6d 61 74 63 68 20 | !ACK,!FIN,!RST'.will.only.match. |
eeb80 | 70 61 63 6b 65 74 73 20 77 69 74 68 20 74 68 65 20 53 59 4e 20 66 6c 61 67 20 73 65 74 2c 20 61 | packets.with.the.SYN.flag.set,.a |
eeba0 | 6e 64 20 74 68 65 20 41 43 4b 2c 20 46 49 4e 20 61 6e 64 20 52 53 54 20 66 6c 61 67 73 20 75 6e | nd.the.ACK,.FIN.and.RST.flags.un |
eebc0 | 73 65 74 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 60 3c 73 69 7a 65 3e 60 20 6f 66 20 44 48 43 | set..Set.maximum.`<size>`.of.DHC |
eebe0 | 50 20 70 61 63 6b 65 74 73 20 69 6e 63 6c 75 64 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 | P.packets.including.relay.agent. |
eec00 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 20 44 48 43 50 20 70 61 63 6b 65 74 20 73 69 | information..If.a.DHCP.packet.si |
eec20 | 7a 65 20 73 75 72 70 61 73 73 65 73 20 74 68 69 73 20 76 61 6c 75 65 20 69 74 20 77 69 6c 6c 20 | ze.surpasses.this.value.it.will. |
eec40 | 62 65 20 66 6f 72 77 61 72 64 65 64 20 77 69 74 68 6f 75 74 20 61 70 70 65 6e 64 69 6e 67 20 72 | be.forwarded.without.appending.r |
eec60 | 65 6c 61 79 20 61 67 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 52 61 6e 67 65 20 36 34 | elay.agent.information..Range.64 |
eec80 | 2e 2e 2e 31 34 30 30 2c 20 64 65 66 61 75 6c 74 20 35 37 36 2e 00 53 65 74 20 6d 61 78 69 6d 75 | ...1400,.default.576..Set.maximu |
eeca0 | 6d 20 61 76 65 72 61 67 65 20 6d 61 74 63 68 69 6e 67 20 72 61 74 65 2e 20 46 6f 72 6d 61 74 20 | m.average.matching.rate..Format. |
eecc0 | 66 6f 72 20 72 61 74 65 3a 20 69 6e 74 65 67 65 72 2f 74 69 6d 65 5f 75 6e 69 74 2c 20 77 68 65 | for.rate:.integer/time_unit,.whe |
eece0 | 72 65 20 74 69 6d 65 5f 75 6e 69 74 20 63 6f 75 6c 64 20 62 65 20 61 6e 79 20 6f 6e 65 20 6f 66 | re.time_unit.could.be.any.one.of |
eed00 | 20 73 65 63 6f 6e 64 2c 20 6d 69 6e 75 74 65 2c 20 68 6f 75 72 20 6f 72 20 64 61 79 2e 46 6f 72 | .second,.minute,.hour.or.day.For |
eed20 | 20 65 78 61 6d 70 6c 65 20 31 2f 73 65 63 6f 6e 64 20 69 6d 70 6c 69 65 73 20 72 75 6c 65 20 74 | .example.1/second.implies.rule.t |
eed40 | 6f 20 62 65 20 6d 61 74 63 68 65 64 20 61 74 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 6f 6e | o.be.matched.at.an.average.of.on |
eed60 | 63 65 20 70 65 72 20 73 65 63 6f 6e 64 2e 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 63 | ce.per.second..Set.maximum.hop.c |
eed80 | 6f 75 6e 74 20 62 65 66 6f 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 | ount.before.packets.are.discarde |
eeda0 | 64 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 00 53 65 74 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 | d,.default:.10.Set.maximum.numbe |
eedc0 | 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 6f 20 61 6c 6f 77 20 69 6e 20 65 78 63 65 73 73 20 6f | r.of.packets.to.alow.in.excess.o |
eede0 | 66 20 72 61 74 65 2e 00 53 65 74 20 6d 69 6e 69 6d 75 6d 20 74 69 6d 65 20 69 6e 74 65 72 76 61 | f.rate..Set.minimum.time.interva |
eee00 | 6c 20 66 6f 72 20 72 65 66 72 65 73 68 69 6e 67 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 73 | l.for.refreshing.gratuitous.ARPs |
eee20 | 20 77 68 69 6c 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6d 6f 64 65 20 66 6f 72 20 49 50 73 65 | .while.MASTER..Set.mode.for.IPse |
eee40 | 63 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e | c.authentication.between.VyOS.an |
eee60 | 64 20 4c 32 54 50 20 63 6c 69 65 6e 74 73 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 | d.L2TP.clients..Set.number.of.gr |
eee80 | 61 74 75 69 74 6f 75 73 20 41 52 50 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 74 | atuitous.ARP.messages.to.send.at |
eeea0 | 20 61 20 74 69 6d 65 20 61 66 74 65 72 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 6f 20 4d 41 53 54 | .a.time.after.transition.to.MAST |
eeec0 | 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 | ER..Set.number.of.gratuitous.ARP |
eeee0 | 20 6d 65 73 73 61 67 65 73 20 74 6f 20 73 65 6e 64 20 61 74 20 61 20 74 69 6d 65 20 77 68 69 6c | .messages.to.send.at.a.time.whil |
eef00 | 65 20 4d 41 53 54 45 52 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 | e.MASTER..Set.number.of.seconds. |
eef20 | 66 6f 72 20 48 65 6c 6c 6f 20 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 | for.Hello.Interval.timer.value.. |
eef40 | 53 65 74 74 69 6e 67 20 74 68 69 73 20 76 61 6c 75 65 2c 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 | Setting.this.value,.Hello.packet |
eef60 | 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 74 69 6d 65 72 20 76 61 6c 75 65 20 | .will.be.sent.every.timer.value. |
eef80 | 73 65 63 6f 6e 64 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 | seconds.on.the.specified.interfa |
eefa0 | 63 65 2e 20 54 68 69 73 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 | ce..This.value.must.be.the.same. |
eefc0 | 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f | for.all.routers.attached.to.a.co |
eefe0 | 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 | mmon.network..The.default.value. |
ef000 | 69 73 20 31 30 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 | is.10.seconds..The.interval.rang |
ef020 | 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 2e 00 53 65 74 20 6e 75 6d 62 65 72 20 6f 66 20 73 | e.is.1.to.65535..Set.number.of.s |
ef040 | 65 63 6f 6e 64 73 20 66 6f 72 20 72 6f 75 74 65 72 20 44 65 61 64 20 49 6e 74 65 72 76 61 6c 20 | econds.for.router.Dead.Interval. |
ef060 | 74 69 6d 65 72 20 76 61 6c 75 65 20 75 73 65 64 20 66 6f 72 20 57 61 69 74 20 54 69 6d 65 72 20 | timer.value.used.for.Wait.Timer. |
ef080 | 61 6e 64 20 49 6e 61 63 74 69 76 69 74 79 20 54 69 6d 65 72 2e 20 54 68 69 73 20 76 61 6c 75 65 | and.Inactivity.Timer..This.value |
ef0a0 | 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 66 6f 72 20 61 6c 6c 20 72 6f 75 74 65 72 | .must.be.the.same.for.all.router |
ef0c0 | 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 61 20 63 6f 6d 6d 6f 6e 20 6e 65 74 77 6f 72 6b 2e 20 | s.attached.to.a.common.network.. |
ef0e0 | 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 34 30 20 73 65 63 6f 6e 64 73 2e | The.default.value.is.40.seconds. |
ef100 | 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 | .The.interval.range.is.1.to.6553 |
ef120 | 35 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 61 74 69 6f 6e 73 3a 20 45 78 70 | 5..Set.packet.modifications:.Exp |
ef140 | 6c 69 63 69 74 6c 79 20 73 65 74 20 54 43 50 20 4d 61 78 69 6d 75 6d 20 73 65 67 6d 65 6e 74 20 | licitly.set.TCP.Maximum.segment. |
ef160 | 73 69 7a 65 20 76 61 6c 75 65 2e 00 53 65 74 20 70 61 63 6b 65 74 20 6d 6f 64 69 66 69 63 61 74 | size.value..Set.packet.modificat |
ef180 | 69 6f 6e 73 3a 20 50 61 63 6b 65 74 20 44 69 66 66 65 72 65 6e 74 69 61 74 65 64 20 53 65 72 76 | ions:.Packet.Differentiated.Serv |
ef1a0 | 69 63 65 73 20 43 6f 64 65 70 6f 69 6e 74 20 28 44 53 43 50 29 00 53 65 74 20 70 61 72 61 6d 65 | ices.Codepoint.(DSCP).Set.parame |
ef1c0 | 74 65 72 73 20 66 6f 72 20 6d 61 74 63 68 69 6e 67 20 72 65 63 65 6e 74 6c 79 20 73 65 65 6e 20 | ters.for.matching.recently.seen. |
ef1e0 | 73 6f 75 72 63 65 73 2e 20 54 68 69 73 20 6d 61 74 63 68 20 63 6f 75 6c 64 20 62 65 20 75 73 65 | sources..This.match.could.be.use |
ef200 | 64 20 62 79 20 73 65 65 74 69 6e 67 20 63 6f 75 6e 74 20 28 73 6f 75 72 63 65 20 61 64 64 72 65 | d.by.seeting.count.(source.addre |
ef220 | 73 73 20 73 65 65 6e 20 6d 6f 72 65 20 74 68 61 6e 20 3c 31 2d 32 35 35 3e 20 74 69 6d 65 73 29 | ss.seen.more.than.<1-255>.times) |
ef240 | 20 61 6e 64 2f 6f 72 20 74 69 6d 65 20 28 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 73 65 65 | .and/or.time.(source.address.see |
ef260 | 6e 20 69 6e 20 74 68 65 20 6c 61 73 74 20 3c 30 2d 34 32 39 34 39 36 37 32 39 35 3e 20 73 65 63 | n.in.the.last.<0-4294967295>.sec |
ef280 | 6f 6e 64 73 29 2e 00 53 65 74 20 70 72 65 64 65 66 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 | onds)..Set.predefined.shared.sec |
ef2a0 | 72 65 74 20 70 68 72 61 73 65 2e 00 53 65 74 20 70 72 65 66 69 78 65 73 20 74 6f 20 74 61 62 6c | ret.phrase..Set.prefixes.to.tabl |
ef2c0 | 65 2e 00 53 65 74 20 70 72 6f 78 79 20 66 6f 72 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | e..Set.proxy.for.all.connections |
ef2e0 | 20 69 6e 69 74 69 61 74 65 64 20 62 79 20 56 79 4f 53 2c 20 69 6e 63 6c 75 64 69 6e 67 20 48 54 | .initiated.by.VyOS,.including.HT |
ef300 | 54 50 2c 20 48 54 54 50 53 2c 20 61 6e 64 20 46 54 50 20 28 61 6e 6f 6e 79 6d 6f 75 73 20 66 74 | TP,.HTTPS,.and.FTP.(anonymous.ft |
ef320 | 70 29 2e 00 53 65 74 20 72 6f 75 74 65 20 74 61 72 67 65 74 20 76 61 6c 75 65 20 69 6e 20 66 6f | p)..Set.route.target.value.in.fo |
ef340 | 72 6d 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 20 | rmat.``<0-65535:0-4294967295>``. |
ef360 | 6f 72 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 74 20 72 6f 75 74 69 6e 67 | or.``<IP:0-65535>``..Set.routing |
ef380 | 20 74 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 20 74 6f 2e 00 53 65 74 | .table.to.forward.packet.to..Set |
ef3a0 | 20 72 75 6c 65 20 61 63 74 69 6f 6e 20 74 6f 20 64 72 6f 70 2e 00 53 65 74 20 73 65 72 76 69 63 | .rule.action.to.drop..Set.servic |
ef3c0 | 65 20 74 6f 20 62 69 6e 64 20 6f 6e 20 49 50 20 61 64 64 72 65 73 73 2c 20 62 79 20 64 65 66 61 | e.to.bind.on.IP.address,.by.defa |
ef3e0 | 75 6c 74 20 6c 69 73 74 65 6e 20 6f 6e 20 61 6e 79 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 00 | ult.listen.on.any.IPv4.and.IPv6. |
ef400 | 53 65 74 20 73 69 74 65 20 6f 66 20 6f 72 69 67 69 6e 20 76 61 6c 75 65 20 69 6e 20 66 6f 72 6d | Set.site.of.origin.value.in.form |
ef420 | 61 74 20 60 60 3c 30 2d 36 35 35 33 35 3a 30 2d 34 32 39 34 39 36 37 32 39 35 3e 60 60 20 6f 72 | at.``<0-65535:0-4294967295>``.or |
ef440 | 20 60 60 3c 49 50 3a 30 2d 36 35 35 33 35 3e 60 60 2e 00 53 65 74 20 73 6f 6d 65 20 61 74 74 72 | .``<IP:0-65535>``..Set.some.attr |
ef460 | 69 62 75 74 65 73 20 28 6c 69 6b 65 20 41 53 20 50 41 54 48 20 6f 72 20 43 6f 6d 6d 75 6e 69 74 | ibutes.(like.AS.PATH.or.Communit |
ef480 | 79 20 76 61 6c 75 65 29 20 74 6f 20 61 64 76 65 72 74 69 73 65 64 20 72 6f 75 74 65 73 20 74 6f | y.value).to.advertised.routes.to |
ef4a0 | 20 6e 65 69 67 68 62 6f 72 73 2e 00 53 65 74 20 73 6f 6d 65 20 6d 65 74 72 69 63 20 74 6f 20 72 | .neighbors..Set.some.metric.to.r |
ef4c0 | 6f 75 74 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 | outes.learned.from.a.particular. |
ef4e0 | 6e 65 69 67 68 62 6f 72 2e 00 53 65 74 20 73 6f 75 72 63 65 20 49 50 2f 49 50 76 36 20 61 64 64 | neighbor..Set.source.IP/IPv6.add |
ef500 | 72 65 73 73 20 66 6f 72 20 72 6f 75 74 65 2e 00 53 65 74 20 73 6f 75 72 63 65 20 61 64 64 72 65 | ress.for.route..Set.source.addre |
ef520 | 73 73 20 6f 72 20 70 72 65 66 69 78 20 74 6f 20 6d 61 74 63 68 2e 00 53 65 74 20 73 6f 75 72 63 | ss.or.prefix.to.match..Set.sourc |
ef540 | 65 2d 61 64 64 72 65 73 73 20 74 6f 20 79 6f 75 72 20 6c 6f 63 61 6c 20 49 50 20 28 4c 41 4e 29 | e-address.to.your.local.IP.(LAN) |
ef560 | 2e 00 53 65 74 20 74 61 67 20 76 61 6c 75 65 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 | ..Set.tag.value.for.routing.prot |
ef580 | 6f 63 6f 6c 2e 00 53 65 74 20 74 68 65 20 22 72 65 63 75 72 73 69 6f 6e 20 64 65 73 69 72 65 64 | ocol..Set.the."recursion.desired |
ef5a0 | 22 20 62 69 74 20 69 6e 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 68 65 20 75 70 73 74 72 65 61 | ".bit.in.requests.to.the.upstrea |
ef5c0 | 6d 20 6e 61 6d 65 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 3a 61 62 62 72 3a 60 44 52 20 | m.nameserver..Set.the.:abbr:`DR. |
ef5e0 | 28 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 29 60 20 50 72 69 6f 72 69 74 79 20 66 6f | (Designated.Router)`.Priority.fo |
ef600 | 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 | r.the.interface..This.command.is |
ef620 | 20 75 73 65 66 75 6c 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 75 73 65 72 20 74 6f 20 69 6e 66 | .useful.to.allow.the.user.to.inf |
ef640 | 6c 75 65 6e 63 65 20 77 68 61 74 20 6e 6f 64 65 20 62 65 63 6f 6d 65 73 20 74 68 65 20 44 52 20 | luence.what.node.becomes.the.DR. |
ef660 | 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 00 53 65 74 20 74 68 65 20 3a 61 62 62 72 | for.a.LAN.segment..Set.the.:abbr |
ef680 | 3a 60 4d 52 55 20 28 4d 61 78 69 6d 75 6d 20 52 65 63 65 69 76 65 20 55 6e 69 74 29 60 20 74 6f | :`MRU.(Maximum.Receive.Unit)`.to |
ef6a0 | 20 60 6d 72 75 60 2e 20 50 50 50 64 20 77 69 6c 6c 20 61 73 6b 20 74 68 65 20 70 65 65 72 20 74 | .`mru`..PPPd.will.ask.the.peer.t |
ef6c0 | 6f 20 73 65 6e 64 20 70 61 63 6b 65 74 73 20 6f 66 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 60 | o.send.packets.of.no.more.than.` |
ef6e0 | 6d 72 75 60 20 62 79 74 65 73 2e 20 54 68 65 20 76 61 6c 75 65 20 6f 66 20 60 6d 72 75 60 20 6d | mru`.bytes..The.value.of.`mru`.m |
ef700 | 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 31 32 38 20 61 6e 64 20 31 36 33 38 34 2e 00 53 65 | ust.be.between.128.and.16384..Se |
ef720 | 74 20 74 68 65 20 3a 61 62 62 72 3a 60 54 54 4c 20 28 54 69 6d 65 2d 74 6f 2d 6c 69 76 65 29 60 | t.the.:abbr:`TTL.(Time-to-live)` |
ef740 | 20 66 6f 72 20 74 68 65 20 72 65 63 6f 72 64 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 44 65 66 61 | .for.the.record.in.seconds..Defa |
ef760 | 75 6c 74 20 69 73 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 65 20 42 47 50 20 | ult.is.300.seconds..Set.the.BGP. |
ef780 | 6e 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 73 20 6f | nexthop.address.to.the.address.o |
ef7a0 | 66 20 74 68 65 20 70 65 65 72 2e 20 46 6f 72 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 | f.the.peer..For.an.incoming.rout |
ef7c0 | 65 2d 6d 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 65 20 69 70 20 61 64 64 72 65 73 73 20 | e-map.this.means.the.ip.address. |
ef7e0 | 6f 66 20 6f 75 72 20 70 65 65 72 20 69 73 20 75 73 65 64 2e 20 46 6f 72 20 61 6e 20 6f 75 74 67 | of.our.peer.is.used..For.an.outg |
ef800 | 6f 69 6e 67 20 72 6f 75 74 65 2d 6d 61 70 20 74 68 69 73 20 6d 65 61 6e 73 20 74 68 65 20 69 70 | oing.route-map.this.means.the.ip |
ef820 | 20 61 64 64 72 65 73 73 20 6f 66 20 6f 75 72 20 73 65 6c 66 20 69 73 20 75 73 65 64 20 74 6f 20 | .address.of.our.self.is.used.to. |
ef840 | 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 70 65 65 72 69 6e 67 20 77 69 74 68 20 6f 75 72 20 6e | establish.the.peering.with.our.n |
ef860 | 65 69 67 68 62 6f 72 2e 00 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 | eighbor..Set.the.IP.address.of.t |
ef880 | 68 65 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f | he.local.interface.to.be.used.fo |
ef8a0 | 72 20 74 68 65 20 74 75 6e 6e 65 6c 2e 00 53 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 | r.the.tunnel..Set.the.IP.address |
ef8c0 | 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 20 49 74 20 6d 61 79 20 62 65 20 73 | .of.the.remote.peer..It.may.be.s |
ef8e0 | 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 | pecified.as.an.IPv4.address.or.a |
ef900 | 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 53 65 74 20 74 68 65 20 49 50 76 34 20 73 6f 75 | n.IPv6.address..Set.the.IPv4.sou |
ef920 | 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 6d 6f 64 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 | rce.validation.mode..The.followi |
ef940 | 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 | ng.system.parameter.will.be.alte |
ef960 | 72 65 64 3a 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 71 75 65 | red:.Set.the.MLD.last.member.que |
ef980 | 72 79 20 63 6f 75 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 | ry.count..The.default.value.is.2 |
ef9a0 | 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 6c 61 73 74 20 6d 65 6d 62 65 72 20 71 75 65 72 79 20 | ..Set.the.MLD.last.member.query. |
ef9c0 | 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 28 31 30 30 2d 36 35 | interval.in.milliseconds.(100-65 |
ef9e0 | 35 33 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 | 53500)..The.default.value.is.100 |
efa00 | 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 65 20 4d 4c 44 20 71 75 65 72 | 0.milliseconds..Set.the.MLD.quer |
efa20 | 79 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e | y.response.timeout.in.millisecon |
efa40 | 64 73 20 28 31 30 30 2d 36 35 35 33 35 30 30 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | ds.(100-6553500)..The.default.va |
efa60 | 6c 75 65 20 69 73 20 31 30 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 | lue.is.10000.milliseconds..Set.t |
efa80 | 68 65 20 4d 4c 44 20 76 65 72 73 69 6f 6e 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 | he.MLD.version.used.on.this.inte |
efaa0 | 72 66 61 63 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 2e 00 53 | rface..The.default.value.is.2..S |
efac0 | 65 74 20 74 68 65 20 4d 61 78 69 6d 75 6d 20 53 74 61 63 6b 20 44 65 70 74 68 20 73 75 70 70 6f | et.the.Maximum.Stack.Depth.suppo |
efae0 | 72 74 65 64 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 2e 20 54 68 65 20 76 61 6c 75 65 20 64 65 | rted.by.the.router..The.value.de |
efb00 | 70 65 6e 64 20 6f 66 20 74 68 65 20 4d 50 4c 53 20 64 61 74 61 70 6c 61 6e 65 2e 00 53 65 74 20 | pend.of.the.MPLS.dataplane..Set. |
efb20 | 74 68 65 20 50 49 4d 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 69 6e 74 65 72 76 61 6c 20 | the.PIM.hello.and.hold.interval. |
efb40 | 66 6f 72 20 61 20 69 6e 74 65 72 66 61 63 65 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 | for.a.interface..Set.the.Segment |
efb60 | 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c | .Routing.Global.Block.i.e..the.l |
efb80 | 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 | abel.range.used.by.MPLS.to.store |
efba0 | 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 | .label.in.the.MPLS.FIB.for.Prefi |
efbc0 | 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 | x.SID..Note.that.the.block.size. |
efbe0 | 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 00 53 65 74 20 74 68 65 20 53 65 | may.not.exceed.65535..Set.the.Se |
efc00 | 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 47 6c 6f 62 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 | gment.Routing.Global.Block.i.e.. |
efc20 | 74 68 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 | the.low.label.range.used.by.MPLS |
efc40 | 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 | .to.store.label.in.the.MPLS.FIB. |
efc60 | 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c | for.Prefix.SID..Note.that.the.bl |
efc80 | 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 00 53 | ock.size.may.not.exceed.65535..S |
efca0 | 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f | et.the.Segment.Routing.Local.Blo |
efcc0 | 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 61 62 65 6c 20 72 61 6e 67 65 20 75 73 65 64 20 62 79 20 | ck.i.e..the.label.range.used.by. |
efce0 | 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 | MPLS.to.store.label.in.the.MPLS. |
efd00 | 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 | FIB.for.Prefix.SID..Note.that.th |
efd20 | 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f 74 20 65 78 63 65 65 64 20 36 35 35 33 | e.block.size.may.not.exceed.6553 |
efd40 | 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 | 5.Segment.Routing.Local.Block,.T |
efd60 | 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 20 61 6c 77 61 79 73 20 75 6e 73 65 74 | he.negative.command.always.unset |
efd80 | 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 | s.both..Set.the.Segment.Routing. |
efda0 | 4c 6f 63 61 6c 20 42 6c 6f 63 6b 20 69 2e 65 2e 20 74 68 65 20 6c 6f 77 20 6c 61 62 65 6c 20 72 | Local.Block.i.e..the.low.label.r |
efdc0 | 61 6e 67 65 20 75 73 65 64 20 62 79 20 4d 50 4c 53 20 74 6f 20 73 74 6f 72 65 20 6c 61 62 65 6c | ange.used.by.MPLS.to.store.label |
efde0 | 20 69 6e 20 74 68 65 20 4d 50 4c 53 20 46 49 42 20 66 6f 72 20 50 72 65 66 69 78 20 53 49 44 2e | .in.the.MPLS.FIB.for.Prefix.SID. |
efe00 | 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 62 6c 6f 63 6b 20 73 69 7a 65 20 6d 61 79 20 6e 6f | .Note.that.the.block.size.may.no |
efe20 | 74 20 65 78 63 65 65 64 20 36 35 35 33 35 2e 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4c | t.exceed.65535.Segment.Routing.L |
efe40 | 6f 63 61 6c 20 42 6c 6f 63 6b 2c 20 54 68 65 20 6e 65 67 61 74 69 76 65 20 63 6f 6d 6d 61 6e 64 | ocal.Block,.The.negative.command |
efe60 | 20 61 6c 77 61 79 73 20 75 6e 73 65 74 73 20 62 6f 74 68 2e 00 53 65 74 20 74 68 65 20 55 73 65 | .always.unsets.both..Set.the.Use |
efe80 | 72 20 49 44 20 6f 72 20 47 72 6f 75 70 20 49 44 20 6f 66 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 | r.ID.or.Group.ID.of.the.containe |
efea0 | 72 00 53 65 74 20 74 68 65 20 60 60 73 73 68 64 60 60 20 6c 6f 67 20 6c 65 76 65 6c 2e 20 54 68 | r.Set.the.``sshd``.log.level..Th |
efec0 | 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 69 6e 66 6f 60 60 2e 00 53 65 74 20 74 68 65 20 61 | e.default.is.``info``..Set.the.a |
efee0 | 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 61 63 6b 65 6e 64 20 70 6f 72 74 00 53 65 74 20 74 | ddress.of.the.backend.port.Set.t |
eff00 | 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 | he.address.of.the.backend.server |
eff20 | 20 74 6f 20 77 68 69 63 68 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 20 77 | .to.which.the.incoming.traffic.w |
eff40 | 69 6c 6c 20 62 65 20 66 6f 72 77 61 72 64 65 64 00 53 65 74 20 74 68 65 20 61 75 74 68 65 6e 74 | ill.be.forwarded.Set.the.authent |
eff60 | 69 63 61 74 69 6f 6e 20 74 79 70 65 20 66 6f 72 20 47 72 61 70 68 51 4c 2c 20 64 65 66 61 75 6c | ication.type.for.GraphQL,.defaul |
eff80 | 74 20 6f 70 74 69 6f 6e 20 69 73 20 6b 65 79 2e 20 41 76 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f | t.option.is.key..Available.optio |
effa0 | 6e 73 20 61 72 65 3a 00 53 65 74 20 74 68 65 20 62 79 74 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 | ns.are:.Set.the.byte.length.of.t |
effc0 | 68 65 20 4a 57 54 20 73 65 63 72 65 74 2e 20 44 65 66 61 75 6c 74 20 69 73 20 33 32 2e 00 53 65 | he.JWT.secret..Default.is.32..Se |
effe0 | 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 52 52 50 20 76 65 72 73 69 6f 6e 20 74 6f 20 75 73 | t.the.default.VRRP.version.to.us |
f0000 | 65 2e 20 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 2c 20 62 75 74 20 49 50 76 36 20 | e..This.defaults.to.2,.but.IPv6. |
f0020 | 69 6e 73 74 61 6e 63 65 73 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 75 73 65 20 76 65 72 73 69 6f | instances.will.always.use.versio |
f0040 | 6e 20 33 2e 00 53 65 74 20 74 68 65 20 64 65 76 69 63 65 27 73 20 74 72 61 6e 73 6d 69 74 20 28 | n.3..Set.the.device's.transmit.( |
f0060 | 54 58 29 20 6b 65 79 2e 20 54 68 69 73 20 6b 65 79 20 6d 75 73 74 20 62 65 20 61 20 68 65 78 20 | TX).key..This.key.must.be.a.hex. |
f0080 | 73 74 72 69 6e 67 20 74 68 61 74 20 69 73 20 31 36 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 45 53 | string.that.is.16-bytes.(GCM-AES |
f00a0 | 2d 31 32 38 29 20 6f 72 20 33 32 2d 62 79 74 65 73 20 28 47 43 4d 2d 41 45 53 2d 32 35 36 29 2e | -128).or.32-bytes.(GCM-AES-256). |
f00c0 | 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 75 6c | .Set.the.distance.for.the.defaul |
f00e0 | 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 44 48 43 50 20 73 65 72 76 65 | t.gateway.sent.by.the.DHCP.serve |
f0100 | 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 65 66 61 | r..Set.the.distance.for.the.defa |
f0120 | 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 50 50 50 6f 45 20 73 65 | ult.gateway.sent.by.the.PPPoE.se |
f0140 | 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 74 68 65 20 64 | rver..Set.the.distance.for.the.d |
f0160 | 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 73 65 6e 74 20 62 79 20 74 68 65 20 53 53 54 50 20 | efault.gateway.sent.by.the.SSTP. |
f0180 | 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 74 79 | server..Set.the.encapsulation.ty |
f01a0 | 70 65 20 6f 66 20 74 68 65 20 74 75 6e 6e 65 6c 2e 20 56 61 6c 69 64 20 76 61 6c 75 65 73 20 66 | pe.of.the.tunnel..Valid.values.f |
f01c0 | 6f 72 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 72 65 3a 20 75 64 70 2c 20 69 70 2e 00 53 | or.encapsulation.are:.udp,.ip..S |
f01e0 | 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 61 6e 20 65 73 74 | et.the.global.setting.for.an.est |
f0200 | 61 62 6c 69 73 68 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 53 65 74 20 74 68 65 20 67 6c 6f | ablished.connection..Set.the.glo |
f0220 | 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 69 6e 76 61 6c 69 64 20 70 61 63 6b 65 74 73 2e | bal.setting.for.invalid.packets. |
f0240 | 00 53 65 74 20 74 68 65 20 67 6c 6f 62 61 6c 20 73 65 74 74 69 6e 67 20 66 6f 72 20 72 65 6c 61 | .Set.the.global.setting.for.rela |
f0260 | 74 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6c 69 66 65 74 69 6d | ted.connections..Set.the.lifetim |
f0280 | 65 20 66 6f 72 20 4a 57 54 20 74 6f 6b 65 6e 73 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 44 65 66 | e.for.JWT.tokens.in.seconds..Def |
f02a0 | 61 75 6c 74 20 69 73 20 33 36 30 30 20 73 65 63 6f 6e 64 73 2e 00 53 65 74 20 74 68 65 20 6c 69 | ault.is.3600.seconds..Set.the.li |
f02c0 | 73 74 65 6e 20 70 6f 72 74 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 41 50 49 2c 20 74 68 69 73 | sten.port.of.the.local.API,.this |
f02e0 | 20 68 61 73 20 6e 6f 20 65 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 65 62 73 65 72 76 65 72 2e | .has.no.effect.on.the.webserver. |
f0300 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 70 6f 72 74 20 38 30 38 30 00 53 65 74 20 74 68 | .The.default.is.port.8080.Set.th |
f0320 | 65 20 6d 61 78 69 6d 75 6d 20 68 6f 70 20 60 3c 63 6f 75 6e 74 3e 60 20 62 65 66 6f 72 65 20 70 | e.maximum.hop.`<count>`.before.p |
f0340 | 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2e 20 52 61 6e 67 65 20 30 2e 2e 2e | ackets.are.discarded..Range.0... |
f0360 | 32 35 35 2c 20 64 65 66 61 75 6c 74 20 31 30 2e 00 53 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d | 255,.default.10..Set.the.maximum |
f0380 | 20 6c 65 6e 67 74 68 20 6f 66 20 41 2d 4d 50 44 55 20 70 72 65 2d 45 4f 46 20 70 61 64 64 69 6e | .length.of.A-MPDU.pre-EOF.paddin |
f03a0 | 67 20 74 68 61 74 20 74 68 65 20 73 74 61 74 69 6f 6e 20 63 61 6e 20 72 65 63 65 69 76 65 00 53 | g.that.the.station.can.receive.S |
f03c0 | 65 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 54 43 50 20 68 61 6c | et.the.maximum.number.of.TCP.hal |
f03e0 | 66 2d 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 53 65 74 20 74 68 65 20 6d 61 78 69 | f-open.connections..Set.the.maxi |
f0400 | 6d 75 6d 20 72 65 71 75 65 73 74 20 62 6f 64 79 20 73 69 7a 65 20 69 6e 20 6d 65 67 61 62 79 74 | mum.request.body.size.in.megabyt |
f0420 | 65 73 2e 20 44 65 66 61 75 6c 74 20 69 73 20 31 4d 42 2e 00 53 65 74 20 74 68 65 20 6e 61 6d 65 | es..Default.is.1MB..Set.the.name |
f0440 | 20 6f 66 20 74 68 65 20 53 53 4c 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 74 69 66 69 63 61 | .of.the.SSL.:abbr:`CA.(Certifica |
f0460 | 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 50 4b 49 20 65 6e 74 72 79 20 75 73 65 64 20 66 6f | te.Authority)`.PKI.entry.used.fo |
f0480 | 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 73 | r.authentication.of.the.remote.s |
f04a0 | 69 64 65 2e 20 49 66 20 61 6e 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 20 63 65 72 74 69 | ide..If.an.intermediate.CA.certi |
f04c0 | 66 69 63 61 74 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 65 6e 20 61 6c 6c 20 70 61 | ficate.is.specified,.then.all.pa |
f04e0 | 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 73 20 74 68 61 74 20 65 78 69 73 74 20 | rent.CA.certificates.that.exist. |
f0500 | 69 6e 20 74 68 65 20 50 4b 49 2c 20 73 75 63 68 20 61 73 20 74 68 65 20 72 6f 6f 74 20 43 41 20 | in.the.PKI,.such.as.the.root.CA. |
f0520 | 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 73 2c 20 | or.additional.intermediate.CAs,. |
f0540 | 77 69 6c 6c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 62 65 20 75 73 65 64 20 64 75 72 69 6e | will.automatically.be.used.durin |
f0560 | 67 20 63 65 72 74 69 66 69 63 61 74 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 74 6f 20 65 6e 73 75 | g.certificate.validation.to.ensu |
f0580 | 72 65 20 74 68 61 74 20 74 68 65 20 66 75 6c 6c 20 63 68 61 69 6e 20 6f 66 20 74 72 75 73 74 20 | re.that.the.full.chain.of.trust. |
f05a0 | 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 00 53 65 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 | is.available..Set.the.name.of.th |
f05c0 | 65 20 78 35 30 39 20 63 6c 69 65 6e 74 20 6b 65 79 70 61 69 72 20 75 73 65 64 20 74 6f 20 61 75 | e.x509.client.keypair.used.to.au |
f05e0 | 74 68 65 6e 74 69 63 61 74 65 20 61 67 61 69 6e 73 74 20 74 68 65 20 38 30 32 2e 31 78 20 73 79 | thenticate.against.the.802.1x.sy |
f0600 | 73 74 65 6d 2e 20 41 6c 6c 20 70 61 72 65 6e 74 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 73 | stem..All.parent.CA.certificates |
f0620 | 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 20 63 65 72 74 69 66 69 63 61 74 65 2c 20 73 75 63 68 | .of.the.client.certificate,.such |
f0640 | 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 74 65 20 61 6e 64 20 72 6f 6f 74 20 43 41 73 2c 20 77 | .as.intermediate.and.root.CAs,.w |
f0660 | 69 6c 6c 20 62 65 20 73 65 6e 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 45 41 50 2d 54 | ill.be.sent.as.part.of.the.EAP-T |
f0680 | 4c 53 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 65 74 20 74 68 65 20 6e 61 74 69 76 65 20 56 4c 41 | LS.handshake..Set.the.native.VLA |
f06a0 | 4e 20 49 44 20 66 6c 61 67 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 57 68 65 6e | N.ID.flag.of.the.interface..When |
f06c0 | 20 61 20 64 61 74 61 20 70 61 63 6b 65 74 20 77 69 74 68 6f 75 74 20 61 20 56 4c 41 4e 20 74 61 | .a.data.packet.without.a.VLAN.ta |
f06e0 | 67 20 65 6e 74 65 72 73 20 74 68 65 20 70 6f 72 74 2c 20 74 68 65 20 64 61 74 61 20 70 61 63 6b | g.enters.the.port,.the.data.pack |
f0700 | 65 74 20 77 69 6c 6c 20 62 65 20 66 6f 72 63 65 64 20 74 6f 20 61 64 64 20 61 20 74 61 67 20 6f | et.will.be.forced.to.add.a.tag.o |
f0720 | 66 20 61 20 73 70 65 63 69 66 69 63 20 76 6c 61 6e 20 69 64 2e 20 57 68 65 6e 20 74 68 65 20 76 | f.a.specific.vlan.id..When.the.v |
f0740 | 6c 61 6e 20 69 64 20 66 6c 61 67 20 66 6c 6f 77 73 20 6f 75 74 2c 20 74 68 65 20 74 61 67 20 6f | lan.id.flag.flows.out,.the.tag.o |
f0760 | 66 20 74 68 65 20 76 6c 61 6e 20 69 64 20 77 69 6c 6c 20 62 65 20 73 74 72 69 70 70 65 64 00 53 | f.the.vlan.id.will.be.stripped.S |
f0780 | 65 74 20 74 68 65 20 6e 65 78 74 2d 68 6f 70 20 61 73 20 75 6e 63 68 61 6e 67 65 64 2e 20 50 61 | et.the.next-hop.as.unchanged..Pa |
f07a0 | 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 2d 6d 61 70 20 77 69 74 68 6f 75 74 | ss.through.the.route-map.without |
f07c0 | 20 63 68 61 6e 67 69 6e 67 20 69 74 73 20 76 61 6c 75 65 00 53 65 74 20 74 68 65 20 6e 75 6d 62 | .changing.its.value.Set.the.numb |
f07e0 | 65 72 20 6f 66 20 54 43 50 20 6d 61 78 69 6d 75 6d 20 72 65 74 72 61 6e 73 6d 69 74 20 61 74 74 | er.of.TCP.maximum.retransmit.att |
f0800 | 65 6d 70 74 73 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 65 61 6c 74 68 20 | empts..Set.the.number.of.health. |
f0820 | 63 68 65 63 6b 20 66 61 69 6c 75 72 65 73 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 65 72 66 61 | check.failures.before.an.interfa |
f0840 | 63 65 20 69 73 20 6d 61 72 6b 65 64 20 61 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2c 20 72 61 6e | ce.is.marked.as.unavailable,.ran |
f0860 | 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c | ge.for.number.is.1.to.10,.defaul |
f0880 | 74 20 31 2e 20 4f 72 20 73 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 75 63 63 65 73 | t.1..Or.set.the.number.of.succes |
f08a0 | 73 66 75 6c 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 20 62 65 66 6f 72 65 20 61 6e 20 69 6e 74 | sful.health.checks.before.an.int |
f08c0 | 65 72 66 61 63 65 20 69 73 20 61 64 64 65 64 20 62 61 63 6b 20 74 6f 20 74 68 65 20 69 6e 74 65 | erface.is.added.back.to.the.inte |
f08e0 | 72 66 61 63 65 20 70 6f 6f 6c 2c 20 72 61 6e 67 65 20 66 6f 72 20 6e 75 6d 62 65 72 20 69 73 20 | rface.pool,.range.for.number.is. |
f0900 | 31 20 74 6f 20 31 30 2c 20 64 65 66 61 75 6c 74 20 31 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 | 1.to.10,.default.1..Set.the.numb |
f0920 | 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 20 75 | er.of.seconds.the.router.waits.u |
f0940 | 6e 74 69 6c 20 72 65 74 72 79 69 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 | ntil.retrying.to.connect.to.the. |
f0960 | 63 61 63 68 65 20 73 65 72 76 65 72 2e 00 53 65 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 | cache.server..Set.the.number.of. |
f0980 | 73 65 63 6f 6e 64 73 20 74 68 65 20 72 6f 75 74 65 72 20 77 61 69 74 73 20 75 6e 74 69 6c 20 74 | seconds.the.router.waits.until.t |
f09a0 | 68 65 20 72 6f 75 74 65 72 20 65 78 70 69 72 65 73 20 74 68 65 20 63 61 63 68 65 2e 00 53 65 74 | he.router.expires.the.cache..Set |
f09c0 | 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 70 75 62 6c 69 63 20 6b 65 79 | .the.options.for.this.public.key |
f09e0 | 2e 20 53 65 65 20 74 68 65 20 73 73 68 20 60 60 61 75 74 68 6f 72 69 7a 65 64 5f 6b 65 79 73 60 | ..See.the.ssh.``authorized_keys` |
f0a00 | 60 20 6d 61 6e 20 70 61 67 65 20 66 6f 72 20 64 65 74 61 69 6c 73 20 6f 66 20 77 68 61 74 20 79 | `.man.page.for.details.of.what.y |
f0a20 | 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 68 65 72 65 2e 20 54 6f 20 70 6c 61 63 65 20 61 20 | ou.can.specify.here..To.place.a. |
f0a40 | 60 60 22 60 60 20 63 68 61 72 61 63 74 65 72 20 69 6e 20 74 68 65 20 6f 70 74 69 6f 6e 73 20 66 | ``"``.character.in.the.options.f |
f0a60 | 69 65 6c 64 2c 20 75 73 65 20 60 60 26 71 75 6f 74 3b 60 60 2c 20 66 6f 72 20 65 78 61 6d 70 6c | ield,.use.``"``,.for.exampl |
f0a80 | 65 20 60 60 66 72 6f 6d 3d 26 71 75 6f 74 3b 31 30 2e 30 2e 30 2e 30 2f 32 34 26 71 75 6f 74 3b | e.``from="10.0.0.0/24" |
f0aa0 | 60 60 20 74 6f 20 72 65 73 74 72 69 63 74 20 77 68 65 72 65 20 74 68 65 20 75 73 65 72 20 6d 61 | ``.to.restrict.where.the.user.ma |
f0ac0 | 79 20 63 6f 6e 6e 65 63 74 20 66 72 6f 6d 20 77 68 65 6e 20 75 73 69 6e 67 20 74 68 69 73 20 6b | y.connect.from.when.using.this.k |
f0ae0 | 65 79 2e 00 53 65 74 20 74 68 65 20 70 61 72 69 74 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 | ey..Set.the.parity.option.for.th |
f0b00 | 65 20 63 6f 6e 73 6f 6c 65 2e 20 49 66 20 75 6e 73 65 74 20 74 68 69 73 20 77 69 6c 6c 20 64 65 | e.console..If.unset.this.will.de |
f0b20 | 66 61 75 6c 74 20 74 6f 20 6e 6f 6e 65 2e 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 4d 41 | fault.to.none..Set.the.peer's.MA |
f0b40 | 43 20 61 64 64 72 65 73 73 00 53 65 74 20 74 68 65 20 70 65 65 72 27 73 20 6b 65 79 20 75 73 65 | C.address.Set.the.peer's.key.use |
f0b60 | 64 20 74 6f 20 72 65 63 65 69 76 65 20 28 52 58 29 20 74 72 61 66 66 69 63 00 53 65 74 20 74 68 | d.to.receive.(RX).traffic.Set.th |
f0b80 | 65 20 70 65 65 72 2d 73 65 73 73 69 6f 6e 2d 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 | e.peer-session-id,.which.is.a.32 |
f0ba0 | 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 | -bit.integer.value.assigned.to.t |
f0bc0 | 68 65 20 73 65 73 73 69 6f 6e 20 62 79 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 | he.session.by.the.peer..The.valu |
f0be0 | 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 5f 69 64 | e.used.must.match.the.session_id |
f0c00 | 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 65 20 70 65 65 72 2e 00 53 | .value.being.used.at.the.peer..S |
f0c20 | 65 74 20 74 68 65 20 72 65 73 74 61 72 74 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 63 | et.the.restart.behavior.of.the.c |
f0c40 | 6f 6e 74 61 69 6e 65 72 2e 00 53 65 74 20 74 68 65 20 72 6f 75 74 65 20 6d 65 74 72 69 63 2e 20 | ontainer..Set.the.route.metric.. |
f0c60 | 57 68 65 6e 20 75 73 65 64 20 77 69 74 68 20 42 47 50 2c 20 73 65 74 20 74 68 65 20 42 47 50 20 | When.used.with.BGP,.set.the.BGP. |
f0c80 | 61 74 74 72 69 62 75 74 65 20 4d 45 44 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 61 6c 75 | attribute.MED.to.a.specific.valu |
f0ca0 | 65 2e 20 55 73 65 20 60 60 2b 2f 2d 60 60 20 74 6f 20 61 64 64 20 6f 72 20 73 75 62 74 72 61 63 | e..Use.``+/-``.to.add.or.subtrac |
f0cc0 | 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 20 74 6f 2f 66 72 6f 6d 20 74 68 | t.the.specified.value.to/from.th |
f0ce0 | 65 20 65 78 69 73 74 69 6e 67 2f 4d 45 44 2e 20 55 73 65 20 60 60 72 74 74 60 60 20 74 6f 20 73 | e.existing/MED..Use.``rtt``.to.s |
f0d00 | 65 74 20 74 68 65 20 4d 45 44 20 74 6f 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 69 6d | et.the.MED.to.the.round.trip.tim |
f0d20 | 65 20 6f 72 20 60 60 2b 72 74 74 2f 2d 72 74 74 60 60 20 74 6f 20 61 64 64 2f 73 75 62 74 72 61 | e.or.``+rtt/-rtt``.to.add/subtra |
f0d40 | 63 74 20 74 68 65 20 72 6f 75 6e 64 20 74 72 69 70 20 74 69 6d 65 20 74 6f 2f 66 72 6f 6d 20 74 | ct.the.round.trip.time.to/from.t |
f0d60 | 68 65 20 4d 45 44 2e 00 53 65 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f | he.MED..Set.the.routing.table.to |
f0d80 | 20 66 6f 72 77 61 72 64 20 70 61 63 6b 65 74 20 77 69 74 68 2e 00 53 65 74 20 74 68 65 20 73 65 | .forward.packet.with..Set.the.se |
f0da0 | 73 73 69 6f 6e 20 69 64 2c 20 77 68 69 63 68 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 | ssion.id,.which.is.a.32-bit.inte |
f0dc0 | 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 | ger.value..Uniquely.identifies.t |
f0de0 | 68 65 20 73 65 73 73 69 6f 6e 20 62 65 69 6e 67 20 63 72 65 61 74 65 64 2e 20 54 68 65 20 76 61 | he.session.being.created..The.va |
f0e00 | 6c 75 65 20 75 73 65 64 20 6d 75 73 74 20 6d 61 74 63 68 20 74 68 65 20 70 65 65 72 5f 73 65 73 | lue.used.must.match.the.peer_ses |
f0e20 | 73 69 6f 6e 5f 69 64 20 76 61 6c 75 65 20 62 65 69 6e 67 20 75 73 65 64 20 61 74 20 74 68 65 20 | sion_id.value.being.used.at.the. |
f0e40 | 70 65 65 72 2e 00 53 65 74 20 74 68 65 20 73 68 61 70 65 72 20 62 61 6e 64 77 69 64 74 68 2c 20 | peer..Set.the.shaper.bandwidth,. |
f0e60 | 65 69 74 68 65 72 20 61 73 20 61 6e 20 65 78 70 6c 69 63 69 74 20 62 69 74 72 61 74 65 20 6f 72 | either.as.an.explicit.bitrate.or |
f0e80 | 20 61 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 62 | .a.percentage.of.the.interface.b |
f0ea0 | 61 6e 64 77 69 64 74 68 2e 00 53 65 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 68 61 | andwidth..Set.the.size.of.the.ha |
f0ec0 | 73 68 20 74 61 62 6c 65 2e 20 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e | sh.table..The.connection.trackin |
f0ee0 | 67 20 68 61 73 68 20 74 61 62 6c 65 20 6d 61 6b 65 73 20 73 65 61 72 63 68 69 6e 67 20 74 68 65 | g.hash.table.makes.searching.the |
f0f00 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 20 66 61 73 74 65 | .connection.tracking.table.faste |
f0f20 | 72 2e 20 54 68 65 20 68 61 73 68 20 74 61 62 6c 65 20 75 73 65 73 20 e2 80 9c 62 75 63 6b 65 74 | r..The.hash.table.uses....bucket |
f0f40 | 73 e2 80 9d 20 74 6f 20 72 65 63 6f 72 64 20 65 6e 74 72 69 65 73 20 69 6e 20 74 68 65 20 63 6f | s....to.record.entries.in.the.co |
f0f60 | 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 2e 00 53 65 74 20 74 68 65 | nnection.tracking.table..Set.the |
f0f80 | 20 73 6f 75 72 63 65 20 49 50 20 6f 66 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 2c | .source.IP.of.forwarded.packets, |
f0fa0 | 20 6f 74 68 65 72 77 69 73 65 20 6f 72 69 67 69 6e 61 6c 20 73 65 6e 64 65 72 73 20 61 64 64 72 | .otherwise.original.senders.addr |
f0fc0 | 65 73 73 20 69 73 20 75 73 65 64 2e 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 | ess.is.used..Set.the.timeout.in. |
f0fe0 | 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 20 73 74 61 74 65 | secounds.for.a.protocol.or.state |
f1000 | 20 69 6e 20 61 20 63 75 73 74 6f 6d 20 72 75 6c 65 2e 00 53 65 74 20 74 68 65 20 74 69 6d 65 6f | .in.a.custom.rule..Set.the.timeo |
f1020 | 75 74 20 69 6e 20 73 65 63 6f 75 6e 64 73 20 66 6f 72 20 61 20 70 72 6f 74 6f 63 6f 6c 20 6f 72 | ut.in.secounds.for.a.protocol.or |
f1040 | 20 73 74 61 74 65 2e 00 53 65 74 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 64 2c 20 77 68 69 63 68 | .state..Set.the.tunnel.id,.which |
f1060 | 20 69 73 20 61 20 33 32 2d 62 69 74 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 2e 20 55 6e 69 71 | .is.a.32-bit.integer.value..Uniq |
f1080 | 75 65 6c 79 20 69 64 65 6e 74 69 66 69 65 73 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 6f 20 | uely.identifies.the.tunnel.into. |
f10a0 | 77 68 69 63 68 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 | which.the.session.will.be.create |
f10c0 | 64 2e 00 53 65 74 20 74 68 65 20 77 69 6e 64 6f 77 20 73 63 61 6c 65 20 66 61 63 74 6f 72 20 66 | d..Set.the.window.scale.factor.f |
f10e0 | 6f 72 20 54 43 50 20 77 69 6e 64 6f 77 20 73 63 61 6c 69 6e 67 00 53 65 74 20 77 69 6e 64 6f 77 | or.TCP.window.scaling.Set.window |
f1100 | 20 6f 66 20 63 6f 6e 63 75 72 72 65 6e 74 6c 79 20 76 61 6c 69 64 20 63 6f 64 65 73 2e 00 53 65 | .of.concurrently.valid.codes..Se |
f1120 | 74 73 20 74 68 65 20 48 54 54 50 20 6d 65 74 68 6f 64 20 74 6f 20 62 65 20 75 73 65 64 2c 20 63 | ts.the.HTTP.method.to.be.used,.c |
f1140 | 61 6e 20 62 65 20 65 69 74 68 65 72 3a 20 6f 70 74 69 6f 6e 2c 20 67 65 74 2c 20 70 6f 73 74 2c | an.be.either:.option,.get,.post, |
f1160 | 20 70 75 74 00 53 65 74 73 20 74 68 65 20 65 6e 64 70 6f 69 6e 74 20 74 6f 20 62 65 20 75 73 65 | .put.Sets.the.endpoint.to.be.use |
f1180 | 64 20 66 6f 72 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 00 53 65 74 73 20 74 68 65 20 65 78 70 | d.for.health.checks.Sets.the.exp |
f11a0 | 65 63 74 65 64 20 72 65 73 75 6c 74 20 63 6f 6e 64 69 74 69 6f 6e 20 66 6f 72 20 63 6f 6e 73 69 | ected.result.condition.for.consi |
f11c0 | 64 65 72 69 6e 67 20 61 20 73 65 72 76 65 72 20 68 65 61 6c 74 68 79 2e 20 53 6f 6d 65 20 70 6f | dering.a.server.healthy..Some.po |
f11e0 | 73 73 69 62 6c 65 20 65 78 61 6d 70 6c 65 73 20 61 72 65 3a 00 53 65 74 73 20 74 68 65 20 69 6d | ssible.examples.are:.Sets.the.im |
f1200 | 61 67 65 20 6e 61 6d 65 20 69 6e 20 74 68 65 20 68 75 62 20 72 65 67 69 73 74 72 79 00 53 65 74 | age.name.in.the.hub.registry.Set |
f1220 | 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 6d 75 | s.the.interface.to.listen.for.mu |
f1240 | 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 6f 6e 2e 20 43 6f 75 6c 64 20 62 65 20 61 20 6c | lticast.packets.on..Could.be.a.l |
f1260 | 6f 6f 70 62 61 63 6b 2c 20 6e 6f 74 20 79 65 74 20 74 65 73 74 65 64 2e 00 53 65 74 73 20 74 68 | oopback,.not.yet.tested..Sets.th |
f1280 | 65 20 6c 69 73 74 65 6e 69 6e 67 20 70 6f 72 74 20 66 6f 72 20 61 20 6c 69 73 74 65 6e 69 6e 67 | e.listening.port.for.a.listening |
f12a0 | 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 6f 76 65 72 72 69 64 65 73 20 74 68 65 20 64 65 66 | .address..This.overrides.the.def |
f12c0 | 61 75 6c 74 20 70 6f 72 74 20 6f 66 20 33 31 32 38 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 | ault.port.of.3128.on.the.specifi |
f12e0 | 63 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 2e 00 53 65 74 73 20 74 68 65 20 75 6e 69 71 75 | c.listen.address..Sets.the.uniqu |
f1300 | 65 20 69 64 20 66 6f 72 20 74 68 69 73 20 76 78 6c 61 6e 2d 69 6e 74 65 72 66 61 63 65 2e 20 4e | e.id.for.this.vxlan-interface..N |
f1320 | 6f 74 20 73 75 72 65 20 68 6f 77 20 69 74 20 63 6f 72 72 65 6c 61 74 65 73 20 77 69 74 68 20 6d | ot.sure.how.it.correlates.with.m |
f1340 | 75 6c 74 69 63 61 73 74 2d 61 64 64 72 65 73 73 2e 00 53 65 74 74 69 6e 67 20 56 52 52 50 20 67 | ulticast-address..Setting.VRRP.g |
f1360 | 72 6f 75 70 20 70 72 69 6f 72 69 74 79 00 53 65 74 74 69 6e 67 20 6e 61 6d 65 00 53 65 74 74 69 | roup.priority.Setting.name.Setti |
f1380 | 6e 67 20 74 68 69 73 20 75 70 20 6f 6e 20 41 57 53 20 77 69 6c 6c 20 72 65 71 75 69 72 65 20 61 | ng.this.up.on.AWS.will.require.a |
f13a0 | 20 22 43 75 73 74 6f 6d 20 50 72 6f 74 6f 63 6f 6c 20 52 75 6c 65 22 20 66 6f 72 20 70 72 6f 74 | ."Custom.Protocol.Rule".for.prot |
f13c0 | 6f 63 6f 6c 20 6e 75 6d 62 65 72 20 22 34 37 22 20 28 47 52 45 29 20 41 6c 6c 6f 77 20 52 75 6c | ocol.number."47".(GRE).Allow.Rul |
f13e0 | 65 20 69 6e 20 54 57 4f 20 70 6c 61 63 65 73 2e 20 46 69 72 73 74 6c 79 20 6f 6e 20 74 68 65 20 | e.in.TWO.places..Firstly.on.the. |
f1400 | 56 50 43 20 4e 65 74 77 6f 72 6b 20 41 43 4c 2c 20 61 6e 64 20 73 65 63 6f 6e 64 6c 79 20 6f 6e | VPC.Network.ACL,.and.secondly.on |
f1420 | 20 74 68 65 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 20 6e 65 74 77 6f 72 6b 20 41 43 4c 20 | .the.security.group.network.ACL. |
f1440 | 61 74 74 61 63 68 65 64 20 74 6f 20 74 68 65 20 45 43 32 20 69 6e 73 74 61 6e 63 65 2e 20 54 68 | attached.to.the.EC2.instance..Th |
f1460 | 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 61 73 20 77 6f 72 6b 69 6e 67 20 66 6f | is.has.been.tested.as.working.fo |
f1480 | 72 20 74 68 65 20 6f 66 66 69 63 69 61 6c 20 41 4d 49 20 69 6d 61 67 65 20 6f 6e 20 74 68 65 20 | r.the.official.AMI.image.on.the. |
f14a0 | 41 57 53 20 4d 61 72 6b 65 74 70 6c 61 63 65 2e 20 28 4c 6f 63 61 74 65 20 74 68 65 20 63 6f 72 | AWS.Marketplace..(Locate.the.cor |
f14c0 | 72 65 63 74 20 56 50 43 20 61 6e 64 20 73 65 63 75 72 69 74 79 20 67 72 6f 75 70 20 62 79 20 6e | rect.VPC.and.security.group.by.n |
f14e0 | 61 76 69 67 61 74 69 6e 67 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 74 61 69 6c 73 20 70 61 | avigating.through.the.details.pa |
f1500 | 6e 65 20 62 65 6c 6f 77 20 79 6f 75 72 20 45 43 32 20 69 6e 73 74 61 6e 63 65 20 69 6e 20 74 68 | ne.below.your.EC2.instance.in.th |
f1520 | 65 20 41 57 53 20 63 6f 6e 73 6f 6c 65 29 2e 00 53 65 74 74 69 6e 67 20 75 70 20 49 50 53 65 63 | e.AWS.console)..Setting.up.IPSec |
f1540 | 3a 00 53 65 74 74 69 6e 67 20 75 70 20 4f 70 65 6e 56 50 4e 00 53 65 74 74 69 6e 67 20 75 70 20 | :.Setting.up.OpenVPN.Setting.up. |
f1560 | 61 20 66 75 6c 6c 2d 62 6c 6f 77 6e 20 50 4b 49 20 77 69 74 68 20 61 20 43 41 20 63 65 72 74 69 | a.full-blown.PKI.with.a.CA.certi |
f1580 | 66 69 63 61 74 65 20 77 6f 75 6c 64 20 61 72 67 75 61 62 6c 79 20 64 65 66 65 61 74 20 74 68 65 | ficate.would.arguably.defeat.the |
f15a0 | 20 70 75 72 70 6f 73 65 20 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 4e | .purpose.of.site-to-site.OpenVPN |
f15c0 | 2c 20 73 69 6e 63 65 20 69 74 73 20 6d 61 69 6e 20 67 6f 61 6c 20 69 73 20 73 75 70 70 6f 73 65 | ,.since.its.main.goal.is.suppose |
f15e0 | 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 73 69 6d 70 6c 69 63 69 74 79 | d.to.be.configuration.simplicity |
f1600 | 2c 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 73 65 72 76 65 72 20 73 65 74 75 70 73 20 74 68 61 74 | ,.compared.to.server.setups.that |
f1620 | 20 6e 65 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 | .need.to.support.multiple.client |
f1640 | 73 2e 00 53 65 74 74 69 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 65 74 74 69 | s..Setting.up.certificates.Setti |
f1660 | 6e 67 20 75 70 20 63 65 72 74 69 66 69 63 61 74 65 73 3a 00 53 65 74 74 69 6e 67 20 75 70 20 74 | ng.up.certificates:.Setting.up.t |
f1680 | 75 6e 6e 65 6c 3a 00 53 65 74 74 69 6e 67 20 77 69 6c 6c 20 6f 6e 6c 79 20 62 65 63 6f 6d 65 20 | unnel:.Setting.will.only.become. |
f16a0 | 61 63 74 69 76 65 20 77 69 74 68 20 74 68 65 20 6e 65 78 74 20 72 65 62 6f 6f 74 21 00 53 65 74 | active.with.the.next.reboot!.Set |
f16c0 | 75 70 20 44 48 43 50 20 48 41 20 66 6f 72 20 6e 65 74 77 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 | up.DHCP.HA.for.network.192.0.2.0 |
f16e0 | 2f 32 34 00 53 65 74 75 70 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 66 6f 72 20 6e 65 74 77 | /24.Setup.DHCP.failover.for.netw |
f1700 | 6f 72 6b 20 31 39 32 2e 30 2e 32 2e 30 2f 32 34 00 53 65 74 75 70 20 65 6e 63 72 79 70 74 65 64 | ork.192.0.2.0/24.Setup.encrypted |
f1720 | 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 67 69 76 65 6e 20 75 73 65 72 6e 61 6d 65 2e 20 54 68 | .password.for.given.username..Th |
f1740 | 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 74 72 61 6e 73 66 65 72 72 69 6e 67 20 61 20 | is.is.useful.for.transferring.a. |
f1760 | 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 66 72 6f 6d 20 73 79 73 74 65 6d 20 74 6f 20 73 | hashed.password.from.system.to.s |
f1780 | 79 73 74 65 6d 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 6e 20 | ystem..Setup.the.`<timeout>`.in. |
f17a0 | 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 74 68 65 20 52 41 44 49 55 53 | seconds.when.querying.the.RADIUS |
f17c0 | 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 60 3c 74 69 6d 65 6f 75 74 3e 60 20 69 | .server..Setup.the.`<timeout>`.i |
f17e0 | 6e 20 73 65 63 6f 6e 64 73 20 77 68 65 6e 20 71 75 65 72 79 69 6e 67 20 74 68 65 20 54 41 43 41 | n.seconds.when.querying.the.TACA |
f1800 | 43 53 20 73 65 72 76 65 72 2e 00 53 65 74 75 70 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 | CS.server..Setup.the.dynamic.DNS |
f1820 | 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 | .hostname.`<hostname>`.associate |
f1840 | 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 | d.with.the.DynDNS.provider.ident |
f1860 | 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 63 65 2d 6e 61 6d 65 3e 60 2e 00 53 65 74 75 70 | ified.by.`<service-name>`..Setup |
f1880 | 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 | .the.dynamic.DNS.hostname.`<host |
f18a0 | 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e | name>`.associated.with.the.DynDN |
f18c0 | 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 | S.provider.identified.by.`<servi |
f18e0 | 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 61 64 64 72 | ce>`.when.the.IP.address.on.addr |
f1900 | 65 73 73 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e 67 65 73 2e 00 53 65 74 75 70 | ess.`<interface>`.changes..Setup |
f1920 | 20 74 68 65 20 64 79 6e 61 6d 69 63 20 44 4e 53 20 68 6f 73 74 6e 61 6d 65 20 60 3c 68 6f 73 74 | .the.dynamic.DNS.hostname.`<host |
f1940 | 6e 61 6d 65 3e 60 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 44 79 6e 44 4e | name>`.associated.with.the.DynDN |
f1960 | 53 20 70 72 6f 76 69 64 65 72 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 60 3c 73 65 72 76 69 | S.provider.identified.by.`<servi |
f1980 | 63 65 3e 60 20 77 68 65 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 69 6e 74 65 | ce>`.when.the.IP.address.on.inte |
f19a0 | 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 68 61 6e 67 65 73 2e 00 53 65 76 | rface.`<interface>`.changes..Sev |
f19c0 | 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 55 52 4c 20 74 6f 20 69 6e | eral.commands.utilize.cURL.to.in |
f19e0 | 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | itiate.transfers..Configure.the. |
f1a00 | 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 49 50 76 34 2f 49 50 76 36 20 61 64 64 72 65 73 73 20 75 | local.source.IPv4/IPv6.address.u |
f1a20 | 73 65 64 20 66 6f 72 20 61 6c 6c 20 63 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 | sed.for.all.cURL.operations..Sev |
f1a40 | 65 72 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 75 74 69 6c 69 7a 65 20 63 75 72 6c 20 74 6f 20 69 6e | eral.commands.utilize.curl.to.in |
f1a60 | 69 74 69 61 74 65 20 74 72 61 6e 73 66 65 72 73 2e 20 43 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | itiate.transfers..Configure.the. |
f1a80 | 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 66 6f 72 20 | local.source.interface.used.for. |
f1aa0 | 61 6c 6c 20 43 55 52 4c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 53 65 76 65 72 69 74 79 00 53 65 | all.CURL.operations..Severity.Se |
f1ac0 | 76 65 72 69 74 79 20 4c 65 76 65 6c 00 53 68 61 70 65 72 00 53 68 6f 72 74 20 47 49 20 63 61 70 | verity.Level.Shaper.Short.GI.cap |
f1ae0 | 61 62 69 6c 69 74 69 65 73 00 53 68 6f 72 74 20 47 49 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 | abilities.Short.GI.capabilities. |
f1b00 | 66 6f 72 20 32 30 20 61 6e 64 20 34 30 20 4d 48 7a 00 53 68 6f 72 74 20 62 75 72 73 74 73 20 63 | for.20.and.40.MHz.Short.bursts.c |
f1b20 | 61 6e 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 65 78 63 65 65 64 20 74 68 65 20 6c 69 6d 69 | an.be.allowed.to.exceed.the.limi |
f1b40 | 74 2e 20 4f 6e 20 63 72 65 61 74 69 6f 6e 2c 20 74 68 65 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c | t..On.creation,.the.Rate-Control |
f1b60 | 20 74 72 61 66 66 69 63 20 69 73 20 73 74 6f 63 6b 65 64 20 77 69 74 68 20 74 6f 6b 65 6e 73 20 | .traffic.is.stocked.with.tokens. |
f1b80 | 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f | which.correspond.to.the.amount.o |
f1ba0 | 66 20 74 72 61 66 66 69 63 20 74 68 61 74 20 63 61 6e 20 62 65 20 62 75 72 73 74 20 69 6e 20 6f | f.traffic.that.can.be.burst.in.o |
f1bc0 | 6e 65 20 67 6f 2e 20 54 6f 6b 65 6e 73 20 61 72 72 69 76 65 20 61 74 20 61 20 73 74 65 61 64 79 | ne.go..Tokens.arrive.at.a.steady |
f1be0 | 20 72 61 74 65 2c 20 75 6e 74 69 6c 20 74 68 65 20 62 75 63 6b 65 74 20 69 73 20 66 75 6c 6c 2e | .rate,.until.the.bucket.is.full. |
f1c00 | 00 53 68 6f 72 74 63 75 74 20 73 79 6e 74 61 78 20 66 6f 72 20 73 70 65 63 69 66 79 69 6e 67 20 | .Shortcut.syntax.for.specifying. |
f1c20 | 61 75 74 6f 6d 61 74 69 63 20 6c 65 61 6b 69 6e 67 20 66 72 6f 6d 20 76 72 66 20 56 52 46 4e 41 | automatic.leaking.from.vrf.VRFNA |
f1c40 | 4d 45 20 74 6f 20 74 68 65 20 63 75 72 72 65 6e 74 20 56 52 46 20 75 73 69 6e 67 20 74 68 65 20 | ME.to.the.current.VRF.using.the. |
f1c60 | 56 50 4e 20 52 49 42 20 61 73 20 69 6e 74 65 72 6d 65 64 69 61 72 79 2e 20 54 68 65 20 52 44 20 | VPN.RIB.as.intermediary..The.RD. |
f1c80 | 61 6e 64 20 52 54 20 61 72 65 20 61 75 74 6f 20 64 65 72 69 76 65 64 20 61 6e 64 20 73 68 6f 75 | and.RT.are.auto.derived.and.shou |
f1ca0 | 6c 64 20 6e 6f 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 66 | ld.not.be.specified.explicitly.f |
f1cc0 | 6f 72 20 65 69 74 68 65 72 20 74 68 65 20 73 6f 75 72 63 65 20 6f 72 20 64 65 73 74 69 6e 61 74 | or.either.the.source.or.destinat |
f1ce0 | 69 6f 6e 20 56 52 46 e2 80 99 73 2e 00 53 68 6f 77 00 53 68 6f 77 20 44 48 43 50 20 73 65 72 76 | ion.VRF...s..Show.Show.DHCP.serv |
f1d00 | 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 6f 77 20 44 48 43 50 76 36 20 73 | er.daemon.log.file.Show.DHCPv6.s |
f1d20 | 65 72 76 65 72 20 64 61 65 6d 6f 6e 20 6c 6f 67 20 66 69 6c 65 00 53 68 6f 77 20 46 69 72 65 77 | erver.daemon.log.file.Show.Firew |
f1d40 | 61 6c 6c 20 6c 6f 67 00 53 68 6f 77 20 4c 4c 44 50 20 6e 65 69 67 68 62 6f 72 73 20 63 6f 6e 6e | all.log.Show.LLDP.neighbors.conn |
f1d60 | 65 63 74 65 64 20 76 69 61 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e | ected.via.interface.`<interface> |
f1d80 | 60 2e 00 53 68 6f 77 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 20 6c | `..Show.SSH.dynamic-protection.l |
f1da0 | 6f 67 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 53 53 | og..Show.SSH.server.log..Show.SS |
f1dc0 | 48 20 73 65 72 76 65 72 20 70 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 | H.server.public.key.fingerprints |
f1de0 | 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 20 76 69 73 75 61 6c 20 41 53 43 49 49 20 61 72 74 20 72 | ,.including.a.visual.ASCII.art.r |
f1e00 | 65 70 72 65 73 65 6e 74 61 74 69 6f 6e 2e 00 53 68 6f 77 20 53 53 48 20 73 65 72 76 65 72 20 70 | epresentation..Show.SSH.server.p |
f1e20 | 75 62 6c 69 63 20 6b 65 79 20 66 69 6e 67 65 72 70 72 69 6e 74 73 2e 00 53 68 6f 77 20 57 41 4e | ublic.key.fingerprints..Show.WAN |
f1e40 | 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 63 6c 75 | .load.balancer.information.inclu |
f1e60 | 64 69 6e 67 20 74 65 73 74 20 74 79 70 65 73 20 61 6e 64 20 74 61 72 67 65 74 73 2e 20 41 20 63 | ding.test.types.and.targets..A.c |
f1e80 | 68 61 72 61 63 74 65 72 20 61 74 20 74 68 65 20 73 74 61 72 74 20 6f 66 20 65 61 63 68 20 6c 69 | haracter.at.the.start.of.each.li |
f1ea0 | 6e 65 20 64 65 70 69 63 74 73 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 74 65 73 74 | ne.depicts.the.state.of.the.test |
f1ec0 | 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 49 4d 45 49 2e 00 53 68 6f 77 20 57 57 41 | .Show.WWAN.module.IMEI..Show.WWA |
f1ee0 | 4e 20 6d 6f 64 75 6c 65 20 49 4d 53 49 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 | N.module.IMSI..Show.WWAN.module. |
f1f00 | 4d 53 49 53 44 4e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 53 49 4d 20 63 61 72 | MSISDN..Show.WWAN.module.SIM.car |
f1f20 | 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 | d.information..Show.WWAN.module. |
f1f40 | 66 69 72 6d 77 61 72 65 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 68 61 72 64 77 | firmware..Show.WWAN.module.hardw |
f1f60 | 61 72 65 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 | are.capabilities..Show.WWAN.modu |
f1f80 | 6c 65 20 68 61 72 64 77 61 72 65 20 72 65 76 69 73 69 6f 6e 2e 00 53 68 6f 77 20 57 57 41 4e 20 | le.hardware.revision..Show.WWAN. |
f1fa0 | 6d 6f 64 75 6c 65 20 6d 6f 64 65 6c 2e 00 53 68 6f 77 20 57 57 41 4e 20 6d 6f 64 75 6c 65 20 73 | module.model..Show.WWAN.module.s |
f1fc0 | 69 67 6e 61 6c 20 73 74 72 65 6e 67 74 68 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 61 76 61 69 | ignal.strength..Show.a.list.avai |
f1fe0 | 6c 61 62 6c 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 73 00 53 68 6f 77 20 61 20 | lable.container.networks.Show.a. |
f2000 | 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 72 3a 60 43 41 20 28 43 65 72 | list.of.installed.:abbr:`CA.(Cer |
f2020 | 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 74 79 29 60 20 63 65 72 74 69 66 69 63 61 74 65 | tificate.Authority)`.certificate |
f2040 | 73 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 20 3a 61 62 62 | s..Show.a.list.of.installed.:abb |
f2060 | 72 3a 60 43 52 4c 73 20 28 43 65 72 74 69 66 69 63 61 74 65 20 52 65 76 6f 63 61 74 69 6f 6e 20 | r:`CRLs.(Certificate.Revocation. |
f2080 | 4c 69 73 74 29 60 2e 00 53 68 6f 77 20 61 20 6c 69 73 74 20 6f 66 20 69 6e 73 74 61 6c 6c 65 64 | List)`..Show.a.list.of.installed |
f20a0 | 20 63 65 72 74 69 66 69 63 61 74 65 73 00 53 68 6f 77 20 61 6c 6c 20 42 46 44 20 70 65 65 72 73 | .certificates.Show.all.BFD.peers |
f20c0 | 00 53 68 6f 77 20 61 76 61 69 6c 61 62 6c 65 20 6f 66 66 6c 6f 61 64 69 6e 67 20 66 75 6e 63 74 | .Show.available.offloading.funct |
f20e0 | 69 6f 6e 73 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 68 6f 77 | ions.on.given.`<interface>`.Show |
f2100 | 20 62 69 6e 64 65 64 20 71 61 74 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 70 74 73 20 74 6f | .binded.qat.device.interrupts.to |
f2120 | 20 63 65 72 74 61 69 6e 20 63 6f 72 65 2e 00 53 68 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d | .certain.core..Show.bridge.`<nam |
f2140 | 65 3e 60 20 66 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 6f 72 | e>`.fdb.displays.the.current.for |
f2160 | 77 61 72 64 69 6e 67 20 74 61 62 6c 65 3a 00 53 68 6f 77 20 62 72 69 64 67 65 20 60 3c 6e 61 6d | warding.table:.Show.bridge.`<nam |
f2180 | 65 3e 60 20 6d 64 62 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 63 75 72 72 65 6e 74 20 6d 75 6c | e>`.mdb.displays.the.current.mul |
f21a0 | 74 69 63 61 73 74 20 67 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 20 74 61 62 6c 65 2e 54 68 | ticast.group.membership.table.Th |
f21c0 | 65 20 74 61 62 6c 65 20 69 73 20 70 6f 70 75 6c 61 74 65 64 20 62 79 20 49 47 4d 50 20 61 6e 64 | e.table.is.populated.by.IGMP.and |
f21e0 | 20 4d 4c 44 20 73 6e 6f 6f 70 69 6e 67 20 69 6e 20 74 68 65 20 62 72 69 64 67 65 20 64 72 69 76 | .MLD.snooping.in.the.bridge.driv |
f2200 | 65 72 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 00 53 68 6f 77 20 62 72 69 65 66 20 69 6e 74 | er.automatically..Show.brief.int |
f2220 | 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 6f 6d 6d 61 6e 64 | erface.information..Show.command |
f2240 | 73 00 53 68 6f 77 20 63 6f 6e 66 69 67 75 72 65 64 20 73 65 72 69 61 6c 20 70 6f 72 74 73 20 61 | s.Show.configured.serial.ports.a |
f2260 | 6e 64 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 69 6e 74 65 72 66 61 63 65 20 63 6f | nd.their.respective.interface.co |
f2280 | 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 61 74 | nfiguration..Show.connection.dat |
f22a0 | 61 20 6f 66 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 74 72 61 66 66 69 63 3a 00 53 68 6f 77 | a.of.load.balanced.traffic:.Show |
f22c0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 6e 67 20 65 78 74 65 72 6e 61 6c 20 63 61 63 | .connection.syncing.external.cac |
f22e0 | 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 73 79 6e 63 69 | he.entries.Show.connection.synci |
f2300 | 6e 67 20 69 6e 74 65 72 6e 61 6c 20 63 61 63 68 65 20 65 6e 74 72 69 65 73 00 53 68 6f 77 20 63 | ng.internal.cache.entries.Show.c |
f2320 | 75 72 72 65 6e 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 75 73 65 72 73 2e 00 53 68 6f 77 20 64 | urrently.connected.users..Show.d |
f2340 | 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 6c 65 | etailed.information.about.all.le |
f2360 | 61 72 6e 65 64 20 53 65 67 6d 65 6e 74 20 52 6f 75 74 69 6e 67 20 4e 6f 64 65 73 00 53 68 6f 77 | arned.Segment.Routing.Nodes.Show |
f2380 | 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 70 72 65 66 | .detailed.information.about.pref |
f23a0 | 69 78 2d 73 69 64 20 61 6e 64 20 6c 61 62 65 6c 20 6c 65 61 72 6e 65 64 00 53 68 6f 77 20 64 65 | ix-sid.and.label.learned.Show.de |
f23c0 | 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 75 6e 64 | tailed.information.about.the.und |
f23e0 | 65 72 6c 61 79 69 6e 67 20 70 68 79 73 69 63 61 6c 20 6c 69 6e 6b 73 20 6f 6e 20 67 69 76 65 6e | erlaying.physical.links.on.given |
f2400 | 20 62 6f 6e 64 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c | .bond.`<interface>`..Show.detail |
f2420 | 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 | ed.information.on.given.`<interf |
f2440 | 61 63 65 3e 60 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | ace>`.Show.detailed.information. |
f2460 | 6f 6e 20 74 68 65 20 67 69 76 65 6e 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 | on.the.given.loopback.interface. |
f2480 | 60 6c 6f 60 2e 00 53 68 6f 77 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | `lo`..Show.detailed.information. |
f24a0 | 73 75 6d 6d 61 72 79 20 6f 6e 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 00 53 | summary.on.given.`<interface>`.S |
f24c0 | 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | how.flow.accounting.information. |
f24e0 | 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 66 6f 72 20 61 20 73 70 | for.given.`<interface>`.for.a.sp |
f2500 | 65 63 69 66 69 63 20 68 6f 73 74 20 6f 6e 6c 79 2e 00 53 68 6f 77 20 66 6c 6f 77 20 61 63 63 6f | ecific.host.only..Show.flow.acco |
f2520 | 75 6e 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 67 69 76 65 6e 20 60 3c 69 | unting.information.for.given.`<i |
f2540 | 6e 74 65 72 66 61 63 65 3e 60 2e 00 53 68 6f 77 20 67 65 6e 65 72 61 6c 20 69 6e 66 6f 72 6d 61 | nterface>`..Show.general.informa |
f2560 | 74 69 6f 6e 20 61 62 6f 75 74 20 73 70 65 63 69 66 69 63 20 57 69 72 65 47 75 61 72 64 20 69 6e | tion.about.specific.WireGuard.in |
f2580 | 74 65 72 66 61 63 65 00 53 68 6f 77 20 69 6e 66 6f 20 61 62 6f 75 74 20 74 68 65 20 57 69 72 65 | terface.Show.info.about.the.Wire |
f25a0 | 67 75 61 72 64 20 73 65 72 76 69 63 65 2e 20 49 74 20 61 6c 73 6f 20 73 68 6f 77 73 20 74 68 65 | guard.service..It.also.shows.the |
f25c0 | 20 6c 61 74 65 73 74 20 68 61 6e 64 73 68 61 6b 65 2e 00 53 68 6f 77 20 69 6e 66 6f 72 6d 61 74 | .latest.handshake..Show.informat |
f25e0 | 69 6f 6e 20 61 62 6f 75 74 20 70 68 79 73 69 63 61 6c 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 | ion.about.physical.`<interface>` |
f2600 | 00 53 68 6f 77 20 6c 69 73 74 20 6f 66 20 49 50 73 20 63 75 72 72 65 6e 74 6c 79 20 62 6c 6f 63 | .Show.list.of.IPs.currently.bloc |
f2620 | 6b 65 64 20 62 79 20 53 53 48 20 64 79 6e 61 6d 69 63 2d 70 72 6f 74 65 63 74 69 6f 6e 2e 00 53 | ked.by.SSH.dynamic-protection..S |
f2640 | 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 73 65 72 76 69 | how.logs.for.mDNS.repeater.servi |
f2660 | 63 65 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 63 6f 6e 74 61 | ce..Show.logs.from.a.given.conta |
f2680 | 69 6e 65 72 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c 6c 20 44 48 43 50 20 63 6c 69 | iner.Show.logs.from.all.DHCP.cli |
f26a0 | 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 6f 6d 20 61 6c | ent.processes..Show.logs.from.al |
f26c0 | 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 65 73 2e 00 53 68 6f 77 20 | l.DHCPv6.client.processes..Show. |
f26e0 | 6c 6f 67 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 44 | logs.from.specific.`interface`.D |
f2700 | 48 43 50 20 63 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 20 6c 6f 67 73 20 66 72 | HCP.client.process..Show.logs.fr |
f2720 | 6f 6d 20 73 70 65 63 69 66 69 63 20 60 69 6e 74 65 72 66 61 63 65 60 20 44 48 43 50 76 36 20 63 | om.specific.`interface`.DHCPv6.c |
f2740 | 6c 69 65 6e 74 20 70 72 6f 63 65 73 73 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 | lient.process..Show.only.informa |
f2760 | 74 69 6f 6e 20 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 43 65 72 74 69 66 69 63 61 74 65 20 41 | tion.for.specified.Certificate.A |
f2780 | 75 74 68 6f 72 69 74 79 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | uthority..Show.only.information. |
f27a0 | 66 6f 72 20 73 70 65 63 69 66 69 65 64 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 53 68 6f 77 20 | for.specified.certificate..Show. |
f27c0 | 6f 6e 6c 79 20 6c 65 61 73 65 73 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 6f 6f | only.leases.in.the.specified.poo |
f27e0 | 6c 2e 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 73 20 77 69 74 68 20 74 68 65 20 73 70 65 | l..Show.only.leases.with.the.spe |
f2800 | 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 | cified.state..Possible.states:.a |
f2820 | 62 61 6e 64 6f 6e 65 64 2c 20 61 63 74 69 76 65 2c 20 61 6c 6c 2c 20 62 61 63 6b 75 70 2c 20 65 | bandoned,.active,.all,.backup,.e |
f2840 | 78 70 69 72 65 64 2c 20 66 72 65 65 2c 20 72 65 6c 65 61 73 65 64 2c 20 72 65 73 65 74 20 28 64 | xpired,.free,.released,.reset.(d |
f2860 | 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 68 6f 77 20 6f 6e 6c 79 20 6c 65 61 73 65 | efault.=.active).Show.only.lease |
f2880 | 73 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 74 61 74 65 2e 20 50 6f 73 73 | s.with.the.specified.state..Poss |
f28a0 | 69 62 6c 65 20 73 74 61 74 65 73 3a 20 61 6c 6c 2c 20 61 63 74 69 76 65 2c 20 66 72 65 65 2c 20 | ible.states:.all,.active,.free,. |
f28c0 | 65 78 70 69 72 65 64 2c 20 72 65 6c 65 61 73 65 64 2c 20 61 62 61 6e 64 6f 6e 65 64 2c 20 72 65 | expired,.released,.abandoned,.re |
f28e0 | 73 65 74 2c 20 62 61 63 6b 75 70 20 28 64 65 66 61 75 6c 74 20 3d 20 61 63 74 69 76 65 29 00 53 | set,.backup.(default.=.active).S |
f2900 | 68 6f 77 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 65 6e 74 72 79 20 66 6f 72 20 74 68 65 20 | how.routing.table.entry.for.the. |
f2920 | 64 65 66 61 75 6c 74 20 72 6f 75 74 65 2e 00 53 68 6f 77 20 73 70 65 63 69 66 69 63 20 4d 41 43 | default.route..Show.specific.MAC |
f2940 | 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 53 68 6f 77 20 73 | sec.interface.information.Show.s |
f2960 | 74 61 74 75 73 20 6f 66 20 6e 65 77 20 73 65 74 75 70 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 | tatus.of.new.setup:.Show.statuse |
f2980 | 73 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 20 67 72 61 6e 74 65 64 20 62 | s.of.all.active.leases.granted.b |
f29a0 | 79 20 6c 6f 63 61 6c 20 28 74 68 69 73 20 73 65 72 76 65 72 29 20 6f 72 20 72 65 6d 6f 74 65 20 | y.local.(this.server).or.remote. |
f29c0 | 28 66 61 69 6c 6f 76 65 72 20 73 65 72 76 65 72 29 3a 00 53 68 6f 77 20 73 74 61 74 75 73 65 73 | (failover.server):.Show.statuses |
f29e0 | 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 6c 65 61 73 65 73 3a 00 53 68 6f 77 20 74 68 65 20 | .of.all.active.leases:.Show.the. |
f2a00 | 44 48 43 50 20 73 65 72 76 65 72 20 73 74 61 74 69 73 74 69 63 73 20 66 6f 72 20 74 68 65 20 73 | DHCP.server.statistics.for.the.s |
f2a20 | 70 65 63 69 66 69 65 64 20 70 6f 6f 6c 2e 00 53 68 6f 77 20 74 68 65 20 44 48 43 50 20 73 65 72 | pecified.pool..Show.the.DHCP.ser |
f2a40 | 76 65 72 20 73 74 61 74 69 73 74 69 63 73 3a 00 53 68 6f 77 20 74 68 65 20 63 6f 6e 73 6f 6c 65 | ver.statistics:.Show.the.console |
f2a60 | 20 73 65 72 76 65 72 20 6c 6f 67 2e 00 53 68 6f 77 20 74 68 65 20 66 75 6c 6c 20 63 6f 6e 66 69 | .server.log..Show.the.full.confi |
f2a80 | 67 20 75 70 6c 6f 61 64 65 64 20 74 6f 20 74 68 65 20 51 41 54 20 64 65 76 69 63 65 2e 00 53 68 | g.uploaded.to.the.QAT.device..Sh |
f2aa0 | 6f 77 20 74 68 65 20 6c 69 73 74 20 6f 66 20 61 6c 6c 20 61 63 74 69 76 65 20 63 6f 6e 74 61 69 | ow.the.list.of.all.active.contai |
f2ac0 | 6e 65 72 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 63 61 6c 20 63 6f 6e 74 61 69 6e 65 72 20 69 | ners..Show.the.local.container.i |
f2ae0 | 6d 61 67 65 73 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 20 73 70 65 63 69 66 | mages..Show.the.logs.of.a.specif |
f2b00 | 69 63 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c | ic.Rule-Set..Show.the.logs.of.al |
f2b20 | 6c 20 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 62 72 69 64 67 65 20 66 69 72 65 | l.firewall;.show.all.bridge.fire |
f2b40 | 77 61 6c 6c 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 | wall.logs;.show.all.logs.for.for |
f2b60 | 77 61 72 64 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 66 6f 72 | ward.hook;.show.all.logs.for.for |
f2b80 | 77 61 72 64 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 20 66 69 6c 74 65 72 3b 20 73 | ward.hook.and.priority.filter;.s |
f2ba0 | 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 | how.all.logs.for.particular.cust |
f2bc0 | 6f 6d 20 63 68 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 | om.chain;.show.logs.for.specific |
f2be0 | 20 52 75 6c 65 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 | .Rule-Set..Show.the.logs.of.all. |
f2c00 | 66 69 72 65 77 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 34 20 66 69 72 65 77 61 6c 6c | firewall;.show.all.ipv4.firewall |
f2c20 | 20 6c 6f 67 73 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 | .logs;.show.all.logs.for.particu |
f2c40 | 6c 61 72 20 68 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 | lar.hook;.show.all.logs.for.part |
f2c60 | 69 63 75 6c 61 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 | icular.hook.and.priority;.show.a |
f2c80 | 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 | ll.logs.for.particular.custom.ch |
f2ca0 | 61 69 6e 3b 20 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 | ain;.show.logs.for.specific.Rule |
f2cc0 | 2d 53 65 74 2e 00 53 68 6f 77 20 74 68 65 20 6c 6f 67 73 20 6f 66 20 61 6c 6c 20 66 69 72 65 77 | -Set..Show.the.logs.of.all.firew |
f2ce0 | 61 6c 6c 3b 20 73 68 6f 77 20 61 6c 6c 20 69 70 76 36 20 66 69 72 65 77 61 6c 6c 20 6c 6f 67 73 | all;.show.all.ipv6.firewall.logs |
f2d00 | 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 68 | ;.show.all.logs.for.particular.h |
f2d20 | 6f 6f 6b 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 | ook;.show.all.logs.for.particula |
f2d40 | 72 20 68 6f 6f 6b 20 61 6e 64 20 70 72 69 6f 72 69 74 79 3b 20 73 68 6f 77 20 61 6c 6c 20 6c 6f | r.hook.and.priority;.show.all.lo |
f2d60 | 67 73 20 66 6f 72 20 70 61 72 74 69 63 75 6c 61 72 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 3b 20 | gs.for.particular.custom.chain;. |
f2d80 | 73 68 6f 77 20 6c 6f 67 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 52 75 6c 65 2d 53 65 74 2e | show.logs.for.specific.Rule-Set. |
f2da0 | 00 53 68 6f 77 20 74 68 65 20 72 6f 75 74 65 00 53 68 6f 77 20 74 72 61 6e 73 63 65 69 76 65 72 | .Show.the.route.Show.transceiver |
f2dc0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 70 6c 75 67 69 6e 20 6d 6f 64 75 6c 65 73 | .information.from.plugin.modules |
f2de0 | 2c 20 65 2e 67 20 53 46 50 2b 2c 20 51 53 46 50 00 53 68 6f 77 69 6e 67 20 42 46 44 20 6d 6f 6e | ,.e.g.SFP+,.QSFP.Showing.BFD.mon |
f2e00 | 69 74 6f 72 65 64 20 73 74 61 74 69 63 20 72 6f 75 74 65 73 00 53 68 6f 77 73 20 73 74 61 74 75 | itored.static.routes.Shows.statu |
f2e20 | 73 20 6f 66 20 61 6c 6c 20 61 73 73 69 67 6e 65 64 20 6c 65 61 73 65 73 3a 00 53 69 64 65 20 41 | s.of.all.assigned.leases:.Side.A |
f2e40 | 3a 00 53 69 64 65 20 42 3a 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 | :.Side.B:.Sierra.Wireless.AirPri |
f2e60 | 6d 65 20 4d 43 37 33 30 34 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 | me.MC7304.miniPCIe.card.(LTE).Si |
f2e80 | 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 33 30 20 6d 69 | erra.Wireless.AirPrime.MC7430.mi |
f2ea0 | 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 | niPCIe.card.(LTE).Sierra.Wireles |
f2ec0 | 73 20 41 69 72 50 72 69 6d 65 20 4d 43 37 34 35 35 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 | s.AirPrime.MC7455.miniPCIe.card. |
f2ee0 | 28 4c 54 45 29 00 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 41 69 72 50 72 69 6d 65 20 4d | (LTE).Sierra.Wireless.AirPrime.M |
f2f00 | 43 37 37 31 30 20 6d 69 6e 69 50 43 49 65 20 63 61 72 64 20 28 4c 54 45 29 00 53 69 6d 69 6c 61 | C7710.miniPCIe.card.(LTE).Simila |
f2f20 | 72 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 73 20 61 72 65 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f | r.combinations.are.applicable.fo |
f2f40 | 72 20 74 68 65 20 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 2e 00 53 69 6d 70 6c | r.the.dead-peer-detection..Simpl |
f2f60 | 65 20 42 61 62 65 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f | e.Babel.configuration.using.2.no |
f2f80 | 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 | des.and.redistributing.connected |
f2fa0 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d 70 6c 65 20 52 49 50 20 63 6f 6e 66 69 67 75 72 | .interfaces..Simple.RIP.configur |
f2fc0 | 61 74 69 6f 6e 20 75 73 69 6e 67 20 32 20 6e 6f 64 65 73 20 61 6e 64 20 72 65 64 69 73 74 72 69 | ation.using.2.nodes.and.redistri |
f2fe0 | 62 75 74 69 6e 67 20 63 6f 6e 6e 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 69 6d | buting.connected.interfaces..Sim |
f3000 | 70 6c 65 20 73 65 74 75 70 20 77 69 74 68 20 6f 6e 65 20 75 73 65 72 20 61 64 64 65 64 20 61 6e | ple.setup.with.one.user.added.an |
f3020 | 64 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 3a 00 53 69 6d 70 6c | d.password.authentication:.Simpl |
f3040 | 65 20 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 | e.text.password.authentication.i |
f3060 | 73 20 69 6e 73 65 63 75 72 65 20 61 6e 64 20 64 65 70 72 65 63 61 74 65 64 20 69 6e 20 66 61 76 | s.insecure.and.deprecated.in.fav |
f3080 | 6f 75 72 20 6f 66 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 | our.of.MD5.HMAC.authentication.. |
f30a0 | 53 69 6e 63 65 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 | Since.both.routers.do.not.know.t |
f30c0 | 68 65 69 72 20 65 66 66 65 63 74 69 76 65 20 70 75 62 6c 69 63 20 61 64 64 72 65 73 73 65 73 2c | heir.effective.public.addresses, |
f30e0 | 20 77 65 20 73 65 74 20 74 68 65 20 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 | .we.set.the.local-address.of.the |
f3100 | 20 70 65 65 72 20 74 6f 20 22 61 6e 79 22 2e 00 53 69 6e 63 65 20 69 74 27 73 20 61 20 48 51 20 | .peer.to."any"..Since.it's.a.HQ. |
f3120 | 61 6e 64 20 62 72 61 6e 63 68 20 6f 66 66 69 63 65 73 20 73 65 74 75 70 2c 20 77 65 20 77 69 6c | and.branch.offices.setup,.we.wil |
f3140 | 6c 20 77 61 6e 74 20 61 6c 6c 20 63 6c 69 65 6e 74 73 20 74 6f 20 68 61 76 65 20 66 69 78 65 64 | l.want.all.clients.to.have.fixed |
f3160 | 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 77 65 20 77 69 6c 6c 20 72 6f 75 74 65 20 74 72 61 | .addresses.and.we.will.route.tra |
f3180 | 66 66 69 63 20 74 6f 20 73 70 65 63 69 66 69 63 20 73 75 62 6e 65 74 73 20 74 68 72 6f 75 67 68 | ffic.to.specific.subnets.through |
f31a0 | 20 74 68 65 6d 2e 20 57 65 20 6e 65 65 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 | .them..We.need.configuration.for |
f31c0 | 20 65 61 63 68 20 63 6c 69 65 6e 74 20 74 6f 20 61 63 68 69 65 76 65 20 74 68 69 73 2e 00 53 69 | .each.client.to.achieve.this..Si |
f31e0 | 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 6f 75 6c 64 20 62 65 20 61 | nce.the.RADIUS.server.would.be.a |
f3200 | 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c 74 69 70 | .single.point.of.failure,.multip |
f3220 | 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 61 | le.RADIUS.servers.can.be.setup.a |
f3240 | 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 71 75 65 6e 74 69 61 6c 6c 79 2e | nd.will.be.used.subsequentially. |
f3260 | 00 53 69 6e 63 65 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 77 6f 75 6c 64 20 62 | .Since.the.RADIUS.server.would.b |
f3280 | 65 20 61 20 73 69 6e 67 6c 65 20 70 6f 69 6e 74 20 6f 66 20 66 61 69 6c 75 72 65 2c 20 6d 75 6c | e.a.single.point.of.failure,.mul |
f32a0 | 74 69 70 6c 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 73 65 74 75 | tiple.RADIUS.servers.can.be.setu |
f32c0 | 70 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 73 75 62 73 65 71 75 65 6e 74 69 61 6c | p.and.will.be.used.subsequential |
f32e0 | 6c 79 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 3a 00 53 69 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 | ly..For.example:.Since.the.mDNS. |
f3300 | 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 3a 61 62 62 72 3a 60 41 41 28 41 75 74 | protocol.sends.the.:abbr:`AA(Aut |
f3320 | 68 6f 72 69 74 61 74 69 76 65 20 41 6e 73 77 65 72 29 60 20 72 65 63 6f 72 64 73 20 69 6e 20 74 | horitative.Answer)`.records.in.t |
f3340 | 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 65 20 72 65 70 65 61 74 65 72 20 64 | he.packet.itself,.the.repeater.d |
f3360 | 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 65 20 74 68 65 20 73 6f 75 72 63 65 | oes.not.need.to.forge.the.source |
f3380 | 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | .address..Instead,.the.source.ad |
f33a0 | 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 72 | dress.is.of.the.interface.that.r |
f33c0 | 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 69 6e 63 65 20 74 68 65 20 6d 44 4e | epeats.the.packet..Since.the.mDN |
f33e0 | 53 20 70 72 6f 74 6f 63 6f 6c 20 73 65 6e 64 73 20 74 68 65 20 41 41 20 72 65 63 6f 72 64 73 20 | S.protocol.sends.the.AA.records. |
f3400 | 69 6e 20 74 68 65 20 70 61 63 6b 65 74 20 69 74 73 65 6c 66 2c 20 74 68 65 20 72 65 70 65 61 74 | in.the.packet.itself,.the.repeat |
f3420 | 65 72 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 66 6f 72 67 65 20 74 68 65 20 73 6f | er.does.not.need.to.forge.the.so |
f3440 | 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 49 6e 73 74 65 61 64 2c 20 74 68 65 20 73 6f 75 72 63 | urce.address..Instead,.the.sourc |
f3460 | 65 20 61 64 64 72 65 73 73 20 69 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 | e.address.is.of.the.interface.th |
f3480 | 61 74 20 72 65 70 65 61 74 73 20 74 68 65 20 70 61 63 6b 65 74 2e 00 53 69 6e 63 65 20 77 65 20 | at.repeats.the.packet..Since.we. |
f34a0 | 61 72 65 20 61 6e 61 6c 79 7a 69 6e 67 20 61 74 74 61 63 6b 73 20 74 6f 20 61 6e 64 20 66 72 6f | are.analyzing.attacks.to.and.fro |
f34c0 | 6d 20 6f 75 72 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 74 77 6f 20 74 79 70 65 | m.our.internal.network,.two.type |
f34e0 | 73 20 6f 66 20 61 74 74 61 63 6b 73 20 63 61 6e 20 62 65 20 69 64 65 6e 74 69 66 69 65 64 2c 20 | s.of.attacks.can.be.identified,. |
f3500 | 61 6e 64 20 64 69 66 66 65 72 65 6e 74 73 20 61 63 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 | and.differents.actions.are.neede |
f3520 | 64 3a 00 53 69 6e 67 6c 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 28 53 56 44 29 00 53 69 74 | d:.Single.VXLAN.device.(SVD).Sit |
f3540 | 65 20 74 6f 20 53 69 74 65 20 56 50 4e 00 53 69 74 65 2d 74 6f 2d 53 69 74 65 00 53 69 74 65 2d | e.to.Site.VPN.Site-to-Site.Site- |
f3560 | 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 61 20 77 61 79 20 74 6f 20 61 | to-site.mode.provides.a.way.to.a |
f3580 | 64 64 20 72 65 6d 6f 74 65 20 70 65 65 72 73 2c 20 77 68 69 63 68 20 63 6f 75 6c 64 20 62 65 20 | dd.remote.peers,.which.could.be. |
f35a0 | 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 65 78 63 68 61 6e 67 65 20 65 6e 63 72 79 70 74 65 64 | configured.to.exchange.encrypted |
f35c0 | 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 61 6e 64 20 56 79 | .information.between.them.and.Vy |
f35e0 | 4f 53 20 69 74 73 65 6c 66 20 6f 72 20 63 6f 6e 6e 65 63 74 65 64 2f 72 6f 75 74 65 64 20 6e 65 | OS.itself.or.connected/routed.ne |
f3600 | 74 77 6f 72 6b 73 2e 00 53 69 74 65 2d 74 6f 2d 73 69 74 65 20 6d 6f 64 65 20 73 75 70 70 6f 72 | tworks..Site-to-site.mode.suppor |
f3620 | 74 73 20 78 2e 35 30 39 20 62 75 74 20 64 6f 65 73 6e 27 74 20 72 65 71 75 69 72 65 20 69 74 20 | ts.x.509.but.doesn't.require.it. |
f3640 | 61 6e 64 20 63 61 6e 20 61 6c 73 6f 20 77 6f 72 6b 20 77 69 74 68 20 73 74 61 74 69 63 20 6b 65 | and.can.also.work.with.static.ke |
f3660 | 79 73 2c 20 77 68 69 63 68 20 69 73 20 73 69 6d 70 6c 65 72 20 69 6e 20 6d 61 6e 79 20 63 61 73 | ys,.which.is.simpler.in.many.cas |
f3680 | 65 73 2e 20 49 6e 20 74 68 69 73 20 65 78 61 6d 70 6c 65 2c 20 77 65 27 6c 6c 20 63 6f 6e 66 69 | es..In.this.example,.we'll.confi |
f36a0 | 67 75 72 65 20 61 20 73 69 6d 70 6c 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 | gure.a.simple.site-to-site.OpenV |
f36c0 | 50 4e 20 74 75 6e 6e 65 6c 20 75 73 69 6e 67 20 61 20 32 30 34 38 2d 62 69 74 20 70 72 65 2d 73 | PN.tunnel.using.a.2048-bit.pre-s |
f36e0 | 68 61 72 65 64 20 6b 65 79 2e 00 53 69 7a 65 20 6f 66 20 74 68 65 20 52 53 41 20 6b 65 79 2e 00 | hared.key..Size.of.the.RSA.key.. |
f3700 | 53 6c 61 76 65 20 73 65 6c 65 63 74 69 6f 6e 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 | Slave.selection.for.outgoing.tra |
f3720 | 66 66 69 63 20 69 73 20 64 6f 6e 65 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 74 72 | ffic.is.done.according.to.the.tr |
f3740 | 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 6d 61 79 20 62 65 | ansmit.hash.policy,.which.may.be |
f3760 | 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 69 6d 70 6c 65 | .changed.from.the.default.simple |
f3780 | 20 58 4f 52 20 70 6f 6c 69 63 79 20 76 69 61 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 68 61 73 | .XOR.policy.via.the.:cfgcmd:`has |
f37a0 | 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c | h-policy`.option,.documented.bel |
f37c0 | 6f 77 2e 00 53 6f 20 69 6e 20 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2c 20 77 | ow..So.in.our.firewall.policy,.w |
f37e0 | 65 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 63 6f 6d 69 6e 67 20 69 | e.want.to.allow.traffic.coming.i |
f3800 | 6e 20 6f 6e 20 74 68 65 20 6f 75 74 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 2c 20 64 65 73 74 | n.on.the.outside.interface,.dest |
f3820 | 69 6e 65 64 20 66 6f 72 20 54 43 50 20 70 6f 72 74 20 38 30 20 61 6e 64 20 74 68 65 20 49 50 20 | ined.for.TCP.port.80.and.the.IP. |
f3840 | 61 64 64 72 65 73 73 20 6f 66 20 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 2e 00 53 6f 20 69 6e 20 | address.of.192.168.0.100..So.in. |
f3860 | 6f 75 72 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 2c 20 77 65 20 77 61 6e 74 20 74 6f | our.firewall.ruleset,.we.want.to |
f3880 | 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 77 68 69 63 68 20 70 72 65 76 69 6f 75 73 6c 79 20 | .allow.traffic.which.previously. |
f38a0 | 6d 61 74 63 68 65 64 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6e 61 74 20 72 75 6c 65 2e 20 | matched.a.destination.nat.rule.. |
f38c0 | 49 6e 20 6f 72 64 65 72 20 74 6f 20 61 76 6f 69 64 20 63 72 65 61 74 69 6e 67 20 6d 61 6e 79 20 | In.order.to.avoid.creating.many. |
f38e0 | 72 75 6c 65 73 2c 20 6f 6e 65 20 66 6f 72 20 65 61 63 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | rules,.one.for.each.destination. |
f3900 | 6e 61 74 20 72 75 6c 65 2c 20 77 65 20 63 61 6e 20 61 63 63 65 70 74 20 61 6c 6c 20 2a 2a 27 64 | nat.rule,.we.can.accept.all.**'d |
f3920 | 6e 61 74 27 2a 2a 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 77 69 74 68 20 6f 6e 65 20 73 69 6d 70 | nat'**.connections.with.one.simp |
f3940 | 6c 65 20 72 75 6c 65 2c 20 75 73 69 6e 67 20 60 60 63 6f 6e 6e 65 63 74 69 6f 6e 2d 73 74 61 74 | le.rule,.using.``connection-stat |
f3960 | 75 73 60 60 20 6d 61 74 63 68 65 72 3a 00 53 6f 2c 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 | us``.matcher:.So,.firewall.confi |
f3980 | 67 75 72 61 74 69 6f 6e 20 6e 65 65 64 65 64 20 66 6f 72 20 74 68 69 73 20 73 65 74 75 70 3a 00 | guration.needed.for.this.setup:. |
f39a0 | 53 6f 6c 61 72 57 69 6e 64 73 00 53 6f 6d 65 20 49 53 50 73 20 62 79 20 64 65 66 61 75 6c 74 20 | SolarWinds.Some.ISPs.by.default. |
f39c0 | 6f 6e 6c 79 20 64 65 6c 65 67 61 74 65 20 61 20 2f 36 34 20 70 72 65 66 69 78 2e 20 54 6f 20 72 | only.delegate.a./64.prefix..To.r |
f39e0 | 65 71 75 65 73 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 70 72 65 66 69 78 20 73 69 7a | equest.for.a.specific.prefix.siz |
f3a00 | 65 20 75 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 72 65 71 75 65 73 74 20 66 6f 72 | e.use.this.option.to.request.for |
f3a20 | 20 61 20 62 69 67 67 65 72 20 64 65 6c 65 67 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 70 64 | .a.bigger.delegation.for.this.pd |
f3a40 | 20 60 3c 69 64 3e 60 2e 20 54 68 69 73 20 76 61 6c 75 65 20 69 73 20 69 6e 20 74 68 65 20 72 61 | .`<id>`..This.value.is.in.the.ra |
f3a60 | 6e 67 65 20 66 72 6f 6d 20 33 32 20 2d 20 36 34 20 73 6f 20 79 6f 75 20 63 6f 75 6c 64 20 72 65 | nge.from.32.-.64.so.you.could.re |
f3a80 | 71 75 65 73 74 20 75 70 20 74 6f 20 61 20 2f 33 32 20 70 72 65 66 69 78 20 28 69 66 20 79 6f 75 | quest.up.to.a./32.prefix.(if.you |
f3aa0 | 72 20 49 53 50 20 61 6c 6c 6f 77 73 20 74 68 69 73 29 20 64 6f 77 6e 20 74 6f 20 61 20 2f 36 34 | r.ISP.allows.this).down.to.a./64 |
f3ac0 | 20 64 65 6c 65 67 61 74 69 6f 6e 2e 00 53 6f 6d 65 20 49 54 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 | .delegation..Some.IT.environment |
f3ae0 | 73 20 72 65 71 75 69 72 65 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 70 72 6f 78 79 20 74 6f 20 | s.require.the.use.of.a.proxy.to. |
f3b00 | 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 20 57 69 74 68 6f 75 74 | connect.to.the.Internet..Without |
f3b20 | 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 56 79 4f 53 20 75 70 64 61 74 65 73 | .this.configuration.VyOS.updates |
f3b40 | 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 20 64 69 72 65 63 74 6c 79 | .could.not.be.installed.directly |
f3b60 | 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 3a 6f 70 63 6d 64 3a 60 61 64 64 20 73 79 73 74 65 6d | .by.using.the.:opcmd:`add.system |
f3b80 | 20 69 6d 61 67 65 60 20 63 6f 6d 6d 61 6e 64 20 28 3a 72 65 66 3a 60 75 70 64 61 74 65 5f 76 79 | .image`.command.(:ref:`update_vy |
f3ba0 | 6f 73 60 29 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 20 73 65 76 65 72 73 20 75 73 65 20 61 6e 20 | os`)..Some.RADIUS.severs.use.an. |
f3bc0 | 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 | access.control.list.which.allows |
f3be0 | 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f | .or.denies.queries,.make.sure.to |
f3c00 | 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 65 72 20 74 6f 20 74 68 65 20 61 6c 6c | .add.your.VyOS.router.to.the.all |
f3c20 | 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 6f 6d 65 20 52 41 44 49 55 53 5f 20 73 | owed.client.list..Some.RADIUS_.s |
f3c40 | 65 76 65 72 73 20 75 73 65 20 61 6e 20 61 63 63 65 73 73 20 63 6f 6e 74 72 6f 6c 20 6c 69 73 74 | evers.use.an.access.control.list |
f3c60 | 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 6f 72 20 64 65 6e 69 65 73 20 71 75 65 72 69 65 73 2c | .which.allows.or.denies.queries, |
f3c80 | 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 61 64 64 20 79 6f 75 72 20 56 79 4f 53 20 72 6f 75 74 | .make.sure.to.add.your.VyOS.rout |
f3ca0 | 65 72 20 74 6f 20 74 68 65 20 61 6c 6c 6f 77 65 64 20 63 6c 69 65 6e 74 20 6c 69 73 74 2e 00 53 | er.to.the.allowed.client.list..S |
f3cc0 | 6f 6d 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 | ome.application.service.provider |
f3ce0 | 73 20 28 41 53 50 73 29 20 6f 70 65 72 61 74 65 20 61 20 56 50 4e 20 67 61 74 65 77 61 79 20 74 | s.(ASPs).operate.a.VPN.gateway.t |
f3d00 | 6f 20 70 72 6f 76 69 64 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 69 72 20 69 6e 74 65 72 6e | o.provide.access.to.their.intern |
f3d20 | 61 6c 20 72 65 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 72 65 71 75 69 72 65 20 74 68 61 74 20 61 | al.resources,.and.require.that.a |
f3d40 | 20 63 6f 6e 6e 65 63 74 69 6e 67 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 20 74 72 61 6e 73 6c 61 | .connecting.organisation.transla |
f3d60 | 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 73 65 72 76 69 63 65 20 70 72 | te.all.traffic.to.the.service.pr |
f3d80 | 6f 76 69 64 65 72 20 6e 65 74 77 6f 72 6b 20 74 6f 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 | ovider.network.to.a.source.addre |
f3da0 | 73 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 20 41 53 50 2e 00 53 6f 6d 65 20 63 6f 6e | ss.provided.by.the.ASP..Some.con |
f3dc0 | 74 61 69 6e 65 72 20 72 65 67 69 73 74 72 69 65 73 20 72 65 71 75 69 72 65 20 63 72 65 64 65 6e | tainer.registries.require.creden |
f3de0 | 74 69 61 6c 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 53 6f 6d 65 20 66 69 72 65 77 61 6c 6c 20 | tials.to.be.used..Some.firewall. |
f3e00 | 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e 64 20 68 61 76 65 20 61 6e 20 | settings.are.global.and.have.an. |
f3e20 | 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 73 74 65 6d 2e 00 53 6f 6d 65 | affect.on.the.whole.system..Some |
f3e40 | 20 66 69 72 65 77 61 6c 6c 20 73 65 74 74 69 6e 67 73 20 61 72 65 20 67 6c 6f 62 61 6c 20 61 6e | .firewall.settings.are.global.an |
f3e60 | 64 20 68 61 76 65 20 61 6e 20 61 66 66 65 63 74 20 6f 6e 20 74 68 65 20 77 68 6f 6c 65 20 73 79 | d.have.an.affect.on.the.whole.sy |
f3e80 | 73 74 65 6d 2e 20 49 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 74 68 65 72 65 27 73 20 75 73 | stem..In.this.section.there's.us |
f3ea0 | 65 66 75 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 73 65 20 67 6c 6f | eful.information.about.these.glo |
f3ec0 | 62 61 6c 2d 6f 70 74 69 6f 6e 73 20 74 68 61 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 | bal-options.that.can.be.configur |
f3ee0 | 65 64 20 75 73 69 6e 67 20 76 79 6f 73 20 63 6c 69 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 | ed.using.vyos.cli..Some.policies |
f3f00 | 20 61 6c 72 65 61 64 79 20 69 6e 63 6c 75 64 65 20 6f 74 68 65 72 20 65 6d 62 65 64 64 65 64 20 | .already.include.other.embedded. |
f3f20 | 70 6f 6c 69 63 69 65 73 20 69 6e 73 69 64 65 2e 20 54 68 61 74 20 69 73 20 74 68 65 20 63 61 73 | policies.inside..That.is.the.cas |
f3f40 | 65 20 6f 66 20 53 68 61 70 65 72 5f 3a 20 65 61 63 68 20 6f 66 20 69 74 73 20 63 6c 61 73 73 65 | e.of.Shaper_:.each.of.its.classe |
f3f60 | 73 20 75 73 65 20 66 61 69 72 2d 71 75 65 75 65 20 75 6e 6c 65 73 73 20 79 6f 75 20 63 68 61 6e | s.use.fair-queue.unless.you.chan |
f3f80 | 67 65 20 69 74 2e 00 53 6f 6d 65 20 70 6f 6c 69 63 69 65 73 20 63 61 6e 20 62 65 20 63 6f 6d 62 | ge.it..Some.policies.can.be.comb |
f3fa0 | 69 6e 65 64 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 65 6d 62 65 64 5f | ined,.you.will.be.able.to.embed_ |
f3fc0 | 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 6f 6c 69 63 79 20 74 68 61 74 20 77 69 6c 6c 20 62 65 | .a.different.policy.that.will.be |
f3fe0 | 20 61 70 70 6c 69 65 64 20 74 6f 20 61 20 63 6c 61 73 73 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 | .applied.to.a.class.of.the.main. |
f4000 | 70 6f 6c 69 63 79 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 72 65 2f 73 75 70 70 | policy..Some.proxys.require/supp |
f4020 | 6f 72 74 20 74 68 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 | ort.the."basic".HTTP.authenticat |
f4040 | 69 6f 6e 20 73 63 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 36 31 37 60 2c 20 74 | ion.scheme.as.per.:rfc:`7617`,.t |
f4060 | 68 75 73 20 61 20 70 61 73 73 77 6f 72 64 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 | hus.a.password.can.be.configured |
f4080 | 2e 00 53 6f 6d 65 20 70 72 6f 78 79 73 20 72 65 71 75 69 72 65 2f 73 75 70 70 6f 72 74 20 74 68 | ..Some.proxys.require/support.th |
f40a0 | 65 20 22 62 61 73 69 63 22 20 48 54 54 50 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 63 | e."basic".HTTP.authentication.sc |
f40c0 | 68 65 6d 65 20 61 73 20 70 65 72 20 3a 72 66 63 3a 60 37 36 31 37 60 2c 20 74 68 75 73 20 61 20 | heme.as.per.:rfc:`7617`,.thus.a. |
f40e0 | 75 73 65 72 6e 61 6d 65 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 53 6f 6d 65 | username.can.be.configured..Some |
f4100 | 20 72 65 63 65 6e 74 20 49 53 50 73 20 72 65 71 75 69 72 65 20 79 6f 75 20 74 6f 20 62 75 69 6c | .recent.ISPs.require.you.to.buil |
f4120 | 64 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 | d.the.PPPoE.connection.through.a |
f4140 | 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 4f 6e 65 20 6f 66 20 74 68 6f 73 65 20 49 53 | .VLAN.interface..One.of.those.IS |
f4160 | 50 73 20 69 73 20 65 2e 67 2e 20 44 65 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 20 69 6e 20 47 | Ps.is.e.g..Deutsche.Telekom.in.G |
f4180 | 65 72 6d 61 6e 79 2e 20 56 79 4f 53 20 63 61 6e 20 65 61 73 69 6c 79 20 63 72 65 61 74 65 20 61 | ermany..VyOS.can.easily.create.a |
f41a0 | 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 74 68 72 6f 75 67 68 20 61 6e 20 65 6e 63 61 70 73 | .PPPoE.session.through.an.encaps |
f41c0 | 75 6c 61 74 65 64 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 66 6f 6c 6c 6f | ulated.VLAN.interface..The.follo |
f41e0 | 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 72 75 6e 20 79 6f 75 72 | wing.configuration.will.run.your |
f4200 | 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 68 72 6f 75 67 68 20 56 4c 41 4e 37 20 | .PPPoE.connection.through.VLAN7. |
f4220 | 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 56 4c 41 4e 20 66 6f 72 20 44 65 | which.is.the.default.VLAN.for.De |
f4240 | 75 74 73 63 68 65 20 54 65 6c 65 6b 6f 6d 3a 00 53 6f 6d 65 20 73 65 72 76 69 63 65 73 20 64 6f | utsche.Telekom:.Some.services.do |
f4260 | 6e 27 74 20 77 6f 72 6b 20 63 6f 72 72 65 63 74 6c 79 20 77 68 65 6e 20 62 65 69 6e 67 20 68 61 | n't.work.correctly.when.being.ha |
f4280 | 6e 64 6c 65 64 20 76 69 61 20 61 20 77 65 62 20 70 72 6f 78 79 2e 20 53 6f 20 73 6f 6d 65 74 69 | ndled.via.a.web.proxy..So.someti |
f42a0 | 6d 65 73 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 62 79 70 61 73 73 20 61 20 74 72 61 | mes.it.is.useful.to.bypass.a.tra |
f42c0 | 6e 73 70 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 53 6f 6d 65 20 75 73 65 72 73 20 74 65 6e 64 20 | nsparent.proxy:.Some.users.tend. |
f42e0 | 74 6f 20 63 6f 6e 6e 65 63 74 20 74 68 65 69 72 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 | to.connect.their.mobile.devices. |
f4300 | 75 73 69 6e 67 20 57 69 72 65 47 75 61 72 64 20 74 6f 20 74 68 65 69 72 20 56 79 4f 53 20 72 6f | using.WireGuard.to.their.VyOS.ro |
f4320 | 75 74 65 72 2e 20 54 6f 20 65 61 73 65 20 64 65 70 6c 6f 79 6d 65 6e 74 20 6f 6e 65 20 63 61 6e | uter..To.ease.deployment.one.can |
f4340 | 20 67 65 6e 65 72 61 74 65 20 61 20 22 70 65 72 20 6d 6f 62 69 6c 65 22 20 63 6f 6e 66 69 67 75 | .generate.a."per.mobile".configu |
f4360 | 72 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 56 79 4f 53 20 43 4c 49 2e 00 53 6f 6d 65 74 69 | ration.from.the.VyOS.CLI..Someti |
f4380 | 6d 65 73 20 6f 70 74 69 6f 6e 20 6c 69 6e 65 73 20 69 6e 20 74 68 65 20 67 65 6e 65 72 61 74 65 | mes.option.lines.in.the.generate |
f43a0 | 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 72 65 71 75 69 72 65 20 | d.OpenVPN.configuration.require. |
f43c0 | 71 75 6f 74 65 73 2e 20 54 68 69 73 20 69 73 20 64 6f 6e 65 20 74 68 72 6f 75 67 68 20 61 20 68 | quotes..This.is.done.through.a.h |
f43e0 | 61 63 6b 20 6f 6e 20 6f 75 72 20 63 6f 6e 66 69 67 20 67 65 6e 65 72 61 74 6f 72 2e 20 59 6f 75 | ack.on.our.config.generator..You |
f4400 | 20 63 61 6e 20 70 61 73 73 20 71 75 6f 74 65 73 20 75 73 69 6e 67 20 74 68 65 20 60 60 26 71 75 | .can.pass.quotes.using.the.``&qu |
f4420 | 6f 74 3b 60 60 20 73 74 61 74 65 6d 65 6e 74 2e 00 53 6f 72 74 20 74 68 65 20 6f 75 74 70 75 74 | ot;``.statement..Sort.the.output |
f4440 | 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 62 6c 65 20 | .by.the.specified.key..Possible. |
f4460 | 6b 65 79 73 3a 20 65 78 70 69 72 65 73 2c 20 69 61 69 64 5f 64 75 69 64 2c 20 69 70 2c 20 6c 61 | keys:.expires,.iaid_duid,.ip,.la |
f4480 | 73 74 5f 63 6f 6d 6d 2c 20 70 6f 6f 6c 2c 20 72 65 6d 61 69 6e 69 6e 67 2c 20 73 74 61 74 65 2c | st_comm,.pool,.remaining,.state, |
f44a0 | 20 74 79 70 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 72 74 20 74 68 65 20 6f 75 | .type.(default.=.ip).Sort.the.ou |
f44c0 | 74 70 75 74 20 62 79 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 2e 20 50 6f 73 73 69 | tput.by.the.specified.key..Possi |
f44e0 | 62 6c 65 20 6b 65 79 73 3a 20 69 70 2c 20 68 61 72 64 77 61 72 65 5f 61 64 64 72 65 73 73 2c 20 | ble.keys:.ip,.hardware_address,. |
f4500 | 73 74 61 74 65 2c 20 73 74 61 72 74 2c 20 65 6e 64 2c 20 72 65 6d 61 69 6e 69 6e 67 2c 20 70 6f | state,.start,.end,.remaining,.po |
f4520 | 6f 6c 2c 20 68 6f 73 74 6e 61 6d 65 20 28 64 65 66 61 75 6c 74 20 3d 20 69 70 29 00 53 6f 75 72 | ol,.hostname.(default.=.ip).Sour |
f4540 | 63 65 20 41 64 64 72 65 73 73 00 53 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 75 73 65 | ce.Address.Source.IP.address.use |
f4560 | 64 20 66 6f 72 20 56 58 4c 41 4e 20 75 6e 64 65 72 6c 61 79 2e 20 54 68 69 73 20 69 73 20 6d 61 | d.for.VXLAN.underlay..This.is.ma |
f4580 | 6e 64 61 74 6f 72 79 20 77 68 65 6e 20 75 73 69 6e 67 20 56 58 4c 41 4e 20 76 69 61 20 4c 32 56 | ndatory.when.using.VXLAN.via.L2V |
f45a0 | 50 4e 2f 45 56 50 4e 2e 00 53 6f 75 72 63 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 75 73 65 | PN/EVPN..Source.IPv4.address.use |
f45c0 | 64 20 69 6e 20 61 6c 6c 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 71 75 65 69 72 65 73 2e 00 | d.in.all.RADIUS.server.queires.. |
f45e0 | 53 6f 75 72 63 65 20 4e 41 54 20 72 75 6c 65 73 00 53 6f 75 72 63 65 20 50 72 65 66 69 78 00 53 | Source.NAT.rules.Source.Prefix.S |
f4600 | 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 52 41 44 | ource.all.connections.to.the.RAD |
f4620 | 49 55 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 20 60 3c 6e 61 6d | IUS.servers.from.given.VRF.`<nam |
f4640 | 65 3e 60 2e 00 53 6f 75 72 63 65 20 61 6c 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 | e>`..Source.all.connections.to.t |
f4660 | 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 72 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 56 52 46 | he.TACACS.servers.from.given.VRF |
f4680 | 20 60 3c 6e 61 6d 65 3e 60 2e 00 53 6f 75 72 63 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 6d 61 | .`<name>`..Source.protocol.to.ma |
f46a0 | 74 63 68 2e 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 64 75 6d 6d 79 20 69 6e | tch..Source.tunnel.from.dummy.in |
f46c0 | 74 65 72 66 61 63 65 00 53 6f 75 72 63 65 20 74 75 6e 6e 65 6c 20 66 72 6f 6d 20 6c 6f 6f 70 62 | terface.Source.tunnel.from.loopb |
f46e0 | 61 63 6b 73 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 66 6f 72 77 | acks.Spanning.Tree.Protocol.forw |
f4700 | 61 72 64 69 6e 67 20 60 3c 64 65 6c 61 79 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 | arding.`<delay>`.in.seconds.(def |
f4720 | 61 75 6c 74 3a 20 31 35 29 2e 00 53 70 61 6e 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f | ault:.15)..Spanning.Tree.Protoco |
f4740 | 6c 20 68 65 6c 6c 6f 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 60 3c 69 6e 74 65 72 76 61 6c | l.hello.advertisement.`<interval |
f4760 | 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 64 65 66 61 75 6c 74 3a 20 32 29 2e 00 53 70 61 6e | >`.in.seconds.(default:.2)..Span |
f4780 | 6e 69 6e 67 20 54 72 65 65 20 50 72 6f 74 6f 63 6f 6c 20 69 73 20 6e 6f 74 20 65 6e 61 62 6c 65 | ning.Tree.Protocol.is.not.enable |
f47a0 | 64 20 62 79 20 64 65 66 61 75 6c 74 20 69 6e 20 56 79 4f 53 2e 20 3a 72 65 66 3a 60 73 74 70 60 | d.by.default.in.VyOS..:ref:`stp` |
f47c0 | 20 63 61 6e 20 62 65 20 65 61 73 69 6c 79 20 65 6e 61 62 6c 65 64 20 69 66 20 6e 65 65 64 65 64 | .can.be.easily.enabled.if.needed |
f47e0 | 2e 00 53 70 61 74 69 61 6c 20 4d 75 6c 74 69 70 6c 65 78 69 6e 67 20 50 6f 77 65 72 20 53 61 76 | ..Spatial.Multiplexing.Power.Sav |
f4800 | 65 20 28 53 4d 50 53 29 20 73 65 74 74 69 6e 67 73 00 53 70 65 63 66 79 69 6e 67 20 6e 68 73 20 | e.(SMPS).settings.Specfying.nhs. |
f4820 | 6d 61 6b 65 73 20 61 6c 6c 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 20 74 6f 20 62 | makes.all.multicast.packets.to.b |
f4840 | 65 20 72 65 70 65 61 74 65 64 20 74 6f 20 65 61 63 68 20 73 74 61 74 69 63 61 6c 6c 79 20 63 6f | e.repeated.to.each.statically.co |
f4860 | 6e 66 69 67 75 72 65 64 20 6e 65 78 74 20 68 6f 70 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 | nfigured.next.hop..Specifies.:ab |
f4880 | 62 72 3a 60 4d 50 50 45 20 28 4d 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 | br:`MPPE.(Microsoft.Point-to-Poi |
f48a0 | 6e 74 20 45 6e 63 72 79 70 74 69 6f 6e 29 60 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 | nt.Encryption)`.negotiation.pref |
f48c0 | 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 3a 61 62 62 72 3a 60 4d 50 50 45 20 28 4d | erence..Specifies.:abbr:`MPPE.(M |
f48e0 | 69 63 72 6f 73 6f 66 74 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 6e 74 20 45 6e 63 72 79 70 74 69 | icrosoft.Point-to-Point.Encrypti |
f4900 | 6f 6e 29 60 20 6e 65 67 6f 74 69 6f 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 | on)`.negotioation.preference..Sp |
f4920 | 65 63 69 66 69 65 73 20 49 50 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 79 6e 61 6d 69 63 20 41 | ecifies.IP.address.for.Dynamic.A |
f4940 | 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 6e 73 69 6f 6e 20 73 65 72 76 65 72 20 28 44 | uthorization.Extension.server.(D |
f4960 | 4d 2f 43 6f 41 29 00 53 70 65 63 69 66 69 65 73 20 49 50 76 34 20 6e 65 67 6f 74 69 61 74 69 6f | M/CoA).Specifies.IPv4.negotiatio |
f4980 | 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 49 50 76 36 20 6e 65 67 | n.preference..Specifies.IPv6.neg |
f49a0 | 6f 74 69 61 74 69 6f 6e 20 70 72 65 66 65 72 65 6e 63 65 2e 00 53 70 65 63 69 66 69 65 73 20 53 | otiation.preference..Specifies.S |
f49c0 | 65 72 76 69 63 65 2d 4e 61 6d 65 20 74 6f 20 72 65 73 70 6f 6e 64 2e 20 49 66 20 61 62 73 65 6e | ervice-Name.to.respond..If.absen |
f49e0 | 74 20 61 6e 79 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 69 73 20 61 63 63 65 70 74 61 62 6c 65 | t.any.Service-Name.is.acceptable |
f4a00 | 20 61 6e 64 20 63 6c 69 65 6e 74 e2 80 99 73 20 53 65 72 76 69 63 65 2d 4e 61 6d 65 20 77 69 6c | .and.client...s.Service-Name.wil |
f4a20 | 6c 20 62 65 20 73 65 6e 74 20 62 61 63 6b 2e 20 41 6c 73 6f 20 70 6f 73 73 69 62 6c 65 20 73 65 | l.be.sent.back..Also.possible.se |
f4a40 | 74 20 6d 75 6c 74 69 70 6c 65 20 73 65 72 76 69 63 65 2d 6e 61 6d 65 73 3a 20 60 73 6e 31 2c 73 | t.multiple.service-names:.`sn1,s |
f4a60 | 6e 32 2c 73 6e 33 60 00 53 70 65 63 69 66 69 65 73 20 61 64 64 72 65 73 73 20 74 6f 20 62 65 20 | n2,sn3`.Specifies.address.to.be. |
f4a80 | 75 73 65 64 20 61 73 20 73 65 72 76 65 72 20 69 70 20 61 64 64 72 65 73 73 20 69 66 20 72 61 64 | used.as.server.ip.address.if.rad |
f4aa0 | 69 75 73 20 63 61 6e 20 61 73 73 69 67 6e 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 20 61 64 64 72 65 | ius.can.assign.only.client.addre |
f4ac0 | 73 73 2e 20 49 6e 20 73 75 63 68 20 63 61 73 65 20 69 66 20 63 6c 69 65 6e 74 20 61 64 64 72 65 | ss..In.such.case.if.client.addre |
f4ae0 | 73 73 20 69 73 20 6d 61 74 63 68 65 64 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 6d 61 73 6b 20 74 | ss.is.matched.network.and.mask.t |
f4b00 | 68 65 6e 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 61 6e 64 20 6d 61 73 6b 20 77 | hen.specified.address.and.mask.w |
f4b20 | 69 6c 6c 20 62 65 20 75 73 65 64 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 6d 75 6c | ill.be.used..You.can.specify.mul |
f4b40 | 74 69 70 6c 65 20 73 75 63 68 20 6f 70 74 69 6f 6e 73 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e | tiple.such.options..Specifies.an |
f4b60 | 20 6f 70 74 69 6f 6e 61 6c 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 62 65 20 61 70 70 6c 69 65 | .optional.route-map.to.be.applie |
f4b80 | 64 20 74 6f 20 72 6f 75 74 65 73 20 69 6d 70 6f 72 74 65 64 20 6f 72 20 65 78 70 6f 72 74 65 64 | d.to.routes.imported.or.exported |
f4ba0 | 20 62 65 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 | .between.the.current.unicast.VRF |
f4bc0 | 20 61 6e 64 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 20 61 6e 20 75 70 73 74 72 65 61 6d 20 | .and.VPN..Specifies.an.upstream. |
f4be0 | 6e 65 74 77 6f 72 6b 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 66 72 6f 6d 20 77 68 69 63 68 | network.`<interface>`.from.which |
f4c00 | 20 72 65 70 6c 69 65 73 20 66 72 6f 6d 20 60 3c 73 65 72 76 65 72 3e 60 20 61 6e 64 20 6f 74 68 | .replies.from.`<server>`.and.oth |
f4c20 | 65 72 20 72 65 6c 61 79 20 61 67 65 6e 74 73 20 77 69 6c 6c 20 62 65 20 61 63 63 65 70 74 65 64 | er.relay.agents.will.be.accepted |
f4c40 | 2e 00 53 70 65 63 69 66 69 65 73 20 66 69 78 65 64 20 6f 72 20 72 61 6e 64 6f 6d 20 69 6e 74 65 | ..Specifies.fixed.or.random.inte |
f4c60 | 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 2e 20 42 79 20 64 65 | rface.identifier.for.IPv6..By.de |
f4c80 | 66 61 75 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 68 6f 77 20 6c 6f | fault.is.fixed..Specifies.how.lo |
f4ca0 | 6e 67 20 73 71 75 69 64 20 61 73 73 75 6d 65 73 20 61 6e 20 65 78 74 65 72 6e 61 6c 6c 79 20 76 | ng.squid.assumes.an.externally.v |
f4cc0 | 61 6c 69 64 61 74 65 64 20 75 73 65 72 6e 61 6d 65 3a 70 61 73 73 77 6f 72 64 20 70 61 69 72 20 | alidated.username:password.pair. |
f4ce0 | 69 73 20 76 61 6c 69 64 20 66 6f 72 20 2d 20 69 6e 20 6f 74 68 65 72 20 77 6f 72 64 73 20 68 6f | is.valid.for.-.in.other.words.ho |
f4d00 | 77 20 6f 66 74 65 6e 20 74 68 65 20 68 65 6c 70 65 72 20 70 72 6f 67 72 61 6d 20 69 73 20 63 61 | w.often.the.helper.program.is.ca |
f4d20 | 6c 6c 65 64 20 66 6f 72 20 74 68 61 74 20 75 73 65 72 2e 20 53 65 74 20 74 68 69 73 20 6c 6f 77 | lled.for.that.user..Set.this.low |
f4d40 | 20 74 6f 20 66 6f 72 63 65 20 72 65 76 61 6c 69 64 61 74 69 6f 6e 20 77 69 74 68 20 73 68 6f 72 | .to.force.revalidation.with.shor |
f4d60 | 74 20 6c 69 76 65 64 20 70 61 73 73 77 6f 72 64 73 2e 00 53 70 65 63 69 66 69 65 73 20 69 66 20 | t.lived.passwords..Specifies.if. |
f4d80 | 75 6e 6b 6e 6f 77 6e 20 73 6f 75 72 63 65 20 6c 69 6e 6b 20 6c 61 79 65 72 20 61 64 64 72 65 73 | unknown.source.link.layer.addres |
f4da0 | 73 65 73 20 61 6e 64 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 65 6e 74 65 72 65 64 | ses.and.IP.addresses.are.entered |
f4dc0 | 20 69 6e 74 6f 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 66 6f 72 77 61 72 64 69 6e | .into.the.VXLAN.device.forwardin |
f4de0 | 67 20 64 61 74 61 62 61 73 65 2e 00 53 70 65 63 69 66 69 65 73 20 6e 75 6d 62 65 72 20 6f 66 20 | g.database..Specifies.number.of. |
f4e00 | 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 6b 65 65 70 20 69 6e 20 63 61 63 68 65 2e 20 49 74 20 | interfaces.to.keep.in.cache..It. |
f4e20 | 6d 65 61 6e 73 20 74 68 61 74 20 64 6f 6e e2 80 99 74 20 64 65 73 74 72 6f 79 20 69 6e 74 65 72 | means.that.don...t.destroy.inter |
f4e40 | 66 61 63 65 20 61 66 74 65 72 20 63 6f 72 72 65 73 70 6f 6e 64 69 6e 67 20 73 65 73 73 69 6f 6e | face.after.corresponding.session |
f4e60 | 20 69 73 20 64 65 73 74 72 6f 79 65 64 2c 20 69 6e 73 74 65 61 64 20 70 6c 61 63 65 20 69 74 20 | .is.destroyed,.instead.place.it. |
f4e80 | 74 6f 20 63 61 63 68 65 20 61 6e 64 20 75 73 65 20 69 74 20 6c 61 74 65 72 20 66 6f 72 20 6e 65 | to.cache.and.use.it.later.for.ne |
f4ea0 | 77 20 73 65 73 73 69 6f 6e 73 20 72 65 70 65 61 74 65 64 6c 79 2e 20 54 68 69 73 20 73 68 6f 75 | w.sessions.repeatedly..This.shou |
f4ec0 | 6c 64 20 72 65 64 75 63 65 20 6b 65 72 6e 65 6c 2d 6c 65 76 65 6c 20 69 6e 74 65 72 66 61 63 65 | ld.reduce.kernel-level.interface |
f4ee0 | 20 63 72 65 61 74 69 6f 6e 2f 64 65 6c 65 74 69 6f 6e 20 72 61 74 65 20 6c 61 63 6b 2e 20 44 65 | .creation/deletion.rate.lack..De |
f4f00 | 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 20 | fault.value.is.**0**..Specifies. |
f4f20 | 6f 6e 65 20 6f 66 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 54 68 65 | one.of.the.bonding.policies..The |
f4f40 | 20 64 65 66 61 75 6c 74 20 69 73 20 38 30 32 2e 33 61 64 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 | .default.is.802.3ad..Possible.va |
f4f60 | 6c 75 65 73 20 61 72 65 3a 00 53 70 65 63 69 66 69 65 73 20 70 65 65 72 20 69 6e 74 65 72 66 61 | lues.are:.Specifies.peer.interfa |
f4f80 | 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 66 6f 72 20 49 50 76 36 2e 20 42 79 20 64 65 66 61 75 | ce.identifier.for.IPv6..By.defau |
f4fa0 | 6c 74 20 69 73 20 66 69 78 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 70 72 6f 78 79 20 73 65 72 | lt.is.fixed..Specifies.proxy.ser |
f4fc0 | 76 69 63 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 6c 69 73 74 | vice.listening.address..The.list |
f4fe0 | 65 6e 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 6e 20 | en.address.is.the.IP.address.on. |
f5000 | 77 68 69 63 68 20 74 68 65 20 77 65 62 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 6c 69 73 74 | which.the.web.proxy.service.list |
f5020 | 65 6e 73 20 66 6f 72 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 73 2e 00 53 70 65 63 69 66 69 | ens.for.client.requests..Specifi |
f5040 | 65 73 20 72 65 6c 61 79 20 61 67 65 6e 74 20 49 50 20 61 64 64 72 65 00 53 70 65 63 69 66 69 65 | es.relay.agent.IP.addre.Specifie |
f5060 | 73 20 73 69 6e 67 6c 65 20 60 3c 67 61 74 65 77 61 79 3e 60 20 49 50 20 61 64 64 72 65 73 73 20 | s.single.`<gateway>`.IP.address. |
f5080 | 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 20 6f 66 20 50 | to.be.used.as.local.address.of.P |
f50a0 | 50 50 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 | PP.interfaces..Specifies.that.th |
f50c0 | 65 20 3a 61 62 62 72 3a 60 4e 42 4d 41 20 28 4e 6f 6e 2d 62 72 6f 61 64 63 61 73 74 20 6d 75 6c | e.:abbr:`NBMA.(Non-broadcast.mul |
f50e0 | 74 69 70 6c 65 2d 61 63 63 65 73 73 20 6e 65 74 77 6f 72 6b 29 60 20 61 64 64 72 65 73 73 65 73 | tiple-access.network)`.addresses |
f5100 | 20 6f 66 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 73 65 72 76 65 72 73 20 61 72 65 20 64 65 66 | .of.the.next.hop.servers.are.def |
f5120 | 69 6e 65 64 20 69 6e 20 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 6e 62 6d 61 2d 64 6f 6d | ined.in.the.domain.name.nbma-dom |
f5140 | 61 69 6e 2d 6e 61 6d 65 2e 20 46 6f 72 20 65 61 63 68 20 41 20 72 65 63 6f 72 64 20 6f 70 65 6e | ain-name..For.each.A.record.open |
f5160 | 6e 68 72 70 20 63 72 65 61 74 65 73 20 61 20 64 79 6e 61 6d 69 63 20 4e 48 53 20 65 6e 74 72 79 | nhrp.creates.a.dynamic.NHS.entry |
f5180 | 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 41 52 50 20 6c 69 6e 6b 20 6d 6f 6e 69 74 6f 72 | ..Specifies.the.ARP.link.monitor |
f51a0 | 69 6e 67 20 60 3c 74 69 6d 65 3e 60 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 69 | ing.`<time>`.in.seconds..Specifi |
f51c0 | 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 75 73 65 20 61 73 20 41 52 | es.the.IP.addresses.to.use.as.AR |
f51e0 | 50 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 70 65 65 72 73 20 77 68 65 6e 20 3a 63 66 67 63 6d 64 3a | P.monitoring.peers.when.:cfgcmd: |
f5200 | 60 61 72 70 2d 6d 6f 6e 69 74 6f 72 20 69 6e 74 65 72 76 61 6c 60 20 6f 70 74 69 6f 6e 20 69 73 | `arp-monitor.interval`.option.is |
f5220 | 20 3e 20 30 2e 20 54 68 65 73 65 20 61 72 65 20 74 68 65 20 74 61 72 67 65 74 73 20 6f 66 20 74 | .>.0..These.are.the.targets.of.t |
f5240 | 68 65 20 41 52 50 20 72 65 71 75 65 73 74 20 73 65 6e 74 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 | he.ARP.request.sent.to.determine |
f5260 | 20 74 68 65 20 68 65 61 6c 74 68 20 6f 66 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 74 68 65 20 74 | .the.health.of.the.link.to.the.t |
f5280 | 61 72 67 65 74 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 | argets..Specifies.the.available. |
f52a0 | 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 73 73 61 67 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 | :abbr:`MAC.(Message.Authenticati |
f52c0 | 6f 6e 20 43 6f 64 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 20 54 68 65 20 4d 41 43 20 61 6c | on.Code)`.algorithms..The.MAC.al |
f52e0 | 67 6f 72 69 74 68 6d 20 69 73 20 75 73 65 64 20 69 6e 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 | gorithm.is.used.in.protocol.vers |
f5300 | 69 6f 6e 20 32 20 66 6f 72 20 64 61 74 61 20 69 6e 74 65 67 72 69 74 79 20 70 72 6f 74 65 63 74 | ion.2.for.data.integrity.protect |
f5320 | 69 6f 6e 2e 20 4d 75 6c 74 69 70 6c 65 20 61 6c 67 6f 72 69 74 68 6d 73 20 63 61 6e 20 62 65 20 | ion..Multiple.algorithms.can.be. |
f5340 | 70 72 6f 76 69 64 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 62 61 73 65 20 44 4e 20 | provided..Specifies.the.base.DN. |
f5360 | 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 75 73 65 72 73 20 61 72 65 20 6c 6f 63 61 74 65 | under.which.the.users.are.locate |
f5380 | 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 63 6c 69 65 6e 74 73 20 73 75 62 6e 65 74 20 | d..Specifies.the.clients.subnet. |
f53a0 | 6d 61 73 6b 20 61 73 20 70 65 72 20 52 46 43 20 39 35 30 2e 20 49 66 20 75 6e 73 65 74 2c 20 73 | mask.as.per.RFC.950..If.unset,.s |
f53c0 | 75 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 2e 00 53 70 65 63 69 | ubnet.declaration.is.used..Speci |
f53e0 | 66 69 65 73 20 74 68 65 20 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 66 6f 72 20 4e 48 52 50 20 52 | fies.the.holding.time.for.NHRP.R |
f5400 | 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 73 74 73 20 61 6e 64 20 52 65 73 6f 6c 75 74 | egistration.Requests.and.Resolut |
f5420 | 69 6f 6e 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 66 72 6f 6d 20 74 68 69 73 20 69 6e 74 65 72 | ion.Replies.sent.from.this.inter |
f5440 | 66 61 63 65 20 6f 72 20 73 68 6f 72 74 63 75 74 2d 74 61 72 67 65 74 2e 20 54 68 65 20 68 6f 6c | face.or.shortcut-target..The.hol |
f5460 | 64 74 69 6d 65 20 69 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 73 20 61 6e | dtime.is.specified.in.seconds.an |
f5480 | 64 20 64 65 66 61 75 6c 74 73 20 74 6f 20 74 77 6f 20 68 6f 75 72 73 2e 00 53 70 65 63 69 66 69 | d.defaults.to.two.hours..Specifi |
f54a0 | 65 73 20 74 68 65 20 69 6e 74 65 72 76 61 6c 20 61 74 20 77 68 69 63 68 20 4e 65 74 66 6c 6f 77 | es.the.interval.at.which.Netflow |
f54c0 | 20 64 61 74 61 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 6f | .data.will.be.sent.to.a.collecto |
f54e0 | 72 2e 20 41 73 20 70 65 72 20 64 65 66 61 75 6c 74 2c 20 4e 65 74 66 6c 6f 77 20 64 61 74 61 20 | r..As.per.default,.Netflow.data. |
f5500 | 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 65 76 65 72 79 20 36 30 20 73 65 63 6f 6e 64 73 2e 00 53 | will.be.sent.every.60.seconds..S |
f5520 | 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 61 20 72 | pecifies.the.maximum.size.of.a.r |
f5540 | 65 70 6c 79 20 62 6f 64 79 20 69 6e 20 4b 42 2c 20 75 73 65 64 20 74 6f 20 6c 69 6d 69 74 20 74 | eply.body.in.KB,.used.to.limit.t |
f5560 | 68 65 20 72 65 70 6c 79 20 73 69 7a 65 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e | he.reply.size..Specifies.the.min |
f5580 | 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 69 6e 6b 73 20 74 68 61 74 20 6d 75 73 74 20 62 | imum.number.of.links.that.must.b |
f55a0 | 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 61 73 73 65 72 74 69 6e 67 20 63 61 72 72 69 65 | e.active.before.asserting.carrie |
f55c0 | 72 2e 20 49 74 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 43 69 73 63 6f 20 45 74 | r..It.is.similar.to.the.Cisco.Et |
f55e0 | 68 65 72 43 68 61 6e 6e 65 6c 20 6d 69 6e 2d 6c 69 6e 6b 73 20 66 65 61 74 75 72 65 2e 20 54 68 | herChannel.min-links.feature..Th |
f5600 | 69 73 20 61 6c 6c 6f 77 73 20 73 65 74 74 69 6e 67 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 6e 75 | is.allows.setting.the.minimum.nu |
f5620 | 6d 62 65 72 20 6f 66 20 6d 65 6d 62 65 72 20 70 6f 72 74 73 20 74 68 61 74 20 6d 75 73 74 20 62 | mber.of.member.ports.that.must.b |
f5640 | 65 20 75 70 20 28 6c 69 6e 6b 2d 75 70 20 73 74 61 74 65 29 20 62 65 66 6f 72 65 20 6d 61 72 6b | e.up.(link-up.state).before.mark |
f5660 | 69 6e 67 20 74 68 65 20 62 6f 6e 64 20 64 65 76 69 63 65 20 61 73 20 75 70 20 28 63 61 72 72 69 | ing.the.bond.device.as.up.(carri |
f5680 | 65 72 20 6f 6e 29 2e 20 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 73 69 74 75 61 | er.on)..This.is.useful.for.situa |
f56a0 | 74 69 6f 6e 73 20 77 68 65 72 65 20 68 69 67 68 65 72 20 6c 65 76 65 6c 20 73 65 72 76 69 63 65 | tions.where.higher.level.service |
f56c0 | 73 20 73 75 63 68 20 61 73 20 63 6c 75 73 74 65 72 69 6e 67 20 77 61 6e 74 20 74 6f 20 65 6e 73 | s.such.as.clustering.want.to.ens |
f56e0 | 75 72 65 20 61 20 6d 69 6e 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6c 6f 77 20 62 61 6e 64 | ure.a.minimum.number.of.low.band |
f5700 | 77 69 64 74 68 20 6c 69 6e 6b 73 20 61 72 65 20 61 63 74 69 76 65 20 62 65 66 6f 72 65 20 73 77 | width.links.are.active.before.sw |
f5720 | 69 74 63 68 6f 76 65 72 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 | itchover..Specifies.the.name.of. |
f5740 | 74 68 65 20 44 4e 20 61 74 74 72 69 62 75 74 65 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 74 | the.DN.attribute.that.contains.t |
f5760 | 68 65 20 75 73 65 72 6e 61 6d 65 2f 6c 6f 67 69 6e 2e 20 43 6f 6d 62 69 6e 65 64 20 77 69 74 68 | he.username/login..Combined.with |
f5780 | 20 74 68 65 20 62 61 73 65 20 44 4e 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 74 68 65 20 75 73 | .the.base.DN.to.construct.the.us |
f57a0 | 65 72 73 20 44 4e 20 77 68 65 6e 20 6e 6f 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 69 73 20 | ers.DN.when.no.search.filter.is. |
f57c0 | 73 70 65 63 69 66 69 65 64 20 28 60 66 69 6c 74 65 72 2d 65 78 70 72 65 73 73 69 6f 6e 60 29 2e | specified.(`filter-expression`). |
f57e0 | 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 68 79 73 69 63 61 6c 20 60 3c 65 74 68 58 3e 60 | .Specifies.the.physical.`<ethX>` |
f5800 | 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 | .Ethernet.interface.associated.w |
f5820 | 69 74 68 20 61 20 50 73 65 75 64 6f 20 45 74 68 65 72 6e 65 74 20 60 3c 69 6e 74 65 72 66 61 63 | ith.a.Pseudo.Ethernet.`<interfac |
f5840 | 65 3e 60 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 70 6f 72 74 20 60 3c 70 6f 72 74 3e 60 | e>`..Specifies.the.port.`<port>` |
f5860 | 20 74 68 61 74 20 74 68 65 20 53 53 54 50 20 70 6f 72 74 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 | .that.the.SSTP.port.will.listen. |
f5880 | 6f 6e 20 28 64 65 66 61 75 6c 74 20 34 34 33 29 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 | on.(default.443)..Specifies.the. |
f58a0 | 70 72 6f 74 65 63 74 69 6f 6e 20 73 63 6f 70 65 20 28 61 6b 61 20 72 65 61 6c 6d 20 6e 61 6d 65 | protection.scope.(aka.realm.name |
f58c0 | 29 20 77 68 69 63 68 20 69 73 20 74 6f 20 62 65 20 72 65 70 6f 72 74 65 64 20 74 6f 20 74 68 65 | ).which.is.to.be.reported.to.the |
f58e0 | 20 63 6c 69 65 6e 74 20 66 6f 72 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 | .client.for.the.authentication.s |
f5900 | 63 68 65 6d 65 2e 20 49 74 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 70 61 72 74 20 6f 66 20 74 68 | cheme..It.is.commonly.part.of.th |
f5920 | 65 20 74 65 78 74 20 74 68 65 20 75 73 65 72 20 77 69 6c 6c 20 73 65 65 20 77 68 65 6e 20 70 72 | e.text.the.user.will.see.when.pr |
f5940 | 6f 6d 70 74 65 64 20 66 6f 72 20 74 68 65 69 72 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 61 | ompted.for.their.username.and.pa |
f5960 | 73 73 77 6f 72 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 74 65 20 64 69 73 74 | ssword..Specifies.the.route.dist |
f5980 | 69 6e 67 75 69 73 68 65 72 20 74 6f 20 62 65 20 61 64 64 65 64 20 74 6f 20 61 20 72 6f 75 74 65 | inguisher.to.be.added.to.a.route |
f59a0 | 20 65 78 70 6f 72 74 65 64 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 | .exported.from.the.current.unica |
f59c0 | 73 74 20 56 52 46 20 74 6f 20 56 50 4e 2e 00 53 70 65 63 69 66 69 65 73 20 74 68 65 20 72 6f 75 | st.VRF.to.VPN..Specifies.the.rou |
f59e0 | 74 65 2d 74 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 62 65 20 61 74 74 61 63 68 65 64 20 74 6f | te-target.list.to.be.attached.to |
f5a00 | 20 61 20 72 6f 75 74 65 20 28 65 78 70 6f 72 74 29 20 6f 72 20 74 68 65 20 72 6f 75 74 65 2d 74 | .a.route.(export).or.the.route-t |
f5a20 | 61 72 67 65 74 20 6c 69 73 74 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 28 69 6d 70 | arget.list.to.match.against.(imp |
f5a40 | 6f 72 74 29 20 77 68 65 6e 20 65 78 70 6f 72 74 69 6e 67 2f 69 6d 70 6f 72 74 69 6e 67 20 62 65 | ort).when.exporting/importing.be |
f5a60 | 74 77 65 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 75 6e 69 63 61 73 74 20 56 52 46 20 61 6e | tween.the.current.unicast.VRF.an |
f5a80 | 64 20 56 50 4e 2e 54 68 65 20 52 54 4c 49 53 54 20 69 73 20 61 20 73 70 61 63 65 2d 73 65 70 61 | d.VPN.The.RTLIST.is.a.space-sepa |
f5aa0 | 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 72 6f 75 74 65 2d 74 61 72 67 65 74 73 2c 20 77 68 69 | rated.list.of.route-targets,.whi |
f5ac0 | 63 68 20 61 72 65 20 42 47 50 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e 69 74 79 20 76 61 | ch.are.BGP.extended.community.va |
f5ae0 | 6c 75 65 73 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 45 78 74 65 6e 64 65 64 20 43 6f | lues.as.described.in.Extended.Co |
f5b00 | 6d 6d 75 6e 69 74 69 65 73 20 41 74 74 72 69 62 75 74 65 2e 00 53 70 65 63 69 66 69 65 73 20 74 | mmunities.Attribute..Specifies.t |
f5b20 | 68 65 20 76 65 6e 64 6f 72 20 64 69 63 74 69 6f 6e 61 72 79 2c 20 64 69 63 74 69 6f 6e 61 72 79 | he.vendor.dictionary,.dictionary |
f5b40 | 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 6e 20 2f 75 73 72 2f 73 68 61 72 65 2f 61 63 63 65 6c | .needs.to.be.in./usr/share/accel |
f5b60 | 2d 70 70 70 2f 72 61 64 69 75 73 2e 00 53 70 65 63 69 66 69 65 73 20 74 69 6d 65 6f 75 74 20 69 | -ppp/radius..Specifies.timeout.i |
f5b80 | 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 79 20 70 65 65 72 20 61 | n.seconds.to.wait.for.any.peer.a |
f5ba0 | 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 65 | ctivity..If.this.option.specifie |
f5bc0 | 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 69 76 65 20 6c 63 70 20 65 63 68 6f 20 | d.it.turns.on.adaptive.lcp.echo. |
f5be0 | 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f 2d 66 61 69 6c | functionality.and."lcp-echo-fail |
f5c00 | 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 74 69 6d 65 | ure".is.not.used..Specifies.time |
f5c20 | 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 6e 79 20 70 | out.in.seconds.to.wait.for.any.p |
f5c40 | 65 65 72 20 61 63 74 69 76 69 74 79 2e 20 49 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 | eer.activity..If.this.option.spe |
f5c60 | 63 69 66 69 65 64 20 69 74 20 74 75 72 6e 73 20 6f 6e 20 61 64 61 70 74 69 76 65 20 6c 63 70 20 | cified.it.turns.on.adaptive.lcp. |
f5c80 | 65 63 68 6f 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 22 6c 63 70 2d 65 63 68 6f | echo.functionality.and."lcp-echo |
f5ca0 | 2d 66 61 69 6c 75 72 65 22 20 69 73 20 6e 6f 74 20 75 73 65 64 2e 20 44 65 66 61 75 6c 74 20 76 | -failure".is.not.used..Default.v |
f5cc0 | 61 6c 75 65 20 69 73 20 2a 2a 30 2a 2a 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 | alue.is.**0**..Specifies.whether |
f5ce0 | 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 20 28 65 2e 67 2e | .an.external.control.plane.(e.g. |
f5d00 | 20 42 47 50 20 4c 32 56 50 4e 2f 45 56 50 4e 29 20 6f 72 20 74 68 65 20 69 6e 74 65 72 6e 61 6c | .BGP.L2VPN/EVPN).or.the.internal |
f5d20 | 20 46 44 42 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 2e 00 53 70 65 63 69 66 69 65 73 20 77 | .FDB.should.be.used..Specifies.w |
f5d40 | 68 65 74 68 65 72 20 74 68 65 20 56 58 4c 41 4e 20 64 65 76 69 63 65 20 69 73 20 63 61 70 61 62 | hether.the.VXLAN.device.is.capab |
f5d60 | 6c 65 20 6f 66 20 76 6e 69 20 66 69 6c 74 65 72 69 6e 67 2e 00 53 70 65 63 69 66 69 65 73 20 77 | le.of.vni.filtering..Specifies.w |
f5d80 | 68 65 74 68 65 72 20 74 68 69 73 20 4e 53 53 41 20 62 6f 72 64 65 72 20 72 6f 75 74 65 72 20 77 | hether.this.NSSA.border.router.w |
f5da0 | 69 6c 6c 20 75 6e 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 20 74 72 61 6e 73 6c 61 74 65 20 54 79 | ill.unconditionally.translate.Ty |
f5dc0 | 70 65 2d 37 20 4c 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 2e 20 57 68 65 6e | pe-7.LSAs.into.Type-5.LSAs..When |
f5de0 | 20 72 6f 6c 65 20 69 73 20 41 6c 77 61 79 73 2c 20 54 79 70 65 2d 37 20 4c 53 41 73 20 61 72 65 | .role.is.Always,.Type-7.LSAs.are |
f5e00 | 20 74 72 61 6e 73 6c 61 74 65 64 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 20 72 65 67 | .translated.into.Type-5.LSAs.reg |
f5e20 | 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 20 73 74 61 74 65 20 | ardless.of.the.translator.state. |
f5e40 | 6f 66 20 6f 74 68 65 72 20 4e 53 53 41 20 62 6f 72 64 65 72 20 72 6f 75 74 65 72 73 2e 20 57 68 | of.other.NSSA.border.routers..Wh |
f5e60 | 65 6e 20 72 6f 6c 65 20 69 73 20 43 61 6e 64 69 64 61 74 65 2c 20 74 68 69 73 20 72 6f 75 74 65 | en.role.is.Candidate,.this.route |
f5e80 | 72 20 70 61 72 74 69 63 69 70 61 74 65 73 20 69 6e 20 74 68 65 20 74 72 61 6e 73 6c 61 74 6f 72 | r.participates.in.the.translator |
f5ea0 | 20 65 6c 65 63 74 69 6f 6e 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 69 66 20 69 74 20 77 69 6c | .election.to.determine.if.it.wil |
f5ec0 | 6c 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 64 75 74 69 65 | l.perform.the.translations.dutie |
f5ee0 | 73 2e 20 57 68 65 6e 20 72 6f 6c 65 20 69 73 20 4e 65 76 65 72 2c 20 74 68 69 73 20 72 6f 75 74 | s..When.role.is.Never,.this.rout |
f5f00 | 65 72 20 77 69 6c 6c 20 6e 65 76 65 72 20 74 72 61 6e 73 6c 61 74 65 20 54 79 70 65 2d 37 20 4c | er.will.never.translate.Type-7.L |
f5f20 | 53 41 73 20 69 6e 74 6f 20 54 79 70 65 2d 35 20 4c 53 41 73 2e 00 53 70 65 63 69 66 69 65 73 20 | SAs.into.Type-5.LSAs..Specifies. |
f5f40 | 77 68 69 63 68 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f | which.RADIUS.server.attribute.co |
f5f60 | 6e 74 61 69 6e 73 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f | ntains.the.rate.limit.informatio |
f5f80 | 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 46 69 6c | n..The.default.attribute.is.`Fil |
f5fa0 | 74 65 72 2d 49 64 60 2e 00 53 70 65 63 69 66 69 65 73 20 77 68 69 63 68 20 52 41 44 49 55 53 20 | ter-Id`..Specifies.which.RADIUS. |
f5fc0 | 73 65 72 76 65 72 20 61 74 74 72 69 62 75 74 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 72 61 | server.attribute.contains.the.ra |
f5fe0 | 74 65 20 6c 69 6d 69 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c | te.limit.information..The.defaul |
f6000 | 74 20 61 74 74 72 69 62 75 74 65 20 69 73 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 2e 00 53 70 | t.attribute.is.``Filter-Id``..Sp |
f6020 | 65 63 69 66 79 20 44 48 43 50 76 34 20 72 65 6c 61 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f | ecify.DHCPv4.relay.IP.address.to |
f6040 | 20 70 61 73 73 20 72 65 71 75 65 73 74 73 20 74 6f 2e 20 49 66 20 73 70 65 63 69 66 69 65 64 20 | .pass.requests.to..If.specified. |
f6060 | 67 69 61 64 64 72 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 53 70 65 63 69 66 79 20 49 | giaddr.is.also.needed..Specify.I |
f6080 | 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 74 68 61 74 20 73 68 | Pv4.and/or.IPv6.networks.that.sh |
f60a0 | 6f 75 6c 64 20 62 65 20 70 72 6f 74 65 63 74 65 64 2f 6d 6f 6e 69 74 6f 72 65 64 2e 00 53 70 65 | ould.be.protected/monitored..Spe |
f60c0 | 63 69 66 79 20 49 50 76 34 20 61 6e 64 2f 6f 72 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 20 77 | cify.IPv4.and/or.IPv6.networks.w |
f60e0 | 68 69 63 68 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 65 78 63 6c 75 64 65 64 2e 00 53 | hich.are.going.to.be.excluded..S |
f6100 | 70 65 63 69 66 79 20 49 50 76 34 2f 49 50 76 36 20 6c 69 73 74 65 6e 20 61 64 64 72 65 73 73 20 | pecify.IPv4/IPv6.listen.address. |
f6120 | 6f 66 20 53 53 48 20 73 65 72 76 65 72 2e 20 4d 75 6c 74 69 70 6c 65 20 61 64 64 72 65 73 73 65 | of.SSH.server..Multiple.addresse |
f6140 | 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 53 70 65 63 69 66 79 20 61 20 3a 61 62 62 | s.can.be.defined..Specify.a.:abb |
f6160 | 72 3a 60 53 49 50 20 28 53 65 73 73 69 6f 6e 20 49 6e 69 74 69 61 74 69 6f 6e 20 50 72 6f 74 6f | r:`SIP.(Session.Initiation.Proto |
f6180 | 63 6f 6c 29 60 20 73 65 72 76 65 72 20 62 79 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 | col)`.server.by.IPv6.address.of. |
f61a0 | 46 75 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 20 66 6f 72 20 | Fully.Qualified.Domain.Name.for. |
f61c0 | 61 6c 6c 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 46 75 | all.DHCPv6.clients..Specify.a.Fu |
f61e0 | 6c 6c 79 20 51 75 61 6c 69 66 69 65 64 20 44 6f 6d 61 69 6e 20 4e 61 6d 65 20 61 73 20 73 6f 75 | lly.Qualified.Domain.Name.as.sou |
f6200 | 72 63 65 2f 64 65 73 74 69 6e 61 74 69 6f 6e 20 6d 61 74 63 68 65 72 2e 20 45 6e 73 75 72 65 20 | rce/destination.matcher..Ensure. |
f6220 | 72 6f 75 74 65 72 20 69 73 20 61 62 6c 65 20 74 6f 20 72 65 73 6f 6c 76 65 20 73 75 63 68 20 64 | router.is.able.to.resolve.such.d |
f6240 | 6e 73 20 71 75 65 72 79 2e 00 53 70 65 63 69 66 79 20 61 20 4e 49 53 20 73 65 72 76 65 72 20 61 | ns.query..Specify.a.NIS.server.a |
f6260 | 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 | ddress.for.DHCPv6.clients..Speci |
f6280 | 66 79 20 61 20 4e 49 53 2b 20 73 65 72 76 65 72 20 61 64 64 72 65 73 73 20 66 6f 72 20 44 48 43 | fy.a.NIS+.server.address.for.DHC |
f62a0 | 50 76 36 20 63 6c 69 65 6e 74 73 2e 00 53 70 65 63 69 66 79 20 61 20 72 61 6e 67 65 20 6f 66 20 | Pv6.clients..Specify.a.range.of. |
f62c0 | 67 72 6f 75 70 20 61 64 64 72 65 73 73 65 73 20 76 69 61 20 61 20 70 72 65 66 69 78 2d 6c 69 73 | group.addresses.via.a.prefix-lis |
f62e0 | 74 20 74 68 61 74 20 66 6f 72 63 65 73 20 50 49 4d 20 74 6f 20 6e 65 76 65 72 20 64 6f 20 3a 61 | t.that.forces.PIM.to.never.do.:a |
f6300 | 62 62 72 3a 60 53 53 4d 20 28 53 6f 75 72 63 65 2d 53 70 65 63 69 66 69 63 20 4d 75 6c 74 69 63 | bbr:`SSM.(Source-Specific.Multic |
f6320 | 61 73 74 29 60 20 6f 76 65 72 2e 00 53 70 65 63 69 66 79 20 61 62 73 6f 6c 75 74 65 20 60 3c 70 | ast)`.over..Specify.absolute.`<p |
f6340 | 61 74 68 3e 60 20 74 6f 20 73 63 72 69 70 74 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 72 75 | ath>`.to.script.which.will.be.ru |
f6360 | 6e 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 69 73 20 65 78 65 63 75 74 65 64 2e 00 53 70 65 | n.when.`<task>`.is.executed..Spe |
f6380 | 63 69 66 79 20 61 6c 6c 6f 77 65 64 20 3a 61 62 62 72 3a 60 4b 45 58 20 28 4b 65 79 20 45 78 63 | cify.allowed.:abbr:`KEX.(Key.Exc |
f63a0 | 68 61 6e 67 65 29 60 20 61 6c 67 6f 72 69 74 68 6d 73 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 | hange)`.algorithms..Specify.an.a |
f63c0 | 6c 74 65 72 6e 61 74 65 20 41 53 20 66 6f 72 20 74 68 69 73 20 42 47 50 20 70 72 6f 63 65 73 73 | lternate.AS.for.this.BGP.process |
f63e0 | 20 77 68 65 6e 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 74 68 65 20 73 70 65 63 69 | .when.interacting.with.the.speci |
f6400 | 66 69 65 64 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 20 57 69 74 68 20 6e 6f | fied.peer.or.peer.group..With.no |
f6420 | 20 6d 6f 64 69 66 69 65 72 73 2c 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 2d | .modifiers,.the.specified.local- |
f6440 | 61 73 20 69 73 20 70 72 65 70 65 6e 64 65 64 20 74 6f 20 74 68 65 20 72 65 63 65 69 76 65 64 20 | as.is.prepended.to.the.received. |
f6460 | 41 53 5f 50 41 54 48 20 77 68 65 6e 20 72 65 63 65 69 76 69 6e 67 20 72 6f 75 74 69 6e 67 20 75 | AS_PATH.when.receiving.routing.u |
f6480 | 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 2c 20 61 6e 64 20 70 72 65 70 65 6e | pdates.from.the.peer,.and.prepen |
f64a0 | 64 65 64 20 74 6f 20 74 68 65 20 6f 75 74 67 6f 69 6e 67 20 41 53 5f 50 41 54 48 20 28 61 66 74 | ded.to.the.outgoing.AS_PATH.(aft |
f64c0 | 65 72 20 74 68 65 20 70 72 6f 63 65 73 73 20 6c 6f 63 61 6c 20 41 53 29 20 77 68 65 6e 20 74 72 | er.the.process.local.AS).when.tr |
f64e0 | 61 6e 73 6d 69 74 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 73 20 74 6f 20 74 68 65 20 70 | ansmitting.local.routes.to.the.p |
f6500 | 65 65 72 2e 00 53 70 65 63 69 66 79 20 61 6e 20 61 6c 74 65 72 6e 61 74 65 20 54 43 50 20 70 6f | eer..Specify.an.alternate.TCP.po |
f6520 | 72 74 20 77 68 65 72 65 20 74 68 65 20 6c 64 61 70 20 73 65 72 76 65 72 20 69 73 20 6c 69 73 74 | rt.where.the.ldap.server.is.list |
f6540 | 65 6e 69 6e 67 20 69 66 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 64 65 66 61 75 6c 74 20 | ening.if.other.than.the.default. |
f6560 | 4c 44 41 50 20 70 6f 72 74 20 33 38 39 2e 00 53 70 65 63 69 66 79 20 69 6e 74 65 72 76 61 6c 20 | LDAP.port.389..Specify.interval. |
f6580 | 69 6e 20 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 62 65 74 77 65 65 6e 20 44 79 6e 61 6d | in.seconds.to.wait.between.Dynam |
f65a0 | 69 63 20 44 4e 53 20 75 70 64 61 74 65 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 20 | ic.DNS.updates..The.default.is.. |
f65c0 | 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 79 20 6c 6f 63 61 6c 20 72 61 6e 67 65 | 300.seconds..Specify.local.range |
f65e0 | 20 6f 66 20 69 70 20 61 64 64 72 65 73 73 20 74 6f 20 67 69 76 65 20 74 6f 20 64 68 63 70 20 63 | .of.ip.address.to.give.to.dhcp.c |
f6600 | 6c 69 65 6e 74 73 2e 20 46 69 72 73 74 20 49 50 20 69 6e 20 72 61 6e 67 65 20 69 73 20 72 6f 75 | lients..First.IP.in.range.is.rou |
f6620 | 74 65 72 20 49 50 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 6d 6f 72 65 20 63 75 73 74 6f 6d 69 | ter.IP..If.you.need.more.customi |
f6640 | 7a 61 74 69 6f 6e 20 75 73 65 20 60 63 6c 69 65 6e 74 2d 69 70 2d 70 6f 6f 6c 60 00 53 70 65 63 | zation.use.`client-ip-pool`.Spec |
f6660 | 69 66 79 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 3a 61 62 62 72 3a 60 56 52 46 20 28 56 69 72 74 | ify.name.of.the.:abbr:`VRF.(Virt |
f6680 | 75 61 6c 20 52 6f 75 74 69 6e 67 20 61 6e 64 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 69 6e 73 | ual.Routing.and.Forwarding)`.ins |
f66a0 | 74 61 6e 63 65 2e 00 53 70 65 63 69 66 79 20 6e 65 78 74 68 6f 70 20 6f 6e 20 74 68 65 20 70 61 | tance..Specify.nexthop.on.the.pa |
f66c0 | 74 68 20 74 6f 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 60 60 69 70 76 34 2d 61 64 | th.to.the.destination,.``ipv4-ad |
f66e0 | 64 72 65 73 73 60 60 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 60 60 64 68 63 70 60 60 00 53 | dress``.can.be.set.to.``dhcp``.S |
f6700 | 70 65 63 69 66 79 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 20 72 6f 75 | pecify.static.route.into.the.rou |
f6720 | 74 69 6e 67 20 74 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 61 6c 6c 20 6e 6f 6e 20 6c 6f 63 61 6c | ting.table.sending.all.non.local |
f6740 | 20 74 72 61 66 66 69 63 20 74 6f 20 74 68 65 20 6e 65 78 74 68 6f 70 20 61 64 64 72 65 73 73 20 | .traffic.to.the.nexthop.address. |
f6760 | 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 20 60 3c 61 64 | `<address>`..Specify.the.IP.`<ad |
f6780 | 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 75 73 65 | dress>`.of.the.RADIUS.server.use |
f67a0 | 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 67 69 76 | r.with.the.pre-shared-secret.giv |
f67c0 | 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 49 50 | en.in.`<secret>`..Specify.the.IP |
f67e0 | 20 60 3c 61 64 64 72 65 73 73 3e 60 20 6f 66 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 | .`<address>`.of.the.TACACS.serve |
f6800 | 72 20 75 73 65 72 20 77 69 74 68 20 74 68 65 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 | r.user.with.the.pre-shared-secre |
f6820 | 74 20 67 69 76 65 6e 20 69 6e 20 60 3c 73 65 63 72 65 74 3e 60 2e 00 53 70 65 63 69 66 79 20 74 | t.given.in.`<secret>`..Specify.t |
f6840 | 68 65 20 49 50 76 34 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 74 6f 20 75 73 65 20 66 6f | he.IPv4.source.address.to.use.fo |
f6860 | 72 20 74 68 65 20 42 47 50 20 73 65 73 73 69 6f 6e 20 74 6f 20 74 68 69 73 20 6e 65 69 67 68 62 | r.the.BGP.session.to.this.neighb |
f6880 | 6f 72 2c 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 65 69 74 68 65 72 20 61 | or,.may.be.specified.as.either.a |
f68a0 | 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 64 69 72 65 63 74 6c 79 20 6f 72 20 61 73 20 61 6e | n.IPv4.address.directly.or.as.an |
f68c0 | 20 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 4c 44 41 | .interface.name..Specify.the.LDA |
f68e0 | 50 20 73 65 72 76 65 72 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 2e 00 53 70 65 63 69 66 79 20 | P.server.to.connect.to..Specify. |
f6900 | 74 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 73 69 74 65 | the.identifier.value.of.the.site |
f6920 | 2d 6c 65 76 65 6c 20 61 67 67 72 65 67 61 74 6f 72 20 28 53 4c 41 29 20 6f 6e 20 74 68 65 20 69 | -level.aggregator.(SLA).on.the.i |
f6940 | 6e 74 65 72 66 61 63 65 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 6e | nterface..ID.must.be.a.decimal.n |
f6960 | 75 6d 62 65 72 20 67 72 65 61 74 65 72 20 74 68 65 6e 20 30 20 77 68 69 63 68 20 66 69 74 73 20 | umber.greater.then.0.which.fits. |
f6980 | 69 6e 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 53 4c 41 20 49 44 73 20 28 73 65 65 20 62 65 | in.the.length.of.SLA.IDs.(see.be |
f69a0 | 6c 6f 77 29 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 | low)..Specify.the.interface.addr |
f69c0 | 65 73 73 20 75 73 65 64 20 6c 6f 63 61 6c 6c 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 | ess.used.locally.on.the.interfac |
f69e0 | 65 20 77 68 65 72 65 20 74 68 65 20 70 72 65 66 69 78 20 68 61 73 20 62 65 65 6e 20 64 65 6c 65 | e.where.the.prefix.has.been.dele |
f6a00 | 67 61 74 65 64 20 74 6f 2e 20 49 44 20 6d 75 73 74 20 62 65 20 61 20 64 65 63 69 6d 61 6c 20 69 | gated.to..ID.must.be.a.decimal.i |
f6a20 | 6e 74 65 67 65 72 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 72 65 71 75 | nteger..Specify.the.minimum.requ |
f6a40 | 69 72 65 64 20 54 4c 53 20 76 65 72 73 69 6f 6e 20 31 2e 32 20 6f 72 20 31 2e 33 00 53 70 65 63 | ired.TLS.version.1.2.or.1.3.Spec |
f6a60 | 69 66 79 20 74 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 75 73 65 72 20 | ify.the.plaintext.password.user. |
f6a80 | 62 79 20 75 73 65 72 20 60 3c 6e 61 6d 65 3e 60 20 6f 6e 20 74 68 69 73 20 73 79 73 74 65 6d 2e | by.user.`<name>`.on.this.system. |
f6aa0 | 20 54 68 65 20 70 6c 61 69 6e 74 65 78 74 20 70 61 73 73 77 6f 72 64 20 77 69 6c 6c 20 62 65 20 | .The.plaintext.password.will.be. |
f6ac0 | 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 72 61 6e 73 66 65 72 72 65 64 20 69 6e 74 6f 20 61 | automatically.transferred.into.a |
f6ae0 | 20 73 65 63 75 72 65 20 68 61 73 68 65 64 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 6e 6f 74 20 | .secure.hashed.password.and.not. |
f6b00 | 73 61 76 65 64 20 61 6e 79 77 68 65 72 65 20 69 6e 20 70 6c 61 69 6e 74 65 78 74 2e 00 53 70 65 | saved.anywhere.in.plaintext..Spe |
f6b20 | 63 69 66 79 20 74 68 65 20 70 6f 72 74 20 75 73 65 64 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 | cify.the.port.used.on.which.the. |
f6b40 | 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 73 20 6c 69 73 74 65 6e 69 6e 67 20 66 6f 72 20 72 | proxy.service.is.listening.for.r |
f6b60 | 65 71 75 65 73 74 73 2e 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 74 68 65 20 64 65 66 61 75 6c | equests..This.port.is.the.defaul |
f6b80 | 74 20 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 6c 69 | t.port.used.for.the.specified.li |
f6ba0 | 73 74 65 6e 2d 61 64 64 72 65 73 73 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 73 79 73 74 65 6d | sten-address..Specify.the.system |
f6bc0 | 73 20 60 3c 74 69 6d 65 7a 6f 6e 65 3e 60 20 61 73 20 74 68 65 20 52 65 67 69 6f 6e 2f 4c 6f 63 | s.`<timezone>`.as.the.Region/Loc |
f6be0 | 61 74 69 6f 6e 20 74 68 61 74 20 62 65 73 74 20 64 65 66 69 6e 65 73 20 79 6f 75 72 20 6c 6f 63 | ation.that.best.defines.your.loc |
f6c00 | 61 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 73 70 65 63 69 66 79 69 6e 67 20 55 | ation..For.example,.specifying.U |
f6c20 | 53 2f 50 61 63 69 66 69 63 20 73 65 74 73 20 74 68 65 20 74 69 6d 65 20 7a 6f 6e 65 20 74 6f 20 | S/Pacific.sets.the.time.zone.to. |
f6c40 | 55 53 20 50 61 63 69 66 69 63 20 74 69 6d 65 2e 00 53 70 65 63 69 66 79 20 74 68 65 20 74 69 6d | US.Pacific.time..Specify.the.tim |
f6c60 | 65 20 69 6e 74 65 72 76 61 6c 20 77 68 65 6e 20 60 3c 74 61 73 6b 3e 60 20 73 68 6f 75 6c 64 20 | e.interval.when.`<task>`.should. |
f6c80 | 62 65 20 65 78 65 63 75 74 65 64 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 69 73 20 73 70 65 | be.executed..The.interval.is.spe |
f6ca0 | 63 69 66 69 65 64 20 61 73 20 6e 75 6d 62 65 72 20 77 69 74 68 20 6f 6e 65 20 6f 66 20 74 68 65 | cified.as.number.with.one.of.the |
f6cc0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 75 66 66 69 78 65 73 3a 00 53 70 65 63 69 66 79 20 74 69 6d | .following.suffixes:.Specify.tim |
f6ce0 | 65 6f 75 74 20 2f 20 75 70 64 61 74 65 20 69 6e 74 65 72 76 61 6c 20 74 6f 20 63 68 65 63 6b 20 | eout./.update.interval.to.check. |
f6d00 | 69 66 20 49 50 20 61 64 64 72 65 73 73 20 63 68 61 6e 67 65 64 2e 00 53 70 65 63 69 66 79 20 74 | if.IP.address.changed..Specify.t |
f6d20 | 69 6d 65 6f 75 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 20 6b 65 65 70 61 6c 69 76 65 20 6d 65 | imeout.interval.for.keepalive.me |
f6d40 | 73 73 61 67 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 00 53 70 65 63 69 66 79 20 77 68 65 72 65 20 | ssage.in.seconds..Specify.where. |
f6d60 | 69 6e 74 65 72 66 61 63 65 20 69 73 20 73 68 61 72 65 64 20 62 79 20 6d 75 6c 74 69 70 6c 65 20 | interface.is.shared.by.multiple. |
f6d80 | 75 73 65 72 73 20 6f 72 20 69 74 20 69 73 20 76 6c 61 6e 2d 70 65 72 2d 75 73 65 72 2e 00 53 70 | users.or.it.is.vlan-per-user..Sp |
f6da0 | 69 6e 65 31 20 69 73 20 61 20 43 69 73 63 6f 20 49 4f 53 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 | ine1.is.a.Cisco.IOS.router.runni |
f6dc0 | 6e 67 20 76 65 72 73 69 6f 6e 20 31 35 2e 34 2c 20 4c 65 61 66 32 20 61 6e 64 20 4c 65 61 66 33 | ng.version.15.4,.Leaf2.and.Leaf3 |
f6de0 | 20 69 73 20 65 61 63 68 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 20 72 75 6e 6e 69 6e 67 20 31 | .is.each.a.VyOS.router.running.1 |
f6e00 | 2e 32 2e 00 53 70 6c 75 6e 6b 00 53 70 6f 6b 65 00 53 71 75 69 64 5f 20 69 73 20 61 20 63 61 63 | .2..Splunk.Spoke.Squid_.is.a.cac |
f6e20 | 68 69 6e 67 20 61 6e 64 20 66 6f 72 77 61 72 64 69 6e 67 20 48 54 54 50 20 77 65 62 20 70 72 6f | hing.and.forwarding.HTTP.web.pro |
f6e40 | 78 79 2e 20 49 74 20 68 61 73 20 61 20 77 69 64 65 20 76 61 72 69 65 74 79 20 6f 66 20 75 73 65 | xy..It.has.a.wide.variety.of.use |
f6e60 | 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 70 65 65 64 69 6e 67 20 75 70 20 61 20 77 65 62 20 73 | s,.including.speeding.up.a.web.s |
f6e80 | 65 72 76 65 72 20 62 79 20 63 61 63 68 69 6e 67 20 72 65 70 65 61 74 65 64 20 72 65 71 75 65 73 | erver.by.caching.repeated.reques |
f6ea0 | 74 73 2c 20 63 61 63 68 69 6e 67 20 77 65 62 2c 20 44 4e 53 20 61 6e 64 20 6f 74 68 65 72 20 63 | ts,.caching.web,.DNS.and.other.c |
f6ec0 | 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 61 20 67 72 | omputer.network.lookups.for.a.gr |
f6ee0 | 6f 75 70 20 6f 66 20 70 65 6f 70 6c 65 20 73 68 61 72 69 6e 67 20 6e 65 74 77 6f 72 6b 20 72 65 | oup.of.people.sharing.network.re |
f6f00 | 73 6f 75 72 63 65 73 2c 20 61 6e 64 20 61 69 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 62 79 20 | sources,.and.aiding.security.by. |
f6f20 | 66 69 6c 74 65 72 69 6e 67 20 74 72 61 66 66 69 63 2e 20 41 6c 74 68 6f 75 67 68 20 70 72 69 6d | filtering.traffic..Although.prim |
f6f40 | 61 72 69 6c 79 20 75 73 65 64 20 66 6f 72 20 48 54 54 50 20 61 6e 64 20 46 54 50 2c 20 53 71 75 | arily.used.for.HTTP.and.FTP,.Squ |
f6f60 | 69 64 20 69 6e 63 6c 75 64 65 73 20 6c 69 6d 69 74 65 64 20 73 75 70 70 6f 72 74 20 66 6f 72 20 | id.includes.limited.support.for. |
f6f80 | 73 65 76 65 72 61 6c 20 6f 74 68 65 72 20 70 72 6f 74 6f 63 6f 6c 73 20 69 6e 63 6c 75 64 69 6e | several.other.protocols.includin |
f6fa0 | 67 20 49 6e 74 65 72 6e 65 74 20 47 6f 70 68 65 72 2c 20 53 53 4c 2c 5b 36 5d 20 54 4c 53 20 61 | g.Internet.Gopher,.SSL,[6].TLS.a |
f6fc0 | 6e 64 20 48 54 54 50 53 2e 20 53 71 75 69 64 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 | nd.HTTPS..Squid.does.not.support |
f6fe0 | 20 74 68 65 20 53 4f 43 4b 53 20 70 72 6f 74 6f 63 6f 6c 2e 00 53 74 61 72 74 20 57 65 62 73 65 | .the.SOCKS.protocol..Start.Webse |
f7000 | 72 76 65 72 20 69 6e 20 67 69 76 65 6e 20 20 56 52 46 2e 00 53 74 61 72 74 20 57 65 62 73 65 72 | rver.in.given..VRF..Start.Webser |
f7020 | 76 65 72 20 69 6e 20 67 69 76 65 6e 20 56 52 46 2e 00 53 74 61 72 74 20 62 79 20 63 68 65 63 6b | ver.in.given.VRF..Start.by.check |
f7040 | 69 6e 67 20 66 6f 72 20 49 50 53 65 63 20 53 41 73 20 28 53 65 63 75 72 69 74 79 20 41 73 73 6f | ing.for.IPSec.SAs.(Security.Asso |
f7060 | 63 69 61 74 69 6f 6e 73 29 20 77 69 74 68 3a 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 | ciations).with:.Starting.from.Vy |
f7080 | 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e | OS.1.4-rolling-202308040557,.a.n |
f70a0 | 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 | ew.firewall.structure.can.be.fou |
f70c0 | 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 61 74 69 6f 6e 73 2c 20 61 6e 64 | nd.on.all.vyos.instalations,.and |
f70e0 | 20 7a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 | .zone.based.firewall.is.no.longe |
f7100 | 72 20 73 75 70 70 6f 72 74 65 64 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 6f 72 20 6d | r.supported..Documentation.for.m |
f7120 | 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 43 4c 49 20 63 61 6e 20 | ost.of.the.new.firewall.CLI.can. |
f7140 | 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 65 77 61 6c 6c 20 3c 68 74 74 70 73 | be.found.in.the.`firewall.<https |
f7160 | 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 66 69 67 | ://docs.vyos.io/en/latest/config |
f7180 | 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2e 68 74 6d 6c 3e 60 5f | uration/firewall/general.html>`_ |
f71a0 | 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 69 73 | .chapter..The.legacy.firewall.is |
f71c0 | 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 62 65 | .still.available.for.versions.be |
f71e0 | 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 20 61 6e | fore.1.4-rolling-202308040557.an |
f7200 | 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 3a 72 65 66 3a 60 66 69 72 65 | d.can.be.found.in.the.:ref:`fire |
f7220 | 77 61 6c 6c 2d 6c 65 67 61 63 79 60 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 65 78 61 6d 70 6c | wall-legacy`.chapter..The.exampl |
f7240 | 65 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 75 73 65 20 74 68 65 20 6c 65 67 61 63 | es.in.this.section.use.the.legac |
f7260 | 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 | y.firewall.configuration.command |
f7280 | 73 2c 20 73 69 6e 63 65 20 74 68 69 73 20 66 65 61 74 75 72 65 20 68 61 73 20 62 65 65 6e 20 72 | s,.since.this.feature.has.been.r |
f72a0 | 65 6d 6f 76 65 64 20 69 6e 20 65 61 72 6c 69 65 72 20 72 65 6c 65 61 73 65 73 2e 00 53 74 61 72 | emoved.in.earlier.releases..Star |
f72c0 | 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 | ting.from.VyOS.1.4-rolling-20230 |
f72e0 | 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 | 8040557,.a.new.firewall.structur |
f7300 | 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 | e.can.be.found.on.all.vyos.insta |
f7320 | 6c 61 74 69 6f 6e 73 2e 20 5a 6f 6e 65 20 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 77 61 73 | lations..Zone.based.firewall.was |
f7340 | 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 61 74 20 76 65 72 73 69 6f 6e 2c 20 62 75 74 20 72 65 | .removed.in.that.version,.but.re |
f7360 | 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 31 2e 35 2e | .introduced.in.VyOS.1.4.and.1.5. |
f7380 | 20 41 6c 6c 20 76 65 72 73 69 6f 6e 73 20 62 75 69 6c 74 20 61 66 74 65 72 20 32 30 32 33 2d 31 | .All.versions.built.after.2023-1 |
f73a0 | 30 2d 32 32 20 68 61 73 20 74 68 69 73 20 66 65 61 74 75 72 65 2e 20 44 6f 63 75 6d 65 6e 74 61 | 0-22.has.this.feature..Documenta |
f73c0 | 74 69 6f 6e 20 66 6f 72 20 6d 6f 73 74 20 6f 66 20 74 68 65 20 6e 65 77 20 66 69 72 65 77 61 6c | tion.for.most.of.the.new.firewal |
f73e0 | 6c 20 43 4c 49 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 60 66 69 72 65 77 | l.CLI.can.be.found.in.the.`firew |
f7400 | 61 6c 6c 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 79 6f 73 2e 69 6f 2f 65 6e 2f 6c 61 74 | all.<https://docs.vyos.io/en/lat |
f7420 | 65 73 74 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 | est/configuration/firewall/gener |
f7440 | 61 6c 2e 68 74 6d 6c 3e 60 5f 20 63 68 61 70 74 65 72 2e 20 54 68 65 20 6c 65 67 61 63 79 20 66 | al.html>`_.chapter..The.legacy.f |
f7460 | 69 72 65 77 61 6c 6c 20 69 73 20 73 74 69 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 76 | irewall.is.still.available.for.v |
f7480 | 65 72 73 69 6f 6e 73 20 62 65 66 6f 72 65 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 | ersions.before.1.4-rolling-20230 |
f74a0 | 38 30 34 30 35 35 37 20 61 6e 64 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 | 8040557.and.can.be.found.in.the. |
f74c0 | 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 | :doc:`legacy.firewall.configurat |
f74e0 | 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e | ion.</configuration/firewall/gen |
f7500 | 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 20 63 68 61 70 74 65 72 2e 00 53 74 61 72 74 69 6e 67 20 | eral-legacy>`.chapter..Starting. |
f7520 | 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 | from.VyOS.1.4-rolling-2023080405 |
f7540 | 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 73 74 72 75 63 74 75 72 65 20 63 61 6e | 57,.a.new.firewall.structure.can |
f7560 | 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 | .be.found.on.all.vyos.installati |
f7580 | 6f 6e 73 2e 00 53 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 34 2d 72 6f 6c 6c | ons..Starting.from.VyOS.1.4-roll |
f75a0 | 69 6e 67 2d 32 30 32 33 30 38 30 34 30 35 35 37 2c 20 61 20 6e 65 77 20 66 69 72 65 77 61 6c 6c | ing-202308040557,.a.new.firewall |
f75c0 | 20 73 74 72 75 63 74 75 72 65 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 61 6c 6c 20 76 | .structure.can.be.found.on.all.v |
f75e0 | 79 6f 73 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 73 2e 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e | yos.installations..Documentation |
f7600 | 20 66 6f 72 20 6d 6f 73 74 20 6e 65 77 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 63 61 6e 20 62 | .for.most.new.firewall.cli.can.b |
f7620 | 65 20 66 6f 75 6e 64 20 68 65 72 65 3a 00 53 74 61 72 74 69 6e 67 20 6f 66 20 77 69 74 68 20 56 | e.found.here:.Starting.of.with.V |
f7640 | 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 77 65 20 61 64 64 65 64 20 73 75 70 70 | yOS.1.3.(equuleus).we.added.supp |
f7660 | 6f 72 74 20 66 6f 72 20 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 61 73 20 61 6e 20 4f 75 74 2d 6f | ort.for.running.VyOS.as.an.Out-o |
f7680 | 66 2d 42 61 6e 64 20 4d 61 6e 61 67 65 6d 65 6e 74 20 64 65 76 69 63 65 20 77 68 69 63 68 20 70 | f-Band.Management.device.which.p |
f76a0 | 72 6f 76 69 64 65 73 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 20 62 79 20 6d 65 61 6e 73 20 6f | rovides.remote.access.by.means.o |
f76c0 | 66 20 53 53 48 20 74 6f 20 64 69 72 65 63 74 6c 79 20 61 74 74 61 63 68 65 64 20 73 65 72 69 61 | f.SSH.to.directly.attached.seria |
f76e0 | 6c 20 69 6e 74 65 72 66 61 63 65 73 2e 00 53 74 61 72 74 69 6e 67 20 77 69 74 68 20 56 79 4f 53 | l.interfaces..Starting.with.VyOS |
f7700 | 20 31 2e 32 20 61 20 3a 61 62 62 72 3a 60 6d 44 4e 53 20 28 4d 75 6c 74 69 63 61 73 74 20 44 4e | .1.2.a.:abbr:`mDNS.(Multicast.DN |
f7720 | 53 29 60 20 72 65 70 65 61 74 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 69 73 20 70 72 | S)`.repeater.functionality.is.pr |
f7740 | 6f 76 69 64 65 64 2e 20 41 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 | ovided..Additional.information.c |
f7760 | 61 6e 20 62 65 20 6f 62 74 61 69 6e 65 64 20 66 72 6f 6d 20 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 | an.be.obtained.from.https://en.w |
f7780 | 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 4d 75 6c 74 69 63 61 73 74 5f 44 4e 53 2e | ikipedia.org/wiki/Multicast_DNS. |
f77a0 | 00 53 74 61 74 69 63 00 53 74 61 74 69 63 20 3a 61 62 62 72 3a 60 53 41 4b 20 28 53 65 63 75 72 | .Static.Static.:abbr:`SAK.(Secur |
f77c0 | 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 4b 65 79 29 60 20 6d 6f 64 65 20 63 61 6e 20 | e.Authentication.Key)`.mode.can. |
f77e0 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6d 61 6e 75 61 6c 6c 79 20 6f 6e 20 65 61 63 68 20 64 | be.configured.manually.on.each.d |
f7800 | 65 76 69 63 65 20 77 69 73 68 69 6e 67 20 74 6f 20 75 73 65 20 4d 41 43 73 65 63 2e 20 4b 65 79 | evice.wishing.to.use.MACsec..Key |
f7820 | 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 73 74 61 74 69 63 61 6c 6c 79 20 6f 6e 20 61 6c 6c 20 | s.must.be.set.statically.on.all. |
f7840 | 64 65 76 69 63 65 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 66 6c 6f 77 20 70 72 6f 70 | devices.for.traffic.to.flow.prop |
f7860 | 65 72 6c 79 2e 20 4b 65 79 20 72 6f 74 61 74 69 6f 6e 20 69 73 20 64 65 70 65 6e 64 65 6e 74 20 | erly..Key.rotation.is.dependent. |
f7880 | 6f 6e 20 74 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 75 70 64 61 74 69 6e 67 20 61 6c | on.the.administrator.updating.al |
f78a0 | 6c 20 6b 65 79 73 20 6d 61 6e 75 61 6c 6c 79 20 61 63 72 6f 73 73 20 63 6f 6e 6e 65 63 74 65 64 | l.keys.manually.across.connected |
f78c0 | 20 64 65 76 69 63 65 73 2e 20 53 74 61 74 69 63 20 53 41 4b 20 6d 6f 64 65 20 63 61 6e 20 6e 6f | .devices..Static.SAK.mode.can.no |
f78e0 | 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 4d 4b 41 2e 00 53 74 61 74 69 63 20 44 48 43 50 20 | t.be.used.with.MKA..Static.DHCP. |
f7900 | 49 50 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 20 74 6f 20 68 6f 73 74 20 69 64 65 6e 74 69 | IP.address.assign.to.host.identi |
f7920 | 66 69 65 64 20 62 79 20 60 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 60 2e 20 49 50 20 61 64 64 72 | fied.by.`<description>`..IP.addr |
f7940 | 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 73 69 64 65 20 74 68 65 20 60 3c 73 75 62 6e 65 74 3e | ess.must.be.inside.the.`<subnet> |
f7960 | 60 20 77 68 69 63 68 20 69 73 20 64 65 66 69 6e 65 64 20 62 75 74 20 63 61 6e 20 62 65 20 6f 75 | `.which.is.defined.but.can.be.ou |
f7980 | 74 73 69 64 65 20 74 68 65 20 64 79 6e 61 6d 69 63 20 72 61 6e 67 65 20 63 72 65 61 74 65 64 20 | tside.the.dynamic.range.created. |
f79a0 | 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 73 65 74 20 73 65 72 76 69 63 65 20 64 68 63 70 2d 73 | with.:cfgcmd:`set.service.dhcp-s |
f79c0 | 65 72 76 65 72 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 20 3c 6e 61 6d 65 3e | erver.shared-network-name.<name> |
f79e0 | 20 73 75 62 6e 65 74 20 3c 73 75 62 6e 65 74 3e 20 72 61 6e 67 65 20 3c 6e 3e 60 2e 20 49 66 20 | .subnet.<subnet>.range.<n>`..If. |
f7a00 | 6e 6f 20 69 70 2d 61 64 64 72 65 73 73 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 61 6e 20 49 | no.ip-address.is.specified,.an.I |
f7a20 | 50 20 66 72 6f 6d 20 74 68 65 20 64 79 6e 61 6d 69 63 20 70 6f 6f 6c 20 69 73 20 75 73 65 64 2e | P.from.the.dynamic.pool.is.used. |
f7a40 | 00 53 74 61 74 69 63 20 48 6f 73 74 6e 61 6d 65 20 4d 61 70 70 69 6e 67 00 53 74 61 74 69 63 20 | .Static.Hostname.Mapping.Static. |
f7a60 | 4b 65 79 73 00 53 74 61 74 69 63 20 52 6f 75 74 65 73 00 53 74 61 74 69 63 20 52 6f 75 74 69 6e | Keys.Static.Routes.Static.Routin |
f7a80 | 67 20 6f 72 20 6f 74 68 65 72 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f | g.or.other.dynamic.routing.proto |
f7aa0 | 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 76 65 72 20 74 68 65 20 76 74 75 6e 20 69 | cols.can.be.used.over.the.vtun.i |
f7ac0 | 6e 74 65 72 66 61 63 65 00 53 74 61 74 69 63 20 52 6f 75 74 69 6e 67 3a 00 53 74 61 74 69 63 20 | nterface.Static.Routing:.Static. |
f7ae0 | 6d 61 70 70 69 6e 67 73 00 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 61 72 65 6e 27 74 20 | mappings.Static.mappings.aren't. |
f7b00 | 73 68 6f 77 6e 2e 20 54 6f 20 73 68 6f 77 20 61 6c 6c 20 73 74 61 74 65 73 2c 20 75 73 65 20 60 | shown..To.show.all.states,.use.` |
f7b20 | 60 73 68 6f 77 20 64 68 63 70 20 73 65 72 76 65 72 20 6c 65 61 73 65 73 20 73 74 61 74 65 20 61 | `show.dhcp.server.leases.state.a |
f7b40 | 6c 6c 60 60 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 61 72 65 20 6d 61 6e 75 61 6c 6c 79 | ll``..Static.routes.are.manually |
f7b60 | 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 65 73 2c 20 77 68 69 63 68 2c 20 69 6e 20 67 65 | .configured.routes,.which,.in.ge |
f7b80 | 6e 65 72 61 6c 2c 20 63 61 6e 6e 6f 74 20 62 65 20 75 70 64 61 74 65 64 20 64 79 6e 61 6d 69 63 | neral,.cannot.be.updated.dynamic |
f7ba0 | 61 6c 6c 79 20 66 72 6f 6d 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 56 79 4f 53 20 6c 65 61 72 6e | ally.from.information.VyOS.learn |
f7bc0 | 73 20 61 62 6f 75 74 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 66 72 6f | s.about.the.network.topology.fro |
f7be0 | 6d 20 6f 74 68 65 72 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 48 6f 77 65 76 | m.other.routing.protocols..Howev |
f7c00 | 65 72 2c 20 69 66 20 61 20 6c 69 6e 6b 20 66 61 69 6c 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 | er,.if.a.link.fails,.the.router. |
f7c20 | 77 69 6c 6c 20 72 65 6d 6f 76 65 20 72 6f 75 74 65 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 73 74 | will.remove.routes,.including.st |
f7c40 | 61 74 69 63 20 72 6f 75 74 65 73 2c 20 66 72 6f 6d 20 74 68 65 20 3a 61 62 62 72 3a 60 52 49 50 | atic.routes,.from.the.:abbr:`RIP |
f7c60 | 42 20 28 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 42 61 73 65 29 60 20 74 68 | B.(Routing.Information.Base)`.th |
f7c80 | 61 74 20 75 73 65 64 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 72 65 61 63 68 20 | at.used.this.interface.to.reach. |
f7ca0 | 74 68 65 20 6e 65 78 74 20 68 6f 70 2e 20 49 6e 20 67 65 6e 65 72 61 6c 2c 20 73 74 61 74 69 63 | the.next.hop..In.general,.static |
f7cc0 | 20 72 6f 75 74 65 73 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 66 6f 72 20 | .routes.should.only.be.used.for. |
f7ce0 | 76 65 72 79 20 73 69 6d 70 6c 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 2c 20 | very.simple.network.topologies,. |
f7d00 | 6f 72 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 61 | or.to.override.the.behavior.of.a |
f7d20 | 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 61 20 | .dynamic.routing.protocol.for.a. |
f7d40 | 73 6d 61 6c 6c 20 6e 75 6d 62 65 72 20 6f 66 20 72 6f 75 74 65 73 2e 20 54 68 65 20 63 6f 6c 6c | small.number.of.routes..The.coll |
f7d60 | 65 63 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 72 6f 75 74 65 73 20 74 68 65 20 72 6f 75 74 65 72 20 | ection.of.all.routes.the.router. |
f7d80 | 68 61 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 | has.learned.from.its.configurati |
f7da0 | 6f 6e 20 6f 72 20 66 72 6f 6d 20 69 74 73 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 70 | on.or.from.its.dynamic.routing.p |
f7dc0 | 72 6f 74 6f 63 6f 6c 73 20 69 73 20 73 74 6f 72 65 64 20 69 6e 20 74 68 65 20 52 49 42 2e 20 55 | rotocols.is.stored.in.the.RIB..U |
f7de0 | 6e 69 63 61 73 74 20 72 6f 75 74 65 73 20 61 72 65 20 64 69 72 65 63 74 6c 79 20 75 73 65 64 20 | nicast.routes.are.directly.used. |
f7e00 | 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 66 6f 72 77 61 72 64 69 6e 67 20 74 61 62 6c | to.determine.the.forwarding.tabl |
f7e20 | 65 20 75 73 65 64 20 66 6f 72 20 75 6e 69 63 61 73 74 20 70 61 63 6b 65 74 20 66 6f 72 77 61 72 | e.used.for.unicast.packet.forwar |
f7e40 | 64 69 6e 67 2e 00 53 74 61 74 69 63 20 72 6f 75 74 65 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 | ding..Static.routes.can.be.confi |
f7e60 | 67 75 72 65 64 20 72 65 66 65 72 65 6e 63 69 6e 67 20 74 68 65 20 74 75 6e 6e 65 6c 20 69 6e 74 | gured.referencing.the.tunnel.int |
f7e80 | 65 72 66 61 63 65 3b 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 68 65 20 6c 6f 63 61 6c 20 72 | erface;.for.example,.the.local.r |
f7ea0 | 6f 75 74 65 72 20 77 69 6c 6c 20 75 73 65 20 61 20 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 30 | outer.will.use.a.network.of.10.0 |
f7ec0 | 2e 30 2e 30 2f 31 36 2c 20 77 68 69 6c 65 20 74 68 65 20 72 65 6d 6f 74 65 20 68 61 73 20 61 20 | .0.0/16,.while.the.remote.has.a. |
f7ee0 | 6e 65 74 77 6f 72 6b 20 6f 66 20 31 30 2e 31 2e 30 2e 30 2f 31 36 3a 00 53 74 61 74 69 6f 6e 20 | network.of.10.1.0.0/16:.Station. |
f7f00 | 73 75 70 70 6f 72 74 73 20 72 65 63 65 69 76 69 6e 67 20 56 48 54 20 76 61 72 69 61 6e 74 20 48 | supports.receiving.VHT.variant.H |
f7f20 | 54 20 43 6f 6e 74 72 6f 6c 20 66 69 65 6c 64 00 53 74 61 74 75 73 00 53 74 69 63 6b 79 20 43 6f | T.Control.field.Status.Sticky.Co |
f7f40 | 6e 6e 65 63 74 69 6f 6e 73 00 53 74 6f 72 61 67 65 20 6f 66 20 72 6f 75 74 65 20 75 70 64 61 74 | nnections.Storage.of.route.updat |
f7f60 | 65 73 20 75 73 65 73 20 6d 65 6d 6f 72 79 2e 20 49 66 20 79 6f 75 20 65 6e 61 62 6c 65 20 73 6f | es.uses.memory..If.you.enable.so |
f7f80 | 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 6e 62 6f 75 6e 64 20 66 6f 72 20 6d | ft.reconfiguration.inbound.for.m |
f7fa0 | 75 6c 74 69 70 6c 65 20 6e 65 69 67 68 62 6f 72 73 2c 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 | ultiple.neighbors,.the.amount.of |
f7fc0 | 20 6d 65 6d 6f 72 79 20 75 73 65 64 20 63 61 6e 20 62 65 63 6f 6d 65 20 73 69 67 6e 69 66 69 63 | .memory.used.can.become.signific |
f7fe0 | 61 6e 74 2e 00 53 75 66 66 69 78 65 73 00 53 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 73 74 61 72 | ant..Suffixes.Summarisation.star |
f8000 | 74 73 20 6f 6e 6c 79 20 61 66 74 65 72 20 74 68 69 73 20 64 65 6c 61 79 20 74 69 6d 65 72 20 65 | ts.only.after.this.delay.timer.e |
f8020 | 78 70 69 72 79 2e 00 53 75 70 70 6f 72 74 65 64 20 4d 6f 64 75 6c 65 73 00 53 75 70 70 6f 72 74 | xpiry..Supported.Modules.Support |
f8040 | 65 64 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 20 73 65 74 2e 00 53 75 70 70 6f 72 74 65 64 20 | ed.channel.width.set..Supported. |
f8060 | 64 61 65 6d 6f 6e 73 3a 00 53 75 70 70 6f 72 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 79 70 | daemons:.Supported.interface.typ |
f8080 | 65 73 3a 00 53 75 70 70 6f 72 74 65 64 20 72 65 6d 6f 74 65 20 70 72 6f 74 6f 63 6f 6c 73 20 61 | es:.Supported.remote.protocols.a |
f80a0 | 72 65 20 46 54 50 2c 20 46 54 50 53 2c 20 48 54 54 50 2c 20 48 54 54 50 53 2c 20 53 43 50 2f 53 | re.FTP,.FTPS,.HTTP,.HTTPS,.SCP/S |
f80c0 | 46 54 50 20 61 6e 64 20 54 46 54 50 2e 00 53 75 70 70 6f 72 74 65 64 20 76 65 72 73 69 6f 6e 73 | FTP.and.TFTP..Supported.versions |
f80e0 | 20 6f 66 20 52 49 50 20 61 72 65 3a 00 53 75 70 70 6f 72 74 73 20 61 73 20 48 45 4c 50 45 52 20 | .of.RIP.are:.Supports.as.HELPER. |
f8100 | 66 6f 72 20 63 6f 6e 66 69 67 75 72 65 64 20 67 72 61 63 65 20 70 65 72 69 6f 64 2e 00 53 75 70 | for.configured.grace.period..Sup |
f8120 | 70 6f 73 65 20 74 68 65 20 4c 45 46 54 20 72 6f 75 74 65 72 20 68 61 73 20 65 78 74 65 72 6e 61 | pose.the.LEFT.router.has.externa |
f8140 | 6c 20 61 64 64 72 65 73 73 20 31 39 32 2e 30 2e 32 2e 31 30 20 6f 6e 20 69 74 73 20 65 74 68 30 | l.address.192.0.2.10.on.its.eth0 |
f8160 | 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 74 68 65 20 52 49 47 48 54 20 72 6f 75 74 65 72 | .interface,.and.the.RIGHT.router |
f8180 | 20 69 73 20 32 30 33 2e 30 2e 31 31 33 2e 34 35 00 53 75 70 70 6f 73 65 20 79 6f 75 20 77 61 6e | .is.203.0.113.45.Suppose.you.wan |
f81a0 | 74 20 74 6f 20 75 73 65 20 31 30 2e 32 33 2e 31 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 66 6f | t.to.use.10.23.1.0/24.network.fo |
f81c0 | 72 20 63 6c 69 65 6e 74 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 73 20 61 6e 64 20 61 6c | r.client.tunnel.endpoints.and.al |
f81e0 | 6c 20 63 6c 69 65 6e 74 20 73 75 62 6e 65 74 73 20 62 65 6c 6f 6e 67 20 74 6f 20 31 30 2e 32 33 | l.client.subnets.belong.to.10.23 |
f8200 | 2e 30 2e 30 2f 32 30 2e 20 41 6c 6c 20 63 6c 69 65 6e 74 73 20 6e 65 65 64 20 61 63 63 65 73 73 | .0.0/20..All.clients.need.access |
f8220 | 20 74 6f 20 74 68 65 20 31 39 32 2e 31 36 38 2e 30 2e 30 2f 31 36 20 6e 65 74 77 6f 72 6b 2e 00 | .to.the.192.168.0.0/16.network.. |
f8240 | 53 75 70 70 72 65 73 73 20 73 65 6e 64 69 6e 67 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f | Suppress.sending.Capability.Nego |
f8260 | 74 69 61 74 69 6f 6e 20 61 73 20 4f 50 45 4e 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f 6e 61 6c | tiation.as.OPEN.message.optional |
f8280 | 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 65 65 72 2e 20 54 68 69 73 20 63 6f 6d | .parameter.to.the.peer..This.com |
f82a0 | 6d 61 6e 64 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 74 68 65 20 70 65 65 72 20 69 73 20 63 6f | mand.only.affects.the.peer.is.co |
f82c0 | 6e 66 69 67 75 72 65 64 20 6f 74 68 65 72 20 74 68 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 | nfigured.other.than.IPv4.unicast |
f82e0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 53 79 6e 61 6d 69 63 20 69 6e 73 74 72 75 63 74 | .configuration..Synamic.instruct |
f8300 | 73 20 74 6f 20 66 6f 72 77 61 72 64 20 74 6f 20 61 6c 6c 20 70 65 65 72 73 20 77 68 69 63 68 20 | s.to.forward.to.all.peers.which. |
f8320 | 77 65 20 68 61 76 65 20 61 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 | we.have.a.direct.connection.with |
f8340 | 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 | ..Alternatively,.you.can.specify |
f8360 | 20 74 68 65 20 64 69 72 65 63 74 69 76 65 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 66 6f | .the.directive.multiple.times.fo |
f8380 | 72 20 65 61 63 68 20 70 72 6f 74 6f 63 6f 6c 2d 61 64 64 72 65 73 73 20 74 68 65 20 6d 75 6c 74 | r.each.protocol-address.the.mult |
f83a0 | 69 63 61 73 74 20 74 72 61 66 66 69 63 20 73 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 74 6f 2e | icast.traffic.should.be.sent.to. |
f83c0 | 00 53 79 6e 63 20 67 72 6f 75 70 73 00 53 79 6e 70 72 6f 78 79 00 53 79 6e 70 72 6f 78 79 20 63 | .Sync.groups.Synproxy.Synproxy.c |
f83e0 | 6f 6e 6e 65 63 74 69 6f 6e 73 00 53 79 6e 70 72 6f 78 79 20 72 65 6c 69 65 73 20 6f 6e 20 73 79 | onnections.Synproxy.relies.on.sy |
f8400 | 6e 63 6f 6f 6b 69 65 73 20 61 6e 64 20 54 43 50 20 74 69 6d 65 73 74 61 6d 70 73 2c 20 65 6e 73 | ncookies.and.TCP.timestamps,.ens |
f8420 | 75 72 65 20 74 68 65 73 65 20 61 72 65 20 65 6e 61 62 6c 65 64 00 53 79 6e 74 61 78 20 68 61 73 | ure.these.are.enabled.Syntax.has |
f8440 | 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 56 79 4f 53 20 31 2e 32 20 28 63 72 75 78 29 20 61 6e | .changed.from.VyOS.1.2.(crux).an |
f8460 | 64 20 69 74 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 6d 69 67 72 61 | d.it.will.be.automatically.migra |
f8480 | 74 65 64 20 64 75 72 69 6e 67 20 61 6e 20 75 70 67 72 61 64 65 2e 00 53 79 73 63 74 6c 00 53 79 | ted.during.an.upgrade..Sysctl.Sy |
f84a0 | 73 6c 6f 67 00 53 79 73 6c 6f 67 20 73 75 70 70 6f 72 74 73 20 6c 6f 67 67 69 6e 67 20 74 6f 20 | slog.Syslog.supports.logging.to. |
f84c0 | 6d 75 6c 74 69 70 6c 65 20 74 61 72 67 65 74 73 2c 20 74 68 6f 73 65 20 74 61 72 67 65 74 73 20 | multiple.targets,.those.targets. |
f84e0 | 63 6f 75 6c 64 20 62 65 20 61 20 70 6c 61 69 6e 20 66 69 6c 65 20 6f 6e 20 79 6f 75 72 20 56 79 | could.be.a.plain.file.on.your.Vy |
f8500 | 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 69 74 73 65 6c 66 2c 20 61 20 73 65 72 69 61 6c | OS.installation.itself,.a.serial |
f8520 | 20 63 6f 6e 73 6f 6c 65 20 6f 72 20 61 20 72 65 6d 6f 74 65 20 73 79 73 6c 6f 67 20 73 65 72 76 | .console.or.a.remote.syslog.serv |
f8540 | 65 72 20 77 68 69 63 68 20 69 73 20 72 65 61 63 68 65 64 20 76 69 61 20 3a 61 62 62 72 3a 60 49 | er.which.is.reached.via.:abbr:`I |
f8560 | 50 20 28 49 6e 74 65 72 6e 65 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 55 44 50 2f 54 43 50 2e 00 | P.(Internet.Protocol)`.UDP/TCP.. |
f8580 | 53 79 73 6c 6f 67 20 75 73 65 73 20 6c 6f 67 72 6f 74 61 74 65 20 74 6f 20 72 6f 74 61 74 65 20 | Syslog.uses.logrotate.to.rotate. |
f85a0 | 6c 6f 67 69 6c 65 73 20 61 66 74 65 72 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 67 69 76 65 73 20 | logiles.after.a.number.of.gives. |
f85c0 | 62 79 74 65 73 2e 20 57 65 20 6b 65 65 70 20 61 73 20 6d 61 6e 79 20 61 73 20 60 3c 6e 75 6d 62 | bytes..We.keep.as.many.as.`<numb |
f85e0 | 65 72 3e 60 20 72 6f 74 61 74 65 64 20 66 69 6c 65 20 62 65 66 6f 72 65 20 74 68 65 79 20 61 72 | er>`.rotated.file.before.they.ar |
f8600 | 65 20 64 65 6c 65 74 65 64 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 53 79 73 6c 6f 67 20 | e.deleted.on.the.system..Syslog. |
f8620 | 77 69 6c 6c 20 77 72 69 74 65 20 60 3c 73 69 7a 65 3e 60 20 6b 69 6c 6f 62 79 74 65 73 20 69 6e | will.write.`<size>`.kilobytes.in |
f8640 | 74 6f 20 74 68 65 20 66 69 6c 65 20 73 70 65 63 69 66 69 65 64 20 62 79 20 60 3c 66 69 6c 65 6e | to.the.file.specified.by.`<filen |
f8660 | 61 6d 65 3e 60 2e 20 41 66 74 65 72 20 74 68 69 73 20 6c 69 6d 69 74 20 68 61 73 20 62 65 65 6e | ame>`..After.this.limit.has.been |
f8680 | 20 72 65 61 63 68 65 64 2c 20 74 68 65 20 63 75 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 22 72 6f | .reached,.the.custom.file.is."ro |
f86a0 | 74 61 74 65 64 22 20 62 79 20 6c 6f 67 72 6f 74 61 74 65 20 61 6e 64 20 61 20 6e 65 77 20 63 75 | tated".by.logrotate.and.a.new.cu |
f86c0 | 73 74 6f 6d 20 66 69 6c 65 20 69 73 20 63 72 65 61 74 65 64 2e 00 53 79 73 74 65 6d 00 53 79 73 | stom.file.is.created..System.Sys |
f86e0 | 74 65 6d 20 44 4e 53 00 53 79 73 74 65 6d 20 44 69 73 70 6c 61 79 20 28 4c 43 44 29 00 53 79 73 | tem.DNS.System.Display.(LCD).Sys |
f8700 | 74 65 6d 20 4e 61 6d 65 20 61 6e 64 20 44 65 73 63 72 69 70 74 69 6f 6e 00 53 79 73 74 65 6d 20 | tem.Name.and.Description.System. |
f8720 | 50 72 6f 78 79 00 53 79 73 74 65 6d 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 73 77 69 74 63 | Proxy.System.capabilities.(switc |
f8740 | 68 69 6e 67 2c 20 72 6f 75 74 69 6e 67 2c 20 65 74 63 2e 29 00 53 79 73 74 65 6d 20 63 6f 6e 66 | hing,.routing,.etc.).System.conf |
f8760 | 69 67 75 72 61 74 69 6f 6e 20 63 6f 6d 6d 61 6e 64 73 00 53 79 73 74 65 6d 20 64 61 65 6d 6f 6e | iguration.commands.System.daemon |
f8780 | 73 00 53 79 73 74 65 6d 20 69 64 65 6e 74 69 66 69 65 72 3a 20 60 60 31 39 32 31 2e 36 38 30 30 | s.System.identifier:.``1921.6800 |
f87a0 | 2e 31 30 30 32 60 60 20 2d 20 66 6f 72 20 73 79 73 74 65 6d 20 69 64 65 74 69 66 69 65 72 73 20 | .1002``.-.for.system.idetifiers. |
f87c0 | 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 6f 20 75 73 65 20 49 50 20 61 64 64 72 65 73 73 20 6f | we.recommend.to.use.IP.address.o |
f87e0 | 72 20 4d 41 43 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 | r.MAC.address.of.the.router.itse |
f8800 | 6c 66 2e 20 54 68 65 20 77 61 79 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 74 68 69 73 20 69 73 | lf..The.way.to.construct.this.is |
f8820 | 20 74 6f 20 6b 65 65 70 20 61 6c 6c 20 6f 66 20 74 68 65 20 7a 65 72 6f 65 73 20 6f 66 20 74 68 | .to.keep.all.of.the.zeroes.of.th |
f8840 | 65 20 72 6f 75 74 65 72 20 49 50 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 74 68 65 6e 20 63 68 | e.router.IP.address,.and.then.ch |
f8860 | 61 6e 67 65 20 74 68 65 20 70 65 72 69 6f 64 73 20 66 72 6f 6d 20 62 65 69 6e 67 20 65 76 65 72 | ange.the.periods.from.being.ever |
f8880 | 79 20 74 68 72 65 65 20 6e 75 6d 62 65 72 73 20 74 6f 20 65 76 65 72 79 20 66 6f 75 72 20 6e 75 | y.three.numbers.to.every.four.nu |
f88a0 | 6d 62 65 72 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 74 68 61 74 20 69 73 20 6c 69 73 74 65 | mbers..The.address.that.is.liste |
f88c0 | 64 20 68 65 72 65 20 69 73 20 60 60 31 39 32 2e 31 36 38 2e 31 2e 32 60 60 2c 20 77 68 69 63 68 | d.here.is.``192.168.1.2``,.which |
f88e0 | 20 69 66 20 65 78 70 61 6e 64 65 64 20 77 69 6c 6c 20 74 75 72 6e 20 69 6e 74 6f 20 60 60 31 39 | .if.expanded.will.turn.into.``19 |
f8900 | 32 2e 31 36 38 2e 30 30 31 2e 30 30 32 60 60 2e 20 54 68 65 6e 20 61 6c 6c 20 6f 6e 65 20 68 61 | 2.168.001.002``..Then.all.one.ha |
f8920 | 73 20 74 6f 20 64 6f 20 69 73 20 6d 6f 76 65 20 74 68 65 20 64 6f 74 73 20 74 6f 20 68 61 76 65 | s.to.do.is.move.the.dots.to.have |
f8940 | 20 66 6f 75 72 20 6e 75 6d 62 65 72 73 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 72 65 65 2e 20 | .four.numbers.instead.of.three.. |
f8960 | 54 68 69 73 20 67 69 76 65 73 20 75 73 20 60 60 31 39 32 31 2e 36 38 30 30 2e 31 30 30 32 60 60 | This.gives.us.``1921.6800.1002`` |
f8980 | 2e 00 53 79 73 74 65 6d 20 69 73 20 75 6e 75 73 61 62 6c 65 20 2d 20 61 20 70 61 6e 69 63 20 63 | ..System.is.unusable.-.a.panic.c |
f89a0 | 6f 6e 64 69 74 69 6f 6e 00 54 41 43 41 43 53 20 45 78 61 6d 70 6c 65 00 54 41 43 41 43 53 20 69 | ondition.TACACS.Example.TACACS.i |
f89c0 | 73 20 64 65 66 69 6e 65 64 20 69 6e 20 3a 72 66 63 3a 60 38 39 30 37 60 2e 00 54 41 43 41 43 53 | s.defined.in.:rfc:`8907`..TACACS |
f89e0 | 20 73 65 72 76 65 72 73 20 63 6f 75 6c 64 20 62 65 20 68 61 72 64 65 6e 65 64 20 62 79 20 6f 6e | .servers.could.be.hardened.by.on |
f8a00 | 6c 79 20 61 6c 6c 6f 77 69 6e 67 20 63 65 72 74 61 69 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 | ly.allowing.certain.IP.addresses |
f8a20 | 20 74 6f 20 63 6f 6e 6e 65 63 74 2e 20 41 73 20 6f 66 20 74 68 69 73 20 74 68 65 20 73 6f 75 72 | .to.connect..As.of.this.the.sour |
f8a40 | 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 65 61 63 68 20 54 41 43 41 43 53 20 71 75 65 72 79 20 | ce.address.of.each.TACACS.query. |
f8a60 | 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 41 43 41 43 53 2b 00 54 42 44 00 54 | can.be.configured..TACACS+.TBD.T |
f8a80 | 43 50 20 26 20 55 44 50 20 73 65 72 76 69 63 65 73 20 72 75 6e 6e 69 6e 67 20 69 6e 20 74 68 65 | CP.&.UDP.services.running.in.the |
f8aa0 | 20 64 65 66 61 75 6c 74 20 56 52 46 20 63 6f 6e 74 65 78 74 20 28 69 65 2e 2c 20 6e 6f 74 20 62 | .default.VRF.context.(ie.,.not.b |
f8ac0 | 6f 75 6e 64 20 74 6f 20 61 6e 79 20 56 52 46 20 64 65 76 69 63 65 29 20 63 61 6e 20 77 6f 72 6b | ound.to.any.VRF.device).can.work |
f8ae0 | 20 61 63 72 6f 73 73 20 61 6c 6c 20 56 52 46 20 64 6f 6d 61 69 6e 73 20 62 79 20 65 6e 61 62 6c | .across.all.VRF.domains.by.enabl |
f8b00 | 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 2e 00 54 46 54 50 20 53 65 72 76 65 72 00 54 61 67 | ing.this.option..TFTP.Server.Tag |
f8b20 | 20 69 73 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 2e 20 49 66 20 74 | .is.the.optional.parameter..If.t |
f8b40 | 61 67 20 63 6f 6e 66 69 67 75 72 65 64 20 53 75 6d 6d 61 72 79 20 72 6f 75 74 65 20 77 69 6c 6c | ag.configured.Summary.route.will |
f8b60 | 20 62 65 20 6f 72 69 67 69 6e 61 74 65 64 20 77 69 74 68 20 74 68 65 20 63 6f 6e 66 69 67 75 72 | .be.originated.with.the.configur |
f8b80 | 65 64 20 74 61 67 2e 00 54 61 73 6b 20 53 63 68 65 64 75 6c 65 72 00 54 65 6c 65 67 72 61 66 00 | ed.tag..Task.Scheduler.Telegraf. |
f8ba0 | 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 69 6e 20 61 7a 75 72 65 2d 64 61 74 | Telegraf.output.plugin.azure-dat |
f8bc0 | 61 2d 65 78 70 6c 6f 72 65 72 5f 00 54 65 6c 65 67 72 61 66 20 6f 75 74 70 75 74 20 70 6c 75 67 | a-explorer_.Telegraf.output.plug |
f8be0 | 69 6e 20 70 72 6f 6d 65 74 68 65 75 73 2d 63 6c 69 65 6e 74 5f 00 54 65 6c 65 67 72 61 66 20 6f | in.prometheus-client_.Telegraf.o |
f8c00 | 75 74 70 75 74 20 70 6c 75 67 69 6e 20 73 70 6c 75 6e 6b 5f 2e 20 48 54 54 50 20 45 76 65 6e 74 | utput.plugin.splunk_..HTTP.Event |
f8c20 | 20 43 6f 6c 6c 65 63 74 6f 72 2e 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 6f 75 | .Collector..Tell.PIM.that.we.wou |
f8c40 | 6c 64 20 6e 6f 74 20 6c 69 6b 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 | ld.not.like.to.use.this.interfac |
f8c60 | 65 20 74 6f 20 70 72 6f 63 65 73 73 20 62 6f 6f 74 73 74 72 61 70 20 6d 65 73 73 61 67 65 73 2e | e.to.process.bootstrap.messages. |
f8c80 | 00 54 65 6c 6c 20 50 49 4d 20 74 68 61 74 20 77 65 20 77 6f 75 6c 64 20 6e 6f 74 20 6c 69 6b 65 | .Tell.PIM.that.we.would.not.like |
f8ca0 | 20 74 6f 20 75 73 65 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 72 6f 63 65 73 | .to.use.this.interface.to.proces |
f8cc0 | 73 20 75 6e 69 63 61 73 74 20 62 6f 6f 74 73 74 72 61 70 20 6d 65 73 73 61 67 65 73 2e 00 54 65 | s.unicast.bootstrap.messages..Te |
f8ce0 | 6c 6c 20 68 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 | ll.hosts.to.use.the.administered |
f8d00 | 20 28 73 74 61 74 65 66 75 6c 29 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 48 43 50 29 | .(stateful).protocol.(i.e..DHCP) |
f8d20 | 20 66 6f 72 20 61 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 6f 74 68 65 72 20 | .for.autoconfiguration.of.other. |
f8d40 | 28 6e 6f 6e 2d 61 64 64 72 65 73 73 29 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 54 65 6c 6c 20 68 | (non-address).information.Tell.h |
f8d60 | 6f 73 74 73 20 74 6f 20 75 73 65 20 74 68 65 20 61 64 6d 69 6e 69 73 74 65 72 65 64 20 73 74 61 | osts.to.use.the.administered.sta |
f8d80 | 74 65 66 75 6c 20 70 72 6f 74 6f 63 6f 6c 20 28 69 2e 65 2e 20 44 48 43 50 29 20 66 6f 72 20 61 | teful.protocol.(i.e..DHCP).for.a |
f8da0 | 75 74 6f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 62 | utoconfiguration.Temporary.disab |
f8dc0 | 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 54 65 6d 70 6f 72 61 72 79 | le.this.RADIUS.server..Temporary |
f8de0 | 20 64 69 73 61 62 6c 65 20 74 68 69 73 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 49 74 20 | .disable.this.RADIUS.server..It. |
f8e00 | 77 6f 6e 27 74 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 6d 70 6f 72 61 72 79 20 64 69 73 61 | won't.be.queried..Temporary.disa |
f8e20 | 62 6c 65 20 74 68 69 73 20 54 41 43 41 43 53 20 73 65 72 76 65 72 2e 20 49 74 20 77 6f 6e 27 74 | ble.this.TACACS.server..It.won't |
f8e40 | 20 62 65 20 71 75 65 72 69 65 64 2e 00 54 65 72 6d 69 6e 61 74 65 20 53 53 4c 00 54 65 73 74 20 | .be.queried..Terminate.SSL.Test. |
f8e60 | 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 | connecting.given.connection-orie |
f8e80 | 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 | nted.interface..`<interface>`.ca |
f8ea0 | 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 | n.be.``pppoe0``.as.the.example.. |
f8ec0 | 54 65 73 74 20 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e | Test.connecting.given.connection |
f8ee0 | 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 | -oriented.interface..`<interface |
f8f00 | 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d | >`.can.be.``sstpc0``.as.the.exam |
f8f20 | 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 67 69 76 65 6e 20 63 6f | ple..Test.disconnecting.given.co |
f8f40 | 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 60 3c 69 | nnection-oriented.interface..`<i |
f8f60 | 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 70 70 70 6f 65 30 60 60 20 61 73 20 | nterface>`.can.be.``pppoe0``.as. |
f8f80 | 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 | the.example..Test.disconnecting. |
f8fa0 | 67 69 76 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 6f 72 69 65 6e 74 65 64 20 69 6e 74 65 72 66 | given.connection-oriented.interf |
f8fc0 | 61 63 65 2e 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 20 63 61 6e 20 62 65 20 60 60 73 73 74 70 | ace..`<interface>`.can.be.``sstp |
f8fe0 | 63 30 60 60 20 61 73 20 74 68 65 20 65 78 61 6d 70 6c 65 2e 00 54 65 73 74 20 66 72 6f 6d 20 74 | c0``.as.the.example..Test.from.t |
f9000 | 68 65 20 49 50 76 36 20 6f 6e 6c 79 20 63 6c 69 65 6e 74 3a 00 54 65 73 74 69 6e 67 20 53 53 54 | he.IPv6.only.client:.Testing.SST |
f9020 | 50 00 54 65 73 74 69 6e 67 20 61 6e 64 20 56 61 6c 69 64 61 74 69 6f 6e 00 54 68 61 6e 6b 73 20 | P.Testing.and.Validation.Thanks. |
f9040 | 74 6f 20 74 68 69 73 20 64 69 73 63 6f 76 65 72 79 2c 20 61 6e 79 20 73 75 62 73 65 71 75 65 6e | to.this.discovery,.any.subsequen |
f9060 | 74 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 50 43 34 20 61 6e 64 20 50 43 35 20 77 69 | t.traffic.between.PC4.and.PC5.wi |
f9080 | 6c 6c 20 6e 6f 74 20 62 65 20 75 73 69 6e 67 20 74 68 65 20 6d 75 6c 74 69 63 61 73 74 2d 61 64 | ll.not.be.using.the.multicast-ad |
f90a0 | 64 72 65 73 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 6c 65 61 76 65 73 20 61 73 20 74 68 65 79 | dress.between.the.leaves.as.they |
f90c0 | 20 62 6f 74 68 20 6b 6e 6f 77 20 62 65 68 69 6e 64 20 77 68 69 63 68 20 4c 65 61 66 20 74 68 65 | .both.know.behind.which.Leaf.the |
f90e0 | 20 50 43 73 20 61 72 65 20 63 6f 6e 6e 65 63 74 65 64 2e 20 54 68 69 73 20 73 61 76 65 73 20 74 | .PCs.are.connected..This.saves.t |
f9100 | 72 61 66 66 69 63 20 61 73 20 6c 65 73 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 | raffic.as.less.multicast.packets |
f9120 | 20 73 65 6e 74 20 72 65 64 75 63 65 73 20 74 68 65 20 6c 6f 61 64 20 6f 6e 20 74 68 65 20 6e 65 | .sent.reduces.the.load.on.the.ne |
f9140 | 74 77 6f 72 6b 2c 20 77 68 69 63 68 20 69 6d 70 72 6f 76 65 73 20 73 63 61 6c 61 62 69 6c 69 74 | twork,.which.improves.scalabilit |
f9160 | 79 20 77 68 65 6e 20 6d 6f 72 65 20 6c 65 61 76 65 73 20 61 72 65 20 61 64 64 65 64 2e 00 54 68 | y.when.more.leaves.are.added..Th |
f9180 | 61 74 20 69 73 20 68 6f 77 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 64 6f 20 74 | at.is.how.it.is.possible.to.do.t |
f91a0 | 68 65 20 73 6f 2d 63 61 6c 6c 65 64 20 22 69 6e 67 72 65 73 73 20 73 68 61 70 69 6e 67 22 2e 00 | he.so-called."ingress.shaping".. |
f91c0 | 54 68 61 74 20 6c 6f 6f 6b 73 20 67 6f 6f 64 20 2d 20 77 65 20 64 65 66 69 6e 65 64 20 32 20 74 | That.looks.good.-.we.defined.2.t |
f91e0 | 75 6e 6e 65 6c 73 20 61 6e 64 20 74 68 65 79 27 72 65 20 62 6f 74 68 20 75 70 20 61 6e 64 20 72 | unnels.and.they're.both.up.and.r |
f9200 | 75 6e 6e 69 6e 67 2e 00 54 68 65 20 3a 61 62 62 72 3a 60 41 53 4e 20 28 41 75 74 6f 6e 6f 6d 6f | unning..The.:abbr:`ASN.(Autonomo |
f9220 | 75 73 20 53 79 73 74 65 6d 20 4e 75 6d 62 65 72 29 60 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 | us.System.Number)`.is.one.of.the |
f9240 | 20 65 73 73 65 6e 74 69 61 6c 20 65 6c 65 6d 65 6e 74 73 20 6f 66 20 42 47 50 2e 20 42 47 50 20 | .essential.elements.of.BGP..BGP. |
f9260 | 69 73 20 61 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f 72 20 72 6f 75 74 69 6e 67 20 70 72 6f | is.a.distance.vector.routing.pro |
f9280 | 74 6f 63 6f 6c 2c 20 61 6e 64 20 74 68 65 20 41 53 2d 50 61 74 68 20 66 72 61 6d 65 77 6f 72 6b | tocol,.and.the.AS-Path.framework |
f92a0 | 20 70 72 6f 76 69 64 65 73 20 64 69 73 74 61 6e 63 65 20 76 65 63 74 6f 72 20 6d 65 74 72 69 63 | .provides.distance.vector.metric |
f92c0 | 20 61 6e 64 20 6c 6f 6f 70 20 64 65 74 65 63 74 69 6f 6e 20 74 6f 20 42 47 50 2e 00 54 68 65 20 | .and.loop.detection.to.BGP..The. |
f92e0 | 3a 61 62 62 72 3a 60 44 4e 50 54 76 36 20 28 44 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 76 36 2d | :abbr:`DNPTv6.(Destination.IPv6- |
f9300 | 74 6f 2d 49 50 76 36 20 4e 65 74 77 6f 72 6b 20 50 72 65 66 69 78 20 54 72 61 6e 73 6c 61 74 69 | to-IPv6.Network.Prefix.Translati |
f9320 | 6f 6e 29 60 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 20 74 72 61 6e 73 6c 61 | on)`.destination.address.transla |
f9340 | 74 69 6f 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 75 73 65 64 20 69 6e 20 73 63 65 6e 61 72 69 | tion.function.is.used.in.scenari |
f9360 | 6f 73 20 77 68 65 72 65 20 74 68 65 20 73 65 72 76 65 72 20 69 6e 20 74 68 65 20 69 6e 74 65 72 | os.where.the.server.in.the.inter |
f9380 | 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 70 72 6f 76 69 64 65 73 20 73 65 72 76 69 63 65 73 20 74 6f | nal.network.provides.services.to |
f93a0 | 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2c 20 73 75 63 68 20 61 73 20 70 | .the.external.network,.such.as.p |
f93c0 | 72 6f 76 69 64 69 6e 67 20 57 65 62 20 73 65 72 76 69 63 65 73 20 6f 72 20 46 54 50 20 73 65 72 | roviding.Web.services.or.FTP.ser |
f93e0 | 76 69 63 65 73 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 42 | vices.to.the.external.network..B |
f9400 | 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 6d 61 70 70 69 6e 67 20 72 65 6c 61 74 69 | y.configuring.the.mapping.relati |
f9420 | 6f 6e 73 68 69 70 20 62 65 74 77 65 65 6e 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 73 65 72 76 | onship.between.the.internal.serv |
f9440 | 65 72 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 | er.address.and.the.external.netw |
f9460 | 6f 72 6b 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 | ork.address.on.the.external.netw |
f9480 | 6f 72 6b 20 73 69 64 65 20 69 6e 74 65 72 66 61 63 65 20 6f 66 20 74 68 65 20 4e 41 54 36 36 20 | ork.side.interface.of.the.NAT66. |
f94a0 | 64 65 76 69 63 65 2c 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 75 73 65 72 73 20 63 | device,.external.network.users.c |
f94c0 | 61 6e 20 61 63 63 65 73 73 20 74 68 65 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 73 | an.access.the.internal.network.s |
f94e0 | 65 72 76 65 72 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 73 69 67 6e 61 74 65 64 20 65 78 74 | erver.through.the.designated.ext |
f9500 | 65 72 6e 61 6c 20 6e 65 74 77 6f 72 6b 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 3a 61 62 62 72 | ernal.network.address..The.:abbr |
f9520 | 3a 60 4d 50 4c 53 20 28 4d 75 6c 74 69 2d 50 72 6f 74 6f 63 6f 6c 20 4c 61 62 65 6c 20 53 77 69 | :`MPLS.(Multi-Protocol.Label.Swi |
f9540 | 74 63 68 69 6e 67 29 60 20 61 72 63 68 69 74 65 63 74 75 72 65 20 64 6f 65 73 20 6e 6f 74 20 61 | tching)`.architecture.does.not.a |
f9560 | 73 73 75 6d 65 20 61 20 73 69 6e 67 6c 65 20 70 72 6f 74 6f 63 6f 6c 20 74 6f 20 63 72 65 61 74 | ssume.a.single.protocol.to.creat |
f9580 | 65 20 4d 50 4c 53 20 70 61 74 68 73 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 | e.MPLS.paths..VyOS.supports.the. |
f95a0 | 4c 61 62 65 6c 20 44 69 73 74 72 69 62 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 4c 44 50 | Label.Distribution.Protocol.(LDP |
f95c0 | 29 20 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 20 46 52 52 2c 20 62 61 73 65 64 20 6f | ).as.implemented.by.FRR,.based.o |
f95e0 | 6e 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 54 68 65 20 3a 72 65 66 3a 60 73 6f 75 72 63 65 2d | n.:rfc:`5036`..The.:ref:`source- |
f9600 | 6e 61 74 36 36 60 20 72 75 6c 65 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 | nat66`.rule.replaces.the.source. |
f9620 | 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 70 61 63 6b 65 74 20 61 6e 64 20 63 61 6c 63 75 6c | address.of.the.packet.and.calcul |
f9640 | 61 74 65 73 20 74 68 65 20 63 6f 6e 76 65 72 74 65 64 20 61 64 64 72 65 73 73 20 75 73 69 6e 67 | ates.the.converted.address.using |
f9660 | 20 74 68 65 20 70 72 65 66 69 78 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 74 68 65 20 72 75 6c | .the.prefix.specified.in.the.rul |
f9680 | 65 2e 00 54 68 65 20 41 52 50 20 6d 6f 6e 69 74 6f 72 20 77 6f 72 6b 73 20 62 79 20 70 65 72 69 | e..The.ARP.monitor.works.by.peri |
f96a0 | 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 69 6e 67 20 74 68 65 20 73 6c 61 76 65 20 64 65 76 69 | odically.checking.the.slave.devi |
f96c0 | 63 65 73 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 74 68 65 79 20 68 61 | ces.to.determine.whether.they.ha |
f96e0 | 76 65 20 73 65 6e 74 20 6f 72 20 72 65 63 65 69 76 65 64 20 74 72 61 66 66 69 63 20 72 65 63 65 | ve.sent.or.received.traffic.rece |
f9700 | 6e 74 6c 79 20 28 74 68 65 20 70 72 65 63 69 73 65 20 63 72 69 74 65 72 69 61 20 64 65 70 65 6e | ntly.(the.precise.criteria.depen |
f9720 | 64 73 20 75 70 6f 6e 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d 6f 64 65 2c 20 61 6e 64 20 74 68 | ds.upon.the.bonding.mode,.and.th |
f9740 | 65 20 73 74 61 74 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 29 2e 20 52 65 67 75 6c 61 72 20 74 | e.state.of.the.slave)..Regular.t |
f9760 | 72 61 66 66 69 63 20 69 73 20 67 65 6e 65 72 61 74 65 64 20 76 69 61 20 41 52 50 20 70 72 6f 62 | raffic.is.generated.via.ARP.prob |
f9780 | 65 73 20 69 73 73 75 65 64 20 66 6f 72 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 73 70 65 63 | es.issued.for.the.addresses.spec |
f97a0 | 69 66 69 65 64 20 62 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 72 70 2d 6d 6f 6e 69 74 6f | ified.by.the.:cfgcmd:`arp-monito |
f97c0 | 72 20 74 61 72 67 65 74 60 20 6f 70 74 69 6f 6e 2e 00 54 68 65 20 41 53 50 20 68 61 73 20 64 6f | r.target`.option..The.ASP.has.do |
f97e0 | 63 75 6d 65 6e 74 65 64 20 74 68 65 69 72 20 49 50 53 65 63 20 72 65 71 75 69 72 65 6d 65 6e 74 | cumented.their.IPSec.requirement |
f9800 | 73 3a 00 54 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f | s:.The.BGP.router.can.connect.to |
f9820 | 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 52 50 4b 49 20 63 61 63 68 65 20 73 65 72 76 65 72 73 20 | .one.or.more.RPKI.cache.servers. |
f9840 | 74 6f 20 72 65 63 65 69 76 65 20 76 61 6c 69 64 61 74 65 64 20 70 72 65 66 69 78 20 74 6f 20 6f | to.receive.validated.prefix.to.o |
f9860 | 72 69 67 69 6e 20 41 53 20 6d 61 70 70 69 6e 67 73 2e 20 41 64 76 61 6e 63 65 64 20 66 61 69 6c | rigin.AS.mappings..Advanced.fail |
f9880 | 6f 76 65 72 20 63 61 6e 20 62 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 62 79 20 73 65 72 76 65 | over.can.be.implemented.by.serve |
f98a0 | 72 20 73 6f 63 6b 65 74 73 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 65 72 65 | r.sockets.with.different.prefere |
f98c0 | 6e 63 65 20 76 61 6c 75 65 73 2e 00 54 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | nce.values..The.CLI.configuratio |
f98e0 | 6e 20 69 73 20 73 61 6d 65 20 61 73 20 6d 65 6e 74 69 6f 6e 65 64 20 69 6e 20 61 62 6f 76 65 20 | n.is.same.as.mentioned.in.above. |
f9900 | 61 72 74 69 63 6c 65 73 2e 20 54 68 65 20 6f 6e 6c 79 20 64 69 66 66 65 72 65 6e 63 65 20 69 73 | articles..The.only.difference.is |
f9920 | 2c 20 74 68 61 74 20 65 61 63 68 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 75 73 65 | ,.that.each.routing.protocol.use |
f9940 | 64 2c 20 6d 75 73 74 20 62 65 20 70 72 65 66 69 78 65 64 20 77 69 74 68 20 74 68 65 20 60 76 72 | d,.must.be.prefixed.with.the.`vr |
f9960 | 66 20 6e 61 6d 65 20 3c 6e 61 6d 65 3e 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 43 4c 4e 53 | f.name.<name>`.command..The.CLNS |
f9980 | 20 61 64 64 72 65 73 73 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 | .address.consists.of.the.followi |
f99a0 | 6e 67 20 70 61 72 74 73 3a 00 54 68 65 20 44 48 43 50 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 | ng.parts:.The.DHCP.unique.identi |
f99c0 | 66 69 65 72 20 28 44 55 49 44 29 20 69 73 20 75 73 65 64 20 62 79 20 61 20 63 6c 69 65 6e 74 20 | fier.(DUID).is.used.by.a.client. |
f99e0 | 74 6f 20 67 65 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 20 44 48 43 50 | to.get.an.IP.address.from.a.DHCP |
f9a00 | 76 36 20 73 65 72 76 65 72 2e 20 49 74 20 68 61 73 20 61 20 32 2d 62 79 74 65 20 44 55 49 44 20 | v6.server..It.has.a.2-byte.DUID. |
f9a20 | 74 79 70 65 20 66 69 65 6c 64 2c 20 61 6e 64 20 61 20 76 61 72 69 61 62 6c 65 2d 6c 65 6e 67 74 | type.field,.and.a.variable-lengt |
f9a40 | 68 20 69 64 65 6e 74 69 66 69 65 72 20 66 69 65 6c 64 20 75 70 20 74 6f 20 31 32 38 20 62 79 74 | h.identifier.field.up.to.128.byt |
f9a60 | 65 73 2e 20 49 74 73 20 61 63 74 75 61 6c 20 6c 65 6e 67 74 68 20 64 65 70 65 6e 64 73 20 6f 6e | es..Its.actual.length.depends.on |
f9a80 | 20 69 74 73 20 74 79 70 65 2e 20 54 68 65 20 73 65 72 76 65 72 20 63 6f 6d 70 61 72 65 73 20 74 | .its.type..The.server.compares.t |
f9aa0 | 68 65 20 44 55 49 44 20 77 69 74 68 20 69 74 73 20 64 61 74 61 62 61 73 65 20 61 6e 64 20 64 65 | he.DUID.with.its.database.and.de |
f9ac0 | 6c 69 76 65 72 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 61 74 61 20 28 61 64 64 72 65 | livers.configuration.data.(addre |
f9ae0 | 73 73 2c 20 6c 65 61 73 65 20 74 69 6d 65 73 2c 20 44 4e 53 20 73 65 72 76 65 72 73 2c 20 65 74 | ss,.lease.times,.DNS.servers,.et |
f9b00 | 63 2e 29 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 54 68 65 20 44 4e 20 61 6e 64 20 70 61 | c.).to.the.client..The.DN.and.pa |
f9b20 | 73 73 77 6f 72 64 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 65 72 66 6f 72 6d 69 | ssword.to.bind.as.while.performi |
f9b40 | 6e 67 20 73 65 61 72 63 68 65 73 2e 00 54 68 65 20 44 4e 20 61 6e 64 20 70 61 73 73 77 6f 72 64 | ng.searches..The.DN.and.password |
f9b60 | 20 74 6f 20 62 69 6e 64 20 61 73 20 77 68 69 6c 65 20 70 65 72 66 6f 72 6d 69 6e 67 20 73 65 61 | .to.bind.as.while.performing.sea |
f9b80 | 72 63 68 65 73 2e 20 41 73 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 6e 65 65 64 73 20 74 6f 20 | rches..As.the.password.needs.to. |
f9ba0 | 62 65 20 70 72 69 6e 74 65 64 20 69 6e 20 70 6c 61 69 6e 20 74 65 78 74 20 69 6e 20 79 6f 75 72 | be.printed.in.plain.text.in.your |
f9bc0 | 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 20 69 73 20 73 74 72 6f 6e | .Squid.configuration.it.is.stron |
f9be0 | 67 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 61 20 61 63 63 6f 75 6e 74 | gly.recommended.to.use.a.account |
f9c00 | 20 77 69 74 68 20 6d 69 6e 69 6d 61 6c 20 61 73 73 6f 63 69 61 74 65 64 20 70 72 69 76 69 6c 65 | .with.minimal.associated.privile |
f9c20 | 67 65 73 2e 20 54 68 69 73 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 64 61 6d 61 67 65 20 69 6e | ges..This.to.limit.the.damage.in |
f9c40 | 20 63 61 73 65 20 73 6f 6d 65 6f 6e 65 20 63 6f 75 6c 64 20 67 65 74 20 68 6f 6c 64 20 6f 66 20 | .case.someone.could.get.hold.of. |
f9c60 | 61 20 63 6f 70 79 20 6f 66 20 79 6f 75 72 20 53 71 75 69 64 20 63 6f 6e 66 69 67 75 72 61 74 69 | a.copy.of.your.Squid.configurati |
f9c80 | 6f 6e 20 66 69 6c 65 2e 00 54 68 65 20 46 51 2d 43 6f 44 65 6c 20 70 6f 6c 69 63 79 20 64 69 73 | on.file..The.FQ-CoDel.policy.dis |
f9ca0 | 74 72 69 62 75 74 65 73 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 74 6f 20 31 30 32 34 20 46 | tributes.the.traffic.into.1024.F |
f9cc0 | 49 46 4f 20 71 75 65 75 65 73 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 70 72 6f 76 69 64 65 20 | IFO.queues.and.tries.to.provide. |
f9ce0 | 67 6f 6f 64 20 73 65 72 76 69 63 65 20 62 65 74 77 65 65 6e 20 61 6c 6c 20 6f 66 20 74 68 65 6d | good.service.between.all.of.them |
f9d00 | 2e 20 49 74 20 61 6c 73 6f 20 74 72 69 65 73 20 74 6f 20 6b 65 65 70 20 74 68 65 20 6c 65 6e 67 | ..It.also.tries.to.keep.the.leng |
f9d20 | 74 68 20 6f 66 20 61 6c 6c 20 74 68 65 20 71 75 65 75 65 73 20 73 68 6f 72 74 2e 00 54 68 65 20 | th.of.all.the.queues.short..The. |
f9d40 | 48 54 54 50 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 20 6f 6e 20 54 43 50 20 70 6f 72 74 20 | HTTP.service.listen.on.TCP.port. |
f9d60 | 38 30 2e 00 54 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 69 6e 74 65 72 6e | 80..The.IP.address.of.the.intern |
f9d80 | 61 6c 20 73 79 73 74 65 6d 20 77 65 20 77 69 73 68 20 74 6f 20 66 6f 72 77 61 72 64 20 74 72 61 | al.system.we.wish.to.forward.tra |
f9da0 | 66 66 69 63 20 74 6f 2e 00 54 68 65 20 49 6e 74 65 6c 20 41 58 32 30 30 20 63 61 72 64 20 64 6f | ffic.to..The.Intel.AX200.card.do |
f9dc0 | 65 73 20 6e 6f 74 20 77 6f 72 6b 20 6f 75 74 20 6f 66 20 74 68 65 20 62 6f 78 20 69 6e 20 41 50 | es.not.work.out.of.the.box.in.AP |
f9de0 | 20 6d 6f 64 65 2c 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 75 6e 69 78 2e 73 74 61 63 6b 65 78 63 | .mode,.see.https://unix.stackexc |
f9e00 | 68 61 6e 67 65 2e 63 6f 6d 2f 71 75 65 73 74 69 6f 6e 73 2f 35 39 38 32 37 35 2f 69 6e 74 65 6c | hange.com/questions/598275/intel |
f9e20 | 2d 61 78 32 30 30 2d 61 70 2d 6d 6f 64 65 2e 20 59 6f 75 20 63 61 6e 20 73 74 69 6c 6c 20 70 75 | -ax200-ap-mode..You.can.still.pu |
f9e40 | 74 20 74 68 69 73 20 63 61 72 64 20 69 6e 74 6f 20 41 50 20 6d 6f 64 65 20 75 73 69 6e 67 20 74 | t.this.card.into.AP.mode.using.t |
f9e60 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 65 20 | he.following.configuration:.The. |
f9e80 | 4f 49 44 20 60 60 2e 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 38 30 37 32 2e 31 2e 33 2e 32 2e 33 2e | OID.``.1.3.6.1.4.1.8072.1.3.2.3. |
f9ea0 | 31 2e 31 2e 34 2e 31 31 36 2e 31 30 31 2e 31 31 35 2e 31 31 36 60 60 2c 20 6f 6e 63 65 20 63 61 | 1.1.4.116.101.115.116``,.once.ca |
f9ec0 | 6c 6c 65 64 2c 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 6f 75 74 70 75 74 20 6f 66 | lled,.will.contain.the.output.of |
f9ee0 | 20 74 68 65 20 65 78 74 65 6e 73 69 6f 6e 2e 00 54 68 65 20 50 6f 69 6e 74 2d 74 6f 2d 50 6f 69 | .the.extension..The.Point-to-Poi |
f9f00 | 6e 74 20 54 75 6e 6e 65 6c 69 6e 67 20 50 72 6f 74 6f 63 6f 6c 20 28 50 50 54 50 5f 29 20 68 61 | nt.Tunneling.Protocol.(PPTP_).ha |
f9f20 | 73 20 62 65 65 6e 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 69 6e 20 56 79 4f 53 20 6f 6e 6c 79 20 | s.been.implemented.in.VyOS.only. |
f9f40 | 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e 20 50 50 54 | for.backwards.compatibility..PPT |
f9f60 | 50 20 68 61 73 20 6d 61 6e 79 20 77 65 6c 6c 20 6b 6e 6f 77 6e 20 73 65 63 75 72 69 74 79 20 69 | P.has.many.well.known.security.i |
f9f80 | 73 73 75 65 73 20 61 6e 64 20 79 6f 75 20 73 68 6f 75 6c 64 20 75 73 65 20 6f 6e 65 20 6f 66 20 | ssues.and.you.should.use.one.of. |
f9fa0 | 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 6e 65 77 20 56 50 4e 20 69 6d 70 6c 65 6d 65 6e 74 | the.many.other.new.VPN.implement |
f9fc0 | 61 74 69 6f 6e 73 2e 00 54 68 65 20 50 6f 77 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 20 68 61 | ations..The.PowerDNS.recursor.ha |
f9fe0 | 73 20 35 20 64 69 66 66 65 72 65 6e 74 20 6c 65 76 65 6c 73 20 6f 66 20 44 4e 53 53 45 43 20 70 | s.5.different.levels.of.DNSSEC.p |
fa000 | 72 6f 63 65 73 73 69 6e 67 2c 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 68 | rocessing,.which.can.be.set.with |
fa020 | 20 74 68 65 20 64 6e 73 73 65 63 20 73 65 74 74 69 6e 67 2e 20 49 6e 20 6f 72 64 65 72 20 66 72 | .the.dnssec.setting..In.order.fr |
fa040 | 6f 6d 20 6c 65 61 73 74 20 74 6f 20 6d 6f 73 74 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 74 68 65 | om.least.to.most.processing,.the |
fa060 | 73 65 20 61 72 65 3a 00 54 68 65 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 69 73 20 61 20 | se.are:.The.Priority.Queue.is.a. |
fa080 | 63 6c 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 69 6e 67 20 70 6f 6c 69 63 79 2e 20 49 74 20 64 | classful.scheduling.policy..It.d |
fa0a0 | 6f 65 73 20 6e 6f 74 20 64 65 6c 61 79 20 70 61 63 6b 65 74 73 20 28 50 72 69 6f 72 69 74 79 20 | oes.not.delay.packets.(Priority. |
fa0c0 | 51 75 65 75 65 20 69 73 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 29 2c 20 | Queue.is.not.a.shaping.policy),. |
fa0e0 | 69 74 20 73 69 6d 70 6c 79 20 64 65 71 75 65 75 65 73 20 70 61 63 6b 65 74 73 20 61 63 63 6f 72 | it.simply.dequeues.packets.accor |
fa100 | 64 69 6e 67 20 74 6f 20 74 68 65 69 72 20 70 72 69 6f 72 69 74 79 2e 00 54 68 65 20 52 41 44 49 | ding.to.their.priority..The.RADI |
fa120 | 55 53 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 65 61 74 75 72 65 20 6d 75 73 74 20 62 65 20 75 73 | US.accounting.feature.must.be.us |
fa140 | 65 64 20 77 69 74 68 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e 65 63 74 20 61 75 74 68 65 6e 74 69 | ed.with.the.OpenConnect.authenti |
fa160 | 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 2e 20 49 74 20 63 61 6e 6e 6f 74 20 62 65 | cation.mode.RADIUS..It.cannot.be |
fa180 | 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e | .used.with.local.authentication. |
fa1a0 | 20 59 6f 75 20 6d 75 73 74 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 4f 70 65 6e 43 6f 6e 6e | .You.must.configure.the.OpenConn |
fa1c0 | 65 63 74 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 74 6f 20 22 72 61 64 69 | ect.authentication.mode.to."radi |
fa1e0 | 75 73 22 2e 00 54 68 65 20 52 41 44 49 55 53 20 64 69 63 74 69 6f 6e 61 72 69 65 73 20 69 6e 20 | us"..The.RADIUS.dictionaries.in. |
fa200 | 56 79 4f 53 20 61 72 65 20 6c 6f 63 61 74 65 64 20 61 74 20 60 60 2f 75 73 72 2f 73 68 61 72 65 | VyOS.are.located.at.``/usr/share |
fa220 | 2f 61 63 63 65 6c 2d 70 70 70 2f 72 61 64 69 75 73 2f 60 60 00 54 68 65 20 53 52 20 73 65 67 6d | /accel-ppp/radius/``.The.SR.segm |
fa240 | 65 6e 74 73 20 61 72 65 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b | ents.are.portions.of.the.network |
fa260 | 20 70 61 74 68 20 74 61 6b 65 6e 20 62 79 20 74 68 65 20 70 61 63 6b 65 74 2c 20 61 6e 64 20 61 | .path.taken.by.the.packet,.and.a |
fa280 | 72 65 20 63 61 6c 6c 65 64 20 53 49 44 73 2e 20 41 74 20 65 61 63 68 20 6e 6f 64 65 2c 20 74 68 | re.called.SIDs..At.each.node,.th |
fa2a0 | 65 20 66 69 72 73 74 20 53 49 44 20 6f 66 20 74 68 65 20 6c 69 73 74 20 69 73 20 72 65 61 64 2c | e.first.SID.of.the.list.is.read, |
fa2c0 | 20 65 78 65 63 75 74 65 64 20 61 73 20 61 20 66 6f 72 77 61 72 64 69 6e 67 20 66 75 6e 63 74 69 | .executed.as.a.forwarding.functi |
fa2e0 | 6f 6e 2c 20 61 6e 64 20 6d 61 79 20 62 65 20 70 6f 70 70 65 64 20 74 6f 20 6c 65 74 20 74 68 65 | on,.and.may.be.popped.to.let.the |
fa300 | 20 6e 65 78 74 20 6e 6f 64 65 20 72 65 61 64 20 74 68 65 20 6e 65 78 74 20 53 49 44 20 6f 66 20 | .next.node.read.the.next.SID.of. |
fa320 | 74 68 65 20 6c 69 73 74 2e 20 54 68 65 20 53 49 44 20 6c 69 73 74 20 63 6f 6d 70 6c 65 74 65 6c | the.list..The.SID.list.completel |
fa340 | 79 20 64 65 74 65 72 6d 69 6e 65 73 20 74 68 65 20 70 61 74 68 20 77 68 65 72 65 20 74 68 65 20 | y.determines.the.path.where.the. |
fa360 | 70 61 63 6b 65 74 20 69 73 20 66 6f 72 77 61 72 64 65 64 2e 00 54 68 65 20 53 68 61 70 65 72 20 | packet.is.forwarded..The.Shaper. |
fa380 | 70 6f 6c 69 63 79 20 64 6f 65 73 20 6e 6f 74 20 67 75 61 72 61 6e 74 65 65 20 61 20 6c 6f 77 20 | policy.does.not.guarantee.a.low. |
fa3a0 | 64 65 6c 61 79 2c 20 62 75 74 20 69 74 20 64 6f 65 73 20 67 75 61 72 61 6e 74 65 65 20 62 61 6e | delay,.but.it.does.guarantee.ban |
fa3c0 | 64 77 69 64 74 68 20 74 6f 20 64 69 66 66 65 72 65 6e 74 20 74 72 61 66 66 69 63 20 63 6c 61 73 | dwidth.to.different.traffic.clas |
fa3e0 | 73 65 73 20 61 6e 64 20 61 6c 73 6f 20 6c 65 74 73 20 79 6f 75 20 64 65 63 69 64 65 20 68 6f 77 | ses.and.also.lets.you.decide.how |
fa400 | 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6d 6f 72 65 20 74 72 61 66 66 69 63 20 6f 6e 63 65 20 74 | .to.allocate.more.traffic.once.t |
fa420 | 68 65 20 67 75 61 72 61 6e 74 65 65 73 20 61 72 65 20 6d 65 74 2e 00 54 68 65 20 55 44 50 20 70 | he.guarantees.are.met..The.UDP.p |
fa440 | 6f 72 74 20 6e 75 6d 62 65 72 20 75 73 65 64 20 62 79 20 79 6f 75 72 20 61 70 6c 6c 69 63 61 74 | ort.number.used.by.your.apllicat |
fa460 | 69 6f 6e 2e 20 49 74 20 69 73 20 6d 61 6e 64 61 74 6f 72 79 20 66 6f 72 20 74 68 69 73 20 6b 69 | ion..It.is.mandatory.for.this.ki |
fa480 | 6e 64 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 2e 00 54 68 65 20 56 58 4c 41 4e 20 73 70 65 63 69 | nd.of.operation..The.VXLAN.speci |
fa4a0 | 66 69 63 61 74 69 6f 6e 20 77 61 73 20 6f 72 69 67 69 6e 61 6c 6c 79 20 63 72 65 61 74 65 64 20 | fication.was.originally.created. |
fa4c0 | 62 79 20 56 4d 77 61 72 65 2c 20 41 72 69 73 74 61 20 4e 65 74 77 6f 72 6b 73 20 61 6e 64 20 43 | by.VMware,.Arista.Networks.and.C |
fa4e0 | 69 73 63 6f 2e 20 4f 74 68 65 72 20 62 61 63 6b 65 72 73 20 6f 66 20 74 68 65 20 56 58 4c 41 4e | isco..Other.backers.of.the.VXLAN |
fa500 | 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 6e 63 6c 75 64 65 20 48 75 61 77 65 69 2c 20 42 72 6f 61 | .technology.include.Huawei,.Broa |
fa520 | 64 63 6f 6d 2c 20 43 69 74 72 69 78 2c 20 50 69 63 61 38 2c 20 42 69 67 20 53 77 69 74 63 68 20 | dcom,.Citrix,.Pica8,.Big.Switch. |
fa540 | 4e 65 74 77 6f 72 6b 73 2c 20 43 75 6d 75 6c 75 73 20 4e 65 74 77 6f 72 6b 73 2c 20 44 65 6c 6c | Networks,.Cumulus.Networks,.Dell |
fa560 | 20 45 4d 43 2c 20 45 72 69 63 73 73 6f 6e 2c 20 4d 65 6c 6c 61 6e 6f 78 2c 20 46 72 65 65 42 53 | .EMC,.Ericsson,.Mellanox,.FreeBS |
fa580 | 44 2c 20 4f 70 65 6e 42 53 44 2c 20 52 65 64 20 48 61 74 2c 20 4a 6f 79 65 6e 74 2c 20 61 6e 64 | D,.OpenBSD,.Red.Hat,.Joyent,.and |
fa5a0 | 20 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 2e 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 | .Juniper.Networks..The.VyOS.DNS. |
fa5c0 | 66 6f 72 77 61 72 64 65 72 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 | forwarder.can.also.be.configured |
fa5e0 | 20 74 6f 20 68 6f 73 74 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 72 65 63 6f 72 64 73 20 66 | .to.host.authoritative.records.f |
fa600 | 6f 72 20 61 20 64 6f 6d 61 69 6e 2e 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 | or.a.domain..The.VyOS.DNS.forwar |
fa620 | 64 65 72 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 20 75 70 73 74 72 65 61 6d | der.does.not.require.an.upstream |
fa640 | 20 44 4e 53 20 73 65 72 76 65 72 2e 20 49 74 20 63 61 6e 20 73 65 72 76 65 20 61 73 20 61 20 66 | .DNS.server..It.can.serve.as.a.f |
fa660 | 75 6c 6c 20 72 65 63 75 72 73 69 76 65 20 44 4e 53 20 73 65 72 76 65 72 20 2d 20 62 75 74 20 69 | ull.recursive.DNS.server.-.but.i |
fa680 | 74 20 63 61 6e 20 61 6c 73 6f 20 66 6f 72 77 61 72 64 20 71 75 65 72 69 65 73 20 74 6f 20 63 6f | t.can.also.forward.queries.to.co |
fa6a0 | 6e 66 69 67 75 72 61 62 6c 65 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 73 2e | nfigurable.upstream.DNS.servers. |
fa6c0 | 20 42 79 20 6e 6f 74 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 79 20 75 70 73 74 72 65 61 6d | .By.not.configuring.any.upstream |
fa6e0 | 20 44 4e 53 20 73 65 72 76 65 72 73 20 79 6f 75 20 61 6c 73 6f 20 61 76 6f 69 64 20 62 65 69 6e | .DNS.servers.you.also.avoid.bein |
fa700 | 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6f 66 20 79 6f 75 | g.tracked.by.the.provider.of.you |
fa720 | 72 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 | r.upstream.DNS.server..The.VyOS. |
fa740 | 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6f 6e 6c 79 20 61 63 63 65 70 74 20 6c | DNS.forwarder.will.only.accept.l |
fa760 | 6f 6f 6b 75 70 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 74 68 65 20 4c 41 4e 20 73 75 62 6e | ookup.requests.from.the.LAN.subn |
fa780 | 65 74 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 30 2f 32 34 20 61 6e 64 20 32 30 30 31 3a 64 62 | ets.-.192.168.1.0/24.and.2001:db |
fa7a0 | 38 3a 3a 2f 36 34 00 54 68 65 20 56 79 4f 53 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 | 8::/64.The.VyOS.DNS.forwarder.wi |
fa7c0 | 6c 6c 20 6f 6e 6c 79 20 6c 69 73 74 65 6e 20 66 6f 72 20 72 65 71 75 65 73 74 73 20 6f 6e 20 74 | ll.only.listen.for.requests.on.t |
fa7e0 | 68 65 20 65 74 68 31 20 28 4c 41 4e 29 20 69 6e 74 65 72 66 61 63 65 20 61 64 64 72 65 73 73 65 | he.eth1.(LAN).interface.addresse |
fa800 | 73 20 2d 20 31 39 32 2e 31 36 38 2e 31 2e 32 35 34 20 66 6f 72 20 49 50 76 34 20 61 6e 64 20 32 | s.-.192.168.1.254.for.IPv4.and.2 |
fa820 | 30 30 31 3a 64 62 38 3a 3a 66 66 66 66 20 66 6f 72 20 49 50 76 36 00 54 68 65 20 56 79 4f 53 20 | 001:db8::ffff.for.IPv6.The.VyOS. |
fa840 | 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 70 61 73 73 20 72 65 76 65 72 73 65 20 | DNS.forwarder.will.pass.reverse. |
fa860 | 6c 6f 6f 6b 75 70 73 20 66 6f 72 20 20 31 30 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 | lookups.for..10.in-addr.arpa,.16 |
fa880 | 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e | 8.192.in-addr.arpa,.16-31.172.in |
fa8a0 | 2d 61 64 64 72 2e 61 72 70 61 20 7a 6f 6e 65 73 20 74 6f 20 75 70 73 74 72 65 61 6d 20 73 65 72 | -addr.arpa.zones.to.upstream.ser |
fa8c0 | 76 65 72 2e 00 54 68 65 20 56 79 4f 53 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 20 63 61 6e 20 | ver..The.VyOS.PKI.subsystem.can. |
fa8e0 | 61 6c 73 6f 20 62 65 20 75 73 65 64 20 74 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 72 65 | also.be.used.to.automatically.re |
fa900 | 74 72 69 65 76 65 20 43 65 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 74 68 65 20 3a 61 | trieve.Certificates.using.the.:a |
fa920 | 62 62 72 3a 60 41 43 4d 45 20 28 41 75 74 6f 6d 61 74 69 63 20 43 65 72 74 69 66 69 63 61 74 65 | bbr:`ACME.(Automatic.Certificate |
fa940 | 20 4d 61 6e 61 67 65 6d 65 6e 74 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 29 60 20 70 72 6f 74 6f 63 | .Management.Environment)`.protoc |
fa960 | 6f 6c 2e 00 54 68 65 20 56 79 4f 53 20 63 6f 6e 74 61 69 6e 65 72 20 69 6d 70 6c 65 6d 65 6e 74 | ol..The.VyOS.container.implement |
fa980 | 61 74 69 6f 6e 20 69 73 20 62 61 73 65 64 20 6f 6e 20 60 50 6f 64 6d 61 6e 3c 68 74 74 70 73 3a | ation.is.based.on.`Podman<https: |
fa9a0 | 2f 2f 70 6f 64 6d 61 6e 2e 69 6f 2f 3e 60 20 61 73 20 61 20 64 65 61 6d 6f 6e 6c 65 73 73 20 63 | //podman.io/>`.as.a.deamonless.c |
fa9c0 | 6f 6e 74 61 69 6e 65 72 20 65 6e 67 69 6e 65 2e 00 54 68 65 20 57 41 50 20 69 6e 20 74 68 69 73 | ontainer.engine..The.WAP.in.this |
fa9e0 | 20 65 78 61 6d 70 6c 65 20 68 61 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 68 61 72 61 | .example.has.the.following.chara |
faa00 | 63 74 65 72 69 73 74 69 63 73 3a 00 54 68 65 20 57 69 72 65 6c 65 73 73 20 57 69 64 65 2d 41 72 | cteristics:.The.Wireless.Wide-Ar |
faa20 | 65 61 2d 4e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 61 63 | ea-Network.interface.provides.ac |
faa40 | 63 65 73 73 20 28 74 68 72 6f 75 67 68 20 61 20 77 69 72 65 6c 65 73 73 20 6d 6f 64 65 6d 2f 77 | cess.(through.a.wireless.modem/w |
faa60 | 77 61 6e 29 20 74 6f 20 77 69 72 65 6c 65 73 73 20 6e 65 74 77 6f 72 6b 73 20 70 72 6f 76 69 64 | wan).to.wireless.networks.provid |
faa80 | 65 64 20 62 79 20 76 61 72 69 6f 75 73 20 63 65 6c 6c 75 6c 61 72 20 70 72 6f 76 69 64 65 72 73 | ed.by.various.cellular.providers |
faaa0 | 2e 00 54 68 65 20 60 60 43 44 60 60 2d 62 69 74 20 69 73 20 68 6f 6e 6f 72 65 64 20 63 6f 72 72 | ..The.``CD``-bit.is.honored.corr |
faac0 | 65 63 74 6c 79 20 66 6f 72 20 70 72 6f 63 65 73 73 20 61 6e 64 20 76 61 6c 69 64 61 74 65 2e 20 | ectly.for.process.and.validate.. |
faae0 | 46 6f 72 20 6c 6f 67 2d 66 61 69 6c 2c 20 66 61 69 6c 75 72 65 73 20 77 69 6c 6c 20 62 65 20 6c | For.log-fail,.failures.will.be.l |
fab00 | 6f 67 67 65 64 20 74 6f 6f 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 63 61 6e 20 62 | ogged.too..The.``address``.can.b |
fab20 | 65 20 63 6f 6e 66 69 67 75 72 65 64 20 65 69 74 68 65 72 20 6f 6e 20 74 68 65 20 56 52 52 50 20 | e.configured.either.on.the.VRRP. |
fab40 | 69 6e 74 65 72 66 61 63 65 20 6f 72 20 6f 6e 20 6e 6f 74 20 56 52 52 50 20 69 6e 74 65 72 66 61 | interface.or.on.not.VRRP.interfa |
fab60 | 63 65 2e 00 54 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 70 61 72 61 6d 65 74 65 72 20 63 61 | ce..The.``address``.parameter.ca |
fab80 | 6e 20 62 65 20 65 69 74 68 65 72 20 61 6e 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 | n.be.either.an.IPv4.or.IPv6.addr |
faba0 | 65 73 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 6d 69 78 20 49 50 76 34 20 61 6e | ess,.but.you.can.not.mix.IPv4.an |
fabc0 | 64 20 49 50 76 36 20 69 6e 20 74 68 65 20 73 61 6d 65 20 67 72 6f 75 70 2c 20 61 6e 64 20 77 69 | d.IPv6.in.the.same.group,.and.wi |
fabe0 | 6c 6c 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 67 72 6f 75 70 73 20 77 69 74 68 20 64 69 | ll.need.to.create.groups.with.di |
fac00 | 66 66 65 72 65 6e 74 20 56 52 49 44 73 20 73 70 65 63 69 61 6c 6c 79 20 66 6f 72 20 49 50 76 34 | fferent.VRIDs.specially.for.IPv4 |
fac20 | 20 61 6e 64 20 49 50 76 36 2e 20 49 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 49 50 | .and.IPv6..If.you.want.to.use.IP |
fac40 | 76 34 20 2b 20 49 50 76 36 20 61 64 64 72 65 73 73 20 79 6f 75 20 63 61 6e 20 75 73 65 20 6f 70 | v4.+.IPv6.address.you.can.use.op |
fac60 | 74 69 6f 6e 20 60 60 65 78 63 6c 75 64 65 64 2d 61 64 64 72 65 73 73 60 60 00 54 68 65 20 60 60 | tion.``excluded-address``.The.`` |
fac80 | 62 6b 2d 62 72 69 64 67 65 2d 73 73 6c 60 60 20 62 61 63 6b 65 6e 64 20 63 6f 6e 6e 65 63 74 73 | bk-bridge-ssl``.backend.connects |
faca0 | 20 74 6f 20 73 72 30 31 20 73 65 72 76 65 72 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 76 69 61 20 | .to.sr01.server.on.port.443.via. |
facc0 | 48 54 54 50 53 20 61 6e 64 20 63 68 65 63 6b 73 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 20 | HTTPS.and.checks.backend.server. |
face0 | 68 61 73 20 61 20 76 61 6c 69 64 20 63 65 72 74 69 66 69 63 61 74 65 20 74 72 75 73 74 65 64 20 | has.a.valid.certificate.trusted. |
fad00 | 62 79 20 43 41 20 60 60 63 61 63 65 72 74 60 60 00 54 68 65 20 60 60 68 74 74 70 60 60 20 73 65 | by.CA.``cacert``.The.``http``.se |
fad20 | 72 76 69 63 65 20 69 73 20 6c 65 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 | rvice.is.lestens.on.port.80.and. |
fad40 | 66 6f 72 63 65 20 72 65 64 69 72 65 63 74 73 20 66 72 6f 6d 20 48 54 54 50 20 74 6f 20 48 54 54 | force.redirects.from.HTTP.to.HTT |
fad60 | 50 53 2e 00 54 68 65 20 60 60 68 74 74 70 60 60 20 73 65 72 76 69 63 65 20 69 73 20 6c 69 73 74 | PS..The.``http``.service.is.list |
fad80 | 65 6e 73 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 66 6f 72 63 65 20 72 65 64 69 72 65 63 | ens.on.port.80.and.force.redirec |
fada0 | 74 73 20 66 72 6f 6d 20 48 54 54 50 20 74 6f 20 48 54 54 50 53 2e 00 54 68 65 20 60 60 68 74 74 | ts.from.HTTP.to.HTTPS..The.``htt |
fadc0 | 70 73 60 60 20 73 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 | ps``.service.listens.on.port.443 |
fade0 | 20 77 69 74 68 20 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 62 72 69 64 67 65 2d 73 73 6c 60 60 20 | .with.backend.``bk-bridge-ssl``. |
fae00 | 74 6f 20 68 61 6e 64 6c 65 20 48 54 54 50 53 20 74 72 61 66 66 69 63 2e 20 49 74 20 75 73 65 73 | to.handle.HTTPS.traffic..It.uses |
fae20 | 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 74 60 60 20 66 6f 72 20 | .certificate.named.``cert``.for. |
fae40 | 53 53 4c 20 74 65 72 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 68 74 74 70 73 60 60 20 73 | SSL.termination..The.``https``.s |
fae60 | 65 72 76 69 63 65 20 6c 69 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 77 69 74 68 20 | ervice.listens.on.port.443.with. |
fae80 | 62 61 63 6b 65 6e 64 20 60 60 62 6b 2d 64 65 66 61 75 6c 74 60 60 20 74 6f 20 68 61 6e 64 6c 65 | backend.``bk-default``.to.handle |
faea0 | 20 48 54 54 50 53 20 74 72 61 66 66 69 63 2e 20 49 74 20 75 73 65 73 20 63 65 72 74 69 66 69 63 | .HTTPS.traffic..It.uses.certific |
faec0 | 61 74 65 20 6e 61 6d 65 64 20 60 60 63 65 72 74 60 60 20 66 6f 72 20 53 53 4c 20 74 65 72 6d 69 | ate.named.``cert``.for.SSL.termi |
faee0 | 6e 61 74 69 6f 6e 2e 00 54 68 65 20 60 60 68 74 74 70 73 60 60 20 73 65 72 76 69 63 65 20 6c 69 | nation..The.``https``.service.li |
faf00 | 73 74 65 6e 73 20 6f 6e 20 70 6f 72 74 20 34 34 33 20 77 69 74 68 20 62 61 63 6b 65 6e 64 20 60 | stens.on.port.443.with.backend.` |
faf20 | 62 6b 2d 64 65 66 61 75 6c 74 60 20 74 6f 20 68 61 6e 64 6c 65 20 48 54 54 50 53 20 74 72 61 66 | bk-default`.to.handle.HTTPS.traf |
faf40 | 66 69 63 2e 20 49 74 20 75 73 65 73 20 63 65 72 74 69 66 69 63 61 74 65 20 6e 61 6d 65 64 20 60 | fic..It.uses.certificate.named.` |
faf60 | 60 63 65 72 74 60 60 20 66 6f 72 20 53 53 4c 20 74 65 72 6d 69 6e 61 74 69 6f 6e 2e 00 54 68 65 | `cert``.for.SSL.termination..The |
faf80 | 20 60 60 70 65 72 73 69 73 74 65 6e 74 2d 74 75 6e 6e 65 6c 60 60 20 64 69 72 65 63 74 69 76 65 | .``persistent-tunnel``.directive |
fafa0 | 20 77 69 6c 6c 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 75 6e 6e | .will.allow.us.to.configure.tunn |
fafc0 | 65 6c 2d 72 65 6c 61 74 65 64 20 61 74 74 72 69 62 75 74 65 73 2c 20 73 75 63 68 20 61 73 20 66 | el-related.attributes,.such.as.f |
fafe0 | 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 61 73 20 77 65 20 77 6f 75 6c 64 20 6f 6e 20 61 6e | irewall.policy.as.we.would.on.an |
fb000 | 79 20 6e 6f 72 6d 61 6c 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 | y.normal.network.interface..The. |
fb020 | 60 60 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 | ``source-address``.must.be.confi |
fb040 | 67 75 72 65 64 20 6f 6e 20 6f 6e 65 20 6f 66 20 56 79 4f 53 20 69 6e 74 65 72 66 61 63 65 2e 20 | gured.on.one.of.VyOS.interface.. |
fb060 | 42 65 73 74 20 70 72 61 63 74 69 63 65 20 77 6f 75 6c 64 20 62 65 20 61 20 6c 6f 6f 70 62 61 63 | Best.practice.would.be.a.loopbac |
fb080 | 6b 20 6f 72 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 60 73 68 6f 77 20 | k.or.dummy.interface..The.`show. |
fb0a0 | 62 72 69 64 67 65 60 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 | bridge`.operational.command.can. |
fb0c0 | 62 65 20 75 73 65 64 20 74 6f 20 64 69 73 70 6c 61 79 20 63 6f 6e 66 69 67 75 72 65 64 20 62 72 | be.used.to.display.configured.br |
fb0e0 | 69 64 67 65 73 3a 00 54 68 65 20 61 62 6f 76 65 20 64 69 72 65 63 74 6f 72 79 20 61 6e 64 20 64 | idges:.The.above.directory.and.d |
fb100 | 65 66 61 75 6c 74 2d 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 61 20 63 68 69 6c 64 20 64 69 | efault-config.must.be.a.child.di |
fb120 | 72 65 63 74 6f 72 79 20 6f 66 20 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2c 20 73 69 6e 63 65 20 66 | rectory.of./config/auth,.since.f |
fb140 | 69 6c 65 73 20 6f 75 74 73 69 64 65 20 74 68 69 73 20 64 69 72 65 63 74 6f 72 79 20 61 72 65 20 | iles.outside.this.directory.are. |
fb160 | 6e 6f 74 20 70 65 72 73 69 73 74 65 64 20 61 66 74 65 72 20 61 6e 20 69 6d 61 67 65 20 75 70 67 | not.persisted.after.an.image.upg |
fb180 | 72 61 64 65 2e 00 54 68 65 20 61 63 74 69 6f 6e 20 63 61 6e 20 62 65 20 3a 00 54 68 65 20 61 64 | rade..The.action.can.be.:.The.ad |
fb1a0 | 64 72 65 73 73 20 74 68 65 20 73 65 72 76 65 72 20 6c 69 73 74 65 6e 73 20 74 6f 20 64 75 72 69 | dress.the.server.listens.to.duri |
fb1c0 | 6e 67 20 68 74 74 70 2d 30 31 20 63 68 61 6c 6c 65 6e 67 65 00 54 68 65 20 61 64 76 61 6e 74 61 | ng.http-01.challenge.The.advanta |
fb1e0 | 67 65 20 6f 66 20 74 68 69 73 20 69 73 20 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 2d 73 65 6c | ge.of.this.is.that.the.route-sel |
fb200 | 65 63 74 69 6f 6e 20 28 61 74 20 74 68 69 73 20 70 6f 69 6e 74 29 20 77 69 6c 6c 20 62 65 20 6d | ection.(at.this.point).will.be.m |
fb220 | 6f 72 65 20 64 65 74 65 72 6d 69 6e 69 73 74 69 63 2e 20 54 68 65 20 64 69 73 61 64 76 61 6e 74 | ore.deterministic..The.disadvant |
fb240 | 61 67 65 20 69 73 20 74 68 61 74 20 61 20 66 65 77 20 6f 72 20 65 76 65 6e 20 6f 6e 65 20 6c 6f | age.is.that.a.few.or.even.one.lo |
fb260 | 77 65 73 74 2d 49 44 20 72 6f 75 74 65 72 20 6d 61 79 20 61 74 74 72 61 63 74 20 61 6c 6c 20 74 | west-ID.router.may.attract.all.t |
fb280 | 72 61 66 66 69 63 20 74 6f 20 6f 74 68 65 72 77 69 73 65 2d 65 71 75 61 6c 20 70 61 74 68 73 20 | raffic.to.otherwise-equal.paths. |
fb2a0 | 62 65 63 61 75 73 65 20 6f 66 20 74 68 69 73 20 63 68 65 63 6b 2e 20 49 74 20 6d 61 79 20 69 6e | because.of.this.check..It.may.in |
fb2c0 | 63 72 65 61 73 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 79 20 6f 66 20 4d 45 44 20 6f 72 | crease.the.possibility.of.MED.or |
fb2e0 | 20 49 47 50 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2c 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 20 6d | .IGP.oscillation,.unless.other.m |
fb300 | 65 61 73 75 72 65 73 20 77 65 72 65 20 74 61 6b 65 6e 20 74 6f 20 61 76 6f 69 64 20 74 68 65 73 | easures.were.taken.to.avoid.thes |
fb320 | 65 2e 20 54 68 65 20 65 78 61 63 74 20 62 65 68 61 76 69 6f 75 72 20 77 69 6c 6c 20 62 65 20 73 | e..The.exact.behaviour.will.be.s |
fb340 | 65 6e 73 69 74 69 76 65 20 74 6f 20 74 68 65 20 69 42 47 50 20 61 6e 64 20 72 65 66 6c 65 63 74 | ensitive.to.the.iBGP.and.reflect |
fb360 | 69 6f 6e 20 74 6f 70 6f 6c 6f 67 79 2e 00 54 68 65 20 61 6c 6c 6f 63 61 74 65 64 20 61 64 64 72 | ion.topology..The.allocated.addr |
fb380 | 65 73 73 20 62 6c 6f 63 6b 20 69 73 20 31 30 30 2e 36 34 2e 30 2e 30 2f 31 30 2e 00 54 68 65 20 | ess.block.is.100.64.0.0/10..The. |
fb3a0 | 61 6d 6f 75 6e 74 20 6f 66 20 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 | amount.of.Duplicate.Address.Dete |
fb3c0 | 63 74 69 6f 6e 20 70 72 6f 62 65 73 20 74 6f 20 73 65 6e 64 2e 00 54 68 65 20 61 74 74 72 69 62 | ction.probes.to.send..The.attrib |
fb3e0 | 75 74 65 73 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 78 2d 6c 69 73 74 60 20 61 6e 64 20 3a | utes.:cfgcmd:`prefix-list`.and.: |
fb400 | 63 66 67 63 6d 64 3a 60 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 60 20 61 72 65 20 6d 75 74 | cfgcmd:`distribute-list`.are.mut |
fb420 | 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 2c 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 63 6f | ually.exclusive,.and.only.one.co |
fb440 | 6d 6d 61 6e 64 20 28 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 20 6f 72 20 70 72 65 66 69 78 | mmand.(distribute-list.or.prefix |
fb460 | 2d 6c 69 73 74 29 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 61 63 68 20 69 6e | -list).can.be.applied.to.each.in |
fb480 | 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 | bound.or.outbound.direction.for. |
fb4a0 | 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 65 20 61 76 61 69 6c | a.particular.neighbor..The.avail |
fb4c0 | 61 62 6c 65 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 3c 6d 61 74 63 68 3e 20 61 72 65 3a 00 54 68 | able.options.for.<match>.are:.Th |
fb4e0 | 65 20 62 65 6c 6f 77 20 72 65 66 65 72 65 6e 63 65 64 20 49 50 20 61 64 64 72 65 73 73 20 60 31 | e.below.referenced.IP.address.`1 |
fb500 | 39 32 2e 30 2e 32 2e 31 60 20 69 73 20 75 73 65 64 20 61 73 20 65 78 61 6d 70 6c 65 20 61 64 64 | 92.0.2.1`.is.used.as.example.add |
fb520 | 72 65 73 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 61 20 67 6c 6f 62 61 6c 20 75 6e 69 63 61 | ress.representing.a.global.unica |
fb540 | 73 74 20 61 64 64 72 65 73 73 20 75 6e 64 65 72 20 77 68 69 63 68 20 74 68 65 20 48 55 42 20 63 | st.address.under.which.the.HUB.c |
fb560 | 61 6e 20 62 65 20 63 6f 6e 74 61 63 74 65 64 20 62 79 20 65 61 63 68 20 61 6e 64 20 65 76 65 72 | an.be.contacted.by.each.and.ever |
fb580 | 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 2e 00 54 68 65 20 62 6f 6e 64 69 6e 67 20 | y.individual.spoke..The.bonding. |
fb5a0 | 69 6e 74 65 72 66 61 63 65 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 74 68 6f 64 20 66 6f 72 20 | interface.provides.a.method.for. |
fb5c0 | 61 67 67 72 65 67 61 74 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 6e 65 74 77 6f 72 6b 20 69 6e 74 | aggregating.multiple.network.int |
fb5e0 | 65 72 66 61 63 65 73 20 69 6e 74 6f 20 61 20 73 69 6e 67 6c 65 20 6c 6f 67 69 63 61 6c 20 22 62 | erfaces.into.a.single.logical."b |
fb600 | 6f 6e 64 65 64 22 20 69 6e 74 65 72 66 61 63 65 2c 20 6f 72 20 4c 41 47 2c 20 6f 72 20 65 74 68 | onded".interface,.or.LAG,.or.eth |
fb620 | 65 72 2d 63 68 61 6e 6e 65 6c 2c 20 6f 72 20 70 6f 72 74 2d 63 68 61 6e 6e 65 6c 2e 20 54 68 65 | er-channel,.or.port-channel..The |
fb640 | 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 | .behavior.of.the.bonded.interfac |
fb660 | 65 73 20 64 65 70 65 6e 64 73 20 75 70 6f 6e 20 74 68 65 20 6d 6f 64 65 3b 20 67 65 6e 65 72 61 | es.depends.upon.the.mode;.genera |
fb680 | 6c 6c 79 20 73 70 65 61 6b 69 6e 67 2c 20 6d 6f 64 65 73 20 70 72 6f 76 69 64 65 20 65 69 74 68 | lly.speaking,.modes.provide.eith |
fb6a0 | 65 72 20 68 6f 74 20 73 74 61 6e 64 62 79 20 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 | er.hot.standby.or.load.balancing |
fb6c0 | 20 73 65 72 76 69 63 65 73 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 6c 69 6e 6b 20 69 6e | .services..Additionally,.link.in |
fb6e0 | 74 65 67 72 69 74 79 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6d 61 79 20 62 65 20 70 65 72 66 6f 72 | tegrity.monitoring.may.be.perfor |
fb700 | 6d 65 64 2e 00 54 68 65 20 63 61 73 65 20 6f 66 20 69 6e 67 72 65 73 73 20 73 68 61 70 69 6e 67 | med..The.case.of.ingress.shaping |
fb720 | 00 54 68 65 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 61 | .The.client,.once.successfully.a |
fb740 | 75 74 68 65 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 | uthenticated,.will.receive.an.IP |
fb760 | 76 34 20 61 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 72 65 73 73 20 74 6f 20 74 65 | v4.and.an.IPv6./64.address.to.te |
fb780 | 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 | rminate.the.PPPoE.endpoint.on.th |
fb7a0 | 65 20 63 6c 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 36 20 73 75 62 6e 65 74 20 66 | e.client.side.and.a./56.subnet.f |
fb7c0 | 6f 72 20 74 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 | or.the.clients.internal.use..The |
fb7e0 | 20 63 6c 69 65 6e 74 2c 20 6f 6e 63 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 61 75 74 68 65 | .client,.once.successfully.authe |
fb800 | 6e 74 69 63 61 74 65 64 2c 20 77 69 6c 6c 20 72 65 63 65 69 76 65 20 61 6e 20 49 50 76 34 20 61 | nticated,.will.receive.an.IPv4.a |
fb820 | 6e 64 20 61 6e 20 49 50 76 36 20 2f 36 34 20 61 64 64 72 65 73 73 20 74 6f 20 74 65 72 6d 69 6e | nd.an.IPv6./64.address.to.termin |
fb840 | 61 74 65 20 74 68 65 20 70 70 70 6f 65 20 65 6e 64 70 6f 69 6e 74 20 6f 6e 20 74 68 65 20 63 6c | ate.the.pppoe.endpoint.on.the.cl |
fb860 | 69 65 6e 74 20 73 69 64 65 20 61 6e 64 20 61 20 2f 35 36 20 73 75 62 6e 65 74 20 66 6f 72 20 74 | ient.side.and.a./56.subnet.for.t |
fb880 | 68 65 20 63 6c 69 65 6e 74 73 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2e 00 54 68 65 20 63 6c 69 | he.clients.internal.use..The.cli |
fb8a0 | 65 6e 74 73 20 3a 61 62 62 72 3a 60 43 50 45 20 28 43 75 73 74 6f 6d 65 72 20 50 72 65 6d 69 73 | ents.:abbr:`CPE.(Customer.Premis |
fb8c0 | 65 73 20 45 71 75 69 70 6d 65 6e 74 29 60 20 63 61 6e 20 6e 6f 77 20 63 6f 6d 6d 75 6e 69 63 61 | es.Equipment)`.can.now.communica |
fb8e0 | 74 65 20 76 69 61 20 49 50 76 34 20 6f 72 20 49 50 76 36 2e 20 41 6c 6c 20 64 65 76 69 63 65 73 | te.via.IPv4.or.IPv6..All.devices |
fb900 | 20 62 65 68 69 6e 64 20 60 60 32 30 30 31 3a 64 62 38 3a 3a 61 30 30 3a 32 37 66 66 3a 66 65 32 | .behind.``2001:db8::a00:27ff:fe2 |
fb920 | 66 3a 64 38 30 36 2f 36 34 60 60 20 63 61 6e 20 75 73 65 20 61 64 64 72 65 73 73 65 73 20 66 72 | f:d806/64``.can.use.addresses.fr |
fb940 | 6f 6d 20 60 60 32 30 30 31 3a 64 62 38 3a 31 3a 3a 2f 35 36 60 60 20 61 6e 64 20 63 61 6e 20 67 | om.``2001:db8:1::/56``.and.can.g |
fb960 | 6c 6f 62 61 6c 6c 79 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 6f 75 74 20 74 68 65 20 | lobally.communicate.without.the. |
fb980 | 6e 65 65 64 20 6f 66 20 61 6e 79 20 4e 41 54 20 72 75 6c 65 73 2e 00 54 68 65 20 63 6f 6d 6d 61 | need.of.any.NAT.rules..The.comma |
fb9a0 | 6e 64 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 72 65 67 | nd.:opcmd:`show.interfaces.wireg |
fb9c0 | 75 61 72 64 20 77 67 30 31 20 70 75 62 6c 69 63 2d 6b 65 79 60 20 77 69 6c 6c 20 74 68 65 6e 20 | uard.wg01.public-key`.will.then. |
fb9e0 | 73 68 6f 77 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 2c 20 77 68 69 63 68 20 6e 65 65 64 73 | show.the.public.key,.which.needs |
fba00 | 20 74 6f 20 62 65 20 73 68 61 72 65 64 20 77 69 74 68 20 74 68 65 20 70 65 65 72 2e 00 54 68 65 | .to.be.shared.with.the.peer..The |
fba20 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 67 65 6e 65 72 61 74 65 73 20 61 20 63 6f 6e 66 69 67 | .command.also.generates.a.config |
fba40 | 75 72 61 74 69 6f 6e 20 73 6e 69 70 70 65 64 20 77 68 69 63 68 20 63 61 6e 20 62 65 20 63 6f 70 | uration.snipped.which.can.be.cop |
fba60 | 79 2f 70 61 73 74 65 64 20 69 6e 74 6f 20 74 68 65 20 56 79 4f 53 20 43 4c 49 20 69 66 20 6e 65 | y/pasted.into.the.VyOS.CLI.if.ne |
fba80 | 65 64 65 64 2e 20 54 68 65 20 73 75 70 70 6c 69 65 64 20 60 60 3c 6e 61 6d 65 3e 60 60 20 6f 6e | eded..The.supplied.``<name>``.on |
fbaa0 | 20 74 68 65 20 43 4c 49 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 74 68 65 20 70 65 65 72 20 6e 61 | .the.CLI.will.become.the.peer.na |
fbac0 | 6d 65 20 69 6e 20 74 68 65 20 73 6e 69 70 70 65 74 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 62 | me.in.the.snippet..The.command.b |
fbae0 | 65 6c 6f 77 20 65 6e 61 62 6c 65 73 20 69 74 2c 20 61 73 73 75 6d 69 6e 67 20 74 68 65 20 52 41 | elow.enables.it,.assuming.the.RA |
fbb00 | 44 49 55 53 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 68 61 73 20 62 65 65 6e 20 73 65 74 75 70 20 61 | DIUS.connection.has.been.setup.a |
fbb20 | 6e 64 20 69 73 20 77 6f 72 6b 69 6e 67 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c | nd.is.working..The.command.displ |
fbb40 | 61 79 73 20 63 75 72 72 65 6e 74 20 52 49 50 20 73 74 61 74 75 73 2e 20 49 74 20 69 6e 63 6c 75 | ays.current.RIP.status..It.inclu |
fbb60 | 64 65 73 20 52 49 50 20 74 69 6d 65 72 2c 20 66 69 6c 74 65 72 69 6e 67 2c 20 76 65 72 73 69 6f | des.RIP.timer,.filtering,.versio |
fbb80 | 6e 2c 20 52 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 52 49 50 | n,.RIP.enabled.interface.and.RIP |
fbba0 | 20 70 65 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 65 20 63 6f 6d 6d 61 6e 64 20 70 | .peer.information..The.command.p |
fbbc0 | 6f 6e 20 54 45 53 54 55 4e 4e 45 4c 20 65 73 74 61 62 6c 69 73 68 65 73 20 74 68 65 20 50 50 54 | on.TESTUNNEL.establishes.the.PPT |
fbbe0 | 50 20 74 75 6e 6e 65 6c 20 74 6f 20 74 68 65 20 72 65 6d 6f 74 65 20 73 79 73 74 65 6d 2e 00 54 | P.tunnel.to.the.remote.system..T |
fbc00 | 68 65 20 63 6f 6d 70 75 74 65 72 73 20 6f 6e 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 6e 65 74 77 | he.computers.on.an.internal.netw |
fbc20 | 6f 72 6b 20 63 61 6e 20 75 73 65 20 61 6e 79 20 6f 66 20 74 68 65 20 61 64 64 72 65 73 73 65 73 | ork.can.use.any.of.the.addresses |
fbc40 | 20 73 65 74 20 61 73 69 64 65 20 62 79 20 74 68 65 20 3a 61 62 62 72 3a 60 49 41 4e 41 20 28 49 | .set.aside.by.the.:abbr:`IANA.(I |
fbc60 | 6e 74 65 72 6e 65 74 20 41 73 73 69 67 6e 65 64 20 4e 75 6d 62 65 72 73 20 41 75 74 68 6f 72 69 | nternet.Assigned.Numbers.Authori |
fbc80 | 74 79 29 60 20 66 6f 72 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 73 69 6e 67 20 28 73 65 65 | ty)`.for.private.addressing.(see |
fbca0 | 20 3a 72 66 63 3a 60 31 39 31 38 60 29 2e 20 54 68 65 73 65 20 72 65 73 65 72 76 65 64 20 49 50 | .:rfc:`1918`)..These.reserved.IP |
fbcc0 | 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 6e 6f 74 20 69 6e 20 75 73 65 20 6f 6e 20 74 68 65 | .addresses.are.not.in.use.on.the |
fbce0 | 20 49 6e 74 65 72 6e 65 74 2c 20 73 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 6d 61 63 68 69 6e | .Internet,.so.an.external.machin |
fbd00 | 65 20 77 69 6c 6c 20 6e 6f 74 20 64 69 72 65 63 74 6c 79 20 72 6f 75 74 65 20 74 6f 20 74 68 65 | e.will.not.directly.route.to.the |
fbd20 | 6d 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 72 | m..The.following.addresses.are.r |
fbd40 | 65 73 65 72 76 65 64 20 66 6f 72 20 70 72 69 76 61 74 65 20 75 73 65 3a 00 54 68 65 20 63 6f 6e | eserved.for.private.use:.The.con |
fbd60 | 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 61 73 20 66 6f 6c 6c 6f 77 73 3a | figuration.will.look.as.follows: |
fbd80 | 00 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 61 62 6f 76 65 20 77 69 6c 6c 20 64 | .The.configurations.above.will.d |
fbda0 | 65 66 61 75 6c 74 20 74 6f 20 75 73 69 6e 67 20 32 35 36 2d 62 69 74 20 41 45 53 20 69 6e 20 47 | efault.to.using.256-bit.AES.in.G |
fbdc0 | 43 4d 20 6d 6f 64 65 20 66 6f 72 20 65 6e 63 72 79 70 74 69 6f 6e 20 28 69 66 20 62 6f 74 68 20 | CM.mode.for.encryption.(if.both. |
fbde0 | 73 69 64 65 73 20 73 75 70 70 6f 72 74 20 4e 43 50 29 20 61 6e 64 20 53 48 41 2d 31 20 66 6f 72 | sides.support.NCP).and.SHA-1.for |
fbe00 | 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 53 48 41 2d 31 20 69 73 20 63 | .HMAC.authentication..SHA-1.is.c |
fbe20 | 6f 6e 73 69 64 65 72 65 64 20 77 65 61 6b 2c 20 62 75 74 20 6f 74 68 65 72 20 68 61 73 68 69 6e | onsidered.weak,.but.other.hashin |
fbe40 | 67 20 61 6c 67 6f 72 69 74 68 6d 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2c 20 61 73 20 61 | g.algorithms.are.available,.as.a |
fbe60 | 72 65 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 73 3a 00 54 68 65 20 63 6f | re.encryption.algorithms:.The.co |
fbe80 | 6e 6e 65 63 74 69 6f 6e 20 73 74 61 74 65 20 68 6f 77 65 76 65 72 20 69 73 20 63 6f 6d 70 6c 65 | nnection.state.however.is.comple |
fbea0 | 74 65 6c 79 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6f 66 20 61 6e 79 20 75 70 70 65 72 2d 6c 65 | tely.independent.of.any.upper-le |
fbec0 | 76 65 6c 20 73 74 61 74 65 2c 20 73 75 63 68 20 61 73 20 54 43 50 27 73 20 6f 72 20 53 43 54 50 | vel.state,.such.as.TCP's.or.SCTP |
fbee0 | 27 73 20 73 74 61 74 65 2e 20 50 61 72 74 20 6f 66 20 74 68 65 20 72 65 61 73 6f 6e 20 66 6f 72 | 's.state..Part.of.the.reason.for |
fbf00 | 20 74 68 69 73 20 69 73 20 74 68 61 74 20 77 68 65 6e 20 6d 65 72 65 6c 79 20 66 6f 72 77 61 72 | .this.is.that.when.merely.forwar |
fbf20 | 64 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 69 2e 65 2e 20 6e 6f 20 6c 6f 63 61 6c 20 64 65 6c 69 | ding.packets,.i.e..no.local.deli |
fbf40 | 76 65 72 79 2c 20 74 68 65 20 54 43 50 20 65 6e 67 69 6e 65 20 6d 61 79 20 6e 6f 74 20 6e 65 63 | very,.the.TCP.engine.may.not.nec |
fbf60 | 65 73 73 61 72 69 6c 79 20 62 65 20 69 6e 76 6f 6b 65 64 20 61 74 20 61 6c 6c 2e 20 45 76 65 6e | essarily.be.invoked.at.all..Even |
fbf80 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 6c 65 73 73 2d 6d 6f 64 65 20 74 72 61 6e 73 6d 69 73 73 69 6f | .connectionless-mode.transmissio |
fbfa0 | 6e 73 20 73 75 63 68 20 61 73 20 55 44 50 2c 20 49 50 73 65 63 20 28 41 48 2f 45 53 50 29 2c 20 | ns.such.as.UDP,.IPsec.(AH/ESP),. |
fbfc0 | 47 52 45 20 61 6e 64 20 6f 74 68 65 72 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c | GRE.and.other.tunneling.protocol |
fbfe0 | 73 20 68 61 76 65 2c 20 61 74 20 6c 65 61 73 74 2c 20 61 20 70 73 65 75 64 6f 20 63 6f 6e 6e 65 | s.have,.at.least,.a.pseudo.conne |
fc000 | 63 74 69 6f 6e 20 73 74 61 74 65 2e 20 54 68 65 20 68 65 75 72 69 73 74 69 63 20 66 6f 72 20 73 | ction.state..The.heuristic.for.s |
fc020 | 75 63 68 20 70 72 6f 74 6f 63 6f 6c 73 20 69 73 20 6f 66 74 65 6e 20 62 61 73 65 64 20 75 70 6f | uch.protocols.is.often.based.upo |
fc040 | 6e 20 61 20 70 72 65 73 65 74 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 66 6f 72 20 69 6e 61 | n.a.preset.timeout.value.for.ina |
fc060 | 63 74 69 76 69 74 79 2c 20 61 66 74 65 72 20 77 68 6f 73 65 20 65 78 70 69 72 61 74 69 6f 6e 20 | ctivity,.after.whose.expiration. |
fc080 | 61 20 4e 65 74 66 69 6c 74 65 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 64 72 6f 70 70 65 | a.Netfilter.connection.is.droppe |
fc0a0 | 64 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 65 78 70 65 63 | d..The.connection.tracking.expec |
fc0c0 | 74 20 74 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 20 66 6f 72 20 65 | t.table.contains.one.entry.for.e |
fc0e0 | 61 63 68 20 65 78 70 65 63 74 65 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 | ach.expected.connection.related. |
fc100 | 74 6f 20 61 6e 20 65 78 69 73 74 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 65 73 65 | to.an.existing.connection..These |
fc120 | 20 61 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 75 73 65 64 20 62 79 20 e2 80 9c 63 6f 6e 6e 65 63 | .are.generally.used.by....connec |
fc140 | 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 68 65 6c 70 65 72 e2 80 9d 20 6d 6f 64 75 6c 65 73 20 | tion.tracking.helper....modules. |
fc160 | 73 75 63 68 20 61 73 20 46 54 50 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 69 7a 65 20 6f 66 | such.as.FTP..The.default.size.of |
fc180 | 20 74 68 65 20 65 78 70 65 63 74 20 74 61 62 6c 65 20 69 73 20 32 30 34 38 20 65 6e 74 72 69 65 | .the.expect.table.is.2048.entrie |
fc1a0 | 73 2e 00 54 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 74 61 62 6c 65 | s..The.connection.tracking.table |
fc1c0 | 20 63 6f 6e 74 61 69 6e 73 20 6f 6e 65 20 65 6e 74 72 79 20 66 6f 72 20 65 61 63 68 20 63 6f 6e | .contains.one.entry.for.each.con |
fc1e0 | 6e 65 63 74 69 6f 6e 20 62 65 69 6e 67 20 74 72 61 63 6b 65 64 20 62 79 20 74 68 65 20 73 79 73 | nection.being.tracked.by.the.sys |
fc200 | 74 65 6d 2e 00 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 74 72 69 62 75 74 65 20 27 46 69 6c 74 | tem..The.current.attribute.'Filt |
fc220 | 65 72 2d 49 64 27 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 64 65 66 61 75 6c 74 20 | er-Id'.is.being.used.as.default. |
fc240 | 61 6e 64 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 6e 20 52 41 44 49 55 53 3a 00 | and.can.be.setup.within.RADIUS:. |
fc260 | 54 68 65 20 63 75 72 72 65 6e 74 20 61 74 74 72 69 62 75 74 65 20 60 60 46 69 6c 74 65 72 2d 49 | The.current.attribute.``Filter-I |
fc280 | 64 60 60 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 64 65 66 61 75 6c 74 20 61 6e 64 | d``.is.being.used.as.default.and |
fc2a0 | 20 63 61 6e 20 62 65 20 73 65 74 75 70 20 77 69 74 68 69 6e 20 52 41 44 49 55 53 3a 00 54 68 65 | .can.be.setup.within.RADIUS:.The |
fc2c0 | 20 63 75 72 72 65 6e 74 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 76 65 72 73 69 6f 6e 20 34 20 28 | .current.protocol.is.version.4.( |
fc2e0 | 4e 54 50 76 34 29 2c 20 77 68 69 63 68 20 69 73 20 61 20 70 72 6f 70 6f 73 65 64 20 73 74 61 6e | NTPv4),.which.is.a.proposed.stan |
fc300 | 64 61 72 64 20 61 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 39 30 35 | dard.as.documented.in.:rfc:`5905 |
fc320 | 60 2e 20 49 74 20 69 73 20 62 61 63 6b 77 61 72 64 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 | `..It.is.backward.compatible.wit |
fc340 | 68 20 76 65 72 73 69 6f 6e 20 33 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 | h.version.3,.specified.in.:rfc:` |
fc360 | 31 33 30 35 60 2e 00 54 68 65 20 64 61 65 6d 6f 6e 20 64 6f 75 62 6c 65 73 20 74 68 65 20 73 69 | 1305`..The.daemon.doubles.the.si |
fc380 | 7a 65 20 6f 66 20 74 68 65 20 6e 65 74 6c 69 6e 6b 20 65 76 65 6e 74 20 73 6f 63 6b 65 74 20 62 | ze.of.the.netlink.event.socket.b |
fc3a0 | 75 66 66 65 72 20 73 69 7a 65 20 69 66 20 69 74 20 64 65 74 65 63 74 73 20 6e 65 74 6c 69 6e 6b | uffer.size.if.it.detects.netlink |
fc3c0 | 20 65 76 65 6e 74 20 6d 65 73 73 61 67 65 20 64 72 6f 70 70 69 6e 67 2e 20 54 68 69 73 20 63 6c | .event.message.dropping..This.cl |
fc3e0 | 61 75 73 65 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 62 75 66 66 65 72 20 73 69 7a | ause.sets.the.maximum.buffer.siz |
fc400 | 65 20 67 72 6f 77 74 68 20 74 68 61 74 20 63 61 6e 20 62 65 20 72 65 61 63 68 65 64 2e 00 54 68 | e.growth.that.can.be.reached..Th |
fc420 | 65 20 64 65 66 61 75 6c 74 20 52 41 44 49 55 53 20 61 74 74 72 69 62 75 74 65 20 66 6f 72 20 72 | e.default.RADIUS.attribute.for.r |
fc440 | 61 74 65 20 6c 69 6d 69 74 69 6e 67 20 69 73 20 60 60 46 69 6c 74 65 72 2d 49 64 60 60 2c 20 62 | ate.limiting.is.``Filter-Id``,.b |
fc460 | 75 74 20 79 6f 75 20 6d 61 79 20 61 6c 73 6f 20 72 65 64 65 66 69 6e 65 20 69 74 2e 00 54 68 65 | ut.you.may.also.redefine.it..The |
fc480 | 20 64 65 66 61 75 6c 74 20 56 79 4f 53 20 75 73 65 72 20 61 63 63 6f 75 6e 74 20 28 60 76 79 6f | .default.VyOS.user.account.(`vyo |
fc4a0 | 73 60 29 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 6e 65 77 6c 79 20 63 72 65 61 74 65 64 20 75 73 | s`),.as.well.as.newly.created.us |
fc4c0 | 65 72 20 61 63 63 6f 75 6e 74 73 2c 20 68 61 76 65 20 61 6c 6c 20 63 61 70 61 62 69 6c 69 74 69 | er.accounts,.have.all.capabiliti |
fc4e0 | 65 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 73 79 73 74 65 6d 2e 20 41 6c 6c 20 | es.to.configure.the.system..All. |
fc500 | 61 63 63 6f 75 6e 74 73 20 68 61 76 65 20 73 75 64 6f 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 | accounts.have.sudo.capabilities. |
fc520 | 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 63 61 6e 20 6f 70 65 72 61 74 65 20 61 73 20 72 6f 6f | and.therefore.can.operate.as.roo |
fc540 | 74 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 68 6f 73 | t.on.the.system..The.default.hos |
fc560 | 74 6e 61 6d 65 20 75 73 65 64 20 69 73 20 60 76 79 6f 73 60 2e 00 54 68 65 20 64 65 66 61 75 6c | tname.used.is.`vyos`..The.defaul |
fc580 | 74 20 69 73 20 31 34 39 32 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 60 60 38 30 32 2e | t.is.1492..The.default.is.``802. |
fc5a0 | 31 71 60 60 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 6c 65 61 73 65 20 74 69 6d 65 20 66 6f 72 | 1q``..The.default.lease.time.for |
fc5c0 | 20 44 48 43 50 76 36 20 6c 65 61 73 65 73 20 69 73 20 32 34 20 68 6f 75 72 73 2e 20 54 68 69 73 | .DHCPv6.leases.is.24.hours..This |
fc5e0 | 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 20 62 79 20 73 75 70 70 6c 79 69 6e 67 20 61 20 60 | .can.be.changed.by.supplying.a.` |
fc600 | 60 64 65 66 61 75 6c 74 2d 74 69 6d 65 60 60 2c 20 60 60 6d 61 78 69 6d 75 6d 2d 74 69 6d 65 60 | `default-time``,.``maximum-time` |
fc620 | 60 20 61 6e 64 20 60 60 6d 69 6e 69 6d 75 6d 2d 74 69 6d 65 60 60 2e 20 41 6c 6c 20 76 61 6c 75 | `.and.``minimum-time``..All.valu |
fc640 | 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 73 75 70 70 6c 69 65 64 20 69 6e 20 73 65 63 6f 6e 64 | es.need.to.be.supplied.in.second |
fc660 | 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 72 74 20 75 64 70 20 69 73 20 73 65 74 20 74 | s..The.default.port.udp.is.set.t |
fc680 | 6f 20 38 34 37 32 2e 20 49 74 20 63 61 6e 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 74 68 20 60 | o.8472..It.can.be.changed.with.` |
fc6a0 | 60 73 65 74 20 69 6e 74 65 72 66 61 63 65 20 76 78 6c 61 6e 20 3c 76 78 6c 61 6e 4e 3e 20 70 6f | `set.interface.vxlan.<vxlanN>.po |
fc6c0 | 72 74 20 3c 70 6f 72 74 3e 60 60 00 54 68 65 20 64 65 66 61 75 6c 74 20 74 69 6d 65 20 69 73 20 | rt.<port>``.The.default.time.is. |
fc6e0 | 36 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 63 6f | 60.seconds..The.default.value.co |
fc700 | 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 36 34 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c | rresponds.to.64..The.default.val |
fc720 | 75 65 20 69 73 20 30 2e 20 54 68 69 73 20 77 69 6c 6c 20 63 61 75 73 65 20 74 68 65 20 63 61 72 | ue.is.0..This.will.cause.the.car |
fc740 | 72 69 65 72 20 74 6f 20 62 65 20 61 73 73 65 72 74 65 64 20 28 66 6f 72 20 38 30 32 2e 33 61 64 | rier.to.be.asserted.(for.802.3ad |
fc760 | 20 6d 6f 64 65 29 20 77 68 65 6e 65 76 65 72 20 74 68 65 72 65 20 69 73 20 61 6e 20 61 63 74 69 | .mode).whenever.there.is.an.acti |
fc780 | 76 65 20 61 67 67 72 65 67 61 74 6f 72 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 | ve.aggregator,.regardless.of.the |
fc7a0 | 20 6e 75 6d 62 65 72 20 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 6c 69 6e 6b 73 20 69 6e 20 74 68 | .number.of.available.links.in.th |
fc7c0 | 61 74 20 61 67 67 72 65 67 61 74 6f 72 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | at.aggregator..The.default.value |
fc7e0 | 20 69 73 20 33 20 70 61 63 6b 65 74 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | .is.3.packets..The.default.value |
fc800 | 20 69 73 20 33 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 30 20 | .is.3..The.default.value.is.300. |
fc820 | 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 | seconds..The.default.value.is.60 |
fc840 | 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 | 0.seconds..The.default.value.is. |
fc860 | 37 32 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 | 7200.seconds..The.default.value. |
fc880 | 69 73 20 38 36 34 30 30 20 73 65 63 6f 6e 64 73 20 77 68 69 63 68 20 63 6f 72 72 65 73 70 6f 6e | is.86400.seconds.which.correspon |
fc8a0 | 64 73 20 74 6f 20 6f 6e 65 20 64 61 79 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 | ds.to.one.day..The.default.value |
fc8c0 | 20 69 73 20 73 6c 6f 77 2e 00 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 73 20 66 6f 72 | .is.slow..The.default.values.for |
fc8e0 | 20 74 68 65 20 6d 69 6e 69 6d 75 6d 2d 74 68 72 65 73 68 6f 6c 64 20 64 65 70 65 6e 64 20 6f 6e | .the.minimum-threshold.depend.on |
fc900 | 20 49 50 20 70 72 65 63 65 64 65 6e 63 65 3a 00 54 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | .IP.precedence:.The.destination. |
fc920 | 70 6f 72 74 20 75 73 65 64 20 66 6f 72 20 63 72 65 61 74 69 6e 67 20 61 20 56 58 4c 41 4e 20 69 | port.used.for.creating.a.VXLAN.i |
fc940 | 6e 74 65 72 66 61 63 65 20 69 6e 20 4c 69 6e 75 78 20 64 65 66 61 75 6c 74 73 20 74 6f 20 69 74 | nterface.in.Linux.defaults.to.it |
fc960 | 73 20 70 72 65 2d 73 74 61 6e 64 61 72 64 20 76 61 6c 75 65 20 6f 66 20 38 34 37 32 20 74 6f 20 | s.pre-standard.value.of.8472.to. |
fc980 | 70 72 65 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 2e | preserve.backward.compatibility. |
fc9a0 | 20 41 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 69 72 65 63 74 69 76 65 20 74 6f 20 73 75 | .A.configuration.directive.to.su |
fc9c0 | 70 70 6f 72 74 20 61 20 75 73 65 72 2d 73 70 65 63 69 66 69 65 64 20 64 65 73 74 69 6e 61 74 69 | pport.a.user-specified.destinati |
fc9e0 | 6f 6e 20 70 6f 72 74 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 61 74 20 62 65 68 61 76 69 6f | on.port.to.override.that.behavio |
fca00 | 72 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 63 | r.is.available.using.the.above.c |
fca20 | 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 64 65 76 69 63 65 20 63 61 6e 20 6f 6e 6c 79 20 72 65 63 65 | ommand..The.device.can.only.rece |
fca40 | 69 76 65 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 56 4e 49 73 20 63 6f 6e 66 69 67 75 72 65 64 | ive.packets.with.VNIs.configured |
fca60 | 20 69 6e 20 74 68 65 20 56 4e 49 20 66 69 6c 74 65 72 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 | .in.the.VNI.filtering.table..The |
fca80 | 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 65 65 6e 20 48 41 20 70 61 72 74 6e 65 72 73 20 69 73 | .dialogue.between.HA.partners.is |
fcaa0 | 20 6e 65 69 74 68 65 72 20 65 6e 63 72 79 70 74 65 64 20 6e 6f 72 20 61 75 74 68 65 6e 74 69 63 | .neither.encrypted.nor.authentic |
fcac0 | 61 74 65 64 2e 20 53 69 6e 63 65 20 6d 6f 73 74 20 44 48 43 50 20 73 65 72 76 65 72 73 20 65 78 | ated..Since.most.DHCP.servers.ex |
fcae0 | 69 73 74 20 77 69 74 68 69 6e 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 27 73 20 6f 77 6e | ist.within.an.organisation's.own |
fcb00 | 20 73 65 63 75 72 65 20 49 6e 74 72 61 6e 65 74 2c 20 74 68 69 73 20 77 6f 75 6c 64 20 62 65 20 | .secure.Intranet,.this.would.be. |
fcb20 | 61 6e 20 75 6e 6e 65 63 65 73 73 61 72 79 20 6f 76 65 72 68 65 61 64 2e 20 48 6f 77 65 76 65 72 | an.unnecessary.overhead..However |
fcb40 | 2c 20 69 66 20 79 6f 75 20 68 61 76 65 20 44 48 43 50 20 48 41 20 70 65 65 72 73 20 77 68 6f 73 | ,.if.you.have.DHCP.HA.peers.whos |
fcb60 | 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 61 76 65 72 73 65 20 69 6e 73 65 63 75 | e.communications.traverse.insecu |
fcb80 | 72 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 | re.networks,.then.we.recommend.t |
fcba0 | 68 61 74 20 79 6f 75 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 75 73 65 20 6f 66 20 56 50 4e 20 | hat.you.consider.the.use.of.VPN. |
fcbc0 | 74 75 6e 6e 65 6c 69 6e 67 20 62 65 74 77 65 65 6e 20 74 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 | tunneling.between.them.to.ensure |
fcbe0 | 20 74 68 61 74 20 74 68 65 20 48 41 20 70 61 72 74 6e 65 72 73 68 69 70 20 69 73 20 69 6d 6d 75 | .that.the.HA.partnership.is.immu |
fcc00 | 6e 65 20 74 6f 20 64 69 73 72 75 70 74 69 6f 6e 20 28 61 63 63 69 64 65 6e 74 61 6c 20 6f 72 20 | ne.to.disruption.(accidental.or. |
fcc20 | 6f 74 68 65 72 77 69 73 65 29 20 76 69 61 20 74 68 69 72 64 20 70 61 72 74 69 65 73 2e 00 54 68 | otherwise).via.third.parties..Th |
fcc40 | 65 20 64 69 61 6c 6f 67 75 65 20 62 65 74 77 65 65 6e 20 66 61 69 6c 6f 76 65 72 20 70 61 72 74 | e.dialogue.between.failover.part |
fcc60 | 6e 65 72 73 20 69 73 20 6e 65 69 74 68 65 72 20 65 6e 63 72 79 70 74 65 64 20 6e 6f 72 20 61 75 | ners.is.neither.encrypted.nor.au |
fcc80 | 74 68 65 6e 74 69 63 61 74 65 64 2e 20 53 69 6e 63 65 20 6d 6f 73 74 20 44 48 43 50 20 73 65 72 | thenticated..Since.most.DHCP.ser |
fcca0 | 76 65 72 73 20 65 78 69 73 74 20 77 69 74 68 69 6e 20 61 6e 20 6f 72 67 61 6e 69 73 61 74 69 6f | vers.exist.within.an.organisatio |
fccc0 | 6e 27 73 20 6f 77 6e 20 73 65 63 75 72 65 20 49 6e 74 72 61 6e 65 74 2c 20 74 68 69 73 20 77 6f | n's.own.secure.Intranet,.this.wo |
fcce0 | 75 6c 64 20 62 65 20 61 6e 20 75 6e 6e 65 63 65 73 73 61 72 79 20 6f 76 65 72 68 65 61 64 2e 20 | uld.be.an.unnecessary.overhead.. |
fcd00 | 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 68 61 76 65 20 44 48 43 50 20 66 61 69 6c 6f 76 | However,.if.you.have.DHCP.failov |
fcd20 | 65 72 20 70 65 65 72 73 20 77 68 6f 73 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 74 72 | er.peers.whose.communications.tr |
fcd40 | 61 76 65 72 73 65 20 69 6e 73 65 63 75 72 65 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 6e 20 77 | averse.insecure.networks,.then.w |
fcd60 | 65 20 72 65 63 6f 6d 6d 65 6e 64 20 74 68 61 74 20 79 6f 75 20 63 6f 6e 73 69 64 65 72 20 74 68 | e.recommend.that.you.consider.th |
fcd80 | 65 20 75 73 65 20 6f 66 20 56 50 4e 20 74 75 6e 6e 65 6c 69 6e 67 20 62 65 74 77 65 65 6e 20 74 | e.use.of.VPN.tunneling.between.t |
fcda0 | 68 65 6d 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 66 61 69 6c 6f 76 65 72 20 | hem.to.ensure.that.the.failover. |
fcdc0 | 70 61 72 74 6e 65 72 73 68 69 70 20 69 73 20 69 6d 6d 75 6e 65 20 74 6f 20 64 69 73 72 75 70 74 | partnership.is.immune.to.disrupt |
fcde0 | 69 6f 6e 20 28 61 63 63 69 64 65 6e 74 61 6c 20 6f 72 20 6f 74 68 65 72 77 69 73 65 29 20 76 69 | ion.(accidental.or.otherwise).vi |
fce00 | 61 20 74 68 69 72 64 20 70 61 72 74 69 65 73 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 | a.third.parties..The.domain-name |
fce20 | 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 69 6e 20 | .parameter.should.be.the.domain. |
fce40 | 6e 61 6d 65 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 70 70 65 6e 64 65 64 20 74 6f 20 74 68 | name.that.will.be.appended.to.th |
fce60 | 65 20 63 6c 69 65 6e 74 27 73 20 68 6f 73 74 6e 61 6d 65 20 74 6f 20 66 6f 72 6d 20 61 20 66 75 | e.client's.hostname.to.form.a.fu |
fce80 | 6c 6c 79 2d 71 75 61 6c 69 66 69 65 64 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 20 28 46 51 44 4e 29 | lly-qualified.domain-name.(FQDN) |
fcea0 | 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 30 31 35 29 2e 00 54 68 65 20 64 6f 6d 61 69 6e 2d 6e | .(DHCP.Option.015)..The.domain-n |
fcec0 | 61 6d 65 20 70 61 72 61 6d 65 74 65 72 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 64 6f 6d 61 | ame.parameter.should.be.the.doma |
fcee0 | 69 6e 20 6e 61 6d 65 20 75 73 65 64 20 77 68 65 6e 20 63 6f 6d 70 6c 65 74 69 6e 67 20 44 4e 53 | in.name.used.when.completing.DNS |
fcf00 | 20 72 65 71 75 65 73 74 20 77 68 65 72 65 20 6e 6f 20 66 75 6c 6c 20 46 51 44 4e 20 69 73 20 70 | .request.where.no.full.FQDN.is.p |
fcf20 | 61 73 73 65 64 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 67 69 76 65 6e 20 | assed..This.option.can.be.given. |
fcf40 | 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 69 66 20 79 6f 75 20 6e 65 65 64 20 6d 75 6c 74 69 | multiple.times.if.you.need.multi |
fcf60 | 70 6c 65 20 73 65 61 72 63 68 20 64 6f 6d 61 69 6e 73 20 28 44 48 43 50 20 4f 70 74 69 6f 6e 20 | ple.search.domains.(DHCP.Option. |
fcf80 | 31 31 39 29 2e 00 54 68 65 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 61 6c 6c 6f 77 73 | 119)..The.dummy.interface.allows |
fcfa0 | 20 75 73 20 74 6f 20 68 61 76 65 20 61 6e 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 | .us.to.have.an.equivalent.of.the |
fcfc0 | 20 43 69 73 63 6f 20 49 4f 53 20 4c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 2d 20 | .Cisco.IOS.Loopback.interface.-. |
fcfe0 | 61 20 72 6f 75 74 65 72 2d 69 6e 74 65 72 6e 61 6c 20 69 6e 74 65 72 66 61 63 65 20 77 65 20 63 | a.router-internal.interface.we.c |
fd000 | 61 6e 20 75 73 65 20 66 6f 72 20 49 50 20 61 64 64 72 65 73 73 65 73 20 74 68 65 20 72 6f 75 74 | an.use.for.IP.addresses.the.rout |
fd020 | 65 72 20 6d 75 73 74 20 6b 6e 6f 77 20 61 62 6f 75 74 2c 20 62 75 74 20 77 68 69 63 68 20 61 72 | er.must.know.about,.but.which.ar |
fd040 | 65 20 6e 6f 74 20 61 63 74 75 61 6c 6c 79 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 20 72 65 61 | e.not.actually.assigned.to.a.rea |
fd060 | 6c 20 6e 65 74 77 6f 72 6b 2e 00 54 68 65 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 20 69 | l.network..The.dummy.interface.i |
fd080 | 73 20 72 65 61 6c 6c 79 20 61 20 6c 69 74 74 6c 65 20 65 78 6f 74 69 63 2c 20 62 75 74 20 72 61 | s.really.a.little.exotic,.but.ra |
fd0a0 | 74 68 65 72 20 75 73 65 66 75 6c 20 6e 65 76 65 72 74 68 65 6c 65 73 73 2e 20 44 75 6d 6d 79 20 | ther.useful.nevertheless..Dummy. |
fd0c0 | 69 6e 74 65 72 66 61 63 65 73 20 61 72 65 20 6d 75 63 68 20 6c 69 6b 65 20 74 68 65 20 3a 72 65 | interfaces.are.much.like.the.:re |
fd0e0 | 66 3a 60 6c 6f 6f 70 62 61 63 6b 2d 69 6e 74 65 72 66 61 63 65 60 20 69 6e 74 65 72 66 61 63 65 | f:`loopback-interface`.interface |
fd100 | 2c 20 65 78 63 65 70 74 20 79 6f 75 20 63 61 6e 20 68 61 76 65 20 61 73 20 6d 61 6e 79 20 61 73 | ,.except.you.can.have.as.many.as |
fd120 | 20 79 6f 75 20 77 61 6e 74 2e 00 54 68 65 20 65 6d 62 65 64 64 65 64 20 53 71 75 69 64 20 70 72 | .you.want..The.embedded.Squid.pr |
fd140 | 6f 78 79 20 63 61 6e 20 75 73 65 20 4c 44 41 50 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 | oxy.can.use.LDAP.to.authenticate |
fd160 | 20 75 73 65 72 73 20 61 67 61 69 6e 73 74 20 61 20 63 6f 6d 70 61 6e 79 20 77 69 64 65 20 64 69 | .users.against.a.company.wide.di |
fd180 | 72 65 63 74 6f 72 79 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 | rectory..The.following.configura |
fd1a0 | 74 69 6f 6e 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 68 6f 77 20 74 6f 20 75 73 65 | tion.is.an.example.of.how.to.use |
fd1c0 | 20 41 63 74 69 76 65 20 44 69 72 65 63 74 6f 72 79 20 61 73 20 61 75 74 68 65 6e 74 69 63 61 74 | .Active.Directory.as.authenticat |
fd1e0 | 69 6f 6e 20 62 61 63 6b 65 6e 64 2e 20 51 75 65 72 69 65 73 20 61 72 65 20 64 6f 6e 65 20 76 69 | ion.backend..Queries.are.done.vi |
fd200 | 61 20 4c 44 41 50 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 61 62 6f 76 65 20 75 73 65 73 20 31 | a.LDAP..The.example.above.uses.1 |
fd220 | 39 32 2e 30 2e 32 2e 32 20 61 73 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 2e | 92.0.2.2.as.external.IP.address. |
fd240 | 20 41 20 4c 41 43 20 6e 6f 72 6d 61 6c 6c 79 20 72 65 71 75 69 72 65 73 20 61 6e 20 61 75 74 68 | .A.LAC.normally.requires.an.auth |
fd260 | 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 2c 20 77 68 69 63 68 20 69 73 20 73 65 | entication.password,.which.is.se |
fd280 | 74 20 69 6e 20 74 68 65 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 | t.in.the.example.configuration.t |
fd2a0 | 6f 20 60 60 6c 6e 73 20 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 27 73 65 63 72 65 74 27 60 60 | o.``lns.shared-secret.'secret'`` |
fd2c0 | 2e 20 54 68 69 73 20 73 65 74 75 70 20 72 65 71 75 69 72 65 73 20 74 68 65 20 43 6f 6d 70 72 65 | ..This.setup.requires.the.Compre |
fd2e0 | 73 73 69 6f 6e 20 43 6f 6e 74 72 6f 6c 20 50 72 6f 74 6f 63 6f 6c 20 28 43 43 50 29 20 62 65 69 | ssion.Control.Protocol.(CCP).bei |
fd300 | 6e 67 20 64 69 73 61 62 6c 65 64 2c 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 60 60 73 65 74 20 76 | ng.disabled,.the.command.``set.v |
fd320 | 70 6e 20 6c 32 74 70 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 63 70 2d 64 69 73 61 62 6c | pn.l2tp.remote-access.ccp-disabl |
fd340 | 65 60 60 20 61 63 63 6f 6d 70 6c 69 73 68 65 73 20 74 68 61 74 2e 00 54 68 65 20 65 78 61 6d 70 | e``.accomplishes.that..The.examp |
fd360 | 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 20 61 20 64 75 61 6c 2d 73 74 61 63 6b 20 63 6f 6e | le.below.covers.a.dual-stack.con |
fd380 | 66 69 67 75 72 61 74 69 6f 6e 20 76 69 61 20 70 70 70 6f 65 2d 73 65 72 76 65 72 2e 00 54 68 65 | figuration.via.pppoe-server..The |
fd3a0 | 20 65 78 61 6d 70 6c 65 20 62 65 6c 6f 77 20 63 6f 76 65 72 73 20 61 20 64 75 61 6c 2d 73 74 61 | .example.below.covers.a.dual-sta |
fd3c0 | 63 6b 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 62 65 | ck.configuration..The.example.be |
fd3e0 | 6c 6f 77 20 75 73 65 73 20 41 43 4e 20 61 73 20 61 63 63 65 73 73 2d 63 6f 6e 63 65 6e 74 72 61 | low.uses.ACN.as.access-concentra |
fd400 | 74 6f 72 20 6e 61 6d 65 2c 20 61 73 73 69 67 6e 73 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f | tor.name,.assigns.an.address.fro |
fd420 | 6d 20 74 68 65 20 70 6f 6f 6c 20 31 30 2e 31 2e 31 2e 31 30 30 2d 31 31 31 2c 20 74 65 72 6d 69 | m.the.pool.10.1.1.100-111,.termi |
fd440 | 6e 61 74 65 73 20 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 65 6e 64 70 6f 69 6e 74 20 31 30 2e 31 | nates.at.the.local.endpoint.10.1 |
fd460 | 2e 31 2e 31 20 61 6e 64 20 73 65 72 76 65 73 20 72 65 71 75 65 73 74 73 20 6f 6e 6c 79 20 6f 6e | .1.1.and.serves.requests.only.on |
fd480 | 20 65 74 68 31 2e 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .eth1..The.example.configuration |
fd4a0 | 20 62 65 6c 6f 77 20 77 69 6c 6c 20 61 73 73 69 67 6e 20 61 6e 20 49 50 20 74 6f 20 74 68 65 20 | .below.will.assign.an.IP.to.the. |
fd4c0 | 63 6c 69 65 6e 74 20 6f 6e 20 74 68 65 20 69 6e 63 6f 6d 69 6e 67 20 69 6e 74 65 72 66 61 63 65 | client.on.the.incoming.interface |
fd4e0 | 20 65 74 68 32 20 77 69 74 68 20 74 68 65 20 63 6c 69 65 6e 74 20 6d 61 63 20 61 64 64 72 65 73 | .eth2.with.the.client.mac.addres |
fd500 | 73 20 30 38 3a 30 30 3a 32 37 3a 32 66 3a 64 38 3a 30 36 2e 20 4f 74 68 65 72 20 44 48 43 50 20 | s.08:00:27:2f:d8:06..Other.DHCP. |
fd520 | 64 69 73 63 6f 76 65 72 79 20 72 65 71 75 65 73 74 73 20 77 69 6c 6c 20 62 65 20 69 67 6e 6f 72 | discovery.requests.will.be.ignor |
fd540 | 65 64 2c 20 75 6e 6c 65 73 73 20 74 68 65 20 63 6c 69 65 6e 74 20 6d 61 63 20 68 61 73 20 62 65 | ed,.unless.the.client.mac.has.be |
fd560 | 65 6e 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e | en.enabled.in.the.configuration. |
fd580 | 00 54 68 65 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 65 73 20 61 20 77 69 72 65 6c 65 73 73 20 | .The.example.creates.a.wireless. |
fd5a0 | 73 74 61 74 69 6f 6e 20 28 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 | station.(commonly.referred.to.as |
fd5c0 | 20 57 69 2d 46 69 20 63 6c 69 65 6e 74 29 20 74 68 61 74 20 61 63 63 65 73 73 65 73 20 74 68 65 | .Wi-Fi.client).that.accesses.the |
fd5e0 | 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 68 20 74 68 65 20 57 41 50 20 64 65 66 69 6e 65 64 | .network.through.the.WAP.defined |
fd600 | 20 69 6e 20 74 68 65 20 61 62 6f 76 65 20 65 78 61 6d 70 6c 65 2e 20 54 68 65 20 64 65 66 61 75 | .in.the.above.example..The.defau |
fd620 | 6c 74 20 70 68 79 73 69 63 61 6c 20 64 65 76 69 63 65 20 28 60 60 70 68 79 30 60 60 29 20 69 73 | lt.physical.device.(``phy0``).is |
fd640 | 20 75 73 65 64 2e 00 54 68 65 20 65 78 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 74 | .used..The.external.IP.address.t |
fd660 | 6f 20 74 72 61 6e 73 6c 61 74 65 20 74 6f 00 54 68 65 20 66 69 72 65 77 61 6c 6c 20 73 75 70 70 | o.translate.to.The.firewall.supp |
fd680 | 6f 72 74 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 72 6f 75 70 73 20 66 6f 72 20 | orts.the.creation.of.groups.for. |
fd6a0 | 61 64 64 72 65 73 73 65 73 2c 20 64 6f 6d 61 69 6e 73 2c 20 69 6e 74 65 72 66 61 63 65 73 2c 20 | addresses,.domains,.interfaces,. |
fd6c0 | 6d 61 63 2d 61 64 64 72 65 73 73 65 73 2c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 70 6f 72 74 | mac-addresses,.networks.and.port |
fd6e0 | 20 67 72 6f 75 70 73 2e 20 54 68 69 73 20 67 72 6f 75 70 73 20 63 61 6e 20 62 65 20 75 73 65 64 | .groups..This.groups.can.be.used |
fd700 | 20 6c 61 74 65 72 20 69 6e 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 65 74 20 61 73 20 64 65 | .later.in.firewall.ruleset.as.de |
fd720 | 73 69 72 65 64 2e 00 54 68 65 20 66 69 72 65 77 61 6c 6c 20 73 75 70 70 6f 72 74 73 20 74 68 65 | sired..The.firewall.supports.the |
fd740 | 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 67 72 6f 75 70 73 20 66 6f 72 20 70 6f 72 74 73 2c 20 61 | .creation.of.groups.for.ports,.a |
fd760 | 64 64 72 65 73 73 65 73 2c 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 20 28 69 6d 70 6c 65 6d 65 6e | ddresses,.and.networks.(implemen |
fd780 | 74 65 64 20 75 73 69 6e 67 20 6e 65 74 66 69 6c 74 65 72 20 69 70 73 65 74 29 20 61 6e 64 20 74 | ted.using.netfilter.ipset).and.t |
fd7a0 | 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 69 6e 74 65 72 66 61 63 65 20 6f 72 20 7a 6f 6e 65 20 62 | he.option.of.interface.or.zone.b |
fd7c0 | 61 73 65 64 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 2e 00 54 68 65 20 66 69 72 73 74 20 | ased.firewall.policy..The.first. |
fd7e0 | 49 50 20 69 6e 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 6e 65 74 77 6f 72 6b 20 69 73 20 72 | IP.in.the.container.network.is.r |
fd800 | 65 73 65 72 76 65 64 20 62 79 20 74 68 65 20 65 6e 67 69 6e 65 20 61 6e 64 20 63 61 6e 6e 6f 74 | eserved.by.the.engine.and.cannot |
fd820 | 20 62 65 20 75 73 65 64 00 54 68 65 20 66 69 72 73 74 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 | .be.used.The.first.address.of.th |
fd840 | 65 20 70 61 72 61 6d 65 74 65 72 20 60 60 63 6c 69 65 6e 74 2d 73 75 62 6e 65 74 60 60 2c 20 77 | e.parameter.``client-subnet``,.w |
fd860 | 69 6c 6c 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 | ill.be.used.as.the.default.gatew |
fd880 | 61 79 2e 20 43 6f 6e 6e 65 63 74 65 64 20 73 65 73 73 69 6f 6e 73 20 63 61 6e 20 62 65 20 63 68 | ay..Connected.sessions.can.be.ch |
fd8a0 | 65 63 6b 65 64 20 76 69 61 20 74 68 65 20 60 60 73 68 6f 77 20 69 70 6f 65 2d 73 65 72 76 65 72 | ecked.via.the.``show.ipoe-server |
fd8c0 | 20 73 65 73 73 69 6f 6e 73 60 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 65 20 66 69 72 73 74 20 61 | .sessions``.command..The.first.a |
fd8e0 | 6e 64 20 61 72 67 75 61 62 6c 79 20 63 6c 65 61 6e 65 72 20 6f 70 74 69 6f 6e 20 69 73 20 74 6f | nd.arguably.cleaner.option.is.to |
fd900 | 20 6d 61 6b 65 20 79 6f 75 72 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 6d 61 74 63 68 20 47 52 | .make.your.IPsec.policy.match.GR |
fd920 | 45 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 | E.packets.between.external.addre |
fd940 | 73 73 65 73 20 6f 66 20 79 6f 75 72 20 72 6f 75 74 65 72 73 2e 20 54 68 69 73 20 69 73 20 74 68 | sses.of.your.routers..This.is.th |
fd960 | 65 20 62 65 73 74 20 6f 70 74 69 6f 6e 20 69 66 20 62 6f 74 68 20 72 6f 75 74 65 72 73 20 68 61 | e.best.option.if.both.routers.ha |
fd980 | 76 65 20 73 74 61 74 69 63 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 | ve.static.external.addresses..Th |
fd9a0 | 65 20 66 69 72 73 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 6d 65 63 68 61 6e 69 73 6d 2c 20 | e.first.flow.control.mechanism,. |
fd9c0 | 74 68 65 20 70 61 75 73 65 20 66 72 61 6d 65 2c 20 77 61 73 20 64 65 66 69 6e 65 64 20 62 79 20 | the.pause.frame,.was.defined.by. |
fd9e0 | 74 68 65 20 49 45 45 45 20 38 30 32 2e 33 78 20 73 74 61 6e 64 61 72 64 2e 00 54 68 65 20 66 69 | the.IEEE.802.3x.standard..The.fi |
fda00 | 72 73 74 20 69 70 20 61 64 64 72 65 73 73 20 69 73 20 74 68 65 20 52 50 27 73 20 61 64 64 72 65 | rst.ip.address.is.the.RP's.addre |
fda20 | 73 73 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 6d | ss.and.the.second.value.is.the.m |
fda40 | 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 20 67 72 6f 75 70 20 72 61 6e 67 65 73 20 63 | atching.prefix.of.group.ranges.c |
fda60 | 6f 76 65 72 65 64 2e 00 54 68 65 20 66 69 72 73 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 | overed..The.first.registration.r |
fda80 | 65 71 75 65 73 74 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 62 | equest.is.sent.to.the.protocol.b |
fdaa0 | 72 6f 61 64 63 61 73 74 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 72 | roadcast.address,.and.the.server |
fdac0 | 27 73 20 72 65 61 6c 20 70 72 6f 74 6f 63 6f 6c 20 61 64 64 72 65 73 73 20 69 73 20 64 79 6e 61 | 's.real.protocol.address.is.dyna |
fdae0 | 6d 69 63 61 6c 6c 79 20 64 65 74 65 63 74 65 64 20 66 72 6f 6d 20 74 68 65 20 66 69 72 73 74 20 | mically.detected.from.the.first. |
fdb00 | 72 65 67 69 73 74 72 61 74 69 6f 6e 20 72 65 70 6c 79 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | registration.reply..The.followin |
fdb20 | 67 20 50 50 50 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 65 73 74 73 20 4d 53 43 48 41 50 | g.PPP.configuration.tests.MSCHAP |
fdb40 | 2d 76 32 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 | -v2:.The.following.command.can.b |
fdb60 | 65 20 75 73 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 4f 54 50 20 6b 65 79 20 61 | e.used.to.generate.the.OTP.key.a |
fdb80 | 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f | s.well.as.the.CLI.commands.to.co |
fdba0 | 6e 66 69 67 75 72 65 20 74 68 65 6d 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d | nfigure.them:.The.following.comm |
fdbc0 | 61 6e 64 20 75 73 65 73 20 74 68 65 20 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c 20 6c 61 62 65 6c | and.uses.the.explicit-null.label |
fdbe0 | 20 76 61 6c 75 65 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 42 47 50 20 69 6e 73 74 61 6e 63 65 73 | .value.for.all.the.BGP.instances |
fdc00 | 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 | ..The.following.commands.let.you |
fdc20 | 20 63 68 65 63 6b 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 | .check.tunnel.status..The.follow |
fdc40 | 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 6c 65 74 20 79 6f 75 20 72 65 73 65 74 20 4f 70 65 6e 56 | ing.commands.let.you.reset.OpenV |
fdc60 | 50 4e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 74 72 61 6e 73 | PN..The.following.commands.trans |
fdc80 | 6c 61 74 65 20 74 6f 20 22 2d 2d 6e 65 74 20 68 6f 73 74 22 20 77 68 65 6e 20 74 68 65 20 63 6f | late.to."--net.host".when.the.co |
fdca0 | 6e 74 61 69 6e 65 72 20 69 73 20 63 72 65 61 74 65 64 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ntainer.is.created.The.following |
fdcc0 | 20 63 6f 6d 6d 61 6e 64 73 20 77 6f 75 6c 64 20 62 65 20 72 65 71 75 69 72 65 64 20 74 6f 20 73 | .commands.would.be.required.to.s |
fdce0 | 65 74 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 61 20 67 69 76 65 6e 20 64 79 6e 61 6d 69 63 20 72 | et.options.for.a.given.dynamic.r |
fdd00 | 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 69 6e 73 69 64 65 20 61 20 67 69 76 65 6e 20 76 | outing.protocol.inside.a.given.v |
fdd20 | 72 66 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | rf:.The.following.configuration. |
fdd40 | 64 65 6d 6f 6e 73 74 72 61 74 65 73 20 68 6f 77 20 74 6f 20 75 73 65 20 56 79 4f 53 20 74 6f 20 | demonstrates.how.to.use.VyOS.to. |
fdd60 | 61 63 68 69 65 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 62 61 73 65 64 20 6f 6e 20 | achieve.load.balancing.based.on. |
fdd80 | 74 68 65 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | the.domain.name..The.following.c |
fdda0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 78 70 6c 69 63 69 74 6c 79 20 6a 6f 69 6e 73 20 6d 75 | onfiguration.explicitly.joins.mu |
fddc0 | 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 66 66 31 35 3a 3a 31 32 33 34 60 20 6f 6e 20 69 6e | lticast.group.`ff15::1234`.on.in |
fdde0 | 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 61 6e 64 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 | terface.`eth1`.and.source-specif |
fde00 | 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 20 60 66 66 31 35 3a 3a 35 36 37 38 60 20 | ic.multicast.group.`ff15::5678`. |
fde20 | 77 69 74 68 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 60 32 30 30 31 3a 64 62 38 3a 3a 31 | with.source.address.`2001:db8::1 |
fde40 | 60 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 3a 00 54 68 65 20 66 6f 6c 6c 6f | `.on.interface.`eth1`:.The.follo |
fde60 | 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 6e 20 56 79 4f 53 20 61 70 70 6c 69 | wing.configuration.on.VyOS.appli |
fde80 | 65 73 20 74 6f 20 61 6c 6c 20 66 6f 6c 6c 6f 77 69 6e 67 20 33 72 64 20 70 61 72 74 79 20 76 65 | es.to.all.following.3rd.party.ve |
fdea0 | 6e 64 6f 72 73 2e 20 49 74 20 63 72 65 61 74 65 73 20 61 20 62 6f 6e 64 20 77 69 74 68 20 74 77 | ndors..It.creates.a.bond.with.tw |
fdec0 | 6f 20 6c 69 6e 6b 73 20 61 6e 64 20 56 4c 41 4e 20 31 30 2c 20 31 30 30 20 6f 6e 20 74 68 65 20 | o.links.and.VLAN.10,.100.on.the. |
fdee0 | 62 6f 6e 64 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 77 69 74 68 20 61 20 70 65 72 20 56 49 46 | bonded.interfaces.with.a.per.VIF |
fdf00 | 20 49 50 76 34 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e | .IPv4.address..The.following.con |
fdf20 | 66 69 67 75 72 61 74 69 6f 6e 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 74 65 72 6d 69 6e 61 | figuration.reverse-proxy.termina |
fdf40 | 74 65 20 53 53 4c 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 | te.SSL..The.following.configurat |
fdf60 | 69 6f 6e 20 74 65 72 6d 69 6e 61 74 65 73 20 53 53 4c 20 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 | ion.terminates.SSL.on.the.router |
fdf80 | 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 65 | ..The.following.configuration.te |
fdfa0 | 72 6d 69 6e 61 74 65 73 20 69 6e 63 6f 6d 69 6e 67 20 48 54 54 50 53 20 74 72 61 66 66 69 63 20 | rminates.incoming.HTTPS.traffic. |
fdfc0 | 6f 6e 20 74 68 65 20 72 6f 75 74 65 72 2c 20 74 68 65 6e 20 72 65 2d 65 6e 63 72 79 70 74 73 20 | on.the.router,.then.re-encrypts. |
fdfe0 | 74 68 65 20 74 72 61 66 66 69 63 20 61 6e 64 20 73 65 6e 64 73 20 74 6f 20 74 68 65 20 62 61 63 | the.traffic.and.sends.to.the.bac |
fe000 | 6b 65 6e 64 20 73 65 72 76 65 72 20 76 69 61 20 48 54 54 50 53 2e 20 54 68 69 73 20 69 73 20 75 | kend.server.via.HTTPS..This.is.u |
fe020 | 73 65 66 75 6c 20 69 66 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 | seful.if.encryption.is.required. |
fe040 | 66 6f 72 20 62 6f 74 68 20 6c 65 67 73 2c 20 62 75 74 20 79 6f 75 20 64 6f 20 6e 6f 74 20 77 61 | for.both.legs,.but.you.do.not.wa |
fe060 | 6e 74 20 74 6f 20 69 6e 73 74 61 6c 6c 20 70 75 62 6c 69 63 6c 79 20 74 72 75 73 74 65 64 20 63 | nt.to.install.publicly.trusted.c |
fe080 | 65 72 74 69 66 69 63 61 74 65 73 20 6f 6e 20 65 61 63 68 20 62 61 63 6b 65 6e 64 20 73 65 72 76 | ertificates.on.each.backend.serv |
fe0a0 | 65 72 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 | er..The.following.configuration. |
fe0c0 | 77 69 6c 6c 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 70 72 65 66 69 78 20 6f 75 74 20 6f 66 20 | will.assign.a./64.prefix.out.of. |
fe0e0 | 61 20 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 74 6f 20 65 74 68 30 2e 20 54 68 65 20 49 50 | a./56.delegation.to.eth0..The.IP |
fe100 | 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 30 20 77 69 6c 6c | v6.address.assigned.to.eth0.will |
fe120 | 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 66 66 66 66 2f 36 34 2e 20 49 66 20 79 6f 75 20 64 6f | .be.<prefix>::ffff/64..If.you.do |
fe140 | 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 6c 65 67 61 | .not.know.the.prefix.size.delega |
fe160 | 74 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 | ted.to.you,.start.with.sla-len.0 |
fe180 | 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 69 | ..The.following.configuration.wi |
fe1a0 | 6c 6c 20 73 65 74 75 70 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 73 6f 75 72 63 65 20 | ll.setup.a.PPPoE.session.source. |
fe1c0 | 66 72 6f 6d 20 65 74 68 31 20 61 6e 64 20 61 73 73 69 67 6e 20 61 20 2f 36 34 20 70 72 65 66 69 | from.eth1.and.assign.a./64.prefi |
fe1e0 | 78 20 6f 75 74 20 6f 66 20 61 20 2f 35 36 20 64 65 6c 65 67 61 74 69 6f 6e 20 28 72 65 71 75 65 | x.out.of.a./56.delegation.(reque |
fe200 | 73 74 65 64 20 66 72 6f 6d 20 74 68 65 20 49 53 50 29 20 74 6f 20 65 74 68 30 2e 20 54 68 65 20 | sted.from.the.ISP).to.eth0..The. |
fe220 | 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 65 64 20 74 6f 20 65 74 68 30 20 77 69 | IPv6.address.assigned.to.eth0.wi |
fe240 | 6c 6c 20 62 65 20 3c 70 72 65 66 69 78 3e 3a 3a 31 2f 36 34 2e 20 49 66 20 79 6f 75 20 64 6f 20 | ll.be.<prefix>::1/64..If.you.do. |
fe260 | 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 20 70 72 65 66 69 78 20 73 69 7a 65 20 64 65 6c 65 67 61 74 | not.know.the.prefix.size.delegat |
fe280 | 65 64 20 74 6f 20 79 6f 75 2c 20 73 74 61 72 74 20 77 69 74 68 20 73 6c 61 2d 6c 65 6e 20 30 2e | ed.to.you,.start.with.sla-len.0. |
fe2a0 | 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 61 6c 6c 6f 77 73 20 56 79 | .The.following.example.allows.Vy |
fe2c0 | 4f 53 20 74 6f 20 75 73 65 20 3a 61 62 62 72 3a 60 50 42 52 20 28 50 6f 6c 69 63 79 2d 42 61 73 | OS.to.use.:abbr:`PBR.(Policy-Bas |
fe2e0 | 65 64 20 52 6f 75 74 69 6e 67 29 60 20 66 6f 72 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 | ed.Routing)`.for.traffic,.which. |
fe300 | 6f 72 69 67 69 6e 61 74 65 64 20 66 72 6f 6d 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c | originated.from.the.router.itsel |
fe320 | 66 2e 20 54 68 61 74 20 73 6f 6c 75 74 69 6f 6e 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 49 53 | f..That.solution.for.multiple.IS |
fe340 | 50 27 73 20 61 6e 64 20 56 79 4f 53 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 | P's.and.VyOS.router.will.respond |
fe360 | 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 74 68 | .from.the.same.interface.that.th |
fe380 | 65 20 70 61 63 6b 65 74 20 77 61 73 20 72 65 63 65 69 76 65 64 2e 20 41 6c 73 6f 2c 20 69 74 20 | e.packet.was.received..Also,.it. |
fe3a0 | 75 73 65 64 2c 20 69 66 20 77 65 20 77 61 6e 74 20 74 68 61 74 20 6f 6e 65 20 56 50 4e 20 74 75 | used,.if.we.want.that.one.VPN.tu |
fe3c0 | 6e 6e 65 6c 20 74 6f 20 62 65 20 74 68 72 6f 75 67 68 20 6f 6e 65 20 70 72 6f 76 69 64 65 72 2c | nnel.to.be.through.one.provider, |
fe3e0 | 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 20 74 68 72 6f 75 67 68 20 61 6e 6f 74 68 65 72 2e | .and.the.second.through.another. |
fe400 | 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 72 65 61 74 65 73 20 61 | .The.following.example.creates.a |
fe420 | 20 57 41 50 2e 20 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6d 75 6c 74 69 70 6c 65 20 | .WAP..When.configuring.multiple. |
fe440 | 57 41 50 20 69 6e 74 65 72 66 61 63 65 73 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 | WAP.interfaces,.you.must.specify |
fe460 | 20 75 6e 69 71 75 65 20 49 50 20 61 64 64 72 65 73 73 65 73 2c 20 63 68 61 6e 6e 65 6c 73 2c 20 | .unique.IP.addresses,.channels,. |
fe480 | 4e 65 74 77 6f 72 6b 20 49 44 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 65 66 65 72 72 65 64 20 74 6f | Network.IDs.commonly.referred.to |
fe4a0 | 20 61 73 20 3a 61 62 62 72 3a 60 53 53 49 44 20 28 53 65 72 76 69 63 65 20 53 65 74 20 49 64 65 | .as.:abbr:`SSID.(Service.Set.Ide |
fe4c0 | 6e 74 69 66 69 65 72 29 60 2c 20 61 6e 64 20 4d 41 43 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 | ntifier)`,.and.MAC.addresses..Th |
fe4e0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 | e.following.example.is.based.on. |
fe500 | 61 20 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 73 20 4d 43 37 37 31 30 20 6d 69 6e 69 50 43 49 | a.Sierra.Wireless.MC7710.miniPCI |
fe520 | 65 20 63 61 72 64 20 28 6f 6e 6c 79 20 74 68 65 20 66 6f 72 6d 20 66 61 63 74 6f 72 20 69 6e 20 | e.card.(only.the.form.factor.in. |
fe540 | 72 65 61 6c 69 74 79 20 69 74 20 72 75 6e 73 20 55 42 53 29 20 61 6e 64 20 44 65 75 74 73 63 68 | reality.it.runs.UBS).and.Deutsch |
fe560 | 65 20 54 65 6c 65 6b 6f 6d 20 61 73 20 49 53 50 2e 20 54 68 65 20 63 61 72 64 20 69 73 20 61 73 | e.Telekom.as.ISP..The.card.is.as |
fe580 | 73 65 6d 62 6c 65 64 20 69 6e 74 6f 20 61 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d | sembled.into.a.:ref:`pc-engines- |
fe5a0 | 61 70 75 34 60 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 74 6f 70 | apu4`..The.following.example.top |
fe5c0 | 6f 6c 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 45 56 45 2d 4e 47 2e 00 54 68 | ology.was.built.using.EVE-NG..Th |
fe5e0 | 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 77 69 6c 6c 20 73 68 6f 77 20 68 6f | e.following.example.will.show.ho |
fe600 | 77 20 56 79 4f 53 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 64 69 72 65 63 74 20 77 | w.VyOS.can.be.used.to.redirect.w |
fe620 | 65 62 20 74 72 61 66 66 69 63 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 74 72 61 6e 73 70 | eb.traffic.to.an.external.transp |
fe640 | 61 72 65 6e 74 20 70 72 6f 78 79 3a 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 78 61 6d 70 | arent.proxy:.The.following.examp |
fe660 | 6c 65 73 20 73 68 6f 77 20 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 4e 41 54 36 34 20 | les.show.how.to.configure.NAT64. |
fe680 | 6f 6e 20 61 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 54 68 65 20 31 39 32 2e 30 2e 32 2e 31 30 | on.a.VyOS.router..The.192.0.2.10 |
fe6a0 | 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 61 73 20 74 68 65 20 49 50 76 34 20 61 64 64 | .address.is.used.as.the.IPv4.add |
fe6c0 | 72 65 73 73 20 66 6f 72 20 74 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 70 6f 6f 6c 2e 00 54 | ress.for.the.translation.pool..T |
fe6e0 | 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 68 61 72 64 77 61 72 65 20 6d 6f 64 75 6c 65 73 20 68 61 | he.following.hardware.modules.ha |
fe700 | 76 65 20 62 65 65 6e 20 74 65 73 74 65 64 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 69 6e 20 61 | ve.been.tested.successfully.in.a |
fe720 | 6e 20 3a 72 65 66 3a 60 70 63 2d 65 6e 67 69 6e 65 73 2d 61 70 75 34 60 20 62 6f 61 72 64 3a 00 | n.:ref:`pc-engines-apu4`.board:. |
fe740 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 20 66 6f 72 20 | The.following.is.the.config.for. |
fe760 | 74 68 65 20 69 50 68 6f 6e 65 20 70 65 65 72 20 61 62 6f 76 65 2e 20 49 74 27 73 20 69 6d 70 6f | the.iPhone.peer.above..It's.impo |
fe780 | 72 74 61 6e 74 20 74 6f 20 6e 6f 74 65 20 74 68 61 74 20 74 68 65 20 60 60 41 6c 6c 6f 77 65 64 | rtant.to.note.that.the.``Allowed |
fe7a0 | 49 50 73 60 60 20 77 69 6c 64 63 61 72 64 20 73 65 74 74 69 6e 67 20 64 69 72 65 63 74 73 20 61 | IPs``.wildcard.setting.directs.a |
fe7c0 | 6c 6c 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 20 74 68 72 6f 75 67 68 | ll.IPv4.and.IPv6.traffic.through |
fe7e0 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 | .the.connection..The.following.p |
fe800 | 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c | rotocols.can.be.used:.any,.babel |
fe820 | 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 65 69 67 72 70 2c 20 69 73 69 73 2c 20 6b | ,.bgp,.connected,.eigrp,.isis,.k |
fe840 | 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 00 | ernel,.ospf,.rip,.static,.table. |
fe860 | 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 20 63 61 6e 20 62 65 20 75 | The.following.protocols.can.be.u |
fe880 | 73 65 64 3a 20 61 6e 79 2c 20 62 61 62 65 6c 2c 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c | sed:.any,.babel,.bgp,.connected, |
fe8a0 | 20 69 73 69 73 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 76 33 2c 20 72 69 70 6e 67 2c 20 73 74 | .isis,.kernel,.ospfv3,.ripng,.st |
fe8c0 | 61 74 69 63 2c 20 74 61 62 6c 65 00 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 74 72 75 63 74 | atic,.table.The.following.struct |
fe8e0 | 75 72 65 20 72 65 73 70 72 65 73 65 6e 74 20 74 68 65 20 63 6c 69 20 73 74 72 75 63 74 75 72 65 | ure.respresent.the.cli.structure |
fe900 | 2e 00 54 68 65 20 66 6f 72 6d 75 6c 61 20 66 6f 72 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 54 | ..The.formula.for.unfragmented.T |
fe920 | 43 50 20 61 6e 64 20 55 44 50 20 70 61 63 6b 65 74 73 20 69 73 00 54 68 65 20 66 6f 72 77 61 72 | CP.and.UDP.packets.is.The.forwar |
fe940 | 64 69 6e 67 20 64 65 6c 61 79 20 74 69 6d 65 20 69 73 20 74 68 65 20 74 69 6d 65 20 73 70 65 6e | ding.delay.time.is.the.time.spen |
fe960 | 74 20 69 6e 20 65 61 63 68 20 6f 66 20 74 68 65 20 6c 69 73 74 65 6e 69 6e 67 20 61 6e 64 20 6c | t.in.each.of.the.listening.and.l |
fe980 | 65 61 72 6e 69 6e 67 20 73 74 61 74 65 73 20 62 65 66 6f 72 65 20 74 68 65 20 46 6f 72 77 61 72 | earning.states.before.the.Forwar |
fe9a0 | 64 69 6e 67 20 73 74 61 74 65 20 69 73 20 65 6e 74 65 72 65 64 2e 20 54 68 69 73 20 64 65 6c 61 | ding.state.is.entered..This.dela |
fe9c0 | 79 20 69 73 20 73 6f 20 74 68 61 74 20 77 68 65 6e 20 61 20 6e 65 77 20 62 72 69 64 67 65 20 63 | y.is.so.that.when.a.new.bridge.c |
fe9e0 | 6f 6d 65 73 20 6f 6e 74 6f 20 61 20 62 75 73 79 20 6e 65 74 77 6f 72 6b 20 69 74 20 6c 6f 6f 6b | omes.onto.a.busy.network.it.look |
fea00 | 73 20 61 74 20 73 6f 6d 65 20 74 72 61 66 66 69 63 20 62 65 66 6f 72 65 20 70 61 72 74 69 63 69 | s.at.some.traffic.before.partici |
fea20 | 70 61 74 69 6e 67 2e 00 54 68 65 20 67 65 6e 65 72 61 74 65 64 20 63 6f 6e 66 69 67 75 72 61 74 | pating..The.generated.configurat |
fea40 | 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 67 65 6e 65 72 61 74 65 | ion.will.look.like:.The.generate |
fea60 | 64 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 74 68 65 6e 20 6f 75 74 70 75 74 20 74 6f 20 | d.parameters.are.then.output.to. |
fea80 | 74 68 65 20 63 6f 6e 73 6f 6c 65 2e 00 54 68 65 20 67 65 6e 65 72 69 63 20 6e 61 6d 65 20 6f 66 | the.console..The.generic.name.of |
feaa0 | 20 51 75 61 6c 69 74 79 20 6f 66 20 53 65 72 76 69 63 65 20 6f 72 20 54 72 61 66 66 69 63 20 43 | .Quality.of.Service.or.Traffic.C |
feac0 | 6f 6e 74 72 6f 6c 20 69 6e 76 6f 6c 76 65 73 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 73 68 61 70 | ontrol.involves.things.like.shap |
feae0 | 69 6e 67 20 74 72 61 66 66 69 63 2c 20 73 63 68 65 64 75 6c 69 6e 67 20 6f 72 20 64 72 6f 70 70 | ing.traffic,.scheduling.or.dropp |
feb00 | 69 6e 67 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 20 61 72 65 20 74 68 65 20 6b 69 6e 64 20 | ing.packets,.which.are.the.kind. |
feb20 | 6f 66 20 74 68 69 6e 67 73 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 70 6c 61 79 20 77 | of.things.you.may.want.to.play.w |
feb40 | 69 74 68 20 77 68 65 6e 20 79 6f 75 20 68 61 76 65 2c 20 66 6f 72 20 69 6e 73 74 61 6e 63 65 2c | ith.when.you.have,.for.instance, |
feb60 | 20 61 20 62 61 6e 64 77 69 64 74 68 20 62 6f 74 74 6c 65 6e 65 63 6b 20 69 6e 20 61 20 6c 69 6e | .a.bandwidth.bottleneck.in.a.lin |
feb80 | 6b 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 73 6f 6d 65 68 6f 77 20 70 72 69 6f 72 69 | k.and.you.want.to.somehow.priori |
feba0 | 74 69 7a 65 20 73 6f 6d 65 20 74 79 70 65 20 6f 66 20 74 72 61 66 66 69 63 20 6f 76 65 72 20 61 | tize.some.type.of.traffic.over.a |
febc0 | 6e 6f 74 68 65 72 2e 00 54 68 65 20 68 61 73 68 20 74 79 70 65 20 75 73 65 64 20 77 68 65 6e 20 | nother..The.hash.type.used.when. |
febe0 | 64 69 73 63 6f 76 65 72 69 6e 67 20 66 69 6c 65 20 6f 6e 20 6d 61 73 74 65 72 20 73 65 72 76 65 | discovering.file.on.master.serve |
fec00 | 72 20 28 64 65 66 61 75 6c 74 3a 20 73 68 61 32 35 36 29 00 54 68 65 20 68 65 61 6c 74 68 20 6f | r.(default:.sha256).The.health.o |
fec20 | 66 20 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 70 61 74 68 73 20 61 73 73 69 67 6e 65 64 20 | f.interfaces.and.paths.assigned. |
fec40 | 74 6f 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 20 69 73 20 70 65 72 69 6f 64 69 63 | to.the.load.balancer.is.periodic |
fec60 | 61 6c 6c 79 20 63 68 65 63 6b 65 64 20 62 79 20 73 65 6e 64 69 6e 67 20 49 43 4d 50 20 70 61 63 | ally.checked.by.sending.ICMP.pac |
fec80 | 6b 65 74 73 20 28 70 69 6e 67 29 20 74 6f 20 72 65 6d 6f 74 65 20 64 65 73 74 69 6e 61 74 69 6f | kets.(ping).to.remote.destinatio |
feca0 | 6e 73 2c 20 61 20 54 54 4c 20 74 65 73 74 20 6f 72 20 74 68 65 20 65 78 65 63 75 74 69 6f 6e 20 | ns,.a.TTL.test.or.the.execution. |
fecc0 | 6f 66 20 61 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 2e 20 49 66 20 61 6e 20 | of.a.user.defined.script..If.an. |
fece0 | 69 6e 74 65 72 66 61 63 65 20 66 61 69 6c 73 20 74 68 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b | interface.fails.the.health.check |
fed00 | 20 69 74 20 69 73 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 6c 6f 61 64 20 62 61 6c | .it.is.removed.from.the.load.bal |
fed20 | 61 6e 63 65 72 27 73 20 70 6f 6f 6c 20 6f 66 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 6f 20 65 | ancer's.pool.of.interfaces..To.e |
fed40 | 6e 61 62 6c 65 20 68 65 61 6c 74 68 20 63 68 65 63 6b 69 6e 67 20 66 6f 72 20 61 6e 20 69 6e 74 | nable.health.checking.for.an.int |
fed60 | 65 72 66 61 63 65 3a 00 54 68 65 20 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 20 73 70 65 | erface:.The.hello-multiplier.spe |
fed80 | 63 69 66 69 65 73 20 68 6f 77 20 6d 61 6e 79 20 48 65 6c 6c 6f 73 20 74 6f 20 73 65 6e 64 20 70 | cifies.how.many.Hellos.to.send.p |
feda0 | 65 72 20 73 65 63 6f 6e 64 2c 20 66 72 6f 6d 20 31 20 28 65 76 65 72 79 20 73 65 63 6f 6e 64 29 | er.second,.from.1.(every.second) |
fedc0 | 20 74 6f 20 31 30 20 28 65 76 65 72 79 20 31 30 30 6d 73 29 2e 20 54 68 75 73 20 6f 6e 65 20 63 | .to.10.(every.100ms)..Thus.one.c |
fede0 | 61 6e 20 68 61 76 65 20 31 73 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 20 66 6f 72 20 | an.have.1s.convergence.time.for. |
fee00 | 4f 53 50 46 2e 20 49 66 20 74 68 69 73 20 66 6f 72 6d 20 69 73 20 73 70 65 63 69 66 69 65 64 2c | OSPF..If.this.form.is.specified, |
fee20 | 20 74 68 65 6e 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 61 64 76 65 72 74 69 | .then.the.hello-interval.adverti |
fee40 | 73 65 64 20 69 6e 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 69 73 20 73 65 74 20 74 6f 20 30 | sed.in.Hello.packets.is.set.to.0 |
fee60 | 20 61 6e 64 20 74 68 65 20 68 65 6c 6c 6f 2d 69 6e 74 65 72 76 61 6c 20 6f 6e 20 72 65 63 65 69 | .and.the.hello-interval.on.recei |
fee80 | 76 65 64 20 48 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 69 73 20 6e 6f 74 20 63 68 65 63 6b 65 64 | ved.Hello.packets.is.not.checked |
feea0 | 2c 20 74 68 75 73 20 74 68 65 20 68 65 6c 6c 6f 2d 6d 75 6c 74 69 70 6c 69 65 72 20 6e 65 65 64 | ,.thus.the.hello-multiplier.need |
feec0 | 20 4e 4f 54 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 | .NOT.be.the.same.across.multiple |
feee0 | 20 72 6f 75 74 65 72 73 20 6f 6e 20 61 20 63 6f 6d 6d 6f 6e 20 6c 69 6e 6b 2e 00 54 68 65 20 68 | .routers.on.a.common.link..The.h |
fef00 | 6f 73 74 6e 61 6d 65 20 63 61 6e 20 62 65 20 75 70 20 74 6f 20 36 33 20 63 68 61 72 61 63 74 65 | ostname.can.be.up.to.63.characte |
fef20 | 72 73 2e 20 41 20 68 6f 73 74 6e 61 6d 65 20 6d 75 73 74 20 73 74 61 72 74 20 61 6e 64 20 65 6e | rs..A.hostname.must.start.and.en |
fef40 | 64 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 20 6f 72 20 64 69 67 69 74 2c 20 61 6e 64 20 68 61 | d.with.a.letter.or.digit,.and.ha |
fef60 | 76 65 20 61 73 20 69 6e 74 65 72 69 6f 72 20 63 68 61 72 61 63 74 65 72 73 20 6f 6e 6c 79 20 6c | ve.as.interior.characters.only.l |
fef80 | 65 74 74 65 72 73 2c 20 64 69 67 69 74 73 2c 20 6f 72 20 61 20 68 79 70 68 65 6e 2e 00 54 68 65 | etters,.digits,.or.a.hyphen..The |
fefa0 | 20 68 6f 73 74 6e 61 6d 65 20 6f 72 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6d | .hostname.or.IP.address.of.the.m |
fefc0 | 61 73 74 65 72 00 54 68 65 20 69 64 65 6e 74 69 66 69 65 72 20 69 73 20 74 68 65 20 64 65 76 69 | aster.The.identifier.is.the.devi |
fefe0 | 63 65 27 73 20 44 55 49 44 3a 20 63 6f 6c 6f 6e 2d 73 65 70 61 72 61 74 65 64 20 68 65 78 20 6c | ce's.DUID:.colon-separated.hex.l |
ff000 | 69 73 74 20 28 61 73 20 75 73 65 64 20 62 79 20 69 73 63 2d 64 68 63 70 20 6f 70 74 69 6f 6e 20 | ist.(as.used.by.isc-dhcp.option. |
ff020 | 64 68 63 70 76 36 2e 63 6c 69 65 6e 74 2d 69 64 29 2e 20 49 66 20 74 68 65 20 64 65 76 69 63 65 | dhcpv6.client-id)..If.the.device |
ff040 | 20 61 6c 72 65 61 64 79 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 6c 65 61 73 65 20 66 72 6f | .already.has.a.dynamic.lease.fro |
ff060 | 6d 20 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 72 2c 20 69 74 73 20 44 55 49 44 20 63 61 | m.the.DHCPv6.server,.its.DUID.ca |
ff080 | 6e 20 62 65 20 66 6f 75 6e 64 20 77 69 74 68 20 60 60 73 68 6f 77 20 73 65 72 76 69 63 65 20 64 | n.be.found.with.``show.service.d |
ff0a0 | 68 63 70 76 36 20 73 65 72 76 65 72 20 6c 65 61 73 65 73 60 60 2e 20 54 68 65 20 44 55 49 44 20 | hcpv6.server.leases``..The.DUID. |
ff0c0 | 62 65 67 69 6e 73 20 61 74 20 74 68 65 20 35 74 68 20 6f 63 74 65 74 20 28 61 66 74 65 72 20 74 | begins.at.the.5th.octet.(after.t |
ff0e0 | 68 65 20 34 74 68 20 63 6f 6c 6f 6e 29 20 6f 66 20 49 41 49 44 5f 44 55 49 44 2e 00 54 68 65 20 | he.4th.colon).of.IAID_DUID..The. |
ff100 | 69 6e 64 69 76 69 64 75 61 6c 20 73 70 6f 6b 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 20 | individual.spoke.configurations. |
ff120 | 6f 6e 6c 79 20 64 69 66 66 65 72 20 69 6e 20 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 | only.differ.in.the.local.IP.addr |
ff140 | 65 73 73 20 6f 6e 20 74 68 65 20 60 60 74 75 6e 31 30 60 60 20 69 6e 74 65 72 66 61 63 65 2e 20 | ess.on.the.``tun10``.interface.. |
ff160 | 53 65 65 20 74 68 65 20 61 62 6f 76 65 20 64 69 61 67 72 61 6d 20 66 6f 72 20 74 68 65 20 69 6e | See.the.above.diagram.for.the.in |
ff180 | 64 69 76 69 64 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 00 54 68 65 20 69 6e 6e 65 72 | dividual.IP.addresses..The.inner |
ff1a0 | 20 74 61 67 20 69 73 20 74 68 65 20 74 61 67 20 77 68 69 63 68 20 69 73 20 63 6c 6f 73 65 73 74 | .tag.is.the.tag.which.is.closest |
ff1c0 | 20 74 6f 20 74 68 65 20 70 61 79 6c 6f 61 64 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 66 | .to.the.payload.portion.of.the.f |
ff1e0 | 72 61 6d 65 2e 20 49 74 20 69 73 20 6f 66 66 69 63 69 61 6c 6c 79 20 63 61 6c 6c 65 64 20 43 2d | rame..It.is.officially.called.C- |
ff200 | 54 41 47 20 28 63 75 73 74 6f 6d 65 72 20 74 61 67 2c 20 77 69 74 68 20 65 74 68 65 72 74 79 70 | TAG.(customer.tag,.with.ethertyp |
ff220 | 65 20 30 78 38 31 30 30 29 2e 20 54 68 65 20 6f 75 74 65 72 20 74 61 67 20 69 73 20 74 68 65 20 | e.0x8100)..The.outer.tag.is.the. |
ff240 | 6f 6e 65 20 63 6c 6f 73 65 72 2f 63 6c 6f 73 65 73 74 20 74 6f 20 74 68 65 20 45 74 68 65 72 6e | one.closer/closest.to.the.Ethern |
ff260 | 65 74 20 68 65 61 64 65 72 2c 20 69 74 73 20 6e 61 6d 65 20 69 73 20 53 2d 54 41 47 20 28 73 65 | et.header,.its.name.is.S-TAG.(se |
ff280 | 72 76 69 63 65 20 74 61 67 20 77 69 74 68 20 45 74 68 65 72 6e 65 74 20 54 79 70 65 20 3d 20 30 | rvice.tag.with.Ethernet.Type.=.0 |
ff2a0 | 78 38 38 61 38 29 2e 00 54 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 72 61 66 66 69 63 20 77 69 | x88a8)..The.interface.traffic.wi |
ff2c0 | 6c 6c 20 62 65 20 63 6f 6d 69 6e 67 20 69 6e 20 6f 6e 3b 00 54 68 65 20 69 6e 74 65 72 66 61 63 | ll.be.coming.in.on;.The.interfac |
ff2e0 | 65 20 75 73 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 61 6e 64 20 72 65 6c 61 79 20 69 6e 64 69 | e.used.to.receive.and.relay.indi |
ff300 | 76 69 64 75 61 6c 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b 65 74 73 2e 20 49 66 20 79 6f 75 | vidual.broadcast.packets..If.you |
ff320 | 20 77 61 6e 74 20 74 6f 20 72 65 63 65 69 76 65 2f 72 65 6c 61 79 20 70 61 63 6b 65 74 73 20 6f | .want.to.receive/relay.packets.o |
ff340 | 6e 20 62 6f 74 68 20 60 65 74 68 31 60 20 61 6e 64 20 60 65 74 68 32 60 20 62 6f 74 68 20 69 6e | n.both.`eth1`.and.`eth2`.both.in |
ff360 | 74 65 72 66 61 63 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 61 64 64 65 64 2e 00 54 68 65 20 69 | terfaces.need.to.be.added..The.i |
ff380 | 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 77 65 20 77 61 6e 74 20 74 6f 20 | nternal.IP.addresses.we.want.to. |
ff3a0 | 74 72 61 6e 73 6c 61 74 65 00 54 68 65 20 69 6e 76 65 72 73 65 20 63 6f 6e 66 69 67 75 72 61 74 | translate.The.inverse.configurat |
ff3c0 | 69 6f 6e 20 68 61 73 20 74 6f 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 72 65 6d | ion.has.to.be.applied.to.the.rem |
ff3e0 | 6f 74 65 20 73 69 64 65 2e 00 54 68 65 20 6c 61 72 67 65 73 74 20 4d 54 55 20 73 69 7a 65 20 79 | ote.side..The.largest.MTU.size.y |
ff400 | 6f 75 20 63 61 6e 20 75 73 65 20 77 69 74 68 20 44 53 4c 20 69 73 20 31 34 39 32 20 64 75 65 20 | ou.can.use.with.DSL.is.1492.due. |
ff420 | 74 6f 20 50 50 50 6f 45 20 6f 76 65 72 68 65 61 64 2e 20 49 66 20 79 6f 75 20 61 72 65 20 73 77 | to.PPPoE.overhead..If.you.are.sw |
ff440 | 69 74 63 68 69 6e 67 20 66 72 6f 6d 20 61 20 44 48 43 50 20 62 61 73 65 64 20 49 53 50 20 6c 69 | itching.from.a.DHCP.based.ISP.li |
ff460 | 6b 65 20 63 61 62 6c 65 20 74 68 65 6e 20 62 65 20 61 77 61 72 65 20 74 68 61 74 20 74 68 69 6e | ke.cable.then.be.aware.that.thin |
ff480 | 67 73 20 6c 69 6b 65 20 56 50 4e 20 6c 69 6e 6b 73 20 6d 61 79 20 6e 65 65 64 20 74 6f 20 68 61 | gs.like.VPN.links.may.need.to.ha |
ff4a0 | 76 65 20 74 68 65 69 72 20 4d 54 55 20 73 69 7a 65 73 20 61 64 6a 75 73 74 65 64 20 74 6f 20 77 | ve.their.MTU.sizes.adjusted.to.w |
ff4c0 | 6f 72 6b 20 77 69 74 68 69 6e 20 74 68 69 73 20 6c 69 6d 69 74 2e 00 54 68 65 20 6c 61 73 74 20 | ork.within.this.limit..The.last. |
ff4e0 | 73 74 65 70 20 69 73 20 74 6f 20 64 65 66 69 6e 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 72 | step.is.to.define.an.interface.r |
ff500 | 6f 75 74 65 20 66 6f 72 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 74 6f 20 67 65 74 20 74 | oute.for.192.168.2.0/24.to.get.t |
ff520 | 68 72 6f 75 67 68 20 74 68 65 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 60 | hrough.the.WireGuard.interface.` |
ff540 | 77 67 30 31 60 2e 20 4d 75 6c 74 69 70 6c 65 20 49 50 73 20 6f 72 20 6e 65 74 77 6f 72 6b 73 20 | wg01`..Multiple.IPs.or.networks. |
ff560 | 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 72 6f 75 74 65 64 2e 20 54 68 65 20 6c | can.be.defined.and.routed..The.l |
ff580 | 61 73 74 20 63 68 65 63 6b 20 69 73 20 61 6c 6c 6f 77 65 64 2d 69 70 73 20 77 68 69 63 68 20 65 | ast.check.is.allowed-ips.which.e |
ff5a0 | 69 74 68 65 72 20 70 72 65 76 65 6e 74 73 20 6f 72 20 61 6c 6c 6f 77 73 20 74 68 65 20 74 72 61 | ither.prevents.or.allows.the.tra |
ff5c0 | 66 66 69 63 2e 00 54 68 65 20 6c 65 67 61 63 79 20 61 6e 64 20 7a 6f 6e 65 2d 62 61 73 65 64 20 | ffic..The.legacy.and.zone-based. |
ff5e0 | 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 69 | firewall.configuration.options.i |
ff600 | 73 20 6e 6f 74 20 6c 6f 6e 67 65 72 20 73 75 70 70 6f 72 74 65 64 2e 20 54 68 65 79 20 61 72 65 | s.not.longer.supported..They.are |
ff620 | 20 68 65 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 20 70 75 72 70 6f 73 65 73 20 6f 6e 6c | .here.for.reference.purposes.onl |
ff640 | 79 2e 00 54 68 65 20 6c 69 6d 69 74 65 72 20 70 65 72 66 6f 72 6d 73 20 62 61 73 69 63 20 69 6e | y..The.limiter.performs.basic.in |
ff660 | 67 72 65 73 73 20 70 6f 6c 69 63 69 6e 67 20 6f 66 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2e | gress.policing.of.traffic.flows. |
ff680 | 20 4d 75 6c 74 69 70 6c 65 20 63 6c 61 73 73 65 73 20 6f 66 20 74 72 61 66 66 69 63 20 63 61 6e | .Multiple.classes.of.traffic.can |
ff6a0 | 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 74 72 61 66 66 69 63 20 6c 69 6d 69 74 73 20 63 | .be.defined.and.traffic.limits.c |
ff6c0 | 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 65 61 63 68 20 63 6c 61 73 73 2e 20 41 6c 74 | an.be.applied.to.each.class..Alt |
ff6e0 | 68 6f 75 67 68 20 74 68 65 20 70 6f 6c 69 63 65 72 20 75 73 65 73 20 61 20 74 6f 6b 65 6e 20 62 | hough.the.policer.uses.a.token.b |
ff700 | 75 63 6b 65 74 20 6d 65 63 68 61 6e 69 73 6d 20 69 6e 74 65 72 6e 61 6c 6c 79 2c 20 69 74 20 64 | ucket.mechanism.internally,.it.d |
ff720 | 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 63 61 70 61 62 69 6c 69 74 79 20 74 6f 20 64 | oes.not.have.the.capability.to.d |
ff740 | 65 6c 61 79 20 61 20 70 61 63 6b 65 74 20 61 73 20 61 20 73 68 61 70 69 6e 67 20 6d 65 63 68 61 | elay.a.packet.as.a.shaping.mecha |
ff760 | 6e 69 73 6d 20 64 6f 65 73 2e 20 54 72 61 66 66 69 63 20 65 78 63 65 65 64 69 6e 67 20 74 68 65 | nism.does..Traffic.exceeding.the |
ff780 | 20 64 65 66 69 6e 65 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 73 20 69 73 20 64 69 72 | .defined.bandwidth.limits.is.dir |
ff7a0 | 65 63 74 6c 79 20 64 72 6f 70 70 65 64 2e 20 41 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 | ectly.dropped..A.maximum.allowed |
ff7c0 | 20 62 75 72 73 74 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 6f 2e 00 54 68 | .burst.can.be.configured.too..Th |
ff7e0 | 65 20 6c 69 6e 6b 20 62 61 6e 64 77 69 64 74 68 20 65 78 74 65 6e 64 65 64 20 63 6f 6d 6d 75 6e | e.link.bandwidth.extended.commun |
ff800 | 69 74 79 20 69 73 20 65 6e 63 6f 64 65 64 20 61 73 20 6e 6f 6e 2d 74 72 61 6e 73 69 74 69 76 65 | ity.is.encoded.as.non-transitive |
ff820 | 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | .The.local.IPv4.or.IPv6.addresse |
ff840 | 73 20 74 6f 20 62 69 6e 64 20 74 68 65 20 44 4e 53 20 66 6f 72 77 61 72 64 65 72 20 74 6f 2e 20 | s.to.bind.the.DNS.forwarder.to.. |
ff860 | 54 68 65 20 66 6f 72 77 61 72 64 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 74 68 69 | The.forwarder.will.listen.on.thi |
ff880 | 73 20 61 64 64 72 65 73 73 20 66 6f 72 20 69 6e 63 6f 6d 69 6e 67 20 63 6f 6e 6e 65 63 74 69 6f | s.address.for.incoming.connectio |
ff8a0 | 6e 73 2e 00 54 68 65 20 6c 6f 63 61 6c 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 61 64 64 72 65 | ns..The.local.IPv4.or.IPv6.addre |
ff8c0 | 73 73 65 73 20 74 6f 20 75 73 65 20 61 73 20 61 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 | sses.to.use.as.a.source.address. |
ff8e0 | 66 6f 72 20 73 65 6e 64 69 6e 67 20 71 75 65 72 69 65 73 2e 20 54 68 65 20 66 6f 72 77 61 72 64 | for.sending.queries..The.forward |
ff900 | 65 72 20 77 69 6c 6c 20 73 65 6e 64 20 66 6f 72 77 61 72 64 65 64 20 6f 75 74 62 6f 75 6e 64 20 | er.will.send.forwarded.outbound. |
ff920 | 44 4e 53 20 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 74 68 69 73 20 61 64 64 72 65 73 73 2e 00 | DNS.requests.from.this.address.. |
ff940 | 54 68 65 20 6c 6f 63 61 6c 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 73 75 62 6e 65 | The.local.site.will.have.a.subne |
ff960 | 74 20 6f 66 20 31 30 2e 30 2e 30 2e 30 2f 31 36 2e 00 54 68 65 20 6c 6f 6f 70 62 61 63 6b 20 6e | t.of.10.0.0.0/16..The.loopback.n |
ff980 | 65 74 77 6f 72 6b 69 6e 67 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 20 76 69 72 74 75 61 6c | etworking.interface.is.a.virtual |
ff9a0 | 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 65 6e 74 69 | .network.device.implemented.enti |
ff9c0 | 72 65 6c 79 20 69 6e 20 73 6f 66 74 77 61 72 65 2e 20 41 6c 6c 20 74 72 61 66 66 69 63 20 73 65 | rely.in.software..All.traffic.se |
ff9e0 | 6e 74 20 74 6f 20 69 74 20 22 6c 6f 6f 70 73 20 62 61 63 6b 22 20 61 6e 64 20 6a 75 73 74 20 74 | nt.to.it."loops.back".and.just.t |
ffa00 | 61 72 67 65 74 73 20 73 65 72 76 69 63 65 73 20 6f 6e 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6d 61 | argets.services.on.your.local.ma |
ffa20 | 63 68 69 6e 65 2e 00 54 68 65 20 6d 61 69 6e 20 70 6f 69 6e 74 73 20 72 65 67 61 72 64 69 6e 67 | chine..The.main.points.regarding |
ffa40 | 20 74 68 69 73 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 61 6e 64 20 74 65 72 6d 69 6e 6f 6c 6f 67 | .this.packet.flow.and.terminolog |
ffa60 | 79 20 75 73 65 64 20 69 6e 20 56 79 4f 53 20 66 69 72 65 77 61 6c 6c 20 61 72 65 20 63 6f 76 65 | y.used.in.VyOS.firewall.are.cove |
ffa80 | 72 65 64 20 62 65 6c 6f 77 3a 00 54 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 56 79 | red.below:.The.main.structure.Vy |
ffaa0 | 4f 53 20 66 69 72 65 77 61 6c 6c 20 63 6c 69 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 | OS.firewall.cli.is.shown.next:.T |
ffac0 | 68 65 20 6d 61 69 6e 20 73 74 72 75 63 74 75 72 65 20 6f 66 20 74 68 65 20 56 79 4f 53 20 66 69 | he.main.structure.of.the.VyOS.fi |
ffae0 | 72 65 77 61 6c 6c 20 43 4c 49 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 54 68 65 20 6d 61 | rewall.CLI.is.shown.next:.The.ma |
ffb00 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 74 61 72 67 65 74 73 20 74 68 61 74 20 63 61 6e | ximum.number.of.targets.that.can |
ffb20 | 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 73 20 31 36 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | .be.specified.is.16..The.default |
ffb40 | 20 76 61 6c 75 65 20 69 73 20 6e 6f 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6d 65 61 | .value.is.no.IP.address..The.mea |
ffb60 | 6e 69 6e 67 20 6f 66 20 74 68 65 20 43 6c 61 73 73 20 49 44 20 69 73 20 6e 6f 74 20 74 68 65 20 | ning.of.the.Class.ID.is.not.the. |
ffb80 | 73 61 6d 65 20 66 6f 72 20 65 76 65 72 79 20 74 79 70 65 20 6f 66 20 70 6f 6c 69 63 79 2e 20 4e | same.for.every.type.of.policy..N |
ffba0 | 6f 72 6d 61 6c 6c 79 20 70 6f 6c 69 63 69 65 73 20 6a 75 73 74 20 6e 65 65 64 20 61 20 6d 65 61 | ormally.policies.just.need.a.mea |
ffbc0 | 6e 69 6e 67 6c 65 73 73 20 6e 75 6d 62 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 20 63 6c | ningless.number.to.identify.a.cl |
ffbe0 | 61 73 73 20 28 43 6c 61 73 73 20 49 44 29 2c 20 62 75 74 20 74 68 61 74 20 64 6f 65 73 20 6e 6f | ass.(Class.ID),.but.that.does.no |
ffc00 | 74 20 61 70 70 6c 79 20 74 6f 20 65 76 65 72 79 20 70 6f 6c 69 63 79 2e 20 54 68 65 20 6e 75 6d | t.apply.to.every.policy..The.num |
ffc20 | 62 65 72 20 6f 66 20 61 20 63 6c 61 73 73 20 69 6e 20 61 20 50 72 69 6f 72 69 74 79 20 51 75 65 | ber.of.a.class.in.a.Priority.Que |
ffc40 | 75 65 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 6f 6e 6c 79 20 69 64 65 6e 74 69 66 79 20 69 74 2c | ue.it.does.not.only.identify.it, |
ffc60 | 20 69 74 20 61 6c 73 6f 20 64 65 66 69 6e 65 73 20 69 74 73 20 70 72 69 6f 72 69 74 79 2e 00 54 | .it.also.defines.its.priority..T |
ffc80 | 68 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 68 31 60 20 69 73 20 61 20 | he.member.interface.`eth1`.is.a. |
ffca0 | 74 72 75 6e 6b 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 56 4c 41 4e 20 31 30 20 74 6f 20 70 61 73 | trunk.that.allows.VLAN.10.to.pas |
ffcc0 | 73 00 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 | s.The.metric.range.is.1.to.16777 |
ffce0 | 32 31 35 20 28 4d 61 78 20 76 61 6c 75 65 20 64 65 70 65 6e 64 20 69 66 20 6d 65 74 72 69 63 20 | 215.(Max.value.depend.if.metric. |
ffd00 | 73 75 70 70 6f 72 74 20 6e 61 72 72 6f 77 20 6f 72 20 77 69 64 65 20 76 61 6c 75 65 29 2e 00 54 | support.narrow.or.wide.value)..T |
ffd20 | 68 65 20 6d 69 6e 69 6d 61 6c 20 65 63 68 6f 20 72 65 63 65 69 76 65 20 74 72 61 6e 73 6d 69 73 | he.minimal.echo.receive.transmis |
ffd40 | 73 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 74 68 61 74 20 74 68 69 73 20 73 79 73 74 65 6d 20 69 | sion.interval.that.this.system.i |
ffd60 | 73 20 63 61 70 61 62 6c 65 20 6f 66 20 68 61 6e 64 6c 69 6e 67 00 54 68 65 20 6d 6f 73 74 20 76 | s.capable.of.handling.The.most.v |
ffd80 | 69 73 69 62 6c 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 | isible.application.of.the.protoc |
ffda0 | 6f 6c 20 69 73 20 66 6f 72 20 61 63 63 65 73 73 20 74 6f 20 73 68 65 6c 6c 20 61 63 63 6f 75 6e | ol.is.for.access.to.shell.accoun |
ffdc0 | 74 73 20 6f 6e 20 55 6e 69 78 2d 6c 69 6b 65 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d | ts.on.Unix-like.operating.system |
ffde0 | 73 2c 20 62 75 74 20 69 74 20 73 65 65 73 20 73 6f 6d 65 20 6c 69 6d 69 74 65 64 20 75 73 65 20 | s,.but.it.sees.some.limited.use. |
ffe00 | 6f 6e 20 57 69 6e 64 6f 77 73 20 61 73 20 77 65 6c 6c 2e 20 49 6e 20 32 30 31 35 2c 20 4d 69 63 | on.Windows.as.well..In.2015,.Mic |
ffe20 | 72 6f 73 6f 66 74 20 61 6e 6e 6f 75 6e 63 65 64 20 74 68 61 74 20 74 68 65 79 20 77 6f 75 6c 64 | rosoft.announced.that.they.would |
ffe40 | 20 69 6e 63 6c 75 64 65 20 6e 61 74 69 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 20 53 53 48 20 | .include.native.support.for.SSH. |
ffe60 | 69 6e 20 61 20 66 75 74 75 72 65 20 72 65 6c 65 61 73 65 2e 00 54 68 65 20 6d 75 6c 74 69 63 61 | in.a.future.release..The.multica |
ffe80 | 73 74 2d 67 72 6f 75 70 20 75 73 65 64 20 62 79 20 61 6c 6c 20 6c 65 61 76 65 73 20 66 6f 72 20 | st-group.used.by.all.leaves.for. |
ffea0 | 74 68 69 73 20 76 6c 61 6e 20 65 78 74 65 6e 73 69 6f 6e 2e 20 48 61 73 20 74 6f 20 62 65 20 74 | this.vlan.extension..Has.to.be.t |
ffec0 | 68 65 20 73 61 6d 65 20 6f 6e 20 61 6c 6c 20 6c 65 61 76 65 73 20 74 68 61 74 20 68 61 73 20 74 | he.same.on.all.leaves.that.has.t |
ffee0 | 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 73 | his.interface..The.name.of.the.s |
fff00 | 65 72 76 69 63 65 20 63 61 6e 20 62 65 20 64 69 66 66 65 72 65 6e 74 2c 20 69 6e 20 74 68 69 73 | ervice.can.be.different,.in.this |
fff20 | 20 65 78 61 6d 70 6c 65 20 69 74 20 69 73 20 6f 6e 6c 79 20 66 6f 72 20 63 6f 6e 76 65 6e 69 65 | .example.it.is.only.for.convenie |
fff40 | 6e 63 65 2e 00 54 68 65 20 6e 65 74 6d 61 73 6b 20 6f 72 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 | nce..The.netmask.or.domain.that. |
fff60 | 45 44 4e 53 20 43 6c 69 65 6e 74 20 53 75 62 6e 65 74 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 61 | EDNS.Client.Subnet.should.be.ena |
fff80 | 62 6c 65 64 20 66 6f 72 20 69 6e 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 2e 00 54 68 | bled.for.in.outgoing.queries..Th |
fffa0 | 65 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 79 20 69 73 20 64 65 63 6c 61 72 65 64 20 62 | e.network.topology.is.declared.b |
fffc0 | 79 20 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 73 75 | y.shared-network-name.and.the.su |
fffe0 | 62 6e 65 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 73 2e 20 54 68 65 20 44 48 43 50 20 73 65 72 76 | bnet.declarations..The.DHCP.serv |
100000 | 69 63 65 20 63 61 6e 20 73 65 72 76 65 20 6d 75 6c 74 69 70 6c 65 20 73 68 61 72 65 64 20 6e 65 | ice.can.serve.multiple.shared.ne |
100020 | 74 77 6f 72 6b 73 2c 20 77 69 74 68 20 65 61 63 68 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b | tworks,.with.each.shared.network |
100040 | 20 68 61 76 69 6e 67 20 31 20 6f 72 20 6d 6f 72 65 20 73 75 62 6e 65 74 73 2e 20 45 61 63 68 20 | .having.1.or.more.subnets..Each. |
100060 | 73 75 62 6e 65 74 20 6d 75 73 74 20 62 65 20 70 72 65 73 65 6e 74 20 6f 6e 20 61 6e 20 69 6e 74 | subnet.must.be.present.on.an.int |
100080 | 65 72 66 61 63 65 2e 20 41 20 72 61 6e 67 65 20 63 61 6e 20 62 65 20 64 65 63 6c 61 72 65 64 20 | erface..A.range.can.be.declared. |
1000a0 | 69 6e 73 69 64 65 20 61 20 73 75 62 6e 65 74 20 74 6f 20 64 65 66 69 6e 65 20 61 20 70 6f 6f 6c | inside.a.subnet.to.define.a.pool |
1000c0 | 20 6f 66 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 65 73 2e 20 4d 75 6c 74 69 70 6c 65 20 | .of.dynamic.addresses..Multiple. |
1000e0 | 72 61 6e 67 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 6e 64 20 63 61 6e 20 63 6f | ranges.can.be.defined.and.can.co |
100100 | 6e 74 61 69 6e 20 68 6f 6c 65 73 2e 20 53 74 61 74 69 63 20 6d 61 70 70 69 6e 67 73 20 63 61 6e | ntain.holes..Static.mappings.can |
100120 | 20 62 65 20 73 65 74 20 74 6f 20 61 73 73 69 67 6e 20 22 73 74 61 74 69 63 22 20 61 64 64 72 65 | .be.set.to.assign."static".addre |
100140 | 73 73 65 73 20 74 6f 20 63 6c 69 65 6e 74 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 69 72 20 4d | sses.to.clients.based.on.their.M |
100160 | 41 43 20 61 64 64 72 65 73 73 2e 00 54 68 65 20 6e 65 78 74 20 65 78 61 6d 70 6c 65 20 69 73 20 | AC.address..The.next.example.is. |
100180 | 61 20 73 69 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 63 6f 6e 6e 74 72 | a.simple.configuration.of.conntr |
1001a0 | 61 63 6b 2d 73 79 6e 63 2e 00 54 68 65 20 6e 65 78 74 20 73 74 65 70 20 69 73 20 74 6f 20 63 6f | ack-sync..The.next.step.is.to.co |
1001c0 | 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6c 6f 63 61 6c 20 73 69 64 65 20 61 73 20 77 65 6c 6c 20 | nfigure.your.local.side.as.well. |
1001e0 | 61 73 20 74 68 65 20 70 6f 6c 69 63 79 20 62 61 73 65 64 20 74 72 75 73 74 65 64 20 64 65 73 74 | as.the.policy.based.trusted.dest |
100200 | 69 6e 61 74 69 6f 6e 20 61 64 64 72 65 73 73 65 73 2e 20 49 66 20 79 6f 75 20 6f 6e 6c 79 20 69 | ination.addresses..If.you.only.i |
100220 | 6e 69 74 69 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 74 68 65 20 6c 69 73 74 65 6e | nitiate.a.connection,.the.listen |
100240 | 20 70 6f 72 74 20 61 6e 64 20 61 64 64 72 65 73 73 2f 70 6f 72 74 20 69 73 20 6f 70 74 69 6f 6e | .port.and.address/port.is.option |
100260 | 61 6c 3b 20 68 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 61 63 74 20 6c 69 6b 65 20 61 20 73 | al;.however,.if.you.act.like.a.s |
100280 | 65 72 76 65 72 20 61 6e 64 20 65 6e 64 70 6f 69 6e 74 73 20 69 6e 69 74 69 61 74 65 20 74 68 65 | erver.and.endpoints.initiate.the |
1002a0 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 2c 20 79 6f 75 | .connections.to.your.system,.you |
1002c0 | 20 6e 65 65 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 70 6f 72 74 20 79 6f 75 72 20 63 6c 69 65 | .need.to.define.a.port.your.clie |
1002e0 | 6e 74 73 20 63 61 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 | nts.can.connect.to,.otherwise.th |
100300 | 65 20 70 6f 72 74 20 69 73 20 72 61 6e 64 6f 6d 6c 79 20 63 68 6f 73 65 6e 20 61 6e 64 20 6d 61 | e.port.is.randomly.chosen.and.ma |
100320 | 79 20 6d 61 6b 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 64 69 66 66 69 63 75 6c 74 20 77 69 74 68 | y.make.connection.difficult.with |
100340 | 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 73 69 6e 63 65 20 74 68 65 20 70 6f 72 74 20 | .firewall.rules,.since.the.port. |
100360 | 6d 61 79 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 65 61 63 68 20 74 69 6d 65 20 74 68 65 20 73 | may.be.different.each.time.the.s |
100380 | 79 73 74 65 6d 20 69 73 20 72 65 62 6f 6f 74 65 64 2e 00 54 68 65 20 6e 6f 74 65 64 20 70 75 62 | ystem.is.rebooted..The.noted.pub |
1003a0 | 6c 69 63 20 6b 65 79 73 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 74 65 72 65 64 20 6f 6e 20 74 68 | lic.keys.should.be.entered.on.th |
1003c0 | 65 20 6f 70 70 6f 73 69 74 65 20 72 6f 75 74 65 72 73 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 6f | e.opposite.routers..The.number.o |
1003e0 | 66 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 74 6f 20 77 61 69 74 20 66 6f 72 20 61 20 72 65 6d | f.milliseconds.to.wait.for.a.rem |
100400 | 6f 74 65 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 20 73 65 72 76 65 72 20 74 6f 20 72 65 73 70 | ote.authoritative.server.to.resp |
100420 | 6f 6e 64 20 62 65 66 6f 72 65 20 74 69 6d 69 6e 67 20 6f 75 74 20 61 6e 64 20 72 65 73 70 6f 6e | ond.before.timing.out.and.respon |
100440 | 64 69 6e 67 20 77 69 74 68 20 53 45 52 56 46 41 49 4c 2e 00 54 68 65 20 6e 75 6d 62 65 72 20 70 | ding.with.SERVFAIL..The.number.p |
100460 | 61 72 61 6d 65 74 65 72 20 28 31 2d 31 30 29 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 61 | arameter.(1-10).configures.the.a |
100480 | 6d 6f 75 6e 74 20 6f 66 20 61 63 63 65 70 74 65 64 20 6f 63 63 75 72 65 6e 63 65 73 20 6f 66 20 | mount.of.accepted.occurences.of. |
1004a0 | 74 68 65 20 73 79 73 74 65 6d 20 41 53 20 6e 75 6d 62 65 72 20 69 6e 20 41 53 20 70 61 74 68 2e | the.system.AS.number.in.AS.path. |
1004c0 | 00 54 68 65 20 6f 66 66 69 63 69 61 6c 20 70 6f 72 74 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 69 | .The.official.port.for.OpenVPN.i |
1004e0 | 73 20 31 31 39 34 2c 20 77 68 69 63 68 20 77 65 20 72 65 73 65 72 76 65 20 66 6f 72 20 63 6c 69 | s.1194,.which.we.reserve.for.cli |
100500 | 65 6e 74 20 56 50 4e 3b 20 77 65 20 77 69 6c 6c 20 75 73 65 20 31 31 39 35 20 66 6f 72 20 73 69 | ent.VPN;.we.will.use.1195.for.si |
100520 | 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 2e 00 54 68 65 20 6f 6e 6c 79 20 73 74 61 67 65 73 20 | te-to-site.VPN..The.only.stages. |
100540 | 56 79 4f 53 20 77 69 6c 6c 20 70 72 6f 63 65 73 73 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 65 | VyOS.will.process.as.part.of.the |
100560 | 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 74 68 65 20 60 | .firewall.configuration.is.the.` |
100580 | 66 6f 72 77 61 72 64 60 20 28 46 34 20 73 74 61 67 65 29 2c 20 60 69 6e 70 75 74 60 20 28 4c 34 | forward`.(F4.stage),.`input`.(L4 |
1005a0 | 20 73 74 61 67 65 29 2c 20 61 6e 64 20 60 6f 75 74 70 75 74 60 20 28 4c 35 20 73 74 61 67 65 29 | .stage),.and.`output`.(L5.stage) |
1005c0 | 2e 20 41 6c 6c 20 74 68 65 20 6f 74 68 65 72 20 73 74 61 67 65 73 20 61 6e 64 20 73 74 65 70 73 | ..All.the.other.stages.and.steps |
1005e0 | 20 61 72 65 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 20 61 6e 64 20 63 61 6e 74 20 62 65 20 6d | .are.for.reference.and.cant.be.m |
100600 | 61 6e 69 70 75 6c 61 74 65 64 20 74 68 72 6f 75 67 68 20 56 79 4f 53 2e 00 54 68 65 20 6f 70 74 | anipulated.through.VyOS..The.opt |
100620 | 69 6f 6e 61 6c 20 60 64 69 73 61 62 6c 65 60 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f | ional.`disable`.option.allows.to |
100640 | 20 65 78 63 6c 75 64 65 20 69 6e 74 65 72 66 61 63 65 20 66 72 6f 6d 20 70 61 73 73 69 76 65 20 | .exclude.interface.from.passive. |
100660 | 73 74 61 74 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 69 66 20 74 | state..This.command.is.used.if.t |
100680 | 68 65 20 63 6f 6d 6d 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 2d 69 6e 74 65 | he.command.:cfgcmd:`passive-inte |
1006a0 | 72 66 61 63 65 20 64 65 66 61 75 6c 74 60 20 77 61 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 54 | rface.default`.was.configured..T |
1006c0 | 68 65 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 72 65 67 69 73 74 65 72 20 73 | he.optional.parameter.register.s |
1006e0 | 70 65 63 69 66 69 65 73 20 74 68 61 74 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 52 65 71 75 65 | pecifies.that.Registration.Reque |
100700 | 73 74 20 73 68 6f 75 6c 64 20 62 65 20 73 65 6e 74 20 74 6f 20 74 68 69 73 20 70 65 65 72 20 6f | st.should.be.sent.to.this.peer.o |
100720 | 6e 20 73 74 61 72 74 75 70 2e 00 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 38 30 32 2e 31 71 5f 20 | n.startup..The.original.802.1q_. |
100740 | 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 61 20 73 69 6e 67 6c 65 20 56 69 | specification.allows.a.single.Vi |
100760 | 72 74 75 61 6c 20 4c 6f 63 61 6c 20 41 72 65 61 20 4e 65 74 77 6f 72 6b 20 28 56 4c 41 4e 29 20 | rtual.Local.Area.Network.(VLAN). |
100780 | 68 65 61 64 65 72 20 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f 20 61 6e 20 45 74 | header.to.be.inserted.into.an.Et |
1007a0 | 68 65 72 6e 65 74 20 66 72 61 6d 65 2e 20 51 69 6e 51 20 61 6c 6c 6f 77 73 20 6d 75 6c 74 69 70 | hernet.frame..QinQ.allows.multip |
1007c0 | 6c 65 20 56 4c 41 4e 20 74 61 67 73 20 74 6f 20 62 65 20 69 6e 73 65 72 74 65 64 20 69 6e 74 6f | le.VLAN.tags.to.be.inserted.into |
1007e0 | 20 61 20 73 69 6e 67 6c 65 20 66 72 61 6d 65 2c 20 61 6e 20 65 73 73 65 6e 74 69 61 6c 20 63 61 | .a.single.frame,.an.essential.ca |
100800 | 70 61 62 69 6c 69 74 79 20 66 6f 72 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 4d 65 74 72 6f 20 | pability.for.implementing.Metro. |
100820 | 45 74 68 65 72 6e 65 74 20 6e 65 74 77 6f 72 6b 20 74 6f 70 6f 6c 6f 67 69 65 73 2e 20 4a 75 73 | Ethernet.network.topologies..Jus |
100840 | 74 20 61 73 20 51 69 6e 51 20 65 78 74 65 6e 64 73 20 38 30 32 2e 31 51 2c 20 51 69 6e 51 20 69 | t.as.QinQ.extends.802.1Q,.QinQ.i |
100860 | 74 73 65 6c 66 20 69 73 20 65 78 74 65 6e 64 65 64 20 62 79 20 6f 74 68 65 72 20 4d 65 74 72 6f | tself.is.extended.by.other.Metro |
100880 | 20 45 74 68 65 72 6e 65 74 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 65 20 6f 75 74 67 6f 69 6e | .Ethernet.protocols..The.outgoin |
1008a0 | 67 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 70 65 72 66 6f 72 6d 20 74 68 65 20 74 72 61 6e 73 | g.interface.to.perform.the.trans |
1008c0 | 6c 61 74 69 6f 6e 20 6f 6e 00 54 68 65 20 70 65 65 72 20 6e 61 6d 65 20 6d 75 73 74 20 62 65 20 | lation.on.The.peer.name.must.be. |
1008e0 | 61 6e 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 61 6e 64 20 63 61 6e 20 68 61 76 65 20 68 79 70 | an.alphanumeric.and.can.have.hyp |
100900 | 65 6e 20 6f 72 20 75 6e 64 65 72 73 63 6f 72 65 20 61 73 20 73 70 65 63 69 61 6c 20 63 68 61 72 | en.or.underscore.as.special.char |
100920 | 61 63 74 65 72 73 2e 20 49 74 20 69 73 20 70 75 72 65 6c 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | acters..It.is.purely.information |
100940 | 61 6c 2e 00 54 68 65 20 70 65 65 72 20 6e 61 6d 65 73 20 52 49 47 48 54 20 61 6e 64 20 4c 45 46 | al..The.peer.names.RIGHT.and.LEF |
100960 | 54 20 61 72 65 20 75 73 65 64 20 61 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c 20 74 65 78 74 | T.are.used.as.informational.text |
100980 | 2e 00 54 68 65 20 70 65 65 72 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 77 | ..The.peer.with.lower.priority.w |
1009a0 | 69 6c 6c 20 62 65 63 6f 6d 65 20 74 68 65 20 6b 65 79 20 73 65 72 76 65 72 20 61 6e 64 20 73 74 | ill.become.the.key.server.and.st |
1009c0 | 61 72 74 20 64 69 73 74 72 69 62 75 74 69 6e 67 20 53 41 4b 73 2e 00 54 68 65 20 70 69 6e 67 20 | art.distributing.SAKs..The.ping. |
1009e0 | 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 20 74 6f 20 74 65 73 74 20 77 68 65 74 68 65 72 20 | command.is.used.to.test.whether. |
100a00 | 61 20 6e 65 74 77 6f 72 6b 20 68 6f 73 74 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 6f 72 20 6e | a.network.host.is.reachable.or.n |
100a20 | 6f 74 2e 00 54 68 65 20 70 6f 70 75 6c 61 72 20 55 6e 69 78 2f 4c 69 6e 75 78 20 60 60 64 69 67 | ot..The.popular.Unix/Linux.``dig |
100a40 | 60 60 20 74 6f 6f 6c 20 73 65 74 73 20 74 68 65 20 41 44 2d 62 69 74 20 69 6e 20 74 68 65 20 71 | ``.tool.sets.the.AD-bit.in.the.q |
100a60 | 75 65 72 79 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c 65 61 64 20 74 6f 20 75 6e 65 78 70 65 63 | uery..This.might.lead.to.unexpec |
100a80 | 74 65 64 20 71 75 65 72 79 20 72 65 73 75 6c 74 73 20 77 68 65 6e 20 74 65 73 74 69 6e 67 2e 20 | ted.query.results.when.testing.. |
100aa0 | 53 65 74 20 60 60 2b 6e 6f 61 64 60 60 20 6f 6e 20 74 68 65 20 60 60 64 69 67 60 60 20 63 6f 6d | Set.``+noad``.on.the.``dig``.com |
100ac0 | 6d 61 6e 64 20 6c 69 6e 65 20 77 68 65 6e 20 74 68 69 73 20 69 73 20 74 68 65 20 63 61 73 65 2e | mand.line.when.this.is.the.case. |
100ae0 | 00 54 68 65 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 20 69 73 20 64 65 70 72 | .The.pre-shared.key.mode.is.depr |
100b00 | 65 63 61 74 65 64 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 | ecated.and.will.be.removed.from. |
100b20 | 66 75 74 75 72 65 20 4f 70 65 6e 56 50 4e 20 76 65 72 73 69 6f 6e 73 2c 20 73 6f 20 56 79 4f 53 | future.OpenVPN.versions,.so.VyOS |
100b40 | 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 72 65 6d 6f 76 65 20 73 75 70 70 6f 72 74 20 66 6f 72 | .will.have.to.remove.support.for |
100b60 | 20 74 68 61 74 20 6f 70 74 69 6f 6e 20 61 73 20 77 65 6c 6c 2e 20 54 68 65 20 72 65 61 73 6f 6e | .that.option.as.well..The.reason |
100b80 | 20 69 73 20 74 68 61 74 20 75 73 69 6e 67 20 70 72 65 2d 73 68 61 72 65 64 20 6b 65 79 73 20 69 | .is.that.using.pre-shared.keys.i |
100ba0 | 73 20 73 69 67 6e 69 66 69 63 61 6e 74 6c 79 20 6c 65 73 73 20 73 65 63 75 72 65 20 74 68 61 6e | s.significantly.less.secure.than |
100bc0 | 20 75 73 69 6e 67 20 54 4c 53 2e 00 54 68 65 20 70 72 65 66 69 78 20 61 6e 64 20 41 53 4e 20 74 | .using.TLS..The.prefix.and.ASN.t |
100be0 | 68 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 6d 61 74 63 68 20 61 20 73 69 67 6e 65 64 | hat.originated.it.match.a.signed |
100c00 | 20 52 4f 41 2e 20 54 68 65 73 65 20 61 72 65 20 70 72 6f 62 61 62 6c 79 20 74 72 75 73 74 77 6f | .ROA..These.are.probably.trustwo |
100c20 | 72 74 68 79 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e 00 54 68 65 20 70 72 | rthy.route.announcements..The.pr |
100c40 | 65 66 69 78 20 6f 72 20 70 72 65 66 69 78 20 6c 65 6e 67 74 68 20 61 6e 64 20 41 53 4e 20 74 68 | efix.or.prefix.length.and.ASN.th |
100c60 | 61 74 20 6f 72 69 67 69 6e 61 74 65 64 20 69 74 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 20 61 | at.originated.it.doesn't.match.a |
100c80 | 6e 79 20 65 78 69 73 74 69 6e 67 20 52 4f 41 2e 20 54 68 69 73 20 63 6f 75 6c 64 20 62 65 20 74 | ny.existing.ROA..This.could.be.t |
100ca0 | 68 65 20 72 65 73 75 6c 74 20 6f 66 20 61 20 70 72 65 66 69 78 20 68 69 6a 61 63 6b 2c 20 6f 72 | he.result.of.a.prefix.hijack,.or |
100cc0 | 20 6d 65 72 65 6c 79 20 61 20 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 62 75 74 20 | .merely.a.misconfiguration,.but. |
100ce0 | 73 68 6f 75 6c 64 20 70 72 6f 62 61 62 6c 79 20 62 65 20 74 72 65 61 74 65 64 20 61 73 20 75 6e | should.probably.be.treated.as.un |
100d00 | 74 72 75 73 74 77 6f 72 74 68 79 20 72 6f 75 74 65 20 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 73 2e | trustworthy.route.announcements. |
100d20 | 00 54 68 65 20 70 72 69 6d 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 65 73 20 61 64 | .The.primary.DHCP.server.uses.ad |
100d40 | 64 72 65 73 73 20 60 31 39 32 2e 31 36 38 2e 31 38 39 2e 32 35 32 60 00 54 68 65 20 70 72 69 6d | dress.`192.168.189.252`.The.prim |
100d60 | 61 72 79 20 61 6e 64 20 73 65 63 6f 6e 64 61 72 79 20 73 74 61 74 65 6d 65 6e 74 73 20 64 65 74 | ary.and.secondary.statements.det |
100d80 | 65 72 6d 69 6e 65 73 20 77 68 65 74 68 65 72 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 70 72 | ermines.whether.the.server.is.pr |
100da0 | 69 6d 61 72 79 20 6f 72 20 73 65 63 6f 6e 64 61 72 79 2e 00 54 68 65 20 70 72 69 6d 61 72 79 20 | imary.or.secondary..The.primary. |
100dc0 | 6f 70 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 76 61 6c 69 64 20 66 6f 72 20 61 63 74 69 76 65 2d | option.is.only.valid.for.active- |
100de0 | 62 61 63 6b 75 70 2c 20 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 2c 20 61 | backup,.transmit-load-balance,.a |
100e00 | 6e 64 20 61 64 61 70 74 69 76 65 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 6d 6f 64 65 2e 00 54 | nd.adaptive-load-balance.mode..T |
100e20 | 68 65 20 70 72 69 6f 72 69 74 79 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 20 6e | he.priority.must.be.an.integer.n |
100e40 | 75 6d 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 35 35 2e 20 48 69 67 68 65 72 20 70 72 69 6f | umber.from.1.to.255..Higher.prio |
100e60 | 72 69 74 79 20 76 61 6c 75 65 20 69 6e 63 72 65 61 73 65 73 20 72 6f 75 74 65 72 27 73 20 70 72 | rity.value.increases.router's.pr |
100e80 | 65 63 65 64 65 6e 63 65 20 69 6e 20 74 68 65 20 6d 61 73 74 65 72 20 65 6c 65 63 74 69 6f 6e 73 | ecedence.in.the.master.elections |
100ea0 | 2e 00 54 68 65 20 70 72 6f 63 65 64 75 72 65 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 3a 61 62 | ..The.procedure.to.specify.a.:ab |
100ec0 | 62 72 3a 60 4e 49 53 2b 20 28 4e 65 74 77 6f 72 6b 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 53 65 | br:`NIS+.(Network.Information.Se |
100ee0 | 72 76 69 63 65 20 50 6c 75 73 29 60 20 64 6f 6d 61 69 6e 20 69 73 20 73 69 6d 69 6c 61 72 20 74 | rvice.Plus)`.domain.is.similar.t |
100f00 | 6f 20 74 68 65 20 4e 49 53 20 64 6f 6d 61 69 6e 20 6f 6e 65 3a 00 54 68 65 20 70 72 6f 6d 70 74 | o.the.NIS.domain.one:.The.prompt |
100f20 | 20 69 73 20 61 64 6a 75 73 74 65 64 20 74 6f 20 72 65 66 6c 65 63 74 20 74 68 69 73 20 63 68 61 | .is.adjusted.to.reflect.this.cha |
100f40 | 6e 67 65 20 69 6e 20 62 6f 74 68 20 63 6f 6e 66 69 67 20 61 6e 64 20 6f 70 2d 6d 6f 64 65 2e 00 | nge.in.both.config.and.op-mode.. |
100f60 | 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 70 6f 72 74 20 77 65 20 77 69 73 68 20 74 6f | The.protocol.and.port.we.wish.to |
100f80 | 20 66 6f 72 77 61 72 64 3b 00 54 68 65 20 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 75 61 6c 6c | .forward;.The.protocol.is.usuall |
100fa0 | 79 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 74 65 72 6d 73 20 6f 66 20 61 20 63 6c 69 65 6e 74 | y.described.in.terms.of.a.client |
100fc0 | 2d 73 65 72 76 65 72 20 6d 6f 64 65 6c 2c 20 62 75 74 20 63 61 6e 20 61 73 20 65 61 73 69 6c 79 | -server.model,.but.can.as.easily |
100fe0 | 20 62 65 20 75 73 65 64 20 69 6e 20 70 65 65 72 2d 74 6f 2d 70 65 65 72 20 72 65 6c 61 74 69 6f | .be.used.in.peer-to-peer.relatio |
101000 | 6e 73 68 69 70 73 20 77 68 65 72 65 20 62 6f 74 68 20 70 65 65 72 73 20 63 6f 6e 73 69 64 65 72 | nships.where.both.peers.consider |
101020 | 20 74 68 65 20 6f 74 68 65 72 20 74 6f 20 62 65 20 61 20 70 6f 74 65 6e 74 69 61 6c 20 74 69 6d | .the.other.to.be.a.potential.tim |
101040 | 65 20 73 6f 75 72 63 65 2e 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 73 20 73 65 6e 64 20 61 | e.source..Implementations.send.a |
101060 | 6e 64 20 72 65 63 65 69 76 65 20 74 69 6d 65 73 74 61 6d 70 73 20 75 73 69 6e 67 20 3a 61 62 62 | nd.receive.timestamps.using.:abb |
101080 | 72 3a 60 55 44 50 20 28 55 73 65 72 20 44 61 74 61 67 72 61 6d 20 50 72 6f 74 6f 63 6f 6c 29 60 | r:`UDP.(User.Datagram.Protocol)` |
1010a0 | 20 6f 6e 20 70 6f 72 74 20 6e 75 6d 62 65 72 20 31 32 33 2e 00 54 68 65 20 70 72 6f 74 6f 63 6f | .on.port.number.123..The.protoco |
1010c0 | 6c 20 6f 76 65 72 68 65 61 64 20 6f 66 20 4c 32 54 50 76 33 20 69 73 20 61 6c 73 6f 20 73 69 67 | l.overhead.of.L2TPv3.is.also.sig |
1010e0 | 6e 69 66 69 63 61 6e 74 6c 79 20 62 69 67 67 65 72 20 74 68 61 6e 20 4d 50 4c 53 2e 00 54 68 65 | nificantly.bigger.than.MPLS..The |
101100 | 20 70 72 6f 78 79 20 73 65 72 76 69 63 65 20 69 6e 20 56 79 4f 53 20 69 73 20 62 61 73 65 64 20 | .proxy.service.in.VyOS.is.based. |
101120 | 6f 6e 20 53 71 75 69 64 5f 20 61 6e 64 20 73 6f 6d 65 20 72 65 6c 61 74 65 64 20 6d 6f 64 75 6c | on.Squid_.and.some.related.modul |
101140 | 65 73 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 | es..The.public.IP.address.of.the |
101160 | 20 6c 6f 63 61 6c 20 73 69 64 65 20 6f 66 20 74 68 65 20 56 50 4e 20 77 69 6c 6c 20 62 65 20 31 | .local.side.of.the.VPN.will.be.1 |
101180 | 39 38 2e 35 31 2e 31 30 30 2e 31 30 2e 00 54 68 65 20 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 | 98.51.100.10..The.public.IP.addr |
1011a0 | 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 73 69 64 65 20 6f 66 20 74 68 65 20 56 50 | ess.of.the.remote.side.of.the.VP |
1011c0 | 4e 20 77 69 6c 6c 20 62 65 20 32 30 33 2e 30 2e 31 31 33 2e 31 31 2e 00 54 68 65 20 72 61 74 65 | N.will.be.203.0.113.11..The.rate |
1011e0 | 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 54 68 65 20 72 | -limit.is.set.in.kbit/sec..The.r |
101200 | 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 61 74 63 68 65 73 20 69 66 20 61 6e 64 | egular.expression.matches.if.and |
101220 | 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 65 6e 74 69 72 65 20 73 74 72 69 6e 67 20 6d 61 74 63 68 | .only.if.the.entire.string.match |
101240 | 65 73 20 74 68 65 20 70 61 74 74 65 72 6e 2e 00 54 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 | es.the.pattern..The.remote.peer. |
101260 | 60 74 6f 2d 77 67 30 32 60 20 75 73 65 73 20 58 4d 72 6c 50 79 6b 61 78 68 64 41 41 69 53 6a 68 | `to-wg02`.uses.XMrlPykaxhdAAiSjh |
101280 | 74 50 6c 76 69 33 30 4e 56 6b 76 4c 51 6c 69 51 75 4b 50 37 41 49 37 43 79 49 3d 20 61 73 20 69 | tPlvi30NVkvLQliQuKP7AI7CyI=.as.i |
1012a0 | 74 73 20 70 75 62 6c 69 63 20 6b 65 79 20 70 6f 72 74 69 6f 6e 00 54 68 65 20 72 65 6d 6f 74 65 | ts.public.key.portion.The.remote |
1012c0 | 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 61 20 73 75 62 6e 65 74 20 6f 66 20 31 30 2e 31 | .site.will.have.a.subnet.of.10.1 |
1012e0 | 2e 30 2e 30 2f 31 36 2e 00 54 68 65 20 72 65 6d 6f 74 65 20 75 73 65 72 20 77 69 6c 6c 20 75 73 | .0.0/16..The.remote.user.will.us |
101300 | 65 20 74 68 65 20 6f 70 65 6e 63 6f 6e 6e 65 63 74 20 63 6c 69 65 6e 74 20 74 6f 20 63 6f 6e 6e | e.the.openconnect.client.to.conn |
101320 | 65 63 74 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 61 6e 64 20 77 69 6c 6c 20 72 65 63 65 69 | ect.to.the.router.and.will.recei |
101340 | 76 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 61 20 56 50 4e 20 70 6f 6f 6c | ve.an.IP.address.from.a.VPN.pool |
101360 | 2c 20 61 6c 6c 6f 77 69 6e 67 20 66 75 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 6e 65 | ,.allowing.full.access.to.the.ne |
101380 | 74 77 6f 72 6b 2e 00 54 68 65 20 72 65 71 75 65 73 74 6f 72 20 6e 65 74 6d 61 73 6b 20 66 6f 72 | twork..The.requestor.netmask.for |
1013a0 | 20 77 68 69 63 68 20 74 68 65 20 72 65 71 75 65 73 74 6f 72 20 49 50 20 41 64 64 72 65 73 73 20 | .which.the.requestor.IP.Address. |
1013c0 | 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 61 73 20 74 68 65 20 45 44 4e 53 20 43 6c 69 65 6e | should.be.used.as.the.EDNS.Clien |
1013e0 | 74 20 53 75 62 6e 65 74 20 66 6f 72 20 6f 75 74 67 6f 69 6e 67 20 71 75 65 72 69 65 73 2e 00 54 | t.Subnet.for.outgoing.queries..T |
101400 | 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e 66 69 67 20 66 69 6c 65 20 6d 61 79 20 6c 6f 6f 6b | he.required.config.file.may.look |
101420 | 20 6c 69 6b 65 20 74 68 69 73 3a 00 54 68 65 20 72 65 71 75 69 72 65 64 20 63 6f 6e 66 69 67 75 | .like.this:.The.required.configu |
101440 | 72 61 74 69 6f 6e 20 63 61 6e 20 62 65 20 62 72 6f 6b 65 6e 20 64 6f 77 6e 20 69 6e 74 6f 20 34 | ration.can.be.broken.down.into.4 |
101460 | 20 6d 61 6a 6f 72 20 70 69 65 63 65 73 3a 00 54 68 65 20 72 65 73 75 6c 74 69 6e 67 20 63 6f 6e | .major.pieces:.The.resulting.con |
101480 | 66 69 67 75 72 61 74 69 6f 6e 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 3a 00 54 68 65 20 72 | figuration.will.look.like:.The.r |
1014a0 | 6f 6f 74 20 63 61 75 73 65 20 6f 66 20 74 68 65 20 70 72 6f 62 6c 65 6d 20 69 73 20 74 68 61 74 | oot.cause.of.the.problem.is.that |
1014c0 | 20 66 6f 72 20 56 54 49 20 74 75 6e 6e 65 6c 73 20 74 6f 20 77 6f 72 6b 2c 20 74 68 65 69 72 20 | .for.VTI.tunnels.to.work,.their. |
1014e0 | 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 73 20 68 61 76 65 20 74 6f 20 62 65 20 73 65 74 | traffic.selectors.have.to.be.set |
101500 | 20 74 6f 20 30 2e 30 2e 30 2e 30 2f 30 20 66 6f 72 20 74 72 61 66 66 69 63 20 74 6f 20 6d 61 74 | .to.0.0.0.0/0.for.traffic.to.mat |
101520 | 63 68 20 74 68 65 20 74 75 6e 6e 65 6c 2c 20 65 76 65 6e 20 74 68 6f 75 67 68 20 61 63 74 75 61 | ch.the.tunnel,.even.though.actua |
101540 | 6c 20 72 6f 75 74 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 20 61 63 63 6f 72 | l.routing.decision.is.made.accor |
101560 | 64 69 6e 67 20 74 6f 20 6e 65 74 66 69 6c 74 65 72 20 6d 61 72 6b 73 2e 20 55 6e 6c 65 73 73 20 | ding.to.netfilter.marks..Unless. |
101580 | 72 6f 75 74 65 20 69 6e 73 65 72 74 69 6f 6e 20 69 73 20 64 69 73 61 62 6c 65 64 20 65 6e 74 69 | route.insertion.is.disabled.enti |
1015a0 | 72 65 6c 79 2c 20 53 74 72 6f 6e 67 53 57 41 4e 20 74 68 75 73 20 6d 69 73 74 61 6b 65 6e 6c 79 | rely,.StrongSWAN.thus.mistakenly |
1015c0 | 20 69 6e 73 65 72 74 73 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 74 68 72 6f 75 67 68 | .inserts.a.default.route.through |
1015e0 | 20 74 68 65 20 56 54 49 20 70 65 65 72 20 61 64 64 72 65 73 73 2c 20 77 68 69 63 68 20 6d 61 6b | .the.VTI.peer.address,.which.mak |
101600 | 65 73 20 61 6c 6c 20 74 72 61 66 66 69 63 20 72 6f 75 74 65 64 20 74 6f 20 6e 6f 77 68 65 72 65 | es.all.traffic.routed.to.nowhere |
101620 | 2e 00 54 68 65 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 20 69 73 20 61 20 63 6c | ..The.round-robin.policy.is.a.cl |
101640 | 61 73 73 66 75 6c 20 73 63 68 65 64 75 6c 65 72 20 74 68 61 74 20 64 69 76 69 64 65 73 20 74 72 | assful.scheduler.that.divides.tr |
101660 | 61 66 66 69 63 20 69 6e 20 64 69 66 66 65 72 65 6e 74 20 63 6c 61 73 73 65 73 5f 20 79 6f 75 20 | affic.in.different.classes_.you. |
101680 | 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 28 75 70 20 74 6f 20 34 30 39 36 29 2e 20 59 6f 75 20 | can.configure.(up.to.4096)..You. |
1016a0 | 63 61 6e 20 65 6d 62 65 64 5f 20 61 20 6e 65 77 20 70 6f 6c 69 63 79 20 69 6e 74 6f 20 65 61 63 | can.embed_.a.new.policy.into.eac |
1016c0 | 68 20 6f 66 20 74 68 6f 73 65 20 63 6c 61 73 73 65 73 20 28 64 65 66 61 75 6c 74 20 69 6e 63 6c | h.of.those.classes.(default.incl |
1016e0 | 75 64 65 64 29 2e 00 54 68 65 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 | uded)..The.route.selection.proce |
101700 | 73 73 20 75 73 65 64 20 62 79 20 46 52 52 27 73 20 42 47 50 20 69 6d 70 6c 65 6d 65 6e 74 61 74 | ss.used.by.FRR's.BGP.implementat |
101720 | 69 6f 6e 20 75 73 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 65 63 69 73 69 6f 6e 20 | ion.uses.the.following.decision. |
101740 | 63 72 69 74 65 72 69 6f 6e 2c 20 73 74 61 72 74 69 6e 67 20 61 74 20 74 68 65 20 74 6f 70 20 6f | criterion,.starting.at.the.top.o |
101760 | 66 20 74 68 65 20 6c 69 73 74 20 61 6e 64 20 67 6f 69 6e 67 20 74 6f 77 61 72 64 73 20 74 68 65 | f.the.list.and.going.towards.the |
101780 | 20 62 6f 74 74 6f 6d 20 75 6e 74 69 6c 20 6f 6e 65 20 6f 66 20 74 68 65 20 66 61 63 74 6f 72 73 | .bottom.until.one.of.the.factors |
1017a0 | 20 63 61 6e 20 62 65 20 75 73 65 64 2e 00 54 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 | .can.be.used..The.route.with.the |
1017c0 | 20 73 68 6f 72 74 65 73 74 20 63 6c 75 73 74 65 72 2d 6c 69 73 74 20 6c 65 6e 67 74 68 20 69 73 | .shortest.cluster-list.length.is |
1017e0 | 20 75 73 65 64 2e 20 54 68 65 20 63 6c 75 73 74 65 72 2d 6c 69 73 74 20 72 65 66 6c 65 63 74 73 | .used..The.cluster-list.reflects |
101800 | 20 74 68 65 20 69 42 47 50 20 72 65 66 6c 65 63 74 69 6f 6e 20 70 61 74 68 20 74 68 65 20 72 6f | .the.iBGP.reflection.path.the.ro |
101820 | 75 74 65 20 68 61 73 20 74 61 6b 65 6e 2e 00 54 68 65 20 72 6f 75 74 65 72 20 61 75 74 6f 6d 61 | ute.has.taken..The.router.automa |
101840 | 74 69 63 61 6c 6c 79 20 75 70 64 61 74 65 73 20 6c 69 6e 6b 2d 73 74 61 74 65 20 69 6e 66 6f 72 | tically.updates.link-state.infor |
101860 | 6d 61 74 69 6f 6e 20 77 69 74 68 20 69 74 73 20 6e 65 69 67 68 62 6f 72 73 2e 20 4f 6e 6c 79 20 | mation.with.its.neighbors..Only. |
101880 | 61 6e 20 6f 62 73 6f 6c 65 74 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 70 64 61 74 | an.obsolete.information.is.updat |
1018a0 | 65 64 20 77 68 69 63 68 20 61 67 65 20 68 61 73 20 65 78 63 65 65 64 65 64 20 61 20 73 70 65 63 | ed.which.age.has.exceeded.a.spec |
1018c0 | 69 66 69 63 20 74 68 72 65 73 68 6f 6c 64 2e 20 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 63 | ific.threshold..This.parameter.c |
1018e0 | 68 61 6e 67 65 73 20 61 20 74 68 72 65 73 68 6f 6c 64 20 76 61 6c 75 65 2c 20 77 68 69 63 68 20 | hanges.a.threshold.value,.which. |
101900 | 62 79 20 64 65 66 61 75 6c 74 20 69 73 20 31 38 30 30 20 73 65 63 6f 6e 64 73 20 28 68 61 6c 66 | by.default.is.1800.seconds.(half |
101920 | 20 61 6e 20 68 6f 75 72 29 2e 20 54 68 65 20 76 61 6c 75 65 20 69 73 20 61 70 70 6c 69 65 64 20 | .an.hour)..The.value.is.applied. |
101940 | 74 6f 20 74 68 65 20 77 68 6f 6c 65 20 4f 53 50 46 20 72 6f 75 74 65 72 2e 20 54 68 65 20 74 69 | to.the.whole.OSPF.router..The.ti |
101960 | 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f 20 31 38 30 30 2e 00 54 68 65 20 72 6f 75 | mer.range.is.10.to.1800..The.rou |
101980 | 74 65 72 20 73 68 6f 75 6c 64 20 64 69 73 63 61 72 64 20 44 48 43 50 20 70 61 63 6b 61 67 65 73 | ter.should.discard.DHCP.packages |
1019a0 | 20 61 6c 72 65 61 64 79 20 63 6f 6e 74 61 69 6e 69 6e 67 20 72 65 6c 61 79 20 61 67 65 6e 74 20 | .already.containing.relay.agent. |
1019c0 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 6f 6e 6c 79 20 | information.to.ensure.that.only. |
1019e0 | 72 65 71 75 65 73 74 73 20 66 72 6f 6d 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 61 72 65 20 66 | requests.from.DHCP.clients.are.f |
101a00 | 6f 72 77 61 72 64 65 64 2e 00 54 68 65 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 62 | orwarded..The.sFlow.accounting.b |
101a20 | 61 73 65 64 20 6f 6e 20 68 73 66 6c 6f 77 64 20 68 74 74 70 73 3a 2f 2f 73 66 6c 6f 77 2e 6e 65 | ased.on.hsflowd.https://sflow.ne |
101a40 | 74 2f 00 54 68 65 20 73 61 6d 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e | t/.The.same.configuration.option |
101a60 | 73 20 61 70 70 6c 79 20 77 68 65 6e 20 49 64 65 6e 74 69 74 79 20 62 61 73 65 64 20 63 6f 6e 66 | s.apply.when.Identity.based.conf |
101a80 | 69 67 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 67 72 6f 75 70 20 6d 6f 64 65 20 65 | ig.is.configured.in.group.mode.e |
101aa0 | 78 63 65 70 74 20 74 68 61 74 20 67 72 6f 75 70 20 6d 6f 64 65 20 63 61 6e 20 6f 6e 6c 79 20 62 | xcept.that.group.mode.can.only.b |
101ac0 | 65 20 75 73 65 64 20 77 69 74 68 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | e.used.with.RADIUS.authenticatio |
101ae0 | 6e 2e 00 54 68 65 20 73 63 68 65 6d 65 20 61 62 6f 76 65 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b | n..The.scheme.above.doesn't.work |
101b00 | 20 77 68 65 6e 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 73 20 68 61 73 20 61 20 64 | .when.one.of.the.routers.has.a.d |
101b20 | 79 6e 61 6d 69 63 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 20 74 68 6f 75 67 68 2e 20 | ynamic.external.address.though.. |
101b40 | 54 68 65 20 63 6c 61 73 73 69 63 20 77 6f 72 6b 61 72 6f 75 6e 64 20 66 6f 72 20 74 68 69 73 20 | The.classic.workaround.for.this. |
101b60 | 69 73 20 74 6f 20 73 65 74 75 70 20 61 6e 20 61 64 64 72 65 73 73 20 6f 6e 20 61 20 6c 6f 6f 70 | is.to.setup.an.address.on.a.loop |
101b80 | 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 75 73 65 20 69 74 20 61 73 20 61 20 73 | back.interface.and.use.it.as.a.s |
101ba0 | 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 66 6f 72 20 74 68 65 20 47 52 45 20 74 75 6e 6e 65 6c | ource.address.for.the.GRE.tunnel |
101bc0 | 2c 20 74 68 65 6e 20 73 65 74 75 70 20 61 6e 20 49 50 73 65 63 20 70 6f 6c 69 63 79 20 74 6f 20 | ,.then.setup.an.IPsec.policy.to. |
101be0 | 6d 61 74 63 68 20 74 68 6f 73 65 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 2e 00 | match.those.loopback.addresses.. |
101c00 | 54 68 65 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 75 70 | The.search.filter.can.contain.up |
101c20 | 20 74 6f 20 31 35 20 6f 63 63 75 72 72 65 6e 63 65 73 20 6f 66 20 25 73 20 77 68 69 63 68 20 77 | .to.15.occurrences.of.%s.which.w |
101c40 | 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 20 75 73 65 72 6e 61 6d 65 2c | ill.be.replaced.by.the.username, |
101c60 | 20 61 73 20 69 6e 20 22 75 69 64 3d 25 73 22 20 66 6f 72 20 3a 72 66 63 3a 60 32 30 33 37 60 20 | .as.in."uid=%s".for.:rfc:`2037`. |
101c80 | 64 69 72 65 63 74 6f 72 69 65 73 2e 20 46 6f 72 20 61 20 64 65 74 61 69 6c 65 64 20 64 65 73 63 | directories..For.a.detailed.desc |
101ca0 | 72 69 70 74 69 6f 6e 20 6f 66 20 4c 44 41 50 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 73 79 | ription.of.LDAP.search.filter.sy |
101cc0 | 6e 74 61 78 20 73 65 65 20 3a 72 66 63 3a 60 32 32 35 34 60 2e 00 54 68 65 20 73 65 63 6f 6e 64 | ntax.see.:rfc:`2254`..The.second |
101ce0 | 61 72 79 20 44 48 43 50 20 73 65 72 76 65 72 20 75 73 65 73 20 61 64 64 72 65 73 73 20 60 31 39 | ary.DHCP.server.uses.address.`19 |
101d00 | 32 2e 31 36 38 2e 31 38 39 2e 32 35 33 60 00 54 68 65 20 73 65 63 75 72 69 74 79 20 61 70 70 72 | 2.168.189.253`.The.security.appr |
101d20 | 6f 61 63 68 20 69 6e 20 53 4e 4d 50 76 33 20 74 61 72 67 65 74 73 3a 00 54 68 65 20 73 65 71 75 | oach.in.SNMPv3.targets:.The.sequ |
101d40 | 65 6e 63 65 20 60 60 5e 45 63 3f 60 60 20 74 72 61 6e 73 6c 61 74 65 73 20 74 6f 3a 20 60 60 43 | ence.``^Ec?``.translates.to:.``C |
101d60 | 74 72 6c 2b 45 20 63 20 3f 60 60 2e 20 54 6f 20 71 75 69 74 20 74 68 65 20 73 65 73 73 69 6f 6e | trl+E.c.?``..To.quit.the.session |
101d80 | 20 75 73 65 3a 20 60 60 43 74 72 6c 2b 45 20 63 20 2e 60 60 00 54 68 65 20 73 65 74 75 70 20 69 | .use:.``Ctrl+E.c..``.The.setup.i |
101da0 | 73 20 74 68 69 73 3a 20 4c 65 61 66 32 20 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 66 33 00 54 | s.this:.Leaf2.-.Spine1.-.Leaf3.T |
101dc0 | 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 6f 6e 2d 64 69 73 6b 20 50 72 6f 78 79 20 63 61 63 | he.size.of.the.on-disk.Proxy.cac |
101de0 | 68 65 20 69 73 20 75 73 65 72 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 2e 20 54 68 65 20 50 72 6f | he.is.user.configurable..The.Pro |
101e00 | 78 69 65 73 20 64 65 66 61 75 6c 74 20 63 61 63 68 65 2d 73 69 7a 65 20 69 73 20 63 6f 6e 66 69 | xies.default.cache-size.is.confi |
101e20 | 67 75 72 65 64 20 74 6f 20 31 30 30 20 4d 42 2e 00 54 68 65 20 73 70 65 65 64 20 28 62 61 75 64 | gured.to.100.MB..The.speed.(baud |
101e40 | 72 61 74 65 29 20 6f 66 20 74 68 65 20 63 6f 6e 73 6f 6c 65 20 64 65 76 69 63 65 2e 20 53 75 70 | rate).of.the.console.device..Sup |
101e60 | 70 6f 72 74 65 64 20 76 61 6c 75 65 73 20 61 72 65 3a 00 54 68 65 20 73 74 61 6e 64 61 72 64 20 | ported.values.are:.The.standard. |
101e80 | 77 61 73 20 64 65 76 65 6c 6f 70 65 64 20 62 79 20 49 45 45 45 20 38 30 32 2e 31 2c 20 61 20 77 | was.developed.by.IEEE.802.1,.a.w |
101ea0 | 6f 72 6b 69 6e 67 20 67 72 6f 75 70 20 6f 66 20 74 68 65 20 49 45 45 45 20 38 30 32 20 73 74 61 | orking.group.of.the.IEEE.802.sta |
101ec0 | 6e 64 61 72 64 73 20 63 6f 6d 6d 69 74 74 65 65 2c 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 73 20 | ndards.committee,.and.continues. |
101ee0 | 74 6f 20 62 65 20 61 63 74 69 76 65 6c 79 20 72 65 76 69 73 65 64 2e 20 4f 6e 65 20 6f 66 20 74 | to.be.actively.revised..One.of.t |
101f00 | 68 65 20 6e 6f 74 61 62 6c 65 20 72 65 76 69 73 69 6f 6e 73 20 69 73 20 38 30 32 2e 31 51 2d 32 | he.notable.revisions.is.802.1Q-2 |
101f20 | 30 31 34 20 77 68 69 63 68 20 69 6e 63 6f 72 70 6f 72 61 74 65 64 20 49 45 45 45 20 38 30 32 2e | 014.which.incorporated.IEEE.802. |
101f40 | 31 61 71 20 28 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 42 72 69 64 67 69 6e 67 29 20 61 6e 64 | 1aq.(Shortest.Path.Bridging).and |
101f60 | 20 6d 75 63 68 20 6f 66 20 74 68 65 20 49 45 45 45 20 38 30 32 2e 31 64 20 73 74 61 6e 64 61 72 | .much.of.the.IEEE.802.1d.standar |
101f80 | 64 2e 00 54 68 65 20 73 79 73 74 65 6d 20 4c 43 44 20 3a 61 62 62 72 3a 60 4c 43 44 20 28 4c 69 | d..The.system.LCD.:abbr:`LCD.(Li |
101fa0 | 71 75 69 64 2d 63 72 79 73 74 61 6c 20 64 69 73 70 6c 61 79 29 60 20 6f 70 74 69 6f 6e 20 69 73 | quid-crystal.display)`.option.is |
101fc0 | 20 66 6f 72 20 75 73 65 72 73 20 72 75 6e 6e 69 6e 67 20 56 79 4f 53 20 6f 6e 20 68 61 72 64 77 | .for.users.running.VyOS.on.hardw |
101fe0 | 61 72 65 20 74 68 61 74 20 66 65 61 74 75 72 65 73 20 61 6e 20 4c 43 44 20 64 69 73 70 6c 61 79 | are.that.features.an.LCD.display |
102000 | 2e 20 54 68 69 73 20 69 73 20 74 79 70 69 63 61 6c 6c 79 20 61 20 73 6d 61 6c 6c 20 64 69 73 70 | ..This.is.typically.a.small.disp |
102020 | 6c 61 79 20 62 75 69 6c 74 20 69 6e 20 61 6e 20 31 39 20 69 6e 63 68 20 72 61 63 6b 2d 6d 6f 75 | lay.built.in.an.19.inch.rack-mou |
102040 | 6e 74 61 62 6c 65 20 61 70 70 6c 69 61 6e 63 65 2e 20 54 68 6f 73 65 20 64 69 73 70 6c 61 79 73 | ntable.appliance..Those.displays |
102060 | 20 61 72 65 20 75 73 65 64 20 74 6f 20 73 68 6f 77 20 72 75 6e 74 69 6d 65 20 64 61 74 61 2e 00 | .are.used.to.show.runtime.data.. |
102080 | 54 68 65 20 73 79 73 74 65 6d 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 74 6f 20 61 74 74 65 | The.system.is.configured.to.atte |
1020a0 | 6d 70 74 20 64 6f 6d 61 69 6e 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 69 6e 20 74 68 65 20 66 6f 6c | mpt.domain.completion.in.the.fol |
1020c0 | 6c 6f 77 69 6e 67 20 6f 72 64 65 72 3a 20 76 79 6f 73 2e 69 6f 20 28 66 69 72 73 74 29 2c 20 76 | lowing.order:.vyos.io.(first),.v |
1020e0 | 79 6f 73 2e 6e 65 74 20 28 73 65 63 6f 6e 64 29 20 61 6e 64 20 76 79 6f 73 2e 6e 65 74 77 6f 72 | yos.net.(second).and.vyos.networ |
102100 | 6b 20 28 6c 61 73 74 29 3a 00 54 68 65 20 74 61 62 6c 65 20 63 6f 6e 73 69 73 74 73 20 6f 66 20 | k.(last):.The.table.consists.of. |
102120 | 66 6f 6c 6c 6f 77 69 6e 67 20 64 61 74 61 3a 00 54 68 65 20 74 61 73 6b 20 73 63 68 65 64 75 6c | following.data:.The.task.schedul |
102140 | 65 72 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 78 65 63 75 74 65 20 74 61 73 6b 73 20 6f | er.allows.you.to.execute.tasks.o |
102160 | 6e 20 61 20 67 69 76 65 6e 20 73 63 68 65 64 75 6c 65 2e 20 49 74 20 6d 61 6b 65 73 20 75 73 65 | n.a.given.schedule..It.makes.use |
102180 | 20 6f 66 20 55 4e 49 58 20 63 72 6f 6e 5f 2e 00 54 68 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 | .of.UNIX.cron_..The.translation. |
1021a0 | 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 6f 6e 65 20 6f 66 20 74 68 | address.must.be.set.to.one.of.th |
1021c0 | 65 20 61 76 61 69 6c 61 62 6c 65 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 63 6f 6e | e.available.addresses.on.the.con |
1021e0 | 66 69 67 75 72 65 64 20 60 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 20 6f 72 20 | figured.`outbound-interface`.or. |
102200 | 69 74 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 60 6d 61 73 71 75 65 72 61 64 65 60 20 77 | it.must.be.set.to.`masquerade`.w |
102220 | 68 69 63 68 20 77 69 6c 6c 20 75 73 65 20 74 68 65 20 70 72 69 6d 61 72 79 20 49 50 20 61 64 64 | hich.will.use.the.primary.IP.add |
102240 | 72 65 73 73 20 6f 66 20 74 68 65 20 60 6f 75 74 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 60 | ress.of.the.`outbound-interface` |
102260 | 20 61 73 20 69 74 73 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2e 00 54 68 65 | .as.its.translation.address..The |
102280 | 20 74 75 6e 6e 65 6c 20 77 69 6c 6c 20 75 73 65 20 31 30 2e 32 35 35 2e 31 2e 31 20 66 6f 72 20 | .tunnel.will.use.10.255.1.1.for. |
1022a0 | 74 68 65 20 6c 6f 63 61 6c 20 49 50 20 61 6e 64 20 31 30 2e 32 35 35 2e 31 2e 32 20 66 6f 72 20 | the.local.IP.and.10.255.1.2.for. |
1022c0 | 74 68 65 20 72 65 6d 6f 74 65 2e 00 54 68 65 20 74 79 70 65 20 63 61 6e 20 62 65 20 74 68 65 20 | the.remote..The.type.can.be.the. |
1022e0 | 66 6f 6c 6c 6f 77 69 6e 67 3a 20 61 73 62 72 2d 73 75 6d 6d 61 72 79 2c 20 65 78 74 65 72 6e 61 | following:.asbr-summary,.externa |
102300 | 6c 2c 20 6e 65 74 77 6f 72 6b 2c 20 6e 73 73 61 2d 65 78 74 65 72 6e 61 6c 2c 20 6f 70 61 71 75 | l,.network,.nssa-external,.opaqu |
102320 | 65 2d 61 72 65 61 2c 20 6f 70 61 71 75 65 2d 61 73 2c 20 6f 70 61 71 75 65 2d 6c 69 6e 6b 2c 20 | e-area,.opaque-as,.opaque-link,. |
102340 | 72 6f 75 74 65 72 2c 20 73 75 6d 6d 61 72 79 2e 00 54 68 65 20 75 6c 74 69 6d 61 74 65 20 67 6f | router,.summary..The.ultimate.go |
102360 | 61 6c 20 6f 66 20 63 6c 61 73 73 69 66 79 69 6e 67 20 74 72 61 66 66 69 63 20 69 73 20 74 6f 20 | al.of.classifying.traffic.is.to. |
102380 | 67 69 76 65 20 65 61 63 68 20 63 6c 61 73 73 20 61 20 64 69 66 66 65 72 65 6e 74 20 74 72 65 61 | give.each.class.a.different.trea |
1023a0 | 74 6d 65 6e 74 2e 00 54 68 65 20 75 73 65 20 6f 66 20 49 50 6f 45 20 61 64 64 72 65 73 73 65 73 | tment..The.use.of.IPoE.addresses |
1023c0 | 20 74 68 65 20 64 69 73 61 64 76 61 6e 74 61 67 65 20 74 68 61 74 20 50 50 50 20 69 73 20 75 6e | .the.disadvantage.that.PPP.is.un |
1023e0 | 73 75 69 74 65 64 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 64 65 6c 69 76 65 72 79 20 74 6f | suited.for.multicast.delivery.to |
102400 | 20 6d 75 6c 74 69 70 6c 65 20 75 73 65 72 73 2e 20 54 79 70 69 63 61 6c 6c 79 2c 20 49 50 6f 45 | .multiple.users..Typically,.IPoE |
102420 | 20 75 73 65 73 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e | .uses.Dynamic.Host.Configuration |
102440 | 20 50 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 | .Protocol.and.Extensible.Authent |
102460 | 69 63 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 74 6f 20 70 72 6f 76 69 64 65 20 74 68 65 20 | ication.Protocol.to.provide.the. |
102480 | 73 61 6d 65 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 73 20 50 50 50 6f 45 2c 20 62 75 74 | same.functionality.as.PPPoE,.but |
1024a0 | 20 69 6e 20 61 20 6c 65 73 73 20 72 6f 62 75 73 74 20 6d 61 6e 6e 65 72 2e 00 54 68 65 20 76 61 | .in.a.less.robust.manner..The.va |
1024c0 | 6c 75 65 20 6f 66 20 74 68 65 20 61 74 74 72 69 62 75 74 65 20 60 60 4e 41 53 2d 50 6f 72 74 2d | lue.of.the.attribute.``NAS-Port- |
1024e0 | 49 64 60 60 20 6d 75 73 74 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 | Id``.must.be.less.than.16.charac |
102500 | 74 65 72 73 2c 20 6f 74 68 65 72 77 69 73 65 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 6f | ters,.otherwise.the.interface.wo |
102520 | 6e 27 74 20 62 65 20 72 65 6e 61 6d 65 64 2e 00 54 68 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 | n't.be.renamed..The.vendor-class |
102540 | 2d 69 64 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 72 65 71 75 65 73 | -id.option.can.be.used.to.reques |
102560 | 74 20 61 20 73 70 65 63 69 66 69 63 20 63 6c 61 73 73 20 6f 66 20 76 65 6e 64 6f 72 20 6f 70 74 | t.a.specific.class.of.vendor.opt |
102580 | 69 6f 6e 73 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 65 72 2e 00 54 68 65 20 76 65 74 68 20 64 | ions.from.the.server..The.veth.d |
1025a0 | 65 76 69 63 65 73 20 61 72 65 20 76 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 20 64 65 76 69 | evices.are.virtual.Ethernet.devi |
1025c0 | 63 65 73 2e 20 54 68 65 79 20 63 61 6e 20 61 63 74 20 61 73 20 74 75 6e 6e 65 6c 73 20 62 65 74 | ces..They.can.act.as.tunnels.bet |
1025e0 | 77 65 65 6e 20 6e 65 74 77 6f 72 6b 20 6e 61 6d 65 73 70 61 63 65 73 20 74 6f 20 63 72 65 61 74 | ween.network.namespaces.to.creat |
102600 | 65 20 61 20 62 72 69 64 67 65 20 74 6f 20 61 20 70 68 79 73 69 63 61 6c 20 6e 65 74 77 6f 72 6b | e.a.bridge.to.a.physical.network |
102620 | 20 64 65 76 69 63 65 20 69 6e 20 61 6e 6f 74 68 65 72 20 6e 61 6d 65 73 70 61 63 65 20 6f 72 20 | .device.in.another.namespace.or. |
102640 | 56 52 46 2c 20 62 75 74 20 63 61 6e 20 61 6c 73 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 74 61 | VRF,.but.can.also.be.used.as.sta |
102660 | 6e 64 61 6c 6f 6e 65 20 6e 65 74 77 6f 72 6b 20 64 65 76 69 63 65 73 2e 00 54 68 65 20 77 65 6c | ndalone.network.devices..The.wel |
102680 | 6c 20 6b 6e 6f 77 6e 20 4e 41 54 36 34 20 70 72 65 66 69 78 20 69 73 20 60 60 36 34 3a 66 66 39 | l.known.NAT64.prefix.is.``64:ff9 |
1026a0 | 62 3a 3a 2f 39 36 60 60 00 54 68 65 20 77 69 6e 64 6f 77 20 73 69 7a 65 20 6d 75 73 74 20 62 65 | b::/96``.The.window.size.must.be |
1026c0 | 20 62 65 74 77 65 65 6e 20 31 20 61 6e 64 20 32 31 2e 00 54 68 65 20 77 69 72 65 6c 65 73 73 20 | .between.1.and.21..The.wireless. |
1026e0 | 63 6c 69 65 6e 74 20 28 73 75 70 70 6c 69 63 61 6e 74 29 20 61 75 74 68 65 6e 74 69 63 61 74 65 | client.(supplicant).authenticate |
102700 | 73 20 61 67 61 69 6e 73 74 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 28 61 75 74 | s.against.the.RADIUS.server.(aut |
102720 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 29 20 75 73 69 6e 67 20 61 6e 20 3a 61 62 | hentication.server).using.an.:ab |
102740 | 62 72 3a 60 45 41 50 20 28 45 78 74 65 6e 73 69 62 6c 65 20 41 75 74 68 65 6e 74 69 63 61 74 69 | br:`EAP.(Extensible.Authenticati |
102760 | 6f 6e 20 50 72 6f 74 6f 63 6f 6c 29 60 20 20 6d 65 74 68 6f 64 20 63 6f 6e 66 69 67 75 72 65 64 | on.Protocol)`..method.configured |
102780 | 20 6f 6e 20 74 68 65 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 20 54 68 65 20 57 41 50 20 28 | .on.the.RADIUS.server..The.WAP.( |
1027a0 | 61 6c 73 6f 20 72 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 61 75 74 68 65 6e 74 69 63 61 74 6f | also.referred.to.as.authenticato |
1027c0 | 72 29 20 72 6f 6c 65 20 69 73 20 74 6f 20 73 65 6e 64 20 61 6c 6c 20 61 75 74 68 65 6e 74 69 63 | r).role.is.to.send.all.authentic |
1027e0 | 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 75 70 70 6c | ation.messages.between.the.suppl |
102800 | 69 63 61 6e 74 20 61 6e 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 75 74 68 65 6e 74 | icant.and.the.configured.authent |
102820 | 69 63 61 74 69 6f 6e 20 73 65 72 76 65 72 2c 20 74 68 75 73 20 74 68 65 20 52 41 44 49 55 53 20 | ication.server,.thus.the.RADIUS. |
102840 | 73 65 72 76 65 72 20 69 73 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 66 6f 72 20 61 75 74 68 65 6e | server.is.responsible.for.authen |
102860 | 74 69 63 61 74 69 6e 67 20 74 68 65 20 75 73 65 72 73 2e 00 54 68 65 6e 20 61 20 63 6f 72 72 65 | ticating.the.users..Then.a.corre |
102880 | 73 70 6f 6e 64 69 6e 67 20 53 4e 41 54 20 72 75 6c 65 20 69 73 20 63 72 65 61 74 65 64 20 74 6f | sponding.SNAT.rule.is.created.to |
1028a0 | 20 4e 41 54 20 6f 75 74 67 6f 69 6e 67 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 65 20 69 6e | .NAT.outgoing.traffic.for.the.in |
1028c0 | 74 65 72 6e 61 6c 20 49 50 20 74 6f 20 61 20 72 65 73 65 72 76 65 64 20 65 78 74 65 72 6e 61 6c | ternal.IP.to.a.reserved.external |
1028e0 | 20 49 50 2e 20 54 68 69 73 20 64 65 64 69 63 61 74 65 73 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 | .IP..This.dedicates.an.external. |
102900 | 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 49 50 20 61 64 64 | IP.address.to.an.internal.IP.add |
102920 | 72 65 73 73 20 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 66 6f 72 20 70 72 6f 74 6f 63 6f 6c 73 | ress.and.is.useful.for.protocols |
102940 | 20 77 68 69 63 68 20 64 6f 6e 27 74 20 68 61 76 65 20 74 68 65 20 6e 6f 74 69 6f 6e 20 6f 66 20 | .which.don't.have.the.notion.of. |
102960 | 70 6f 72 74 73 2c 20 73 75 63 68 20 61 73 20 47 52 45 2e 00 54 68 65 6e 20 77 65 20 6e 65 65 64 | ports,.such.as.GRE..Then.we.need |
102980 | 20 74 6f 20 67 65 6e 65 72 61 74 65 2c 20 61 64 64 20 61 6e 64 20 73 70 65 63 69 66 79 20 74 68 | .to.generate,.add.and.specify.th |
1029a0 | 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 6d 61 74 | e.names.of.the.cryptographic.mat |
1029c0 | 65 72 69 61 6c 73 2e 20 45 61 63 68 20 6f 66 20 74 68 65 20 69 6e 73 74 61 6c 6c 20 63 6f 6d 6d | erials..Each.of.the.install.comm |
1029e0 | 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6f 6e | and.should.be.applied.to.the.con |
102a00 | 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6d 6d 69 74 65 64 20 62 65 66 6f 72 65 20 75 | figuration.and.commited.before.u |
102a20 | 73 69 6e 67 20 75 6e 64 65 72 20 74 68 65 20 6f 70 65 6e 76 70 6e 20 69 6e 74 65 72 66 61 63 65 | sing.under.the.openvpn.interface |
102a40 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f | .configuration..Then.you.need.to |
102a60 | 20 69 6e 73 74 61 6c 6c 20 74 68 65 20 6b 65 79 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 72 | .install.the.key.on.the.remote.r |
102a80 | 6f 75 74 65 72 3a 00 54 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 74 68 65 20 | outer:.Then.you.need.to.set.the. |
102aa0 | 6b 65 79 20 69 6e 20 79 6f 75 72 20 4f 70 65 6e 56 50 4e 20 69 6e 74 65 72 66 61 63 65 20 73 65 | key.in.your.OpenVPN.interface.se |
102ac0 | 74 74 69 6e 67 73 3a 00 54 68 65 6e 2c 20 46 61 73 74 4e 65 74 4d 6f 6e 20 63 6f 6e 66 69 67 75 | ttings:.Then,.FastNetMon.configu |
102ae0 | 72 61 74 69 6f 6e 3a 00 54 68 65 72 65 20 61 72 65 20 33 20 64 65 66 61 75 6c 74 20 4e 54 50 20 | ration:.There.are.3.default.NTP. |
102b00 | 73 65 72 76 65 72 20 73 65 74 2e 20 59 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 63 68 61 6e | server.set..You.are.able.to.chan |
102b20 | 67 65 20 74 68 65 6d 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 | ge.them..There.are.a.lot.of.matc |
102b40 | 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 67 61 69 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 | hing.criteria.against.which.the. |
102b60 | 70 61 63 6b 61 67 65 20 63 61 6e 20 62 65 20 74 65 73 74 65 64 2e 00 54 68 65 72 65 20 61 72 65 | package.can.be.tested..There.are |
102b80 | 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 61 67 61 69 | .a.lot.of.matching.criteria.agai |
102ba0 | 6e 73 74 20 77 68 69 63 68 20 74 68 65 20 70 61 63 6b 65 74 20 63 61 6e 20 62 65 20 74 65 73 74 | nst.which.the.packet.can.be.test |
102bc0 | 65 64 2e 00 54 68 65 72 65 20 61 72 65 20 61 20 6c 6f 74 20 6f 66 20 6d 61 74 63 68 69 6e 67 20 | ed..There.are.a.lot.of.matching. |
102be0 | 63 72 69 74 65 72 69 61 20 6f 70 74 69 6f 6e 73 20 61 76 61 69 6c 61 62 6c 65 2c 20 62 6f 74 68 | criteria.options.available,.both |
102c00 | 20 66 6f 72 20 60 60 70 6f 6c 69 63 79 20 72 6f 75 74 65 60 60 20 61 6e 64 20 60 60 70 6f 6c 69 | .for.``policy.route``.and.``poli |
102c20 | 63 79 20 72 6f 75 74 65 36 60 60 2e 20 54 68 65 73 65 20 6f 70 74 69 6f 6e 73 20 61 72 65 20 6c | cy.route6``..These.options.are.l |
102c40 | 69 73 74 65 64 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 72 65 20 61 72 65 | isted.in.this.section..There.are |
102c60 | 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 66 6f 72 20 67 65 74 74 69 6e | .different.parameters.for.gettin |
102c80 | 67 20 70 72 65 66 69 78 2d 6c 69 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 00 54 68 65 72 65 | g.prefix-list.information:.There |
102ca0 | 20 61 72 65 20 6c 69 6d 69 74 73 20 6f 6e 20 77 68 69 63 68 20 63 68 61 6e 6e 65 6c 73 20 63 61 | .are.limits.on.which.channels.ca |
102cc0 | 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 48 54 34 30 2d 20 61 6e 64 20 48 54 34 30 2b 2e 20 | n.be.used.with.HT40-.and.HT40+.. |
102ce0 | 46 6f 6c 6c 6f 77 69 6e 67 20 74 61 62 6c 65 20 73 68 6f 77 73 20 74 68 65 20 63 68 61 6e 6e 65 | Following.table.shows.the.channe |
102d00 | 6c 73 20 74 68 61 74 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 48 54 34 | ls.that.may.be.available.for.HT4 |
102d20 | 30 2d 20 61 6e 64 20 48 54 34 30 2b 20 75 73 65 20 70 65 72 20 49 45 45 45 20 38 30 32 2e 31 31 | 0-.and.HT40+.use.per.IEEE.802.11 |
102d40 | 6e 20 41 6e 6e 65 78 20 4a 3a 00 54 68 65 72 65 20 61 72 65 20 6d 61 6e 79 20 70 61 72 61 6d 65 | n.Annex.J:.There.are.many.parame |
102d60 | 74 65 72 73 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 75 73 65 20 69 6e 20 | ters.you.will.be.able.to.use.in. |
102d80 | 6f 72 64 65 72 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 74 72 61 66 66 69 63 20 79 6f 75 20 77 | order.to.match.the.traffic.you.w |
102da0 | 61 6e 74 20 66 6f 72 20 61 20 63 6c 61 73 73 3a 00 54 68 65 72 65 20 61 72 65 20 6d 75 6c 74 69 | ant.for.a.class:.There.are.multi |
102dc0 | 70 6c 65 20 76 65 72 73 69 6f 6e 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 74 68 65 20 4e | ple.versions.available.for.the.N |
102de0 | 65 74 46 6c 6f 77 20 64 61 74 61 2e 20 54 68 65 20 60 3c 76 65 72 73 69 6f 6e 3e 60 20 75 73 65 | etFlow.data..The.`<version>`.use |
102e00 | 64 20 69 6e 20 74 68 65 20 65 78 70 6f 72 74 65 64 20 66 6c 6f 77 20 64 61 74 61 20 63 61 6e 20 | d.in.the.exported.flow.data.can. |
102e20 | 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e | be.configured.here..The.followin |
102e40 | 67 20 76 65 72 73 69 6f 6e 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 3a 00 54 68 65 72 65 20 | g.versions.are.supported:.There. |
102e60 | 61 72 65 20 72 61 74 65 2d 6c 69 6d 69 74 65 64 20 61 6e 64 20 6e 6f 6e 20 72 61 74 65 2d 6c 69 | are.rate-limited.and.non.rate-li |
102e80 | 6d 69 74 65 64 20 75 73 65 72 73 20 28 4d 41 43 73 29 00 54 68 65 72 65 20 61 72 65 20 73 6f 6d | mited.users.(MACs).There.are.som |
102ea0 | 65 20 73 63 65 6e 61 72 69 6f 73 20 77 68 65 72 65 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 | e.scenarios.where.serial.console |
102ec0 | 73 20 61 72 65 20 75 73 65 66 75 6c 2e 20 53 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 | s.are.useful..System.administrat |
102ee0 | 69 6f 6e 20 6f 66 20 72 65 6d 6f 74 65 20 63 6f 6d 70 75 74 65 72 73 20 69 73 20 75 73 75 61 6c | ion.of.remote.computers.is.usual |
102f00 | 6c 79 20 64 6f 6e 65 20 75 73 69 6e 67 20 3a 72 65 66 3a 60 73 73 68 60 2c 20 62 75 74 20 74 68 | ly.done.using.:ref:`ssh`,.but.th |
102f20 | 65 72 65 20 61 72 65 20 74 69 6d 65 73 20 77 68 65 6e 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 | ere.are.times.when.access.to.the |
102f40 | 20 63 6f 6e 73 6f 6c 65 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 77 61 79 20 74 6f 20 64 69 61 67 | .console.is.the.only.way.to.diag |
102f60 | 6e 6f 73 65 20 61 6e 64 20 63 6f 72 72 65 63 74 20 73 6f 66 74 77 61 72 65 20 66 61 69 6c 75 72 | nose.and.correct.software.failur |
102f80 | 65 73 2e 20 4d 61 6a 6f 72 20 75 70 67 72 61 64 65 73 20 74 6f 20 74 68 65 20 69 6e 73 74 61 6c | es..Major.upgrades.to.the.instal |
102fa0 | 6c 65 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6d 61 79 20 61 6c 73 6f 20 72 65 71 75 69 72 | led.distribution.may.also.requir |
102fc0 | 65 20 63 6f 6e 73 6f 6c 65 20 61 63 63 65 73 73 2e 00 54 68 65 72 65 20 61 72 65 20 74 68 72 65 | e.console.access..There.are.thre |
102fe0 | 65 20 6d 6f 64 65 73 20 6f 66 20 6f 70 65 72 61 74 69 6f 6e 20 66 6f 72 20 61 20 77 69 72 65 6c | e.modes.of.operation.for.a.wirel |
103000 | 65 73 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 65 72 65 20 61 72 65 20 74 77 6f 20 74 79 70 | ess.interface:.There.are.two.typ |
103020 | 65 73 20 6f 66 20 4e 65 74 77 6f 72 6b 20 41 64 6d 69 6e 73 20 77 68 6f 20 64 65 61 6c 20 77 69 | es.of.Network.Admins.who.deal.wi |
103040 | 74 68 20 42 47 50 2c 20 74 68 6f 73 65 20 77 68 6f 20 68 61 76 65 20 63 72 65 61 74 65 64 20 61 | th.BGP,.those.who.have.created.a |
103060 | 6e 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 69 6e 63 69 64 65 6e 74 20 61 6e 64 2f 6f 72 20 | n.international.incident.and/or. |
103080 | 6f 75 74 61 67 65 2c 20 61 6e 64 20 74 68 6f 73 65 20 77 68 6f 20 61 72 65 20 6c 79 69 6e 67 00 | outage,.and.those.who.are.lying. |
1030a0 | 54 68 65 72 65 20 61 72 65 20 74 77 6f 20 77 61 79 73 20 74 68 61 74 20 68 65 6c 70 20 75 73 20 | There.are.two.ways.that.help.us. |
1030c0 | 74 6f 20 6d 69 74 69 67 61 74 65 20 74 68 65 20 42 47 50 73 20 66 75 6c 6c 2d 6d 65 73 68 20 72 | to.mitigate.the.BGPs.full-mesh.r |
1030e0 | 65 71 75 69 72 65 6d 65 6e 74 20 69 6e 20 61 20 6e 65 74 77 6f 72 6b 3a 00 54 68 65 72 65 20 63 | equirement.in.a.network:.There.c |
103100 | 61 6e 20 6f 6e 6c 79 20 62 65 20 6f 6e 65 20 6c 6f 6f 70 62 61 63 6b 20 60 60 6c 6f 60 60 20 69 | an.only.be.one.loopback.``lo``.i |
103120 | 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 49 66 20 79 6f 75 20 6e | nterface.on.the.system..If.you.n |
103140 | 65 65 64 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 2c 20 70 6c 65 61 73 65 20 | eed.multiple.interfaces,.please. |
103160 | 75 73 65 20 74 68 65 20 3a 72 65 66 3a 60 64 75 6d 6d 79 2d 69 6e 74 65 72 66 61 63 65 60 20 69 | use.the.:ref:`dummy-interface`.i |
103180 | 6e 74 65 72 66 61 63 65 20 74 79 70 65 2e 00 54 68 65 72 65 20 63 6f 75 6c 64 20 62 65 20 61 20 | nterface.type..There.could.be.a. |
1031a0 | 77 69 64 65 20 72 61 6e 67 65 20 6f 66 20 72 6f 75 74 69 6e 67 20 70 6f 6c 69 63 69 65 73 2e 20 | wide.range.of.routing.policies.. |
1031c0 | 53 6f 6d 65 20 65 78 61 6d 70 6c 65 73 20 61 72 65 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 3a 00 | Some.examples.are.listed.below:. |
1031e0 | 54 68 65 72 65 20 69 73 20 61 20 76 65 72 79 20 6e 69 63 65 20 70 69 63 74 75 72 65 2f 65 78 70 | There.is.a.very.nice.picture/exp |
103200 | 6c 61 6e 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 56 79 61 74 74 61 20 64 6f 63 75 6d 65 6e 74 61 | lanation.in.the.Vyatta.documenta |
103220 | 74 69 6f 6e 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 72 65 77 72 69 74 74 65 6e 20 68 | tion.which.should.be.rewritten.h |
103240 | 65 72 65 2e 00 54 68 65 72 65 20 69 73 20 61 6c 73 6f 20 61 20 47 52 45 20 6f 76 65 72 20 49 50 | ere..There.is.also.a.GRE.over.IP |
103260 | 76 36 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 61 76 61 69 6c 61 62 6c 65 2c 20 69 74 20 69 | v6.encapsulation.available,.it.i |
103280 | 73 20 63 61 6c 6c 65 64 3a 20 60 60 69 70 36 67 72 65 60 60 2e 00 54 68 65 72 65 20 69 73 20 61 | s.called:.``ip6gre``..There.is.a |
1032a0 | 6e 20 65 6e 74 69 72 65 20 63 68 61 70 74 65 72 20 61 62 6f 75 74 20 68 6f 77 20 74 6f 20 63 6f | n.entire.chapter.about.how.to.co |
1032c0 | 6e 66 69 67 75 72 65 20 61 20 3a 72 65 66 3a 60 76 72 66 60 2c 20 70 6c 65 61 73 65 20 63 68 65 | nfigure.a.:ref:`vrf`,.please.che |
1032e0 | 63 6b 20 74 68 69 73 20 66 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 | ck.this.for.additional.informati |
103300 | 6f 6e 2e 00 54 68 65 72 65 27 73 20 61 20 76 61 72 69 65 74 79 20 6f 66 20 63 6c 69 65 6e 74 20 | on..There's.a.variety.of.client. |
103320 | 47 55 49 20 66 72 6f 6e 74 65 6e 64 73 20 66 6f 72 20 61 6e 79 20 70 6c 61 74 66 6f 72 6d 00 54 | GUI.frontends.for.any.platform.T |
103340 | 68 65 73 65 20 61 72 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 61 20 62 61 73 69 | hese.are.the.commands.for.a.basi |
103360 | 63 20 73 65 74 75 70 2e 00 54 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 61 6c 6c 6f 77 20 74 68 | c.setup..These.commands.allow.th |
103380 | 65 20 56 4c 41 4e 31 30 20 61 6e 64 20 56 4c 41 4e 31 31 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d | e.VLAN10.and.VLAN11.hosts.to.com |
1033a0 | 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 20 6f 74 68 65 72 20 75 73 69 6e 67 20 74 | municate.with.each.other.using.t |
1033c0 | 68 65 20 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 65 73 65 20 63 6f 6e | he.main.routing.table..These.con |
1033e0 | 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 6d 61 6e 64 61 74 6f 72 79 20 61 6e 64 20 | figuration.is.not.mandatory.and. |
103400 | 69 6e 20 6d 6f 73 74 20 63 61 73 65 73 20 74 68 65 72 65 27 73 20 6e 6f 20 6e 65 65 64 20 74 6f | in.most.cases.there's.no.need.to |
103420 | 20 63 6f 6e 66 69 67 75 72 65 20 69 74 2e 20 42 75 74 20 69 66 20 6e 65 63 65 73 73 61 72 79 2c | .configure.it..But.if.necessary, |
103440 | 20 47 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | .Gratuitous.ARP.can.be.configure |
103460 | 64 20 69 6e 20 60 60 67 6c 6f 62 61 6c 2d 70 61 72 61 6d 65 74 65 72 73 60 60 20 61 6e 64 2f 6f | d.in.``global-parameters``.and/o |
103480 | 72 20 69 6e 20 60 60 67 72 6f 75 70 60 60 20 73 65 63 74 69 6f 6e 2e 00 54 68 65 73 65 20 70 61 | r.in.``group``.section..These.pa |
1034a0 | 72 61 6d 65 74 65 72 73 20 61 72 65 20 70 61 73 73 65 64 20 61 73 2d 69 73 20 74 6f 20 69 73 63 | rameters.are.passed.as-is.to.isc |
1034c0 | 2d 64 68 63 70 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 20 75 6e 64 65 72 20 74 68 65 20 63 6f 6e | -dhcp's.dhcpd.conf.under.the.con |
1034e0 | 66 69 67 75 72 61 74 69 6f 6e 20 6e 6f 64 65 20 74 68 65 79 20 61 72 65 20 64 65 66 69 6e 65 64 | figuration.node.they.are.defined |
103500 | 20 69 6e 2e 20 54 68 65 79 20 61 72 65 20 6e 6f 74 20 76 61 6c 69 64 61 74 65 64 20 73 6f 20 61 | .in..They.are.not.validated.so.a |
103520 | 6e 20 65 72 72 6f 72 20 69 6e 20 74 68 65 20 72 61 77 20 70 61 72 61 6d 65 74 65 72 73 20 77 6f | n.error.in.the.raw.parameters.wo |
103540 | 6e 27 74 20 62 65 20 63 61 75 67 68 74 20 62 79 20 76 79 6f 73 27 73 20 73 63 72 69 70 74 73 20 | n't.be.caught.by.vyos's.scripts. |
103560 | 61 6e 64 20 77 69 6c 6c 20 63 61 75 73 65 20 64 68 63 70 64 20 74 6f 20 66 61 69 6c 20 74 6f 20 | and.will.cause.dhcpd.to.fail.to. |
103580 | 73 74 61 72 74 2e 20 41 6c 77 61 79 73 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 70 61 | start..Always.verify.that.the.pa |
1035a0 | 72 61 6d 65 74 65 72 73 20 61 72 65 20 63 6f 72 72 65 63 74 20 62 65 66 6f 72 65 20 63 6f 6d 6d | rameters.are.correct.before.comm |
1035c0 | 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 52 65 66 65 72 20 | itting.the.configuration..Refer. |
1035e0 | 74 6f 20 69 73 63 2d 64 68 63 70 27 73 20 64 68 63 70 64 2e 63 6f 6e 66 20 6d 61 6e 75 61 6c 20 | to.isc-dhcp's.dhcpd.conf.manual. |
103600 | 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6b 62 | for.more.information:.https://kb |
103620 | 2e 69 73 63 2e 6f 72 67 2f 64 6f 63 73 2f 69 73 63 2d 64 68 63 70 2d 34 34 2d 6d 61 6e 75 61 6c | .isc.org/docs/isc-dhcp-44-manual |
103640 | 2d 70 61 67 65 73 2d 64 68 63 70 64 63 6f 6e 66 00 54 68 65 73 65 20 70 61 72 61 6d 65 74 65 72 | -pages-dhcpdconf.These.parameter |
103660 | 73 20 6e 65 65 64 20 74 6f 20 62 65 20 70 61 72 74 20 6f 66 20 74 68 65 20 44 48 43 50 20 67 6c | s.need.to.be.part.of.the.DHCP.gl |
103680 | 6f 62 61 6c 20 6f 70 74 69 6f 6e 73 2e 20 54 68 65 79 20 73 74 61 79 20 75 6e 63 68 61 6e 67 65 | obal.options..They.stay.unchange |
1036a0 | 64 2e 00 54 68 65 79 20 63 61 6e 20 62 65 20 2a 2a 64 65 63 69 6d 61 6c 2a 2a 20 70 72 65 66 69 | d..They.can.be.**decimal**.prefi |
1036c0 | 78 65 73 2e 00 54 68 69 6e 67 73 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 72 65 64 20 69 6e 20 74 | xes..Things.to.be.considred.in.t |
1036e0 | 68 69 73 20 73 65 74 75 70 3a 00 54 68 69 73 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 | his.setup:.This.address.must.be. |
103700 | 74 68 65 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 6c 6f 63 61 6c 20 69 6e 74 65 72 66 61 63 65 | the.address.of.a.local.interface |
103720 | 2e 20 49 74 20 6d 61 79 20 62 65 20 73 70 65 63 69 66 69 65 64 20 61 73 20 61 6e 20 49 50 76 34 | ..It.may.be.specified.as.an.IPv4 |
103740 | 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 00 54 68 69 | .address.or.an.IPv6.address..Thi |
103760 | 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 38 30 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 | s.algorithm.is.802.3ad.compliant |
103780 | 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 69 73 20 6e 6f 74 20 66 75 6c 6c 79 20 38 30 | ..This.algorithm.is.not.fully.80 |
1037a0 | 32 2e 33 61 64 20 63 6f 6d 70 6c 69 61 6e 74 2e 20 41 20 73 69 6e 67 6c 65 20 54 43 50 20 6f 72 | 2.3ad.compliant..A.single.TCP.or |
1037c0 | 20 55 44 50 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 69 6e 67 20 62 6f 74 | .UDP.conversation.containing.bot |
1037e0 | 68 20 66 72 61 67 6d 65 6e 74 65 64 20 61 6e 64 20 75 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 | h.fragmented.and.unfragmented.pa |
103800 | 63 6b 65 74 73 20 77 69 6c 6c 20 73 65 65 20 70 61 63 6b 65 74 73 20 73 74 72 69 70 65 64 20 61 | ckets.will.see.packets.striped.a |
103820 | 63 72 6f 73 73 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 6d 61 79 20 72 | cross.two.interfaces..This.may.r |
103840 | 65 73 75 6c 74 20 69 6e 20 6f 75 74 20 6f 66 20 6f 72 64 65 72 20 64 65 6c 69 76 65 72 79 2e 20 | esult.in.out.of.order.delivery.. |
103860 | 4d 6f 73 74 20 74 72 61 66 66 69 63 20 74 79 70 65 73 20 77 69 6c 6c 20 6e 6f 74 20 6d 65 65 74 | Most.traffic.types.will.not.meet |
103880 | 20 74 68 65 73 65 20 63 72 69 74 65 72 69 61 2c 20 61 73 20 54 43 50 20 72 61 72 65 6c 79 20 66 | .these.criteria,.as.TCP.rarely.f |
1038a0 | 72 61 67 6d 65 6e 74 73 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 6d 6f 73 74 20 55 44 50 20 74 | ragments.traffic,.and.most.UDP.t |
1038c0 | 72 61 66 66 69 63 20 69 73 20 6e 6f 74 20 69 6e 76 6f 6c 76 65 64 20 69 6e 20 65 78 74 65 6e 64 | raffic.is.not.involved.in.extend |
1038e0 | 65 64 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2e 20 4f 74 68 65 72 20 69 6d 70 6c 65 6d 65 6e | ed.conversations..Other.implemen |
103900 | 74 61 74 69 6f 6e 73 20 6f 66 20 38 30 32 2e 33 61 64 20 6d 61 79 20 6f 72 20 6d 61 79 20 6e 6f | tations.of.802.3ad.may.or.may.no |
103920 | 74 20 74 6f 6c 65 72 61 74 65 20 74 68 69 73 20 6e 6f 6e 63 6f 6d 70 6c 69 61 6e 63 65 2e 00 54 | t.tolerate.this.noncompliance..T |
103940 | 68 69 73 20 61 6c 67 6f 72 69 74 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 | his.algorithm.will.place.all.tra |
103960 | 66 66 69 63 20 74 6f 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 | ffic.to.a.particular.network.pee |
103980 | 72 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 73 6c 61 76 65 2e 00 54 68 69 73 20 61 6c 67 6f 72 69 | r.on.the.same.slave..This.algori |
1039a0 | 74 68 6d 20 77 69 6c 6c 20 70 6c 61 63 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 74 6f 20 61 20 | thm.will.place.all.traffic.to.a. |
1039c0 | 70 61 72 74 69 63 75 6c 61 72 20 6e 65 74 77 6f 72 6b 20 70 65 65 72 20 6f 6e 20 74 68 65 20 73 | particular.network.peer.on.the.s |
1039e0 | 61 6d 65 20 73 6c 61 76 65 2e 20 46 6f 72 20 6e 6f 6e 2d 49 50 20 74 72 61 66 66 69 63 2c 20 74 | ame.slave..For.non-IP.traffic,.t |
103a00 | 68 65 20 66 6f 72 6d 75 6c 61 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 66 6f 72 20 74 68 | he.formula.is.the.same.as.for.th |
103a20 | 65 20 6c 61 79 65 72 32 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 63 79 2e 00 54 | e.layer2.transmit.hash.policy..T |
103a40 | 68 69 73 20 61 6c 6c 6f 77 73 20 61 76 6f 69 64 69 6e 67 20 74 68 65 20 74 69 6d 65 72 73 20 64 | his.allows.avoiding.the.timers.d |
103a60 | 65 66 69 6e 65 64 20 69 6e 20 42 47 50 20 61 6e 64 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f 6c 20 | efined.in.BGP.and.OSPF.protocol. |
103a80 | 74 6f 20 65 78 70 69 72 65 73 2e 00 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 6f 70 65 72 | to.expires..This.allows.the.oper |
103aa0 | 61 74 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 | ator.to.control.the.number.of.op |
103ac0 | 65 6e 20 66 69 6c 65 20 64 65 73 63 72 69 70 74 6f 72 73 20 65 61 63 68 20 64 61 65 6d 6f 6e 20 | en.file.descriptors.each.daemon. |
103ae0 | 69 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 73 74 61 72 74 20 77 69 74 68 2e 20 49 66 20 74 68 65 | is.allowed.to.start.with..If.the |
103b00 | 20 6f 70 65 72 61 74 6f 72 20 70 6c 61 6e 73 20 74 6f 20 72 75 6e 20 62 67 70 20 77 69 74 68 20 | .operator.plans.to.run.bgp.with. |
103b20 | 73 65 76 65 72 61 6c 20 74 68 6f 75 73 61 6e 64 73 20 6f 66 20 70 65 65 72 73 20 74 68 65 6e 20 | several.thousands.of.peers.then. |
103b40 | 74 68 69 73 20 69 73 20 77 68 65 72 65 20 77 65 20 77 6f 75 6c 64 20 6d 6f 64 69 66 79 20 46 52 | this.is.where.we.would.modify.FR |
103b60 | 52 20 74 6f 20 61 6c 6c 6f 77 20 74 68 69 73 20 74 6f 20 68 61 70 70 65 6e 2e 00 54 68 69 73 20 | R.to.allow.this.to.happen..This. |
103b80 | 61 6c 73 6f 20 77 6f 72 6b 73 20 66 6f 72 20 72 65 76 65 72 73 65 2d 6c 6f 6f 6b 75 70 20 7a 6f | also.works.for.reverse-lookup.zo |
103ba0 | 6e 65 73 20 28 60 60 31 38 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 60 60 29 2e 00 54 | nes.(``18.172.in-addr.arpa``)..T |
103bc0 | 68 69 73 20 61 72 74 69 63 6c 65 20 74 6f 75 63 68 65 73 20 6f 6e 20 27 63 6c 61 73 73 69 63 27 | his.article.touches.on.'classic' |
103be0 | 20 49 50 20 74 75 6e 6e 65 6c 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 54 68 69 73 20 62 6c | .IP.tunneling.protocols..This.bl |
103c00 | 75 65 70 72 69 6e 74 20 75 73 65 73 20 56 79 4f 53 20 61 73 20 74 68 65 20 44 4d 56 50 4e 20 48 | ueprint.uses.VyOS.as.the.DMVPN.H |
103c20 | 75 62 20 61 6e 64 20 43 69 73 63 6f 20 28 37 32 30 36 56 58 52 29 20 61 6e 64 20 56 79 4f 53 20 | ub.and.Cisco.(7206VXR).and.VyOS. |
103c40 | 61 73 20 6d 75 6c 74 69 70 6c 65 20 73 70 6f 6b 65 20 73 69 74 65 73 2e 20 54 68 65 20 6c 61 62 | as.multiple.spoke.sites..The.lab |
103c60 | 20 77 61 73 20 62 75 69 6c 64 20 75 73 69 6e 67 20 3a 61 62 62 72 3a 60 45 56 45 2d 4e 47 20 28 | .was.build.using.:abbr:`EVE-NG.( |
103c80 | 45 6d 75 6c 61 74 65 64 20 56 69 72 74 75 61 6c 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 20 4e 47 29 | Emulated.Virtual.Environment.NG) |
103ca0 | 60 2e 00 54 68 69 73 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 72 6d 65 64 20 75 73 69 6e 67 20 74 | `..This.can.be.confirmed.using.t |
103cc0 | 68 65 20 60 60 73 68 6f 77 20 69 70 20 72 6f 75 74 65 20 74 61 62 6c 65 20 31 30 30 60 60 20 6f | he.``show.ip.route.table.100``.o |
103ce0 | 70 65 72 61 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 61 6e 20 6f 6e 6c | perational.command..This.can.onl |
103d00 | 79 20 62 65 20 64 6f 6e 65 20 69 66 20 61 6c 6c 20 79 6f 75 72 20 75 73 65 72 73 20 61 72 65 20 | y.be.done.if.all.your.users.are. |
103d20 | 6c 6f 63 61 74 65 64 20 64 69 72 65 63 74 6c 79 20 75 6e 64 65 72 20 74 68 65 20 73 61 6d 65 20 | located.directly.under.the.same. |
103d40 | 70 6f 73 69 74 69 6f 6e 20 69 6e 20 74 68 65 20 4c 44 41 50 20 74 72 65 65 20 61 6e 64 20 74 68 | position.in.the.LDAP.tree.and.th |
103d60 | 65 20 6c 6f 67 69 6e 20 6e 61 6d 65 20 69 73 20 75 73 65 64 20 66 6f 72 20 6e 61 6d 69 6e 67 20 | e.login.name.is.used.for.naming. |
103d80 | 65 61 63 68 20 75 73 65 72 20 6f 62 6a 65 63 74 2e 20 49 66 20 79 6f 75 72 20 4c 44 41 50 20 74 | each.user.object..If.your.LDAP.t |
103da0 | 72 65 65 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 73 65 20 63 72 69 74 65 72 69 | ree.does.not.match.these.criteri |
103dc0 | 61 73 20 6f 72 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 66 69 6c 74 65 72 20 77 68 6f 20 | as.or.if.you.want.to.filter.who. |
103de0 | 61 72 65 20 76 61 6c 69 64 20 75 73 65 72 73 20 74 68 65 6e 20 79 6f 75 20 6e 65 65 64 20 74 6f | are.valid.users.then.you.need.to |
103e00 | 20 75 73 65 20 61 20 73 65 61 72 63 68 20 66 69 6c 74 65 72 20 74 6f 20 73 65 61 72 63 68 20 66 | .use.a.search.filter.to.search.f |
103e20 | 6f 72 20 79 6f 75 72 20 75 73 65 72 73 20 44 4e 20 28 60 66 69 6c 74 65 72 2d 65 78 70 72 65 73 | or.your.users.DN.(`filter-expres |
103e40 | 73 69 6f 6e 60 29 2e 00 54 68 69 73 20 63 68 61 70 65 74 65 72 20 64 65 73 63 72 69 62 65 73 20 | sion`)..This.chapeter.describes. |
103e60 | 68 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 6b 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 | how.to.configure.kernel.paramete |
103e80 | 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 00 54 68 69 73 20 63 68 61 70 74 65 72 20 64 65 73 63 | rs.at.runtime..This.chapter.desc |
103ea0 | 72 69 62 65 20 74 68 65 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 20 6f 66 20 61 64 76 61 6e 63 | ribe.the.possibilities.of.advanc |
103ec0 | 65 64 20 73 79 73 74 65 6d 20 62 65 68 61 76 69 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 64 20 | ed.system.behavior..This.commad. |
103ee0 | 73 65 74 73 20 6e 65 74 77 6f 72 6b 20 65 6e 74 69 74 79 20 74 69 74 6c 65 20 28 4e 45 54 29 20 | sets.network.entity.title.(NET). |
103f00 | 70 72 6f 76 69 64 65 64 20 69 6e 20 49 53 4f 20 66 6f 72 6d 61 74 2e 00 54 68 69 73 20 63 6f 6d | provided.in.ISO.format..This.com |
103f20 | 6d 61 6e 64 20 61 63 63 65 70 74 20 69 6e 63 6f 6d 69 6e 67 20 72 6f 75 74 65 73 20 77 69 74 68 | mand.accept.incoming.routes.with |
103f40 | 20 41 53 20 70 61 74 68 20 63 6f 6e 74 61 69 6e 69 6e 67 20 41 53 20 6e 75 6d 62 65 72 20 77 69 | .AS.path.containing.AS.number.wi |
103f60 | 74 68 20 74 68 65 20 73 61 6d 65 20 76 61 6c 75 65 20 61 73 20 74 68 65 20 63 75 72 72 65 6e 74 | th.the.same.value.as.the.current |
103f80 | 20 73 79 73 74 65 6d 20 41 53 2e 20 54 68 69 73 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 79 6f | .system.AS..This.is.used.when.yo |
103fa0 | 75 20 77 61 6e 74 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 | u.want.to.use.the.same.AS.number |
103fc0 | 20 69 6e 20 79 6f 75 72 20 73 69 74 65 73 2c 20 62 75 74 20 79 6f 75 20 63 61 6e e2 80 99 74 20 | .in.your.sites,.but.you.can...t. |
103fe0 | 63 6f 6e 6e 65 63 74 20 74 68 65 6d 20 64 69 72 65 63 74 6c 79 2e 00 54 68 69 73 20 63 6f 6d 6d | connect.them.directly..This.comm |
104000 | 61 6e 64 20 61 6c 6c 6f 77 20 6f 76 65 72 72 69 64 65 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 | and.allow.override.the.result.of |
104020 | 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 77 69 74 68 20 6c 6f 63 | .Capability.Negotiation.with.loc |
104040 | 61 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 49 67 6e 6f 72 65 20 72 65 6d 6f 74 65 20 | al.configuration..Ignore.remote. |
104060 | 70 65 65 72 e2 80 99 73 20 63 61 70 61 62 69 6c 69 74 79 20 76 61 6c 75 65 2e 00 54 68 69 73 20 | peer...s.capability.value..This. |
104080 | 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 70 65 65 72 69 6e 67 73 20 62 65 74 77 65 65 6e 20 | command.allows.peerings.between. |
1040a0 | 64 69 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 65 42 47 50 20 70 65 65 72 73 20 75 73 | directly.connected.eBGP.peers.us |
1040c0 | 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 20 77 69 74 68 6f 75 74 20 61 | ing.loopback.addresses.without.a |
1040e0 | 64 6a 75 73 74 69 6e 67 20 74 68 65 20 64 65 66 61 75 6c 74 20 54 54 4c 20 6f 66 20 31 2e 00 54 | djusting.the.default.TTL.of.1..T |
104100 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 62 | his.command.allows.sessions.to.b |
104120 | 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 77 69 74 68 20 65 42 47 50 20 6e 65 69 67 68 62 6f 72 | e.established.with.eBGP.neighbor |
104140 | 73 20 77 68 65 6e 20 74 68 65 79 20 61 72 65 20 6d 75 6c 74 69 70 6c 65 20 68 6f 70 73 20 61 77 | s.when.they.are.multiple.hops.aw |
104160 | 61 79 2e 20 57 68 65 6e 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 69 73 20 6e 6f 74 20 64 69 72 | ay..When.the.neighbor.is.not.dir |
104180 | 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 61 6e 64 20 74 68 69 73 20 6b 6e 6f 62 20 69 73 | ectly.connected.and.this.knob.is |
1041a0 | 20 6e 6f 74 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 69 6c 6c 20 6e | .not.enabled,.the.session.will.n |
1041c0 | 6f 74 20 65 73 74 61 62 6c 69 73 68 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 | ot.establish..The.number.of.hops |
1041e0 | 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | .range.is.1.to.255..This.command |
104200 | 20 69 73 20 6d 75 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 | .is.mutually.exclusive.with.:cfg |
104220 | 63 6d 64 3a 60 74 74 6c 2d 73 65 63 75 72 69 74 79 20 68 6f 70 73 60 2e 00 54 68 69 73 20 63 6f | cmd:`ttl-security.hops`..This.co |
104240 | 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 70 72 65 66 65 | mmand.allows.the.router.to.prefe |
104260 | 72 20 72 6f 75 74 65 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 20 6c 65 61 72 | r.route.to.specified.prefix.lear |
104280 | 6e 65 64 20 76 69 61 20 49 47 50 20 74 68 72 6f 75 67 68 20 62 61 63 6b 64 6f 6f 72 20 6c 69 6e | ned.via.IGP.through.backdoor.lin |
1042a0 | 6b 20 69 6e 73 74 65 61 64 20 6f 66 20 61 20 72 6f 75 74 65 20 74 6f 20 74 68 65 20 73 61 6d 65 | k.instead.of.a.route.to.the.same |
1042c0 | 20 70 72 65 66 69 78 20 6c 65 61 72 6e 65 64 20 76 69 61 20 45 42 47 50 2e 00 54 68 69 73 20 63 | .prefix.learned.via.EBGP..This.c |
1042e0 | 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 6c 6f 67 20 63 68 61 6e 67 65 73 20 69 6e 20 | ommand.allows.to.log.changes.in. |
104300 | 61 64 6a 61 63 65 6e 63 79 2e 20 57 69 74 68 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 | adjacency..With.the.optional.:cf |
104320 | 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 20 61 72 67 75 6d 65 6e 74 2c 20 61 6c 6c 20 63 68 61 6e | gcmd:`detail`.argument,.all.chan |
104340 | 67 65 73 20 69 6e 20 61 64 6a 61 63 65 6e 63 79 20 73 74 61 74 75 73 20 61 72 65 20 73 68 6f 77 | ges.in.adjacency.status.are.show |
104360 | 6e 2e 20 57 69 74 68 6f 75 74 20 3a 63 66 67 63 6d 64 3a 60 64 65 74 61 69 6c 60 2c 20 6f 6e 6c | n..Without.:cfgcmd:`detail`,.onl |
104380 | 79 20 63 68 61 6e 67 65 73 20 74 6f 20 66 75 6c 6c 20 6f 72 20 72 65 67 72 65 73 73 69 6f 6e 73 | y.changes.to.full.or.regressions |
1043a0 | 20 61 72 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 | .are.shown..This.command.allows. |
1043c0 | 74 6f 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 74 79 70 65 | to.specify.the.distribution.type |
1043e0 | 20 66 6f 72 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 | .for.the.network.connected.to.th |
104400 | 69 73 20 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 | is.interface:.This.command.allow |
104420 | 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 | s.to.use.route.map.to.filter.red |
104440 | 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 67 69 76 65 6e 20 72 6f 75 | istributed.routes.from.given.rou |
104460 | 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 | te.source..There.are.five.modes. |
104480 | 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c | available.for.route.source:.bgp, |
1044a0 | 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 | .connected,.kernel,.ripng,.stati |
1044c0 | 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f | c..This.command.allows.to.use.ro |
1044e0 | 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 | ute.map.to.filter.redistributed. |
104500 | 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 | routes.from.the.given.route.sour |
104520 | 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 | ce..There.are.five.modes.availab |
104540 | 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 | le.for.route.source:.bgp,.connec |
104560 | 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 | ted,.kernel,.ospf,.static..This. |
104580 | 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 | command.allows.to.use.route.map. |
1045a0 | 74 6f 20 66 69 6c 74 65 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 | to.filter.redistributed.routes.f |
1045c0 | 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 | rom.the.given.route.source..Ther |
1045e0 | 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 | e.are.five.modes.available.for.r |
104600 | 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 | oute.source:.bgp,.connected,.ker |
104620 | 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 | nel,.rip,.static..This.command.a |
104640 | 6c 6c 6f 77 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 | llows.to.use.route.map.to.filter |
104660 | 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 | .redistributed.routes.from.the.g |
104680 | 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 | iven.route.source..There.are.six |
1046a0 | 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 | .modes.available.for.route.sourc |
1046c0 | 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c | e:.bgp,.connected,.kernel,.ospf, |
1046e0 | 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 | .rip,.static..This.command.allow |
104700 | 73 20 74 6f 20 75 73 65 20 72 6f 75 74 65 20 6d 61 70 20 74 6f 20 66 69 6c 74 65 72 20 72 65 64 | s.to.use.route.map.to.filter.red |
104720 | 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 | istributed.routes..There.are.six |
104740 | 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 | .modes.available.for.route.sourc |
104760 | 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c | e:.connected,.kernel,.ospf,.rip, |
104780 | 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c | .static,.table..This.command.all |
1047a0 | 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 6f 20 61 20 | ows.you.apply.access.lists.to.a. |
1047c0 | 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 | chosen.interface.to.filter.the.B |
1047e0 | 61 62 65 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 | abel.routes..This.command.allows |
104800 | 20 79 6f 75 20 61 70 70 6c 79 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f | .you.apply.access.lists.to.a.cho |
104820 | 73 65 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 | sen.interface.to.filter.the.RIP. |
104840 | 70 61 74 68 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 | path..This.command.allows.you.ap |
104860 | 70 6c 79 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 | ply.prefix.lists.to.a.chosen.int |
104880 | 65 72 66 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 | erface.to.filter.the.Babel.route |
1048a0 | 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 61 70 70 6c 79 | s..This.command.allows.you.apply |
1048c0 | 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 74 6f 20 61 20 63 68 6f 73 65 6e 20 69 6e 74 65 72 66 | .prefix.lists.to.a.chosen.interf |
1048e0 | 61 63 65 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 2e 00 54 68 69 73 | ace.to.filter.the.RIP.path..This |
104900 | 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 73 65 6c 65 63 74 20 61 20 | .command.allows.you.to.select.a. |
104920 | 73 70 65 63 69 66 69 63 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 20 77 68 65 | specific.access.concentrator.whe |
104940 | 6e 20 79 6f 75 20 6b 6e 6f 77 20 74 68 65 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 | n.you.know.the.access.concentrat |
104960 | 6f 72 73 20 60 3c 6e 61 6d 65 3e 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 | ors.`<name>`..This.command.appli |
104980 | 65 73 20 72 6f 75 74 65 2d 6d 61 70 20 74 6f 20 73 65 6c 65 63 74 69 76 65 6c 79 20 75 6e 73 75 | es.route-map.to.selectively.unsu |
1049a0 | 70 70 72 65 73 73 20 70 72 65 66 69 78 65 73 20 73 75 70 70 72 65 73 73 65 64 20 62 79 20 73 75 | ppress.prefixes.suppressed.by.su |
1049c0 | 6d 6d 61 72 69 73 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 | mmarisation..This.command.applie |
1049e0 | 73 20 74 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 | s.the.AS.path.access.list.filter |
104a00 | 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 | s.named.in.<name>.to.the.specifi |
104a20 | 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 | ed.BGP.neighbor.to.restrict.the. |
104a40 | 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 | routing.information.that.BGP.lea |
104a60 | 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d | rns.and/or.advertises..The.argum |
104a80 | 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d | ents.:cfgcmd:`export`.and.:cfgcm |
104aa0 | 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e | d:`import`.specify.the.direction |
104ac0 | 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 41 53 20 70 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 | .in.which.the.AS.path.access.lis |
104ae0 | 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c | t.are.applied..This.command.appl |
104b00 | 69 65 73 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 | ies.the.access.list.filters.name |
104b20 | 64 20 69 6e 20 3c 6e 75 6d 62 65 72 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 | d.in.<number>.to.the.specified.B |
104b40 | 47 50 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 | GP.neighbor.to.restrict.the.rout |
104b60 | 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 | ing.information.that.BGP.learns. |
104b80 | 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 | and/or.advertises..The.arguments |
104ba0 | 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 | .:cfgcmd:`export`.and.:cfgcmd:`i |
104bc0 | 6d 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 | mport`.specify.the.direction.in. |
104be0 | 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 | which.the.access.list.are.applie |
104c00 | 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 70 72 66 65 | d..This.command.applies.the.prfe |
104c20 | 66 69 78 20 6c 69 73 74 20 66 69 6c 74 65 72 73 20 6e 61 6d 65 64 20 69 6e 20 3c 6e 61 6d 65 3e | fix.list.filters.named.in.<name> |
104c40 | 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 74 | .to.the.specified.BGP.neighbor.t |
104c60 | 6f 20 72 65 73 74 72 69 63 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 | o.restrict.the.routing.informati |
104c80 | 6f 6e 20 74 68 61 74 20 42 47 50 20 6c 65 61 72 6e 73 20 61 6e 64 2f 6f 72 20 61 64 76 65 72 74 | on.that.BGP.learns.and/or.advert |
104ca0 | 69 73 65 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 3a 63 66 67 63 6d 64 3a 60 65 78 70 | ises..The.arguments.:cfgcmd:`exp |
104cc0 | 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d 70 6f 72 74 60 20 73 70 65 63 69 66 | ort`.and.:cfgcmd:`import`.specif |
104ce0 | 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 | y.the.direction.in.which.the.pre |
104d00 | 66 69 78 20 6c 69 73 74 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | fix.list.are.applied..This.comma |
104d20 | 6e 64 20 61 70 70 6c 69 65 73 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 6e 61 6d 65 64 20 69 | nd.applies.the.route.map.named.i |
104d40 | 6e 20 3c 6e 61 6d 65 3e 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 6e 65 | n.<name>.to.the.specified.BGP.ne |
104d60 | 69 67 68 62 6f 72 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 61 6e 64 20 6d 6f 64 69 66 79 20 72 6f 75 | ighbor.to.control.and.modify.rou |
104d80 | 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 69 73 20 65 78 63 68 61 6e 67 | ting.information.that.is.exchang |
104da0 | 65 64 20 62 65 74 77 65 65 6e 20 70 65 65 72 73 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 | ed.between.peers..The.arguments. |
104dc0 | 3a 63 66 67 63 6d 64 3a 60 65 78 70 6f 72 74 60 20 61 6e 64 20 3a 63 66 67 63 6d 64 3a 60 69 6d | :cfgcmd:`export`.and.:cfgcmd:`im |
104de0 | 70 6f 72 74 60 20 73 70 65 63 69 66 79 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 77 | port`.specify.the.direction.in.w |
104e00 | 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 6d 61 70 20 61 72 65 20 61 70 70 6c 69 65 64 2e 00 | hich.the.route.map.are.applied.. |
104e20 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 62 69 6e 64 20 73 70 65 63 69 66 69 63 20 70 65 65 72 20 | This.command.bind.specific.peer. |
104e40 | 74 6f 20 70 65 65 72 20 67 72 6f 75 70 20 77 69 74 68 20 61 20 67 69 76 65 6e 20 6e 61 6d 65 2e | to.peer.group.with.a.given.name. |
104e60 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c | .This.command.can.be.used.to.fil |
104e80 | 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 20 75 73 69 6e 67 20 61 63 63 65 73 | ter.the.Babel.routes.using.acces |
104ea0 | 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 66 67 63 6d | s.lists..:cfgcmd:`in`.and.:cfgcm |
104ec0 | 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f 6e 20 69 6e | d:`out`.this.is.the.direction.in |
104ee0 | 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 61 70 70 6c | .which.the.access.lists.are.appl |
104f00 | 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f | ied..This.command.can.be.used.to |
104f20 | 20 66 69 6c 74 65 72 20 74 68 65 20 42 61 62 65 6c 20 72 6f 75 74 65 73 20 75 73 69 6e 67 20 70 | .filter.the.Babel.routes.using.p |
104f40 | 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 | refix.lists..:cfgcmd:`in`.and.:c |
104f60 | 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f | fgcmd:`out`.this.is.the.directio |
104f80 | 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 | n.in.which.the.prefix.lists.are. |
104fa0 | 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 | applied..This.command.can.be.use |
104fc0 | 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 6e 67 20 61 | d.to.filter.the.RIP.path.using.a |
104fe0 | 63 63 65 73 73 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 | ccess.lists..:cfgcmd:`in`.and.:c |
105000 | 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f | fgcmd:`out`.this.is.the.directio |
105020 | 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 73 20 61 72 65 20 | n.in.which.the.access.lists.are. |
105040 | 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 | applied..This.command.can.be.use |
105060 | 64 20 74 6f 20 66 69 6c 74 65 72 20 74 68 65 20 52 49 50 20 70 61 74 68 20 75 73 69 6e 67 20 70 | d.to.filter.the.RIP.path.using.p |
105080 | 72 65 66 69 78 20 6c 69 73 74 73 2e 20 3a 63 66 67 63 6d 64 3a 60 69 6e 60 20 61 6e 64 20 3a 63 | refix.lists..:cfgcmd:`in`.and.:c |
1050a0 | 66 67 63 6d 64 3a 60 6f 75 74 60 20 74 68 69 73 20 69 73 20 74 68 65 20 64 69 72 65 63 74 69 6f | fgcmd:`out`.this.is.the.directio |
1050c0 | 6e 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 70 72 65 66 69 78 20 6c 69 73 74 73 20 61 72 65 20 | n.in.which.the.prefix.lists.are. |
1050e0 | 61 70 70 6c 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 | applied..This.command.can.be.use |
105100 | 64 20 77 69 74 68 20 70 72 65 76 69 6f 75 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 73 20 | d.with.previous.command.to.sets. |
105120 | 64 65 66 61 75 6c 74 20 52 49 50 20 64 69 73 74 61 6e 63 65 20 74 6f 20 73 70 65 63 69 66 69 65 | default.RIP.distance.to.specifie |
105140 | 64 20 76 61 6c 75 65 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 49 50 | d.value.when.the.route.source.IP |
105160 | 20 61 64 64 72 65 73 73 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 | .address.matches.the.specified.p |
105180 | 72 65 66 69 78 20 61 6e 64 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 63 63 65 73 73 2d 6c | refix.and.the.specified.access-l |
1051a0 | 69 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 | ist..This.command.change.distanc |
1051c0 | 65 20 76 61 6c 75 65 20 6f 66 20 42 47 50 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 72 | e.value.of.BGP..The.arguments.ar |
1051e0 | 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 6e | e.the.distance.values.for.extern |
105200 | 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 20 61 6e 64 20 6c | al.routes,.internal.routes.and.l |
105220 | 6f 63 61 6c 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 | ocal.routes.respectively..The.di |
105240 | 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 | stance.range.is.1.to.255..This.c |
105260 | 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 | ommand.change.distance.value.of. |
105280 | 4f 53 50 46 20 67 6c 6f 62 61 6c 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 | OSPF.globally..The.distance.rang |
1052a0 | 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e | e.is.1.to.255..This.command.chan |
1052c0 | 67 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 2e 20 54 68 65 20 61 | ge.distance.value.of.OSPF..The.a |
1052e0 | 72 67 75 6d 65 6e 74 73 20 61 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 | rguments.are.the.distance.values |
105300 | 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 | .for.external.routes,.inter-area |
105320 | 20 72 6f 75 74 65 73 20 61 6e 64 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 73 20 72 65 | .routes.and.intra-area.routes.re |
105340 | 73 70 65 63 74 69 76 65 6c 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 | spectively..The.distance.range.i |
105360 | 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 | s.1.to.255..This.command.change. |
105380 | 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 20 67 6c 6f 62 61 6c 6c | distance.value.of.OSPFv3.globall |
1053a0 | 79 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 | y..The.distance.range.is.1.to.25 |
1053c0 | 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 64 69 73 74 61 6e 63 65 20 | 5..This.command.change.distance. |
1053e0 | 76 61 6c 75 65 20 6f 66 20 4f 53 50 46 76 33 2e 20 54 68 65 20 61 72 67 75 6d 65 6e 74 73 20 61 | value.of.OSPFv3..The.arguments.a |
105400 | 72 65 20 74 68 65 20 64 69 73 74 61 6e 63 65 20 76 61 6c 75 65 73 20 66 6f 72 20 65 78 74 65 72 | re.the.distance.values.for.exter |
105420 | 6e 61 6c 20 72 6f 75 74 65 73 2c 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 20 61 6e | nal.routes,.inter-area.routes.an |
105440 | 64 20 69 6e 74 72 61 2d 61 72 65 61 20 72 6f 75 74 65 73 20 72 65 73 70 65 63 74 69 76 65 6c 79 | d.intra-area.routes.respectively |
105460 | 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 | ..The.distance.range.is.1.to.255 |
105480 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 20 74 68 65 20 64 69 73 74 61 6e | ..This.command.change.the.distan |
1054a0 | 63 65 20 76 61 6c 75 65 20 6f 66 20 52 49 50 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 | ce.value.of.RIP..The.distance.ra |
1054c0 | 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 | nge.is.1.to.255..This.command.ch |
1054e0 | 61 6e 67 65 73 20 74 68 65 20 65 42 47 50 20 62 65 68 61 76 69 6f 72 20 6f 66 20 46 52 52 2e 20 | anges.the.eBGP.behavior.of.FRR.. |
105500 | 42 79 20 64 65 66 61 75 6c 74 20 46 52 52 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 38 32 31 | By.default.FRR.enables.:rfc:`821 |
105520 | 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 77 68 69 63 68 20 61 66 66 65 63 74 73 20 68 | 2`.functionality.which.affects.h |
105540 | 6f 77 20 65 42 47 50 20 72 6f 75 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 2c 20 6e | ow.eBGP.routes.are.advertised,.n |
105560 | 61 6d 65 6c 79 20 6e 6f 20 72 6f 75 74 65 73 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 20 61 | amely.no.routes.are.advertised.a |
105580 | 63 72 6f 73 73 20 65 42 47 50 20 73 65 73 73 69 6f 6e 73 20 77 69 74 68 6f 75 74 20 73 6f 6d 65 | cross.eBGP.sessions.without.some |
1055a0 | 20 73 6f 72 74 20 6f 66 20 65 67 72 65 73 73 20 72 6f 75 74 65 2d 6d 61 70 2f 70 6f 6c 69 63 79 | .sort.of.egress.route-map/policy |
1055c0 | 20 69 6e 20 70 6c 61 63 65 2e 20 49 6e 20 56 79 4f 53 20 68 6f 77 65 76 65 72 20 77 65 20 68 61 | .in.place..In.VyOS.however.we.ha |
1055e0 | 76 65 20 74 68 69 73 20 52 46 43 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 64 69 73 61 62 6c | ve.this.RFC.functionality.disabl |
105600 | 65 64 20 62 79 20 64 65 66 61 75 6c 74 20 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 70 72 65 | ed.by.default.so.that.we.can.pre |
105620 | 73 65 72 76 65 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 77 69 | serve.backwards.compatibility.wi |
105640 | 74 68 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 73 20 6f 66 20 56 79 4f 53 2e 20 57 69 74 68 20 | th.older.versions.of.VyOS..With. |
105660 | 74 68 69 73 20 6f 70 74 69 6f 6e 20 6f 6e 65 20 63 61 6e 20 65 6e 61 62 6c 65 20 3a 72 66 63 3a | this.option.one.can.enable.:rfc: |
105680 | 60 38 32 31 32 60 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 74 6f 20 6f 70 65 72 61 74 65 2e | `8212`.functionality.to.operate. |
1056a0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 65 73 20 70 61 64 64 69 6e 67 | .This.command.configures.padding |
1056c0 | 20 6f 6e 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 74 6f 20 61 63 63 6f 6d 6d 6f 64 61 74 65 | .on.hello.packets.to.accommodate |
1056e0 | 20 61 73 79 6d 6d 65 74 72 69 63 61 6c 20 6d 61 78 69 6d 75 6d 20 74 72 61 6e 73 66 65 72 20 75 | .asymmetrical.maximum.transfer.u |
105700 | 6e 69 74 73 20 28 4d 54 55 73 29 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 68 6f 73 74 73 | nits.(MTUs).from.different.hosts |
105720 | 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 31 39 60 2e 20 54 68 | .as.described.in.:rfc:`3719`..Th |
105740 | 69 73 20 68 65 6c 70 73 20 74 6f 20 70 72 65 76 65 6e 74 20 61 20 70 72 65 6d 61 74 75 72 65 20 | is.helps.to.prevent.a.premature. |
105760 | 61 64 6a 61 63 65 6e 63 79 20 55 70 20 73 74 61 74 65 20 77 68 65 6e 20 6f 6e 65 20 72 6f 75 74 | adjacency.Up.state.when.one.rout |
105780 | 69 6e 67 20 64 65 76 69 63 65 73 20 4d 54 55 20 64 6f 65 73 20 6e 6f 74 20 6d 65 65 74 20 74 68 | ing.devices.MTU.does.not.meet.th |
1057a0 | 65 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 | e.requirements.to.establish.the. |
1057c0 | 61 64 6a 61 63 65 6e 63 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f 6e 66 69 67 75 72 | adjacency..This.command.configur |
1057e0 | 65 73 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 20 66 | es.the.authentication.password.f |
105800 | 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 | or.the.interface..This.command.c |
105820 | 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 20 6f 66 20 67 65 | onfigures.the.maximum.size.of.ge |
105840 | 6e 65 72 61 74 65 64 20 3a 61 62 62 72 3a 60 4c 53 50 73 20 28 4c 69 6e 6b 20 53 74 61 74 65 20 | nerated.:abbr:`LSPs.(Link.State. |
105860 | 50 44 55 73 29 60 2c 20 69 6e 20 62 79 74 65 73 2e 20 54 68 65 20 73 69 7a 65 20 72 61 6e 67 65 | PDUs)`,.in.bytes..The.size.range |
105880 | 20 69 73 20 31 32 38 20 74 6f 20 34 33 35 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 6f | .is.128.to.4352..This.command.co |
1058a0 | 6e 66 69 67 75 72 65 73 20 74 68 65 20 70 61 73 73 69 76 65 20 6d 6f 64 65 20 66 6f 72 20 74 68 | nfigures.the.passive.mode.for.th |
1058c0 | 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 | is.interface..This.command.creat |
1058e0 | 65 73 20 61 20 6e 65 77 20 6e 65 69 67 68 62 6f 72 20 77 68 6f 73 65 20 72 65 6d 6f 74 65 2d 61 | es.a.new.neighbor.whose.remote-a |
105900 | 73 20 69 73 20 3c 6e 61 73 6e 3e 2e 20 54 68 65 20 6e 65 69 67 68 62 6f 72 20 61 64 64 72 65 73 | s.is.<nasn>..The.neighbor.addres |
105920 | 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 49 | s.can.be.an.IPv4.address.or.an.I |
105940 | 50 76 36 20 61 64 64 72 65 73 73 20 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 75 | Pv6.address.or.an.interface.to.u |
105960 | 73 65 20 66 6f 72 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 65 20 63 6f 6d 6d 61 | se.for.the.connection..The.comma |
105980 | 6e 64 20 69 73 20 61 70 70 6c 69 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 61 6e 64 20 70 65 | nd.is.applicable.for.peer.and.pe |
1059a0 | 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 | er.group..This.command.creates.a |
1059c0 | 20 6e 65 77 20 72 6f 75 74 65 2d 6d 61 70 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 | .new.route-map.policy,.identifie |
1059e0 | 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 | d.by.<text>..This.command.create |
105a00 | 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 49 50 76 36 20 61 63 63 65 73 73 20 | s.a.new.rule.in.the.IPv6.access. |
105a20 | 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 | list.and.defines.an.action..This |
105a40 | 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 | .command.creates.a.new.rule.in.t |
105a60 | 68 65 20 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 | he.IPv6.prefix-list.and.defines. |
105a80 | 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 | an.action..This.command.creates. |
105aa0 | 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 61 63 63 65 73 73 20 6c 69 73 74 20 61 6e | a.new.rule.in.the.access.list.an |
105ac0 | 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | d.defines.an.action..This.comman |
105ae0 | 64 20 63 72 65 61 74 65 73 20 61 20 6e 65 77 20 72 75 6c 65 20 69 6e 20 74 68 65 20 70 72 65 66 | d.creates.a.new.rule.in.the.pref |
105b00 | 69 78 2d 6c 69 73 74 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 6e 20 61 63 74 69 6f 6e 2e 00 54 | ix-list.and.defines.an.action..T |
105b20 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 49 50 76 36 | his.command.creates.the.new.IPv6 |
105b40 | 20 61 63 63 65 73 73 20 6c 69 73 74 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 | .access.list,.identified.by.<tex |
105b60 | 74 3e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 | t>.This.command.creates.the.new. |
105b80 | 49 50 76 36 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 69 64 65 6e 74 69 66 | IPv6.prefix-list.policy,.identif |
105ba0 | 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 72 65 61 | ied.by.<text>..This.command.crea |
105bc0 | 74 65 73 20 74 68 65 20 6e 65 77 20 61 63 63 65 73 73 20 6c 69 73 74 20 70 6f 6c 69 63 79 2c 20 | tes.the.new.access.list.policy,. |
105be0 | 77 68 65 72 65 20 3c 61 63 6c 5f 6e 75 6d 62 65 72 3e 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d | where.<acl_number>.must.be.a.num |
105c00 | 62 65 72 20 66 72 6f 6d 20 31 20 74 6f 20 32 36 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | ber.from.1.to.2699..This.command |
105c20 | 20 63 72 65 61 74 65 73 20 74 68 65 20 6e 65 77 20 70 72 65 66 69 78 2d 6c 69 73 74 20 70 6f 6c | .creates.the.new.prefix-list.pol |
105c40 | 69 63 79 2c 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 3c 74 65 78 74 3e 2e 00 54 68 69 73 20 | icy,.identified.by.<text>..This. |
105c60 | 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 6e 65 77 20 70 65 65 72 20 67 72 6f 75 70 | command.defines.a.new.peer.group |
105c80 | 2e 20 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 74 6f 20 74 68 65 20 67 72 6f 75 70 20 74 | ..You.can.specify.to.the.group.t |
105ca0 | 68 65 20 73 61 6d 65 20 70 61 72 61 6d 65 74 65 72 73 20 74 68 61 74 20 79 6f 75 20 63 61 6e 20 | he.same.parameters.that.you.can. |
105cc0 | 73 70 65 63 69 66 79 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f 72 73 2e 00 | specify.for.specific.neighbors.. |
105ce0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e 67 20 70 61 | This.command.defines.matching.pa |
105d00 | 72 61 6d 65 74 65 72 73 20 66 6f 72 20 49 50 76 36 20 61 63 63 65 73 73 20 6c 69 73 74 20 72 75 | rameters.for.IPv6.access.list.ru |
105d20 | 6c 65 2e 20 4d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c 64 20 62 65 20 61 | le..Matching.criteria.could.be.a |
105d40 | 70 70 6c 69 65 64 20 74 6f 20 73 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 72 73 3a 00 54 68 69 | pplied.to.source.parameters:.Thi |
105d60 | 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 6d 61 74 63 68 69 6e 67 20 70 61 72 61 6d | s.command.defines.matching.param |
105d80 | 65 74 65 72 73 20 66 6f 72 20 61 63 63 65 73 73 20 6c 69 73 74 20 72 75 6c 65 2e 20 4d 61 74 63 | eters.for.access.list.rule..Matc |
105da0 | 68 69 6e 67 20 63 72 69 74 65 72 69 61 20 63 6f 75 6c 64 20 62 65 20 61 70 70 6c 69 65 64 20 74 | hing.criteria.could.be.applied.t |
105dc0 | 6f 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 6f 72 20 73 6f 75 72 63 65 20 70 61 72 61 6d 65 74 65 | o.destination.or.source.paramete |
105de0 | 72 73 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 49 53 2d | rs:.This.command.defines.the.IS- |
105e00 | 49 53 20 72 6f 75 74 65 72 20 62 65 68 61 76 69 6f 72 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | IS.router.behavior:.This.command |
105e20 | 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 | .defines.the.accumulated.penalty |
105e40 | 20 61 6d 6f 75 6e 74 20 61 74 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 72 65 | .amount.at.which.the.route.is.re |
105e60 | 2d 61 64 76 65 72 74 69 73 65 64 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 | -advertised..The.penalty.range.i |
105e80 | 73 20 31 20 74 6f 20 32 30 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e | s.1.to.20000..This.command.defin |
105ea0 | 65 73 20 74 68 65 20 61 63 63 75 6d 75 6c 61 74 65 64 20 70 65 6e 61 6c 74 79 20 61 6d 6f 75 6e | es.the.accumulated.penalty.amoun |
105ec0 | 74 20 61 74 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 | t.at.which.the.route.is.suppress |
105ee0 | 65 64 2e 20 54 68 65 20 70 65 6e 61 6c 74 79 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 30 | ed..The.penalty.range.is.1.to.20 |
105f00 | 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 6d | 000..This.command.defines.the.am |
105f20 | 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 66 74 65 72 20 77 68 | ount.of.time.in.minutes.after.wh |
105f40 | 69 63 68 20 61 20 70 65 6e 61 6c 74 79 20 69 73 20 72 65 64 75 63 65 64 20 62 79 20 68 61 6c 66 | ich.a.penalty.is.reduced.by.half |
105f60 | 2e 20 54 68 65 20 74 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 30 20 74 6f 20 34 35 20 6d 69 | ..The.timer.range.is.10.to.45.mi |
105f80 | 6e 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e 65 73 20 74 68 65 20 | nutes..This.command.defines.the. |
105fa0 | 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 72 61 6c 6c 65 6c 20 72 6f 75 74 65 | maximum.number.of.parallel.route |
105fc0 | 73 20 74 68 61 74 20 74 68 65 20 42 47 50 20 63 61 6e 20 73 75 70 70 6f 72 74 2e 20 49 6e 20 6f | s.that.the.BGP.can.support..In.o |
105fe0 | 72 64 65 72 20 66 6f 72 20 42 47 50 20 74 6f 20 75 73 65 20 74 68 65 20 73 65 63 6f 6e 64 20 70 | rder.for.BGP.to.use.the.second.p |
106000 | 61 74 68 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 61 74 74 72 69 62 75 74 65 73 20 68 61 | ath,.the.following.attributes.ha |
106020 | 76 65 20 74 6f 20 6d 61 74 63 68 3a 20 57 65 69 67 68 74 2c 20 4c 6f 63 61 6c 20 50 72 65 66 65 | ve.to.match:.Weight,.Local.Prefe |
106040 | 72 65 6e 63 65 2c 20 41 53 20 50 61 74 68 20 28 62 6f 74 68 20 41 53 20 6e 75 6d 62 65 72 20 61 | rence,.AS.Path.(both.AS.number.a |
106060 | 6e 64 20 41 53 20 70 61 74 68 20 6c 65 6e 67 74 68 29 2c 20 4f 72 69 67 69 6e 20 63 6f 64 65 2c | nd.AS.path.length),.Origin.code, |
106080 | 20 4d 45 44 2c 20 49 47 50 20 6d 65 74 72 69 63 2e 20 41 6c 73 6f 2c 20 74 68 65 20 6e 65 78 74 | .MED,.IGP.metric..Also,.the.next |
1060a0 | 20 68 6f 70 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 61 63 68 20 70 61 74 68 20 6d 75 73 74 20 | .hop.address.for.each.path.must. |
1060c0 | 62 65 20 64 69 66 66 65 72 65 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 65 66 69 6e | be.different..This.command.defin |
1060e0 | 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 74 69 6d 65 20 69 6e 20 6d 69 6e 75 74 65 73 20 74 | es.the.maximum.time.in.minutes.t |
106100 | 68 61 74 20 61 20 72 6f 75 74 65 20 69 73 20 73 75 70 70 72 65 73 73 65 64 2e 20 54 68 65 20 74 | hat.a.route.is.suppressed..The.t |
106120 | 69 6d 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 32 35 35 20 6d 69 6e 75 74 65 73 2e 00 | imer.range.is.1.to.255.minutes.. |
106140 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 20 74 68 65 20 70 65 65 72 20 6f 72 | This.command.disable.the.peer.or |
106160 | 20 70 65 65 72 20 67 72 6f 75 70 2e 20 54 6f 20 72 65 65 6e 61 62 6c 65 20 74 68 65 20 70 65 65 | .peer.group..To.reenable.the.pee |
106180 | 72 20 75 73 65 20 74 68 65 20 64 65 6c 65 74 65 20 66 6f 72 6d 20 6f 66 20 74 68 69 73 20 63 6f | r.use.the.delete.form.of.this.co |
1061a0 | 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 49 47 50 | mmand..This.command.disables.IGP |
1061c0 | 2d 4c 44 50 20 73 79 6e 63 20 66 6f 72 20 74 68 69 73 20 73 70 65 63 69 66 69 63 20 69 6e 74 65 | -LDP.sync.for.this.specific.inte |
1061e0 | 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 54 68 72 | rface..This.command.disables.Thr |
106200 | 65 65 2d 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 66 6f 72 20 50 32 50 20 61 64 6a 61 63 65 6e | ee-Way.Handshake.for.P2P.adjacen |
106220 | 63 69 65 73 20 77 68 69 63 68 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 33 | cies.which.described.in.:rfc:`53 |
106240 | 30 33 60 2e 20 54 68 72 65 65 2d 57 61 79 20 48 61 6e 64 73 68 61 6b 65 20 69 73 20 65 6e 61 62 | 03`..Three-Way.Handshake.is.enab |
106260 | 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 | led.by.default..This.command.dis |
106280 | 61 62 6c 65 73 20 63 68 65 63 6b 20 6f 66 20 74 68 65 20 4d 54 55 20 76 61 6c 75 65 20 69 6e 20 | ables.check.of.the.MTU.value.in. |
1062a0 | 74 68 65 20 4f 53 50 46 20 44 42 44 20 70 61 63 6b 65 74 73 2e 20 54 68 75 73 2c 20 75 73 65 20 | the.OSPF.DBD.packets..Thus,.use. |
1062c0 | 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 6c 6f 77 73 20 74 68 65 20 4f 53 50 46 20 | of.this.command.allows.the.OSPF. |
1062e0 | 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 72 65 61 63 68 20 74 68 65 20 46 55 4c 4c 20 73 74 61 74 | adjacency.to.reach.the.FULL.stat |
106300 | 65 20 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 65 72 65 20 69 73 20 61 6e 20 69 6e 74 65 72 66 | e.even.though.there.is.an.interf |
106320 | 61 63 65 20 4d 54 55 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 77 6f 20 4f 53 50 | ace.MTU.mismatch.between.two.OSP |
106340 | 46 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 | F.routers..This.command.disables |
106360 | 20 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 72 6f 75 74 65 | .it..This.command.disables.route |
106380 | 20 72 65 66 6c 65 63 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 20 72 65 66 6c 65 63 | .reflection.between.route.reflec |
1063a0 | 74 6f 72 20 63 6c 69 65 6e 74 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 65 20 63 6c 69 | tor.clients..By.default,.the.cli |
1063c0 | 65 6e 74 73 20 6f 66 20 61 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 61 72 65 20 6e 6f | ents.of.a.route.reflector.are.no |
1063e0 | 74 20 72 65 71 75 69 72 65 64 20 74 6f 20 62 65 20 66 75 6c 6c 79 20 6d 65 73 68 65 64 20 61 6e | t.required.to.be.fully.meshed.an |
106400 | 64 20 74 68 65 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 61 20 63 6c 69 65 6e 74 20 61 72 65 20 72 | d.the.routes.from.a.client.are.r |
106420 | 65 66 6c 65 63 74 65 64 20 74 6f 20 6f 74 68 65 72 20 63 6c 69 65 6e 74 73 2e 20 48 6f 77 65 76 | eflected.to.other.clients..Howev |
106440 | 65 72 2c 20 69 66 20 74 68 65 20 63 6c 69 65 6e 74 73 20 61 72 65 20 66 75 6c 6c 79 20 6d 65 73 | er,.if.the.clients.are.fully.mes |
106460 | 68 65 64 2c 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 72 65 71 | hed,.route.reflection.is.not.req |
106480 | 75 69 72 65 64 2e 20 49 6e 20 74 68 69 73 20 63 61 73 65 2c 20 75 73 65 20 74 68 65 20 3a 63 66 | uired..In.this.case,.use.the.:cf |
1064a0 | 67 63 6d 64 3a 60 6e 6f 2d 63 6c 69 65 6e 74 2d 74 6f 2d 63 6c 69 65 6e 74 2d 72 65 66 6c 65 63 | gcmd:`no-client-to-client-reflec |
1064c0 | 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 63 6c 69 65 6e 74 2d | tion`.command.to.disable.client- |
1064e0 | 74 6f 2d 63 6c 69 65 6e 74 20 72 65 66 6c 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | to-client.reflection..This.comma |
106500 | 6e 64 20 64 69 73 61 62 6c 65 73 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 | nd.disables.split-horizon.on.the |
106520 | 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 56 79 4f 53 20 64 6f 65 | .interface..By.default,.VyOS.doe |
106540 | 73 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 52 49 50 20 72 6f 75 74 65 73 20 6f 75 74 20 74 | s.not.advertise.RIP.routes.out.t |
106560 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 76 65 72 20 77 68 69 63 68 20 74 68 65 79 20 77 65 72 | he.interface.over.which.they.wer |
106580 | 65 20 6c 65 61 72 6e 65 64 20 28 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 29 2e 33 00 54 68 69 73 | e.learned.(split.horizon).3.This |
1065a0 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 61 62 6c 65 73 20 74 68 65 20 6c 6f 61 64 20 73 68 61 72 69 | .command.disables.the.load.shari |
1065c0 | 6e 67 20 61 63 72 6f 73 73 20 6d 75 6c 74 69 70 6c 65 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 | ng.across.multiple.LFA.backups.. |
1065e0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 64 61 6d 70 65 6e | This.command.displays.BGP.dampen |
106600 | 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 | ed.routes..This.command.displays |
106620 | 20 42 47 50 20 72 65 63 65 69 76 65 64 2d 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 61 63 | .BGP.received-routes.that.are.ac |
106640 | 63 65 70 74 65 64 20 61 66 74 65 72 20 66 69 6c 74 65 72 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d | cepted.after.filtering..This.com |
106660 | 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 | mand.displays.BGP.routes.adverti |
106680 | 73 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | sed.to.a.neighbor..This.command. |
1066a0 | 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 65 73 20 61 6c 6c 6f 77 65 64 20 62 79 20 74 | displays.BGP.routes.allowed.by.t |
1066c0 | 68 65 20 73 70 65 63 69 66 69 65 64 20 41 53 20 50 61 74 68 20 61 63 63 65 73 73 20 6c 69 73 74 | he.specified.AS.Path.access.list |
1066e0 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 42 47 50 20 72 6f 75 74 | ..This.command.displays.BGP.rout |
106700 | 65 73 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 66 72 6f 6d 20 74 68 65 20 73 70 65 63 69 66 69 65 | es.originating.from.the.specifie |
106720 | 64 20 42 47 50 20 6e 65 69 67 68 62 6f 72 20 62 65 66 6f 72 65 20 69 6e 62 6f 75 6e 64 20 70 6f | d.BGP.neighbor.before.inbound.po |
106740 | 6c 69 63 79 20 69 73 20 61 70 70 6c 69 65 64 2e 20 54 6f 20 75 73 65 20 74 68 69 73 20 63 6f 6d | licy.is.applied..To.use.this.com |
106760 | 6d 61 6e 64 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f | mand.inbound.soft.reconfiguratio |
106780 | 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | n.must.be.enabled..This.command. |
1067a0 | 64 69 73 70 6c 61 79 73 20 4c 53 41 73 20 69 6e 20 4d 61 78 41 67 65 20 6c 69 73 74 2e 00 54 68 | displays.LSAs.in.MaxAge.list..Th |
1067c0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 52 49 50 20 72 6f 75 74 65 73 2e 00 | is.command.displays.RIP.routes.. |
1067e0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 64 61 74 61 62 61 73 65 | This.command.displays.a.database |
106800 | 20 63 6f 6e 74 65 6e 74 73 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6c 69 6e 6b 20 61 64 | .contents.for.a.specific.link.ad |
106820 | 76 65 72 74 69 73 65 6d 65 6e 74 20 74 79 70 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | vertisement.type..This.command.d |
106840 | 69 73 70 6c 61 79 73 20 61 20 73 75 6d 6d 61 72 79 20 74 61 62 6c 65 20 77 69 74 68 20 61 20 64 | isplays.a.summary.table.with.a.d |
106860 | 61 74 61 62 61 73 65 20 63 6f 6e 74 65 6e 74 73 20 28 4c 53 41 29 2e 00 54 68 69 73 20 63 6f 6d | atabase.contents.(LSA)..This.com |
106880 | 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 20 74 61 62 6c 65 20 6f 66 20 70 61 74 68 73 20 74 | mand.displays.a.table.of.paths.t |
1068a0 | 6f 20 61 72 65 61 20 62 6f 75 6e 64 61 72 79 20 61 6e 64 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 | o.area.boundary.and.autonomous.s |
1068c0 | 79 73 74 65 6d 20 62 6f 75 6e 64 61 72 79 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d | ystem.boundary.routers..This.com |
1068e0 | 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 61 6c 6c 20 65 6e 74 72 69 65 73 20 69 6e 20 42 47 50 | mand.displays.all.entries.in.BGP |
106900 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 | .routing.table..This.command.dis |
106920 | 70 6c 61 79 73 20 64 61 6d 70 65 6e 65 64 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 | plays.dampened.routes.received.f |
106940 | 72 6f 6d 20 42 47 50 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 | rom.BGP.neighbor..This.command.d |
106960 | 69 73 70 6c 61 79 73 20 65 78 74 65 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 64 | isplays.external.information.red |
106980 | 69 73 74 72 69 62 75 74 65 64 20 69 6e 74 6f 20 4f 53 50 46 76 33 00 54 68 69 73 20 63 6f 6d 6d | istributed.into.OSPFv3.This.comm |
1069a0 | 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 42 | and.displays.information.about.B |
1069c0 | 47 50 20 72 6f 75 74 65 73 20 77 68 6f 73 65 20 41 53 20 70 61 74 68 20 6d 61 74 63 68 65 73 20 | GP.routes.whose.AS.path.matches. |
1069e0 | 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e | the.specified.regular.expression |
106a00 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 | ..This.command.displays.informat |
106a20 | 69 6f 6e 20 61 62 6f 75 74 20 66 6c 61 70 70 69 6e 67 20 42 47 50 20 72 6f 75 74 65 73 2e 00 54 | ion.about.flapping.BGP.routes..T |
106a40 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | his.command.displays.information |
106a60 | 20 61 62 6f 75 74 20 74 68 65 20 70 61 72 74 69 63 75 6c 61 72 20 65 6e 74 72 79 20 69 6e 20 74 | .about.the.particular.entry.in.t |
106a80 | 68 65 20 42 47 50 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | he.BGP.routing.table..This.comma |
106aa0 | 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 70 65 72 6d | nd.displays.routes.that.are.perm |
106ac0 | 69 74 74 65 64 20 62 79 20 74 68 65 20 42 47 50 20 63 6f 6d 6d 75 6e 69 74 79 20 6c 69 73 74 2e | itted.by.the.BGP.community.list. |
106ae0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 72 6f 75 74 65 73 20 74 68 | .This.command.displays.routes.th |
106b00 | 61 74 20 62 65 6c 6f 6e 67 20 74 6f 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 63 6f 6d 6d 75 | at.belong.to.specified.BGP.commu |
106b20 | 6e 69 74 69 65 73 2e 20 56 61 6c 69 64 20 76 61 6c 75 65 20 69 73 20 61 20 63 6f 6d 6d 75 6e 69 | nities..Valid.value.is.a.communi |
106b40 | 74 79 20 6e 75 6d 62 65 72 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f | ty.number.in.the.range.from.1.to |
106b60 | 20 34 32 39 34 39 36 37 32 30 30 2c 20 6f 72 20 41 41 3a 4e 4e 20 28 61 75 74 6f 6e 6f 6d 6f 75 | .4294967200,.or.AA:NN.(autonomou |
106b80 | 73 20 73 79 73 74 65 6d 2d 63 6f 6d 6d 75 6e 69 74 79 20 6e 75 6d 62 65 72 2f 32 2d 62 79 74 65 | s.system-community.number/2-byte |
106ba0 | 20 6e 75 6d 62 65 72 29 2c 20 6e 6f 2d 65 78 70 6f 72 74 2c 20 6c 6f 63 61 6c 2d 61 73 2c 20 6f | .number),.no-export,.local-as,.o |
106bc0 | 72 20 6e 6f 2d 61 64 76 65 72 74 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 | r.no-advertise..This.command.dis |
106be0 | 70 6c 61 79 73 20 72 6f 75 74 65 73 20 77 69 74 68 20 63 6c 61 73 73 6c 65 73 73 20 69 6e 74 65 | plays.routes.with.classless.inte |
106c00 | 72 64 6f 6d 61 69 6e 20 72 6f 75 74 69 6e 67 20 28 43 49 44 52 29 2e 00 54 68 69 73 20 63 6f 6d | rdomain.routing.(CIDR)..This.com |
106c20 | 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 73 74 61 74 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 | mand.displays.state.and.configur |
106c40 | 61 74 69 6f 6e 20 6f 66 20 4f 53 50 46 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 | ation.of.OSPF.the.specified.inte |
106c60 | 72 66 61 63 65 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 | rface,.or.all.interfaces.if.no.i |
106c80 | 6e 74 65 72 66 61 63 65 20 69 73 20 67 69 76 65 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | nterface.is.given..This.command. |
106ca0 | 64 69 73 70 6c 61 79 73 20 73 74 61 74 65 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | displays.state.and.configuration |
106cc0 | 20 6f 66 20 4f 53 50 46 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 | .of.OSPF.the.specified.interface |
106ce0 | 2c 20 6f 72 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 69 66 20 6e 6f 20 69 6e 74 65 72 66 | ,.or.all.interfaces.if.no.interf |
106d00 | 61 63 65 20 69 73 20 67 69 76 65 6e 2e 20 57 68 69 74 68 20 74 68 65 20 61 72 67 75 6d 65 6e 74 | ace.is.given..Whith.the.argument |
106d20 | 20 3a 63 66 67 63 6d 64 3a 60 70 72 65 66 69 78 60 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | .:cfgcmd:`prefix`.this.command.s |
106d40 | 68 6f 77 73 20 63 6f 6e 6e 65 63 74 65 64 20 70 72 65 66 69 78 65 73 20 74 6f 20 61 64 76 65 72 | hows.connected.prefixes.to.adver |
106d60 | 74 69 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 | tise..This.command.displays.the. |
106d80 | 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 | OSPF.routing.table,.as.determine |
106da0 | 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 | d.by.the.most.recent.SPF.calcula |
106dc0 | 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 | tion..This.command.displays.the. |
106de0 | 4f 53 50 46 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2c 20 61 73 20 64 65 74 65 72 6d 69 6e 65 | OSPF.routing.table,.as.determine |
106e00 | 64 20 62 79 20 74 68 65 20 6d 6f 73 74 20 72 65 63 65 6e 74 20 53 50 46 20 63 61 6c 63 75 6c 61 | d.by.the.most.recent.SPF.calcula |
106e20 | 74 69 6f 6e 2e 20 57 69 74 68 20 74 68 65 20 6f 70 74 69 6f 6e 61 6c 20 3a 63 66 67 63 6d 64 3a | tion..With.the.optional.:cfgcmd: |
106e40 | 60 64 65 74 61 69 6c 60 20 61 72 67 75 6d 65 6e 74 2c 20 65 61 63 68 20 72 6f 75 74 65 20 69 74 | `detail`.argument,.each.route.it |
106e60 | 65 6d 27 73 20 61 64 76 65 72 74 69 73 65 72 20 72 6f 75 74 65 72 20 61 6e 64 20 6e 65 74 77 6f | em's.advertiser.router.and.netwo |
106e80 | 72 6b 20 61 74 74 72 69 62 75 74 65 20 77 69 6c 6c 20 62 65 20 73 68 6f 77 6e 2e 00 54 68 69 73 | rk.attribute.will.be.shown..This |
106ea0 | 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 44 | .command.displays.the.neighbor.D |
106ec0 | 52 20 63 68 6f 69 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | R.choice.information..This.comma |
106ee0 | 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d | nd.displays.the.neighbors.inform |
106f00 | 61 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 69 6c 65 64 20 66 6f 72 6d 20 66 6f 72 20 61 20 6e | ation.in.a.detailed.form.for.a.n |
106f20 | 65 69 67 68 62 6f 72 20 77 68 6f 73 65 20 49 50 20 61 64 64 72 65 73 73 20 69 73 20 73 70 65 63 | eighbor.whose.IP.address.is.spec |
106f40 | 69 66 69 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 | ified..This.command.displays.the |
106f60 | 20 6e 65 69 67 68 62 6f 72 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 61 20 64 65 74 61 | .neighbors.information.in.a.deta |
106f80 | 69 6c 65 64 20 66 6f 72 6d 2c 20 6e 6f 74 20 6a 75 73 74 20 61 20 73 75 6d 6d 61 72 79 20 74 61 | iled.form,.not.just.a.summary.ta |
106fa0 | 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e | ble..This.command.displays.the.n |
106fc0 | 65 69 67 68 62 6f 72 73 20 73 74 61 74 75 73 20 66 6f 72 20 61 20 6e 65 69 67 68 62 6f 72 20 6f | eighbors.status.for.a.neighbor.o |
106fe0 | 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 | n.the.specified.interface..This. |
107000 | 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 20 6e 65 69 67 68 62 6f 72 73 20 73 | command.displays.the.neighbors.s |
107020 | 74 61 74 75 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 69 73 70 6c 61 79 73 20 74 68 65 | tatus..This.command.displays.the |
107040 | 20 73 74 61 74 75 73 20 6f 66 20 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 | .status.of.all.BGP.connections.. |
107060 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 20 6c 6f 67 67 69 6e 67 20 6e 65 69 67 | This.command.enable.logging.neig |
107080 | 68 62 6f 72 20 75 70 2f 64 6f 77 6e 20 63 68 61 6e 67 65 73 20 61 6e 64 20 72 65 73 65 74 20 72 | hbor.up/down.changes.and.reset.r |
1070a0 | 65 61 73 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 | eason..This.command.enable/disab |
1070c0 | 6c 65 73 20 73 75 6d 6d 61 72 69 73 61 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 6f 6e 66 69 67 | les.summarisation.for.the.config |
1070e0 | 75 72 65 64 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | ured.address.range..This.command |
107100 | 20 65 6e 61 62 6c 65 73 20 3a 61 62 62 72 3a 60 42 46 44 20 28 42 69 64 69 72 65 63 74 69 6f 6e | .enables.:abbr:`BFD.(Bidirection |
107120 | 61 6c 20 46 6f 72 77 61 72 64 69 6e 67 20 44 65 74 65 63 74 69 6f 6e 29 60 20 6f 6e 20 74 68 69 | al.Forwarding.Detection)`.on.thi |
107140 | 73 20 4f 53 50 46 20 6c 69 6e 6b 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d | s.OSPF.link.interface..This.comm |
107160 | 61 6e 64 20 65 6e 61 62 6c 65 73 20 3a 72 66 63 3a 60 36 32 33 32 60 20 70 75 72 67 65 20 6f 72 | and.enables.:rfc:`6232`.purge.or |
107180 | 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 2e 20 45 6e 61 62 6c 65 20 | iginator.identification..Enable. |
1071a0 | 70 75 72 67 65 20 6f 72 69 67 69 6e 61 74 6f 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 | purge.originator.identification. |
1071c0 | 28 50 4f 49 29 20 62 79 20 61 64 64 69 6e 67 20 74 68 65 20 74 79 70 65 2c 20 6c 65 6e 67 74 68 | (POI).by.adding.the.type,.length |
1071e0 | 20 61 6e 64 20 76 61 6c 75 65 20 28 54 4c 56 29 20 77 69 74 68 20 74 68 65 20 49 6e 74 65 72 6d | .and.value.(TLV).with.the.Interm |
107200 | 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 29 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f | ediate.System.(IS).identificatio |
107220 | 6e 20 74 6f 20 74 68 65 20 4c 53 50 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 63 6f 6e 74 61 69 | n.to.the.LSPs.that.do.not.contai |
107240 | 6e 20 50 4f 49 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 49 66 20 61 6e 20 49 53 20 67 65 6e 65 | n.POI.information..If.an.IS.gene |
107260 | 72 61 74 65 73 20 61 20 70 75 72 67 65 2c 20 56 79 4f 53 20 61 64 64 73 20 74 68 69 73 20 54 4c | rates.a.purge,.VyOS.adds.this.TL |
107280 | 56 20 77 69 74 68 20 74 68 65 20 73 79 73 74 65 6d 20 49 44 20 6f 66 20 74 68 65 20 49 53 20 74 | V.with.the.system.ID.of.the.IS.t |
1072a0 | 6f 20 74 68 65 20 70 75 72 67 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 | o.the.purge..This.command.enable |
1072c0 | 73 20 49 50 20 66 61 73 74 20 72 65 2d 72 6f 75 74 69 6e 67 20 74 68 61 74 20 69 73 20 70 61 72 | s.IP.fast.re-routing.that.is.par |
1072e0 | 74 20 6f 66 20 3a 72 66 63 3a 60 35 32 38 36 60 2e 20 53 70 65 63 69 66 69 63 61 6c 6c 79 20 74 | t.of.:rfc:`5286`..Specifically.t |
107300 | 68 69 73 20 69 73 20 61 20 70 72 65 66 69 78 20 6c 69 73 74 20 77 68 69 63 68 20 72 65 66 65 72 | his.is.a.prefix.list.which.refer |
107320 | 65 6e 63 65 73 20 61 20 70 72 65 66 69 78 20 69 6e 20 77 68 69 63 68 20 77 69 6c 6c 20 73 65 6c | ences.a.prefix.in.which.will.sel |
107340 | 65 63 74 20 65 6c 69 67 69 62 6c 65 20 50 51 20 6e 6f 64 65 73 20 66 6f 72 20 72 65 6d 6f 74 65 | ect.eligible.PQ.nodes.for.remote |
107360 | 20 4c 46 41 20 62 61 63 6b 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c | .LFA.backups..This.command.enabl |
107380 | 65 73 20 49 53 2d 49 53 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6e 64 20 | es.IS-IS.on.this.interface,.and. |
1073a0 | 61 6c 6c 6f 77 73 20 66 6f 72 20 61 64 6a 61 63 65 6e 63 79 20 74 6f 20 6f 63 63 75 72 2e 20 4e | allows.for.adjacency.to.occur..N |
1073c0 | 6f 74 65 20 74 68 61 74 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 49 53 2d 49 53 20 69 6e 73 74 61 | ote.that.the.name.of.IS-IS.insta |
1073e0 | 6e 63 65 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 61 73 20 74 68 65 20 6f 6e 65 20 | nce.must.be.the.same.as.the.one. |
107400 | 75 73 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 53 2d 49 53 20 70 72 6f 63 | used.to.configure.the.IS-IS.proc |
107420 | 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 52 49 50 20 61 6e | ess..This.command.enables.RIP.an |
107440 | 64 20 73 65 74 73 20 74 68 65 20 52 49 50 20 65 6e 61 62 6c 65 20 69 6e 74 65 72 66 61 63 65 20 | d.sets.the.RIP.enable.interface. |
107460 | 62 79 20 4e 45 54 57 4f 52 4b 2e 20 54 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 | by.NETWORK..The.interfaces.which |
107480 | 20 68 61 76 65 20 61 64 64 72 65 73 73 65 73 20 6d 61 74 63 68 69 6e 67 20 77 69 74 68 20 4e 45 | .have.addresses.matching.with.NE |
1074a0 | 54 57 4f 52 4b 20 61 72 65 20 65 6e 61 62 6c 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | TWORK.are.enabled..This.command. |
1074c0 | 65 6e 61 62 6c 65 73 20 70 6f 69 73 6f 6e 2d 72 65 76 65 72 73 65 20 6f 6e 20 74 68 65 20 69 6e | enables.poison-reverse.on.the.in |
1074e0 | 74 65 72 66 61 63 65 2e 20 49 66 20 62 6f 74 68 20 70 6f 69 73 6f 6e 20 72 65 76 65 72 73 65 20 | terface..If.both.poison.reverse. |
107500 | 61 6e 64 20 73 70 6c 69 74 20 68 6f 72 69 7a 6f 6e 20 61 72 65 20 65 6e 61 62 6c 65 64 2c 20 74 | and.split.horizon.are.enabled,.t |
107520 | 68 65 6e 20 56 79 4f 53 20 61 64 76 65 72 74 69 73 65 73 20 74 68 65 20 6c 65 61 72 6e 65 64 20 | hen.VyOS.advertises.the.learned. |
107540 | 72 6f 75 74 65 73 20 61 73 20 75 6e 72 65 61 63 68 61 62 6c 65 20 6f 76 65 72 20 74 68 65 20 69 | routes.as.unreachable.over.the.i |
107560 | 6e 74 65 72 66 61 63 65 20 6f 6e 20 77 68 69 63 68 20 74 68 65 20 72 6f 75 74 65 20 77 61 73 20 | nterface.on.which.the.route.was. |
107580 | 6c 65 61 72 6e 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 72 6f | learned..This.command.enables.ro |
1075a0 | 75 74 69 6e 67 20 75 73 69 6e 67 20 72 61 64 69 6f 20 66 72 65 71 75 65 6e 63 79 20 64 69 76 65 | uting.using.radio.frequency.dive |
1075c0 | 72 73 69 74 79 2e 20 54 68 69 73 20 69 73 20 68 69 67 68 6c 79 20 72 65 63 6f 6d 6d 65 6e 64 65 | rsity..This.is.highly.recommende |
1075e0 | 64 20 69 6e 20 6e 65 74 77 6f 72 6b 73 20 77 69 74 68 20 6d 61 6e 79 20 77 69 72 65 6c 65 73 73 | d.in.networks.with.many.wireless |
107600 | 20 6e 6f 64 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 73 65 6e | .nodes..This.command.enables.sen |
107620 | 64 69 6e 67 20 74 69 6d 65 73 74 61 6d 70 73 20 77 69 74 68 20 65 61 63 68 20 48 65 6c 6c 6f 20 | ding.timestamps.with.each.Hello. |
107640 | 61 6e 64 20 49 48 55 20 6d 65 73 73 61 67 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6d 70 | and.IHU.message.in.order.to.comp |
107660 | 75 74 65 20 52 54 54 20 76 61 6c 75 65 73 2e 20 49 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 | ute.RTT.values..It.is.recommende |
107680 | 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 69 6d 65 73 74 61 6d 70 73 20 6f 6e 20 74 75 6e 6e 65 6c | d.to.enable.timestamps.on.tunnel |
1076a0 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 | .interfaces..This.command.enable |
1076c0 | 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 6d 65 20 54 | s.support.for.dynamic.hostname.T |
1076e0 | 4c 56 2e 20 44 79 6e 61 6d 69 63 20 68 6f 73 74 6e 61 6d 65 20 6d 61 70 70 69 6e 67 20 64 65 74 | LV..Dynamic.hostname.mapping.det |
107700 | 65 72 6d 69 6e 65 64 20 61 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 37 | ermined.as.described.in.:rfc:`27 |
107720 | 36 33 60 2c 20 44 79 6e 61 6d 69 63 20 48 6f 73 74 6e 61 6d 65 20 45 78 63 68 61 6e 67 65 20 4d | 63`,.Dynamic.Hostname.Exchange.M |
107740 | 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 49 53 2d 49 53 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | echanism.for.IS-IS..This.command |
107760 | 20 65 6e 61 62 6c 65 73 20 74 68 65 20 4f 52 46 20 63 61 70 61 62 69 6c 69 74 79 20 28 64 65 73 | .enables.the.ORF.capability.(des |
107780 | 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 32 39 31 60 29 20 6f 6e 20 74 68 65 20 6c 6f | cribed.in.:rfc:`5291`).on.the.lo |
1077a0 | 63 61 6c 20 72 6f 75 74 65 72 2c 20 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f 52 46 20 63 61 70 61 | cal.router,.and.enables.ORF.capa |
1077c0 | 62 69 6c 69 74 79 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 74 6f 20 74 68 65 20 73 70 65 63 | bility.advertisement.to.the.spec |
1077e0 | 69 66 69 65 64 20 42 47 50 20 70 65 65 72 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 63 | ified.BGP.peer..The.:cfgcmd:`rec |
107800 | 65 69 76 65 60 20 6b 65 79 77 6f 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 6f 75 74 65 | eive`.keyword.configures.a.route |
107820 | 72 20 74 6f 20 61 64 76 65 72 74 69 73 65 20 4f 52 46 20 72 65 63 65 69 76 65 20 63 61 70 61 62 | r.to.advertise.ORF.receive.capab |
107840 | 69 6c 69 74 69 65 73 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 73 65 6e 64 60 20 6b 65 79 77 | ilities..The.:cfgcmd:`send`.keyw |
107860 | 6f 72 64 20 63 6f 6e 66 69 67 75 72 65 73 20 61 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 | ord.configures.a.router.to.adver |
107880 | 74 69 73 65 20 4f 52 46 20 73 65 6e 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 54 6f 20 61 | tise.ORF.send.capabilities..To.a |
1078a0 | 64 76 65 72 74 69 73 65 20 61 20 66 69 6c 74 65 72 20 66 72 6f 6d 20 61 20 73 65 6e 64 65 72 2c | dvertise.a.filter.from.a.sender, |
1078c0 | 20 79 6f 75 20 6d 75 73 74 20 63 72 65 61 74 65 20 61 6e 20 49 50 20 70 72 65 66 69 78 20 6c 69 | .you.must.create.an.IP.prefix.li |
1078e0 | 73 74 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 42 47 50 20 70 65 65 72 20 61 70 | st.for.the.specified.BGP.peer.ap |
107900 | 70 6c 69 65 64 20 69 6e 20 69 6e 62 6f 75 6e 64 20 64 65 72 65 63 74 69 6f 6e 2e 00 54 68 69 73 | plied.in.inbound.derection..This |
107920 | 20 63 6f 6d 6d 61 6e 64 20 65 6e 66 6f 72 63 65 73 20 47 65 6e 65 72 61 6c 69 7a 65 64 20 54 54 | .command.enforces.Generalized.TT |
107940 | 4c 20 53 65 63 75 72 69 74 79 20 4d 65 63 68 61 6e 69 73 6d 20 28 47 54 53 4d 29 2c 20 61 73 20 | L.Security.Mechanism.(GTSM),.as. |
107960 | 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 30 38 32 60 2e 20 57 69 74 68 20 74 | specified.in.:rfc:`5082`..With.t |
107980 | 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 6f 6e 6c 79 20 6e 65 69 67 68 62 6f 72 73 20 74 68 61 74 | his.command,.only.neighbors.that |
1079a0 | 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 61 77 | .are.specified.number.of.hops.aw |
1079c0 | 61 79 20 77 69 6c 6c 20 62 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 | ay.will.be.allowed.to.become.nei |
1079e0 | 67 68 62 6f 72 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 70 73 20 72 61 6e 67 65 | ghbors..The.number.of.hops.range |
107a00 | 20 69 73 20 31 20 74 6f 20 32 35 34 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6d 75 | .is.1.to.254..This.command.is.mu |
107a20 | 74 75 61 6c 6c 79 20 65 78 63 6c 75 73 69 76 65 20 77 69 74 68 20 3a 63 66 67 63 6d 64 3a 60 65 | tually.exclusive.with.:cfgcmd:`e |
107a40 | 62 67 70 2d 6d 75 6c 74 69 68 6f 70 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 63 | bgp-multihop`..This.command.forc |
107a60 | 65 73 20 73 74 72 69 63 74 6c 79 20 63 6f 6d 70 61 72 65 20 72 65 6d 6f 74 65 20 63 61 70 61 62 | es.strictly.compare.remote.capab |
107a80 | 69 6c 69 74 69 65 73 20 61 6e 64 20 6c 6f 63 61 6c 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 | ilities.and.local.capabilities.. |
107aa0 | 49 66 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 72 65 20 64 69 66 66 65 72 65 6e 74 2c 20 73 | If.capabilities.are.different,.s |
107ac0 | 65 6e 64 20 55 6e 73 75 70 70 6f 72 74 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 65 72 72 6f 72 | end.Unsupported.Capability.error |
107ae0 | 20 74 68 65 6e 20 72 65 73 65 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d | .then.reset.connection..This.com |
107b00 | 6d 61 6e 64 20 66 6f 72 63 65 73 20 74 68 65 20 42 47 50 20 73 70 65 61 6b 65 72 20 74 6f 20 72 | mand.forces.the.BGP.speaker.to.r |
107b20 | 65 70 6f 72 74 20 69 74 73 65 6c 66 20 61 73 20 74 68 65 20 6e 65 78 74 20 68 6f 70 20 66 6f 72 | eport.itself.as.the.next.hop.for |
107b40 | 20 61 6e 20 61 64 76 65 72 74 69 73 65 64 20 72 6f 75 74 65 20 69 74 20 61 64 76 65 72 74 69 73 | .an.advertised.route.it.advertis |
107b60 | 65 64 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 | ed.to.a.neighbor..This.command.g |
107b80 | 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 69 6e 74 6f 20 74 68 65 | enerate.a.default.route.into.the |
107ba0 | 20 52 49 50 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 69 76 65 73 20 61 20 62 72 69 65 66 | .RIP..This.command.gives.a.brief |
107bc0 | 20 73 74 61 74 75 73 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 73 70 65 63 69 66 69 65 64 20 | .status.overview.of.a.specified. |
107be0 | 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 | wireless.interface..The.wireless |
107c00 | 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 | .interface.identifier.can.range. |
107c20 | 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d | from.wlan0.to.wlan999..This.comm |
107c40 | 61 6e 64 20 67 6f 65 73 20 68 61 6e 64 20 69 6e 20 68 61 6e 64 20 77 69 74 68 20 74 68 65 20 6c | and.goes.hand.in.hand.with.the.l |
107c60 | 69 73 74 65 6e 20 72 61 6e 67 65 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 | isten.range.command.to.limit.the |
107c80 | 20 61 6d 6f 75 6e 74 20 6f 66 20 42 47 50 20 6e 65 69 67 68 62 6f 72 73 20 74 68 61 74 20 61 72 | .amount.of.BGP.neighbors.that.ar |
107ca0 | 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 6c 6f 63 61 | e.allowed.to.connect.to.the.loca |
107cc0 | 6c 20 72 6f 75 74 65 72 2e 20 54 68 65 20 6c 69 6d 69 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 | l.router..The.limit.range.is.1.t |
107ce0 | 6f 20 35 30 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 67 6f 74 20 61 64 64 65 64 20 69 | o.5000..This.command.got.added.i |
107d00 | 6e 20 56 79 4f 53 20 31 2e 34 20 61 6e 64 20 69 6e 76 65 72 74 73 20 74 68 65 20 6c 6f 67 69 63 | n.VyOS.1.4.and.inverts.the.logic |
107d20 | 20 66 72 6f 6d 20 74 68 65 20 6f 6c 64 20 60 60 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 60 60 20 | .from.the.old.``default-route``. |
107d40 | 43 4c 49 20 6f 70 74 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 6e 73 74 65 61 64 | CLI.option..This.command.instead |
107d60 | 20 6f 66 20 73 75 6d 6d 61 72 69 7a 69 6e 67 20 69 6e 74 72 61 20 61 72 65 61 20 70 61 74 68 73 | .of.summarizing.intra.area.paths |
107d80 | 20 66 69 6c 74 65 72 20 74 68 65 6d 20 2d 20 69 2e 65 2e 20 69 6e 74 72 61 20 61 72 65 61 20 70 | .filter.them.-.i.e..intra.area.p |
107da0 | 61 74 68 73 20 66 72 6f 6d 20 74 68 69 73 20 72 61 6e 67 65 20 61 72 65 20 6e 6f 74 20 61 64 76 | aths.from.this.range.are.not.adv |
107dc0 | 65 72 74 69 73 65 64 20 69 6e 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 | ertised.into.other.areas..This.c |
107de0 | 6f 6d 6d 61 6e 64 20 6d 61 6b 65 73 20 73 65 6e 73 65 20 69 6e 20 41 42 52 20 6f 6e 6c 79 2e 00 | ommand.makes.sense.in.ABR.only.. |
107e00 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 65 6e 61 | This.command.is.also.used.to.ena |
107e20 | 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 61 72 65 61 20 6e | ble.the.OSPF.process..The.area.n |
107e40 | 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 65 63 69 6d 61 | umber.can.be.specified.in.decima |
107e60 | 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 30 20 74 | l.notation.in.the.range.from.0.t |
107e80 | 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 65 20 73 70 65 63 69 | o.4294967295..Or.it.can.be.speci |
107ea0 | 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 | fied.in.dotted.decimal.notation. |
107ec0 | 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d | similar.to.ip.address..This.comm |
107ee0 | 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 42 47 50 20 70 65 65 | and.is.only.allowed.for.eBGP.pee |
107f00 | 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 6f 6e 6c 79 20 61 6c 6c 6f 77 65 64 | rs..This.command.is.only.allowed |
107f20 | 20 66 6f 72 20 65 42 47 50 20 70 65 65 72 73 2e 20 49 74 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 | .for.eBGP.peers..It.is.not.appli |
107f40 | 63 61 62 6c 65 20 66 6f 72 20 70 65 65 72 20 67 72 6f 75 70 73 2e 00 54 68 69 73 20 63 6f 6d 6d | cable.for.peer.groups..This.comm |
107f60 | 61 6e 64 20 69 73 20 6f 6e 6c 79 20 75 73 65 66 75 6c 20 61 74 20 73 63 61 6c 65 20 77 68 65 6e | and.is.only.useful.at.scale.when |
107f80 | 20 79 6f 75 20 63 61 6e 20 70 6f 73 73 69 62 6c 79 20 68 61 76 65 20 61 20 6c 61 72 67 65 20 6e | .you.can.possibly.have.a.large.n |
107fa0 | 75 6d 62 65 72 20 6f 66 20 50 49 4d 20 63 6f 6e 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 66 6c 6f | umber.of.PIM.control.packets.flo |
107fc0 | 77 69 6e 67 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 73 70 65 63 69 66 69 63 20 74 | wing..This.command.is.specific.t |
107fe0 | 6f 20 46 52 52 20 61 6e 64 20 56 79 4f 53 2e 20 54 68 65 20 72 6f 75 74 65 20 63 6f 6d 6d 61 6e | o.FRR.and.VyOS..The.route.comman |
108000 | 64 20 6d 61 6b 65 73 20 61 20 73 74 61 74 69 63 20 72 6f 75 74 65 20 6f 6e 6c 79 20 69 6e 73 69 | d.makes.a.static.route.only.insi |
108020 | 64 65 20 52 49 50 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 75 6c 64 20 62 65 20 75 | de.RIP..This.command.should.be.u |
108040 | 73 65 64 20 6f 6e 6c 79 20 62 79 20 61 64 76 61 6e 63 65 64 20 75 73 65 72 73 20 77 68 6f 20 61 | sed.only.by.advanced.users.who.a |
108060 | 72 65 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 6b 6e 6f 77 6c 65 64 67 65 61 62 6c 65 20 61 62 | re.particularly.knowledgeable.ab |
108080 | 6f 75 74 20 74 68 65 20 52 49 50 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 6e 20 6d 6f 73 74 20 63 61 | out.the.RIP.protocol..In.most.ca |
1080a0 | 73 65 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 63 72 65 61 74 69 6e 67 20 61 20 73 74 61 | ses,.we.recommend.creating.a.sta |
1080c0 | 74 69 63 20 72 6f 75 74 65 20 69 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 | tic.route.in.VyOS.and.redistribu |
1080e0 | 74 69 6e 67 20 69 74 20 69 6e 20 52 49 50 20 75 73 69 6e 67 20 3a 63 66 67 63 6d 64 3a 60 72 65 | ting.it.in.RIP.using.:cfgcmd:`re |
108100 | 64 69 73 74 72 69 62 75 74 65 20 73 74 61 74 69 63 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | distribute.static`..This.command |
108120 | 20 69 73 20 75 73 65 64 20 66 6f 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 49 50 76 34 20 6f 72 | .is.used.for.advertising.IPv4.or |
108140 | 20 49 50 76 36 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 | .IPv6.networks..This.command.is. |
108160 | 75 73 65 64 20 74 6f 20 72 65 74 72 69 65 76 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f | used.to.retrieve.information.abo |
108180 | 75 74 20 57 41 50 20 77 69 74 68 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f 66 20 79 6f 75 72 20 | ut.WAP.within.the.range.of.your. |
1081a0 | 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | wireless.interface..This.command |
1081c0 | 20 69 73 20 75 73 65 66 75 6c 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 | .is.useful.on.wireless.interface |
1081e0 | 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 73 74 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 68 | s.configured.in.station.mode..Th |
108200 | 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 66 75 6c 20 69 66 20 6f 6e 65 20 64 65 73 69 | is.command.is.useful.if.one.desi |
108220 | 72 65 73 20 74 6f 20 6c 6f 6f 73 65 6e 20 74 68 65 20 72 65 71 75 69 72 65 6d 65 6e 74 20 66 6f | res.to.loosen.the.requirement.fo |
108240 | 72 20 42 47 50 20 74 6f 20 68 61 76 65 20 73 74 72 69 63 74 6c 79 20 64 65 66 69 6e 65 64 20 6e | r.BGP.to.have.strictly.defined.n |
108260 | 65 69 67 68 62 6f 72 73 2e 20 53 70 65 63 69 66 69 63 61 6c 6c 79 20 77 68 61 74 20 69 73 20 61 | eighbors..Specifically.what.is.a |
108280 | 6c 6c 6f 77 65 64 20 69 73 20 66 6f 72 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 | llowed.is.for.the.local.router.t |
1082a0 | 6f 20 6c 69 73 74 65 6e 20 74 6f 20 61 20 72 61 6e 67 65 20 6f 66 20 49 50 76 34 20 6f 72 20 49 | o.listen.to.a.range.of.IPv4.or.I |
1082c0 | 50 76 36 20 61 64 64 72 65 73 73 65 73 20 64 65 66 69 6e 65 64 20 62 79 20 61 20 70 72 65 66 69 | Pv6.addresses.defined.by.a.prefi |
1082e0 | 78 20 61 6e 64 20 74 6f 20 61 63 63 65 70 74 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 | x.and.to.accept.BGP.open.message |
108300 | 73 2e 20 57 68 65 6e 20 61 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 6e 64 20 73 75 | s..When.a.TCP.connection.(and.su |
108320 | 62 73 65 71 75 65 6e 74 6c 79 20 61 20 42 47 50 20 6f 70 65 6e 20 6d 65 73 73 61 67 65 29 20 66 | bsequently.a.BGP.open.message).f |
108340 | 72 6f 6d 20 77 69 74 68 69 6e 20 74 68 69 73 20 72 61 6e 67 65 20 74 72 69 65 73 20 74 6f 20 63 | rom.within.this.range.tries.to.c |
108360 | 6f 6e 6e 65 63 74 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 68 65 6e 20 74 68 65 | onnect.the.local.router.then.the |
108380 | 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 72 65 73 70 6f 6e 64 20 61 6e 64 20 63 | .local.router.will.respond.and.c |
1083a0 | 6f 6e 6e 65 63 74 20 77 69 74 68 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 73 20 74 68 61 74 20 | onnect.with.the.parameters.that. |
1083c0 | 61 72 65 20 64 65 66 69 6e 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 70 65 65 72 20 67 72 6f 75 | are.defined.within.the.peer.grou |
1083e0 | 70 2e 20 4f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 61 20 70 65 65 72 2d 67 72 6f 75 70 20 | p..One.must.define.a.peer-group. |
108400 | 66 6f 72 20 65 61 63 68 20 72 61 6e 67 65 20 74 68 61 74 20 69 73 20 6c 69 73 74 65 64 2e 20 49 | for.each.range.that.is.listed..I |
108420 | 66 20 6e 6f 20 70 65 65 72 2d 67 72 6f 75 70 20 69 73 20 64 65 66 69 6e 65 64 20 74 68 65 6e 20 | f.no.peer-group.is.defined.then. |
108440 | 61 6e 20 65 72 72 6f 72 20 77 69 6c 6c 20 6b 65 65 70 20 79 6f 75 20 66 72 6f 6d 20 63 6f 6d 6d | an.error.will.keep.you.from.comm |
108460 | 69 74 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 63 | itting.the.configuration..This.c |
108480 | 6f 6d 6d 61 6e 64 20 6d 6f 64 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 | ommand.modifies.the.default.metr |
1084a0 | 69 63 20 28 68 6f 70 20 63 6f 75 6e 74 29 20 76 61 6c 75 65 20 66 6f 72 20 72 65 64 69 73 74 72 | ic.(hop.count).value.for.redistr |
1084c0 | 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 | ibuted.routes..The.metric.range. |
1084e0 | 69 73 20 31 20 74 6f 20 31 36 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 | is.1.to.16..The.default.value.is |
108500 | 20 31 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 61 66 66 65 63 74 | .1..This.command.does.not.affect |
108520 | 20 63 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 20 65 76 65 6e 20 69 66 20 69 74 20 69 73 20 72 | .connected.route.even.if.it.is.r |
108540 | 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 | edistributed.by.:cfgcmd:`redistr |
108560 | 69 62 75 74 65 20 63 6f 6e 6e 65 63 74 65 64 60 2e 20 54 6f 20 6d 6f 64 69 66 79 20 63 6f 6e 6e | ibute.connected`..To.modify.conn |
108580 | 65 63 74 65 64 20 72 6f 75 74 65 73 20 6d 65 74 72 69 63 20 76 61 6c 75 65 2c 20 70 6c 65 61 73 | ected.routes.metric.value,.pleas |
1085a0 | 65 20 75 73 65 20 3a 63 66 67 63 6d 64 3a 60 72 65 64 69 73 74 72 69 62 75 74 65 20 63 6f 6e 6e | e.use.:cfgcmd:`redistribute.conn |
1085c0 | 65 63 74 65 64 20 6d 65 74 72 69 63 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 6f 76 65 72 | ected.metric`..This.command.over |
1085e0 | 72 69 64 65 20 41 53 20 6e 75 6d 62 65 72 20 6f 66 20 74 68 65 20 6f 72 69 67 69 6e 61 74 69 6e | ride.AS.number.of.the.originatin |
108600 | 67 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 6c 6f 63 61 6c 20 41 53 20 6e 75 6d 62 65 | g.router.with.the.local.AS.numbe |
108620 | 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 65 76 65 6e 74 73 20 66 72 6f 6d 20 73 65 | r..This.command.prevents.from.se |
108640 | 6e 64 69 6e 67 20 62 61 63 6b 20 70 72 65 66 69 78 65 73 20 6c 65 61 72 6e 65 64 20 66 72 6f 6d | nding.back.prefixes.learned.from |
108660 | 20 74 68 65 20 6e 65 69 67 68 62 6f 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 70 72 6f 76 | .the.neighbor..This.command.prov |
108680 | 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 72 65 20 64 69 66 66 65 72 65 6e 74 20 4d 45 44 20 76 61 | ides.to.compare.different.MED.va |
1086a0 | 6c 75 65 73 20 74 68 61 74 20 61 64 76 65 72 74 69 73 65 64 20 62 79 20 6e 65 69 67 68 62 6f 75 | lues.that.advertised.by.neighbou |
1086c0 | 72 73 20 69 6e 20 74 68 65 20 73 61 6d 65 20 41 53 20 66 6f 72 20 72 6f 75 74 65 73 20 73 65 6c | rs.in.the.same.AS.for.routes.sel |
1086e0 | 65 63 74 69 6f 6e 2e 20 57 68 65 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 65 6e 61 | ection..When.this.command.is.ena |
108700 | 62 6c 65 64 2c 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 61 75 74 6f 6e | bled,.routes.from.the.same.auton |
108720 | 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 61 72 65 20 67 72 6f 75 70 65 64 20 74 6f 67 65 74 68 65 | omous.system.are.grouped.togethe |
108740 | 72 2c 20 61 6e 64 20 74 68 65 20 62 65 73 74 20 65 6e 74 72 69 65 73 20 6f 66 20 65 61 63 68 20 | r,.and.the.best.entries.of.each. |
108760 | 67 72 6f 75 70 20 61 72 65 20 63 6f 6d 70 61 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | group.are.compared..This.command |
108780 | 20 70 72 6f 76 69 64 65 73 20 74 6f 20 63 6f 6d 70 61 72 65 20 74 68 65 20 4d 45 44 20 6f 6e 20 | .provides.to.compare.the.MED.on. |
1087a0 | 72 6f 75 74 65 73 2c 20 65 76 65 6e 20 77 68 65 6e 20 74 68 65 79 20 77 65 72 65 20 72 65 63 65 | routes,.even.when.they.were.rece |
1087c0 | 69 76 65 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 6e 65 69 67 68 62 6f 75 72 69 6e 67 | ived.from.different.neighbouring |
1087e0 | 20 41 53 65 73 2e 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 6d 61 6b 65 73 | .ASes..Setting.this.option.makes |
108800 | 20 74 68 65 20 6f 72 64 65 72 20 6f 66 20 70 72 65 66 65 72 65 6e 63 65 20 6f 66 20 72 6f 75 74 | .the.order.of.preference.of.rout |
108820 | 65 73 20 6d 6f 72 65 20 64 65 66 69 6e 65 64 2c 20 61 6e 64 20 73 68 6f 75 6c 64 20 65 6c 69 6d | es.more.defined,.and.should.elim |
108840 | 69 6e 61 74 65 20 4d 45 44 20 69 6e 64 75 63 65 64 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 73 2e 00 | inate.MED.induced.oscillations.. |
108860 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 | This.command.redistributes.routi |
108880 | 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f | ng.information.from.the.given.ro |
1088a0 | 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 49 53 49 53 20 64 61 74 61 62 61 73 | ute.source.into.the.ISIS.databas |
1088c0 | 65 20 61 73 20 4c 65 76 65 6c 2d 31 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 | e.as.Level-1..There.are.six.mode |
1088e0 | 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 | s.available.for.route.source:.bg |
108900 | 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c | p,.connected,.kernel,.ospf,.rip, |
108920 | 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 | .static..This.command.redistribu |
108940 | 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 | tes.routing.information.from.the |
108960 | 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 6f 20 74 68 65 20 49 53 49 | .given.route.source.into.the.ISI |
108980 | 53 20 64 61 74 61 62 61 73 65 20 61 73 20 4c 65 76 65 6c 2d 32 2e 20 54 68 65 72 65 20 61 72 65 | S.database.as.Level-2..There.are |
1089a0 | 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 | .six.modes.available.for.route.s |
1089c0 | 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f | ource:.bgp,.connected,.kernel,.o |
1089e0 | 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 | spf,.rip,.static..This.command.r |
108a00 | 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e | edistributes.routing.information |
108a20 | 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 69 6e 74 | .from.the.given.route.source.int |
108a40 | 6f 20 74 68 65 20 52 49 50 20 74 61 62 6c 65 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 | o.the.RIP.tables..There.are.five |
108a60 | 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 | .modes.available.for.route.sourc |
108a80 | 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c | e:.bgp,.connected,.kernel,.ospf, |
108aa0 | 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 | .static..This.command.redistribu |
108ac0 | 74 65 73 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 | tes.routing.information.from.the |
108ae0 | 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 42 47 50 20 70 | .given.route.source.to.the.BGP.p |
108b00 | 72 6f 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 | rocess..There.are.six.modes.avai |
108b20 | 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 | lable.for.route.source:.connecte |
108b40 | 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 | d,.kernel,.ospf,.rip,.static,.ta |
108b60 | 62 6c 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 | ble..This.command.redistributes. |
108b80 | 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 | routing.information.from.the.giv |
108ba0 | 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 42 61 62 65 6c 20 70 72 6f | en.route.source.to.the.Babel.pro |
108bc0 | 63 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 | cess..This.command.redistributes |
108be0 | 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 | .routing.information.from.the.gi |
108c00 | 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 20 70 72 6f | ven.route.source.to.the.OSPF.pro |
108c20 | 63 65 73 73 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c | cess..There.are.five.modes.avail |
108c40 | 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e | able.for.route.source:.bgp,.conn |
108c60 | 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 | ected,.kernel,.rip,.static..This |
108c80 | 20 63 6f 6d 6d 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 73 20 72 6f 75 74 69 6e 67 20 69 | .command.redistributes.routing.i |
108ca0 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 | nformation.from.the.given.route. |
108cc0 | 73 6f 75 72 63 65 20 74 6f 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 | source.to.the.OSPFv3.process..Th |
108ce0 | 65 72 65 20 61 72 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | ere.are.five.modes.available.for |
108d00 | 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b | .route.source:.bgp,.connected,.k |
108d20 | 65 72 6e 65 6c 2c 20 72 69 70 6e 67 2c 20 73 74 61 74 69 63 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | ernel,.ripng,.static..This.comma |
108d40 | 6e 64 20 72 65 6d 6f 76 65 73 20 74 68 65 20 70 72 69 76 61 74 65 20 41 53 4e 20 6f 66 20 72 6f | nd.removes.the.private.ASN.of.ro |
108d60 | 75 74 65 73 20 74 68 61 74 20 61 72 65 20 61 64 76 65 72 74 69 73 65 64 20 74 6f 20 74 68 65 20 | utes.that.are.advertised.to.the. |
108d80 | 63 6f 6e 66 69 67 75 72 65 64 20 70 65 65 72 2e 20 49 74 20 72 65 6d 6f 76 65 73 20 6f 6e 6c 79 | configured.peer..It.removes.only |
108da0 | 20 70 72 69 76 61 74 65 20 41 53 4e 73 20 6f 6e 20 72 6f 75 74 65 73 20 61 64 76 65 72 74 69 73 | .private.ASNs.on.routes.advertis |
108dc0 | 65 64 20 74 6f 20 45 42 47 50 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 | ed.to.EBGP.peers..This.command.r |
108de0 | 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 6f 20 74 68 65 20 73 70 65 | esets.BGP.connections.to.the.spe |
108e00 | 63 69 66 69 65 64 20 6e 65 69 67 68 62 6f 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 57 69 74 68 | cified.neighbor.IP.address..With |
108e20 | 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 68 69 73 20 63 6f | .argument.:cfgcmd:`soft`.this.co |
108e40 | 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 65 74 2e 20 49 66 | mmand.initiates.a.soft.reset..If |
108e60 | 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 66 67 63 6d 64 3a | .you.do.not.specify.the.:cfgcmd: |
108e80 | 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c 20 62 | `in`.or.:cfgcmd:`out`.options,.b |
108ea0 | 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 72 65 | oth.inbound.and.outbound.soft.re |
108ec0 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 64 2e 00 54 68 69 | configuration.are.triggered..Thi |
108ee0 | 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 42 47 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 | s.command.resets.BGP.connections |
108f00 | 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 65 65 72 20 67 72 6f 75 70 2e 20 57 69 | .to.the.specified.peer.group..Wi |
108f20 | 74 68 20 61 72 67 75 6d 65 6e 74 20 3a 63 66 67 63 6d 64 3a 60 73 6f 66 74 60 20 74 68 69 73 20 | th.argument.:cfgcmd:`soft`.this. |
108f40 | 63 6f 6d 6d 61 6e 64 20 69 6e 69 74 69 61 74 65 73 20 61 20 73 6f 66 74 20 72 65 73 65 74 2e 20 | command.initiates.a.soft.reset.. |
108f60 | 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 73 70 65 63 69 66 79 20 74 68 65 20 3a 63 66 67 63 6d | If.you.do.not.specify.the.:cfgcm |
108f80 | 64 3a 60 69 6e 60 20 6f 72 20 3a 63 66 67 63 6d 64 3a 60 6f 75 74 60 20 6f 70 74 69 6f 6e 73 2c | d:`in`.or.:cfgcmd:`out`.options, |
108fa0 | 20 62 6f 74 68 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 73 6f 66 74 20 | .both.inbound.and.outbound.soft. |
108fc0 | 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 72 65 20 74 72 69 67 67 65 72 65 64 2e 00 54 | reconfiguration.are.triggered..T |
108fe0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 72 65 73 65 74 73 20 61 6c 6c 20 42 47 50 20 63 6f 6e 6e 65 | his.command.resets.all.BGP.conne |
109000 | 63 74 69 6f 6e 73 20 6f 66 20 67 69 76 65 6e 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d | ctions.of.given.router..This.com |
109020 | 6d 61 6e 64 20 72 65 73 65 74 73 20 61 6c 6c 20 65 78 74 65 72 6e 61 6c 20 42 47 50 20 70 65 65 | mand.resets.all.external.BGP.pee |
109040 | 72 73 20 6f 66 20 67 69 76 65 6e 20 72 6f 75 74 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | rs.of.given.router..This.command |
109060 | 20 73 65 6c 65 63 74 73 20 41 42 52 20 6d 6f 64 65 6c 2e 20 4f 53 50 46 20 72 6f 75 74 65 72 20 | .selects.ABR.model..OSPF.router. |
109080 | 73 75 70 70 6f 72 74 73 20 66 6f 75 72 20 41 42 52 20 6d 6f 64 65 6c 73 3a 00 54 68 69 73 20 63 | supports.four.ABR.models:.This.c |
1090a0 | 6f 6d 6d 61 6e 64 20 73 65 74 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 66 6f 72 20 63 69 | ommand.set.default.metric.for.ci |
1090c0 | 72 63 75 69 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 20 74 68 65 20 63 68 61 6e | rcuit..This.command.set.the.chan |
1090e0 | 6e 65 6c 20 6e 75 6d 62 65 72 20 74 68 61 74 20 64 69 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e | nel.number.that.diversity.routin |
109100 | 67 20 75 73 65 73 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 28 73 65 65 20 64 | g.uses.for.this.interface.(see.d |
109120 | 69 76 65 72 73 69 74 79 20 6f 70 74 69 6f 6e 20 61 62 6f 76 65 29 2e 00 54 68 69 73 20 63 6f 6d | iversity.option.above)..This.com |
109140 | 6d 61 6e 64 20 73 65 74 73 20 41 54 54 20 62 69 74 20 74 6f 20 31 20 69 6e 20 4c 65 76 65 6c 31 | mand.sets.ATT.bit.to.1.in.Level1 |
109160 | 20 4c 53 50 73 2e 20 49 74 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 | .LSPs..It.is.described.in.:rfc:` |
109180 | 33 37 38 37 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 20 6d 61 78 | 3787`..This.command.sets.LSP.max |
1091a0 | 69 6d 75 6d 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 | imum.LSP.lifetime.in.seconds..Th |
1091c0 | 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 35 30 20 74 6f 20 36 35 35 33 35 | e.interval.range.is.350.to.65535 |
1091e0 | 2e 20 4c 53 50 73 20 72 65 6d 61 69 6e 20 69 6e 20 61 20 64 61 74 61 62 61 73 65 20 66 6f 72 20 | ..LSPs.remain.in.a.database.for. |
109200 | 31 32 30 30 20 73 65 63 6f 6e 64 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 66 20 74 68 65 79 | 1200.seconds.by.default..If.they |
109220 | 20 61 72 65 20 6e 6f 74 20 72 65 66 72 65 73 68 65 64 20 62 79 20 74 68 61 74 20 74 69 6d 65 2c | .are.not.refreshed.by.that.time, |
109240 | 20 74 68 65 79 20 61 72 65 20 64 65 6c 65 74 65 64 2e 20 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 | .they.are.deleted..You.can.chang |
109260 | 65 20 74 68 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 69 6e 74 65 72 76 61 6c 20 6f 72 20 74 68 | e.the.LSP.refresh.interval.or.th |
109280 | 65 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 2e 20 54 68 65 20 4c 53 50 20 72 65 66 72 65 73 68 20 | e.LSP.lifetime..The.LSP.refresh. |
1092a0 | 69 6e 74 65 72 76 61 6c 20 73 68 6f 75 6c 64 20 62 65 20 6c 65 73 73 20 74 68 61 6e 20 74 68 65 | interval.should.be.less.than.the |
1092c0 | 20 4c 53 50 20 6c 69 66 65 74 69 6d 65 20 6f 72 20 65 6c 73 65 20 4c 53 50 73 20 77 69 6c 6c 20 | .LSP.lifetime.or.else.LSPs.will. |
1092e0 | 74 69 6d 65 20 6f 75 74 20 62 65 66 6f 72 65 20 74 68 65 79 20 61 72 65 20 72 65 66 72 65 73 68 | time.out.before.they.are.refresh |
109300 | 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 4c 53 50 20 72 65 66 72 65 73 | ed..This.command.sets.LSP.refres |
109320 | 68 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 49 53 2d 49 53 20 67 65 6e | h.interval.in.seconds..IS-IS.gen |
109340 | 65 72 61 74 65 73 20 4c 53 50 73 20 77 68 65 6e 20 74 68 65 20 73 74 61 74 65 20 6f 66 20 61 20 | erates.LSPs.when.the.state.of.a. |
109360 | 6c 69 6e 6b 20 63 68 61 6e 67 65 73 2e 20 48 6f 77 65 76 65 72 2c 20 74 6f 20 65 6e 73 75 72 65 | link.changes..However,.to.ensure |
109380 | 20 74 68 61 74 20 72 6f 75 74 69 6e 67 20 64 61 74 61 62 61 73 65 73 20 6f 6e 20 61 6c 6c 20 72 | .that.routing.databases.on.all.r |
1093a0 | 6f 75 74 65 72 73 20 72 65 6d 61 69 6e 20 63 6f 6e 76 65 72 67 65 64 2c 20 4c 53 50 73 20 69 6e | outers.remain.converged,.LSPs.in |
1093c0 | 20 73 74 61 62 6c 65 20 6e 65 74 77 6f 72 6b 73 20 61 72 65 20 67 65 6e 65 72 61 74 65 64 20 6f | .stable.networks.are.generated.o |
1093e0 | 6e 20 61 20 72 65 67 75 6c 61 72 20 62 61 73 69 73 20 65 76 65 6e 20 74 68 6f 75 67 68 20 74 68 | n.a.regular.basis.even.though.th |
109400 | 65 72 65 20 68 61 73 20 62 65 65 6e 20 6e 6f 20 63 68 61 6e 67 65 20 74 6f 20 74 68 65 20 73 74 | ere.has.been.no.change.to.the.st |
109420 | 61 74 65 20 6f 66 20 74 68 65 20 6c 69 6e 6b 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 | ate.of.the.links..The.interval.r |
109440 | 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 32 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 | ange.is.1.to.65235..The.default. |
109460 | 76 61 6c 75 65 20 69 73 20 39 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 | value.is.900.seconds..This.comma |
109480 | 6e 64 20 73 65 74 73 20 4f 53 50 46 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 20 | nd.sets.OSPF.authentication.key. |
1094a0 | 74 6f 20 61 20 73 69 6d 70 6c 65 20 70 61 73 73 77 6f 72 64 2e 20 41 66 74 65 72 20 73 65 74 74 | to.a.simple.password..After.sett |
1094c0 | 69 6e 67 2c 20 61 6c 6c 20 4f 53 50 46 20 70 61 63 6b 65 74 73 20 61 72 65 20 61 75 74 68 65 6e | ing,.all.OSPF.packets.are.authen |
1094e0 | 74 69 63 61 74 65 64 2e 20 4b 65 79 20 68 61 73 20 6c 65 6e 67 74 68 20 75 70 20 74 6f 20 38 20 | ticated..Key.has.length.up.to.8. |
109500 | 63 68 61 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 50 53 4e 50 20 69 6e | chars..This.command.sets.PSNP.in |
109520 | 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 | terval.in.seconds..The.interval. |
109540 | 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 37 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | range.is.0.to.127..This.command. |
109560 | 73 65 74 73 20 52 6f 75 74 65 72 20 50 72 69 6f 72 69 74 79 20 69 6e 74 65 67 65 72 20 76 61 6c | sets.Router.Priority.integer.val |
109580 | 75 65 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 | ue..The.router.with.the.highest. |
1095a0 | 70 72 69 6f 72 69 74 79 20 77 69 6c 6c 20 62 65 20 6d 6f 72 65 20 65 6c 69 67 69 62 6c 65 20 74 | priority.will.be.more.eligible.t |
1095c0 | 6f 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 2e 20 53 65 74 74 | o.become.Designated.Router..Sett |
1095e0 | 69 6e 67 20 74 68 65 20 76 61 6c 75 65 20 74 6f 20 30 2c 20 6d 61 6b 65 73 20 74 68 65 20 72 6f | ing.the.value.to.0,.makes.the.ro |
109600 | 75 74 65 72 20 69 6e 65 6c 69 67 69 62 6c 65 20 74 6f 20 62 65 63 6f 6d 65 20 44 65 73 69 67 6e | uter.ineligible.to.become.Design |
109620 | 61 74 65 64 20 52 6f 75 74 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 | ated.Router..The.default.value.i |
109640 | 73 20 31 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 | s.1..The.interval.range.is.0.to. |
109660 | 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 64 65 66 61 75 6c 74 20 52 | 255..This.command.sets.default.R |
109680 | 49 50 20 64 69 73 74 61 6e 63 65 20 74 6f 20 61 20 73 70 65 63 69 66 69 65 64 20 76 61 6c 75 65 | IP.distance.to.a.specified.value |
1096a0 | 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 73 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 | .when.the.routes.source.IP.addre |
1096c0 | 73 73 20 6d 61 74 63 68 65 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 66 69 78 2e | ss.matches.the.specified.prefix. |
1096e0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 | .This.command.sets.hello.interva |
109700 | 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 6f 6e 20 61 20 67 69 76 65 6e 20 69 6e 74 65 72 66 61 63 | l.in.seconds.on.a.given.interfac |
109720 | 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 30 30 2e 00 54 68 69 73 20 63 | e..The.range.is.1.to.600..This.c |
109740 | 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6c 69 6e 6b 20 63 6f 73 74 20 66 6f 72 20 74 68 65 20 73 70 | ommand.sets.link.cost.for.the.sp |
109760 | 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 63 6f 73 74 20 76 61 6c 75 | ecified.interface..The.cost.valu |
109780 | 65 20 69 73 20 73 65 74 20 74 6f 20 72 6f 75 74 65 72 2d 4c 53 41 e2 80 99 73 20 6d 65 74 72 69 | e.is.set.to.router-LSA...s.metri |
1097a0 | 63 20 66 69 65 6c 64 20 61 6e 64 20 75 73 65 64 20 66 6f 72 20 53 50 46 20 63 61 6c 63 75 6c 61 | c.field.and.used.for.SPF.calcula |
1097c0 | 74 69 6f 6e 2e 20 54 68 65 20 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 | tion..The.cost.range.is.1.to.655 |
1097e0 | 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e | 35..This.command.sets.minimum.in |
109800 | 74 65 72 76 61 6c 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 | terval.between.consecutive.SPF.c |
109820 | 61 6c 63 75 6c 61 74 69 6f 6e 73 20 69 6e 20 73 65 63 6f 6e 64 73 2e 54 68 65 20 69 6e 74 65 72 | alculations.in.seconds.The.inter |
109840 | 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d | val.range.is.1.to.120..This.comm |
109860 | 61 6e 64 20 73 65 74 73 20 6d 69 6e 69 6d 75 6d 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 | and.sets.minimum.interval.in.sec |
109880 | 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 72 65 67 65 6e 65 72 61 74 69 6e 67 20 73 61 6d 65 20 4c | onds.between.regenerating.same.L |
1098a0 | 53 50 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 | SP..The.interval.range.is.1.to.1 |
1098c0 | 32 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6d 75 6c 74 69 70 6c 69 65 72 | 20..This.command.sets.multiplier |
1098e0 | 20 66 6f 72 20 68 65 6c 6c 6f 20 68 6f 6c 64 69 6e 67 20 74 69 6d 65 20 6f 6e 20 61 20 67 69 76 | .for.hello.holding.time.on.a.giv |
109900 | 65 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 32 20 74 6f 20 | en.interface..The.range.is.2.to. |
109920 | 31 30 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 | 100..This.command.sets.number.of |
109940 | 20 73 65 63 6f 6e 64 73 20 66 6f 72 20 49 6e 66 54 72 61 6e 73 44 65 6c 61 79 20 76 61 6c 75 65 | .seconds.for.InfTransDelay.value |
109960 | 2e 20 49 74 20 61 6c 6c 6f 77 73 20 74 6f 20 73 65 74 20 61 6e 64 20 61 64 6a 75 73 74 20 66 6f | ..It.allows.to.set.and.adjust.fo |
109980 | 72 20 65 61 63 68 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 64 65 6c 61 79 20 69 6e 74 65 72 | r.each.interface.the.delay.inter |
1099a0 | 76 61 6c 20 62 65 66 6f 72 65 20 73 74 61 72 74 69 6e 67 20 74 68 65 20 73 79 6e 63 68 72 6f 6e | val.before.starting.the.synchron |
1099c0 | 69 7a 69 6e 67 20 70 72 6f 63 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 27 73 20 64 61 | izing.process.of.the.router's.da |
1099e0 | 74 61 62 61 73 65 20 77 69 74 68 20 61 6c 6c 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 65 20 64 | tabase.with.all.neighbors..The.d |
109a00 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 | efault.value.is.1.seconds..The.i |
109a20 | 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 | nterval.range.is.3.to.65535..Thi |
109a40 | 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 | s.command.sets.number.of.seconds |
109a60 | 20 66 6f 72 20 52 78 6d 74 49 6e 74 65 72 76 61 6c 20 74 69 6d 65 72 20 76 61 6c 75 65 2e 20 54 | .for.RxmtInterval.timer.value..T |
109a80 | 68 69 73 20 76 61 6c 75 65 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 72 65 74 72 61 6e 73 6d 69 | his.value.is.used.when.retransmi |
109aa0 | 74 74 69 6e 67 20 44 61 74 61 62 61 73 65 20 44 65 73 63 72 69 70 74 69 6f 6e 20 61 6e 64 20 4c | tting.Database.Description.and.L |
109ac0 | 69 6e 6b 20 53 74 61 74 65 20 52 65 71 75 65 73 74 20 70 61 63 6b 65 74 73 20 69 66 20 61 63 6b | ink.State.Request.packets.if.ack |
109ae0 | 6e 6f 77 6c 65 64 67 65 20 77 61 73 20 6e 6f 74 20 72 65 63 65 69 76 65 64 2e 20 54 68 65 20 64 | nowledge.was.not.received..The.d |
109b00 | 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 35 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 69 | efault.value.is.5.seconds..The.i |
109b20 | 6e 74 65 72 76 61 6c 20 72 61 6e 67 65 20 69 73 20 33 20 74 6f 20 36 35 35 33 35 2e 00 54 68 69 | nterval.range.is.3.to.65535..Thi |
109b40 | 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 6c 64 2d 73 74 79 6c 65 20 28 49 53 4f 20 31 30 | s.command.sets.old-style.(ISO.10 |
109b60 | 35 38 39 29 20 6f 72 20 6e 65 77 20 73 74 79 6c 65 20 70 61 63 6b 65 74 20 66 6f 72 6d 61 74 73 | 589).or.new.style.packet.formats |
109b80 | 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 74 68 65 72 20 63 6f 6e 66 65 64 | :.This.command.sets.other.confed |
109ba0 | 65 72 61 74 69 6f 6e 73 20 3c 6e 73 75 62 61 73 6e 3e 20 61 73 20 6d 65 6d 62 65 72 73 20 6f 66 | erations.<nsubasn>.as.members.of |
109bc0 | 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 73 70 65 63 69 66 69 65 64 20 62 79 20 | .autonomous.system.specified.by. |
109be0 | 3a 63 66 67 63 6d 64 3a 60 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 69 64 65 6e 74 69 66 69 65 | :cfgcmd:`confederation.identifie |
109c00 | 72 20 3c 61 73 6e 3e 60 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 6f 76 65 72 | r.<asn>`..This.command.sets.over |
109c20 | 6c 6f 61 64 20 62 69 74 20 74 6f 20 61 76 6f 69 64 20 61 6e 79 20 74 72 61 6e 73 69 74 20 74 72 | load.bit.to.avoid.any.transit.tr |
109c40 | 61 66 66 69 63 20 74 68 72 6f 75 67 68 20 74 68 69 73 20 72 6f 75 74 65 72 2e 20 49 74 20 69 73 | affic.through.this.router..It.is |
109c60 | 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 33 37 38 37 60 2e 00 54 68 69 73 20 | .described.in.:rfc:`3787`..This. |
109c80 | 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 74 68 65 20 69 6e | command.sets.priority.for.the.in |
109ca0 | 74 65 72 66 61 63 65 20 66 6f 72 20 3a 61 62 62 72 3a 60 44 49 53 20 28 44 65 73 69 67 6e 61 74 | terface.for.:abbr:`DIS.(Designat |
109cc0 | 65 64 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 29 60 20 65 6c 65 63 74 69 6f | ed.Intermediate.System)`.electio |
109ce0 | 6e 2e 20 54 68 65 20 70 72 69 6f 72 69 74 79 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 32 | n..The.priority.range.is.0.to.12 |
109d00 | 37 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 61 64 6d 69 6e 69 73 | 7..This.command.sets.the.adminis |
109d20 | 74 72 61 74 69 76 65 20 64 69 73 74 61 6e 63 65 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 | trative.distance.for.a.particula |
109d40 | 72 20 72 6f 75 74 65 2e 20 54 68 65 20 64 69 73 74 61 6e 63 65 20 72 61 6e 67 65 20 69 73 20 31 | r.route..The.distance.range.is.1 |
109d60 | 20 74 6f 20 32 35 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 63 | .to.255..This.command.sets.the.c |
109d80 | 6f 73 74 20 6f 66 20 64 65 66 61 75 6c 74 2d 73 75 6d 6d 61 72 79 20 4c 53 41 73 20 61 6e 6e 6f | ost.of.default-summary.LSAs.anno |
109da0 | 75 6e 63 65 64 20 74 6f 20 73 74 75 62 62 79 20 61 72 65 61 73 2e 20 54 68 65 20 63 6f 73 74 20 | unced.to.stubby.areas..The.cost. |
109dc0 | 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f 6d | range.is.0.to.16777215..This.com |
109de0 | 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 73 74 20 6f 66 20 4c 53 | mand.sets.the.default.cost.of.LS |
109e00 | 41 73 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 4e 53 53 41 20 61 72 65 61 73 2e 20 54 68 65 20 | As.announced.to.NSSA.areas..The. |
109e20 | 63 6f 73 74 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 | cost.range.is.0.to.16777215..Thi |
109e40 | 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c 20 64 65 6c 61 79 | s.command.sets.the.initial.delay |
109e60 | 2c 20 74 68 65 20 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 74 69 6d 65 20 61 6e 64 20 74 68 65 20 6d | ,.the.initial-holdtime.and.the.m |
109e80 | 61 78 69 6d 75 6d 2d 68 6f 6c 64 74 69 6d 65 20 62 65 74 77 65 65 6e 20 77 68 65 6e 20 53 50 46 | aximum-holdtime.between.when.SPF |
109ea0 | 20 69 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 6e 64 20 74 68 65 20 65 76 65 6e 74 20 77 68 69 | .is.calculated.and.the.event.whi |
109ec0 | 63 68 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e 20 54 68 | ch.triggered.the.calculation..Th |
109ee0 | 65 20 74 69 6d 65 73 20 61 72 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 6d 69 6c 6c 69 73 65 | e.times.are.specified.in.millise |
109f00 | 63 6f 6e 64 73 20 61 6e 64 20 6d 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 6f | conds.and.must.be.in.the.range.o |
109f20 | 66 20 30 20 74 6f 20 36 30 30 30 30 30 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e 20 3a 63 66 67 | f.0.to.600000.milliseconds..:cfg |
109f40 | 63 6d 64 3a 60 64 65 6c 61 79 60 20 73 65 74 73 20 74 68 65 20 69 6e 69 74 69 61 6c 20 53 50 46 | cmd:`delay`.sets.the.initial.SPF |
109f60 | 20 73 63 68 65 64 75 6c 65 20 64 65 6c 61 79 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2e | .schedule.delay.in.milliseconds. |
109f80 | 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 32 30 30 20 6d 73 2e 20 3a 63 | .The.default.value.is.200.ms..:c |
109fa0 | 66 67 63 6d 64 3a 60 69 6e 69 74 69 61 6c 2d 68 6f 6c 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 | fgcmd:`initial-holdtime`.sets.th |
109fc0 | 65 20 6d 69 6e 69 6d 75 6d 20 68 6f 6c 64 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 | e.minimum.hold.time.between.two. |
109fe0 | 63 6f 6e 73 65 63 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 | consecutive.SPF.calculations..Th |
10a000 | 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 20 6d 73 2e 20 3a 63 66 67 | e.default.value.is.1000.ms..:cfg |
10a020 | 63 6d 64 3a 60 6d 61 78 2d 68 6f 6c 64 74 69 6d 65 60 20 73 65 74 73 20 74 68 65 20 6d 61 78 69 | cmd:`max-holdtime`.sets.the.maxi |
10a040 | 6d 75 6d 20 77 61 69 74 20 74 69 6d 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 63 6f 6e 73 65 63 | mum.wait.time.between.two.consec |
10a060 | 75 74 69 76 65 20 53 50 46 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2e 20 54 68 65 20 64 65 66 61 | utive.SPF.calculations..The.defa |
10a080 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 30 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d | ult.value.is.10000.ms..This.comm |
10a0a0 | 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 62 61 6e 64 77 69 64 74 68 | and.sets.the.interface.bandwidth |
10a0c0 | 20 66 6f 72 20 63 6f 73 74 20 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 | .for.cost.calculations,.where.ba |
10a0e0 | 6e 64 77 69 64 74 68 20 63 61 6e 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 | ndwidth.can.be.in.range.from.1.t |
10a100 | 6f 20 31 30 30 30 30 30 2c 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 73 2f 73 2e 00 | o.100000,.specified.in.Mbits/s.. |
10a120 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 | This.command.sets.the.interface. |
10a140 | 74 79 70 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 69 6e 74 65 | type:.This.command.sets.the.inte |
10a160 | 72 66 61 63 65 20 77 69 74 68 20 52 49 50 20 4d 44 35 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | rface.with.RIP.MD5.authenticatio |
10a180 | 6e 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 4d 44 35 20 4b 65 | n..This.command.also.sets.MD5.Ke |
10a1a0 | 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 | y..The.key.must.be.shorter.than. |
10a1c0 | 31 36 20 63 68 61 72 61 63 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 | 16.characters..This.command.sets |
10a1e0 | 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 52 49 50 20 73 69 6d 70 6c 65 20 70 | .the.interface.with.RIP.simple.p |
10a200 | 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 69 73 20 63 6f 6d | assword.authentication..This.com |
10a220 | 6d 61 6e 64 20 61 6c 73 6f 20 73 65 74 73 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 74 | mand.also.sets.authentication.st |
10a240 | 72 69 6e 67 2e 20 54 68 65 20 73 74 72 69 6e 67 20 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 | ring..The.string.must.be.shorter |
10a260 | 20 74 68 61 6e 20 31 36 20 63 68 61 72 61 63 74 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | .than.16.characters..This.comman |
10a280 | 64 20 73 65 74 73 20 74 68 65 20 6d 75 6c 74 69 70 6c 69 63 61 74 69 76 65 20 66 61 63 74 6f 72 | d.sets.the.multiplicative.factor |
10a2a0 | 20 75 73 65 64 20 66 6f 72 20 64 69 76 65 72 73 69 74 79 20 72 6f 75 74 69 6e 67 2c 20 69 6e 20 | .used.for.diversity.routing,.in. |
10a2c0 | 75 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 3b 20 6c 6f 77 65 72 20 76 61 6c 75 65 73 20 63 61 75 | units.of.1/256;.lower.values.cau |
10a2e0 | 73 65 20 64 69 76 65 72 73 69 74 79 20 74 6f 20 70 6c 61 79 20 61 20 6d 6f 72 65 20 69 6d 70 6f | se.diversity.to.play.a.more.impo |
10a300 | 72 74 61 6e 74 20 72 6f 6c 65 20 69 6e 20 72 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 2e 20 54 | rtant.role.in.route.selection..T |
10a320 | 68 65 20 64 65 66 61 75 6c 74 20 69 74 20 32 35 36 2c 20 77 68 69 63 68 20 6d 65 61 6e 73 20 74 | he.default.it.256,.which.means.t |
10a340 | 68 61 74 20 64 69 76 65 72 73 69 74 79 20 70 6c 61 79 73 20 6e 6f 20 72 6f 6c 65 20 69 6e 20 72 | hat.diversity.plays.no.role.in.r |
10a360 | 6f 75 74 65 20 73 65 6c 65 63 74 69 6f 6e 3b 20 79 6f 75 20 77 69 6c 6c 20 70 72 6f 62 61 62 6c | oute.selection;.you.will.probabl |
10a380 | 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 74 68 61 74 20 74 6f 20 31 32 38 20 6f 72 20 6c 65 73 | y.want.to.set.that.to.128.or.les |
10a3a0 | 73 20 6f 6e 20 6e 6f 64 65 73 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 69 6e 64 65 70 65 6e | s.on.nodes.with.multiple.indepen |
10a3c0 | 64 65 6e 74 20 72 61 64 69 6f 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 | dent.radios..This.command.sets.t |
10a3e0 | 68 65 20 72 65 66 65 72 65 6e 63 65 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 63 6f 73 74 20 | he.reference.bandwidth.for.cost. |
10a400 | 63 61 6c 63 75 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 62 61 6e 64 77 69 64 74 68 20 63 61 | calculations,.where.bandwidth.ca |
10a420 | 6e 20 62 65 20 69 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 31 20 74 6f 20 34 32 39 34 39 36 37 2c | n.be.in.range.from.1.to.4294967, |
10a440 | 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 4d 62 69 74 73 2f 73 2e 20 54 68 65 20 64 65 66 61 75 | .specified.in.Mbits/s..The.defau |
10a460 | 6c 74 20 69 73 20 31 30 30 4d 62 69 74 2f 73 20 28 69 2e 65 2e 20 61 20 6c 69 6e 6b 20 6f 66 20 | lt.is.100Mbit/s.(i.e..a.link.of. |
10a480 | 62 61 6e 64 77 69 64 74 68 20 31 30 30 4d 62 69 74 2f 73 20 6f 72 20 68 69 67 68 65 72 20 77 69 | bandwidth.100Mbit/s.or.higher.wi |
10a4a0 | 6c 6c 20 68 61 76 65 20 61 20 63 6f 73 74 20 6f 66 20 31 2e 20 43 6f 73 74 20 6f 66 20 6c 6f 77 | ll.have.a.cost.of.1..Cost.of.low |
10a4c0 | 65 72 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6e 6b 73 20 77 69 6c 6c 20 62 65 20 73 63 61 6c 65 | er.bandwidth.links.will.be.scale |
10a4e0 | 64 20 77 69 74 68 20 72 65 66 65 72 65 6e 63 65 20 74 6f 20 74 68 69 73 20 63 6f 73 74 29 2e 00 | d.with.reference.to.this.cost).. |
10a500 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 20 | This.command.sets.the.router-ID. |
10a520 | 6f 66 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 72 6f 75 74 65 72 2d | of.the.OSPF.process..The.router- |
10a540 | 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 | ID.may.be.an.IP.address.of.the.r |
10a560 | 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 62 65 20 e2 80 93 20 69 74 20 63 61 | outer,.but.need.not.be.....it.ca |
10a580 | 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 72 79 20 33 32 62 69 74 20 6e 75 6d 62 65 72 2e | n.be.any.arbitrary.32bit.number. |
10a5a0 | 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 20 62 65 20 75 6e 69 71 75 65 20 77 69 74 68 69 | .However.it.MUST.be.unique.withi |
10a5c0 | 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 46 20 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 | n.the.entire.OSPF.domain.to.the. |
10a5e0 | 4f 53 50 46 20 73 70 65 61 6b 65 72 20 e2 80 93 20 62 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c | OSPF.speaker.....bad.things.will |
10a600 | 20 68 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 70 6c 65 20 4f 53 50 46 20 73 70 65 61 6b 65 72 | .happen.if.multiple.OSPF.speaker |
10a620 | 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 | s.are.configured.with.the.same.r |
10a640 | 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 | outer-ID!.This.command.sets.the. |
10a660 | 72 6f 75 74 65 72 2d 49 44 20 6f 66 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e | router-ID.of.the.OSPFv3.process. |
10a680 | 20 54 68 65 20 72 6f 75 74 65 72 2d 49 44 20 6d 61 79 20 62 65 20 61 6e 20 49 50 20 61 64 64 72 | .The.router-ID.may.be.an.IP.addr |
10a6a0 | 65 73 73 20 6f 66 20 74 68 65 20 72 6f 75 74 65 72 2c 20 62 75 74 20 6e 65 65 64 20 6e 6f 74 20 | ess.of.the.router,.but.need.not. |
10a6c0 | 62 65 20 e2 80 93 20 69 74 20 63 61 6e 20 62 65 20 61 6e 79 20 61 72 62 69 74 72 61 72 79 20 33 | be.....it.can.be.any.arbitrary.3 |
10a6e0 | 32 62 69 74 20 6e 75 6d 62 65 72 2e 20 48 6f 77 65 76 65 72 20 69 74 20 4d 55 53 54 20 62 65 20 | 2bit.number..However.it.MUST.be. |
10a700 | 75 6e 69 71 75 65 20 77 69 74 68 69 6e 20 74 68 65 20 65 6e 74 69 72 65 20 4f 53 50 46 76 33 20 | unique.within.the.entire.OSPFv3. |
10a720 | 64 6f 6d 61 69 6e 20 74 6f 20 74 68 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 20 e2 80 93 | domain.to.the.OSPFv3.speaker.... |
10a740 | 20 62 61 64 20 74 68 69 6e 67 73 20 77 69 6c 6c 20 68 61 70 70 65 6e 20 69 66 20 6d 75 6c 74 69 | .bad.things.will.happen.if.multi |
10a760 | 70 6c 65 20 4f 53 50 46 76 33 20 73 70 65 61 6b 65 72 73 20 61 72 65 20 63 6f 6e 66 69 67 75 72 | ple.OSPFv3.speakers.are.configur |
10a780 | 65 64 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 72 6f 75 74 65 72 2d 49 44 21 00 54 68 69 73 | ed.with.the.same.router-ID!.This |
10a7a0 | 20 63 6f 6d 6d 61 6e 64 20 73 65 74 73 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 | .command.sets.the.specified.inte |
10a7c0 | 72 66 61 63 65 20 74 6f 20 70 61 73 73 69 76 65 20 6d 6f 64 65 2e 20 4f 6e 20 70 61 73 73 69 76 | rface.to.passive.mode..On.passiv |
10a7e0 | 65 20 6d 6f 64 65 20 69 6e 74 65 72 66 61 63 65 2c 20 61 6c 6c 20 72 65 63 65 69 76 69 6e 67 20 | e.mode.interface,.all.receiving. |
10a800 | 70 61 63 6b 65 74 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 61 73 20 6e 6f 72 6d 61 6c 20 | packets.are.processed.as.normal. |
10a820 | 61 6e 64 20 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 65 69 74 68 65 72 20 6d 75 | and.VyOS.does.not.send.either.mu |
10a840 | 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 63 61 73 74 20 52 49 50 20 70 61 63 6b 65 74 73 20 65 | lticast.or.unicast.RIP.packets.e |
10a860 | 78 63 65 70 74 20 74 6f 20 52 49 50 20 6e 65 69 67 68 62 6f 72 73 20 73 70 65 63 69 66 69 65 64 | xcept.to.RIP.neighbors.specified |
10a880 | 20 77 69 74 68 20 6e 65 69 67 68 62 6f 72 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d | .with.neighbor.command..This.com |
10a8a0 | 6d 61 6e 64 20 73 68 6f 75 6c 64 20 4e 4f 54 20 62 65 20 73 65 74 20 6e 6f 72 6d 61 6c 6c 79 2e | mand.should.NOT.be.set.normally. |
10a8c0 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 68 6f 77 73 20 62 6f 74 68 20 73 74 61 74 75 73 20 | .This.command.shows.both.status. |
10a8e0 | 61 6e 64 20 73 74 61 74 69 73 74 69 63 73 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 | and.statistics.on.the.specified. |
10a900 | 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 77 69 72 65 6c 65 73 73 | wireless.interface..The.wireless |
10a920 | 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e 67 65 20 | .interface.identifier.can.range. |
10a940 | 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 54 68 69 73 20 63 6f 6d 6d | from.wlan0.to.wlan999..This.comm |
10a960 | 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 42 47 50 20 63 6f 6e 66 65 64 65 72 61 74 69 6f | and.specifies.a.BGP.confederatio |
10a980 | 6e 20 69 64 65 6e 74 69 66 69 65 72 2e 20 3c 61 73 6e 3e 20 69 73 20 74 68 65 20 6e 75 6d 62 65 | n.identifier..<asn>.is.the.numbe |
10a9a0 | 72 20 6f 66 20 74 68 65 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 20 74 68 61 74 20 | r.of.the.autonomous.system.that. |
10a9c0 | 69 6e 74 65 72 6e 61 6c 6c 79 20 69 6e 63 6c 75 64 65 73 20 6d 75 6c 74 69 70 6c 65 20 73 75 62 | internally.includes.multiple.sub |
10a9e0 | 2d 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 73 74 65 6d 73 20 28 61 20 63 6f 6e 66 65 64 65 72 61 | -autonomous.systems.(a.confedera |
10aa00 | 74 69 6f 6e 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 | tion)..This.command.specifies.a. |
10aa20 | 42 61 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 69 6e 74 65 72 | Babel.enabled.interface.by.inter |
10aa40 | 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 20 61 6e 64 20 | face.name..Both.the.sending.and. |
10aa60 | 72 65 63 65 69 76 69 6e 67 20 6f 66 20 42 61 62 65 6c 20 70 61 63 6b 65 74 73 20 77 69 6c 6c 20 | receiving.of.Babel.packets.will. |
10aa80 | 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 63 | be.enabled.on.the.interface.spec |
10aaa0 | 69 66 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d | ified.in.this.command..This.comm |
10aac0 | 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 4d 44 35 20 70 61 73 73 77 6f 72 64 20 74 6f 20 | and.specifies.a.MD5.password.to. |
10aae0 | 62 65 20 75 73 65 64 20 77 69 74 68 20 74 68 65 20 74 63 70 20 73 6f 63 6b 65 74 20 74 68 61 74 | be.used.with.the.tcp.socket.that |
10ab00 | 20 69 73 20 62 65 69 6e 67 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 | .is.being.used.to.connect.to.the |
10ab20 | 20 72 65 6d 6f 74 65 20 70 65 65 72 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | .remote.peer..This.command.speci |
10ab40 | 66 69 65 73 20 61 20 52 49 50 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 62 79 20 | fies.a.RIP.enabled.interface.by. |
10ab60 | 69 6e 74 65 72 66 61 63 65 20 6e 61 6d 65 2e 20 42 6f 74 68 20 74 68 65 20 73 65 6e 64 69 6e 67 | interface.name..Both.the.sending |
10ab80 | 20 61 6e 64 20 72 65 63 65 69 76 69 6e 67 20 6f 66 20 52 49 50 20 70 61 63 6b 65 74 73 20 77 69 | .and.receiving.of.RIP.packets.wi |
10aba0 | 6c 6c 20 62 65 20 65 6e 61 62 6c 65 64 20 6f 6e 20 74 68 65 20 70 6f 72 74 20 73 70 65 63 69 66 | ll.be.enabled.on.the.port.specif |
10abc0 | 69 65 64 20 69 6e 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e | ied.in.this.command..This.comman |
10abe0 | 64 20 73 70 65 63 69 66 69 65 73 20 61 20 52 49 50 20 6e 65 69 67 68 62 6f 72 2e 20 57 68 65 6e | d.specifies.a.RIP.neighbor..When |
10ac00 | 20 61 20 6e 65 69 67 68 62 6f 72 20 64 6f 65 73 6e e2 80 99 74 20 75 6e 64 65 72 73 74 61 6e 64 | .a.neighbor.doesn...t.understand |
10ac20 | 20 6d 75 6c 74 69 63 61 73 74 2c 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 75 73 65 64 | .multicast,.this.command.is.used |
10ac40 | 20 74 6f 20 73 70 65 63 69 66 79 20 6e 65 69 67 68 62 6f 72 73 2e 20 49 6e 20 73 6f 6d 65 20 63 | .to.specify.neighbors..In.some.c |
10ac60 | 61 73 65 73 2c 20 6e 6f 74 20 61 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 6c 6c 20 62 65 20 61 62 | ases,.not.all.routers.will.be.ab |
10ac80 | 6c 65 20 74 6f 20 75 6e 64 65 72 73 74 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 69 6e 67 2c 20 77 | le.to.understand.multicasting,.w |
10aca0 | 68 65 72 65 20 70 61 63 6b 65 74 73 20 61 72 65 20 73 65 6e 74 20 74 6f 20 61 20 6e 65 74 77 6f | here.packets.are.sent.to.a.netwo |
10acc0 | 72 6b 20 6f 72 20 61 20 67 72 6f 75 70 20 6f 66 20 61 64 64 72 65 73 73 65 73 2e 20 49 6e 20 61 | rk.or.a.group.of.addresses..In.a |
10ace0 | 20 73 69 74 75 61 74 69 6f 6e 20 77 68 65 72 65 20 61 20 6e 65 69 67 68 62 6f 72 20 63 61 6e 6e | .situation.where.a.neighbor.cann |
10ad00 | 6f 74 20 70 72 6f 63 65 73 73 20 6d 75 6c 74 69 63 61 73 74 20 70 61 63 6b 65 74 73 2c 20 69 74 | ot.process.multicast.packets,.it |
10ad20 | 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 73 74 61 62 6c 69 73 68 20 61 20 64 69 72 | .is.necessary.to.establish.a.dir |
10ad40 | 65 63 74 20 6c 69 6e 6b 20 62 65 74 77 65 65 6e 20 72 6f 75 74 65 72 73 2e 00 54 68 69 73 20 63 | ect.link.between.routers..This.c |
10ad60 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 64 65 66 61 75 6c 74 20 77 65 69 67 68 | ommand.specifies.a.default.weigh |
10ad80 | 74 20 76 61 6c 75 65 20 66 6f 72 20 74 68 65 20 6e 65 69 67 68 62 6f 72 e2 80 99 73 20 72 6f 75 | t.value.for.the.neighbor...s.rou |
10ada0 | 74 65 73 2e 20 54 68 65 20 6e 75 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 | tes..The.number.range.is.1.to.65 |
10adc0 | 35 33 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 20 6d 61 | 535..This.command.specifies.a.ma |
10ade0 | 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 72 65 66 69 78 65 73 20 77 65 20 63 61 6e 20 | ximum.number.of.prefixes.we.can. |
10ae00 | 72 65 63 65 69 76 65 20 66 72 6f 6d 20 61 20 67 69 76 65 6e 20 70 65 65 72 2e 20 49 66 20 74 68 | receive.from.a.given.peer..If.th |
10ae20 | 69 73 20 6e 75 6d 62 65 72 20 69 73 20 65 78 63 65 65 64 65 64 2c 20 74 68 65 20 42 47 50 20 73 | is.number.is.exceeded,.the.BGP.s |
10ae40 | 65 73 73 69 6f 6e 20 77 69 6c 6c 20 62 65 20 64 65 73 74 72 6f 79 65 64 2e 20 54 68 65 20 6e 75 | ession.will.be.destroyed..The.nu |
10ae60 | 6d 62 65 72 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 00 54 | mber.range.is.1.to.4294967295..T |
10ae80 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 | his.command.specifies.all.interf |
10aea0 | 61 63 65 73 20 61 73 20 70 61 73 73 69 76 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 42 65 63 61 | aces.as.passive.by.default..Beca |
10aec0 | 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 68 61 6e 67 65 73 20 74 68 65 20 63 6f 6e | use.this.command.changes.the.con |
10aee0 | 66 69 67 75 72 61 74 69 6f 6e 20 6c 6f 67 69 63 20 74 6f 20 61 20 64 65 66 61 75 6c 74 20 70 61 | figuration.logic.to.a.default.pa |
10af00 | 73 73 69 76 65 3b 20 74 68 65 72 65 66 6f 72 65 2c 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 65 | ssive;.therefore,.interfaces.whe |
10af20 | 72 65 20 72 6f 75 74 65 72 20 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 65 78 70 65 63 74 | re.router.adjacencies.are.expect |
10af40 | 65 64 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 74 68 | ed.need.to.be.configured.with.th |
10af60 | 65 20 3a 63 66 67 63 6d 64 3a 60 70 61 73 73 69 76 65 2d 69 6e 74 65 72 66 61 63 65 2d 65 78 63 | e.:cfgcmd:`passive-interface-exc |
10af80 | 6c 75 64 65 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 | lude`.command..This.command.spec |
10afa0 | 69 66 69 65 73 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 70 61 73 73 69 76 65 20 | ifies.all.interfaces.to.passive. |
10afc0 | 6d 6f 64 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 | mode..This.command.specifies.an. |
10afe0 | 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 72 6f 76 69 64 65 73 20 74 | aggregate.address.and.provides.t |
10b000 | 68 61 74 20 6c 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 | hat.longer-prefixes.inside.of.th |
10b020 | 65 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 61 72 65 20 73 75 70 70 72 65 73 73 | e.aggregate.address.are.suppress |
10b040 | 65 64 20 62 65 66 6f 72 65 20 73 65 6e 64 69 6e 67 20 42 47 50 20 75 70 64 61 74 65 73 20 6f 75 | ed.before.sending.BGP.updates.ou |
10b060 | 74 20 74 6f 20 70 65 65 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | t.to.peers..This.command.specifi |
10b080 | 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 20 77 69 74 68 20 61 20 6d | es.an.aggregate.address.with.a.m |
10b0a0 | 61 74 68 65 6d 61 74 69 63 61 6c 20 73 65 74 20 6f 66 20 61 75 74 6f 6e 6f 6d 6f 75 73 20 73 79 | athematical.set.of.autonomous.sy |
10b0c0 | 73 74 65 6d 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 74 | stems..This.command.summarizes.t |
10b0e0 | 68 65 20 41 53 5f 50 41 54 48 20 61 74 74 72 69 62 75 74 65 73 20 6f 66 20 61 6c 6c 20 74 68 65 | he.AS_PATH.attributes.of.all.the |
10b100 | 20 69 6e 64 69 76 69 64 75 61 6c 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | .individual.routes..This.command |
10b120 | 20 73 70 65 63 69 66 69 65 73 20 61 6e 20 61 67 67 72 65 67 61 74 65 20 61 64 64 72 65 73 73 2e | .specifies.an.aggregate.address. |
10b140 | 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 61 6c 73 6f 20 61 6e 6e 6f 75 6e 63 65 20 6c | .The.router.will.also.announce.l |
10b160 | 6f 6e 67 65 72 2d 70 72 65 66 69 78 65 73 20 69 6e 73 69 64 65 20 6f 66 20 74 68 65 20 61 67 67 | onger-prefixes.inside.of.the.agg |
10b180 | 72 65 67 61 74 65 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 | regate.address..This.command.spe |
10b1a0 | 63 69 66 69 65 73 20 61 74 74 72 69 62 75 74 65 73 20 74 6f 20 62 65 20 6c 65 66 74 20 75 6e 63 | cifies.attributes.to.be.left.unc |
10b1c0 | 68 61 6e 67 65 64 20 66 6f 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 73 65 6e 74 20 74 | hanged.for.advertisements.sent.t |
10b1e0 | 6f 20 61 20 70 65 65 72 20 6f 72 20 70 65 65 72 20 67 72 6f 75 70 2e 00 54 68 69 73 20 63 6f 6d | o.a.peer.or.peer.group..This.com |
10b200 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 63 69 72 63 75 69 74 20 74 79 70 65 20 66 6f 72 20 | mand.specifies.circuit.type.for. |
10b220 | 69 6e 74 65 72 66 61 63 65 3a 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | interface:.This.command.specifie |
10b240 | 73 20 63 6c 75 73 74 65 72 20 49 44 20 77 68 69 63 68 20 69 64 65 6e 74 69 66 69 65 73 20 61 20 | s.cluster.ID.which.identifies.a. |
10b260 | 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 61 | collection.of.route.reflectors.a |
10b280 | 6e 64 20 74 68 65 69 72 20 63 6c 69 65 6e 74 73 2c 20 61 6e 64 20 69 73 20 75 73 65 64 20 62 79 | nd.their.clients,.and.is.used.by |
10b2a0 | 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 73 20 74 6f 20 61 76 6f 69 64 20 6c 6f 6f 70 69 | .route.reflectors.to.avoid.loopi |
10b2c0 | 6e 67 2e 20 42 79 20 64 65 66 61 75 6c 74 20 63 6c 75 73 74 65 72 20 49 44 20 69 73 20 73 65 74 | ng..By.default.cluster.ID.is.set |
10b2e0 | 20 74 6f 20 74 68 65 20 42 47 50 20 72 6f 75 74 65 72 20 69 64 20 76 61 6c 75 65 2c 20 62 75 74 | .to.the.BGP.router.id.value,.but |
10b300 | 20 63 61 6e 20 62 65 20 73 65 74 20 74 6f 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 33 32 2d 62 | .can.be.set.to.an.arbitrary.32-b |
10b320 | 69 74 20 76 61 6c 75 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 | it.value..This.command.specifies |
10b340 | 20 68 6f 6c 64 2d 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 | .hold-time.in.seconds..The.timer |
10b360 | 20 72 61 6e 67 65 20 69 73 20 34 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 64 65 66 61 75 6c | .range.is.4.to.65535..The.defaul |
10b380 | 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 6f 6e 64 2e 20 49 66 20 79 6f 75 20 73 65 | t.value.is.180.second..If.you.se |
10b3a0 | 74 20 76 61 6c 75 65 20 74 6f 20 30 20 56 79 4f 53 20 77 69 6c 6c 20 6e 6f 74 20 68 6f 6c 64 20 | t.value.to.0.VyOS.will.not.hold. |
10b3c0 | 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 69 | routes..This.command.specifies.i |
10b3e0 | 6e 74 65 72 66 61 63 65 20 61 73 20 70 61 73 73 69 76 65 2e 20 50 61 73 73 69 76 65 20 69 6e 74 | nterface.as.passive..Passive.int |
10b400 | 65 72 66 61 63 65 20 61 64 76 65 72 74 69 73 65 73 20 69 74 73 20 61 64 64 72 65 73 73 2c 20 62 | erface.advertises.its.address,.b |
10b420 | 75 74 20 64 6f 65 73 20 6e 6f 74 20 72 75 6e 20 74 68 65 20 4f 53 50 46 20 70 72 6f 74 6f 63 6f | ut.does.not.run.the.OSPF.protoco |
10b440 | 6c 20 28 61 64 6a 61 63 65 6e 63 69 65 73 20 61 72 65 20 6e 6f 74 20 66 6f 72 6d 65 64 20 61 6e | l.(adjacencies.are.not.formed.an |
10b460 | 64 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 61 72 65 20 6e 6f 74 20 67 65 6e 65 72 61 74 65 | d.hello.packets.are.not.generate |
10b480 | 64 29 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6b 65 65 70 2d | d)..This.command.specifies.keep- |
10b4a0 | 61 6c 69 76 65 20 74 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 2e 20 54 68 65 20 74 69 6d 65 72 | alive.time.in.seconds..The.timer |
10b4c0 | 20 63 61 6e 20 72 61 6e 67 65 20 66 72 6f 6d 20 34 20 74 6f 20 36 35 35 33 35 2e 20 54 68 65 20 | .can.range.from.4.to.65535..The. |
10b4e0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 20 73 65 63 6f 6e 64 2e 00 54 68 69 73 | default.value.is.60.second..This |
10b500 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 28 4d 45 44 29 20 | .command.specifies.metric.(MED). |
10b520 | 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 | for.redistributed.routes..The.me |
10b540 | 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 54 | tric.range.is.0.to.4294967295..T |
10b560 | 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | here.are.six.modes.available.for |
10b580 | 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c | .route.source:.connected,.kernel |
10b5a0 | 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2c 20 74 61 62 6c 65 2e 00 54 68 69 73 | ,.ospf,.rip,.static,.table..This |
10b5c0 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 | .command.specifies.metric.for.re |
10b5e0 | 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 | distributed.routes.from.the.give |
10b600 | 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 66 69 76 65 20 6d | n.route.source..There.are.five.m |
10b620 | 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a | odes.available.for.route.source: |
10b640 | 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 73 | .bgp,.connected,.kernel,.ospf,.s |
10b660 | 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 | tatic..The.metric.range.is.1.to. |
10b680 | 31 36 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 | 16..This.command.specifies.metri |
10b6a0 | 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 | c.for.redistributed.routes.from. |
10b6c0 | 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 72 63 65 2e 20 54 68 65 72 65 20 61 72 | the.given.route.source..There.ar |
10b6e0 | 65 20 66 69 76 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 72 6f 75 74 65 | e.five.modes.available.for.route |
10b700 | 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 74 65 64 2c 20 6b 65 72 6e 65 6c 2c | .source:.bgp,.connected,.kernel, |
10b720 | 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 | .rip,.static..The.metric.range.i |
10b740 | 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | s.1.to.16777214..This.command.sp |
10b760 | 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 | ecifies.metric.for.redistributed |
10b780 | 20 72 6f 75 74 65 73 20 66 72 6f 6d 20 74 68 65 20 67 69 76 65 6e 20 72 6f 75 74 65 20 73 6f 75 | .routes.from.the.given.route.sou |
10b7a0 | 72 63 65 2e 20 54 68 65 72 65 20 61 72 65 20 73 69 78 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 | rce..There.are.six.modes.availab |
10b7c0 | 6c 65 20 66 6f 72 20 72 6f 75 74 65 20 73 6f 75 72 63 65 3a 20 62 67 70 2c 20 63 6f 6e 6e 65 63 | le.for.route.source:.bgp,.connec |
10b7e0 | 74 65 64 2c 20 6b 65 72 6e 65 6c 2c 20 6f 73 70 66 2c 20 72 69 70 2c 20 73 74 61 74 69 63 2e 20 | ted,.kernel,.ospf,.rip,.static.. |
10b800 | 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 31 36 37 37 37 32 31 | The.metric.range.is.1.to.1677721 |
10b820 | 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 6d 65 74 72 69 63 | 5..This.command.specifies.metric |
10b840 | 20 74 79 70 65 20 66 6f 72 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 | .type.for.redistributed.routes.. |
10b860 | 44 69 66 66 65 72 65 6e 63 65 20 62 65 74 77 65 65 6e 20 74 77 6f 20 6d 65 74 72 69 63 20 74 79 | Difference.between.two.metric.ty |
10b880 | 70 65 73 20 74 68 61 74 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 20 69 73 20 61 20 6d 65 74 72 | pes.that.metric.type.1.is.a.metr |
10b8a0 | 69 63 20 77 68 69 63 68 20 69 73 20 22 63 6f 6d 6d 65 6e 73 75 72 61 62 6c 65 22 20 77 69 74 68 | ic.which.is."commensurable".with |
10b8c0 | 20 69 6e 6e 65 72 20 4f 53 50 46 20 6c 69 6e 6b 73 2e 20 57 68 65 6e 20 63 61 6c 63 75 6c 61 74 | .inner.OSPF.links..When.calculat |
10b8e0 | 69 6e 67 20 61 20 6d 65 74 72 69 63 20 74 6f 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 | ing.a.metric.to.the.external.des |
10b900 | 74 69 6e 61 74 69 6f 6e 2c 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 6d 65 74 72 69 63 20 69 | tination,.the.full.path.metric.i |
10b920 | 73 20 63 61 6c 63 75 6c 61 74 65 64 20 61 73 20 61 20 6d 65 74 72 69 63 20 73 75 6d 20 70 61 74 | s.calculated.as.a.metric.sum.pat |
10b940 | 68 20 6f 66 20 61 20 72 6f 75 74 65 72 20 77 68 69 63 68 20 68 61 64 20 61 64 76 65 72 74 69 73 | h.of.a.router.which.had.advertis |
10b960 | 65 64 20 74 68 69 73 20 6c 69 6e 6b 20 70 6c 75 73 20 74 68 65 20 6c 69 6e 6b 20 6d 65 74 72 69 | ed.this.link.plus.the.link.metri |
10b980 | 63 2e 20 54 68 75 73 2c 20 61 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 | c..Thus,.a.route.with.the.least. |
10b9a0 | 73 75 6d 6d 61 72 79 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 62 65 20 73 65 6c 65 63 74 65 64 2e | summary.metric.will.be.selected. |
10b9c0 | 20 49 66 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 69 73 20 61 64 76 65 72 74 69 73 65 64 20 | .If.external.link.is.advertised. |
10b9e0 | 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 20 74 68 65 20 70 61 74 68 20 69 73 20 73 | with.metric.type.2.the.path.is.s |
10ba00 | 65 6c 65 63 74 65 64 20 77 68 69 63 68 20 6c 69 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 | elected.which.lies.through.the.r |
10ba20 | 6f 75 74 65 72 20 77 68 69 63 68 20 61 64 76 65 72 74 69 73 65 64 20 74 68 69 73 20 6c 69 6e 6b | outer.which.advertised.this.link |
10ba40 | 20 77 69 74 68 20 74 68 65 20 6c 65 61 73 74 20 6d 65 74 72 69 63 20 64 65 73 70 69 74 65 20 6f | .with.the.least.metric.despite.o |
10ba60 | 66 20 74 68 65 20 66 61 63 74 20 74 68 61 74 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 68 20 74 6f | f.the.fact.that.internal.path.to |
10ba80 | 20 74 68 69 73 20 72 6f 75 74 65 72 20 69 73 20 6c 6f 6e 67 65 72 20 28 77 69 74 68 20 6d 6f 72 | .this.router.is.longer.(with.mor |
10baa0 | 65 20 63 6f 73 74 29 2e 20 48 6f 77 65 76 65 72 2c 20 69 66 20 74 77 6f 20 72 6f 75 74 65 72 73 | e.cost)..However,.if.two.routers |
10bac0 | 20 61 64 76 65 72 74 69 73 65 64 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 20 61 6e 64 | .advertised.an.external.link.and |
10bae0 | 20 77 69 74 68 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 20 74 68 65 20 70 72 65 66 65 72 65 6e | .with.metric.type.2.the.preferen |
10bb00 | 63 65 20 69 73 20 67 69 76 65 6e 20 74 6f 20 74 68 65 20 70 61 74 68 20 77 68 69 63 68 20 6c 69 | ce.is.given.to.the.path.which.li |
10bb20 | 65 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 61 20 73 68 6f | es.through.the.router.with.a.sho |
10bb40 | 72 74 65 72 20 69 6e 74 65 72 6e 61 6c 20 70 61 74 68 2e 20 49 66 20 74 77 6f 20 64 69 66 66 65 | rter.internal.path..If.two.diffe |
10bb60 | 72 65 6e 74 20 72 6f 75 74 65 72 73 20 61 64 76 65 72 74 69 73 65 64 20 74 77 6f 20 6c 69 6e 6b | rent.routers.advertised.two.link |
10bb80 | 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 65 78 74 65 72 6e 61 6c 20 64 65 73 74 69 6d 61 74 69 | s.to.the.same.external.destimati |
10bba0 | 6f 6e 20 62 75 74 20 77 69 74 68 20 64 69 66 66 65 72 65 6e 74 20 6d 65 74 72 69 63 20 74 79 70 | on.but.with.different.metric.typ |
10bbc0 | 65 2c 20 6d 65 74 72 69 63 20 74 79 70 65 20 31 20 69 73 20 70 72 65 66 65 72 72 65 64 2e 20 49 | e,.metric.type.1.is.preferred..I |
10bbe0 | 66 20 74 79 70 65 20 6f 66 20 61 20 6d 65 74 72 69 63 20 6c 65 66 74 20 75 6e 64 65 66 69 6e 65 | f.type.of.a.metric.left.undefine |
10bc00 | 64 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 63 6f 6e 73 69 64 65 72 20 74 68 65 73 65 | d.the.router.will.consider.these |
10bc20 | 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 73 20 74 6f 20 68 61 76 65 20 61 20 64 65 66 61 75 6c | .external.links.to.have.a.defaul |
10bc40 | 74 20 6d 65 74 72 69 63 20 74 79 70 65 20 32 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | t.metric.type.2..This.command.sp |
10bc60 | 65 63 69 66 69 65 73 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 20 74 6f 20 50 6f 69 6e 74 2d 74 6f | ecifies.network.type.to.Point-to |
10bc80 | 2d 50 6f 69 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 6e 65 74 77 6f 72 6b 20 74 79 70 65 | -Point..The.default.network.type |
10bca0 | 20 69 73 20 62 72 6f 61 64 63 61 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 | .is.broadcast..This.command.spec |
10bcc0 | 69 66 69 65 73 20 74 68 61 74 20 42 47 50 20 63 6f 6e 73 69 64 65 72 73 20 74 68 65 20 4d 45 44 | ifies.that.BGP.considers.the.MED |
10bce0 | 20 77 68 65 6e 20 63 6f 6d 70 61 72 69 6e 67 20 72 6f 75 74 65 73 20 6f 72 69 67 69 6e 61 74 65 | .when.comparing.routes.originate |
10bd00 | 64 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 2d 41 53 73 20 77 69 74 68 69 6e 20 | d.from.different.sub-ASs.within. |
10bd20 | 74 68 65 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 74 6f 20 77 68 69 63 68 20 74 68 69 73 20 | the.confederation.to.which.this. |
10bd40 | 42 47 50 20 73 70 65 61 6b 65 72 20 62 65 6c 6f 6e 67 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 | BGP.speaker.belongs..The.default |
10bd60 | 20 73 74 61 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 | .state,.where.the.MED.attribute. |
10bd80 | 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | is.not.considered..This.command. |
10bda0 | 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 42 47 50 20 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 | specifies.that.BGP.decision.proc |
10bdc0 | 65 73 73 20 73 68 6f 75 6c 64 20 63 6f 6e 73 69 64 65 72 20 70 61 74 68 73 20 6f 66 20 65 71 75 | ess.should.consider.paths.of.equ |
10bde0 | 61 6c 20 41 53 5f 50 41 54 48 20 6c 65 6e 67 74 68 20 63 61 6e 64 69 64 61 74 65 73 20 66 6f 72 | al.AS_PATH.length.candidates.for |
10be00 | 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 61 74 69 6f 6e 2e 20 57 69 74 68 6f 75 74 20 | .multipath.computation..Without. |
10be20 | 74 68 65 20 6b 6e 6f 62 2c 20 74 68 65 20 65 6e 74 69 72 65 20 41 53 5f 50 41 54 48 20 6d 75 73 | the.knob,.the.entire.AS_PATH.mus |
10be40 | 74 20 6d 61 74 63 68 20 66 6f 72 20 6d 75 6c 74 69 70 61 74 68 20 63 6f 6d 70 75 74 61 74 69 6f | t.match.for.multipath.computatio |
10be60 | 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 61 | n..This.command.specifies.that.a |
10be80 | 20 72 6f 75 74 65 20 77 69 74 68 20 61 20 4d 45 44 20 69 73 20 61 6c 77 61 79 73 20 63 6f 6e 73 | .route.with.a.MED.is.always.cons |
10bea0 | 69 64 65 72 65 64 20 74 6f 20 62 65 20 62 65 74 74 65 72 20 74 68 61 6e 20 61 20 72 6f 75 74 65 | idered.to.be.better.than.a.route |
10bec0 | 20 77 69 74 68 6f 75 74 20 61 20 4d 45 44 20 62 79 20 63 61 75 73 69 6e 67 20 74 68 65 20 6d 69 | .without.a.MED.by.causing.the.mi |
10bee0 | 73 73 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 75 74 65 20 74 6f 20 68 61 76 65 20 61 20 76 61 | ssing.MED.attribute.to.have.a.va |
10bf00 | 6c 75 65 20 6f 66 20 69 6e 66 69 6e 69 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 73 74 61 | lue.of.infinity..The.default.sta |
10bf20 | 74 65 2c 20 77 68 65 72 65 20 74 68 65 20 6d 69 73 73 69 6e 67 20 4d 45 44 20 61 74 74 72 69 62 | te,.where.the.missing.MED.attrib |
10bf40 | 75 74 65 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 68 61 76 65 20 61 20 76 61 6c 75 | ute.is.considered.to.have.a.valu |
10bf60 | 65 20 6f 66 20 7a 65 72 6f 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 | e.of.zero..This.command.specifie |
10bf80 | 73 20 74 68 61 74 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 | s.that.route.updates.received.fr |
10bfa0 | 6f 6d 20 74 68 69 73 20 6e 65 69 67 68 62 6f 72 20 77 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 | om.this.neighbor.will.be.stored. |
10bfc0 | 75 6e 6d 6f 64 69 66 69 65 64 2c 20 72 65 67 61 72 64 6c 65 73 73 20 6f 66 20 74 68 65 20 69 6e | unmodified,.regardless.of.the.in |
10bfe0 | 62 6f 75 6e 64 20 70 6f 6c 69 63 79 2e 20 57 68 65 6e 20 69 6e 62 6f 75 6e 64 20 73 6f 66 74 20 | bound.policy..When.inbound.soft. |
10c000 | 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 | reconfiguration.is.enabled,.the. |
10c020 | 73 74 6f 72 65 64 20 75 70 64 61 74 65 73 20 61 72 65 20 70 72 6f 63 65 73 73 65 64 20 62 79 20 | stored.updates.are.processed.by. |
10c040 | 74 68 65 20 6e 65 77 20 70 6f 6c 69 63 79 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 | the.new.policy.configuration.to. |
10c060 | 63 72 65 61 74 65 20 6e 65 77 20 69 6e 62 6f 75 6e 64 20 75 70 64 61 74 65 73 2e 00 54 68 69 73 | create.new.inbound.updates..This |
10c080 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 73 69 6d 70 6c 65 20 70 | .command.specifies.that.simple.p |
10c0a0 | 61 73 73 77 6f 72 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 | assword.authentication.should.be |
10c0c0 | 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 54 68 65 20 70 61 | .used.for.the.given.area..The.pa |
10c0e0 | 73 73 77 6f 72 64 20 6d 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f | ssword.must.also.be.configured.o |
10c100 | 6e 20 61 20 70 65 72 2d 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 68 69 73 20 63 6f | n.a.per-interface.basis..This.co |
10c120 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 74 68 65 20 63 6f 6d 6d 75 6e 69 | mmand.specifies.that.the.communi |
10c140 | 74 79 20 61 74 74 72 69 62 75 74 65 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 65 6e 74 20 | ty.attribute.should.not.be.sent. |
10c160 | 69 6e 20 72 6f 75 74 65 20 75 70 64 61 74 65 73 20 74 6f 20 61 20 70 65 65 72 2e 20 42 79 20 64 | in.route.updates.to.a.peer..By.d |
10c180 | 65 66 61 75 6c 74 20 63 6f 6d 6d 75 6e 69 74 79 20 61 74 74 72 69 62 75 74 65 20 69 73 20 73 65 | efault.community.attribute.is.se |
10c1a0 | 6e 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 61 74 20 | nt..This.command.specifies.that. |
10c1c0 | 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 20 70 61 74 68 | the.length.of.confederation.path |
10c1e0 | 20 73 65 74 73 20 61 6e 64 20 73 65 71 75 65 6e 63 65 73 20 73 68 6f 75 6c 64 20 62 65 20 74 61 | .sets.and.sequences.should.be.ta |
10c200 | 6b 65 6e 20 69 6e 74 6f 20 61 63 63 6f 75 6e 74 20 64 75 72 69 6e 67 20 74 68 65 20 42 47 50 20 | ken.into.account.during.the.BGP. |
10c220 | 62 65 73 74 20 70 61 74 68 20 64 65 63 69 73 69 6f 6e 20 70 72 6f 63 65 73 73 2e 00 54 68 69 73 | best.path.decision.process..This |
10c240 | 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 49 50 20 61 64 64 72 65 73 | .command.specifies.the.IP.addres |
10c260 | 73 20 6f 66 20 74 68 65 20 6e 65 69 67 68 62 6f 72 69 6e 67 20 64 65 76 69 63 65 2e 00 54 68 69 | s.of.the.neighboring.device..Thi |
10c280 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 4f 53 50 46 20 65 6e 61 | s.command.specifies.the.OSPF.ena |
10c2a0 | 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 28 73 29 2e 20 49 66 20 74 68 65 20 69 6e 74 65 72 66 | bled.interface(s)..If.the.interf |
10c2c0 | 61 63 65 20 68 61 73 20 61 6e 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 64 65 66 69 6e 65 64 20 | ace.has.an.address.from.defined. |
10c2e0 | 72 61 6e 67 65 20 74 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 65 6e 61 62 6c 65 73 20 4f | range.then.the.command.enables.O |
10c300 | 53 50 46 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 72 6f 75 74 65 72 20 | SPF.on.this.interface.so.router. |
10c320 | 63 61 6e 20 70 72 6f 76 69 64 65 20 6e 65 74 77 6f 72 6b 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | can.provide.network.information. |
10c340 | 74 6f 20 74 68 65 20 6f 74 68 65 72 20 6f 73 70 66 20 72 6f 75 74 65 72 73 20 76 69 61 20 74 68 | to.the.other.ospf.routers.via.th |
10c360 | 69 73 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 | is.interface..This.command.speci |
10c380 | 66 69 65 73 20 74 68 65 20 4f 53 50 46 76 33 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 | fies.the.OSPFv3.enabled.interfac |
10c3a0 | 65 2e 20 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 61 6c 73 6f 20 75 73 65 64 20 74 6f 20 | e..This.command.is.also.used.to. |
10c3c0 | 65 6e 61 62 6c 65 20 74 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 61 72 65 | enable.the.OSPF.process..The.are |
10c3e0 | 61 20 6e 75 6d 62 65 72 20 63 61 6e 20 62 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 64 65 63 | a.number.can.be.specified.in.dec |
10c400 | 69 6d 61 6c 20 6e 6f 74 61 74 69 6f 6e 20 69 6e 20 74 68 65 20 72 61 6e 67 65 20 66 72 6f 6d 20 | imal.notation.in.the.range.from. |
10c420 | 30 20 74 6f 20 34 32 39 34 39 36 37 32 39 35 2e 20 4f 72 20 69 74 20 63 61 6e 20 62 65 20 73 70 | 0.to.4294967295..Or.it.can.be.sp |
10c440 | 65 63 69 66 69 65 64 20 69 6e 20 64 6f 74 74 65 64 20 64 65 63 69 6d 61 6c 20 6e 6f 74 61 74 69 | ecified.in.dotted.decimal.notati |
10c460 | 6f 6e 20 73 69 6d 69 6c 61 72 20 74 6f 20 69 70 20 61 64 64 72 65 73 73 2e 00 54 68 69 73 20 63 | on.similar.to.ip.address..This.c |
10c480 | 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 | ommand.specifies.the.area.to.be. |
10c4a0 | 61 20 4e 53 53 41 20 54 6f 74 61 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 41 42 52 73 20 66 | a.NSSA.Totally.Stub.Area..ABRs.f |
10c4c0 | 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 74 6f 20 70 | or.such.an.area.do.not.need.to.p |
10c4e0 | 61 73 73 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 2d 33 29 20 4c 53 41 | ass.Network-Summary.(type-3).LSA |
10c500 | 73 20 28 65 78 63 65 70 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 6f | s.(except.the.default.summary.ro |
10c520 | 75 74 65 29 2c 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 74 79 70 65 2d 34 29 | ute),.ASBR-Summary.LSAs.(type-4) |
10c540 | 20 61 6e 64 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 74 79 70 65 2d 35 29 20 69 | .and.AS-External.LSAs.(type-5).i |
10c560 | 6e 74 6f 20 74 68 65 20 61 72 65 61 2e 20 42 75 74 20 54 79 70 65 2d 37 20 4c 53 41 73 20 74 68 | nto.the.area..But.Type-7.LSAs.th |
10c580 | 61 74 20 63 6f 6e 76 65 72 74 20 74 6f 20 54 79 70 65 2d 35 20 61 74 20 74 68 65 20 4e 53 53 41 | at.convert.to.Type-5.at.the.NSSA |
10c5a0 | 20 41 42 52 20 61 72 65 20 61 6c 6c 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | .ABR.are.allowed..This.command.s |
10c5c0 | 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 4e 6f 74 20 53 6f | pecifies.the.area.to.be.a.Not.So |
10c5e0 | 20 53 74 75 62 62 79 20 41 72 65 61 2e 20 45 78 74 65 72 6e 61 6c 20 72 6f 75 74 69 6e 67 20 69 | .Stubby.Area..External.routing.i |
10c600 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 69 6d 70 6f 72 74 65 64 20 69 6e 74 6f 20 61 6e 20 4e | nformation.is.imported.into.an.N |
10c620 | 53 53 41 20 69 6e 20 54 79 70 65 2d 37 20 4c 53 41 73 2e 20 54 79 70 65 2d 37 20 4c 53 41 73 20 | SSA.in.Type-7.LSAs..Type-7.LSAs. |
10c640 | 61 72 65 20 73 69 6d 69 6c 61 72 20 74 6f 20 54 79 70 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 | are.similar.to.Type-5.AS-externa |
10c660 | 6c 20 4c 53 41 73 2c 20 65 78 63 65 70 74 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 6f 6e 6c | l.LSAs,.except.that.they.can.onl |
10c680 | 79 20 62 65 20 66 6c 6f 6f 64 65 64 20 69 6e 74 6f 20 74 68 65 20 4e 53 53 41 2e 20 49 6e 20 6f | y.be.flooded.into.the.NSSA..In.o |
10c6a0 | 72 64 65 72 20 74 6f 20 66 75 72 74 68 65 72 20 70 72 6f 70 61 67 61 74 65 20 74 68 65 20 4e 53 | rder.to.further.propagate.the.NS |
10c6c0 | 53 41 20 65 78 74 65 72 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 20 54 79 70 | SA.external.information,.the.Typ |
10c6e0 | 65 2d 37 20 4c 53 41 20 6d 75 73 74 20 62 65 20 74 72 61 6e 73 6c 61 74 65 64 20 74 6f 20 61 20 | e-7.LSA.must.be.translated.to.a. |
10c700 | 54 79 70 65 2d 35 20 41 53 2d 65 78 74 65 72 6e 61 6c 2d 4c 53 41 20 62 79 20 74 68 65 20 4e 53 | Type-5.AS-external-LSA.by.the.NS |
10c720 | 53 41 20 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | SA.ABR..This.command.specifies.t |
10c740 | 68 65 20 61 72 65 61 20 74 6f 20 62 65 20 61 20 53 74 75 62 20 41 72 65 61 2e 20 54 68 61 74 20 | he.area.to.be.a.Stub.Area..That. |
10c760 | 69 73 2c 20 61 6e 20 61 72 65 61 20 77 68 65 72 65 20 6e 6f 20 72 6f 75 74 65 72 20 6f 72 69 67 | is,.an.area.where.no.router.orig |
10c780 | 69 6e 61 74 65 73 20 72 6f 75 74 65 73 20 65 78 74 65 72 6e 61 6c 20 74 6f 20 4f 53 50 46 20 61 | inates.routes.external.to.OSPF.a |
10c7a0 | 6e 64 20 68 65 6e 63 65 20 61 6e 20 61 72 65 61 20 77 68 65 72 65 20 61 6c 6c 20 65 78 74 65 72 | nd.hence.an.area.where.all.exter |
10c7c0 | 6e 61 6c 20 72 6f 75 74 65 73 20 61 72 65 20 76 69 61 20 74 68 65 20 41 42 52 28 73 29 2e 20 48 | nal.routes.are.via.the.ABR(s)..H |
10c7e0 | 65 6e 63 65 2c 20 41 42 52 73 20 66 6f 72 20 73 75 63 68 20 61 6e 20 61 72 65 61 20 64 6f 20 6e | ence,.ABRs.for.such.an.area.do.n |
10c800 | 6f 74 20 6e 65 65 64 20 74 6f 20 70 61 73 73 20 41 53 2d 45 78 74 65 72 6e 61 6c 20 4c 53 41 73 | ot.need.to.pass.AS-External.LSAs |
10c820 | 20 28 74 79 70 65 2d 35 29 20 6f 72 20 41 53 42 52 2d 53 75 6d 6d 61 72 79 20 4c 53 41 73 20 28 | .(type-5).or.ASBR-Summary.LSAs.( |
10c840 | 74 79 70 65 2d 34 29 20 69 6e 74 6f 20 74 68 65 20 61 72 65 61 2e 20 54 68 65 79 20 6e 65 65 64 | type-4).into.the.area..They.need |
10c860 | 20 6f 6e 6c 79 20 70 61 73 73 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 79 70 65 | .only.pass.Network-Summary.(type |
10c880 | 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 73 75 63 68 20 61 6e 20 61 72 65 61 2c 20 61 6c 6f 6e | -3).LSAs.into.such.an.area,.alon |
10c8a0 | 67 20 77 69 74 68 20 61 20 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 20 73 75 6d 6d 61 72 79 2e 00 | g.with.a.default-route.summary.. |
10c8c0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 72 65 61 20 | This.command.specifies.the.area. |
10c8e0 | 74 6f 20 62 65 20 61 20 54 6f 74 61 6c 6c 79 20 53 74 75 62 20 41 72 65 61 2e 20 49 6e 20 61 64 | to.be.a.Totally.Stub.Area..In.ad |
10c900 | 64 69 74 69 6f 6e 20 74 6f 20 73 74 75 62 20 61 72 65 61 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 | dition.to.stub.area.limitations. |
10c920 | 74 68 69 73 20 61 72 65 61 20 74 79 70 65 20 70 72 65 76 65 6e 74 73 20 61 6e 20 41 42 52 20 66 | this.area.type.prevents.an.ABR.f |
10c940 | 72 6f 6d 20 69 6e 6a 65 63 74 69 6e 67 20 4e 65 74 77 6f 72 6b 2d 53 75 6d 6d 61 72 79 20 28 74 | rom.injecting.Network-Summary.(t |
10c960 | 79 70 65 2d 33 29 20 4c 53 41 73 20 69 6e 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 73 | ype-3).LSAs.into.the.specified.s |
10c980 | 74 75 62 20 61 72 65 61 2e 20 4f 6e 6c 79 20 64 65 66 61 75 6c 74 20 73 75 6d 6d 61 72 79 20 72 | tub.area..Only.default.summary.r |
10c9a0 | 6f 75 74 65 20 69 73 20 61 6c 6c 6f 77 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | oute.is.allowed..This.command.sp |
10c9c0 | 65 63 69 66 69 65 73 20 74 68 65 20 62 61 73 65 20 72 65 63 65 69 76 65 20 63 6f 73 74 20 66 6f | ecifies.the.base.receive.cost.fo |
10c9e0 | 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 2e 20 46 6f 72 20 77 69 72 65 6c 65 73 73 20 69 | r.this.interface..For.wireless.i |
10ca00 | 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 75 6c 74 | nterfaces,.it.specifies.the.mult |
10ca20 | 69 70 6c 69 65 72 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 70 75 74 69 6e 67 20 74 68 65 20 45 54 | iplier.used.for.computing.the.ET |
10ca40 | 58 20 72 65 63 65 70 74 69 6f 6e 20 63 6f 73 74 20 28 64 65 66 61 75 6c 74 20 32 35 36 29 3b 20 | X.reception.cost.(default.256);. |
10ca60 | 66 6f 72 20 77 69 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 69 74 20 73 70 65 63 69 66 69 | for.wired.interfaces,.it.specifi |
10ca80 | 65 73 20 74 68 65 20 63 6f 73 74 20 74 68 61 74 20 77 69 6c 6c 20 62 65 20 61 64 76 65 72 74 69 | es.the.cost.that.will.be.adverti |
10caa0 | 73 65 64 20 74 6f 20 6e 65 69 67 68 62 6f 75 72 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | sed.to.neighbours..This.command. |
10cac0 | 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 63 61 79 20 66 61 63 74 6f 72 20 66 6f 72 20 74 | specifies.the.decay.factor.for.t |
10cae0 | 68 65 20 65 78 70 6f 6e 65 6e 74 69 61 6c 20 6d 6f 76 69 6e 67 20 61 76 65 72 61 67 65 20 6f 66 | he.exponential.moving.average.of |
10cb00 | 20 52 54 54 20 73 61 6d 70 6c 65 73 2c 20 69 6e 20 75 6e 69 74 73 20 6f 66 20 31 2f 32 35 36 2e | .RTT.samples,.in.units.of.1/256. |
10cb20 | 20 48 69 67 68 65 72 20 76 61 6c 75 65 73 20 64 69 73 63 61 72 64 20 6f 6c 64 20 73 61 6d 70 6c | .Higher.values.discard.old.sampl |
10cb40 | 65 73 20 66 61 73 74 65 72 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 34 32 2e 00 54 68 | es.faster..The.default.is.42..Th |
10cb60 | 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 | is.command.specifies.the.default |
10cb80 | 20 6c 6f 63 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 76 61 6c 75 65 2e 20 54 68 65 20 6c 6f 63 | .local.preference.value..The.loc |
10cba0 | 61 6c 20 70 72 65 66 65 72 65 6e 63 65 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 34 32 39 34 | al.preference.range.is.0.to.4294 |
10cbc0 | 39 36 37 32 39 35 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 | 967295..This.command.specifies.t |
10cbe0 | 68 65 20 64 65 66 61 75 6c 74 20 6d 65 74 72 69 63 20 76 61 6c 75 65 20 6f 66 20 72 65 64 69 73 | he.default.metric.value.of.redis |
10cc00 | 74 72 69 62 75 74 65 64 20 72 6f 75 74 65 73 2e 20 54 68 65 20 6d 65 74 72 69 63 20 72 61 6e 67 | tributed.routes..The.metric.rang |
10cc20 | 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 34 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | e.is.0.to.16777214..This.command |
10cc40 | 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f | .specifies.the.garbage-collectio |
10cc60 | 6e 20 74 69 6d 65 72 2e 20 55 70 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 | n.timer..Upon.expiration.of.the. |
10cc80 | 67 61 72 62 61 67 65 2d 63 6f 6c 6c 65 63 74 69 6f 6e 20 74 69 6d 65 72 2c 20 74 68 65 20 72 6f | garbage-collection.timer,.the.ro |
10cca0 | 75 74 65 20 69 73 20 66 69 6e 61 6c 6c 79 20 72 65 6d 6f 76 65 64 20 66 72 6f 6d 20 74 68 65 20 | ute.is.finally.removed.from.the. |
10ccc0 | 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 | routing.table..The.time.range.is |
10cce0 | 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 | .5.to.2147483647..The.default.va |
10cd00 | 6c 75 65 20 69 73 20 31 32 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | lue.is.120.seconds..This.command |
10cd20 | 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 67 69 76 65 6e 20 6e 65 69 67 68 62 6f 72 20 61 73 | .specifies.the.given.neighbor.as |
10cd40 | 20 72 6f 75 74 65 20 72 65 66 6c 65 63 74 6f 72 20 63 6c 69 65 6e 74 2e 00 54 68 69 73 20 63 6f | .route.reflector.client..This.co |
10cd60 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 69 | mmand.specifies.the.length.of.ti |
10cd80 | 6d 65 2c 20 69 6e 20 73 65 63 6f 6e 64 73 2c 20 62 65 66 6f 72 65 20 74 68 65 20 72 6f 75 74 69 | me,.in.seconds,.before.the.routi |
10cda0 | 6e 67 20 64 65 76 69 63 65 20 73 65 6e 64 73 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 73 20 6f 75 | ng.device.sends.hello.packets.ou |
10cdc0 | 74 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 62 65 66 6f 72 65 20 69 74 20 65 73 74 | t.of.the.interface.before.it.est |
10cde0 | 61 62 6c 69 73 68 65 73 20 61 64 6a 61 63 65 6e 63 79 20 77 69 74 68 20 61 20 6e 65 69 67 68 62 | ablishes.adjacency.with.a.neighb |
10ce00 | 6f 72 2e 20 54 68 65 20 72 61 6e 67 65 20 69 73 20 31 20 74 6f 20 36 35 35 33 35 20 73 65 63 6f | or..The.range.is.1.to.65535.seco |
10ce20 | 6e 64 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 30 20 73 65 63 | nds..The.default.value.is.60.sec |
10ce40 | 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | onds..This.command.specifies.the |
10ce60 | 20 6d 61 78 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 61 | .maximum.RTT,.in.milliseconds,.a |
10ce80 | 62 6f 76 65 20 77 68 69 63 68 20 77 65 20 64 6f 6e 27 74 20 69 6e 63 72 65 61 73 65 20 74 68 65 | bove.which.we.don't.increase.the |
10cea0 | 20 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 64 65 66 61 75 6c | .cost.to.a.neighbour..The.defaul |
10cec0 | 74 20 69 73 20 31 32 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | t.is.120.ms..This.command.specif |
10cee0 | 69 65 73 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 63 6f 73 74 20 61 64 64 65 64 20 74 6f 20 61 20 | ies.the.maximum.cost.added.to.a. |
10cf00 | 6e 65 69 67 68 62 6f 75 72 20 62 65 63 61 75 73 65 20 6f 66 20 52 54 54 2c 20 69 2e 65 2e 20 77 | neighbour.because.of.RTT,.i.e..w |
10cf20 | 68 65 6e 20 74 68 65 20 52 54 54 20 69 73 20 68 69 67 68 65 72 20 6f 72 20 65 71 75 61 6c 20 74 | hen.the.RTT.is.higher.or.equal.t |
10cf40 | 68 61 6e 20 72 74 74 2d 6d 61 78 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 35 30 2e | han.rtt-max..The.default.is.150. |
10cf60 | 20 53 65 74 74 69 6e 67 20 69 74 20 74 6f 20 30 20 65 66 66 65 63 74 69 76 65 6c 79 20 64 69 73 | .Setting.it.to.0.effectively.dis |
10cf80 | 61 62 6c 65 73 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 52 54 54 2d 62 61 73 65 64 20 63 6f 73 | ables.the.use.of.a.RTT-based.cos |
10cfa0 | 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 | t..This.command.specifies.the.mi |
10cfc0 | 6e 69 6d 75 6d 20 52 54 54 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2c 20 73 74 61 72 | nimum.RTT,.in.milliseconds,.star |
10cfe0 | 74 69 6e 67 20 66 72 6f 6d 20 77 68 69 63 68 20 77 65 20 69 6e 63 72 65 61 73 65 20 74 68 65 20 | ting.from.which.we.increase.the. |
10d000 | 63 6f 73 74 20 74 6f 20 61 20 6e 65 69 67 68 62 6f 75 72 2e 20 54 68 65 20 61 64 64 69 74 69 6f | cost.to.a.neighbour..The.additio |
10d020 | 6e 61 6c 20 63 6f 73 74 20 69 73 20 6c 69 6e 65 61 72 20 69 6e 20 28 72 74 74 20 2d 20 72 74 74 | nal.cost.is.linear.in.(rtt.-.rtt |
10d040 | 2d 6d 69 6e 29 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 31 30 20 6d 73 2e 00 54 68 69 | -min)..The.default.is.10.ms..Thi |
10d060 | 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 6d 69 6e 69 6d 75 6d 20 | s.command.specifies.the.minimum. |
10d080 | 72 6f 75 74 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c 20 66 6f 72 | route.advertisement.interval.for |
10d0a0 | 20 74 68 65 20 70 65 65 72 2e 20 54 68 65 20 69 6e 74 65 72 76 61 6c 20 76 61 6c 75 65 20 69 73 | .the.peer..The.interval.value.is |
10d0c0 | 20 30 20 74 6f 20 36 30 30 20 73 65 63 6f 6e 64 73 2c 20 77 69 74 68 20 74 68 65 20 64 65 66 61 | .0.to.600.seconds,.with.the.defa |
10d0e0 | 75 6c 74 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 20 69 6e 74 65 72 76 61 6c 20 62 65 69 6e 67 | ult.advertisement.interval.being |
10d100 | 20 30 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 72 | .0..This.command.specifies.the.r |
10d120 | 6f 75 74 65 72 20 70 72 69 6f 72 69 74 79 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6e 6f 6e 62 | outer.priority.value.of.the.nonb |
10d140 | 72 6f 61 64 63 61 73 74 20 6e 65 69 67 68 62 6f 72 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 | roadcast.neighbor.associated.wit |
10d160 | 68 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 73 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 | h.the.IP.address.specified..The. |
10d180 | 64 65 66 61 75 6c 74 20 69 73 20 30 2e 20 54 68 69 73 20 6b 65 79 77 6f 72 64 20 64 6f 65 73 20 | default.is.0..This.keyword.does. |
10d1a0 | 6e 6f 74 20 61 70 70 6c 79 20 74 6f 20 70 6f 69 6e 74 2d 74 6f 2d 6d 75 6c 74 69 70 6f 69 6e 74 | not.apply.to.point-to-multipoint |
10d1c0 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 | .interfaces..This.command.specif |
10d1e0 | 69 65 73 20 74 68 65 20 72 6f 75 74 65 72 2d 49 44 2e 20 49 66 20 72 6f 75 74 65 72 20 49 44 20 | ies.the.router-ID..If.router.ID. |
10d200 | 69 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 74 20 77 69 6c 6c 20 75 73 65 20 74 68 65 | is.not.specified.it.will.use.the |
10d220 | 20 68 69 67 68 65 73 74 20 69 6e 74 65 72 66 61 63 65 20 49 50 20 61 64 64 72 65 73 73 2e 00 54 | .highest.interface.IP.address..T |
10d240 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 63 | his.command.specifies.the.time.c |
10d260 | 6f 6e 73 74 61 6e 74 2c 20 69 6e 20 73 65 63 6f 6e 64 73 2c 20 6f 66 20 74 68 65 20 73 6d 6f 6f | onstant,.in.seconds,.of.the.smoo |
10d280 | 74 68 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 20 75 73 65 64 20 66 6f 72 20 69 6d 70 6c 65 6d 65 | thing.algorithm.used.for.impleme |
10d2a0 | 6e 74 69 6e 67 20 68 79 73 74 65 72 65 73 69 73 2e 20 4c 61 72 67 65 72 20 76 61 6c 75 65 73 20 | nting.hysteresis..Larger.values. |
10d2c0 | 72 65 64 75 63 65 20 72 6f 75 74 65 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 20 61 74 20 74 68 65 20 | reduce.route.oscillation.at.the. |
10d2e0 | 63 6f 73 74 20 6f 66 20 76 65 72 79 20 73 6c 69 67 68 74 6c 79 20 69 6e 63 72 65 61 73 69 6e 67 | cost.of.very.slightly.increasing |
10d300 | 20 63 6f 6e 76 65 72 67 65 6e 63 65 20 74 69 6d 65 2e 20 54 68 65 20 76 61 6c 75 65 20 30 20 64 | .convergence.time..The.value.0.d |
10d320 | 69 73 61 62 6c 65 73 20 68 79 73 74 65 72 65 73 69 73 2c 20 61 6e 64 20 69 73 20 73 75 69 74 61 | isables.hysteresis,.and.is.suita |
10d340 | 62 6c 65 20 66 6f 72 20 77 69 72 65 64 20 6e 65 74 77 6f 72 6b 73 2e 20 54 68 65 20 64 65 66 61 | ble.for.wired.networks..The.defa |
10d360 | 75 6c 74 20 69 73 20 34 20 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 | ult.is.4.s..This.command.specifi |
10d380 | 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 61 66 74 65 | es.the.time.in.milliseconds.afte |
10d3a0 | 72 20 77 68 69 63 68 20 61 6e 20 27 69 6d 70 6f 72 74 61 6e 74 27 20 72 65 71 75 65 73 74 20 6f | r.which.an.'important'.request.o |
10d3c0 | 72 20 75 70 64 61 74 65 20 77 69 6c 6c 20 62 65 20 72 65 73 65 6e 74 2e 20 54 68 65 20 64 65 66 | r.update.will.be.resent..The.def |
10d3e0 | 61 75 6c 74 20 69 73 20 32 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | ault.is.2000.ms..This.command.sp |
10d400 | 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 | ecifies.the.time.in.milliseconds |
10d420 | 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 64 75 6c 65 64 20 68 65 6c 6c 6f 73 2e 20 4f | .between.two.scheduled.hellos..O |
10d440 | 6e 20 77 69 72 65 64 20 6c 69 6e 6b 73 2c 20 42 61 62 65 6c 20 6e 6f 74 69 63 65 73 20 61 20 6c | n.wired.links,.Babel.notices.a.l |
10d460 | 69 6e 6b 20 66 61 69 6c 75 72 65 20 77 69 74 68 69 6e 20 74 77 6f 20 68 65 6c 6c 6f 20 69 6e 74 | ink.failure.within.two.hello.int |
10d480 | 65 72 76 61 6c 73 3b 20 6f 6e 20 77 69 72 65 6c 65 73 73 20 6c 69 6e 6b 73 2c 20 74 68 65 20 6c | ervals;.on.wireless.links,.the.l |
10d4a0 | 69 6e 6b 20 71 75 61 6c 69 74 79 20 76 61 6c 75 65 20 69 73 20 72 65 65 73 74 69 6d 61 74 65 64 | ink.quality.value.is.reestimated |
10d4c0 | 20 61 74 20 65 76 65 72 79 20 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 2e 20 54 68 65 20 64 65 | .at.every.hello.interval..The.de |
10d4e0 | 66 61 75 6c 74 20 69 73 20 34 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 | fault.is.4000.ms..This.command.s |
10d500 | 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 | pecifies.the.time.in.millisecond |
10d520 | 73 20 62 65 74 77 65 65 6e 20 74 77 6f 20 73 63 68 65 64 75 6c 65 64 20 75 70 64 61 74 65 73 2e | s.between.two.scheduled.updates. |
10d540 | 20 53 69 6e 63 65 20 42 61 62 65 6c 20 6d 61 6b 65 73 20 65 78 74 65 6e 73 69 76 65 20 75 73 65 | .Since.Babel.makes.extensive.use |
10d560 | 20 6f 66 20 74 72 69 67 67 65 72 65 64 20 75 70 64 61 74 65 73 2c 20 74 68 69 73 20 63 61 6e 20 | .of.triggered.updates,.this.can. |
10d580 | 62 65 20 73 65 74 20 74 6f 20 66 61 69 72 6c 79 20 68 69 67 68 20 76 61 6c 75 65 73 20 6f 6e 20 | be.set.to.fairly.high.values.on. |
10d5a0 | 6c 69 6e 6b 73 20 77 69 74 68 20 6c 69 74 74 6c 65 20 70 61 63 6b 65 74 20 6c 6f 73 73 2e 20 54 | links.with.little.packet.loss..T |
10d5c0 | 68 65 20 64 65 66 61 75 6c 74 20 69 73 20 32 30 30 30 30 20 6d 73 2e 00 54 68 69 73 20 63 6f 6d | he.default.is.20000.ms..This.com |
10d5e0 | 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 74 69 6d 65 6f 75 74 20 74 69 6d 65 72 | mand.specifies.the.timeout.timer |
10d600 | 2e 20 55 70 6f 6e 20 65 78 70 69 72 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 74 69 6d 65 6f 75 74 | ..Upon.expiration.of.the.timeout |
10d620 | 2c 20 74 68 65 20 72 6f 75 74 65 20 69 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 76 61 6c 69 64 3b 20 | ,.the.route.is.no.longer.valid;. |
10d640 | 68 6f 77 65 76 65 72 2c 20 69 74 20 69 73 20 72 65 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 72 | however,.it.is.retained.in.the.r |
10d660 | 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 61 20 73 68 6f 72 74 20 74 69 6d 65 20 73 6f | outing.table.for.a.short.time.so |
10d680 | 20 74 68 61 74 20 6e 65 69 67 68 62 6f 72 73 20 63 61 6e 20 62 65 20 6e 6f 74 69 66 69 65 64 20 | .that.neighbors.can.be.notified. |
10d6a0 | 74 68 61 74 20 74 68 65 20 72 6f 75 74 65 20 68 61 73 20 62 65 65 6e 20 64 72 6f 70 70 65 64 2e | that.the.route.has.been.dropped. |
10d6c0 | 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 | .The.time.range.is.5.to.21474836 |
10d6e0 | 34 37 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 31 38 30 20 73 65 63 | 47..The.default.value.is.180.sec |
10d700 | 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 74 68 65 | onds..This.command.specifies.the |
10d720 | 20 75 70 64 61 74 65 20 74 69 6d 65 72 2e 20 45 76 65 72 79 20 75 70 64 61 74 65 20 74 69 6d 65 | .update.timer..Every.update.time |
10d740 | 72 20 73 65 63 6f 6e 64 73 2c 20 74 68 65 20 52 49 50 20 70 72 6f 63 65 73 73 20 69 73 20 61 77 | r.seconds,.the.RIP.process.is.aw |
10d760 | 61 6b 65 6e 65 64 20 74 6f 20 73 65 6e 64 20 61 6e 20 75 6e 73 6f 6c 69 63 69 74 65 64 20 72 65 | akened.to.send.an.unsolicited.re |
10d780 | 73 70 6f 6e 73 65 20 6d 65 73 73 61 67 65 20 63 6f 6e 74 61 69 6e 69 6e 67 20 74 68 65 20 63 6f | sponse.message.containing.the.co |
10d7a0 | 6d 70 6c 65 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 74 6f 20 61 6c 6c 20 6e 65 69 67 | mplete.routing.table.to.all.neig |
10d7c0 | 68 62 6f 72 69 6e 67 20 52 49 50 20 72 6f 75 74 65 72 73 2e 20 54 68 65 20 74 69 6d 65 20 72 61 | hboring.RIP.routers..The.time.ra |
10d7e0 | 6e 67 65 20 69 73 20 35 20 74 6f 20 32 31 34 37 34 38 33 36 34 37 2e 20 54 68 65 20 64 65 66 61 | nge.is.5.to.2147483647..The.defa |
10d800 | 75 6c 74 20 76 61 6c 75 65 20 69 73 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 63 6f | ult.value.is.30.seconds..This.co |
10d820 | 6d 6d 61 6e 64 20 73 70 65 63 69 66 69 65 73 20 77 68 65 74 68 65 72 20 74 6f 20 70 65 72 66 6f | mmand.specifies.whether.to.perfo |
10d840 | 72 6d 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 | rm.split-horizon.on.the.interfac |
10d860 | 65 2e 20 53 70 65 63 69 66 79 69 6e 67 20 6e 6f 20 62 61 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 | e..Specifying.no.babel.split-hor |
10d880 | 69 7a 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 63 6f 72 72 65 63 74 2c 20 77 68 69 6c 65 20 62 61 | izon.is.always.correct,.while.ba |
10d8a0 | 62 65 6c 20 73 70 6c 69 74 2d 68 6f 72 69 7a 6f 6e 20 69 73 20 61 6e 20 6f 70 74 69 6d 69 73 61 | bel.split-horizon.is.an.optimisa |
10d8c0 | 74 69 6f 6e 20 74 68 61 74 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 6f 6e | tion.that.should.only.be.used.on |
10d8e0 | 20 73 79 6d 6d 65 74 72 69 63 20 61 6e 64 20 74 72 61 6e 73 69 74 69 76 65 20 28 77 69 72 65 64 | .symmetric.and.transitive.(wired |
10d900 | 29 20 6e 65 74 77 6f 72 6b 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 65 63 69 66 79 | ).networks..This.command.specify |
10d920 | 20 74 68 61 74 20 4f 53 50 46 20 70 61 63 6b 65 74 73 20 6d 75 73 74 20 62 65 20 61 75 74 68 65 | .that.OSPF.packets.must.be.authe |
10d940 | 6e 74 69 63 61 74 65 64 20 77 69 74 68 20 4d 44 35 20 48 4d 41 43 73 20 77 69 74 68 69 6e 20 74 | nticated.with.MD5.HMACs.within.t |
10d960 | 68 65 20 67 69 76 65 6e 20 61 72 65 61 2e 20 4b 65 79 69 6e 67 20 6d 61 74 65 72 69 61 6c 20 6d | he.given.area..Keying.material.m |
10d980 | 75 73 74 20 61 6c 73 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 20 70 65 72 2d | ust.also.be.configured.on.a.per- |
10d9a0 | 69 6e 74 65 72 66 61 63 65 20 62 61 73 69 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 70 | interface.basis..This.command.sp |
10d9c0 | 65 63 69 66 79 73 20 74 68 61 74 20 4d 44 35 20 48 4d 41 43 20 61 75 74 68 65 6e 74 69 63 61 74 | ecifys.that.MD5.HMAC.authenticat |
10d9e0 | 69 6f 6e 20 6d 75 73 74 20 62 65 20 75 73 65 64 20 6f 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 | ion.must.be.used.on.this.interfa |
10da00 | 63 65 2e 20 49 74 20 73 65 74 73 20 4f 53 50 46 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | ce..It.sets.OSPF.authentication. |
10da20 | 6b 65 79 20 74 6f 20 61 20 63 72 79 70 74 6f 67 72 61 70 68 69 63 20 70 61 73 73 77 6f 72 64 2e | key.to.a.cryptographic.password. |
10da40 | 20 4b 65 79 2d 69 64 20 69 64 65 6e 74 69 66 69 65 73 20 73 65 63 72 65 74 20 6b 65 79 20 75 73 | .Key-id.identifies.secret.key.us |
10da60 | 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 6d 65 73 73 61 67 65 20 64 69 67 65 73 74 2e | ed.to.create.the.message.digest. |
10da80 | 20 54 68 69 73 20 49 44 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c | .This.ID.is.part.of.the.protocol |
10daa0 | 20 61 6e 64 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 72 | .and.must.be.consistent.across.r |
10dac0 | 6f 75 74 65 72 73 20 6f 6e 20 61 20 6c 69 6e 6b 2e 20 54 68 65 20 6b 65 79 20 63 61 6e 20 62 65 | outers.on.a.link..The.key.can.be |
10dae0 | 20 6c 6f 6e 67 20 75 70 20 74 6f 20 31 36 20 63 68 61 72 73 20 28 6c 61 72 67 65 72 20 73 74 72 | .long.up.to.16.chars.(larger.str |
10db00 | 69 6e 67 73 20 77 69 6c 6c 20 62 65 20 74 72 75 6e 63 61 74 65 64 29 2c 20 61 6e 64 20 69 73 20 | ings.will.be.truncated),.and.is. |
10db20 | 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 67 69 76 65 6e 20 6b 65 79 2d 69 64 | associated.with.the.given.key-id |
10db40 | 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 72 61 20 | ..This.command.summarizes.intra. |
10db60 | 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 61 20 69 | area.paths.from.specified.area.i |
10db80 | 6e 74 6f 20 6f 6e 65 20 54 79 70 65 2d 33 20 49 6e 74 65 72 2d 41 72 65 61 20 50 72 65 66 69 78 | nto.one.Type-3.Inter-Area.Prefix |
10dba0 | 20 4c 53 41 20 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 | .LSA.announced.to.other.areas..T |
10dbc0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 | his.command.can.be.used.only.in. |
10dbe0 | 41 42 52 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 73 75 6d 6d 61 72 69 7a 65 73 20 69 6e 74 | ABR..This.command.summarizes.int |
10dc00 | 72 61 20 61 72 65 61 20 70 61 74 68 73 20 66 72 6f 6d 20 73 70 65 63 69 66 69 65 64 20 61 72 65 | ra.area.paths.from.specified.are |
10dc20 | 61 20 69 6e 74 6f 20 6f 6e 65 20 73 75 6d 6d 61 72 79 2d 4c 53 41 20 28 54 79 70 65 2d 33 29 20 | a.into.one.summary-LSA.(Type-3). |
10dc40 | 61 6e 6e 6f 75 6e 63 65 64 20 74 6f 20 6f 74 68 65 72 20 61 72 65 61 73 2e 20 54 68 69 73 20 63 | announced.to.other.areas..This.c |
10dc60 | 6f 6d 6d 61 6e 64 20 63 61 6e 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 69 6e 20 41 42 52 20 61 | ommand.can.be.used.only.in.ABR.a |
10dc80 | 6e 64 20 4f 4e 4c 59 20 72 6f 75 74 65 72 2d 4c 53 41 73 20 28 54 79 70 65 2d 31 29 20 61 6e 64 | nd.ONLY.router-LSAs.(Type-1).and |
10dca0 | 20 6e 65 74 77 6f 72 6b 2d 4c 53 41 73 20 28 54 79 70 65 2d 32 29 20 28 69 2e 65 2e 20 4c 53 41 | .network-LSAs.(Type-2).(i.e..LSA |
10dcc0 | 73 20 77 69 74 68 20 73 63 6f 70 65 20 61 72 65 61 29 20 63 61 6e 20 62 65 20 73 75 6d 6d 61 72 | s.with.scope.area).can.be.summar |
10dce0 | 69 7a 65 64 2e 20 41 53 2d 65 78 74 65 72 6e 61 6c 2d 4c 53 41 73 20 28 54 79 70 65 2d 35 29 20 | ized..AS-external-LSAs.(Type-5). |
10dd00 | 63 61 6e e2 80 99 74 20 62 65 20 73 75 6d 6d 61 72 69 7a 65 64 20 2d 20 74 68 65 69 72 20 73 63 | can...t.be.summarized.-.their.sc |
10dd20 | 6f 70 65 20 69 73 20 41 53 2e 20 54 68 65 20 6f 70 74 69 6f 6e 61 6c 20 61 72 67 75 6d 65 6e 74 | ope.is.AS..The.optional.argument |
10dd40 | 20 3a 63 66 67 63 6d 64 3a 60 63 6f 73 74 60 20 73 70 65 63 69 66 69 65 73 20 74 68 65 20 61 67 | .:cfgcmd:`cost`.specifies.the.ag |
10dd60 | 67 72 65 67 61 74 65 64 20 6c 69 6e 6b 20 6d 65 74 72 69 63 2e 20 54 68 65 20 6d 65 74 72 69 63 | gregated.link.metric..The.metric |
10dd80 | 20 72 61 6e 67 65 20 69 73 20 30 20 74 6f 20 31 36 37 37 37 32 31 35 2e 00 54 68 69 73 20 63 6f | .range.is.0.to.16777215..This.co |
10dda0 | 6d 6d 61 6e 64 20 74 6f 20 65 6e 73 75 72 65 20 6e 6f 74 20 61 64 76 65 72 74 69 73 65 20 74 68 | mmand.to.ensure.not.advertise.th |
10ddc0 | 65 20 73 75 6d 6d 61 72 79 20 6c 73 61 20 66 6f 72 20 74 68 65 20 6d 61 74 63 68 65 64 20 65 78 | e.summary.lsa.for.the.matched.ex |
10dde0 | 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 75 73 65 73 20 74 | ternal.LSAs..This.command.uses.t |
10de00 | 6f 20 63 6c 65 61 72 20 42 47 50 20 72 6f 75 74 65 20 64 61 6d 70 65 6e 69 6e 67 20 69 6e 66 6f | o.clear.BGP.route.dampening.info |
10de20 | 72 6d 61 74 69 6f 6e 20 61 6e 64 20 74 6f 20 75 6e 73 75 70 70 72 65 73 73 20 73 75 70 70 72 65 | rmation.and.to.unsuppress.suppre |
10de40 | 73 73 65 64 20 72 6f 75 74 65 73 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 6e | ssed.routes..This.command.was.in |
10de60 | 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 61 73 20 70 72 | troduced.in.VyOS.1.4.-.it.was.pr |
10de80 | 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 | eviously.called:.``set.firewall. |
10dea0 | 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 2d | options.interface.<name>.adjust- |
10dec0 | 6d 73 73 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 61 73 20 69 | mss.<value>``.This.command.was.i |
10dee0 | 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 56 79 4f 53 20 31 2e 34 20 2d 20 69 74 20 77 61 73 20 70 | ntroduced.in.VyOS.1.4.-.it.was.p |
10df00 | 72 65 76 69 6f 75 73 6c 79 20 63 61 6c 6c 65 64 3a 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c | reviously.called:.``set.firewall |
10df20 | 20 6f 70 74 69 6f 6e 73 20 69 6e 74 65 72 66 61 63 65 20 3c 6e 61 6d 65 3e 20 61 64 6a 75 73 74 | .options.interface.<name>.adjust |
10df40 | 2d 6d 73 73 36 20 3c 76 61 6c 75 65 3e 60 60 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c | -mss6.<value>``.This.command.wil |
10df60 | 6c 20 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c 64 20 64 6f 77 6e 20 76 61 6c 75 65 20 66 6f 72 | l.change.the.hold.down.value.for |
10df80 | 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 | .IGP-LDP.synchronization.during. |
10dfa0 | 63 6f 6e 76 65 72 67 65 6e 63 65 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 | convergence/interface.flap.event |
10dfc0 | 73 2c 20 62 75 74 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 6c 79 2e 00 | s,.but.for.this.interface.only.. |
10dfe0 | 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 68 61 6e 67 65 20 74 68 65 20 68 6f 6c | This.command.will.change.the.hol |
10e000 | 64 20 64 6f 77 6e 20 76 61 6c 75 65 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 49 47 50 2d 4c 44 | d.down.value.globally.for.IGP-LD |
10e020 | 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 63 6f 6e 76 65 72 67 | P.synchronization.during.converg |
10e040 | 65 6e 63 65 2f 69 6e 74 65 72 66 61 63 65 20 66 6c 61 70 20 65 76 65 6e 74 73 2e 00 54 68 69 73 | ence/interface.flap.events..This |
10e060 | 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 61 20 74 69 65 2d 62 72 | .command.will.configure.a.tie-br |
10e080 | 65 61 6b 65 72 20 66 6f 72 20 6d 75 6c 74 69 70 6c 65 20 6c 6f 63 61 6c 20 4c 46 41 20 62 61 63 | eaker.for.multiple.local.LFA.bac |
10e0a0 | 6b 75 70 73 2e 20 54 68 65 20 6c 6f 77 65 72 20 69 6e 64 65 78 20 6e 75 6d 62 65 72 73 20 77 69 | kups..The.lower.index.numbers.wi |
10e0c0 | 6c 6c 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 66 69 72 73 74 2e 00 54 68 69 73 20 63 6f 6d 6d | ll.be.processed.first..This.comm |
10e0e0 | 61 6e 64 20 77 69 6c 6c 20 65 6e 61 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e | and.will.enable.IGP-LDP.synchron |
10e100 | 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 61 6c 6c 79 20 66 6f 72 20 49 53 49 53 2e 20 54 68 69 73 20 | ization.globally.for.ISIS..This. |
10e120 | 72 65 71 75 69 72 65 73 20 66 6f 72 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 | requires.for.LDP.to.be.functiona |
10e140 | 6c 2e 20 54 68 69 73 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 | l..This.is.described.in.:rfc:`54 |
10e160 | 34 33 60 2e 20 42 79 20 64 65 66 61 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 6f | 43`..By.default.all.interfaces.o |
10e180 | 70 65 72 61 74 69 6f 6e 61 6c 20 69 6e 20 49 53 2d 49 53 20 61 72 65 20 65 6e 61 62 6c 65 64 20 | perational.in.IS-IS.are.enabled. |
10e1a0 | 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 | for.synchronization..Loopbacks.a |
10e1c0 | 72 65 20 65 78 65 6d 70 74 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 65 6e 61 | re.exempt..This.command.will.ena |
10e1e0 | 62 6c 65 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 67 6c 6f 62 | ble.IGP-LDP.synchronization.glob |
10e200 | 61 6c 6c 79 20 66 6f 72 20 4f 53 50 46 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 66 6f 72 | ally.for.OSPF..This.requires.for |
10e220 | 20 4c 44 50 20 74 6f 20 62 65 20 66 75 6e 63 74 69 6f 6e 61 6c 2e 20 54 68 69 73 20 69 73 20 64 | .LDP.to.be.functional..This.is.d |
10e240 | 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 35 34 34 33 60 2e 20 42 79 20 64 65 66 61 | escribed.in.:rfc:`5443`..By.defa |
10e260 | 75 6c 74 20 61 6c 6c 20 69 6e 74 65 72 66 61 63 65 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 69 | ult.all.interfaces.operational.i |
10e280 | 6e 20 4f 53 50 46 20 61 72 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 | n.OSPF.are.enabled.for.synchroni |
10e2a0 | 7a 61 74 69 6f 6e 2e 20 4c 6f 6f 70 62 61 63 6b 73 20 61 72 65 20 65 78 65 6d 70 74 2e 00 54 68 | zation..Loopbacks.are.exempt..Th |
10e2c0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 | is.command.will.generate.a.defau |
10e2e0 | 6c 74 2d 72 6f 75 74 65 20 69 6e 20 4c 31 20 64 61 74 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f | lt-route.in.L1.database..This.co |
10e300 | 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 64 65 66 61 75 6c 74 2d 72 6f | mmand.will.generate.a.default-ro |
10e320 | 75 74 65 20 69 6e 20 4c 32 20 64 61 74 61 62 61 73 65 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 | ute.in.L2.database..This.command |
10e340 | 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 6c 65 | .will.give.an.overview.of.a.rule |
10e360 | 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 00 54 68 69 73 20 63 6f 6d 6d 61 | .in.a.single.rule-set.This.comma |
10e380 | 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 72 75 | nd.will.give.an.overview.of.a.ru |
10e3a0 | 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2c 20 70 6c 75 73 20 69 6e | le.in.a.single.rule-set,.plus.in |
10e3c0 | 66 6f 72 6d 61 74 69 6f 6e 20 66 6f 72 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 2e 00 54 68 | formation.for.default.action..Th |
10e3e0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 69 65 77 | is.command.will.give.an.overview |
10e400 | 20 6f 66 20 61 20 72 75 6c 65 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e | .of.a.rule.in.a.single.rule-set. |
10e420 | 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 67 69 76 65 20 61 6e 20 6f 76 65 72 76 | .This.command.will.give.an.overv |
10e440 | 69 65 77 20 6f 66 20 61 20 73 69 6e 67 6c 65 20 72 75 6c 65 2d 73 65 74 2e 00 54 68 69 73 20 63 | iew.of.a.single.rule-set..This.c |
10e460 | 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 6c 69 6d 69 74 20 4c 46 41 20 62 61 63 6b 75 70 20 63 6f 6d | ommand.will.limit.LFA.backup.com |
10e480 | 70 75 74 61 74 69 6f 6e 20 75 70 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 70 72 65 | putation.up.to.the.specified.pre |
10e4a0 | 66 69 78 20 70 72 69 6f 72 69 74 79 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 20 77 6f 75 6c 64 | fix.priority..This.command.would |
10e4c0 | 20 61 6c 6c 6f 77 20 74 68 65 20 64 79 6e 61 6d 69 63 20 75 70 64 61 74 65 20 6f 66 20 63 61 70 | .allow.the.dynamic.update.of.cap |
10e4e0 | 61 62 69 6c 69 74 69 65 73 20 6f 76 65 72 20 61 6e 20 65 73 74 61 62 6c 69 73 68 65 64 20 42 47 | abilities.over.an.established.BG |
10e500 | 50 20 73 65 73 73 69 6f 6e 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 63 72 65 61 74 65 73 | P.session..This.commands.creates |
10e520 | 20 61 20 62 72 69 64 67 65 20 74 68 61 74 20 69 73 20 75 73 65 64 20 74 6f 20 62 69 6e 64 20 74 | .a.bridge.that.is.used.to.bind.t |
10e540 | 72 61 66 66 69 63 20 6f 6e 20 65 74 68 31 20 76 6c 61 6e 20 32 34 31 20 77 69 74 68 20 74 68 65 | raffic.on.eth1.vlan.241.with.the |
10e560 | 20 76 78 6c 61 6e 32 34 31 2d 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 49 50 20 61 64 64 72 | .vxlan241-interface..The.IP.addr |
10e580 | 65 73 73 20 69 73 20 6e 6f 74 20 72 65 71 75 69 72 65 64 2e 20 49 74 20 6d 61 79 20 68 6f 77 65 | ess.is.not.required..It.may.howe |
10e5a0 | 76 65 72 20 62 65 20 75 73 65 64 20 61 73 20 61 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 | ver.be.used.as.a.default.gateway |
10e5c0 | 20 66 6f 72 20 65 61 63 68 20 4c 65 61 66 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 64 65 76 69 | .for.each.Leaf.which.allows.devi |
10e5e0 | 63 65 73 20 6f 6e 20 74 68 65 20 76 6c 61 6e 20 74 6f 20 72 65 61 63 68 20 6f 74 68 65 72 20 73 | ces.on.the.vlan.to.reach.other.s |
10e600 | 75 62 6e 65 74 73 2e 20 54 68 69 73 20 72 65 71 75 69 72 65 73 20 74 68 61 74 20 74 68 65 20 73 | ubnets..This.requires.that.the.s |
10e620 | 75 62 6e 65 74 73 20 61 72 65 20 72 65 64 69 73 74 72 69 62 75 74 65 64 20 62 79 20 4f 53 50 46 | ubnets.are.redistributed.by.OSPF |
10e640 | 20 73 6f 20 74 68 61 74 20 74 68 65 20 53 70 69 6e 65 20 77 69 6c 6c 20 6c 65 61 72 6e 20 68 6f | .so.that.the.Spine.will.learn.ho |
10e660 | 77 20 74 6f 20 72 65 61 63 68 20 69 74 2e 20 54 6f 20 64 6f 20 74 68 69 73 20 79 6f 75 20 6e 65 | w.to.reach.it..To.do.this.you.ne |
10e680 | 65 64 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 4f 53 50 46 20 6e 65 74 77 6f 72 6b 20 66 72 | ed.to.change.the.OSPF.network.fr |
10e6a0 | 6f 6d 20 27 31 30 2e 30 2e 30 2e 30 2f 38 27 20 74 6f 20 27 30 2e 30 2e 30 2e 30 2f 30 27 20 74 | om.'10.0.0.0/8'.to.'0.0.0.0/0'.t |
10e6c0 | 6f 20 61 6c 6c 6f 77 20 31 37 32 2e 31 36 2f 31 32 2d 6e 65 74 77 6f 72 6b 73 20 74 6f 20 62 65 | o.allow.172.16/12-networks.to.be |
10e6e0 | 20 61 64 76 65 72 74 69 73 65 64 2e 00 54 68 69 73 20 63 6f 6d 6d 61 6e 64 73 20 73 70 65 63 69 | .advertised..This.commands.speci |
10e700 | 66 69 65 73 20 74 68 65 20 46 69 6e 69 74 65 20 53 74 61 74 65 20 4d 61 63 68 69 6e 65 20 28 46 | fies.the.Finite.State.Machine.(F |
10e720 | 53 4d 29 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 74 69 6d 69 | SM).intended.to.control.the.timi |
10e740 | 6e 67 20 6f 66 20 74 68 65 20 65 78 65 63 75 74 69 6f 6e 20 6f 66 20 53 50 46 20 63 61 6c 63 75 | ng.of.the.execution.of.SPF.calcu |
10e760 | 6c 61 74 69 6f 6e 73 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 49 47 50 20 65 76 65 6e 74 | lations.in.response.to.IGP.event |
10e780 | 73 2e 20 54 68 65 20 70 72 6f 63 65 73 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | s..The.process.described.in.:rfc |
10e7a0 | 3a 60 38 34 30 35 60 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 61 62 | :`8405`..This.configuration.enab |
10e7c0 | 6c 65 73 20 48 54 54 50 20 68 65 61 6c 74 68 20 63 68 65 63 6b 73 20 6f 6e 20 62 61 63 6b 65 6e | les.HTTP.health.checks.on.backen |
10e7e0 | 64 20 73 65 72 76 65 72 73 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 6e | d.servers..This.configuration.en |
10e800 | 61 62 6c 65 73 20 74 68 65 20 54 43 50 20 72 65 76 65 72 73 65 20 70 72 6f 78 79 20 66 6f 72 20 | ables.the.TCP.reverse.proxy.for. |
10e820 | 74 68 65 20 22 6d 79 2d 74 63 70 2d 61 70 69 22 20 73 65 72 76 69 63 65 2e 20 49 6e 63 6f 6d 69 | the."my-tcp-api".service..Incomi |
10e840 | 6e 67 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 6f 6e 20 70 6f 72 74 20 38 38 38 38 20 | ng.TCP.connections.on.port.8888. |
10e860 | 77 69 6c 6c 20 62 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 61 63 72 6f 73 73 20 74 68 65 | will.be.load.balanced.across.the |
10e880 | 20 62 61 63 6b 65 6e 64 20 73 65 72 76 65 72 73 20 28 73 72 76 30 31 20 61 6e 64 20 73 72 76 30 | .backend.servers.(srv01.and.srv0 |
10e8a0 | 32 29 20 75 73 69 6e 67 20 74 68 65 20 72 6f 75 6e 64 2d 72 6f 62 69 6e 20 6c 6f 61 64 2d 62 61 | 2).using.the.round-robin.load-ba |
10e8c0 | 6c 61 6e 63 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 2e 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 | lancing.algorithm..This.configur |
10e8e0 | 61 74 69 6f 6e 20 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 74 20 38 30 20 61 6e 64 20 72 65 64 69 | ation.listen.on.port.80.and.redi |
10e900 | 72 65 63 74 20 69 6e 63 6f 6d 69 6e 67 20 72 65 71 75 65 73 74 73 20 74 6f 20 48 54 54 50 53 3a | rect.incoming.requests.to.HTTPS: |
10e920 | 00 54 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 6f 64 69 66 69 65 73 20 74 68 65 | .This.configuration.modifies.the |
10e940 | 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 73 74 61 74 65 6d 65 | .behavior.of.the.network.stateme |
10e960 | 6e 74 2e 20 49 66 20 79 6f 75 20 68 61 76 65 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 | nt..If.you.have.this.configured. |
10e980 | 74 68 65 20 75 6e 64 65 72 6c 79 69 6e 67 20 6e 65 74 77 6f 72 6b 20 6d 75 73 74 20 65 78 69 73 | the.underlying.network.must.exis |
10e9a0 | 74 20 69 6e 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 63 6f 6e | t.in.the.routing.table..This.con |
10e9c0 | 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 69 73 20 72 65 71 75 69 72 65 64 | figuration.parameter.is.required |
10e9e0 | 20 61 6e 64 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 20 74 6f 20 65 61 63 68 20 73 75 62 6e | .and.must.be.unique.to.each.subn |
10ea00 | 65 74 2e 20 49 74 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 6d 61 70 20 73 75 62 6e 65 74 | et..It.is.required.to.map.subnet |
10ea20 | 73 20 74 6f 20 6c 65 61 73 65 20 66 69 6c 65 20 65 6e 74 72 69 65 73 2e 00 54 68 69 73 20 63 6f | s.to.lease.file.entries..This.co |
10ea40 | 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 74 68 65 20 44 | nfiguration.parameter.lets.the.D |
10ea60 | 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 44 48 43 50 20 72 65 | HCP.server.to.listen.for.DHCP.re |
10ea80 | 71 75 65 73 74 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 | quests.sent.to.the.specified.add |
10eaa0 | 72 65 73 73 2c 20 69 74 20 69 73 20 6f 6e 6c 79 20 72 65 61 6c 69 73 74 69 63 61 6c 6c 79 20 75 | ress,.it.is.only.realistically.u |
10eac0 | 73 65 66 75 6c 20 66 6f 72 20 61 20 73 65 72 76 65 72 20 77 68 6f 73 65 20 6f 6e 6c 79 20 63 6c | seful.for.a.server.whose.only.cl |
10eae0 | 69 65 6e 74 73 20 61 72 65 20 72 65 61 63 68 65 64 20 76 69 61 20 75 6e 69 63 61 73 74 73 2c 20 | ients.are.reached.via.unicasts,. |
10eb00 | 73 75 63 68 20 61 73 20 76 69 61 20 44 48 43 50 20 72 65 6c 61 79 20 61 67 65 6e 74 73 2e 00 54 | such.as.via.DHCP.relay.agents..T |
10eb20 | 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 6c 65 74 73 | his.configuration.parameter.lets |
10eb40 | 20 79 6f 75 20 73 70 65 63 69 66 79 20 61 20 76 65 6e 64 6f 72 2d 6f 70 74 69 6f 6e 20 66 6f 72 | .you.specify.a.vendor-option.for |
10eb60 | 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e | .the.entire.shared.network.defin |
10eb80 | 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 65 72 69 74 20 | ition..All.subnets.will.inherit. |
10eba0 | 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 6e 6f 74 20 73 | this.configuration.item.if.not.s |
10ebc0 | 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 41 6e 20 65 78 61 6d 70 6c 65 20 66 6f 72 | pecified.locally..An.example.for |
10ebe0 | 20 55 62 69 71 75 69 74 69 20 69 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 54 68 69 73 20 63 | .Ubiquiti.is.shown.below:.This.c |
10ec00 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 6c 65 74 73 20 79 6f 75 20 | onfiguration.parameter.lets.you. |
10ec20 | 73 70 65 63 69 66 79 20 61 20 76 65 6e 64 6f 72 2d 6f 70 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 | specify.a.vendor-option.for.the. |
10ec40 | 73 75 62 6e 65 74 20 73 70 65 63 69 66 69 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 73 68 61 72 | subnet.specified.within.the.shar |
10ec60 | 65 64 20 6e 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6e 20 65 78 61 6d 70 6c | ed.network.definition..An.exampl |
10ec80 | 65 20 66 6f 72 20 55 62 69 71 75 69 74 69 20 69 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 54 | e.for.Ubiquiti.is.shown.below:.T |
10eca0 | 68 69 73 20 63 6f 75 6c 64 20 62 65 20 68 65 6c 70 66 75 6c 20 69 66 20 79 6f 75 20 77 61 6e 74 | his.could.be.helpful.if.you.want |
10ecc0 | 20 74 6f 20 74 65 73 74 20 68 6f 77 20 61 6e 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 62 65 68 61 | .to.test.how.an.application.beha |
10ece0 | 76 65 73 20 75 6e 64 65 72 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 64 69 74 | ves.under.certain.network.condit |
10ed00 | 69 6f 6e 73 2e 00 54 68 69 73 20 63 72 65 61 74 65 73 20 61 20 72 6f 75 74 65 20 70 6f 6c 69 63 | ions..This.creates.a.route.polic |
10ed20 | 79 20 63 61 6c 6c 65 64 20 46 49 4c 54 45 52 2d 57 45 42 20 77 69 74 68 20 6f 6e 65 20 72 75 6c | y.called.FILTER-WEB.with.one.rul |
10ed40 | 65 20 74 6f 20 73 65 74 20 74 68 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 66 6f 72 20 6d | e.to.set.the.routing.table.for.m |
10ed60 | 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 28 54 43 50 20 70 6f 72 74 20 38 30 29 20 74 6f | atching.traffic.(TCP.port.80).to |
10ed80 | 20 74 61 62 6c 65 20 49 44 20 31 30 30 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 64 65 66 | .table.ID.100.instead.of.the.def |
10eda0 | 61 75 6c 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 | ault.routing.table..This.default |
10edc0 | 73 20 74 6f 20 31 30 30 30 30 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 31 38 31 | s.to.10000..This.defaults.to.181 |
10ede0 | 32 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 32 30 30 37 2e 00 54 68 69 73 20 64 | 2..This.defaults.to.2007..This.d |
10ee00 | 65 66 61 75 6c 74 73 20 74 6f 20 33 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 66 61 | efaults.to.30.seconds..This.defa |
10ee20 | 75 6c 74 73 20 74 6f 20 33 30 30 20 73 65 63 6f 6e 64 73 2e 00 54 68 69 73 20 64 65 66 61 75 6c | ults.to.300.seconds..This.defaul |
10ee40 | 74 73 20 74 6f 20 34 39 2e 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 35 2e 00 54 68 | ts.to.49..This.defaults.to.5..Th |
10ee60 | 69 73 20 64 65 66 61 75 6c 74 73 20 74 6f 20 55 44 50 00 54 68 69 73 20 64 65 66 61 75 6c 74 73 | is.defaults.to.UDP.This.defaults |
10ee80 | 20 74 6f 20 62 6f 74 68 20 31 2e 32 20 61 6e 64 20 31 2e 33 2e 00 54 68 69 73 20 64 65 66 61 75 | .to.both.1.2.and.1.3..This.defau |
10eea0 | 6c 74 73 20 74 6f 20 68 74 74 70 73 3a 2f 2f 61 63 6d 65 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 | lts.to.https://acme-v02.api.lets |
10eec0 | 65 6e 63 72 79 70 74 2e 6f 72 67 2f 64 69 72 65 63 74 6f 72 79 00 54 68 69 73 20 64 65 66 61 75 | encrypt.org/directory.This.defau |
10eee0 | 6c 74 73 20 74 6f 20 70 68 79 30 2e 00 54 68 69 73 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 | lts.to.phy0..This.depends.on.the |
10ef00 | 20 64 72 69 76 65 72 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 6e 64 20 6d 61 79 20 6e 6f 74 | .driver.capabilities.and.may.not |
10ef20 | 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 77 69 74 68 20 61 6c 6c 20 64 72 69 76 65 72 73 2e 00 | .be.available.with.all.drivers.. |
10ef40 | 54 68 69 73 20 64 69 61 62 6c 65 20 74 68 65 20 65 78 74 65 72 6e 61 6c 20 63 61 63 68 65 20 61 | This.diable.the.external.cache.a |
10ef60 | 6e 64 20 64 69 72 65 63 74 6c 79 20 69 6e 6a 65 63 74 73 20 74 68 65 20 66 6c 6f 77 2d 73 74 61 | nd.directly.injects.the.flow-sta |
10ef80 | 74 65 73 20 69 6e 74 6f 20 74 68 65 20 69 6e 2d 6b 65 72 6e 65 6c 20 43 6f 6e 6e 65 63 74 69 6f | tes.into.the.in-kernel.Connectio |
10efa0 | 6e 20 54 72 61 63 6b 69 6e 67 20 53 79 73 74 65 6d 20 6f 66 20 74 68 65 20 62 61 63 6b 75 70 20 | n.Tracking.System.of.the.backup. |
10efc0 | 66 69 72 65 77 61 6c 6c 2e 00 54 68 69 73 20 64 69 61 67 72 61 6d 20 63 6f 72 72 65 73 70 6f 6e | firewall..This.diagram.correspon |
10efe0 | 64 73 20 77 69 74 68 20 74 68 65 20 65 78 61 6d 70 6c 65 20 73 69 74 65 20 74 6f 20 73 69 74 65 | ds.with.the.example.site.to.site |
10f000 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 62 65 6c 6f 77 2e 00 54 68 69 73 20 65 6e 61 62 6c | .configuration.below..This.enabl |
10f020 | 65 73 20 3a 72 66 63 3a 60 33 31 33 37 60 20 73 75 70 70 6f 72 74 2c 20 77 68 65 72 65 20 74 68 | es.:rfc:`3137`.support,.where.th |
10f040 | 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 20 64 65 73 63 72 69 62 65 73 20 69 74 73 20 74 72 61 | e.OSPF.process.describes.its.tra |
10f060 | 6e 73 69 74 20 6c 69 6e 6b 73 20 69 6e 20 69 74 73 20 72 6f 75 74 65 72 2d 4c 53 41 20 61 73 20 | nsit.links.in.its.router-LSA.as. |
10f080 | 68 61 76 69 6e 67 20 69 6e 66 69 6e 69 74 65 20 64 69 73 74 61 6e 63 65 20 73 6f 20 74 68 61 74 | having.infinite.distance.so.that |
10f0a0 | 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 20 77 69 6c 6c 20 61 76 6f 69 64 20 63 61 6c 63 75 6c | .other.routers.will.avoid.calcul |
10f0c0 | 61 74 69 6e 67 20 74 72 61 6e 73 69 74 20 70 61 74 68 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 | ating.transit.paths.through.the. |
10f0e0 | 72 6f 75 74 65 72 20 77 68 69 6c 65 20 73 74 69 6c 6c 20 62 65 69 6e 67 20 61 62 6c 65 20 74 6f | router.while.still.being.able.to |
10f100 | 20 72 65 61 63 68 20 6e 65 74 77 6f 72 6b 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 72 6f 75 74 | .reach.networks.through.the.rout |
10f120 | 65 72 2e 00 54 68 69 73 20 65 6e 61 62 6c 65 73 20 74 68 65 20 67 72 65 65 6e 66 69 65 6c 64 20 | er..This.enables.the.greenfield. |
10f140 | 6f 70 74 69 6f 6e 20 77 68 69 63 68 20 73 65 74 73 20 74 68 65 20 60 60 5b 47 46 5d 60 60 20 6f | option.which.sets.the.``[GF]``.o |
10f160 | 70 74 69 6f 6e 00 54 68 69 73 20 65 73 74 61 62 6c 69 73 68 65 73 20 6f 75 72 20 50 6f 72 74 20 | ption.This.establishes.our.Port. |
10f180 | 46 6f 72 77 61 72 64 20 72 75 6c 65 2c 20 62 75 74 20 69 66 20 77 65 20 63 72 65 61 74 65 64 20 | Forward.rule,.but.if.we.created. |
10f1a0 | 61 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 69 74 20 77 69 6c 6c 20 6c 69 6b 65 6c 79 | a.firewall.policy.it.will.likely |
10f1c0 | 20 62 6c 6f 63 6b 20 74 68 65 20 74 72 61 66 66 69 63 2e 00 54 68 69 73 20 65 78 61 6d 70 6c 65 | .block.the.traffic..This.example |
10f1e0 | 20 73 68 6f 77 73 20 68 6f 77 20 74 6f 20 74 61 72 67 65 74 20 61 6e 20 4d 53 53 20 63 6c 61 6d | .shows.how.to.target.an.MSS.clam |
10f200 | 70 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 74 6f 20 31 33 36 30 20 62 79 74 65 73 29 | p.(in.our.example.to.1360.bytes) |
10f220 | 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 2e 00 54 | .to.a.specific.destination.IP..T |
10f240 | 68 69 73 20 65 78 61 6d 70 6c 65 20 75 73 65 73 20 43 41 43 65 72 74 20 61 73 20 63 65 72 74 69 | his.example.uses.CACert.as.certi |
10f260 | 66 69 63 61 74 65 20 61 75 74 68 6f 72 69 74 79 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 63 | ficate.authority..This.feature.c |
10f280 | 6c 6f 73 65 6c 79 20 77 6f 72 6b 73 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 3a 72 65 66 3a | losely.works.together.with.:ref: |
10f2a0 | 60 70 6b 69 60 20 73 75 62 73 79 73 74 65 6d 20 61 73 20 79 6f 75 20 72 65 71 75 69 72 65 64 20 | `pki`.subsystem.as.you.required. |
10f2c0 | 61 20 78 35 30 39 20 63 65 72 74 69 66 69 63 61 74 65 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 | a.x509.certificate..This.feature |
10f2e0 | 20 73 65 72 76 65 73 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 74 68 69 67 68 74 65 6e 69 | .serves.the.purpose.of.thighteni |
10f300 | 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 76 61 6c 69 64 61 74 69 6f 6e 20 72 65 71 75 69 72 65 | ng.the.packet.validation.require |
10f320 | 6d 65 6e 74 73 20 74 6f 20 61 76 6f 69 64 20 72 65 63 65 69 76 69 6e 67 20 42 46 44 20 63 6f 6e | ments.to.avoid.receiving.BFD.con |
10f340 | 74 72 6f 6c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 74 68 65 72 20 73 65 73 73 69 6f 6e 73 | trol.packets.from.other.sessions |
10f360 | 2e 00 54 68 69 73 20 66 65 61 74 75 72 65 20 73 75 6d 6d 61 72 69 73 65 73 20 6f 72 69 67 69 6e | ..This.feature.summarises.origin |
10f380 | 61 74 65 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 20 28 54 79 70 65 2d 35 20 61 6e 64 20 54 | ated.external.LSAs.(Type-5.and.T |
10f3a0 | 79 70 65 2d 37 29 2e 20 53 75 6d 6d 61 72 79 20 52 6f 75 74 65 20 77 69 6c 6c 20 62 65 20 6f 72 | ype-7)..Summary.Route.will.be.or |
10f3c0 | 69 67 69 6e 61 74 65 64 20 6f 6e 2d 62 65 68 61 6c 66 20 6f 66 20 61 6c 6c 20 6d 61 74 63 68 65 | iginated.on-behalf.of.all.matche |
10f3e0 | 64 20 65 78 74 65 72 6e 61 6c 20 4c 53 41 73 2e 00 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 61 6c | d.external.LSAs..This.functional |
10f400 | 69 74 79 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 20 61 64 64 69 6e 67 20 74 68 65 20 | ity.is.controlled.by.adding.the. |
10f420 | 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 66 75 | following.configuration:.This.fu |
10f440 | 6e 63 74 69 6f 6e 73 20 66 6f 72 20 62 6f 74 68 20 69 6e 64 69 76 69 64 75 61 6c 20 61 64 64 72 | nctions.for.both.individual.addr |
10f460 | 65 73 73 65 73 20 61 6e 64 20 61 64 64 72 65 73 73 20 67 72 6f 75 70 73 2e 00 54 68 69 73 20 67 | esses.and.address.groups..This.g |
10f480 | 69 76 65 73 20 75 73 20 49 47 50 2d 4c 44 50 20 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 | ives.us.IGP-LDP.synchronization. |
10f4a0 | 66 6f 72 20 61 6c 6c 20 6e 6f 6e 2d 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 | for.all.non-loopback.interfaces. |
10f4c0 | 77 69 74 68 20 61 20 68 6f 6c 64 64 6f 77 6e 20 74 69 6d 65 72 20 6f 66 20 7a 65 72 6f 20 73 65 | with.a.holddown.timer.of.zero.se |
10f4e0 | 63 6f 6e 64 73 3a 00 54 68 69 73 20 67 69 76 65 73 20 75 73 20 4d 50 4c 53 20 73 65 67 6d 65 6e | conds:.This.gives.us.MPLS.segmen |
10f500 | 74 20 72 6f 75 74 69 6e 67 20 65 6e 61 62 6c 65 64 20 61 6e 64 20 6c 61 62 65 6c 73 20 66 6f 72 | t.routing.enabled.and.labels.for |
10f520 | 20 66 61 72 20 65 6e 64 20 6c 6f 6f 70 62 61 63 6b 73 3a 00 54 68 69 73 20 67 69 76 65 73 20 75 | .far.end.loopbacks:.This.gives.u |
10f540 | 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6e 65 69 67 68 62 6f 72 73 68 69 70 73 2c 20 4c | s.the.following.neighborships,.L |
10f560 | 65 76 65 6c 20 31 20 61 6e 64 20 4c 65 76 65 6c 20 32 3a 00 54 68 69 73 20 69 6e 73 74 72 75 63 | evel.1.and.Level.2:.This.instruc |
10f580 | 74 73 20 6f 70 65 6e 6e 68 72 70 20 74 6f 20 72 65 70 6c 79 20 77 69 74 68 20 61 75 74 68 6f 72 | ts.opennhrp.to.reply.with.author |
10f5a0 | 61 74 69 76 65 20 61 6e 73 77 65 72 73 20 6f 6e 20 4e 48 52 50 20 52 65 73 6f 6c 75 74 69 6f 6e | ative.answers.on.NHRP.Resolution |
10f5c0 | 20 52 65 71 75 65 73 74 73 20 64 65 73 74 69 6e 69 65 64 20 74 6f 20 61 64 64 72 65 73 73 65 73 | .Requests.destinied.to.addresses |
10f5e0 | 20 69 6e 20 74 68 69 73 20 69 6e 74 65 72 66 61 63 65 20 28 69 6e 73 74 65 61 64 20 6f 66 20 66 | .in.this.interface.(instead.of.f |
10f600 | 6f 72 77 61 72 64 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 73 29 2e 20 54 68 69 73 20 65 66 66 | orwarding.the.packets)..This.eff |
10f620 | 65 63 74 69 76 65 6c 79 20 61 6c 6c 6f 77 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 | ectively.allows.the.creation.of. |
10f640 | 73 68 6f 72 74 63 75 74 20 72 6f 75 74 65 73 20 74 6f 20 73 75 62 6e 65 74 73 20 6c 6f 63 61 74 | shortcut.routes.to.subnets.locat |
10f660 | 65 64 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 54 68 69 73 20 69 73 20 61 20 63 | ed.on.the.interface..This.is.a.c |
10f680 | 6f 6d 6d 6f 6e 20 73 63 65 6e 61 72 69 6f 20 77 68 65 72 65 20 62 6f 74 68 20 3a 72 65 66 3a 60 | ommon.scenario.where.both.:ref:` |
10f6a0 | 73 6f 75 72 63 65 2d 6e 61 74 60 20 61 6e 64 20 3a 72 65 66 3a 60 64 65 73 74 69 6e 61 74 69 6f | source-nat`.and.:ref:`destinatio |
10f6c0 | 6e 2d 6e 61 74 60 20 61 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 61 74 20 74 68 65 20 73 61 6d | n-nat`.are.configured.at.the.sam |
10f6e0 | 65 20 74 69 6d 65 2e 20 49 74 27 73 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 77 68 65 6e 20 | e.time..It's.commonly.used.when. |
10f700 | 69 6e 74 65 72 6e 61 6c 20 28 70 72 69 76 61 74 65 29 20 68 6f 73 74 73 20 6e 65 65 64 20 74 6f | internal.(private).hosts.need.to |
10f720 | 20 65 73 74 61 62 6c 69 73 68 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 65 78 74 | .establish.a.connection.with.ext |
10f740 | 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 73 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 73 79 73 | ernal.resources.and.external.sys |
10f760 | 74 65 6d 73 20 6e 65 65 64 20 74 6f 20 61 63 63 65 73 73 20 69 6e 74 65 72 6e 61 6c 20 28 70 72 | tems.need.to.access.internal.(pr |
10f780 | 69 76 61 74 65 29 20 72 65 73 6f 75 72 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 20 63 6f 6e 66 | ivate).resources..This.is.a.conf |
10f7a0 | 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 60 3c 73 75 | iguration.parameter.for.the.`<su |
10f7c0 | 62 6e 65 74 3e 60 2c 20 73 61 79 69 6e 67 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 | bnet>`,.saying.that.as.part.of.t |
10f7e0 | 68 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 68 61 | he.response,.tell.the.client.tha |
10f800 | 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 63 61 6e 20 62 65 20 72 65 61 | t.the.default.gateway.can.be.rea |
10f820 | 63 68 65 64 20 61 74 20 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 73 20 61 20 63 | ched.at.`<address>`..This.is.a.c |
10f840 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 73 | onfiguration.parameter.for.the.s |
10f860 | 75 62 6e 65 74 2c 20 73 61 79 69 6e 67 20 74 68 61 74 20 61 73 20 70 61 72 74 20 6f 66 20 74 68 | ubnet,.saying.that.as.part.of.th |
10f880 | 65 20 72 65 73 70 6f 6e 73 65 2c 20 74 65 6c 6c 20 74 68 65 20 63 6c 69 65 6e 74 20 74 68 61 74 | e.response,.tell.the.client.that |
10f8a0 | 20 74 68 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 61 74 20 | .the.DNS.server.can.be.found.at. |
10f8c0 | 60 3c 61 64 64 72 65 73 73 3e 60 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 | `<address>`..This.is.a.mandatory |
10f8e0 | 20 63 6f 6d 6d 61 6e 64 2e 20 53 65 74 73 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f | .command..Sets.regular.expressio |
10f900 | 6e 20 74 6f 20 6d 61 74 63 68 20 61 67 61 69 6e 73 74 20 6c 6f 67 20 73 74 72 69 6e 67 20 6d 65 | n.to.match.against.log.string.me |
10f920 | 73 73 61 67 65 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 63 6f 6d 6d 61 | ssage..This.is.a.mandatory.comma |
10f940 | 6e 64 2e 20 53 65 74 73 20 74 68 65 20 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 | nd..Sets.the.full.path.to.the.sc |
10f960 | 72 69 70 74 2e 20 54 68 65 20 73 63 72 69 70 74 20 66 69 6c 65 20 6d 75 73 74 20 62 65 20 65 78 | ript..The.script.file.must.be.ex |
10f980 | 65 63 75 74 61 62 6c 65 2e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 | ecutable..This.is.a.mandatory.op |
10f9a0 | 74 69 6f 6e 00 54 68 69 73 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 73 65 74 74 69 6e 67 | tion.This.is.a.mandatory.setting |
10f9c0 | 2e 00 54 68 69 73 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 | ..This.is.achieved.by.using.the. |
10f9e0 | 66 69 72 73 74 20 74 68 72 65 65 20 62 69 74 73 20 6f 66 20 74 68 65 20 54 6f 53 20 28 54 79 70 | first.three.bits.of.the.ToS.(Typ |
10fa00 | 65 20 6f 66 20 53 65 72 76 69 63 65 29 20 66 69 65 6c 64 20 74 6f 20 63 61 74 65 67 6f 72 69 7a | e.of.Service).field.to.categoriz |
10fa20 | 65 20 64 61 74 61 20 73 74 72 65 61 6d 73 20 61 6e 64 2c 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 | e.data.streams.and,.in.accordanc |
10fa40 | 65 20 77 69 74 68 20 74 68 65 20 64 65 66 69 6e 65 64 20 70 72 65 63 65 64 65 6e 63 65 20 70 61 | e.with.the.defined.precedence.pa |
10fa60 | 72 61 6d 65 74 65 72 73 2c 20 61 20 64 65 63 69 73 69 6f 6e 20 69 73 20 6d 61 64 65 2e 00 54 68 | rameters,.a.decision.is.made..Th |
10fa80 | 69 73 20 69 73 20 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 74 68 65 20 48 55 42 73 20 49 50 20 | is.is.also.known.as.the.HUBs.IP. |
10faa0 | 61 64 64 72 65 73 73 20 6f 72 20 46 51 44 4e 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 | address.or.FQDN..This.is.an.opti |
10fac0 | 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 20 62 65 63 61 75 73 65 20 74 68 65 20 65 76 65 6e 74 20 68 | onal.command.because.the.event.h |
10fae0 | 61 6e 64 6c 65 72 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 72 65 | andler.will.be.automatically.cre |
10fb00 | 61 74 65 64 20 61 66 74 65 72 20 61 6e 79 20 6f 66 20 74 68 65 20 6e 65 78 74 20 63 6f 6d 6d 61 | ated.after.any.of.the.next.comma |
10fb20 | 6e 64 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 | nds..This.is.an.optional.command |
10fb40 | 2e 20 41 64 64 73 20 61 72 67 75 6d 65 6e 74 73 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 | ..Adds.arguments.to.the.script.. |
10fb60 | 41 72 67 75 6d 65 6e 74 73 20 6d 75 73 74 20 62 65 20 73 65 70 61 72 61 74 65 64 20 62 79 20 73 | Arguments.must.be.separated.by.s |
10fb80 | 70 61 63 65 73 2e 00 54 68 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 | paces..This.is.an.optional.comma |
10fba0 | 6e 64 2e 20 41 64 64 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 61 6e 64 20 69 74 73 20 76 61 6c | nd..Adds.environment.and.its.val |
10fbc0 | 75 65 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 2e 20 55 73 65 20 73 65 70 61 72 61 74 65 20 63 | ue.to.the.script..Use.separate.c |
10fbe0 | 6f 6d 6d 61 6e 64 73 20 66 6f 72 20 65 61 63 68 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 00 54 68 | ommands.for.each.environment..Th |
10fc00 | 69 73 20 69 73 20 61 6e 20 6f 70 74 69 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 2e 20 46 69 6c 74 65 | is.is.an.optional.command..Filte |
10fc20 | 72 73 20 6c 6f 67 20 6d 65 73 73 61 67 65 73 20 62 79 20 73 79 73 6c 6f 67 2d 69 64 65 6e 74 69 | rs.log.messages.by.syslog-identi |
10fc40 | 66 69 65 72 2e 00 54 68 69 73 20 69 73 20 64 6f 6e 65 20 74 6f 20 73 75 70 70 6f 72 74 20 28 65 | fier..This.is.done.to.support.(e |
10fc60 | 74 68 65 72 6e 65 74 29 20 73 77 69 74 63 68 20 66 65 61 74 75 72 65 73 2c 20 6c 69 6b 65 20 3a | thernet).switch.features,.like.: |
10fc80 | 72 66 63 3a 60 33 30 36 39 60 2c 20 77 68 65 72 65 20 74 68 65 20 69 6e 64 69 76 69 64 75 61 6c | rfc:`3069`,.where.the.individual |
10fca0 | 20 70 6f 72 74 73 20 61 72 65 20 4e 4f 54 20 61 6c 6c 6f 77 65 64 20 74 6f 20 63 6f 6d 6d 75 6e | .ports.are.NOT.allowed.to.commun |
10fcc0 | 69 63 61 74 65 20 77 69 74 68 20 65 61 63 68 20 6f 74 68 65 72 2c 20 62 75 74 20 74 68 65 79 20 | icate.with.each.other,.but.they. |
10fce0 | 61 72 65 20 61 6c 6c 6f 77 65 64 20 74 6f 20 74 61 6c 6b 20 74 6f 20 74 68 65 20 75 70 73 74 72 | are.allowed.to.talk.to.the.upstr |
10fd00 | 65 61 6d 20 72 6f 75 74 65 72 2e 20 41 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 | eam.router..As.described.in.:rfc |
10fd20 | 3a 60 33 30 36 39 60 2c 20 69 74 20 69 73 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 6c 6c 6f 77 | :`3069`,.it.is.possible.to.allow |
10fd40 | 20 74 68 65 73 65 20 68 6f 73 74 73 20 74 6f 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 74 68 72 6f | .these.hosts.to.communicate.thro |
10fd60 | 75 67 68 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 72 6f 75 74 65 72 20 62 79 20 70 72 6f 78 79 | ugh.the.upstream.router.by.proxy |
10fd80 | 5f 61 72 70 27 69 6e 67 2e 00 54 68 69 73 20 69 73 20 65 73 70 65 63 69 61 6c 6c 79 20 75 73 65 | _arp'ing..This.is.especially.use |
10fda0 | 66 75 6c 20 66 6f 72 20 74 68 65 20 75 70 73 74 72 65 61 6d 20 69 6e 74 65 72 66 61 63 65 2c 20 | ful.for.the.upstream.interface,. |
10fdc0 | 73 69 6e 63 65 20 74 68 65 20 73 6f 75 72 63 65 20 66 6f 72 20 6d 75 6c 74 69 63 61 73 74 20 74 | since.the.source.for.multicast.t |
10fde0 | 72 61 66 66 69 63 20 69 73 20 6f 66 74 65 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f 74 65 20 6c 6f | raffic.is.often.from.a.remote.lo |
10fe00 | 63 61 74 69 6f 6e 2e 00 54 68 69 73 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 69 6d 70 6c | cation..This.is.one.of.the.simpl |
10fe20 | 65 73 74 20 74 79 70 65 73 20 6f 66 20 74 75 6e 6e 65 6c 73 2c 20 61 73 20 64 65 66 69 6e 65 64 | est.types.of.tunnels,.as.defined |
10fe40 | 20 62 79 20 3a 72 66 63 3a 60 32 30 30 33 60 2e 20 49 74 20 74 61 6b 65 73 20 61 6e 20 49 50 76 | .by.:rfc:`2003`..It.takes.an.IPv |
10fe60 | 34 20 70 61 63 6b 65 74 20 61 6e 64 20 73 65 6e 64 73 20 69 74 20 61 73 20 61 20 70 61 79 6c 6f | 4.packet.and.sends.it.as.a.paylo |
10fe80 | 61 64 20 6f 66 20 61 6e 6f 74 68 65 72 20 49 50 76 34 20 70 61 63 6b 65 74 2e 20 46 6f 72 20 74 | ad.of.another.IPv4.packet..For.t |
10fea0 | 68 69 73 20 72 65 61 73 6f 6e 2c 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6f 74 68 65 72 20 63 | his.reason,.there.are.no.other.c |
10fec0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 6b 69 | onfiguration.options.for.this.ki |
10fee0 | 6e 64 20 6f 66 20 74 75 6e 6e 65 6c 2e 00 54 68 69 73 20 69 73 20 6f 70 74 69 6f 6e 61 6c 2e 00 | nd.of.tunnel..This.is.optional.. |
10ff00 | 54 68 69 73 20 69 73 20 73 69 6d 69 6c 61 72 20 74 6f 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 67 | This.is.similar.to.the.network.g |
10ff20 | 72 6f 75 70 73 20 70 61 72 74 2c 20 62 75 74 20 68 65 72 65 20 79 6f 75 20 61 72 65 20 61 62 6c | roups.part,.but.here.you.are.abl |
10ff40 | 65 20 74 6f 20 6e 65 67 61 74 65 20 74 68 65 20 6d 61 74 63 68 69 6e 67 20 61 64 64 72 65 73 73 | e.to.negate.the.matching.address |
10ff60 | 65 73 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 49 50 76 36 20 63 6f 75 6e 74 65 72 70 61 72 74 | es..This.is.the.IPv6.counterpart |
10ff80 | 20 6f 66 20 49 50 49 50 2e 20 49 27 6d 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 20 61 6e 20 52 46 | .of.IPIP..I'm.not.aware.of.an.RF |
10ffa0 | 43 20 74 68 61 74 20 64 65 66 69 6e 65 73 20 74 68 69 73 20 65 6e 63 61 70 73 75 6c 61 74 69 6f | C.that.defines.this.encapsulatio |
10ffc0 | 6e 20 73 70 65 63 69 66 69 63 61 6c 6c 79 2c 20 62 75 74 20 69 74 27 73 20 61 20 6e 61 74 75 72 | n.specifically,.but.it's.a.natur |
10ffe0 | 61 6c 20 73 70 65 63 69 66 69 63 20 63 61 73 65 20 6f 66 20 49 50 76 36 20 65 6e 63 61 70 73 75 | al.specific.case.of.IPv6.encapsu |
110000 | 6c 61 74 69 6f 6e 20 6d 65 63 68 61 6e 69 73 6d 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a | lation.mechanisms.described.in.: |
110020 | 72 66 63 3a 32 34 37 33 60 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 4c 41 4e 20 65 78 74 65 6e | rfc:2473`..This.is.the.LAN.exten |
110040 | 73 69 6f 6e 20 75 73 65 20 63 61 73 65 2e 20 54 68 65 20 65 74 68 30 20 70 6f 72 74 20 6f 66 20 | sion.use.case..The.eth0.port.of. |
110060 | 74 68 65 20 64 69 73 74 61 6e 74 20 56 50 4e 20 70 65 65 72 73 20 77 69 6c 6c 20 62 65 20 64 69 | the.distant.VPN.peers.will.be.di |
110080 | 72 65 63 74 6c 79 20 63 6f 6e 6e 65 63 74 65 64 20 6c 69 6b 65 20 69 66 20 74 68 65 72 65 20 77 | rectly.connected.like.if.there.w |
1100a0 | 61 73 20 61 20 73 77 69 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 6d 2e 00 54 68 69 73 20 69 | as.a.switch.between.them..This.i |
1100c0 | 73 20 74 68 65 20 4c 43 44 20 6d 6f 64 65 6c 20 75 73 65 64 20 69 6e 20 79 6f 75 72 20 73 79 73 | s.the.LCD.model.used.in.your.sys |
1100e0 | 74 65 6d 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 | tem..This.is.the.configuration.p |
110100 | 61 72 61 6d 65 74 65 72 20 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 6e | arameter.for.the.entire.shared.n |
110120 | 65 74 77 6f 72 6b 20 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 | etwork.definition..All.subnets.w |
110140 | 69 6c 6c 20 69 6e 68 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 | ill.inherit.this.configuration.i |
110160 | 74 65 6d 20 69 66 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 00 54 68 | tem.if.not.specified.locally..Th |
110180 | 69 73 20 69 73 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 | is.is.the.configuration.paramete |
1101a0 | 72 20 66 6f 72 20 74 68 65 20 65 6e 74 69 72 65 20 73 68 61 72 65 64 20 6e 65 74 77 6f 72 6b 20 | r.for.the.entire.shared.network. |
1101c0 | 64 65 66 69 6e 69 74 69 6f 6e 2e 20 41 6c 6c 20 73 75 62 6e 65 74 73 20 77 69 6c 6c 20 69 6e 68 | definition..All.subnets.will.inh |
1101e0 | 65 72 69 74 20 74 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 65 6d 20 69 66 20 | erit.this.configuration.item.if. |
110200 | 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 6c 6f 63 61 6c 6c 79 2e 20 4d 75 6c 74 69 70 6c 65 20 | not.specified.locally..Multiple. |
110220 | 44 4e 53 20 73 65 72 76 65 72 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 2e 00 54 68 69 73 | DNS.servers.can.be.defined..This |
110240 | 20 69 73 20 74 68 65 20 65 71 75 69 76 61 6c 65 6e 74 20 6f 66 20 74 68 65 20 68 6f 73 74 20 62 | .is.the.equivalent.of.the.host.b |
110260 | 6c 6f 63 6b 20 69 6e 20 64 68 63 70 64 2e 63 6f 6e 66 20 6f 66 20 69 73 63 2d 64 68 63 70 64 2e | lock.in.dhcpd.conf.of.isc-dhcpd. |
110280 | 00 54 68 69 73 20 69 73 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 68 79 73 69 63 61 | .This.is.the.name.of.the.physica |
1102a0 | 6c 20 69 6e 74 65 72 66 61 63 65 20 75 73 65 64 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 79 | l.interface.used.to.connect.to.y |
1102c0 | 6f 75 72 20 4c 43 44 20 64 69 73 70 6c 61 79 2e 20 54 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 | our.LCD.display..Tab.completion. |
1102e0 | 69 73 20 73 75 70 70 6f 72 74 65 64 20 61 6e 64 20 69 74 20 77 69 6c 6c 20 6c 69 73 74 20 79 6f | is.supported.and.it.will.list.yo |
110300 | 75 20 61 6c 6c 20 61 76 61 69 6c 61 62 6c 65 20 73 65 72 69 61 6c 20 69 6e 74 65 72 66 61 63 65 | u.all.available.serial.interface |
110320 | 2e 00 54 68 69 73 20 69 73 20 74 68 65 20 70 6f 6c 69 63 79 20 74 68 61 74 20 72 65 71 75 69 65 | ..This.is.the.policy.that.requie |
110340 | 72 65 73 20 74 68 65 20 6c 6f 77 65 73 74 20 72 65 73 6f 75 72 63 65 73 20 66 6f 72 20 74 68 65 | res.the.lowest.resources.for.the |
110360 | 20 73 61 6d 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 72 61 66 66 69 63 2e 20 42 75 74 20 2a 2a 76 | .same.amount.of.traffic..But.**v |
110380 | 65 72 79 20 6c 69 6b 65 6c 79 20 79 6f 75 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 69 74 20 61 73 | ery.likely.you.do.not.need.it.as |
1103a0 | 20 79 6f 75 20 63 61 6e 6e 6f 74 20 67 65 74 20 6d 75 63 68 20 66 72 6f 6d 20 69 74 2e 20 53 6f | .you.cannot.get.much.from.it..So |
1103c0 | 6d 65 74 69 6d 65 73 20 69 74 20 69 73 20 75 73 65 64 20 6a 75 73 74 20 74 6f 20 65 6e 61 62 6c | metimes.it.is.used.just.to.enabl |
1103e0 | 65 20 6c 6f 67 67 69 6e 67 2e 2a 2a 00 54 68 69 73 20 69 73 20 75 73 65 66 75 6c 2c 20 66 6f 72 | e.logging.**.This.is.useful,.for |
110400 | 20 65 78 61 6d 70 6c 65 2c 20 69 6e 20 63 6f 6d 62 69 6e 61 74 69 6f 6e 20 77 69 74 68 20 68 6f | .example,.in.combination.with.ho |
110420 | 73 74 66 69 6c 65 20 75 70 64 61 74 65 2e 00 54 68 69 73 20 69 73 20 77 68 65 72 65 20 22 55 44 | stfile.update..This.is.where."UD |
110440 | 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 22 20 63 6f 6d 65 73 20 69 6e 74 6f 20 70 6c | P.broadcast.relay".comes.into.pl |
110460 | 61 79 21 20 49 74 20 77 69 6c 6c 20 66 6f 72 77 61 72 64 20 72 65 63 65 69 76 65 64 20 62 72 6f | ay!.It.will.forward.received.bro |
110480 | 61 64 63 61 73 74 73 20 74 6f 20 6f 74 68 65 72 20 63 6f 6e 66 69 67 75 72 65 64 20 6e 65 74 77 | adcasts.to.other.configured.netw |
1104a0 | 6f 72 6b 73 2e 00 54 68 69 73 20 6d 61 6b 65 73 20 74 68 65 20 73 65 72 76 65 72 20 61 75 74 68 | orks..This.makes.the.server.auth |
1104c0 | 6f 72 69 74 61 74 69 76 65 6c 79 20 6e 6f 74 20 61 77 61 72 65 20 6f 66 3a 20 31 30 2e 69 6e 2d | oritatively.not.aware.of:.10.in- |
1104e0 | 61 64 64 72 2e 61 72 70 61 2c 20 31 36 38 2e 31 39 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c | addr.arpa,.168.192.in-addr.arpa, |
110500 | 20 31 36 2d 33 31 2e 31 37 32 2e 69 6e 2d 61 64 64 72 2e 61 72 70 61 2c 20 77 68 69 63 68 20 65 | .16-31.172.in-addr.arpa,.which.e |
110520 | 6e 61 62 6c 69 6e 67 20 75 70 73 74 72 65 61 6d 20 44 4e 53 20 73 65 72 76 65 72 28 73 29 20 74 | nabling.upstream.DNS.server(s).t |
110540 | 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 72 65 76 65 72 73 65 20 6c 6f 6f 6b 75 70 73 20 6f 66 | o.be.used.for.reverse.lookups.of |
110560 | 20 74 68 65 73 65 20 7a 6f 6e 65 73 2e 00 54 68 69 73 20 6d 65 74 68 6f 64 20 61 75 74 6f 6d 61 | .these.zones..This.method.automa |
110580 | 74 69 63 61 6c 6c 79 20 64 69 73 61 62 6c 65 73 20 49 50 76 36 20 74 72 61 66 66 69 63 20 66 6f | tically.disables.IPv6.traffic.fo |
1105a0 | 72 77 61 72 64 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 6e 20 71 75 65 | rwarding.on.the.interface.in.que |
1105c0 | 73 74 69 6f 6e 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 66 61 75 6c 74 20 | stion..This.mode.provides.fault. |
1105e0 | 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 66 61 | tolerance..This.mode.provides.fa |
110600 | 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 20 54 68 65 20 3a 63 66 67 63 6d 64 3a 60 70 72 69 6d | ult.tolerance..The.:cfgcmd:`prim |
110620 | 61 72 79 60 20 6f 70 74 69 6f 6e 2c 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 6c 6f 77 2c 20 61 | ary`.option,.documented.below,.a |
110640 | 66 66 65 63 74 73 20 74 68 65 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 6d 6f 64 65 | ffects.the.behavior.of.this.mode |
110660 | 2e 00 54 68 69 73 20 6d 6f 64 65 20 70 72 6f 76 69 64 65 73 20 6c 6f 61 64 20 62 61 6c 61 6e 63 | ..This.mode.provides.load.balanc |
110680 | 69 6e 67 20 61 6e 64 20 66 61 75 6c 74 20 74 6f 6c 65 72 61 6e 63 65 2e 00 54 68 69 73 20 6f 70 | ing.and.fault.tolerance..This.op |
1106a0 | 74 69 6f 6e 20 61 64 64 73 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e 74 20 65 6c 65 6d 65 | tion.adds.Power.Constraint.eleme |
1106c0 | 6e 74 20 77 68 65 6e 20 61 70 70 6c 69 63 61 62 6c 65 20 61 6e 64 20 43 6f 75 6e 74 72 79 20 65 | nt.when.applicable.and.Country.e |
1106e0 | 6c 65 6d 65 6e 74 20 69 73 20 61 64 64 65 64 2e 20 50 6f 77 65 72 20 43 6f 6e 73 74 72 61 69 6e | lement.is.added..Power.Constrain |
110700 | 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 54 72 61 6e 73 6d 69 | t.element.is.required.by.Transmi |
110720 | 74 20 50 6f 77 65 72 20 43 6f 6e 74 72 6f 6c 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e | t.Power.Control..This.option.can |
110740 | 20 62 65 20 73 70 65 63 69 66 69 65 64 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 2e 00 54 68 | .be.specified.multiple.times..Th |
110760 | 69 73 20 6f 70 74 69 6f 6e 20 63 61 6e 20 62 65 20 73 75 70 70 6c 69 65 64 20 6d 75 6c 74 69 70 | is.option.can.be.supplied.multip |
110780 | 6c 65 20 74 69 6d 65 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6d 61 6e 64 61 74 6f | le.times..This.option.is.mandato |
1107a0 | 72 79 20 69 6e 20 41 63 63 65 73 73 2d 50 6f 69 6e 74 20 6d 6f 64 65 2e 00 54 68 69 73 20 6f 70 | ry.in.Access-Point.mode..This.op |
1107c0 | 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 77 68 65 6e 20 72 75 6e 6e 69 6e 67 20 61 20 | tion.is.required.when.running.a. |
1107e0 | 44 4d 56 50 4e 20 73 70 6f 6b 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 | DMVPN.spoke..This.option.is.used |
110800 | 20 62 79 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 61 73 20 61 20 77 61 79 20 66 | .by.some.DHCP.clients.as.a.way.f |
110820 | 6f 72 20 75 73 65 72 73 20 74 6f 20 73 70 65 63 69 66 79 20 69 64 65 6e 74 69 66 79 69 6e 67 20 | or.users.to.specify.identifying. |
110840 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 20 54 68 69 73 20 | information.to.the.client..This. |
110860 | 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 20 61 20 73 69 6d 69 6c 61 72 20 77 61 79 20 74 6f 20 | can.be.used.in.a.similar.way.to. |
110880 | 74 68 65 20 76 65 6e 64 6f 72 2d 63 6c 61 73 73 2d 69 64 65 6e 74 69 66 69 65 72 20 6f 70 74 69 | the.vendor-class-identifier.opti |
1108a0 | 6f 6e 2c 20 62 75 74 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 | on,.but.the.value.of.the.option. |
1108c0 | 69 73 20 73 70 65 63 69 66 69 65 64 20 62 79 20 74 68 65 20 75 73 65 72 2c 20 6e 6f 74 20 74 68 | is.specified.by.the.user,.not.th |
1108e0 | 65 20 76 65 6e 64 6f 72 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 62 79 | e.vendor..This.option.is.used.by |
110900 | 20 73 6f 6d 65 20 44 48 43 50 20 63 6c 69 65 6e 74 73 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 | .some.DHCP.clients.to.identify.t |
110920 | 68 65 20 76 65 6e 64 6f 72 20 74 79 70 65 20 61 6e 64 20 70 6f 73 73 69 62 6c 79 20 74 68 65 20 | he.vendor.type.and.possibly.the. |
110940 | 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 20 61 20 44 48 43 50 20 63 6c 69 65 6e 74 2e 20 | configuration.of.a.DHCP.client.. |
110960 | 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 61 20 73 74 72 69 6e 67 20 6f 66 20 62 | The.information.is.a.string.of.b |
110980 | 79 74 65 73 20 77 68 6f 73 65 20 63 6f 6e 74 65 6e 74 73 20 61 72 65 20 73 70 65 63 69 66 69 63 | ytes.whose.contents.are.specific |
1109a0 | 20 74 6f 20 74 68 65 20 76 65 6e 64 6f 72 20 61 6e 64 20 61 72 65 20 6e 6f 74 20 73 70 65 63 69 | .to.the.vendor.and.are.not.speci |
1109c0 | 66 69 65 64 20 69 6e 20 61 20 73 74 61 6e 64 61 72 64 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 | fied.in.a.standard..This.option. |
1109e0 | 6d 75 73 74 20 62 65 20 75 73 65 64 20 77 69 74 68 20 60 60 74 69 6d 65 6f 75 74 60 60 20 6f 70 | must.be.used.with.``timeout``.op |
110a00 | 74 69 6f 6e 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 6f 6e 6c 79 20 61 66 66 65 63 74 73 20 38 | tion..This.option.only.affects.8 |
110a20 | 30 32 2e 33 61 64 20 6d 6f 64 65 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 20 73 70 65 63 69 66 69 | 02.3ad.mode..This.option.specifi |
110a40 | 65 73 20 61 20 64 65 6c 61 79 20 69 6e 20 73 65 63 6f 6e 64 73 20 62 65 66 6f 72 65 20 76 72 72 | es.a.delay.in.seconds.before.vrr |
110a60 | 70 20 69 6e 73 74 61 6e 63 65 73 20 73 74 61 72 74 20 75 70 20 61 66 74 65 72 20 6b 65 65 70 61 | p.instances.start.up.after.keepa |
110a80 | 6c 69 76 65 64 20 73 74 61 72 74 73 2e 00 54 68 69 73 20 6f 70 74 69 6f 6e 73 20 64 65 66 61 75 | lived.starts..This.options.defau |
110aa0 | 6c 74 73 20 74 6f 20 32 30 34 38 00 54 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 61 6c 6c 6f 77 | lts.to.2048.This.parameter.allow |
110ac0 | 73 20 74 6f 20 22 73 68 6f 72 74 63 75 74 22 20 72 6f 75 74 65 73 20 28 6e 6f 6e 2d 62 61 63 6b | s.to."shortcut".routes.(non-back |
110ae0 | 62 6f 6e 65 29 20 66 6f 72 20 69 6e 74 65 72 2d 61 72 65 61 20 72 6f 75 74 65 73 2e 20 54 68 65 | bone).for.inter-area.routes..The |
110b00 | 72 65 20 61 72 65 20 74 68 72 65 65 20 6d 6f 64 65 73 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 | re.are.three.modes.available.for |
110b20 | 20 72 6f 75 74 65 73 20 73 68 6f 72 74 63 75 74 74 69 6e 67 3a 00 54 68 69 73 20 70 6f 6c 69 63 | .routes.shortcutting:.This.polic |
110b40 | 79 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 70 72 6f 76 69 64 65 20 61 20 6d 6f 72 65 20 | y.is.intended.to.provide.a.more. |
110b60 | 62 61 6c 61 6e 63 65 64 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 6f 66 20 74 72 61 66 66 69 63 | balanced.distribution.of.traffic |
110b80 | 20 74 68 61 6e 20 6c 61 79 65 72 32 20 61 6c 6f 6e 65 2c 20 65 73 70 65 63 69 61 6c 6c 79 20 69 | .than.layer2.alone,.especially.i |
110ba0 | 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 77 68 65 72 65 20 61 20 6c 61 79 65 72 33 20 67 61 | n.environments.where.a.layer3.ga |
110bc0 | 74 65 77 61 79 20 64 65 76 69 63 65 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 72 65 61 63 | teway.device.is.required.to.reac |
110be0 | 68 20 6d 6f 73 74 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 70 72 6f 6d 70 74 | h.most.destinations..This.prompt |
110c00 | 65 64 20 73 6f 6d 65 20 49 53 50 73 20 74 6f 20 64 65 76 65 6c 6f 70 20 61 20 70 6f 6c 69 63 79 | ed.some.ISPs.to.develop.a.policy |
110c20 | 20 77 69 74 68 69 6e 20 74 68 65 20 3a 61 62 62 72 3a 60 41 52 49 4e 20 28 41 6d 65 72 69 63 61 | .within.the.:abbr:`ARIN.(America |
110c40 | 6e 20 52 65 67 69 73 74 72 79 20 66 6f 72 20 49 6e 74 65 72 6e 65 74 20 4e 75 6d 62 65 72 73 29 | n.Registry.for.Internet.Numbers) |
110c60 | 60 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 6e 65 77 20 70 72 69 76 61 74 65 20 61 64 64 72 65 73 | `.to.allocate.new.private.addres |
110c80 | 73 20 73 70 61 63 65 20 66 6f 72 20 43 47 4e 73 2c 20 62 75 74 20 41 52 49 4e 20 64 65 66 65 72 | s.space.for.CGNs,.but.ARIN.defer |
110ca0 | 72 65 64 20 74 6f 20 74 68 65 20 49 45 54 46 20 62 65 66 6f 72 65 20 69 6d 70 6c 65 6d 65 6e 74 | red.to.the.IETF.before.implement |
110cc0 | 69 6e 67 20 74 68 65 20 70 6f 6c 69 63 79 20 69 6e 64 69 63 61 74 69 6e 67 20 74 68 61 74 20 74 | ing.the.policy.indicating.that.t |
110ce0 | 68 65 20 6d 61 74 74 65 72 20 77 61 73 20 6e 6f 74 20 61 20 74 79 70 69 63 61 6c 20 61 6c 6c 6f | he.matter.was.not.a.typical.allo |
110d00 | 63 61 74 69 6f 6e 20 69 73 73 75 65 20 62 75 74 20 61 20 72 65 73 65 72 76 61 74 69 6f 6e 20 6f | cation.issue.but.a.reservation.o |
110d20 | 66 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 74 65 63 68 6e 69 63 61 6c 20 70 75 72 70 6f 73 | f.addresses.for.technical.purpos |
110d40 | 65 73 20 28 70 65 72 20 3a 72 66 63 3a 60 32 38 36 30 60 29 2e 00 54 68 69 73 20 72 65 71 75 69 | es.(per.:rfc:`2860`)..This.requi |
110d60 | 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 6f | red.setting.defines.the.action.o |
110d80 | 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 6f 6e 20 69 73 | f.the.current.rule..If.action.is |
110da0 | 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 6a 75 6d 70 2d 74 61 | .set.to.``jump``,.then.``jump-ta |
110dc0 | 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 72 65 71 75 | rget``.is.also.needed..This.requ |
110de0 | 69 72 65 64 20 73 65 74 74 69 6e 67 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 | ired.setting.defines.the.action. |
110e00 | 6f 66 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6c 65 2e 20 49 66 20 61 63 74 69 6f 6e 20 69 | of.the.current.rule..If.action.i |
110e20 | 73 20 73 65 74 20 74 6f 20 6a 75 6d 70 2c 20 74 68 65 6e 20 6a 75 6d 70 2d 74 61 72 67 65 74 20 | s.set.to.jump,.then.jump-target. |
110e40 | 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 72 65 71 75 69 72 65 73 20 74 77 | is.also.needed..This.requires.tw |
110e60 | 6f 20 66 69 6c 65 73 2c 20 6f 6e 65 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 64 65 76 69 63 | o.files,.one.to.create.the.devic |
110e80 | 65 20 28 58 58 58 2e 6e 65 74 64 65 76 29 20 61 6e 64 20 6f 6e 65 20 74 6f 20 63 6f 6e 66 69 67 | e.(XXX.netdev).and.one.to.config |
110ea0 | 75 72 65 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 20 28 58 | ure.the.network.on.the.device.(X |
110ec0 | 58 58 2e 6e 65 74 77 6f 72 6b 29 00 54 68 69 73 20 72 65 73 75 6c 74 73 20 69 6e 20 74 68 65 20 | XX.network).This.results.in.the. |
110ee0 | 61 63 74 69 76 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 54 68 69 73 20 73 61 79 73 20 | active.configuration:.This.says. |
110f00 | 74 68 61 74 20 74 68 69 73 20 64 65 76 69 63 65 20 69 73 20 74 68 65 20 6f 6e 6c 79 20 44 48 43 | that.this.device.is.the.only.DHC |
110f20 | 50 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 20 49 66 20 6f 74 | P.server.for.this.network..If.ot |
110f40 | 68 65 72 20 64 65 76 69 63 65 73 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 6f 66 66 65 72 20 | her.devices.are.trying.to.offer. |
110f60 | 44 48 43 50 20 6c 65 61 73 65 73 2c 20 74 68 69 73 20 6d 61 63 68 69 6e 65 20 77 69 6c 6c 20 73 | DHCP.leases,.this.machine.will.s |
110f80 | 65 6e 64 20 27 44 48 43 50 4e 41 4b 27 20 74 6f 20 61 6e 79 20 64 65 76 69 63 65 20 74 72 79 69 | end.'DHCPNAK'.to.any.device.tryi |
110fa0 | 6e 67 20 74 6f 20 72 65 71 75 65 73 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 68 61 74 | ng.to.request.an.IP.address.that |
110fc0 | 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 20 66 6f 72 20 74 68 69 73 20 6e 65 74 77 6f 72 6b 2e 00 | .is.not.valid.for.this.network.. |
110fe0 | 54 68 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 62 65 73 20 63 6f 6e 66 69 67 75 72 69 | This.section.describes.configuri |
111000 | 6e 67 20 44 4e 53 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2c 20 6e 61 6d 65 6c 79 3a 00 54 68 | ng.DNS.on.the.system,.namely:.Th |
111020 | 69 73 20 73 65 63 74 69 6f 6e 20 64 65 73 63 72 69 62 65 73 20 74 68 65 20 73 79 73 74 65 6d 27 | is.section.describes.the.system' |
111040 | 73 20 68 6f 73 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 68 6f 77 20 74 6f 20 63 6f | s.host.information.and.how.to.co |
111060 | 6e 66 69 67 75 72 65 20 74 68 65 6d 2c 20 69 74 20 63 6f 76 65 72 73 20 74 68 65 20 66 6f 6c 6c | nfigure.them,.it.covers.the.foll |
111080 | 6f 77 69 6e 67 20 74 6f 70 69 63 73 3a 00 54 68 69 73 20 73 65 63 74 69 6f 6e 20 6e 65 65 64 73 | owing.topics:.This.section.needs |
1110a0 | 20 69 6d 70 72 6f 76 65 6d 65 6e 74 73 2c 20 65 78 61 6d 70 6c 65 73 20 61 6e 64 20 65 78 70 6c | .improvements,.examples.and.expl |
1110c0 | 61 6e 61 74 69 6f 6e 73 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 | anations..This.set.the.default.a |
1110e0 | 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 | ction.of.the.rule-set.if.no.rule |
111100 | 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 | .matched.a.packet.criteria..If.d |
111120 | 65 66 61 63 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 | efacult-action.is.set.to.``jump` |
111140 | 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 | `,.then.``default-jump-target``. |
111160 | 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 00 54 68 69 73 20 73 65 74 20 74 68 65 20 64 65 66 | is.also.needed..This.set.the.def |
111180 | 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e | ault.action.of.the.rule-set.if.n |
1111a0 | 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 | o.rule.matched.a.packet.criteria |
1111c0 | 2e 20 49 66 20 64 65 66 61 63 75 6c 74 2d 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 | ..If.defacult-action.is.set.to.` |
1111e0 | 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 | `jump``,.then.``default-jump-tar |
111200 | 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 | get``.is.also.needed..Note.that. |
111220 | 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 | for.base.chains,.default.action. |
111240 | 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 20 74 6f 20 60 60 61 63 63 65 70 74 60 60 20 6f 72 | can.only.be.set.to.``accept``.or |
111260 | 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 69 6e | .``drop``,.while.on.custom.chain |
111280 | 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 | ,.more.actions.are.available..Th |
1112a0 | 69 73 20 73 65 74 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 66 20 74 68 65 | is.set.the.default.action.of.the |
1112c0 | 20 72 75 6c 65 2d 73 65 74 20 69 66 20 6e 6f 20 72 75 6c 65 20 6d 61 74 63 68 65 64 20 61 20 70 | .rule-set.if.no.rule.matched.a.p |
1112e0 | 61 63 6b 65 74 20 63 72 69 74 65 72 69 61 2e 20 49 66 20 64 65 66 61 75 6c 74 2d 61 63 74 69 6f | acket.criteria..If.default-actio |
111300 | 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2c 20 74 68 65 6e 20 60 60 64 65 66 | n.is.set.to.``jump``,.then.``def |
111320 | 61 75 6c 74 2d 6a 75 6d 70 2d 74 61 72 67 65 74 60 60 20 69 73 20 61 6c 73 6f 20 6e 65 65 64 65 | ault-jump-target``.is.also.neede |
111340 | 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 66 6f 72 20 62 61 73 65 20 63 68 61 69 6e 73 2c 20 64 65 | d..Note.that.for.base.chains,.de |
111360 | 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 73 65 74 20 74 6f 20 | fault.action.can.only.be.set.to. |
111380 | 60 60 61 63 63 65 70 74 60 60 20 6f 72 20 60 60 64 72 6f 70 60 60 2c 20 77 68 69 6c 65 20 6f 6e | ``accept``.or.``drop``,.while.on |
1113a0 | 20 63 75 73 74 6f 6d 20 63 68 61 69 6e 2c 20 6d 6f 72 65 20 61 63 74 69 6f 6e 73 20 61 72 65 20 | .custom.chain,.more.actions.are. |
1113c0 | 61 76 61 69 6c 61 62 6c 65 2e 00 54 68 69 73 20 73 65 74 73 20 74 68 65 20 61 63 63 65 70 74 65 | available..This.sets.the.accepte |
1113e0 | 64 20 63 69 70 68 65 72 73 20 74 6f 20 75 73 65 20 77 68 65 6e 20 76 65 72 73 69 6f 6e 20 3d 3e | d.ciphers.to.use.when.version.=> |
111400 | 20 32 2e 34 2e 30 20 61 6e 64 20 4e 43 50 20 69 73 20 65 6e 61 62 6c 65 64 20 28 77 68 69 63 68 | .2.4.0.and.NCP.is.enabled.(which |
111420 | 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 29 2e 20 44 65 66 61 75 6c 74 20 4e 43 50 20 63 69 | .is.the.default)..Default.NCP.ci |
111440 | 70 68 65 72 20 66 6f 72 20 76 65 72 73 69 6f 6e 73 20 3e 3d 20 32 2e 34 2e 30 20 69 73 20 61 65 | pher.for.versions.>=.2.4.0.is.ae |
111460 | 73 32 35 36 67 63 6d 2e 20 54 68 65 20 66 69 72 73 74 20 63 69 70 68 65 72 20 69 6e 20 74 68 69 | s256gcm..The.first.cipher.in.thi |
111480 | 73 20 6c 69 73 74 20 69 73 20 77 68 61 74 20 73 65 72 76 65 72 20 70 75 73 68 65 73 20 74 6f 20 | s.list.is.what.server.pushes.to. |
1114a0 | 63 6c 69 65 6e 74 73 2e 00 54 68 69 73 20 73 65 74 73 20 74 68 65 20 63 69 70 68 65 72 20 77 68 | clients..This.sets.the.cipher.wh |
1114c0 | 65 6e 20 4e 43 50 20 28 4e 65 67 6f 74 69 61 62 6c 65 20 43 72 79 70 74 6f 20 50 61 72 61 6d 65 | en.NCP.(Negotiable.Crypto.Parame |
1114e0 | 74 65 72 73 29 20 69 73 20 64 69 73 61 62 6c 65 64 20 6f 72 20 4f 70 65 6e 56 50 4e 20 76 65 72 | ters).is.disabled.or.OpenVPN.ver |
111500 | 73 69 6f 6e 20 3c 20 32 2e 34 2e 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 64 65 66 61 75 | sion.<.2.4.0..This.setting.defau |
111520 | 6c 74 73 20 74 6f 20 31 35 30 30 20 61 6e 64 20 69 73 20 76 61 6c 69 64 20 62 65 74 77 65 65 6e | lts.to.1500.and.is.valid.between |
111540 | 20 31 30 20 61 6e 64 20 36 30 30 30 30 2e 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 65 6e 61 62 | .10.and.60000..This.setting.enab |
111560 | 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 6f 66 20 69 63 | le.or.disable.the.response.of.ic |
111580 | 6d 70 20 62 72 6f 61 64 63 61 73 74 20 6d 65 73 73 61 67 65 73 2e 20 54 68 65 20 66 6f 6c 6c 6f | mp.broadcast.messages..The.follo |
1115a0 | 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c | wing.system.parameter.will.be.al |
1115c0 | 74 65 72 65 64 3a 00 54 68 69 73 20 73 65 74 74 69 6e 67 20 68 61 6e 64 6c 65 20 69 66 20 56 79 | tered:.This.setting.handle.if.Vy |
1115e0 | 4f 53 20 61 63 63 65 70 74 20 70 61 63 6b 65 74 73 20 77 69 74 68 20 61 20 73 6f 75 72 63 65 20 | OS.accept.packets.with.a.source. |
111600 | 72 6f 75 74 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 | route.option..The.following.syst |
111620 | 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 54 68 | em.parameter.will.be.altered:.Th |
111640 | 69 73 20 73 65 74 74 69 6e 67 2c 20 77 68 69 63 68 20 64 65 66 61 75 6c 74 73 20 74 6f 20 33 36 | is.setting,.which.defaults.to.36 |
111660 | 30 30 20 73 65 63 6f 6e 64 73 2c 20 70 75 74 73 20 61 20 6d 61 78 69 6d 75 6d 20 6f 6e 20 74 68 | 00.seconds,.puts.a.maximum.on.th |
111680 | 65 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 6e 65 67 61 74 69 76 65 20 65 6e 74 72 69 65 | e.amount.of.time.negative.entrie |
1116a0 | 73 20 61 72 65 20 63 61 63 68 65 64 2e 00 54 68 69 73 20 73 65 74 75 70 20 77 69 6c 6c 20 6d 61 | s.are.cached..This.setup.will.ma |
1116c0 | 6b 65 20 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 74 68 65 20 | ke.the.VRRP.process.execute.the. |
1116e0 | 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 63 68 65 63 6b 2e 73 68 20 | ``/config/scripts/vrrp-check.sh. |
111700 | 73 63 72 69 70 74 60 60 20 65 76 65 72 79 20 36 30 20 73 65 63 6f 6e 64 73 2c 20 61 6e 64 20 74 | script``.every.60.seconds,.and.t |
111720 | 72 61 6e 73 69 74 69 6f 6e 20 74 68 65 20 67 72 6f 75 70 20 74 6f 20 74 68 65 20 66 61 75 6c 74 | ransition.the.group.to.the.fault |
111740 | 20 73 74 61 74 65 20 69 66 20 69 74 20 66 61 69 6c 73 20 28 69 2e 65 2e 20 65 78 69 74 73 20 77 | .state.if.it.fails.(i.e..exits.w |
111760 | 69 74 68 20 6e 6f 6e 2d 7a 65 72 6f 20 73 74 61 74 75 73 29 20 74 68 72 65 65 20 74 69 6d 65 73 | ith.non-zero.status).three.times |
111780 | 3a 00 54 68 69 73 20 73 74 61 74 65 6d 65 6e 74 20 73 70 65 63 69 66 69 65 73 20 64 68 63 70 36 | :.This.statement.specifies.dhcp6 |
1117a0 | 63 20 74 6f 20 6f 6e 6c 79 20 65 78 63 68 61 6e 67 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 61 6c | c.to.only.exchange.informational |
1117c0 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 73 20 77 69 74 68 20 73 | .configuration.parameters.with.s |
1117e0 | 65 72 76 65 72 73 2e 20 41 20 6c 69 73 74 20 6f 66 20 44 4e 53 20 73 65 72 76 65 72 20 61 64 64 | ervers..A.list.of.DNS.server.add |
111800 | 72 65 73 73 65 73 20 69 73 20 61 6e 20 65 78 61 6d 70 6c 65 20 6f 66 20 73 75 63 68 20 70 61 72 | resses.is.an.example.of.such.par |
111820 | 61 6d 65 74 65 72 73 2e 20 54 68 69 73 20 73 74 61 74 65 6d 65 6e 74 20 69 73 20 75 73 65 66 75 | ameters..This.statement.is.usefu |
111840 | 6c 20 77 68 65 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 6e 65 65 64 20 | l.when.the.client.does.not.need. |
111860 | 73 74 61 74 65 66 75 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 61 6d 65 74 65 72 | stateful.configuration.parameter |
111880 | 73 20 73 75 63 68 20 61 73 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 70 72 65 66 | s.such.as.IPv6.addresses.or.pref |
1118a0 | 69 78 65 73 2e 00 54 68 69 73 20 73 75 70 70 6f 72 74 20 6d 61 79 20 62 65 20 65 6e 61 62 6c 65 | ixes..This.support.may.be.enable |
1118c0 | 64 20 61 64 6d 69 6e 69 73 74 72 61 74 69 76 65 6c 79 20 28 61 6e 64 20 69 6e 64 65 66 69 6e 69 | d.administratively.(and.indefini |
1118e0 | 74 65 6c 79 29 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 63 6d 64 3a 60 61 64 6d 69 6e 69 73 74 | tely).with.the.:cfgcmd:`administ |
111900 | 72 61 74 69 76 65 60 20 63 6f 6d 6d 61 6e 64 2e 20 49 74 20 6d 61 79 20 61 6c 73 6f 20 62 65 20 | rative`.command..It.may.also.be. |
111920 | 65 6e 61 62 6c 65 64 20 63 6f 6e 64 69 74 69 6f 6e 61 6c 6c 79 2e 20 43 6f 6e 64 69 74 69 6f 6e | enabled.conditionally..Condition |
111940 | 61 6c 20 65 6e 61 62 6c 69 6e 67 20 6f 66 20 6d 61 78 2d 6d 65 74 72 69 63 20 72 6f 75 74 65 72 | al.enabling.of.max-metric.router |
111960 | 2d 6c 73 61 73 20 63 61 6e 20 62 65 20 66 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 20 73 65 63 | -lsas.can.be.for.a.period.of.sec |
111980 | 6f 6e 64 73 20 61 66 74 65 72 20 73 74 61 72 74 75 70 20 77 69 74 68 20 74 68 65 20 3a 63 66 67 | onds.after.startup.with.the.:cfg |
1119a0 | 63 6d 64 3a 60 6f 6e 2d 73 74 61 72 74 75 70 20 3c 73 65 63 6f 6e 64 73 3e 60 20 63 6f 6d 6d 61 | cmd:`on-startup.<seconds>`.comma |
1119c0 | 6e 64 20 61 6e 64 2f 6f 72 20 66 6f 72 20 61 20 70 65 72 69 6f 64 20 6f 66 20 73 65 63 6f 6e 64 | nd.and/or.for.a.period.of.second |
1119e0 | 73 20 70 72 69 6f 72 20 74 6f 20 73 68 75 74 64 6f 77 6e 20 77 69 74 68 20 74 68 65 20 3a 63 66 | s.prior.to.shutdown.with.the.:cf |
111a00 | 67 63 6d 64 3a 60 6f 6e 2d 73 68 75 74 64 6f 77 6e 20 3c 73 65 63 6f 6e 64 73 3e 60 20 63 6f 6d | gcmd:`on-shutdown.<seconds>`.com |
111a20 | 6d 61 6e 64 2e 20 54 68 65 20 74 69 6d 65 20 72 61 6e 67 65 20 69 73 20 35 20 74 6f 20 38 36 34 | mand..The.time.range.is.5.to.864 |
111a40 | 30 30 2e 00 54 68 69 73 20 74 65 63 68 6e 69 71 75 65 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 72 | 00..This.technique.is.commonly.r |
111a60 | 65 66 65 72 72 65 64 20 74 6f 20 61 73 20 4e 41 54 20 52 65 66 6c 65 63 74 69 6f 6e 20 6f 72 20 | eferred.to.as.NAT.Reflection.or. |
111a80 | 48 61 69 72 70 69 6e 20 4e 41 54 2e 00 54 68 69 73 20 74 65 63 68 6e 6f 6c 6f 67 79 20 69 73 20 | Hairpin.NAT..This.technology.is. |
111aa0 | 6b 6e 6f 77 6e 20 62 79 20 64 69 66 66 65 72 65 6e 74 20 6e 61 6d 65 73 3a 00 54 68 69 73 20 74 | known.by.different.names:.This.t |
111ac0 | 68 65 20 73 69 6d 70 6c 65 73 74 20 71 75 65 75 65 20 70 6f 73 73 69 62 6c 65 20 79 6f 75 20 63 | he.simplest.queue.possible.you.c |
111ae0 | 61 6e 20 61 70 70 6c 79 20 74 6f 20 79 6f 75 72 20 74 72 61 66 66 69 63 2e 20 54 72 61 66 66 69 | an.apply.to.your.traffic..Traffi |
111b00 | 63 20 6d 75 73 74 20 67 6f 20 74 68 72 6f 75 67 68 20 61 20 66 69 6e 69 74 65 20 71 75 65 75 65 | c.must.go.through.a.finite.queue |
111b20 | 20 62 65 66 6f 72 65 20 69 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 73 65 6e 74 2e 20 59 6f 75 | .before.it.is.actually.sent..You |
111b40 | 20 6d 75 73 74 20 64 65 66 69 6e 65 20 68 6f 77 20 6d 61 6e 79 20 70 61 63 6b 65 74 73 20 74 68 | .must.define.how.many.packets.th |
111b60 | 61 74 20 71 75 65 75 65 20 63 61 6e 20 63 6f 6e 74 61 69 6e 2e 00 54 68 69 73 20 74 6f 70 6f 6c | at.queue.can.contain..This.topol |
111b80 | 6f 67 79 20 77 61 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 47 4e 53 33 2e 00 54 68 69 73 20 77 | ogy.was.built.using.GNS3..This.w |
111ba0 | 69 6c 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 74 69 6f 6e 20 74 6f 20 | ill.add.the.following.option.to. |
111bc0 | 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 68 69 73 20 77 69 6c | the.Kernel.commandline:.This.wil |
111be0 | 6c 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 | l.add.the.following.two.options. |
111c00 | 74 6f 20 74 68 65 20 4b 65 72 6e 65 6c 20 63 6f 6d 6d 61 6e 64 6c 69 6e 65 3a 00 54 68 69 73 20 | to.the.Kernel.commandline:.This. |
111c20 | 77 69 6c 6c 20 62 65 20 74 68 65 20 6d 6f 73 74 20 77 69 64 65 6c 79 20 75 73 65 64 20 69 6e 74 | will.be.the.most.widely.used.int |
111c40 | 65 72 66 61 63 65 20 6f 6e 20 61 20 72 6f 75 74 65 72 20 63 61 72 72 79 69 6e 67 20 74 72 61 66 | erface.on.a.router.carrying.traf |
111c60 | 66 69 63 20 74 6f 20 74 68 65 20 72 65 61 6c 20 77 6f 72 6c 64 2e 00 54 68 69 73 20 77 69 6c 6c | fic.to.the.real.world..This.will |
111c80 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 74 61 74 69 63 20 41 52 50 20 65 6e 74 72 79 20 61 6c | .configure.a.static.ARP.entry.al |
111ca0 | 77 61 79 73 20 72 65 73 6f 6c 76 69 6e 67 20 60 3c 61 64 64 72 65 73 73 3e 60 20 74 6f 20 60 3c | ways.resolving.`<address>`.to.`< |
111cc0 | 6d 61 63 3e 60 20 66 6f 72 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e | mac>`.for.interface.`<interface> |
111ce0 | 60 2e 00 54 68 69 73 20 77 69 6c 6c 20 6d 61 74 63 68 20 54 43 50 20 74 72 61 66 66 69 63 20 77 | `..This.will.match.TCP.traffic.w |
111d00 | 69 74 68 20 73 6f 75 72 63 65 20 70 6f 72 74 20 38 30 2e 00 54 68 69 73 20 77 69 6c 6c 20 72 65 | ith.source.port.80..This.will.re |
111d20 | 6e 64 65 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 64 64 63 6c 69 65 6e 74 5f 20 63 6f 6e | nder.the.following.ddclient_.con |
111d40 | 66 69 67 75 72 61 74 69 6f 6e 20 65 6e 74 72 79 3a 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 | figuration.entry:.This.will.show |
111d60 | 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 72 65 77 61 6c 6c 20 6f 76 65 72 76 69 65 77 00 54 | .you.a.basic.firewall.overview.T |
111d80 | 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 66 69 72 65 77 61 | his.will.show.you.a.basic.firewa |
111da0 | 6c 6c 20 6f 76 65 72 76 69 65 77 2c 20 66 6f 72 20 61 6c 6c 20 72 75 6c 65 73 65 74 2c 20 61 6e | ll.overview,.for.all.ruleset,.an |
111dc0 | 64 20 6e 6f 74 20 6f 6e 6c 79 20 66 6f 72 20 69 70 76 34 00 54 68 69 73 20 77 69 6c 6c 20 73 68 | d.not.only.for.ipv4.This.will.sh |
111de0 | 6f 77 20 79 6f 75 20 61 20 62 61 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 61 20 70 61 72 74 | ow.you.a.basic.summary.of.a.part |
111e00 | 69 63 75 6c 61 72 20 7a 6f 6e 65 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 | icular.zone..This.will.show.you. |
111e20 | 61 20 62 61 73 69 63 20 73 75 6d 6d 61 72 79 20 6f 66 20 7a 6f 6e 65 73 20 63 6f 6e 66 69 67 75 | a.basic.summary.of.zones.configu |
111e40 | 72 61 74 69 6f 6e 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 72 75 6c | ration..This.will.show.you.a.rul |
111e60 | 65 2d 73 65 74 20 73 74 61 74 69 73 74 69 63 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 62 | e-set.statistic.since.the.last.b |
111e80 | 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 73 74 61 74 69 73 | oot..This.will.show.you.a.statis |
111ea0 | 74 69 63 20 6f 66 20 61 6c 6c 20 72 75 6c 65 2d 73 65 74 73 20 73 69 6e 63 65 20 74 68 65 20 6c | tic.of.all.rule-sets.since.the.l |
111ec0 | 61 73 74 20 62 6f 6f 74 2e 00 54 68 69 73 20 77 69 6c 6c 20 73 68 6f 77 20 79 6f 75 20 61 20 73 | ast.boot..This.will.show.you.a.s |
111ee0 | 75 6d 6d 61 72 79 20 6f 66 20 72 75 6c 65 2d 73 65 74 73 20 61 6e 64 20 67 72 6f 75 70 73 00 54 | ummary.of.rule-sets.and.groups.T |
111f00 | 68 69 73 20 77 6f 72 6b 61 72 6f 75 6e 64 20 6c 65 74 73 20 79 6f 75 20 61 70 70 6c 79 20 61 20 | his.workaround.lets.you.apply.a. |
111f20 | 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 20 74 6f 20 74 68 65 20 69 6e 67 72 65 73 73 20 74 72 | shaping.policy.to.the.ingress.tr |
111f40 | 61 66 66 69 63 20 62 79 20 66 69 72 73 74 20 72 65 64 69 72 65 63 74 69 6e 67 20 69 74 20 74 6f | affic.by.first.redirecting.it.to |
111f60 | 20 61 6e 20 69 6e 2d 62 65 74 77 65 65 6e 20 76 69 72 74 75 61 6c 20 69 6e 74 65 72 66 61 63 65 | .an.in-between.virtual.interface |
111f80 | 20 28 60 49 6e 74 65 72 6d 65 64 69 61 74 65 20 46 75 6e 63 74 69 6f 6e 61 6c 20 42 6c 6f 63 6b | .(`Intermediate.Functional.Block |
111fa0 | 60 5f 29 2e 20 54 68 65 72 65 2c 20 69 6e 20 74 68 61 74 20 76 69 72 74 75 61 6c 20 69 6e 74 65 | `_)..There,.in.that.virtual.inte |
111fc0 | 72 66 61 63 65 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 | rface,.you.will.be.able.to.apply |
111fe0 | 20 61 6e 79 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 69 65 73 20 74 68 61 74 20 77 6f 72 6b 20 66 | .any.of.the.policies.that.work.f |
112000 | 6f 72 20 6f 75 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2c 20 66 6f 72 20 69 6e 73 74 61 6e 63 | or.outbound.traffic,.for.instanc |
112020 | 65 2c 20 61 20 73 68 61 70 69 6e 67 20 6f 6e 65 2e 00 54 68 69 73 20 77 6f 75 6c 64 20 67 65 6e | e,.a.shaping.one..This.would.gen |
112040 | 65 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f | erate.the.following.configuratio |
112060 | 6e 3a 00 54 68 72 65 65 20 73 69 67 6e 69 66 69 63 61 6e 74 20 76 65 72 73 69 6f 6e 73 20 6f 66 | n:.Three.significant.versions.of |
112080 | 20 53 4e 4d 50 20 68 61 76 65 20 62 65 65 6e 20 64 65 76 65 6c 6f 70 65 64 20 61 6e 64 20 64 65 | .SNMP.have.been.developed.and.de |
1120a0 | 70 6c 6f 79 65 64 2e 20 53 4e 4d 50 76 31 20 69 73 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 76 | ployed..SNMPv1.is.the.original.v |
1120c0 | 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 2e 20 4d 6f 72 65 20 72 65 63 | ersion.of.the.protocol..More.rec |
1120e0 | 65 6e 74 20 76 65 72 73 69 6f 6e 73 2c 20 53 4e 4d 50 76 32 63 20 61 6e 64 20 53 4e 4d 50 76 33 | ent.versions,.SNMPv2c.and.SNMPv3 |
112100 | 2c 20 66 65 61 74 75 72 65 20 69 6d 70 72 6f 76 65 6d 65 6e 74 73 20 69 6e 20 70 65 72 66 6f 72 | ,.feature.improvements.in.perfor |
112120 | 6d 61 6e 63 65 2c 20 66 6c 65 78 69 62 69 6c 69 74 79 20 61 6e 64 20 73 65 63 75 72 69 74 79 2e | mance,.flexibility.and.security. |
112140 | 00 54 69 6d 65 20 5a 6f 6e 65 00 54 69 6d 65 20 5a 6f 6e 65 20 73 65 74 74 69 6e 67 20 69 73 20 | .Time.Zone.Time.Zone.setting.is. |
112160 | 76 65 72 79 20 69 6d 70 6f 72 74 61 6e 74 20 61 73 20 65 2e 67 20 61 6c 6c 20 79 6f 75 72 20 6c | very.important.as.e.g.all.your.l |
112180 | 6f 67 66 69 6c 65 20 65 6e 74 72 69 65 73 20 77 69 6c 6c 20 62 65 20 62 61 73 65 64 20 6f 6e 20 | ogfile.entries.will.be.based.on. |
1121a0 | 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 7a 6f 6e 65 2e 20 57 69 74 68 6f 75 74 20 70 72 6f | the.configured.zone..Without.pro |
1121c0 | 70 65 72 20 74 69 6d 65 20 7a 6f 6e 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 74 20 77 | per.time.zone.configuration.it.w |
1121e0 | 69 6c 6c 20 62 65 20 76 65 72 79 20 64 69 66 66 69 63 75 6c 74 20 74 6f 20 63 6f 6d 70 61 72 65 | ill.be.very.difficult.to.compare |
112200 | 20 6c 6f 67 66 69 6c 65 73 20 66 72 6f 6d 20 64 69 66 66 65 72 65 6e 74 20 73 79 73 74 65 6d 73 | .logfiles.from.different.systems |
112220 | 2e 00 54 69 6d 65 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 72 | ..Time.in.milliseconds.between.r |
112240 | 65 74 72 61 6e 73 6d 69 74 74 65 64 20 4e 65 69 67 68 62 6f 72 20 53 6f 6c 69 63 69 74 61 74 69 | etransmitted.Neighbor.Solicitati |
112260 | 6f 6e 20 6d 65 73 73 61 67 65 73 00 54 69 6d 65 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 | on.messages.Time.in.seconds.that |
112280 | 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 70 72 65 66 65 72 72 65 | .the.prefix.will.remain.preferre |
1122a0 | 64 20 28 64 65 66 61 75 6c 74 20 34 20 68 6f 75 72 73 29 00 54 69 6d 65 20 69 6e 20 73 65 63 6f | d.(default.4.hours).Time.in.seco |
1122c0 | 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 6d 61 69 6e 20 | nds.that.the.prefix.will.remain. |
1122e0 | 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 3a 20 33 30 20 64 61 79 73 29 00 54 69 6d 65 20 69 6e | valid.(default:.30.days).Time.in |
112300 | 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 74 68 65 20 70 72 65 66 69 78 20 77 69 6c 6c 20 72 65 | .seconds.that.the.prefix.will.re |
112320 | 6d 61 69 6e 20 76 61 6c 69 64 20 28 64 65 66 61 75 6c 74 3a 20 36 35 35 32 38 20 73 65 63 6f 6e | main.valid.(default:.65528.secon |
112340 | 64 73 29 00 54 69 6d 65 20 69 73 20 69 6e 20 6d 69 6e 75 74 65 73 20 61 6e 64 20 64 65 66 61 75 | ds).Time.is.in.minutes.and.defau |
112360 | 6c 74 73 20 74 6f 20 36 30 2e 00 54 69 6d 65 20 74 6f 20 6d 61 74 63 68 20 74 68 65 20 64 65 66 | lts.to.60..Time.to.match.the.def |
112380 | 69 6e 65 64 20 72 75 6c 65 2e 00 54 69 6d 65 2c 20 69 6e 20 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 | ined.rule..Time,.in.milliseconds |
1123a0 | 2c 20 74 68 61 74 20 61 20 6e 6f 64 65 20 61 73 73 75 6d 65 73 20 61 20 6e 65 69 67 68 62 6f 72 | ,.that.a.node.assumes.a.neighbor |
1123c0 | 20 69 73 20 72 65 61 63 68 61 62 6c 65 20 61 66 74 65 72 20 68 61 76 69 6e 67 20 72 65 63 65 69 | .is.reachable.after.having.recei |
1123e0 | 76 65 64 20 61 20 72 65 61 63 68 61 62 69 6c 69 74 79 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 00 | ved.a.reachability.confirmation. |
112400 | 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f 6e 64 73 00 54 69 6d 65 6f 75 74 20 69 6e 20 73 65 | Timeout.in.seconds.Timeout.in.se |
112420 | 63 6f 6e 64 73 20 62 65 74 77 65 65 6e 20 68 65 61 6c 74 68 20 74 61 72 67 65 74 20 63 68 65 63 | conds.between.health.target.chec |
112440 | 6b 73 2e 00 54 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 20 72 65 70 6c 79 20 66 6f 72 20 49 6e | ks..Timeout.to.wait.reply.for.In |
112460 | 74 65 72 69 6d 2d 55 70 64 61 74 65 20 70 61 63 6b 65 74 73 2e 20 28 64 65 66 61 75 6c 74 20 33 | terim-Update.packets..(default.3 |
112480 | 20 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 6f 75 74 20 74 6f 20 77 61 69 74 20 72 65 73 70 6f 6e | .seconds).Timeout.to.wait.respon |
1124a0 | 73 65 20 66 72 6f 6d 20 73 65 72 76 65 72 20 28 73 65 63 6f 6e 64 73 29 00 54 69 6d 65 72 73 00 | se.from.server.(seconds).Timers. |
1124c0 | 54 6f 20 61 63 74 69 76 61 74 65 20 74 68 65 20 56 4c 41 4e 20 61 77 61 72 65 20 62 72 69 64 67 | To.activate.the.VLAN.aware.bridg |
1124e0 | 65 2c 20 79 6f 75 20 6d 75 73 74 20 61 63 74 69 76 61 74 65 20 74 68 69 73 20 73 65 74 74 69 6e | e,.you.must.activate.this.settin |
112500 | 67 20 74 6f 20 75 73 65 20 56 4c 41 4e 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 62 | g.to.use.VLAN.settings.for.the.b |
112520 | 72 69 64 67 65 00 54 6f 20 61 6c 6c 6f 77 20 56 50 4e 2d 63 6c 69 65 6e 74 73 20 61 63 63 65 73 | ridge.To.allow.VPN-clients.acces |
112540 | 73 20 76 69 61 20 79 6f 75 72 20 65 78 74 65 72 6e 61 6c 20 61 64 64 72 65 73 73 2c 20 61 20 4e | s.via.your.external.address,.a.N |
112560 | 41 54 20 72 75 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 6c 69 | AT.rule.is.required:.To.allow.li |
112580 | 73 74 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 75 73 74 6f 6d 20 64 6f 6d 61 69 6e 2c 20 | sting.additional.custom.domain,. |
1125a0 | 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 6f 70 65 6e 74 68 72 65 61 64 2e 74 68 72 65 61 64 2e | for.example.``openthread.thread. |
1125c0 | 68 6f 6d 65 2e 61 72 70 61 60 60 2c 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 72 65 66 6c | home.arpa``,.so.that.it.can.refl |
1125e0 | 65 63 74 65 64 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 64 65 66 61 75 6c 74 | ected.in.addition.to.the.default |
112600 | 20 60 60 6c 6f 63 61 6c 60 60 2c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f | .``local``,.use.the.following.co |
112620 | 6d 6d 61 6e 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 63 20 73 65 | mmand:.To.allow.only.specific.se |
112640 | 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 20 60 60 5f 61 69 72 70 6c 61 79 2e 5f | rvices,.for.example.``_airplay._ |
112660 | 74 63 70 60 60 20 6f 72 20 60 60 5f 69 70 70 2e 5f 74 63 70 60 60 2c 20 28 69 6e 73 74 65 61 64 | tcp``.or.``_ipp._tcp``,.(instead |
112680 | 20 6f 66 20 61 6c 6c 20 73 65 72 76 69 63 65 73 29 20 74 6f 20 62 65 20 72 65 2d 62 72 6f 61 64 | .of.all.services).to.be.re-broad |
1126a0 | 63 61 73 74 65 64 2c 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e | casted,.use.the.following.comman |
1126c0 | 64 3a 00 54 6f 20 61 6c 6c 6f 77 20 74 72 61 66 66 69 63 20 74 6f 20 70 61 73 73 20 74 68 72 6f | d:.To.allow.traffic.to.pass.thro |
1126e0 | 75 67 68 20 74 6f 20 63 6c 69 65 6e 74 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 61 64 64 20 | ugh.to.clients,.you.need.to.add. |
112700 | 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 75 6c 65 73 2e 20 28 69 66 20 79 6f 75 20 75 73 65 | the.following.rules..(if.you.use |
112720 | 64 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 74 20 74 | d.the.default.configuration.at.t |
112740 | 68 65 20 74 6f 70 20 6f 66 20 74 68 69 73 20 70 61 67 65 29 00 54 6f 20 61 70 70 6c 79 20 74 68 | he.top.of.this.page).To.apply.th |
112760 | 69 73 20 70 6f 6c 69 63 79 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 69 6e 74 65 72 66 61 | is.policy.to.the.correct.interfa |
112780 | 63 65 2c 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 | ce,.configure.it.on.the.interfac |
1127a0 | 65 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6c 6f 63 61 6c 20 68 6f 73 74 20 77 69 6c 6c 20 73 65 | e.the.inbound.local.host.will.se |
1127c0 | 6e 64 20 74 68 72 6f 75 67 68 20 74 6f 20 72 65 61 63 68 20 6f 75 72 20 64 65 73 74 69 6e 65 64 | nd.through.to.reach.our.destined |
1127e0 | 20 74 61 72 67 65 74 20 68 6f 73 74 20 28 69 6e 20 6f 75 72 20 65 78 61 6d 70 6c 65 20 65 74 68 | .target.host.(in.our.example.eth |
112800 | 31 29 2e 00 54 6f 20 61 75 74 6f 20 75 70 64 61 74 65 20 74 68 65 20 62 6c 61 63 6b 6c 69 73 74 | 1)..To.auto.update.the.blacklist |
112820 | 20 66 69 6c 65 73 00 54 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 61 73 73 69 67 6e 20 74 | .files.To.automatically.assign.t |
112840 | 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 61 73 20 74 75 6e 6e 65 | he.client.an.IP.address.as.tunne |
112860 | 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 65 6e 74 20 49 50 20 70 6f 6f 6c 20 69 73 20 | l.endpoint,.a.client.IP.pool.is. |
112880 | 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 65 20 63 61 6e 20 62 65 20 65 69 74 68 65 72 | needed..The.source.can.be.either |
1128a0 | 20 52 41 44 49 55 53 20 6f 72 20 61 20 6c 6f 63 61 6c 20 73 75 62 6e 65 74 20 6f 72 20 49 50 20 | .RADIUS.or.a.local.subnet.or.IP. |
1128c0 | 72 61 6e 67 65 20 64 65 66 69 6e 69 74 69 6f 6e 2e 00 54 6f 20 61 75 74 6f 6d 61 74 69 63 61 6c | range.definition..To.automatical |
1128e0 | 6c 79 20 61 73 73 69 67 6e 20 74 68 65 20 63 6c 69 65 6e 74 20 61 6e 20 49 50 20 61 64 64 72 65 | ly.assign.the.client.an.IP.addre |
112900 | 73 73 20 61 73 20 74 75 6e 6e 65 6c 20 65 6e 64 70 6f 69 6e 74 2c 20 61 20 63 6c 69 65 6e 74 20 | ss.as.tunnel.endpoint,.a.client. |
112920 | 49 50 20 70 6f 6f 6c 20 69 73 20 6e 65 65 64 65 64 2e 20 54 68 65 20 73 6f 75 72 63 65 20 63 61 | IP.pool.is.needed..The.source.ca |
112940 | 6e 20 62 65 20 65 69 74 68 65 72 20 52 41 44 49 55 53 20 6f 72 20 61 20 6e 61 6d 65 64 20 70 6f | n.be.either.RADIUS.or.a.named.po |
112960 | 6f 6c 2e 20 54 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 | ol..There.is.possibility.to.crea |
112980 | 74 65 20 6d 75 6c 74 69 70 6c 65 20 6e 61 6d 65 64 20 70 6f 6f 6c 73 2e 20 45 61 63 68 20 6e 61 | te.multiple.named.pools..Each.na |
1129a0 | 6d 65 64 20 70 6f 6f 6c 20 63 61 6e 20 69 6e 63 6c 75 64 65 20 6f 6e 6c 79 20 6f 6e 65 20 61 64 | med.pool.can.include.only.one.ad |
1129c0 | 64 72 65 73 73 20 72 61 6e 67 65 2e 20 54 6f 20 75 73 65 20 6d 75 6c 74 69 70 6c 65 20 61 64 64 | dress.range..To.use.multiple.add |
1129e0 | 72 65 73 73 20 72 61 6e 67 65 73 20 63 6f 6e 66 69 67 75 72 65 20 60 60 6e 65 78 74 2d 70 6f 6f | ress.ranges.configure.``next-poo |
112a00 | 6c 60 60 20 6f 70 74 69 6f 6e 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e | l``.option..To.be.used.only.when |
112a20 | 20 60 60 61 63 74 69 6f 6e 60 60 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 | .``action``.is.set.to.``jump``.. |
112a40 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 | Use.this.command.to.specify.jump |
112a60 | 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 60 60 | .target..To.be.used.only.when.`` |
112a80 | 64 65 66 75 6c 74 2d 61 63 74 69 6f 6e 60 60 20 69 73 20 73 65 74 20 74 6f 20 60 60 6a 75 6d 70 | defult-action``.is.set.to.``jump |
112aa0 | 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 | ``..Use.this.command.to.specify. |
112ac0 | 6a 75 6d 70 20 74 61 72 67 65 74 20 66 6f 72 20 64 65 66 61 75 6c 74 20 72 75 6c 65 2e 00 54 6f | jump.target.for.default.rule..To |
112ae0 | 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 | .be.used.only.when.action.is.set |
112b00 | 20 74 6f 20 60 60 6a 75 6d 70 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .to.``jump``..Use.this.command.t |
112b20 | 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 65 20 75 73 65 | o.specify.jump.target..To.be.use |
112b40 | 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 | d.only.when.action.is.set.to.``q |
112b60 | 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 74 | ueue``..Use.this.command.to.dist |
112b80 | 72 69 62 75 74 65 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 61 6c 20 71 | ribute.packets.between.several.q |
112ba0 | 75 65 75 65 73 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 | ueues..To.be.used.only.when.acti |
112bc0 | 6f 6e 20 69 73 20 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 | on.is.set.to.``queue``..Use.this |
112be0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 65 74 20 70 61 63 6b 65 74 20 67 6f 20 74 68 72 6f 75 67 | .command.to.let.packet.go.throug |
112c00 | 68 20 66 69 72 65 77 61 6c 6c 20 77 68 65 6e 20 6e 6f 20 75 73 65 72 73 70 61 63 65 20 73 6f 66 | h.firewall.when.no.userspace.sof |
112c20 | 74 77 61 72 65 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 74 68 65 20 71 75 65 75 65 2e | tware.is.connected.to.the.queue. |
112c40 | 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 20 | .To.be.used.only.when.action.is. |
112c60 | 73 65 74 20 74 6f 20 60 60 71 75 65 75 65 60 60 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | set.to.``queue``..Use.this.comma |
112c80 | 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 71 75 65 75 65 20 74 61 72 67 65 74 20 74 6f 20 75 73 | nd.to.specify.queue.target.to.us |
112ca0 | 65 2e 20 51 75 65 75 65 20 72 61 6e 67 65 20 69 73 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 65 64 | e..Queue.range.is.also.supported |
112cc0 | 2e 00 54 6f 20 62 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 68 65 6e 20 61 63 74 69 6f 6e 20 69 73 | ..To.be.used.only.when.action.is |
112ce0 | 20 73 65 74 20 74 6f 20 6a 75 6d 70 2e 20 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .set.to.jump..Use.this.command.t |
112d00 | 6f 20 73 70 65 63 69 66 79 20 6a 75 6d 70 20 74 61 72 67 65 74 2e 00 54 6f 20 62 79 70 61 73 73 | o.specify.jump.target..To.bypass |
112d20 | 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 65 76 65 72 79 20 72 65 71 75 65 73 74 20 74 68 61 | .the.proxy.for.every.request.tha |
112d40 | 74 20 69 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 61 20 73 70 65 63 69 66 69 63 20 73 6f 75 72 | t.is.coming.from.a.specific.sour |
112d60 | 63 65 3a 00 54 6f 20 62 79 70 61 73 73 20 74 68 65 20 70 72 6f 78 79 20 66 6f 72 20 65 76 65 72 | ce:.To.bypass.the.proxy.for.ever |
112d80 | 79 20 72 65 71 75 65 73 74 20 74 68 61 74 20 69 73 20 64 69 72 65 63 74 65 64 20 74 6f 20 61 20 | y.request.that.is.directed.to.a. |
112da0 | 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 3a 00 54 6f 20 63 6f 6e 66 69 67 75 | specific.destination:.To.configu |
112dc0 | 72 65 20 49 50 76 36 20 61 73 73 69 67 6e 6d 65 6e 74 73 20 66 6f 72 20 63 6c 69 65 6e 74 73 2c | re.IPv6.assignments.for.clients, |
112de0 | 20 74 77 6f 20 6f 70 74 69 6f 6e 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 6f 6e 66 69 67 75 72 | .two.options.need.to.be.configur |
112e00 | 65 64 2e 20 41 20 67 6c 6f 62 61 6c 20 70 72 65 66 69 78 20 77 68 69 63 68 20 69 73 20 74 65 72 | ed..A.global.prefix.which.is.ter |
112e20 | 6d 69 6e 61 74 65 64 20 6f 6e 20 74 68 65 20 63 6c 69 65 6e 74 73 20 63 70 65 20 61 6e 64 20 61 | minated.on.the.clients.cpe.and.a |
112e40 | 20 64 65 6c 65 67 61 74 65 64 20 70 72 65 66 69 78 2c 20 74 68 65 20 63 6c 69 65 6e 74 20 63 61 | .delegated.prefix,.the.client.ca |
112e60 | 6e 20 75 73 65 20 66 6f 72 20 64 65 76 69 63 65 73 20 72 6f 75 74 65 64 20 76 69 61 20 74 68 65 | n.use.for.devices.routed.via.the |
112e80 | 20 63 6c 69 65 6e 74 73 20 63 70 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 56 79 4f 53 20 | .clients.cpe..To.configure.VyOS. |
112ea0 | 77 69 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 6c 65 67 61 63 79 20 66 69 72 65 77 61 6c 6c 20 63 | with.the.:doc:`legacy.firewall.c |
112ec0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 | onfiguration.</configuration/fir |
112ee0 | 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 2d 6c 65 67 61 63 79 3e 60 00 54 6f 20 63 6f 6e 66 69 67 | ewall/general-legacy>`.To.config |
112f00 | 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 3a 64 6f 63 3a 60 7a 6f 6e 65 2d 62 61 73 | ure.VyOS.with.the.:doc:`zone-bas |
112f20 | 65 64 20 66 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 | ed.firewall.configuration.</conf |
112f40 | 69 67 75 72 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 7a 6f 6e 65 3e 60 00 54 6f 20 63 6f 6e | iguration/firewall/zone>`.To.con |
112f60 | 66 69 67 75 72 65 20 56 79 4f 53 20 77 69 74 68 20 74 68 65 20 6e 65 77 20 3a 64 6f 63 3a 60 66 | figure.VyOS.with.the.new.:doc:`f |
112f80 | 69 72 65 77 61 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 3c 2f 63 6f 6e 66 69 67 75 72 | irewall.configuration.</configur |
112fa0 | 61 74 69 6f 6e 2f 66 69 72 65 77 61 6c 6c 2f 67 65 6e 65 72 61 6c 3e 60 00 54 6f 20 63 6f 6e 66 | ation/firewall/general>`.To.conf |
112fc0 | 69 67 75 72 65 20 62 6c 6f 63 6b 69 6e 67 20 61 64 64 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | igure.blocking.add.the.following |
112fe0 | 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 00 54 6f 20 63 6f 6e 66 69 67 75 | .to.the.configuration.To.configu |
113000 | 72 65 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 79 6f 75 20 6e | re.site-to-site.connection.you.n |
113020 | 65 65 64 20 74 6f 20 61 64 64 20 70 65 65 72 73 20 77 69 74 68 20 74 68 65 20 60 60 73 65 74 20 | eed.to.add.peers.with.the.``set. |
113040 | 76 70 6e 20 69 70 73 65 63 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 70 65 65 72 20 3c 6e 61 6d | vpn.ipsec.site-to-site.peer.<nam |
113060 | 65 3e 60 60 20 63 6f 6d 6d 61 6e 64 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 73 79 73 6c 6f | e>``.command..To.configure.syslo |
113080 | 67 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 63 68 20 69 6e 74 6f 20 63 6f 6e 66 69 | g,.you.need.to.switch.into.confi |
1130a0 | 67 75 72 61 74 69 6f 6e 20 6d 6f 64 65 2e 00 54 6f 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 | guration.mode..To.configure.your |
1130c0 | 20 4c 43 44 20 64 69 73 70 6c 61 79 20 79 6f 75 20 6d 75 73 74 20 66 69 72 73 74 20 69 64 65 6e | .LCD.display.you.must.first.iden |
1130e0 | 74 69 66 79 20 74 68 65 20 75 73 65 64 20 68 61 72 64 77 61 72 65 2c 20 61 6e 64 20 63 6f 6e 6e | tify.the.used.hardware,.and.conn |
113100 | 65 63 74 69 76 69 74 79 20 6f 66 20 74 68 65 20 64 69 73 70 6c 61 79 20 74 6f 20 79 6f 75 72 20 | ectivity.of.the.display.to.your. |
113120 | 73 79 73 74 65 6d 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 6e 79 20 73 65 72 69 61 6c 20 70 | system..This.can.be.any.serial.p |
113140 | 6f 72 74 20 28 60 74 74 79 53 78 78 60 29 20 6f 72 20 73 65 72 69 61 6c 20 76 69 61 20 55 53 42 | ort.(`ttySxx`).or.serial.via.USB |
113160 | 20 6f 72 20 65 76 65 6e 20 6f 6c 64 20 70 61 72 61 6c 6c 65 6c 20 70 6f 72 74 20 69 6e 74 65 72 | .or.even.old.parallel.port.inter |
113180 | 66 61 63 65 73 2e 00 54 6f 20 63 72 65 61 74 65 20 56 4c 41 4e 73 20 70 65 72 20 75 73 65 72 20 | faces..To.create.VLANs.per.user. |
1131a0 | 64 75 72 69 6e 67 20 72 75 6e 74 69 6d 65 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 | during.runtime,.the.following.se |
1131c0 | 74 74 69 6e 67 73 20 61 72 65 20 72 65 71 75 69 72 65 64 20 6f 6e 20 61 20 70 65 72 20 69 6e 74 | ttings.are.required.on.a.per.int |
1131e0 | 65 72 66 61 63 65 20 62 61 73 69 73 2e 20 56 4c 41 4e 20 49 44 20 61 6e 64 20 56 4c 41 4e 20 72 | erface.basis..VLAN.ID.and.VLAN.r |
113200 | 61 6e 67 65 20 63 61 6e 20 62 65 20 70 72 65 73 65 6e 74 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 | ange.can.be.present.in.the.confi |
113220 | 67 75 72 61 74 69 6f 6e 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 00 54 6f 20 63 72 | guration.at.the.same.time..To.cr |
113240 | 65 61 74 65 20 61 20 6e 65 77 20 6c 69 6e 65 20 69 6e 20 79 6f 75 72 20 6c 6f 67 69 6e 20 6d 65 | eate.a.new.line.in.your.login.me |
113260 | 73 73 61 67 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 65 73 63 61 70 65 20 74 68 65 20 6e 65 77 | ssage.you.need.to.escape.the.new |
113280 | 20 6c 69 6e 65 20 63 68 61 72 61 63 74 65 72 20 62 79 20 75 73 69 6e 67 20 60 60 5c 5c 6e 60 60 | .line.character.by.using.``\\n`` |
1132a0 | 2e 00 54 6f 20 63 72 65 61 74 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 74 75 6e 6e 65 6c | ..To.create.more.than.one.tunnel |
1132c0 | 2c 20 75 73 65 20 64 69 73 74 69 6e 63 74 20 55 44 50 20 70 6f 72 74 73 2e 00 54 6f 20 63 72 65 | ,.use.distinct.UDP.ports..To.cre |
1132e0 | 61 74 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 31 30 30 20 61 6e 64 20 61 64 64 20 61 20 | ate.routing.table.100.and.add.a. |
113300 | 6e 65 77 20 64 65 66 61 75 6c 74 20 67 61 74 65 77 61 79 20 74 6f 20 62 65 20 75 73 65 64 20 62 | new.default.gateway.to.be.used.b |
113320 | 79 20 74 72 61 66 66 69 63 20 6d 61 74 63 68 69 6e 67 20 6f 75 72 20 72 6f 75 74 65 20 70 6f 6c | y.traffic.matching.our.route.pol |
113340 | 69 63 79 3a 00 54 6f 20 64 65 66 69 6e 65 20 61 20 7a 6f 6e 65 20 73 65 74 75 70 20 65 69 74 68 | icy:.To.define.a.zone.setup.eith |
113360 | 65 72 20 6f 6e 65 20 77 69 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6f 72 20 61 20 6c 6f 63 61 | er.one.with.interfaces.or.a.loca |
113380 | 6c 20 7a 6f 6e 65 2e 00 54 6f 20 64 69 73 61 62 6c 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 | l.zone..To.disable.advertisement |
1133a0 | 73 20 77 69 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 | s.without.deleting.the.configura |
1133c0 | 74 69 6f 6e 3a 00 54 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 | tion:.To.display.the.configured. |
1133e0 | 4f 54 50 20 75 73 65 72 20 6b 65 79 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 | OTP.user.key,.use.the.command:.T |
113400 | 6f 20 64 69 73 70 6c 61 79 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 4f 54 50 20 75 73 65 | o.display.the.configured.OTP.use |
113420 | 72 20 73 65 74 74 69 6e 67 73 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 | r.settings,.use.the.command:.To. |
113440 | 65 6e 61 62 6c 65 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 | enable.MLD.reports.and.query.on. |
113460 | 69 6e 74 65 72 66 61 63 65 73 20 60 65 74 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 3a 00 54 6f | interfaces.`eth0`.and.`eth1`:.To |
113480 | 20 65 6e 61 62 6c 65 20 52 41 44 49 55 53 20 62 61 73 65 64 20 61 75 74 68 65 6e 74 69 63 61 74 | .enable.RADIUS.based.authenticat |
1134a0 | 69 6f 6e 2c 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 20 6e 65 65 | ion,.the.authentication.mode.nee |
1134c0 | 64 73 20 74 6f 20 62 65 20 63 68 61 6e 67 65 64 20 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 | ds.to.be.changed.within.the.conf |
1134e0 | 69 67 75 72 61 74 69 6f 6e 2e 20 50 72 65 76 69 6f 75 73 20 73 65 74 74 69 6e 67 73 20 6c 69 6b | iguration..Previous.settings.lik |
113500 | 65 20 74 68 65 20 6c 6f 63 61 6c 20 75 73 65 72 73 2c 20 73 74 69 6c 6c 20 65 78 69 73 74 73 20 | e.the.local.users,.still.exists. |
113520 | 77 69 74 68 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 68 6f 77 65 76 65 | within.the.configuration,.howeve |
113540 | 72 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 75 73 65 64 20 69 66 20 74 68 65 20 6d 6f 64 65 20 | r.they.are.not.used.if.the.mode. |
113560 | 68 61 73 20 62 65 65 6e 20 63 68 61 6e 67 65 64 20 66 72 6f 6d 20 6c 6f 63 61 6c 20 74 6f 20 72 | has.been.changed.from.local.to.r |
113580 | 61 64 69 75 73 2e 20 4f 6e 63 65 20 63 68 61 6e 67 65 64 20 62 61 63 6b 20 74 6f 20 6c 6f 63 61 | adius..Once.changed.back.to.loca |
1135a0 | 6c 2c 20 69 74 20 77 69 6c 6c 20 75 73 65 20 61 6c 6c 20 6c 6f 63 61 6c 20 61 63 63 6f 75 6e 74 | l,.it.will.use.all.local.account |
1135c0 | 73 20 61 67 61 69 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 73 68 61 | s.again..To.enable.bandwidth.sha |
1135e0 | 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2c 20 74 68 65 20 6f 70 74 69 6f 6e 20 72 61 74 65 | ping.via.RADIUS,.the.option.rate |
113600 | 2d 6c 69 6d 69 74 20 6e 65 65 64 73 20 74 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 00 54 6f 20 65 | -limit.needs.to.be.enabled..To.e |
113620 | 6e 61 62 6c 65 20 64 65 62 75 67 20 6d 65 73 73 61 67 65 73 2e 20 41 76 61 69 6c 61 62 6c 65 20 | nable.debug.messages..Available. |
113640 | 76 69 61 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 6c 6f 67 60 20 6f 72 20 3a 6f 70 63 6d 64 3a | via.:opcmd:`show.log`.or.:opcmd: |
113660 | 60 6d 6f 6e 69 74 6f 72 20 6c 6f 67 60 00 54 6f 20 65 6e 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 | `monitor.log`.To.enable.mDNS.rep |
113680 | 65 61 74 65 72 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 74 20 6c | eater.you.need.to.configure.at.l |
1136a0 | 65 61 73 74 20 74 77 6f 20 69 6e 74 65 72 66 61 63 65 73 20 73 6f 20 74 68 61 74 20 61 6c 6c 20 | east.two.interfaces.so.that.all. |
1136c0 | 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6f 6e 65 20 69 | incoming.mDNS.packets.from.one.i |
1136e0 | 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 63 61 6e 20 62 65 20 | nterface.configured.here.can.be. |
113700 | 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 20 74 6f 20 61 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 | re-broadcasted.to.any.other.inte |
113720 | 72 66 61 63 65 28 73 29 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e 64 65 72 20 74 68 69 73 20 73 | rface(s).configured.under.this.s |
113740 | 65 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 | ection..To.enable.mDNS.repeater. |
113760 | 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 74 20 6c 65 61 73 74 20 74 | you.need.to.configure.at.least.t |
113780 | 77 6f 20 69 6e 74 65 72 66 61 63 65 73 2e 20 54 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 20 61 | wo.interfaces..To.re-broadcast.a |
1137a0 | 6c 6c 20 69 6e 63 6f 6d 69 6e 67 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 6e | ll.incoming.mDNS.packets.from.an |
1137c0 | 79 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 68 65 72 65 20 74 6f 20 61 | y.interface.configured.here.to.a |
1137e0 | 6e 79 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 6e | ny.other.interface.configured.un |
113800 | 64 65 72 20 74 68 69 73 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 | der.this.section..To.enable.the. |
113820 | 48 54 54 50 20 73 65 63 75 72 69 74 79 20 68 65 61 64 65 72 73 20 69 6e 20 74 68 65 20 63 6f 6e | HTTP.security.headers.in.the.con |
113840 | 66 69 67 75 72 61 74 69 6f 6e 20 66 69 6c 65 2c 20 75 73 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 | figuration.file,.use.the.command |
113860 | 3a 00 54 6f 20 65 6e 61 62 6c 65 2f 64 69 73 61 62 6c 65 20 68 65 6c 70 65 72 20 73 75 70 70 6f | :.To.enable/disable.helper.suppo |
113880 | 72 74 20 66 6f 72 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 69 67 68 62 6f 75 72 2c 20 74 68 65 | rt.for.a.specific.neighbour,.the |
1138a0 | 20 72 6f 75 74 65 72 2d 69 64 20 28 41 2e 42 2e 43 2e 44 29 20 68 61 73 20 74 6f 20 62 65 20 73 | .router-id.(A.B.C.D).has.to.be.s |
1138c0 | 70 65 63 69 66 69 65 64 2e 00 54 6f 20 65 78 63 6c 75 64 65 20 74 72 61 66 66 69 63 20 66 72 6f | pecified..To.exclude.traffic.fro |
1138e0 | 6d 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2c 20 74 72 61 66 66 69 63 20 6d 61 74 63 68 69 | m.load.balancing,.traffic.matchi |
113900 | 6e 67 20 61 6e 20 65 78 63 6c 75 64 65 20 72 75 6c 65 20 69 73 20 6e 6f 74 20 62 61 6c 61 6e 63 | ng.an.exclude.rule.is.not.balanc |
113920 | 65 64 20 62 75 74 20 72 6f 75 74 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 73 79 73 74 65 6d | ed.but.routed.through.the.system |
113940 | 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 69 6e 73 74 65 61 64 3a 00 54 6f 20 65 78 70 6c 61 | .routing.table.instead:.To.expla |
113960 | 69 6e 20 74 68 65 20 75 73 61 67 65 20 6f 66 20 4c 4e 53 20 66 6f 6c 6c 6f 77 20 6f 75 72 20 62 | in.the.usage.of.LNS.follow.our.b |
113980 | 6c 75 65 70 72 69 6e 74 20 3a 72 65 66 3a 60 65 78 61 6d 70 6c 65 73 2d 6c 61 63 2d 6c 6e 73 60 | lueprint.:ref:`examples-lac-lns` |
1139a0 | 2e 00 54 6f 20 65 78 74 65 6e 64 20 53 4e 4d 50 20 61 67 65 6e 74 20 66 75 6e 63 74 69 6f 6e 61 | ..To.extend.SNMP.agent.functiona |
1139c0 | 6c 69 74 79 2c 20 63 75 73 74 6f 6d 20 73 63 72 69 70 74 73 20 63 61 6e 20 62 65 20 65 78 65 63 | lity,.custom.scripts.can.be.exec |
1139e0 | 75 74 65 64 20 65 76 65 72 79 20 74 69 6d 65 20 74 68 65 20 61 67 65 6e 74 20 69 73 20 62 65 69 | uted.every.time.the.agent.is.bei |
113a00 | 6e 67 20 63 61 6c 6c 65 64 2e 20 54 68 69 73 20 63 61 6e 20 62 65 20 61 63 68 69 65 76 65 64 20 | ng.called..This.can.be.achieved. |
113a20 | 62 79 20 75 73 69 6e 67 20 60 60 61 72 62 69 74 72 61 72 79 20 65 78 74 65 6e 73 69 6f 6e 63 6f | by.using.``arbitrary.extensionco |
113a40 | 6d 6d 61 6e 64 73 60 60 2e 20 54 68 65 20 66 69 72 73 74 20 73 74 65 70 20 69 73 20 74 6f 20 63 | mmands``..The.first.step.is.to.c |
113a60 | 72 65 61 74 65 20 61 20 66 75 6e 63 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 6f 66 20 63 6f 75 | reate.a.functional.script.of.cou |
113a80 | 72 73 65 2c 20 74 68 65 6e 20 75 70 6c 6f 61 64 20 69 74 20 74 6f 20 79 6f 75 72 20 56 79 4f 53 | rse,.then.upload.it.to.your.VyOS |
113aa0 | 20 69 6e 73 74 61 6e 63 65 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 60 60 73 63 70 20 | .instance.via.the.command.``scp. |
113ac0 | 79 6f 75 72 5f 73 63 72 69 70 74 2e 73 68 20 76 79 6f 73 40 79 6f 75 72 5f 72 6f 75 74 65 72 3a | your_script.sh.vyos@your_router: |
113ae0 | 2f 63 6f 6e 66 69 67 2f 75 73 65 72 2d 64 61 74 61 60 60 2e 20 4f 6e 63 65 20 74 68 65 20 73 63 | /config/user-data``..Once.the.sc |
113b00 | 72 69 70 74 20 69 73 20 75 70 6c 6f 61 64 65 64 2c 20 69 74 20 6e 65 65 64 73 20 74 6f 20 62 65 | ript.is.uploaded,.it.needs.to.be |
113b20 | 20 63 6f 6e 66 69 67 75 72 65 64 20 76 69 61 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 62 65 6c 6f | .configured.via.the.command.belo |
113b40 | 77 2e 00 54 6f 20 66 6f 72 77 61 72 64 20 61 6c 6c 20 62 72 6f 61 64 63 61 73 74 20 70 61 63 6b | w..To.forward.all.broadcast.pack |
113b60 | 65 74 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 60 55 44 50 20 70 6f 72 74 20 31 39 30 30 60 20 | ets.received.on.`UDP.port.1900`. |
113b80 | 6f 6e 20 60 65 74 68 33 60 2c 20 60 65 74 68 34 60 20 6f 72 20 60 65 74 68 35 60 20 74 6f 20 61 | on.`eth3`,.`eth4`.or.`eth5`.to.a |
113ba0 | 6c 6c 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 74 68 69 73 20 63 6f 6e 66 | ll.other.interfaces.in.this.conf |
113bc0 | 69 67 75 72 61 74 69 6f 6e 2e 00 54 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 43 41 2c 20 74 | iguration..To.generate.the.CA,.t |
113be0 | 68 65 20 73 65 72 76 65 72 20 70 72 69 76 61 74 65 20 6b 65 79 20 61 6e 64 20 63 65 72 74 69 66 | he.server.private.key.and.certif |
113c00 | 69 63 61 74 65 73 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 63 61 | icates.the.following.commands.ca |
113c20 | 6e 20 62 65 20 75 73 65 64 2e 00 54 6f 20 67 65 74 20 69 74 20 74 6f 20 77 6f 72 6b 20 61 73 20 | n.be.used..To.get.it.to.work.as. |
113c40 | 61 6e 20 61 63 63 65 73 73 20 70 6f 69 6e 74 20 77 69 74 68 20 74 68 69 73 20 63 6f 6e 66 69 67 | an.access.point.with.this.config |
113c60 | 75 72 61 74 69 6f 6e 20 79 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 73 65 74 20 75 70 20 | uration.you.will.need.to.set.up. |
113c80 | 61 20 44 48 43 50 20 73 65 72 76 65 72 20 74 6f 20 77 6f 72 6b 20 77 69 74 68 20 74 68 61 74 20 | a.DHCP.server.to.work.with.that. |
113ca0 | 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 63 61 6e 20 2d 20 6f 66 20 63 6f 75 72 73 65 20 2d 20 61 | network..You.can.-.of.course.-.a |
113cc0 | 6c 73 6f 20 62 72 69 64 67 65 20 74 68 65 20 57 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 | lso.bridge.the.Wireless.interfac |
113ce0 | 65 20 77 69 74 68 20 61 6e 79 20 63 6f 6e 66 69 67 75 72 65 64 20 62 72 69 64 67 65 20 28 3a 72 | e.with.any.configured.bridge.(:r |
113d00 | 65 66 3a 60 62 72 69 64 67 65 2d 69 6e 74 65 72 66 61 63 65 60 29 20 6f 6e 20 74 68 65 20 73 79 | ef:`bridge-interface`).on.the.sy |
113d20 | 73 74 65 6d 2e 00 54 6f 20 68 61 6e 64 20 6f 75 74 20 69 6e 64 69 76 69 64 75 61 6c 20 70 72 65 | stem..To.hand.out.individual.pre |
113d40 | 66 69 78 65 73 20 74 6f 20 79 6f 75 72 20 63 6c 69 65 6e 74 73 20 74 68 65 20 66 6f 6c 6c 6f 77 | fixes.to.your.clients.the.follow |
113d60 | 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 3a 00 54 6f 20 69 6d | ing.configuration.is.used:.To.im |
113d80 | 70 6f 72 74 20 69 74 20 66 72 6f 6d 20 74 68 65 20 66 69 6c 65 73 79 73 74 65 6d 20 75 73 65 3a | port.it.from.the.filesystem.use: |
113da0 | 00 54 6f 20 6b 6e 6f 77 20 6d 6f 72 65 20 61 62 6f 75 74 20 73 63 72 69 70 74 69 6e 67 2c 20 63 | .To.know.more.about.scripting,.c |
113dc0 | 68 65 63 6b 20 74 68 65 20 3a 72 65 66 3a 60 63 6f 6d 6d 61 6e 64 2d 73 63 72 69 70 74 69 6e 67 | heck.the.:ref:`command-scripting |
113de0 | 60 20 73 65 63 74 69 6f 6e 2e 00 54 6f 20 6c 69 73 74 65 6e 20 6f 6e 20 62 6f 74 68 20 60 65 74 | `.section..To.listen.on.both.`et |
113e00 | 68 30 60 20 61 6e 64 20 60 65 74 68 31 60 20 6d 44 4e 53 20 70 61 63 6b 65 74 73 20 61 6e 64 20 | h0`.and.`eth1`.mDNS.packets.and. |
113e20 | 61 6c 73 6f 20 72 65 70 65 61 74 20 70 61 63 6b 65 74 73 20 72 65 63 65 69 76 65 64 20 6f 6e 20 | also.repeat.packets.received.on. |
113e40 | 60 65 74 68 30 60 20 74 6f 20 60 65 74 68 31 60 20 28 61 6e 64 20 76 69 63 65 2d 76 65 72 73 61 | `eth0`.to.`eth1`.(and.vice-versa |
113e60 | 29 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 3a 00 54 6f | ).use.the.following.commands:.To |
113e80 | 20 6d 61 6e 69 70 75 6c 61 74 65 20 6f 72 20 64 69 73 70 6c 61 79 20 41 52 50 5f 20 74 61 62 6c | .manipulate.or.display.ARP_.tabl |
113ea0 | 65 20 65 6e 74 72 69 65 73 2c 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 | e.entries,.the.following.command |
113ec0 | 73 20 61 72 65 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2e 00 54 6f 20 70 65 72 66 6f 72 6d 20 61 20 | s.are.implemented..To.perform.a. |
113ee0 | 67 72 61 63 65 66 75 6c 20 73 68 75 74 64 6f 77 6e 2c 20 74 68 65 20 46 52 52 20 60 60 67 72 61 | graceful.shutdown,.the.FRR.``gra |
113f00 | 63 65 66 75 6c 2d 72 65 73 74 61 72 74 20 70 72 65 70 61 72 65 20 69 70 20 6f 73 70 66 60 60 20 | ceful-restart.prepare.ip.ospf``. |
113f20 | 45 58 45 43 2d 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e 64 20 6e 65 65 64 73 20 74 6f 20 62 65 20 69 | EXEC-level.command.needs.to.be.i |
113f40 | 73 73 75 65 64 20 62 65 66 6f 72 65 20 72 65 73 74 61 72 74 69 6e 67 20 74 68 65 20 6f 73 70 66 | ssued.before.restarting.the.ospf |
113f60 | 64 20 64 61 65 6d 6f 6e 2e 00 54 6f 20 72 65 71 75 65 73 74 20 61 20 2f 35 36 20 70 72 65 66 69 | d.daemon..To.request.a./56.prefi |
113f80 | 78 20 66 72 6f 6d 20 79 6f 75 72 20 49 53 50 20 75 73 65 3a 00 54 6f 20 72 65 73 74 61 72 74 20 | x.from.your.ISP.use:.To.restart. |
113fa0 | 74 68 65 20 44 48 43 50 76 36 20 73 65 72 76 65 72 00 54 6f 20 73 65 74 75 70 20 53 4e 41 54 2c | the.DHCPv6.server.To.setup.SNAT, |
113fc0 | 20 77 65 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 3a 00 54 6f 20 73 65 74 75 70 20 61 20 64 65 73 | .we.need.to.know:.To.setup.a.des |
113fe0 | 74 69 6e 61 74 69 6f 6e 20 4e 41 54 20 72 75 6c 65 20 77 65 20 6e 65 65 64 20 74 6f 20 67 61 74 | tination.NAT.rule.we.need.to.gat |
114000 | 68 65 72 3a 00 54 6f 20 75 70 64 61 74 65 20 74 68 65 20 66 69 72 6d 77 61 72 65 2c 20 56 79 4f | her:.To.update.the.firmware,.VyO |
114020 | 53 20 61 6c 73 6f 20 73 68 69 70 73 20 74 68 65 20 60 71 6d 69 2d 66 69 72 6d 77 61 72 65 2d 75 | S.also.ships.the.`qmi-firmware-u |
114040 | 70 64 61 74 65 60 20 62 69 6e 61 72 79 2e 20 54 6f 20 75 70 67 72 61 64 65 20 74 68 65 20 66 69 | pdate`.binary..To.upgrade.the.fi |
114060 | 72 6d 77 61 72 65 20 6f 66 20 61 6e 20 65 2e 67 2e 20 53 69 65 72 72 61 20 57 69 72 65 6c 65 73 | rmware.of.an.e.g..Sierra.Wireles |
114080 | 73 20 4d 43 37 37 31 30 20 6d 6f 64 75 6c 65 20 74 6f 20 74 68 65 20 66 69 72 6d 77 61 72 65 20 | s.MC7710.module.to.the.firmware. |
1140a0 | 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 66 69 6c 65 20 60 60 39 39 39 39 39 39 39 5f 39 | provided.in.the.file.``9999999_9 |
1140c0 | 39 39 39 39 39 39 5f 39 32 30 30 5f 30 33 2e 30 35 2e 31 34 2e 30 30 5f 30 30 5f 67 65 6e 65 72 | 999999_9200_03.05.14.00_00_gener |
1140e0 | 69 63 5f 30 30 30 2e 30 30 30 5f 30 30 31 5f 53 50 4b 47 5f 4d 43 2e 63 77 65 60 60 20 75 73 65 | ic_000.000_001_SPKG_MC.cwe``.use |
114100 | 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 00 54 6f 20 75 73 65 20 61 | .the.following.command:.To.use.a |
114120 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f | .RADIUS.server.for.authenticatio |
114140 | 6e 20 61 6e 64 20 62 61 6e 64 77 69 64 74 68 2d 73 68 61 70 69 6e 67 2c 20 74 68 65 20 66 6f 6c | n.and.bandwidth-shaping,.the.fol |
114160 | 6c 6f 77 69 6e 67 20 65 78 61 6d 70 6c 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 63 61 6e | lowing.example.configuration.can |
114180 | 20 62 65 20 75 73 65 64 2e 00 54 6f 20 75 73 65 20 61 20 72 61 64 69 75 73 20 73 65 72 76 65 72 | .be.used..To.use.a.radius.server |
1141a0 | 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 77 69 74 63 68 20 74 6f 20 61 75 74 68 65 6e 74 69 | ,.you.need.to.switch.to.authenti |
1141c0 | 63 61 74 69 6f 6e 20 6d 6f 64 65 20 52 41 44 49 55 53 20 61 6e 64 20 74 68 65 6e 20 63 6f 6e 66 | cation.mode.RADIUS.and.then.conf |
1141e0 | 69 67 75 72 65 20 69 74 2e 00 54 6f 20 75 73 65 20 73 75 63 68 20 61 20 73 65 72 76 69 63 65 2c | igure.it..To.use.such.a.service, |
114200 | 20 6f 6e 65 20 6d 75 73 74 20 64 65 66 69 6e 65 20 61 20 6c 6f 67 69 6e 2c 20 70 61 73 73 77 6f | .one.must.define.a.login,.passwo |
114220 | 72 64 2c 20 6f 6e 65 20 6f 72 20 6d 75 6c 74 69 70 6c 65 20 68 6f 73 74 6e 61 6d 65 73 2c 20 70 | rd,.one.or.multiple.hostnames,.p |
114240 | 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 73 65 72 76 65 72 2e 00 54 6f 20 75 73 65 20 74 68 65 20 53 | rotocol.and.server..To.use.the.S |
114260 | 61 6c 74 2d 4d 69 6e 69 6f 6e 2c 20 61 20 72 75 6e 6e 69 6e 67 20 53 61 6c 74 2d 4d 61 73 74 65 | alt-Minion,.a.running.Salt-Maste |
114280 | 72 20 69 73 20 72 65 71 75 69 72 65 64 2e 20 59 6f 75 20 63 61 6e 20 66 69 6e 64 20 6d 6f 72 65 | r.is.required..You.can.find.more |
1142a0 | 20 69 6e 20 74 68 65 20 60 53 61 6c 74 20 50 6f 6a 65 63 74 20 44 6f 63 75 6d 65 6e 74 61 69 6f | .in.the.`Salt.Poject.Documentaio |
1142c0 | 6e 20 3c 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 73 61 6c 74 70 72 6f 6a 65 63 74 2e 69 6f 2f 65 | n.<https://docs.saltproject.io/e |
1142e0 | 6e 2f 6c 61 74 65 73 74 2f 63 6f 6e 74 65 6e 74 73 2e 68 74 6d 6c 3e 60 5f 00 54 6f 20 75 73 65 | n/latest/contents.html>`_.To.use |
114300 | 20 74 68 69 73 20 66 75 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 65 20 61 73 75 6d | .this.full.configuration.we.asum |
114320 | 65 20 61 20 70 75 62 6c 69 63 20 61 63 63 65 73 73 69 62 6c 65 20 68 6f 73 74 6e 61 6d 65 2e 00 | e.a.public.accessible.hostname.. |
114340 | 54 6f 70 6f 6c 6f 67 79 3a 00 54 6f 70 6f 6c 6f 67 79 3a 20 50 43 34 20 2d 20 4c 65 61 66 32 20 | Topology:.Topology:.PC4.-.Leaf2. |
114360 | 2d 20 53 70 69 6e 65 31 20 2d 20 4c 65 61 66 33 20 2d 20 50 43 35 00 54 6f 75 62 6c 65 73 68 6f | -.Spine1.-.Leaf3.-.PC5.Toublesho |
114380 | 6f 74 69 6e 67 00 54 72 61 63 6b 00 54 72 61 63 6b 20 6f 70 74 69 6f 6e 20 74 6f 20 74 72 61 63 | oting.Track.Track.option.to.trac |
1143a0 | 6b 20 6e 6f 6e 20 56 52 52 50 20 69 6e 74 65 72 66 61 63 65 20 73 74 61 74 65 73 2e 20 56 52 52 | k.non.VRRP.interface.states..VRR |
1143c0 | 50 20 63 68 61 6e 67 65 73 20 73 74 61 74 75 73 20 74 6f 20 60 60 46 41 55 4c 54 60 60 20 69 66 | P.changes.status.to.``FAULT``.if |
1143e0 | 20 6f 6e 65 20 6f 66 20 74 68 65 20 74 72 61 63 6b 20 69 6e 74 65 72 66 61 63 65 73 20 69 6e 20 | .one.of.the.track.interfaces.in. |
114400 | 73 74 61 74 65 20 60 60 64 6f 77 6e 60 60 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 20 42 47 50 20 | state.``down``..Traditional.BGP. |
114420 | 64 69 64 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 66 65 61 74 75 72 65 20 74 6f 20 64 65 74 65 | did.not.have.the.feature.to.dete |
114440 | 63 74 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 27 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2c | ct.a.remote.peer's.capabilities, |
114460 | 20 65 2e 67 2e 20 77 68 65 74 68 65 72 20 69 74 20 63 61 6e 20 68 61 6e 64 6c 65 20 70 72 65 66 | .e.g..whether.it.can.handle.pref |
114480 | 69 78 20 74 79 70 65 73 20 6f 74 68 65 72 20 74 68 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 | ix.types.other.than.IPv4.unicast |
1144a0 | 20 72 6f 75 74 65 73 2e 20 54 68 69 73 20 77 61 73 20 61 20 62 69 67 20 70 72 6f 62 6c 65 6d 20 | .routes..This.was.a.big.problem. |
1144c0 | 75 73 69 6e 67 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 6f 6e 20 66 6f | using.Multiprotocol.Extension.fo |
1144e0 | 72 20 42 47 50 20 69 6e 20 61 6e 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6e 65 74 77 6f 72 6b 2e | r.BGP.in.an.operational.network. |
114500 | 20 3a 72 66 63 3a 60 32 38 34 32 60 20 61 64 6f 70 74 65 64 20 61 20 66 65 61 74 75 72 65 20 63 | .:rfc:`2842`.adopted.a.feature.c |
114520 | 61 6c 6c 65 64 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 2a 62 | alled.Capability.Negotiation..*b |
114540 | 67 70 64 2a 20 75 73 65 20 74 68 69 73 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 | gpd*.use.this.Capability.Negotia |
114560 | 74 69 6f 6e 20 74 6f 20 64 65 74 65 63 74 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 27 73 | tion.to.detect.the.remote.peer's |
114580 | 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 61 20 70 65 65 72 20 69 73 20 6f 6e 6c 79 | .capabilities..If.a.peer.is.only |
1145a0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 6e 20 49 50 76 34 20 75 6e 69 63 61 73 74 20 6e | .configured.as.an.IPv4.unicast.n |
1145c0 | 65 69 67 68 62 6f 72 2c 20 2a 62 67 70 64 2a 20 64 6f 65 73 20 6e 6f 74 20 73 65 6e 64 20 74 68 | eighbor,.*bgpd*.does.not.send.th |
1145e0 | 65 73 65 20 43 61 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 70 61 63 6b 65 | ese.Capability.Negotiation.packe |
114600 | 74 73 20 28 61 74 20 6c 65 61 73 74 20 6e 6f 74 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 20 6f 70 | ts.(at.least.not.unless.other.op |
114620 | 74 69 6f 6e 61 6c 20 42 47 50 20 66 65 61 74 75 72 65 73 20 72 65 71 75 69 72 65 20 63 61 70 61 | tional.BGP.features.require.capa |
114640 | 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 29 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c | bility.negotiation)..Traditional |
114660 | 6c 79 20 66 69 72 65 77 61 6c 6c 73 20 77 65 65 72 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 | ly.firewalls.weere.configured.wi |
114680 | 74 68 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 20 64 61 74 61 20 67 6f 69 6e 67 20 69 6e 20 | th.the.concept.of.data.going.in. |
1146a0 | 61 6e 64 20 6f 75 74 20 6f 66 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 72 6f 75 | and.out.of.an.interface..The.rou |
1146c0 | 74 65 72 20 6a 75 73 74 20 6c 69 73 74 65 6e 65 64 20 74 6f 20 74 68 65 20 64 61 74 61 20 66 6c | ter.just.listened.to.the.data.fl |
1146e0 | 6f 77 69 6e 67 20 74 68 72 6f 75 67 68 20 61 6e 64 20 72 65 73 70 6f 6e 64 69 6e 67 20 61 73 20 | owing.through.and.responding.as. |
114700 | 72 65 71 75 69 72 65 64 20 69 66 20 69 74 20 77 61 73 20 64 69 72 65 63 74 65 64 20 61 74 20 74 | required.if.it.was.directed.at.t |
114720 | 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 00 54 72 61 64 69 74 69 6f 6e 61 6c 6c 79 20 | he.router.itself..Traditionally. |
114740 | 68 61 72 64 77 61 72 65 20 72 6f 75 74 65 72 73 20 69 6d 70 6c 65 6d 65 6e 74 20 49 50 73 65 63 | hardware.routers.implement.IPsec |
114760 | 20 65 78 63 6c 75 73 69 76 65 6c 79 20 64 75 65 20 74 6f 20 72 65 6c 61 74 69 76 65 20 65 61 73 | .exclusively.due.to.relative.eas |
114780 | 65 20 6f 66 20 69 6d 70 6c 65 6d 65 6e 74 69 6e 67 20 69 74 20 69 6e 20 68 61 72 64 77 61 72 65 | e.of.implementing.it.in.hardware |
1147a0 | 20 61 6e 64 20 69 6e 73 75 66 66 69 63 69 65 6e 74 20 43 50 55 20 70 6f 77 65 72 20 66 6f 72 20 | .and.insufficient.CPU.power.for. |
1147c0 | 64 6f 69 6e 67 20 65 6e 63 72 79 70 74 69 6f 6e 20 69 6e 20 73 6f 66 74 77 61 72 65 2e 20 53 69 | doing.encryption.in.software..Si |
1147e0 | 6e 63 65 20 56 79 4f 53 20 69 73 20 61 20 73 6f 66 74 77 61 72 65 20 72 6f 75 74 65 72 2c 20 74 | nce.VyOS.is.a.software.router,.t |
114800 | 68 69 73 20 69 73 20 6c 65 73 73 20 6f 66 20 61 20 63 6f 6e 63 65 72 6e 2e 20 4f 70 65 6e 56 50 | his.is.less.of.a.concern..OpenVP |
114820 | 4e 20 68 61 73 20 62 65 65 6e 20 77 69 64 65 6c 79 20 75 73 65 64 20 6f 6e 20 55 4e 49 58 20 70 | N.has.been.widely.used.on.UNIX.p |
114840 | 6c 61 74 66 6f 72 6d 20 66 6f 72 20 61 20 6c 6f 6e 67 20 74 69 6d 65 20 61 6e 64 20 69 73 20 61 | latform.for.a.long.time.and.is.a |
114860 | 20 70 6f 70 75 6c 61 72 20 6f 70 74 69 6f 6e 20 66 6f 72 20 72 65 6d 6f 74 65 20 61 63 63 65 73 | .popular.option.for.remote.acces |
114880 | 73 20 56 50 4e 2c 20 74 68 6f 75 67 68 20 69 74 27 73 20 61 6c 73 6f 20 63 61 70 61 62 6c 65 20 | s.VPN,.though.it's.also.capable. |
1148a0 | 6f 66 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 54 72 61 | of.site-to-site.connections..Tra |
1148c0 | 66 66 69 63 20 46 69 6c 74 65 72 73 00 54 72 61 66 66 69 63 20 46 69 6c 74 65 72 73 20 61 72 65 | ffic.Filters.Traffic.Filters.are |
1148e0 | 20 75 73 65 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 77 | .used.to.control.which.packets.w |
114900 | 69 6c 6c 20 68 61 76 65 20 74 68 65 20 64 65 66 69 6e 65 64 20 4e 41 54 20 72 75 6c 65 73 20 61 | ill.have.the.defined.NAT.rules.a |
114920 | 70 70 6c 69 65 64 2e 20 46 69 76 65 20 64 69 66 66 65 72 65 6e 74 20 66 69 6c 74 65 72 73 20 63 | pplied..Five.different.filters.c |
114940 | 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 77 69 74 68 69 6e 20 61 20 4e 41 54 20 72 75 6c 65 2e | an.be.applied.within.a.NAT.rule. |
114960 | 00 54 72 61 66 66 69 63 20 50 6f 6c 69 63 79 00 54 72 61 66 66 69 63 20 63 61 6e 6e 6f 74 20 66 | .Traffic.Policy.Traffic.cannot.f |
114980 | 6c 6f 77 20 62 65 74 77 65 65 6e 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 | low.between.zone.member.interfac |
1149a0 | 65 20 61 6e 64 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 74 68 61 74 20 69 73 20 6e 6f 74 20 | e.and.any.interface.that.is.not. |
1149c0 | 61 20 7a 6f 6e 65 20 6d 65 6d 62 65 72 2e 00 54 72 61 66 66 69 63 20 66 72 6f 6d 20 6d 75 6c 74 | a.zone.member..Traffic.from.mult |
1149e0 | 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 68 65 20 52 65 6e | icast.sources.will.go.to.the.Ren |
114a00 | 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 72 73 20 77 69 6c | dezvous.Point,.and.receivers.wil |
114a20 | 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 65 65 20 75 73 69 | l.pull.it.from.a.shared.tree.usi |
114a40 | 6e 67 20 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d | ng.:abbr:`IGMP.(Internet.Group.M |
114a60 | 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 2e 00 54 72 61 66 66 69 63 20 66 72 | anagement.Protocol)`..Traffic.fr |
114a80 | 6f 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 | om.multicast.sources.will.go.to. |
114aa0 | 74 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 | the.Rendezvous.Point,.and.receiv |
114ac0 | 65 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 | ers.will.pull.it.from.a.shared.t |
114ae0 | 72 65 65 20 75 73 69 6e 67 20 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 6f 75 70 20 4d | ree.using.IGMP.(Internet.Group.M |
114b00 | 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 2e 00 54 72 61 66 66 69 63 20 66 72 6f | anagement.Protocol)..Traffic.fro |
114b20 | 6d 20 6d 75 6c 74 69 63 61 73 74 20 73 6f 75 72 63 65 73 20 77 69 6c 6c 20 67 6f 20 74 6f 20 74 | m.multicast.sources.will.go.to.t |
114b40 | 68 65 20 52 65 6e 64 65 7a 76 6f 75 73 20 50 6f 69 6e 74 2c 20 61 6e 64 20 72 65 63 65 69 76 65 | he.Rendezvous.Point,.and.receive |
114b60 | 72 73 20 77 69 6c 6c 20 70 75 6c 6c 20 69 74 20 66 72 6f 6d 20 61 20 73 68 61 72 65 64 20 74 72 | rs.will.pull.it.from.a.shared.tr |
114b80 | 65 65 20 75 73 69 6e 67 20 4d 4c 44 20 28 4d 75 6c 74 69 63 61 73 74 20 4c 69 73 74 65 6e 65 72 | ee.using.MLD.(Multicast.Listener |
114ba0 | 20 44 69 73 63 6f 76 65 72 79 29 2e 00 54 72 61 66 66 69 63 20 6d 75 73 74 20 62 65 20 73 79 6d | .Discovery)..Traffic.must.be.sym |
114bc0 | 6d 65 74 72 69 63 00 54 72 61 66 66 69 63 20 77 68 69 63 68 20 69 73 20 72 65 63 65 69 76 65 64 | metric.Traffic.which.is.received |
114be0 | 20 62 79 20 74 68 65 20 72 6f 75 74 65 72 20 6f 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 | .by.the.router.on.an.interface.w |
114c00 | 68 69 63 68 20 69 73 20 6d 65 6d 62 65 72 20 6f 66 20 61 20 62 72 69 64 67 65 20 69 73 20 70 72 | hich.is.member.of.a.bridge.is.pr |
114c20 | 6f 63 65 73 73 65 64 20 6f 6e 20 74 68 65 20 2a 2a 42 72 69 64 67 65 20 4c 61 79 65 72 2a 2a 2e | ocessed.on.the.**Bridge.Layer**. |
114c40 | 20 41 20 73 69 6d 70 6c 69 66 69 65 64 20 70 61 63 6b 65 74 20 66 6c 6f 77 20 64 69 61 67 72 61 | .A.simplified.packet.flow.diagra |
114c60 | 6d 20 66 6f 72 20 74 68 69 73 20 6c 61 79 65 72 20 69 73 20 73 68 6f 77 6e 20 6e 65 78 74 3a 00 | m.for.this.layer.is.shown.next:. |
114c80 | 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 00 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 | Transition.scripts.Transition.sc |
114ca0 | 72 69 70 74 73 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 69 6d 70 6c 65 6d 65 6e 74 20 76 61 72 | ripts.can.help.you.implement.var |
114cc0 | 69 6f 75 73 20 66 69 78 75 70 73 2c 20 73 75 63 68 20 61 73 20 73 74 61 72 74 69 6e 67 20 61 6e | ious.fixups,.such.as.starting.an |
114ce0 | 64 20 73 74 6f 70 70 69 6e 67 20 73 65 72 76 69 63 65 73 2c 20 6f 72 20 65 76 65 6e 20 6d 6f 64 | d.stopping.services,.or.even.mod |
114d00 | 69 66 79 69 6e 67 20 74 68 65 20 56 79 4f 53 20 63 6f 6e 66 69 67 20 6f 6e 20 56 52 52 50 20 74 | ifying.the.VyOS.config.on.VRRP.t |
114d20 | 72 61 6e 73 69 74 69 6f 6e 2e 20 54 68 69 73 20 73 65 74 75 70 20 77 69 6c 6c 20 6d 61 6b 65 20 | ransition..This.setup.will.make. |
114d40 | 74 68 65 20 56 52 52 50 20 70 72 6f 63 65 73 73 20 65 78 65 63 75 74 65 20 74 68 65 20 60 60 2f | the.VRRP.process.execute.the.``/ |
114d60 | 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 72 72 70 2d 66 61 69 6c 2e 73 68 60 60 20 77 69 | config/scripts/vrrp-fail.sh``.wi |
114d80 | 74 68 20 61 72 67 75 6d 65 6e 74 20 60 60 46 6f 6f 60 60 20 77 68 65 6e 20 56 52 52 50 20 66 61 | th.argument.``Foo``.when.VRRP.fa |
114da0 | 69 6c 73 2c 20 61 6e 64 20 74 68 65 20 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 76 | ils,.and.the.``/config/scripts/v |
114dc0 | 72 72 70 2d 6d 61 73 74 65 72 2e 73 68 60 60 20 77 68 65 6e 20 74 68 65 20 72 6f 75 74 65 72 20 | rrp-master.sh``.when.the.router. |
114de0 | 62 65 63 6f 6d 65 73 20 74 68 65 20 6d 61 73 74 65 72 3a 00 54 72 61 6e 73 70 61 72 65 6e 74 20 | becomes.the.master:.Transparent. |
114e00 | 50 72 6f 78 79 00 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 00 54 75 6e 69 6e 67 20 63 6f 6d | Proxy.Troubleshooting.Tuning.com |
114e20 | 6d 61 6e 64 73 00 54 75 6e 6e 65 6c 00 54 75 6e 6e 65 6c 20 6b 65 79 73 00 54 75 6e 6e 65 6c 20 | mands.Tunnel.Tunnel.keys.Tunnel. |
114e40 | 70 61 73 73 77 6f 72 64 20 75 73 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 | password.used.to.authenticate.th |
114e60 | 65 20 63 6c 69 65 6e 74 20 28 4c 41 43 29 00 54 77 6f 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 76 | e.client.(LAC).Two.environment.v |
114e80 | 61 72 69 61 62 6c 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 3a 00 54 77 6f 20 69 6e 74 65 | ariables.are.available:.Two.inte |
114ea0 | 72 66 61 63 65 73 20 61 72 65 20 67 6f 69 6e 67 20 74 6f 20 62 65 20 75 73 65 64 20 69 6e 20 74 | rfaces.are.going.to.be.used.in.t |
114ec0 | 68 65 20 66 6c 6f 77 74 61 62 6c 65 73 3a 20 65 74 68 30 20 61 6e 64 20 65 74 68 31 00 54 77 6f | he.flowtables:.eth0.and.eth1.Two |
114ee0 | 20 6e 65 77 20 66 69 6c 65 73 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 61 | .new.files.``/config/auth/id_rsa |
114f00 | 5f 72 70 6b 69 60 60 20 61 6e 64 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 69 64 5f 72 73 | _rpki``.and.``/config/auth/id_rs |
114f20 | 61 5f 72 70 6b 69 2e 70 75 62 60 60 20 77 69 6c 6c 20 62 65 20 63 72 65 61 74 65 64 2e 00 54 77 | a_rpki.pub``.will.be.created..Tw |
114f40 | 6f 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 63 74 65 64 20 62 6f 74 68 20 76 69 61 20 65 74 68 | o.routers.connected.both.via.eth |
114f60 | 31 20 74 68 72 6f 75 67 68 20 61 6e 20 75 6e 74 72 75 73 74 65 64 20 73 77 69 74 63 68 00 54 79 | 1.through.an.untrusted.switch.Ty |
114f80 | 70 65 20 6f 66 20 6d 65 74 72 69 63 73 20 67 72 6f 75 70 69 6e 67 20 77 68 65 6e 20 70 75 73 68 | pe.of.metrics.grouping.when.push |
114fa0 | 20 74 6f 20 41 7a 75 72 65 20 44 61 74 61 20 45 78 70 6c 6f 72 65 72 2e 20 54 68 65 20 64 65 66 | .to.Azure.Data.Explorer..The.def |
114fc0 | 61 75 6c 74 20 69 73 20 60 60 74 61 62 6c 65 2d 70 65 72 2d 6d 65 74 72 69 63 60 60 2e 00 54 79 | ault.is.``table-per-metric``..Ty |
114fe0 | 70 69 63 61 6c 6c 79 2c 20 61 20 31 2d 74 6f 2d 31 20 4e 41 54 20 72 75 6c 65 20 6f 6d 69 74 73 | pically,.a.1-to-1.NAT.rule.omits |
115000 | 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 20 28 61 6c 6c 20 70 6f 72 74 73 | .the.destination.port.(all.ports |
115020 | 29 20 61 6e 64 20 72 65 70 6c 61 63 65 73 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 77 69 74 68 | ).and.replaces.the.protocol.with |
115040 | 20 65 69 74 68 65 72 20 2a 2a 61 6c 6c 2a 2a 20 6f 72 20 2a 2a 69 70 2a 2a 2e 00 55 44 50 20 42 | .either.**all**.or.**ip**..UDP.B |
115060 | 72 6f 61 64 63 61 73 74 20 52 65 6c 61 79 00 55 44 50 20 6d 6f 64 65 20 77 6f 72 6b 73 20 62 65 | roadcast.Relay.UDP.mode.works.be |
115080 | 74 74 65 72 20 77 69 74 68 20 4e 41 54 3a 00 55 44 50 20 70 6f 72 74 20 31 37 30 31 20 66 6f 72 | tter.with.NAT:.UDP.port.1701.for |
1150a0 | 20 49 50 73 65 63 00 55 44 50 20 70 6f 72 74 20 34 35 30 30 20 28 4e 41 54 2d 54 29 00 55 44 50 | .IPsec.UDP.port.4500.(NAT-T).UDP |
1150c0 | 20 70 6f 72 74 20 35 30 30 20 28 49 4b 45 29 00 55 52 4c 20 46 69 6c 74 65 72 69 6e 67 20 69 73 | .port.500.(IKE).URL.Filtering.is |
1150e0 | 20 70 72 6f 76 69 64 65 64 20 62 79 20 53 71 75 69 64 47 75 61 72 64 5f 2e 00 55 52 4c 20 66 69 | .provided.by.SquidGuard_..URL.fi |
115100 | 6c 74 65 72 69 6e 67 00 55 52 4c 20 77 69 74 68 20 73 69 67 6e 61 74 75 72 65 20 6f 66 20 6d 61 | ltering.URL.with.signature.of.ma |
115120 | 73 74 65 72 20 66 6f 72 20 61 75 74 68 20 72 65 70 6c 79 20 76 65 72 69 66 69 63 61 74 69 6f 6e | ster.for.auth.reply.verification |
115140 | 00 55 53 42 20 74 6f 20 73 65 72 69 61 6c 20 63 6f 6e 76 65 72 74 65 72 73 20 77 69 6c 6c 20 68 | .USB.to.serial.converters.will.h |
115160 | 61 6e 64 6c 65 20 6d 6f 73 74 20 6f 66 20 74 68 65 69 72 20 77 6f 72 6b 20 69 6e 20 73 6f 66 74 | andle.most.of.their.work.in.soft |
115180 | 77 61 72 65 20 73 6f 20 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 63 61 72 65 66 75 6c 6c 20 77 | ware.so.you.should.be.carefull.w |
1151a0 | 69 74 68 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 62 61 75 64 72 61 74 65 20 61 73 20 73 6f 6d | ith.the.selected.baudrate.as.som |
1151c0 | 65 20 74 69 6d 65 73 20 74 68 65 79 20 63 61 6e 27 74 20 63 6f 70 65 20 77 69 74 68 20 74 68 65 | e.times.they.can't.cope.with.the |
1151e0 | 20 65 78 70 65 63 74 65 64 20 73 70 65 65 64 2e 00 55 55 43 50 20 73 75 62 73 79 73 74 65 6d 00 | .expected.speed..UUCP.subsystem. |
115200 | 55 6e 64 65 72 20 73 6f 6d 65 20 63 69 72 63 75 6d 73 74 61 6e 63 65 73 2c 20 4c 52 4f 20 69 73 | Under.some.circumstances,.LRO.is |
115220 | 20 6b 6e 6f 77 6e 20 74 6f 20 6d 6f 64 69 66 79 20 74 68 65 20 70 61 63 6b 65 74 20 68 65 61 64 | .known.to.modify.the.packet.head |
115240 | 65 72 73 20 6f 66 20 66 6f 72 77 61 72 64 65 64 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 | ers.of.forwarded.traffic,.which. |
115260 | 62 72 65 61 6b 73 20 74 68 65 20 65 6e 64 2d 74 6f 2d 65 6e 64 20 70 72 69 6e 63 69 70 6c 65 20 | breaks.the.end-to-end.principle. |
115280 | 6f 66 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 69 6e 67 2e 20 4c 52 4f 20 69 73 20 61 | of.computer.networking..LRO.is.a |
1152a0 | 6c 73 6f 20 6f 6e 6c 79 20 61 62 6c 65 20 74 6f 20 6f 66 66 6c 6f 61 64 20 54 43 50 20 73 65 67 | lso.only.able.to.offload.TCP.seg |
1152c0 | 6d 65 6e 74 73 20 65 6e 63 61 70 73 75 6c 61 74 65 64 20 69 6e 20 49 50 76 34 20 70 61 63 6b 65 | ments.encapsulated.in.IPv4.packe |
1152e0 | 74 73 2e 20 44 75 65 20 74 6f 20 74 68 65 73 65 20 6c 69 6d 69 74 61 74 69 6f 6e 73 2c 20 69 74 | ts..Due.to.these.limitations,.it |
115300 | 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f 20 75 73 65 20 47 52 4f 20 28 47 65 6e 65 | .is.recommended.to.use.GRO.(Gene |
115320 | 72 69 63 20 52 65 63 65 69 76 65 20 4f 66 66 6c 6f 61 64 29 20 77 68 65 72 65 20 70 6f 73 73 69 | ric.Receive.Offload).where.possi |
115340 | 62 6c 65 2e 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 74 68 65 20 6c 69 6d | ble..More.information.on.the.lim |
115360 | 69 74 61 74 69 6f 6e 73 20 6f 66 20 4c 52 4f 20 63 61 6e 20 62 65 20 66 6f 75 6e 64 20 68 65 72 | itations.of.LRO.can.be.found.her |
115380 | 65 3a 20 68 74 74 70 73 3a 2f 2f 6c 77 6e 2e 6e 65 74 2f 41 72 74 69 63 6c 65 73 2f 33 35 38 39 | e:.https://lwn.net/Articles/3589 |
1153a0 | 31 30 2f 00 55 6e 69 63 61 73 74 00 55 6e 69 63 61 73 74 20 56 52 52 50 00 55 6e 69 63 61 73 74 | 10/.Unicast.Unicast.VRRP.Unicast |
1153c0 | 20 56 58 4c 41 4e 00 55 6e 69 74 20 6f 66 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 73 20 4d | .VXLAN.Unit.of.this.command.is.M |
1153e0 | 42 2e 00 55 6e 69 74 73 00 55 6e 74 69 6c 20 56 79 4f 53 20 31 2e 34 2c 20 74 68 65 20 6f 6e 6c | B..Units.Until.VyOS.1.4,.the.onl |
115400 | 79 20 6f 70 74 69 6f 6e 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 4f 70 65 6e 56 50 | y.option.for.site-to-site.OpenVP |
115420 | 4e 20 77 69 74 68 6f 75 74 20 50 4b 49 20 77 61 73 20 74 6f 20 75 73 65 20 70 72 65 2d 73 68 61 | N.without.PKI.was.to.use.pre-sha |
115440 | 72 65 64 20 6b 65 79 73 2e 20 54 68 61 74 20 6f 70 74 69 6f 6e 20 69 73 20 73 74 69 6c 6c 20 61 | red.keys..That.option.is.still.a |
115460 | 76 61 69 6c 61 62 6c 65 20 62 75 74 20 69 74 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e | vailable.but.it.is.deprecated.an |
115480 | 64 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f 76 65 64 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 2e | d.will.be.removed.in.the.future. |
1154a0 | 20 48 6f 77 65 76 65 72 2c 20 69 66 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 65 74 20 75 70 20 | .However,.if.you.need.to.set.up. |
1154c0 | 61 20 74 75 6e 6e 65 6c 20 74 6f 20 61 6e 20 6f 6c 64 65 72 20 56 79 4f 53 20 76 65 72 73 69 6f | a.tunnel.to.an.older.VyOS.versio |
1154e0 | 6e 20 6f 72 20 61 20 73 79 73 74 65 6d 20 77 69 74 68 20 6f 6c 64 65 72 20 4f 70 65 6e 56 50 4e | n.or.a.system.with.older.OpenVPN |
115500 | 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 73 74 69 6c 6c 20 6e 65 65 64 20 74 6f 20 6b 6e 6f 77 | ,.you.need.to.still.need.to.know |
115520 | 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 2e 00 55 70 20 74 6f 20 73 65 76 65 6e 20 71 75 65 75 | .how.to.use.it..Up.to.seven.queu |
115540 | 65 73 20 2d 64 65 66 69 6e 65 64 20 61 73 20 63 6c 61 73 73 65 73 5f 20 77 69 74 68 20 64 69 66 | es.-defined.as.classes_.with.dif |
115560 | 66 65 72 65 6e 74 20 70 72 69 6f 72 69 74 69 65 73 2d 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 | ferent.priorities-.can.be.config |
115580 | 75 72 65 64 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 70 6c 61 63 65 64 20 69 6e 74 6f 20 71 75 | ured..Packets.are.placed.into.qu |
1155a0 | 65 75 65 73 20 62 61 73 65 64 20 6f 6e 20 61 73 73 6f 63 69 61 74 65 64 20 6d 61 74 63 68 20 63 | eues.based.on.associated.match.c |
1155c0 | 72 69 74 65 72 69 61 2e 20 50 61 63 6b 65 74 73 20 61 72 65 20 74 72 61 6e 73 6d 69 74 74 65 64 | riteria..Packets.are.transmitted |
1155e0 | 20 66 72 6f 6d 20 74 68 65 20 71 75 65 75 65 73 20 69 6e 20 70 72 69 6f 72 69 74 79 20 6f 72 64 | .from.the.queues.in.priority.ord |
115600 | 65 72 2e 20 49 66 20 63 6c 61 73 73 65 73 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 70 72 69 | er..If.classes.with.a.higher.pri |
115620 | 6f 72 69 74 79 20 61 72 65 20 62 65 69 6e 67 20 66 69 6c 6c 65 64 20 77 69 74 68 20 70 61 63 6b | ority.are.being.filled.with.pack |
115640 | 65 74 73 20 63 6f 6e 74 69 6e 75 6f 75 73 6c 79 2c 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 6c | ets.continuously,.packets.from.l |
115660 | 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 65 73 20 77 69 6c 6c 20 6f 6e 6c 79 20 | ower.priority.classes.will.only. |
115680 | 62 65 20 74 72 61 6e 73 6d 69 74 74 65 64 20 61 66 74 65 72 20 74 72 61 66 66 69 63 20 76 6f 6c | be.transmitted.after.traffic.vol |
1156a0 | 75 6d 65 20 66 72 6f 6d 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 63 6c 61 73 73 65 73 | ume.from.higher.priority.classes |
1156c0 | 20 64 65 63 72 65 61 73 65 73 2e 00 55 70 64 61 74 65 00 55 70 64 61 74 65 20 63 6f 6e 74 61 69 | .decreases..Update.Update.contai |
1156e0 | 6e 65 72 20 69 6d 61 67 65 00 55 70 64 61 74 65 20 67 65 6f 69 70 20 64 61 74 61 62 61 73 65 00 | ner.image.Update.geoip.database. |
115700 | 55 70 64 61 74 65 73 00 55 70 64 61 74 65 73 20 66 72 6f 6d 20 74 68 65 20 52 50 4b 49 20 63 61 | Updates.Updates.from.the.RPKI.ca |
115720 | 63 68 65 20 73 65 72 76 65 72 73 20 61 72 65 20 64 69 72 65 63 74 6c 79 20 61 70 70 6c 69 65 64 | che.servers.are.directly.applied |
115740 | 20 61 6e 64 20 70 61 74 68 20 73 65 6c 65 63 74 69 6f 6e 20 69 73 20 75 70 64 61 74 65 64 20 61 | .and.path.selection.is.updated.a |
115760 | 63 63 6f 72 64 69 6e 67 6c 79 2e 20 28 53 6f 66 74 20 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f | ccordingly..(Soft.reconfiguratio |
115780 | 6e 20 6d 75 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f | n.must.be.enabled.for.this.to.wo |
1157a0 | 72 6b 29 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b | rk)..Upload.bandwidth.limit.in.k |
1157c0 | 62 69 74 2f 73 20 66 6f 72 20 60 3c 75 73 65 72 3e 60 2e 00 55 70 6c 6f 61 64 20 62 61 6e 64 77 | bit/s.for.`<user>`..Upload.bandw |
1157e0 | 69 64 74 68 20 6c 69 6d 69 74 20 69 6e 20 6b 62 69 74 2f 73 20 66 6f 72 20 66 6f 72 20 75 73 65 | idth.limit.in.kbit/s.for.for.use |
115800 | 72 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 60 3c 69 6e 74 65 72 66 61 63 65 3e 60 2e 00 55 70 | r.on.interface.`<interface>`..Up |
115820 | 6f 6e 20 72 65 63 65 70 74 69 6f 6e 20 6f 66 20 61 6e 20 69 6e 63 6f 6d 69 6e 67 20 70 61 63 6b | on.reception.of.an.incoming.pack |
115840 | 65 74 2c 20 77 68 65 6e 20 61 20 72 65 73 70 6f 6e 73 65 20 69 73 20 73 65 6e 74 2c 20 69 74 20 | et,.when.a.response.is.sent,.it. |
115860 | 6d 69 67 68 74 20 62 65 20 64 65 73 69 72 65 64 20 74 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 | might.be.desired.to.ensure.that. |
115880 | 69 74 20 6c 65 61 76 65 73 20 66 72 6f 6d 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 | it.leaves.from.the.same.interfac |
1158a0 | 65 20 61 73 20 74 68 65 20 69 6e 62 6f 75 6e 64 20 6f 6e 65 2e 20 54 68 69 73 20 63 61 6e 20 62 | e.as.the.inbound.one..This.can.b |
1158c0 | 65 20 61 63 68 69 65 76 65 64 20 62 79 20 65 6e 61 62 6c 69 6e 67 20 73 74 69 63 6b 79 20 63 6f | e.achieved.by.enabling.sticky.co |
1158e0 | 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a | nnections.in.the.load.balancing: |
115900 | 00 55 70 6f 6e 20 73 68 75 74 64 6f 77 6e 2c 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 77 69 6c 6c | .Upon.shutdown,.this.option.will |
115920 | 20 64 65 70 72 65 63 61 74 65 20 74 68 65 20 70 72 65 66 69 78 20 62 79 20 61 6e 6e 6f 75 6e 63 | .deprecate.the.prefix.by.announc |
115940 | 69 6e 67 20 69 74 20 69 6e 20 74 68 65 20 73 68 75 74 64 6f 77 6e 20 52 41 00 55 73 65 20 38 30 | ing.it.in.the.shutdown.RA.Use.80 |
115960 | 32 2e 31 31 6e 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 3a 61 62 62 72 3a 60 44 48 20 28 44 69 | 2.11n.protocol.Use.:abbr:`DH.(Di |
115980 | 66 66 69 65 e2 80 93 48 65 6c 6c 6d 61 6e 29 60 20 70 61 72 61 6d 65 74 65 72 73 20 66 72 6f 6d | ffie...Hellman)`.parameters.from |
1159a0 | 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 2e 20 4d 75 73 74 20 62 65 20 61 74 20 6c 65 61 73 74 | .PKI.subsystem..Must.be.at.least |
1159c0 | 20 32 30 34 38 20 62 69 74 73 20 69 6e 20 6c 65 6e 67 74 68 2e 00 55 73 65 20 43 41 20 63 65 72 | .2048.bits.in.length..Use.CA.cer |
1159e0 | 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 00 55 73 65 20 | tificate.from.PKI.subsystem.Use. |
115a00 | 44 79 6e 44 4e 53 20 61 73 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 20 70 72 6f 76 69 64 65 | DynDNS.as.your.preferred.provide |
115a20 | 72 3a 00 55 73 65 20 54 4c 53 20 62 75 74 20 73 6b 69 70 20 68 6f 73 74 20 76 61 6c 69 64 61 74 | r:.Use.TLS.but.skip.host.validat |
115a40 | 69 6f 6e 00 55 73 65 20 54 4c 53 20 65 6e 63 72 79 70 74 69 6f 6e 2e 00 55 73 65 20 60 3c 73 75 | ion.Use.TLS.encryption..Use.`<su |
115a60 | 62 6e 65 74 3e 60 20 61 73 20 74 68 65 20 49 50 20 70 6f 6f 6c 20 66 6f 72 20 61 6c 6c 20 63 6f | bnet>`.as.the.IP.pool.for.all.co |
115a80 | 6e 6e 65 63 74 69 6e 67 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 60 60 73 68 6f 77 20 6c 6f 67 | nnecting.clients..Use.``show.log |
115aa0 | 20 7c 20 73 74 72 69 70 2d 70 72 69 76 61 74 65 60 60 20 69 66 20 79 6f 75 20 77 61 6e 74 20 74 | .|.strip-private``.if.you.want.t |
115ac0 | 6f 20 68 69 64 65 20 70 72 69 76 61 74 65 20 64 61 74 61 20 77 68 65 6e 20 73 68 61 72 69 6e 67 | o.hide.private.data.when.sharing |
115ae0 | 20 79 6f 75 72 20 6c 6f 67 73 2e 00 55 73 65 20 60 64 65 6c 65 74 65 20 73 79 73 74 65 6d 20 63 | .your.logs..Use.`delete.system.c |
115b00 | 6f 6e 6e 74 72 61 63 6b 20 6d 6f 64 75 6c 65 73 60 20 74 6f 20 64 65 61 63 74 69 76 65 20 61 6c | onntrack.modules`.to.deactive.al |
115b20 | 6c 20 6d 6f 64 75 6c 65 73 2e 00 55 73 65 20 61 20 70 65 72 73 69 73 74 65 6e 74 20 4c 44 41 50 | l.modules..Use.a.persistent.LDAP |
115b40 | 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4e 6f 72 6d 61 6c 6c 79 20 74 68 65 20 4c 44 41 50 20 63 | .connection..Normally.the.LDAP.c |
115b60 | 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 6f 6e 6c 79 20 6f 70 65 6e 20 77 68 69 6c 65 20 76 61 6c | onnection.is.only.open.while.val |
115b80 | 69 64 61 74 69 6e 67 20 61 20 75 73 65 72 6e 61 6d 65 20 74 6f 20 70 72 65 73 65 72 76 65 20 72 | idating.a.username.to.preserve.r |
115ba0 | 65 73 6f 75 72 63 65 73 20 61 74 20 74 68 65 20 4c 44 41 50 20 73 65 72 76 65 72 2e 20 54 68 69 | esources.at.the.LDAP.server..Thi |
115bc0 | 73 20 6f 70 74 69 6f 6e 20 63 61 75 73 65 73 20 74 68 65 20 4c 44 41 50 20 63 6f 6e 6e 65 63 74 | s.option.causes.the.LDAP.connect |
115be0 | 69 6f 6e 20 74 6f 20 62 65 20 6b 65 70 74 20 6f 70 65 6e 2c 20 61 6c 6c 6f 77 69 6e 67 20 69 74 | ion.to.be.kept.open,.allowing.it |
115c00 | 20 74 6f 20 62 65 20 72 65 75 73 65 64 20 66 6f 72 20 66 75 72 74 68 65 72 20 75 73 65 72 20 76 | .to.be.reused.for.further.user.v |
115c20 | 61 6c 69 64 61 74 69 6f 6e 73 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 | alidations..Use.a.specific.addre |
115c40 | 73 73 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 | ss-group..Prepend.character.``!` |
115c60 | 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 | `.for.inverted.matching.criteria |
115c80 | 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 2d 67 72 6f 75 70 2e 20 50 | ..Use.a.specific.domain-group..P |
115ca0 | 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 | repend.character.``!``.for.inver |
115cc0 | 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 | ted.matching.criteria..Use.a.spe |
115ce0 | 63 69 66 69 63 20 6d 61 63 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 | cific.mac-group..Prepend.charact |
115d00 | 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 | er.``!``.for.inverted.matching.c |
115d20 | 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 20 73 70 65 63 69 66 69 63 20 6e 65 74 77 6f 72 6b 2d | riteria..Use.a.specific.network- |
115d40 | 67 72 6f 75 70 2e 20 50 72 65 70 65 6e 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 | group..Prepend.character.``!``.f |
115d60 | 6f 72 20 69 6e 76 65 72 74 65 64 20 6d 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 | or.inverted.matching.criteria..U |
115d80 | 73 65 20 61 20 73 70 65 63 69 66 69 63 20 70 6f 72 74 2d 67 72 6f 75 70 2e 20 50 72 65 70 65 6e | se.a.specific.port-group..Prepen |
115da0 | 64 20 63 68 61 72 61 63 74 65 72 20 60 60 21 60 60 20 66 6f 72 20 69 6e 76 65 72 74 65 64 20 6d | d.character.``!``.for.inverted.m |
115dc0 | 61 74 63 68 69 6e 67 20 63 72 69 74 65 72 69 61 2e 00 55 73 65 20 61 63 74 69 76 65 2d 61 63 74 | atching.criteria..Use.active-act |
115de0 | 69 76 65 20 48 41 20 6d 6f 64 65 2e 00 55 73 65 20 61 64 64 72 65 73 73 20 60 6d 61 73 71 75 65 | ive.HA.mode..Use.address.`masque |
115e00 | 72 61 64 65 60 20 28 74 68 65 20 69 6e 74 65 72 66 61 63 65 73 20 70 72 69 6d 61 72 79 20 61 64 | rade`.(the.interfaces.primary.ad |
115e20 | 64 72 65 73 73 29 20 6f 6e 20 72 75 6c 65 20 33 30 00 55 73 65 20 61 6e 20 61 75 74 6f 6d 61 74 | dress).on.rule.30.Use.an.automat |
115e40 | 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 | ically.generated.self-signed.cer |
115e60 | 74 69 66 69 63 61 74 65 00 55 73 65 20 61 6e 79 20 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 2c 20 | tificate.Use.any.local.address,. |
115e80 | 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 69 66 20 74 | configured.on.any.interface.if.t |
115ea0 | 68 69 73 20 69 73 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 20 61 75 74 68 20 6b 65 79 20 66 69 6c | his.is.not.set..Use.auth.key.fil |
115ec0 | 65 20 61 74 20 60 60 2f 63 6f 6e 66 69 67 2f 61 75 74 68 2f 6d 79 2e 6b 65 79 60 60 00 55 73 65 | e.at.``/config/auth/my.key``.Use |
115ee0 | 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 50 4b 49 20 73 75 62 73 79 73 74 65 6d 00 | .certificate.from.PKI.subsystem. |
115f00 | 55 73 65 20 63 6f 6e 66 69 67 75 72 65 64 20 60 3c 75 72 6c 3e 60 20 74 6f 20 64 65 74 65 72 6d | Use.configured.`<url>`.to.determ |
115f20 | 69 6e 65 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 2e 20 64 64 63 6c 69 65 6e 74 5f 20 77 | ine.your.IP.address..ddclient_.w |
115f40 | 69 6c 6c 20 6c 6f 61 64 20 60 3c 75 72 6c 3e 60 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 65 78 | ill.load.`<url>`.and.tries.to.ex |
115f60 | 74 72 61 63 74 20 79 6f 75 72 20 49 50 20 61 64 64 72 65 73 73 20 66 72 6f 6d 20 74 68 65 20 72 | tract.your.IP.address.from.the.r |
115f80 | 65 73 70 6f 6e 73 65 2e 00 55 73 65 20 64 65 53 45 43 20 28 64 65 64 79 6e 2e 69 6f 29 20 61 73 | esponse..Use.deSEC.(dedyn.io).as |
115fa0 | 20 79 6f 75 72 20 70 72 65 66 65 72 72 65 64 20 70 72 6f 76 69 64 65 72 3a 00 55 73 65 20 69 6e | .your.preferred.provider:.Use.in |
115fc0 | 76 65 72 73 65 2d 6d 61 74 63 68 20 74 6f 20 6d 61 74 63 68 20 61 6e 79 74 68 69 6e 67 20 65 78 | verse-match.to.match.anything.ex |
115fe0 | 63 65 70 74 20 74 68 65 20 67 69 76 65 6e 20 63 6f 75 6e 74 72 79 2d 63 6f 64 65 73 2e 00 55 73 | cept.the.given.country-codes..Us |
116000 | 65 20 6c 6f 63 61 6c 20 73 6f 63 6b 65 74 20 66 6f 72 20 41 50 49 00 55 73 65 20 6c 6f 63 61 6c | e.local.socket.for.API.Use.local |
116020 | 20 75 73 65 72 20 60 66 6f 6f 60 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 60 62 61 72 60 00 | .user.`foo`.with.password.`bar`. |
116040 | 55 73 65 20 74 61 62 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 74 6f 20 67 65 74 20 61 20 6c 69 73 74 | Use.tab.completion.to.get.a.list |
116060 | 20 6f 66 20 63 61 74 65 67 6f 72 69 65 73 2e 00 55 73 65 20 74 68 65 20 61 64 64 72 65 73 73 20 | .of.categories..Use.the.address. |
116080 | 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 6f 6e 20 74 68 | of.the.specified.interface.on.th |
1160a0 | 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | e.local.machine.as.the.source.ad |
1160c0 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 65 | dress.of.the.connection..Use.the |
1160e0 | 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 20 74 6f 20 62 75 69 6c 64 20 61 20 6e | .following.topology.to.build.a.n |
116100 | 61 74 36 36 20 62 61 73 65 64 20 69 73 6f 6c 61 74 65 64 20 6e 65 74 77 6f 72 6b 20 62 65 74 77 | at66.based.isolated.network.betw |
116120 | 65 65 6e 20 69 6e 74 65 72 6e 61 6c 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6e 65 74 77 6f 72 | een.internal.and.external.networ |
116140 | 6b 73 20 28 64 79 6e 61 6d 69 63 20 70 72 65 66 69 78 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 | ks.(dynamic.prefix.is.not.suppor |
116160 | 74 65 64 29 3a 00 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 6f 70 6f 6c 6f 67 79 | ted):.Use.the.following.topology |
116180 | 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 72 20 6c 6f 63 61 | .to.translate.internal.user.loca |
1161a0 | 6c 20 61 64 64 72 65 73 73 65 73 20 28 60 60 66 63 3a 3a 2f 37 60 60 29 20 74 6f 20 44 48 43 50 | l.addresses.(``fc::/7``).to.DHCP |
1161c0 | 76 36 2d 50 44 20 70 72 6f 76 69 64 65 64 20 70 72 65 66 69 78 65 73 20 66 72 6f 6d 20 61 6e 20 | v6-PD.provided.prefixes.from.an. |
1161e0 | 49 53 50 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 61 20 56 79 4f 53 20 48 41 20 70 61 69 72 2e | ISP.connected.to.a.VyOS.HA.pair. |
116200 | 00 55 73 65 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 64 64 72 65 73 73 20 6f 6e 20 74 68 | .Use.the.specified.address.on.th |
116220 | 65 20 6c 6f 63 61 6c 20 6d 61 63 68 69 6e 65 20 61 73 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 | e.local.machine.as.the.source.ad |
116240 | 64 72 65 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 4f 6e 6c 79 20 75 73 | dress.of.the.connection..Only.us |
116260 | 65 66 75 6c 20 6f 6e 20 73 79 73 74 65 6d 73 20 77 69 74 68 20 6d 6f 72 65 20 74 68 61 6e 20 6f | eful.on.systems.with.more.than.o |
116280 | 6e 65 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 69 | ne.address..Use.these.commands.i |
1162a0 | 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 69 73 63 | f.you.would.like.to.set.the.disc |
1162c0 | 6f 76 65 72 79 20 68 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 70 61 72 61 6d 65 | overy.hello.and.hold.time.parame |
1162e0 | 74 65 72 73 20 66 6f 72 20 74 68 65 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 6e 65 69 67 68 62 | ters.for.the.targeted.LDP.neighb |
116300 | 6f 72 73 2e 00 55 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 69 66 20 79 6f 75 20 77 | ors..Use.these.commands.if.you.w |
116320 | 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 69 73 63 6f 76 65 72 79 20 68 | ould.like.to.set.the.discovery.h |
116340 | 65 6c 6c 6f 20 61 6e 64 20 68 6f 6c 64 20 74 69 6d 65 20 70 61 72 61 6d 65 74 65 72 73 2e 00 55 | ello.and.hold.time.parameters..U |
116360 | 73 65 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 | se.these.commands.to.control.the |
116380 | 20 65 78 70 6f 72 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 65 71 75 69 76 61 6c | .exporting.of.forwarding.equival |
1163a0 | 65 6e 63 65 20 63 6c 61 73 73 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 4c 44 50 20 74 6f 20 6e | ence.classes.(FECs).for.LDP.to.n |
1163c0 | 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 | eighbors..This.would.be.useful.f |
1163e0 | 6f 72 20 65 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 74 68 | or.example.on.only.announcing.th |
116400 | 65 20 6c 61 62 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 | e.labeled.routes.that.are.needed |
116420 | 20 61 6e 64 20 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 | .and.not.ones.that.are.not.neede |
116440 | 64 2c 20 73 75 63 68 20 61 73 20 61 6e 6e 6f 75 6e 63 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 | d,.such.as.announcing.loopback.i |
116460 | 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 6e 6f 20 6f 74 68 65 72 73 2e 00 55 73 65 20 74 68 65 | nterfaces.and.no.others..Use.the |
116480 | 73 65 20 63 6f 6d 6d 61 6e 64 73 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 69 6d 70 6f 72 | se.commands.to.control.the.impor |
1164a0 | 74 69 6e 67 20 6f 66 20 66 6f 72 77 61 72 64 69 6e 67 20 65 71 75 69 76 61 6c 65 6e 63 65 20 63 | ting.of.forwarding.equivalence.c |
1164c0 | 6c 61 73 73 65 73 20 28 46 45 43 73 29 20 66 6f 72 20 4c 44 50 20 66 72 6f 6d 20 6e 65 69 67 68 | lasses.(FECs).for.LDP.from.neigh |
1164e0 | 62 6f 72 73 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 66 6f 72 20 65 | bors..This.would.be.useful.for.e |
116500 | 78 61 6d 70 6c 65 20 6f 6e 20 6f 6e 6c 79 20 61 63 63 65 70 74 69 6e 67 20 74 68 65 20 6c 61 62 | xample.on.only.accepting.the.lab |
116520 | 65 6c 65 64 20 72 6f 75 74 65 73 20 74 68 61 74 20 61 72 65 20 6e 65 65 64 65 64 20 61 6e 64 20 | eled.routes.that.are.needed.and. |
116540 | 6e 6f 74 20 6f 6e 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 74 20 6e 65 65 64 65 64 2c 20 73 75 | not.ones.that.are.not.needed,.su |
116560 | 63 68 20 61 73 20 61 63 63 65 70 74 69 6e 67 20 6c 6f 6f 70 62 61 63 6b 20 69 6e 74 65 72 66 61 | ch.as.accepting.loopback.interfa |
116580 | 63 65 73 20 61 6e 64 20 72 65 6a 65 63 74 69 6e 67 20 61 6c 6c 20 6f 74 68 65 72 73 2e 00 55 73 | ces.and.rejecting.all.others..Us |
1165a0 | 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 | e.this.PIM.command.in.the.select |
1165c0 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 73 65 74 20 74 68 65 20 70 72 69 6f 72 69 74 79 | ed.interface.to.set.the.priority |
1165e0 | 20 28 31 2d 34 32 39 34 39 36 37 32 39 35 29 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 69 6e 66 6c | .(1-4294967295).you.want.to.infl |
116600 | 75 65 6e 63 65 20 69 6e 20 74 68 65 20 65 6c 65 63 74 69 6f 6e 20 6f 66 20 61 20 6e 6f 64 65 20 | uence.in.the.election.of.a.node. |
116620 | 74 6f 20 62 65 63 6f 6d 65 20 74 68 65 20 44 65 73 69 67 6e 61 74 65 64 20 52 6f 75 74 65 72 20 | to.become.the.Designated.Router. |
116640 | 66 6f 72 20 61 20 4c 41 4e 20 73 65 67 6d 65 6e 74 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 | for.a.LAN.segment..The.default.p |
116660 | 72 69 6f 72 69 74 79 20 69 73 20 31 2c 20 73 65 74 20 61 20 20 68 69 67 68 65 72 20 76 61 6c 75 | riority.is.1,.set.a..higher.valu |
116680 | 65 20 74 6f 20 67 69 76 65 20 74 68 65 20 72 6f 75 74 65 72 20 6d 6f 72 65 20 70 72 65 66 65 72 | e.to.give.the.router.more.prefer |
1166a0 | 65 6e 63 65 20 69 6e 20 74 68 65 20 44 52 20 65 6c 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e | ence.in.the.DR.election.process. |
1166c0 | 00 55 73 65 20 74 68 69 73 20 50 49 4d 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6d 6f 64 69 66 79 20 | .Use.this.PIM.command.to.modify. |
1166e0 | 74 68 65 20 74 69 6d 65 20 6f 75 74 20 76 61 6c 75 65 20 28 33 31 2d 36 30 30 30 30 20 73 65 63 | the.time.out.value.(31-60000.sec |
116700 | 6f 6e 64 73 29 20 66 6f 72 20 61 6e 20 60 28 53 2c 47 29 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f | onds).for.an.`(S,G).<https://too |
116720 | 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 63 74 69 6f 6e | ls.ietf.org/html/rfc7761#section |
116740 | 2d 34 2e 31 3e 60 5f 20 66 6c 6f 77 2e 20 33 31 20 73 65 63 6f 6e 64 73 20 69 73 20 63 68 6f 73 | -4.1>`_.flow..31.seconds.is.chos |
116760 | 65 6e 20 66 6f 72 20 61 20 6c 6f 77 65 72 20 62 6f 75 6e 64 20 61 73 20 73 6f 6d 65 20 68 61 72 | en.for.a.lower.bound.as.some.har |
116780 | 64 77 61 72 65 20 70 6c 61 74 66 6f 72 6d 73 20 63 61 6e 6e 6f 74 20 73 65 65 20 64 61 74 61 20 | dware.platforms.cannot.see.data. |
1167a0 | 66 6c 6f 77 69 6e 67 20 69 6e 20 62 65 74 74 65 72 20 74 68 61 6e 20 33 30 20 73 65 63 6f 6e 64 | flowing.in.better.than.30.second |
1167c0 | 73 20 63 68 75 6e 6b 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 | s.chunks..Use.this.comand.to.set |
1167e0 | 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 | .the.IPv6.address.pool.from.whic |
116800 | 68 20 61 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 | h.a.PPPoE.client.will.get.an.IPv |
116820 | 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 | 6.prefix.of.your.defined.length. |
116840 | 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e | (mask).to.terminate.the.PPPoE.en |
116860 | 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c | dpoint.at.their.side..The.mask.l |
116880 | 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 | ength.can.be.set.from.48.to.128. |
1168a0 | 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 | bit.long,.the.default.value.is.6 |
1168c0 | 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 | 4..Use.this.comand.to.set.the.IP |
1168e0 | 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 49 50 | v6.address.pool.from.which.an.IP |
116900 | 6f 45 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 | oE.client.will.get.an.IPv6.prefi |
116920 | 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 | x.of.your.defined.length.(mask). |
116940 | 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 49 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 | to.terminate.the.IPoE.endpoint.a |
116960 | 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 | t.their.side..The.mask.length.ca |
116980 | 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 | n.be.set.from.48.to.128.bit.long |
1169a0 | 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 | ,.the.default.value.is.64..Use.t |
1169c0 | 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 | his.comand.to.set.the.IPv6.addre |
1169e0 | 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 50 6f 45 20 63 6c 69 65 | ss.pool.from.which.an.PPPoE.clie |
116a00 | 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f | nt.will.get.an.IPv6.prefix.of.yo |
116a20 | 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d | ur.defined.length.(mask).to.term |
116a40 | 69 6e 61 74 65 20 74 68 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 | inate.the.PPPoE.endpoint.at.thei |
116a60 | 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 | r.side..The.mask.length.can.be.s |
116a80 | 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 | et.from.48.to.128.bit.long,.the. |
116aa0 | 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f | default.value.is.64..Use.this.co |
116ac0 | 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f | mand.to.set.the.IPv6.address.poo |
116ae0 | 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 50 50 54 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c | l.from.which.an.PPTP.client.will |
116b00 | 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 | .get.an.IPv6.prefix.of.your.defi |
116b20 | 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 | ned.length.(mask).to.terminate.t |
116b40 | 68 65 20 50 50 54 50 20 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 | he.PPTP.endpoint.at.their.side.. |
116b60 | 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 | The.mask.length.can.be.set.from. |
116b80 | 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 | 48.to.128.bit.long,.the.default. |
116ba0 | 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 | value.is.64..Use.this.comand.to. |
116bc0 | 73 65 74 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 | set.the.IPv6.address.pool.from.w |
116be0 | 68 69 63 68 20 61 6e 20 53 53 54 50 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 | hich.an.SSTP.client.will.get.an. |
116c00 | 49 50 76 36 20 70 72 65 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 | IPv6.prefix.of.your.defined.leng |
116c20 | 74 68 20 28 6d 61 73 6b 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 53 53 54 50 20 | th.(mask).to.terminate.the.SSTP. |
116c40 | 65 6e 64 70 6f 69 6e 74 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b | endpoint.at.their.side..The.mask |
116c60 | 20 6c 65 6e 67 74 68 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 | .length.can.be.set.from.48.to.12 |
116c80 | 38 20 62 69 74 20 6c 6f 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 | 8.bit.long,.the.default.value.is |
116ca0 | 20 36 34 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 | .64..Use.this.comand.to.set.the. |
116cc0 | 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 66 72 6f 6d 20 77 68 69 63 68 20 61 6e 20 | IPv6.address.pool.from.which.an. |
116ce0 | 6c 32 74 70 20 63 6c 69 65 6e 74 20 77 69 6c 6c 20 67 65 74 20 61 6e 20 49 50 76 36 20 70 72 65 | l2tp.client.will.get.an.IPv6.pre |
116d00 | 66 69 78 20 6f 66 20 79 6f 75 72 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 6d 61 73 6b | fix.of.your.defined.length.(mask |
116d20 | 29 20 74 6f 20 74 65 72 6d 69 6e 61 74 65 20 74 68 65 20 6c 32 74 70 20 65 6e 64 70 6f 69 6e 74 | ).to.terminate.the.l2tp.endpoint |
116d40 | 20 61 74 20 74 68 65 69 72 20 73 69 64 65 2e 20 54 68 65 20 6d 61 73 6b 20 6c 65 6e 67 74 68 20 | .at.their.side..The.mask.length. |
116d60 | 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 34 38 20 74 6f 20 31 32 38 20 62 69 74 20 6c 6f | can.be.set.from.48.to.128.bit.lo |
116d80 | 6e 67 2c 20 74 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 36 34 2e 00 55 73 65 | ng,.the.default.value.is.64..Use |
116da0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 70 6f 6f 6c 20 6f 66 20 | .this.command.for.every.pool.of. |
116dc0 | 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 | client.IP.addresses.you.want.to. |
116de0 | 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 69 73 20 70 6f | define..The.addresses.of.this.po |
116e00 | 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 | ol.will.be.given.to.PPPoE.client |
116e20 | 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 20 61 6e | s..You.must.use.CIDR.notation.an |
116e40 | 64 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 | d.it.must.be.within.a./24.subnet |
116e60 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 65 76 65 72 79 20 70 6f 6f | ..Use.this.command.for.every.poo |
116e80 | 6c 20 6f 66 20 63 6c 69 65 6e 74 20 49 50 20 61 64 64 72 65 73 73 65 73 20 79 6f 75 20 77 61 6e | l.of.client.IP.addresses.you.wan |
116ea0 | 74 20 74 6f 20 64 65 66 69 6e 65 2e 20 54 68 65 20 61 64 64 72 65 73 73 65 73 20 6f 66 20 74 68 | t.to.define..The.addresses.of.th |
116ec0 | 69 73 20 70 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 | is.pool.will.be.given.to.PPPoE.c |
116ee0 | 6c 69 65 6e 74 73 2e 20 59 6f 75 20 6d 75 73 74 20 75 73 65 20 43 49 44 52 20 6e 6f 74 61 74 69 | lients..You.must.use.CIDR.notati |
116f00 | 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c | on..Use.this.command.if.you.woul |
116f20 | 64 20 6c 69 6b 65 20 66 6f 72 20 74 68 65 20 72 6f 75 74 65 72 20 74 6f 20 61 64 76 65 72 74 69 | d.like.for.the.router.to.adverti |
116f40 | 73 65 20 46 45 43 73 20 77 69 74 68 20 61 20 6c 61 62 65 6c 20 6f 66 20 30 20 66 6f 72 20 65 78 | se.FECs.with.a.label.of.0.for.ex |
116f60 | 70 6c 69 63 69 74 20 6e 75 6c 6c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 00 55 73 65 20 74 68 69 73 | plicit.null.operations..Use.this |
116f80 | 20 63 6f 6d 6d 61 6e 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 63 6f | .command.if.you.would.like.to.co |
116fa0 | 6e 74 72 6f 6c 20 74 68 65 20 6c 6f 63 61 6c 20 46 45 43 20 61 6c 6c 6f 63 61 74 69 6f 6e 73 20 | ntrol.the.local.FEC.allocations. |
116fc0 | 66 6f 72 20 4c 44 50 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f 75 6c 64 20 62 65 | for.LDP..A.good.example.would.be |
116fe0 | 20 66 6f 72 20 79 6f 75 72 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 6e 6f 74 20 61 6c | .for.your.local.router.to.not.al |
117000 | 6c 6f 63 61 74 65 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 65 76 65 72 79 74 68 69 6e 67 2e 20 4a | locate.a.label.for.everything..J |
117020 | 75 73 74 20 61 20 6c 61 62 65 6c 20 66 6f 72 20 77 68 61 74 20 69 74 27 73 20 75 73 65 66 75 6c | ust.a.label.for.what.it's.useful |
117040 | 2e 20 41 20 67 6f 6f 64 20 65 78 61 6d 70 6c 65 20 77 6f 75 6c 64 20 62 65 20 6a 75 73 74 20 61 | ..A.good.example.would.be.just.a |
117060 | 20 6c 6f 6f 70 62 61 63 6b 20 6c 61 62 65 6c 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | .loopback.label..Use.this.comman |
117080 | 64 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 73 65 74 20 74 68 65 20 54 | d.if.you.would.like.to.set.the.T |
1170a0 | 43 50 20 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 73 2e 00 | CP.session.hold.time.intervals.. |
1170c0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 | Use.this.command.to.allow.the.se |
1170e0 | 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 | lected.interface.to.join.a.multi |
117100 | 63 61 73 74 20 67 72 6f 75 70 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 6d 75 6c 74 69 63 61 73 | cast.group.defining.the.multicas |
117120 | 74 20 61 64 64 72 65 73 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 6a 6f 69 6e 20 61 6e 64 20 74 | t.address.you.want.to.join.and.t |
117140 | 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 6f 2e 00 55 73 65 20 74 68 | he.source.IP.address.too..Use.th |
117160 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 73 65 6c 65 63 74 65 64 | is.command.to.allow.the.selected |
117180 | 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 20 6d 75 6c 74 69 63 61 73 74 20 67 | .interface.to.join.a.multicast.g |
1171a0 | 72 6f 75 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 61 6c 6c 6f 77 20 | roup..Use.this.command.to.allow. |
1171c0 | 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6a 6f 69 6e 20 61 | the.selected.interface.to.join.a |
1171e0 | 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 20 67 72 6f 75 70 | .source-specific.multicast.group |
117200 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 | ..Use.this.command.to.check.the. |
117220 | 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 | tunnel.status.for.OpenVPN.client |
117240 | 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | .interfaces..Use.this.command.to |
117260 | 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 74 75 73 20 66 6f 72 20 4f 70 65 | .check.the.tunnel.status.for.Ope |
117280 | 6e 56 50 4e 20 73 65 72 76 65 72 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 | nVPN.server.interfaces..Use.this |
1172a0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 74 75 6e 6e 65 6c 20 73 74 61 | .command.to.check.the.tunnel.sta |
1172c0 | 74 75 73 20 66 6f 72 20 4f 70 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 69 6e 74 | tus.for.OpenVPN.site-to-site.int |
1172e0 | 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6c 65 | erfaces..Use.this.command.to.cle |
117300 | 61 72 20 42 6f 72 64 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 73 74 61 74 69 | ar.Border.Gateway.Protocol.stati |
117320 | 73 74 69 63 73 20 6f 72 20 73 74 61 74 75 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | stics.or.status..Use.this.comman |
117340 | 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c | d.to.configure.DHCPv6.Prefix.Del |
117360 | 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 49 50 6f 45 2e 20 59 6f 75 20 77 | egation.(RFC3633).on.IPoE..You.w |
117380 | 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 | ill.have.to.set.your.IPv6.pool.a |
1173a0 | 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 | nd.the.length.of.the.delegation. |
1173c0 | 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f | prefix..From.the.defined.IPv6.po |
1173e0 | 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f | ol.you.will.be.handing.out.netwo |
117400 | 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 | rks.of.the.defined.length.(deleg |
117420 | 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 | ation-prefix)..The.length.of.the |
117440 | 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 | .delegation.prefix.can.be.set.fr |
117460 | 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 | om.32.to.64.bit.long..Use.this.c |
117480 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 | ommand.to.configure.DHCPv6.Prefi |
1174a0 | 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 50 50 50 6f 45 2e | x.Delegation.(RFC3633).on.PPPoE. |
1174c0 | 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 | .You.will.have.to.set.your.IPv6. |
1174e0 | 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 | pool.and.the.length.of.the.deleg |
117500 | 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 | ation.prefix..From.the.defined.I |
117520 | 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 | Pv6.pool.you.will.be.handing.out |
117540 | 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 | .networks.of.the.defined.length. |
117560 | 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 | (delegation-prefix)..The.length. |
117580 | 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 | of.the.delegation.prefix.can.be. |
1175a0 | 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 | set.from.32.to.64.bit.long..Use. |
1175c0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 | this.command.to.configure.DHCPv6 |
1175e0 | 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 29 20 6f 6e 20 | .Prefix.Delegation.(RFC3633).on. |
117600 | 50 50 54 50 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 79 6f 75 72 20 | PPTP..You.will.have.to.set.your. |
117620 | 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 | IPv6.pool.and.the.length.of.the. |
117640 | 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 20 64 65 66 69 | delegation.prefix..From.the.defi |
117660 | 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 61 6e 64 69 6e | ned.IPv6.pool.you.will.be.handin |
117680 | 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e 65 64 20 6c 65 | g.out.networks.of.the.defined.le |
1176a0 | 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 68 65 20 6c 65 | ngth.(delegation-prefix)..The.le |
1176c0 | 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 20 63 61 | ngth.of.the.delegation.prefix.ca |
1176e0 | 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 6c 6f 6e 67 2e | n.be.set.from.32.to.64.bit.long. |
117700 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 44 | .Use.this.command.to.configure.D |
117720 | 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 43 33 36 33 33 | HCPv6.Prefix.Delegation.(RFC3633 |
117740 | 29 20 6f 6e 20 53 53 54 50 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 74 20 | ).on.SSTP..You.will.have.to.set. |
117760 | 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 | your.IPv6.pool.and.the.length.of |
117780 | 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 68 65 | .the.delegation.prefix..From.the |
1177a0 | 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 68 | .defined.IPv6.pool.you.will.be.h |
1177c0 | 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 69 6e | anding.out.networks.of.the.defin |
1177e0 | 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e 20 54 | ed.length.(delegation-prefix)..T |
117800 | 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 | he.length.of.the.delegation.pref |
117820 | 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 74 20 | ix.can.be.set.from.32.to.64.bit. |
117840 | 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | long..Use.this.command.to.config |
117860 | 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 28 52 46 | ure.DHCPv6.Prefix.Delegation.(RF |
117880 | 43 33 36 33 33 29 20 6f 6e 20 6c 32 74 70 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f | C3633).on.l2tp..You.will.have.to |
1178a0 | 20 73 65 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 | .set.your.IPv6.pool.and.the.leng |
1178c0 | 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f | th.of.the.delegation.prefix..Fro |
1178e0 | 6d 20 74 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c | m.the.defined.IPv6.pool.you.will |
117900 | 20 62 65 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 | .be.handing.out.networks.of.the. |
117920 | 64 65 66 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 | defined.length.(delegation-prefi |
117940 | 78 29 2e 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e | x)..The.length.of.the.delegation |
117960 | 20 70 72 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 | .prefix.can.be.set.from.32.to.64 |
117980 | 20 62 69 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | .bit.long..Use.this.command.to.c |
1179a0 | 6f 6e 66 69 67 75 72 65 20 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f | onfigure.DHCPv6.Prefix.Delegatio |
1179c0 | 6e 20 28 52 46 43 33 36 33 33 29 2e 20 59 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 73 65 | n.(RFC3633)..You.will.have.to.se |
1179e0 | 74 20 79 6f 75 72 20 49 50 76 36 20 70 6f 6f 6c 20 61 6e 64 20 74 68 65 20 6c 65 6e 67 74 68 20 | t.your.IPv6.pool.and.the.length. |
117a00 | 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 65 66 69 78 2e 20 46 72 6f 6d 20 74 | of.the.delegation.prefix..From.t |
117a20 | 68 65 20 64 65 66 69 6e 65 64 20 49 50 76 36 20 70 6f 6f 6c 20 79 6f 75 20 77 69 6c 6c 20 62 65 | he.defined.IPv6.pool.you.will.be |
117a40 | 20 68 61 6e 64 69 6e 67 20 6f 75 74 20 6e 65 74 77 6f 72 6b 73 20 6f 66 20 74 68 65 20 64 65 66 | .handing.out.networks.of.the.def |
117a60 | 69 6e 65 64 20 6c 65 6e 67 74 68 20 28 64 65 6c 65 67 61 74 69 6f 6e 2d 70 72 65 66 69 78 29 2e | ined.length.(delegation-prefix). |
117a80 | 20 54 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 64 65 6c 65 67 61 74 69 6f 6e 20 70 72 | .The.length.of.the.delegation.pr |
117aa0 | 65 66 69 78 20 63 61 6e 20 62 65 20 73 65 74 20 66 72 6f 6d 20 33 32 20 74 6f 20 36 34 20 62 69 | efix.can.be.set.from.32.to.64.bi |
117ac0 | 74 20 6c 6f 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | t.long..Use.this.command.to.conf |
117ae0 | 69 67 75 72 65 20 44 79 6e 61 6d 69 63 20 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 45 78 74 65 | igure.Dynamic.Authorization.Exte |
117b00 | 6e 73 69 6f 6e 73 20 74 6f 20 52 41 44 49 55 53 20 73 6f 20 74 68 61 74 20 79 6f 75 20 63 61 6e | nsions.to.RADIUS.so.that.you.can |
117b20 | 20 72 65 6d 6f 74 65 6c 79 20 64 69 73 63 6f 6e 6e 65 63 74 20 73 65 73 73 69 6f 6e 73 20 61 6e | .remotely.disconnect.sessions.an |
117b40 | 64 20 63 68 61 6e 67 65 20 73 6f 6d 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 72 | d.change.some.authentication.par |
117b60 | 61 6d 65 74 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | ameters..Use.this.command.to.con |
117b80 | 66 69 67 75 72 65 20 61 20 22 62 6c 61 63 6b 2d 68 6f 6c 65 22 20 72 6f 75 74 65 20 6f 6e 20 74 | figure.a."black-hole".route.on.t |
117ba0 | 68 65 20 72 6f 75 74 65 72 2e 20 41 20 62 6c 61 63 6b 2d 68 6f 6c 65 20 72 6f 75 74 65 20 69 73 | he.router..A.black-hole.route.is |
117bc0 | 20 61 20 72 6f 75 74 65 20 66 6f 72 20 77 68 69 63 68 20 74 68 65 20 73 79 73 74 65 6d 20 73 69 | .a.route.for.which.the.system.si |
117be0 | 6c 65 6e 74 6c 79 20 64 69 73 63 61 72 64 20 70 61 63 6b 65 74 73 20 74 68 61 74 20 61 72 65 20 | lently.discard.packets.that.are. |
117c00 | 6d 61 74 63 68 65 64 2e 20 54 68 69 73 20 70 72 65 76 65 6e 74 73 20 6e 65 74 77 6f 72 6b 73 20 | matched..This.prevents.networks. |
117c20 | 6c 65 61 6b 69 6e 67 20 6f 75 74 20 70 75 62 6c 69 63 20 69 6e 74 65 72 66 61 63 65 73 2c 20 62 | leaking.out.public.interfaces,.b |
117c40 | 75 74 20 69 74 20 64 6f 65 73 20 6e 6f 74 20 70 72 65 76 65 6e 74 20 74 68 65 6d 20 66 72 6f 6d | ut.it.does.not.prevent.them.from |
117c60 | 20 62 65 69 6e 67 20 75 73 65 64 20 61 73 20 61 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 72 | .being.used.as.a.more.specific.r |
117c80 | 6f 75 74 65 20 69 6e 73 69 64 65 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 | oute.inside.your.network..Use.th |
117ca0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 4e 65 74 77 6f 72 | is.command.to.configure.a.Networ |
117cc0 | 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e | k.Emulator.policy.defining.its.n |
117ce0 | 61 6d 65 20 61 6e 64 20 74 68 65 20 66 69 78 65 64 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 | ame.and.the.fixed.amount.of.time |
117d00 | 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 64 64 20 74 6f 20 61 6c 6c 20 70 61 63 6b 65 74 20 67 | .you.want.to.add.to.all.packet.g |
117d20 | 6f 69 6e 67 20 6f 75 74 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 54 68 65 20 6c | oing.out.of.the.interface..The.l |
117d40 | 61 74 65 6e 63 79 20 77 69 6c 6c 20 62 65 20 61 64 64 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 | atency.will.be.added.through.the |
117d60 | 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 20 71 64 69 73 63 2e 20 49 74 20 77 | .Token.Bucket.Filter.qdisc..It.w |
117d80 | 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 20 68 61 76 65 | ill.only.take.effect.if.you.have |
117da0 | 20 63 6f 6e 66 69 67 75 72 65 64 20 69 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 6f 6f 2e 20 59 | .configured.its.bandwidth.too..Y |
117dc0 | 6f 75 20 63 61 6e 20 75 73 65 20 73 65 63 73 2c 20 6d 73 20 61 6e 64 20 75 73 2e 20 44 65 66 61 | ou.can.use.secs,.ms.and.us..Defa |
117de0 | 75 6c 74 3a 20 35 30 6d 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 | ult:.50ms..Use.this.command.to.c |
117e00 | 6f 6e 66 69 67 75 72 65 20 61 20 50 72 69 6f 72 69 74 79 20 51 75 65 75 65 20 70 6f 6c 69 63 79 | onfigure.a.Priority.Queue.policy |
117e20 | 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 77 69 74 68 | ,.set.its.name,.set.a.class.with |
117e40 | 20 61 20 70 72 69 6f 72 69 74 79 20 66 72 6f 6d 20 31 20 74 6f 20 37 20 61 6e 64 20 64 65 66 69 | .a.priority.from.1.to.7.and.defi |
117e60 | 6e 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 72 65 61 6c 20 71 75 65 75 | ne.a.hard.limit.on.the.real.queu |
117e80 | 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 20 69 73 20 72 65 61 63 68 | e.size..When.this.limit.is.reach |
117ea0 | 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 2e 00 55 73 65 | ed,.new.packets.are.dropped..Use |
117ec0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e | .this.command.to.configure.a.Ran |
117ee0 | 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 | dom-Detect.policy.and.set.its.na |
117f00 | 6d 65 2c 20 74 68 65 6e 20 6e 61 6d 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 | me,.then.name.the.IP.Precedence. |
117f20 | 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f | for.the.virtual.queue.you.are.co |
117f40 | 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 73 | nfiguring.and.what.the.maximum.s |
117f60 | 69 7a 65 20 6f 66 20 69 74 73 20 71 75 65 75 65 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 31 | ize.of.its.queue.will.be.(from.1 |
117f80 | 20 74 6f 20 31 2d 34 32 39 34 39 36 37 32 39 35 20 70 61 63 6b 65 74 73 29 2e 20 50 61 63 6b 65 | .to.1-4294967295.packets)..Packe |
117fa0 | 74 73 20 61 72 65 20 64 72 6f 70 70 65 64 20 77 68 65 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 | ts.are.dropped.when.the.current. |
117fc0 | 71 75 65 75 65 20 6c 65 6e 67 74 68 20 72 65 61 63 68 65 73 20 74 68 69 73 20 76 61 6c 75 65 2e | queue.length.reaches.this.value. |
117fe0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
118000 | 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 | .Random-Detect.policy.and.set.it |
118020 | 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 | s.name,.then.state.the.IP.Preced |
118040 | 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 | ence.for.the.virtual.queue.you.a |
118060 | 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 61 72 6b | re.configuring.and.what.its.mark |
118080 | 20 28 64 72 6f 70 29 20 70 72 6f 62 61 62 69 6c 69 74 79 20 77 69 6c 6c 20 62 65 2e 20 53 65 74 | .(drop).probability.will.be..Set |
1180a0 | 20 74 68 65 20 70 72 6f 62 61 62 69 6c 69 74 79 20 62 79 20 67 69 76 69 6e 67 20 74 68 65 20 4e | .the.probability.by.giving.the.N |
1180c0 | 20 76 61 6c 75 65 20 6f 66 20 74 68 65 20 66 72 61 63 74 69 6f 6e 20 31 2f 4e 20 28 64 65 66 61 | .value.of.the.fraction.1/N.(defa |
1180e0 | 75 6c 74 3a 20 31 30 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f | ult:.10)..Use.this.command.to.co |
118100 | 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 | nfigure.a.Random-Detect.policy.a |
118120 | 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 | nd.set.its.name,.then.state.the. |
118140 | 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 | IP.Precedence.for.the.virtual.qu |
118160 | 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 | eue.you.are.configuring.and.what |
118180 | 20 69 74 73 20 6d 61 78 69 6d 75 6d 20 74 68 72 65 73 68 6f 6c 64 20 66 6f 72 20 72 61 6e 64 6f | .its.maximum.threshold.for.rando |
1181a0 | 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 28 66 72 6f 6d 20 30 20 74 6f 20 34 | m.detection.will.be.(from.0.to.4 |
1181c0 | 30 39 36 20 70 61 63 6b 65 74 73 2c 20 64 65 66 61 75 6c 74 3a 20 31 38 29 2e 20 41 74 20 74 68 | 096.packets,.default:.18)..At.th |
1181e0 | 69 73 20 73 69 7a 65 2c 20 74 68 65 20 6d 61 72 6b 69 6e 67 20 28 64 72 6f 70 29 20 70 72 6f 62 | is.size,.the.marking.(drop).prob |
118200 | 61 62 69 6c 69 74 79 20 69 73 20 6d 61 78 69 6d 61 6c 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | ability.is.maximal..Use.this.com |
118220 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 | mand.to.configure.a.Random-Detec |
118240 | 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 | t.policy.and.set.its.name,.then. |
118260 | 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 | state.the.IP.Precedence.for.the. |
118280 | 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e | virtual.queue.you.are.configurin |
1182a0 | 67 20 61 6e 64 20 77 68 61 74 20 69 74 73 20 6d 69 6e 69 6d 75 6d 20 74 68 72 65 73 68 6f 6c 64 | g.and.what.its.minimum.threshold |
1182c0 | 20 66 6f 72 20 72 61 6e 64 6f 6d 20 64 65 74 65 63 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 28 66 | .for.random.detection.will.be.(f |
1182e0 | 72 6f 6d 20 30 20 74 6f 20 34 30 39 36 20 70 61 63 6b 65 74 73 29 2e 20 20 49 66 20 74 68 69 73 | rom.0.to.4096.packets)...If.this |
118300 | 20 76 61 6c 75 65 20 69 73 20 65 78 63 65 65 64 65 64 2c 20 70 61 63 6b 65 74 73 20 73 74 61 72 | .value.is.exceeded,.packets.star |
118320 | 74 20 62 65 69 6e 67 20 65 6c 69 67 69 62 6c 65 20 66 6f 72 20 62 65 69 6e 67 20 64 72 6f 70 70 | t.being.eligible.for.being.dropp |
118340 | 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ed..Use.this.command.to.configur |
118360 | 65 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 20 61 6e 64 20 73 65 74 | e.a.Random-Detect.policy.and.set |
118380 | 20 69 74 73 20 6e 61 6d 65 2c 20 74 68 65 6e 20 73 74 61 74 65 20 74 68 65 20 49 50 20 50 72 65 | .its.name,.then.state.the.IP.Pre |
1183a0 | 63 65 64 65 6e 63 65 20 66 6f 72 20 74 68 65 20 76 69 72 74 75 61 6c 20 71 75 65 75 65 20 79 6f | cedence.for.the.virtual.queue.yo |
1183c0 | 75 20 61 72 65 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 61 6e 64 20 77 68 61 74 20 74 68 65 20 73 | u.are.configuring.and.what.the.s |
1183e0 | 69 7a 65 20 6f 66 20 69 74 73 20 61 76 65 72 61 67 65 2d 70 61 63 6b 65 74 20 73 68 6f 75 6c 64 | ize.of.its.average-packet.should |
118400 | 20 62 65 20 28 69 6e 20 62 79 74 65 73 2c 20 64 65 66 61 75 6c 74 3a 20 31 30 32 34 29 2e 00 55 | .be.(in.bytes,.default:.1024)..U |
118420 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 | se.this.command.to.configure.a.R |
118440 | 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d | andom-Detect.policy,.set.its.nam |
118460 | 65 20 61 6e 64 20 73 65 74 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e 64 77 69 64 74 | e.and.set.the.available.bandwidt |
118480 | 68 20 66 6f 72 20 74 68 69 73 20 70 6f 6c 69 63 79 2e 20 49 74 20 69 73 20 75 73 65 64 20 66 6f | h.for.this.policy..It.is.used.fo |
1184a0 | 72 20 63 61 6c 63 75 6c 61 74 69 6e 67 20 74 68 65 20 61 76 65 72 61 67 65 20 71 75 65 75 65 20 | r.calculating.the.average.queue. |
1184c0 | 73 69 7a 65 20 61 66 74 65 72 20 73 6f 6d 65 20 69 64 6c 65 20 74 69 6d 65 2e 20 49 74 20 73 68 | size.after.some.idle.time..It.sh |
1184e0 | 6f 75 6c 64 20 62 65 20 73 65 74 20 74 6f 20 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 6f 66 20 | ould.be.set.to.the.bandwidth.of. |
118500 | 79 6f 75 72 20 69 6e 74 65 72 66 61 63 65 2e 20 52 61 6e 64 6f 6d 20 44 65 74 65 63 74 20 69 73 | your.interface..Random.Detect.is |
118520 | 20 6e 6f 74 20 61 20 73 68 61 70 69 6e 67 20 70 6f 6c 69 63 79 2c 20 74 68 69 73 20 63 6f 6d 6d | .not.a.shaping.policy,.this.comm |
118540 | 61 6e 64 20 77 69 6c 6c 20 6e 6f 74 20 73 68 61 70 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | and.will.not.shape..Use.this.com |
118560 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c | mand.to.configure.a.Rate-Control |
118580 | 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 | .policy,.set.its.name.and.the.ma |
1185a0 | 78 69 6d 75 6d 20 61 6d 6f 75 6e 74 20 6f 66 20 74 69 6d 65 20 61 20 70 61 63 6b 65 74 20 63 61 | ximum.amount.of.time.a.packet.ca |
1185c0 | 6e 20 62 65 20 71 75 65 75 65 64 20 28 64 65 66 61 75 6c 74 3a 20 35 30 20 6d 73 29 2e 00 55 73 | n.be.queued.(default:.50.ms)..Us |
1185e0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 61 | e.this.command.to.configure.a.Ra |
118600 | 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 | te-Control.policy,.set.its.name. |
118620 | 61 6e 64 20 74 68 65 20 72 61 74 65 20 6c 69 6d 69 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 68 | and.the.rate.limit.you.want.to.h |
118640 | 61 76 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 | ave..Use.this.command.to.configu |
118660 | 72 65 20 61 20 52 61 74 65 2d 43 6f 6e 74 72 6f 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 | re.a.Rate-Control.policy,.set.it |
118680 | 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 20 62 75 63 6b 65 | s.name.and.the.size.of.the.bucke |
1186a0 | 74 20 69 6e 20 62 79 74 65 73 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 | t.in.bytes.which.will.be.availab |
1186c0 | 6c 65 20 66 6f 72 20 62 75 72 73 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | le.for.burst..Use.this.command.t |
1186e0 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 70 6f 6c 69 63 79 | o.configure.a.Round-Robin.policy |
118700 | 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 73 20 49 44 2c 20 | ,.set.its.name,.set.a.class.ID,. |
118720 | 61 6e 64 20 74 68 65 20 71 75 61 6e 74 75 6d 20 66 6f 72 20 74 68 61 74 20 63 6c 61 73 73 2e 20 | and.the.quantum.for.that.class.. |
118740 | 54 68 65 20 64 65 66 69 63 69 74 20 63 6f 75 6e 74 65 72 20 77 69 6c 6c 20 61 64 64 20 74 68 61 | The.deficit.counter.will.add.tha |
118760 | 74 20 76 61 6c 75 65 20 65 61 63 68 20 72 6f 75 6e 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | t.value.each.round..Use.this.com |
118780 | 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 6f 75 6e 64 2d 52 6f 62 69 6e 20 | mand.to.configure.a.Round-Robin. |
1187a0 | 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 73 65 74 20 61 20 63 6c 61 73 | policy,.set.its.name,.set.a.clas |
1187c0 | 73 20 49 44 2c 20 61 6e 64 20 74 68 65 20 71 75 65 75 65 20 73 69 7a 65 20 69 6e 20 70 61 63 6b | s.ID,.and.the.queue.size.in.pack |
1187e0 | 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 | ets..Use.this.command.to.configu |
118800 | 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 | re.a.Shaper.policy,.set.its.name |
118820 | 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 61 | .and.the.maximum.bandwidth.for.a |
118840 | 6c 6c 20 63 6f 6d 62 69 6e 65 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f | ll.combined.traffic..Use.this.co |
118860 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 | mmand.to.configure.a.Shaper.poli |
118880 | 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 | cy,.set.its.name,.define.a.class |
1188a0 | 20 61 6e 64 20 73 65 74 20 74 68 65 20 67 75 61 72 61 6e 74 65 65 64 20 74 72 61 66 66 69 63 20 | .and.set.the.guaranteed.traffic. |
1188c0 | 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 74 6f 20 74 68 61 74 20 63 6c 61 | you.want.to.allocate.to.that.cla |
1188e0 | 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 | ss..Use.this.command.to.configur |
118900 | 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c | e.a.Shaper.policy,.set.its.name, |
118920 | 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 6d 61 78 69 | .define.a.class.and.set.the.maxi |
118940 | 6d 75 6d 20 73 70 65 65 64 20 70 6f 73 73 69 62 6c 65 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 | mum.speed.possible.for.this.clas |
118960 | 73 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 63 65 69 6c 69 6e 67 20 76 61 6c 75 65 20 69 73 20 | s..The.default.ceiling.value.is. |
118980 | 74 68 65 20 62 61 6e 64 77 69 64 74 68 20 76 61 6c 75 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f | the.bandwidth.value..Use.this.co |
1189a0 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 | mmand.to.configure.a.Shaper.poli |
1189c0 | 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 | cy,.set.its.name,.define.a.class |
1189e0 | 20 61 6e 64 20 73 65 74 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 66 6f 72 20 75 73 61 67 65 20 | .and.set.the.priority.for.usage. |
118a00 | 6f 66 20 61 76 61 69 6c 61 62 6c 65 20 62 61 6e 64 77 69 64 74 68 20 6f 6e 63 65 20 67 75 61 72 | of.available.bandwidth.once.guar |
118a20 | 61 6e 74 65 65 73 20 68 61 76 65 20 62 65 65 6e 20 6d 65 74 2e 20 54 68 65 20 6c 6f 77 65 72 20 | antees.have.been.met..The.lower. |
118a40 | 74 68 65 20 70 72 69 6f 72 69 74 79 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 | the.priority.number,.the.higher. |
118a60 | 74 68 65 20 70 72 69 6f 72 69 74 79 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 72 69 6f 72 69 | the.priority..The.default.priori |
118a80 | 74 79 20 76 61 6c 75 65 20 69 73 20 30 2c 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 | ty.value.is.0,.the.highest.prior |
118aa0 | 69 74 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 | ity..Use.this.command.to.configu |
118ac0 | 72 65 20 61 20 53 68 61 70 65 72 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 | re.a.Shaper.policy,.set.its.name |
118ae0 | 2c 20 64 65 66 69 6e 65 20 61 20 63 6c 61 73 73 20 61 6e 64 20 73 65 74 20 74 68 65 20 73 69 7a | ,.define.a.class.and.set.the.siz |
118b00 | 65 20 6f 66 20 74 68 65 20 60 74 6f 63 6b 65 6e 20 62 75 63 6b 65 74 60 5f 20 69 6e 20 62 79 74 | e.of.the.`tocken.bucket`_.in.byt |
118b20 | 65 73 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 62 | es,.which.will.be.available.to.b |
118b40 | 65 20 73 65 6e 74 20 61 74 20 63 65 69 6c 69 6e 67 20 73 70 65 65 64 20 28 64 65 66 61 75 6c 74 | e.sent.at.ceiling.speed.(default |
118b60 | 3a 20 31 35 4b 62 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | :.15Kb)..Use.this.command.to.con |
118b80 | 66 69 67 75 72 65 20 61 20 64 61 74 61 2d 72 61 74 65 20 6c 69 6d 69 74 20 74 6f 20 50 50 50 4f | figure.a.data-rate.limit.to.PPPO |
118ba0 | 6f 45 20 63 6c 69 65 6e 74 73 20 66 6f 72 20 74 72 61 66 66 69 63 20 64 6f 77 6e 6c 6f 61 64 20 | oE.clients.for.traffic.download. |
118bc0 | 6f 72 20 75 70 6c 6f 61 64 2e 20 54 68 65 20 72 61 74 65 2d 6c 69 6d 69 74 20 69 73 20 73 65 74 | or.upload..The.rate-limit.is.set |
118be0 | 20 69 6e 20 6b 62 69 74 2f 73 65 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .in.kbit/sec..Use.this.command.t |
118c00 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 64 72 6f 70 2d 74 61 69 6c 20 70 6f 6c 69 63 79 20 28 | o.configure.a.drop-tail.policy.( |
118c20 | 50 46 49 46 4f 29 2e 20 43 68 6f 6f 73 65 20 61 20 75 6e 69 71 75 65 20 6e 61 6d 65 20 66 6f 72 | PFIFO)..Choose.a.unique.name.for |
118c40 | 20 74 68 69 73 20 70 6f 6c 69 63 79 20 61 6e 64 20 74 68 65 20 73 69 7a 65 20 6f 66 20 74 68 65 | .this.policy.and.the.size.of.the |
118c60 | 20 71 75 65 75 65 20 62 79 20 73 65 74 74 69 6e 67 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 | .queue.by.setting.the.number.of. |
118c80 | 70 61 63 6b 65 74 73 20 69 74 20 63 61 6e 20 63 6f 6e 74 61 69 6e 20 28 6d 61 78 69 6d 75 6d 20 | packets.it.can.contain.(maximum. |
118ca0 | 34 32 39 34 39 36 37 32 39 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | 4294967295)..Use.this.command.to |
118cc0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 20 73 70 65 63 69 66 69 63 20 73 65 73 73 69 6f 6e 20 68 6f | .configure.a.specific.session.ho |
118ce0 | 6c 64 20 74 69 6d 65 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 53 65 74 20 74 68 65 20 49 | ld.time.for.LDP.peers..Set.the.I |
118d00 | 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c 44 50 20 70 65 65 72 20 61 6e 64 20 61 20 | P.address.of.the.LDP.peer.and.a. |
118d20 | 73 65 73 73 69 6f 6e 20 68 6f 6c 64 20 74 69 6d 65 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 | session.hold.time.that.should.be |
118d40 | 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 69 74 2e 20 59 6f 75 20 6d 61 79 20 68 61 76 65 | .configured.for.it..You.may.have |
118d60 | 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 6e 65 69 67 68 62 6f 72 20 66 6f 72 20 74 68 69 73 20 | .to.reset.the.neighbor.for.this. |
118d80 | 74 6f 20 77 6f 72 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e | to.work..Use.this.command.to.con |
118da0 | 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e | figure.an.Ingress.Policer,.defin |
118dc0 | 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 20 | ing.its.name.and.the.burst.size. |
118de0 | 69 6e 20 62 79 74 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 29 20 66 6f 72 20 69 74 73 20 64 | in.bytes.(default:.15).for.its.d |
118e00 | 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | efault.policy..Use.this.command. |
118e20 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c | to.configure.an.Ingress.Policer, |
118e40 | 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d | .defining.its.name.and.the.maxim |
118e60 | 75 6d 20 61 6c 6c 6f 77 65 64 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 69 74 73 20 64 65 66 | um.allowed.bandwidth.for.its.def |
118e80 | 61 75 6c 74 20 70 6f 6c 69 63 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | ault.policy..Use.this.command.to |
118ea0 | 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 | .configure.an.Ingress.Policer,.d |
118ec0 | 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 | efining.its.name,.a.class.identi |
118ee0 | 66 69 65 72 20 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 68 65 20 62 75 72 73 74 20 73 69 7a 65 | fier.(1-4090).and.the.burst.size |
118f00 | 20 69 6e 20 62 79 74 65 73 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 20 28 64 65 66 61 75 6c | .in.bytes.for.this.class.(defaul |
118f20 | 74 3a 20 31 35 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 | t:.15)..Use.this.command.to.conf |
118f40 | 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 | igure.an.Ingress.Policer,.defini |
118f60 | 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 | ng.its.name,.a.class.identifier. |
118f80 | 28 31 2d 34 30 39 30 29 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 | (1-4090).and.the.maximum.allowed |
118fa0 | 20 62 61 6e 64 77 69 64 74 68 20 66 6f 72 20 74 68 69 73 20 63 6c 61 73 73 2e 00 55 73 65 20 74 | .bandwidth.for.this.class..Use.t |
118fc0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 | his.command.to.configure.an.Ingr |
118fe0 | 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 | ess.Policer,.defining.its.name,. |
119000 | 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 66 69 65 72 20 28 31 2d 34 30 39 30 29 2c 20 61 20 63 | a.class.identifier.(1-4090),.a.c |
119020 | 6c 61 73 73 20 6d 61 74 63 68 69 6e 67 20 72 75 6c 65 20 6e 61 6d 65 20 61 6e 64 20 69 74 73 20 | lass.matching.rule.name.and.its. |
119040 | 64 65 73 63 72 69 70 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | description..Use.this.command.to |
119060 | 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 49 6e 67 72 65 73 73 20 50 6f 6c 69 63 65 72 2c 20 64 | .configure.an.Ingress.Policer,.d |
119080 | 65 66 69 6e 69 6e 67 20 69 74 73 20 6e 61 6d 65 2c 20 61 20 63 6c 61 73 73 20 69 64 65 6e 74 69 | efining.its.name,.a.class.identi |
1190a0 | 66 69 65 72 20 28 31 2d 34 30 39 30 29 2c 20 61 6e 64 20 74 68 65 20 70 72 69 6f 72 69 74 79 20 | fier.(1-4090),.and.the.priority. |
1190c0 | 28 30 2d 32 30 2c 20 64 65 66 61 75 6c 74 20 32 30 29 20 69 6e 20 77 68 69 63 68 20 74 68 65 20 | (0-20,.default.20).in.which.the. |
1190e0 | 72 75 6c 65 20 69 73 20 65 76 61 6c 75 61 74 65 64 20 28 74 68 65 20 6c 6f 77 65 72 20 74 68 65 | rule.is.evaluated.(the.lower.the |
119100 | 20 6e 75 6d 62 65 72 2c 20 74 68 65 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 | .number,.the.higher.the.priority |
119120 | 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | )..Use.this.command.to.configure |
119140 | 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d | .an.fq-codel.policy,.set.its.nam |
119160 | 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 | e.and.the.maximum.number.of.byte |
119180 | 73 20 28 64 65 66 61 75 6c 74 3a 20 31 35 31 34 29 20 74 6f 20 62 65 20 64 65 71 75 65 75 65 64 | s.(default:.1514).to.be.dequeued |
1191a0 | 20 66 72 6f 6d 20 61 20 71 75 65 75 65 20 61 74 20 6f 6e 63 65 2e 00 55 73 65 20 74 68 69 73 20 | .from.a.queue.at.once..Use.this. |
1191c0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c | command.to.configure.an.fq-codel |
1191e0 | 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6e 75 | .policy,.set.its.name.and.the.nu |
119200 | 6d 62 65 72 20 6f 66 20 73 75 62 2d 71 75 65 75 65 73 20 28 64 65 66 61 75 6c 74 3a 20 31 30 32 | mber.of.sub-queues.(default:.102 |
119220 | 34 29 20 69 6e 74 6f 20 77 68 69 63 68 20 70 61 63 6b 65 74 73 20 61 72 65 20 63 6c 61 73 73 69 | 4).into.which.packets.are.classi |
119240 | 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 | fied..Use.this.command.to.config |
119260 | 75 72 65 20 61 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 | ure.an.fq-codel.policy,.set.its. |
119280 | 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 74 69 6d 65 20 70 65 72 69 6f 64 20 75 73 65 64 20 62 79 | name.and.the.time.period.used.by |
1192a0 | 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 6c 6f 6f 70 20 6f 66 20 43 6f 44 65 6c 20 74 6f 20 64 65 | .the.control.loop.of.CoDel.to.de |
1192c0 | 74 65 63 74 20 77 68 65 6e 20 61 20 70 65 72 73 69 73 74 65 6e 74 20 71 75 65 75 65 20 69 73 20 | tect.when.a.persistent.queue.is. |
1192e0 | 64 65 76 65 6c 6f 70 69 6e 67 2c 20 65 6e 73 75 72 69 6e 67 20 74 68 61 74 20 74 68 65 20 6d 65 | developing,.ensuring.that.the.me |
119300 | 61 73 75 72 65 64 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 79 20 64 6f 65 73 20 6e 6f 74 20 62 65 | asured.minimum.delay.does.not.be |
119320 | 63 6f 6d 65 20 74 6f 6f 20 73 74 61 6c 65 20 28 64 65 66 61 75 6c 74 3a 20 31 30 30 6d 73 29 2e | come.too.stale.(default:.100ms). |
119340 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 | .Use.this.command.to.configure.a |
119360 | 6e 20 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c | n.fq-codel.policy,.set.its.name, |
119380 | 20 61 6e 64 20 64 65 66 69 6e 65 20 61 20 68 61 72 64 20 6c 69 6d 69 74 20 6f 6e 20 74 68 65 20 | .and.define.a.hard.limit.on.the. |
1193a0 | 72 65 61 6c 20 71 75 65 75 65 20 73 69 7a 65 2e 20 57 68 65 6e 20 74 68 69 73 20 6c 69 6d 69 74 | real.queue.size..When.this.limit |
1193c0 | 20 69 73 20 72 65 61 63 68 65 64 2c 20 6e 65 77 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 72 6f | .is.reached,.new.packets.are.dro |
1193e0 | 70 70 65 64 20 28 64 65 66 61 75 6c 74 3a 20 31 30 32 34 30 20 70 61 63 6b 65 74 73 29 2e 00 55 | pped.(default:.10240.packets)..U |
119400 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 | se.this.command.to.configure.an. |
119420 | 66 71 2d 63 6f 64 65 6c 20 70 6f 6c 69 63 79 2c 20 73 65 74 20 69 74 73 20 6e 61 6d 65 2c 20 61 | fq-codel.policy,.set.its.name,.a |
119440 | 6e 64 20 64 65 66 69 6e 65 20 74 68 65 20 61 63 63 65 70 74 61 62 6c 65 20 6d 69 6e 69 6d 75 6d | nd.define.the.acceptable.minimum |
119460 | 20 73 74 61 6e 64 69 6e 67 2f 70 65 72 73 69 73 74 65 6e 74 20 71 75 65 75 65 20 64 65 6c 61 79 | .standing/persistent.queue.delay |
119480 | 2e 20 54 68 69 73 20 6d 69 6e 69 6d 75 6d 20 64 65 6c 61 79 20 69 73 20 69 64 65 6e 74 69 66 69 | ..This.minimum.delay.is.identifi |
1194a0 | 65 64 20 62 79 20 74 72 61 63 6b 69 6e 67 20 74 68 65 20 6c 6f 63 61 6c 20 6d 69 6e 69 6d 75 6d | ed.by.tracking.the.local.minimum |
1194c0 | 20 71 75 65 75 65 20 64 65 6c 61 79 20 74 68 61 74 20 70 61 63 6b 65 74 73 20 65 78 70 65 72 69 | .queue.delay.that.packets.experi |
1194e0 | 65 6e 63 65 20 28 64 65 66 61 75 6c 74 3a 20 35 6d 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f | ence.(default:.5ms)..Use.this.co |
119500 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 | mmand.to.configure.an.interface. |
119520 | 77 69 74 68 20 49 47 4d 50 20 73 6f 20 74 68 61 74 20 50 49 4d 20 63 61 6e 20 72 65 63 65 69 76 | with.IGMP.so.that.PIM.can.receiv |
119540 | 65 20 49 47 4d 50 20 72 65 70 6f 72 74 73 20 61 6e 64 20 71 75 65 72 79 20 6f 6e 20 74 68 65 20 | e.IGMP.reports.and.query.on.the. |
119560 | 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 20 42 79 20 64 65 66 61 75 6c 74 20 49 | selected.interface..By.default.I |
119580 | 47 4d 50 20 76 65 72 73 69 6f 6e 20 33 20 77 69 6c 6c 20 62 65 20 75 73 65 64 2e 00 55 73 65 20 | GMP.version.3.will.be.used..Use. |
1195a0 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e | this.command.to.configure.authen |
1195c0 | 74 69 63 61 74 69 6f 6e 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 53 65 74 20 74 68 65 20 | tication.for.LDP.peers..Set.the. |
1195e0 | 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 4c 44 50 20 70 65 65 72 20 61 6e 64 20 61 | IP.address.of.the.LDP.peer.and.a |
119600 | 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 73 68 6f 75 6c 64 20 62 65 20 73 68 61 72 65 64 20 | .password.that.should.be.shared. |
119620 | 69 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 63 6f 6d 65 20 6e 65 69 67 68 62 6f 72 73 2e 00 55 73 | in.order.to.become.neighbors..Us |
119640 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 | e.this.command.to.configure.in.t |
119660 | 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 68 | he.selected.interface.the.IGMP.h |
119680 | 6f 73 74 20 71 75 65 72 79 20 69 6e 74 65 72 76 61 6c 20 28 31 2d 31 38 30 30 29 20 69 6e 20 73 | ost.query.interval.(1-1800).in.s |
1196a0 | 65 63 6f 6e 64 73 20 74 68 61 74 20 50 49 4d 20 77 69 6c 6c 20 75 73 65 2e 00 55 73 65 20 74 68 | econds.that.PIM.will.use..Use.th |
1196c0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 | is.command.to.configure.in.the.s |
1196e0 | 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 | elected.interface.the.IGMP.query |
119700 | 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 | .response.timeout.value.(10-250) |
119720 | 20 69 6e 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 | .in.deciseconds..If.a.report.is. |
119740 | 6e 6f 74 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 | not.returned.in.the.specified.ti |
119760 | 6d 65 2c 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 28 53 2c 47 29 | me,.it.will.be.assumed.the.(S,G) |
119780 | 20 6f 72 20 28 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 | .or.(*,G).state.:rfc:`7761#secti |
1197a0 | 6f 6e 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 | on-4.1`.has.timed.out..Use.this. |
1197c0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 | command.to.configure.in.the.sele |
1197e0 | 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 | cted.interface.the.IGMP.query.re |
119800 | 73 70 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e | sponse.timeout.value.(10-250).in |
119820 | 20 64 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 | .deciseconds..If.a.report.is.not |
119840 | 20 72 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c | .returned.in.the.specified.time, |
119860 | 20 69 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 28 53 2c 47 29 20 6f 72 | .it.will.be.assumed.the.(S,G).or |
119880 | 20 28 5c 2a 2c 47 29 20 73 74 61 74 65 20 3a 72 66 63 3a 60 37 37 36 31 23 73 65 63 74 69 6f 6e | .(\*,G).state.:rfc:`7761#section |
1198a0 | 2d 34 2e 31 60 20 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f | -4.1`.has.timed.out..Use.this.co |
1198c0 | 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 | mmand.to.configure.in.the.select |
1198e0 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 49 47 4d 50 20 71 75 65 72 79 20 72 65 73 70 | ed.interface.the.IGMP.query.resp |
119900 | 6f 6e 73 65 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 20 28 31 30 2d 32 35 30 29 20 69 6e 20 64 | onse.timeout.value.(10-250).in.d |
119920 | 65 63 69 73 65 63 6f 6e 64 73 2e 20 49 66 20 61 20 72 65 70 6f 72 74 20 69 73 20 6e 6f 74 20 72 | eciseconds..If.a.report.is.not.r |
119940 | 65 74 75 72 6e 65 64 20 69 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 74 69 6d 65 2c 20 69 | eturned.in.the.specified.time,.i |
119960 | 74 20 77 69 6c 6c 20 62 65 20 61 73 73 75 6d 65 64 20 74 68 65 20 60 28 53 2c 47 29 20 6f 72 20 | t.will.be.assumed.the.`(S,G).or. |
119980 | 28 2a 2c 47 29 20 73 74 61 74 65 20 3c 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e | (*,G).state.<https://tools.ietf. |
1199a0 | 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 37 37 36 31 23 73 65 63 74 69 6f 6e 2d 34 2e 31 3e 60 5f 20 | org/html/rfc7761#section-4.1>`_. |
1199c0 | 68 61 73 20 74 69 6d 65 64 20 6f 75 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | has.timed.out..Use.this.command. |
1199e0 | 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 | to.configure.in.the.selected.int |
119a00 | 65 72 66 61 63 65 20 74 68 65 20 4d 4c 44 20 68 6f 73 74 20 71 75 65 72 79 20 69 6e 74 65 72 76 | erface.the.MLD.host.query.interv |
119a20 | 61 6c 20 28 31 2d 36 35 35 33 35 29 20 69 6e 20 73 65 63 6f 6e 64 73 20 74 68 61 74 20 50 49 4d | al.(1-65535).in.seconds.that.PIM |
119a40 | 20 77 69 6c 6c 20 75 73 65 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 76 61 6c 75 65 20 69 73 20 | .will.use..The.default.value.is. |
119a60 | 31 32 35 20 73 65 63 6f 6e 64 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f | 125.seconds..Use.this.command.to |
119a80 | 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 66 6f | .configure.the..sampling.rate.fo |
119aa0 | 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 54 68 65 20 73 79 73 74 65 6d 20 73 61 | r.flow.accounting..The.system.sa |
119ac0 | 6d 70 6c 65 73 20 6f 6e 65 20 69 6e 20 65 76 65 72 79 20 60 3c 72 61 74 65 3e 60 20 70 61 63 6b | mples.one.in.every.`<rate>`.pack |
119ae0 | 65 74 73 2c 20 77 68 65 72 65 20 60 3c 72 61 74 65 3e 60 20 69 73 20 74 68 65 20 76 61 6c 75 65 | ets,.where.`<rate>`.is.the.value |
119b00 | 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 2d 72 61 74 | .configured.for.the.sampling-rat |
119b20 | 65 20 6f 70 74 69 6f 6e 2e 20 54 68 65 20 61 64 76 61 6e 74 61 67 65 20 6f 66 20 73 61 6d 70 6c | e.option..The.advantage.of.sampl |
119b40 | 69 6e 67 20 65 76 65 72 79 20 6e 20 70 61 63 6b 65 74 73 2c 20 77 68 65 72 65 20 6e 20 3e 20 31 | ing.every.n.packets,.where.n.>.1 |
119b60 | 2c 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 64 65 63 72 65 61 73 65 20 74 68 65 20 61 6d 6f | ,.allows.you.to.decrease.the.amo |
119b80 | 75 6e 74 20 6f 66 20 70 72 6f 63 65 73 73 69 6e 67 20 72 65 73 6f 75 72 63 65 73 20 72 65 71 75 | unt.of.processing.resources.requ |
119ba0 | 69 72 65 64 20 66 6f 72 20 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e 20 54 68 65 20 64 69 | ired.for.flow.accounting..The.di |
119bc0 | 73 61 64 76 61 6e 74 61 67 65 20 6f 66 20 6e 6f 74 20 73 61 6d 70 6c 69 6e 67 20 65 76 65 72 79 | sadvantage.of.not.sampling.every |
119be0 | 20 70 61 63 6b 65 74 20 69 73 20 74 68 61 74 20 74 68 65 20 73 74 61 74 69 73 74 69 63 73 20 70 | .packet.is.that.the.statistics.p |
119c00 | 72 6f 64 75 63 65 64 20 61 72 65 20 65 73 74 69 6d 61 74 65 73 20 6f 66 20 61 63 74 75 61 6c 20 | roduced.are.estimates.of.actual. |
119c20 | 64 61 74 61 20 66 6c 6f 77 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | data.flows..Use.this.command.to. |
119c40 | 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 | configure.the.IP.address.and.the |
119c60 | 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 6b 65 79 20 6f 66 20 79 6f 75 72 20 52 41 44 49 55 | .shared.secret.key.of.your.RADIU |
119c80 | 53 20 73 65 72 76 65 72 2e 20 20 59 6f 75 20 63 61 6e 20 68 61 76 65 20 6d 75 6c 74 69 70 6c 65 | S.server...You.can.have.multiple |
119ca0 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 66 20 79 6f | .RADIUS.servers.configured.if.yo |
119cc0 | 75 20 77 69 73 68 20 74 6f 20 61 63 68 69 65 76 65 20 72 65 64 75 6e 64 61 6e 63 79 2e 00 55 73 | u.wish.to.achieve.redundancy..Us |
119ce0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | e.this.command.to.configure.the. |
119d00 | 49 50 20 61 64 64 72 65 73 73 20 75 73 65 64 20 61 73 20 74 68 65 20 4c 44 50 20 72 6f 75 74 65 | IP.address.used.as.the.LDP.route |
119d20 | 72 2d 69 64 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 64 65 76 69 63 65 2e 00 55 73 65 20 74 68 | r-id.of.the.local.device..Use.th |
119d40 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 50 49 4d 20 | is.command.to.configure.the.PIM. |
119d60 | 68 65 6c 6c 6f 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 73 65 63 6f 6e 64 73 20 28 31 2d 31 38 30 | hello.interval.in.seconds.(1-180 |
119d80 | 29 20 66 6f 72 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 | ).for.the.selected.interface..Us |
119da0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 | e.this.command.to.configure.the. |
119dc0 | 62 75 72 73 74 20 73 69 7a 65 20 6f 66 20 74 68 65 20 74 72 61 66 66 69 63 20 69 6e 20 61 20 4e | burst.size.of.the.traffic.in.a.N |
119de0 | 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 44 65 66 69 6e 65 20 74 | etwork.Emulator.policy..Define.t |
119e00 | 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 | he.name.of.the.Network.Emulator. |
119e20 | 70 6f 6c 69 63 79 20 61 6e 64 20 69 74 73 20 74 72 61 66 66 69 63 20 62 75 72 73 74 20 73 69 7a | policy.and.its.traffic.burst.siz |
119e40 | 65 20 28 69 74 20 77 69 6c 6c 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 74 68 72 6f 75 67 68 | e.(it.will.be.configured.through |
119e60 | 20 74 68 65 20 54 6f 6b 65 6e 20 42 75 63 6b 65 74 20 46 69 6c 74 65 72 20 71 64 69 73 63 29 2e | .the.Token.Bucket.Filter.qdisc). |
119e80 | 20 44 65 66 61 75 6c 74 3a 31 35 6b 62 2e 20 49 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 74 61 6b 65 | .Default:15kb..It.will.only.take |
119ea0 | 20 65 66 66 65 63 74 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 69 | .effect.if.you.have.configured.i |
119ec0 | 74 73 20 62 61 6e 64 77 69 64 74 68 20 74 6f 6f 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ts.bandwidth.too..Use.this.comma |
119ee0 | 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 6f 63 61 6c 20 67 61 74 65 77 61 | nd.to.configure.the.local.gatewa |
119f00 | 79 20 49 50 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | y.IP.address..Use.this.command.t |
119f20 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 72 61 74 65 20 61 74 20 | o.configure.the.maximum.rate.at. |
119f40 | 77 68 69 63 68 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 62 65 20 73 68 61 70 65 64 20 69 6e 20 | which.traffic.will.be.shaped.in. |
119f60 | 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 44 65 66 69 6e | a.Network.Emulator.policy..Defin |
119f80 | 65 20 74 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 6f 6c 69 63 79 20 61 6e 64 20 74 68 65 | e.the.name.of.the.policy.and.the |
119fa0 | 20 72 61 74 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 | .rate..Use.this.command.to.confi |
119fc0 | 67 75 72 65 20 74 68 65 20 73 61 6d 70 6c 69 6e 67 20 72 61 74 65 20 66 6f 72 20 73 46 6c 6f 77 | gure.the.sampling.rate.for.sFlow |
119fe0 | 20 61 63 63 6f 75 6e 74 69 6e 67 20 28 64 65 66 61 75 6c 74 3a 20 31 30 30 30 29 00 55 73 65 20 | .accounting.(default:.1000).Use. |
11a000 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 75 73 | this.command.to.configure.the.us |
11a020 | 65 72 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 6f 66 20 61 20 6c 6f 63 | ername.and.the.password.of.a.loc |
11a040 | 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 75 73 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 | ally.configured.user..Use.this.c |
11a060 | 6f 6d 6d 61 6e 64 20 74 6f 20 63 6f 6e 74 72 6f 6c 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 | ommand.to.control.the.maximum.nu |
11a080 | 6d 62 65 72 20 6f 66 20 65 71 75 61 6c 20 63 6f 73 74 20 70 61 74 68 73 20 74 6f 20 72 65 61 63 | mber.of.equal.cost.paths.to.reac |
11a0a0 | 68 20 61 20 73 70 65 63 69 66 69 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 54 68 65 20 75 70 | h.a.specific.destination..The.up |
11a0c0 | 70 65 72 20 6c 69 6d 69 74 20 6d 61 79 20 64 69 66 66 65 72 20 69 66 20 79 6f 75 20 63 68 61 6e | per.limit.may.differ.if.you.chan |
11a0e0 | 67 65 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 4d 20 64 75 | ge.the.value.of.MULTIPATH_NUM.du |
11a100 | 72 69 6e 67 20 63 6f 6d 70 69 6c 61 74 69 6f 6e 2e 20 54 68 65 20 64 65 66 61 75 6c 74 20 69 73 | ring.compilation..The.default.is |
11a120 | 20 4d 55 4c 54 49 50 41 54 48 5f 4e 55 4d 20 28 36 34 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f | .MULTIPATH_NUM.(64)..Use.this.co |
11a140 | 6d 6d 61 6e 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 46 61 69 72 2d 51 75 65 75 65 20 70 6f 6c | mmand.to.create.a.Fair-Queue.pol |
11a160 | 69 63 79 20 61 6e 64 20 67 69 76 65 20 69 74 20 61 20 6e 61 6d 65 2e 20 49 74 20 69 73 20 62 61 | icy.and.give.it.a.name..It.is.ba |
11a180 | 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 | sed.on.the.Stochastic.Fairness.Q |
11a1a0 | 75 65 75 65 69 6e 67 20 61 6e 64 20 63 61 6e 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6f 75 | ueueing.and.can.be.applied.to.ou |
11a1c0 | 74 62 6f 75 6e 64 20 74 72 61 66 66 69 63 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | tbound.traffic..Use.this.command |
11a1e0 | 20 74 6f 20 64 65 66 69 6e 65 20 49 50 73 65 63 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 | .to.define.IPsec.interface..Use. |
11a200 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 46 61 69 72 2d 51 75 | this.command.to.define.a.Fair-Qu |
11a220 | 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 73 | eue.policy,.based.on.the.Stochas |
11a240 | 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 20 73 65 74 20 74 | tic.Fairness.Queueing,.and.set.t |
11a260 | 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 6d 61 78 69 6d 75 6d 20 70 61 63 6b 65 74 73 20 61 6c 6c | he.number.of.maximum.packets.all |
11a280 | 6f 77 65 64 20 74 6f 20 77 61 69 74 20 69 6e 20 74 68 65 20 71 75 65 75 65 2e 20 41 6e 79 20 6f | owed.to.wait.in.the.queue..Any.o |
11a2a0 | 74 68 65 72 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 64 72 6f 70 70 65 64 2e 00 55 73 65 | ther.packet.will.be.dropped..Use |
11a2c0 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 61 20 46 61 69 72 2d 51 | .this.command.to.define.a.Fair-Q |
11a2e0 | 75 65 75 65 20 70 6f 6c 69 63 79 2c 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 53 74 6f 63 68 61 | ueue.policy,.based.on.the.Stocha |
11a300 | 73 74 69 63 20 46 61 69 72 6e 65 73 73 20 51 75 65 75 65 69 6e 67 2c 20 61 6e 64 20 73 65 74 20 | stic.Fairness.Queueing,.and.set. |
11a320 | 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 63 6f 6e 64 73 20 61 74 20 77 68 69 63 68 20 61 | the.number.of.seconds.at.which.a |
11a340 | 20 6e 65 77 20 71 75 65 75 65 20 61 6c 67 6f 72 69 74 68 6d 20 70 65 72 74 75 72 62 61 74 69 6f | .new.queue.algorithm.perturbatio |
11a360 | 6e 20 77 69 6c 6c 20 6f 63 63 75 72 20 28 6d 61 78 69 6d 75 6d 20 34 32 39 34 39 36 37 32 39 35 | n.will.occur.(maximum.4294967295 |
11a380 | 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 65 | )..Use.this.command.to.define.de |
11a3a0 | 66 61 75 6c 74 20 49 50 76 36 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 | fault.IPv6.address.pool.name..Us |
11a3c0 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 65 66 61 75 6c 74 | e.this.command.to.define.default |
11a3e0 | 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | .address.pool.name..Use.this.com |
11a400 | 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 64 6f 6d 61 69 6e 73 2c 20 6f 6e 65 20 61 74 20 61 | mand.to.define.domains,.one.at.a |
11a420 | 20 74 69 6d 65 2c 20 73 6f 20 74 68 61 74 20 74 68 65 20 73 79 73 74 65 6d 20 75 73 65 73 20 74 | .time,.so.that.the.system.uses.t |
11a440 | 68 65 6d 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 75 6e 71 75 61 6c 69 66 69 65 64 20 68 6f 73 74 | hem.to.complete.unqualified.host |
11a460 | 20 6e 61 6d 65 73 2e 20 4d 61 78 69 6d 75 6d 3a 20 36 20 65 6e 74 72 69 65 73 2e 00 55 73 65 20 | .names..Maximum:.6.entries..Use. |
11a480 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 68 65 20 73 65 | this.command.to.define.in.the.se |
11a4a0 | 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 74 68 65 72 20 79 6f 75 20 63 68 6f | lected.interface.whether.you.cho |
11a4c0 | 6f 73 65 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 6f 72 20 33 2e 00 55 73 65 20 74 68 69 | ose.IGMP.version.2.or.3..Use.thi |
11a4e0 | 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 69 6e 20 74 68 65 20 73 65 6c 65 63 | s.command.to.define.in.the.selec |
11a500 | 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 74 68 65 72 20 79 6f 75 20 63 68 6f 6f 73 65 | ted.interface.whether.you.choose |
11a520 | 20 49 47 4d 50 20 76 65 72 73 69 6f 6e 20 32 20 6f 72 20 33 2e 20 54 68 65 20 64 65 66 61 75 6c | .IGMP.version.2.or.3..The.defaul |
11a540 | 74 20 76 61 6c 75 65 20 69 73 20 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | t.value.is.3..Use.this.command.t |
11a560 | 6f 20 64 65 66 69 6e 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 20 74 6f | o.define.the.IP.address.range.to |
11a580 | 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e | .be.given.to.PPPoE.clients..If.n |
11a5a0 | 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 | otation.``x.x.x.x-x.x.x.x``,.it. |
11a5c0 | 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 | must.be.within.a./24.subnet..If. |
11a5e0 | 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 | notation.``x.x.x.x/x``.is.used.t |
11a600 | 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f | here.is.possibility.to.set.host/ |
11a620 | 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 | netmask..Use.this.command.to.def |
11a640 | 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f | ine.the.first.IP.address.of.a.po |
11a660 | 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 49 | ol.of.addresses.to.be.given.to.I |
11a680 | 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 | PoE.clients..If.notation.``x.x.x |
11a6a0 | 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 | .x-x.x.x.x``,.it.must.be.within. |
11a6c0 | 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e | a./24.subnet..If.notation.``x.x. |
11a6e0 | 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 | x.x/x``.is.used.there.is.possibi |
11a700 | 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 | lity.to.set.host/netmask..Use.th |
11a720 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 | is.command.to.define.the.first.I |
11a740 | 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 | P.address.of.a.pool.of.addresses |
11a760 | 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 6c 69 65 6e 74 73 2e 20 49 | .to.be.given.to.PPPoE.clients..I |
11a780 | 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 00 55 | t.must.be.within.a./24.subnet..U |
11a7a0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 | se.this.command.to.define.the.fi |
11a7c0 | 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 | rst.IP.address.of.a.pool.of.addr |
11a7e0 | 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 54 50 20 63 6c 69 65 6e 74 | esses.to.be.given.to.PPTP.client |
11a800 | 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 | s..If.notation.``x.x.x.x-x.x.x.x |
11a820 | 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e | ``,.it.must.be.within.a./24.subn |
11a840 | 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 | et..If.notation.``x.x.x.x/x``.is |
11a860 | 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 | .used.there.is.possibility.to.se |
11a880 | 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | t.host/netmask..Use.this.command |
11a8a0 | 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 | .to.define.the.first.IP.address. |
11a8c0 | 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 | of.a.pool.of.addresses.to.be.giv |
11a8e0 | 65 6e 20 74 6f 20 53 53 54 50 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 | en.to.SSTP.clients..If.notation. |
11a900 | 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 | ``x.x.x.x-x.x.x.x``,.it.must.be. |
11a920 | 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e | within.a./24.subnet..If.notation |
11a940 | 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 | .``x.x.x.x/x``.is.used.there.is. |
11a960 | 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e | possibility.to.set.host/netmask. |
11a980 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 | .Use.this.command.to.define.the. |
11a9a0 | 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 | first.IP.address.of.a.pool.of.ad |
11a9c0 | 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 6c 32 74 70 20 63 6c 69 65 | dresses.to.be.given.to.l2tp.clie |
11a9e0 | 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 | nts..If.notation.``x.x.x.x-x.x.x |
11aa00 | 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 | .x``,.it.must.be.within.a./24.su |
11aa20 | 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 | bnet..If.notation.``x.x.x.x/x``. |
11aa40 | 69 73 20 75 73 65 64 20 74 68 65 72 65 20 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 | is.used.there.is.possibility.to. |
11aa60 | 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | set.host/netmask..Use.this.comma |
11aa80 | 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 66 69 72 73 74 20 49 50 20 61 64 64 72 65 73 | nd.to.define.the.first.IP.addres |
11aaa0 | 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 | s.of.a.pool.of.addresses.to.be.g |
11aac0 | 69 76 65 6e 20 74 6f 20 70 70 70 6f 65 20 63 6c 69 65 6e 74 73 2e 20 49 66 20 6e 6f 74 61 74 69 | iven.to.pppoe.clients..If.notati |
11aae0 | 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2d 78 2e 78 2e 78 2e 78 60 60 2c 20 69 74 20 6d 75 73 74 20 | on.``x.x.x.x-x.x.x.x``,.it.must. |
11ab00 | 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 73 75 62 6e 65 74 2e 20 49 66 20 6e 6f 74 61 74 | be.within.a./24.subnet..If.notat |
11ab20 | 69 6f 6e 20 60 60 78 2e 78 2e 78 2e 78 2f 78 60 60 20 69 73 20 75 73 65 64 20 74 68 65 72 65 20 | ion.``x.x.x.x/x``.is.used.there. |
11ab40 | 69 73 20 70 6f 73 73 69 62 69 6c 69 74 79 20 74 6f 20 73 65 74 20 68 6f 73 74 2f 6e 65 74 6d 61 | is.possibility.to.set.host/netma |
11ab60 | 73 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 | sk..Use.this.command.to.define.t |
11ab80 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 77 69 | he.interface.the.PPPoE.server.wi |
11aba0 | 6c 6c 20 75 73 65 20 74 6f 20 6c 69 73 74 65 6e 20 66 6f 72 20 50 50 50 6f 45 20 63 6c 69 65 6e | ll.use.to.listen.for.PPPoE.clien |
11abc0 | 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 | ts..Use.this.command.to.define.t |
11abe0 | 68 65 20 6c 61 73 74 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 61 20 70 6f 6f 6c 20 6f 66 20 | he.last.IP.address.of.a.pool.of. |
11ac00 | 61 64 64 72 65 73 73 65 73 20 74 6f 20 62 65 20 67 69 76 65 6e 20 74 6f 20 50 50 50 6f 45 20 63 | addresses.to.be.given.to.PPPoE.c |
11ac20 | 6c 69 65 6e 74 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 77 69 74 68 69 6e 20 61 20 2f 32 34 20 | lients..It.must.be.within.a./24. |
11ac40 | 73 75 62 6e 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 | subnet..Use.this.command.to.defi |
11ac60 | 6e 65 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 71 75 65 75 65 20 6f 66 20 79 6f | ne.the.length.of.the.queue.of.yo |
11ac80 | 75 72 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 | ur.Network.Emulator.policy..Set. |
11aca0 | 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 | the.policy.name.and.the.maximum. |
11acc0 | 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 28 31 2d 34 32 39 34 39 36 37 32 39 35 29 | number.of.packets.(1-4294967295) |
11ace0 | 20 74 68 65 20 71 75 65 75 65 20 6d 61 79 20 68 6f 6c 64 20 71 75 65 75 65 64 20 61 74 20 61 20 | .the.queue.may.hold.queued.at.a. |
11ad00 | 74 69 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 | time..Use.this.command.to.define |
11ad20 | 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6e 74 72 69 65 73 20 74 | .the.maximum.number.of.entries.t |
11ad40 | 6f 20 6b 65 65 70 20 69 6e 20 74 68 65 20 41 52 50 20 63 61 63 68 65 20 28 31 30 32 34 2c 20 32 | o.keep.in.the.ARP.cache.(1024,.2 |
11ad60 | 30 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 33 38 34 2c 20 33 32 37 36 38 29 2e 00 | 048,.4096,.8192,.16384,.32768).. |
11ad80 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6d | Use.this.command.to.define.the.m |
11ada0 | 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 65 6e 74 72 69 65 73 20 74 6f 20 6b 65 65 70 | aximum.number.of.entries.to.keep |
11adc0 | 20 69 6e 20 74 68 65 20 4e 65 69 67 68 62 6f 72 20 63 61 63 68 65 20 28 31 30 32 34 2c 20 32 30 | .in.the.Neighbor.cache.(1024,.20 |
11ade0 | 34 38 2c 20 34 30 39 36 2c 20 38 31 39 32 2c 20 31 36 33 38 34 2c 20 33 32 37 36 38 29 2e 00 55 | 48,.4096,.8192,.16384,.32768)..U |
11ae00 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 20 6e 65 | se.this.command.to.define.the.ne |
11ae20 | 78 74 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 6e 61 6d 65 2e 00 55 73 65 20 74 68 69 73 20 63 | xt.address.pool.name..Use.this.c |
11ae40 | 6f 6d 6d 61 6e 64 20 74 6f 20 64 65 66 69 6e 65 20 77 68 65 74 68 65 72 20 79 6f 75 72 20 50 50 | ommand.to.define.whether.your.PP |
11ae60 | 50 6f 45 20 63 6c 69 65 6e 74 73 20 77 69 6c 6c 20 6c 6f 63 61 6c 6c 79 20 61 75 74 68 65 6e 74 | PoE.clients.will.locally.authent |
11ae80 | 69 63 61 74 65 20 69 6e 20 79 6f 75 72 20 56 79 4f 53 20 73 79 73 74 65 6d 20 6f 72 20 69 6e 20 | icate.in.your.VyOS.system.or.in. |
11aea0 | 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | RADIUS.server..Use.this.command. |
11aec0 | 74 6f 20 64 69 72 65 63 74 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 6e 6f 74 20 64 65 | to.direct.an.interface.to.not.de |
11aee0 | 74 65 63 74 20 61 6e 79 20 70 68 79 73 69 63 61 6c 20 73 74 61 74 65 20 63 68 61 6e 67 65 73 20 | tect.any.physical.state.changes. |
11af00 | 6f 6e 20 61 20 6c 69 6e 6b 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 77 68 65 6e 20 74 68 65 | on.a.link,.for.example,.when.the |
11af20 | 20 63 61 62 6c 65 20 69 73 20 75 6e 70 6c 75 67 67 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f | .cable.is.unplugged..Use.this.co |
11af40 | 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 49 50 76 34 20 64 69 72 65 63 74 65 64 20 62 | mmand.to.disable.IPv4.directed.b |
11af60 | 72 6f 61 64 63 61 73 74 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 | roadcast.forwarding.on.all.inter |
11af80 | 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 | faces..Use.this.command.to.disab |
11afa0 | 6c 65 20 49 50 76 34 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 | le.IPv4.forwarding.on.all.interf |
11afc0 | 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c | aces..Use.this.command.to.disabl |
11afe0 | 65 20 49 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 6f 6e 20 61 6c 6c 20 69 6e 74 65 72 66 61 | e.IPv6.forwarding.on.all.interfa |
11b000 | 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 | ces..Use.this.command.to.disable |
11b020 | 20 49 50 76 36 20 6f 70 65 72 61 74 69 6f 6e 20 6f 6e 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 | .IPv6.operation.on.interface.whe |
11b040 | 6e 20 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 44 65 74 65 63 74 69 6f 6e 20 66 61 | n.Duplicate.Address.Detection.fa |
11b060 | 69 6c 73 20 6f 6e 20 4c 69 6e 6b 2d 4c 6f 63 61 6c 20 61 64 64 72 65 73 73 2e 00 55 73 65 20 74 | ils.on.Link-Local.address..Use.t |
11b080 | 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 20 67 65 6e 65 72 | his.command.to.disable.the.gener |
11b0a0 | 61 74 69 6f 6e 20 6f 66 20 45 74 68 65 72 6e 65 74 20 66 6c 6f 77 20 63 6f 6e 74 72 6f 6c 20 28 | ation.of.Ethernet.flow.control.( |
11b0c0 | 70 61 75 73 65 20 66 72 61 6d 65 73 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | pause.frames)..Use.this.command. |
11b0e0 | 74 6f 20 65 6d 75 6c 61 74 65 20 6e 6f 69 73 65 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d | to.emulate.noise.in.a.Network.Em |
11b100 | 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 | ulator.policy..Set.the.policy.na |
11b120 | 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 63 6f 72 72 75 70 74 | me.and.the.percentage.of.corrupt |
11b140 | 65 64 20 70 61 63 6b 65 74 73 20 79 6f 75 20 77 61 6e 74 2e 20 41 20 72 61 6e 64 6f 6d 20 65 72 | ed.packets.you.want..A.random.er |
11b160 | 72 6f 72 20 77 69 6c 6c 20 62 65 20 69 6e 74 72 6f 64 75 63 65 64 20 69 6e 20 61 20 72 61 6e 64 | ror.will.be.introduced.in.a.rand |
11b180 | 6f 6d 20 70 6f 73 69 74 69 6f 6e 20 66 6f 72 20 74 68 65 20 63 68 6f 73 65 6e 20 70 65 72 63 65 | om.position.for.the.chosen.perce |
11b1a0 | 6e 74 20 6f 66 20 70 61 63 6b 65 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | nt.of.packets..Use.this.command. |
11b1c0 | 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 2d 6c 6f 73 73 20 63 6f 6e 64 69 74 69 6f 6e | to.emulate.packet-loss.condition |
11b1e0 | 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 2e 20 | s.in.a.Network.Emulator.policy.. |
11b200 | 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 74 68 65 20 70 65 72 63 | Set.the.policy.name.and.the.perc |
11b220 | 65 6e 74 61 67 65 20 6f 66 20 6c 6f 73 73 20 70 61 63 6b 65 74 73 20 79 6f 75 72 20 74 72 61 66 | entage.of.loss.packets.your.traf |
11b240 | 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | fic.will.suffer..Use.this.comman |
11b260 | 64 20 74 6f 20 65 6d 75 6c 61 74 65 20 70 61 63 6b 65 74 2d 72 65 6f 72 64 65 72 69 6e 67 20 63 | d.to.emulate.packet-reordering.c |
11b280 | 6f 6e 64 69 74 69 6f 6e 73 20 69 6e 20 61 20 4e 65 74 77 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 | onditions.in.a.Network.Emulator. |
11b2a0 | 70 6f 6c 69 63 79 2e 20 53 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 6e 61 6d 65 20 61 6e 64 20 | policy..Set.the.policy.name.and. |
11b2c0 | 74 68 65 20 70 65 72 63 65 6e 74 61 67 65 20 6f 66 20 72 65 6f 72 64 65 72 65 64 20 70 61 63 6b | the.percentage.of.reordered.pack |
11b2e0 | 65 74 73 20 79 6f 75 72 20 74 72 61 66 66 69 63 20 77 69 6c 6c 20 73 75 66 66 65 72 2e 00 55 73 | ets.your.traffic.will.suffer..Us |
11b300 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 4c 44 50 20 6f 6e 20 | e.this.command.to.enable.LDP.on. |
11b320 | 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 65 66 69 6e 65 2e 00 55 73 65 20 74 68 | the.interface.you.define..Use.th |
11b340 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 4d 50 4c 53 20 70 72 6f 63 65 73 | is.command.to.enable.MPLS.proces |
11b360 | 73 69 6e 67 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 79 6f 75 20 64 65 66 69 6e 65 | sing.on.the.interface.you.define |
11b380 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 50 49 4d | ..Use.this.command.to.enable.PIM |
11b3a0 | 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 66 61 63 65 20 73 6f 20 74 68 | .in.the.selected.interface.so.th |
11b3c0 | 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 77 69 74 68 20 50 49 4d 20 6e | at.it.can.communicate.with.PIM.n |
11b3e0 | 65 69 67 68 62 6f 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e | eighbors..Use.this.command.to.en |
11b400 | 61 62 6c 65 20 50 49 4d 76 36 20 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 69 6e 74 65 72 | able.PIMv6.in.the.selected.inter |
11b420 | 66 61 63 65 20 73 6f 20 74 68 61 74 20 69 74 20 63 61 6e 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 | face.so.that.it.can.communicate. |
11b440 | 77 69 74 68 20 50 49 4d 76 36 20 6e 65 69 67 68 62 6f 72 73 2e 20 54 68 69 73 20 63 6f 6d 6d 61 | with.PIMv6.neighbors..This.comma |
11b460 | 6e 64 20 61 6c 73 6f 20 65 6e 61 62 6c 65 73 20 4d 4c 44 20 72 65 70 6f 72 74 73 20 61 6e 64 20 | nd.also.enables.MLD.reports.and. |
11b480 | 71 75 65 72 79 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 75 6e 6c 65 73 73 20 3a 63 | query.on.the.interface.unless.:c |
11b4a0 | 66 67 63 6d 64 3a 60 6d 6c 64 20 64 69 73 61 62 6c 65 60 20 69 73 20 63 6f 6e 66 69 67 75 72 65 | fgcmd:`mld.disable`.is.configure |
11b4c0 | 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 61 63 | d..Use.this.command.to.enable.ac |
11b4e0 | 71 75 69 73 69 74 69 6f 6e 20 6f 66 20 49 50 76 36 20 61 64 64 72 65 73 73 20 75 73 69 6e 67 20 | quisition.of.IPv6.address.using. |
11b500 | 73 74 61 74 65 6c 65 73 73 20 61 75 74 6f 63 6f 6e 66 69 67 20 28 53 4c 41 41 43 29 2e 00 55 73 | stateless.autoconfig.(SLAAC)..Us |
11b520 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 62 61 6e 64 77 69 64 | e.this.command.to.enable.bandwid |
11b540 | 74 68 20 73 68 61 70 69 6e 67 20 76 69 61 20 52 41 44 49 55 53 2e 00 55 73 65 20 74 68 69 73 20 | th.shaping.via.RADIUS..Use.this. |
11b560 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 70 72 6f 78 79 20 41 64 64 72 65 73 73 20 | command.to.enable.proxy.Address. |
11b580 | 52 65 73 6f 6c 75 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 41 52 50 29 20 6f 6e 20 74 68 69 | Resolution.Protocol.(ARP).on.thi |
11b5a0 | 73 20 69 6e 74 65 72 66 61 63 65 2e 20 50 72 6f 78 79 20 41 52 50 20 61 6c 6c 6f 77 73 20 61 6e | s.interface..Proxy.ARP.allows.an |
11b5c0 | 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 72 65 73 70 6f 6e 64 20 77 | .Ethernet.interface.to.respond.w |
11b5e0 | 69 74 68 20 69 74 73 20 6f 77 6e 20 3a 61 62 62 72 3a 60 4d 41 43 20 28 4d 65 64 69 61 20 41 63 | ith.its.own.:abbr:`MAC.(Media.Ac |
11b600 | 63 65 73 73 20 43 6f 6e 74 72 6f 6c 29 60 20 61 64 64 72 65 73 73 20 74 6f 20 41 52 50 20 72 65 | cess.Control)`.address.to.ARP.re |
11b620 | 71 75 65 73 74 73 20 66 6f 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 | quests.for.destination.IP.addres |
11b640 | 73 65 73 20 6f 6e 20 73 75 62 6e 65 74 73 20 61 74 74 61 63 68 65 64 20 74 6f 20 6f 74 68 65 72 | ses.on.subnets.attached.to.other |
11b660 | 20 69 6e 74 65 72 66 61 63 65 73 20 6f 6e 20 74 68 65 20 73 79 73 74 65 6d 2e 20 53 75 62 73 65 | .interfaces.on.the.system..Subse |
11b680 | 71 75 65 6e 74 20 70 61 63 6b 65 74 73 20 73 65 6e 74 20 74 6f 20 74 68 6f 73 65 20 64 65 73 74 | quent.packets.sent.to.those.dest |
11b6a0 | 69 6e 61 74 69 6f 6e 20 49 50 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 66 6f 72 77 61 72 64 | ination.IP.addresses.are.forward |
11b6c0 | 65 64 20 61 70 70 72 6f 70 72 69 61 74 65 6c 79 20 62 79 20 74 68 65 20 73 79 73 74 65 6d 2e 00 | ed.appropriately.by.the.system.. |
11b6e0 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 61 72 67 65 | Use.this.command.to.enable.targe |
11b700 | 74 65 64 20 4c 44 50 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f | ted.LDP.sessions.to.the.local.ro |
11b720 | 75 74 65 72 2e 20 54 68 65 20 72 6f 75 74 65 72 20 77 69 6c 6c 20 74 68 65 6e 20 72 65 73 70 6f | uter..The.router.will.then.respo |
11b740 | 6e 64 20 74 6f 20 61 6e 79 20 73 65 73 73 69 6f 6e 73 20 74 68 61 74 20 61 72 65 20 74 72 79 69 | nd.to.any.sessions.that.are.tryi |
11b760 | 6e 67 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 69 74 20 74 68 61 74 20 61 72 65 20 6e 6f 74 | ng.to.connect.to.it.that.are.not |
11b780 | 20 61 20 6c 69 6e 6b 20 6c 6f 63 61 6c 20 74 79 70 65 20 6f 66 20 54 43 50 20 63 6f 6e 6e 65 63 | .a.link.local.type.of.TCP.connec |
11b7a0 | 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 | tion..Use.this.command.to.enable |
11b7c0 | 20 74 68 65 20 64 65 6c 61 79 20 6f 66 20 50 41 44 4f 20 28 50 50 50 6f 45 20 41 63 74 69 76 65 | .the.delay.of.PADO.(PPPoE.Active |
11b7e0 | 20 44 69 73 63 6f 76 65 72 79 20 4f 66 66 65 72 29 20 70 61 63 6b 65 74 73 2c 20 77 68 69 63 68 | .Discovery.Offer).packets,.which |
11b800 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 61 73 20 61 20 73 65 73 73 69 6f 6e 20 62 61 6c 61 6e 63 | .can.be.used.as.a.session.balanc |
11b820 | 69 6e 67 20 6d 65 63 68 61 6e 69 73 6d 20 77 69 74 68 20 6f 74 68 65 72 20 50 50 50 6f 45 20 73 | ing.mechanism.with.other.PPPoE.s |
11b840 | 65 72 76 65 72 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 | ervers..Use.this.command.to.enab |
11b860 | 6c 65 20 74 68 65 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 74 6f 20 74 72 79 20 61 6e 64 20 63 | le.the.local.router.to.try.and.c |
11b880 | 6f 6e 6e 65 63 74 20 77 69 74 68 20 61 20 74 61 72 67 65 74 65 64 20 4c 44 50 20 73 65 73 73 69 | onnect.with.a.targeted.LDP.sessi |
11b8a0 | 6f 6e 20 74 6f 20 61 6e 6f 74 68 65 72 20 72 6f 75 74 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 | on.to.another.router..Use.this.c |
11b8c0 | 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 | ommand.to.enable.the.logging.of. |
11b8e0 | 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 20 6f 6e 20 63 75 73 74 6f 6d 20 63 68 61 | the.default.action.on.custom.cha |
11b900 | 69 6e 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 | ins..Use.this.command.to.enable. |
11b920 | 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f | the.logging.of.the.default.actio |
11b940 | 6e 20 6f 6e 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 63 68 61 69 6e 2e 00 55 73 65 20 74 68 | n.on.the.specified.chain..Use.th |
11b960 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 | is.command.to.enable.the.logging |
11b980 | 20 6f 66 20 74 68 65 20 64 65 66 61 75 6c 74 20 61 63 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 | .of.the.default.action..Use.this |
11b9a0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 65 6e 61 62 6c 65 2c 20 64 69 73 61 62 6c 65 2c 20 6f 72 20 | .command.to.enable,.disable,.or. |
11b9c0 | 73 70 65 63 69 66 79 20 68 6f 70 20 63 6f 75 6e 74 20 66 6f 72 20 54 54 4c 20 73 65 63 75 72 69 | specify.hop.count.for.TTL.securi |
11b9e0 | 74 79 20 66 6f 72 20 4c 44 50 20 70 65 65 72 73 2e 20 42 79 20 64 65 66 61 75 6c 74 20 74 68 65 | ty.for.LDP.peers..By.default.the |
11ba00 | 20 76 61 6c 75 65 20 69 73 20 73 65 74 20 74 6f 20 32 35 35 20 28 6f 72 20 6d 61 78 20 54 54 4c | .value.is.set.to.255.(or.max.TTL |
11ba20 | 29 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 66 6c 75 73 68 20 74 68 65 | )..Use.this.command.to.flush.the |
11ba40 | 20 6b 65 72 6e 65 6c 20 49 50 76 36 20 72 6f 75 74 65 20 63 61 63 68 65 2e 20 41 6e 20 61 64 64 | .kernel.IPv6.route.cache..An.add |
11ba60 | 72 65 73 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 74 6f 20 66 6c 75 73 68 20 69 74 20 6f 6e | ress.can.be.added.to.flush.it.on |
11ba80 | 6c 79 20 66 6f 72 20 74 68 61 74 20 72 6f 75 74 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d | ly.for.that.route..Use.this.comm |
11baa0 | 61 6e 64 20 74 6f 20 67 65 74 20 61 6e 20 6f 76 65 72 76 69 65 77 20 6f 66 20 61 20 7a 6f 6e 65 | and.to.get.an.overview.of.a.zone |
11bac0 | 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d | ..Use.this.command.to.get.inform |
11bae0 | 61 74 69 6f 6e 20 61 62 6f 75 74 20 4f 53 50 46 76 33 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | ation.about.OSPFv3..Use.this.com |
11bb00 | 6d 61 6e 64 20 74 6f 20 67 65 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 | mand.to.get.information.about.th |
11bb20 | 65 20 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | e.RIPNG.protocol.Use.this.comman |
11bb40 | 64 20 74 6f 20 69 6e 73 74 72 75 63 74 20 74 68 65 20 73 79 73 74 65 6d 20 74 6f 20 65 73 74 61 | d.to.instruct.the.system.to.esta |
11bb60 | 62 6c 69 73 68 20 61 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 61 75 74 6f 6d 61 74 | blish.a.PPPoE.connection.automat |
11bb80 | 69 63 61 6c 6c 79 20 6f 6e 63 65 20 74 72 61 66 66 69 63 20 70 61 73 73 65 73 20 74 68 72 6f 75 | ically.once.traffic.passes.throu |
11bba0 | 67 68 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 20 41 20 64 69 73 61 62 6c 65 64 20 6f 6e 2d | gh.the.interface..A.disabled.on- |
11bbc0 | 64 65 6d 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 | demand.connection.is.established |
11bbe0 | 20 61 74 20 62 6f 6f 74 20 74 69 6d 65 20 61 6e 64 20 72 65 6d 61 69 6e 73 20 75 70 2e 20 49 66 | .at.boot.time.and.remains.up..If |
11bc00 | 20 74 68 65 20 6c 69 6e 6b 20 66 61 69 6c 73 20 66 6f 72 20 61 6e 79 20 72 65 61 73 6f 6e 2c 20 | .the.link.fails.for.any.reason,. |
11bc20 | 74 68 65 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 62 61 63 6b 20 75 70 20 69 6d 6d 65 | the.link.is.brought.back.up.imme |
11bc40 | 64 69 61 74 65 6c 79 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 69 6e | diately..Use.this.command.to.lin |
11bc60 | 6b 20 74 68 65 20 50 50 50 6f 45 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 70 68 79 73 | k.the.PPPoE.connection.to.a.phys |
11bc80 | 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 45 61 63 68 20 50 50 50 6f 45 20 63 6f 6e 6e 65 | ical.interface..Each.PPPoE.conne |
11bca0 | 63 74 69 6f 6e 20 6d 75 73 74 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f 76 65 72 20 61 | ction.must.be.established.over.a |
11bcc0 | 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 2e 20 49 6e 74 65 72 66 61 63 65 73 20 | .physical.interface..Interfaces. |
11bce0 | 63 61 6e 20 62 65 20 72 65 67 75 6c 61 72 20 45 74 68 65 72 6e 65 74 20 69 6e 74 65 72 66 61 63 | can.be.regular.Ethernet.interfac |
11bd00 | 65 73 2c 20 56 49 46 73 20 6f 72 20 62 6f 6e 64 69 6e 67 20 69 6e 74 65 72 66 61 63 65 73 2f 56 | es,.VIFs.or.bonding.interfaces/V |
11bd20 | 49 46 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 | IFs..Use.this.command.to.locally |
11bd40 | 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 | .check.the.active.sessions.in.th |
11bd60 | 65 20 49 50 6f 45 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | e.IPoE.server..Use.this.command. |
11bd80 | 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 | to.locally.check.the.active.sess |
11bda0 | 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 | ions.in.the.PPPoE.server..Use.th |
11bdc0 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 63 68 65 63 6b 20 74 68 65 20 | is.command.to.locally.check.the. |
11bde0 | 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 50 50 54 50 20 73 65 72 76 | active.sessions.in.the.PPTP.serv |
11be00 | 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6c 6f 63 61 6c 6c 79 20 | er..Use.this.command.to.locally. |
11be20 | 63 68 65 63 6b 20 74 68 65 20 61 63 74 69 76 65 20 73 65 73 73 69 6f 6e 73 20 69 6e 20 74 68 65 | check.the.active.sessions.in.the |
11be40 | 20 53 53 54 50 20 73 65 72 76 65 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 | .SSTP.server..Use.this.command.t |
11be60 | 6f 20 6d 61 6e 75 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 20 61 20 52 65 6e 64 65 7a 76 6f 75 | o.manually.configure.a.Rendezvou |
11be80 | 73 20 50 6f 69 6e 74 20 66 6f 72 20 50 49 4d 20 73 6f 20 74 68 61 74 20 6a 6f 69 6e 20 6d 65 73 | s.Point.for.PIM.so.that.join.mes |
11bea0 | 73 61 67 65 73 20 63 61 6e 20 62 65 20 73 65 6e 74 20 74 68 65 72 65 2e 20 53 65 74 20 74 68 65 | sages.can.be.sent.there..Set.the |
11bec0 | 20 52 65 6e 64 65 76 6f 75 7a 20 50 6f 69 6e 74 20 61 64 64 72 65 73 73 20 61 6e 64 20 74 68 65 | .Rendevouz.Point.address.and.the |
11bee0 | 20 6d 61 74 63 68 69 6e 67 20 70 72 65 66 69 78 20 6f 66 20 67 72 6f 75 70 20 72 61 6e 67 65 73 | .matching.prefix.of.group.ranges |
11bf00 | 20 63 6f 76 65 72 65 64 2e 20 54 68 65 73 65 20 76 61 6c 75 65 73 20 6d 75 73 74 20 62 65 20 73 | .covered..These.values.must.be.s |
11bf20 | 68 61 72 65 64 20 77 69 74 68 20 65 76 65 72 79 20 72 6f 75 74 65 72 20 70 61 72 74 69 63 69 70 | hared.with.every.router.particip |
11bf40 | 61 74 69 6e 67 20 69 6e 20 74 68 65 20 50 49 4d 20 6e 65 74 77 6f 72 6b 2e 00 55 73 65 20 74 68 | ating.in.the.PIM.network..Use.th |
11bf60 | 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 20 61 64 76 65 72 74 | is.command.to.not.install.advert |
11bf80 | 69 73 65 64 20 44 4e 53 20 6e 61 6d 65 73 65 72 76 65 72 73 20 69 6e 74 6f 20 74 68 65 20 6c 6f | ised.DNS.nameservers.into.the.lo |
11bfa0 | 63 61 6c 20 73 79 73 74 65 6d 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | cal.system..Use.this.command.to. |
11bfc0 | 70 72 65 66 65 72 20 49 50 76 34 20 66 6f 72 20 54 43 50 20 70 65 65 72 20 74 72 61 6e 73 70 6f | prefer.IPv4.for.TCP.peer.transpo |
11bfe0 | 72 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 6f 72 20 4c 44 50 20 77 68 65 6e 20 62 6f 74 68 20 | rt.connection.for.LDP.when.both. |
11c000 | 61 6e 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 4c 44 50 20 61 64 64 72 65 73 73 20 61 72 65 | an.IPv4.and.IPv6.LDP.address.are |
11c020 | 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 74 68 65 20 73 61 6d 65 20 69 6e 74 65 72 66 61 63 | .configured.on.the.same.interfac |
11c040 | 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 49 50 76 | e..Use.this.command.to.reset.IPv |
11c060 | 36 20 4e 65 69 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 63 61 | 6.Neighbor.Discovery.Protocol.ca |
11c080 | 63 68 65 20 66 6f 72 20 61 6e 20 61 64 64 72 65 73 73 20 6f 72 20 69 6e 74 65 72 66 61 63 65 2e | che.for.an.address.or.interface. |
11c0a0 | 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 73 65 74 20 61 6e 20 4c 44 | .Use.this.command.to.reset.an.LD |
11c0c0 | 50 20 6e 65 69 67 68 62 6f 72 2f 54 43 50 20 73 65 73 73 69 6f 6e 20 74 68 61 74 20 69 73 20 65 | P.neighbor/TCP.session.that.is.e |
11c0e0 | 73 74 61 62 6c 69 73 68 65 64 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 | stablished.Use.this.command.to.r |
11c100 | 65 73 65 74 20 74 68 65 20 4f 70 65 6e 56 50 4e 20 70 72 6f 63 65 73 73 20 6f 6e 20 61 20 73 70 | eset.the.OpenVPN.process.on.a.sp |
11c120 | 65 63 69 66 69 63 20 69 6e 74 65 72 66 61 63 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ecific.interface..Use.this.comma |
11c140 | 6e 64 20 74 6f 20 72 65 73 65 74 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 4f 70 65 6e 56 50 | nd.to.reset.the.specified.OpenVP |
11c160 | 4e 20 63 6c 69 65 6e 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 72 65 | N.client..Use.this.command.to.re |
11c180 | 73 74 72 69 63 74 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 6f 6e 20 61 20 67 69 | strict.the.PPPoE.session.on.a.gi |
11c1a0 | 76 65 6e 20 61 63 63 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e 20 4e 6f 72 6d 61 6c 6c | ven.access.concentrator..Normall |
11c1c0 | 79 2c 20 61 20 68 6f 73 74 20 73 65 6e 64 73 20 61 20 50 50 50 6f 45 20 69 6e 69 74 69 61 74 69 | y,.a.host.sends.a.PPPoE.initiati |
11c1e0 | 6f 6e 20 70 61 63 6b 65 74 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 50 50 50 6f 45 20 64 69 73 | on.packet.to.start.the.PPPoE.dis |
11c200 | 63 6f 76 65 72 79 20 70 72 6f 63 65 73 73 2c 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 61 63 63 65 | covery.process,.a.number.of.acce |
11c220 | 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 73 20 72 65 73 70 6f 6e 64 20 77 69 74 68 20 6f 66 | ss.concentrators.respond.with.of |
11c240 | 66 65 72 20 70 61 63 6b 65 74 73 20 61 6e 64 20 74 68 65 20 68 6f 73 74 20 73 65 6c 65 63 74 73 | fer.packets.and.the.host.selects |
11c260 | 20 6f 6e 65 20 6f 66 20 74 68 65 20 72 65 73 70 6f 6e 64 69 6e 67 20 61 63 63 65 73 73 20 63 6f | .one.of.the.responding.access.co |
11c280 | 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 73 65 72 76 65 20 74 68 69 73 20 73 65 73 73 69 6f | ncentrators.to.serve.this.sessio |
11c2a0 | 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 4c 44 50 20 69 | n..Use.this.command.to.see.LDP.i |
11c2c0 | 6e 74 65 72 66 61 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f | nterface.information.Use.this.co |
11c2e0 | 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d | mmand.to.see.LDP.neighbor.inform |
11c300 | 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 64 65 | ation.Use.this.command.to.see.de |
11c320 | 74 61 69 6c 65 64 20 4c 44 50 20 6e 65 69 67 68 62 6f 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 | tailed.LDP.neighbor.information. |
11c340 | 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 65 20 64 69 73 63 6f 76 65 72 | Use.this.command.to.see.discover |
11c360 | 79 20 68 65 6c 6c 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | y.hello.information.Use.this.com |
11c380 | 6d 61 6e 64 20 74 6f 20 73 65 65 20 74 68 65 20 4c 61 62 65 6c 20 49 6e 66 6f 72 6d 61 74 69 6f | mand.to.see.the.Label.Informatio |
11c3a0 | 6e 20 42 61 73 65 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 | n.Base..Use.this.command.to.set. |
11c3c0 | 61 20 6e 61 6d 65 20 66 6f 72 20 74 68 69 73 20 50 50 50 6f 45 2d 73 65 72 76 65 72 20 61 63 63 | a.name.for.this.PPPoE-server.acc |
11c3e0 | 65 73 73 20 63 6f 6e 63 65 6e 74 72 61 74 6f 72 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 | ess.concentrator..Use.this.comma |
11c400 | 6e 64 20 74 6f 20 73 65 74 20 72 65 2d 64 69 61 6c 20 64 65 6c 61 79 20 74 69 6d 65 20 74 6f 20 | nd.to.set.re-dial.delay.time.to. |
11c420 | 62 65 20 75 73 65 64 20 77 69 74 68 20 70 65 72 73 69 73 74 20 50 50 50 6f 45 20 73 65 73 73 69 | be.used.with.persist.PPPoE.sessi |
11c440 | 6f 6e 73 2e 20 57 68 65 6e 20 74 68 65 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 20 69 73 20 74 | ons..When.the.PPPoE.session.is.t |
11c460 | 65 72 6d 69 6e 61 74 65 64 20 62 79 20 70 65 65 72 2c 20 61 6e 64 20 6f 6e 2d 64 65 6d 61 6e 64 | erminated.by.peer,.and.on-demand |
11c480 | 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 | .option.is.not.set,.the.router.w |
11c4a0 | 69 6c 6c 20 61 74 74 65 6d 70 74 20 74 6f 20 72 65 2d 65 73 74 61 62 6c 69 73 68 20 74 68 65 20 | ill.attempt.to.re-establish.the. |
11c4c0 | 50 50 50 6f 45 20 6c 69 6e 6b 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | PPPoE.link..Use.this.command.to. |
11c4e0 | 73 65 74 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 | set.the.IP.address.of.the.local. |
11c500 | 65 6e 64 70 6f 69 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 | endpoint.of.a.PPPoE.session..If. |
11c520 | 69 74 20 69 73 20 6e 6f 74 20 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 | it.is.not.set.it.will.be.negotia |
11c540 | 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 | ted..Use.this.command.to.set.the |
11c560 | 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 20 72 65 6d 6f 74 65 20 65 6e 64 70 6f 69 | .IP.address.of.the.remote.endpoi |
11c580 | 6e 74 20 6f 66 20 61 20 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 2e 20 49 66 20 69 74 20 69 73 20 | nt.of.a.PPPoE.session..If.it.is. |
11c5a0 | 6e 6f 74 20 73 65 74 20 69 74 20 77 69 6c 6c 20 62 65 20 6e 65 67 6f 74 69 61 74 65 64 2e 00 55 | not.set.it.will.be.negotiated..U |
11c5c0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 49 50 76 34 20 | se.this.command.to.set.the.IPv4. |
11c5e0 | 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 6f 66 20 65 76 65 72 79 20 44 6f 6d 61 6e 20 4e | or.IPv6.address.of.every.Doman.N |
11c600 | 61 6d 65 20 53 65 72 76 65 72 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 | ame.Server.you.want.to.configure |
11c620 | 2e 20 54 68 65 79 20 77 69 6c 6c 20 62 65 20 70 72 6f 70 61 67 61 74 65 64 20 74 6f 20 50 50 50 | ..They.will.be.propagated.to.PPP |
11c640 | 6f 45 20 63 6c 69 65 6e 74 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | oE.clients..Use.this.command.to. |
11c660 | 73 65 74 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 74 72 61 6e 73 70 6f 72 74 2d 61 | set.the.IPv4.or.IPv6.transport-a |
11c680 | 64 64 72 65 73 73 20 75 73 65 64 20 62 79 20 4c 44 50 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | ddress.used.by.LDP..Use.this.com |
11c6a0 | 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 69 64 6c 65 20 74 69 6d 65 6f 75 74 20 69 6e 74 | mand.to.set.the.idle.timeout.int |
11c6c0 | 65 72 76 61 6c 20 74 6f 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6f 6e 2d 64 65 6d 61 6e 64 20 | erval.to.be.used.with.on-demand. |
11c6e0 | 50 50 50 6f 45 20 73 65 73 73 69 6f 6e 73 2e 20 57 68 65 6e 20 61 6e 20 6f 6e 2d 64 65 6d 61 6e | PPPoE.sessions..When.an.on-deman |
11c700 | 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 65 73 74 61 62 6c 69 73 68 65 64 2c 20 74 68 65 | d.connection.is.established,.the |
11c720 | 20 6c 69 6e 6b 20 69 73 20 62 72 6f 75 67 68 74 20 75 70 20 6f 6e 6c 79 20 77 68 65 6e 20 74 72 | .link.is.brought.up.only.when.tr |
11c740 | 61 66 66 69 63 20 69 73 20 73 65 6e 74 20 61 6e 64 20 69 73 20 64 69 73 61 62 6c 65 64 20 77 68 | affic.is.sent.and.is.disabled.wh |
11c760 | 65 6e 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 69 64 6c 65 20 66 6f 72 20 74 68 65 20 69 6e 74 65 | en.the.link.is.idle.for.the.inte |
11c780 | 72 76 61 6c 20 73 70 65 63 69 66 69 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 | rval.specified..Use.this.command |
11c7a0 | 20 74 6f 20 73 65 74 20 74 68 65 20 70 61 73 73 77 6f 72 64 20 66 6f 72 20 61 75 74 68 65 6e 74 | .to.set.the.password.for.authent |
11c7c0 | 69 63 61 74 69 6e 67 20 77 69 74 68 20 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 20 65 6e 64 70 | icating.with.a.remote.PPPoE.endp |
11c7e0 | 6f 69 6e 74 2e 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c | oint..Authentication.is.optional |
11c800 | 20 66 72 6f 6d 20 74 68 65 20 73 79 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 | .from.the.system's.point.of.view |
11c820 | 20 62 75 74 20 6d 6f 73 74 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 72 65 71 75 | .but.most.service.providers.requ |
11c840 | 69 72 65 20 69 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 | ire.it..Use.this.command.to.set. |
11c860 | 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 75 73 65 2e 20 41 63 74 69 6f 6e 20 71 75 65 75 65 20 | the.target.to.use..Action.queue. |
11c880 | 6d 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 65 74 74 | must.be.defined.to.use.this.sett |
11c8a0 | 69 6e 67 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 65 74 20 74 68 65 20 | ing.Use.this.command.to.set.the. |
11c8c0 | 75 73 65 72 6e 61 6d 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 77 69 74 68 | username.for.authenticating.with |
11c8e0 | 20 61 20 72 65 6d 6f 74 65 20 50 50 50 6f 45 20 65 6e 64 70 6f 69 6e 74 2e 20 41 75 74 68 65 6e | .a.remote.PPPoE.endpoint..Authen |
11c900 | 74 69 63 61 74 69 6f 6e 20 69 73 20 6f 70 74 69 6f 6e 61 6c 20 66 72 6f 6d 20 74 68 65 20 73 79 | tication.is.optional.from.the.sy |
11c920 | 73 74 65 6d 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 20 62 75 74 20 6d 6f 73 74 20 73 65 | stem's.point.of.view.but.most.se |
11c940 | 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 73 20 72 65 71 75 69 72 65 20 69 74 2e 00 55 73 65 20 | rvice.providers.require.it..Use. |
11c960 | 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 42 6f 72 64 65 72 | this.command.to.show.IPv6.Border |
11c980 | 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 55 | .Gateway.Protocol.information..U |
11c9a0 | 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 4e 65 69 | se.this.command.to.show.IPv6.Nei |
11c9c0 | 67 68 62 6f 72 20 44 69 73 63 6f 76 65 72 79 20 50 72 6f 74 6f 63 6f 6c 20 69 6e 66 6f 72 6d 61 | ghbor.Discovery.Protocol.informa |
11c9e0 | 74 69 6f 6e 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 | tion..Use.this.command.to.show.I |
11ca00 | 50 76 36 20 66 6f 72 77 61 72 64 69 6e 67 20 73 74 61 74 75 73 2e 00 55 73 65 20 74 68 69 73 20 | Pv6.forwarding.status..Use.this. |
11ca20 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 6d 75 6c 74 69 63 61 73 74 20 67 | command.to.show.IPv6.multicast.g |
11ca40 | 72 6f 75 70 20 6d 65 6d 62 65 72 73 68 69 70 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | roup.membership..Use.this.comman |
11ca60 | 64 20 74 6f 20 73 68 6f 77 20 49 50 76 36 20 72 6f 75 74 65 73 2e 00 55 73 65 20 74 68 69 73 20 | d.to.show.IPv6.routes..Use.this. |
11ca80 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 6c 6c 20 49 50 76 36 20 61 63 63 65 73 73 20 | command.to.show.all.IPv6.access. |
11caa0 | 6c 69 73 74 73 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 61 | lists.Use.this.command.to.show.a |
11cac0 | 6c 6c 20 49 50 76 36 20 70 72 65 66 69 78 20 6c 69 73 74 73 00 55 73 65 20 74 68 69 73 20 63 6f | ll.IPv6.prefix.lists.Use.this.co |
11cae0 | 6d 6d 61 6e 64 20 74 6f 20 73 68 6f 77 20 74 68 65 20 73 74 61 74 75 73 20 6f 66 20 74 68 65 20 | mmand.to.show.the.status.of.the. |
11cb00 | 52 49 50 4e 47 20 70 72 6f 74 6f 63 6f 6c 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 | RIPNG.protocol.Use.this.command. |
11cb20 | 74 6f 20 73 70 65 63 69 66 79 20 61 20 44 4e 53 20 73 65 72 76 65 72 20 66 6f 72 20 74 68 65 20 | to.specify.a.DNS.server.for.the. |
11cb40 | 73 79 73 74 65 6d 20 74 6f 20 62 65 20 75 73 65 64 20 66 6f 72 20 44 4e 53 20 6c 6f 6f 6b 75 70 | system.to.be.used.for.DNS.lookup |
11cb60 | 73 2e 20 4d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 44 4e 53 20 73 65 72 76 65 72 20 63 61 6e 20 | s..More.than.one.DNS.server.can. |
11cb80 | 62 65 20 61 64 64 65 64 2c 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 6f 6e 65 20 61 74 20 61 20 74 | be.added,.configuring.one.at.a.t |
11cba0 | 69 6d 65 2e 20 42 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 | ime..Both.IPv4.and.IPv6.addresse |
11cbc0 | 73 20 61 72 65 20 73 75 70 70 6f 72 74 65 64 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e | s.are.supported..Use.this.comman |
11cbe0 | 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 74 6f 20 62 65 | d.to.specify.a.domain.name.to.be |
11cc00 | 20 61 70 70 65 6e 64 65 64 20 74 6f 20 64 6f 6d 61 69 6e 2d 6e 61 6d 65 73 20 77 69 74 68 69 6e | .appended.to.domain-names.within |
11cc20 | 20 55 52 4c 73 20 74 68 61 74 20 64 6f 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 61 20 64 6f 74 20 | .URLs.that.do.not.include.a.dot. |
11cc40 | 60 60 2e 60 60 20 74 68 65 20 64 6f 6d 61 69 6e 20 69 73 20 61 70 70 65 6e 64 65 64 2e 00 55 73 | ``.``.the.domain.is.appended..Us |
11cc60 | 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 70 65 63 69 66 79 20 61 20 73 65 72 76 | e.this.command.to.specify.a.serv |
11cc80 | 69 63 65 20 6e 61 6d 65 20 62 79 20 77 68 69 63 68 20 74 68 65 20 6c 6f 63 61 6c 20 50 50 50 6f | ice.name.by.which.the.local.PPPo |
11cca0 | 45 20 69 6e 74 65 72 66 61 63 65 20 63 61 6e 20 73 65 6c 65 63 74 20 61 63 63 65 73 73 20 63 6f | E.interface.can.select.access.co |
11ccc0 | 6e 63 65 6e 74 72 61 74 6f 72 73 20 74 6f 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 2e 20 49 74 20 | ncentrators.to.connect.with..It. |
11cce0 | 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 6e 79 20 61 63 63 65 73 73 20 63 6f 6e 63 65 | will.connect.to.any.access.conce |
11cd00 | 6e 74 72 61 74 6f 72 20 69 66 20 6e 6f 74 20 73 65 74 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d | ntrator.if.not.set..Use.this.com |
11cd20 | 6d 61 6e 64 20 74 6f 20 75 73 65 20 4c 61 79 65 72 20 34 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 | mand.to.use.Layer.4.information. |
11cd40 | 66 6f 72 20 49 50 76 34 20 45 43 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 73 65 20 74 68 69 73 20 | for.IPv4.ECMP.hashing..Use.this. |
11cd60 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 61 20 43 69 73 63 6f 20 6e 6f 6e 2d 63 6f 6d 70 6c | command.to.use.a.Cisco.non-compl |
11cd80 | 69 61 6e 74 20 66 6f 72 6d 61 74 20 74 6f 20 73 65 6e 64 20 61 6e 64 20 69 6e 74 65 72 70 72 65 | iant.format.to.send.and.interpre |
11cda0 | 74 20 74 68 65 20 44 75 61 6c 2d 53 74 61 63 6b 20 63 61 70 61 62 69 6c 69 74 79 20 54 4c 56 20 | t.the.Dual-Stack.capability.TLV. |
11cdc0 | 66 6f 72 20 49 50 76 36 20 4c 44 50 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2e 20 54 68 69 | for.IPv6.LDP.communications..Thi |
11cde0 | 73 20 69 73 20 72 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 63 3a 60 37 35 35 32 60 2e 00 55 73 65 | s.is.related.to.:rfc:`7552`..Use |
11ce00 | 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 20 6f 72 64 65 72 65 64 20 6c 61 62 | .this.command.to.use.ordered.lab |
11ce20 | 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f 64 65 2e 20 46 52 | el.distribution.control.mode..FR |
11ce40 | 52 20 62 79 20 64 65 66 61 75 6c 74 20 75 73 65 73 20 69 6e 64 65 70 65 6e 64 65 6e 74 20 6c 61 | R.by.default.uses.independent.la |
11ce60 | 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 63 6f 6e 74 72 6f 6c 20 6d 6f 64 65 20 66 6f | bel.distribution.control.mode.fo |
11ce80 | 72 20 6c 61 62 65 6c 20 64 69 73 74 72 69 62 75 74 69 6f 6e 2e 20 20 54 68 69 73 20 69 73 20 72 | r.label.distribution...This.is.r |
11cea0 | 65 6c 61 74 65 64 20 74 6f 20 3a 72 66 63 3a 60 35 30 33 36 60 2e 00 55 73 65 20 74 68 69 73 20 | elated.to.:rfc:`5036`..Use.this. |
11cec0 | 63 6f 6d 6d 61 6e 64 20 74 6f 20 75 73 65 72 20 4c 61 79 65 72 20 34 20 69 6e 66 6f 72 6d 61 74 | command.to.user.Layer.4.informat |
11cee0 | 69 6f 6e 20 66 6f 72 20 45 43 4d 50 20 68 61 73 68 69 6e 67 2e 00 55 73 65 20 74 68 69 73 20 63 | ion.for.ECMP.hashing..Use.this.c |
11cf00 | 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 73 74 61 74 75 | ommand.to.view.operational.statu |
11cf20 | 73 20 61 6e 64 20 64 65 74 61 69 6c 73 20 77 69 72 65 6c 65 73 73 2d 73 70 65 63 69 66 69 63 20 | s.and.details.wireless-specific. |
11cf40 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 | information.about.all.wireless.i |
11cf60 | 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 | nterfaces..Use.this.command.to.v |
11cf80 | 69 65 77 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 73 74 61 74 75 73 20 61 6e 64 20 77 69 72 65 6c | iew.operational.status.and.wirel |
11cfa0 | 65 73 73 2d 73 70 65 63 69 66 69 63 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 | ess-specific.information.about.a |
11cfc0 | 6c 6c 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 61 63 65 73 2e 00 55 73 65 20 74 68 69 73 | ll.wireless.interfaces..Use.this |
11cfe0 | 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 76 69 65 77 20 77 69 72 65 6c 65 73 73 20 69 6e 74 65 72 66 | .command.to.view.wireless.interf |
11d000 | 61 63 65 20 71 75 65 75 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 20 77 69 72 65 6c | ace.queue.information..The.wirel |
11d020 | 65 73 73 20 69 6e 74 65 72 66 61 63 65 20 69 64 65 6e 74 69 66 69 65 72 20 63 61 6e 20 72 61 6e | ess.interface.identifier.can.ran |
11d040 | 67 65 20 66 72 6f 6d 20 77 6c 61 6e 30 20 74 6f 20 77 6c 61 6e 39 39 39 2e 00 55 73 65 64 20 66 | ge.from.wlan0.to.wlan999..Used.f |
11d060 | 6f 72 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 2e 00 55 73 65 64 20 74 6f 20 62 6c 6f 63 | or.troubleshooting..Used.to.bloc |
11d080 | 6b 20 61 20 73 70 65 63 69 66 69 63 20 6d 69 6d 65 2d 74 79 70 65 2e 00 55 73 65 64 20 74 6f 20 | k.a.specific.mime-type..Used.to. |
11d0a0 | 62 6c 6f 63 6b 20 73 70 65 63 69 66 69 63 20 64 6f 6d 61 69 6e 73 20 62 79 20 74 68 65 20 50 72 | block.specific.domains.by.the.Pr |
11d0c0 | 6f 78 79 2e 20 53 70 65 63 69 66 79 69 6e 67 20 22 76 79 6f 73 2e 6e 65 74 22 20 77 69 6c 6c 20 | oxy..Specifying."vyos.net".will. |
11d0e0 | 62 6c 6f 63 6b 20 61 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 76 79 6f 73 2e 6e 65 74 2c 20 61 6e | block.all.access.to.vyos.net,.an |
11d100 | 64 20 73 70 65 63 69 66 79 69 6e 67 20 22 2e 78 78 78 22 20 77 69 6c 6c 20 62 6c 6f 63 6b 20 61 | d.specifying.".xxx".will.block.a |
11d120 | 6c 6c 20 61 63 63 65 73 73 20 74 6f 20 55 52 4c 73 20 68 61 76 69 6e 67 20 61 6e 20 55 52 4c 20 | ll.access.to.URLs.having.an.URL. |
11d140 | 65 6e 64 69 6e 67 20 6f 6e 20 2e 78 78 78 2e 00 55 73 65 72 20 69 6e 74 65 72 66 61 63 65 20 63 | ending.on..xxx..User.interface.c |
11d160 | 61 6e 20 62 65 20 70 75 74 20 74 6f 20 56 52 46 20 63 6f 6e 74 65 78 74 20 76 69 61 20 52 41 44 | an.be.put.to.VRF.context.via.RAD |
11d180 | 49 55 53 20 41 63 63 65 73 73 2d 41 63 63 65 70 74 20 70 61 63 6b 65 74 2c 20 6f 72 20 63 68 61 | IUS.Access-Accept.packet,.or.cha |
11d1a0 | 6e 67 65 20 69 74 20 76 69 61 20 52 41 44 49 55 53 20 43 6f 41 2e 20 60 60 41 63 63 65 6c 2d 56 | nge.it.via.RADIUS.CoA..``Accel-V |
11d1c0 | 52 46 2d 4e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 66 72 6f 6d 20 74 68 65 73 65 20 70 75 72 | RF-Name``.is.used.from.these.pur |
11d1e0 | 70 6f 73 65 73 2e 20 49 74 20 69 73 20 63 75 73 74 6f 6d 20 60 41 43 43 45 4c 2d 50 50 50 20 61 | poses..It.is.custom.`ACCEL-PPP.a |
11d200 | 74 74 72 69 62 75 74 65 60 5f 2e 20 44 65 66 69 6e 65 20 69 74 20 69 6e 20 79 6f 75 72 20 52 41 | ttribute`_..Define.it.in.your.RA |
11d220 | 44 49 55 53 20 73 65 72 76 65 72 2e 00 55 73 65 72 2d 6c 65 76 65 6c 20 6d 65 73 73 61 67 65 73 | DIUS.server..User-level.messages |
11d240 | 00 55 73 69 6e 67 20 27 73 6f 66 74 2d 72 65 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 27 20 77 65 | .Using.'soft-reconfiguration'.we |
11d260 | 20 67 65 74 20 74 68 65 20 70 6f 6c 69 63 79 20 75 70 64 61 74 65 20 77 69 74 68 6f 75 74 20 62 | .get.the.policy.update.without.b |
11d280 | 6f 75 6e 63 69 6e 67 20 74 68 65 20 6e 65 69 67 68 62 6f 72 2e 00 55 73 69 6e 67 20 2a 2a 6f 70 | ouncing.the.neighbor..Using.**op |
11d2a0 | 65 6e 76 70 6e 2d 6f 70 74 69 6f 6e 20 2d 72 65 6e 65 67 2d 73 65 63 2a 2a 20 63 61 6e 20 62 65 | envpn-option.-reneg-sec**.can.be |
11d2c0 | 20 74 72 69 63 6b 79 2e 20 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 75 73 65 64 20 74 6f 20 | .tricky..This.option.is.used.to. |
11d2e0 | 72 65 6e 65 67 6f 74 69 61 74 65 20 64 61 74 61 20 63 68 61 6e 6e 65 6c 20 61 66 74 65 72 20 6e | renegotiate.data.channel.after.n |
11d300 | 20 73 65 63 6f 6e 64 73 2e 20 57 68 65 6e 20 75 73 65 64 20 61 74 20 62 6f 74 68 20 73 65 72 76 | .seconds..When.used.at.both.serv |
11d320 | 65 72 20 61 6e 64 20 63 6c 69 65 6e 74 2c 20 74 68 65 20 6c 6f 77 65 72 20 76 61 6c 75 65 20 77 | er.and.client,.the.lower.value.w |
11d340 | 69 6c 6c 20 74 72 69 67 67 65 72 20 74 68 65 20 72 65 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 | ill.trigger.the.renegotiation..I |
11d360 | 66 20 79 6f 75 20 73 65 74 20 69 74 20 74 6f 20 30 20 6f 6e 20 6f 6e 65 20 73 69 64 65 20 6f 66 | f.you.set.it.to.0.on.one.side.of |
11d380 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 74 6f 20 64 69 73 61 62 6c 65 20 69 74 29 2c | .the.connection.(to.disable.it), |
11d3a0 | 20 74 68 65 20 63 68 6f 73 65 6e 20 76 61 6c 75 65 20 6f 6e 20 74 68 65 20 6f 74 68 65 72 20 73 | .the.chosen.value.on.the.other.s |
11d3c0 | 69 64 65 20 77 69 6c 6c 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 6e 20 74 68 65 20 72 65 6e 65 | ide.will.determine.when.the.rene |
11d3e0 | 67 6f 74 69 61 74 69 6f 6e 20 77 69 6c 6c 20 6f 63 63 75 72 2e 00 55 73 69 6e 67 20 42 47 50 20 | gotiation.will.occur..Using.BGP. |
11d400 | 63 6f 6e 66 65 64 65 72 61 74 69 6f 6e 00 55 73 69 6e 67 20 42 47 50 20 72 6f 75 74 65 2d 72 65 | confederation.Using.BGP.route-re |
11d420 | 66 6c 65 63 74 6f 72 73 00 55 73 69 6e 67 20 56 4c 41 4e 20 61 77 61 72 65 20 42 72 69 64 67 65 | flectors.Using.VLAN.aware.Bridge |
11d440 | 00 55 73 69 6e 67 20 6f 75 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 63 68 61 70 74 65 72 | .Using.our.documentation.chapter |
11d460 | 20 2d 20 3a 72 65 66 3a 60 70 6b 69 60 20 67 65 6e 65 72 61 74 65 20 61 6e 64 20 69 6e 73 74 61 | .-.:ref:`pki`.generate.and.insta |
11d480 | 6c 6c 20 43 41 20 61 6e 64 20 53 65 72 76 65 72 20 63 65 72 74 69 66 69 63 61 74 65 00 55 73 69 | ll.CA.and.Server.certificate.Usi |
11d4a0 | 6e 67 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 20 74 6f | ng.the.operation.mode.command.to |
11d4c0 | 20 76 69 65 77 20 42 72 69 64 67 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 55 73 69 6e 67 20 74 | .view.Bridge.Information.Using.t |
11d4e0 | 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 6e | his.command,.you.will.create.a.n |
11d500 | 65 77 20 63 6c 69 65 6e 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 77 68 69 63 68 20 63 61 | ew.client.configuration.which.ca |
11d520 | 6e 20 63 6f 6e 6e 65 63 74 20 74 6f 20 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 6f 6e 20 74 68 | n.connect.to.``interface``.on.th |
11d540 | 69 73 20 72 6f 75 74 65 72 2e 20 54 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 74 | is.router..The.public.key.from.t |
11d560 | 68 65 20 73 70 65 63 69 66 69 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 61 75 74 6f 6d 61 | he.specified.interface.is.automa |
11d580 | 74 69 63 61 6c 6c 79 20 65 78 74 72 61 63 74 65 64 20 61 6e 64 20 65 6d 62 65 64 64 65 64 20 69 | tically.extracted.and.embedded.i |
11d5a0 | 6e 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 55 73 75 61 6c 6c 79 20 74 | nto.the.configuration..Usually.t |
11d5c0 | 68 69 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 69 6e 20 50 45 73 | his.configuration.is.used.in.PEs |
11d5e0 | 20 28 50 72 6f 76 69 64 65 72 20 45 64 67 65 29 20 74 6f 20 72 65 70 6c 61 63 65 20 74 68 65 20 | .(Provider.Edge).to.replace.the. |
11d600 | 69 6e 63 6f 6d 69 6e 67 20 63 75 73 74 6f 6d 65 72 20 41 53 20 6e 75 6d 62 65 72 20 73 6f 20 74 | incoming.customer.AS.number.so.t |
11d620 | 68 65 20 63 6f 6e 6e 65 63 74 65 64 20 43 45 20 28 20 43 75 73 74 6f 6d 65 72 20 45 64 67 65 29 | he.connected.CE.(.Customer.Edge) |
11d640 | 20 63 61 6e 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 20 61 73 20 74 | .can.use.the.same.AS.number.as.t |
11d660 | 68 65 20 6f 74 68 65 72 20 63 75 73 74 6f 6d 65 72 20 73 69 74 65 73 2e 20 54 68 69 73 20 61 6c | he.other.customer.sites..This.al |
11d680 | 6c 6f 77 73 20 63 75 73 74 6f 6d 65 72 73 20 6f 66 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6e | lows.customers.of.the.provider.n |
11d6a0 | 65 74 77 6f 72 6b 20 74 6f 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 41 53 20 6e 75 6d 62 65 72 | etwork.to.use.the.same.AS.number |
11d6c0 | 20 61 63 72 6f 73 73 20 74 68 65 69 72 20 73 69 74 65 73 2e 00 56 48 54 20 28 56 65 72 79 20 48 | .across.their.sites..VHT.(Very.H |
11d6e0 | 69 67 68 20 54 68 72 6f 75 67 68 70 75 74 29 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 28 38 30 | igh.Throughput).capabilities.(80 |
11d700 | 32 2e 31 31 61 63 29 00 56 48 54 20 6c 69 6e 6b 20 61 64 61 70 74 61 74 69 6f 6e 20 63 61 70 61 | 2.11ac).VHT.link.adaptation.capa |
11d720 | 62 69 6c 69 74 69 65 73 00 56 48 54 20 6f 70 65 72 61 74 69 6e 67 20 63 68 61 6e 6e 65 6c 20 63 | bilities.VHT.operating.channel.c |
11d740 | 65 6e 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 65 6e 74 65 72 20 66 72 65 71 20 31 20 | enter.frequency.-.center.freq.1. |
11d760 | 28 66 6f 72 20 75 73 65 20 77 69 74 68 20 38 30 2c 20 38 30 2b 38 30 20 61 6e 64 20 31 36 30 20 | (for.use.with.80,.80+80.and.160. |
11d780 | 6d 6f 64 65 73 29 00 56 48 54 20 6f 70 65 72 61 74 69 6e 67 20 63 68 61 6e 6e 65 6c 20 63 65 6e | modes).VHT.operating.channel.cen |
11d7a0 | 74 65 72 20 66 72 65 71 75 65 6e 63 79 20 2d 20 63 65 6e 74 65 72 20 66 72 65 71 20 32 20 28 66 | ter.frequency.-.center.freq.2.(f |
11d7c0 | 6f 72 20 75 73 65 20 77 69 74 68 20 74 68 65 20 38 30 2b 38 30 20 6d 6f 64 65 29 00 56 4c 41 4e | or.use.with.the.80+80.mode).VLAN |
11d7e0 | 00 56 4c 41 4e 20 31 30 20 6f 6e 20 6d 65 6d 62 65 72 20 69 6e 74 65 72 66 61 63 65 20 60 65 74 | .VLAN.10.on.member.interface.`et |
11d800 | 68 32 60 20 28 41 43 43 45 53 53 20 6d 6f 64 65 29 00 56 4c 41 4e 20 45 78 61 6d 70 6c 65 00 56 | h2`.(ACCESS.mode).VLAN.Example.V |
11d820 | 4c 41 4e 20 4f 70 74 69 6f 6e 73 00 56 4c 41 4e 20 6d 6f 6e 69 74 6f 72 20 66 6f 72 20 61 75 74 | LAN.Options.VLAN.monitor.for.aut |
11d840 | 6f 6d 61 74 69 63 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 | omatic.creation.of.VLAN.interfac |
11d860 | 65 73 20 66 6f 72 20 73 70 65 63 69 66 69 63 20 75 73 65 72 20 6f 6e 20 73 70 65 63 69 66 69 63 | es.for.specific.user.on.specific |
11d880 | 20 3c 69 6e 74 65 72 66 61 63 65 3e 00 56 4c 41 4e 20 6e 61 6d 65 00 56 4c 41 4e 27 73 20 63 61 | .<interface>.VLAN.name.VLAN's.ca |
11d8a0 | 6e 20 62 65 20 63 72 65 61 74 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f 6e 20 74 68 65 | n.be.created.by.Accel-ppp.on.the |
11d8c0 | 20 66 6c 79 20 76 69 61 20 74 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 | .fly.via.the.use.of.a.Kernel.mod |
11d8e0 | 75 6c 65 20 6e 61 6d 65 64 20 60 60 76 6c 61 6e 5f 6d 6f 6e 60 60 2c 20 77 68 69 63 68 20 69 73 | ule.named.``vlan_mon``,.which.is |
11d900 | 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 61 6e 64 20 63 | .monitoring.incoming.vlans.and.c |
11d920 | 72 65 61 74 65 73 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 66 20 72 65 71 | reates.the.necessary.VLAN.if.req |
11d940 | 75 69 72 65 64 20 61 6e 64 20 61 6c 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 | uired.and.allowed..VyOS.supports |
11d960 | 20 74 68 65 20 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 73 20 6f 72 20 | .the.use.of.either.VLAN.ID's.or. |
11d980 | 65 6e 74 69 72 65 20 72 61 6e 67 65 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 63 61 6e 20 62 | entire.ranges,.both.values.can.b |
11d9a0 | 65 20 64 65 66 69 6e 65 64 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 66 6f 72 20 61 | e.defined.at.the.same.time.for.a |
11d9c0 | 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 56 4c 41 4e 27 73 20 63 61 6e 20 62 65 20 63 72 65 61 74 | n.interface..VLAN's.can.be.creat |
11d9e0 | 65 64 20 62 79 20 41 63 63 65 6c 2d 70 70 70 20 6f 6e 20 74 68 65 20 66 6c 79 20 76 69 61 20 74 | ed.by.Accel-ppp.on.the.fly.via.t |
11da00 | 68 65 20 75 73 65 20 6f 66 20 61 20 4b 65 72 6e 65 6c 20 6d 6f 64 75 6c 65 20 6e 61 6d 65 64 20 | he.use.of.a.Kernel.module.named. |
11da20 | 60 76 6c 61 6e 5f 6d 6f 6e 60 2c 20 77 68 69 63 68 20 69 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 | `vlan_mon`,.which.is.monitoring. |
11da40 | 69 6e 63 6f 6d 69 6e 67 20 76 6c 61 6e 73 20 61 6e 64 20 63 72 65 61 74 65 73 20 74 68 65 20 6e | incoming.vlans.and.creates.the.n |
11da60 | 65 63 65 73 73 61 72 79 20 56 4c 41 4e 20 69 66 20 72 65 71 75 69 72 65 64 20 61 6e 64 20 61 6c | ecessary.VLAN.if.required.and.al |
11da80 | 6c 6f 77 65 64 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 68 65 20 75 73 65 20 6f 66 20 | lowed..VyOS.supports.the.use.of. |
11daa0 | 65 69 74 68 65 72 20 56 4c 41 4e 20 49 44 27 73 20 6f 72 20 65 6e 74 69 72 65 20 72 61 6e 67 65 | either.VLAN.ID's.or.entire.range |
11dac0 | 73 2c 20 62 6f 74 68 20 76 61 6c 75 65 73 20 63 61 6e 20 62 65 20 64 65 66 69 6e 65 64 20 61 74 | s,.both.values.can.be.defined.at |
11dae0 | 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 20 66 6f 72 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e | .the.same.time.for.an.interface. |
11db00 | 00 56 4d 77 61 72 65 20 75 73 65 72 73 20 73 68 6f 75 6c 64 20 65 6e 73 75 72 65 20 74 68 61 74 | .VMware.users.should.ensure.that |
11db20 | 20 61 20 56 4d 58 4e 45 54 33 20 61 64 61 70 74 65 72 20 69 73 20 75 73 65 64 2e 20 45 31 30 30 | .a.VMXNET3.adapter.is.used..E100 |
11db40 | 30 20 61 64 61 70 74 65 72 73 20 68 61 76 65 20 6b 6e 6f 77 6e 20 69 73 73 75 65 73 20 77 69 74 | 0.adapters.have.known.issues.wit |
11db60 | 68 20 47 52 45 20 70 72 6f 63 65 73 73 69 6e 67 2e 00 56 50 4e 00 56 50 4e 2d 63 6c 69 65 6e 74 | h.GRE.processing..VPN.VPN-client |
11db80 | 73 20 77 69 6c 6c 20 72 65 71 75 65 73 74 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 72 | s.will.request.configuration.par |
11dba0 | 61 6d 65 74 65 72 73 2c 20 6f 70 74 69 6f 6e 61 6c 6c 79 20 79 6f 75 20 63 61 6e 20 44 4e 53 20 | ameters,.optionally.you.can.DNS. |
11dbc0 | 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 2e 00 56 52 46 00 56 52 46 | parameter.to.the.client..VRF.VRF |
11dbe0 | 20 52 6f 75 74 65 20 4c 65 61 6b 69 6e 67 00 56 52 46 20 61 6e 64 20 4e 41 54 00 56 52 46 20 62 | .Route.Leaking.VRF.and.NAT.VRF.b |
11dc00 | 6c 75 65 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 64 65 66 61 75 6c 74 20 72 6f | lue.routing.table.VRF.default.ro |
11dc20 | 75 74 69 6e 67 20 74 61 62 6c 65 00 56 52 46 20 72 65 64 20 72 6f 75 74 69 6e 67 20 74 61 62 6c | uting.table.VRF.red.routing.tabl |
11dc40 | 65 00 56 52 46 20 72 6f 75 74 65 20 6c 65 61 6b 69 6e 67 00 56 52 46 20 74 6f 70 6f 6c 6f 67 79 | e.VRF.route.leaking.VRF.topology |
11dc60 | 20 65 78 61 6d 70 6c 65 00 56 52 52 50 20 28 56 69 72 74 75 61 6c 20 52 6f 75 74 65 72 20 52 65 | .example.VRRP.(Virtual.Router.Re |
11dc80 | 64 75 6e 64 61 6e 63 79 20 50 72 6f 74 6f 63 6f 6c 29 20 70 72 6f 76 69 64 65 73 20 61 63 74 69 | dundancy.Protocol).provides.acti |
11dca0 | 76 65 2f 62 61 63 6b 75 70 20 72 65 64 75 6e 64 61 6e 63 79 20 66 6f 72 20 72 6f 75 74 65 72 73 | ve/backup.redundancy.for.routers |
11dcc0 | 2e 20 45 76 65 72 79 20 56 52 52 50 20 72 6f 75 74 65 72 20 68 61 73 20 61 20 70 68 79 73 69 63 | ..Every.VRRP.router.has.a.physic |
11dce0 | 61 6c 20 49 50 2f 49 50 76 36 20 61 64 64 72 65 73 73 2c 20 61 6e 64 20 61 20 76 69 72 74 75 61 | al.IP/IPv6.address,.and.a.virtua |
11dd00 | 6c 20 61 64 64 72 65 73 73 2e 20 4f 6e 20 73 74 61 72 74 75 70 2c 20 72 6f 75 74 65 72 73 20 65 | l.address..On.startup,.routers.e |
11dd20 | 6c 65 63 74 20 74 68 65 20 6d 61 73 74 65 72 2c 20 61 6e 64 20 74 68 65 20 72 6f 75 74 65 72 20 | lect.the.master,.and.the.router. |
11dd40 | 77 69 74 68 20 74 68 65 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 62 65 63 6f 6d 65 | with.the.highest.priority.become |
11dd60 | 73 20 74 68 65 20 6d 61 73 74 65 72 20 61 6e 64 20 61 73 73 69 67 6e 73 20 74 68 65 20 76 69 72 | s.the.master.and.assigns.the.vir |
11dd80 | 74 75 61 6c 20 61 64 64 72 65 73 73 20 74 6f 20 69 74 73 20 69 6e 74 65 72 66 61 63 65 2e 20 41 | tual.address.to.its.interface..A |
11dda0 | 6c 6c 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 69 65 73 | ll.routers.with.lower.priorities |
11ddc0 | 20 62 65 63 6f 6d 65 20 62 61 63 6b 75 70 20 72 6f 75 74 65 72 73 2e 20 54 68 65 20 6d 61 73 74 | .become.backup.routers..The.mast |
11dde0 | 65 72 20 74 68 65 6e 20 73 74 61 72 74 73 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 61 6c 69 76 65 | er.then.starts.sending.keepalive |
11de00 | 20 70 61 63 6b 65 74 73 20 74 6f 20 6e 6f 74 69 66 79 20 6f 74 68 65 72 20 72 6f 75 74 65 72 73 | .packets.to.notify.other.routers |
11de20 | 20 74 68 61 74 20 69 74 27 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 49 66 20 74 68 65 20 6d 61 73 | .that.it's.available..If.the.mas |
11de40 | 74 65 72 20 66 61 69 6c 73 20 61 6e 64 20 73 74 6f 70 73 20 73 65 6e 64 69 6e 67 20 6b 65 65 70 | ter.fails.and.stops.sending.keep |
11de60 | 61 6c 69 76 65 20 70 61 63 6b 65 74 73 2c 20 74 68 65 20 72 6f 75 74 65 72 20 77 69 74 68 20 74 | alive.packets,.the.router.with.t |
11de80 | 68 65 20 6e 65 78 74 20 68 69 67 68 65 73 74 20 70 72 69 6f 72 69 74 79 20 62 65 63 6f 6d 65 73 | he.next.highest.priority.becomes |
11dea0 | 20 74 68 65 20 6e 65 77 20 6d 61 73 74 65 72 20 61 6e 64 20 74 61 6b 65 73 20 6f 76 65 72 20 74 | .the.new.master.and.takes.over.t |
11dec0 | 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 20 63 61 6e 20 75 73 65 | he.virtual.address..VRRP.can.use |
11dee0 | 20 74 77 6f 20 6d 6f 64 65 73 3a 20 70 72 65 65 6d 70 74 69 76 65 20 61 6e 64 20 6e 6f 6e 2d 70 | .two.modes:.preemptive.and.non-p |
11df00 | 72 65 65 6d 70 74 69 76 65 2e 20 49 6e 20 74 68 65 20 70 72 65 65 6d 70 74 69 76 65 20 6d 6f 64 | reemptive..In.the.preemptive.mod |
11df20 | 65 2c 20 69 66 20 61 20 72 6f 75 74 65 72 20 77 69 74 68 20 61 20 68 69 67 68 65 72 20 70 72 69 | e,.if.a.router.with.a.higher.pri |
11df40 | 6f 72 69 74 79 20 66 61 69 6c 73 20 61 6e 64 20 74 68 65 6e 20 63 6f 6d 65 73 20 62 61 63 6b 2c | ority.fails.and.then.comes.back, |
11df60 | 20 72 6f 75 74 65 72 73 20 77 69 74 68 20 6c 6f 77 65 72 20 70 72 69 6f 72 69 74 79 20 77 69 6c | .routers.with.lower.priority.wil |
11df80 | 6c 20 67 69 76 65 20 75 70 20 74 68 65 69 72 20 6d 61 73 74 65 72 20 73 74 61 74 75 73 2e 20 49 | l.give.up.their.master.status..I |
11dfa0 | 6e 20 6e 6f 6e 2d 70 72 65 65 6d 70 74 69 76 65 20 6d 6f 64 65 2c 20 74 68 65 20 6e 65 77 6c 79 | n.non-preemptive.mode,.the.newly |
11dfc0 | 20 65 6c 65 63 74 65 64 20 6d 61 73 74 65 72 20 77 69 6c 6c 20 6b 65 65 70 20 74 68 65 20 6d 61 | .elected.master.will.keep.the.ma |
11dfe0 | 73 74 65 72 20 73 74 61 74 75 73 20 61 6e 64 20 74 68 65 20 76 69 72 74 75 61 6c 20 61 64 64 72 | ster.status.and.the.virtual.addr |
11e000 | 65 73 73 20 69 6e 64 65 66 69 6e 69 74 65 6c 79 2e 00 56 52 52 50 20 66 75 6e 63 74 69 6f 6e 61 | ess.indefinitely..VRRP.functiona |
11e020 | 6c 69 74 79 20 63 61 6e 20 62 65 20 65 78 74 65 6e 64 65 64 20 77 69 74 68 20 73 63 72 69 70 74 | lity.can.be.extended.with.script |
11e040 | 73 2e 20 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 74 77 6f 20 6b 69 6e 64 73 20 6f 66 20 73 63 | s..VyOS.supports.two.kinds.of.sc |
11e060 | 72 69 70 74 73 3a 20 68 65 61 6c 74 68 20 63 68 65 63 6b 20 73 63 72 69 70 74 73 20 61 6e 64 20 | ripts:.health.check.scripts.and. |
11e080 | 74 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 2e 20 48 65 61 6c 74 68 20 63 68 65 63 6b | transition.scripts..Health.check |
11e0a0 | 20 73 63 72 69 70 74 73 20 65 78 65 63 75 74 65 20 63 75 73 74 6f 6d 20 63 68 65 63 6b 73 20 69 | .scripts.execute.custom.checks.i |
11e0c0 | 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 6d 61 73 74 65 72 20 72 6f 75 74 65 72 20 | n.addition.to.the.master.router. |
11e0e0 | 72 65 61 63 68 61 62 69 6c 69 74 79 2e 20 54 72 61 6e 73 69 74 69 6f 6e 20 73 63 72 69 70 74 73 | reachability..Transition.scripts |
11e100 | 20 61 72 65 20 65 78 65 63 75 74 65 64 20 77 68 65 6e 20 56 52 52 50 20 73 74 61 74 65 20 63 68 | .are.executed.when.VRRP.state.ch |
11e120 | 61 6e 67 65 73 20 66 72 6f 6d 20 6d 61 73 74 65 72 20 74 6f 20 62 61 63 6b 75 70 20 6f 72 20 66 | anges.from.master.to.backup.or.f |
11e140 | 61 75 6c 74 20 61 6e 64 20 76 69 63 65 20 76 65 72 73 61 20 61 6e 64 20 63 61 6e 20 62 65 20 75 | ault.and.vice.versa.and.can.be.u |
11e160 | 73 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 63 65 72 74 61 69 6e | sed.to.enable.or.disable.certain |
11e180 | 20 73 65 72 76 69 63 65 73 2c 20 66 6f 72 20 65 78 61 6d 70 6c 65 2e 00 56 52 52 50 20 67 72 6f | .services,.for.example..VRRP.gro |
11e1a0 | 75 70 73 20 61 72 65 20 63 72 65 61 74 65 64 20 77 69 74 68 20 74 68 65 20 60 60 73 65 74 20 68 | ups.are.created.with.the.``set.h |
11e1c0 | 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 20 76 72 72 70 20 67 72 6f 75 70 20 24 47 52 4f | igh-availability.vrrp.group.$GRO |
11e1e0 | 55 50 5f 4e 41 4d 45 60 60 20 63 6f 6d 6d 61 6e 64 73 2e 20 54 68 65 20 72 65 71 75 69 72 65 64 | UP_NAME``.commands..The.required |
11e200 | 20 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 69 6e 74 65 72 66 61 63 65 2c 20 76 72 69 64 2c | .parameters.are.interface,.vrid, |
11e220 | 20 61 6e 64 20 61 64 64 72 65 73 73 2e 00 56 52 52 50 20 6b 65 65 70 61 6c 69 76 65 20 70 61 63 | .and.address..VRRP.keepalive.pac |
11e240 | 6b 65 74 73 20 75 73 65 20 6d 75 6c 74 69 63 61 73 74 2c 20 61 6e 64 20 56 52 52 50 20 73 65 74 | kets.use.multicast,.and.VRRP.set |
11e260 | 75 70 73 20 61 72 65 20 6c 69 6d 69 74 65 64 20 74 6f 20 61 20 73 69 6e 67 6c 65 20 64 61 74 61 | ups.are.limited.to.a.single.data |
11e280 | 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 75 | link.layer.segment..You.can.setu |
11e2a0 | 70 20 6d 75 6c 74 69 70 6c 65 20 56 52 52 50 20 67 72 6f 75 70 73 20 28 61 6c 73 6f 20 63 61 6c | p.multiple.VRRP.groups.(also.cal |
11e2c0 | 6c 65 64 20 76 69 72 74 75 61 6c 20 72 6f 75 74 65 72 73 29 2e 20 56 69 72 74 75 61 6c 20 72 6f | led.virtual.routers)..Virtual.ro |
11e2e0 | 75 74 65 72 73 20 61 72 65 20 69 64 65 6e 74 69 66 69 65 64 20 62 79 20 61 20 56 52 49 44 20 28 | uters.are.identified.by.a.VRID.( |
11e300 | 56 69 72 74 75 61 6c 20 52 6f 75 74 65 72 20 49 44 65 6e 74 69 66 69 65 72 29 2e 20 49 66 20 79 | Virtual.Router.IDentifier)..If.y |
11e320 | 6f 75 20 73 65 74 75 70 20 6d 75 6c 74 69 70 6c 65 20 67 72 6f 75 70 73 20 6f 6e 20 74 68 65 20 | ou.setup.multiple.groups.on.the. |
11e340 | 73 61 6d 65 20 69 6e 74 65 72 66 61 63 65 2c 20 74 68 65 69 72 20 56 52 49 44 73 20 6d 75 73 74 | same.interface,.their.VRIDs.must |
11e360 | 20 62 65 20 75 6e 69 71 75 65 20 69 66 20 74 68 65 79 20 75 73 65 20 74 68 65 20 73 61 6d 65 20 | .be.unique.if.they.use.the.same. |
11e380 | 61 64 64 72 65 73 73 20 66 61 6d 69 6c 79 2c 20 62 75 74 20 69 74 27 73 20 70 6f 73 73 69 62 6c | address.family,.but.it's.possibl |
11e3a0 | 65 20 28 65 76 65 6e 20 69 66 20 6e 6f 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 66 6f 72 20 72 | e.(even.if.not.recommended.for.r |
11e3c0 | 65 61 64 61 62 69 6c 69 74 79 20 72 65 61 73 6f 6e 73 29 20 74 6f 20 75 73 65 20 64 75 70 6c 69 | eadability.reasons).to.use.dupli |
11e3e0 | 63 61 74 65 20 56 52 49 44 73 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 69 6e 74 65 72 66 61 63 | cate.VRIDs.on.different.interfac |
11e400 | 65 73 2e 00 56 52 52 50 20 70 72 69 6f 72 69 74 79 20 63 61 6e 20 62 65 20 73 65 74 20 77 69 74 | es..VRRP.priority.can.be.set.wit |
11e420 | 68 20 60 60 70 72 69 6f 72 69 74 79 60 60 20 6f 70 74 69 6f 6e 3a 00 56 54 49 20 2d 20 56 69 72 | h.``priority``.option:.VTI.-.Vir |
11e440 | 74 75 61 6c 20 54 75 6e 6e 65 6c 20 49 6e 74 65 72 66 61 63 65 00 56 58 4c 41 4e 00 56 58 4c 41 | tual.Tunnel.Interface.VXLAN.VXLA |
11e460 | 4e 20 69 73 20 61 6e 20 65 76 6f 6c 75 74 69 6f 6e 20 6f 66 20 65 66 66 6f 72 74 73 20 74 6f 20 | N.is.an.evolution.of.efforts.to. |
11e480 | 73 74 61 6e 64 61 72 64 69 7a 65 20 61 6e 20 6f 76 65 72 6c 61 79 20 65 6e 63 61 70 73 75 6c 61 | standardize.an.overlay.encapsula |
11e4a0 | 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 2e 20 49 74 20 69 6e 63 72 65 61 73 65 73 20 74 68 65 20 | tion.protocol..It.increases.the. |
11e4c0 | 73 63 61 6c 61 62 69 6c 69 74 79 20 75 70 20 74 6f 20 31 36 20 6d 69 6c 6c 69 6f 6e 20 6c 6f 67 | scalability.up.to.16.million.log |
11e4e0 | 69 63 61 6c 20 6e 65 74 77 6f 72 6b 73 20 61 6e 64 20 61 6c 6c 6f 77 73 20 66 6f 72 20 6c 61 79 | ical.networks.and.allows.for.lay |
11e500 | 65 72 20 32 20 61 64 6a 61 63 65 6e 63 79 20 61 63 72 6f 73 73 20 49 50 20 6e 65 74 77 6f 72 6b | er.2.adjacency.across.IP.network |
11e520 | 73 2e 20 4d 75 6c 74 69 63 61 73 74 20 6f 72 20 75 6e 69 63 61 73 74 20 77 69 74 68 20 68 65 61 | s..Multicast.or.unicast.with.hea |
11e540 | 64 2d 65 6e 64 20 72 65 70 6c 69 63 61 74 69 6f 6e 20 28 48 45 52 29 20 69 73 20 75 73 65 64 20 | d-end.replication.(HER).is.used. |
11e560 | 74 6f 20 66 6c 6f 6f 64 20 62 72 6f 61 64 63 61 73 74 2c 20 75 6e 6b 6e 6f 77 6e 20 75 6e 69 63 | to.flood.broadcast,.unknown.unic |
11e580 | 61 73 74 2c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 28 42 55 4d 29 20 74 72 61 66 66 69 63 | ast,.and.multicast.(BUM).traffic |
11e5a0 | 2e 00 56 58 4c 41 4e 20 73 70 65 63 69 66 69 63 20 6f 70 74 69 6f 6e 73 00 56 58 4c 41 4e 20 77 | ..VXLAN.specific.options.VXLAN.w |
11e5c0 | 61 73 20 6f 66 66 69 63 69 61 6c 6c 79 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 79 20 74 68 65 20 | as.officially.documented.by.the. |
11e5e0 | 49 45 54 46 20 69 6e 20 3a 72 66 63 3a 60 37 33 34 38 60 2e 00 56 61 6c 69 64 20 76 61 6c 75 65 | IETF.in.:rfc:`7348`..Valid.value |
11e600 | 73 20 61 72 65 20 30 2e 2e 32 35 35 2e 00 56 61 6c 75 65 00 56 61 6c 75 65 20 74 6f 20 73 65 6e | s.are.0..255..Value.Value.to.sen |
11e620 | 64 20 74 6f 20 52 41 44 49 55 53 20 73 65 72 76 65 72 20 69 6e 20 4e 41 53 2d 49 50 2d 41 64 64 | d.to.RADIUS.server.in.NAS-IP-Add |
11e640 | 72 65 73 73 20 61 74 74 72 69 62 75 74 65 20 61 6e 64 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 | ress.attribute.and.to.be.matched |
11e660 | 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 74 73 2e 20 41 6c 73 6f 20 44 4d 2f 43 6f 41 | .in.DM/CoA.requests..Also.DM/CoA |
11e680 | 20 73 65 72 76 65 72 20 77 69 6c 6c 20 62 69 6e 64 20 74 6f 20 74 68 61 74 20 61 64 64 72 65 73 | .server.will.bind.to.that.addres |
11e6a0 | 73 2e 00 56 61 6c 75 65 20 74 6f 20 73 65 6e 64 20 74 6f 20 52 41 44 49 55 53 20 73 65 72 76 65 | s..Value.to.send.to.RADIUS.serve |
11e6c0 | 72 20 69 6e 20 4e 41 53 2d 49 64 65 6e 74 69 66 69 65 72 20 61 74 74 72 69 62 75 74 65 20 61 6e | r.in.NAS-Identifier.attribute.an |
11e6e0 | 64 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 69 6e 20 44 4d 2f 43 6f 41 20 72 65 71 75 65 73 | d.to.be.matched.in.DM/CoA.reques |
11e700 | 74 73 2e 00 56 65 72 69 66 69 63 61 74 69 6f 6e 00 56 65 72 69 66 69 63 61 74 69 6f 6e 3a 00 56 | ts..Verification.Verification:.V |
11e720 | 65 72 69 66 79 20 74 68 61 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 61 72 65 20 68 69 74 74 69 | erify.that.connections.are.hitti |
11e740 | 6e 67 20 74 68 65 20 72 75 6c 65 20 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 3a 00 56 65 72 73 69 | ng.the.rule.on.both.sides:.Versi |
11e760 | 6f 6e 00 56 69 72 74 75 61 6c 20 45 74 68 65 72 6e 65 74 00 56 69 72 74 75 61 6c 20 53 65 72 76 | on.Virtual.Ethernet.Virtual.Serv |
11e780 | 65 72 20 61 6c 6c 6f 77 73 20 74 6f 20 4c 6f 61 64 2d 62 61 6c 61 6e 63 65 20 74 72 61 66 66 69 | er.allows.to.Load-balance.traffi |
11e7a0 | 63 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 3a 70 6f | c.destination.virtual-address:po |
11e7c0 | 72 74 20 62 65 74 77 65 65 6e 20 73 65 76 65 72 61 6c 20 72 65 61 6c 20 73 65 72 76 65 72 73 2e | rt.between.several.real.servers. |
11e7e0 | 00 56 69 72 74 75 61 6c 2d 73 65 72 76 65 72 00 56 69 72 74 75 61 6c 2d 73 65 72 76 65 72 20 63 | .Virtual-server.Virtual-server.c |
11e800 | 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 72 65 64 20 77 69 74 68 20 56 52 52 50 20 76 69 72 74 75 | an.be.configured.with.VRRP.virtu |
11e820 | 61 6c 20 61 64 64 72 65 73 73 20 6f 72 20 77 69 74 68 6f 75 74 20 56 52 52 50 2e 00 56 6f 6c 75 | al.address.or.without.VRRP..Volu |
11e840 | 6d 65 20 69 73 20 65 69 74 68 65 72 20 6d 6f 75 6e 74 65 64 20 61 73 20 72 77 20 28 72 65 61 64 | me.is.either.mounted.as.rw.(read |
11e860 | 2d 77 72 69 74 65 20 2d 20 64 65 66 61 75 6c 74 29 20 6f 72 20 72 6f 20 28 72 65 61 64 2d 6f 6e | -write.-.default).or.ro.(read-on |
11e880 | 6c 79 29 00 56 79 4f 53 20 31 2e 31 20 73 75 70 70 6f 72 74 65 64 20 6c 6f 67 69 6e 20 61 73 20 | ly).VyOS.1.1.supported.login.as. |
11e8a0 | 75 73 65 72 20 60 60 72 6f 6f 74 60 60 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 72 65 6d | user.``root``..This.has.been.rem |
11e8c0 | 6f 76 65 64 20 64 75 65 20 74 6f 20 74 69 67 68 74 65 72 20 73 65 63 75 72 69 74 79 20 69 6e 20 | oved.due.to.tighter.security.in. |
11e8e0 | 56 79 4f 53 20 31 2e 32 2e 00 56 79 4f 53 20 31 2e 33 20 28 65 71 75 75 6c 65 75 73 29 20 73 75 | VyOS.1.2..VyOS.1.3.(equuleus).su |
11e900 | 70 70 6f 72 74 73 20 44 48 43 50 76 36 2d 50 44 20 28 3a 72 66 63 3a 60 33 36 33 33 60 29 2e 20 | pports.DHCPv6-PD.(:rfc:`3633`).. |
11e920 | 44 48 43 50 76 36 20 50 72 65 66 69 78 20 44 65 6c 65 67 61 74 69 6f 6e 20 69 73 20 73 75 70 70 | DHCPv6.Prefix.Delegation.is.supp |
11e940 | 6f 72 74 65 64 20 62 79 20 6d 6f 73 74 20 49 53 50 73 20 77 68 6f 20 70 72 6f 76 69 64 65 20 6e | orted.by.most.ISPs.who.provide.n |
11e960 | 61 74 69 76 65 20 49 50 76 36 20 66 6f 72 20 63 6f 6e 73 75 6d 65 72 73 20 6f 6e 20 66 69 78 65 | ative.IPv6.for.consumers.on.fixe |
11e980 | 64 20 6e 65 74 77 6f 72 6b 73 2e 00 56 79 4f 53 20 31 2e 34 20 28 73 61 67 69 74 74 61 29 20 69 | d.networks..VyOS.1.4.(sagitta).i |
11e9a0 | 6e 74 72 6f 64 75 63 65 64 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 73 75 70 70 6f 72 | ntroduced.dynamic.routing.suppor |
11e9c0 | 74 20 66 6f 72 20 56 52 46 73 2e 00 56 79 4f 53 20 31 2e 34 20 63 68 61 6e 67 65 64 20 74 68 65 | t.for.VRFs..VyOS.1.4.changed.the |
11e9e0 | 20 77 61 79 20 69 6e 20 68 6f 77 20 65 6e 63 72 79 74 69 6f 6e 20 6b 65 79 73 20 6f 72 20 63 65 | .way.in.how.encrytion.keys.or.ce |
11ea00 | 72 74 69 66 69 63 61 74 65 73 20 61 72 65 20 73 74 6f 72 65 64 20 6f 6e 20 74 68 65 20 73 79 73 | rtificates.are.stored.on.the.sys |
11ea20 | 74 65 6d 2e 20 49 6e 20 74 68 65 20 70 72 65 20 56 79 4f 53 20 31 2e 34 20 65 72 61 2c 20 63 65 | tem..In.the.pre.VyOS.1.4.era,.ce |
11ea40 | 72 74 69 66 69 63 61 74 65 73 20 67 6f 74 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 2f 63 6f 6e | rtificates.got.stored.under./con |
11ea60 | 66 69 67 20 61 6e 64 20 65 76 65 72 79 20 73 65 72 76 69 63 65 20 72 65 66 65 72 65 6e 63 65 64 | fig.and.every.service.referenced |
11ea80 | 20 61 20 66 69 6c 65 2e 20 54 68 61 74 20 6d 61 64 65 20 63 6f 70 79 69 6e 67 20 61 20 72 75 6e | .a.file..That.made.copying.a.run |
11eaa0 | 6e 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 72 6f 6d 20 73 79 73 74 65 6d 20 41 | ning.configuration.from.system.A |
11eac0 | 20 74 6f 20 73 79 73 74 65 6d 20 42 20 61 20 62 69 74 20 68 61 72 64 65 72 2c 20 61 73 20 79 6f | .to.system.B.a.bit.harder,.as.yo |
11eae0 | 75 20 68 61 64 20 74 6f 20 63 6f 70 79 20 74 68 65 20 66 69 6c 65 73 20 61 6e 64 20 74 68 65 69 | u.had.to.copy.the.files.and.thei |
11eb00 | 72 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 62 79 20 68 61 6e 64 2e 00 56 79 4f 53 20 31 2e 34 20 | r.permissions.by.hand..VyOS.1.4. |
11eb20 | 75 73 65 73 20 63 68 72 6f 6e 79 20 69 6e 73 74 65 61 64 20 6f 66 20 6e 74 70 64 20 28 73 65 65 | uses.chrony.instead.of.ntpd.(see |
11eb40 | 20 3a 76 79 74 61 73 6b 3a 60 54 33 30 30 38 60 29 20 77 68 69 63 68 20 77 69 6c 6c 20 6e 6f 20 | .:vytask:`T3008`).which.will.no. |
11eb60 | 6c 6f 6e 67 65 72 20 61 63 63 65 70 74 20 61 6e 6f 6e 79 6d 6f 75 73 20 4e 54 50 20 72 65 71 75 | longer.accept.anonymous.NTP.requ |
11eb80 | 65 73 74 73 20 61 73 20 69 6e 20 56 79 4f 53 20 31 2e 33 2e 20 41 6c 6c 20 63 6f 6e 66 69 67 75 | ests.as.in.VyOS.1.3..All.configu |
11eba0 | 72 61 74 69 6f 6e 73 20 77 69 6c 6c 20 62 65 20 6d 69 67 72 61 74 65 64 20 74 6f 20 6b 65 65 70 | rations.will.be.migrated.to.keep |
11ebc0 | 20 74 68 65 20 61 6e 6f 6e 79 6d 6f 75 73 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 46 6f | .the.anonymous.functionality..Fo |
11ebe0 | 72 20 6e 65 77 20 73 65 74 75 70 73 20 69 66 20 79 6f 75 20 68 61 76 65 20 63 6c 69 65 6e 74 73 | r.new.setups.if.you.have.clients |
11ec00 | 20 75 73 69 6e 67 20 79 6f 75 72 20 56 79 4f 53 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 61 73 | .using.your.VyOS.installation.as |
11ec20 | 20 4e 54 50 20 73 65 72 76 65 72 2c 20 79 6f 75 20 6d 75 73 74 20 73 70 65 63 69 66 79 20 74 68 | .NTP.server,.you.must.specify.th |
11ec40 | 65 20 60 61 6c 6c 6f 77 2d 63 6c 69 65 6e 74 60 20 64 69 72 65 63 74 69 76 65 2e 00 56 79 4f 53 | e.`allow-client`.directive..VyOS |
11ec60 | 20 41 72 69 73 74 61 20 45 4f 53 20 73 65 74 75 70 00 56 79 4f 53 20 45 53 50 20 67 72 6f 75 70 | .Arista.EOS.setup.VyOS.ESP.group |
11ec80 | 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 74 69 6f 6e 73 3a 00 56 79 4f 53 20 46 69 65 6c | .has.the.next.options:.VyOS.Fiel |
11eca0 | 64 00 56 79 4f 53 20 49 4b 45 20 67 72 6f 75 70 20 68 61 73 20 74 68 65 20 6e 65 78 74 20 6f 70 | d.VyOS.IKE.group.has.the.next.op |
11ecc0 | 74 69 6f 6e 73 3a 00 56 79 4f 53 20 4d 49 42 73 00 56 79 4f 53 20 4e 41 54 36 36 20 44 48 43 50 | tions:.VyOS.MIBs.VyOS.NAT66.DHCP |
11ece0 | 76 36 20 75 73 69 6e 67 20 61 20 64 75 6d 6d 79 20 69 6e 74 65 72 66 61 63 65 00 56 79 4f 53 20 | v6.using.a.dummy.interface.VyOS. |
11ed00 | 4e 41 54 36 36 20 53 69 6d 70 6c 65 20 43 6f 6e 66 69 67 75 72 65 00 56 79 4f 53 20 4e 65 74 77 | NAT66.Simple.Configure.VyOS.Netw |
11ed20 | 6f 72 6b 20 45 6d 75 6c 61 74 6f 72 20 70 6f 6c 69 63 79 20 65 6d 75 6c 61 74 65 73 20 74 68 65 | ork.Emulator.policy.emulates.the |
11ed40 | 20 63 6f 6e 64 69 74 69 6f 6e 73 20 79 6f 75 20 63 61 6e 20 73 75 66 66 65 72 20 69 6e 20 61 20 | .conditions.you.can.suffer.in.a. |
11ed60 | 72 65 61 6c 20 6e 65 74 77 6f 72 6b 2e 20 59 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 20 74 | real.network..You.will.be.able.t |
11ed80 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 72 61 74 65 2c 20 62 75 | o.configure.things.like.rate,.bu |
11eda0 | 72 73 74 2c 20 64 65 6c 61 79 2c 20 70 61 63 6b 65 74 20 6c 6f 73 73 2c 20 70 61 63 6b 65 74 20 | rst,.delay,.packet.loss,.packet. |
11edc0 | 63 6f 72 72 75 70 74 69 6f 6e 20 6f 72 20 70 61 63 6b 65 74 20 72 65 6f 72 64 65 72 69 6e 67 2e | corruption.or.packet.reordering. |
11ede0 | 00 56 79 4f 53 20 4f 70 74 69 6f 6e 00 56 79 4f 53 20 50 6f 6c 69 63 79 2d 42 61 73 65 64 20 52 | .VyOS.Option.VyOS.Policy-Based.R |
11ee00 | 6f 75 74 69 6e 67 20 28 50 42 52 29 20 77 6f 72 6b 73 20 62 79 20 6d 61 74 63 68 69 6e 67 20 73 | outing.(PBR).works.by.matching.s |
11ee20 | 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 72 61 6e 67 65 73 20 61 6e 64 20 66 6f 72 77 | ource.IP.address.ranges.and.forw |
11ee40 | 61 72 64 69 6e 67 20 74 68 65 20 74 72 61 66 66 69 63 20 75 73 69 6e 67 20 64 69 66 66 65 72 65 | arding.the.traffic.using.differe |
11ee60 | 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 2e 00 56 79 4f 53 20 53 4e 4d 50 20 73 75 70 | nt.routing.tables..VyOS.SNMP.sup |
11ee80 | 70 6f 72 74 73 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 56 79 4f 53 20 61 | ports.both.IPv4.and.IPv6..VyOS.a |
11eea0 | 6c 73 6f 20 63 6f 6d 65 73 20 77 69 74 68 20 61 20 62 75 69 6c 64 20 69 6e 20 53 53 54 50 20 73 | lso.comes.with.a.build.in.SSTP.s |
11eec0 | 65 72 76 65 72 2c 20 73 65 65 20 3a 72 65 66 3a 60 73 73 74 70 60 2e 00 56 79 4f 53 20 61 6c 73 | erver,.see.:ref:`sstp`..VyOS.als |
11eee0 | 6f 20 70 72 6f 76 69 64 65 73 20 44 48 43 50 76 36 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 6f | o.provides.DHCPv6.server.functio |
11ef00 | 6e 61 6c 69 74 79 20 77 68 69 63 68 20 69 73 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 74 68 69 | nality.which.is.described.in.thi |
11ef20 | 73 20 73 65 63 74 69 6f 6e 2e 00 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 28 63 | s.section..VyOS.also.supports.(c |
11ef40 | 75 72 72 65 6e 74 6c 79 29 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f 64 65 73 20 6f 66 | urrently).two.different.modes.of |
11ef60 | 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 | .authentication,.local.and.RADIU |
11ef80 | 53 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 6c 20 75 73 65 72 20 6e 61 | S..To.create.a.new.local.user.na |
11efa0 | 6d 65 64 20 60 60 76 79 6f 73 60 60 20 77 69 74 68 20 70 61 73 73 77 6f 72 64 20 60 60 76 79 6f | med.``vyos``.with.password.``vyo |
11efc0 | 73 60 60 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 | s``.use.the.following.commands.. |
11efe0 | 56 79 4f 53 20 61 6c 73 6f 20 73 75 70 70 6f 72 74 73 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 | VyOS.also.supports.two.different |
11f000 | 20 6d 6f 64 65 73 20 6f 66 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2c 20 6c 6f 63 61 6c 20 | .modes.of.authentication,.local. |
11f020 | 61 6e 64 20 52 41 44 49 55 53 2e 20 54 6f 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6c 6f 63 61 | and.RADIUS..To.create.a.new.loca |
11f040 | 6c 20 75 73 65 72 20 6e 61 6d 65 64 20 22 76 79 6f 73 22 20 77 69 74 68 20 61 20 70 61 73 73 77 | l.user.named."vyos".with.a.passw |
11f060 | 6f 72 64 20 6f 66 20 22 76 79 6f 73 22 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | ord.of."vyos".use.the.following. |
11f080 | 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 63 61 6e 20 61 6c 73 6f 20 72 75 6e 20 69 6e 20 44 | commands..VyOS.can.also.run.in.D |
11f0a0 | 4d 56 50 4e 20 73 70 6f 6b 65 20 6d 6f 64 65 2e 00 56 79 4f 53 20 63 61 6e 20 62 65 20 63 6f 6e | MVPN.spoke.mode..VyOS.can.be.con |
11f0c0 | 66 69 67 75 72 65 64 20 74 6f 20 74 72 61 63 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 75 73 69 | figured.to.track.connections.usi |
11f0e0 | 6e 67 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 73 75 62 73 79 | ng.the.connection.tracking.subsy |
11f100 | 73 74 65 6d 2e 20 43 6f 6e 6e 65 63 74 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 62 65 63 6f 6d 65 | stem..Connection.tracking.become |
11f120 | 73 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 6f 6e 63 65 20 65 69 74 68 65 72 20 73 74 61 74 65 66 | s.operational.once.either.statef |
11f140 | 75 6c 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 | ul.firewall.or.NAT.is.configured |
11f160 | 2e 00 56 79 4f 53 20 63 61 6e 20 6e 6f 74 20 6f 6e 6c 79 20 61 63 74 20 61 73 20 61 6e 20 4f 70 | ..VyOS.can.not.only.act.as.an.Op |
11f180 | 65 6e 56 50 4e 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 6f 72 20 73 65 72 76 65 72 20 66 6f 72 | enVPN.site-to-site.or.server.for |
11f1a0 | 20 6d 75 6c 74 69 70 6c 65 20 63 6c 69 65 6e 74 73 2e 20 59 6f 75 20 63 61 6e 20 69 6e 64 65 65 | .multiple.clients..You.can.indee |
11f1c0 | 64 20 61 6c 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 6e 79 20 56 79 4f 53 20 4f 70 65 6e 56 50 | d.also.configure.any.VyOS.OpenVP |
11f1e0 | 4e 20 69 6e 74 65 72 66 61 63 65 20 61 73 20 61 6e 20 4f 70 65 6e 56 50 4e 20 63 6c 69 65 6e 74 | N.interface.as.an.OpenVPN.client |
11f200 | 20 63 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 61 20 56 79 4f 53 20 4f 70 65 6e 56 50 4e 20 73 65 | .connecting.to.a.VyOS.OpenVPN.se |
11f220 | 72 76 65 72 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 4f 70 65 6e 56 50 4e 20 73 65 72 76 65 72 | rver.or.any.other.OpenVPN.server |
11f240 | 2e 00 56 79 4f 53 20 64 65 66 61 75 6c 74 20 77 69 6c 6c 20 62 65 20 60 61 75 74 6f 60 2e 00 56 | ..VyOS.default.will.be.`auto`..V |
11f260 | 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d | yOS.does.not.have.a.special.comm |
11f280 | 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 2e 20 | and.to.start.the.Babel.process.. |
11f2a0 | 54 68 65 20 42 61 62 65 6c 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 | The.Babel.process.starts.when.th |
11f2c0 | 65 20 66 69 72 73 74 20 42 61 62 65 6c 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 | e.first.Babel.enabled.interface. |
11f2e0 | 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 | is.configured..VyOS.does.not.hav |
11f300 | 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 73 74 61 72 74 20 74 68 65 | e.a.special.command.to.start.the |
11f320 | 20 4f 53 50 46 20 70 72 6f 63 65 73 73 2e 20 54 68 65 20 4f 53 50 46 20 70 72 6f 63 65 73 73 20 | .OSPF.process..The.OSPF.process. |
11f340 | 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 20 66 69 72 73 74 20 6f 73 70 66 20 65 6e 61 62 6c | starts.when.the.first.ospf.enabl |
11f360 | 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 | ed.interface.is.configured..VyOS |
11f380 | 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 20 61 20 73 70 65 63 69 61 6c 20 63 6f 6d 6d 61 6e 64 | .does.not.have.a.special.command |
11f3a0 | 20 74 6f 20 73 74 61 72 74 20 74 68 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 2e 20 54 68 | .to.start.the.OSPFv3.process..Th |
11f3c0 | 65 20 4f 53 50 46 76 33 20 70 72 6f 63 65 73 73 20 73 74 61 72 74 73 20 77 68 65 6e 20 74 68 65 | e.OSPFv3.process.starts.when.the |
11f3e0 | 20 66 69 72 73 74 20 6f 73 70 66 20 65 6e 61 62 6c 65 64 20 69 6e 74 65 72 66 61 63 65 20 69 73 | .first.ospf.enabled.interface.is |
11f400 | 20 63 6f 6e 66 69 67 75 72 65 64 2e 00 56 79 4f 53 20 66 61 63 69 6c 69 74 61 74 65 73 20 49 50 | .configured..VyOS.facilitates.IP |
11f420 | 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a 50 49 4d 20 53 | .Multicast.by.supporting.**PIM.S |
11f440 | 70 61 72 73 65 20 4d 6f 64 65 2a 2a 2c 20 2a 2a 49 47 4d 50 2a 2a 20 61 6e 64 20 2a 2a 49 47 4d | parse.Mode**,.**IGMP**.and.**IGM |
11f460 | 50 2d 50 72 6f 78 79 2a 2a 2e 00 56 79 4f 53 20 66 61 63 69 6c 69 74 61 74 65 73 20 49 50 76 36 | P-Proxy**..VyOS.facilitates.IPv6 |
11f480 | 20 4d 75 6c 74 69 63 61 73 74 20 62 79 20 73 75 70 70 6f 72 74 69 6e 67 20 2a 2a 50 49 4d 76 36 | .Multicast.by.supporting.**PIMv6 |
11f4a0 | 2a 2a 20 61 6e 64 20 2a 2a 4d 4c 44 2a 2a 2e 00 56 79 4f 53 20 69 6e 63 6c 75 64 65 73 20 74 68 | **.and.**MLD**..VyOS.includes.th |
11f4c0 | 65 20 46 61 73 74 4e 65 74 4d 6f 6e 20 43 6f 6d 6d 75 6e 69 74 79 20 45 64 69 74 69 6f 6e 2e 00 | e.FastNetMon.Community.Edition.. |
11f4e0 | 56 79 4f 53 20 69 73 20 61 62 6c 65 20 74 6f 20 75 70 64 61 74 65 20 61 20 72 65 6d 6f 74 65 20 | VyOS.is.able.to.update.a.remote. |
11f500 | 44 4e 53 20 72 65 63 6f 72 64 20 77 68 65 6e 20 61 6e 20 69 6e 74 65 72 66 61 63 65 20 67 65 74 | DNS.record.when.an.interface.get |
11f520 | 73 20 61 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 | s.a.new.IP.address..In.order.to. |
11f540 | 64 6f 20 73 6f 2c 20 56 79 4f 53 20 69 6e 63 6c 75 64 65 73 20 64 64 63 6c 69 65 6e 74 5f 2c 20 | do.so,.VyOS.includes.ddclient_,. |
11f560 | 61 20 50 65 72 6c 20 73 63 72 69 70 74 20 77 72 69 74 74 65 6e 20 66 6f 72 20 74 68 69 73 20 6f | a.Perl.script.written.for.this.o |
11f580 | 6e 6c 79 20 6f 6e 65 20 70 75 72 70 6f 73 65 2e 00 56 79 4f 53 20 69 73 20 61 6c 73 6f 20 61 62 | nly.one.purpose..VyOS.is.also.ab |
11f5a0 | 6c 65 20 74 6f 20 75 73 65 20 61 6e 79 20 73 65 72 76 69 63 65 20 72 65 6c 79 69 6e 67 20 6f 6e | le.to.use.any.service.relying.on |
11f5c0 | 20 70 72 6f 74 6f 63 6f 6c 73 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 64 64 63 6c 69 65 6e 74 | .protocols.supported.by.ddclient |
11f5e0 | 2e 00 56 79 4f 53 20 69 74 73 65 6c 66 20 73 75 70 70 6f 72 74 73 20 53 4e 4d 50 76 32 5f 20 28 | ..VyOS.itself.supports.SNMPv2_.( |
11f600 | 76 65 72 73 69 6f 6e 20 32 29 20 61 6e 64 20 53 4e 4d 50 76 33 5f 20 28 76 65 72 73 69 6f 6e 20 | version.2).and.SNMPv3_.(version. |
11f620 | 33 29 20 77 68 65 72 65 20 74 68 65 20 6c 61 74 65 72 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 | 3).where.the.later.is.recommende |
11f640 | 64 20 62 65 63 61 75 73 65 20 6f 66 20 69 6d 70 72 6f 76 65 64 20 73 65 63 75 72 69 74 79 20 28 | d.because.of.improved.security.( |
11f660 | 6f 70 74 69 6f 6e 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 61 6e 64 20 65 6e 63 72 | optional.authentication.and.encr |
11f680 | 79 70 74 69 6f 6e 29 2e 00 56 79 4f 53 20 6c 65 74 73 20 79 6f 75 20 63 6f 6e 74 72 6f 6c 20 74 | yption)..VyOS.lets.you.control.t |
11f6a0 | 72 61 66 66 69 63 20 69 6e 20 6d 61 6e 79 20 64 69 66 66 65 72 65 6e 74 20 77 61 79 73 2c 20 68 | raffic.in.many.different.ways,.h |
11f6c0 | 65 72 65 20 77 65 20 77 69 6c 6c 20 63 6f 76 65 72 20 65 76 65 72 79 20 70 6f 73 73 69 62 69 6c | ere.we.will.cover.every.possibil |
11f6e0 | 69 74 79 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 61 73 20 6d 61 6e 79 20 70 | ity..You.can.configure.as.many.p |
11f700 | 6f 6c 69 63 69 65 73 20 61 73 20 79 6f 75 20 77 61 6e 74 2c 20 62 75 74 20 79 6f 75 20 77 69 6c | olicies.as.you.want,.but.you.wil |
11f720 | 6c 20 6f 6e 6c 79 20 62 65 20 61 62 6c 65 20 74 6f 20 61 70 70 6c 79 20 6f 6e 65 20 70 6f 6c 69 | l.only.be.able.to.apply.one.poli |
11f740 | 63 79 20 70 65 72 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 20 28 | cy.per.interface.and.direction.( |
11f760 | 69 6e 62 6f 75 6e 64 20 6f 72 20 6f 75 74 62 6f 75 6e 64 29 2e 00 56 79 4f 53 20 6d 61 6b 65 73 | inbound.or.outbound)..VyOS.makes |
11f780 | 20 75 73 65 20 6f 66 20 3a 61 62 62 72 3a 60 46 52 52 20 28 46 72 65 65 20 52 61 6e 67 65 20 52 | .use.of.:abbr:`FRR.(Free.Range.R |
11f7a0 | 6f 75 74 69 6e 67 29 60 20 61 6e 64 20 77 65 20 77 6f 75 6c 64 20 6c 69 6b 65 20 74 6f 20 74 68 | outing)`.and.we.would.like.to.th |
11f7c0 | 61 6e 6b 20 74 68 65 6d 20 66 6f 72 20 74 68 65 69 72 20 65 66 66 6f 72 74 21 00 56 79 4f 53 20 | ank.them.for.their.effort!.VyOS. |
11f7e0 | 6d 61 6b 65 73 20 75 73 65 20 6f 66 20 4c 69 6e 75 78 20 60 6e 65 74 66 69 6c 74 65 72 20 3c 68 | makes.use.of.Linux.`netfilter.<h |
11f800 | 74 74 70 73 3a 2f 2f 6e 65 74 66 69 6c 74 65 72 2e 6f 72 67 2f 3e 60 5f 20 66 6f 72 20 70 61 63 | ttps://netfilter.org/>`_.for.pac |
11f820 | 6b 65 74 20 66 69 6c 74 65 72 69 6e 67 2e 00 56 79 4f 53 20 6e 6f 74 20 6f 6e 6c 79 20 63 61 6e | ket.filtering..VyOS.not.only.can |
11f840 | 20 6e 6f 77 20 6d 61 6e 61 67 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 69 73 73 75 65 64 20 | .now.manage.certificates.issued. |
11f860 | 62 79 20 33 72 64 20 70 61 72 74 79 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 68 6f 72 69 | by.3rd.party.Certificate.Authori |
11f880 | 74 69 65 73 2c 20 69 74 20 63 61 6e 20 61 6c 73 6f 20 61 63 74 20 61 73 20 61 20 43 41 20 6f 6e | ties,.it.can.also.act.as.a.CA.on |
11f8a0 | 20 69 74 73 20 6f 77 6e 2e 20 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 79 6f 75 72 20 6f 77 | .its.own..You.can.create.your.ow |
11f8c0 | 6e 20 72 6f 6f 74 20 43 41 20 61 6e 64 20 73 69 67 6e 20 6b 65 79 73 20 77 69 74 68 20 69 74 20 | n.root.CA.and.sign.keys.with.it. |
11f8e0 | 62 79 20 6d 61 6b 69 6e 67 20 75 73 65 20 6f 66 20 73 6f 6d 65 20 73 69 6d 70 6c 65 20 6f 70 2d | by.making.use.of.some.simple.op- |
11f900 | 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2e 00 56 79 4f 53 20 6e 6f 77 20 61 6c 73 6f 20 68 61 73 | mode.commands..VyOS.now.also.has |
11f920 | 20 74 68 65 20 61 62 69 6c 69 74 79 20 74 6f 20 63 72 65 61 74 65 20 43 41 73 2c 20 6b 65 79 73 | .the.ability.to.create.CAs,.keys |
11f940 | 2c 20 44 69 66 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 61 6e 64 20 6f 74 68 65 72 20 6b 65 79 70 61 | ,.Diffie-Hellman.and.other.keypa |
11f960 | 69 72 73 20 66 72 6f 6d 20 61 6e 20 65 61 73 79 20 74 6f 20 61 63 63 65 73 73 20 6f 70 65 72 61 | irs.from.an.easy.to.access.opera |
11f980 | 74 69 6f 6e 61 6c 20 6c 65 76 65 6c 20 63 6f 6d 6d 61 6e 64 2e 00 56 79 4f 53 20 6f 70 65 72 61 | tional.level.command..VyOS.opera |
11f9a0 | 74 69 6f 6e 61 6c 20 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 20 61 72 65 20 6e 6f 74 20 6f 6e 6c | tional.mode.commands.are.not.onl |
11f9c0 | 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 6b 65 79 73 20 | y.available.for.generating.keys. |
11f9e0 | 62 75 74 20 61 6c 73 6f 20 74 6f 20 64 69 73 70 6c 61 79 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 | but.also.to.display.them..VyOS.p |
11fa00 | 72 6f 76 69 64 65 20 61 6e 20 48 54 54 50 20 41 50 49 2e 20 59 6f 75 20 63 61 6e 20 75 73 65 20 | rovide.an.HTTP.API..You.can.use. |
11fa20 | 69 74 20 74 6f 20 65 78 65 63 75 74 65 20 6f 70 2d 6d 6f 64 65 20 63 6f 6d 6d 61 6e 64 73 2c 20 | it.to.execute.op-mode.commands,. |
11fa40 | 75 70 64 61 74 65 20 56 79 4f 53 2c 20 73 65 74 20 6f 72 20 64 65 6c 65 74 65 20 63 6f 6e 66 69 | update.VyOS,.set.or.delete.confi |
11fa60 | 67 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 44 4e 53 20 69 6e 66 72 61 73 74 72 75 63 74 | g..VyOS.provides.DNS.infrastruct |
11fa80 | 75 72 65 20 66 6f 72 20 73 6d 61 6c 6c 20 6e 65 74 77 6f 72 6b 73 2e 20 49 74 20 69 73 20 64 65 | ure.for.small.networks..It.is.de |
11faa0 | 73 69 67 6e 65 64 20 74 6f 20 62 65 20 6c 69 67 68 74 77 65 69 67 68 74 20 61 6e 64 20 68 61 76 | signed.to.be.lightweight.and.hav |
11fac0 | 65 20 61 20 73 6d 61 6c 6c 20 66 6f 6f 74 70 72 69 6e 74 2c 20 73 75 69 74 61 62 6c 65 20 66 6f | e.a.small.footprint,.suitable.fo |
11fae0 | 72 20 72 65 73 6f 75 72 63 65 20 63 6f 6e 73 74 72 61 69 6e 65 64 20 72 6f 75 74 65 72 73 20 61 | r.resource.constrained.routers.a |
11fb00 | 6e 64 20 66 69 72 65 77 61 6c 6c 73 2e 20 46 6f 72 20 74 68 69 73 20 77 65 20 75 74 69 6c 69 7a | nd.firewalls..For.this.we.utiliz |
11fb20 | 65 20 50 6f 77 65 72 44 4e 53 20 72 65 63 75 72 73 6f 72 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 | e.PowerDNS.recursor..VyOS.provid |
11fb40 | 65 73 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 6c 69 74 79 20 73 75 70 70 6f 72 74 20 66 6f 72 | es.High.Availability.support.for |
11fb60 | 20 44 48 43 50 20 73 65 72 76 65 72 2e 20 44 48 43 50 20 48 69 67 68 20 41 76 61 69 6c 61 62 69 | .DHCP.server..DHCP.High.Availabi |
11fb80 | 6c 69 74 79 20 63 61 6e 20 61 63 74 20 69 6e 20 74 77 6f 20 64 69 66 66 65 72 65 6e 74 20 6d 6f | lity.can.act.in.two.different.mo |
11fba0 | 64 65 73 3a 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 61 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 | des:.VyOS.provides.a.command.to. |
11fbc0 | 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 75 73 | generate.a.connection.profile.us |
11fbe0 | 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 77 69 6c 6c 20 | ed.by.Windows.clients.that.will. |
11fc00 | 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 22 72 77 22 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f | connect.to.the."rw".connection.o |
11fc20 | 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 | n.our.VyOS.server..VyOS.provides |
11fc40 | 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 | .policies.commands.exclusively.f |
11fc60 | 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e | or.BGP.traffic.filtering.and.man |
11fc80 | 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 61 73 2d 70 61 74 68 2d 6c 69 73 74 2a 2a 20 69 73 20 6f | ipulation:.**as-path-list**.is.o |
11fca0 | 6e 65 20 6f 66 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 | ne.of.them..VyOS.provides.polici |
11fcc0 | 65 73 20 63 6f 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 | es.commands.exclusively.for.BGP. |
11fce0 | 74 72 61 66 66 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 | traffic.filtering.and.manipulati |
11fd00 | 6f 6e 3a 20 2a 2a 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 | on:.**community-list**.is.one.of |
11fd20 | 20 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f | .them..VyOS.provides.policies.co |
11fd40 | 6d 6d 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 | mmands.exclusively.for.BGP.traff |
11fd60 | 69 63 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a | ic.filtering.and.manipulation:.* |
11fd80 | 2a 65 78 74 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 74 | *extcommunity-list**.is.one.of.t |
11fda0 | 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 70 6f 6c 69 63 69 65 73 20 63 6f 6d 6d | hem..VyOS.provides.policies.comm |
11fdc0 | 61 6e 64 73 20 65 78 63 6c 75 73 69 76 65 6c 79 20 66 6f 72 20 42 47 50 20 74 72 61 66 66 69 63 | ands.exclusively.for.BGP.traffic |
11fde0 | 20 66 69 6c 74 65 72 69 6e 67 20 61 6e 64 20 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3a 20 2a 2a 6c | .filtering.and.manipulation:.**l |
11fe00 | 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 2a 2a 20 69 73 20 6f 6e 65 20 6f 66 20 | arge-community-list**.is.one.of. |
11fe20 | 74 68 65 6d 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 73 6f 6d 65 20 6f 70 65 72 61 74 69 | them..VyOS.provides.some.operati |
11fe40 | 6f 6e 61 6c 20 63 6f 6d 6d 61 6e 64 73 20 6f 6e 20 4f 70 65 6e 56 50 4e 2e 00 56 79 4f 53 20 70 | onal.commands.on.OpenVPN..VyOS.p |
11fe60 | 72 6f 76 69 64 65 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 44 48 43 50 20 66 61 69 6c 6f 76 65 | rovides.support.for.DHCP.failove |
11fe80 | 72 2e 20 44 48 43 50 20 66 61 69 6c 6f 76 65 72 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 | r..DHCP.failover.must.be.configu |
11fea0 | 72 65 64 20 65 78 70 6c 69 63 69 74 6c 79 20 62 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 | red.explicitly.by.the.following. |
11fec0 | 73 74 61 74 65 6d 65 6e 74 73 2e 00 56 79 4f 53 20 70 72 6f 76 69 64 65 73 20 74 68 69 73 20 75 | statements..VyOS.provides.this.u |
11fee0 | 74 69 6c 69 74 79 20 74 6f 20 69 6d 70 6f 72 74 20 65 78 69 73 74 69 6e 67 20 63 65 72 74 69 66 | tility.to.import.existing.certif |
11ff00 | 69 63 61 74 65 73 2f 6b 65 79 20 66 69 6c 65 73 20 64 69 72 65 63 74 6c 79 20 69 6e 74 6f 20 50 | icates/key.files.directly.into.P |
11ff20 | 4b 49 20 66 72 6f 6d 20 6f 70 2d 6d 6f 64 65 2e 20 50 72 65 76 69 6f 75 73 20 74 6f 20 56 79 4f | KI.from.op-mode..Previous.to.VyO |
11ff40 | 53 20 31 2e 34 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 77 65 72 65 20 73 74 6f 72 65 64 20 | S.1.4,.certificates.were.stored. |
11ff60 | 75 6e 64 65 72 20 74 68 65 20 2f 63 6f 6e 66 69 67 20 66 6f 6c 64 65 72 20 70 65 72 6d 61 6e 65 | under.the./config.folder.permane |
11ff80 | 6e 74 6c 79 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 72 65 74 61 69 6e 65 64 20 70 6f 73 74 20 75 | ntly.and.will.be.retained.post.u |
11ffa0 | 70 67 72 61 64 65 2e 00 56 79 4f 53 20 72 65 76 65 72 73 65 2d 70 72 6f 78 79 20 69 73 20 62 61 | pgrade..VyOS.reverse-proxy.is.ba |
11ffc0 | 6c 61 6e 63 65 72 20 61 6e 64 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 74 68 61 74 20 70 72 6f | lancer.and.proxy.server.that.pro |
11ffe0 | 76 69 64 65 73 20 68 69 67 68 2d 61 76 61 69 6c 61 62 69 6c 69 74 79 2c 20 6c 6f 61 64 20 62 61 | vides.high-availability,.load.ba |
120000 | 6c 61 6e 63 69 6e 67 20 61 6e 64 20 70 72 6f 78 79 69 6e 67 20 66 6f 72 20 54 43 50 20 28 6c 65 | lancing.and.proxying.for.TCP.(le |
120020 | 76 65 6c 20 34 29 20 61 6e 64 20 48 54 54 50 2d 62 61 73 65 64 20 28 6c 65 76 65 6c 20 37 29 20 | vel.4).and.HTTP-based.(level.7). |
120040 | 61 70 70 6c 69 63 61 74 69 6f 6e 73 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 3a 61 62 62 | applications..VyOS.supports.:abb |
120060 | 72 3a 60 50 49 4d 2d 53 4d 20 28 50 49 4d 20 53 70 61 72 73 65 20 4d 6f 64 65 29 60 20 61 73 20 | r:`PIM-SM.(PIM.Sparse.Mode)`.as. |
120080 | 77 65 6c 6c 20 61 73 20 3a 61 62 62 72 3a 60 49 47 4d 50 20 28 49 6e 74 65 72 6e 65 74 20 47 72 | well.as.:abbr:`IGMP.(Internet.Gr |
1200a0 | 6f 75 70 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 72 6f 74 6f 63 6f 6c 29 60 20 76 32 20 61 6e 64 | oup.Management.Protocol)`.v2.and |
1200c0 | 20 76 33 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 49 47 4d 50 20 76 65 72 73 | .v3.VyOS.supports.both.IGMP.vers |
1200e0 | 69 6f 6e 20 32 20 61 6e 64 20 76 65 72 73 69 6f 6e 20 33 20 28 77 68 69 63 68 20 61 6c 6c 6f 77 | ion.2.and.version.3.(which.allow |
120100 | 73 20 73 6f 75 72 63 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 29 2e 00 56 79 | s.source-specific.multicast)..Vy |
120120 | 4f 53 20 73 75 70 70 6f 72 74 73 20 62 6f 74 68 20 4d 4c 44 20 76 65 72 73 69 6f 6e 20 31 20 61 | OS.supports.both.MLD.version.1.a |
120140 | 6e 64 20 76 65 72 73 69 6f 6e 20 32 20 28 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 73 6f 75 72 63 | nd.version.2.(which.allows.sourc |
120160 | 65 2d 73 70 65 63 69 66 69 63 20 6d 75 6c 74 69 63 61 73 74 29 2e 00 56 79 4f 53 20 73 75 70 70 | e-specific.multicast)..VyOS.supp |
120180 | 6f 72 74 73 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 | orts.flow-accounting.for.both.IP |
1201a0 | 76 34 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 79 73 74 65 6d 20 | v4.and.IPv6.traffic..The.system. |
1201c0 | 61 63 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 2c 20 61 6e 64 20 79 6f 75 | acts.as.a.flow.exporter,.and.you |
1201e0 | 20 61 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 20 77 69 74 68 20 61 6e 79 20 63 6f 6d | .are.free.to.use.it.with.any.com |
120200 | 70 61 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 | patible.collector..VyOS.supports |
120220 | 20 6d 75 6c 74 69 70 6c 65 20 49 4b 45 76 32 20 72 65 6d 6f 74 65 2d 61 63 63 65 73 73 20 63 6f | .multiple.IKEv2.remote-access.co |
120240 | 6e 6e 65 63 74 69 6f 6e 73 2e 20 45 76 65 72 79 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 63 61 6e 20 | nnections..Every.connection.can. |
120260 | 68 61 76 65 20 69 74 73 20 64 65 64 69 63 61 74 65 64 20 49 4b 45 2f 45 53 50 20 63 69 70 68 65 | have.its.dedicated.IKE/ESP.ciphe |
120280 | 72 73 2c 20 63 65 72 74 69 66 69 63 61 74 65 73 20 6f 72 20 6c 6f 63 61 6c 20 6c 69 73 74 65 6e | rs,.certificates.or.local.listen |
1202a0 | 20 61 64 64 72 65 73 73 20 66 6f 72 20 65 2e 67 2e 20 69 6e 62 6f 75 6e 64 20 6c 6f 61 64 20 62 | .address.for.e.g..inbound.load.b |
1202c0 | 61 6c 61 6e 63 69 6e 67 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 6f 6e 6c 69 6e 65 20 63 | alancing..VyOS.supports.online.c |
1202e0 | 68 65 63 6b 69 6e 67 20 66 6f 72 20 75 70 64 61 74 65 73 00 56 79 4f 53 20 73 75 70 70 6f 72 74 | hecking.for.updates.VyOS.support |
120300 | 73 20 73 46 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 | s.sFlow.accounting.for.both.IPv4 |
120320 | 20 61 6e 64 20 49 50 76 36 20 74 72 61 66 66 69 63 2e 20 54 68 65 20 73 79 73 74 65 6d 20 61 63 | .and.IPv6.traffic..The.system.ac |
120340 | 74 73 20 61 73 20 61 20 66 6c 6f 77 20 65 78 70 6f 72 74 65 72 2c 20 61 6e 64 20 79 6f 75 20 61 | ts.as.a.flow.exporter,.and.you.a |
120360 | 72 65 20 66 72 65 65 20 74 6f 20 75 73 65 20 69 74 20 77 69 74 68 20 61 6e 79 20 63 6f 6d 70 61 | re.free.to.use.it.with.any.compa |
120380 | 74 69 62 6c 65 20 63 6f 6c 6c 65 63 74 6f 72 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 74 73 20 73 | tible.collector..VyOS.supports.s |
1203a0 | 65 74 74 69 6e 67 20 74 69 6d 65 6f 75 74 73 20 66 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 | etting.timeouts.for.connections. |
1203c0 | 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 79 70 65 | according.to.the.connection.type |
1203e0 | 2e 20 59 6f 75 20 63 61 6e 20 73 65 74 20 74 69 6d 65 6f 75 74 20 76 61 6c 75 65 73 20 66 6f 72 | ..You.can.set.timeout.values.for |
120400 | 20 67 65 6e 65 72 69 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 66 6f 72 20 49 43 4d 50 20 63 | .generic.connections,.for.ICMP.c |
120420 | 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 55 44 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 6f 72 20 | onnections,.UDP.connections,.or. |
120440 | 66 6f 72 20 54 43 50 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 69 6e 20 61 20 6e 75 6d 62 65 72 20 | for.TCP.connections.in.a.number. |
120460 | 6f 66 20 64 69 66 66 65 72 65 6e 74 20 73 74 61 74 65 73 2e 00 56 79 4f 53 20 73 75 70 70 6f 72 | of.different.states..VyOS.suppor |
120480 | 74 73 20 73 65 74 74 69 6e 67 20 75 70 20 50 50 50 6f 45 20 69 6e 20 74 77 6f 20 64 69 66 66 65 | ts.setting.up.PPPoE.in.two.diffe |
1204a0 | 72 65 6e 74 20 77 61 79 73 20 74 6f 20 61 20 50 50 50 6f 45 20 69 6e 74 65 72 6e 65 74 20 63 6f | rent.ways.to.a.PPPoE.internet.co |
1204c0 | 6e 6e 65 63 74 69 6f 6e 2e 20 54 68 69 73 20 69 73 20 62 65 63 61 75 73 65 20 6d 6f 73 74 20 49 | nnection..This.is.because.most.I |
1204e0 | 53 50 73 20 70 72 6f 76 69 64 65 20 61 20 6d 6f 64 65 6d 20 74 68 61 74 20 69 73 20 61 6c 73 6f | SPs.provide.a.modem.that.is.also |
120500 | 20 61 20 77 69 72 65 6c 65 73 73 20 72 6f 75 74 65 72 2e 00 56 79 4f 53 20 75 73 65 73 20 49 53 | .a.wireless.router..VyOS.uses.IS |
120520 | 43 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 | C.DHCP.server.for.both.IPv4.and. |
120540 | 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 56 79 4f 53 20 75 73 | IPv6.address.assignment..VyOS.us |
120560 | 65 73 20 4b 65 61 20 44 48 43 50 20 73 65 72 76 65 72 20 66 6f 72 20 62 6f 74 68 20 49 50 76 34 | es.Kea.DHCP.server.for.both.IPv4 |
120580 | 20 61 6e 64 20 49 50 76 36 20 61 64 64 72 65 73 73 20 61 73 73 69 67 6e 6d 65 6e 74 2e 00 56 79 | .and.IPv6.address.assignment..Vy |
1205a0 | 4f 53 20 75 73 65 73 20 5b 46 52 52 6f 75 74 69 6e 67 5d 28 68 74 74 70 73 3a 2f 2f 66 72 72 6f | OS.uses.[FRRouting](https://frro |
1205c0 | 75 74 69 6e 67 2e 6f 72 67 2f 29 20 61 73 20 74 68 65 20 63 6f 6e 74 72 6f 6c 20 70 6c 61 6e 65 | uting.org/).as.the.control.plane |
1205e0 | 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 61 6e 64 20 73 74 61 74 69 63 20 72 6f 75 74 69 6e 67 2e | .for.dynamic.and.static.routing. |
120600 | 20 54 68 65 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 20 62 65 68 61 76 69 6f 72 20 63 61 6e | .The.routing.daemon.behavior.can |
120620 | 20 62 65 20 61 64 6a 75 73 74 65 64 20 64 75 72 69 6e 67 20 72 75 6e 74 69 6d 65 2c 20 62 75 74 | .be.adjusted.during.runtime,.but |
120640 | 20 72 65 71 75 69 72 65 20 65 69 74 68 65 72 20 61 20 72 65 73 74 61 72 74 20 6f 66 20 74 68 65 | .require.either.a.restart.of.the |
120660 | 20 72 6f 75 74 69 6e 67 20 64 61 65 6d 6f 6e 2c 20 6f 72 20 61 20 72 65 62 6f 6f 74 20 6f 66 20 | .routing.daemon,.or.a.reboot.of. |
120680 | 74 68 65 20 73 79 73 74 65 6d 2e 00 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 60 69 6e 74 65 72 | the.system..VyOS.uses.the.`inter |
1206a0 | 66 61 63 65 73 20 77 77 61 6e 60 20 73 75 62 73 79 73 74 65 6d 20 66 6f 72 20 63 6f 6e 66 69 67 | faces.wwan`.subsystem.for.config |
1206c0 | 75 72 61 74 69 6f 6e 2e 00 56 79 4f 53 20 75 73 65 73 20 74 68 65 20 60 6d 69 72 72 6f 72 60 20 | uration..VyOS.uses.the.`mirror`. |
1206e0 | 6f 70 74 69 6f 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 70 6f 72 74 20 6d 69 72 72 6f 72 69 | option.to.configure.port.mirrori |
120700 | 6e 67 2e 20 54 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 64 69 76 69 64 65 64 | ng..The.configuration.is.divided |
120720 | 20 69 6e 74 6f 20 32 20 64 69 66 66 65 72 65 6e 74 20 64 69 72 65 63 74 69 6f 6e 73 2e 20 44 65 | .into.2.different.directions..De |
120740 | 73 74 69 6e 61 74 69 6f 6e 20 70 6f 72 74 73 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6e 66 69 67 | stination.ports.should.be.config |
120760 | 75 72 65 64 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 74 72 61 66 66 69 63 20 64 69 72 65 63 | ured.for.different.traffic.direc |
120780 | 74 69 6f 6e 73 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 60 61 63 63 65 6c 2d 70 70 70 60 | tions..VyOS.utilizes.`accel-ppp` |
1207a0 | 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 3a 61 62 62 72 3a 60 49 50 6f 45 20 28 49 6e 74 65 72 6e | _.to.provide.:abbr:`IPoE.(Intern |
1207c0 | 65 74 20 50 72 6f 74 6f 63 6f 6c 20 6f 76 65 72 20 45 74 68 65 72 6e 65 74 29 60 20 73 65 72 76 | et.Protocol.over.Ethernet)`.serv |
1207e0 | 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 | er.functionality..It.can.be.used |
120800 | 20 77 69 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 28 6d 61 63 2d | .with.local.authentication.(mac- |
120820 | 61 64 64 72 65 73 73 29 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 | address).or.a.connected.RADIUS.s |
120840 | 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 60 61 63 63 65 6c 2d 70 70 70 60 | erver..VyOS.utilizes.`accel-ppp` |
120860 | 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 50 50 50 6f 45 20 73 65 72 76 65 72 20 66 75 6e 63 74 69 | _.to.provide.PPPoE.server.functi |
120880 | 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 6c 6f 63 | onality..It.can.be.used.with.loc |
1208a0 | 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e 6e 65 63 74 65 64 | al.authentication.or.a.connected |
1208c0 | 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 7a 65 73 20 61 63 | .RADIUS.server..VyOS.utilizes.ac |
1208e0 | 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 4c 32 54 50 20 73 65 72 76 65 72 20 | cel-ppp_.to.provide.L2TP.server. |
120900 | 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 49 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 | functionality..It.can.be.used.wi |
120920 | 74 68 20 6c 6f 63 61 6c 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 61 20 63 6f 6e | th.local.authentication.or.a.con |
120940 | 6e 65 63 74 65 64 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2e 00 56 79 4f 53 20 75 74 69 6c 69 | nected.RADIUS.server..VyOS.utili |
120960 | 7a 65 73 20 61 63 63 65 6c 2d 70 70 70 5f 20 74 6f 20 70 72 6f 76 69 64 65 20 53 53 54 50 20 73 | zes.accel-ppp_.to.provide.SSTP.s |
120980 | 65 72 76 65 72 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 2e 20 57 65 20 73 75 70 70 6f 72 74 20 | erver.functionality..We.support. |
1209a0 | 62 6f 74 68 20 6c 6f 63 61 6c 20 61 6e 64 20 52 41 44 49 55 53 20 61 75 74 68 65 6e 74 69 63 61 | both.local.and.RADIUS.authentica |
1209c0 | 74 69 6f 6e 2e 00 57 41 4e 20 4c 6f 61 64 20 42 61 6c 61 63 69 6e 67 20 73 68 6f 75 6c 64 20 6e | tion..WAN.Load.Balacing.should.n |
1209e0 | 6f 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 64 79 6e 61 6d 69 63 20 72 6f 75 74 69 6e 67 20 | ot.be.used.when.dynamic.routing. |
120a00 | 70 72 6f 74 6f 63 6f 6c 20 69 73 20 75 73 65 64 2f 6e 65 65 64 65 64 2e 20 54 68 69 73 20 66 65 | protocol.is.used/needed..This.fe |
120a20 | 61 74 75 72 65 20 63 72 65 61 74 65 73 20 63 75 73 74 6f 6d 69 7a 65 64 20 72 6f 75 74 69 6e 67 | ature.creates.customized.routing |
120a40 | 20 74 61 62 6c 65 73 20 61 6e 64 20 66 69 72 65 77 61 6c 6c 20 72 75 6c 65 73 2c 20 74 68 61 74 | .tables.and.firewall.rules,.that |
120a60 | 20 6d 61 6b 65 73 20 69 74 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 74 6f 20 75 73 65 20 77 69 | .makes.it.incompatible.to.use.wi |
120a80 | 74 68 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 41 4e 20 69 6e 74 65 72 66 | th.routing.protocols..WAN.interf |
120aa0 | 61 63 65 20 6f 6e 20 60 65 74 68 31 60 00 57 41 4e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 | ace.on.`eth1`.WAN.load.balancing |
120ac0 | 00 57 4c 41 4e 2f 57 49 46 49 20 2d 20 57 69 72 65 6c 65 73 73 20 4c 41 4e 00 57 4d 4d 2d 50 53 | .WLAN/WIFI.-.Wireless.LAN.WMM-PS |
120ae0 | 20 55 6e 73 63 68 65 64 75 6c 65 64 20 41 75 74 6f 6d 61 74 69 63 20 50 6f 77 65 72 20 53 61 76 | .Unscheduled.Automatic.Power.Sav |
120b00 | 65 20 44 65 6c 69 76 65 72 79 20 5b 55 2d 41 50 53 44 5d 00 57 50 41 20 70 61 73 73 70 68 72 61 | e.Delivery.[U-APSD].WPA.passphra |
120b20 | 73 65 20 60 60 31 32 33 34 35 36 37 38 60 60 00 57 57 41 4e 20 2d 20 57 69 72 65 6c 65 73 73 20 | se.``12345678``.WWAN.-.Wireless. |
120b40 | 57 69 64 65 2d 41 72 65 61 2d 4e 65 74 77 6f 72 6b 00 57 61 72 6e 69 6e 67 00 57 61 72 6e 69 6e | Wide-Area-Network.Warning.Warnin |
120b60 | 67 20 63 6f 6e 64 69 74 69 6f 6e 73 00 57 65 20 61 73 73 75 6d 65 20 74 68 61 74 20 74 68 65 20 | g.conditions.We.assume.that.the. |
120b80 | 4c 45 46 54 20 72 6f 75 74 65 72 20 68 61 73 20 73 74 61 74 69 63 20 31 39 32 2e 30 2e 32 2e 31 | LEFT.router.has.static.192.0.2.1 |
120ba0 | 30 20 61 64 64 72 65 73 73 20 6f 6e 20 65 74 68 30 2c 20 61 6e 64 20 74 68 65 20 52 49 47 48 54 | 0.address.on.eth0,.and.the.RIGHT |
120bc0 | 20 72 6f 75 74 65 72 20 68 61 73 20 61 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 73 73 20 6f 6e | .router.has.a.dynamic.address.on |
120be0 | 20 65 74 68 30 2e 00 57 65 20 63 61 6e 20 61 6c 73 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 65 | .eth0..We.can.also.create.the.ce |
120c00 | 72 74 69 66 69 63 61 74 65 73 20 75 73 69 6e 67 20 43 65 72 62 6f 72 74 20 77 68 69 63 68 20 69 | rtificates.using.Cerbort.which.i |
120c20 | 73 20 61 6e 20 65 61 73 79 2d 74 6f 2d 75 73 65 20 63 6c 69 65 6e 74 20 74 68 61 74 20 66 65 74 | s.an.easy-to-use.client.that.fet |
120c40 | 63 68 65 73 20 61 20 63 65 72 74 69 66 69 63 61 74 65 20 66 72 6f 6d 20 4c 65 74 27 73 20 45 6e | ches.a.certificate.from.Let's.En |
120c60 | 63 72 79 70 74 20 61 6e 20 6f 70 65 6e 20 63 65 72 74 69 66 69 63 61 74 65 20 61 75 74 68 6f 72 | crypt.an.open.certificate.author |
120c80 | 69 74 79 20 6c 61 75 6e 63 68 65 64 20 62 79 20 74 68 65 20 45 46 46 2c 20 4d 6f 7a 69 6c 6c 61 | ity.launched.by.the.EFF,.Mozilla |
120ca0 | 2c 20 61 6e 64 20 6f 74 68 65 72 73 20 61 6e 64 20 64 65 70 6c 6f 79 73 20 69 74 20 74 6f 20 61 | ,.and.others.and.deploys.it.to.a |
120cc0 | 20 77 65 62 20 73 65 72 76 65 72 2e 00 57 65 20 63 61 6e 20 62 75 69 6c 64 20 72 6f 75 74 65 2d | .web.server..We.can.build.route- |
120ce0 | 6d 61 70 73 20 66 6f 72 20 69 6d 70 6f 72 74 20 62 61 73 65 64 20 6f 6e 20 74 68 65 73 65 20 73 | maps.for.import.based.on.these.s |
120d00 | 74 61 74 65 73 2e 20 48 65 72 65 20 69 73 20 61 20 73 69 6d 70 6c 65 20 52 50 4b 49 20 63 6f 6e | tates..Here.is.a.simple.RPKI.con |
120d20 | 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 65 72 65 20 60 72 6f 75 74 69 6e 61 74 6f 72 60 20 69 | figuration,.where.`routinator`.i |
120d40 | 73 20 74 68 65 20 52 50 4b 49 2d 76 61 6c 69 64 61 74 69 6e 67 20 22 63 61 63 68 65 22 20 73 65 | s.the.RPKI-validating."cache".se |
120d60 | 72 76 65 72 20 77 69 74 68 20 69 70 20 60 31 39 32 2e 30 2e 32 2e 31 60 3a 00 57 65 20 63 61 6e | rver.with.ip.`192.0.2.1`:.We.can |
120d80 | 27 74 20 73 75 70 70 6f 72 74 20 61 6c 6c 20 64 69 73 70 6c 61 79 73 20 66 72 6f 6d 20 74 68 65 | 't.support.all.displays.from.the |
120da0 | 20 62 65 67 69 6e 6e 69 6e 67 2e 20 49 66 20 79 6f 75 72 20 64 69 73 70 6c 61 79 20 74 79 70 65 | .beginning..If.your.display.type |
120dc0 | 20 69 73 20 6d 69 73 73 69 6e 67 2c 20 70 6c 65 61 73 65 20 63 72 65 61 74 65 20 61 20 66 65 61 | .is.missing,.please.create.a.fea |
120de0 | 74 75 72 65 20 72 65 71 75 65 73 74 20 76 69 61 20 50 68 61 62 72 69 63 61 74 6f 72 5f 2e 00 57 | ture.request.via.Phabricator_..W |
120e00 | 65 20 63 6f 6e 66 69 67 75 72 65 20 61 20 6e 65 77 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6e 61 6d | e.configure.a.new.connection.nam |
120e20 | 65 64 20 60 60 72 77 60 60 20 66 6f 72 20 72 6f 61 64 2d 77 61 72 72 69 6f 72 2c 20 74 68 61 74 | ed.``rw``.for.road-warrior,.that |
120e40 | 20 69 64 65 6e 74 69 66 69 65 73 20 69 74 73 65 6c 66 20 61 73 20 60 60 31 39 32 2e 30 2e 32 2e | .identifies.itself.as.``192.0.2. |
120e60 | 31 60 60 20 74 6f 20 74 68 65 20 63 6c 69 65 6e 74 73 20 61 6e 64 20 75 73 65 73 20 74 68 65 20 | 1``.to.the.clients.and.uses.the. |
120e80 | 60 60 76 79 6f 73 60 60 20 63 65 72 74 69 66 69 63 61 74 65 20 73 69 67 6e 65 64 20 62 79 20 74 | ``vyos``.certificate.signed.by.t |
120ea0 | 68 65 20 60 43 41 63 65 72 74 5f 43 6c 61 73 73 33 5f 52 6f 6f 74 60 60 20 69 6e 74 65 72 6d 65 | he.`CAcert_Class3_Root``.interme |
120ec0 | 64 69 61 74 65 20 43 41 2e 20 57 65 20 73 65 6c 65 63 74 20 6f 75 72 20 70 72 65 76 69 6f 75 73 | diate.CA..We.select.our.previous |
120ee0 | 6c 79 20 73 70 65 63 69 66 69 65 64 20 49 4b 45 2f 45 53 50 20 67 72 6f 75 70 73 20 61 6e 64 20 | ly.specified.IKE/ESP.groups.and. |
120f00 | 61 6c 73 6f 20 6c 69 6e 6b 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 70 6f 6f 6c 20 74 6f | also.link.the.IP.address.pool.to |
120f20 | 20 64 72 61 77 20 61 64 64 72 65 73 73 65 73 20 66 72 6f 6d 2e 00 57 65 20 63 6f 75 6c 64 20 65 | .draw.addresses.from..We.could.e |
120f40 | 78 70 61 6e 64 20 6f 6e 20 74 68 69 73 20 61 6e 64 20 61 6c 73 6f 20 64 65 6e 79 20 6c 69 6e 6b | xpand.on.this.and.also.deny.link |
120f60 | 20 6c 6f 63 61 6c 20 61 6e 64 20 6d 75 6c 74 69 63 61 73 74 20 69 6e 20 74 68 65 20 72 75 6c 65 | .local.and.multicast.in.the.rule |
120f80 | 20 32 30 20 61 63 74 69 6f 6e 20 64 65 6e 79 2e 00 57 65 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 | .20.action.deny..We.do.not.have. |
120fa0 | 43 4c 49 20 6e 6f 64 65 73 20 66 6f 72 20 65 76 65 72 79 20 73 69 6e 67 6c 65 20 4f 70 65 6e 56 | CLI.nodes.for.every.single.OpenV |
120fc0 | 50 4e 20 6f 70 74 69 6f 6e 2e 20 49 66 20 61 6e 20 6f 70 74 69 6f 6e 20 69 73 20 6d 69 73 73 69 | PN.option..If.an.option.is.missi |
120fe0 | 6e 67 2c 20 61 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 65 20 | ng,.a.feature.request.should.be. |
121000 | 6f 70 65 6e 65 64 20 61 74 20 50 68 61 62 72 69 63 61 74 6f 72 5f 20 73 6f 20 61 6c 6c 20 75 73 | opened.at.Phabricator_.so.all.us |
121020 | 65 72 73 20 63 61 6e 20 62 65 6e 65 66 69 74 20 66 72 6f 6d 20 69 74 20 28 73 65 65 20 3a 72 65 | ers.can.benefit.from.it.(see.:re |
121040 | 66 3a 60 69 73 73 75 65 73 5f 66 65 61 74 75 72 65 73 60 29 2e 00 57 65 20 64 6f 6e 27 74 20 72 | f:`issues_features`)..We.don't.r |
121060 | 65 63 6f 6d 65 6e 64 20 74 6f 20 75 73 65 20 61 72 67 75 6d 65 6e 74 73 2e 20 55 73 69 6e 67 20 | ecomend.to.use.arguments..Using. |
121080 | 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 69 73 20 6d 6f 72 65 20 70 72 65 66 66 65 72 65 62 6c 65 | environments.is.more.preffereble |
1210a0 | 2e 00 57 65 20 67 65 6e 65 72 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 | ..We.generate.a.connection.profi |
1210c0 | 6c 65 20 75 73 65 64 20 62 79 20 57 69 6e 64 6f 77 73 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 | le.used.by.Windows.clients.that. |
1210e0 | 77 69 6c 6c 20 63 6f 6e 6e 65 63 74 20 74 6f 20 74 68 65 20 22 72 77 22 20 63 6f 6e 6e 65 63 74 | will.connect.to.the."rw".connect |
121100 | 69 6f 6e 20 6f 6e 20 6f 75 72 20 56 79 4f 53 20 73 65 72 76 65 72 20 6f 6e 20 74 68 65 20 56 50 | ion.on.our.VyOS.server.on.the.VP |
121120 | 4e 20 73 65 72 76 65 72 73 20 49 50 20 61 64 64 72 65 73 73 2f 66 71 64 6e 20 60 76 70 6e 2e 76 | N.servers.IP.address/fqdn.`vpn.v |
121140 | 79 6f 73 2e 6e 65 74 60 2e 00 57 65 20 6c 69 73 74 65 6e 20 6f 6e 20 70 6f 72 74 20 35 31 38 32 | yos.net`..We.listen.on.port.5182 |
121160 | 30 00 57 65 20 6e 65 65 64 20 74 6f 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 63 65 72 74 69 66 | 0.We.need.to.generate.the.certif |
121180 | 69 63 61 74 65 20 77 68 69 63 68 20 61 75 74 68 65 6e 74 69 63 61 74 65 73 20 75 73 65 72 73 20 | icate.which.authenticates.users. |
1211a0 | 77 68 6f 20 61 74 74 65 6d 70 74 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 6e 65 74 77 6f 72 | who.attempt.to.access.the.networ |
1211c0 | 6b 20 72 65 73 6f 75 72 63 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 53 53 4c 20 56 50 4e 20 74 | k.resource.through.the.SSL.VPN.t |
1211e0 | 75 6e 6e 65 6c 73 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 20 77 | unnels..The.following.commands.w |
121200 | 69 6c 6c 20 63 72 65 61 74 65 20 61 20 73 65 6c 66 20 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 | ill.create.a.self.signed.certifi |
121220 | 63 61 74 65 73 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 73 74 6f 72 65 64 20 69 6e 20 63 6f 6e 66 | cates.and.will.be.stored.in.conf |
121240 | 69 67 75 72 61 74 69 6f 6e 3a 00 57 65 20 6e 6f 77 20 75 74 69 6c 69 7a 65 20 60 74 75 6e 65 64 | iguration:.We.now.utilize.`tuned |
121260 | 60 20 66 6f 72 20 64 79 6e 61 6d 69 63 20 72 65 73 6f 75 72 63 65 20 62 61 6c 61 6e 63 69 6e 67 | `.for.dynamic.resource.balancing |
121280 | 20 62 61 73 65 64 20 6f 6e 20 70 72 6f 66 69 6c 65 73 2e 00 57 65 20 6f 6e 6c 79 20 61 6c 6c 6f | .based.on.profiles..We.only.allo |
1212a0 | 77 20 74 68 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 73 75 62 6e 65 74 20 74 6f 20 74 | w.the.192.168.2.0/24.subnet.to.t |
1212c0 | 72 61 76 65 6c 20 6f 76 65 72 20 74 68 65 20 74 75 6e 6e 65 6c 00 57 65 20 6f 6e 6c 79 20 6e 65 | ravel.over.the.tunnel.We.only.ne |
1212e0 | 65 64 20 61 20 73 69 6e 67 6c 65 20 73 74 65 70 20 66 6f 72 20 74 68 69 73 20 69 6e 74 65 72 66 | ed.a.single.step.for.this.interf |
121300 | 61 63 65 3a 00 57 65 20 72 6f 75 74 65 20 61 6c 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 74 68 | ace:.We.route.all.traffic.for.th |
121320 | 65 20 31 39 32 2e 31 36 38 2e 32 2e 30 2f 32 34 20 6e 65 74 77 6f 72 6b 20 74 6f 20 69 6e 74 65 | e.192.168.2.0/24.network.to.inte |
121340 | 72 66 61 63 65 20 60 77 67 30 31 60 00 57 65 20 75 73 65 20 61 20 76 6f 6e 74 61 69 6e 65 72 20 | rface.`wg01`.We.use.a.vontainer. |
121360 | 70 72 6f 76 69 64 69 6e 67 20 74 68 65 20 54 41 43 41 43 53 20 73 65 72 76 65 20 72 69 6e 20 74 | providing.the.TACACS.serve.rin.t |
121380 | 68 69 73 20 65 78 61 6d 70 6c 65 2e 00 57 65 20 77 69 6c 6c 20 6f 6e 6c 79 20 61 63 63 65 70 74 | his.example..We.will.only.accept |
1213a0 | 20 74 72 61 66 66 69 63 20 63 6f 6d 6d 69 6e 67 20 66 72 6f 6d 20 69 6e 74 65 72 66 61 63 65 20 | .traffic.comming.from.interface. |
1213c0 | 65 74 68 30 2c 20 70 72 6f 74 6f 63 6f 6c 20 74 63 70 20 61 6e 64 20 64 65 73 74 69 6e 61 74 69 | eth0,.protocol.tcp.and.destinati |
1213e0 | 6f 6e 20 70 6f 72 74 20 31 31 32 32 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 72 61 66 66 69 63 20 | on.port.1122..All.other.traffic. |
121400 | 74 72 61 73 70 61 73 73 69 6e 67 20 74 68 65 20 72 6f 75 74 65 72 20 73 68 6f 75 6c 64 20 62 65 | traspassing.the.router.should.be |
121420 | 20 62 6c 6f 63 6b 65 64 2e 00 57 65 27 6c 6c 20 63 6f 6e 66 69 67 75 72 65 20 4f 70 65 6e 56 50 | .blocked..We'll.configure.OpenVP |
121440 | 4e 20 75 73 69 6e 67 20 73 65 6c 66 2d 73 69 67 6e 65 64 20 63 65 72 74 69 66 69 63 61 74 65 73 | N.using.self-signed.certificates |
121460 | 2c 20 61 6e 64 20 74 68 65 6e 20 64 69 73 63 75 73 73 20 74 68 65 20 6c 65 67 61 63 79 20 70 72 | ,.and.then.discuss.the.legacy.pr |
121480 | 65 2d 73 68 61 72 65 64 20 6b 65 79 20 6d 6f 64 65 2e 00 57 65 27 6c 6c 20 75 73 65 20 74 68 65 | e-shared.key.mode..We'll.use.the |
1214a0 | 20 49 4b 45 20 61 6e 64 20 45 53 50 20 67 72 6f 75 70 73 20 63 72 65 61 74 65 64 20 61 62 6f 76 | .IKE.and.ESP.groups.created.abov |
1214c0 | 65 20 66 6f 72 20 74 68 69 73 20 56 50 4e 2e 20 42 65 63 61 75 73 65 20 77 65 20 6e 65 65 64 20 | e.for.this.VPN..Because.we.need. |
1214e0 | 61 63 63 65 73 73 20 74 6f 20 32 20 64 69 66 66 65 72 65 6e 74 20 73 75 62 6e 65 74 73 20 6f 6e | access.to.2.different.subnets.on |
121500 | 20 74 68 65 20 66 61 72 20 73 69 64 65 2c 20 77 65 20 77 69 6c 6c 20 6e 65 65 64 20 74 77 6f 20 | .the.far.side,.we.will.need.two. |
121520 | 64 69 66 66 65 72 65 6e 74 20 74 75 6e 6e 65 6c 73 2e 20 49 66 20 79 6f 75 20 63 68 61 6e 67 65 | different.tunnels..If.you.change |
121540 | 64 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 20 45 53 50 20 67 72 6f 75 70 20 61 6e 64 | d.the.names.of.the.ESP.group.and |
121560 | 20 49 4b 45 20 67 72 6f 75 70 20 69 6e 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 73 74 65 70 2c | .IKE.group.in.the.previous.step, |
121580 | 20 6d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 75 73 65 20 74 68 65 20 63 6f 72 72 65 63 74 20 6e | .make.sure.you.use.the.correct.n |
1215a0 | 61 6d 65 73 20 68 65 72 65 20 74 6f 6f 2e 00 57 65 62 20 50 72 6f 78 79 20 41 75 74 6f 64 69 73 | ames.here.too..Web.Proxy.Autodis |
1215c0 | 63 6f 76 65 72 79 20 28 57 50 41 44 29 20 55 52 4c 00 57 65 62 70 72 6f 78 79 00 57 65 62 73 65 | covery.(WPAD).URL.Webproxy.Webse |
1215e0 | 72 76 65 72 20 73 68 6f 75 6c 64 20 6c 69 73 74 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 | rver.should.listen.on.specified. |
121600 | 70 6f 72 74 2e 00 57 65 62 73 65 72 76 65 72 20 73 68 6f 75 6c 64 20 6f 6e 6c 79 20 6c 69 73 74 | port..Webserver.should.only.list |
121620 | 65 6e 20 6f 6e 20 73 70 65 63 69 66 69 65 64 20 49 50 20 61 64 64 72 65 73 73 00 57 68 65 6e 20 | en.on.specified.IP.address.When. |
121640 | 4c 44 50 20 69 73 20 77 6f 72 6b 69 6e 67 2c 20 79 6f 75 20 77 69 6c 6c 20 62 65 20 61 62 6c 65 | LDP.is.working,.you.will.be.able |
121660 | 20 74 6f 20 73 65 65 20 6c 61 62 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 74 68 65 | .to.see.label.information.in.the |
121680 | 20 6f 75 74 63 6f 6d 65 20 6f 66 20 60 60 73 68 6f 77 20 69 70 20 72 6f 75 74 65 60 60 2e 20 42 | .outcome.of.``show.ip.route``..B |
1216a0 | 65 73 69 64 65 73 20 74 68 61 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 72 65 20 61 | esides.that.information,.there.a |
1216c0 | 72 65 20 61 6c 73 6f 20 73 70 65 63 69 66 69 63 20 2a 73 68 6f 77 2a 20 63 6f 6d 6d 61 6e 64 73 | re.also.specific.*show*.commands |
1216e0 | 20 66 6f 72 20 4c 44 50 3a 00 57 68 65 6e 20 50 49 4d 20 72 65 63 65 69 76 65 73 20 61 20 72 65 | .for.LDP:.When.PIM.receives.a.re |
121700 | 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 74 68 65 20 73 6f 75 72 63 65 20 6f 66 20 74 68 65 20 | gister.packet.the.source.of.the. |
121720 | 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 74 68 65 20 70 | packet.will.be.compared.to.the.p |
121740 | 72 65 66 69 78 2d 6c 69 73 74 20 73 70 65 63 69 66 69 65 64 2c 20 61 6e 64 20 69 66 20 61 20 70 | refix-list.specified,.and.if.a.p |
121760 | 65 72 6d 69 74 20 69 73 20 72 65 63 65 69 76 65 64 20 6e 6f 72 6d 61 6c 20 70 72 6f 63 65 73 73 | ermit.is.received.normal.process |
121780 | 69 6e 67 20 63 6f 6e 74 69 6e 75 65 73 2e 20 49 66 20 61 20 64 65 6e 79 20 69 73 20 72 65 74 75 | ing.continues..If.a.deny.is.retu |
1217a0 | 72 6e 65 64 20 66 6f 72 20 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 6f 66 20 74 | rned.for.the.source.address.of.t |
1217c0 | 68 65 20 72 65 67 69 73 74 65 72 20 70 61 63 6b 65 74 20 61 20 72 65 67 69 73 74 65 72 20 73 74 | he.register.packet.a.register.st |
1217e0 | 6f 70 20 6d 65 73 73 61 67 65 20 69 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 73 6f 75 72 63 65 | op.message.is.sent.to.the.source |
121800 | 2e 00 57 68 65 6e 20 56 52 46 73 20 61 72 65 20 75 73 65 64 20 69 74 20 69 73 20 6e 6f 74 20 6f | ..When.VRFs.are.used.it.is.not.o |
121820 | 6e 6c 79 20 6d 61 6e 64 61 74 6f 72 79 20 74 6f 20 63 72 65 61 74 65 20 61 20 56 52 46 20 62 75 | nly.mandatory.to.create.a.VRF.bu |
121840 | 74 20 61 6c 73 6f 20 74 68 65 20 56 52 46 20 69 74 73 65 6c 66 20 6e 65 65 64 73 20 74 6f 20 62 | t.also.the.VRF.itself.needs.to.b |
121860 | 65 20 61 73 73 69 67 6e 65 64 20 74 6f 20 61 6e 20 69 6e 74 65 72 66 61 63 65 2e 00 57 68 65 6e | e.assigned.to.an.interface..When |
121880 | 20 61 20 60 60 63 75 73 74 6f 6d 60 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 | .a.``custom``.DynDNS.provider.is |
1218a0 | 20 75 73 65 64 20 74 68 65 20 60 3c 73 65 72 76 65 72 3e 60 20 77 68 65 72 65 20 75 70 64 61 74 | .used.the.`<server>`.where.updat |
1218c0 | 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 62 65 69 6e 67 20 73 65 6e 74 20 74 6f 20 6d 75 73 | e.requests.are.being.sent.to.mus |
1218e0 | 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 | t.be.specified..When.a.``custom` |
121900 | 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 20 74 68 65 20 70 72 | `.DynDNS.provider.is.used.the.pr |
121920 | 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 6f | otocol.used.for.communicating.to |
121940 | 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 20 | .the.provider.must.be.specified. |
121960 | 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 74 68 65 20 65 6d 62 65 | under.`<protocol>`..See.the.embe |
121980 | 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 66 6f 72 20 61 76 61 69 6c | dded.completion.helper.for.avail |
1219a0 | 61 62 6c 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 6e 20 61 20 60 60 63 75 73 74 6f 6d 60 | able.protocols..When.a.``custom` |
1219c0 | 60 20 44 79 6e 44 4e 53 20 70 72 6f 76 69 64 65 72 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 70 | `.DynDNS.provider.is.used,.the.p |
1219e0 | 72 6f 74 6f 63 6f 6c 20 75 73 65 64 20 66 6f 72 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 20 74 | rotocol.used.for.communicating.t |
121a00 | 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 | o.the.provider.must.be.specified |
121a20 | 20 75 6e 64 65 72 20 60 3c 70 72 6f 74 6f 63 6f 6c 3e 60 2e 20 53 65 65 20 74 68 65 20 65 6d 62 | .under.`<protocol>`..See.the.emb |
121a40 | 65 64 64 65 64 20 63 6f 6d 70 6c 65 74 69 6f 6e 20 68 65 6c 70 65 72 20 77 68 65 6e 20 65 6e 74 | edded.completion.helper.when.ent |
121a60 | 65 72 69 6e 67 20 61 62 6f 76 65 20 63 6f 6d 6d 61 6e 64 20 66 6f 72 20 61 76 61 69 6c 61 62 6c | ering.above.command.for.availabl |
121a80 | 65 20 70 72 6f 74 6f 63 6f 6c 73 2e 00 57 68 65 6e 20 61 20 66 61 69 6c 6f 76 65 72 20 6f 63 63 | e.protocols..When.a.failover.occ |
121aa0 | 75 72 73 20 69 6e 20 61 63 74 69 76 65 2d 62 61 63 6b 75 70 20 6d 6f 64 65 2c 20 62 6f 6e 64 69 | urs.in.active-backup.mode,.bondi |
121ac0 | 6e 67 20 77 69 6c 6c 20 69 73 73 75 65 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 67 72 61 74 75 69 | ng.will.issue.one.or.more.gratui |
121ae0 | 74 6f 75 73 20 41 52 50 73 20 6f 6e 20 74 68 65 20 6e 65 77 6c 79 20 61 63 74 69 76 65 20 73 6c | tous.ARPs.on.the.newly.active.sl |
121b00 | 61 76 65 2e 20 4f 6e 65 20 67 72 61 74 75 69 74 6f 75 73 20 41 52 50 20 69 73 20 69 73 73 75 65 | ave..One.gratuitous.ARP.is.issue |
121b20 | 64 20 66 6f 72 20 74 68 65 20 62 6f 6e 64 69 6e 67 20 6d 61 73 74 65 72 20 69 6e 74 65 72 66 61 | d.for.the.bonding.master.interfa |
121b40 | 63 65 20 61 6e 64 20 65 61 63 68 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 63 6f 6e 66 | ce.and.each.VLAN.interfaces.conf |
121b60 | 69 67 75 72 65 64 20 61 62 6f 76 65 20 69 74 2c 20 70 72 6f 76 69 64 65 64 20 74 68 61 74 20 74 | igured.above.it,.provided.that.t |
121b80 | 68 65 20 69 6e 74 65 72 66 61 63 65 20 68 61 73 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 49 50 | he.interface.has.at.least.one.IP |
121ba0 | 20 61 64 64 72 65 73 73 20 63 6f 6e 66 69 67 75 72 65 64 2e 20 47 72 61 74 75 69 74 6f 75 73 20 | .address.configured..Gratuitous. |
121bc0 | 41 52 50 73 20 69 73 73 75 65 64 20 66 6f 72 20 56 4c 41 4e 20 69 6e 74 65 72 66 61 63 65 73 20 | ARPs.issued.for.VLAN.interfaces. |
121be0 | 61 72 65 20 74 61 67 67 65 64 20 77 69 74 68 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 | are.tagged.with.the.appropriate. |
121c00 | 56 4c 41 4e 20 69 64 2e 00 57 68 65 6e 20 61 20 6c 69 6e 6b 20 69 73 20 72 65 63 6f 6e 6e 65 63 | VLAN.id..When.a.link.is.reconnec |
121c20 | 74 65 64 20 6f 72 20 61 20 6e 65 77 20 73 6c 61 76 65 20 6a 6f 69 6e 73 20 74 68 65 20 62 6f 6e | ted.or.a.new.slave.joins.the.bon |
121c40 | 64 20 74 68 65 20 72 65 63 65 69 76 65 20 74 72 61 66 66 69 63 20 69 73 20 72 65 64 69 73 74 72 | d.the.receive.traffic.is.redistr |
121c60 | 69 62 75 74 65 64 20 61 6d 6f 6e 67 20 61 6c 6c 20 61 63 74 69 76 65 20 73 6c 61 76 65 73 20 69 | ibuted.among.all.active.slaves.i |
121c80 | 6e 20 74 68 65 20 62 6f 6e 64 20 62 79 20 69 6e 69 74 69 61 74 69 6e 67 20 41 52 50 20 52 65 70 | n.the.bond.by.initiating.ARP.Rep |
121ca0 | 6c 69 65 73 20 77 69 74 68 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 4d 41 43 20 61 64 64 72 65 | lies.with.the.selected.MAC.addre |
121cc0 | 73 73 20 74 6f 20 65 61 63 68 20 6f 66 20 74 68 65 20 63 6c 69 65 6e 74 73 2e 20 54 68 65 20 75 | ss.to.each.of.the.clients..The.u |
121ce0 | 70 64 65 6c 61 79 20 70 61 72 61 6d 65 74 65 72 20 28 64 65 74 61 69 6c 65 64 20 62 65 6c 6f 77 | pdelay.parameter.(detailed.below |
121d00 | 29 20 6d 75 73 74 20 62 65 20 73 65 74 20 74 6f 20 61 20 76 61 6c 75 65 20 65 71 75 61 6c 20 6f | ).must.be.set.to.a.value.equal.o |
121d20 | 72 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 68 65 20 73 77 69 74 63 68 27 73 20 66 6f 72 77 | r.greater.than.the.switch's.forw |
121d40 | 61 72 64 69 6e 67 20 64 65 6c 61 79 20 73 6f 20 74 68 61 74 20 74 68 65 20 41 52 50 20 52 65 70 | arding.delay.so.that.the.ARP.Rep |
121d60 | 6c 69 65 73 20 73 65 6e 74 20 74 6f 20 74 68 65 20 70 65 65 72 73 20 77 69 6c 6c 20 6e 6f 74 20 | lies.sent.to.the.peers.will.not. |
121d80 | 62 65 20 62 6c 6f 63 6b 65 64 20 62 79 20 74 68 65 20 73 77 69 74 63 68 2e 00 57 68 65 6e 20 61 | be.blocked.by.the.switch..When.a |
121da0 | 20 70 61 63 6b 65 74 20 69 73 20 74 6f 20 62 65 20 73 65 6e 74 2c 20 69 74 20 77 69 6c 6c 20 68 | .packet.is.to.be.sent,.it.will.h |
121dc0 | 61 76 65 20 74 6f 20 67 6f 20 74 68 72 6f 75 67 68 20 74 68 61 74 20 71 75 65 75 65 2c 20 73 6f | ave.to.go.through.that.queue,.so |
121de0 | 20 74 68 65 20 70 61 63 6b 65 74 20 77 69 6c 6c 20 62 65 20 70 6c 61 63 65 64 20 61 74 20 74 68 | .the.packet.will.be.placed.at.th |
121e00 | 65 20 74 61 69 6c 20 6f 66 20 69 74 2e 20 57 68 65 6e 20 74 68 65 20 70 61 63 6b 65 74 20 63 6f | e.tail.of.it..When.the.packet.co |
121e20 | 6d 70 6c 65 74 65 6c 79 20 67 6f 65 73 20 74 68 72 6f 75 67 68 20 69 74 2c 20 69 74 20 77 69 6c | mpletely.goes.through.it,.it.wil |
121e40 | 6c 20 62 65 20 64 65 71 75 65 75 65 64 20 65 6d 70 74 79 69 6e 67 20 69 74 73 20 70 6c 61 63 65 | l.be.dequeued.emptying.its.place |
121e60 | 20 69 6e 20 74 68 65 20 71 75 65 75 65 20 61 6e 64 20 62 65 69 6e 67 20 65 76 65 6e 74 75 61 6c | .in.the.queue.and.being.eventual |
121e80 | 6c 79 20 68 61 6e 64 65 64 20 74 6f 20 74 68 65 20 4e 49 43 20 74 6f 20 62 65 20 61 63 74 75 61 | ly.handed.to.the.NIC.to.be.actua |
121ea0 | 6c 6c 79 20 73 65 6e 74 20 6f 75 74 2e 00 57 68 65 6e 20 61 20 70 65 65 72 20 72 65 63 65 69 76 | lly.sent.out..When.a.peer.receiv |
121ec0 | 65 73 20 61 20 6d 61 72 74 69 61 6e 20 6e 65 78 74 68 6f 70 20 61 73 20 70 61 72 74 20 6f 66 20 | es.a.martian.nexthop.as.part.of. |
121ee0 | 74 68 65 20 4e 4c 52 49 20 66 6f 72 20 61 20 72 6f 75 74 65 20 70 65 72 6d 69 74 20 74 68 65 20 | the.NLRI.for.a.route.permit.the. |
121f00 | 6e 65 78 74 68 6f 70 20 74 6f 20 62 65 20 75 73 65 64 20 61 73 20 73 75 63 68 2c 20 69 6e 73 74 | nexthop.to.be.used.as.such,.inst |
121f20 | 65 61 64 20 6f 66 20 72 65 6a 65 63 74 69 6e 67 20 61 6e 64 20 72 65 73 65 74 74 69 6e 67 20 74 | ead.of.rejecting.and.resetting.t |
121f40 | 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 57 68 65 6e 20 61 20 72 6f 75 74 65 20 66 61 69 6c | he.connection..When.a.route.fail |
121f60 | 73 2c 20 61 20 72 6f 75 74 69 6e 67 20 75 70 64 61 74 65 20 69 73 20 73 65 6e 74 20 74 6f 20 77 | s,.a.routing.update.is.sent.to.w |
121f80 | 69 74 68 64 72 61 77 20 74 68 65 20 72 6f 75 74 65 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f | ithdraw.the.route.from.the.netwo |
121fa0 | 72 6b 27 73 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 73 2e 20 57 68 65 6e 20 74 68 65 20 72 6f | rk's.routing.tables..When.the.ro |
121fc0 | 75 74 65 20 69 73 20 72 65 2d 65 6e 61 62 6c 65 64 2c 20 74 68 65 20 63 68 61 6e 67 65 20 69 6e | ute.is.re-enabled,.the.change.in |
121fe0 | 20 61 76 61 69 6c 61 62 69 6c 69 74 79 20 69 73 20 61 6c 73 6f 20 61 64 76 65 72 74 69 73 65 64 | .availability.is.also.advertised |
122000 | 2e 20 41 20 72 6f 75 74 65 20 74 68 61 74 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 20 66 61 69 6c 73 | ..A.route.that.continually.fails |
122020 | 20 61 6e 64 20 72 65 74 75 72 6e 73 20 72 65 71 75 69 72 65 73 20 61 20 67 72 65 61 74 20 64 65 | .and.returns.requires.a.great.de |
122040 | 61 6c 20 6f 66 20 6e 65 74 77 6f 72 6b 20 74 72 61 66 66 69 63 20 74 6f 20 75 70 64 61 74 65 20 | al.of.network.traffic.to.update. |
122060 | 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 62 6f 75 74 20 74 68 65 20 72 6f 75 74 65 27 73 20 73 74 | the.network.about.the.route's.st |
122080 | 61 74 75 73 2e 00 57 68 65 6e 20 61 64 64 69 6e 67 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 69 | atus..When.adding.IPv6.routing.i |
1220a0 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 65 78 63 68 61 6e 67 65 20 66 65 61 74 75 72 65 20 74 6f 20 42 | nformation.exchange.feature.to.B |
1220c0 | 47 50 2e 20 54 68 65 72 65 20 77 65 72 65 20 73 6f 6d 65 20 70 72 6f 70 6f 73 61 6c 73 2e 20 3a | GP..There.were.some.proposals..: |
1220e0 | 61 62 62 72 3a 60 49 45 54 46 20 28 49 6e 74 65 72 6e 65 74 20 45 6e 67 69 6e 65 65 72 69 6e 67 | abbr:`IETF.(Internet.Engineering |
122100 | 20 54 61 73 6b 20 46 6f 72 63 65 29 60 20 3a 61 62 62 72 3a 60 49 44 52 20 28 49 6e 74 65 72 20 | .Task.Force)`.:abbr:`IDR.(Inter. |
122120 | 44 6f 6d 61 69 6e 20 52 6f 75 74 69 6e 67 29 60 20 61 64 6f 70 74 65 64 20 61 20 70 72 6f 70 6f | Domain.Routing)`.adopted.a.propo |
122140 | 73 61 6c 20 63 61 6c 6c 65 64 20 4d 75 6c 74 69 70 72 6f 74 6f 63 6f 6c 20 45 78 74 65 6e 73 69 | sal.called.Multiprotocol.Extensi |
122160 | 6f 6e 20 66 6f 72 20 42 47 50 2e 20 54 68 65 20 73 70 65 63 69 66 69 63 61 74 69 6f 6e 20 69 73 | on.for.BGP..The.specification.is |
122180 | 20 64 65 73 63 72 69 62 65 64 20 69 6e 20 3a 72 66 63 3a 60 32 32 38 33 60 2e 20 54 68 65 20 70 | .described.in.:rfc:`2283`..The.p |
1221a0 | 72 6f 74 6f 63 6f 6c 20 64 6f 65 73 20 6e 6f 74 20 64 65 66 69 6e 65 20 6e 65 77 20 70 72 6f 74 | rotocol.does.not.define.new.prot |
1221c0 | 6f 63 6f 6c 73 2e 20 49 74 20 64 65 66 69 6e 65 73 20 6e 65 77 20 61 74 74 72 69 62 75 74 65 73 | ocols..It.defines.new.attributes |
1221e0 | 20 74 6f 20 65 78 69 73 74 69 6e 67 20 42 47 50 2e 20 57 68 65 6e 20 69 74 20 69 73 20 75 73 65 | .to.existing.BGP..When.it.is.use |
122200 | 64 20 65 78 63 68 61 6e 67 69 6e 67 20 49 50 76 36 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d | d.exchanging.IPv6.routing.inform |
122220 | 61 74 69 6f 6e 20 69 74 20 69 73 20 63 61 6c 6c 65 64 20 42 47 50 2d 34 2b 2e 20 57 68 65 6e 20 | ation.it.is.called.BGP-4+..When. |
122240 | 69 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 65 78 63 68 61 6e 67 69 6e 67 20 6d 75 6c 74 69 63 | it.is.used.for.exchanging.multic |
122260 | 61 73 74 20 72 6f 75 74 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 74 20 69 73 20 63 61 | ast.routing.information.it.is.ca |
122280 | 6c 6c 65 64 20 4d 42 47 50 2e 00 57 68 65 6e 20 61 6e 20 61 75 74 68 6f 72 69 74 61 74 69 76 65 | lled.MBGP..When.an.authoritative |
1222a0 | 20 73 65 72 76 65 72 20 64 6f 65 73 20 6e 6f 74 20 61 6e 73 77 65 72 20 61 20 71 75 65 72 79 20 | .server.does.not.answer.a.query. |
1222c0 | 6f 72 20 73 65 6e 64 73 20 61 20 72 65 70 6c 79 20 74 68 65 20 72 65 63 75 72 73 6f 72 20 64 6f | or.sends.a.reply.the.recursor.do |
1222e0 | 65 73 20 6e 6f 74 20 6c 69 6b 65 2c 20 69 74 20 69 73 20 74 68 72 6f 74 74 6c 65 64 2e 20 41 6e | es.not.like,.it.is.throttled..An |
122300 | 79 20 73 65 72 76 65 72 73 20 6d 61 74 63 68 69 6e 67 20 74 68 65 20 73 75 70 70 6c 69 65 64 20 | y.servers.matching.the.supplied. |
122320 | 6e 65 74 6d 61 73 6b 73 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 20 74 68 72 6f 74 74 6c 65 64 | netmasks.will.never.be.throttled |
122340 | 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 2c 20 50 50 50 6f 45 20 77 69 6c 6c 20 63 72 | ..When.configured,.PPPoE.will.cr |
122360 | 65 61 74 65 20 74 68 65 20 6e 65 63 65 73 73 61 72 79 20 56 4c 41 4e 73 20 77 68 65 6e 20 72 65 | eate.the.necessary.VLANs.when.re |
122380 | 71 75 69 72 65 64 2e 20 4f 6e 63 65 20 74 68 65 20 75 73 65 72 20 73 65 73 73 69 6f 6e 20 68 61 | quired..Once.the.user.session.ha |
1223a0 | 73 20 62 65 65 6e 20 63 61 6e 63 65 6c 6c 65 64 20 61 6e 64 20 74 68 65 20 56 4c 41 4e 20 69 73 | s.been.cancelled.and.the.VLAN.is |
1223c0 | 20 6e 6f 74 20 6e 65 65 64 65 64 20 61 6e 79 6d 6f 72 65 2c 20 56 79 4f 53 20 77 69 6c 6c 20 72 | .not.needed.anymore,.VyOS.will.r |
1223e0 | 65 6d 6f 76 65 20 69 74 20 61 67 61 69 6e 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 | emove.it.again..When.configuring |
122400 | 20 61 20 52 61 6e 64 6f 6d 2d 44 65 74 65 63 74 20 70 6f 6c 69 63 79 3a 20 2a 2a 74 68 65 20 68 | .a.Random-Detect.policy:.**the.h |
122420 | 69 67 68 65 72 20 74 68 65 20 70 72 65 63 65 64 65 6e 63 65 20 6e 75 6d 62 65 72 2c 20 74 68 65 | igher.the.precedence.number,.the |
122440 | 20 68 69 67 68 65 72 20 74 68 65 20 70 72 69 6f 72 69 74 79 2a 2a 2e 00 57 68 65 6e 20 63 6f 6e | .higher.the.priority**..When.con |
122460 | 66 69 67 75 72 69 6e 67 20 79 6f 75 72 20 66 69 6c 74 65 72 2c 20 79 6f 75 20 63 61 6e 20 75 73 | figuring.your.filter,.you.can.us |
122480 | 65 20 74 68 65 20 60 60 54 61 62 60 60 20 6b 65 79 20 74 6f 20 73 65 65 20 74 68 65 20 6d 61 6e | e.the.``Tab``.key.to.see.the.man |
1224a0 | 79 20 64 69 66 66 65 72 65 6e 74 20 70 61 72 61 6d 65 74 65 72 73 20 79 6f 75 20 63 61 6e 20 63 | y.different.parameters.you.can.c |
1224c0 | 6f 6e 66 69 67 75 72 65 2e 00 57 68 65 6e 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 79 6f 75 72 20 | onfigure..When.configuring.your. |
1224e0 | 74 72 61 66 66 69 63 20 70 6f 6c 69 63 79 2c 20 79 6f 75 20 77 69 6c 6c 20 68 61 76 65 20 74 6f | traffic.policy,.you.will.have.to |
122500 | 20 73 65 74 20 64 61 74 61 20 72 61 74 65 20 76 61 6c 75 65 73 2c 20 77 61 74 63 68 20 6f 75 74 | .set.data.rate.values,.watch.out |
122520 | 20 74 68 65 20 75 6e 69 74 73 20 79 6f 75 20 61 72 65 20 6d 61 6e 61 67 69 6e 67 2c 20 69 74 20 | .the.units.you.are.managing,.it. |
122540 | 69 73 20 65 61 73 79 20 74 6f 20 67 65 74 20 63 6f 6e 66 75 73 65 64 20 77 69 74 68 20 74 68 65 | is.easy.to.get.confused.with.the |
122560 | 20 64 69 66 66 65 72 65 6e 74 20 70 72 65 66 69 78 65 73 20 61 6e 64 20 73 75 66 66 69 78 65 73 | .different.prefixes.and.suffixes |
122580 | 20 79 6f 75 20 63 61 6e 20 75 73 65 2e 20 56 79 4f 53 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 73 | .you.can.use..VyOS.will.always.s |
1225a0 | 68 6f 77 20 79 6f 75 20 74 68 65 20 64 69 66 66 65 72 65 6e 74 20 75 6e 69 74 73 20 79 6f 75 20 | how.you.the.different.units.you. |
1225c0 | 63 61 6e 20 75 73 65 2e 00 57 68 65 6e 20 64 65 66 69 6e 69 6e 67 20 61 20 72 75 6c 65 2c 20 69 | can.use..When.defining.a.rule,.i |
1225e0 | 74 20 69 73 20 65 6e 61 62 6c 65 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 6e 20 73 6f 6d 65 20 | t.is.enable.by.default..In.some. |
122600 | 63 61 73 65 73 2c 20 69 74 20 69 73 20 75 73 65 66 75 6c 20 74 6f 20 6a 75 73 74 20 64 69 73 61 | cases,.it.is.useful.to.just.disa |
122620 | 62 6c 65 20 74 68 65 20 72 75 6c 65 2c 20 72 61 74 68 65 72 20 74 68 61 6e 20 72 65 6d 6f 76 69 | ble.the.rule,.rather.than.removi |
122640 | 6e 67 20 69 74 2e 00 57 68 65 6e 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 74 72 61 6e 73 6c 61 | ng.it..When.defining.the.transla |
122660 | 74 65 64 20 61 64 64 72 65 73 73 2c 20 63 61 6c 6c 65 64 20 60 60 62 61 63 6b 65 6e 64 73 60 60 | ted.address,.called.``backends`` |
122680 | 2c 20 61 20 60 60 77 65 69 67 68 74 60 60 20 6d 75 73 74 20 62 65 20 63 6f 6e 66 69 67 75 72 65 | ,.a.``weight``.must.be.configure |
1226a0 | 64 2e 20 54 68 69 73 20 6c 65 74 73 20 74 68 65 20 75 73 65 72 20 64 65 66 69 6e 65 20 6c 6f 61 | d..This.lets.the.user.define.loa |
1226c0 | 64 20 62 61 6c 61 6e 63 65 20 64 69 73 74 72 69 62 75 74 69 6f 6e 20 61 63 63 6f 72 64 69 6e 67 | d.balance.distribution.according |
1226e0 | 20 74 6f 20 74 68 65 69 72 20 6e 65 65 64 73 2e 20 54 68 65 6d 20 73 75 6d 20 6f 66 20 61 6c 6c | .to.their.needs..Them.sum.of.all |
122700 | 20 74 68 65 20 77 65 69 67 68 74 73 20 64 65 66 69 6e 65 64 20 66 6f 72 20 74 68 65 20 62 61 63 | .the.weights.defined.for.the.bac |
122720 | 6b 65 6e 64 73 20 73 68 6f 75 6c 64 20 62 65 20 65 71 75 61 6c 20 74 6f 20 31 30 30 2e 20 49 6e | kends.should.be.equal.to.100..In |
122740 | 20 6f 64 65 72 20 77 6f 72 64 73 2c 20 74 68 65 20 77 65 69 67 68 74 20 64 65 66 69 6e 65 64 20 | .oder.words,.the.weight.defined. |
122760 | 66 6f 72 20 74 68 65 20 62 61 63 6b 65 6e 64 20 69 73 20 74 68 65 20 70 65 72 63 65 6e 74 61 67 | for.the.backend.is.the.percentag |
122780 | 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 74 68 61 74 20 77 69 6c 6c 20 72 | e.of.the.connections.that.will.r |
1227a0 | 65 63 65 69 76 65 20 73 75 63 68 20 62 61 63 6b 65 6e 64 2e 00 57 68 65 6e 20 64 65 71 75 65 75 | eceive.such.backend..When.dequeu |
1227c0 | 69 6e 67 2c 20 65 61 63 68 20 68 61 73 68 2d 62 75 63 6b 65 74 20 77 69 74 68 20 64 61 74 61 20 | ing,.each.hash-bucket.with.data. |
1227e0 | 69 73 20 71 75 65 72 69 65 64 20 69 6e 20 61 20 72 6f 75 6e 64 20 72 6f 62 69 6e 20 66 61 73 68 | is.queried.in.a.round.robin.fash |
122800 | 69 6f 6e 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 6c 65 6e 67 74 | ion..You.can.configure.the.lengt |
122820 | 68 20 6f 66 20 74 68 65 20 71 75 65 75 65 2e 00 57 68 65 6e 20 64 65 73 69 67 6e 69 6e 67 20 79 | h.of.the.queue..When.designing.y |
122840 | 6f 75 72 20 4e 41 54 20 72 75 6c 65 73 65 74 20 6c 65 61 76 65 20 73 6f 6d 65 20 73 70 61 63 65 | our.NAT.ruleset.leave.some.space |
122860 | 20 62 65 74 77 65 65 6e 20 63 6f 6e 73 65 63 75 74 69 76 65 20 72 75 6c 65 73 20 66 6f 72 20 6c | .between.consecutive.rules.for.l |
122880 | 61 74 65 72 20 65 78 74 65 6e 73 69 6f 6e 2e 20 59 6f 75 72 20 72 75 6c 65 73 65 74 20 63 6f 75 | ater.extension..Your.ruleset.cou |
1228a0 | 6c 64 20 73 74 61 72 74 20 77 69 74 68 20 6e 75 6d 62 65 72 73 20 31 30 2c 20 32 30 2c 20 33 30 | ld.start.with.numbers.10,.20,.30 |
1228c0 | 2e 20 59 6f 75 20 74 68 75 73 20 63 61 6e 20 6c 61 74 65 72 20 65 78 74 65 6e 64 20 74 68 65 20 | ..You.thus.can.later.extend.the. |
1228e0 | 72 75 6c 65 73 65 74 20 61 6e 64 20 70 6c 61 63 65 20 6e 65 77 20 72 75 6c 65 73 20 62 65 74 77 | ruleset.and.place.new.rules.betw |
122900 | 65 65 6e 20 65 78 69 73 74 69 6e 67 20 6f 6e 65 73 2e 00 57 68 65 6e 20 64 6f 69 6e 67 20 66 61 | een.existing.ones..When.doing.fa |
122920 | 75 6c 74 20 69 73 6f 6c 61 74 69 6f 6e 20 77 69 74 68 20 70 69 6e 67 2c 20 79 6f 75 20 73 68 6f | ult.isolation.with.ping,.you.sho |
122940 | 75 6c 64 20 66 69 72 73 74 20 72 75 6e 20 69 74 20 6f 6e 20 74 68 65 20 6c 6f 63 61 6c 20 68 6f | uld.first.run.it.on.the.local.ho |
122960 | 73 74 2c 20 74 6f 20 76 65 72 69 66 79 20 74 68 61 74 20 74 68 65 20 6c 6f 63 61 6c 20 6e 65 74 | st,.to.verify.that.the.local.net |
122980 | 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 75 70 20 61 6e 64 20 72 75 6e 6e 69 6e 67 | work.interface.is.up.and.running |
1229a0 | 2e 20 54 68 65 6e 2c 20 63 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 68 6f 73 74 73 20 61 6e 64 20 | ..Then,.continue.with.hosts.and. |
1229c0 | 67 61 74 65 77 61 79 73 20 66 75 72 74 68 65 72 20 64 6f 77 6e 20 74 68 65 20 72 6f 61 64 20 74 | gateways.further.down.the.road.t |
1229e0 | 6f 77 61 72 64 73 20 79 6f 75 72 20 64 65 73 74 69 6e 61 74 69 6f 6e 2e 20 52 6f 75 6e 64 2d 74 | owards.your.destination..Round-t |
122a00 | 72 69 70 20 74 69 6d 65 20 61 6e 64 20 70 61 63 6b 65 74 20 6c 6f 73 73 20 73 74 61 74 69 73 74 | rip.time.and.packet.loss.statist |
122a20 | 69 63 73 20 61 72 65 20 63 6f 6d 70 75 74 65 64 2e 00 57 68 65 6e 20 66 69 72 73 74 20 63 6f 6e | ics.are.computed..When.first.con |
122a40 | 6e 65 63 74 69 6e 67 20 74 6f 20 74 68 65 20 6e 65 77 20 56 50 4e 20 74 68 65 20 75 73 65 72 20 | necting.to.the.new.VPN.the.user. |
122a60 | 69 73 20 70 72 6f 6d 70 74 65 64 20 74 6f 20 65 6e 74 65 72 20 70 72 6f 70 65 72 20 63 72 65 64 | is.prompted.to.enter.proper.cred |
122a80 | 65 6e 74 69 61 6c 73 2e 00 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 | entials..When.loading.the.certif |
122aa0 | 69 63 61 74 65 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 73 74 72 69 70 | icate.you.need.to.manually.strip |
122ac0 | 20 74 68 65 20 60 60 2d 2d 2d 2d 2d 42 45 47 49 4e 20 43 45 52 54 49 46 49 43 41 54 45 2d 2d 2d | .the.``-----BEGIN.CERTIFICATE--- |
122ae0 | 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 4e 44 20 43 45 52 54 49 46 49 43 41 54 45 2d | --``.and.``-----END.CERTIFICATE- |
122b00 | 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 72 74 69 66 69 63 61 | ----``.tags..Also,.the.certifica |
122b20 | 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 | te/key.needs.to.be.presented.in. |
122b40 | 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e 65 20 62 72 65 61 6b | a.single.line.without.line.break |
122b60 | 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 64 6f 6e 65 20 75 73 69 | s.(``\n``),.this.can.be.done.usi |
122b80 | 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 65 6c 6c 20 63 6f 6d 6d 61 6e 64 3a 00 | ng.the.following.shell.command:. |
122ba0 | 57 68 65 6e 20 6c 6f 61 64 69 6e 67 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 79 6f 75 | When.loading.the.certificate.you |
122bc0 | 20 6e 65 65 64 20 74 6f 20 6d 61 6e 75 61 6c 6c 79 20 73 74 72 69 70 20 74 68 65 20 60 60 2d 2d | .need.to.manually.strip.the.``-- |
122be0 | 2d 2d 2d 42 45 47 49 4e 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 61 6e 64 20 60 60 2d 2d 2d 2d 2d 45 | ---BEGIN.KEY-----``.and.``-----E |
122c00 | 4e 44 20 4b 45 59 2d 2d 2d 2d 2d 60 60 20 74 61 67 73 2e 20 41 6c 73 6f 2c 20 74 68 65 20 63 65 | ND.KEY-----``.tags..Also,.the.ce |
122c20 | 72 74 69 66 69 63 61 74 65 2f 6b 65 79 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 65 73 65 6e | rtificate/key.needs.to.be.presen |
122c40 | 74 65 64 20 69 6e 20 61 20 73 69 6e 67 6c 65 20 6c 69 6e 65 20 77 69 74 68 6f 75 74 20 6c 69 6e | ted.in.a.single.line.without.lin |
122c60 | 65 20 62 72 65 61 6b 73 20 28 60 60 5c 6e 60 60 29 2c 20 74 68 69 73 20 63 61 6e 20 62 65 20 64 | e.breaks.(``\n``),.this.can.be.d |
122c80 | 6f 6e 65 20 75 73 69 6e 67 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 68 65 6c 6c 20 63 6f | one.using.the.following.shell.co |
122ca0 | 6d 6d 61 6e 64 3a 00 57 68 65 6e 20 6d 61 74 68 63 69 6e 67 20 61 6c 6c 20 70 61 74 74 65 72 6e | mmand:.When.mathcing.all.pattern |
122cc0 | 73 20 64 65 66 69 6e 65 64 20 69 6e 20 61 20 72 75 6c 65 2c 20 74 68 65 6e 20 64 69 66 66 65 72 | s.defined.in.a.rule,.then.differ |
122ce0 | 65 6e 74 20 61 63 74 69 6f 6e 73 20 63 61 6e 20 62 65 20 6d 61 64 65 2e 20 54 68 69 73 20 69 6e | ent.actions.can.be.made..This.in |
122d00 | 63 6c 75 64 65 73 20 64 72 6f 70 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 2c 20 6d 6f 64 69 66 | cludes.droping.the.packet,.modif |
122d20 | 79 69 6e 67 20 63 65 72 74 61 69 6e 20 64 61 74 61 2c 20 6f 72 20 73 65 74 74 69 6e 67 20 61 20 | ying.certain.data,.or.setting.a. |
122d40 | 64 69 66 66 65 72 65 6e 74 20 72 6f 75 74 69 6e 67 20 74 61 62 6c 65 2e 00 57 68 65 6e 20 6e 6f | different.routing.table..When.no |
122d60 | 20 6f 70 74 69 6f 6e 73 2f 70 61 72 61 6d 65 74 65 72 73 20 61 72 65 20 75 73 65 64 2c 20 74 68 | .options/parameters.are.used,.th |
122d80 | 65 20 63 6f 6e 74 65 6e 74 73 20 6f 66 20 74 68 65 20 6d 61 69 6e 20 73 79 73 6c 6f 67 20 66 69 | e.contents.of.the.main.syslog.fi |
122da0 | 6c 65 20 61 72 65 20 64 69 73 70 6c 61 79 65 64 2e 00 57 68 65 6e 20 6e 6f 2d 72 65 6c 65 61 73 | le.are.displayed..When.no-releas |
122dc0 | 65 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 73 65 6e 64 | e.is.specified,.dhcp6c.will.send |
122de0 | 20 61 20 72 65 6c 65 61 73 65 20 6d 65 73 73 61 67 65 20 6f 6e 20 63 6c 69 65 6e 74 20 65 78 69 | .a.release.message.on.client.exi |
122e00 | 74 20 74 6f 20 70 72 65 76 65 6e 74 20 6c 6f 73 69 6e 67 20 61 6e 20 61 73 73 69 67 6e 65 64 20 | t.to.prevent.losing.an.assigned. |
122e20 | 61 64 64 72 65 73 73 20 6f 72 20 70 72 65 66 69 78 2e 00 57 68 65 6e 20 70 72 6f 63 65 73 73 69 | address.or.prefix..When.processi |
122e40 | 6e 67 20 70 61 63 6b 65 74 73 20 66 72 6f 6d 20 61 20 6e 65 69 67 68 62 6f 72 20 70 72 6f 63 65 | ng.packets.from.a.neighbor.proce |
122e60 | 73 73 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 69 6e 63 6f 6d 69 6e | ss.the.number.of.packets.incomin |
122e80 | 67 20 61 74 20 6f 6e 65 20 74 69 6d 65 20 62 65 66 6f 72 65 20 6d 6f 76 69 6e 67 20 6f 6e 20 74 | g.at.one.time.before.moving.on.t |
122ea0 | 6f 20 74 68 65 20 6e 65 78 74 20 74 61 73 6b 2e 00 57 68 65 6e 20 72 61 70 69 64 2d 63 6f 6d 6d | o.the.next.task..When.rapid-comm |
122ec0 | 69 74 20 69 73 20 73 70 65 63 69 66 69 65 64 2c 20 64 68 63 70 36 63 20 77 69 6c 6c 20 69 6e 63 | it.is.specified,.dhcp6c.will.inc |
122ee0 | 6c 75 64 65 20 61 20 72 61 70 69 64 2d 63 6f 6d 6d 69 74 20 6f 70 74 69 6f 6e 20 69 6e 20 73 6f | lude.a.rapid-commit.option.in.so |
122f00 | 6c 69 63 69 74 20 6d 65 73 73 61 67 65 73 20 61 6e 64 20 77 61 69 74 20 66 6f 72 20 61 6e 20 69 | licit.messages.and.wait.for.an.i |
122f20 | 6d 6d 65 64 69 61 74 65 20 72 65 70 6c 79 20 69 6e 73 74 65 61 64 20 6f 66 20 61 64 76 65 72 74 | mmediate.reply.instead.of.advert |
122f40 | 69 73 65 6d 65 6e 74 73 2e 00 57 68 65 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 | isements..When.remote.peer.does. |
122f60 | 6e 6f 74 20 68 61 76 65 20 63 61 70 61 62 69 6c 69 74 79 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 | not.have.capability.negotiation. |
122f80 | 66 65 61 74 75 72 65 2c 20 72 65 6d 6f 74 65 20 70 65 65 72 20 77 69 6c 6c 20 6e 6f 74 20 73 65 | feature,.remote.peer.will.not.se |
122fa0 | 6e 64 20 61 6e 79 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 61 74 20 61 6c 6c 2e 20 49 6e 20 74 | nd.any.capabilities.at.all..In.t |
122fc0 | 68 61 74 20 63 61 73 65 2c 20 62 67 70 20 63 6f 6e 66 69 67 75 72 65 73 20 74 68 65 20 70 65 65 | hat.case,.bgp.configures.the.pee |
122fe0 | 72 20 77 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 00 | r.with.configured.capabilities.. |
123000 | 57 68 65 6e 20 72 75 6e 6e 69 6e 67 20 69 74 20 61 74 20 31 47 62 69 74 20 61 6e 64 20 6c 6f 77 | When.running.it.at.1Gbit.and.low |
123020 | 65 72 2c 20 79 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 72 65 64 75 63 65 20 74 68 65 20 60 | er,.you.may.want.to.reduce.the.` |
123040 | 71 75 65 75 65 2d 6c 69 6d 69 74 60 20 74 6f 20 31 30 30 30 20 70 61 63 6b 65 74 73 20 6f 72 20 | queue-limit`.to.1000.packets.or. |
123060 | 6c 65 73 73 2e 20 49 6e 20 72 61 74 65 73 20 6c 69 6b 65 20 31 30 4d 62 69 74 2c 20 79 6f 75 20 | less..In.rates.like.10Mbit,.you. |
123080 | 6d 61 79 20 77 61 6e 74 20 74 6f 20 73 65 74 20 69 74 20 74 6f 20 36 30 30 20 70 61 63 6b 65 74 | may.want.to.set.it.to.600.packet |
1230a0 | 73 2e 00 57 68 65 6e 20 73 65 6e 64 69 6e 67 20 50 49 4d 20 68 65 6c 6c 6f 20 70 61 63 6b 65 74 | s..When.sending.PIM.hello.packet |
1230c0 | 73 20 74 65 6c 6c 20 50 49 4d 20 74 6f 20 6e 6f 74 20 73 65 6e 64 20 61 6e 79 20 76 36 20 73 65 | s.tell.PIM.to.not.send.any.v6.se |
1230e0 | 63 6f 6e 64 61 72 79 20 61 64 64 72 65 73 73 65 73 20 6f 6e 20 74 68 65 20 69 6e 74 65 72 66 61 | condary.addresses.on.the.interfa |
123100 | 63 65 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 74 6f 20 | ce..This.information.is.used.to. |
123120 | 61 6c 6c 6f 77 20 50 49 4d 20 74 6f 20 75 73 65 20 76 36 20 6e 65 78 74 68 6f 70 73 20 69 6e 20 | allow.PIM.to.use.v6.nexthops.in. |
123140 | 69 74 27 73 20 64 65 63 69 73 69 6f 6e 20 66 6f 72 20 3a 61 62 62 72 3a 60 52 50 46 20 28 52 65 | it's.decision.for.:abbr:`RPF.(Re |
123160 | 76 65 72 73 65 20 50 61 74 68 20 46 6f 72 77 61 72 64 69 6e 67 29 60 20 6c 6f 6f 6b 75 70 20 69 | verse.Path.Forwarding)`.lookup.i |
123180 | 66 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 65 74 20 28 64 65 66 61 75 6c | f.this.option.is.not.set.(defaul |
1231a0 | 74 29 2e 00 57 68 65 6e 20 73 65 74 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 65 6e | t)..When.set.the.interface.is.en |
1231c0 | 61 62 6c 65 64 20 66 6f 72 20 22 64 69 61 6c 2d 6f 6e 2d 64 65 6d 61 6e 64 22 2e 00 57 68 65 6e | abled.for."dial-on-demand"..When |
1231e0 | 20 73 70 65 63 69 66 69 65 64 2c 20 74 68 69 73 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 6f | .specified,.this.should.be.the.o |
123200 | 6e 6c 79 20 6b 65 79 77 6f 72 64 20 66 6f 72 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2e 00 57 | nly.keyword.for.the.interface..W |
123220 | 68 65 6e 20 73 74 61 72 74 69 6e 67 20 61 20 56 79 4f 53 20 6c 69 76 65 20 73 79 73 74 65 6d 20 | hen.starting.a.VyOS.live.system. |
123240 | 28 74 68 65 20 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 43 44 29 20 74 68 65 20 63 6f 6e 66 69 67 | (the.installation.CD).the.config |
123260 | 75 72 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 64 65 66 61 75 6c 74 73 20 74 6f | ured.keyboard.layout.defaults.to |
123280 | 20 55 53 2e 20 41 73 20 74 68 69 73 20 6d 69 67 68 74 20 6e 6f 74 20 73 75 69 74 65 20 65 76 65 | .US..As.this.might.not.suite.eve |
1232a0 | 72 79 6f 6e 65 73 20 75 73 65 20 63 61 73 65 20 79 6f 75 20 63 61 6e 20 61 64 6a 75 73 74 20 74 | ryones.use.case.you.can.adjust.t |
1232c0 | 68 65 20 75 73 65 64 20 6b 65 79 62 6f 61 72 64 20 6c 61 79 6f 75 74 20 6f 6e 20 74 68 65 20 73 | he.used.keyboard.layout.on.the.s |
1232e0 | 79 73 74 65 6d 20 63 6f 6e 73 6f 6c 65 2e 00 57 68 65 6e 20 74 68 65 20 44 48 43 50 20 73 65 72 | ystem.console..When.the.DHCP.ser |
123300 | 76 65 72 20 69 73 20 63 6f 6e 73 69 64 65 72 69 6e 67 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 | ver.is.considering.dynamically.a |
123320 | 6c 6c 6f 63 61 74 69 6e 67 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 61 20 63 6c 69 | llocating.an.IP.address.to.a.cli |
123340 | 65 6e 74 2c 20 69 74 20 66 69 72 73 74 20 73 65 6e 64 73 20 61 6e 20 49 43 4d 50 20 45 63 68 6f | ent,.it.first.sends.an.ICMP.Echo |
123360 | 20 72 65 71 75 65 73 74 20 28 61 20 70 69 6e 67 29 20 74 6f 20 74 68 65 20 61 64 64 72 65 73 73 | .request.(a.ping).to.the.address |
123380 | 20 62 65 69 6e 67 20 61 73 73 69 67 6e 65 64 2e 20 49 74 20 77 61 69 74 73 20 66 6f 72 20 61 20 | .being.assigned..It.waits.for.a. |
1233a0 | 73 65 63 6f 6e 64 2c 20 61 6e 64 20 69 66 20 6e 6f 20 49 43 4d 50 20 45 63 68 6f 20 72 65 73 70 | second,.and.if.no.ICMP.Echo.resp |
1233c0 | 6f 6e 73 65 20 68 61 73 20 62 65 65 6e 20 68 65 61 72 64 2c 20 69 74 20 61 73 73 69 67 6e 73 20 | onse.has.been.heard,.it.assigns. |
1233e0 | 74 68 65 20 61 64 64 72 65 73 73 2e 00 57 68 65 6e 20 74 68 65 20 63 6c 6f 73 65 2d 61 63 74 69 | the.address..When.the.close-acti |
123400 | 6f 6e 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 6f 6e 20 74 68 65 20 70 65 65 72 73 2c 20 74 | on.option.is.set.on.the.peers,.t |
123420 | 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2d 74 79 70 65 20 6f 66 20 65 61 63 68 20 70 65 65 72 20 | he.connection-type.of.each.peer. |
123440 | 68 61 73 20 74 6f 20 63 6f 6e 73 69 64 65 72 65 64 20 63 61 72 65 66 75 6c 6c 79 2e 20 46 6f 72 | has.to.considered.carefully..For |
123460 | 20 65 78 61 6d 70 6c 65 2c 20 69 66 20 74 68 65 20 6f 70 74 69 6f 6e 20 69 73 20 73 65 74 20 6f | .example,.if.the.option.is.set.o |
123480 | 6e 20 62 6f 74 68 20 70 65 65 72 73 2c 20 74 68 65 6e 20 62 6f 74 68 20 77 6f 75 6c 64 20 61 74 | n.both.peers,.then.both.would.at |
1234a0 | 74 65 6d 70 74 20 74 6f 20 69 6e 69 74 69 61 74 65 20 61 6e 64 20 68 6f 6c 64 20 6f 70 65 6e 20 | tempt.to.initiate.and.hold.open. |
1234c0 | 6d 75 6c 74 69 70 6c 65 20 63 6f 70 69 65 73 20 6f 66 20 65 61 63 68 20 63 68 69 6c 64 20 53 41 | multiple.copies.of.each.child.SA |
1234e0 | 2e 20 54 68 69 73 20 6d 69 67 68 74 20 6c 65 61 64 20 74 6f 20 69 6e 73 74 61 62 69 6c 69 74 79 | ..This.might.lead.to.instability |
123500 | 20 6f 66 20 74 68 65 20 64 65 76 69 63 65 20 6f 72 20 63 70 75 2f 6d 65 6d 6f 72 79 20 75 74 69 | .of.the.device.or.cpu/memory.uti |
123520 | 6c 69 7a 61 74 69 6f 6e 2e 00 57 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 | lization..When.the.command.above |
123540 | 20 69 73 20 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 65 76 65 72 79 20 | .is.set,.VyOS.will.answer.every. |
123560 | 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 64 20 74 6f 20 69 | ICMP.echo.request.addressed.to.i |
123580 | 74 73 65 6c 66 2c 20 62 75 74 20 74 68 61 74 20 77 69 6c 6c 20 6f 6e 6c 79 20 68 61 70 70 65 6e | tself,.but.that.will.only.happen |
1235a0 | 20 69 66 20 6e 6f 20 6f 74 68 65 72 20 72 75 6c 65 20 69 73 20 61 70 70 6c 69 65 64 20 64 72 6f | .if.no.other.rule.is.applied.dro |
1235c0 | 70 70 69 6e 67 20 6f 72 20 72 65 6a 65 63 74 69 6e 67 20 6c 6f 63 61 6c 20 65 63 68 6f 20 72 65 | pping.or.rejecting.local.echo.re |
1235e0 | 71 75 65 73 74 73 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 63 6f 6e 66 6c 69 63 74 2c 20 56 79 4f | quests..In.case.of.conflict,.VyO |
123600 | 53 20 77 69 6c 6c 20 6e 6f 74 20 61 6e 73 77 65 72 20 49 43 4d 50 20 65 63 68 6f 20 72 65 71 75 | S.will.not.answer.ICMP.echo.requ |
123620 | 65 73 74 73 2e 00 57 68 65 6e 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 61 62 6f 76 65 20 69 73 20 | ests..When.the.command.above.is. |
123640 | 73 65 74 2c 20 56 79 4f 53 20 77 69 6c 6c 20 61 6e 73 77 65 72 20 6e 6f 20 49 43 4d 50 20 65 63 | set,.VyOS.will.answer.no.ICMP.ec |
123660 | 68 6f 20 72 65 71 75 65 73 74 20 61 64 64 72 65 73 73 65 64 20 74 6f 20 69 74 73 65 6c 66 20 61 | ho.request.addressed.to.itself.a |
123680 | 74 20 61 6c 6c 2c 20 6e 6f 20 6d 61 74 74 65 72 20 77 68 65 72 65 20 69 74 20 63 6f 6d 65 73 20 | t.all,.no.matter.where.it.comes. |
1236a0 | 66 72 6f 6d 20 6f 72 20 77 68 65 74 68 65 72 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 72 75 | from.or.whether.more.specific.ru |
1236c0 | 6c 65 73 20 61 72 65 20 62 65 69 6e 67 20 61 70 70 6c 69 65 64 20 74 6f 20 61 63 63 65 70 74 20 | les.are.being.applied.to.accept. |
1236e0 | 74 68 65 6d 2e 00 57 68 65 6e 20 74 68 65 20 76 72 72 70 20 67 72 6f 75 70 20 69 73 20 61 20 6d | them..When.the.vrrp.group.is.a.m |
123700 | 65 6d 62 65 72 20 6f 66 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 20 77 69 6c 6c 20 75 73 65 | ember.of.the.sync.group.will.use |
123720 | 20 6f 6e 6c 79 20 74 68 65 20 73 79 6e 63 20 67 72 6f 75 70 20 68 65 61 6c 74 68 20 63 68 65 63 | .only.the.sync.group.health.chec |
123740 | 6b 20 73 63 72 69 70 74 2e 20 54 68 69 73 20 65 78 61 6d 70 6c 65 20 73 68 6f 77 73 20 68 6f 77 | k.script..This.example.shows.how |
123760 | 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 69 74 20 66 6f 72 20 74 68 65 20 73 79 6e 63 20 67 72 | .to.configure.it.for.the.sync.gr |
123780 | 6f 75 70 3a 00 57 68 65 6e 20 75 73 69 6e 67 20 44 48 43 50 20 74 6f 20 72 65 74 72 69 65 76 65 | oup:.When.using.DHCP.to.retrieve |
1237a0 | 20 49 50 76 34 20 61 64 64 72 65 73 73 20 61 6e 64 20 69 66 20 6c 6f 63 61 6c 20 63 75 73 74 6f | .IPv4.address.and.if.local.custo |
1237c0 | 6d 69 7a 61 74 69 6f 6e 73 20 61 72 65 20 6e 65 65 64 65 64 2c 20 74 68 65 79 20 73 68 6f 75 6c | mizations.are.needed,.they.shoul |
1237e0 | 64 20 62 65 20 70 6f 73 73 69 62 6c 65 20 75 73 69 6e 67 20 74 68 65 20 65 6e 74 65 72 20 61 6e | d.be.possible.using.the.enter.an |
123800 | 64 20 65 78 69 74 20 68 6f 6f 6b 73 20 70 72 6f 76 69 64 65 64 2e 20 54 68 65 20 68 6f 6f 6b 20 | d.exit.hooks.provided..The.hook. |
123820 | 64 69 72 73 20 61 72 65 3a 00 57 68 65 6e 20 75 73 69 6e 67 20 45 56 45 2d 4e 47 20 74 6f 20 6c | dirs.are:.When.using.EVE-NG.to.l |
123840 | 61 62 20 74 68 69 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 65 6e 73 75 72 65 20 79 6f 75 20 61 | ab.this.environment.ensure.you.a |
123860 | 72 65 20 75 73 69 6e 67 20 65 31 30 30 30 20 61 73 20 74 68 65 20 64 65 73 69 72 65 64 20 64 72 | re.using.e1000.as.the.desired.dr |
123880 | 69 76 65 72 20 66 6f 72 20 79 6f 75 72 20 56 79 4f 53 20 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 | iver.for.your.VyOS.network.inter |
1238a0 | 66 61 63 65 73 2e 20 57 68 65 6e 20 75 73 69 6e 67 20 74 68 65 20 72 65 67 75 6c 61 72 20 76 69 | faces..When.using.the.regular.vi |
1238c0 | 72 74 69 6f 20 6e 65 74 77 6f 72 6b 20 64 72 69 76 65 72 20 6e 6f 20 4c 41 43 50 20 50 44 55 73 | rtio.network.driver.no.LACP.PDUs |
1238e0 | 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 62 79 20 56 79 4f 53 20 74 68 75 73 20 74 68 65 20 70 | .will.be.sent.by.VyOS.thus.the.p |
123900 | 6f 72 74 2d 63 68 61 6e 6e 65 6c 20 77 69 6c 6c 20 6e 65 76 65 72 20 62 65 63 6f 6d 65 20 61 63 | ort-channel.will.never.become.ac |
123920 | 74 69 76 65 21 00 57 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 20 6c 61 72 67 65 | tive!.When.using.NAT.for.a.large |
123940 | 20 6e 75 6d 62 65 72 20 6f 66 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 69 74 20 72 65 63 6f 6d | .number.of.host.systems.it.recom |
123960 | 6d 65 6e 64 65 64 20 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 20 49 50 20 61 64 | mended.that.a.minimum.of.1.IP.ad |
123980 | 64 72 65 73 73 20 69 73 20 75 73 65 64 20 74 6f 20 4e 41 54 20 65 76 65 72 79 20 32 35 36 20 68 | dress.is.used.to.NAT.every.256.h |
1239a0 | 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 69 73 20 64 75 65 20 74 6f 20 74 68 65 20 | ost.systems..This.is.due.to.the. |
1239c0 | 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 61 76 61 | limit.of.65,000.port.numbers.ava |
1239e0 | 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 61 | ilable.for.unique.translations.a |
123a00 | 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 32 30 30 | nd.a.reserving.an.average.of.200 |
123a20 | 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 68 6f 73 74 20 73 79 73 74 65 6d 2e 00 57 | -300.sessions.per.host.system..W |
123a40 | 68 65 6e 20 75 73 69 6e 67 20 4e 41 54 20 66 6f 72 20 61 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 | hen.using.NAT.for.a.large.number |
123a60 | 20 6f 66 20 68 6f 73 74 20 73 79 73 74 65 6d 73 20 69 74 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 | .of.host.systems.it.recommended. |
123a80 | 74 68 61 74 20 61 20 6d 69 6e 69 6d 75 6d 20 6f 66 20 31 20 49 50 20 61 64 64 72 65 73 73 20 69 | that.a.minimum.of.1.IP.address.i |
123aa0 | 73 20 75 73 65 64 20 74 6f 20 4e 41 54 20 65 76 65 72 79 20 32 35 36 20 70 72 69 76 61 74 65 20 | s.used.to.NAT.every.256.private. |
123ac0 | 68 6f 73 74 20 73 79 73 74 65 6d 73 2e 20 54 68 69 73 20 69 73 20 64 75 65 20 74 6f 20 74 68 65 | host.systems..This.is.due.to.the |
123ae0 | 20 6c 69 6d 69 74 20 6f 66 20 36 35 2c 30 30 30 20 70 6f 72 74 20 6e 75 6d 62 65 72 73 20 61 76 | .limit.of.65,000.port.numbers.av |
123b00 | 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 6e 69 71 75 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 | ailable.for.unique.translations. |
123b20 | 61 6e 64 20 61 20 72 65 73 65 72 76 69 6e 67 20 61 6e 20 61 76 65 72 61 67 65 20 6f 66 20 32 30 | and.a.reserving.an.average.of.20 |
123b40 | 30 2d 33 30 30 20 73 65 73 73 69 6f 6e 73 20 70 65 72 20 68 6f 73 74 20 73 79 73 74 65 6d 2e 00 | 0-300.sessions.per.host.system.. |
123b60 | 57 68 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 6b 6e 6f 77 6e 2d 68 6f 73 74 73 2d 66 69 6c 65 | When.using.SSH,.known-hosts-file |
123b80 | 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 2d 66 69 6c 65 20 61 6e 64 20 70 75 62 6c 69 63 2d 6b 65 | ,.private-key-file.and.public-ke |
123ba0 | 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e 64 61 74 6f 72 79 20 6f 70 74 69 6f 6e 73 2e 00 57 68 | y-file.are.mandatory.options..Wh |
123bc0 | 65 6e 20 75 73 69 6e 67 20 53 53 48 2c 20 70 72 69 76 61 74 65 2d 6b 65 79 2d 66 69 6c 65 20 61 | en.using.SSH,.private-key-file.a |
123be0 | 6e 64 20 70 75 62 6c 69 63 2d 6b 65 79 2d 66 69 6c 65 20 61 72 65 20 6d 61 6e 64 61 74 6f 72 79 | nd.public-key-file.are.mandatory |
123c00 | 20 6f 70 74 69 6f 6e 73 2e 00 57 68 65 6e 20 75 73 69 6e 67 20 54 69 6d 65 2d 62 61 73 65 64 20 | .options..When.using.Time-based. |
123c20 | 6f 6e 65 2d 74 69 6d 65 20 70 61 73 73 77 6f 72 64 20 28 54 4f 54 50 29 20 28 4f 54 50 20 48 4f | one-time.password.(TOTP).(OTP.HO |
123c40 | 54 50 2d 74 69 6d 65 29 2c 20 62 65 20 73 75 72 65 20 74 68 61 74 20 74 68 65 20 74 69 6d 65 20 | TP-time),.be.sure.that.the.time. |
123c60 | 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 68 65 20 4f 54 50 20 74 6f 6b 65 6e 20 | on.the.server.and.the.OTP.token. |
123c80 | 67 65 6e 65 72 61 74 6f 72 20 61 72 65 20 73 79 6e 63 68 72 6f 6e 69 7a 65 64 20 62 79 20 4e 54 | generator.are.synchronized.by.NT |
123ca0 | 50 00 57 68 65 6e 20 75 73 69 6e 67 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 49 50 73 65 63 20 | P.When.using.site-to-site.IPsec. |
123cc0 | 77 69 74 68 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 73 2c 20 62 65 20 73 75 72 65 20 74 6f 20 | with.VTI.interfaces,.be.sure.to. |
123ce0 | 64 69 73 61 62 6c 65 20 72 6f 75 74 65 20 61 75 74 6f 69 6e 73 74 61 6c 6c 00 57 68 65 6e 20 75 | disable.route.autoinstall.When.u |
123d00 | 73 69 6e 67 20 74 68 65 20 49 50 76 36 20 70 72 6f 74 6f 63 6f 6c 2c 20 4d 52 55 20 6d 75 73 74 | sing.the.IPv6.protocol,.MRU.must |
123d20 | 20 62 65 20 61 74 20 6c 65 61 73 74 20 31 32 38 30 20 62 79 74 65 73 2e 00 57 68 65 6e 20 75 74 | .be.at.least.1280.bytes..When.ut |
123d40 | 69 6c 69 7a 69 6e 67 20 56 79 4f 53 20 69 6e 20 61 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 77 | ilizing.VyOS.in.an.environment.w |
123d60 | 69 74 68 20 41 72 69 73 74 61 20 67 65 61 72 20 79 6f 75 20 63 61 6e 20 75 73 65 20 74 68 69 73 | ith.Arista.gear.you.can.use.this |
123d80 | 20 62 6c 75 65 20 70 72 69 6e 74 20 61 73 20 61 6e 20 69 6e 69 74 69 61 6c 20 73 65 74 75 70 20 | .blue.print.as.an.initial.setup. |
123da0 | 74 6f 20 67 65 74 20 61 6e 20 4c 41 43 50 20 62 6f 6e 64 20 2f 20 70 6f 72 74 2d 63 68 61 6e 6e | to.get.an.LACP.bond./.port-chann |
123dc0 | 65 6c 20 6f 70 65 72 61 74 69 6f 6e 61 6c 20 62 65 74 77 65 65 6e 20 74 68 6f 73 65 20 74 77 6f | el.operational.between.those.two |
123de0 | 20 64 65 76 69 63 65 73 2e 00 57 68 65 72 65 20 62 6f 74 68 20 72 6f 75 74 65 73 20 77 65 72 65 | .devices..Where.both.routes.were |
123e00 | 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 65 42 47 50 20 70 65 65 72 73 2c 20 74 68 65 6e 20 | .received.from.eBGP.peers,.then. |
123e20 | 70 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 68 69 63 68 20 69 73 20 61 6c 72 65 61 64 | prefer.the.route.which.is.alread |
123e40 | 79 20 73 65 6c 65 63 74 65 64 2e 20 4e 6f 74 65 20 74 68 61 74 20 74 68 69 73 20 63 68 65 63 6b | y.selected..Note.that.this.check |
123e60 | 20 69 73 20 6e 6f 74 20 61 70 70 6c 69 65 64 20 69 66 20 3a 63 66 67 63 6d 64 3a 60 62 67 70 20 | .is.not.applied.if.:cfgcmd:`bgp. |
123e80 | 62 65 73 74 70 61 74 68 20 63 6f 6d 70 61 72 65 2d 72 6f 75 74 65 72 69 64 60 20 69 73 20 63 6f | bestpath.compare-routerid`.is.co |
123ea0 | 6e 66 69 67 75 72 65 64 2e 20 54 68 69 73 20 63 68 65 63 6b 20 63 61 6e 20 70 72 65 76 65 6e 74 | nfigured..This.check.can.prevent |
123ec0 | 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 66 20 6f 73 63 69 6c 6c 61 74 69 6f 6e 2e 00 57 68 65 72 | .some.cases.of.oscillation..Wher |
123ee0 | 65 20 66 69 72 65 77 61 6c 6c 20 62 61 73 65 20 63 68 61 69 6e 20 74 6f 20 63 6f 6e 66 69 67 75 | e.firewall.base.chain.to.configu |
123f00 | 72 65 20 66 69 72 65 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 | re.firewall.filtering.rules.for. |
123f20 | 74 72 61 6e 73 69 74 20 74 72 61 66 66 69 63 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c | transit.traffic.is.``set.firewal |
123f40 | 6c 20 69 70 76 34 20 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 | l.ipv4.forward.filter....``,.whi |
123f60 | 63 68 20 68 61 70 70 65 6e 73 20 69 6e 20 73 74 61 67 65 20 35 2c 20 68 69 67 68 6c 69 67 68 74 | ch.happens.in.stage.5,.highlight |
123f80 | 65 6e 65 64 20 77 69 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 20 66 69 72 65 77 | ened.with.red.color..Where.firew |
123fa0 | 61 6c 6c 20 62 61 73 65 20 63 68 61 69 6e 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 69 72 65 | all.base.chain.to.configure.fire |
123fc0 | 77 61 6c 6c 20 66 69 6c 74 65 72 69 6e 67 20 72 75 6c 65 73 20 66 6f 72 20 74 72 61 6e 73 69 74 | wall.filtering.rules.for.transit |
123fe0 | 20 74 72 61 66 66 69 63 20 69 73 20 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 | .traffic.is.``set.firewall.ipv6. |
124000 | 66 6f 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2c 20 77 68 69 63 68 20 68 61 70 70 | forward.filter....``,.which.happ |
124020 | 65 6e 73 20 69 6e 20 73 74 61 67 65 20 35 2c 20 68 69 67 68 6c 69 67 68 74 65 6e 65 64 20 77 69 | ens.in.stage.5,.highlightened.wi |
124040 | 74 68 20 72 65 64 20 63 6f 6c 6f 72 2e 00 57 68 65 72 65 20 72 6f 75 74 65 73 20 77 69 74 68 20 | th.red.color..Where.routes.with. |
124060 | 61 20 4d 45 44 20 77 65 72 65 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 73 61 6d | a.MED.were.received.from.the.sam |
124080 | 65 20 41 53 2c 20 70 72 65 66 65 72 20 74 68 65 20 72 6f 75 74 65 20 77 69 74 68 20 74 68 65 20 | e.AS,.prefer.the.route.with.the. |
1240a0 | 6c 6f 77 65 73 74 20 4d 45 44 2e 00 57 68 65 72 65 2c 20 6d 61 69 6e 20 6b 65 79 20 77 6f 72 64 | lowest.MED..Where,.main.key.word |
1240c0 | 73 20 61 6e 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 70 61 74 68 73 20 74 68 61 74 20 6e | s.and.configuration.paths.that.n |
1240e0 | 65 65 64 73 20 74 6f 20 62 65 20 75 6e 64 65 72 73 74 6f 6f 64 3a 00 57 68 65 74 68 65 72 20 74 | eeds.to.be.understood:.Whether.t |
124100 | 6f 20 61 63 63 65 70 74 20 44 41 44 20 28 44 75 70 6c 69 63 61 74 65 20 41 64 64 72 65 73 73 20 | o.accept.DAD.(Duplicate.Address. |
124120 | 44 65 74 65 63 74 69 6f 6e 29 2e 00 57 68 69 63 68 20 67 65 6e 65 72 61 74 65 73 20 74 68 65 20 | Detection)..Which.generates.the. |
124140 | 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 57 68 69 63 68 20 72 | following.configuration:.Which.r |
124160 | 65 73 75 6c 74 73 20 69 6e 20 61 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 66 3a 00 57 68 | esults.in.a.configuration.of:.Wh |
124180 | 69 63 68 20 77 6f 75 6c 64 20 67 65 6e 65 72 61 74 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 | ich.would.generate.the.following |
1241a0 | 20 4e 41 54 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 00 | .NAT.destination.configuration:. |
1241c0 | 57 68 69 6c 65 20 2a 2a 6e 65 74 77 6f 72 6b 20 67 72 6f 75 70 73 2a 2a 20 61 63 63 65 70 74 20 | While.**network.groups**.accept. |
1241e0 | 49 50 20 6e 65 74 77 6f 72 6b 73 20 69 6e 20 43 49 44 52 20 6e 6f 74 61 74 69 6f 6e 2c 20 73 70 | IP.networks.in.CIDR.notation,.sp |
124200 | 65 63 69 66 69 63 20 49 50 20 61 64 64 72 65 73 73 65 73 20 63 61 6e 20 62 65 20 61 64 64 65 64 | ecific.IP.addresses.can.be.added |
124220 | 20 61 73 20 61 20 33 32 2d 62 69 74 20 70 72 65 66 69 78 2e 20 49 66 20 79 6f 75 20 66 6f 72 65 | .as.a.32-bit.prefix..If.you.fore |
124240 | 73 65 65 20 74 68 65 20 6e 65 65 64 20 74 6f 20 61 64 64 20 61 20 6d 69 78 20 6f 66 20 61 64 64 | see.the.need.to.add.a.mix.of.add |
124260 | 72 65 73 73 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 2c 20 74 68 65 20 6e 65 74 77 6f 72 6b | resses.and.networks,.the.network |
124280 | 20 67 72 6f 75 70 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 2e 00 57 68 69 6c 65 20 6d 61 6e | .group.is.recommended..While.man |
1242a0 | 79 20 61 72 65 20 61 77 61 72 65 20 6f 66 20 4f 70 65 6e 56 50 4e 20 61 73 20 61 20 43 6c 69 65 | y.are.aware.of.OpenVPN.as.a.Clie |
1242c0 | 6e 74 20 56 50 4e 20 73 6f 6c 75 74 69 6f 6e 2c 20 69 74 20 69 73 20 6f 66 74 65 6e 20 6f 76 65 | nt.VPN.solution,.it.is.often.ove |
1242e0 | 72 6c 6f 6f 6b 65 64 20 61 73 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 20 73 6f | rlooked.as.a.site-to-site.VPN.so |
124300 | 6c 75 74 69 6f 6e 20 64 75 65 20 74 6f 20 6c 61 63 6b 20 6f 66 20 73 75 70 70 6f 72 74 20 66 6f | lution.due.to.lack.of.support.fo |
124320 | 72 20 74 68 69 73 20 6d 6f 64 65 20 69 6e 20 6d 61 6e 79 20 72 6f 75 74 65 72 20 70 6c 61 74 66 | r.this.mode.in.many.router.platf |
124340 | 6f 72 6d 73 2e 00 57 68 69 6c 65 20 6e 6f 72 6d 61 6c 20 47 52 45 20 69 73 20 66 6f 72 20 6c 61 | orms..While.normal.GRE.is.for.la |
124360 | 79 65 72 20 33 2c 20 47 52 45 54 41 50 20 69 73 20 66 6f 72 20 6c 61 79 65 72 20 32 2e 20 47 52 | yer.3,.GRETAP.is.for.layer.2..GR |
124380 | 45 54 41 50 20 63 61 6e 20 65 6e 63 61 70 73 75 6c 61 74 65 20 45 74 68 65 72 6e 65 74 20 66 72 | ETAP.can.encapsulate.Ethernet.fr |
1243a0 | 61 6d 65 73 2c 20 74 68 75 73 20 69 74 20 63 61 6e 20 62 65 20 62 72 69 64 67 65 64 20 77 69 74 | ames,.thus.it.can.be.bridged.wit |
1243c0 | 68 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 74 6f 20 63 72 65 61 74 65 20 64 61 74 | h.other.interfaces.to.create.dat |
1243e0 | 61 6c 69 6e 6b 20 6c 61 79 65 72 20 73 65 67 6d 65 6e 74 73 20 74 68 61 74 20 73 70 61 6e 20 6d | alink.layer.segments.that.span.m |
124400 | 75 6c 74 69 70 6c 65 20 72 65 6d 6f 74 65 20 73 69 74 65 73 2e 00 57 68 69 74 65 6c 69 73 74 20 | ultiple.remote.sites..Whitelist. |
124420 | 6f 66 20 61 64 64 72 65 73 73 65 73 20 61 6e 64 20 6e 65 74 77 6f 72 6b 73 2e 20 41 6c 77 61 79 | of.addresses.and.networks..Alway |
124440 | 73 20 61 6c 6c 6f 77 20 69 6e 62 6f 75 6e 64 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 66 72 6f 6d | s.allow.inbound.connections.from |
124460 | 20 74 68 65 73 65 20 73 79 73 74 65 6d 73 2e 00 57 69 6c 6c 20 61 64 64 20 60 60 70 65 72 73 69 | .these.systems..Will.add.``persi |
124480 | 73 74 65 6e 74 2d 6b 65 79 60 60 20 61 74 20 74 68 65 20 65 6e 64 20 6f 66 20 74 68 65 20 67 65 | stent-key``.at.the.end.of.the.ge |
1244a0 | 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 50 | nerated.OpenVPN.configuration..P |
1244c0 | 6c 65 61 73 65 20 75 73 65 20 74 68 69 73 20 6f 6e 6c 79 20 61 73 20 6c 61 73 74 20 72 65 73 6f | lease.use.this.only.as.last.reso |
1244e0 | 72 74 20 2d 20 74 68 69 6e 67 73 20 6d 69 67 68 74 20 62 72 65 61 6b 20 61 6e 64 20 4f 70 65 6e | rt.-.things.might.break.and.Open |
124500 | 56 50 4e 20 77 6f 6e 27 74 20 73 74 61 72 74 20 69 66 20 79 6f 75 20 70 61 73 73 20 69 6e 76 61 | VPN.won't.start.if.you.pass.inva |
124520 | 6c 69 64 20 6f 70 74 69 6f 6e 73 2f 73 79 6e 74 61 78 2e 00 57 69 6c 6c 20 61 64 64 20 60 60 70 | lid.options/syntax..Will.add.``p |
124540 | 75 73 68 20 22 6b 65 65 70 61 6c 69 76 65 20 31 20 31 30 22 60 60 20 74 6f 20 74 68 65 20 67 65 | ush."keepalive.1.10"``.to.the.ge |
124560 | 6e 65 72 61 74 65 64 20 4f 70 65 6e 56 50 4e 20 63 6f 6e 66 69 67 20 66 69 6c 65 2e 00 57 69 6c | nerated.OpenVPN.config.file..Wil |
124580 | 6c 20 62 65 20 72 65 63 6f 72 64 65 64 20 6f 6e 6c 79 20 70 61 63 6b 65 74 73 2f 66 6c 6f 77 73 | l.be.recorded.only.packets/flows |
1245a0 | 20 6f 6e 20 2a 2a 69 6e 63 6f 6d 69 6e 67 2a 2a 20 64 69 72 65 63 74 69 6f 6e 20 69 6e 20 63 6f | .on.**incoming**.direction.in.co |
1245c0 | 6e 66 69 67 75 72 65 64 20 69 6e 74 65 72 66 61 63 65 73 20 62 79 20 64 65 66 61 75 6c 74 2e 00 | nfigured.interfaces.by.default.. |
1245e0 | 57 69 6c 6c 20 64 72 6f 70 20 60 3c 73 68 61 72 65 64 2d 6e 65 74 77 6f 72 6b 2d 6e 61 6d 65 3e | Will.drop.`<shared-network-name> |
124600 | 5f 60 20 66 72 6f 6d 20 63 6c 69 65 6e 74 20 44 4e 53 20 72 65 63 6f 72 64 2c 20 75 73 69 6e 67 | _`.from.client.DNS.record,.using |
124620 | 20 6f 6e 6c 79 20 74 68 65 20 68 6f 73 74 20 64 65 63 6c 61 72 61 74 69 6f 6e 20 6e 61 6d 65 20 | .only.the.host.declaration.name. |
124640 | 61 6e 64 20 64 6f 6d 61 69 6e 3a 20 60 3c 68 6f 73 74 6e 61 6d 65 3e 2e 3c 64 6f 6d 61 69 6e 2d | and.domain:.`<hostname>.<domain- |
124660 | 6e 61 6d 65 3e 60 00 57 69 6e 64 6f 77 73 20 31 30 20 64 6f 65 73 20 6e 6f 74 20 61 6c 6c 6f 77 | name>`.Windows.10.does.not.allow |
124680 | 20 61 20 75 73 65 72 20 74 6f 20 63 68 6f 6f 73 65 20 74 68 65 20 69 6e 74 65 67 72 69 74 79 20 | .a.user.to.choose.the.integrity. |
1246a0 | 61 6e 64 20 65 6e 63 72 79 70 74 69 6f 6e 20 63 69 70 68 65 72 73 20 75 73 69 6e 67 20 74 68 65 | and.encryption.ciphers.using.the |
1246c0 | 20 47 55 49 20 61 6e 64 20 69 74 20 75 73 65 73 20 73 6f 6d 65 20 6f 6c 64 65 72 20 70 72 6f 70 | .GUI.and.it.uses.some.older.prop |
1246e0 | 6f 73 61 6c 73 20 62 79 20 64 65 66 61 75 6c 74 2e 20 41 20 75 73 65 72 20 63 61 6e 20 6f 6e 6c | osals.by.default..A.user.can.onl |
124700 | 79 20 63 68 61 6e 67 65 20 74 68 65 20 70 72 6f 70 6f 73 61 6c 73 20 6f 6e 20 74 68 65 20 63 6c | y.change.the.proposals.on.the.cl |
124720 | 69 65 6e 74 20 73 69 64 65 20 62 79 20 63 6f 6e 66 69 67 75 72 69 6e 67 20 74 68 65 20 49 50 53 | ient.side.by.configuring.the.IPS |
124740 | 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 76 69 61 20 50 6f 77 65 72 53 | ec.connection.profile.via.PowerS |
124760 | 68 65 6c 6c 2e 00 57 69 6e 64 6f 77 73 20 49 6e 74 65 72 6e 65 74 20 4e 61 6d 65 20 53 65 72 76 | hell..Windows.Internet.Name.Serv |
124780 | 69 63 65 20 28 57 49 4e 53 29 20 73 65 72 76 65 72 73 20 70 72 6f 70 61 67 61 74 65 64 20 74 6f | ice.(WINS).servers.propagated.to |
1247a0 | 20 63 6c 69 65 6e 74 00 57 69 6e 64 6f 77 73 20 65 78 70 65 63 74 73 20 74 68 65 20 73 65 72 76 | .client.Windows.expects.the.serv |
1247c0 | 65 72 20 6e 61 6d 65 20 74 6f 20 62 65 20 61 6c 73 6f 20 75 73 65 64 20 69 6e 20 74 68 65 20 73 | er.name.to.be.also.used.in.the.s |
1247e0 | 65 72 76 65 72 27 73 20 63 65 72 74 69 66 69 63 61 74 65 20 63 6f 6d 6d 6f 6e 20 6e 61 6d 65 2c | erver's.certificate.common.name, |
124800 | 20 73 6f 20 69 74 27 73 20 62 65 73 74 20 74 6f 20 75 73 65 20 74 68 69 73 20 44 4e 53 20 6e 61 | .so.it's.best.to.use.this.DNS.na |
124820 | 6d 65 20 66 6f 72 20 79 6f 75 72 20 56 50 4e 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 57 69 72 65 | me.for.your.VPN.connection..Wire |
124840 | 47 75 61 72 64 00 57 69 72 65 47 75 61 72 64 20 43 6c 69 65 6e 74 20 51 52 20 63 6f 64 65 00 57 | Guard.WireGuard.Client.QR.code.W |
124860 | 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 69 74 73 65 6c 66 20 75 73 65 73 20 61 | ireGuard.interface.itself.uses.a |
124880 | 64 64 72 65 73 73 20 31 30 2e 31 2e 30 2e 31 2f 33 30 00 57 69 72 65 47 75 61 72 64 20 69 73 20 | ddress.10.1.0.1/30.WireGuard.is. |
1248a0 | 61 6e 20 65 78 74 72 65 6d 65 6c 79 20 73 69 6d 70 6c 65 20 79 65 74 20 66 61 73 74 20 61 6e 64 | an.extremely.simple.yet.fast.and |
1248c0 | 20 6d 6f 64 65 72 6e 20 56 50 4e 20 74 68 61 74 20 75 74 69 6c 69 7a 65 73 20 73 74 61 74 65 2d | .modern.VPN.that.utilizes.state- |
1248e0 | 6f 66 2d 74 68 65 2d 61 72 74 20 63 72 79 70 74 6f 67 72 61 70 68 79 2e 20 53 65 65 20 68 74 74 | of-the-art.cryptography..See.htt |
124900 | 70 73 3a 2f 2f 77 77 77 2e 77 69 72 65 67 75 61 72 64 2e 63 6f 6d 20 66 6f 72 20 6d 6f 72 65 20 | ps://www.wireguard.com.for.more. |
124920 | 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 57 69 72 65 47 75 61 72 64 20 72 65 71 75 69 72 65 73 20 | information..WireGuard.requires. |
124940 | 74 68 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 61 20 6b 65 79 70 61 69 72 2c 20 77 68 69 | the.generation.of.a.keypair,.whi |
124960 | 63 68 20 69 6e 63 6c 75 64 65 73 20 61 20 70 72 69 76 61 74 65 20 6b 65 79 20 74 6f 20 64 65 63 | ch.includes.a.private.key.to.dec |
124980 | 72 79 70 74 20 69 6e 63 6f 6d 69 6e 67 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 61 20 70 75 62 | rypt.incoming.traffic,.and.a.pub |
1249a0 | 6c 69 63 20 6b 65 79 20 66 6f 72 20 70 65 65 72 28 73 29 20 74 6f 20 65 6e 63 72 79 70 74 20 74 | lic.key.for.peer(s).to.encrypt.t |
1249c0 | 72 61 66 66 69 63 2e 00 57 69 72 65 6c 65 73 73 20 63 68 61 6e 6e 65 6c 20 60 60 31 60 60 00 57 | raffic..Wireless.channel.``1``.W |
1249e0 | 69 72 65 6c 65 73 73 20 64 65 76 69 63 65 20 74 79 70 65 20 66 6f 72 20 74 68 69 73 20 69 6e 74 | ireless.device.type.for.this.int |
124a00 | 65 72 66 61 63 65 00 57 69 72 65 6c 65 73 73 20 68 61 72 64 77 61 72 65 20 64 65 76 69 63 65 20 | erface.Wireless.hardware.device. |
124a20 | 75 73 65 64 20 61 73 20 75 6e 64 65 72 6c 61 79 20 72 61 64 69 6f 2e 00 57 69 72 65 6c 65 73 73 | used.as.underlay.radio..Wireless |
124a40 | 20 6f 70 74 69 6f 6e 73 00 57 69 72 65 6c 65 73 73 20 6f 70 74 69 6f 6e 73 20 28 53 74 61 74 69 | .options.Wireless.options.(Stati |
124a60 | 6f 6e 2f 43 6c 69 65 6e 74 29 00 57 69 72 65 6c 65 73 73 4d 6f 64 65 6d 20 28 57 57 41 4e 29 20 | on/Client).WirelessModem.(WWAN). |
124a80 | 6f 70 74 69 6f 6e 73 00 57 69 74 68 20 56 79 4f 53 20 62 65 69 6e 67 20 62 61 73 65 64 20 6f 6e | options.With.VyOS.being.based.on |
124aa0 | 20 74 6f 70 20 6f 66 20 4c 69 6e 75 78 20 61 6e 64 20 69 74 73 20 6b 65 72 6e 65 6c 2c 20 74 68 | .top.of.Linux.and.its.kernel,.th |
124ac0 | 65 20 4e 65 74 66 69 6c 74 65 72 20 70 72 6f 6a 65 63 74 20 63 72 65 61 74 65 64 20 74 68 65 20 | e.Netfilter.project.created.the. |
124ae0 | 69 70 74 61 62 6c 65 73 20 61 6e 64 20 6e 6f 77 20 74 68 65 20 73 75 63 63 65 73 73 6f 72 20 6e | iptables.and.now.the.successor.n |
124b00 | 66 74 61 62 6c 65 73 20 66 6f 72 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 20 74 6f 20 | ftables.for.the.Linux.kernel.to. |
124b20 | 77 6f 72 6b 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 68 65 20 64 61 74 61 20 66 6c 6f 77 73 2e | work.directly.on.the.data.flows. |
124b40 | 20 54 68 69 73 20 6e 6f 77 20 65 78 74 65 6e 64 73 20 74 68 65 20 63 6f 6e 63 65 70 74 20 6f 66 | .This.now.extends.the.concept.of |
124b60 | 20 7a 6f 6e 65 2d 62 61 73 65 64 20 73 65 63 75 72 69 74 79 20 74 6f 20 61 6c 6c 6f 77 20 66 6f | .zone-based.security.to.allow.fo |
124b80 | 72 20 6d 61 6e 69 70 75 6c 61 74 69 6e 67 20 74 68 65 20 64 61 74 61 20 61 74 20 6d 75 6c 74 69 | r.manipulating.the.data.at.multi |
124ba0 | 70 6c 65 20 73 74 61 67 65 73 20 6f 6e 63 65 20 61 63 63 65 70 74 65 64 20 62 79 20 74 68 65 20 | ple.stages.once.accepted.by.the. |
124bc0 | 6e 65 74 77 6f 72 6b 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 74 68 65 20 64 72 69 76 65 72 | network.interface.and.the.driver |
124be0 | 20 62 65 66 6f 72 65 20 62 65 69 6e 67 20 68 61 6e 64 65 64 20 6f 66 66 20 74 6f 20 74 68 65 20 | .before.being.handed.off.to.the. |
124c00 | 64 65 73 74 69 6e 61 74 69 6f 6e 20 28 65 2e 67 2e 20 61 20 77 65 62 20 73 65 72 76 65 72 20 4f | destination.(e.g..a.web.server.O |
124c20 | 52 20 61 6e 6f 74 68 65 72 20 64 65 76 69 63 65 29 2e 00 57 69 74 68 20 57 69 72 65 47 75 61 72 | R.another.device)..With.WireGuar |
124c40 | 64 2c 20 61 20 52 6f 61 64 20 57 61 72 72 69 6f 72 20 56 50 4e 20 63 6f 6e 66 69 67 20 69 73 20 | d,.a.Road.Warrior.VPN.config.is. |
124c60 | 73 69 6d 69 6c 61 72 20 74 6f 20 61 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 56 50 4e 2e 20 49 | similar.to.a.site-to-site.VPN..I |
124c80 | 74 20 6a 75 73 74 20 6c 61 63 6b 73 20 74 68 65 20 60 60 61 64 64 72 65 73 73 60 60 20 61 6e 64 | t.just.lacks.the.``address``.and |
124ca0 | 20 60 60 70 6f 72 74 60 60 20 73 74 61 74 65 6d 65 6e 74 73 2e 00 57 69 74 68 20 74 68 65 20 60 | .``port``.statements..With.the.` |
124cc0 | 60 6e 61 6d 65 2d 73 65 72 76 65 72 60 60 20 6f 70 74 69 6f 6e 20 73 65 74 20 74 6f 20 60 60 6e | `name-server``.option.set.to.``n |
124ce0 | 6f 6e 65 60 60 2c 20 56 79 4f 53 20 77 69 6c 6c 20 69 67 6e 6f 72 65 20 74 68 65 20 6e 61 6d 65 | one``,.VyOS.will.ignore.the.name |
124d00 | 73 65 72 76 65 72 73 20 79 6f 75 72 20 49 53 50 20 73 65 6e 64 73 20 79 6f 75 20 61 6e 64 20 74 | servers.your.ISP.sends.you.and.t |
124d20 | 68 75 73 20 79 6f 75 20 63 61 6e 20 66 75 6c 6c 79 20 72 65 6c 79 20 6f 6e 20 74 68 65 20 6f 6e | hus.you.can.fully.rely.on.the.on |
124d40 | 65 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 73 74 61 74 69 63 61 6c 6c | es.you.have.configured.staticall |
124d60 | 79 2e 00 57 69 74 68 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 79 6f 75 20 63 61 6e 20 73 65 74 | y..With.the.firewall.you.can.set |
124d80 | 20 72 75 6c 65 73 20 74 6f 20 61 63 63 65 70 74 2c 20 64 72 6f 70 20 6f 72 20 72 65 6a 65 63 74 | .rules.to.accept,.drop.or.reject |
124da0 | 20 49 43 4d 50 20 69 6e 2c 20 6f 75 74 20 6f 72 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 2e 20 | .ICMP.in,.out.or.local.traffic.. |
124dc0 | 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 74 68 65 20 67 65 6e 65 72 61 6c 20 2a 2a 66 | You.can.also.use.the.general.**f |
124de0 | 69 72 65 77 61 6c 6c 20 61 6c 6c 2d 70 69 6e 67 2a 2a 20 63 6f 6d 6d 61 6e 64 2e 20 54 68 69 73 | irewall.all-ping**.command..This |
124e00 | 20 63 6f 6d 6d 61 6e 64 20 61 66 66 65 63 74 73 20 6f 6e 6c 79 20 74 6f 20 4c 4f 43 41 4c 20 28 | .command.affects.only.to.LOCAL.( |
124e20 | 70 61 63 6b 65 74 73 20 64 65 73 74 69 6e 65 64 20 66 6f 72 20 79 6f 75 72 20 56 79 4f 53 20 73 | packets.destined.for.your.VyOS.s |
124e40 | 79 73 74 65 6d 29 2c 20 6e 6f 74 20 74 6f 20 49 4e 20 6f 72 20 4f 55 54 20 74 72 61 66 66 69 63 | ystem),.not.to.IN.or.OUT.traffic |
124e60 | 2e 00 57 69 74 68 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 2c 20 79 6f 75 20 63 61 6e 20 73 70 65 | ..With.this.command,.you.can.spe |
124e80 | 63 69 66 79 20 68 6f 77 20 74 68 65 20 55 52 4c 20 70 61 74 68 20 73 68 6f 75 6c 64 20 62 65 20 | cify.how.the.URL.path.should.be. |
124ea0 | 6d 61 74 63 68 65 64 20 61 67 61 69 6e 73 74 20 69 6e 63 6f 6d 69 6e 67 20 72 65 71 75 65 73 74 | matched.against.incoming.request |
124ec0 | 73 2e 00 57 69 74 68 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 6c 6c 73 20 61 20 6e | s..With.zone-based.firewalls.a.n |
124ee0 | 65 77 20 63 6f 6e 63 65 70 74 20 77 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 2c 20 69 6e 20 61 | ew.concept.was.implemented,.in.a |
124f00 | 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 69 6e 20 61 6e 64 20 6f | ddition.to.the.standard.in.and.o |
124f20 | 75 74 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2c 20 61 20 6c 6f 63 61 6c 20 66 6c 6f 77 20 77 | ut.traffic.flows,.a.local.flow.w |
124f40 | 61 73 20 61 64 64 65 64 2e 20 54 68 69 73 20 6c 6f 63 61 6c 20 77 61 73 20 66 6f 72 20 74 72 61 | as.added..This.local.was.for.tra |
124f60 | 66 66 69 63 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 61 6e 64 20 64 65 73 74 69 6e 65 64 20 74 6f | ffic.originating.and.destined.to |
124f80 | 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 57 68 69 63 68 20 6d 65 61 6e 73 20 | .the.router.itself..Which.means. |
124fa0 | 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 77 65 72 65 20 72 65 71 75 69 72 65 64 20 74 | additional.rules.were.required.t |
124fc0 | 6f 20 73 65 63 75 72 65 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 69 74 73 65 6c 66 20 66 72 6f | o.secure.the.firewall.itself.fro |
124fe0 | 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 | m.the.network,.in.addition.to.th |
125000 | 65 20 65 78 69 73 74 69 6e 67 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 62 6f 75 6e 64 20 | e.existing.inbound.and.outbound. |
125020 | 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 65 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 63 6f 6e 63 65 | rules.from.the.traditional.conce |
125040 | 70 74 20 61 62 6f 76 65 2e 00 57 69 74 68 20 7a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 | pt.above..With.zone-based.firewa |
125060 | 6c 6c 73 20 61 20 6e 65 77 20 63 6f 6e 63 65 70 74 20 77 61 73 20 69 6d 70 6c 65 6d 65 6e 74 65 | lls.a.new.concept.was.implemente |
125080 | 64 2c 20 69 6e 20 61 64 64 74 69 6f 6e 20 74 6f 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 69 6e | d,.in.addtion.to.the.standard.in |
1250a0 | 20 61 6e 64 20 6f 75 74 20 74 72 61 66 66 69 63 20 66 6c 6f 77 73 2c 20 61 20 6c 6f 63 61 6c 20 | .and.out.traffic.flows,.a.local. |
1250c0 | 66 6c 6f 77 20 77 61 73 20 61 64 64 65 64 2e 20 54 68 69 73 20 6c 6f 63 61 6c 20 77 61 73 20 66 | flow.was.added..This.local.was.f |
1250e0 | 6f 72 20 74 72 61 66 66 69 63 20 6f 72 69 67 69 6e 61 74 69 6e 67 20 61 6e 64 20 64 65 73 74 69 | or.traffic.originating.and.desti |
125100 | 6e 65 64 20 74 6f 20 74 68 65 20 72 6f 75 74 65 72 20 69 74 73 65 6c 66 2e 20 57 68 69 63 68 20 | ned.to.the.router.itself..Which. |
125120 | 6d 65 61 6e 73 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 75 6c 65 73 20 77 65 72 65 20 72 65 71 75 | means.additional.rules.were.requ |
125140 | 69 72 65 64 20 74 6f 20 73 65 63 75 72 65 20 74 68 65 20 66 69 72 65 77 61 6c 6c 20 69 74 73 65 | ired.to.secure.the.firewall.itse |
125160 | 6c 66 20 66 72 6f 6d 20 74 68 65 20 6e 65 74 77 6f 72 6b 2c 20 69 6e 20 61 64 64 69 74 69 6f 6e | lf.from.the.network,.in.addition |
125180 | 20 74 6f 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 69 6e 62 6f 75 6e 64 20 61 6e 64 20 6f 75 74 | .to.the.existing.inbound.and.out |
1251a0 | 62 6f 75 6e 64 20 72 75 6c 65 73 20 66 72 6f 6d 20 74 68 65 20 74 72 61 64 69 74 69 6f 6e 61 6c | bound.rules.from.the.traditional |
1251c0 | 20 63 6f 6e 63 65 70 74 20 61 62 6f 76 65 2e 00 59 00 59 6f 75 20 61 70 70 6c 79 20 61 20 72 75 | .concept.above..Y.You.apply.a.ru |
1251e0 | 6c 65 2d 73 65 74 20 61 6c 77 61 79 73 20 74 6f 20 61 20 7a 6f 6e 65 20 66 72 6f 6d 20 61 6e 20 | le-set.always.to.a.zone.from.an. |
125200 | 6f 74 68 65 72 20 7a 6f 6e 65 2c 20 69 74 20 69 73 20 72 65 63 6f 6d 6d 65 6e 64 65 64 20 74 6f | other.zone,.it.is.recommended.to |
125220 | 20 63 72 65 61 74 65 20 6f 6e 65 20 72 75 6c 65 2d 73 65 74 20 66 6f 72 20 65 61 63 68 20 7a 6f | .create.one.rule-set.for.each.zo |
125240 | 6e 65 20 70 61 69 72 2e 00 59 6f 75 20 61 72 65 20 61 62 6c 65 20 74 6f 20 73 65 74 20 70 6f 73 | ne.pair..You.are.able.to.set.pos |
125260 | 74 2d 6c 6f 67 69 6e 20 6f 72 20 70 72 65 2d 6c 6f 67 69 6e 20 62 61 6e 6e 65 72 20 6d 65 73 73 | t-login.or.pre-login.banner.mess |
125280 | 61 67 65 73 20 74 6f 20 64 69 73 70 6c 61 79 20 63 65 72 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 | ages.to.display.certain.informat |
1252a0 | 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 79 73 74 65 6d 2e 00 59 6f 75 20 61 72 65 20 62 65 20 | ion.for.this.system..You.are.be. |
1252c0 | 61 62 6c 65 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 65 20 66 69 6c 65 73 20 75 73 69 6e 67 | able.to.download.the.files.using |
1252e0 | 20 53 43 50 2c 20 6f 6e 63 65 20 74 68 65 20 53 53 48 20 73 65 72 76 69 63 65 20 68 61 73 20 62 | .SCP,.once.the.SSH.service.has.b |
125300 | 65 65 6e 20 61 63 74 69 76 61 74 65 64 20 6c 69 6b 65 20 73 6f 00 59 6f 75 20 63 61 6e 20 61 6c | een.activated.like.so.You.can.al |
125320 | 73 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 74 69 6d 65 20 69 6e 74 65 72 76 61 6c 20 66 | so.configure.the.time.interval.f |
125340 | 6f 72 20 70 72 65 65 6d 70 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 22 70 72 65 65 6d 70 74 2d | or.preemption.with.the."preempt- |
125360 | 64 65 6c 61 79 22 20 6f 70 74 69 6f 6e 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 6f 20 73 | delay".option..For.example,.to.s |
125380 | 65 74 20 74 68 65 20 68 69 67 68 65 72 20 70 72 69 6f 72 69 74 79 20 72 6f 75 74 65 72 20 74 6f | et.the.higher.priority.router.to |
1253a0 | 20 74 61 6b 65 20 6f 76 65 72 20 69 6e 20 31 38 30 20 73 65 63 6f 6e 64 73 2c 20 75 73 65 3a 00 | .take.over.in.180.seconds,.use:. |
1253c0 | 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 64 65 66 69 6e 65 20 63 75 73 74 6f 6d 20 74 69 6d 65 6f | You.can.also.define.custom.timeo |
1253e0 | 75 74 20 76 61 6c 75 65 73 20 74 6f 20 61 70 70 6c 79 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 | ut.values.to.apply.to.a.specific |
125400 | 20 73 75 62 73 65 74 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2c 20 62 61 73 65 64 20 6f 6e | .subset.of.connections,.based.on |
125420 | 20 61 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 73 65 6c 65 63 74 6f 72 2e 20 54 6f 20 | .a.packet.and.flow.selector..To. |
125440 | 64 6f 20 74 68 69 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 72 75 | do.this,.you.need.to.create.a.ru |
125460 | 6c 65 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 70 61 63 6b 65 74 20 61 6e 64 20 66 6c 6f 77 20 | le.defining.the.packet.and.flow. |
125480 | 73 65 6c 65 63 74 6f 72 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 6b 65 65 70 20 64 69 66 66 | selector..You.can.also.keep.diff |
1254a0 | 65 72 65 6e 74 20 44 4e 53 20 7a 6f 6e 65 20 75 70 64 61 74 65 64 2e 20 4a 75 73 74 20 63 72 65 | erent.DNS.zone.updated..Just.cre |
1254c0 | 61 74 65 20 61 20 6e 65 77 20 63 6f 6e 66 69 67 20 6e 6f 64 65 3a 20 60 60 73 65 74 20 73 65 72 | ate.a.new.config.node:.``set.ser |
1254e0 | 76 69 63 65 20 64 6e 73 20 64 79 6e 61 6d 69 63 20 69 6e 74 65 72 66 61 63 65 20 3c 69 6e 74 65 | vice.dns.dynamic.interface.<inte |
125500 | 72 66 61 63 65 3e 20 72 66 63 32 31 33 36 20 3c 6f 74 68 65 72 2d 73 65 72 76 69 63 65 2d 6e 61 | rface>.rfc2136.<other-service-na |
125520 | 6d 65 3e 60 60 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 6f 70 74 20 66 6f 72 20 75 73 69 6e 67 | me>``.You.can.also.opt.for.using |
125540 | 20 60 3a 3a 2f 36 34 60 20 61 73 20 70 72 65 66 69 78 20 66 6f 72 20 79 6f 75 72 20 3a 61 62 62 | .`::/64`.as.prefix.for.your.:abb |
125560 | 72 3a 60 52 41 73 20 28 52 6f 75 74 65 72 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 73 29 60 2e | r:`RAs.(Router.Advertisements)`. |
125580 | 20 54 68 69 73 20 77 69 6c 6c 20 74 61 6b 65 20 74 68 65 20 49 50 76 36 20 47 55 41 20 70 72 65 | .This.will.take.the.IPv6.GUA.pre |
1255a0 | 66 69 78 20 61 73 73 69 67 6e 65 64 20 74 6f 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 2c 20 77 | fix.assigned.to.the.interface,.w |
1255c0 | 68 69 63 68 20 63 6f 6d 65 73 20 69 6e 20 68 61 6e 64 79 20 77 68 65 6e 20 75 73 69 6e 67 20 44 | hich.comes.in.handy.when.using.D |
1255e0 | 48 43 50 76 36 2d 50 44 2e 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 73 70 65 63 69 66 79 20 77 | HCPv6-PD..You.can.also.specify.w |
125600 | 68 69 63 68 20 49 50 76 36 20 61 63 63 65 73 73 2d 6c 69 73 74 20 73 68 6f 75 6c 64 20 62 65 20 | hich.IPv6.access-list.should.be. |
125620 | 73 68 6f 77 6e 3a 00 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 74 75 6e 65 20 6d 75 6c 74 69 63 61 | shown:.You.can.also.tune.multica |
125640 | 73 74 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6d 6d 61 6e 64 73 2e 00 | st.with.the.following.commands.. |
125660 | 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 75 73 65 20 61 6e 6f 74 68 65 72 20 61 74 74 72 69 62 75 | You.can.also.use.another.attribu |
125680 | 74 65 73 20 66 6f 72 20 69 64 65 6e 74 69 66 79 20 63 6c 69 65 6e 74 20 66 6f 72 20 64 69 73 63 | tes.for.identify.client.for.disc |
1256a0 | 6f 6e 6e 65 63 74 2c 20 6c 69 6b 65 20 46 72 61 6d 65 64 2d 49 50 2d 41 64 64 72 65 73 73 2c 20 | onnect,.like.Framed-IP-Address,. |
1256c0 | 41 63 63 74 2d 53 65 73 73 69 6f 6e 2d 49 64 2c 20 65 74 63 2e 20 52 65 73 75 6c 74 20 63 6f 6d | Acct-Session-Id,.etc..Result.com |
1256e0 | 6d 61 6e 64 73 20 61 70 70 65 61 72 73 20 69 6e 20 6c 6f 67 2e 00 59 6f 75 20 63 61 6e 20 61 6c | mands.appears.in.log..You.can.al |
125700 | 73 6f 20 77 72 69 74 65 20 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 20 61 20 66 69 6c | so.write.a.description.for.a.fil |
125720 | 74 65 72 3a 00 59 6f 75 20 63 61 6e 20 61 73 73 69 67 6e 20 6d 75 6c 74 69 70 6c 65 20 6b 65 79 | ter:.You.can.assign.multiple.key |
125740 | 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 75 73 65 72 20 62 79 20 75 73 69 6e 67 20 61 20 75 6e | s.to.the.same.user.by.using.a.un |
125760 | 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 20 70 65 72 20 53 53 48 20 6b 65 79 2e 00 59 6f 75 | ique.identifier.per.SSH.key..You |
125780 | 20 63 61 6e 20 61 76 6f 69 64 20 74 68 65 20 22 6c 65 61 6b 79 22 20 62 65 68 61 76 69 6f 72 20 | .can.avoid.the."leaky".behavior. |
1257a0 | 62 79 20 75 73 69 6e 67 20 61 20 66 69 72 65 77 61 6c 6c 20 70 6f 6c 69 63 79 20 74 68 61 74 20 | by.using.a.firewall.policy.that. |
1257c0 | 64 72 6f 70 73 20 22 69 6e 76 61 6c 69 64 22 20 73 74 61 74 65 20 70 61 63 6b 65 74 73 2e 00 59 | drops."invalid".state.packets..Y |
1257e0 | 6f 75 20 63 61 6e 20 63 68 65 63 6b 20 79 6f 75 72 20 4e 49 43 20 64 72 69 76 65 72 20 62 79 20 | ou.can.check.your.NIC.driver.by. |
125800 | 69 73 73 75 69 6e 67 20 3a 6f 70 63 6d 64 3a 60 73 68 6f 77 20 69 6e 74 65 72 66 61 63 65 73 20 | issuing.:opcmd:`show.interfaces. |
125820 | 65 74 68 65 72 6e 65 74 20 65 74 68 30 20 70 68 79 73 69 63 61 6c 20 7c 20 67 72 65 70 20 2d 69 | ethernet.eth0.physical.|.grep.-i |
125840 | 20 64 72 69 76 65 72 60 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 61 20 70 6f 6c | .driver`.You.can.configure.a.pol |
125860 | 69 63 79 20 69 6e 74 6f 20 61 20 63 6c 61 73 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 60 60 71 | icy.into.a.class.through.the.``q |
125880 | 75 65 75 65 2d 74 79 70 65 60 60 20 73 65 74 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e | ueue-type``.setting..You.can.con |
1258a0 | 66 69 67 75 72 65 20 63 6c 61 73 73 65 73 20 28 75 70 20 74 6f 20 34 30 39 30 29 20 77 69 74 68 | figure.classes.(up.to.4090).with |
1258c0 | 20 64 69 66 66 65 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 61 6e 64 20 61 20 64 65 66 61 75 6c | .different.settings.and.a.defaul |
1258e0 | 74 20 70 6f 6c 69 63 79 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 61 70 70 6c 69 65 64 20 74 | t.policy.which.will.be.applied.t |
125900 | 6f 20 61 6e 79 20 74 72 61 66 66 69 63 20 6e 6f 74 20 6d 61 74 63 68 69 6e 67 20 61 6e 79 20 6f | o.any.traffic.not.matching.any.o |
125920 | 66 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 63 6c 61 73 73 65 73 2e 00 59 6f 75 20 63 61 | f.the.configured.classes..You.ca |
125940 | 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 | n.configure.multiple.interfaces. |
125960 | 77 68 69 63 68 20 77 68 6f 75 6c 64 20 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 66 6c 6f 77 | which.whould.participate.in.flow |
125980 | 20 61 63 63 6f 75 6e 74 69 6e 67 2e 00 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 6d | .accounting..You.can.configure.m |
1259a0 | 75 6c 74 69 70 6c 65 20 69 6e 74 65 72 66 61 63 65 73 20 77 68 69 63 68 20 77 68 6f 75 6c 64 20 | ultiple.interfaces.which.whould. |
1259c0 | 70 61 72 74 69 63 69 70 61 74 65 20 69 6e 20 73 66 6c 6f 77 20 61 63 63 6f 75 6e 74 69 6e 67 2e | participate.in.sflow.accounting. |
1259e0 | 00 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 20 56 4c 41 4e 20 69 6e | .You.can.create.multiple.VLAN.in |
125a00 | 74 65 72 66 61 63 65 73 20 6f 6e 20 61 20 70 68 79 73 69 63 61 6c 20 69 6e 74 65 72 66 61 63 65 | terfaces.on.a.physical.interface |
125a20 | 2e 20 54 68 65 20 56 4c 41 4e 20 49 44 20 72 61 6e 67 65 20 69 73 20 66 72 6f 6d 20 30 20 74 6f | ..The.VLAN.ID.range.is.from.0.to |
125a40 | 20 34 30 39 34 2e 00 59 6f 75 20 63 61 6e 20 64 69 73 61 62 6c 65 20 61 20 56 52 52 50 20 67 72 | .4094..You.can.disable.a.VRRP.gr |
125a60 | 6f 75 70 20 77 69 74 68 20 60 60 64 69 73 61 62 6c 65 60 60 20 6f 70 74 69 6f 6e 3a 00 59 6f 75 | oup.with.``disable``.option:.You |
125a80 | 20 63 61 6e 20 67 65 74 20 6d 6f 72 65 20 73 70 65 63 69 66 69 63 20 4f 53 50 46 76 33 20 69 6e | .can.get.more.specific.OSPFv3.in |
125aa0 | 66 6f 72 6d 61 74 69 6f 6e 20 62 79 20 75 73 69 6e 67 20 74 68 65 20 70 61 72 61 6d 65 74 65 72 | formation.by.using.the.parameter |
125ac0 | 73 20 73 68 6f 77 6e 20 62 65 6c 6f 77 3a 00 59 6f 75 20 63 61 6e 20 6e 6f 74 20 61 73 73 69 67 | s.shown.below:.You.can.not.assig |
125ae0 | 6e 20 74 68 65 20 73 61 6d 65 20 61 6c 6c 6f 77 65 64 2d 69 70 73 20 73 74 61 74 65 6d 65 6e 74 | n.the.same.allowed-ips.statement |
125b00 | 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 57 69 72 65 47 75 61 72 64 20 70 65 65 72 73 2e 20 54 68 | .to.multiple.WireGuard.peers..Th |
125b20 | 69 73 20 61 20 64 65 73 69 67 6e 20 64 65 63 69 73 69 6f 6e 2e 20 46 6f 72 20 6d 6f 72 65 20 69 | is.a.design.decision..For.more.i |
125b40 | 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 65 20 60 57 69 72 | nformation.please.check.the.`Wir |
125b60 | 65 47 75 61 72 64 20 6d 61 69 6c 69 6e 67 20 6c 69 73 74 60 5f 2e 00 59 6f 75 20 63 61 6e 20 6e | eGuard.mailing.list`_..You.can.n |
125b80 | 6f 74 20 72 75 6e 20 74 68 69 73 20 69 6e 20 61 20 56 52 52 50 20 73 65 74 75 70 2c 20 69 66 20 | ot.run.this.in.a.VRRP.setup,.if. |
125ba0 | 6d 75 6c 74 69 70 6c 65 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 73 20 61 72 65 20 6c 61 75 6e | multiple.mDNS.repeaters.are.laun |
125bc0 | 63 68 65 64 20 69 6e 20 61 20 73 75 62 6e 65 74 20 79 6f 75 20 77 69 6c 6c 20 65 78 70 65 72 69 | ched.in.a.subnet.you.will.experi |
125be0 | 65 6e 63 65 20 74 68 65 20 6d 44 4e 53 20 70 61 63 6b 65 74 20 73 74 6f 72 6d 20 64 65 61 74 68 | ence.the.mDNS.packet.storm.death |
125c00 | 21 00 59 6f 75 20 63 61 6e 20 6e 6f 77 20 22 64 69 61 6c 22 20 74 68 65 20 70 65 65 72 20 77 69 | !.You.can.now."dial".the.peer.wi |
125c20 | 74 68 20 74 68 65 20 66 6f 6c 6c 77 6f 69 6e 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 73 74 70 | th.the.follwoing.command:.``sstp |
125c40 | 63 20 2d 2d 6c 6f 67 2d 6c 65 76 65 6c 20 34 20 2d 2d 6c 6f 67 2d 73 74 64 65 72 72 20 2d 2d 75 | c.--log-level.4.--log-stderr.--u |
125c60 | 73 65 72 20 76 79 6f 73 20 2d 2d 70 61 73 73 77 6f 72 64 20 76 79 6f 73 20 76 70 6e 2e 65 78 61 | ser.vyos.--password.vyos.vpn.exa |
125c80 | 6d 70 6c 65 2e 63 6f 6d 20 2d 2d 20 63 61 6c 6c 20 76 79 6f 73 60 60 2e 00 59 6f 75 20 63 61 6e | mple.com.--.call.vyos``..You.can |
125ca0 | 20 6e 6f 77 20 53 53 48 20 69 6e 74 6f 20 79 6f 75 72 20 73 79 73 74 65 6d 20 75 73 69 6e 67 20 | .now.SSH.into.your.system.using. |
125cc0 | 61 64 6d 69 6e 2f 61 64 6d 69 6e 20 61 73 20 61 20 64 65 66 61 75 6c 74 20 75 73 65 72 20 73 75 | admin/admin.as.a.default.user.su |
125ce0 | 70 70 6c 69 65 64 20 66 72 6f 6d 20 74 68 65 20 60 60 6c 66 6b 65 69 74 65 6c 2f 74 61 63 61 63 | pplied.from.the.``lfkeitel/tacac |
125d00 | 73 5f 70 6c 75 73 3a 6c 61 74 65 73 74 60 60 20 63 6f 6e 74 61 69 6e 65 72 2e 00 59 6f 75 20 63 | s_plus:latest``.container..You.c |
125d20 | 61 6e 20 6f 6e 6c 79 20 61 70 70 6c 79 20 6f 6e 65 20 70 6f 6c 69 63 79 20 70 65 72 20 69 6e 74 | an.only.apply.one.policy.per.int |
125d40 | 65 72 66 61 63 65 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 2c 20 62 75 74 20 79 6f 75 20 63 6f | erface.and.direction,.but.you.co |
125d60 | 75 6c 64 20 72 65 75 73 65 20 61 20 70 6f 6c 69 63 79 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 | uld.reuse.a.policy.on.different. |
125d80 | 69 6e 74 65 72 66 61 63 65 73 20 61 6e 64 20 64 69 72 65 63 74 69 6f 6e 73 3a 00 59 6f 75 20 63 | interfaces.and.directions:.You.c |
125da0 | 61 6e 20 72 75 6e 20 74 68 65 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 73 | an.run.the.UDP.broadcast.relay.s |
125dc0 | 65 72 76 69 63 65 20 6f 6e 20 6d 75 6c 74 69 70 6c 65 20 72 6f 75 74 65 72 73 20 63 6f 6e 6e 65 | ervice.on.multiple.routers.conne |
125de0 | 63 74 65 64 20 74 6f 20 61 20 73 75 62 6e 65 74 2e 20 54 68 65 72 65 20 69 73 20 2a 2a 4e 4f 2a | cted.to.a.subnet..There.is.**NO* |
125e00 | 2a 20 55 44 50 20 62 72 6f 61 64 63 61 73 74 20 72 65 6c 61 79 20 70 61 63 6b 65 74 20 73 74 6f | *.UDP.broadcast.relay.packet.sto |
125e20 | 72 6d 21 00 59 6f 75 20 63 61 6e 20 73 70 65 63 69 66 79 20 61 20 73 74 61 74 69 63 20 44 48 43 | rm!.You.can.specify.a.static.DHC |
125e40 | 50 20 61 73 73 69 67 6e 6d 65 6e 74 20 6f 6e 20 61 20 70 65 72 20 68 6f 73 74 20 62 61 73 69 73 | P.assignment.on.a.per.host.basis |
125e60 | 2e 20 59 6f 75 20 77 69 6c 6c 20 6e 65 65 64 20 74 68 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 | ..You.will.need.the.MAC.address. |
125e80 | 6f 66 20 74 68 65 20 73 74 61 74 69 6f 6e 20 61 6e 64 20 79 6f 75 72 20 64 65 73 69 72 65 64 20 | of.the.station.and.your.desired. |
125ea0 | 49 50 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 | IP.address..The.address.must.be. |
125ec0 | 69 6e 73 69 64 65 20 74 68 65 20 73 75 62 6e 65 74 20 64 65 66 69 6e 69 74 69 6f 6e 20 62 75 74 | inside.the.subnet.definition.but |
125ee0 | 20 63 61 6e 20 62 65 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 72 61 6e 67 65 20 73 74 61 | .can.be.outside.of.the.range.sta |
125f00 | 74 65 6d 65 6e 74 2e 00 59 6f 75 20 63 61 6e 20 74 65 73 74 20 74 68 65 20 53 4e 4d 50 76 33 20 | tement..You.can.test.the.SNMPv3. |
125f20 | 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 66 72 6f 6d 20 61 6e 79 20 6c 69 6e 75 78 20 62 61 73 | functionality.from.any.linux.bas |
125f40 | 65 64 20 73 79 73 74 65 6d 2c 20 6a 75 73 74 20 72 75 6e 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e | ed.system,.just.run.the.followin |
125f60 | 67 20 63 6f 6d 6d 61 6e 64 3a 20 60 60 73 6e 6d 70 77 61 6c 6b 20 2d 76 20 33 20 2d 75 20 76 79 | g.command:.``snmpwalk.-v.3.-u.vy |
125f80 | 6f 73 20 2d 61 20 53 48 41 20 2d 41 20 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d 78 20 41 45 53 | os.-a.SHA.-A.vyos12345678.-x.AES |
125fa0 | 20 2d 58 20 76 79 6f 73 31 32 33 34 35 36 37 38 20 2d 6c 20 61 75 74 68 50 72 69 76 20 31 39 32 | .-X.vyos12345678.-l.authPriv.192 |
125fc0 | 2e 30 2e 32 2e 31 20 2e 31 60 60 00 59 6f 75 20 63 61 6e 20 75 73 65 20 77 69 6c 64 63 61 72 64 | .0.2.1..1``.You.can.use.wildcard |
125fe0 | 20 60 60 2a 60 60 20 74 6f 20 6d 61 74 63 68 20 61 20 67 72 6f 75 70 20 6f 66 20 69 6e 74 65 72 | .``*``.to.match.a.group.of.inter |
126000 | 66 61 63 65 73 2e 00 59 6f 75 20 63 61 6e 20 76 65 72 69 66 79 20 79 6f 75 72 20 56 52 52 50 20 | faces..You.can.verify.your.VRRP. |
126020 | 67 72 6f 75 70 20 73 74 61 74 75 73 20 77 69 74 68 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 61 | group.status.with.the.operationa |
126040 | 6c 20 6d 6f 64 65 20 60 60 72 75 6e 20 73 68 6f 77 20 76 72 72 70 60 60 20 63 6f 6d 6d 61 6e 64 | l.mode.``run.show.vrrp``.command |
126060 | 3a 00 59 6f 75 20 63 61 6e 20 76 69 65 77 20 74 68 61 74 20 74 68 65 20 70 6f 6c 69 63 79 20 69 | :.You.can.view.that.the.policy.i |
126080 | 73 20 62 65 69 6e 67 20 63 6f 72 72 65 63 74 6c 79 20 28 6f 72 20 69 6e 63 6f 72 72 65 63 74 6c | s.being.correctly.(or.incorrectl |
1260a0 | 79 29 20 75 74 69 6c 69 73 65 64 20 77 69 74 68 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | y).utilised.with.the.following.c |
1260c0 | 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 63 61 6e 6e 6f 74 20 65 61 73 69 6c 79 20 72 65 64 69 73 74 | ommand:.You.cannot.easily.redist |
1260e0 | 72 69 62 75 74 65 20 49 50 76 36 20 72 6f 75 74 65 73 20 76 69 61 20 4f 53 50 46 76 33 20 6f 6e | ribute.IPv6.routes.via.OSPFv3.on |
126100 | 20 61 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 6c 69 6e 6b 2e 20 54 68 69 | .a.WireGuard.interface.link..Thi |
126120 | 73 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 6c 69 6e 6b | s.requires.you.to.configure.link |
126140 | 2d 6c 6f 63 61 6c 20 61 64 64 72 65 73 73 65 73 20 6d 61 6e 75 61 6c 6c 79 20 6f 6e 20 74 68 65 | -local.addresses.manually.on.the |
126160 | 20 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 73 2c 20 73 65 65 20 3a 76 79 74 61 | .WireGuard.interfaces,.see.:vyta |
126180 | 73 6b 3a 60 54 31 34 38 33 60 2e 00 59 6f 75 20 64 6f 20 2a 2a 6e 6f 74 2a 2a 20 6e 65 65 64 20 | sk:`T1483`..You.do.**not**.need. |
1261a0 | 74 6f 20 63 6f 70 79 20 74 68 65 20 63 65 72 74 69 66 69 63 61 74 65 20 74 6f 20 74 68 65 20 6f | to.copy.the.certificate.to.the.o |
1261c0 | 74 68 65 72 20 72 6f 75 74 65 72 2e 20 49 6e 73 74 65 61 64 2c 20 79 6f 75 20 6e 65 65 64 20 74 | ther.router..Instead,.you.need.t |
1261e0 | 6f 20 72 65 74 72 69 65 76 65 20 69 74 73 20 53 48 41 2d 32 35 36 20 66 69 6e 67 65 72 70 72 69 | o.retrieve.its.SHA-256.fingerpri |
126200 | 6e 74 2e 20 4f 70 65 6e 56 50 4e 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 53 48 41 2d 32 35 | nt..OpenVPN.only.supports.SHA-25 |
126220 | 36 20 66 69 6e 67 65 72 70 72 69 6e 74 73 20 61 74 20 74 68 65 20 6d 6f 6d 65 6e 74 2c 20 73 6f | 6.fingerprints.at.the.moment,.so |
126240 | 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 75 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 | .you.need.to.use.the.following.c |
126260 | 6f 6d 6d 61 6e 64 3a 00 59 6f 75 20 6d 61 79 20 61 6c 73 6f 20 61 64 64 69 74 69 6f 6e 61 6c 6c | ommand:.You.may.also.additionall |
126280 | 79 20 63 6f 6e 66 69 67 75 72 65 20 74 69 6d 65 6f 75 74 73 20 66 6f 72 20 64 69 66 66 65 72 65 | y.configure.timeouts.for.differe |
1262a0 | 6e 74 20 74 79 70 65 73 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 2e 00 59 6f 75 20 6d 61 79 | nt.types.of.connections..You.may |
1262c0 | 20 70 72 65 66 65 72 20 6c 6f 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 63 61 70 61 62 | .prefer.locally.configured.capab |
1262e0 | 69 6c 69 74 69 65 73 20 6d 6f 72 65 20 74 68 61 6e 20 74 68 65 20 6e 65 67 6f 74 69 61 74 65 64 | ilities.more.than.the.negotiated |
126300 | 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 65 76 65 6e 20 74 68 6f 75 67 68 20 72 65 6d 6f 74 65 | .capabilities.even.though.remote |
126320 | 20 70 65 65 72 20 73 65 6e 64 73 20 63 61 70 61 62 69 6c 69 74 69 65 73 2e 20 49 66 20 74 68 65 | .peer.sends.capabilities..If.the |
126340 | 20 70 65 65 72 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 62 79 20 3a 63 66 67 63 6d 64 3a 60 | .peer.is.configured.by.:cfgcmd:` |
126360 | 6f 76 65 72 72 69 64 65 2d 63 61 70 61 62 69 6c 69 74 79 60 2c 20 56 79 4f 53 20 69 67 6e 6f 72 | override-capability`,.VyOS.ignor |
126380 | 65 73 20 72 65 63 65 69 76 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 74 68 65 6e 20 6f 76 | es.received.capabilities.then.ov |
1263a0 | 65 72 72 69 64 65 20 6e 65 67 6f 74 69 61 74 65 64 20 63 61 70 61 62 69 6c 69 74 69 65 73 20 77 | erride.negotiated.capabilities.w |
1263c0 | 69 74 68 20 63 6f 6e 66 69 67 75 72 65 64 20 76 61 6c 75 65 73 2e 00 59 6f 75 20 6d 61 79 20 77 | ith.configured.values..You.may.w |
1263e0 | 61 6e 74 20 74 6f 20 64 69 73 61 62 6c 65 20 73 65 6e 64 69 6e 67 20 43 61 70 61 62 69 6c 69 74 | ant.to.disable.sending.Capabilit |
126400 | 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 20 4f 50 45 4e 20 6d 65 73 73 61 67 65 20 6f 70 74 69 6f | y.Negotiation.OPEN.message.optio |
126420 | 6e 61 6c 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 74 68 65 20 70 65 65 72 20 77 68 65 6e 20 72 | nal.parameter.to.the.peer.when.r |
126440 | 65 6d 6f 74 65 20 70 65 65 72 20 64 6f 65 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 20 43 61 | emote.peer.does.not.implement.Ca |
126460 | 70 61 62 69 6c 69 74 79 20 4e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 50 6c 65 61 73 65 20 75 73 65 | pability.Negotiation..Please.use |
126480 | 20 3a 63 66 67 63 6d 64 3a 60 64 69 73 61 62 6c 65 2d 63 61 70 61 62 69 6c 69 74 79 2d 6e 65 67 | .:cfgcmd:`disable-capability-neg |
1264a0 | 6f 74 69 61 74 69 6f 6e 60 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 64 69 73 61 62 6c 65 20 74 68 65 | otiation`.command.to.disable.the |
1264c0 | 20 66 65 61 74 75 72 65 2e 00 59 6f 75 20 6e 65 65 64 20 32 20 73 65 70 61 72 61 74 65 20 66 69 | .feature..You.need.2.separate.fi |
1264e0 | 72 65 77 61 6c 6c 73 20 74 6f 20 64 65 66 69 6e 65 20 74 72 61 66 66 69 63 3a 20 6f 6e 65 20 66 | rewalls.to.define.traffic:.one.f |
126500 | 6f 72 20 65 61 63 68 20 64 69 72 65 63 74 69 6f 6e 2e 00 59 6f 75 20 6e 65 65 64 20 74 6f 20 64 | or.each.direction..You.need.to.d |
126520 | 69 73 61 62 6c 65 20 74 68 65 20 69 6e 2d 6d 65 6d 6f 72 79 20 74 61 62 6c 65 20 69 6e 20 70 72 | isable.the.in-memory.table.in.pr |
126540 | 6f 64 75 63 74 69 6f 6e 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 21 20 55 73 69 6e 67 20 3a 61 62 | oduction.environments!.Using.:ab |
126560 | 62 72 3a 60 49 4d 54 20 28 49 6e 2d 4d 65 6d 6f 72 79 20 54 61 62 6c 65 29 60 20 6d 61 79 20 6c | br:`IMT.(In-Memory.Table)`.may.l |
126580 | 65 61 64 20 74 6f 20 68 65 61 76 79 20 43 50 55 20 6f 76 65 72 6c 6f 61 64 69 6e 67 20 61 6e 64 | ead.to.heavy.CPU.overloading.and |
1265a0 | 20 75 6e 73 74 61 62 6c 65 20 66 6c 6f 77 2d 61 63 63 6f 75 6e 74 69 6e 67 20 62 65 68 61 76 69 | .unstable.flow-accounting.behavi |
1265c0 | 6f 72 2e 00 59 6f 75 20 6e 65 65 64 20 79 6f 75 72 20 50 50 50 6f 45 20 63 72 65 64 65 6e 74 69 | or..You.need.your.PPPoE.credenti |
1265e0 | 61 6c 73 20 66 72 6f 6d 20 79 6f 75 72 20 44 53 4c 20 49 53 50 20 69 6e 20 6f 72 64 65 72 20 74 | als.from.your.DSL.ISP.in.order.t |
126600 | 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 69 73 2e 20 54 68 65 20 75 73 75 61 6c 20 75 73 65 72 | o.configure.this..The.usual.user |
126620 | 6e 61 6d 65 20 69 73 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 6e 61 6d 65 40 68 6f 73 74 | name.is.in.the.form.of.name@host |
126640 | 2e 6e 65 74 20 62 75 74 20 6d 61 79 20 76 61 72 79 20 64 65 70 65 6e 64 69 6e 67 20 6f 6e 20 49 | .net.but.may.vary.depending.on.I |
126660 | 53 50 2e 00 59 6f 75 20 6e 6f 77 20 73 65 65 20 74 68 65 20 6c 6f 6e 67 65 72 20 41 53 20 70 61 | SP..You.now.see.the.longer.AS.pa |
126680 | 74 68 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 64 64 20 61 20 66 69 72 65 77 61 6c 6c 20 74 6f | th..You.should.add.a.firewall.to |
1266a0 | 20 79 6f 75 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 62 6f 76 65 20 61 73 20 77 65 6c | .your.configuration.above.as.wel |
1266c0 | 6c 20 62 79 20 61 73 73 69 67 6e 69 6e 67 20 69 74 20 74 6f 20 74 68 65 20 70 70 70 6f 65 30 20 | l.by.assigning.it.to.the.pppoe0. |
1266e0 | 69 74 73 65 6c 66 20 61 73 20 73 68 6f 77 6e 20 68 65 72 65 3a 00 59 6f 75 20 73 68 6f 75 6c 64 | itself.as.shown.here:.You.should |
126700 | 20 61 6c 73 6f 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 4f 55 54 49 53 44 45 5f 4c 4f | .also.ensure.that.the.OUTISDE_LO |
126720 | 43 41 4c 20 66 69 72 65 77 61 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f | CAL.firewall.group.is.applied.to |
126740 | 20 74 68 65 20 57 41 4e 20 69 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 65 63 74 69 | .the.WAN.interface.and.a.directi |
126760 | 6f 6e 20 28 6c 6f 63 61 6c 29 2e 00 59 6f 75 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 65 6e 73 75 | on.(local)..You.should.also.ensu |
126780 | 72 65 20 74 68 61 74 20 74 68 65 20 4f 55 54 53 49 44 45 5f 4c 4f 43 41 4c 20 66 69 72 65 77 61 | re.that.the.OUTSIDE_LOCAL.firewa |
1267a0 | 6c 6c 20 67 72 6f 75 70 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 57 41 4e 20 69 | ll.group.is.applied.to.the.WAN.i |
1267c0 | 6e 74 65 72 66 61 63 65 20 61 6e 64 20 61 20 64 69 72 65 63 74 69 6f 6e 20 28 6c 6f 63 61 6c 29 | nterface.and.a.direction.(local) |
1267e0 | 2e 00 59 6f 75 20 77 69 6c 6c 20 61 6c 73 6f 20 6e 65 65 64 20 74 68 65 20 70 75 62 6c 69 63 20 | ..You.will.also.need.the.public. |
126800 | 6b 65 79 20 6f 66 20 79 6f 75 72 20 70 65 65 72 20 61 73 20 77 65 6c 6c 20 61 73 20 74 68 65 20 | key.of.your.peer.as.well.as.the. |
126820 | 6e 65 74 77 6f 72 6b 28 73 29 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 74 75 6e 6e 65 6c 20 28 61 | network(s).you.want.to.tunnel.(a |
126840 | 6c 6c 6f 77 65 64 2d 69 70 73 29 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 61 20 57 69 72 65 47 | llowed-ips).to.configure.a.WireG |
126860 | 75 61 72 64 20 74 75 6e 6e 65 6c 2e 20 54 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 62 65 6c 6f | uard.tunnel..The.public.key.belo |
126880 | 77 20 69 73 20 61 6c 77 61 79 73 20 74 68 65 20 70 75 62 6c 69 63 20 6b 65 79 20 66 72 6f 6d 20 | w.is.always.the.public.key.from. |
1268a0 | 79 6f 75 72 20 70 65 65 72 2c 20 6e 6f 74 20 79 6f 75 72 20 6c 6f 63 61 6c 20 6f 6e 65 2e 00 59 | your.peer,.not.your.local.one..Y |
1268c0 | 6f 75 72 20 49 53 50 73 20 6d 6f 64 65 6d 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 20 74 6f 20 70 | our.ISPs.modem.is.connected.to.p |
1268e0 | 6f 72 74 20 60 60 65 74 68 30 60 60 20 6f 66 20 79 6f 75 72 20 56 79 4f 53 20 62 6f 78 2e 00 59 | ort.``eth0``.of.your.VyOS.box..Y |
126900 | 6f 75 72 20 4c 41 4e 20 63 6f 6e 6e 65 63 74 65 64 20 6f 6e 20 65 74 68 30 20 75 73 65 73 20 70 | our.LAN.connected.on.eth0.uses.p |
126920 | 72 65 66 69 78 20 60 60 32 30 30 31 3a 64 62 38 3a 62 65 65 66 3a 32 3a 3a 2f 36 34 60 60 20 77 | refix.``2001:db8:beef:2::/64``.w |
126940 | 69 74 68 20 74 68 65 20 72 6f 75 74 65 72 20 62 65 65 69 6e 67 20 60 60 32 30 30 31 3a 64 62 38 | ith.the.router.beeing.``2001:db8 |
126960 | 3a 62 65 65 66 3a 32 3a 3a 31 60 60 00 5a 65 62 72 61 20 73 75 70 70 6f 72 74 73 20 70 72 65 66 | :beef:2::1``.Zebra.supports.pref |
126980 | 69 78 2d 6c 69 73 74 73 20 61 6e 64 20 52 6f 75 74 65 20 4d 61 70 73 73 20 74 6f 20 6d 61 74 63 | ix-lists.and.Route.Mapss.to.matc |
1269a0 | 68 20 72 6f 75 74 65 73 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 6f 74 68 65 72 20 46 52 52 | h.routes.received.from.other.FRR |
1269c0 | 20 63 6f 6d 70 6f 6e 65 6e 74 73 2e 20 54 68 65 20 70 65 72 6d 69 74 2f 64 65 6e 79 20 66 61 63 | .components..The.permit/deny.fac |
1269e0 | 69 6c 69 74 69 65 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 74 68 65 73 65 20 63 6f 6d 6d 61 6e | ilities.provided.by.these.comman |
126a00 | 64 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 66 69 6c 74 65 72 20 77 68 69 63 68 20 72 | ds.can.be.used.to.filter.which.r |
126a20 | 6f 75 74 65 73 20 7a 65 62 72 61 20 77 69 6c 6c 20 69 6e 73 74 61 6c 6c 20 69 6e 20 74 68 65 20 | outes.zebra.will.install.in.the. |
126a40 | 6b 65 72 6e 65 6c 2e 00 5a 65 62 72 61 2f 4b 65 72 6e 65 6c 20 72 6f 75 74 65 20 66 69 6c 74 65 | kernel..Zebra/Kernel.route.filte |
126a60 | 72 69 6e 67 00 5a 6f 6e 65 20 42 61 73 65 64 20 46 69 72 65 77 61 6c 6c 00 5a 6f 6e 65 20 42 61 | ring.Zone.Based.Firewall.Zone.Ba |
126a80 | 73 65 64 20 46 69 72 65 77 61 6c 6c 20 28 44 65 70 72 65 63 61 74 65 64 29 00 5a 6f 6e 65 2d 50 | sed.Firewall.(Deprecated).Zone-P |
126aa0 | 6f 6c 69 63 79 20 4f 76 65 72 76 69 65 77 00 5a 6f 6e 65 2d 62 61 73 65 64 20 66 69 72 65 77 61 | olicy.Overview.Zone-based.firewa |
126ac0 | 6c 6c 00 5b 41 2e 42 2e 43 2e 44 5d 20 e2 80 93 20 6c 69 6e 6b 2d 73 74 61 74 65 2d 69 64 2e 20 | ll.[A.B.C.D].....link-state-id.. |
126ae0 | 57 69 74 68 20 74 68 69 73 20 73 70 65 63 69 66 69 65 64 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 | With.this.specified.the.command. |
126b00 | 64 69 73 70 6c 61 79 73 20 70 6f 72 74 69 6f 6e 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 | displays.portion.of.the.network. |
126b20 | 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 74 68 61 74 20 69 73 20 62 65 69 6e 67 20 64 65 73 63 72 69 | environment.that.is.being.descri |
126b40 | 62 65 64 20 62 79 20 74 68 65 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2e 20 54 68 65 20 76 61 | bed.by.the.advertisement..The.va |
126b60 | 6c 75 65 20 65 6e 74 65 72 65 64 20 64 65 70 65 6e 64 73 20 6f 6e 20 74 68 65 20 61 64 76 65 72 | lue.entered.depends.on.the.adver |
126b80 | 74 69 73 65 6d 65 6e 74 e2 80 99 73 20 4c 53 20 74 79 70 65 2e 20 49 74 20 6d 75 73 74 20 62 65 | tisement...s.LS.type..It.must.be |
126ba0 | 20 65 6e 74 65 72 65 64 20 69 6e 20 74 68 65 20 66 6f 72 6d 20 6f 66 20 61 6e 20 49 50 20 61 64 | .entered.in.the.form.of.an.IP.ad |
126bc0 | 64 72 65 73 73 2e 00 60 31 2e 20 43 72 65 61 74 65 20 61 6e 20 65 76 65 6e 74 20 68 61 6e 64 6c | dress..`1..Create.an.event.handl |
126be0 | 65 72 60 5f 00 60 32 2e 20 41 64 64 20 72 65 67 65 78 20 74 6f 20 74 68 65 20 73 63 72 69 70 74 | er`_.`2..Add.regex.to.the.script |
126c00 | 60 5f 00 60 33 2e 20 41 64 64 20 61 20 66 75 6c 6c 20 70 61 74 68 20 74 6f 20 74 68 65 20 73 63 | `_.`3..Add.a.full.path.to.the.sc |
126c20 | 72 69 70 74 60 5f 00 60 34 2e 20 41 64 64 20 6f 70 74 69 6f 6e 61 6c 20 70 61 72 61 6d 65 74 65 | ript`_.`4..Add.optional.paramete |
126c40 | 72 73 60 5f 00 60 3c 6e 61 6d 65 3e 60 20 6d 75 73 74 20 62 65 20 69 64 65 6e 74 69 63 61 6c 20 | rs`_.`<name>`.must.be.identical. |
126c60 | 6f 6e 20 62 6f 74 68 20 73 69 64 65 73 21 00 60 43 6f 6d 6d 6f 6e 20 41 70 70 6c 69 63 61 74 69 | on.both.sides!.`Common.Applicati |
126c80 | 6f 6e 73 20 4b 65 70 74 20 45 6e 68 61 6e 63 65 64 60 5f 20 28 43 41 4b 45 29 20 69 73 20 61 20 | ons.Kept.Enhanced`_.(CAKE).is.a. |
126ca0 | 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 20 71 75 65 75 65 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 | comprehensive.queue.management.s |
126cc0 | 79 73 74 65 6d 2c 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 61 73 20 61 20 71 75 65 75 65 20 64 69 | ystem,.implemented.as.a.queue.di |
126ce0 | 73 63 69 70 6c 69 6e 65 20 28 71 64 69 73 63 29 20 66 6f 72 20 74 68 65 20 4c 69 6e 75 78 20 6b | scipline.(qdisc).for.the.Linux.k |
126d00 | 65 72 6e 65 6c 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 72 65 70 6c 61 63 65 | ernel..It.is.designed.to.replace |
126d20 | 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 75 70 6f 6e 20 74 68 65 20 63 6f 6d 70 6c 65 78 20 68 69 | .and.improve.upon.the.complex.hi |
126d40 | 65 72 61 72 63 68 79 20 6f 66 20 73 69 6d 70 6c 65 20 71 64 69 73 63 73 20 70 72 65 73 65 6e 74 | erarchy.of.simple.qdiscs.present |
126d60 | 6c 79 20 72 65 71 75 69 72 65 64 20 74 6f 20 65 66 66 65 63 74 69 76 65 6c 79 20 74 61 63 6b 6c | ly.required.to.effectively.tackl |
126d80 | 65 20 74 68 65 20 62 75 66 66 65 72 62 6c 6f 61 74 20 70 72 6f 62 6c 65 6d 20 61 74 20 74 68 65 | e.the.bufferbloat.problem.at.the |
126da0 | 20 6e 65 74 77 6f 72 6b 20 65 64 67 65 2e 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 | .network.edge..``$.tail.-n.+2.ca |
126dc0 | 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 | .key.|.head.-n.-1.|.tr.-d.'\n'`` |
126de0 | 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 61 2e 70 65 6d 20 7c 20 68 65 61 64 20 2d 6e | .``$.tail.-n.+2.ca.pem.|.head.-n |
126e00 | 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b | .-1.|.tr.-d.'\n'``.``$.tail.-n.+ |
126e20 | 32 20 63 65 72 74 2e 6b 65 79 20 7c 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 | 2.cert.key.|.head.-n.-1.|.tr.-d. |
126e40 | 27 5c 6e 27 60 60 00 60 60 24 20 74 61 69 6c 20 2d 6e 20 2b 32 20 63 65 72 74 2e 70 65 6d 20 7c | '\n'``.``$.tail.-n.+2.cert.pem.| |
126e60 | 20 68 65 61 64 20 2d 6e 20 2d 31 20 7c 20 74 72 20 2d 64 20 27 5c 6e 27 60 60 00 60 60 2b 60 60 | .head.-n.-1.|.tr.-d.'\n'``.``+`` |
126e80 | 20 73 75 63 63 65 73 73 66 75 6c 00 60 60 2d 60 60 20 66 61 69 6c 65 64 00 60 60 2f 63 6f 6e 66 | .successful.``-``.failed.``/conf |
126ea0 | 69 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c 69 65 6e 74 2f 70 6f 73 74 2d 68 6f 6f 6b | ig/scripts/dhcp-client/post-hook |
126ec0 | 73 2e 64 2f 60 60 00 60 60 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2f 64 68 63 70 2d 63 6c | s.d/``.``/config/scripts/dhcp-cl |
126ee0 | 69 65 6e 74 2f 70 72 65 2d 68 6f 6f 6b 73 2e 64 2f 60 60 00 60 60 30 2e 70 6f 6f 6c 2e 6e 74 70 | ient/pre-hooks.d/``.``0.pool.ntp |
126f00 | 2e 6f 72 67 60 60 00 60 60 30 60 60 20 2d 20 32 30 20 6f 72 20 34 30 20 4d 48 7a 20 63 68 61 6e | .org``.``0``.-.20.or.40.MHz.chan |
126f20 | 6e 65 6c 20 77 69 64 74 68 20 28 64 65 66 61 75 6c 74 29 00 60 60 30 60 60 3a 20 4e 6f 20 72 65 | nel.width.(default).``0``:.No.re |
126f40 | 70 6c 61 79 20 77 69 6e 64 6f 77 2c 20 73 74 72 69 63 74 20 63 68 65 63 6b 00 60 60 31 2d 34 32 | play.window,.strict.check.``1-42 |
126f60 | 39 34 39 36 37 32 39 35 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 68 | 94967295``:.Number.of.packets.th |
126f80 | 61 74 20 63 6f 75 6c 64 20 62 65 20 6d 69 73 6f 72 64 65 72 65 64 00 60 60 31 2e 70 6f 6f 6c 2e | at.could.be.misordered.``1.pool. |
126fa0 | 6e 74 70 2e 6f 72 67 60 60 00 60 60 31 31 35 32 30 30 60 60 20 2d 20 31 31 35 2c 32 30 30 20 62 | ntp.org``.``115200``.-.115,200.b |
126fc0 | 70 73 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 73 65 72 69 61 6c 20 63 6f 6e 73 6f 6c 65 29 00 | ps.(default.for.serial.console). |
126fe0 | 60 60 31 32 30 30 60 60 20 2d 20 31 32 30 30 20 62 70 73 00 60 60 31 39 32 2e 31 36 38 2e 32 2e | ``1200``.-.1200.bps.``192.168.2. |
127000 | 32 35 34 60 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 79 4f 53 20 65 74 68 32 20 66 | 254``.IP.addreess.on.VyOS.eth2.f |
127020 | 72 6f 6d 20 49 53 50 32 00 60 60 31 39 32 30 30 60 60 20 2d 20 31 39 2c 32 30 30 20 62 70 73 00 | rom.ISP2.``19200``.-.19,200.bps. |
127040 | 60 60 31 60 60 20 2d 20 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 32 | ``1``.-.80.MHz.channel.width.``2 |
127060 | 2e 70 6f 6f 6c 2e 6e 74 70 2e 6f 72 67 60 60 00 60 60 32 30 33 2e 30 2e 31 31 33 2e 32 35 34 60 | .pool.ntp.org``.``203.0.113.254` |
127080 | 60 20 49 50 20 61 64 64 72 65 65 73 73 20 6f 6e 20 56 79 4f 53 20 65 74 68 31 20 66 72 6f 6d 20 | `.IP.addreess.on.VyOS.eth1.from. |
1270a0 | 49 53 50 31 00 60 60 32 34 30 30 60 60 20 2d 20 32 34 30 30 20 62 70 73 00 60 60 32 60 60 20 2d | ISP1.``2400``.-.2400.bps.``2``.- |
1270c0 | 20 31 36 30 20 4d 48 7a 20 63 68 61 6e 6e 65 6c 20 77 69 64 74 68 00 60 60 33 38 34 30 30 60 60 | .160.MHz.channel.width.``38400`` |
1270e0 | 20 2d 20 33 38 2c 34 30 30 20 62 70 73 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 58 65 6e 20 63 | .-.38,400.bps.(default.for.Xen.c |
127100 | 6f 6e 73 6f 6c 65 29 00 60 60 33 60 60 20 2d 20 38 30 2b 38 30 20 4d 48 7a 20 63 68 61 6e 6e 65 | onsole).``3``.-.80+80.MHz.channe |
127120 | 6c 20 77 69 64 74 68 00 60 60 34 38 30 30 60 60 20 2d 20 34 38 30 30 20 62 70 73 00 60 60 35 37 | l.width.``4800``.-.4800.bps.``57 |
127140 | 36 30 30 60 60 20 2d 20 35 37 2c 36 30 30 20 62 70 73 00 60 60 36 34 3a 66 66 39 62 3a 3a 2f 39 | 600``.-.57,600.bps.``64:ff9b::/9 |
127160 | 36 60 60 20 69 73 20 74 68 65 20 77 65 6c 6c 2d 6b 6e 6f 77 6e 20 70 72 65 66 69 78 20 66 6f 72 | 6``.is.the.well-known.prefix.for |
127180 | 20 49 50 76 34 2d 65 6d 62 65 64 64 65 64 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 2e 20 54 | .IPv4-embedded.IPv6.addresses..T |
1271a0 | 68 65 20 70 72 65 66 69 78 20 69 73 20 75 73 65 64 20 74 6f 20 72 65 70 72 65 73 65 6e 74 20 49 | he.prefix.is.used.to.represent.I |
1271c0 | 50 76 34 20 61 64 64 72 65 73 73 65 73 20 69 6e 20 61 6e 20 49 50 76 36 20 61 64 64 72 65 73 73 | Pv4.addresses.in.an.IPv6.address |
1271e0 | 20 66 6f 72 6d 61 74 2e 20 54 68 65 20 49 50 76 34 20 61 64 64 72 65 73 73 20 69 73 20 65 6e 63 | .format..The.IPv4.address.is.enc |
127200 | 6f 64 65 64 20 69 6e 20 74 68 65 20 6c 6f 77 2d 6f 72 64 65 72 20 33 32 20 62 69 74 73 20 6f 66 | oded.in.the.low-order.32.bits.of |
127220 | 20 74 68 65 20 49 50 76 36 20 61 64 64 72 65 73 73 2e 20 54 68 65 20 68 69 67 68 2d 6f 72 64 65 | .the.IPv6.address..The.high-orde |
127240 | 72 20 33 32 20 62 69 74 73 20 61 72 65 20 73 65 74 20 74 6f 20 74 68 65 20 77 65 6c 6c 2d 6b 6e | r.32.bits.are.set.to.the.well-kn |
127260 | 6f 77 6e 20 70 72 65 66 69 78 20 36 34 3a 66 66 39 62 3a 3a 2f 39 36 2e 00 60 60 38 30 32 2e 33 | own.prefix.64:ff9b::/96..``802.3 |
127280 | 61 64 60 60 20 2d 20 49 45 45 45 20 38 30 32 2e 33 61 64 20 44 79 6e 61 6d 69 63 20 6c 69 6e 6b | ad``.-.IEEE.802.3ad.Dynamic.link |
1272a0 | 20 61 67 67 72 65 67 61 74 69 6f 6e 2e 20 43 72 65 61 74 65 73 20 61 67 67 72 65 67 61 74 69 6f | .aggregation..Creates.aggregatio |
1272c0 | 6e 20 67 72 6f 75 70 73 20 74 68 61 74 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 73 70 65 | n.groups.that.share.the.same.spe |
1272e0 | 65 64 20 61 6e 64 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 73 2e 20 55 74 69 6c 69 7a 65 73 | ed.and.duplex.settings..Utilizes |
127300 | 20 61 6c 6c 20 73 6c 61 76 65 73 20 69 6e 20 74 68 65 20 61 63 74 69 76 65 20 61 67 67 72 65 67 | .all.slaves.in.the.active.aggreg |
127320 | 61 74 6f 72 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 74 68 65 20 38 30 32 2e 33 61 64 20 73 70 | ator.according.to.the.802.3ad.sp |
127340 | 65 63 69 66 69 63 61 74 69 6f 6e 2e 00 60 60 39 36 30 30 60 60 20 2d 20 39 36 30 30 20 62 70 73 | ecification..``9600``.-.9600.bps |
127360 | 00 60 60 3c 20 64 68 2d 67 72 6f 75 70 20 3e 60 60 20 64 65 66 69 6e 65 73 20 61 20 44 69 66 66 | .``<.dh-group.>``.defines.a.Diff |
127380 | 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f 72 20 50 46 53 3b 00 60 60 40 60 60 20 | ie-Hellman.group.for.PFS;.``@``. |
1273a0 | 55 73 65 20 40 20 61 73 20 72 65 63 6f 72 64 20 6e 61 6d 65 20 74 6f 20 73 65 74 20 74 68 65 20 | Use.@.as.record.name.to.set.the. |
1273c0 | 72 65 63 6f 72 64 20 66 6f 72 20 74 68 65 20 72 6f 6f 74 20 64 6f 6d 61 69 6e 2e 00 60 60 4b 6e | record.for.the.root.domain..``Kn |
1273e0 | 6f 77 6e 20 6c 69 6d 69 74 61 74 69 6f 6e 73 3a 60 60 00 60 60 53 74 61 74 65 66 75 6c 2d 49 50 | own.limitations:``.``Stateful-IP |
127400 | 76 36 2d 41 64 64 72 65 73 73 2d 50 6f 6f 6c 60 60 20 61 6e 64 20 60 60 44 65 6c 65 67 61 74 65 | v6-Address-Pool``.and.``Delegate |
127420 | 64 2d 49 50 76 36 2d 50 72 65 66 69 78 2d 50 6f 6f 6c 60 60 20 61 72 65 20 64 65 66 69 6e 65 64 | d-IPv6-Prefix-Pool``.are.defined |
127440 | 20 69 6e 20 52 46 43 36 39 31 31 2e 20 49 66 20 74 68 65 79 20 61 72 65 20 6e 6f 74 20 64 65 66 | .in.RFC6911..If.they.are.not.def |
127460 | 69 6e 65 64 20 69 6e 20 79 6f 75 72 20 52 41 44 49 55 53 20 73 65 72 76 65 72 2c 20 61 64 64 20 | ined.in.your.RADIUS.server,.add. |
127480 | 6e 65 77 20 64 69 63 74 69 6f 6e 61 72 79 5f 2e 00 60 60 57 4c 42 5f 49 4e 54 45 52 46 41 43 45 | new.dictionary_..``WLB_INTERFACE |
1274a0 | 5f 4e 41 4d 45 3d 5b 69 6e 74 65 72 66 61 63 65 6e 61 6d 65 5d 60 60 3a 20 49 6e 74 65 72 66 61 | _NAME=[interfacename]``:.Interfa |
1274c0 | 63 65 20 74 6f 20 62 65 20 6d 6f 6e 69 74 6f 72 65 64 00 60 60 57 4c 42 5f 49 4e 54 45 52 46 41 | ce.to.be.monitored.``WLB_INTERFA |
1274e0 | 43 45 5f 53 54 41 54 45 3d 5b 41 43 54 49 56 45 7c 46 41 49 4c 45 44 5d 60 60 3a 20 49 6e 74 65 | CE_STATE=[ACTIVE|FAILED]``:.Inte |
127500 | 72 66 61 63 65 20 73 74 61 74 65 00 60 60 61 60 60 20 2d 20 38 30 32 2e 31 31 61 20 2d 20 35 34 | rface.state.``a``.-.802.11a.-.54 |
127520 | 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 60 60 20 2d 20 38 30 32 2e 31 31 61 63 20 2d 20 31 | .Mbits/sec.``ac``.-.802.11ac.-.1 |
127540 | 33 30 30 20 4d 62 69 74 73 2f 73 65 63 00 60 60 61 63 63 65 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 | 300.Mbits/sec.``accept-own-nexth |
127560 | 6f 70 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d | op``.-...........Well-known.comm |
127580 | 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 61 63 63 65 70 74 2d 6f 77 6e 2d 6e 65 78 74 68 6f 70 | unities.value.accept-own-nexthop |
1275a0 | 20 30 78 46 46 46 46 30 30 30 38 00 60 60 61 63 63 65 70 74 2d 6f 77 6e 60 60 20 2d 20 20 20 20 | .0xFFFF0008.``accept-own``.-.... |
1275c0 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e | ...............Well-known.commun |
1275e0 | 69 74 69 65 73 20 76 61 6c 75 65 20 41 43 43 45 50 54 5f 4f 57 4e 20 30 78 46 46 46 46 30 30 30 | ities.value.ACCEPT_OWN.0xFFFF000 |
127600 | 31 00 60 60 61 63 63 65 70 74 60 60 3a 20 61 63 63 65 70 74 20 74 68 65 20 70 61 63 6b 65 74 2e | 1.``accept``:.accept.the.packet. |
127620 | 00 60 60 61 63 63 65 73 73 2d 70 6f 69 6e 74 60 60 20 2d 20 41 63 63 65 73 73 2d 70 6f 69 6e 74 | .``access-point``.-.Access-point |
127640 | 20 66 6f 72 77 61 72 64 73 20 70 61 63 6b 65 74 73 20 62 65 74 77 65 65 6e 20 6f 74 68 65 72 20 | .forwards.packets.between.other. |
127660 | 6e 6f 64 65 73 00 60 60 61 63 74 69 6f 6e 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 66 61 69 6c | nodes.``action``.keep-alive.fail |
127680 | 75 72 65 20 61 63 74 69 6f 6e 3a 00 60 60 61 63 74 69 76 65 2d 62 61 63 6b 75 70 60 60 20 2d 20 | ure.action:.``active-backup``.-. |
1276a0 | 41 63 74 69 76 65 2d 62 61 63 6b 75 70 20 70 6f 6c 69 63 79 3a 20 4f 6e 6c 79 20 6f 6e 65 20 73 | Active-backup.policy:.Only.one.s |
1276c0 | 6c 61 76 65 20 69 6e 20 74 68 65 20 62 6f 6e 64 20 69 73 20 61 63 74 69 76 65 2e 20 41 20 64 69 | lave.in.the.bond.is.active..A.di |
1276e0 | 66 66 65 72 65 6e 74 20 73 6c 61 76 65 20 62 65 63 6f 6d 65 73 20 61 63 74 69 76 65 20 69 66 2c | fferent.slave.becomes.active.if, |
127700 | 20 61 6e 64 20 6f 6e 6c 79 20 69 66 2c 20 74 68 65 20 61 63 74 69 76 65 20 73 6c 61 76 65 20 66 | .and.only.if,.the.active.slave.f |
127720 | 61 69 6c 73 2e 20 54 68 65 20 62 6f 6e 64 27 73 20 4d 41 43 20 61 64 64 72 65 73 73 20 69 73 20 | ails..The.bond's.MAC.address.is. |
127740 | 65 78 74 65 72 6e 61 6c 6c 79 20 76 69 73 69 62 6c 65 20 6f 6e 20 6f 6e 6c 79 20 6f 6e 65 20 70 | externally.visible.on.only.one.p |
127760 | 6f 72 74 20 28 6e 65 74 77 6f 72 6b 20 61 64 61 70 74 65 72 29 20 74 6f 20 61 76 6f 69 64 20 63 | ort.(network.adapter).to.avoid.c |
127780 | 6f 6e 66 75 73 69 6e 67 20 74 68 65 20 73 77 69 74 63 68 2e 00 60 60 61 64 61 70 74 69 76 65 2d | onfusing.the.switch..``adaptive- |
1277a0 | 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 70 74 69 76 65 20 6c 6f 61 64 20 62 | load-balance``.-.Adaptive.load.b |
1277c0 | 61 6c 61 6e 63 69 6e 67 3a 20 69 6e 63 6c 75 64 65 73 20 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 | alancing:.includes.transmit-load |
1277e0 | 2d 62 61 6c 61 6e 63 65 20 70 6c 75 73 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e | -balance.plus.receive.load.balan |
127800 | 63 69 6e 67 20 66 6f 72 20 49 50 56 34 20 74 72 61 66 66 69 63 2c 20 61 6e 64 20 64 6f 65 73 20 | cing.for.IPV4.traffic,.and.does. |
127820 | 6e 6f 74 20 72 65 71 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 69 74 63 68 20 73 | not.require.any.special.switch.s |
127840 | 75 70 70 6f 72 74 2e 20 54 68 65 20 72 65 63 65 69 76 65 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 | upport..The.receive.load.balanci |
127860 | 6e 67 20 69 73 20 61 63 68 69 65 76 65 64 20 62 79 20 41 52 50 20 6e 65 67 6f 74 69 61 74 69 6f | ng.is.achieved.by.ARP.negotiatio |
127880 | 6e 2e 20 54 68 65 20 62 6f 6e 64 69 6e 67 20 64 72 69 76 65 72 20 69 6e 74 65 72 63 65 70 74 73 | n..The.bonding.driver.intercepts |
1278a0 | 20 74 68 65 20 41 52 50 20 52 65 70 6c 69 65 73 20 73 65 6e 74 20 62 79 20 74 68 65 20 6c 6f 63 | .the.ARP.Replies.sent.by.the.loc |
1278c0 | 61 6c 20 73 79 73 74 65 6d 20 6f 6e 20 74 68 65 69 72 20 77 61 79 20 6f 75 74 20 61 6e 64 20 6f | al.system.on.their.way.out.and.o |
1278e0 | 76 65 72 77 72 69 74 65 73 20 74 68 65 20 73 6f 75 72 63 65 20 68 61 72 64 77 61 72 65 20 61 64 | verwrites.the.source.hardware.ad |
127900 | 64 72 65 73 73 20 77 69 74 68 20 74 68 65 20 75 6e 69 71 75 65 20 68 61 72 64 77 61 72 65 20 61 | dress.with.the.unique.hardware.a |
127920 | 64 64 72 65 73 73 20 6f 66 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 6c 61 76 65 73 20 69 6e 20 74 | ddress.of.one.of.the.slaves.in.t |
127940 | 68 65 20 62 6f 6e 64 20 73 75 63 68 20 74 68 61 74 20 64 69 66 66 65 72 65 6e 74 20 70 65 65 72 | he.bond.such.that.different.peer |
127960 | 73 20 75 73 65 20 64 69 66 66 65 72 65 6e 74 20 68 61 72 64 77 61 72 65 20 61 64 64 72 65 73 73 | s.use.different.hardware.address |
127980 | 65 73 20 66 6f 72 20 74 68 65 20 73 65 72 76 65 72 2e 00 60 60 61 67 67 72 65 73 73 69 76 65 60 | es.for.the.server..``aggressive` |
1279a0 | 60 20 75 73 65 20 41 67 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 | `.use.Aggressive.mode.for.Key.Ex |
1279c0 | 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 49 4b 45 76 31 20 70 72 6f 74 6f 63 6f 6c 20 61 67 | changes.in.the.IKEv1.protocol.ag |
1279e0 | 67 72 65 73 73 69 76 65 20 6d 6f 64 65 20 69 73 20 6d 75 63 68 20 6d 6f 72 65 20 69 6e 73 65 63 | gressive.mode.is.much.more.insec |
127a00 | 75 72 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 4d 61 69 6e 20 6d 6f 64 65 3b 00 60 60 61 6c 6c | ure.compared.to.Main.mode;.``all |
127a20 | 2d 61 76 61 69 6c 61 62 6c 65 60 60 20 61 6c 6c 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 | -available``.all.checking.target |
127a40 | 20 61 64 64 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 | .addresses.must.be.available.to. |
127a60 | 70 61 73 73 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 6e 79 2d 61 76 61 69 6c 61 62 6c 65 60 | pass.this.check.``any-available` |
127a80 | 60 20 61 6e 79 20 6f 66 20 74 68 65 20 63 68 65 63 6b 69 6e 67 20 74 61 72 67 65 74 20 61 64 64 | `.any.of.the.checking.target.add |
127aa0 | 72 65 73 73 65 73 20 6d 75 73 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 70 61 73 73 | resses.must.be.available.to.pass |
127ac0 | 20 74 68 69 73 20 63 68 65 63 6b 00 60 60 61 6e 79 60 60 20 55 73 65 20 61 6e 79 20 61 73 20 72 | .this.check.``any``.Use.any.as.r |
127ae0 | 65 63 6f 72 64 20 6e 61 6d 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 65 20 72 65 63 6f | ecord.name.to.configure.the.reco |
127b00 | 72 64 20 61 73 20 61 20 77 69 6c 64 63 61 72 64 2e 00 60 60 61 75 74 68 65 6e 74 69 63 61 74 69 | rd.as.a.wildcard..``authenticati |
127b20 | 6f 6e 20 6c 6f 63 61 6c 2d 69 64 2f 72 65 6d 6f 74 65 2d 69 64 60 60 20 2d 20 49 4b 45 20 69 64 | on.local-id/remote-id``.-.IKE.id |
127b40 | 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 69 73 20 75 73 65 64 20 66 6f 72 20 76 61 6c 69 64 61 74 | entification.is.used.for.validat |
127b60 | 69 6f 6e 20 6f 66 20 56 50 4e 20 70 65 65 72 20 64 65 76 69 63 65 73 20 64 75 72 69 6e 67 20 49 | ion.of.VPN.peer.devices.during.I |
127b80 | 4b 45 20 6e 65 67 6f 74 69 61 74 69 6f 6e 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 63 6f | KE.negotiation..If.you.do.not.co |
127ba0 | 6e 66 69 67 75 72 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 2d 69 64 65 6e 74 69 74 79 2c 20 74 | nfigure.local/remote-identity,.t |
127bc0 | 68 65 20 64 65 76 69 63 65 20 75 73 65 73 20 74 68 65 20 49 50 76 34 20 6f 72 20 49 50 76 36 20 | he.device.uses.the.IPv4.or.IPv6. |
127be0 | 61 64 64 72 65 73 73 20 74 68 61 74 20 63 6f 72 72 65 73 70 6f 6e 64 73 20 74 6f 20 74 68 65 20 | address.that.corresponds.to.the. |
127c00 | 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 70 65 65 72 20 62 79 20 64 65 66 61 75 6c 74 2e 20 49 6e | local/remote.peer.by.default..In |
127c20 | 20 63 65 72 74 61 69 6e 20 6e 65 74 77 6f 72 6b 20 73 65 74 75 70 73 20 28 6c 69 6b 65 20 69 70 | .certain.network.setups.(like.ip |
127c40 | 73 65 63 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 61 64 64 72 65 | sec.interface.with.dynamic.addre |
127c60 | 73 73 2c 20 6f 72 20 62 65 68 69 6e 64 20 74 68 65 20 4e 41 54 20 29 2c 20 74 68 65 20 49 4b 45 | ss,.or.behind.the.NAT.),.the.IKE |
127c80 | 20 49 44 20 72 65 63 65 69 76 65 64 20 66 72 6f 6d 20 74 68 65 20 70 65 65 72 20 64 6f 65 73 20 | .ID.received.from.the.peer.does. |
127ca0 | 6e 6f 74 20 6d 61 74 63 68 20 74 68 65 20 49 4b 45 20 67 61 74 65 77 61 79 20 63 6f 6e 66 69 67 | not.match.the.IKE.gateway.config |
127cc0 | 75 72 65 64 20 6f 6e 20 74 68 65 20 64 65 76 69 63 65 2e 20 54 68 69 73 20 63 61 6e 20 6c 65 61 | ured.on.the.device..This.can.lea |
127ce0 | 64 20 74 6f 20 61 20 50 68 61 73 65 20 31 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 75 72 | d.to.a.Phase.1.validation.failur |
127d00 | 65 2e 20 53 6f 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 74 68 | e..So,.make.sure.to.configure.th |
127d20 | 65 20 6c 6f 63 61 6c 2f 72 65 6d 6f 74 65 20 69 64 20 65 78 70 6c 69 63 69 74 6c 79 20 61 6e 64 | e.local/remote.id.explicitly.and |
127d40 | 20 65 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 49 4b 45 20 49 44 20 69 73 20 74 68 65 20 73 | .ensure.that.the.IKE.ID.is.the.s |
127d60 | 61 6d 65 20 61 73 20 74 68 65 20 72 65 6d 6f 74 65 2d 69 64 65 6e 74 69 74 79 20 63 6f 6e 66 69 | ame.as.the.remote-identity.confi |
127d80 | 67 75 72 65 64 20 6f 6e 20 74 68 65 20 70 65 65 72 20 64 65 76 69 63 65 2e 00 60 60 61 75 74 68 | gured.on.the.peer.device..``auth |
127da0 | 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 68 65 6e 74 | entication``.-.configure.authent |
127dc0 | 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 61 20 72 65 6d 6f 74 | ication.between.VyOS.and.a.remot |
127de0 | 65 20 70 65 65 72 2e 20 49 66 20 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 20 6d 6f 64 | e.peer..If.pre-shared-secret.mod |
127e00 | 65 20 69 73 20 75 73 65 64 2c 20 74 68 65 20 73 65 63 72 65 74 20 6b 65 79 20 6d 75 73 74 20 62 | e.is.used,.the.secret.key.must.b |
127e20 | 65 20 64 65 66 69 6e 65 64 20 69 6e 20 60 60 73 65 74 20 76 70 6e 20 69 70 73 65 63 20 61 75 74 | e.defined.in.``set.vpn.ipsec.aut |
127e40 | 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 61 6e 64 20 73 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 | hentication``.and.suboptions:.`` |
127e60 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 60 60 20 2d 20 63 6f 6e 66 69 67 75 72 65 20 61 75 74 | authentication``.-.configure.aut |
127e80 | 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 65 6e 20 56 79 4f 53 20 61 6e 64 20 61 20 72 | hentication.between.VyOS.and.a.r |
127ea0 | 65 6d 6f 74 65 20 70 65 65 72 2e 20 53 75 62 6f 70 74 69 6f 6e 73 3a 00 60 60 62 60 60 20 2d 20 | emote.peer..Suboptions:.``b``.-. |
127ec0 | 38 30 32 2e 31 31 62 20 2d 20 31 31 20 4d 62 69 74 73 2f 73 65 63 00 60 60 62 61 62 65 6c 60 60 | 802.11b.-.11.Mbits/sec.``babel`` |
127ee0 | 20 2d 20 42 61 62 65 6c 20 72 6f 75 74 69 6e 67 20 70 72 6f 74 6f 63 6f 6c 20 28 42 61 62 65 6c | .-.Babel.routing.protocol.(Babel |
127f00 | 29 00 60 60 62 65 67 69 6e 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 62 65 67 69 6e 6e 69 6e | ).``begin``.Matches.the.beginnin |
127f20 | 67 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 60 60 62 67 70 60 60 20 2d 20 42 6f 72 64 | g.of.the.URL.path.``bgp``.-.Bord |
127f40 | 65 72 20 47 61 74 65 77 61 79 20 50 72 6f 74 6f 63 6f 6c 20 28 42 47 50 29 00 60 60 62 69 6e 64 | er.Gateway.Protocol.(BGP).``bind |
127f60 | 60 60 20 2d 20 73 65 6c 65 63 74 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 74 6f 20 62 | ``.-.select.a.VTI.interface.to.b |
127f80 | 69 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 62 6c 61 63 6b 68 6f 6c 65 60 60 20 | ind.to.this.peer;.``blackhole``. |
127fa0 | 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 | -....................Well-known. |
127fc0 | 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 42 4c 41 43 4b 48 4f 4c 45 20 30 78 46 46 | communities.value.BLACKHOLE.0xFF |
127fe0 | 46 46 30 32 39 41 00 60 60 62 72 6f 61 64 63 61 73 74 60 60 20 2d 20 42 72 6f 61 64 63 61 73 74 | FF029A.``broadcast``.-.Broadcast |
128000 | 20 70 6f 6c 69 63 79 3a 20 74 72 61 6e 73 6d 69 74 73 20 65 76 65 72 79 74 68 69 6e 67 20 6f 6e | .policy:.transmits.everything.on |
128020 | 20 61 6c 6c 20 73 6c 61 76 65 20 69 6e 74 65 72 66 61 63 65 73 2e 00 60 60 62 75 72 73 74 60 60 | .all.slave.interfaces..``burst`` |
128040 | 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 61 6c 6c 6f 77 65 64 20 74 6f 20 6f | :.Number.of.packets.allowed.to.o |
128060 | 76 65 72 73 68 6f 6f 74 20 74 68 65 20 6c 69 6d 69 74 20 77 69 74 68 69 6e 20 60 60 70 65 72 69 | vershoot.the.limit.within.``peri |
128080 | 6f 64 60 60 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 63 61 2d 63 65 72 74 2d 66 69 6c 65 60 | od``..Default.5..``ca-cert-file` |
1280a0 | 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2e 20 55 73 69 6e 67 20 66 | `.-.CA.certificate.file..Using.f |
1280c0 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 | or.authenticating.remote.peer;.` |
1280e0 | 60 63 61 2d 63 65 72 74 69 66 69 63 61 74 65 60 60 20 2d 20 43 41 20 63 65 72 74 69 66 69 63 61 | `ca-certificate``.-.CA.certifica |
128100 | 74 65 20 69 6e 20 50 4b 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 20 55 73 69 6e 67 20 66 | te.in.PKI.configuration..Using.f |
128120 | 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 | or.authenticating.remote.peer;.` |
128140 | 60 63 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 43 44 50 20 66 6f 72 20 43 69 73 63 | `cdp``.-.Listen.for.CDP.for.Cisc |
128160 | 6f 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 63 65 72 74 2d 66 69 6c 65 60 60 | o.routers/switches.``cert-file`` |
128180 | 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 | .-.certificate.file,.which.will. |
1281a0 | 62 65 20 75 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c | be.used.for.authenticating.local |
1281c0 | 20 72 6f 75 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 65 72 74 69 66 | .router.on.remote.peer;.``certif |
1281e0 | 69 63 61 74 65 60 60 20 2d 20 63 65 72 74 69 66 69 63 61 74 65 20 66 69 6c 65 20 69 6e 20 50 4b | icate``.-.certificate.file.in.PK |
128200 | 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 | I.configuration,.which.will.be.u |
128220 | 73 65 64 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 | sed.for.authenticating.local.rou |
128240 | 74 65 72 20 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 63 6c 65 61 72 60 60 20 63 6c | ter.on.remote.peer;.``clear``.cl |
128260 | 6f 73 65 73 20 74 68 65 20 43 48 49 4c 44 5f 53 41 20 61 6e 64 20 64 6f 65 73 20 6e 6f 74 20 74 | oses.the.CHILD_SA.and.does.not.t |
128280 | 61 6b 65 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 | ake.further.action.(default);.`` |
1282a0 | 63 6c 65 61 72 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 63 6c 65 61 72 3b 00 60 60 63 | clear``.set.action.to.clear;.``c |
1282c0 | 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 68 6f 6c | lose-action.=.none.|.clear.|.hol |
1282e0 | 64 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 | d.|.restart``.-.defines.the.acti |
128300 | 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e | on.to.take.if.the.remote.peer.un |
128320 | 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 | expectedly.closes.a.CHILD_SA.(se |
128340 | 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 | e.above.for.meaning.of.values).. |
128360 | 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 | A.closeaction.should.not.be.used |
128380 | 20 69 66 20 74 68 65 20 70 65 65 72 20 75 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 | .if.the.peer.uses.reauthenticati |
1283a0 | 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 20 | on.or.uniqueids..``close-action. |
1283c0 | 3d 20 6e 6f 6e 65 20 7c 20 63 6c 65 61 72 20 7c 20 74 72 61 70 20 7c 20 73 74 61 72 74 60 60 20 | =.none.|.clear.|.trap.|.start``. |
1283e0 | 2d 20 64 65 66 69 6e 65 73 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 | -.defines.the.action.to.take.if. |
128400 | 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f | the.remote.peer.unexpectedly.clo |
128420 | 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 20 28 73 65 65 20 61 62 6f 76 65 20 66 6f 72 20 6d 65 | ses.a.CHILD_SA.(see.above.for.me |
128440 | 61 6e 69 6e 67 20 6f 66 20 76 61 6c 75 65 73 29 2e 20 41 20 63 6c 6f 73 65 61 63 74 69 6f 6e 20 | aning.of.values)..A.closeaction. |
128460 | 73 68 6f 75 6c 64 20 6e 6f 74 20 62 65 20 75 73 65 64 20 69 66 20 74 68 65 20 70 65 65 72 20 75 | should.not.be.used.if.the.peer.u |
128480 | 73 65 73 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6f 72 20 75 6e 69 71 75 65 69 64 | ses.reauthentication.or.uniqueid |
1284a0 | 73 2e 00 60 60 63 6c 6f 73 65 2d 61 63 74 69 6f 6e 60 60 20 64 65 66 69 6e 65 73 20 74 68 65 20 | s..``close-action``.defines.the. |
1284c0 | 61 63 74 69 6f 6e 20 74 6f 20 74 61 6b 65 20 69 66 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 | action.to.take.if.the.remote.pee |
1284e0 | 72 20 75 6e 65 78 70 65 63 74 65 64 6c 79 20 63 6c 6f 73 65 73 20 61 20 43 48 49 4c 44 5f 53 41 | r.unexpectedly.closes.a.CHILD_SA |
128500 | 3a 00 60 60 63 6f 6d 70 72 65 73 73 69 6f 6e 60 60 20 20 45 6e 61 62 6c 65 73 20 74 68 65 20 20 | :.``compression``..Enables.the.. |
128520 | 49 50 43 6f 6d 70 28 49 50 20 50 61 79 6c 6f 61 64 20 43 6f 6d 70 72 65 73 73 69 6f 6e 29 20 70 | IPComp(IP.Payload.Compression).p |
128540 | 72 6f 74 6f 63 6f 6c 20 77 68 69 63 68 20 61 6c 6c 6f 77 73 20 63 6f 6d 70 72 65 73 73 69 6e 67 | rotocol.which.allows.compressing |
128560 | 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 49 50 20 70 61 63 6b 65 74 73 2e 00 60 60 63 6f | .the.content.of.IP.packets..``co |
128580 | 6d 70 72 65 73 73 69 6f 6e 60 60 20 77 68 65 74 68 65 72 20 49 50 43 6f 6d 70 20 63 6f 6d 70 72 | mpression``.whether.IPComp.compr |
1285a0 | 65 73 73 69 6f 6e 20 6f 66 20 63 6f 6e 74 65 6e 74 20 69 73 20 70 72 6f 70 6f 73 65 64 20 6f 6e | ession.of.content.is.proposed.on |
1285c0 | 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 3a 00 60 60 63 6f 6e 6e 65 63 74 65 64 60 60 20 2d | .the.connection:.``connected``.- |
1285e0 | 20 43 6f 6e 6e 65 63 74 65 64 20 72 6f 75 74 65 73 20 28 64 69 72 65 63 74 6c 79 20 61 74 74 61 | .Connected.routes.(directly.atta |
128600 | 63 68 65 64 20 73 75 62 6e 65 74 20 6f 72 20 68 6f 73 74 29 00 60 60 63 6f 6e 6e 65 63 74 69 6f | ched.subnet.or.host).``connectio |
128620 | 6e 2d 74 79 70 65 60 60 20 2d 20 68 6f 77 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 69 73 20 63 6f | n-type``.-.how.to.handle.this.co |
128640 | 6e 6e 65 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 2e 20 50 6f 73 73 69 62 6c 65 20 76 61 72 69 61 | nnection.process..Possible.varia |
128660 | 6e 74 73 3a 00 60 60 63 6f 6e 74 69 6e 75 65 60 60 3a 20 63 6f 6e 74 69 6e 75 65 20 70 61 72 73 | nts:.``continue``:.continue.pars |
128680 | 69 6e 67 20 6e 65 78 74 20 72 75 6c 65 2e 00 60 60 63 72 6c 2d 66 69 6c 65 60 60 20 2d 20 66 69 | ing.next.rule..``crl-file``.-.fi |
1286a0 | 6c 65 20 77 69 74 68 20 74 68 65 20 43 65 72 74 69 66 69 63 61 74 65 20 52 65 76 6f 63 61 74 69 | le.with.the.Certificate.Revocati |
1286c0 | 6f 6e 20 4c 69 73 74 2e 20 55 73 69 6e 67 20 74 6f 20 63 68 65 63 6b 20 69 66 20 61 20 63 65 72 | on.List..Using.to.check.if.a.cer |
1286e0 | 74 69 66 69 63 61 74 65 20 66 6f 72 20 74 68 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 | tificate.for.the.remote.peer.is. |
128700 | 76 61 6c 69 64 20 6f 72 20 72 65 76 6f 6b 65 64 3b 00 60 60 64 60 60 20 2d 20 45 78 65 63 75 74 | valid.or.revoked;.``d``.-.Execut |
128720 | 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 64 61 79 73 00 60 60 64 65 61 64 2d 70 65 65 72 | ion.interval.in.days.``dead-peer |
128740 | 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 72 20 7c 20 68 6f 6c 64 | -detection.action.=.clear.|.hold |
128760 | 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 | .|.restart``.-.R_U_THERE.notific |
128780 | 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 | ation.messages(IKEv1).or.empty.I |
1287a0 | 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 | NFORMATIONAL.messages.(IKEv2).ar |
1287c0 | 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 | e.periodically.sent.in.order.to. |
1287e0 | 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 | check.the.liveliness.of.the.IPse |
128800 | 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 63 6c 65 61 72 2c 20 68 6f 6c 64 2c 20 | c.peer..The.values.clear,.hold,. |
128820 | 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 69 76 61 74 65 20 44 50 44 20 61 6e 64 | and.restart.all.activate.DPD.and |
128840 | 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f 20 70 65 72 66 6f 72 6d | .determine.the.action.to.perform |
128860 | 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 20 60 60 63 6c 65 61 72 60 60 20 74 68 | .on.a.timeout..With.``clear``.th |
128880 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 69 74 68 20 6e 6f 20 66 | e.connection.is.closed.with.no.f |
1288a0 | 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 68 6f 6c 64 60 60 20 69 | urther.actions.taken..``hold``.i |
1288c0 | 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 68 69 63 68 20 77 69 6c | nstalls.a.trap.policy,.which.wil |
1288e0 | 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 20 61 6e 64 20 74 72 69 | l.catch.matching.traffic.and.tri |
128900 | 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f | es.to.re-negotiate.the.connectio |
128920 | 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 61 72 74 60 60 20 77 69 6c 6c 20 69 6d | n.on.demand..``restart``.will.im |
128940 | 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 | mediately.trigger.an.attempt.to. |
128960 | 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 00 60 60 64 | re-negotiate.the.connection..``d |
128980 | 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 20 61 63 74 69 6f 6e 20 3d 20 63 6c 65 61 | ead-peer-detection.action.=.clea |
1289a0 | 72 20 7c 20 74 72 61 70 20 7c 20 72 65 73 74 61 72 74 60 60 20 2d 20 52 5f 55 5f 54 48 45 52 45 | r.|.trap.|.restart``.-.R_U_THERE |
1289c0 | 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d 65 73 73 61 67 65 73 28 49 4b 45 76 31 29 20 6f 72 | .notification.messages(IKEv1).or |
1289e0 | 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 | .empty.INFORMATIONAL.messages.(I |
128a00 | 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f | KEv2).are.periodically.sent.in.o |
128a20 | 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 | rder.to.check.the.liveliness.of. |
128a40 | 74 68 65 20 49 50 73 65 63 20 70 65 65 72 2e 20 54 68 65 20 76 61 6c 75 65 73 20 63 6c 65 61 72 | the.IPsec.peer..The.values.clear |
128a60 | 2c 20 74 72 61 70 2c 20 61 6e 64 20 72 65 73 74 61 72 74 20 61 6c 6c 20 61 63 74 69 76 61 74 65 | ,.trap,.and.restart.all.activate |
128a80 | 20 44 50 44 20 61 6e 64 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 61 63 74 69 6f 6e 20 74 6f | .DPD.and.determine.the.action.to |
128aa0 | 20 70 65 72 66 6f 72 6d 20 6f 6e 20 61 20 74 69 6d 65 6f 75 74 2e 20 57 69 74 68 20 60 60 63 6c | .perform.on.a.timeout..With.``cl |
128ac0 | 65 61 72 60 60 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 65 64 20 77 | ear``.the.connection.is.closed.w |
128ae0 | 69 74 68 20 6e 6f 20 66 75 72 74 68 65 72 20 61 63 74 69 6f 6e 73 20 74 61 6b 65 6e 2e 20 60 60 | ith.no.further.actions.taken..`` |
128b00 | 74 72 61 70 60 60 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c 20 77 | trap``.installs.a.trap.policy,.w |
128b20 | 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 69 63 | hich.will.catch.matching.traffic |
128b40 | 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 | .and.tries.to.re-negotiate.the.c |
128b60 | 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 20 64 65 6d 61 6e 64 2e 20 60 60 72 65 73 74 61 72 74 60 60 | onnection.on.demand..``restart`` |
128b80 | 20 77 69 6c 6c 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 67 67 65 72 20 61 6e 20 61 74 74 | .will.immediately.trigger.an.att |
128ba0 | 65 6d 70 74 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 | empt.to.re-negotiate.the.connect |
128bc0 | 69 6f 6e 2e 00 60 60 64 65 61 64 2d 70 65 65 72 2d 64 65 74 65 63 74 69 6f 6e 60 60 20 63 6f 6e | ion..``dead-peer-detection``.con |
128be0 | 74 72 6f 6c 73 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 44 65 61 64 20 50 65 65 72 20 44 | trols.the.use.of.the.Dead.Peer.D |
128c00 | 65 74 65 63 74 69 6f 6e 20 70 72 6f 74 6f 63 6f 6c 20 28 44 50 44 2c 20 52 46 43 20 33 37 30 36 | etection.protocol.(DPD,.RFC.3706 |
128c20 | 29 20 77 68 65 72 65 20 52 5f 55 5f 54 48 45 52 45 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6d | ).where.R_U_THERE.notification.m |
128c40 | 65 73 73 61 67 65 73 20 28 49 4b 45 76 31 29 20 6f 72 20 65 6d 70 74 79 20 49 4e 46 4f 52 4d 41 | essages.(IKEv1).or.empty.INFORMA |
128c60 | 54 49 4f 4e 41 4c 20 6d 65 73 73 61 67 65 73 20 28 49 4b 45 76 32 29 20 61 72 65 20 70 65 72 69 | TIONAL.messages.(IKEv2).are.peri |
128c80 | 6f 64 69 63 61 6c 6c 79 20 73 65 6e 74 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 63 68 65 63 6b 20 | odically.sent.in.order.to.check. |
128ca0 | 74 68 65 20 6c 69 76 65 6c 69 6e 65 73 73 20 6f 66 20 74 68 65 20 49 50 73 65 63 20 70 65 65 72 | the.liveliness.of.the.IPsec.peer |
128cc0 | 3a 00 60 60 64 65 66 61 75 6c 74 2d 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 45 53 50 20 67 72 | :.``default-esp-group``.-.ESP.gr |
128ce0 | 6f 75 70 20 74 6f 20 75 73 65 20 62 79 20 64 65 66 61 75 6c 74 20 66 6f 72 20 74 72 61 66 66 69 | oup.to.use.by.default.for.traffi |
128d00 | 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 4d 69 67 68 74 20 62 65 20 6f 76 65 72 77 72 69 74 74 | c.encryption..Might.be.overwritt |
128d20 | 65 6e 20 62 79 20 69 6e 64 69 76 69 64 75 61 6c 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 75 | en.by.individual.settings.for.tu |
128d40 | 6e 6e 65 6c 20 6f 72 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 62 69 6e 64 69 6e 67 3b 00 60 | nnel.or.VTI.interface.binding;.` |
128d60 | 60 64 65 73 63 72 69 70 74 69 6f 6e 60 60 20 2d 20 64 65 73 63 72 69 70 74 69 6f 6e 20 66 6f 72 | `description``.-.description.for |
128d80 | 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 64 68 2d 67 72 6f 75 70 60 60 20 64 68 2d 67 72 6f 75 | .this.peer;.``dh-group``.dh-grou |
128da0 | 70 3b 00 60 60 64 68 63 70 2d 69 6e 74 65 72 66 61 63 65 60 60 20 2d 20 49 44 20 66 6f 72 20 61 | p;.``dhcp-interface``.-.ID.for.a |
128dc0 | 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 64 20 66 72 6f 6d 20 44 48 43 | uthentication.generated.from.DHC |
128de0 | 50 20 61 64 64 72 65 73 73 20 64 79 6e 61 6d 69 63 61 6c 6c 79 3b 00 60 60 64 68 63 70 2d 69 6e | P.address.dynamically;.``dhcp-in |
128e00 | 74 65 72 66 61 63 65 60 60 20 2d 20 75 73 65 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 2c 20 72 | terface``.-.use.an.IP.address,.r |
128e20 | 65 63 65 69 76 65 64 20 66 72 6f 6d 20 44 48 43 50 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e | eceived.from.DHCP.for.IPSec.conn |
128e40 | 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 70 65 65 72 2c 20 69 6e 73 74 65 61 64 20 6f | ection.with.this.peer,.instead.o |
128e60 | 66 20 60 60 6c 6f 63 61 6c 2d 61 64 64 72 65 73 73 60 60 3b 00 60 60 64 69 73 61 62 6c 65 2d 6d | f.``local-address``;.``disable-m |
128e80 | 6f 62 69 6b 65 60 60 20 64 69 73 61 62 6c 65 73 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e | obike``.disables.MOBIKE.Support. |
128ea0 | 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b | .MOBIKE.is.only.available.for.IK |
128ec0 | 45 76 32 20 61 6e 64 20 65 6e 61 62 6c 65 64 20 62 79 20 64 65 66 61 75 6c 74 2e 00 60 60 64 69 | Ev2.and.enabled.by.default..``di |
128ee0 | 73 61 62 6c 65 2d 72 6f 75 74 65 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 2d 20 54 68 69 73 | sable-route-autoinstall``.-.This |
128f00 | 20 6f 70 74 69 6f 6e 20 77 68 65 6e 20 63 6f 6e 66 69 67 75 72 65 64 20 64 69 73 61 62 6c 65 73 | .option.when.configured.disables |
128f20 | 20 74 68 65 20 72 6f 75 74 65 73 20 69 6e 73 74 61 6c 6c 65 64 20 69 6e 20 74 68 65 20 64 65 66 | .the.routes.installed.in.the.def |
128f40 | 61 75 6c 74 20 74 61 62 6c 65 20 32 32 30 20 66 6f 72 20 73 69 74 65 2d 74 6f 2d 73 69 74 65 20 | ault.table.220.for.site-to-site. |
128f60 | 69 70 73 65 63 2e 20 49 74 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 77 69 74 68 20 56 54 | ipsec..It.is.mostly.used.with.VT |
128f80 | 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 64 69 73 61 62 6c 65 2d 72 6f 75 74 65 | I.configuration..``disable-route |
128fa0 | 2d 61 75 74 6f 69 6e 73 74 61 6c 6c 60 60 20 44 6f 20 6e 6f 74 20 61 75 74 6f 6d 61 74 69 63 61 | -autoinstall``.Do.not.automatica |
128fc0 | 6c 6c 79 20 69 6e 73 74 61 6c 6c 20 72 6f 75 74 65 73 20 74 6f 20 72 65 6d 6f 74 65 20 6e 65 74 | lly.install.routes.to.remote.net |
128fe0 | 77 6f 72 6b 73 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 2d 20 64 69 73 61 62 6c 65 20 74 68 69 | works;.``disable``.-.disable.thi |
129000 | 73 20 74 75 6e 6e 65 6c 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 44 69 73 61 62 6c 65 20 50 46 | s.tunnel;.``disable``.Disable.PF |
129020 | 53 3b 00 60 60 64 69 73 61 62 6c 65 60 60 20 64 69 73 61 62 6c 65 20 49 50 43 6f 6d 70 20 63 6f | S;.``disable``.disable.IPComp.co |
129040 | 6d 70 72 65 73 73 69 6f 6e 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 64 69 73 61 62 6c 65 60 60 | mpression.(default);.``disable`` |
129060 | 20 64 69 73 61 62 6c 65 20 4d 4f 42 49 4b 45 3b 00 60 60 64 72 6f 70 60 60 3a 20 64 72 6f 70 20 | .disable.MOBIKE;.``drop``:.drop. |
129080 | 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 32 35 | the.packet..``ecdsa-sha2-nistp25 |
1290a0 | 36 60 60 00 60 60 65 63 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 33 38 34 60 60 00 60 60 65 63 | 6``.``ecdsa-sha2-nistp384``.``ec |
1290c0 | 64 73 61 2d 73 68 61 32 2d 6e 69 73 74 70 35 32 31 60 60 00 60 60 65 64 70 60 60 20 2d 20 4c 69 | dsa-sha2-nistp521``.``edp``.-.Li |
1290e0 | 73 74 65 6e 20 66 6f 72 20 45 44 50 20 66 6f 72 20 45 78 74 72 65 6d 65 20 72 6f 75 74 65 72 73 | sten.for.EDP.for.Extreme.routers |
129100 | 2f 73 77 69 74 63 68 65 73 00 60 60 65 6e 61 62 6c 65 60 60 20 49 6e 68 65 72 69 74 20 44 69 66 | /switches.``enable``.Inherit.Dif |
129120 | 66 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 72 6f 6d 20 49 4b 45 20 67 72 6f 75 70 | fie-Hellman.group.from.IKE.group |
129140 | 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 62 6c 65 20 49 50 | .(default);.``enable``.enable.IP |
129160 | 43 6f 6d 70 20 63 6f 6d 70 72 65 73 73 69 6f 6e 3b 00 60 60 65 6e 61 62 6c 65 60 60 20 65 6e 61 | Comp.compression;.``enable``.ena |
129180 | 62 6c 65 20 4d 4f 42 49 4b 45 20 28 64 65 66 61 75 6c 74 20 66 6f 72 20 49 4b 45 76 32 29 3b 00 | ble.MOBIKE.(default.for.IKEv2);. |
1291a0 | 60 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 | ``encryption``.encryption.algori |
1291c0 | 74 68 6d 20 28 64 65 66 61 75 6c 74 20 31 32 38 20 62 69 74 20 41 45 53 2d 43 42 43 29 3b 00 60 | thm.(default.128.bit.AES-CBC);.` |
1291e0 | 60 65 6e 63 72 79 70 74 69 6f 6e 60 60 20 65 6e 63 72 79 70 74 69 6f 6e 20 61 6c 67 6f 72 69 74 | `encryption``.encryption.algorit |
129200 | 68 6d 3b 00 60 60 65 6e 64 60 60 20 4d 61 74 63 68 65 73 20 74 68 65 20 65 6e 64 20 6f 66 20 74 | hm;.``end``.Matches.the.end.of.t |
129220 | 68 65 20 55 52 4c 20 70 61 74 68 2e 00 60 60 65 73 70 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 | he.URL.path..``esp-group``.-.def |
129240 | 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 | ine.ESP.group.for.encrypt.traffi |
129260 | 63 2c 20 64 65 66 69 6e 65 64 20 62 79 20 74 68 69 73 20 74 75 6e 6e 65 6c 3b 00 60 60 65 73 70 | c,.defined.by.this.tunnel;.``esp |
129280 | 2d 67 72 6f 75 70 60 60 20 2d 20 64 65 66 69 6e 65 20 45 53 50 20 67 72 6f 75 70 20 66 6f 72 20 | -group``.-.define.ESP.group.for. |
1292a0 | 65 6e 63 72 79 70 74 20 74 72 61 66 66 69 63 2c 20 70 61 73 73 65 64 20 74 68 69 73 20 56 54 49 | encrypt.traffic,.passed.this.VTI |
1292c0 | 20 69 6e 74 65 72 66 61 63 65 2e 00 60 60 65 78 61 63 74 60 60 20 52 65 71 75 69 72 65 73 20 61 | .interface..``exact``.Requires.a |
1292e0 | 6e 20 65 78 61 63 74 6c 79 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 55 52 4c 20 70 61 74 68 00 | n.exactly.match.of.the.URL.path. |
129300 | 60 60 66 64 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 46 44 50 20 66 6f 72 20 46 6f 75 | ``fdp``.-.Listen.for.FDP.for.Fou |
129320 | 6e 64 72 79 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 66 69 6c 65 60 60 20 2d | ndry.routers/switches.``file``.- |
129340 | 20 70 61 74 68 20 74 6f 20 74 68 65 20 6b 65 79 20 66 69 6c 65 3b 00 60 60 66 6c 65 78 76 70 6e | .path.to.the.key.file;.``flexvpn |
129360 | 60 60 20 41 6c 6c 6f 77 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f | ``.Allow.FlexVPN.vendor.ID.paylo |
129380 | 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 6f 20 | ad.(IKEv2.only)..Send.the.Cisco. |
1293a0 | 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 | FlexVPN.vendor.ID.payload.(IKEv2 |
1293c0 | 20 6f 6e 6c 79 29 2c 20 77 68 69 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f 72 64 | .only),.which.is.required.in.ord |
1293e0 | 65 72 20 74 6f 20 6d 61 6b 65 20 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 20 61 | er.to.make.Cisco.brand.devices.a |
129400 | 6c 6c 6f 77 20 6e 65 67 6f 74 69 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 | llow.negotiating.a.local.traffic |
129420 | 20 73 65 6c 65 63 74 6f 72 20 28 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 | .selector.(from.strongSwan's.poi |
129440 | 6e 74 20 6f 66 20 76 69 65 77 29 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 73 69 | nt.of.view).that.is.not.the.assi |
129460 | 67 6e 65 64 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 68 20 | gned.virtual.IP.address.if.such. |
129480 | 61 6e 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 6f 6e | an.address.is.requested.by.stron |
1294a0 | 67 53 77 61 6e 2e 20 53 65 6e 64 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e | gSwan..Sending.the.Cisco.FlexVPN |
1294c0 | 20 76 65 6e 64 6f 72 20 49 44 20 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 72 6f | .vendor.ID.prevents.the.peer.fro |
1294e0 | 6d 20 6e 61 72 72 6f 77 69 6e 67 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 | m.narrowing.the.initiator's.loca |
129500 | 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 | l.traffic.selector.and.allows.it |
129520 | 20 74 6f 20 65 2e 67 2e 20 6e 65 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 | .to.e.g..negotiate.a.TS.of.0.0.0 |
129540 | 2e 30 2f 30 20 3d 3d 20 30 2e 30 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 73 20 | .0/0.==.0.0.0.0/0.instead..This. |
129560 | 68 61 73 20 62 65 65 6e 20 74 65 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d | has.been.tested.with.a."tunnel.m |
129580 | 6f 64 65 20 69 70 73 65 63 20 69 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 | ode.ipsec.ipv4".Cisco.template.b |
1295a0 | 75 74 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e 63 61 | ut.should.also.work.for.GRE.enca |
1295c0 | 70 73 75 6c 61 74 69 6f 6e 3b 00 60 60 66 6c 65 78 76 70 6e 60 60 20 41 6c 6c 6f 77 73 20 46 6c | psulation;.``flexvpn``.Allows.Fl |
1295e0 | 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f | exVPN.vendor.ID.payload.(IKEv2.o |
129600 | 6e 6c 79 29 2e 20 53 65 6e 64 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e | nly)..Send.the.Cisco.FlexVPN.ven |
129620 | 64 6f 72 20 49 44 20 70 61 79 6c 6f 61 64 20 28 49 4b 45 76 32 20 6f 6e 6c 79 29 2c 20 77 68 69 | dor.ID.payload.(IKEv2.only),.whi |
129640 | 63 68 20 69 73 20 72 65 71 75 69 72 65 64 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 61 6b 65 20 | ch.is.required.in.order.to.make. |
129660 | 43 69 73 63 6f 20 62 72 61 6e 64 20 64 65 76 69 63 65 73 20 61 6c 6c 6f 77 20 6e 65 67 6f 74 69 | Cisco.brand.devices.allow.negoti |
129680 | 61 74 69 6e 67 20 61 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 65 6c 65 63 74 6f 72 20 28 | ating.a.local.traffic.selector.( |
1296a0 | 66 72 6f 6d 20 73 74 72 6f 6e 67 53 77 61 6e 27 73 20 70 6f 69 6e 74 20 6f 66 20 76 69 65 77 29 | from.strongSwan's.point.of.view) |
1296c0 | 20 74 68 61 74 20 69 73 20 6e 6f 74 20 74 68 65 20 61 73 73 69 67 6e 65 64 20 76 69 72 74 75 61 | .that.is.not.the.assigned.virtua |
1296e0 | 6c 20 49 50 20 61 64 64 72 65 73 73 20 69 66 20 73 75 63 68 20 61 6e 20 61 64 64 72 65 73 73 20 | l.IP.address.if.such.an.address. |
129700 | 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 73 74 72 6f 6e 67 53 77 61 6e 2e 20 53 65 6e 64 | is.requested.by.strongSwan..Send |
129720 | 69 6e 67 20 74 68 65 20 43 69 73 63 6f 20 46 6c 65 78 56 50 4e 20 76 65 6e 64 6f 72 20 49 44 20 | ing.the.Cisco.FlexVPN.vendor.ID. |
129740 | 70 72 65 76 65 6e 74 73 20 74 68 65 20 70 65 65 72 20 66 72 6f 6d 20 6e 61 72 72 6f 77 69 6e 67 | prevents.the.peer.from.narrowing |
129760 | 20 74 68 65 20 69 6e 69 74 69 61 74 6f 72 27 73 20 6c 6f 63 61 6c 20 74 72 61 66 66 69 63 20 73 | .the.initiator's.local.traffic.s |
129780 | 65 6c 65 63 74 6f 72 20 61 6e 64 20 61 6c 6c 6f 77 73 20 69 74 20 74 6f 20 65 2e 67 2e 20 6e 65 | elector.and.allows.it.to.e.g..ne |
1297a0 | 67 6f 74 69 61 74 65 20 61 20 54 53 20 6f 66 20 30 2e 30 2e 30 2e 30 2f 30 20 3d 3d 20 30 2e 30 | gotiate.a.TS.of.0.0.0.0/0.==.0.0 |
1297c0 | 2e 30 2e 30 2f 30 20 69 6e 73 74 65 61 64 2e 20 54 68 69 73 20 68 61 73 20 62 65 65 6e 20 74 65 | .0.0/0.instead..This.has.been.te |
1297e0 | 73 74 65 64 20 77 69 74 68 20 61 20 22 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 69 70 73 65 63 20 69 | sted.with.a."tunnel.mode.ipsec.i |
129800 | 70 76 34 22 20 43 69 73 63 6f 20 74 65 6d 70 6c 61 74 65 20 62 75 74 20 73 68 6f 75 6c 64 20 61 | pv4".Cisco.template.but.should.a |
129820 | 6c 73 6f 20 77 6f 72 6b 20 66 6f 72 20 47 52 45 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 3b 00 | lso.work.for.GRE.encapsulation;. |
129840 | 60 60 66 6f 72 63 65 2d 75 64 70 2d 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 60 60 20 2d 20 66 6f | ``force-udp-encapsulation``.-.fo |
129860 | 72 63 65 20 65 6e 63 61 70 73 75 6c 61 74 69 6f 6e 20 6f 66 20 45 53 50 20 69 6e 74 6f 20 55 44 | rce.encapsulation.of.ESP.into.UD |
129880 | 50 20 64 61 74 61 67 72 61 6d 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 65 20 69 66 20 62 | P.datagrams..Useful.in.case.if.b |
1298a0 | 65 74 77 65 65 6e 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 69 64 65 20 69 73 20 | etween.local.and.remote.side.is. |
1298c0 | 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 2c 20 77 68 69 63 68 20 6e 6f 74 20 61 6c 6c 6f 77 | firewall.or.NAT,.which.not.allow |
1298e0 | 73 20 70 61 73 73 69 6e 67 20 70 6c 61 69 6e 20 45 53 50 20 70 61 63 6b 65 74 73 20 62 65 74 77 | s.passing.plain.ESP.packets.betw |
129900 | 65 65 6e 20 74 68 65 6d 3b 00 60 60 67 60 60 20 2d 20 38 30 32 2e 31 31 67 20 2d 20 35 34 20 4d | een.them;.``g``.-.802.11g.-.54.M |
129920 | 62 69 74 73 2f 73 65 63 20 28 64 65 66 61 75 6c 74 29 00 60 60 67 72 61 63 65 66 75 6c 2d 73 68 | bits/sec.(default).``graceful-sh |
129940 | 75 74 64 6f 77 6e 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e | utdown``.-............Well-known |
129960 | 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 47 52 41 43 45 46 55 4c 5f 53 48 55 54 | .communities.value.GRACEFUL_SHUT |
129980 | 44 4f 57 4e 20 30 78 46 46 46 46 30 30 30 30 00 60 60 68 60 60 20 2d 20 45 78 65 63 75 74 69 6f | DOWN.0xFFFF0000.``h``.-.Executio |
1299a0 | 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 68 6f 75 72 73 00 60 60 68 61 73 68 60 60 20 68 61 73 | n.interval.in.hours.``hash``.has |
1299c0 | 68 20 61 6c 67 6f 72 69 74 68 6d 20 28 64 65 66 61 75 6c 74 20 73 68 61 31 29 2e 00 60 60 68 61 | h.algorithm.(default.sha1)..``ha |
1299e0 | 73 68 60 60 20 68 61 73 68 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 68 6f 6c 64 60 60 20 73 65 | sh``.hash.algorithm..``hold``.se |
129a00 | 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 20 28 64 65 66 61 75 6c 74 29 00 60 60 68 6f 6c | t.action.to.hold.(default).``hol |
129a20 | 64 60 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 68 6f 6c 64 3b 00 60 60 68 74 34 30 2b 60 | d``.set.action.to.hold;.``ht40+` |
129a40 | 60 20 2d 20 42 6f 74 68 20 32 30 20 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 20 | `.-.Both.20.MHz.and.40.MHz.with. |
129a60 | 73 65 63 6f 6e 64 61 72 79 20 63 68 61 6e 6e 65 6c 20 61 62 6f 76 65 20 74 68 65 20 70 72 69 6d | secondary.channel.above.the.prim |
129a80 | 61 72 79 20 63 68 61 6e 6e 65 6c 00 60 60 68 74 34 30 2d 60 60 20 2d 20 42 6f 74 68 20 32 30 20 | ary.channel.``ht40-``.-.Both.20. |
129aa0 | 4d 48 7a 20 61 6e 64 20 34 30 20 4d 48 7a 20 77 69 74 68 20 73 65 63 6f 6e 64 61 72 79 20 63 68 | MHz.and.40.MHz.with.secondary.ch |
129ac0 | 61 6e 6e 65 6c 20 62 65 6c 6f 77 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 68 61 6e 6e 65 6c 00 | annel.below.the.primary.channel. |
129ae0 | 60 60 68 76 63 30 60 60 20 2d 20 58 65 6e 20 63 6f 6e 73 6f 6c 65 00 60 60 69 64 60 60 20 2d 20 | ``hvc0``.-.Xen.console.``id``.-. |
129b00 | 73 74 61 74 69 63 20 49 44 27 73 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 | static.ID's.for.authentication.. |
129b20 | 49 6e 20 67 65 6e 65 72 61 6c 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 61 64 64 72 | In.general.local.and.remote.addr |
129b40 | 65 73 73 20 60 60 3c 78 2e 78 2e 78 2e 78 3e 60 60 2c 20 60 60 3c 68 3a 68 3a 68 3a 68 3a 68 3a | ess.``<x.x.x.x>``,.``<h:h:h:h:h: |
129b60 | 68 3a 68 3a 68 3e 60 60 20 6f 72 20 60 60 25 61 6e 79 60 60 3b 00 60 60 69 6b 65 2d 67 72 6f 75 | h:h:h>``.or.``%any``;.``ike-grou |
129b80 | 70 60 60 20 2d 20 49 4b 45 20 67 72 6f 75 70 20 74 6f 20 75 73 65 20 66 6f 72 20 6b 65 79 20 65 | p``.-.IKE.group.to.use.for.key.e |
129ba0 | 78 63 68 61 6e 67 65 73 3b 00 60 60 69 6b 65 76 31 60 60 20 75 73 65 20 49 4b 45 76 31 20 66 6f | xchanges;.``ikev1``.use.IKEv1.fo |
129bc0 | 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 | r.Key.Exchange;.``ikev2-reauth`` |
129be0 | 20 2d 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 72 65 6d 6f 74 65 20 70 65 65 72 20 64 75 | .-.reauthenticate.remote.peer.du |
129c00 | 72 69 6e 67 20 74 68 65 20 72 65 6b 65 79 69 6e 67 20 70 72 6f 63 65 73 73 2e 20 43 61 6e 20 62 | ring.the.rekeying.process..Can.b |
129c20 | 65 20 75 73 65 64 20 6f 6e 6c 79 20 77 69 74 68 20 49 4b 45 76 32 2e 20 43 72 65 61 74 65 20 61 | e.used.only.with.IKEv2..Create.a |
129c40 | 20 6e 65 77 20 49 4b 45 5f 53 41 20 66 72 6f 6d 20 74 68 65 20 73 63 72 61 74 63 68 20 61 6e 64 | .new.IKE_SA.from.the.scratch.and |
129c60 | 20 74 72 79 20 74 6f 20 72 65 63 72 65 61 74 65 20 61 6c 6c 20 49 50 73 65 63 20 53 41 73 3b 00 | .try.to.recreate.all.IPsec.SAs;. |
129c80 | 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e | ``ikev2-reauth``.whether.rekeyin |
129ca0 | 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 | g.of.an.IKE_SA.should.also.reaut |
129cc0 | 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 | henticate.the.peer..In.IKEv1,.re |
129ce0 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 2e 20 53 | authentication.is.always.done..S |
129d00 | 65 74 74 69 6e 67 20 74 68 69 73 20 70 61 72 61 6d 65 74 65 72 20 65 6e 61 62 6c 65 73 20 72 65 | etting.this.parameter.enables.re |
129d20 | 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 75 72 69 | mote.host.re-authentication.duri |
129d40 | 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 2e 00 60 60 69 6b 65 76 32 2d 72 65 61 75 74 68 60 | ng.an.IKE.rekey..``ikev2-reauth` |
129d60 | 60 20 77 68 65 74 68 65 72 20 72 65 6b 65 79 69 6e 67 20 6f 66 20 61 6e 20 49 4b 45 5f 53 41 20 | `.whether.rekeying.of.an.IKE_SA. |
129d80 | 73 68 6f 75 6c 64 20 61 6c 73 6f 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 65 20 74 68 65 20 70 | should.also.reauthenticate.the.p |
129da0 | 65 65 72 2e 20 49 6e 20 49 4b 45 76 31 2c 20 72 65 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 | eer..In.IKEv1,.reauthentication. |
129dc0 | 69 73 20 61 6c 77 61 79 73 20 64 6f 6e 65 3a 00 60 60 69 6b 65 76 32 60 60 20 75 73 65 20 49 4b | is.always.done:.``ikev2``.use.IK |
129de0 | 45 76 32 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 3b 00 60 60 69 6e 60 60 3a 20 52 75 | Ev2.for.Key.Exchange;.``in``:.Ru |
129e00 | 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 | leset.for.forwarded.packets.on.a |
129e20 | 6e 20 69 6e 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 60 69 6e 69 74 69 61 74 65 60 60 | n.inbound.interface.``initiate`` |
129e40 | 20 2d 20 64 6f 65 73 20 69 6e 69 74 69 61 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 72 65 | .-.does.initial.connection.to.re |
129e60 | 6d 6f 74 65 20 70 65 65 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 61 66 74 65 72 20 63 6f 6e 66 | mote.peer.immediately.after.conf |
129e80 | 69 67 75 72 69 6e 67 20 61 6e 64 20 61 66 74 65 72 20 62 6f 6f 74 2e 20 49 6e 20 74 68 69 73 20 | iguring.and.after.boot..In.this. |
129ea0 | 6d 6f 64 65 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 | mode.the.connection.will.not.be. |
129ec0 | 72 65 73 74 61 72 74 65 64 20 69 6e 20 63 61 73 65 20 6f 66 20 64 69 73 63 6f 6e 6e 65 63 74 69 | restarted.in.case.of.disconnecti |
129ee0 | 6f 6e 2c 20 74 68 65 72 65 66 6f 72 65 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 6f 6e 6c | on,.therefore.should.be.used.onl |
129f00 | 79 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 44 50 44 20 6f 72 20 61 6e 6f 74 68 65 72 20 73 | y.together.with.DPD.or.another.s |
129f20 | 65 73 73 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 6d 65 74 68 6f 64 73 3b 00 60 60 69 6e 74 65 6c | ession.tracking.methods;.``intel |
129f40 | 5f 69 64 6c 65 2e 6d 61 78 5f 63 73 74 61 74 65 3d 30 60 60 20 44 69 73 61 62 6c 65 20 69 6e 74 | _idle.max_cstate=0``.Disable.int |
129f60 | 65 6c 5f 69 64 6c 65 20 61 6e 64 20 66 61 6c 6c 20 62 61 63 6b 20 6f 6e 20 61 63 70 69 5f 69 64 | el_idle.and.fall.back.on.acpi_id |
129f80 | 6c 65 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 49 6e 74 65 72 66 61 63 65 20 4e 61 6d 65 20 | le.``interface``.Interface.Name. |
129fa0 | 74 6f 20 75 73 65 2e 20 54 68 65 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 | to.use..The.name.of.the.interfac |
129fc0 | 65 20 6f 6e 20 77 68 69 63 68 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 73 73 65 73 20 | e.on.which.virtual.IP.addresses. |
129fe0 | 73 68 6f 75 6c 64 20 62 65 20 69 6e 73 74 61 6c 6c 65 64 2e 20 49 66 20 6e 6f 74 20 73 70 65 63 | should.be.installed..If.not.spec |
12a000 | 69 66 69 65 64 20 74 68 65 20 61 64 64 72 65 73 73 65 73 20 77 69 6c 6c 20 62 65 20 69 6e 73 74 | ified.the.addresses.will.be.inst |
12a020 | 61 6c 6c 65 64 20 6f 6e 20 74 68 65 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 3b | alled.on.the.outbound.interface; |
12a040 | 00 60 60 69 6e 74 65 72 66 61 63 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 | .``interface``.is.used.for.the.V |
12a060 | 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 | yOS.CLI.command.to.identify.the. |
12a080 | 57 69 72 65 47 75 61 72 64 20 69 6e 74 65 72 66 61 63 65 20 77 68 65 72 65 20 74 68 69 73 20 70 | WireGuard.interface.where.this.p |
12a0a0 | 72 69 76 61 74 65 20 6b 65 79 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 60 60 69 6e 74 65 | rivate.key.is.to.be.used..``inte |
12a0c0 | 72 6e 65 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c | rnet``.-.....................Wel |
12a0e0 | 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 30 00 60 60 69 6e | l-known.communities.value.0.``in |
12a100 | 74 65 72 76 61 6c 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 | terval``.keep-alive.interval.in. |
12a120 | 73 65 63 6f 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 33 30 29 3b 00 | seconds.<2-86400>.(default.30);. |
12a140 | 60 60 69 73 69 73 60 60 20 2d 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 74 | ``isis``.-.Intermediate.System.t |
12a160 | 6f 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 53 79 73 74 65 6d 20 28 49 53 2d 49 53 29 00 60 60 | o.Intermediate.System.(IS-IS).`` |
12a180 | 6a 75 6d 70 60 60 3a 20 6a 75 6d 70 20 74 6f 20 61 6e 6f 74 68 65 72 20 63 75 73 74 6f 6d 20 63 | jump``:.jump.to.another.custom.c |
12a1a0 | 68 61 69 6e 2e 00 60 60 6b 65 72 6e 65 6c 60 60 20 2d 20 4b 65 72 6e 65 6c 20 72 6f 75 74 65 73 | hain..``kernel``.-.Kernel.routes |
12a1c0 | 00 60 60 6b 65 79 2d 65 78 63 68 61 6e 67 65 60 60 20 77 68 69 63 68 20 70 72 6f 74 6f 63 6f 6c | .``key-exchange``.which.protocol |
12a1e0 | 20 73 68 6f 75 6c 64 20 62 65 20 75 73 65 64 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 65 20 74 68 | .should.be.used.to.initialize.th |
12a200 | 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 49 66 20 6e 6f 74 20 73 65 74 20 62 6f 74 68 20 70 72 6f | e.connection.If.not.set.both.pro |
12a220 | 74 6f 63 6f 6c 73 20 61 72 65 20 68 61 6e 64 6c 65 64 20 61 6e 64 20 63 6f 6e 6e 65 63 74 69 6f | tocols.are.handled.and.connectio |
12a240 | 6e 73 20 77 69 6c 6c 20 75 73 65 20 49 4b 45 76 32 20 77 68 65 6e 20 69 6e 69 74 69 61 74 69 6e | ns.will.use.IKEv2.when.initiatin |
12a260 | 67 2c 20 62 75 74 20 61 63 63 65 70 74 20 61 6e 79 20 70 72 6f 74 6f 63 6f 6c 20 76 65 72 73 69 | g,.but.accept.any.protocol.versi |
12a280 | 6f 6e 20 77 68 65 6e 20 72 65 73 70 6f 6e 64 69 6e 67 3a 00 60 60 6b 65 79 60 60 20 2d 20 61 20 | on.when.responding:.``key``.-.a. |
12a2a0 | 70 72 69 76 61 74 65 20 6b 65 79 2c 20 77 68 69 63 68 20 77 69 6c 6c 20 62 65 20 75 73 65 64 20 | private.key,.which.will.be.used. |
12a2c0 | 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 20 6c 6f 63 61 6c 20 72 6f 75 74 65 72 20 | for.authenticating.local.router. |
12a2e0 | 6f 6e 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6b 65 79 60 60 20 75 73 65 20 41 50 49 20 | on.remote.peer:.``key``.use.API. |
12a300 | 6b 65 79 73 20 63 6f 6e 66 69 67 75 72 65 64 20 69 6e 20 60 60 73 65 72 76 69 63 65 20 68 74 74 | keys.configured.in.``service.htt |
12a320 | 70 73 20 61 70 69 20 6b 65 79 73 60 60 00 60 60 6c 61 74 65 6e 63 79 60 60 3a 20 41 20 73 65 72 | ps.api.keys``.``latency``:.A.ser |
12a340 | 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 75 73 65 64 20 6f 6e 20 6c 6f 77 65 72 69 6e 67 20 | ver.profile.focused.on.lowering. |
12a360 | 6e 65 74 77 6f 72 6b 20 6c 61 74 65 6e 63 79 2e 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 66 61 | network.latency..This.profile.fa |
12a380 | 76 6f 72 73 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 76 69 | vors.performance.over.power.savi |
12a3a0 | 6e 67 73 20 62 79 20 73 65 74 74 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 60 20 | ngs.by.setting.``intel_pstate``. |
12a3c0 | 61 6e 64 20 60 60 6d 69 6e 5f 70 65 72 66 5f 70 63 74 3d 31 30 30 60 60 2e 00 60 60 6c 65 61 73 | and.``min_perf_pct=100``..``leas |
12a3e0 | 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 | t-connection``.Distributes.reque |
12a400 | 73 74 73 20 74 6f 20 74 68 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 68 65 20 66 65 77 65 73 | sts.to.the.server.with.the.fewes |
12a420 | 74 20 61 63 74 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c 65 61 73 74 2d 63 6f 6e | t.active.connections.``least-con |
12a440 | 6e 65 63 74 69 6f 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 74 | nection``.Distributes.requests.t |
12a460 | 70 20 74 6a 65 20 73 65 72 76 65 72 20 77 6f 74 6a 20 74 68 65 20 66 65 77 65 73 74 20 61 63 74 | p.tje.server.wotj.the.fewest.act |
12a480 | 69 76 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 00 60 60 6c 69 66 65 2d 62 79 74 65 73 60 60 20 45 | ive.connections.``life-bytes``.E |
12a4a0 | 53 50 20 6c 69 66 65 20 69 6e 20 62 79 74 65 73 20 3c 31 30 32 34 2d 32 36 38 34 33 35 34 35 36 | SP.life.in.bytes.<1024-268435456 |
12a4c0 | 30 30 30 30 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 62 79 74 65 73 20 74 72 61 6e 73 6d 69 74 | 00000>..Number.of.bytes.transmit |
12a4e0 | 74 65 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 6f 72 65 20 69 74 20 65 | ted.over.an.IPsec.SA.before.it.e |
12a500 | 78 70 69 72 65 73 3b 00 60 60 6c 69 66 65 2d 70 61 63 6b 65 74 73 60 60 20 45 53 50 20 6c 69 66 | xpires;.``life-packets``.ESP.lif |
12a520 | 65 20 69 6e 20 70 61 63 6b 65 74 73 20 3c 31 30 30 30 2d 32 36 38 34 33 35 34 35 36 30 30 30 30 | e.in.packets.<1000-2684354560000 |
12a540 | 30 3e 2e 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 63 6b 65 74 73 20 74 72 61 6e 73 6d 69 74 74 65 | 0>..Number.of.packets.transmitte |
12a560 | 64 20 6f 76 65 72 20 61 6e 20 49 50 73 65 63 20 53 41 20 62 65 66 6f 72 65 20 69 74 20 65 78 70 | d.over.an.IPsec.SA.before.it.exp |
12a580 | 69 72 65 73 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 45 53 50 20 6c 69 66 65 74 69 6d 65 20 | ires;.``lifetime``.ESP.lifetime. |
12a5a0 | 69 6e 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 33 | in.seconds.<30-86400>.(default.3 |
12a5c0 | 36 30 30 29 2e 20 48 6f 77 20 6c 6f 6e 67 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 69 6e 73 74 | 600)..How.long.a.particular.inst |
12a5e0 | 61 6e 63 65 20 6f 66 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 28 61 20 73 65 74 20 6f 66 20 65 | ance.of.a.connection.(a.set.of.e |
12a600 | 6e 63 72 79 70 74 69 6f 6e 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6b 65 79 73 20 66 6f | ncryption/authentication.keys.fo |
12a620 | 72 20 75 73 65 72 20 70 61 63 6b 65 74 73 29 20 73 68 6f 75 6c 64 20 6c 61 73 74 2c 20 66 72 6f | r.user.packets).should.last,.fro |
12a640 | 6d 20 73 75 63 63 65 73 73 66 75 6c 20 6e 65 67 6f 74 69 61 74 69 6f 6e 20 74 6f 20 65 78 70 69 | m.successful.negotiation.to.expi |
12a660 | 72 79 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 65 74 69 6d 65 20 69 6e | ry;.``lifetime``.IKE.lifetime.in |
12a680 | 20 73 65 63 6f 6e 64 73 20 3c 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 32 38 38 30 | .seconds.<0-86400>.(default.2880 |
12a6a0 | 30 29 3b 00 60 60 6c 69 66 65 74 69 6d 65 60 60 20 49 4b 45 20 6c 69 66 65 74 69 6d 65 20 69 6e | 0);.``lifetime``.IKE.lifetime.in |
12a6c0 | 20 73 65 63 6f 6e 64 73 20 3c 33 30 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 32 38 38 | .seconds.<30-86400>.(default.288 |
12a6e0 | 30 30 29 3b 00 60 60 6c 6c 67 72 2d 73 74 61 6c 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 | 00);.``llgr-stale``.-........... |
12a700 | 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 | ........Well-known.communities.v |
12a720 | 61 6c 75 65 20 4c 4c 47 52 5f 53 54 41 4c 45 20 30 78 46 46 46 46 30 30 30 36 00 60 60 6c 6f 63 | alue.LLGR_STALE.0xFFFF0006.``loc |
12a740 | 61 6c 2d 61 64 64 72 65 73 73 60 60 20 2d 20 6c 6f 63 61 6c 20 49 50 20 61 64 64 72 65 73 73 20 | al-address``.-.local.IP.address. |
12a760 | 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 69 73 20 70 | for.IPSec.connection.with.this.p |
12a780 | 65 65 72 2e 20 49 66 20 64 65 66 69 6e 65 64 20 60 60 61 6e 79 60 60 2c 20 74 68 65 6e 20 61 6e | eer..If.defined.``any``,.then.an |
12a7a0 | 20 49 50 20 61 64 64 72 65 73 73 20 77 68 69 63 68 20 63 6f 6e 66 69 67 75 72 65 64 20 6f 6e 20 | .IP.address.which.configured.on. |
12a7c0 | 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 64 65 66 61 75 6c 74 20 72 6f 75 74 65 20 77 69 6c | interface.with.default.route.wil |
12a7e0 | 6c 20 62 65 20 75 73 65 64 3b 00 60 60 6c 6f 63 61 6c 2d 61 73 60 60 20 2d 20 20 20 20 20 20 20 | l.be.used;.``local-as``.-....... |
12a800 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 | ..............Well-known.communi |
12a820 | 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f 52 54 5f 53 55 42 43 4f 4e 46 45 44 20 30 | ties.value.NO_EXPORT_SUBCONFED.0 |
12a840 | 78 46 46 46 46 46 46 30 33 00 60 60 6c 6f 63 61 6c 2d 69 64 60 60 20 2d 20 49 44 20 66 6f 72 20 | xFFFFFF03.``local-id``.-.ID.for. |
12a860 | 74 68 65 20 6c 6f 63 61 6c 20 56 79 4f 53 20 72 6f 75 74 65 72 2e 20 49 66 20 64 65 66 69 6e 65 | the.local.VyOS.router..If.define |
12a880 | 64 2c 20 64 75 72 69 6e 67 20 74 68 65 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 69 74 20 | d,.during.the.authentication.it. |
12a8a0 | 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 72 65 6d 6f 74 65 20 70 65 65 72 3b 00 60 60 6c | will.be.send.to.remote.peer;.``l |
12a8c0 | 6f 63 61 6c 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 20 6b 65 79 2d 70 61 69 | ocal-key``.-.name.of.PKI.key-pai |
12a8e0 | 72 20 77 69 74 68 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 00 60 60 6c 6f 63 61 6c | r.with.local.private.key.``local |
12a900 | 60 60 20 2d 20 64 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 73 6f 75 72 63 65 20 66 6f 72 20 6d | ``.-.define.a.local.source.for.m |
12a920 | 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e | atch.traffic,.which.should.be.en |
12a940 | 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3a 00 60 | crypted.and.send.to.this.peer:.` |
12a960 | 60 6c 6f 63 61 6c 60 60 3a 20 52 75 6c 65 73 65 74 20 66 6f 72 20 70 61 63 6b 65 74 73 20 64 65 | `local``:.Ruleset.for.packets.de |
12a980 | 73 74 69 6e 65 64 20 66 6f 72 20 74 68 69 73 20 72 6f 75 74 65 72 00 60 60 6d 60 60 20 2d 20 45 | stined.for.this.router.``m``.-.E |
12a9a0 | 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 00 60 60 6d | xecution.interval.in.minutes.``m |
12a9c0 | 61 69 6e 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 62 79 20 56 79 4f 53 | ain``.Routing.table.used.by.VyOS |
12a9e0 | 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 74 65 72 66 61 63 65 73 20 6e 6f 74 20 70 61 72 74 69 63 | .and.other.interfaces.not.partic |
12aa00 | 69 70 61 74 69 6e 67 20 69 6e 20 50 42 52 00 60 60 6d 61 69 6e 60 60 20 75 73 65 20 4d 61 69 6e | ipating.in.PBR.``main``.use.Main |
12aa20 | 20 6d 6f 64 65 20 66 6f 72 20 4b 65 79 20 45 78 63 68 61 6e 67 65 73 20 69 6e 20 74 68 65 20 49 | .mode.for.Key.Exchanges.in.the.I |
12aa40 | 4b 45 76 31 20 50 72 6f 74 6f 63 6f 6c 20 28 52 65 63 6f 6d 6d 65 6e 64 65 64 20 44 65 66 61 75 | KEv1.Protocol.(Recommended.Defau |
12aa60 | 6c 74 29 3b 00 60 60 6d 65 73 73 61 67 65 60 60 3a 20 46 75 6c 6c 20 6d 65 73 73 61 67 65 20 74 | lt);.``message``:.Full.message.t |
12aa80 | 68 61 74 20 68 61 73 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 63 72 69 70 74 2e 00 60 60 | hat.has.triggered.the.script..`` |
12aaa0 | 6d 69 74 69 67 61 74 69 6f 6e 73 3d 6f 66 66 60 60 00 60 60 6d 6f 62 69 6b 65 60 60 20 65 6e 61 | mitigations=off``.``mobike``.ena |
12aac0 | 62 6c 65 20 4d 4f 42 49 4b 45 20 53 75 70 70 6f 72 74 2e 20 4d 4f 42 49 4b 45 20 69 73 20 6f 6e | ble.MOBIKE.Support..MOBIKE.is.on |
12aae0 | 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 49 4b 45 76 32 3a 00 60 60 6d 6f 64 65 60 60 | ly.available.for.IKEv2:.``mode`` |
12ab00 | 20 2d 20 6d 6f 64 65 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 62 65 74 77 65 | .-.mode.for.authentication.betwe |
12ab20 | 65 6e 20 56 79 4f 53 20 61 6e 64 20 72 65 6d 6f 74 65 20 70 65 65 72 3a 00 60 60 6d 6f 64 65 60 | en.VyOS.and.remote.peer:.``mode` |
12ab40 | 60 20 49 4b 45 76 31 20 50 68 61 73 65 20 31 20 4d 6f 64 65 20 53 65 6c 65 63 74 69 6f 6e 3a 00 | `.IKEv1.Phase.1.Mode.Selection:. |
12ab60 | 60 60 6d 6f 64 65 60 60 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 68 65 20 63 6f 6e 6e 65 63 74 | ``mode``.the.type.of.the.connect |
12ab80 | 69 6f 6e 3a 00 60 60 6d 6f 6e 69 74 6f 72 60 60 20 2d 20 50 61 73 73 69 76 65 6c 79 20 6d 6f 6e | ion:.``monitor``.-.Passively.mon |
12aba0 | 69 74 6f 72 20 61 6c 6c 20 70 61 63 6b 65 74 73 20 6f 6e 20 74 68 65 20 66 72 65 71 75 65 6e 63 | itor.all.packets.on.the.frequenc |
12abc0 | 79 2f 63 68 61 6e 6e 65 6c 00 60 60 6d 75 6c 74 69 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 | y/channel.``multi-user-beamforme |
12abe0 | 65 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 | e``.-.Support.for.operation.as.s |
12ac00 | 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 6d 75 6c 74 69 2d 75 73 | ingle.user.beamformer.``multi-us |
12ac20 | 65 72 2d 62 65 61 6d 66 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 | er-beamformer``.-.Support.for.op |
12ac40 | 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 | eration.as.single.user.beamforme |
12ac60 | 72 00 60 60 6e 60 60 20 2d 20 38 30 32 2e 31 31 6e 20 2d 20 36 30 30 20 4d 62 69 74 73 2f 73 65 | r.``n``.-.802.11n.-.600.Mbits/se |
12ac80 | 63 00 60 60 6e 61 6d 65 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 65 20 56 79 4f 53 20 | c.``name``.is.used.for.the.VyOS. |
12aca0 | 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 68 69 73 20 6b 65 79 | CLI.command.to.identify.this.key |
12acc0 | 2e 20 54 68 69 73 20 6b 65 79 20 60 60 6e 61 6d 65 60 60 20 69 73 20 74 68 65 6e 20 75 73 65 64 | ..This.key.``name``.is.then.used |
12ace0 | 20 69 6e 20 74 68 65 20 43 4c 49 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 74 6f 20 72 65 66 | .in.the.CLI.configuration.to.ref |
12ad00 | 65 72 65 6e 63 65 20 74 68 65 20 6b 65 79 20 69 6e 73 74 61 6e 63 65 2e 00 60 60 6e 65 74 2e 69 | erence.the.key.instance..``net.i |
12ad20 | 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 73 60 60 00 | pv4.conf.all.accept_redirects``. |
12ad40 | 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 | ``net.ipv4.conf.all.accept_sourc |
12ad60 | 65 5f 72 6f 75 74 65 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c 2e 6c 6f | e_route``.``net.ipv4.conf.all.lo |
12ad80 | 67 5f 6d 61 72 74 69 61 6e 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c | g_martians``.``net.ipv4.conf.all |
12ada0 | 2e 72 70 5f 66 69 6c 74 65 72 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 63 6f 6e 66 2e 61 6c 6c | .rp_filter``.``net.ipv4.conf.all |
12adc0 | 2e 73 65 6e 64 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 69 63 6d | .send_redirects``.``net.ipv4.icm |
12ade0 | 70 5f 65 63 68 6f 5f 69 67 6e 6f 72 65 5f 62 72 6f 61 64 63 61 73 74 73 60 60 00 60 60 6e 65 74 | p_echo_ignore_broadcasts``.``net |
12ae00 | 2e 69 70 76 34 2e 74 63 70 5f 72 66 63 31 33 33 37 60 60 00 60 60 6e 65 74 2e 69 70 76 34 2e 74 | .ipv4.tcp_rfc1337``.``net.ipv4.t |
12ae20 | 63 70 5f 73 79 6e 63 6f 6f 6b 69 65 73 60 60 00 60 60 6e 65 74 2e 69 70 76 36 2e 63 6f 6e 66 2e | cp_syncookies``.``net.ipv6.conf. |
12ae40 | 61 6c 6c 2e 61 63 63 65 70 74 5f 72 65 64 69 72 65 63 74 73 60 60 00 60 60 6e 65 74 2e 69 70 76 | all.accept_redirects``.``net.ipv |
12ae60 | 36 2e 63 6f 6e 66 2e 61 6c 6c 2e 61 63 63 65 70 74 5f 73 6f 75 72 63 65 5f 72 6f 75 74 65 60 60 | 6.conf.all.accept_source_route`` |
12ae80 | 00 60 60 6e 6f 2d 61 64 76 65 72 74 69 73 65 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 | .``no-advertise``.-............. |
12aea0 | 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 | ....Well-known.communities.value |
12aec0 | 20 4e 4f 5f 41 44 56 45 52 54 49 53 45 20 30 78 46 46 46 46 46 46 30 32 00 60 60 6e 6f 2d 65 78 | .NO_ADVERTISE.0xFFFFFF02.``no-ex |
12aee0 | 70 6f 72 74 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c | port``.-....................Well |
12af00 | 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 45 58 50 4f | -known.communities.value.NO_EXPO |
12af20 | 52 54 20 30 78 46 46 46 46 46 46 30 31 00 60 60 6e 6f 2d 6c 6c 67 72 60 60 20 2d 20 20 20 20 20 | RT.0xFFFFFF01.``no-llgr``.-..... |
12af40 | 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d | .................Well-known.comm |
12af60 | 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 4e 4f 5f 4c 4c 47 52 20 30 78 46 46 46 46 30 30 30 37 | unities.value.NO_LLGR.0xFFFF0007 |
12af80 | 00 60 60 6e 6f 2d 70 65 65 72 60 60 20 2d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | .``no-peer``.-.................. |
12afa0 | 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 | ....Well-known.communities.value |
12afc0 | 20 4e 4f 50 45 45 52 20 30 78 46 46 46 46 46 46 30 34 00 60 60 6e 6f 60 60 20 64 69 73 61 62 6c | .NOPEER.0xFFFFFF04.``no``.disabl |
12afe0 | 65 20 72 65 6d 6f 74 65 20 68 6f 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 6f 6e 20 64 | e.remote.host.re-authenticaton.d |
12b000 | 75 72 69 6e 67 20 61 6e 20 49 4b 45 20 72 65 6b 65 79 3b 00 60 60 6e 6f 6e 65 60 60 20 2d 20 45 | uring.an.IKE.rekey;.``none``.-.E |
12b020 | 78 65 63 75 74 69 6f 6e 20 69 6e 74 65 72 76 61 6c 20 69 6e 20 6d 69 6e 75 74 65 73 00 60 60 6e | xecution.interval.in.minutes.``n |
12b040 | 6f 6e 65 60 60 20 2d 20 6c 6f 61 64 73 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 6f 6e 6c | one``.-.loads.the.connection.onl |
12b060 | 79 2c 20 77 68 69 63 68 20 74 68 65 6e 20 63 61 6e 20 62 65 20 6d 61 6e 75 61 6c 6c 79 20 69 6e | y,.which.then.can.be.manually.in |
12b080 | 69 74 69 61 74 65 64 20 6f 72 20 75 73 65 64 20 61 73 20 61 20 72 65 73 70 6f 6e 64 65 72 20 63 | itiated.or.used.as.a.responder.c |
12b0a0 | 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 00 60 60 6e 6f 6e 65 60 60 20 73 65 74 20 61 63 74 69 6f | onfiguration..``none``.set.actio |
12b0c0 | 6e 20 74 6f 20 6e 6f 6e 65 20 28 64 65 66 61 75 6c 74 29 3b 00 60 60 6e 6f 73 65 6c 65 63 74 60 | n.to.none.(default);.``noselect` |
12b0e0 | 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 75 6e 75 73 65 64 2c 20 65 78 | `.marks.the.server.as.unused,.ex |
12b100 | 63 65 70 74 20 66 6f 72 20 64 69 73 70 6c 61 79 20 70 75 72 70 6f 73 65 73 2e 20 54 68 65 20 73 | cept.for.display.purposes..The.s |
12b120 | 65 72 76 65 72 20 69 73 20 64 69 73 63 61 72 64 65 64 20 62 79 20 74 68 65 20 73 65 6c 65 63 74 | erver.is.discarded.by.the.select |
12b140 | 69 6f 6e 20 61 6c 67 6f 72 69 74 68 6d 2e 00 60 60 6e 74 73 60 60 20 65 6e 61 62 6c 65 73 20 4e | ion.algorithm..``nts``.enables.N |
12b160 | 65 74 77 6f 72 6b 20 54 69 6d 65 20 53 65 63 75 72 69 74 79 20 28 4e 54 53 29 20 66 6f 72 20 74 | etwork.Time.Security.(NTS).for.t |
12b180 | 68 65 20 73 65 72 76 65 72 20 61 73 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 3a 72 66 63 3a 60 | he.server.as.specified.in.:rfc:` |
12b1a0 | 38 39 31 35 60 00 60 60 6f 70 74 69 6f 6e 73 60 60 00 60 60 6f 73 70 66 60 60 20 2d 20 4f 70 65 | 8915`.``options``.``ospf``.-.Ope |
12b1c0 | 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 69 72 73 74 20 28 4f 53 50 46 76 32 29 00 60 | n.Shortest.Path.First.(OSPFv2).` |
12b1e0 | 60 6f 73 70 66 76 33 60 60 20 2d 20 4f 70 65 6e 20 53 68 6f 72 74 65 73 74 20 50 61 74 68 20 46 | `ospfv3``.-.Open.Shortest.Path.F |
12b200 | 69 72 73 74 20 28 49 50 76 36 29 20 28 4f 53 50 46 76 33 29 00 60 60 6f 75 74 60 60 3a 20 52 75 | irst.(IPv6).(OSPFv3).``out``:.Ru |
12b220 | 6c 65 73 65 74 20 66 6f 72 20 66 6f 72 77 61 72 64 65 64 20 70 61 63 6b 65 74 73 20 6f 6e 20 61 | leset.for.forwarded.packets.on.a |
12b240 | 6e 20 6f 75 74 62 6f 75 6e 64 20 69 6e 74 65 72 66 61 63 65 00 60 60 70 61 73 73 70 68 72 61 73 | n.outbound.interface.``passphras |
12b260 | 65 60 60 20 2d 20 6c 6f 63 61 6c 20 70 72 69 76 61 74 65 20 6b 65 79 20 70 61 73 73 70 68 72 61 | e``.-.local.private.key.passphra |
12b280 | 73 65 00 60 60 70 61 73 73 70 68 72 61 73 65 60 60 20 2d 20 70 72 69 76 61 74 65 20 6b 65 79 20 | se.``passphrase``.-.private.key. |
12b2a0 | 70 61 73 73 70 68 72 61 73 65 2c 20 69 66 20 6e 65 65 64 65 64 2e 00 60 60 70 61 73 73 77 6f 72 | passphrase,.if.needed..``passwor |
12b2c0 | 64 60 60 20 2d 20 70 61 73 73 70 68 72 61 73 65 20 70 72 69 76 61 74 65 20 6b 65 79 2c 20 69 66 | d``.-.passphrase.private.key,.if |
12b2e0 | 20 6e 65 65 64 65 64 2e 00 60 60 70 65 65 72 60 60 20 69 73 20 75 73 65 64 20 66 6f 72 20 74 68 | .needed..``peer``.is.used.for.th |
12b300 | 65 20 56 79 4f 53 20 43 4c 49 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 74 | e.VyOS.CLI.command.to.identify.t |
12b320 | 68 65 20 57 69 72 65 47 75 61 72 64 20 70 65 65 72 20 77 68 65 72 65 20 74 68 69 73 20 73 65 63 | he.WireGuard.peer.where.this.sec |
12b340 | 72 65 64 20 69 73 20 74 6f 20 62 65 20 75 73 65 64 2e 00 60 60 70 65 72 69 6f 64 60 60 3a 20 54 | red.is.to.be.used..``period``:.T |
12b360 | 69 6d 65 20 77 69 6e 64 6f 77 20 66 6f 72 20 72 61 74 65 20 63 61 6c 63 75 6c 61 74 69 6f 6e 2e | ime.window.for.rate.calculation. |
12b380 | 20 50 6f 73 73 69 62 6c 65 20 76 61 6c 75 65 73 3a 20 60 60 73 65 63 6f 6e 64 60 60 20 28 6f 6e | .Possible.values:.``second``.(on |
12b3a0 | 65 20 73 65 63 6f 6e 64 29 2c 20 60 60 6d 69 6e 75 74 65 60 60 20 28 6f 6e 65 20 6d 69 6e 75 74 | e.second),.``minute``.(one.minut |
12b3c0 | 65 29 2c 20 60 60 68 6f 75 72 60 60 20 28 6f 6e 65 20 68 6f 75 72 29 2e 20 44 65 66 61 75 6c 74 | e),.``hour``.(one.hour)..Default |
12b3e0 | 20 69 73 20 60 60 73 65 63 6f 6e 64 60 60 2e 00 60 60 70 66 73 60 60 20 77 68 65 74 68 65 72 20 | .is.``second``..``pfs``.whether. |
12b400 | 50 65 72 66 65 63 74 20 46 6f 72 77 61 72 64 20 53 65 63 72 65 63 79 20 6f 66 20 6b 65 79 73 20 | Perfect.Forward.Secrecy.of.keys. |
12b420 | 69 73 20 64 65 73 69 72 65 64 20 6f 6e 20 74 68 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 27 73 20 6b | is.desired.on.the.connection's.k |
12b440 | 65 79 69 6e 67 20 63 68 61 6e 6e 65 6c 20 61 6e 64 20 64 65 66 69 6e 65 73 20 61 20 44 69 66 66 | eying.channel.and.defines.a.Diff |
12b460 | 69 65 2d 48 65 6c 6c 6d 61 6e 20 67 72 6f 75 70 20 66 6f 72 20 50 46 53 3a 00 60 60 70 6f 6f 6c | ie-Hellman.group.for.PFS:.``pool |
12b480 | 60 60 20 6d 6f 62 69 6c 69 7a 65 73 20 70 65 72 73 69 73 74 65 6e 74 20 63 6c 69 65 6e 74 20 6d | ``.mobilizes.persistent.client.m |
12b4a0 | 6f 64 65 20 61 73 73 6f 63 69 61 74 69 6f 6e 20 77 69 74 68 20 61 20 6e 75 6d 62 65 72 20 6f 66 | ode.association.with.a.number.of |
12b4c0 | 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 73 2e 00 60 60 70 6f 72 74 60 60 20 2d 20 64 65 66 69 | .remote.servers..``port``.-.defi |
12b4e0 | 6e 65 20 70 6f 72 74 2e 20 48 61 76 65 20 65 66 66 65 63 74 20 6f 6e 6c 79 20 77 68 65 6e 20 75 | ne.port..Have.effect.only.when.u |
12b500 | 73 65 64 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 60 60 70 72 65 66 69 78 60 60 3b 00 60 60 | sed.together.with.``prefix``;.`` |
12b520 | 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 20 2d 20 75 73 65 20 70 72 65 64 65 66 | pre-shared-secret``.-.use.predef |
12b540 | 69 6e 65 64 20 73 68 61 72 65 64 20 73 65 63 72 65 74 20 70 68 72 61 73 65 3b 00 60 60 70 72 65 | ined.shared.secret.phrase;.``pre |
12b560 | 66 65 72 60 60 20 6d 61 72 6b 73 20 74 68 65 20 73 65 72 76 65 72 20 61 73 20 70 72 65 66 65 72 | fer``.marks.the.server.as.prefer |
12b580 | 72 65 64 2e 20 41 6c 6c 20 6f 74 68 65 72 20 74 68 69 6e 67 73 20 62 65 69 6e 67 20 65 71 75 61 | red..All.other.things.being.equa |
12b5a0 | 6c 2c 20 74 68 69 73 20 68 6f 73 74 20 77 69 6c 6c 20 62 65 20 63 68 6f 73 65 6e 20 66 6f 72 20 | l,.this.host.will.be.chosen.for. |
12b5c0 | 73 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 20 61 6d 6f 6e 67 20 61 20 73 65 74 20 6f 66 20 63 | synchronization.among.a.set.of.c |
12b5e0 | 6f 72 72 65 63 74 6c 79 20 6f 70 65 72 61 74 69 6e 67 20 68 6f 73 74 73 2e 00 60 60 70 72 65 66 | orrectly.operating.hosts..``pref |
12b600 | 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 74 20 6c 6f 63 61 6c 20 73 69 64 65 2e | ix``.-.IP.network.at.local.side. |
12b620 | 00 60 60 70 72 65 66 69 78 60 60 20 2d 20 49 50 20 6e 65 74 77 6f 72 6b 20 61 74 20 72 65 6d 6f | .``prefix``.-.IP.network.at.remo |
12b640 | 74 65 20 73 69 64 65 2e 00 60 60 70 72 66 60 60 20 70 73 65 75 64 6f 2d 72 61 6e 64 6f 6d 20 66 | te.side..``prf``.pseudo-random.f |
12b660 | 75 6e 63 74 69 6f 6e 2e 00 60 60 70 72 69 6f 72 69 74 79 60 60 20 2d 20 41 64 64 20 70 72 69 6f | unction..``priority``.-.Add.prio |
12b680 | 72 69 74 79 20 66 6f 72 20 70 6f 6c 69 63 79 2d 62 61 73 65 64 20 49 50 53 65 63 20 56 50 4e 20 | rity.for.policy-based.IPSec.VPN. |
12b6a0 | 74 75 6e 6e 65 6c 73 28 6c 6f 77 65 73 74 20 76 61 6c 75 65 20 6d 6f 72 65 20 70 72 65 66 65 72 | tunnels(lowest.value.more.prefer |
12b6c0 | 61 62 6c 65 29 00 60 60 70 72 6f 63 65 73 73 6f 72 2e 6d 61 78 5f 63 73 74 61 74 65 3d 31 60 60 | able).``processor.max_cstate=1`` |
12b6e0 | 20 4c 69 6d 69 74 20 70 72 6f 63 65 73 73 6f 72 20 74 6f 20 6d 61 78 69 6d 75 6d 20 43 2d 73 74 | .Limit.processor.to.maximum.C-st |
12b700 | 61 74 65 20 31 00 60 60 70 72 6f 70 6f 73 61 6c 60 60 20 45 53 50 2d 67 72 6f 75 70 20 70 72 6f | ate.1.``proposal``.ESP-group.pro |
12b720 | 70 6f 73 61 6c 20 77 69 74 68 20 6e 75 6d 62 65 72 20 3c 31 2d 36 35 35 33 35 3e 3a 00 60 60 70 | posal.with.number.<1-65535>:.``p |
12b740 | 72 6f 70 6f 73 61 6c 60 60 20 74 68 65 20 6c 69 73 74 20 6f 66 20 70 72 6f 70 6f 73 61 6c 73 20 | roposal``.the.list.of.proposals. |
12b760 | 61 6e 64 20 74 68 65 69 72 20 70 61 72 61 6d 65 74 65 72 73 3a 00 60 60 70 72 6f 74 6f 63 6f 6c | and.their.parameters:.``protocol |
12b780 | 60 60 20 2d 20 64 65 66 69 6e 65 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 66 6f 72 20 6d 61 74 | ``.-.define.the.protocol.for.mat |
12b7a0 | 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 62 65 20 65 6e 63 72 | ch.traffic,.which.should.be.encr |
12b7c0 | 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 65 72 3b 00 60 60 70 | ypted.and.send.to.this.peer;.``p |
12b7e0 | 73 6b 60 60 20 2d 20 50 72 65 73 68 61 72 65 64 20 73 65 63 72 65 74 20 6b 65 79 20 6e 61 6d 65 | sk``.-.Preshared.secret.key.name |
12b800 | 3a 00 60 60 71 75 65 75 65 60 60 3a 20 45 6e 71 75 65 75 65 20 70 61 63 6b 65 74 20 74 6f 20 75 | :.``queue``:.Enqueue.packet.to.u |
12b820 | 73 65 72 73 70 61 63 65 2e 00 60 60 72 61 74 65 60 60 3a 20 4e 75 6d 62 65 72 20 6f 66 20 70 61 | serspace..``rate``:.Number.of.pa |
12b840 | 63 6b 65 74 73 2e 20 44 65 66 61 75 6c 74 20 35 2e 00 60 60 72 65 6a 65 63 74 60 60 3a 20 72 65 | ckets..Default.5..``reject``:.re |
12b860 | 6a 65 63 74 20 74 68 65 20 70 61 63 6b 65 74 2e 00 60 60 72 65 6d 6f 74 65 2d 61 64 64 72 65 73 | ject.the.packet..``remote-addres |
12b880 | 73 60 60 20 2d 20 72 65 6d 6f 74 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 72 20 68 6f 73 74 6e | s``.-.remote.IP.address.or.hostn |
12b8a0 | 61 6d 65 20 66 6f 72 20 49 50 53 65 63 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 20 49 50 76 34 20 6f | ame.for.IPSec.connection..IPv4.o |
12b8c0 | 72 20 49 50 76 36 20 61 64 64 72 65 73 73 20 69 73 20 75 73 65 64 20 77 68 65 6e 20 61 20 70 65 | r.IPv6.address.is.used.when.a.pe |
12b8e0 | 65 72 20 68 61 73 20 61 20 70 75 62 6c 69 63 20 73 74 61 74 69 63 20 49 50 20 61 64 64 72 65 73 | er.has.a.public.static.IP.addres |
12b900 | 73 2e 20 48 6f 73 74 6e 61 6d 65 20 69 73 20 61 20 44 4e 53 20 6e 61 6d 65 20 77 68 69 63 68 20 | s..Hostname.is.a.DNS.name.which. |
12b920 | 63 6f 75 6c 64 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 61 20 70 65 65 72 20 68 61 73 20 61 20 | could.be.used.when.a.peer.has.a. |
12b940 | 70 75 62 6c 69 63 20 49 50 20 61 64 64 72 65 73 73 20 61 6e 64 20 44 4e 53 20 6e 61 6d 65 2c 20 | public.IP.address.and.DNS.name,. |
12b960 | 62 75 74 20 61 6e 20 49 50 20 61 64 64 72 65 73 73 20 63 6f 75 6c 64 20 62 65 20 63 68 61 6e 67 | but.an.IP.address.could.be.chang |
12b980 | 65 64 20 66 72 6f 6d 20 74 69 6d 65 20 74 6f 20 74 69 6d 65 2e 00 60 60 72 65 6d 6f 74 65 2d 69 | ed.from.time.to.time..``remote-i |
12b9a0 | 64 60 60 20 2d 20 64 65 66 69 6e 65 20 61 6e 20 49 44 20 66 6f 72 20 72 65 6d 6f 74 65 20 70 65 | d``.-.define.an.ID.for.remote.pe |
12b9c0 | 65 72 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 75 73 69 6e 67 20 70 65 65 72 20 6e 61 6d 65 20 6f | er,.instead.of.using.peer.name.o |
12b9e0 | 72 20 61 64 64 72 65 73 73 2e 20 55 73 65 66 75 6c 20 69 6e 20 63 61 73 65 20 69 66 20 74 68 65 | r.address..Useful.in.case.if.the |
12ba00 | 20 72 65 6d 6f 74 65 20 70 65 65 72 20 69 73 20 62 65 68 69 6e 64 20 4e 41 54 20 6f 72 20 69 66 | .remote.peer.is.behind.NAT.or.if |
12ba20 | 20 60 60 6d 6f 64 65 20 78 35 30 39 60 60 20 69 73 20 75 73 65 64 3b 00 60 60 72 65 6d 6f 74 65 | .``mode.x509``.is.used;.``remote |
12ba40 | 2d 6b 65 79 60 60 20 2d 20 6e 61 6d 65 20 6f 66 20 50 4b 49 20 6b 65 79 2d 70 61 69 72 20 77 69 | -key``.-.name.of.PKI.key-pair.wi |
12ba60 | 74 68 20 72 65 6d 6f 74 65 20 70 75 62 6c 69 63 20 6b 65 79 00 60 60 72 65 6d 6f 74 65 60 60 20 | th.remote.public.key.``remote``. |
12ba80 | 2d 20 64 65 66 69 6e 65 20 74 68 65 20 72 65 6d 6f 74 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 | -.define.the.remote.destination. |
12baa0 | 66 6f 72 20 6d 61 74 63 68 20 74 72 61 66 66 69 63 2c 20 77 68 69 63 68 20 73 68 6f 75 6c 64 20 | for.match.traffic,.which.should. |
12bac0 | 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 74 68 69 73 20 70 65 | be.encrypted.and.send.to.this.pe |
12bae0 | 65 72 3a 00 60 60 72 65 70 6c 61 79 2d 77 69 6e 64 6f 77 60 60 20 2d 20 49 50 73 65 63 20 72 65 | er:.``replay-window``.-.IPsec.re |
12bb00 | 70 6c 61 79 20 77 69 6e 64 6f 77 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 66 6f 72 20 74 68 69 | play.window.to.configure.for.thi |
12bb20 | 73 20 43 48 49 4c 44 5f 53 41 20 28 64 65 66 61 75 6c 74 3a 20 33 32 29 2c 20 61 20 76 61 6c 75 | s.CHILD_SA.(default:.32),.a.valu |
12bb40 | 65 20 6f 66 20 30 20 64 69 73 61 62 6c 65 73 20 49 50 73 65 63 20 72 65 70 6c 61 79 20 70 72 6f | e.of.0.disables.IPsec.replay.pro |
12bb60 | 74 65 63 74 69 6f 6e 00 60 60 72 65 71 2d 73 73 6c 2d 73 6e 69 60 60 20 53 53 4c 20 53 65 72 76 | tection.``req-ssl-sni``.SSL.Serv |
12bb80 | 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 28 53 4e 49 29 20 72 65 71 75 65 73 74 | er.Name.Indication.(SNI).request |
12bba0 | 20 6d 61 74 63 68 00 60 60 72 65 73 70 2d 74 69 6d 65 60 60 3a 20 74 68 65 20 6d 61 78 69 6d 75 | .match.``resp-time``:.the.maximu |
12bbc0 | 6d 20 72 65 73 70 6f 6e 73 65 20 74 69 6d 65 20 66 6f 72 20 70 69 6e 67 20 69 6e 20 73 65 63 6f | m.response.time.for.ping.in.seco |
12bbe0 | 6e 64 73 2e 20 52 61 6e 67 65 20 31 2e 2e 2e 33 30 2c 20 64 65 66 61 75 6c 74 20 35 00 60 60 72 | nds..Range.1...30,.default.5.``r |
12bc00 | 65 73 70 6f 6e 64 60 60 20 2d 20 64 6f 65 73 20 6e 6f 74 20 74 72 79 20 74 6f 20 69 6e 69 74 69 | espond``.-.does.not.try.to.initi |
12bc20 | 61 74 65 20 61 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 72 65 6d 6f 74 65 20 70 65 65 | ate.a.connection.to.a.remote.pee |
12bc40 | 72 2e 20 49 6e 20 74 68 69 73 20 6d 6f 64 65 2c 20 74 68 65 20 49 50 53 65 63 20 73 65 73 73 69 | r..In.this.mode,.the.IPSec.sessi |
12bc60 | 6f 6e 20 77 69 6c 6c 20 62 65 20 65 73 74 61 62 6c 69 73 68 65 64 20 6f 6e 6c 79 20 61 66 74 65 | on.will.be.established.only.afte |
12bc80 | 72 20 69 6e 69 74 69 61 74 69 6f 6e 20 66 72 6f 6d 20 61 20 72 65 6d 6f 74 65 20 70 65 65 72 2e | r.initiation.from.a.remote.peer. |
12bca0 | 20 43 6f 75 6c 64 20 62 65 20 75 73 65 66 75 6c 20 77 68 65 6e 20 74 68 65 72 65 20 69 73 20 6e | .Could.be.useful.when.there.is.n |
12bcc0 | 6f 20 64 69 72 65 63 74 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 74 6f 20 74 68 65 20 70 65 65 | o.direct.connectivity.to.the.pee |
12bce0 | 72 20 64 75 65 20 74 6f 20 66 69 72 65 77 61 6c 6c 20 6f 72 20 4e 41 54 20 69 6e 20 74 68 65 20 | r.due.to.firewall.or.NAT.in.the. |
12bd00 | 6d 69 64 64 6c 65 20 6f 66 20 74 68 65 20 6c 6f 63 61 6c 20 61 6e 64 20 72 65 6d 6f 74 65 20 73 | middle.of.the.local.and.remote.s |
12bd20 | 69 64 65 2e 00 60 60 72 65 73 74 61 72 74 60 60 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 74 72 69 | ide..``restart``.immediately.tri |
12bd40 | 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 20 43 48 49 4c 44 5f 53 41 20 | es.to.re-negotiate.the.CHILD_SA. |
12bd60 | 75 6e 64 65 72 20 61 20 66 72 65 73 68 20 49 4b 45 5f 53 41 3b 00 60 60 72 65 73 74 61 72 74 60 | under.a.fresh.IKE_SA;.``restart` |
12bd80 | 60 20 73 65 74 20 61 63 74 69 6f 6e 20 74 6f 20 72 65 73 74 61 72 74 3b 00 60 60 72 65 74 75 72 | `.set.action.to.restart;.``retur |
12bda0 | 6e 60 60 3a 20 52 65 74 75 72 6e 20 66 72 6f 6d 20 74 68 65 20 63 75 72 72 65 6e 74 20 63 68 61 | n``:.Return.from.the.current.cha |
12bdc0 | 69 6e 20 61 6e 64 20 63 6f 6e 74 69 6e 75 65 20 61 74 20 74 68 65 20 6e 65 78 74 20 72 75 6c 65 | in.and.continue.at.the.next.rule |
12bde0 | 20 6f 66 20 74 68 65 20 6c 61 73 74 20 63 68 61 69 6e 2e 00 60 60 72 69 70 60 60 20 2d 20 52 6f | .of.the.last.chain..``rip``.-.Ro |
12be00 | 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 50 72 6f 74 6f 63 6f 6c 20 28 52 49 50 29 | uting.Information.Protocol.(RIP) |
12be20 | 00 60 60 72 69 70 6e 67 60 60 20 2d 20 52 6f 75 74 69 6e 67 20 49 6e 66 6f 72 6d 61 74 69 6f 6e | .``ripng``.-.Routing.Information |
12be40 | 20 50 72 6f 74 6f 63 6f 6c 20 6e 65 78 74 2d 67 65 6e 65 72 61 74 69 6f 6e 20 28 49 50 76 36 29 | .Protocol.next-generation.(IPv6) |
12be60 | 20 28 52 49 50 6e 67 29 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 20 2d 20 52 6f 75 6e 64 | .(RIPng).``round-robin``.-.Round |
12be80 | 2d 72 6f 62 69 6e 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 70 61 63 6b 65 74 73 20 | -robin.policy:.Transmit.packets. |
12bea0 | 69 6e 20 73 65 71 75 65 6e 74 69 61 6c 20 6f 72 64 65 72 20 66 72 6f 6d 20 74 68 65 20 66 69 72 | in.sequential.order.from.the.fir |
12bec0 | 73 74 20 61 76 61 69 6c 61 62 6c 65 20 73 6c 61 76 65 20 74 68 72 6f 75 67 68 20 74 68 65 20 6c | st.available.slave.through.the.l |
12bee0 | 61 73 74 2e 00 60 60 72 6f 75 6e 64 2d 72 6f 62 69 6e 60 60 20 44 69 73 74 72 69 62 75 74 65 73 | ast..``round-robin``.Distributes |
12bf00 | 20 72 65 71 75 65 73 74 73 20 69 6e 20 61 20 63 69 72 63 75 6c 61 72 20 6d 61 6e 6e 65 72 2c 20 | .requests.in.a.circular.manner,. |
12bf20 | 73 65 71 75 65 6e 74 69 61 6c 6c 79 20 73 65 6e 64 69 6e 67 20 65 61 63 68 20 72 65 71 75 65 73 | sequentially.sending.each.reques |
12bf40 | 74 20 74 6f 20 74 68 65 20 6e 65 78 74 20 73 65 72 76 65 72 20 69 6e 20 6c 69 6e 65 00 60 60 72 | t.to.the.next.server.in.line.``r |
12bf60 | 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 74 65 64 2d 76 34 60 60 20 2d 20 20 20 | oute-filter-translated-v4``.-... |
12bf80 | 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c 75 65 20 52 4f 55 | Well-known.communities.value.ROU |
12bfa0 | 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 44 5f 76 34 20 30 78 46 46 46 46 30 30 | TE_FILTER_TRANSLATED_v4.0xFFFF00 |
12bfc0 | 30 32 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 74 72 61 6e 73 6c 61 74 65 64 2d 76 36 60 | 02.``route-filter-translated-v6` |
12bfe0 | 60 20 2d 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 6c | `.-...Well-known.communities.val |
12c000 | 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 54 52 41 4e 53 4c 41 54 45 44 5f 76 36 20 30 78 | ue.ROUTE_FILTER_TRANSLATED_v6.0x |
12c020 | 46 46 46 46 30 30 30 34 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 76 34 60 60 20 2d 20 20 | FFFF0004.``route-filter-v4``.-.. |
12c040 | 20 20 20 20 20 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 | ............Well-known.communiti |
12c060 | 65 73 20 76 61 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 34 20 30 78 46 46 46 46 30 | es.value.ROUTE_FILTER_v4.0xFFFF0 |
12c080 | 30 30 33 00 60 60 72 6f 75 74 65 2d 66 69 6c 74 65 72 2d 76 36 60 60 20 2d 20 20 20 20 20 20 20 | 003.``route-filter-v6``.-....... |
12c0a0 | 20 20 20 20 20 20 20 57 65 6c 6c 2d 6b 6e 6f 77 6e 20 63 6f 6d 6d 75 6e 69 74 69 65 73 20 76 61 | .......Well-known.communities.va |
12c0c0 | 6c 75 65 20 52 4f 55 54 45 5f 46 49 4c 54 45 52 5f 76 36 20 30 78 46 46 46 46 30 30 30 35 00 60 | lue.ROUTE_FILTER_v6.0xFFFF0005.` |
12c0e0 | 60 72 73 61 2d 6b 65 79 2d 6e 61 6d 65 60 60 20 2d 20 73 68 61 72 65 64 20 52 53 41 20 6b 65 79 | `rsa-key-name``.-.shared.RSA.key |
12c100 | 20 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 | .for.authentication..The.key.mus |
12c120 | 74 20 62 65 20 64 65 66 69 6e 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 72 73 | t.be.defined.in.the.``set.vpn.rs |
12c140 | 61 2d 6b 65 79 73 60 60 20 73 65 63 74 69 6f 6e 3b 00 60 60 72 73 61 60 60 20 2d 20 6f 70 74 69 | a-keys``.section;.``rsa``.-.opti |
12c160 | 6f 6e 73 20 66 6f 72 20 52 53 41 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a | ons.for.RSA.authentication.mode: |
12c180 | 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 6c 65 20 73 68 61 72 65 64 20 52 53 41 | .``rsa``.-.use.simple.shared.RSA |
12c1a0 | 20 6b 65 79 2e 00 60 60 72 73 61 60 60 20 2d 20 75 73 65 20 73 69 6d 70 6c 65 20 73 68 61 72 65 | .key..``rsa``.-.use.simple.share |
12c1c0 | 64 20 52 53 41 20 6b 65 79 2e 20 54 68 65 20 6b 65 79 20 6d 75 73 74 20 62 65 20 64 65 66 69 6e | d.RSA.key..The.key.must.be.defin |
12c1e0 | 65 64 20 69 6e 20 74 68 65 20 60 60 73 65 74 20 76 70 6e 20 72 73 61 2d 6b 65 79 73 60 60 20 73 | ed.in.the.``set.vpn.rsa-keys``.s |
12c200 | 65 63 74 69 6f 6e 3b 00 60 60 73 65 63 72 65 74 60 60 20 2d 20 70 72 65 64 65 66 69 6e 65 64 20 | ection;.``secret``.-.predefined. |
12c220 | 73 68 61 72 65 64 20 73 65 63 72 65 74 2e 20 55 73 65 64 20 69 66 20 63 6f 6e 66 69 67 75 72 65 | shared.secret..Used.if.configure |
12c240 | 64 20 6d 6f 64 65 20 60 60 70 72 65 2d 73 68 61 72 65 64 2d 73 65 63 72 65 74 60 60 3b 00 60 60 | d.mode.``pre-shared-secret``;.`` |
12c260 | 73 65 74 20 66 69 72 65 77 61 6c 6c 20 62 72 69 64 67 65 20 66 6f 72 77 61 72 64 20 66 69 6c 74 | set.firewall.bridge.forward.filt |
12c280 | 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 66 6f | er....``..``set.firewall.ipv4.fo |
12c2a0 | 72 77 61 72 64 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 | rward.filter....``..``set.firewa |
12c2c0 | 6c 6c 20 69 70 76 34 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 | ll.ipv4.input.filter....``..``se |
12c2e0 | 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 34 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e | t.firewall.ipv4.output.filter... |
12c300 | 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 76 36 20 66 6f 72 77 61 72 64 | .``..``set.firewall.ipv6.forward |
12c320 | 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 65 77 61 6c 6c 20 69 70 | .filter....``..``set.firewall.ip |
12c340 | 76 36 20 69 6e 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 60 60 73 65 74 20 66 69 72 | v6.input.filter....``..``set.fir |
12c360 | 65 77 61 6c 6c 20 69 70 76 36 20 6f 75 74 70 75 74 20 66 69 6c 74 65 72 20 2e 2e 2e 60 60 2e 00 | ewall.ipv6.output.filter....``.. |
12c380 | 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 6f 72 6d 65 65 60 60 20 2d 20 53 75 70 | ``single-user-beamformee``.-.Sup |
12c3a0 | 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 61 73 20 73 69 6e 67 6c 65 20 75 73 65 | port.for.operation.as.single.use |
12c3c0 | 72 20 62 65 61 6d 66 6f 72 6d 65 65 00 60 60 73 69 6e 67 6c 65 2d 75 73 65 72 2d 62 65 61 6d 66 | r.beamformee.``single-user-beamf |
12c3e0 | 6f 72 6d 65 72 60 60 20 2d 20 53 75 70 70 6f 72 74 20 66 6f 72 20 6f 70 65 72 61 74 69 6f 6e 20 | ormer``.-.Support.for.operation. |
12c400 | 61 73 20 73 69 6e 67 6c 65 20 75 73 65 72 20 62 65 61 6d 66 6f 72 6d 65 72 00 60 60 73 6f 6e 6d | as.single.user.beamformer.``sonm |
12c420 | 70 60 60 20 2d 20 4c 69 73 74 65 6e 20 66 6f 72 20 53 4f 4e 4d 50 20 66 6f 72 20 4e 6f 72 74 65 | p``.-.Listen.for.SONMP.for.Norte |
12c440 | 6c 20 72 6f 75 74 65 72 73 2f 73 77 69 74 63 68 65 73 00 60 60 73 6f 75 72 63 65 2d 61 64 64 72 | l.routers/switches.``source-addr |
12c460 | 65 73 73 60 60 20 44 69 73 74 72 69 62 75 74 65 73 20 72 65 71 75 65 73 74 73 20 62 61 73 65 64 | ess``.Distributes.requests.based |
12c480 | 20 6f 6e 20 74 68 65 20 73 6f 75 72 63 65 20 49 50 20 61 64 64 72 65 73 73 20 6f 66 20 74 68 65 | .on.the.source.IP.address.of.the |
12c4a0 | 20 63 6c 69 65 6e 74 00 60 60 73 73 68 2d 64 73 73 60 60 00 60 60 73 73 68 2d 65 64 32 35 35 31 | .client.``ssh-dss``.``ssh-ed2551 |
12c4c0 | 39 60 60 00 60 60 73 73 68 2d 72 73 61 20 41 41 41 41 42 33 4e 7a 61 43 31 79 63 32 45 41 41 41 | 9``.``ssh-rsa.AAAAB3NzaC1yc2EAAA |
12c4e0 | 41 42 41 41 2e 2e 2e 56 42 44 35 6c 4b 77 45 57 42 20 75 73 65 72 6e 61 6d 65 40 68 6f 73 74 2e | ABAA...VBD5lKwEWB.username@host. |
12c500 | 65 78 61 6d 70 6c 65 2e 63 6f 6d 60 60 00 60 60 73 73 68 2d 72 73 61 60 60 00 60 60 73 73 6c 2d | example.com``.``ssh-rsa``.``ssl- |
12c520 | 66 63 2d 73 6e 69 2d 65 6e 64 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e 64 20 6d 61 74 63 68 20 | fc-sni-end``.SSL.frontend.match. |
12c540 | 65 6e 64 20 6f 66 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 00 60 60 | end.of.connection.Server.Name.`` |
12c560 | 73 73 6c 2d 66 63 2d 73 6e 69 60 60 20 53 53 4c 20 66 72 6f 6e 74 65 6e 64 20 63 6f 6e 6e 65 63 | ssl-fc-sni``.SSL.frontend.connec |
12c580 | 74 69 6f 6e 20 53 65 72 76 65 72 20 4e 61 6d 65 20 49 6e 64 69 63 61 74 69 6f 6e 20 6d 61 74 63 | tion.Server.Name.Indication.matc |
12c5a0 | 68 00 60 60 73 74 61 72 74 60 60 20 74 72 69 65 73 20 74 6f 20 69 6d 6d 65 64 69 61 74 65 6c 79 | h.``start``.tries.to.immediately |
12c5c0 | 20 72 65 2d 63 72 65 61 74 65 20 74 68 65 20 43 48 49 4c 44 5f 53 41 3b 00 60 60 73 74 61 74 69 | .re-create.the.CHILD_SA;.``stati |
12c5e0 | 63 60 60 20 2d 20 53 74 61 74 69 63 61 6c 6c 79 20 63 6f 6e 66 69 67 75 72 65 64 20 72 6f 75 74 | c``.-.Statically.configured.rout |
12c600 | 65 73 00 60 60 73 74 61 74 69 6f 6e 60 60 20 2d 20 43 6f 6e 6e 65 63 74 73 20 74 6f 20 61 6e 6f | es.``station``.-.Connects.to.ano |
12c620 | 74 68 65 72 20 61 63 63 65 73 73 20 70 6f 69 6e 74 00 60 60 73 74 61 74 75 73 20 32 30 30 2d 33 | ther.access.point.``status.200-3 |
12c640 | 39 39 60 60 20 45 78 70 65 63 74 69 6e 67 20 61 20 6e 6f 6e 2d 66 61 69 6c 75 72 65 20 72 65 73 | 99``.Expecting.a.non-failure.res |
12c660 | 70 6f 6e 73 65 20 63 6f 64 65 00 60 60 73 74 61 74 75 73 20 32 30 30 60 60 20 45 78 70 65 63 74 | ponse.code.``status.200``.Expect |
12c680 | 69 6e 67 20 61 20 32 30 30 20 72 65 73 70 6f 6e 73 65 20 63 6f 64 65 00 60 60 73 74 72 69 6e 67 | ing.a.200.response.code.``string |
12c6a0 | 20 73 75 63 63 65 73 73 60 60 20 45 78 70 65 63 74 69 6e 67 20 74 68 65 20 73 74 72 69 6e 67 20 | .success``.Expecting.the.string. |
12c6c0 | 60 73 75 63 63 65 73 73 60 20 69 6e 20 74 68 65 20 72 65 73 70 6f 6e 73 65 20 62 6f 64 79 00 60 | `success`.in.the.response.body.` |
12c6e0 | 60 73 79 6e 70 72 6f 78 79 60 60 3a 20 73 79 6e 70 72 6f 78 79 20 74 68 65 20 70 61 63 6b 65 74 | `synproxy``:.synproxy.the.packet |
12c700 | 2e 00 60 60 73 79 73 63 74 6c 60 60 20 69 73 20 75 73 65 64 20 74 6f 20 6d 6f 64 69 66 79 20 6b | ..``sysctl``.is.used.to.modify.k |
12c720 | 65 72 6e 65 6c 20 70 61 72 61 6d 65 74 65 72 73 20 61 74 20 72 75 6e 74 69 6d 65 2e 20 20 54 68 | ernel.parameters.at.runtime...Th |
12c740 | 65 20 70 61 72 61 6d 65 74 65 72 73 20 61 76 61 69 6c 61 62 6c 65 20 61 72 65 20 74 68 6f 73 65 | e.parameters.available.are.those |
12c760 | 20 6c 69 73 74 65 64 20 75 6e 64 65 72 20 2f 70 72 6f 63 2f 73 79 73 2f 2e 00 60 60 74 61 62 6c | .listed.under./proc/sys/..``tabl |
12c780 | 65 20 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 49 53 | e.10``.Routing.table.used.for.IS |
12c7a0 | 50 31 00 60 60 74 61 62 6c 65 20 31 30 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 | P1.``table.10``.Routing.table.us |
12c7c0 | 65 64 20 66 6f 72 20 56 4c 41 4e 20 31 30 20 28 31 39 32 2e 31 36 38 2e 31 38 38 2e 30 2f 32 34 | ed.for.VLAN.10.(192.168.188.0/24 |
12c7e0 | 29 00 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 6e 67 20 74 61 62 6c 65 20 75 73 65 | ).``table.11``.Routing.table.use |
12c800 | 64 20 66 6f 72 20 49 53 50 32 00 60 60 74 61 62 6c 65 20 31 31 60 60 20 52 6f 75 74 69 6e 67 20 | d.for.ISP2.``table.11``.Routing. |
12c820 | 74 61 62 6c 65 20 75 73 65 64 20 66 6f 72 20 56 4c 41 4e 20 31 31 20 28 31 39 32 2e 31 36 38 2e | table.used.for.VLAN.11.(192.168. |
12c840 | 31 38 39 2e 30 2f 32 34 29 00 60 60 74 61 62 6c 65 60 60 20 2d 20 4e 6f 6e 2d 6d 61 69 6e 20 4b | 189.0/24).``table``.-.Non-main.K |
12c860 | 65 72 6e 65 6c 20 52 6f 75 74 69 6e 67 20 54 61 62 6c 65 00 60 60 74 61 72 67 65 74 60 60 3a 20 | ernel.Routing.Table.``target``:. |
12c880 | 74 68 65 20 74 61 72 67 65 74 20 74 6f 20 62 65 20 73 65 6e 74 20 49 43 4d 50 20 70 61 63 6b 65 | the.target.to.be.sent.ICMP.packe |
12c8a0 | 74 73 20 74 6f 2c 20 61 64 64 72 65 73 73 20 63 61 6e 20 62 65 20 61 6e 20 49 50 76 34 20 61 64 | ts.to,.address.can.be.an.IPv4.ad |
12c8c0 | 64 72 65 73 73 20 6f 72 20 68 6f 73 74 6e 61 6d 65 00 60 60 74 65 73 74 2d 73 63 72 69 70 74 60 | dress.or.hostname.``test-script` |
12c8e0 | 60 3a 20 41 20 75 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 20 6d 75 73 74 20 72 65 | `:.A.user.defined.script.must.re |
12c900 | 74 75 72 6e 20 30 20 74 6f 20 62 65 20 63 6f 6e 73 69 64 65 72 65 64 20 73 75 63 63 65 73 73 66 | turn.0.to.be.considered.successf |
12c920 | 75 6c 20 61 6e 64 20 6e 6f 6e 2d 7a 65 72 6f 20 74 6f 20 66 61 69 6c 2e 20 53 63 72 69 70 74 73 | ul.and.non-zero.to.fail..Scripts |
12c940 | 20 61 72 65 20 6c 6f 63 61 74 65 64 20 69 6e 20 2f 63 6f 6e 66 69 67 2f 73 63 72 69 70 74 73 2c | .are.located.in./config/scripts, |
12c960 | 20 66 6f 72 20 64 69 66 66 65 72 65 6e 74 20 6c 6f 63 61 74 69 6f 6e 73 20 74 68 65 20 66 75 6c | .for.different.locations.the.ful |
12c980 | 6c 20 70 61 74 68 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 72 6f 76 69 64 65 64 00 60 60 74 68 | l.path.needs.to.be.provided.``th |
12c9a0 | 72 65 73 68 6f 6c 64 60 60 3a 20 60 60 62 65 6c 6f 77 60 60 20 6f 72 20 60 60 61 62 6f 76 65 60 | reshold``:.``below``.or.``above` |
12c9c0 | 60 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 72 61 74 65 20 6c 69 6d 69 74 2e 00 60 60 74 68 | `.the.specified.rate.limit..``th |
12c9e0 | 72 6f 75 67 68 70 75 74 60 60 3a 20 41 20 73 65 72 76 65 72 20 70 72 6f 66 69 6c 65 20 66 6f 63 | roughput``:.A.server.profile.foc |
12ca00 | 75 73 65 64 20 6f 6e 20 69 6d 70 72 6f 76 69 6e 67 20 6e 65 74 77 6f 72 6b 20 74 68 72 6f 75 67 | used.on.improving.network.throug |
12ca20 | 68 70 75 74 2e 20 54 68 69 73 20 70 72 6f 66 69 6c 65 20 66 61 76 6f 72 73 20 70 65 72 66 6f 72 | hput..This.profile.favors.perfor |
12ca40 | 6d 61 6e 63 65 20 6f 76 65 72 20 70 6f 77 65 72 20 73 61 76 69 6e 67 73 20 62 79 20 73 65 74 74 | mance.over.power.savings.by.sett |
12ca60 | 69 6e 67 20 60 60 69 6e 74 65 6c 5f 70 73 74 61 74 65 60 60 20 61 6e 64 20 60 60 6d 61 78 5f 70 | ing.``intel_pstate``.and.``max_p |
12ca80 | 65 72 66 5f 70 63 74 3d 31 30 30 60 60 20 61 6e 64 20 69 6e 63 72 65 61 73 69 6e 67 20 6b 65 72 | erf_pct=100``.and.increasing.ker |
12caa0 | 6e 65 6c 20 6e 65 74 77 6f 72 6b 20 62 75 66 66 65 72 20 73 69 7a 65 73 2e 00 60 60 74 69 6d 65 | nel.network.buffer.sizes..``time |
12cac0 | 6f 75 74 60 60 20 6b 65 65 70 2d 61 6c 69 76 65 20 74 69 6d 65 6f 75 74 20 69 6e 20 73 65 63 6f | out``.keep-alive.timeout.in.seco |
12cae0 | 6e 64 73 20 3c 32 2d 38 36 34 30 30 3e 20 28 64 65 66 61 75 6c 74 20 31 32 30 29 20 49 4b 45 76 | nds.<2-86400>.(default.120).IKEv |
12cb00 | 31 20 6f 6e 6c 79 00 60 60 74 6f 6b 65 6e 60 60 20 75 73 65 20 4a 57 54 20 74 6f 6b 65 6e 73 2e | 1.only.``token``.use.JWT.tokens. |
12cb20 | 00 60 60 74 72 61 6e 73 6d 69 74 2d 6c 6f 61 64 2d 62 61 6c 61 6e 63 65 60 60 20 2d 20 41 64 61 | .``transmit-load-balance``.-.Ada |
12cb40 | 70 74 69 76 65 20 74 72 61 6e 73 6d 69 74 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 3a 20 63 | ptive.transmit.load.balancing:.c |
12cb60 | 68 61 6e 6e 65 6c 20 62 6f 6e 64 69 6e 67 20 74 68 61 74 20 64 6f 65 73 20 6e 6f 74 20 72 65 71 | hannel.bonding.that.does.not.req |
12cb80 | 75 69 72 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 73 77 69 74 63 68 20 73 75 70 70 6f 72 74 2e | uire.any.special.switch.support. |
12cba0 | 00 60 60 74 72 61 6e 73 70 6f 72 74 60 60 20 74 72 61 6e 73 70 6f 72 74 20 6d 6f 64 65 3b 00 60 | .``transport``.transport.mode;.` |
12cbc0 | 60 74 72 61 70 60 60 20 20 69 6e 73 74 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 2c | `trap``..installs.a.trap.policy, |
12cbe0 | 20 77 68 69 63 68 20 77 69 6c 6c 20 63 61 74 63 68 20 6d 61 74 63 68 69 6e 67 20 74 72 61 66 66 | .which.will.catch.matching.traff |
12cc00 | 69 63 20 61 6e 64 20 74 72 69 65 73 20 74 6f 20 72 65 2d 6e 65 67 6f 74 69 61 74 65 20 74 68 65 | ic.and.tries.to.re-negotiate.the |
12cc20 | 20 74 75 6e 6e 65 6c 20 6f 6e 2d 64 65 6d 61 6e 64 3b 00 60 60 74 72 61 70 60 60 20 69 6e 73 74 | .tunnel.on-demand;.``trap``.inst |
12cc40 | 61 6c 6c 73 20 61 20 74 72 61 70 20 70 6f 6c 69 63 79 20 66 6f 72 20 74 68 65 20 43 48 49 4c 44 | alls.a.trap.policy.for.the.CHILD |
12cc60 | 5f 53 41 3b 00 60 60 74 74 6c 2d 6c 69 6d 69 74 60 60 3a 20 46 6f 72 20 74 68 65 20 55 44 50 20 | _SA;.``ttl-limit``:.For.the.UDP. |
12cc80 | 54 54 4c 20 6c 69 6d 69 74 20 74 65 73 74 20 74 68 65 20 68 6f 70 20 63 6f 75 6e 74 20 6c 69 6d | TTL.limit.test.the.hop.count.lim |
12cca0 | 69 74 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 2e 20 54 68 65 20 6c 69 6d 69 74 20 | it.must.be.specified..The.limit. |
12ccc0 | 6d 75 73 74 20 62 65 20 73 68 6f 72 74 65 72 20 74 68 61 6e 20 74 68 65 20 70 61 74 68 20 6c 65 | must.be.shorter.than.the.path.le |
12cce0 | 6e 67 74 68 2c 20 61 6e 20 49 43 4d 50 20 74 69 6d 65 20 65 78 70 69 72 65 64 20 6d 65 73 73 61 | ngth,.an.ICMP.time.expired.messa |
12cd00 | 67 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 62 65 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 | ge.is.needed.to.be.returned.for. |
12cd20 | 61 20 73 75 63 63 65 73 73 66 75 6c 20 74 65 73 74 2e 20 64 65 66 61 75 6c 74 20 31 00 60 60 74 | a.successful.test..default.1.``t |
12cd40 | 74 79 53 4e 60 60 20 2d 20 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 00 60 60 74 74 | tySN``.-.Serial.device.name.``tt |
12cd60 | 79 55 53 42 58 60 60 20 2d 20 55 53 42 20 53 65 72 69 61 6c 20 64 65 76 69 63 65 20 6e 61 6d 65 | yUSBX``.-.USB.Serial.device.name |
12cd80 | 00 60 60 74 75 6e 6e 65 6c 60 60 20 2d 20 64 65 66 69 6e 65 20 63 72 69 74 65 72 69 61 20 66 6f | .``tunnel``.-.define.criteria.fo |
12cda0 | 72 20 74 72 61 66 66 69 63 20 74 6f 20 62 65 20 6d 61 74 63 68 65 64 20 66 6f 72 20 65 6e 63 72 | r.traffic.to.be.matched.for.encr |
12cdc0 | 79 70 74 69 6e 67 20 61 6e 64 20 73 65 6e 64 20 69 74 20 74 6f 20 61 20 70 65 65 72 3a 00 60 60 | ypting.and.send.it.to.a.peer:.`` |
12cde0 | 74 75 6e 6e 65 6c 60 60 20 74 75 6e 6e 65 6c 20 6d 6f 64 65 20 28 64 65 66 61 75 6c 74 29 3b 00 | tunnel``.tunnel.mode.(default);. |
12ce00 | 60 60 74 79 70 65 60 60 3a 20 53 70 65 63 69 66 79 20 74 68 65 20 74 79 70 65 20 6f 66 20 74 65 | ``type``:.Specify.the.type.of.te |
12ce20 | 73 74 2e 20 74 79 70 65 20 63 61 6e 20 62 65 20 70 69 6e 67 2c 20 74 74 6c 20 6f 72 20 61 20 75 | st..type.can.be.ping,.ttl.or.a.u |
12ce40 | 73 65 72 20 64 65 66 69 6e 65 64 20 73 63 72 69 70 74 00 60 60 75 73 65 2d 78 35 30 39 2d 69 64 | ser.defined.script.``use-x509-id |
12ce60 | 60 60 20 2d 20 75 73 65 20 6c 6f 63 61 6c 20 49 44 20 66 72 6f 6d 20 78 35 30 39 20 63 65 72 74 | ``.-.use.local.ID.from.x509.cert |
12ce80 | 69 66 69 63 61 74 65 2e 20 43 61 6e 6e 6f 74 20 62 65 20 75 73 65 64 20 77 68 65 6e 20 60 60 69 | ificate..Cannot.be.used.when.``i |
12cea0 | 64 60 60 20 69 73 20 64 65 66 69 6e 65 64 3b 00 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 | d``.is.defined;.``virtual-addres |
12cec0 | 73 60 60 20 2d 20 44 65 66 69 6e 65 73 20 61 20 76 69 72 74 75 61 6c 20 49 50 20 61 64 64 72 65 | s``.-.Defines.a.virtual.IP.addre |
12cee0 | 73 73 20 77 68 69 63 68 20 69 73 20 72 65 71 75 65 73 74 65 64 20 62 79 20 74 68 65 20 69 6e 69 | ss.which.is.requested.by.the.ini |
12cf00 | 74 69 61 74 6f 72 20 61 6e 64 20 6f 6e 65 20 6f 72 20 73 65 76 65 72 61 6c 20 49 50 76 34 20 61 | tiator.and.one.or.several.IPv4.a |
12cf20 | 6e 64 2f 6f 72 20 49 50 76 36 20 61 64 64 72 65 73 73 65 73 20 61 72 65 20 61 73 73 69 67 6e 65 | nd/or.IPv6.addresses.are.assigne |
12cf40 | 64 20 66 72 6f 6d 20 6d 75 6c 74 69 70 6c 65 20 70 6f 6f 6c 73 20 62 79 20 74 68 65 20 72 65 73 | d.from.multiple.pools.by.the.res |
12cf60 | 70 6f 6e 64 65 72 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f 77 20 69 6e 73 | ponder..``virtual-ip``.Allow.ins |
12cf80 | 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 73 65 73 2e 20 43 6f 6d 6d 61 | tall.virtual-ip.addresses..Comma |
12cfa0 | 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 74 75 61 6c 20 49 50 73 20 74 | .separated.list.of.virtual.IPs.t |
12cfc0 | 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e | o.request.in.IKEv2.configuration |
12cfe0 | 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 20 43 6f 6e 66 69 67 2e 20 | .payloads.or.IKEv1.Mode.Config.. |
12d000 | 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 20 30 2e 30 2e 30 2e 30 20 61 | The.wildcard.addresses.0.0.0.0.a |
12d020 | 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 72 61 72 79 20 61 64 64 72 65 | nd.::.request.an.arbitrary.addre |
12d040 | 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 20 6d 61 79 20 62 65 20 64 65 | ss,.specific.addresses.may.be.de |
12d060 | 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 79 20 72 65 74 75 72 6e 20 | fined..The.responder.may.return. |
12d080 | 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 68 6f 75 67 68 2c 20 6f 72 20 | a.different.address,.though,.or. |
12d0a0 | 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 00 60 60 76 69 72 74 75 61 6c 2d 69 70 60 60 20 41 6c 6c 6f | none.at.all..``virtual-ip``.Allo |
12d0c0 | 77 73 20 74 6f 20 69 6e 73 74 61 6c 6c 20 76 69 72 74 75 61 6c 2d 69 70 20 61 64 64 72 65 73 73 | ws.to.install.virtual-ip.address |
12d0e0 | 65 73 2e 20 43 6f 6d 6d 61 20 73 65 70 61 72 61 74 65 64 20 6c 69 73 74 20 6f 66 20 76 69 72 74 | es..Comma.separated.list.of.virt |
12d100 | 75 61 6c 20 49 50 73 20 74 6f 20 72 65 71 75 65 73 74 20 69 6e 20 49 4b 45 76 32 20 63 6f 6e 66 | ual.IPs.to.request.in.IKEv2.conf |
12d120 | 69 67 75 72 61 74 69 6f 6e 20 70 61 79 6c 6f 61 64 73 20 6f 72 20 49 4b 45 76 31 20 4d 6f 64 65 | iguration.payloads.or.IKEv1.Mode |
12d140 | 20 43 6f 6e 66 69 67 2e 20 54 68 65 20 77 69 6c 64 63 61 72 64 20 61 64 64 72 65 73 73 65 73 20 | .Config..The.wildcard.addresses. |
12d160 | 30 2e 30 2e 30 2e 30 20 61 6e 64 20 3a 3a 20 72 65 71 75 65 73 74 20 61 6e 20 61 72 62 69 74 72 | 0.0.0.0.and.::.request.an.arbitr |
12d180 | 61 72 79 20 61 64 64 72 65 73 73 2c 20 73 70 65 63 69 66 69 63 20 61 64 64 72 65 73 73 65 73 20 | ary.address,.specific.addresses. |
12d1a0 | 6d 61 79 20 62 65 20 64 65 66 69 6e 65 64 2e 20 54 68 65 20 72 65 73 70 6f 6e 64 65 72 20 6d 61 | may.be.defined..The.responder.ma |
12d1c0 | 79 20 72 65 74 75 72 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 64 64 72 65 73 73 2c 20 74 68 | y.return.a.different.address,.th |
12d1e0 | 6f 75 67 68 2c 20 6f 72 20 6e 6f 6e 65 20 61 74 20 61 6c 6c 2e 20 44 65 66 69 6e 65 20 74 68 65 | ough,.or.none.at.all..Define.the |
12d200 | 20 60 60 76 69 72 74 75 61 6c 2d 61 64 64 72 65 73 73 60 60 20 6f 70 74 69 6f 6e 20 74 6f 20 63 | .``virtual-address``.option.to.c |
12d220 | 6f 6e 66 69 67 75 72 65 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 69 6e 20 73 69 74 65 2d | onfigure.the.IP.address.in.site- |
12d240 | 74 6f 2d 73 69 74 65 20 68 69 65 72 61 72 63 68 79 2e 00 60 60 76 6e 63 60 60 20 2d 20 56 69 72 | to-site.hierarchy..``vnc``.-.Vir |
12d260 | 74 75 61 6c 20 4e 65 74 77 6f 72 6b 20 43 6f 6e 74 72 6f 6c 20 28 56 4e 43 29 00 60 60 76 74 69 | tual.Network.Control.(VNC).``vti |
12d280 | 60 60 20 2d 20 75 73 65 20 61 20 56 54 49 20 69 6e 74 65 72 66 61 63 65 20 66 6f 72 20 74 72 61 | ``.-.use.a.VTI.interface.for.tra |
12d2a0 | 66 66 69 63 20 65 6e 63 72 79 70 74 69 6f 6e 2e 20 41 6e 79 20 74 72 61 66 66 69 63 2c 20 77 68 | ffic.encryption..Any.traffic,.wh |
12d2c0 | 69 63 68 20 77 69 6c 6c 20 62 65 20 73 65 6e 64 20 74 6f 20 56 54 49 20 69 6e 74 65 72 66 61 63 | ich.will.be.send.to.VTI.interfac |
12d2e0 | 65 20 77 69 6c 6c 20 62 65 20 65 6e 63 72 79 70 74 65 64 20 61 6e 64 20 73 65 6e 64 20 74 6f 20 | e.will.be.encrypted.and.send.to. |
12d300 | 74 68 69 73 20 70 65 65 72 2e 20 55 73 69 6e 67 20 56 54 49 20 6d 61 6b 65 73 20 49 50 53 65 63 | this.peer..Using.VTI.makes.IPSec |
12d320 | 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6d 75 63 68 20 66 6c 65 78 69 62 6c 65 20 61 6e 64 | .configuration.much.flexible.and |
12d340 | 20 65 61 73 69 65 72 20 69 6e 20 63 6f 6d 70 6c 65 78 20 73 69 74 75 61 74 69 6f 6e 2c 20 61 6e | .easier.in.complex.situation,.an |
12d360 | 64 20 61 6c 6c 6f 77 73 20 74 6f 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 61 64 64 2f 64 65 6c 65 | d.allows.to.dynamically.add/dele |
12d380 | 74 65 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f 72 6b 73 2c 20 72 65 61 63 68 61 62 6c 65 20 76 69 | te.remote.networks,.reachable.vi |
12d3a0 | 61 20 61 20 70 65 65 72 2c 20 61 73 20 69 6e 20 74 68 69 73 20 6d 6f 64 65 20 72 6f 75 74 65 72 | a.a.peer,.as.in.this.mode.router |
12d3c0 | 20 64 6f 6e 27 74 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 64 64 69 74 69 6f 6e 61 6c | .don't.need.to.create.additional |
12d3e0 | 20 53 41 2f 70 6f 6c 69 63 79 20 66 6f 72 20 65 61 63 68 20 72 65 6d 6f 74 65 20 6e 65 74 77 6f | .SA/policy.for.each.remote.netwo |
12d400 | 72 6b 3a 00 60 60 78 35 30 39 60 60 20 2d 20 6f 70 74 69 6f 6e 73 20 66 6f 72 20 78 35 30 39 20 | rk:.``x509``.-.options.for.x509. |
12d420 | 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 6d 6f 64 65 3a 00 60 60 78 35 30 39 60 60 20 2d 20 | authentication.mode:.``x509``.-. |
12d440 | 75 73 65 20 63 65 72 74 69 66 69 63 61 74 65 73 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 | use.certificates.infrastructure. |
12d460 | 66 6f 72 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 2e 00 60 60 78 6f 72 2d 68 61 73 68 60 60 | for.authentication..``xor-hash`` |
12d480 | 20 2d 20 58 4f 52 20 70 6f 6c 69 63 79 3a 20 54 72 61 6e 73 6d 69 74 20 62 61 73 65 64 20 6f 6e | .-.XOR.policy:.Transmit.based.on |
12d4a0 | 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 74 72 61 6e 73 6d 69 74 20 68 61 73 68 20 70 6f 6c 69 | .the.selected.transmit.hash.poli |
12d4c0 | 63 79 2e 20 20 54 68 65 20 64 65 66 61 75 6c 74 20 70 6f 6c 69 63 79 20 69 73 20 61 20 73 69 6d | cy...The.default.policy.is.a.sim |
12d4e0 | 70 6c 65 20 5b 28 73 6f 75 72 63 65 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 27 64 20 77 | ple.[(source.MAC.address.XOR'd.w |
12d500 | 69 74 68 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 4d 41 43 20 61 64 64 72 65 73 73 20 58 4f 52 20 | ith.destination.MAC.address.XOR. |
12d520 | 70 61 63 6b 65 74 20 74 79 70 65 20 49 44 29 20 6d 6f 64 75 6c 6f 20 73 6c 61 76 65 20 63 6f 75 | packet.type.ID).modulo.slave.cou |
12d540 | 6e 74 5d 2e 20 41 6c 74 65 72 6e 61 74 65 20 74 72 61 6e 73 6d 69 74 20 70 6f 6c 69 63 69 65 73 | nt]..Alternate.transmit.policies |
12d560 | 20 6d 61 79 20 62 65 20 73 65 6c 65 63 74 65 64 20 76 69 61 20 74 68 65 20 3a 63 66 67 63 6d 64 | .may.be.selected.via.the.:cfgcmd |
12d580 | 3a 60 68 61 73 68 2d 70 6f 6c 69 63 79 60 20 6f 70 74 69 6f 6e 2c 20 64 65 73 63 72 69 62 65 64 | :`hash-policy`.option,.described |
12d5a0 | 20 62 65 6c 6f 77 2e 00 60 60 79 65 73 60 60 20 65 6e 61 62 6c 65 20 72 65 6d 6f 74 65 20 68 6f | .below..``yes``.enable.remote.ho |
12d5c0 | 73 74 20 72 65 2d 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 64 75 72 69 6e 67 20 61 6e 20 49 | st.re-authentication.during.an.I |
12d5e0 | 4b 45 20 72 65 6b 65 79 3b 00 60 69 67 6e 6f 72 65 60 3a 20 4e 6f 20 63 6f 72 72 65 63 74 69 6f | KE.rekey;.`ignore`:.No.correctio |
12d600 | 6e 20 69 73 20 61 70 70 6c 69 65 64 20 74 6f 20 74 68 65 20 63 6c 6f 63 6b 20 66 6f 72 20 74 68 | n.is.applied.to.the.clock.for.th |
12d620 | 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 2e 20 54 68 65 20 63 6c 6f 63 6b 20 77 69 6c 6c 20 62 65 | e.leap.second..The.clock.will.be |
12d640 | 20 63 6f 72 72 65 63 74 65 64 20 6c 61 74 65 72 20 69 6e 20 6e 6f 72 6d 61 6c 20 6f 70 65 72 61 | .corrected.later.in.normal.opera |
12d660 | 74 69 6f 6e 20 77 68 65 6e 20 6e 65 77 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 61 72 65 20 6d | tion.when.new.measurements.are.m |
12d680 | 61 64 65 20 61 6e 64 20 74 68 65 20 65 73 74 69 6d 61 74 65 64 20 6f 66 66 73 65 74 20 69 6e 63 | ade.and.the.estimated.offset.inc |
12d6a0 | 6c 75 64 65 73 20 74 68 65 20 6f 6e 65 20 73 65 63 6f 6e 64 20 65 72 72 6f 72 2e 00 60 73 6d 65 | ludes.the.one.second.error..`sme |
12d6c0 | 61 72 60 3a 20 57 68 65 6e 20 73 6d 65 61 72 69 6e 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 | ar`:.When.smearing.a.leap.second |
12d6e0 | 2c 20 74 68 65 20 6c 65 61 70 20 73 74 61 74 75 73 20 69 73 20 73 75 70 70 72 65 73 73 65 64 20 | ,.the.leap.status.is.suppressed. |
12d700 | 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 64 20 74 68 65 20 73 65 72 76 65 64 20 74 69 6d | on.the.server.and.the.served.tim |
12d720 | 65 20 69 73 20 63 6f 72 72 65 63 74 65 64 20 73 6c 6f 77 6c 79 20 62 79 20 73 6c 65 77 69 6e 67 | e.is.corrected.slowly.by.slewing |
12d740 | 20 69 6e 73 74 65 61 64 20 6f 66 20 73 74 65 70 70 69 6e 67 2e 20 54 68 65 20 63 6c 69 65 6e 74 | .instead.of.stepping..The.client |
12d760 | 73 20 64 6f 20 6e 6f 74 20 6e 65 65 64 20 61 6e 79 20 73 70 65 63 69 61 6c 20 63 6f 6e 66 69 67 | s.do.not.need.any.special.config |
12d780 | 75 72 61 74 69 6f 6e 20 61 73 20 74 68 65 79 20 64 6f 20 6e 6f 74 20 6b 6e 6f 77 20 74 68 65 72 | uration.as.they.do.not.know.ther |
12d7a0 | 65 20 69 73 20 61 6e 79 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 61 6e 64 20 74 68 65 79 20 66 6f | e.is.any.leap.second.and.they.fo |
12d7c0 | 6c 6c 6f 77 20 74 68 65 20 73 65 72 76 65 72 20 74 69 6d 65 20 77 68 69 63 68 20 65 76 65 6e 74 | llow.the.server.time.which.event |
12d7e0 | 75 61 6c 6c 79 20 62 72 69 6e 67 73 20 74 68 65 6d 20 62 61 63 6b 20 74 6f 20 55 54 43 2e 20 43 | ually.brings.them.back.to.UTC..C |
12d800 | 61 72 65 20 6d 75 73 74 20 62 65 20 74 61 6b 65 6e 20 74 6f 20 65 6e 73 75 72 65 20 74 68 65 79 | are.must.be.taken.to.ensure.they |
12d820 | 20 75 73 65 20 6f 6e 6c 79 20 4e 54 50 20 73 65 72 76 65 72 73 20 77 68 69 63 68 20 73 6d 65 61 | .use.only.NTP.servers.which.smea |
12d840 | 72 20 74 68 65 20 6c 65 61 70 20 73 65 63 6f 6e 64 20 69 6e 20 65 78 61 63 74 6c 79 20 74 68 65 | r.the.leap.second.in.exactly.the |
12d860 | 20 73 61 6d 65 20 77 61 79 20 66 6f 72 20 73 79 6e 63 68 72 6f 6e 69 73 61 74 69 6f 6e 2e 00 60 | .same.way.for.synchronisation..` |
12d880 | 73 6f 75 72 63 65 2d 61 64 64 72 65 73 73 60 20 61 6e 64 20 60 73 6f 75 72 63 65 2d 69 6e 74 65 | source-address`.and.`source-inte |
12d8a0 | 72 66 61 63 65 60 20 63 61 6e 20 6e 6f 74 20 62 65 20 75 73 65 64 20 61 74 20 74 68 65 20 73 61 | rface`.can.not.be.used.at.the.sa |
12d8c0 | 6d 65 20 74 69 6d 65 2e 00 60 73 79 73 74 65 6d 60 3a 20 57 68 65 6e 20 69 6e 73 65 72 74 69 6e | me.time..`system`:.When.insertin |
12d8e0 | 67 20 61 20 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 74 68 65 20 6b 65 72 6e 65 6c 20 73 74 65 70 | g.a.leap.second,.the.kernel.step |
12d900 | 73 20 74 68 65 20 73 79 73 74 65 6d 20 63 6c 6f 63 6b 20 62 61 63 6b 77 61 72 64 73 20 62 79 20 | s.the.system.clock.backwards.by. |
12d920 | 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 74 | one.second.when.the.clock.gets.t |
12d940 | 6f 20 30 30 3a 30 30 3a 30 30 20 55 54 43 2e 20 57 68 65 6e 20 64 65 6c 65 74 69 6e 67 20 61 20 | o.00:00:00.UTC..When.deleting.a. |
12d960 | 6c 65 61 70 20 73 65 63 6f 6e 64 2c 20 69 74 20 73 74 65 70 73 20 66 6f 72 77 61 72 64 20 62 79 | leap.second,.it.steps.forward.by |
12d980 | 20 6f 6e 65 20 73 65 63 6f 6e 64 20 77 68 65 6e 20 74 68 65 20 63 6c 6f 63 6b 20 67 65 74 73 20 | .one.second.when.the.clock.gets. |
12d9a0 | 74 6f 20 32 33 3a 35 39 3a 35 39 20 55 54 43 2e 00 60 74 69 6d 65 7a 6f 6e 65 60 3a 20 54 68 69 | to.23:59:59.UTC..`timezone`:.Thi |
12d9c0 | 73 20 64 69 72 65 63 74 69 76 65 20 73 70 65 63 69 66 69 65 73 20 61 20 74 69 6d 65 7a 6f 6e 65 | s.directive.specifies.a.timezone |
12d9e0 | 20 69 6e 20 74 68 65 20 73 79 73 74 65 6d 20 74 69 6d 65 7a 6f 6e 65 20 64 61 74 61 62 61 73 65 | .in.the.system.timezone.database |
12da00 | 20 77 68 69 63 68 20 63 68 72 6f 6e 79 64 20 63 61 6e 20 75 73 65 20 74 6f 20 64 65 74 65 72 6d | .which.chronyd.can.use.to.determ |
12da20 | 69 6e 65 20 77 68 65 6e 20 77 69 6c 6c 20 74 68 65 20 6e 65 78 74 20 6c 65 61 70 20 73 65 63 6f | ine.when.will.the.next.leap.seco |
12da40 | 6e 64 20 6f 63 63 75 72 20 61 6e 64 20 77 68 61 74 20 69 73 20 74 68 65 20 63 75 72 72 65 6e 74 | nd.occur.and.what.is.the.current |
12da60 | 20 6f 66 66 73 65 74 20 62 65 74 77 65 65 6e 20 54 41 49 20 61 6e 64 20 55 54 43 2e 20 49 74 20 | .offset.between.TAI.and.UTC..It. |
12da80 | 77 69 6c 6c 20 70 65 72 69 6f 64 69 63 61 6c 6c 79 20 63 68 65 63 6b 20 69 66 20 32 33 3a 35 39 | will.periodically.check.if.23:59 |
12daa0 | 3a 35 39 20 61 6e 64 20 32 33 3a 35 39 3a 36 30 20 61 72 65 20 76 61 6c 69 64 20 74 69 6d 65 73 | :59.and.23:59:60.are.valid.times |
12dac0 | 20 69 6e 20 74 68 65 20 74 69 6d 65 7a 6f 6e 65 2e 20 54 68 69 73 20 6e 6f 72 6d 61 6c 6c 79 20 | .in.the.timezone..This.normally. |
12dae0 | 77 6f 72 6b 73 20 77 69 74 68 20 74 68 65 20 72 69 67 68 74 2f 55 54 43 20 74 69 6d 65 7a 6f 6e | works.with.the.right/UTC.timezon |
12db00 | 65 20 77 68 69 63 68 20 69 73 20 74 68 65 20 64 65 66 61 75 6c 74 00 60 74 77 65 65 74 20 62 79 | e.which.is.the.default.`tweet.by |
12db20 | 20 45 76 69 6c 4d 6f 67 60 5f 2c 20 32 30 32 30 2d 30 32 2d 32 31 00 61 20 62 61 6e 64 77 69 64 | .EvilMog`_,.2020-02-21.a.bandwid |
12db40 | 74 68 20 74 65 73 74 20 6f 76 65 72 20 74 68 65 20 56 50 4e 20 67 6f 74 20 74 68 65 73 65 20 72 | th.test.over.the.VPN.got.these.r |
12db60 | 65 73 75 6c 74 73 3a 00 61 20 62 6c 61 6e 6b 20 69 6e 64 69 63 61 74 65 73 20 74 68 61 74 20 6e | esults:.a.blank.indicates.that.n |
12db80 | 6f 20 74 65 73 74 20 68 61 73 20 62 65 65 6e 20 63 61 72 72 69 65 64 20 6f 75 74 00 61 65 73 32 | o.test.has.been.carried.out.aes2 |
12dba0 | 35 36 20 45 6e 63 72 79 70 74 69 6f 6e 00 61 6c 65 72 74 00 61 6c 6c 00 61 6e 20 52 44 20 2f 20 | 56.Encryption.alert.all.an.RD./. |
12dbc0 | 52 54 4c 49 53 54 00 61 6e 20 69 6e 74 65 72 66 61 63 65 20 77 69 74 68 20 61 20 6e 65 78 74 68 | RTLIST.an.interface.with.a.nexth |
12dbe0 | 6f 70 00 61 6e 79 3a 20 61 6e 79 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e | op.any:.any.IP.address.to.match. |
12dc00 | 00 61 6e 79 3a 20 61 6e 79 20 49 50 76 36 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 74 63 68 2e | .any:.any.IPv6.address.to.match. |
12dc20 | 00 61 75 74 68 00 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 | .auth.authorization.auto.-.inter |
12dc40 | 66 61 63 65 20 64 75 70 6c 65 78 20 73 65 74 74 69 6e 67 20 69 73 20 61 75 74 6f 2d 6e 65 67 6f | face.duplex.setting.is.auto-nego |
12dc60 | 74 69 61 74 65 64 00 61 75 74 6f 20 2d 20 69 6e 74 65 72 66 61 63 65 20 73 70 65 65 64 20 69 73 | tiated.auto.-.interface.speed.is |
12dc80 | 20 61 75 74 6f 2d 6e 65 67 6f 74 69 61 74 65 64 00 62 67 70 64 00 62 6f 6e 64 69 6e 67 00 62 6f | .auto-negotiated.bgpd.bonding.bo |
12dca0 | 6f 74 2d 73 69 7a 65 00 62 6f 6f 74 66 69 6c 65 2d 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 6e | ot-size.bootfile-name.bootfile-n |
12dcc0 | 61 6d 65 2c 20 66 69 6c 65 6e 61 6d 65 00 62 6f 6f 74 66 69 6c 65 2d 73 65 72 76 65 72 00 62 6f | ame,.filename.bootfile-server.bo |
12dce0 | 6f 74 66 69 6c 65 2d 73 69 7a 65 00 62 72 69 64 67 65 00 63 6c 69 65 6e 74 20 65 78 61 6d 70 6c | otfile-size.bridge.client.exampl |
12dd00 | 65 20 28 64 65 62 69 61 6e 20 39 29 00 63 6c 69 65 6e 74 2d 70 72 65 66 69 78 2d 6c 65 6e 67 74 | e.(debian.9).client-prefix-lengt |
12dd20 | 68 00 63 6c 6f 63 6b 00 63 6c 6f 63 6b 20 64 61 65 6d 6f 6e 20 28 6e 6f 74 65 20 32 29 00 63 72 | h.clock.clock.daemon.(note.2).cr |
12dd40 | 69 74 00 63 72 6f 6e 00 64 61 65 6d 6f 6e 00 64 64 63 6c 69 65 6e 74 5f 20 68 61 73 20 61 6e 6f | it.cron.daemon.ddclient_.has.ano |
12dd60 | 74 68 65 72 20 77 61 79 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 74 68 65 20 57 41 4e 20 49 50 | ther.way.to.determine.the.WAN.IP |
12dd80 | 20 61 64 64 72 65 73 73 2e 20 54 68 69 73 20 69 73 20 63 6f 6e 74 72 6f 6c 6c 65 64 20 62 79 3a | .address..This.is.controlled.by: |
12dda0 | 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 6d 65 74 68 6f 64 73 20 74 6f 20 75 | .ddclient_.uses.two.methods.to.u |
12ddc0 | 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 68 65 20 66 69 72 73 74 20 6f 6e | pdate.a.DNS.record..The.first.on |
12dde0 | 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 64 69 72 65 63 74 6c 79 20 74 6f 20 | e.will.send.updates.directly.to. |
12de00 | 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 | the.DNS.daemon,.in.compliance.wi |
12de20 | 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 73 65 63 6f 6e 64 20 6f 6e 65 20 69 | th.:rfc:`2136`..The.second.one.i |
12de40 | 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 79 20 73 65 72 76 69 63 65 2c 20 6c | nvolves.a.third.party.service,.l |
12de60 | 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 20 6f 74 68 65 72 20 73 69 6d 69 | ike.DynDNS.com.or.any.other.simi |
12de80 | 6c 61 72 20 77 65 62 73 69 74 65 2e 20 54 68 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 54 | lar.website..This.method.uses.HT |
12dea0 | 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 20 | TP.requests.to.transmit.the.new. |
12dec0 | 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 6f | IP.address..You.can.configure.bo |
12dee0 | 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 6c 69 65 6e 74 5f 20 75 73 65 73 20 74 77 6f 20 6d | th.in.VyOS..ddclient_.uses.two.m |
12df00 | 65 74 68 6f 64 73 20 74 6f 20 75 70 64 61 74 65 20 61 20 44 4e 53 20 72 65 63 6f 72 64 2e 20 54 | ethods.to.update.a.DNS.record..T |
12df20 | 68 65 20 66 69 72 73 74 20 6f 6e 65 20 77 69 6c 6c 20 73 65 6e 64 20 75 70 64 61 74 65 73 20 64 | he.first.one.will.send.updates.d |
12df40 | 69 72 65 63 74 6c 79 20 74 6f 20 74 68 65 20 44 4e 53 20 64 61 65 6d 6f 6e 2c 20 69 6e 20 63 6f | irectly.to.the.DNS.daemon,.in.co |
12df60 | 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 3a 72 66 63 3a 60 32 31 33 36 60 2e 20 54 68 65 20 73 | mpliance.with.:rfc:`2136`..The.s |
12df80 | 65 63 6f 6e 64 20 6f 6e 65 20 69 6e 76 6f 6c 76 65 73 20 61 20 74 68 69 72 64 20 70 61 72 74 79 | econd.one.involves.a.third.party |
12dfa0 | 20 73 65 72 76 69 63 65 2c 20 6c 69 6b 65 20 44 79 6e 44 4e 53 2e 63 6f 6d 20 6f 72 20 61 6e 79 | .service,.like.DynDNS.com.or.any |
12dfc0 | 20 6f 74 68 65 72 20 73 75 63 68 20 73 65 72 76 69 63 65 20 70 72 6f 76 69 64 65 72 2e 20 54 68 | .other.such.service.provider..Th |
12dfe0 | 69 73 20 6d 65 74 68 6f 64 20 75 73 65 73 20 48 54 54 50 20 72 65 71 75 65 73 74 73 20 74 6f 20 | is.method.uses.HTTP.requests.to. |
12e000 | 74 72 61 6e 73 6d 69 74 20 74 68 65 20 6e 65 77 20 49 50 20 61 64 64 72 65 73 73 2e 20 59 6f 75 | transmit.the.new.IP.address..You |
12e020 | 20 63 61 6e 20 63 6f 6e 66 69 67 75 72 65 20 62 6f 74 68 20 69 6e 20 56 79 4f 53 2e 00 64 64 63 | .can.configure.both.in.VyOS..ddc |
12e040 | 6c 69 65 6e 74 5f 20 77 69 6c 6c 20 73 6b 69 70 20 61 6e 79 20 61 64 64 72 65 73 73 20 6c 6f 63 | lient_.will.skip.any.address.loc |
12e060 | 61 74 65 64 20 62 65 66 6f 72 65 20 74 68 65 20 73 74 72 69 6e 67 20 73 65 74 20 69 6e 20 60 3c | ated.before.the.string.set.in.`< |
12e080 | 70 61 74 74 65 72 6e 3e 60 2e 00 64 65 62 75 67 00 64 65 63 72 65 6d 65 6e 74 2d 6c 69 66 65 74 | pattern>`..debug.decrement-lifet |
12e0a0 | 69 6d 65 00 64 65 66 61 75 6c 74 20 6d 69 6e 2d 74 68 72 65 73 68 6f 6c 64 00 64 65 66 61 75 6c | ime.default.min-threshold.defaul |
12e0c0 | 74 2d 6c 65 61 73 65 2d 74 69 6d 65 2c 20 6d 61 78 2d 6c 65 61 73 65 2d 74 69 6d 65 00 64 65 66 | t-lease-time,.max-lease-time.def |
12e0e0 | 61 75 6c 74 2d 6c 69 66 65 74 69 6d 65 00 64 65 66 61 75 6c 74 2d 70 72 65 66 65 72 65 6e 63 65 | ault-lifetime.default-preference |
12e100 | 00 64 65 66 61 75 6c 74 2d 72 6f 75 74 65 72 00 64 65 70 72 65 63 61 74 65 2d 70 72 65 66 69 78 | .default-router.deprecate-prefix |
12e120 | 00 64 65 73 74 69 6e 61 74 69 6f 6e 2d 68 61 73 68 69 6e 67 00 64 68 63 70 2d 73 65 72 76 65 72 | .destination-hashing.dhcp-server |
12e140 | 2d 69 64 65 6e 74 69 66 69 65 72 00 64 69 72 65 63 74 00 64 69 72 65 63 74 6f 72 79 00 64 69 73 | -identifier.direct.directory.dis |
12e160 | 61 62 6c 65 3a 20 4e 6f 20 73 6f 75 72 63 65 20 76 61 6c 69 64 61 74 69 6f 6e 00 64 6e 73 73 6c | able:.No.source.validation.dnssl |
12e180 | 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 00 64 6f 6d 61 69 6e 2d 6e 61 6d 65 2d 73 65 72 76 65 72 73 | .domain-name.domain-name-servers |
12e1a0 | 00 64 6f 6d 61 69 6e 2d 73 65 61 72 63 68 00 65 6d 65 72 67 00 65 6e 61 62 6c 65 20 6f 72 20 64 | .domain-search.emerg.enable.or.d |
12e1c0 | 69 73 61 62 6c 65 20 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 | isable..ICMPv4.redirect.messages |
12e1e0 | 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 73 74 | .send.by.VyOS.The.following.syst |
12e200 | 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 65 6e | em.parameter.will.be.altered:.en |
12e220 | 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 49 43 4d 50 76 34 20 72 65 64 69 72 65 63 74 20 | able.or.disable.ICMPv4.redirect. |
12e240 | 6d 65 73 73 61 67 65 73 20 73 65 6e 64 20 62 79 20 56 79 4f 53 20 54 68 65 20 66 6f 6c 6c 6f 77 | messages.send.by.VyOS.The.follow |
12e260 | 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 | ing.system.parameter.will.be.alt |
12e280 | 65 72 65 64 3a 00 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 6f 66 20 49 43 4d 50 76 | ered:.enable.or.disable.of.ICMPv |
12e2a0 | 34 20 6f 72 20 49 43 4d 50 76 36 20 72 65 64 69 72 65 63 74 20 6d 65 73 73 61 67 65 73 20 61 63 | 4.or.ICMPv6.redirect.messages.ac |
12e2c0 | 63 65 70 74 65 64 20 62 79 20 56 79 4f 53 2e 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 79 | cepted.by.VyOS..The.following.sy |
12e2e0 | 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c 74 65 72 65 64 3a 00 | stem.parameter.will.be.altered:. |
12e300 | 65 6e 61 62 6c 65 20 6f 72 20 64 69 73 61 62 6c 65 20 74 68 65 20 6c 6f 67 67 69 6e 67 20 6f 66 | enable.or.disable.the.logging.of |
12e320 | 20 6d 61 72 74 69 61 6e 20 49 50 76 34 20 70 61 63 6b 65 74 73 2e 20 54 68 65 20 66 6f 6c 6c 6f | .martian.IPv4.packets..The.follo |
12e340 | 77 69 6e 67 20 73 79 73 74 65 6d 20 70 61 72 61 6d 65 74 65 72 20 77 69 6c 6c 20 62 65 20 61 6c | wing.system.parameter.will.be.al |
12e360 | 74 65 72 65 64 3a 00 65 72 72 00 65 74 68 65 72 6e 65 74 00 65 78 61 63 74 2d 6d 61 74 63 68 3a | tered:.err.ethernet.exact-match: |
12e380 | 20 65 78 61 63 74 20 6d 61 74 63 68 20 6f 66 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 72 65 66 | .exact.match.of.the.network.pref |
12e3a0 | 69 78 65 73 2e 00 65 78 63 6c 75 64 65 00 66 61 69 6c 6f 76 65 72 00 66 61 73 74 3a 20 52 65 71 | ixes..exclude.failover.fast:.Req |
12e3c0 | 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 | uest.partner.to.transmit.LACPDUs |
12e3e0 | 20 65 76 65 72 79 20 31 20 73 65 63 6f 6e 64 00 66 69 6c 65 20 3c 66 69 6c 65 20 6e 61 6d 65 3e | .every.1.second.file.<file.name> |
12e400 | 00 66 69 6c 74 65 72 2d 6c 69 73 74 00 66 74 70 00 66 75 6c 6c 20 2d 20 61 6c 77 61 79 73 20 75 | .filter-list.ftp.full.-.always.u |
12e420 | 73 65 20 66 75 6c 6c 2d 64 75 70 6c 65 78 00 67 65 6e 65 76 65 00 68 61 6c 66 20 2d 20 61 6c 77 | se.full-duplex.geneve.half.-.alw |
12e440 | 61 79 73 20 75 73 65 20 68 61 6c 66 2d 64 75 70 6c 65 78 00 68 6f 70 2d 6c 69 6d 69 74 00 68 6f | ays.use.half-duplex.hop-limit.ho |
12e460 | 73 74 3a 20 73 69 6e 67 6c 65 20 68 6f 73 74 20 49 50 20 61 64 64 72 65 73 73 20 74 6f 20 6d 61 | st:.single.host.IP.address.to.ma |
12e480 | 74 63 68 2e 00 68 74 74 70 73 3a 2f 2f 61 63 63 65 73 73 2e 72 65 64 68 61 74 2e 63 6f 6d 2f 73 | tch..https://access.redhat.com/s |
12e4a0 | 69 74 65 73 2f 64 65 66 61 75 6c 74 2f 66 69 6c 65 73 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 32 | ites/default/files/attachments/2 |
12e4c0 | 30 31 35 30 31 2d 70 65 72 66 2d 62 72 69 65 66 2d 6c 6f 77 2d 6c 61 74 65 6e 63 79 2d 74 75 6e | 01501-perf-brief-low-latency-tun |
12e4e0 | 69 6e 67 2d 72 68 65 6c 37 2d 76 32 2e 31 2e 70 64 66 00 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 | ing-rhel7-v2.1.pdf.https://commu |
12e500 | 6e 69 74 79 2e 6f 70 65 6e 76 70 6e 2e 6e 65 74 2f 6f 70 65 6e 76 70 6e 2f 77 69 6b 69 2f 44 61 | nity.openvpn.net/openvpn/wiki/Da |
12e520 | 74 61 43 68 61 6e 6e 65 6c 4f 66 66 6c 6f 61 64 2f 46 65 61 74 75 72 65 73 00 69 66 20 74 68 65 | taChannelOffload/Features.if.the |
12e540 | 72 65 20 69 73 20 61 20 73 75 70 70 6f 72 74 65 64 20 64 65 76 69 63 65 2c 20 65 6e 61 62 6c 65 | re.is.a.supported.device,.enable |
12e560 | 20 49 6e 74 65 6c c2 ae 20 51 41 54 00 69 66 20 74 68 65 72 65 20 69 73 20 6e 6f 6e 20 64 65 76 | .Intel...QAT.if.there.is.non.dev |
12e580 | 69 63 65 20 74 68 65 20 63 6f 6d 6d 61 6e 64 20 77 69 6c 6c 20 73 68 6f 77 20 60 60 60 4e 6f 20 | ice.the.command.will.show.```No. |
12e5a0 | 51 41 54 20 64 65 76 69 63 65 20 66 6f 75 6e 64 60 60 60 00 69 6e 66 6f 00 69 6e 74 65 72 76 61 | QAT.device.found```.info.interva |
12e5c0 | 6c 00 69 6e 76 61 6c 69 64 00 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 3a 20 6e 65 74 77 6f 72 6b | l.invalid.inverse-match:.network |
12e5e0 | 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 6e 65 74 77 | /netmask.to.match.(requires.netw |
12e600 | 6f 72 6b 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 69 70 2d 66 6f 72 77 61 72 64 69 6e 67 00 69 | ork.be.defined)..ip-forwarding.i |
12e620 | 73 69 73 64 00 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 61 6e 79 20 4e 49 43 | sisd.it.can.be.used.with.any.NIC |
12e640 | 00 69 74 20 63 61 6e 20 62 65 20 75 73 65 64 20 77 69 74 68 20 61 6e 79 20 4e 49 43 2c 00 69 74 | .it.can.be.used.with.any.NIC,.it |
12e660 | 20 64 6f 65 73 20 6e 6f 74 20 69 6e 63 72 65 61 73 65 20 68 61 72 64 77 61 72 65 20 64 65 76 69 | .does.not.increase.hardware.devi |
12e680 | 63 65 20 69 6e 74 65 72 72 75 70 74 20 72 61 74 65 20 28 61 6c 74 68 6f 75 67 68 20 69 74 20 64 | ce.interrupt.rate.(although.it.d |
12e6a0 | 6f 65 73 20 69 6e 74 72 6f 64 75 63 65 20 69 6e 74 65 72 2d 70 72 6f 63 65 73 73 6f 72 20 69 6e | oes.introduce.inter-processor.in |
12e6c0 | 74 65 72 72 75 70 74 73 20 28 49 50 49 73 29 29 2e 00 69 74 20 64 6f 65 73 20 6e 6f 74 20 69 6e | terrupts.(IPIs))..it.does.not.in |
12e6e0 | 63 72 65 61 73 65 20 68 61 72 64 77 61 72 65 20 64 65 76 69 63 65 20 69 6e 74 65 72 72 75 70 74 | crease.hardware.device.interrupt |
12e700 | 20 72 61 74 65 2c 20 61 6c 74 68 6f 75 67 68 20 69 74 20 64 6f 65 73 20 69 6e 74 72 6f 64 75 63 | .rate,.although.it.does.introduc |
12e720 | 65 20 69 6e 74 65 72 2d 70 72 6f 63 65 73 73 6f 72 20 69 6e 74 65 72 72 75 70 74 73 20 28 49 50 | e.inter-processor.interrupts.(IP |
12e740 | 49 73 29 00 6b 65 72 6e 00 6c 32 74 70 76 33 00 6c 64 70 64 00 6c 65 61 73 65 00 6c 65 61 73 74 | Is).kern.l2tpv3.ldpd.lease.least |
12e760 | 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c 65 66 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 39 32 2e 31 | -connection.left.local_ip:.192.1 |
12e780 | 36 38 2e 30 2e 31 30 20 23 20 56 50 4e 20 47 61 74 65 77 61 79 2c 20 62 65 68 69 6e 64 20 4e 41 | 68.0.10.#.VPN.Gateway,.behind.NA |
12e7a0 | 54 20 64 65 76 69 63 65 00 6c 65 66 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 60 31 39 38 2e 35 31 2e | T.device.left.local_ip:.`198.51. |
12e7c0 | 31 30 30 2e 33 60 20 23 20 73 65 72 76 65 72 20 73 69 64 65 20 57 41 4e 20 49 50 00 6c 65 66 74 | 100.3`.#.server.side.WAN.IP.left |
12e7e0 | 20 70 75 62 6c 69 63 5f 69 70 3a 31 37 32 2e 31 38 2e 32 30 31 2e 31 30 00 6c 65 66 74 20 73 75 | .public_ip:172.18.201.10.left.su |
12e800 | 62 6e 65 74 3a 20 60 31 39 32 2e 31 36 38 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 31 2c 20 73 65 | bnet:.`192.168.0.0/24`.site1,.se |
12e820 | 72 76 65 72 20 73 69 64 65 20 28 69 2e 65 2e 20 6c 6f 63 61 6c 69 74 79 2c 20 61 63 74 75 61 6c | rver.side.(i.e..locality,.actual |
12e840 | 6c 79 20 74 68 65 72 65 20 69 73 20 6e 6f 20 63 6c 69 65 6e 74 20 6f 72 20 73 65 72 76 65 72 20 | ly.there.is.no.client.or.server. |
12e860 | 72 6f 6c 65 73 29 00 6c 69 6e 6b 2d 6d 74 75 00 6c 6f 63 61 6c 20 75 73 65 20 30 20 28 6c 6f 63 | roles).link-mtu.local.use.0.(loc |
12e880 | 61 6c 30 29 00 6c 6f 63 61 6c 20 75 73 65 20 31 20 28 6c 6f 63 61 6c 31 29 00 6c 6f 63 61 6c 20 | al0).local.use.1.(local1).local. |
12e8a0 | 75 73 65 20 32 20 28 6c 6f 63 61 6c 32 29 00 6c 6f 63 61 6c 20 75 73 65 20 33 20 28 6c 6f 63 61 | use.2.(local2).local.use.3.(loca |
12e8c0 | 6c 33 29 00 6c 6f 63 61 6c 20 75 73 65 20 34 20 28 6c 6f 63 61 6c 34 29 00 6c 6f 63 61 6c 20 75 | l3).local.use.4.(local4).local.u |
12e8e0 | 73 65 20 35 20 28 6c 6f 63 61 6c 35 29 00 6c 6f 63 61 6c 20 75 73 65 20 37 20 28 6c 6f 63 61 6c | se.5.(local5).local.use.7.(local |
12e900 | 37 29 00 6c 6f 63 61 6c 30 00 6c 6f 63 61 6c 31 00 6c 6f 63 61 6c 32 00 6c 6f 63 61 6c 33 00 6c | 7).local0.local1.local2.local3.l |
12e920 | 6f 63 61 6c 34 00 6c 6f 63 61 6c 35 00 6c 6f 63 61 6c 36 00 6c 6f 63 61 6c 37 00 6c 6f 63 61 6c | ocal4.local5.local6.local7.local |
12e940 | 69 74 79 2d 62 61 73 65 64 2d 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 6c 6f 67 61 6c | ity-based-least-connection.logal |
12e960 | 65 72 74 00 6c 6f 67 61 75 64 69 74 00 6c 6f 6f 73 65 3a 20 45 61 63 68 20 69 6e 63 6f 6d 69 6e | ert.logaudit.loose:.Each.incomin |
12e980 | 67 20 70 61 63 6b 65 74 27 73 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 61 6c 73 | g.packet's.source.address.is.als |
12e9a0 | 6f 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 74 68 65 20 46 49 42 20 61 6e 64 20 69 66 20 | o.tested.against.the.FIB.and.if. |
12e9c0 | 74 68 65 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 20 69 73 20 6e 6f 74 20 72 65 61 63 68 61 | the.source.address.is.not.reacha |
12e9e0 | 62 6c 65 20 76 69 61 20 61 6e 79 20 69 6e 74 65 72 66 61 63 65 20 74 68 65 20 70 61 63 6b 65 74 | ble.via.any.interface.the.packet |
12ea00 | 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e 00 6c 70 72 00 6d 44 4e 53 20 52 65 70 65 61 | .check.will.fail..lpr.mDNS.Repea |
12ea20 | 74 65 72 00 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 63 6f 6e 66 69 67 75 | ter.mDNS.repeater.can.be.configu |
12ea40 | 72 65 64 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 20 6f 6e 6c 79 20 73 70 65 63 69 66 69 | red.to.re-broadcast.only.specifi |
12ea60 | 63 20 73 65 72 76 69 63 65 73 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 61 6c 6c 20 73 65 72 76 | c.services..By.default,.all.serv |
12ea80 | 69 63 65 73 20 61 72 65 20 72 65 2d 62 72 6f 61 64 63 61 73 74 65 64 2e 00 6d 44 4e 53 20 72 65 | ices.are.re-broadcasted..mDNS.re |
12eaa0 | 70 65 61 74 65 72 20 63 61 6e 20 62 65 20 65 6e 61 62 6c 65 64 20 65 69 74 68 65 72 20 6f 6e 20 | peater.can.be.enabled.either.on. |
12eac0 | 49 50 76 34 20 73 6f 63 6b 65 74 20 6f 72 20 6f 6e 20 49 50 76 36 20 73 6f 63 6b 65 74 20 6f 72 | IPv4.socket.or.on.IPv6.socket.or |
12eae0 | 20 62 6f 74 68 20 74 6f 20 72 65 2d 62 72 6f 61 64 63 61 73 74 2e 20 42 79 20 64 65 66 61 75 6c | .both.to.re-broadcast..By.defaul |
12eb00 | 74 2c 20 6d 44 4e 53 20 72 65 70 65 61 74 65 72 20 77 69 6c 6c 20 6c 69 73 74 65 6e 20 6f 6e 20 | t,.mDNS.repeater.will.listen.on. |
12eb20 | 62 6f 74 68 20 49 50 76 34 20 61 6e 64 20 49 50 76 36 2e 00 6d 44 4e 53 20 72 65 70 65 61 74 65 | both.IPv4.and.IPv6..mDNS.repeate |
12eb40 | 72 20 63 61 6e 20 62 65 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 64 69 73 61 62 6c 65 64 20 77 69 | r.can.be.temporarily.disabled.wi |
12eb60 | 74 68 6f 75 74 20 64 65 6c 65 74 69 6e 67 20 74 68 65 20 73 65 72 76 69 63 65 20 75 73 69 6e 67 | thout.deleting.the.service.using |
12eb80 | 00 6d 61 69 6c 00 6d 61 6e 61 67 65 64 2d 66 6c 61 67 00 6d 61 74 63 68 2d 66 72 61 67 3a 20 53 | .mail.managed-flag.match-frag:.S |
12eba0 | 65 63 6f 6e 64 20 61 6e 64 20 66 75 72 74 68 65 72 20 66 72 61 67 6d 65 6e 74 73 20 6f 66 20 66 | econd.and.further.fragments.of.f |
12ebc0 | 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 69 70 73 65 63 3a 20 | ragmented.packets..match-ipsec:. |
12ebe0 | 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 49 50 73 65 63 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 | match.inbound.IPsec.packets..mat |
12ec00 | 63 68 2d 6e 6f 6e 2d 66 72 61 67 3a 20 48 65 61 64 20 66 72 61 67 6d 65 6e 74 73 20 6f 72 20 75 | ch-non-frag:.Head.fragments.or.u |
12ec20 | 6e 66 72 61 67 6d 65 6e 74 65 64 20 70 61 63 6b 65 74 73 2e 00 6d 61 74 63 68 2d 6e 6f 6e 65 3a | nfragmented.packets..match-none: |
12ec40 | 20 6d 61 74 63 68 20 69 6e 62 6f 75 6e 64 20 6e 6f 6e 2d 49 50 73 65 63 20 70 61 63 6b 65 74 73 | .match.inbound.non-IPsec.packets |
12ec60 | 2e 00 6d 69 6e 69 6d 61 6c 20 63 6f 6e 66 69 67 00 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f | ..minimal.config.more.informatio |
12ec80 | 6e 20 72 65 6c 61 74 65 64 20 49 47 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 69 | n.related.IGP..-.:ref:`routing-i |
12eca0 | 73 69 73 60 00 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 72 65 6c 61 74 65 64 20 49 47 | sis`.more.information.related.IG |
12ecc0 | 50 20 20 2d 20 3a 72 65 66 3a 60 72 6f 75 74 69 6e 67 2d 6f 73 70 66 60 00 6e 61 6d 65 2d 73 65 | P..-.:ref:`routing-ospf`.name-se |
12ece0 | 72 76 65 72 00 6e 65 74 62 69 6f 73 2d 6e 61 6d 65 2d 73 65 72 76 65 72 73 00 6e 65 74 77 6f 72 | rver.netbios-name-servers.networ |
12ed00 | 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 | k:.network/netmask.to.match.(req |
12ed20 | 75 69 72 65 73 20 69 6e 76 65 72 73 65 2d 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e 65 64 29 20 | uires.inverse-match.be.defined). |
12ed40 | 42 55 47 2c 20 4e 4f 20 69 6e 76 65 72 74 2d 6d 61 74 63 68 20 6f 70 74 69 6f 6e 20 69 6e 20 61 | BUG,.NO.invert-match.option.in.a |
12ed60 | 63 63 65 73 73 2d 6c 69 73 74 36 00 6e 65 74 77 6f 72 6b 3a 20 6e 65 74 77 6f 72 6b 2f 6e 65 74 | ccess-list6.network:.network/net |
12ed80 | 6d 61 73 6b 20 74 6f 20 6d 61 74 63 68 20 28 72 65 71 75 69 72 65 73 20 69 6e 76 65 72 73 65 2d | mask.to.match.(requires.inverse- |
12eda0 | 6d 61 74 63 68 20 62 65 20 64 65 66 69 6e 65 64 29 2e 00 6e 65 77 73 00 6e 65 78 74 2d 73 65 72 | match.be.defined)..news.next-ser |
12edc0 | 76 65 72 00 6e 6f 2d 61 75 74 6f 6e 6f 6d 6f 75 73 2d 66 6c 61 67 00 6e 6f 2d 6f 6e 2d 6c 69 6e | ver.no-autonomous-flag.no-on-lin |
12ede0 | 6b 2d 66 6c 61 67 00 6e 6f 74 66 6f 75 6e 64 00 6e 6f 74 69 63 65 00 6e 74 70 00 6e 74 70 2d 73 | k-flag.notfound.notice.ntp.ntp-s |
12ee00 | 65 72 76 65 72 00 6e 74 70 2d 73 65 72 76 65 72 73 00 6f 6e 65 20 72 75 6c 65 20 77 69 74 68 20 | erver.ntp-servers.one.rule.with. |
12ee20 | 61 20 4c 41 4e 20 28 69 6e 62 6f 75 6e 64 2d 69 6e 74 65 72 66 61 63 65 29 20 61 6e 64 20 74 68 | a.LAN.(inbound-interface).and.th |
12ee40 | 65 20 57 41 4e 20 28 69 6e 74 65 72 66 61 63 65 29 2e 00 6f 70 65 6e 76 70 6e 00 6f 73 70 66 36 | e.WAN.(interface)..openvpn.ospf6 |
12ee60 | 64 00 6f 73 70 66 64 00 6f 73 70 66 64 20 73 75 70 70 6f 72 74 73 20 4f 70 61 71 75 65 20 4c 53 | d.ospfd.ospfd.supports.Opaque.LS |
12ee80 | 41 20 3a 72 66 63 3a 60 32 33 37 30 60 20 61 73 20 70 61 72 74 69 61 6c 20 73 75 70 70 6f 72 74 | A.:rfc:`2370`.as.partial.support |
12eea0 | 20 66 6f 72 20 4d 50 4c 53 20 54 72 61 66 66 69 63 20 45 6e 67 69 6e 65 65 72 69 6e 67 20 4c 53 | .for.MPLS.Traffic.Engineering.LS |
12eec0 | 41 73 2e 20 54 68 65 20 6f 70 61 71 75 65 2d 6c 73 61 20 63 61 70 61 62 69 6c 69 74 79 20 6d 75 | As..The.opaque-lsa.capability.mu |
12eee0 | 73 74 20 62 65 20 65 6e 61 62 6c 65 64 20 69 6e 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 | st.be.enabled.in.the.configurati |
12ef00 | 6f 6e 2e 00 6f 74 68 65 72 2d 63 6f 6e 66 69 67 2d 66 6c 61 67 00 70 61 67 65 73 20 74 6f 20 73 | on..other-config-flag.pages.to.s |
12ef20 | 6f 72 74 00 70 6f 6c 69 63 79 20 61 73 2d 70 61 74 68 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 63 | ort.policy.as-path-list.policy.c |
12ef40 | 6f 6d 6d 75 6e 69 74 79 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 65 78 74 63 6f 6d 6d 75 6e 69 74 | ommunity-list.policy.extcommunit |
12ef60 | 79 2d 6c 69 73 74 00 70 6f 6c 69 63 79 20 6c 61 72 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 6c 69 | y-list.policy.large-community-li |
12ef80 | 73 74 00 70 6f 70 2d 73 65 72 76 65 72 00 70 72 65 66 65 72 72 65 64 2d 6c 69 66 65 74 69 6d 65 | st.pop-server.preferred-lifetime |
12efa0 | 00 70 72 65 66 69 78 2d 6c 69 73 74 2c 20 64 69 73 74 72 69 62 75 74 65 2d 6c 69 73 74 00 70 73 | .prefix-list,.distribute-list.ps |
12efc0 | 65 75 64 6f 2d 65 74 68 65 72 6e 65 74 00 72 61 6e 67 65 00 72 65 61 63 68 61 62 6c 65 2d 74 69 | eudo-ethernet.range.reachable-ti |
12efe0 | 6d 65 00 72 65 73 65 74 20 63 6f 6d 6d 61 6e 64 73 00 72 65 74 72 61 6e 73 2d 74 69 6d 65 72 00 | me.reset.commands.retrans-timer. |
12f000 | 72 66 63 33 34 34 32 2d 73 74 61 74 69 63 2d 72 6f 75 74 65 2c 20 77 69 6e 64 6f 77 73 2d 73 74 | rfc3442-static-route,.windows-st |
12f020 | 61 74 69 63 2d 72 6f 75 74 65 00 72 66 63 33 37 36 38 2d 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 | atic-route.rfc3768-compatibility |
12f040 | 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 70 3a 20 31 37 32 2e 31 38 2e 32 30 32 2e 31 30 20 23 | .right.local_ip:.172.18.202.10.# |
12f060 | 20 72 69 67 68 74 20 73 69 64 65 20 57 41 4e 20 49 50 00 72 69 67 68 74 20 6c 6f 63 61 6c 5f 69 | .right.side.WAN.IP.right.local_i |
12f080 | 70 3a 20 60 32 30 33 2e 30 2e 31 31 33 2e 32 60 20 23 20 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 | p:.`203.0.113.2`.#.remote.office |
12f0a0 | 20 73 69 64 65 20 57 41 4e 20 49 50 00 72 69 67 68 74 20 73 75 62 6e 65 74 3a 20 60 31 30 2e 30 | .side.WAN.IP.right.subnet:.`10.0 |
12f0c0 | 2e 30 2e 30 2f 32 34 60 20 73 69 74 65 32 2c 72 65 6d 6f 74 65 20 6f 66 66 69 63 65 20 73 69 64 | .0.0/24`.site2,remote.office.sid |
12f0e0 | 65 00 72 69 70 64 00 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 72 6f 75 74 65 2d 6d 61 70 00 72 6f 75 | e.ripd.round-robin.route-map.rou |
12f100 | 74 65 72 73 00 73 46 6c 6f 77 00 73 46 6c 6f 77 20 69 73 20 61 20 74 65 63 68 6e 6f 6c 6f 67 79 | ters.sFlow.sFlow.is.a.technology |
12f120 | 20 74 68 61 74 20 65 6e 61 62 6c 65 73 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 6f 66 20 6e 65 74 77 | .that.enables.monitoring.of.netw |
12f140 | 6f 72 6b 20 74 72 61 66 66 69 63 20 62 79 20 73 65 6e 64 69 6e 67 20 73 61 6d 70 6c 65 64 20 70 | ork.traffic.by.sending.sampled.p |
12f160 | 61 63 6b 65 74 73 20 74 6f 20 61 20 63 6f 6c 6c 65 63 74 6f 72 20 64 65 76 69 63 65 2e 00 73 65 | ackets.to.a.collector.device..se |
12f180 | 63 75 72 69 74 79 00 73 65 72 76 65 72 20 65 78 61 6d 70 6c 65 00 73 65 72 76 65 72 2d 69 64 65 | curity.server.example.server-ide |
12f1a0 | 6e 74 69 66 69 65 72 00 73 65 74 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 61 6e 64 2f 6f 72 | ntifier.set.a.destination.and/or |
12f1c0 | 20 73 6f 75 72 63 65 20 61 64 64 72 65 73 73 2e 20 41 63 63 65 70 74 65 64 20 69 6e 70 75 74 3a | .source.address..Accepted.input: |
12f1e0 | 00 73 68 61 32 35 36 20 48 61 73 68 65 73 00 73 68 6f 77 20 63 6f 6d 6d 61 6e 64 73 00 73 69 61 | .sha256.Hashes.show.commands.sia |
12f200 | 64 64 72 00 73 6c 6f 77 3a 20 52 65 71 75 65 73 74 20 70 61 72 74 6e 65 72 20 74 6f 20 74 72 61 | ddr.slow:.Request.partner.to.tra |
12f220 | 6e 73 6d 69 74 20 4c 41 43 50 44 55 73 20 65 76 65 72 79 20 33 30 20 73 65 63 6f 6e 64 73 00 73 | nsmit.LACPDUs.every.30.seconds.s |
12f240 | 6d 74 70 2d 73 65 72 76 65 72 00 73 6f 66 74 77 61 72 65 20 66 69 6c 74 65 72 73 20 63 61 6e 20 | mtp-server.software.filters.can. |
12f260 | 65 61 73 69 6c 79 20 62 65 20 61 64 64 65 64 20 74 6f 20 68 61 73 68 20 6f 76 65 72 20 6e 65 77 | easily.be.added.to.hash.over.new |
12f280 | 20 70 72 6f 74 6f 63 6f 6c 73 00 73 6f 66 74 77 61 72 65 20 66 69 6c 74 65 72 73 20 63 61 6e 20 | .protocols.software.filters.can. |
12f2a0 | 65 61 73 69 6c 79 20 62 65 20 61 64 64 65 64 20 74 6f 20 68 61 73 68 20 6f 76 65 72 20 6e 65 77 | easily.be.added.to.hash.over.new |
12f2c0 | 20 70 72 6f 74 6f 63 6f 6c 73 2c 00 73 6f 75 72 63 65 2d 68 61 73 68 69 6e 67 00 73 70 6f 6b 65 | .protocols,.source-hashing.spoke |
12f2e0 | 30 31 2d 73 70 6f 6b 65 30 34 00 73 70 6f 6b 65 30 35 00 73 74 61 74 69 63 2d 6d 61 70 70 69 6e | 01-spoke04.spoke05.static-mappin |
12f300 | 67 00 73 74 61 74 69 63 2d 72 6f 75 74 65 00 73 74 72 69 63 74 3a 20 45 61 63 68 20 69 6e 63 6f | g.static-route.strict:.Each.inco |
12f320 | 6d 69 6e 67 20 70 61 63 6b 65 74 20 69 73 20 74 65 73 74 65 64 20 61 67 61 69 6e 73 74 20 74 68 | ming.packet.is.tested.against.th |
12f340 | 65 20 46 49 42 20 61 6e 64 20 69 66 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 69 73 20 6e 6f | e.FIB.and.if.the.interface.is.no |
12f360 | 74 20 74 68 65 20 62 65 73 74 20 72 65 76 65 72 73 65 20 70 61 74 68 20 74 68 65 20 70 61 63 6b | t.the.best.reverse.path.the.pack |
12f380 | 65 74 20 63 68 65 63 6b 20 77 69 6c 6c 20 66 61 69 6c 2e 20 42 79 20 64 65 66 61 75 6c 74 20 66 | et.check.will.fail..By.default.f |
12f3a0 | 61 69 6c 65 64 20 70 61 63 6b 65 74 73 20 61 72 65 20 64 69 73 63 61 72 64 65 64 2e 00 73 75 62 | ailed.packets.are.discarded..sub |
12f3c0 | 6e 65 74 2d 6d 61 73 6b 00 73 79 73 6c 6f 67 00 74 61 69 6c 00 74 63 5f 20 69 73 20 61 20 70 6f | net-mask.syslog.tail.tc_.is.a.po |
12f3e0 | 77 65 72 66 75 6c 20 74 6f 6f 6c 20 66 6f 72 20 54 72 61 66 66 69 63 20 43 6f 6e 74 72 6f 6c 20 | werful.tool.for.Traffic.Control. |
12f400 | 66 6f 75 6e 64 20 61 74 20 74 68 65 20 4c 69 6e 75 78 20 6b 65 72 6e 65 6c 2e 20 48 6f 77 65 76 | found.at.the.Linux.kernel..Howev |
12f420 | 65 72 2c 20 69 74 73 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 69 73 20 6f 66 74 65 6e 20 63 | er,.its.configuration.is.often.c |
12f440 | 6f 6e 73 69 64 65 72 65 64 20 61 20 63 75 6d 62 65 72 73 6f 6d 65 20 74 61 73 6b 2e 20 46 6f 72 | onsidered.a.cumbersome.task..For |
12f460 | 74 75 6e 61 74 65 6c 79 2c 20 56 79 4f 53 20 65 61 73 65 73 20 74 68 65 20 6a 6f 62 20 74 68 72 | tunately,.VyOS.eases.the.job.thr |
12f480 | 6f 75 67 68 20 69 74 73 20 43 4c 49 2c 20 77 68 69 6c 65 20 75 73 69 6e 67 20 60 60 74 63 60 60 | ough.its.CLI,.while.using.``tc`` |
12f4a0 | 20 61 73 20 62 61 63 6b 65 6e 64 2e 00 74 66 74 70 2d 73 65 72 76 65 72 2d 6e 61 6d 65 00 74 68 | .as.backend..tftp-server-name.th |
12f4c0 | 69 73 20 6f 70 74 69 6f 6e 20 61 6c 6c 6f 77 73 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 70 72 | is.option.allows.to.configure.pr |
12f4e0 | 65 66 69 78 2d 73 69 64 20 6f 6e 20 53 52 2e 20 54 68 65 20 e2 80 98 6e 6f 2d 70 68 70 2d 66 6c | efix-sid.on.SR..The....no-php-fl |
12f500 | 61 67 e2 80 99 20 6d 65 61 6e 73 20 4e 4f 20 50 65 6e 75 6c 74 69 6d 61 74 65 20 48 6f 70 20 50 | ag....means.NO.Penultimate.Hop.P |
12f520 | 6f 70 70 69 6e 67 20 74 68 61 74 20 61 6c 6c 6f 77 73 20 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 | opping.that.allows.SR.node.to.re |
12f540 | 71 75 65 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 6e 6f 74 20 70 6f 70 | quest.to.its.neighbor.to.not.pop |
12f560 | 20 74 68 65 20 6c 61 62 65 6c 2e 20 54 68 65 20 e2 80 98 65 78 70 6c 69 63 69 74 2d 6e 75 6c 6c | .the.label..The....explicit-null |
12f580 | e2 80 99 20 66 6c 61 67 20 61 6c 6c 6f 77 73 20 53 52 20 6e 6f 64 65 20 74 6f 20 72 65 71 75 65 | ....flag.allows.SR.node.to.reque |
12f5a0 | 73 74 20 74 6f 20 69 74 73 20 6e 65 69 67 68 62 6f 72 20 74 6f 20 73 65 6e 64 20 49 50 20 70 61 | st.to.its.neighbor.to.send.IP.pa |
12f5c0 | 63 6b 65 74 20 77 69 74 68 20 74 68 65 20 45 58 50 4c 49 43 49 54 2d 4e 55 4c 4c 20 6c 61 62 65 | cket.with.the.EXPLICIT-NULL.labe |
12f5e0 | 6c 2e 20 54 68 65 20 e2 80 98 6e 2d 66 6c 61 67 2d 63 6c 65 61 72 e2 80 99 20 6f 70 74 69 6f 6e | l..The....n-flag-clear....option |
12f600 | 20 63 61 6e 20 62 65 20 75 73 65 64 20 74 6f 20 65 78 70 6c 69 63 69 74 6c 79 20 63 6c 65 61 72 | .can.be.used.to.explicitly.clear |
12f620 | 20 74 68 65 20 4e 6f 64 65 20 66 6c 61 67 20 74 68 61 74 20 69 73 20 73 65 74 20 62 79 20 64 65 | .the.Node.flag.that.is.set.by.de |
12f640 | 66 61 75 6c 74 20 66 6f 72 20 50 72 65 66 69 78 2d 53 49 44 73 20 61 73 73 6f 63 69 61 74 65 64 | fault.for.Prefix-SIDs.associated |
12f660 | 20 74 6f 20 6c 6f 6f 70 62 61 63 6b 20 61 64 64 72 65 73 73 65 73 2e 20 54 68 69 73 20 6f 70 74 | .to.loopback.addresses..This.opt |
12f680 | 69 6f 6e 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 63 6f 6e 66 69 67 75 72 65 20 41 6e | ion.is.necessary.to.configure.An |
12f6a0 | 79 63 61 73 74 2d 53 49 44 73 2e 00 74 69 6d 65 2d 6f 66 66 73 65 74 00 74 69 6d 65 2d 73 65 72 | ycast-SIDs..time-offset.time-ser |
12f6c0 | 76 65 72 00 74 69 6d 65 2d 73 65 72 76 65 72 73 00 74 75 6e 6e 65 6c 00 75 73 65 20 36 20 28 6c | ver.time-servers.tunnel.use.6.(l |
12f6e0 | 6f 63 61 6c 36 29 00 75 73 65 20 74 68 69 73 20 63 6f 6d 6d 61 6e 64 20 74 6f 20 63 68 65 63 6b | ocal6).use.this.command.to.check |
12f700 | 20 69 66 20 74 68 65 72 65 20 69 73 20 61 6e 20 49 6e 74 65 6c c2 ae 20 51 41 54 20 73 75 70 70 | .if.there.is.an.Intel...QAT.supp |
12f720 | 6f 72 74 65 64 20 50 72 6f 63 65 73 73 6f 72 20 69 6e 20 79 6f 75 72 20 73 79 73 74 65 6d 2e 00 | orted.Processor.in.your.system.. |
12f740 | 75 73 65 72 00 75 75 63 70 00 76 61 6c 69 64 00 76 61 6c 69 64 2d 6c 69 66 65 74 69 6d 65 00 76 | user.uucp.valid.valid-lifetime.v |
12f760 | 65 74 68 20 69 6e 74 65 72 66 61 63 65 73 20 6e 65 65 64 20 74 6f 20 62 65 20 63 72 65 61 74 65 | eth.interfaces.need.to.be.create |
12f780 | 64 20 69 6e 20 70 61 69 72 73 20 2d 20 69 74 27 73 20 63 61 6c 6c 65 64 20 74 68 65 20 70 65 65 | d.in.pairs.-.it's.called.the.pee |
12f7a0 | 72 20 6e 61 6d 65 00 76 78 6c 61 6e 00 77 61 72 6e 69 6e 67 00 77 65 20 64 65 73 63 72 69 62 65 | r.name.vxlan.warning.we.describe |
12f7c0 | 64 20 74 68 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 53 52 20 49 53 49 53 20 2f 20 53 52 | d.the.configuration.SR.ISIS./.SR |
12f7e0 | 20 4f 53 50 46 20 75 73 69 6e 67 20 32 20 63 6f 6e 6e 65 63 74 65 64 20 77 69 74 68 20 74 68 65 | .OSPF.using.2.connected.with.the |
12f800 | 6d 20 74 6f 20 73 68 61 72 65 20 6c 61 62 65 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 00 77 65 | m.to.share.label.information..we |
12f820 | 69 67 68 74 65 64 2d 6c 65 61 73 74 2d 63 6f 6e 6e 65 63 74 69 6f 6e 00 77 65 69 67 68 74 65 64 | ighted-least-connection.weighted |
12f840 | 2d 72 6f 75 6e 64 2d 72 6f 62 69 6e 00 77 68 69 6c 65 20 61 20 2a 62 79 74 65 2a 20 69 73 20 77 | -round-robin.while.a.*byte*.is.w |
12f860 | 72 69 74 74 65 6e 20 61 73 20 61 20 73 69 6e 67 6c 65 20 2a 2a 62 2a 2a 2e 00 77 69 6e 73 2d 73 | ritten.as.a.single.**b**..wins-s |
12f880 | 65 72 76 65 72 00 77 69 72 65 67 75 61 72 64 00 77 69 72 65 6c 65 73 73 00 77 69 74 68 20 3a 63 | erver.wireguard.wireless.with.:c |
12f8a0 | 66 67 63 6d 64 3a 60 73 65 74 20 73 79 73 74 65 6d 20 61 63 63 65 6c 65 72 61 74 69 6f 6e 20 71 | fgcmd:`set.system.acceleration.q |
12f8c0 | 61 74 60 20 6f 6e 20 62 6f 74 68 20 73 79 73 74 65 6d 73 20 74 68 65 20 62 61 6e 64 77 69 64 74 | at`.on.both.systems.the.bandwidt |
12f8e0 | 68 20 69 6e 63 72 65 61 73 65 73 2e 00 77 70 61 64 2d 75 72 6c 00 77 70 61 64 2d 75 72 6c 2c 20 | h.increases..wpad-url.wpad-url,. |
12f900 | 77 70 61 64 2d 75 72 6c 20 63 6f 64 65 20 32 35 32 20 3d 20 74 65 78 74 00 77 77 61 6e 00 7a 65 | wpad-url.code.252.=.text.wwan.ze |
12f920 | 62 72 61 00 | bra. |